@adcp/sdk 16.0.0-beta.2 → 16.0.0-beta.4

package/README.md

@@ -602,6 +602,60 @@ app.post(
 
 Full guide covering key generation, JWKS publication, brand.json setup, webhook signing, capability declaration, key rotation, and conformance testing: **[docs/guides/SIGNING-GUIDE.md](./docs/guides/SIGNING-GUIDE.md)**.
 
+### Response Size Cap
+
+Agent responses are untrusted input, so the SDK caps every response body it
+reads. **The default is 4 MiB** (`DEFAULT_MAX_RESPONSE_BYTES`), applied on
+every MCP and A2A call path: tool calls, endpoint discovery, `tools/list`,
+A2A agent-card lookup, and OAuth token exchange. (OAuth metadata discovery
+has its own, tighter 64 KiB cap and does not use this mechanism.)
+
+Bytes are counted as they stream in, a declared `Content-Length` over the cap
+is refused before the body is read, and an oversized response fails with a
+typed `ResponseTooLargeError`. Nothing is silently truncated.
+
+```typescript
+import { ResponseTooLargeError } from '@adcp/sdk';
+
+// Raise the cap for an agent that legitimately publishes a large catalog.
+const client = new ADCPMultiAgentClient(agents, {
+  transport: { maxResponseBytes: 32 * 1024 * 1024 },
+});
+
+// …or per call.
+await client.agent('agent_x').getProducts(params, {
+  transport: { maxResponseBytes: 32 * 1024 * 1024 },
+});
+
+// Opt out entirely — explicit, never the default. Only `0` opts out;
+// `Infinity` and negative values fall back to the 4 MiB default.
+await client.agent('agent_x').getProducts(params, { transport: { maxResponseBytes: 0 } });
+
+try {
+  await client.agent('agent_x').getProducts(params);
+} catch (err) {
+  if (err instanceof ResponseTooLargeError) {
+    console.warn(`agent returned > ${err.limit} bytes from ${err.url}`);
+  }
+}
+```
+
+`text/event-stream` responses are covered too, with two bounds: no single
+event frame may exceed `maxResponseBytes`, and the cumulative event-stream
+octets read during one call may not exceed `maxResponseBytes * 2` (8 MiB by
+default). A peer cannot escape the cap by replying with
+`Content-Type: text/event-stream`.
+
+The counter runs downstream of the runtime's content-decoder, so it measures
+**decompressed** octets: a small gzip blob that inflates to gigabytes still
+trips the cap after `maxResponseBytes` of output. The `Content-Length`
+pre-check sees the compressed length, so it is a fast path rather than the
+guarantee.
+
+A per-call `transport` object **replaces** the client's `transport` rather
+than merging into it — repeat `maxResponseBytes` when you override the object
+for some other reason.
+
 ### Authentication
 
 ```typescript

package/dist/lib/auth/oauth/diagnose.js

@@ -370,7 +370,7 @@ function rankH2(agentUrl, refreshStep, refreshedDecoded) {
     ];
     return base;
   }
-  const result = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(refreshedDecoded), agentUrl);
+  const result = (0, import_diagnostics.validateDecodedTokenAudience)(refreshedDecoded, agentUrl);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = "Refreshed token `aud` claim matches the expected resource \u2014 AS honors RFC 8707 `resource`";
@@ -440,7 +440,7 @@ function rankH5(agentUrl, currentDecoded, prmStep) {
   const prmResource = prmStep?.http?.body && typeof prmStep.http.body.resource === "string" ? prmStep.http.body.resource : void 0;
   const expected = prmResource ?? agentUrl;
   const prmDiffersFromAgent = prmResource !== void 0 && normalizeForCompare(prmResource) !== normalizeForCompare(agentUrl);
-  const result = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(currentDecoded), expected);
+  const result = (0, import_diagnostics.validateDecodedTokenAudience)(currentDecoded, expected);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = `Saved token \`aud\` matches expected resource (${expected})`;
@@ -477,7 +477,7 @@ function rankH6(agentUrl, currentDecoded, toolStep) {
     base.summary = `tool_call returned HTTP ${toolStep.http.status} \u2014 agent did not accept the token blindly`;
     return base;
   }
-  const audResult = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(currentDecoded), agentUrl);
+  const audResult = (0, import_diagnostics.validateDecodedTokenAudience)(currentDecoded, agentUrl);
   if (audResult.ok) {
     base.verdict = "ruled_out";
     base.summary = "Token `aud` matches agent URL and tool_call succeeded \u2014 cannot distinguish from correct behavior";
@@ -588,14 +588,6 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function jwtFromDecoded(_decoded) {
-  const h = base64url(JSON.stringify(_decoded.header));
-  const c = base64url(JSON.stringify(_decoded.claims));
-  return `${h}.${c}.${_decoded.signature || "sig"}`;
-}
-function base64url(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/={0,2}$/, "");
-}
 function formatError(err) {
   if (err instanceof import_net.SsrfRefusedError) {
     return `SSRF guard refused: ${err.code} (${err.message})`;

package/dist/lib/auth/oauth/diagnose.mjs

@@ -1,6 +1,6 @@
 import { ssrfSafeFetch, decodeBodyAsJsonOrText, SsrfRefusedError } from "../../net/index.mjs";
 import { assertOAuthCredentialIssuer, assertOAuthServerIssuer, OAuthError } from "./types.mjs";
-import { decodeAccessTokenClaims, parseWWWAuthenticate, validateTokenAudience } from "./diagnostics.mjs";
+import { decodeAccessTokenClaims, parseWWWAuthenticate, validateDecodedTokenAudience } from "./diagnostics.mjs";
 const AUTH_DIAGNOSIS_SCHEMA_VERSION = 1;
 async function runAuthDiagnosis(agent, options = {}) {
   const steps = [];
@@ -346,7 +346,7 @@ function rankH2(agentUrl, refreshStep, refreshedDecoded) {
     ];
     return base;
   }
-  const result = validateTokenAudience(jwtFromDecoded(refreshedDecoded), agentUrl);
+  const result = validateDecodedTokenAudience(refreshedDecoded, agentUrl);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = "Refreshed token `aud` claim matches the expected resource \u2014 AS honors RFC 8707 `resource`";
@@ -416,7 +416,7 @@ function rankH5(agentUrl, currentDecoded, prmStep) {
   const prmResource = prmStep?.http?.body && typeof prmStep.http.body.resource === "string" ? prmStep.http.body.resource : void 0;
   const expected = prmResource ?? agentUrl;
   const prmDiffersFromAgent = prmResource !== void 0 && normalizeForCompare(prmResource) !== normalizeForCompare(agentUrl);
-  const result = validateTokenAudience(jwtFromDecoded(currentDecoded), expected);
+  const result = validateDecodedTokenAudience(currentDecoded, expected);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = `Saved token \`aud\` matches expected resource (${expected})`;
@@ -453,7 +453,7 @@ function rankH6(agentUrl, currentDecoded, toolStep) {
     base.summary = `tool_call returned HTTP ${toolStep.http.status} \u2014 agent did not accept the token blindly`;
     return base;
   }
-  const audResult = validateTokenAudience(jwtFromDecoded(currentDecoded), agentUrl);
+  const audResult = validateDecodedTokenAudience(currentDecoded, agentUrl);
   if (audResult.ok) {
     base.verdict = "ruled_out";
     base.summary = "Token `aud` matches agent URL and tool_call succeeded \u2014 cannot distinguish from correct behavior";
@@ -564,14 +564,6 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function jwtFromDecoded(_decoded) {
-  const h = base64url(JSON.stringify(_decoded.header));
-  const c = base64url(JSON.stringify(_decoded.claims));
-  return `${h}.${c}.${_decoded.signature || "sig"}`;
-}
-function base64url(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/={0,2}$/, "");
-}
 function formatError(err) {
   if (err instanceof SsrfRefusedError) {
     return `SSRF guard refused: ${err.code} (${err.message})`;

package/dist/lib/auth/oauth/diagnostics.d.mts

@@ -92,7 +92,8 @@ export interface DecodedAccessToken {
  *
  * For diagnostics only — the returned claims MUST NOT be trusted for
  * authorization decisions. Returns `null` if the token is not a well-formed
- * three-part JWT, or if the header/claims segments are not valid JSON.
+ * three-part JWS compact serialization: segments that are not base64url, or a
+ * header or claims set that is not a JSON object. Decoding uses `jose`.
  *
  * Opaque (non-JWT) tokens always return `null`, which is the expected outcome
  * for servers that issue reference tokens rather than JWTs.

package/dist/lib/auth/oauth/diagnostics.d.ts

@@ -92,7 +92,8 @@ export interface DecodedAccessToken {
  *
  * For diagnostics only — the returned claims MUST NOT be trusted for
  * authorization decisions. Returns `null` if the token is not a well-formed
- * three-part JWT, or if the header/claims segments are not valid JSON.
+ * three-part JWS compact serialization: segments that are not base64url, or a
+ * header or claims set that is not a JSON object. Decoding uses `jose`.
  *
  * Opaque (non-JWT) tokens always return `null`, which is the expected outcome
  * for servers that issue reference tokens rather than JWTs.

package/dist/lib/auth/oauth/diagnostics.js

@@ -20,9 +20,11 @@ var diagnostics_exports = {};
 __export(diagnostics_exports, {
   decodeAccessTokenClaims: () => decodeAccessTokenClaims,
   parseWWWAuthenticate: () => parseWWWAuthenticate,
+  validateDecodedTokenAudience: () => validateDecodedTokenAudience,
   validateTokenAudience: () => validateTokenAudience
 });
 module.exports = __toCommonJS(diagnostics_exports);
+var import_jose = require("jose");
 function parseWWWAuthenticate(header) {
   if (!header) return null;
   const trimmed = header.trim();
@@ -82,10 +84,8 @@ function decodeAccessTokenClaims(token) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   try {
-    const header = JSON.parse(base64UrlDecode(parts[0]));
-    const claims = JSON.parse(base64UrlDecode(parts[1]));
-    if (typeof header !== "object" || header === null) return null;
-    if (typeof claims !== "object" || claims === null) return null;
+    const header = (0, import_jose.decodeProtectedHeader)(token);
+    const claims = (0, import_jose.decodeJwt)(token);
     return { header, claims, signature: parts[2] };
   } catch {
     return null;
@@ -96,6 +96,9 @@ function validateTokenAudience(token, expectedResource) {
   if (!decoded) {
     return { ok: false, reason: "Token is opaque or not a valid JWT; audience cannot be inspected" };
   }
+  return validateDecodedTokenAudience(decoded, expectedResource);
+}
+function validateDecodedTokenAudience(decoded, expectedResource) {
   const aud = decoded.claims.aud;
   if (aud === void 0) {
     return { ok: false, reason: "Token has no `aud` claim (RFC 8707 violation for resource-indicator flows)" };
@@ -131,15 +134,10 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function base64UrlDecode(input) {
-  const padded = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLen = padded.length % 4;
-  const full = padLen ? padded + "=".repeat(4 - padLen) : padded;
-  return Buffer.from(full, "base64").toString("utf8");
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   decodeAccessTokenClaims,
   parseWWWAuthenticate,
+  validateDecodedTokenAudience,
   validateTokenAudience
 });

package/dist/lib/auth/oauth/diagnostics.mjs

@@ -1,3 +1,4 @@
+import { decodeJwt, decodeProtectedHeader } from "jose";
 function parseWWWAuthenticate(header) {
   if (!header) return null;
   const trimmed = header.trim();
@@ -57,10 +58,8 @@ function decodeAccessTokenClaims(token) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   try {
-    const header = JSON.parse(base64UrlDecode(parts[0]));
-    const claims = JSON.parse(base64UrlDecode(parts[1]));
-    if (typeof header !== "object" || header === null) return null;
-    if (typeof claims !== "object" || claims === null) return null;
+    const header = decodeProtectedHeader(token);
+    const claims = decodeJwt(token);
     return { header, claims, signature: parts[2] };
   } catch {
     return null;
@@ -71,6 +70,9 @@ function validateTokenAudience(token, expectedResource) {
   if (!decoded) {
     return { ok: false, reason: "Token is opaque or not a valid JWT; audience cannot be inspected" };
   }
+  return validateDecodedTokenAudience(decoded, expectedResource);
+}
+function validateDecodedTokenAudience(decoded, expectedResource) {
   const aud = decoded.claims.aud;
   if (aud === void 0) {
     return { ok: false, reason: "Token has no `aud` claim (RFC 8707 violation for resource-indicator flows)" };
@@ -106,14 +108,9 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function base64UrlDecode(input) {
-  const padded = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLen = padded.length % 4;
-  const full = padLen ? padded + "=".repeat(4 - padLen) : padded;
-  return Buffer.from(full, "base64").toString("utf8");
-}
 export {
   decodeAccessTokenClaims,
   parseWWWAuthenticate,
+  validateDecodedTokenAudience,
   validateTokenAudience
 };

package/dist/lib/core/ConversationTypes.d.mts

@@ -184,10 +184,15 @@ export interface TaskOptions {
     /** Additional metadata to include */
     metadata?: Record<string, any>;
     /**
-     * Transport-level safeguards for this call. Overrides the matching field
-     * on the client constructor's `transport` option. Use to lift or tighten
+     * Transport-level safeguards for this call. Use to lift or tighten
      * `maxResponseBytes` per call when an agent legitimately publishes large
-     * catalogs (e.g., `list_creative_formats` on a generative seller).
+     * catalogs (e.g., `list_creative_formats` on a generative seller) — the
+     * default is 4 MiB.
+     *
+     * This object **replaces** the client constructor's `transport` rather than
+     * merging into it. A per-call object that sets only `requestTimeoutMs`
+     * drops the constructor's `maxResponseBytes` back to the default; repeat
+     * every field you still want.
      */
     transport?: import('../protocols/index.mjs').TransportOptions;
 }

package/dist/lib/core/ConversationTypes.d.ts

@@ -184,10 +184,15 @@ export interface TaskOptions {
     /** Additional metadata to include */
     metadata?: Record<string, any>;
     /**
-     * Transport-level safeguards for this call. Overrides the matching field
-     * on the client constructor's `transport` option. Use to lift or tighten
+     * Transport-level safeguards for this call. Use to lift or tighten
      * `maxResponseBytes` per call when an agent legitimately publishes large
-     * catalogs (e.g., `list_creative_formats` on a generative seller).
+     * catalogs (e.g., `list_creative_formats` on a generative seller) — the
+     * default is 4 MiB.
+     *
+     * This object **replaces** the client constructor's `transport` rather than
+     * merging into it. A per-call object that sets only `requestTimeoutMs`
+     * drops the constructor's `maxResponseBytes` back to the default; repeat
+     * every field you still want.
      */
     transport?: import('../protocols').TransportOptions;
 }

package/dist/lib/core/SingleAgentClient.d.mts

@@ -495,9 +495,11 @@ export interface SingleAgentClientConfig extends ConversationConfig {
      * Transport-level safeguards. Applies to every call this client dispatches
      * unless overridden at call time.
      *
-     * Set `maxResponseBytes` when crawling untrusted agents (registries,
-     * federated discovery layers) to prevent a hostile vendor from buffering
-     * a large reply before any application-layer schema validation runs. Set
+     * `maxResponseBytes` defaults to 4 MiB on every call; raise it for an agent
+     * that legitimately publishes a large catalog, lower it when crawling
+     * untrusted agents (registries, federated discovery layers), or set it to
+     * exactly `0` to opt out of the cap entirely. A per-call `transport`
+     * replaces this object wholesale rather than merging into it. Set
      * `requestTimeoutMs` to override the default 60s cap on A2A agent-card
      * discovery; use `0` to disable the SDK-imposed discovery timeout.
      */

package/dist/lib/core/SingleAgentClient.d.ts

@@ -495,9 +495,11 @@ export interface SingleAgentClientConfig extends ConversationConfig {
      * Transport-level safeguards. Applies to every call this client dispatches
      * unless overridden at call time.
      *
-     * Set `maxResponseBytes` when crawling untrusted agents (registries,
-     * federated discovery layers) to prevent a hostile vendor from buffering
-     * a large reply before any application-layer schema validation runs. Set
+     * `maxResponseBytes` defaults to 4 MiB on every call; raise it for an agent
+     * that legitimately publishes a large catalog, lower it when crawling
+     * untrusted agents (registries, federated discovery layers), or set it to
+     * exactly `0` to opt out of the cap entirely. A per-call `transport`
+     * replaces this object wholesale rather than merging into it. Set
      * `requestTimeoutMs` to override the default 60s cap on A2A agent-card
      * discovery; use `0` to disable the SDK-imposed discovery timeout.
      */

package/dist/lib/core/TaskExecutor.js

@@ -50,6 +50,7 @@ var import_signedRequestRejection = require('../protocols/signedRequestRejection
 var import_errors = require('../errors/index.js');
 var import_client_hooks = require('../validation/client-hooks.js');
 var import_schema_validator = require('../validation/schema-validator.js');
+var import_schema_loader = require('../validation/schema-loader.js');
 var import_version = require('../version.js');
 var import_response_unwrapper = require('../utils/response-unwrapper.js');
 var import_error_extraction = require('../utils/error-extraction.js');
@@ -4458,7 +4459,10 @@ class TaskExecutor {
     const mode = this.responseValidationMode;
     const logViolations = this.config.logSchemaViolations !== false;
     try {
-      const validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? import_version.ADCP_VERSION;
+      let validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? import_version.ADCP_VERSION;
+      if (taskName === "get_adcp_capabilities" && validationVersion !== "v2.5") {
+        validationVersion = (0, import_schema_loader.resolveServedValidationVersion)(response, validationVersion);
+      }
       const normalizedResponse = this.normalizeResponseForValidation(response, taskName, validationVersion === "v2.5");
       const outcome = (this.config.experimentalIdentity33?.() || this.config.identity33SchemaExperiment && normalizedResponse && typeof normalizedResponse === "object" && (0, import_adcp_version_config.isAdcpVersionAtLeast)(normalizedResponse.adcp_version, "3.3")) && mode !== "off" ? validateIdentity33Payload(taskName, "response", normalizedResponse, validationVersion) : (0, import_client_hooks.validateIncomingResponse)(taskName, normalizedResponse, mode, void 0, validationVersion);
       if (outcome.valid) return { valid: true, errors: [] };

package/dist/lib/core/TaskExecutor.mjs

@@ -26,6 +26,7 @@ import {
   resolveValidationModes
 } from "../validation/client-hooks.mjs";
 import { formatIssues } from "../validation/schema-validator.mjs";
+import { resolveServedValidationVersion } from "../validation/schema-loader.mjs";
 import { ADCP_VERSION } from "../version.mjs";
 import { unwrapProtocolResponse, isAdcpOperationSuccess } from "../utils/response-unwrapper.mjs";
 import { extractAdcpErrorInfo, extractCorrelationId } from "../utils/error-extraction.mjs";
@@ -4436,7 +4437,10 @@ class TaskExecutor {
     const mode = this.responseValidationMode;
     const logViolations = this.config.logSchemaViolations !== false;
     try {
-      const validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? ADCP_VERSION;
+      let validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? ADCP_VERSION;
+      if (taskName === "get_adcp_capabilities" && validationVersion !== "v2.5") {
+        validationVersion = resolveServedValidationVersion(response, validationVersion);
+      }
       const normalizedResponse = this.normalizeResponseForValidation(response, taskName, validationVersion === "v2.5");
       const outcome = (this.config.experimentalIdentity33?.() || this.config.identity33SchemaExperiment && normalizedResponse && typeof normalizedResponse === "object" && isAdcpVersionAtLeast(normalizedResponse.adcp_version, "3.3")) && mode !== "off" ? validateIdentity33Payload(taskName, "response", normalizedResponse, validationVersion) : validateIncomingResponse(taskName, normalizedResponse, mode, void 0, validationVersion);
       if (outcome.valid) return { valid: true, errors: [] };

package/dist/lib/errors/index.d.mts

@@ -374,10 +374,15 @@ export declare class ProtocolFeatureUnsupportedError extends FeatureUnsupportedE
 }
 export declare function getClientPreflightAdcpError(error: unknown): ClientPreflightAdcpErrorInfo | undefined;
 /**
- * Error thrown when a response body exceeds the configured `maxResponseBytes`
- * cap on the transport. Surfaced when crawling untrusted agents (registries,
- * federated discovery layers) to prevent a hostile vendor from buffering a
- * large reply before schema validation runs.
+ * Error thrown when a response body exceeds the `maxResponseBytes` cap on the
+ * transport — 4 MiB by default on every MCP and A2A call path. It prevents a
+ * hostile or merely careless agent from buffering a large reply before schema
+ * validation runs.
+ *
+ * Raised on three paths: a declared `Content-Length` over the cap, a one-shot
+ * body that crosses the cap mid-stream, and a `text/event-stream` response
+ * whose single event exceeds the cap or whose cumulative octets exceed the
+ * call's stream budget. Nothing is truncated — the read fails.
  *
  * Recovery: `terminal` from the SDK's view — repeating the call against the
  * same agent will hit the same cap. The buyer's options are to widen the

package/dist/lib/errors/index.d.ts

@@ -374,10 +374,15 @@ export declare class ProtocolFeatureUnsupportedError extends FeatureUnsupportedE
 }
 export declare function getClientPreflightAdcpError(error: unknown): ClientPreflightAdcpErrorInfo | undefined;
 /**
- * Error thrown when a response body exceeds the configured `maxResponseBytes`
- * cap on the transport. Surfaced when crawling untrusted agents (registries,
- * federated discovery layers) to prevent a hostile vendor from buffering a
- * large reply before schema validation runs.
+ * Error thrown when a response body exceeds the `maxResponseBytes` cap on the
+ * transport — 4 MiB by default on every MCP and A2A call path. It prevents a
+ * hostile or merely careless agent from buffering a large reply before schema
+ * validation runs.
+ *
+ * Raised on three paths: a declared `Content-Length` over the cap, a one-shot
+ * body that crosses the cap mid-stream, and a `text/event-stream` response
+ * whose single event exceeds the cap or whose cumulative octets exceed the
+ * call's stream budget. Nothing is truncated — the read fails.
  *
  * Recovery: `terminal` from the SDK's view — repeating the call against the
  * same agent will hit the same cap. The buyer's options are to widen the

package/dist/lib/index.d.mts

@@ -165,7 +165,7 @@ export { BrandJsonSchema, AdagentsJsonSchema } from './types/wellknown-schemas.g
 export type { PlacementPresentationDocument, PlacementPresentationReference } from './types/core.generated.mjs';
 export { PlacementPresentationDocumentSchema, PlacementPresentationReferenceSchema } from './types/schemas.generated.mjs';
 export type { Error as TaskErrorDetail } from './types/core.generated.mjs';
-export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery } from './types/error-codes.mjs';
+export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery, DEFAULT_UNKNOWN_ERROR_RECOVERY, } from './types/error-codes.mjs';
 export type { StandardErrorCode, ErrorRecovery } from './types/error-codes.mjs';
 export { adcpError, legacyCapabilitiesResponse, legacyProductsResponse, legacyMediaBuyResponse, legacyDeliveryResponse, legacyListAccountsResponse, legacyListCreativeFormatsResponse, legacyUpdateMediaBuyResponse, legacyGetMediaBuysResponse, legacyPerformanceFeedbackResponse, legacyBuildCreativeResponse, legacyBuildCreativeMultiResponse, legacyPreviewCreativeResponse, legacyCreativeDeliveryResponse, legacyListCreativesResponse, legacyListPropertyListsResponse, legacyListCollectionListsResponse, legacyListContentStandardsResponse, legacyGetPlanAuditLogsResponse, legacySyncCreativesResponse, legacyGetSignalsResponse, legacyActivateSignalResponse, legacyCancelMediaBuyResponse, legacyAcquireRightsResponse, legacyAcquireRightsAcquired, legacyAcquireRightsPendingApproval, legacyAcquireRightsRejected, legacySyncAccountsResponse, legacySyncGovernanceResponse, legacyReportUsageResponse, validActionsForStatus, MEDIA_BUY_TRANSITIONS, CREATIVE_ASSET_TRANSITIONS, isLegalMediaBuyTransition, isLegalCreativeTransition, assertMediaBuyTransition, assertCreativeTransition, getAccountMode, isSandboxOrMockAccount, assertSandboxAccount, taskToolResponse, registerAdcpTaskTool, createTaskCapableServer, InMemoryTaskStore, isTerminal, serve, taskScopeFromPrincipal, UnknownHostError, hostname, resolveHost, verifyIntrospection, registerTestController, handleTestControllerRequest, TestControllerError, toMcpResponse, TOOL_INPUT_SHAPE, CONTROLLER_SCENARIOS, DISCOVERY_ARM_SCENARIOS, SEED_SCENARIOS, SESSION_ENTRY_CAP, enforceMapCap, createSeedFixtureCache, PostgresTaskStore, cleanupExpiredTasks, getMcpTasksMigration, MCP_TASKS_MIGRATION, ADCP_PRE_TRANSPORT, checkGovernance, governanceDeniedError, DEFAULT_REPORTING_CAPABILITIES, InMemoryStateStore, PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION, StateError, PatchConflictError, SESSION_KEY_FIELD, createSessionedStore, scopedStore, patchWithRetry, isPutIfMatchConflict, requireSessionKey, structuredSerialize, structuredDeserialize, createIdempotencyStore, memoryBackend, pgBackend, getIdempotencyMigration, IDEMPOTENCY_MIGRATION, cleanupExpiredIdempotency, redisBackend, createLazyBackend, hashPayload, IdempotencyClaimOwnershipError, getServeRequestContext, ADCP_SERVE_REQUEST_CONTEXT, createA2AAdapter, A2AInvocationError, MCP_APP_RESOURCE_MIME_TYPE, ADCP_MIRRORED_STRUCTURED_CONTENT_META_KEY, } from './server/index.mjs';
 export type { AdcpErrorOptions, AdcpErrorResponse, McpToolResponse, ValidAction, CancelMediaBuyInput, AdcpTaskToolConfig, TaskStore, TaskMessageQueue, CreateTaskOptions, ToolTaskHandler, CreateTaskRequestHandlerExtra, TaskRequestHandlerExtra, CreateTaskResult, GetTaskResult, Task, ServeContext, ServeOptions, PgQueryable, PostgresTaskStoreOptions, TestControllerStore, TestControllerStoreFactory, TestControllerStoreOrFactory, ControllerScenario, SeedScenario, SeedFixtureCache, SessionContext, OnInstructionsError, MaybePromise, LegacyAdcpServerConfig, LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, LegacyAdcpCustomToolConfig, LegacyAdcpCustomToolHandler, LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermissions, McpAppResourceUiMeta, McpAppResourceMeta, McpAppResourceReadContext, AdcpLogger, LegacyHandlerContext, LegacyMediaBuyHandlers, LegacySignalsHandlers, LegacyCreativeHandlers, LegacyGovernanceHandlers, LegacyAccountHandlers, LegacyEventTrackingHandlers, LegacySponsoredIntelligenceHandlers, SignedRequestsConfig, AdcpPreTransport, AdcpServer, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, StructuredContentFallbackTransport, StructuredContentTextFallback, StructuredContentTextFallbackContext, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, AdcpStateStore, ListOptions as StateListOptions, ListResult as StateListResult, PostgresStateStoreOptions, InMemoryStateStoreOptions, VersionedDocument, PutIfMatchResult, PatchWithRetryOptions, StateErrorCode, SessionKeyContext, IdempotencyStore, IdempotencyStoreConfig, IdempotencyBackend, IdempotencyCacheEntry, IdempotencyCheckResult, MemoryBackendOptions, PgBackendOptions, RedisBackendOptions, RedisBackendClient, RedisLikeClient, LazyBackendFactory, LazyBackendOptions, A2AAdapter, A2AAdapterOptions, A2AAgentCardOverrides, A2AAgentCapabilitiesOverride, A2AAgentSkillOverride, A2AMountOptions, ExpressAppLike, LegacyHttpSecurityScheme, LegacySecurityScheme, AccountMode, RequireCacheScopeWhenProducts, ServerPayload, GetProductsPayload, CreateMediaBuyPayload, UpdateMediaBuyPayload, GetMediaBuysPayload, GetMediaBuyDeliveryPayload, ListCreativesPayload, GetCreativeDeliveryPayload, CanonicalPreviewCreativePayload, PreviewCreativePayload, LegacyGetProductsPayload, LegacyCreateMediaBuyPayload, LegacyUpdateMediaBuyPayload, LegacyGetMediaBuysPayload, LegacyGetMediaBuyDeliveryPayload, LegacyListCreativesPayload, LegacyGetCreativeDeliveryPayload, LegacyListCreativeFormatsPayload, LegacyListCreativeFormatsResponsePayload, LegacyListCreativeFormatsServerPayload, LegacyBuildCreativePayload, LegacyBuildCreativeMultiPayload, LegacyBuildCreativeVariantPayload, LegacyPreviewCreativePayload, SyncCreativesPayload, SyncCreativesSuccessPayload, SyncCreativesErrorPayload, } from './server/index.mjs';
@@ -190,7 +190,7 @@ export { runAuthDiagnosis, AUTH_DIAGNOSIS_SCHEMA_VERSION, type DiagnoseOptions,
 export { NeedsAuthorizationError, discoverAuthorizationRequirements, hasValidatedMcpAuthorizationRequirements, createFileOAuthStorage, bindAgentStorage, getAgentStorage, unbindAgentStorage, type AuthorizationRequirements, type DiscoverAuthorizationOptions, type FileOAuthStorageOptions, } from './auth/oauth/index.mjs';
 export { exchangeClientCredentials, ensureClientCredentialsTokens, ClientCredentialsExchangeError, MissingEnvSecretError, resolveSecret, isEnvSecretReference, toEnvSecretReference, extractEnvSecretName, type ExchangeClientCredentialsOptions, type EnsureClientCredentialsOptions, type AgentOAuthClientCredentials, AgentOAuthClientCredentialsSchema, } from './auth/oauth/index.mjs';
 export { validateAgentUrl, validateAdCPResponse, getExpectedSchema, handleAdCPResponse } from './validation/index.mjs';
-export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, } from './protocols/index.mjs';
+export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, DEFAULT_MAX_RESPONSE_BYTES, SSE_CUMULATIVE_BUDGET_MULTIPLIER, } from './protocols/index.mjs';
 export { toReleasePrecisionWire, validateAdcpVersionWire } from './validation/schema-loader.mjs';
 export type { CallToolOptions, TransportActivity, TransportActivityContext, TransportActivityHandler, TransportActivityType, TransportResponseOutcome, TransportOptions, A2ALegacyCompatOptions, } from './protocols/index.mjs';
 import { bundleSupportsAdcpVersionField as _isSupported } from './protocols/index.mjs';
@@ -261,7 +261,7 @@ export declare function createAdCPClient(agents?: AgentConfig[]): ADCPMultiAgent
  * @deprecated Use ADCPMultiAgentClient.fromEnv() instead
  */
 export declare function createAdCPClientFromEnv(): ADCPMultiAgentClient;
-export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, compileUniversalMacroTemplate, } from './substitution/index.mjs';
+export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, MultipleVendorConsentMacrosError, compileUniversalMacroTemplate, } from './substitution/index.mjs';
 export type { ObserverFetchOptions, ObserverDispatcher, CatalogMacroVectorName, AssertionOptions as SubstitutionAssertionOptions, AssertionResult as SubstitutionAssertionResult, BindingMatch, CatalogBinding, CatalogMacroVector, PolicyResult as SubstitutionPolicyResult, SsrfPolicy, TrackerUrlRecord, MacroMapping, TranslateResult, BuiltInSourceMacroSyntax, CompileUniversalMacroTemplateInput, CompileUniversalMacroTemplateResult, CustomSourceMacroSyntax, MacroDocumentationReference, SourceMacroMapping, SourceMacroRequirement, SourceMacroRequirementSatisfaction, SourceMacroSyntax, SourceMacroSyntaxDeclaration, UniversalMacroCompileDiagnostic, UniversalMacroOccurrence, } from './substitution/index.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, testBrandRightsFlow, hasBrandRightsTools, expectControllerError, expectControllerSuccess, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, } from './testing/index.mjs';
 export type { ControllerErrorWithDetail, TestClient, RateLimitTripSpec, RateLimitTripClient, RateLimitTripFailureCode, RateLimitTripObservation, RateLimitTripObserverOptions, RateLimitTripResponseSnapshot, RateLimitTripStructuredResult, RateLimitTripTaskOptions, } from './testing/index.mjs';

package/dist/lib/index.d.ts

@@ -165,7 +165,7 @@ export { BrandJsonSchema, AdagentsJsonSchema } from './types/wellknown-schemas.g
 export type { PlacementPresentationDocument, PlacementPresentationReference } from './types/core.generated';
 export { PlacementPresentationDocumentSchema, PlacementPresentationReferenceSchema } from './types/schemas.generated';
 export type { Error as TaskErrorDetail } from './types/core.generated';
-export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery } from './types/error-codes';
+export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery, DEFAULT_UNKNOWN_ERROR_RECOVERY, } from './types/error-codes';
 export type { StandardErrorCode, ErrorRecovery } from './types/error-codes';
 export { adcpError, legacyCapabilitiesResponse, legacyProductsResponse, legacyMediaBuyResponse, legacyDeliveryResponse, legacyListAccountsResponse, legacyListCreativeFormatsResponse, legacyUpdateMediaBuyResponse, legacyGetMediaBuysResponse, legacyPerformanceFeedbackResponse, legacyBuildCreativeResponse, legacyBuildCreativeMultiResponse, legacyPreviewCreativeResponse, legacyCreativeDeliveryResponse, legacyListCreativesResponse, legacyListPropertyListsResponse, legacyListCollectionListsResponse, legacyListContentStandardsResponse, legacyGetPlanAuditLogsResponse, legacySyncCreativesResponse, legacyGetSignalsResponse, legacyActivateSignalResponse, legacyCancelMediaBuyResponse, legacyAcquireRightsResponse, legacyAcquireRightsAcquired, legacyAcquireRightsPendingApproval, legacyAcquireRightsRejected, legacySyncAccountsResponse, legacySyncGovernanceResponse, legacyReportUsageResponse, validActionsForStatus, MEDIA_BUY_TRANSITIONS, CREATIVE_ASSET_TRANSITIONS, isLegalMediaBuyTransition, isLegalCreativeTransition, assertMediaBuyTransition, assertCreativeTransition, getAccountMode, isSandboxOrMockAccount, assertSandboxAccount, taskToolResponse, registerAdcpTaskTool, createTaskCapableServer, InMemoryTaskStore, isTerminal, serve, taskScopeFromPrincipal, UnknownHostError, hostname, resolveHost, verifyIntrospection, registerTestController, handleTestControllerRequest, TestControllerError, toMcpResponse, TOOL_INPUT_SHAPE, CONTROLLER_SCENARIOS, DISCOVERY_ARM_SCENARIOS, SEED_SCENARIOS, SESSION_ENTRY_CAP, enforceMapCap, createSeedFixtureCache, PostgresTaskStore, cleanupExpiredTasks, getMcpTasksMigration, MCP_TASKS_MIGRATION, ADCP_PRE_TRANSPORT, checkGovernance, governanceDeniedError, DEFAULT_REPORTING_CAPABILITIES, InMemoryStateStore, PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION, StateError, PatchConflictError, SESSION_KEY_FIELD, createSessionedStore, scopedStore, patchWithRetry, isPutIfMatchConflict, requireSessionKey, structuredSerialize, structuredDeserialize, createIdempotencyStore, memoryBackend, pgBackend, getIdempotencyMigration, IDEMPOTENCY_MIGRATION, cleanupExpiredIdempotency, redisBackend, createLazyBackend, hashPayload, IdempotencyClaimOwnershipError, getServeRequestContext, ADCP_SERVE_REQUEST_CONTEXT, createA2AAdapter, A2AInvocationError, MCP_APP_RESOURCE_MIME_TYPE, ADCP_MIRRORED_STRUCTURED_CONTENT_META_KEY, } from './server';
 export type { AdcpErrorOptions, AdcpErrorResponse, McpToolResponse, ValidAction, CancelMediaBuyInput, AdcpTaskToolConfig, TaskStore, TaskMessageQueue, CreateTaskOptions, ToolTaskHandler, CreateTaskRequestHandlerExtra, TaskRequestHandlerExtra, CreateTaskResult, GetTaskResult, Task, ServeContext, ServeOptions, PgQueryable, PostgresTaskStoreOptions, TestControllerStore, TestControllerStoreFactory, TestControllerStoreOrFactory, ControllerScenario, SeedScenario, SeedFixtureCache, SessionContext, OnInstructionsError, MaybePromise, LegacyAdcpServerConfig, LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, LegacyAdcpCustomToolConfig, LegacyAdcpCustomToolHandler, LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermissions, McpAppResourceUiMeta, McpAppResourceMeta, McpAppResourceReadContext, AdcpLogger, LegacyHandlerContext, LegacyMediaBuyHandlers, LegacySignalsHandlers, LegacyCreativeHandlers, LegacyGovernanceHandlers, LegacyAccountHandlers, LegacyEventTrackingHandlers, LegacySponsoredIntelligenceHandlers, SignedRequestsConfig, AdcpPreTransport, AdcpServer, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, StructuredContentFallbackTransport, StructuredContentTextFallback, StructuredContentTextFallbackContext, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, AdcpStateStore, ListOptions as StateListOptions, ListResult as StateListResult, PostgresStateStoreOptions, InMemoryStateStoreOptions, VersionedDocument, PutIfMatchResult, PatchWithRetryOptions, StateErrorCode, SessionKeyContext, IdempotencyStore, IdempotencyStoreConfig, IdempotencyBackend, IdempotencyCacheEntry, IdempotencyCheckResult, MemoryBackendOptions, PgBackendOptions, RedisBackendOptions, RedisBackendClient, RedisLikeClient, LazyBackendFactory, LazyBackendOptions, A2AAdapter, A2AAdapterOptions, A2AAgentCardOverrides, A2AAgentCapabilitiesOverride, A2AAgentSkillOverride, A2AMountOptions, ExpressAppLike, LegacyHttpSecurityScheme, LegacySecurityScheme, AccountMode, RequireCacheScopeWhenProducts, ServerPayload, GetProductsPayload, CreateMediaBuyPayload, UpdateMediaBuyPayload, GetMediaBuysPayload, GetMediaBuyDeliveryPayload, ListCreativesPayload, GetCreativeDeliveryPayload, CanonicalPreviewCreativePayload, PreviewCreativePayload, LegacyGetProductsPayload, LegacyCreateMediaBuyPayload, LegacyUpdateMediaBuyPayload, LegacyGetMediaBuysPayload, LegacyGetMediaBuyDeliveryPayload, LegacyListCreativesPayload, LegacyGetCreativeDeliveryPayload, LegacyListCreativeFormatsPayload, LegacyListCreativeFormatsResponsePayload, LegacyListCreativeFormatsServerPayload, LegacyBuildCreativePayload, LegacyBuildCreativeMultiPayload, LegacyBuildCreativeVariantPayload, LegacyPreviewCreativePayload, SyncCreativesPayload, SyncCreativesSuccessPayload, SyncCreativesErrorPayload, } from './server';
@@ -190,7 +190,7 @@ export { runAuthDiagnosis, AUTH_DIAGNOSIS_SCHEMA_VERSION, type DiagnoseOptions,
 export { NeedsAuthorizationError, discoverAuthorizationRequirements, hasValidatedMcpAuthorizationRequirements, createFileOAuthStorage, bindAgentStorage, getAgentStorage, unbindAgentStorage, type AuthorizationRequirements, type DiscoverAuthorizationOptions, type FileOAuthStorageOptions, } from './auth/oauth';
 export { exchangeClientCredentials, ensureClientCredentialsTokens, ClientCredentialsExchangeError, MissingEnvSecretError, resolveSecret, isEnvSecretReference, toEnvSecretReference, extractEnvSecretName, type ExchangeClientCredentialsOptions, type EnsureClientCredentialsOptions, type AgentOAuthClientCredentials, AgentOAuthClientCredentialsSchema, } from './auth/oauth';
 export { validateAgentUrl, validateAdCPResponse, getExpectedSchema, handleAdCPResponse } from './validation';
-export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, } from './protocols';
+export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, DEFAULT_MAX_RESPONSE_BYTES, SSE_CUMULATIVE_BUDGET_MULTIPLIER, } from './protocols';
 export { toReleasePrecisionWire, validateAdcpVersionWire } from './validation/schema-loader';
 export type { CallToolOptions, TransportActivity, TransportActivityContext, TransportActivityHandler, TransportActivityType, TransportResponseOutcome, TransportOptions, A2ALegacyCompatOptions, } from './protocols';
 import { bundleSupportsAdcpVersionField as _isSupported } from './protocols';
@@ -261,7 +261,7 @@ export declare function createAdCPClient(agents?: AgentConfig[]): ADCPMultiAgent
  * @deprecated Use ADCPMultiAgentClient.fromEnv() instead
  */
 export declare function createAdCPClientFromEnv(): ADCPMultiAgentClient;
-export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, compileUniversalMacroTemplate, } from './substitution';
+export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, MultipleVendorConsentMacrosError, compileUniversalMacroTemplate, } from './substitution';
 export type { ObserverFetchOptions, ObserverDispatcher, CatalogMacroVectorName, AssertionOptions as SubstitutionAssertionOptions, AssertionResult as SubstitutionAssertionResult, BindingMatch, CatalogBinding, CatalogMacroVector, PolicyResult as SubstitutionPolicyResult, SsrfPolicy, TrackerUrlRecord, MacroMapping, TranslateResult, BuiltInSourceMacroSyntax, CompileUniversalMacroTemplateInput, CompileUniversalMacroTemplateResult, CustomSourceMacroSyntax, MacroDocumentationReference, SourceMacroMapping, SourceMacroRequirement, SourceMacroRequirementSatisfaction, SourceMacroSyntax, SourceMacroSyntaxDeclaration, UniversalMacroCompileDiagnostic, UniversalMacroOccurrence, } from './substitution';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, testBrandRightsFlow, hasBrandRightsTools, expectControllerError, expectControllerSuccess, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, } from './testing/index';
 export type { ControllerErrorWithDetail, TestClient, RateLimitTripSpec, RateLimitTripClient, RateLimitTripFailureCode, RateLimitTripObservation, RateLimitTripObserverOptions, RateLimitTripResponseSnapshot, RateLimitTripStructuredResult, RateLimitTripTaskOptions, } from './testing/index';

package/dist/lib/index.js

@@ -75,9 +75,11 @@ __export(index_exports, {
   CreativeFormatCapabilityError: () => import_projection2.CreativeFormatCapabilityError,
   CreativeFormatProjectionError: () => import_projection2.CreativeFormatProjectionError,
   DEFAULT_MACRO_PROHIBITED_PATTERN: () => import_substitution.DEFAULT_MACRO_PROHIBITED_PATTERN,
+  DEFAULT_MAX_RESPONSE_BYTES: () => import_protocols.DEFAULT_MAX_RESPONSE_BYTES,
   DEFAULT_MAX_SSE_FRAME_BYTES: () => import_registry2.DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES: () => import_server.DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY: () => import_substitution.DEFAULT_SSRF_POLICY,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY: () => import_error_codes.DEFAULT_UNKNOWN_ERROR_RECOVERY,
   DISCOVERY_ARM_SCENARIOS: () => import_server.DISCOVERY_ARM_SCENARIOS,
   DeferredSettlementOwnershipError: () => import_TaskExecutor.DeferredSettlementOwnershipError,
   DeferredTaskError: () => import_errors.DeferredTaskError,
@@ -141,6 +143,7 @@ __export(index_exports, {
   MemoryStorage: () => import_MemoryStorage.MemoryStorage,
   MissingEnvSecretError: () => import_oauth4.MissingEnvSecretError,
   MissingInputHandlerError: () => import_errors.MissingInputHandlerError,
+  MultipleVendorConsentMacrosError: () => import_substitution.MultipleVendorConsentMacrosError,
   NeedsAuthorizationError: () => import_oauth3.NeedsAuthorizationError,
   NetworkConsistencyChecker: () => import_network_consistency_checker.NetworkConsistencyChecker,
   OBSERVER_FLUSH_TIMEOUT_MS: () => import_protocols.OBSERVER_FLUSH_TIMEOUT_MS,
@@ -183,6 +186,7 @@ __export(index_exports, {
   SIErrorCodes: () => import_adapters.SIErrorCodes,
   SIGNALS_TOOLS: () => import_capabilities.SIGNALS_TOOLS,
   SISessionManager: () => import_adapters.SISessionManager,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER: () => import_protocols.SSE_CUMULATIVE_BUDGET_MULTIPLIER,
   SSRF_TRANSIENT_CODES: () => import_net.SSRF_TRANSIENT_CODES,
   STANDARD_CREATIVE_AGENTS: () => import_CreativeAgentClient.STANDARD_CREATIVE_AGENTS,
   STANDARD_ERROR_CODES: () => import_error_codes.STANDARD_ERROR_CODES,
@@ -921,9 +925,11 @@ function createAdCPClientFromEnv() {
   CreativeFormatCapabilityError,
   CreativeFormatProjectionError,
   DEFAULT_MACRO_PROHIBITED_PATTERN,
+  DEFAULT_MAX_RESPONSE_BYTES,
   DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY,
   DISCOVERY_ARM_SCENARIOS,
   DeferredSettlementOwnershipError,
   DeferredTaskError,
@@ -987,6 +993,7 @@ function createAdCPClientFromEnv() {
   MemoryStorage,
   MissingEnvSecretError,
   MissingInputHandlerError,
+  MultipleVendorConsentMacrosError,
   NeedsAuthorizationError,
   NetworkConsistencyChecker,
   OBSERVER_FLUSH_TIMEOUT_MS,
@@ -1029,6 +1036,7 @@ function createAdCPClientFromEnv() {
   SIErrorCodes,
   SIGNALS_TOOLS,
   SISessionManager,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER,
   SSRF_TRANSIENT_CODES,
   STANDARD_CREATIVE_AGENTS,
   STANDARD_ERROR_CODES,