@adcp/sdk 15.5.0 → 15.6.0

package/dist/lib/schemas/index.d.ts

@@ -41,7 +41,6 @@
  */
 import { z } from 'zod';
 import * as schemas from '../types/schemas.generated';
-import type { CanonicalGetProductsRequest } from '../v2/projection/creative-delivery';
 import type { KnownToolRequestSchemas } from '../utils/tool-request-schemas';
 import { getSchemaDocumentByRef, type Direction, type ResolvedToolSchemaDocument, type ResponseVariant } from '../validation/schema-loader';
 import type { ValidateFunction } from 'ajv';
@@ -49,125 +48,8 @@ export * from '../types/schemas.generated';
 export { AgentOAuthClientCredentialsSchema } from '../auth/oauth/client-credentials-schema';
 export type { AgentOAuthClientCredentials } from '../types/adcp';
 export type { PlacementPresentationDocument, PlacementPresentationReference } from '../types/core.generated';
-type LooseObjectShapeFor<T extends object> = {
-    [K in keyof T]-?: undefined extends T[K] ? z.ZodOptional<z.ZodType<Exclude<T[K], undefined>, Exclude<T[K], undefined>>> : z.ZodType<T[K], T[K]>;
-};
-type ZodShapeOutput<U extends z.core.$ZodShape> = {
-    [K in keyof U as undefined extends z.output<U[K]> ? never : K]: z.output<U[K]>;
-} & {
-    [K in keyof U as undefined extends z.output<U[K]> ? K : never]?: z.output<U[K]>;
-};
-/** Portable loose-object facade retained across adopter declaration emit. */
-export type LooseObjectSchemaFor<T extends object> = {
-    extend<U extends z.core.$ZodShape>(shape: U): LooseObjectSchemaFor<Omit<T, keyof U> & ZodShapeOutput<U>>;
-} & z.ZodObject<LooseObjectShapeFor<T>, z.core.$loose> & z.ZodType<T & Record<string, unknown>, T & Record<string, unknown>>;
-/** Wire-compatible request schema, including the legacy `format_ids` selector. */
-export declare const LegacyGetProductsRequestSchema: z.ZodObject<{
-    adcp_version: z.ZodOptional<z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
-    adcp_major_version: z.ZodOptional<z.ZodType<number, number, z.core.$ZodTypeInternals<number, number>>>;
-    idempotency_key: z.ZodOptional<z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
-    buying_mode: z.ZodType<"brief" | "wholesale" | "refine", "brief" | "wholesale" | "refine", z.core.$ZodTypeInternals<"brief" | "wholesale" | "refine", "brief" | "wholesale" | "refine">>;
-    brief: z.ZodOptional<z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
-    refine: z.ZodOptional<z.ZodType<({
-        scope: "request";
-        ask: string;
-    } | {
-        scope: "product";
-        product_id: string;
-        action?: "include" | "omit" | "more_like_this";
-        ask?: string;
-    } | {
-        scope: "proposal";
-        proposal_id: string;
-        action?: "include" | "omit" | "finalize";
-        ask?: string;
-    })[], ({
-        scope: "request";
-        ask: string;
-    } | {
-        scope: "product";
-        product_id: string;
-        action?: "include" | "omit" | "more_like_this";
-        ask?: string;
-    } | {
-        scope: "proposal";
-        proposal_id: string;
-        action?: "include" | "omit" | "finalize";
-        ask?: string;
-    })[], z.core.$ZodTypeInternals<({
-        scope: "request";
-        ask: string;
-    } | {
-        scope: "product";
-        product_id: string;
-        action?: "include" | "omit" | "more_like_this";
-        ask?: string;
-    } | {
-        scope: "proposal";
-        proposal_id: string;
-        action?: "include" | "omit" | "finalize";
-        ask?: string;
-    })[], ({
-        scope: "request";
-        ask: string;
-    } | {
-        scope: "product";
-        product_id: string;
-        action?: "include" | "omit" | "more_like_this";
-        ask?: string;
-    } | {
-        scope: "proposal";
-        proposal_id: string;
-        action?: "include" | "omit" | "finalize";
-        ask?: string;
-    })[]>>>;
-    brand: z.ZodOptional<z.ZodType<import("../types/core.generated").BrandReference, import("../types/core.generated").BrandReference, z.core.$ZodTypeInternals<import("../types/core.generated").BrandReference, import("../types/core.generated").BrandReference>>>;
-    acceptance_context: z.ZodOptional<z.ZodType<import("../types/tools.generated").AcceptanceContext, import("../types/tools.generated").AcceptanceContext, z.core.$ZodTypeInternals<import("../types/tools.generated").AcceptanceContext, import("../types/tools.generated").AcceptanceContext>>>;
-    catalog: z.ZodOptional<z.ZodType<import("..").Catalog, import("..").Catalog, z.core.$ZodTypeInternals<import("..").Catalog, import("..").Catalog>>>;
-    account: z.ZodOptional<z.ZodType<import("../types/core.generated").AccountReference, import("../types/core.generated").AccountReference, z.core.$ZodTypeInternals<import("../types/core.generated").AccountReference, import("../types/core.generated").AccountReference>>>;
-    preferred_delivery_types: z.ZodOptional<z.ZodType<import("../types/core.generated").DeliveryType[], import("../types/core.generated").DeliveryType[], z.core.$ZodTypeInternals<import("../types/core.generated").DeliveryType[], import("../types/core.generated").DeliveryType[]>>>;
-    filters: z.ZodOptional<z.ZodType<import("../types/tools.generated").ProductFilters, import("../types/tools.generated").ProductFilters, z.core.$ZodTypeInternals<import("../types/tools.generated").ProductFilters, import("../types/tools.generated").ProductFilters>>>;
-    targeting_overlay: z.ZodOptional<z.ZodType<import("..").TargetingOverlay, import("..").TargetingOverlay, z.core.$ZodTypeInternals<import("..").TargetingOverlay, import("..").TargetingOverlay>>>;
-    media_buy_frequency_cap: z.ZodOptional<z.ZodType<{
-        suppress?: import("..").Duration;
-        suppress_minutes?: number;
-        max_impressions?: number;
-        per?: import("../types/core.generated").ReachUnit;
-        window?: import("..").Duration;
-    }, {
-        suppress?: import("..").Duration;
-        suppress_minutes?: number;
-        max_impressions?: number;
-        per?: import("../types/core.generated").ReachUnit;
-        window?: import("..").Duration;
-    }, z.core.$ZodTypeInternals<{
-        suppress?: import("..").Duration;
-        suppress_minutes?: number;
-        max_impressions?: number;
-        per?: import("../types/core.generated").ReachUnit;
-        window?: import("..").Duration;
-    }, {
-        suppress?: import("..").Duration;
-        suppress_minutes?: number;
-        max_impressions?: number;
-        per?: import("../types/core.generated").ReachUnit;
-        window?: import("..").Duration;
-    }>>>;
-    required_overlay_support: z.ZodOptional<z.ZodType<import("../types/core.generated").TargetingOverlayRequirements, import("../types/core.generated").TargetingOverlayRequirements, z.core.$ZodTypeInternals<import("../types/core.generated").TargetingOverlayRequirements, import("../types/core.generated").TargetingOverlayRequirements>>>;
-    required_media_buy_support: z.ZodOptional<z.ZodType<import("../types/tools.generated").ProductMediaBuySupportRequirements, import("../types/tools.generated").ProductMediaBuySupportRequirements, z.core.$ZodTypeInternals<import("../types/tools.generated").ProductMediaBuySupportRequirements, import("../types/tools.generated").ProductMediaBuySupportRequirements>>>;
-    property_list: z.ZodOptional<z.ZodType<import("../types/tools.generated").PropertyListReference, import("../types/tools.generated").PropertyListReference, z.core.$ZodTypeInternals<import("../types/tools.generated").PropertyListReference, import("../types/tools.generated").PropertyListReference>>>;
-    fields: z.ZodOptional<z.ZodType<("name" | "identity" | "forecast" | "description" | "publisher_properties" | "audience_evidence" | "product_id" | "channels" | "video_placement_types" | "audio_distribution_types" | "sponsored_placement_types" | "social_placement_surfaces" | "format_options" | "placements" | "delivery_type" | "exclusivity" | "pricing_options" | "reporting_capabilities" | "measurement_terms" | "performance_standards" | "catalog_types" | "signal_targeting_allowed" | "signal_targeting_rules" | "demographic_targeting" | "overlay_support" | "collections" | "collection_targeting_allowed" | "media_buy_support" | "audience_evidence_selections" | "max_optimization_goals" | "catalog_match" | "list_applications" | "brief_relevance" | "targeting_resolution" | "acceptance_policy_profile_ids" | "execution_requirements" | "expires_at" | "allowed_actions" | "product_card" | "format_ids" | "outcome_measurement" | "delivery_measurement" | "creative_policy" | "metric_optimization" | "conversion_tracking" | "data_provider_signals" | "included_signals" | "signal_targeting_options" | "installments" | "is_custom" | "product_card_detailed" | "enforced_policies" | "trusted_match")[], ("name" | "identity" | "forecast" | "description" | "publisher_properties" | "audience_evidence" | "product_id" | "channels" | "video_placement_types" | "audio_distribution_types" | "sponsored_placement_types" | "social_placement_surfaces" | "format_options" | "placements" | "delivery_type" | "exclusivity" | "pricing_options" | "reporting_capabilities" | "measurement_terms" | "performance_standards" | "catalog_types" | "signal_targeting_allowed" | "signal_targeting_rules" | "demographic_targeting" | "overlay_support" | "collections" | "collection_targeting_allowed" | "media_buy_support" | "audience_evidence_selections" | "max_optimization_goals" | "catalog_match" | "list_applications" | "brief_relevance" | "targeting_resolution" | "acceptance_policy_profile_ids" | "execution_requirements" | "expires_at" | "allowed_actions" | "product_card" | "format_ids" | "outcome_measurement" | "delivery_measurement" | "creative_policy" | "metric_optimization" | "conversion_tracking" | "data_provider_signals" | "included_signals" | "signal_targeting_options" | "installments" | "is_custom" | "product_card_detailed" | "enforced_policies" | "trusted_match")[], z.core.$ZodTypeInternals<("name" | "identity" | "forecast" | "description" | "publisher_properties" | "audience_evidence" | "product_id" | "channels" | "video_placement_types" | "audio_distribution_types" | "sponsored_placement_types" | "social_placement_surfaces" | "format_options" | "placements" | "delivery_type" | "exclusivity" | "pricing_options" | "reporting_capabilities" | "measurement_terms" | "performance_standards" | "catalog_types" | "signal_targeting_allowed" | "signal_targeting_rules" | "demographic_targeting" | "overlay_support" | "collections" | "collection_targeting_allowed" | "media_buy_support" | "audience_evidence_selections" | "max_optimization_goals" | "catalog_match" | "list_applications" | "brief_relevance" | "targeting_resolution" | "acceptance_policy_profile_ids" | "execution_requirements" | "expires_at" | "allowed_actions" | "product_card" | "format_ids" | "outcome_measurement" | "delivery_measurement" | "creative_policy" | "metric_optimization" | "conversion_tracking" | "data_provider_signals" | "included_signals" | "signal_targeting_options" | "installments" | "is_custom" | "product_card_detailed" | "enforced_policies" | "trusted_match")[], ("name" | "identity" | "forecast" | "description" | "publisher_properties" | "audience_evidence" | "product_id" | "channels" | "video_placement_types" | "audio_distribution_types" | "sponsored_placement_types" | "social_placement_surfaces" | "format_options" | "placements" | "delivery_type" | "exclusivity" | "pricing_options" | "reporting_capabilities" | "measurement_terms" | "performance_standards" | "catalog_types" | "signal_targeting_allowed" | "signal_targeting_rules" | "demographic_targeting" | "overlay_support" | "collections" | "collection_targeting_allowed" | "media_buy_support" | "audience_evidence_selections" | "max_optimization_goals" | "catalog_match" | "list_applications" | "brief_relevance" | "targeting_resolution" | "acceptance_policy_profile_ids" | "execution_requirements" | "expires_at" | "allowed_actions" | "product_card" | "format_ids" | "outcome_measurement" | "delivery_measurement" | "creative_policy" | "metric_optimization" | "conversion_tracking" | "data_provider_signals" | "included_signals" | "signal_targeting_options" | "installments" | "is_custom" | "product_card_detailed" | "enforced_policies" | "trusted_match")[]>>>;
-    time_budget: z.ZodOptional<z.ZodType<import("..").Duration, import("..").Duration, z.core.$ZodTypeInternals<import("..").Duration, import("..").Duration>>>;
-    push_notification_config: z.ZodOptional<z.ZodType<import("../types/tools.generated").PushNotificationConfig, import("../types/tools.generated").PushNotificationConfig, z.core.$ZodTypeInternals<import("../types/tools.generated").PushNotificationConfig, import("../types/tools.generated").PushNotificationConfig>>>;
-    pagination: z.ZodOptional<z.ZodType<import("..").PaginationRequest, import("..").PaginationRequest, z.core.$ZodTypeInternals<import("..").PaginationRequest, import("..").PaginationRequest>>>;
-    if_wholesale_feed_version: z.ZodOptional<z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
-    if_pricing_version: z.ZodOptional<z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
-    context: z.ZodOptional<z.ZodType<import("../types/tools.generated").ContextObject, import("../types/tools.generated").ContextObject, z.core.$ZodTypeInternals<import("../types/tools.generated").ContextObject, import("../types/tools.generated").ContextObject>>>;
-    required_policies: z.ZodOptional<z.ZodType<string[], string[], z.core.$ZodTypeInternals<string[], string[]>>>;
-    ext: z.ZodOptional<z.ZodType<import("../types/core.generated").ExtensionObject, import("../types/core.generated").ExtensionObject, z.core.$ZodTypeInternals<import("../types/core.generated").ExtensionObject, import("../types/core.generated").ExtensionObject>>>;
-}, z.core.$loose> & z.ZodType<import("..").LegacyGetProductsRequest & Record<string, unknown>, import("..").LegacyGetProductsRequest & Record<string, unknown>, z.core.$ZodTypeInternals<import("..").LegacyGetProductsRequest & Record<string, unknown>, import("..").LegacyGetProductsRequest & Record<string, unknown>>>;
-/** Primary request schema; legacy `format_ids` selection is rejected. */
-export declare const GetProductsRequestSchema: LooseObjectSchemaFor<CanonicalGetProductsRequest>;
+export { GetProductsRequestSchema, LegacyGetProductsRequestSchema } from '../validation/get-products-request';
+export type { LooseObjectSchemaFor } from '../validation/get-products-request';
 export { BiddingPolicySchema } from '../validation/bidding-policy';
 export { CanonicalBudgetAllocationSchema } from '../validation/budget-allocation';
 export { TOOL_REQUEST_SCHEMAS } from '../utils/tool-request-schemas';

package/dist/lib/schemas/index.js

@@ -32,8 +32,8 @@ __export(schemas_exports, {
   AgentOAuthClientCredentialsSchema: () => import_client_credentials_schema.AgentOAuthClientCredentialsSchema,
   BiddingPolicySchema: () => import_bidding_policy.BiddingPolicySchema,
   CanonicalBudgetAllocationSchema: () => import_budget_allocation.CanonicalBudgetAllocationSchema,
-  GetProductsRequestSchema: () => GetProductsRequestSchema,
-  LegacyGetProductsRequestSchema: () => LegacyGetProductsRequestSchema,
+  GetProductsRequestSchema: () => import_get_products_request.GetProductsRequestSchema,
+  LegacyGetProductsRequestSchema: () => import_get_products_request.LegacyGetProductsRequestSchema,
   SyncCreativesActionSchema: () => import_sync_creatives.SyncCreativesActionSchema,
   SyncCreativesItemSchema: () => import_sync_creatives.SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema: () => import_sync_creatives.SyncCreativesResponseStrictSchema,
@@ -50,26 +50,18 @@ __export(schemas_exports, {
   getToolResponseSchema: () => getToolResponseSchema
 });
 module.exports = __toCommonJS(schemas_exports);
-var import_zod = require("zod");
 var schemas = __toESM(require('../types/schemas.generated.js'));
-var import_inline_enums = require('../types/inline-enums.generated.js');
 var import_tool_request_schemas = require('../utils/tool-request-schemas.js');
 var import_schema_loader = require('../validation/schema-loader.js');
 var import_adcp_version_config = require('../utils/adcp-version-config.js');
 __reExport(schemas_exports, require('../types/schemas.generated.js'), module.exports);
 var import_client_credentials_schema = require('../auth/oauth/client-credentials-schema.js');
+var import_get_products_request = require('../validation/get-products-request.js');
 var import_bidding_policy = require('../validation/bidding-policy.js');
 var import_budget_allocation = require('../validation/budget-allocation.js');
 var import_tool_request_schemas2 = require('../utils/tool-request-schemas.js');
 var import_response_schemas = require('../utils/response-schemas.js');
 var import_sync_creatives = require('../validation/sync-creatives.js');
-const LegacyGetProductsRequestSchema = schemas.GetProductsRequestSchema;
-const canonicalGetProductsFields = import_inline_enums.GetProductsRequest_FieldsValues.filter(
-  (field) => field !== "format_ids"
-);
-const GetProductsRequestSchema = schemas.GetProductsRequestSchema.safeExtend({
-  fields: import_zod.z.array(import_zod.z.enum(canonicalGetProductsFields)).optional()
-});
 function getToolInputSchema(toolName, options = {}) {
   return (0, import_schema_loader.getToolSchemaDocument)(toolName, "request", (0, import_adcp_version_config.resolveAdcpVersion)(options.adcpVersion));
 }

package/dist/lib/schemas/index.mjs

@@ -1,6 +1,4 @@
-import { z } from "zod";
 import * as schemas from "../types/schemas.generated.mjs";
-import { GetProductsRequest_FieldsValues } from "../types/inline-enums.generated.mjs";
 import { TOOL_REQUEST_SCHEMAS } from "../utils/tool-request-schemas.mjs";
 import {
   getCanonicalToolValidatorForVersion,
@@ -10,13 +8,7 @@ import {
 import { resolveAdcpVersion } from "../utils/adcp-version-config.mjs";
 export * from "../types/schemas.generated.mjs";
 import { AgentOAuthClientCredentialsSchema } from "../auth/oauth/client-credentials-schema.mjs";
-const LegacyGetProductsRequestSchema = schemas.GetProductsRequestSchema;
-const canonicalGetProductsFields = GetProductsRequest_FieldsValues.filter(
-  (field) => field !== "format_ids"
-);
-const GetProductsRequestSchema = schemas.GetProductsRequestSchema.safeExtend({
-  fields: z.array(z.enum(canonicalGetProductsFields)).optional()
-});
+import { GetProductsRequestSchema, LegacyGetProductsRequestSchema } from "../validation/get-products-request.mjs";
 import { BiddingPolicySchema } from "../validation/bidding-policy.mjs";
 import { CanonicalBudgetAllocationSchema } from "../validation/budget-allocation.mjs";
 import { TOOL_REQUEST_SCHEMAS as TOOL_REQUEST_SCHEMAS2 } from "../utils/tool-request-schemas.mjs";

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-10-09T05:22:53.040Z"
+  "synced_at": "2026-10-09T12:16:02.843Z"
 }

package/dist/lib/testing/index.d.mts

@@ -1,3 +1,4 @@
+export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers.mjs';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester.mjs';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance/index.mjs';

package/dist/lib/testing/index.d.ts

@@ -1,3 +1,4 @@
+export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance';

package/dist/lib/testing/index.js

@@ -47,6 +47,7 @@ __export(testing_exports, {
   applyAdcpVersionRunOptions: () => import_storyboard.applyAdcpVersionRunOptions,
   applyFixtureBindingsToRequest: () => import_storyboard.applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions: () => import_storyboard.applyStoryboardVersionOptions,
+  assertPendingWebFlowStoreRoundTrip: () => import_pending_web_flow_store.assertPendingWebFlowStoreRoundTrip,
   bridgeFromSessionStore: () => import_test_controller_bridge.bridgeFromSessionStore,
   bridgeFromTestControllerStore: () => import_test_controller_bridge.bridgeFromTestControllerStore,
   buildComplianceBundleResults: () => import_compliance.buildComplianceBundleResults,
@@ -194,6 +195,7 @@ __export(testing_exports, {
   withExternalSchemaRoot: () => import_validation.withExternalSchemaRoot
 });
 module.exports = __toCommonJS(testing_exports);
+var import_pending_web_flow_store = require('./pending-web-flow-store.js');
 var import_test_helpers = require('./test-helpers.js');
 var import_agent_tester = require('./agent-tester.js');
 var import_compliance = require('./compliance/index.js');
@@ -237,6 +239,7 @@ var import_storyboard = require('./storyboard/index.js');
   applyAdcpVersionRunOptions,
   applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions,
+  assertPendingWebFlowStoreRoundTrip,
   bridgeFromSessionStore,
   bridgeFromTestControllerStore,
   buildComplianceBundleResults,

package/dist/lib/testing/index.mjs

@@ -1,3 +1,4 @@
+import { assertPendingWebFlowStoreRoundTrip } from "./pending-web-flow-store.mjs";
 import {
   testAgent,
   testAgentA2A,
@@ -213,6 +214,7 @@ export {
   applyAdcpVersionRunOptions,
   applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions,
+  assertPendingWebFlowStoreRoundTrip,
   bridgeFromSessionStore,
   bridgeFromTestControllerStore,
   buildComplianceBundleResults,

package/dist/lib/testing/pending-web-flow-store.d.mts

@@ -0,0 +1,20 @@
+import type { PendingWebFlowStore } from '../auth/oauth/web-flow.mjs';
+/** Application-owned fixture values, for stores with agent foreign keys or carry validation. */
+export interface PendingWebFlowStoreRoundTripOptions {
+    agentId?: string;
+    carry?: Record<string, unknown>;
+}
+/**
+ * Assert that an adopter's pending-flow store preserves every current SDK field,
+ * revives Dates, isolates state keys, rejects duplicates, consumes atomically
+ * once, and treats expired rows as absent. Throws on a contract violation.
+ * Stores may refuse to insert an already-expired row. Also checks null/absent snapshots,
+ * clear actions, public clients, registration metadata and unknown extensions.
+ * Absent optional fields must stay absent rather than become undefined-valued
+ * own properties; the callback distinguishes presence for resource snapshots.
+ *
+ * Run against a disposable store in CI on every SDK upgrade. Uses random states
+ * and only conformance credentials; no OAuth endpoints are contacted. Concurrent
+ * consume checks are a smoke test, not a proof of distributed atomicity.
+ */
+export declare function assertPendingWebFlowStoreRoundTrip(store: PendingWebFlowStore, options?: PendingWebFlowStoreRoundTripOptions): Promise<void>;

package/dist/lib/testing/pending-web-flow-store.d.ts

@@ -0,0 +1,20 @@
+import type { PendingWebFlowStore } from '../auth/oauth/web-flow';
+/** Application-owned fixture values, for stores with agent foreign keys or carry validation. */
+export interface PendingWebFlowStoreRoundTripOptions {
+    agentId?: string;
+    carry?: Record<string, unknown>;
+}
+/**
+ * Assert that an adopter's pending-flow store preserves every current SDK field,
+ * revives Dates, isolates state keys, rejects duplicates, consumes atomically
+ * once, and treats expired rows as absent. Throws on a contract violation.
+ * Stores may refuse to insert an already-expired row. Also checks null/absent snapshots,
+ * clear actions, public clients, registration metadata and unknown extensions.
+ * Absent optional fields must stay absent rather than become undefined-valued
+ * own properties; the callback distinguishes presence for resource snapshots.
+ *
+ * Run against a disposable store in CI on every SDK upgrade. Uses random states
+ * and only conformance credentials; no OAuth endpoints are contacted. Concurrent
+ * consume checks are a smoke test, not a proof of distributed atomicity.
+ */
+export declare function assertPendingWebFlowStoreRoundTrip(store: PendingWebFlowStore, options?: PendingWebFlowStoreRoundTripOptions): Promise<void>;

package/dist/lib/testing/pending-web-flow-store.js

@@ -0,0 +1,132 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var pending_web_flow_store_exports = {};
+__export(pending_web_flow_store_exports, {
+  assertPendingWebFlowStoreRoundTrip: () => assertPendingWebFlowStoreRoundTrip
+});
+module.exports = __toCommonJS(pending_web_flow_store_exports);
+var import_strict = __toESM(require("node:assert/strict"));
+var import_node_crypto = require("node:crypto");
+function createPendingWebFlowFixture(state, options) {
+  const createdAt = /* @__PURE__ */ new Date();
+  return {
+    state,
+    agentId: options.agentId ?? "pending-flow-store-conformance",
+    agentUrl: "https://agent.example/mcp",
+    codeVerifier: "conformance-only-pkce-verifier",
+    redirectUri: "https://buyer.example/oauth/callback",
+    resource: "https://resource.example/mcp",
+    resourceOverride: "https://resource.example/mcp",
+    resourceOverrideAction: "set",
+    resourceOverrideSnapshot: "https://previous-resource.example/mcp",
+    scope: "mcp.read mcp.write",
+    authorizationServerUrl: "https://auth.example/tenant",
+    authorizationServerIssuer: "https://auth.example/tenant",
+    clientInformation: {
+      client_id: "conformance-client",
+      client_secret: "conformance-only-client-secret",
+      client_id_issued_at: 17e8,
+      client_secret_expires_at: 0,
+      issuer: "https://auth.example/tenant",
+      redirect_uris: ["https://buyer.example/oauth/callback"],
+      token_endpoint_auth_method: "client_secret_post",
+      conformanceExtension: { retained: "client metadata" }
+    },
+    createdAt,
+    expiresAt: new Date(createdAt.getTime() + 10 * 60 * 1e3),
+    carry: options.carry !== void 0 ? structuredClone(options.carry) : {
+      user_id: "conformance-user",
+      return_to: "/dashboard",
+      nested: { values: ["one", 2, true, null, { retained: "yes" }] }
+    },
+    conformanceExtension: { retained: "future flow fields" }
+  };
+}
+async function assertPendingWebFlowStoreRoundTrip(store, options = {}) {
+  const newState = () => (0, import_node_crypto.randomBytes)(32).toString("base64url");
+  const flow = createPendingWebFlowFixture(newState(), options);
+  const expected = structuredClone(flow);
+  await store.put(flow);
+  import_strict.default.equal(await store.consume(newState()), null, "Unknown state must return null");
+  import_strict.default.deepStrictEqual(
+    await store.consume(flow.state),
+    expected,
+    "Pending flow must round-trip every field and Date"
+  );
+  import_strict.default.equal(await store.consume(flow.state), null, "Pending flow must only be consumed once");
+  const clear = {
+    ...createPendingWebFlowFixture(newState(), options),
+    resourceOverrideAction: "clear",
+    resourceOverrideSnapshot: null,
+    clientInformation: { client_id: "public-conformance-client", issuer: "https://auth.example/tenant" }
+  };
+  delete clear.resourceOverride;
+  const expectedClear = structuredClone(clear);
+  await store.put(clear);
+  import_strict.default.deepStrictEqual(
+    await store.consume(clear.state),
+    expectedClear,
+    "Clear flow must preserve null and absent fields"
+  );
+  import_strict.default.equal(await store.consume(clear.state), null, "Clear flow must only be consumed once");
+  const preserve = { ...createPendingWebFlowFixture(newState(), options) };
+  delete preserve.resourceOverride;
+  delete preserve.resourceOverrideAction;
+  delete preserve.resourceOverrideSnapshot;
+  const expectedPreserve = structuredClone(preserve);
+  await store.put(preserve);
+  import_strict.default.deepStrictEqual(
+    await store.consume(preserve.state),
+    expectedPreserve,
+    "Preserve-only flow must keep override fields absent"
+  );
+  import_strict.default.equal(await store.consume(preserve.state), null, "Preserve-only flow must only be consumed once");
+  const expired = createPendingWebFlowFixture(newState(), options);
+  expired.createdAt = new Date(Date.now() - 2 * 60 * 60 * 1e3);
+  expired.expiresAt = new Date(Date.now() - 60 * 60 * 1e3);
+  try {
+    await store.put(expired);
+  } catch {
+  }
+  import_strict.default.equal(await store.consume(expired.state), null, "Expired flow must return null");
+  const concurrent = createPendingWebFlowFixture(newState(), options);
+  const expectedConcurrent = structuredClone(concurrent);
+  await store.put(concurrent);
+  const duplicate = { ...structuredClone(expectedConcurrent), codeVerifier: "different-conformance-verifier" };
+  await import_strict.default.rejects(async () => store.put(duplicate), "Duplicate state must be rejected");
+  const results = await Promise.all([store.consume(concurrent.state), store.consume(concurrent.state)]);
+  const winners = results.filter((result) => result !== null);
+  import_strict.default.equal(winners.length, 1, "Concurrent consumes must return the flow exactly once");
+  import_strict.default.deepStrictEqual(winners[0], expectedConcurrent, "Concurrent consume must preserve the original flow");
+  import_strict.default.equal(await store.consume(concurrent.state), null, "Concurrent consume must delete the flow");
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  assertPendingWebFlowStoreRoundTrip
+});

package/dist/lib/testing/pending-web-flow-store.mjs

@@ -0,0 +1,98 @@
+import assert from "node:assert/strict";
+import { randomBytes } from "node:crypto";
+function createPendingWebFlowFixture(state, options) {
+  const createdAt = /* @__PURE__ */ new Date();
+  return {
+    state,
+    agentId: options.agentId ?? "pending-flow-store-conformance",
+    agentUrl: "https://agent.example/mcp",
+    codeVerifier: "conformance-only-pkce-verifier",
+    redirectUri: "https://buyer.example/oauth/callback",
+    resource: "https://resource.example/mcp",
+    resourceOverride: "https://resource.example/mcp",
+    resourceOverrideAction: "set",
+    resourceOverrideSnapshot: "https://previous-resource.example/mcp",
+    scope: "mcp.read mcp.write",
+    authorizationServerUrl: "https://auth.example/tenant",
+    authorizationServerIssuer: "https://auth.example/tenant",
+    clientInformation: {
+      client_id: "conformance-client",
+      client_secret: "conformance-only-client-secret",
+      client_id_issued_at: 17e8,
+      client_secret_expires_at: 0,
+      issuer: "https://auth.example/tenant",
+      redirect_uris: ["https://buyer.example/oauth/callback"],
+      token_endpoint_auth_method: "client_secret_post",
+      conformanceExtension: { retained: "client metadata" }
+    },
+    createdAt,
+    expiresAt: new Date(createdAt.getTime() + 10 * 60 * 1e3),
+    carry: options.carry !== void 0 ? structuredClone(options.carry) : {
+      user_id: "conformance-user",
+      return_to: "/dashboard",
+      nested: { values: ["one", 2, true, null, { retained: "yes" }] }
+    },
+    conformanceExtension: { retained: "future flow fields" }
+  };
+}
+async function assertPendingWebFlowStoreRoundTrip(store, options = {}) {
+  const newState = () => randomBytes(32).toString("base64url");
+  const flow = createPendingWebFlowFixture(newState(), options);
+  const expected = structuredClone(flow);
+  await store.put(flow);
+  assert.equal(await store.consume(newState()), null, "Unknown state must return null");
+  assert.deepStrictEqual(
+    await store.consume(flow.state),
+    expected,
+    "Pending flow must round-trip every field and Date"
+  );
+  assert.equal(await store.consume(flow.state), null, "Pending flow must only be consumed once");
+  const clear = {
+    ...createPendingWebFlowFixture(newState(), options),
+    resourceOverrideAction: "clear",
+    resourceOverrideSnapshot: null,
+    clientInformation: { client_id: "public-conformance-client", issuer: "https://auth.example/tenant" }
+  };
+  delete clear.resourceOverride;
+  const expectedClear = structuredClone(clear);
+  await store.put(clear);
+  assert.deepStrictEqual(
+    await store.consume(clear.state),
+    expectedClear,
+    "Clear flow must preserve null and absent fields"
+  );
+  assert.equal(await store.consume(clear.state), null, "Clear flow must only be consumed once");
+  const preserve = { ...createPendingWebFlowFixture(newState(), options) };
+  delete preserve.resourceOverride;
+  delete preserve.resourceOverrideAction;
+  delete preserve.resourceOverrideSnapshot;
+  const expectedPreserve = structuredClone(preserve);
+  await store.put(preserve);
+  assert.deepStrictEqual(
+    await store.consume(preserve.state),
+    expectedPreserve,
+    "Preserve-only flow must keep override fields absent"
+  );
+  assert.equal(await store.consume(preserve.state), null, "Preserve-only flow must only be consumed once");
+  const expired = createPendingWebFlowFixture(newState(), options);
+  expired.createdAt = new Date(Date.now() - 2 * 60 * 60 * 1e3);
+  expired.expiresAt = new Date(Date.now() - 60 * 60 * 1e3);
+  try {
+    await store.put(expired);
+  } catch {
+  }
+  assert.equal(await store.consume(expired.state), null, "Expired flow must return null");
+  const concurrent = createPendingWebFlowFixture(newState(), options);
+  const expectedConcurrent = structuredClone(concurrent);
+  await store.put(concurrent);
+  const duplicate = { ...structuredClone(expectedConcurrent), codeVerifier: "different-conformance-verifier" };
+  await assert.rejects(async () => store.put(duplicate), "Duplicate state must be rejected");
+  const results = await Promise.all([store.consume(concurrent.state), store.consume(concurrent.state)]);
+  const winners = results.filter((result) => result !== null);
+  assert.equal(winners.length, 1, "Concurrent consumes must return the flow exactly once");
+  assert.deepStrictEqual(winners[0], expectedConcurrent, "Concurrent consume must preserve the original flow");
+  assert.equal(await store.consume(concurrent.state), null, "Concurrent consume must delete the flow");
+}
+export {
+  assertPendingWebFlowStoreRoundTrip
+};

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "15.5.0";
+export declare const RUNNER_CAPABILITY_VERSION = "15.6.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "15.5.0";
+export declare const RUNNER_CAPABILITY_VERSION = "15.6.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**