@adcp/sdk 16.0.0-beta.3 → 16.0.0-beta.5

package/dist/lib/auth/oauth/diagnose.js

@@ -370,7 +370,7 @@ function rankH2(agentUrl, refreshStep, refreshedDecoded) {
     ];
     return base;
   }
-  const result = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(refreshedDecoded), agentUrl);
+  const result = (0, import_diagnostics.validateDecodedTokenAudience)(refreshedDecoded, agentUrl);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = "Refreshed token `aud` claim matches the expected resource \u2014 AS honors RFC 8707 `resource`";
@@ -440,7 +440,7 @@ function rankH5(agentUrl, currentDecoded, prmStep) {
   const prmResource = prmStep?.http?.body && typeof prmStep.http.body.resource === "string" ? prmStep.http.body.resource : void 0;
   const expected = prmResource ?? agentUrl;
   const prmDiffersFromAgent = prmResource !== void 0 && normalizeForCompare(prmResource) !== normalizeForCompare(agentUrl);
-  const result = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(currentDecoded), expected);
+  const result = (0, import_diagnostics.validateDecodedTokenAudience)(currentDecoded, expected);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = `Saved token \`aud\` matches expected resource (${expected})`;
@@ -477,7 +477,7 @@ function rankH6(agentUrl, currentDecoded, toolStep) {
     base.summary = `tool_call returned HTTP ${toolStep.http.status} \u2014 agent did not accept the token blindly`;
     return base;
   }
-  const audResult = (0, import_diagnostics.validateTokenAudience)(jwtFromDecoded(currentDecoded), agentUrl);
+  const audResult = (0, import_diagnostics.validateDecodedTokenAudience)(currentDecoded, agentUrl);
   if (audResult.ok) {
     base.verdict = "ruled_out";
     base.summary = "Token `aud` matches agent URL and tool_call succeeded \u2014 cannot distinguish from correct behavior";
@@ -588,14 +588,6 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function jwtFromDecoded(_decoded) {
-  const h = base64url(JSON.stringify(_decoded.header));
-  const c = base64url(JSON.stringify(_decoded.claims));
-  return `${h}.${c}.${_decoded.signature || "sig"}`;
-}
-function base64url(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/={0,2}$/, "");
-}
 function formatError(err) {
   if (err instanceof import_net.SsrfRefusedError) {
     return `SSRF guard refused: ${err.code} (${err.message})`;

package/dist/lib/auth/oauth/diagnose.mjs

@@ -1,6 +1,6 @@
 import { ssrfSafeFetch, decodeBodyAsJsonOrText, SsrfRefusedError } from "../../net/index.mjs";
 import { assertOAuthCredentialIssuer, assertOAuthServerIssuer, OAuthError } from "./types.mjs";
-import { decodeAccessTokenClaims, parseWWWAuthenticate, validateTokenAudience } from "./diagnostics.mjs";
+import { decodeAccessTokenClaims, parseWWWAuthenticate, validateDecodedTokenAudience } from "./diagnostics.mjs";
 const AUTH_DIAGNOSIS_SCHEMA_VERSION = 1;
 async function runAuthDiagnosis(agent, options = {}) {
   const steps = [];
@@ -346,7 +346,7 @@ function rankH2(agentUrl, refreshStep, refreshedDecoded) {
     ];
     return base;
   }
-  const result = validateTokenAudience(jwtFromDecoded(refreshedDecoded), agentUrl);
+  const result = validateDecodedTokenAudience(refreshedDecoded, agentUrl);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = "Refreshed token `aud` claim matches the expected resource \u2014 AS honors RFC 8707 `resource`";
@@ -416,7 +416,7 @@ function rankH5(agentUrl, currentDecoded, prmStep) {
   const prmResource = prmStep?.http?.body && typeof prmStep.http.body.resource === "string" ? prmStep.http.body.resource : void 0;
   const expected = prmResource ?? agentUrl;
   const prmDiffersFromAgent = prmResource !== void 0 && normalizeForCompare(prmResource) !== normalizeForCompare(agentUrl);
-  const result = validateTokenAudience(jwtFromDecoded(currentDecoded), expected);
+  const result = validateDecodedTokenAudience(currentDecoded, expected);
   if (result.ok) {
     base.verdict = "ruled_out";
     base.summary = `Saved token \`aud\` matches expected resource (${expected})`;
@@ -453,7 +453,7 @@ function rankH6(agentUrl, currentDecoded, toolStep) {
     base.summary = `tool_call returned HTTP ${toolStep.http.status} \u2014 agent did not accept the token blindly`;
     return base;
   }
-  const audResult = validateTokenAudience(jwtFromDecoded(currentDecoded), agentUrl);
+  const audResult = validateDecodedTokenAudience(currentDecoded, agentUrl);
   if (audResult.ok) {
     base.verdict = "ruled_out";
     base.summary = "Token `aud` matches agent URL and tool_call succeeded \u2014 cannot distinguish from correct behavior";
@@ -564,14 +564,6 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function jwtFromDecoded(_decoded) {
-  const h = base64url(JSON.stringify(_decoded.header));
-  const c = base64url(JSON.stringify(_decoded.claims));
-  return `${h}.${c}.${_decoded.signature || "sig"}`;
-}
-function base64url(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/={0,2}$/, "");
-}
 function formatError(err) {
   if (err instanceof SsrfRefusedError) {
     return `SSRF guard refused: ${err.code} (${err.message})`;

package/dist/lib/auth/oauth/diagnostics.d.mts

@@ -92,7 +92,8 @@ export interface DecodedAccessToken {
  *
  * For diagnostics only — the returned claims MUST NOT be trusted for
  * authorization decisions. Returns `null` if the token is not a well-formed
- * three-part JWT, or if the header/claims segments are not valid JSON.
+ * three-part JWS compact serialization: segments that are not base64url, or a
+ * header or claims set that is not a JSON object. Decoding uses `jose`.
  *
  * Opaque (non-JWT) tokens always return `null`, which is the expected outcome
  * for servers that issue reference tokens rather than JWTs.

package/dist/lib/auth/oauth/diagnostics.d.ts

@@ -92,7 +92,8 @@ export interface DecodedAccessToken {
  *
  * For diagnostics only — the returned claims MUST NOT be trusted for
  * authorization decisions. Returns `null` if the token is not a well-formed
- * three-part JWT, or if the header/claims segments are not valid JSON.
+ * three-part JWS compact serialization: segments that are not base64url, or a
+ * header or claims set that is not a JSON object. Decoding uses `jose`.
  *
  * Opaque (non-JWT) tokens always return `null`, which is the expected outcome
  * for servers that issue reference tokens rather than JWTs.

package/dist/lib/auth/oauth/diagnostics.js

@@ -20,9 +20,11 @@ var diagnostics_exports = {};
 __export(diagnostics_exports, {
   decodeAccessTokenClaims: () => decodeAccessTokenClaims,
   parseWWWAuthenticate: () => parseWWWAuthenticate,
+  validateDecodedTokenAudience: () => validateDecodedTokenAudience,
   validateTokenAudience: () => validateTokenAudience
 });
 module.exports = __toCommonJS(diagnostics_exports);
+var import_jose = require("jose");
 function parseWWWAuthenticate(header) {
   if (!header) return null;
   const trimmed = header.trim();
@@ -82,10 +84,8 @@ function decodeAccessTokenClaims(token) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   try {
-    const header = JSON.parse(base64UrlDecode(parts[0]));
-    const claims = JSON.parse(base64UrlDecode(parts[1]));
-    if (typeof header !== "object" || header === null) return null;
-    if (typeof claims !== "object" || claims === null) return null;
+    const header = (0, import_jose.decodeProtectedHeader)(token);
+    const claims = (0, import_jose.decodeJwt)(token);
     return { header, claims, signature: parts[2] };
   } catch {
     return null;
@@ -96,6 +96,9 @@ function validateTokenAudience(token, expectedResource) {
   if (!decoded) {
     return { ok: false, reason: "Token is opaque or not a valid JWT; audience cannot be inspected" };
   }
+  return validateDecodedTokenAudience(decoded, expectedResource);
+}
+function validateDecodedTokenAudience(decoded, expectedResource) {
   const aud = decoded.claims.aud;
   if (aud === void 0) {
     return { ok: false, reason: "Token has no `aud` claim (RFC 8707 violation for resource-indicator flows)" };
@@ -131,15 +134,10 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function base64UrlDecode(input) {
-  const padded = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLen = padded.length % 4;
-  const full = padLen ? padded + "=".repeat(4 - padLen) : padded;
-  return Buffer.from(full, "base64").toString("utf8");
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   decodeAccessTokenClaims,
   parseWWWAuthenticate,
+  validateDecodedTokenAudience,
   validateTokenAudience
 });

package/dist/lib/auth/oauth/diagnostics.mjs

@@ -1,3 +1,4 @@
+import { decodeJwt, decodeProtectedHeader } from "jose";
 function parseWWWAuthenticate(header) {
   if (!header) return null;
   const trimmed = header.trim();
@@ -57,10 +58,8 @@ function decodeAccessTokenClaims(token) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   try {
-    const header = JSON.parse(base64UrlDecode(parts[0]));
-    const claims = JSON.parse(base64UrlDecode(parts[1]));
-    if (typeof header !== "object" || header === null) return null;
-    if (typeof claims !== "object" || claims === null) return null;
+    const header = decodeProtectedHeader(token);
+    const claims = decodeJwt(token);
     return { header, claims, signature: parts[2] };
   } catch {
     return null;
@@ -71,6 +70,9 @@ function validateTokenAudience(token, expectedResource) {
   if (!decoded) {
     return { ok: false, reason: "Token is opaque or not a valid JWT; audience cannot be inspected" };
   }
+  return validateDecodedTokenAudience(decoded, expectedResource);
+}
+function validateDecodedTokenAudience(decoded, expectedResource) {
   const aud = decoded.claims.aud;
   if (aud === void 0) {
     return { ok: false, reason: "Token has no `aud` claim (RFC 8707 violation for resource-indicator flows)" };
@@ -106,14 +108,9 @@ function isDefaultPort(scheme, port) {
   if (scheme === "http:" && port === "80") return true;
   return false;
 }
-function base64UrlDecode(input) {
-  const padded = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLen = padded.length % 4;
-  const full = padLen ? padded + "=".repeat(4 - padLen) : padded;
-  return Buffer.from(full, "base64").toString("utf8");
-}
 export {
   decodeAccessTokenClaims,
   parseWWWAuthenticate,
+  validateDecodedTokenAudience,
   validateTokenAudience
 };

package/dist/lib/index.d.mts

@@ -165,7 +165,7 @@ export { BrandJsonSchema, AdagentsJsonSchema } from './types/wellknown-schemas.g
 export type { PlacementPresentationDocument, PlacementPresentationReference } from './types/core.generated.mjs';
 export { PlacementPresentationDocumentSchema, PlacementPresentationReferenceSchema } from './types/schemas.generated.mjs';
 export type { Error as TaskErrorDetail } from './types/core.generated.mjs';
-export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery } from './types/error-codes.mjs';
+export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery, DEFAULT_UNKNOWN_ERROR_RECOVERY, } from './types/error-codes.mjs';
 export type { StandardErrorCode, ErrorRecovery } from './types/error-codes.mjs';
 export { adcpError, legacyCapabilitiesResponse, legacyProductsResponse, legacyMediaBuyResponse, legacyDeliveryResponse, legacyListAccountsResponse, legacyListCreativeFormatsResponse, legacyUpdateMediaBuyResponse, legacyGetMediaBuysResponse, legacyPerformanceFeedbackResponse, legacyBuildCreativeResponse, legacyBuildCreativeMultiResponse, legacyPreviewCreativeResponse, legacyCreativeDeliveryResponse, legacyListCreativesResponse, legacyListPropertyListsResponse, legacyListCollectionListsResponse, legacyListContentStandardsResponse, legacyGetPlanAuditLogsResponse, legacySyncCreativesResponse, legacyGetSignalsResponse, legacyActivateSignalResponse, legacyCancelMediaBuyResponse, legacyAcquireRightsResponse, legacyAcquireRightsAcquired, legacyAcquireRightsPendingApproval, legacyAcquireRightsRejected, legacySyncAccountsResponse, legacySyncGovernanceResponse, legacyReportUsageResponse, validActionsForStatus, MEDIA_BUY_TRANSITIONS, CREATIVE_ASSET_TRANSITIONS, isLegalMediaBuyTransition, isLegalCreativeTransition, assertMediaBuyTransition, assertCreativeTransition, getAccountMode, isSandboxOrMockAccount, assertSandboxAccount, taskToolResponse, registerAdcpTaskTool, createTaskCapableServer, InMemoryTaskStore, isTerminal, serve, taskScopeFromPrincipal, UnknownHostError, hostname, resolveHost, verifyIntrospection, registerTestController, handleTestControllerRequest, TestControllerError, toMcpResponse, TOOL_INPUT_SHAPE, CONTROLLER_SCENARIOS, DISCOVERY_ARM_SCENARIOS, SEED_SCENARIOS, SESSION_ENTRY_CAP, enforceMapCap, createSeedFixtureCache, PostgresTaskStore, cleanupExpiredTasks, getMcpTasksMigration, MCP_TASKS_MIGRATION, ADCP_PRE_TRANSPORT, checkGovernance, governanceDeniedError, DEFAULT_REPORTING_CAPABILITIES, InMemoryStateStore, PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION, StateError, PatchConflictError, SESSION_KEY_FIELD, createSessionedStore, scopedStore, patchWithRetry, isPutIfMatchConflict, requireSessionKey, structuredSerialize, structuredDeserialize, createIdempotencyStore, memoryBackend, pgBackend, getIdempotencyMigration, IDEMPOTENCY_MIGRATION, cleanupExpiredIdempotency, redisBackend, createLazyBackend, hashPayload, IdempotencyClaimOwnershipError, getServeRequestContext, ADCP_SERVE_REQUEST_CONTEXT, createA2AAdapter, A2AInvocationError, MCP_APP_RESOURCE_MIME_TYPE, ADCP_MIRRORED_STRUCTURED_CONTENT_META_KEY, } from './server/index.mjs';
 export type { AdcpErrorOptions, AdcpErrorResponse, McpToolResponse, ValidAction, CancelMediaBuyInput, AdcpTaskToolConfig, TaskStore, TaskMessageQueue, CreateTaskOptions, ToolTaskHandler, CreateTaskRequestHandlerExtra, TaskRequestHandlerExtra, CreateTaskResult, GetTaskResult, Task, ServeContext, ServeOptions, PgQueryable, PostgresTaskStoreOptions, TestControllerStore, TestControllerStoreFactory, TestControllerStoreOrFactory, ControllerScenario, SeedScenario, SeedFixtureCache, SessionContext, OnInstructionsError, MaybePromise, LegacyAdcpServerConfig, LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, LegacyAdcpCustomToolConfig, LegacyAdcpCustomToolHandler, LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermissions, McpAppResourceUiMeta, McpAppResourceMeta, McpAppResourceReadContext, AdcpLogger, LegacyHandlerContext, LegacyMediaBuyHandlers, LegacySignalsHandlers, LegacyCreativeHandlers, LegacyGovernanceHandlers, LegacyAccountHandlers, LegacyEventTrackingHandlers, LegacySponsoredIntelligenceHandlers, SignedRequestsConfig, AdcpPreTransport, AdcpServer, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, StructuredContentFallbackTransport, StructuredContentTextFallback, StructuredContentTextFallbackContext, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, AdcpStateStore, ListOptions as StateListOptions, ListResult as StateListResult, PostgresStateStoreOptions, InMemoryStateStoreOptions, VersionedDocument, PutIfMatchResult, PatchWithRetryOptions, StateErrorCode, SessionKeyContext, IdempotencyStore, IdempotencyStoreConfig, IdempotencyBackend, IdempotencyCacheEntry, IdempotencyCheckResult, MemoryBackendOptions, PgBackendOptions, RedisBackendOptions, RedisBackendClient, RedisLikeClient, LazyBackendFactory, LazyBackendOptions, A2AAdapter, A2AAdapterOptions, A2AAgentCardOverrides, A2AAgentCapabilitiesOverride, A2AAgentSkillOverride, A2AMountOptions, ExpressAppLike, LegacyHttpSecurityScheme, LegacySecurityScheme, AccountMode, RequireCacheScopeWhenProducts, ServerPayload, GetProductsPayload, CreateMediaBuyPayload, UpdateMediaBuyPayload, GetMediaBuysPayload, GetMediaBuyDeliveryPayload, ListCreativesPayload, GetCreativeDeliveryPayload, CanonicalPreviewCreativePayload, PreviewCreativePayload, LegacyGetProductsPayload, LegacyCreateMediaBuyPayload, LegacyUpdateMediaBuyPayload, LegacyGetMediaBuysPayload, LegacyGetMediaBuyDeliveryPayload, LegacyListCreativesPayload, LegacyGetCreativeDeliveryPayload, LegacyListCreativeFormatsPayload, LegacyListCreativeFormatsResponsePayload, LegacyListCreativeFormatsServerPayload, LegacyBuildCreativePayload, LegacyBuildCreativeMultiPayload, LegacyBuildCreativeVariantPayload, LegacyPreviewCreativePayload, SyncCreativesPayload, SyncCreativesSuccessPayload, SyncCreativesErrorPayload, } from './server/index.mjs';

package/dist/lib/index.d.ts

@@ -165,7 +165,7 @@ export { BrandJsonSchema, AdagentsJsonSchema } from './types/wellknown-schemas.g
 export type { PlacementPresentationDocument, PlacementPresentationReference } from './types/core.generated';
 export { PlacementPresentationDocumentSchema, PlacementPresentationReferenceSchema } from './types/schemas.generated';
 export type { Error as TaskErrorDetail } from './types/core.generated';
-export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery } from './types/error-codes';
+export { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery, DEFAULT_UNKNOWN_ERROR_RECOVERY, } from './types/error-codes';
 export type { StandardErrorCode, ErrorRecovery } from './types/error-codes';
 export { adcpError, legacyCapabilitiesResponse, legacyProductsResponse, legacyMediaBuyResponse, legacyDeliveryResponse, legacyListAccountsResponse, legacyListCreativeFormatsResponse, legacyUpdateMediaBuyResponse, legacyGetMediaBuysResponse, legacyPerformanceFeedbackResponse, legacyBuildCreativeResponse, legacyBuildCreativeMultiResponse, legacyPreviewCreativeResponse, legacyCreativeDeliveryResponse, legacyListCreativesResponse, legacyListPropertyListsResponse, legacyListCollectionListsResponse, legacyListContentStandardsResponse, legacyGetPlanAuditLogsResponse, legacySyncCreativesResponse, legacyGetSignalsResponse, legacyActivateSignalResponse, legacyCancelMediaBuyResponse, legacyAcquireRightsResponse, legacyAcquireRightsAcquired, legacyAcquireRightsPendingApproval, legacyAcquireRightsRejected, legacySyncAccountsResponse, legacySyncGovernanceResponse, legacyReportUsageResponse, validActionsForStatus, MEDIA_BUY_TRANSITIONS, CREATIVE_ASSET_TRANSITIONS, isLegalMediaBuyTransition, isLegalCreativeTransition, assertMediaBuyTransition, assertCreativeTransition, getAccountMode, isSandboxOrMockAccount, assertSandboxAccount, taskToolResponse, registerAdcpTaskTool, createTaskCapableServer, InMemoryTaskStore, isTerminal, serve, taskScopeFromPrincipal, UnknownHostError, hostname, resolveHost, verifyIntrospection, registerTestController, handleTestControllerRequest, TestControllerError, toMcpResponse, TOOL_INPUT_SHAPE, CONTROLLER_SCENARIOS, DISCOVERY_ARM_SCENARIOS, SEED_SCENARIOS, SESSION_ENTRY_CAP, enforceMapCap, createSeedFixtureCache, PostgresTaskStore, cleanupExpiredTasks, getMcpTasksMigration, MCP_TASKS_MIGRATION, ADCP_PRE_TRANSPORT, checkGovernance, governanceDeniedError, DEFAULT_REPORTING_CAPABILITIES, InMemoryStateStore, PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION, StateError, PatchConflictError, SESSION_KEY_FIELD, createSessionedStore, scopedStore, patchWithRetry, isPutIfMatchConflict, requireSessionKey, structuredSerialize, structuredDeserialize, createIdempotencyStore, memoryBackend, pgBackend, getIdempotencyMigration, IDEMPOTENCY_MIGRATION, cleanupExpiredIdempotency, redisBackend, createLazyBackend, hashPayload, IdempotencyClaimOwnershipError, getServeRequestContext, ADCP_SERVE_REQUEST_CONTEXT, createA2AAdapter, A2AInvocationError, MCP_APP_RESOURCE_MIME_TYPE, ADCP_MIRRORED_STRUCTURED_CONTENT_META_KEY, } from './server';
 export type { AdcpErrorOptions, AdcpErrorResponse, McpToolResponse, ValidAction, CancelMediaBuyInput, AdcpTaskToolConfig, TaskStore, TaskMessageQueue, CreateTaskOptions, ToolTaskHandler, CreateTaskRequestHandlerExtra, TaskRequestHandlerExtra, CreateTaskResult, GetTaskResult, Task, ServeContext, ServeOptions, PgQueryable, PostgresTaskStoreOptions, TestControllerStore, TestControllerStoreFactory, TestControllerStoreOrFactory, ControllerScenario, SeedScenario, SeedFixtureCache, SessionContext, OnInstructionsError, MaybePromise, LegacyAdcpServerConfig, LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, LegacyAdcpCustomToolConfig, LegacyAdcpCustomToolHandler, LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermissions, McpAppResourceUiMeta, McpAppResourceMeta, McpAppResourceReadContext, AdcpLogger, LegacyHandlerContext, LegacyMediaBuyHandlers, LegacySignalsHandlers, LegacyCreativeHandlers, LegacyGovernanceHandlers, LegacyAccountHandlers, LegacyEventTrackingHandlers, LegacySponsoredIntelligenceHandlers, SignedRequestsConfig, AdcpPreTransport, AdcpServer, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, StructuredContentFallbackTransport, StructuredContentTextFallback, StructuredContentTextFallbackContext, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, AdcpStateStore, ListOptions as StateListOptions, ListResult as StateListResult, PostgresStateStoreOptions, InMemoryStateStoreOptions, VersionedDocument, PutIfMatchResult, PatchWithRetryOptions, StateErrorCode, SessionKeyContext, IdempotencyStore, IdempotencyStoreConfig, IdempotencyBackend, IdempotencyCacheEntry, IdempotencyCheckResult, MemoryBackendOptions, PgBackendOptions, RedisBackendOptions, RedisBackendClient, RedisLikeClient, LazyBackendFactory, LazyBackendOptions, A2AAdapter, A2AAdapterOptions, A2AAgentCardOverrides, A2AAgentCapabilitiesOverride, A2AAgentSkillOverride, A2AMountOptions, ExpressAppLike, LegacyHttpSecurityScheme, LegacySecurityScheme, AccountMode, RequireCacheScopeWhenProducts, ServerPayload, GetProductsPayload, CreateMediaBuyPayload, UpdateMediaBuyPayload, GetMediaBuysPayload, GetMediaBuyDeliveryPayload, ListCreativesPayload, GetCreativeDeliveryPayload, CanonicalPreviewCreativePayload, PreviewCreativePayload, LegacyGetProductsPayload, LegacyCreateMediaBuyPayload, LegacyUpdateMediaBuyPayload, LegacyGetMediaBuysPayload, LegacyGetMediaBuyDeliveryPayload, LegacyListCreativesPayload, LegacyGetCreativeDeliveryPayload, LegacyListCreativeFormatsPayload, LegacyListCreativeFormatsResponsePayload, LegacyListCreativeFormatsServerPayload, LegacyBuildCreativePayload, LegacyBuildCreativeMultiPayload, LegacyBuildCreativeVariantPayload, LegacyPreviewCreativePayload, SyncCreativesPayload, SyncCreativesSuccessPayload, SyncCreativesErrorPayload, } from './server';

package/dist/lib/index.js

@@ -79,6 +79,7 @@ __export(index_exports, {
   DEFAULT_MAX_SSE_FRAME_BYTES: () => import_registry2.DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES: () => import_server.DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY: () => import_substitution.DEFAULT_SSRF_POLICY,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY: () => import_error_codes.DEFAULT_UNKNOWN_ERROR_RECOVERY,
   DISCOVERY_ARM_SCENARIOS: () => import_server.DISCOVERY_ARM_SCENARIOS,
   DeferredSettlementOwnershipError: () => import_TaskExecutor.DeferredSettlementOwnershipError,
   DeferredTaskError: () => import_errors.DeferredTaskError,
@@ -928,6 +929,7 @@ function createAdCPClientFromEnv() {
   DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY,
   DISCOVERY_ARM_SCENARIOS,
   DeferredSettlementOwnershipError,
   DeferredTaskError,

package/dist/lib/index.mjs

@@ -295,7 +295,12 @@ export * from "./reporting/index.mjs";
 export * from "./types/index.mjs";
 import { BrandJsonSchema, AdagentsJsonSchema } from "./types/wellknown-schemas.generated.mjs";
 import { PlacementPresentationDocumentSchema, PlacementPresentationReferenceSchema } from "./types/schemas.generated.mjs";
-import { STANDARD_ERROR_CODES, isStandardErrorCode, getErrorRecovery } from "./types/error-codes.mjs";
+import {
+  STANDARD_ERROR_CODES,
+  isStandardErrorCode,
+  getErrorRecovery,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY
+} from "./types/error-codes.mjs";
 import {
   adcpError,
   legacyCapabilitiesResponse,
@@ -886,6 +891,7 @@ export {
   DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY,
+  DEFAULT_UNKNOWN_ERROR_RECOVERY,
   DISCOVERY_ARM_SCENARIOS,
   DeferredSettlementOwnershipError,
   DeferredTaskError,

package/dist/lib/reporting/consumer-runtime.js

@@ -23,6 +23,7 @@ __export(consumer_runtime_exports, {
 });
 module.exports = __toCommonJS(consumer_runtime_exports);
 var import_jcs = require('../utils/jcs.js');
+var import_pagination = require('./pagination.js');
 var import_reconciliation = require('./reconciliation.js');
 const DEFAULT_POLL_INTERVAL_MS = 6e4;
 const DEFAULT_LEASE_MS = 3e4;
@@ -59,7 +60,7 @@ async function drainReportingChanges(options, stopAfterChangeDetected) {
           ...options.request,
           view: "periods",
           changes_after: options.changesAfter,
-          ...cursor ? { pagination: { cursor } } : {}
+          pagination: { max_results: (0, import_pagination.reportingMaxPageSize)(), ...cursor ? { cursor } : {} }
         },
         { signal }
       ),

package/dist/lib/reporting/consumer-runtime.mjs

@@ -1,4 +1,5 @@
 import { canonicalJsonSha256 } from "../utils/jcs.mjs";
+import { reportingMaxPageSize } from "./pagination.mjs";
 import {
   ReportingReconciliationError,
   reconcileReporting
@@ -38,7 +39,7 @@ async function drainReportingChanges(options, stopAfterChangeDetected) {
           ...options.request,
           view: "periods",
           changes_after: options.changesAfter,
-          ...cursor ? { pagination: { cursor } } : {}
+          pagination: { max_results: reportingMaxPageSize(), ...cursor ? { cursor } : {} }
         },
         { signal }
       ),

package/dist/lib/reporting/ledger/handler.js

@@ -31,12 +31,13 @@ module.exports = __toCommonJS(handler_exports);
 var import_node_crypto = require("node:crypto");
 var import_version = require('../../version.js');
 var import_async_outcome = require('../../server/decisioning/async-outcome.js');
+var import_schema_loader = require('../../validation/schema-loader.js');
 var import_source = require('../source/index.js');
 var import_coverage = require('./coverage.js');
 var import_health = require('./health.js');
 var import_instant = require('./instant.js');
 var import_revision_metadata = require('./revision-metadata.js');
-var import_row_storage = require('./row-storage.js');
+var import_row_storage_errors = require('./row-storage-errors.js');
 var import_schedule = require('./schedule.js');
 var import_types = require('./types.js');
 function createReportingStatusHandler(store, options) {
@@ -48,6 +49,7 @@ function createReportingStatusHandler(store, options) {
     )
   );
   const activeReadsByAccount = /* @__PURE__ */ new Map();
+  reportingPageBounds();
   return async (request, context) => {
     const raw = request;
     const resolvedAccount = isRecord(context.account) ? context.account : {};
@@ -81,9 +83,7 @@ function createReportingStatusHandler(store, options) {
         ...typeof raw.changes_after === "string" ? { changes_after: raw.changes_after } : {},
         ...isRecord(raw.period) ? { period: raw.period } : {}
       };
-      const pagination = isRecord(raw.pagination) ? raw.pagination : {};
-      const limitValue = pagination.max_results ?? pagination.limit ?? 100;
-      const limit = typeof limitValue === "number" && Number.isFinite(limitValue) ? Math.max(1, Math.min(500, Math.trunc(limitValue))) : 100;
+      const { pageSize: limit, pagination } = reportingPagination(raw.pagination);
       const cursor = typeof pagination.cursor === "string" ? pagination.cursor : void 0;
       let snapshotId;
       if (cursor) {
@@ -99,7 +99,7 @@ function createReportingStatusHandler(store, options) {
         try {
           snapshot = await store.createSnapshot(query);
         } catch (error) {
-          if (error instanceof import_types.ReportingLedgerSnapshotUnavailableError || error instanceof ReportingReadCapacityError) {
+          if ((0, import_types.isReportingLedgerErrorNamed)(error, "ReportingLedgerSnapshotUnavailableError") || error instanceof ReportingReadCapacityError) {
             return lookupUnavailable(view);
           }
           if (isContinuityError(error)) return operationalUnavailable(view);
@@ -111,7 +111,7 @@ function createReportingStatusHandler(store, options) {
         try {
           page = await store.readSnapshotPage(snapshotId ?? snapshot.snapshotId, accountId, cursor, limit);
         } catch (error) {
-          if (error instanceof import_types.ReportingLedgerSnapshotUnavailableError || error instanceof ReportingReadCapacityError) {
+          if ((0, import_types.isReportingLedgerErrorNamed)(error, "ReportingLedgerSnapshotUnavailableError") || error instanceof ReportingReadCapacityError) {
             return lookupUnavailable(view);
           }
           if (isContinuityError(error)) return operationalUnavailable(view);
@@ -275,7 +275,7 @@ function createReportingStatusHandler(store, options) {
               else revisionRows = page2.rows;
             }
           } catch (error) {
-            if (error instanceof ReportingReadCapacityError || (0, import_row_storage.isReportingRowStoreError)(error)) {
+            if (error instanceof ReportingReadCapacityError || (0, import_row_storage_errors.isReportingRowStoreError)(error)) {
               return lookupUnavailable(view);
             }
             throw error;
@@ -412,7 +412,7 @@ function createReportingStatusHandler(store, options) {
         issues: issues.map(wireIssue)
       };
     } catch (error) {
-      if (error instanceof import_health.ReportingLedgerIssueIntegrityError) return operationalUnavailable(view);
+      if ((0, import_types.isReportingLedgerErrorNamed)(error, "ReportingLedgerIssueIntegrityError")) return operationalUnavailable(view);
       throw error;
     } finally {
       releaseReadSlot();
@@ -420,6 +420,45 @@ function createReportingStatusHandler(store, options) {
   };
 }
 const REPORTING_STATUS_REVISION_VIEW_MAX_ROWS = 1e4;
+let pageBounds;
+function reportingPageBounds() {
+  if (pageBounds) return pageBounds;
+  const document = (0, import_schema_loader.getSchemaDocumentByRef)("core/pagination-request.json");
+  const field = document?.schema.properties?.max_results;
+  const { minimum, maximum, default: initial } = field ?? {};
+  if (!Number.isSafeInteger(minimum) || !Number.isSafeInteger(maximum) || !Number.isSafeInteger(initial) || minimum < 1 || maximum < minimum || initial < minimum || initial > maximum) {
+    throw new Error("The AdCP pagination-request schema does not define bounds for max_results");
+  }
+  pageBounds = Object.freeze({
+    minimum,
+    maximum,
+    default: initial
+  });
+  return pageBounds;
+}
+function reportingPagination(value) {
+  const bounds = reportingPageBounds();
+  if (value !== void 0 && !isRecord(value)) {
+    throw new import_async_outcome.AdcpError("VALIDATION_ERROR", { message: "pagination must be an object", field: "pagination" });
+  }
+  const pagination = value ?? {};
+  if (pagination.cursor !== void 0 && typeof pagination.cursor !== "string") {
+    throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+      message: "pagination.cursor must be a string",
+      field: "pagination.cursor"
+    });
+  }
+  const size = pagination.max_results;
+  if (size === void 0) return { pageSize: bounds.default, pagination };
+  if (typeof size !== "number" || !Number.isInteger(size) || size < bounds.minimum || size > bounds.maximum) {
+    throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+      message: `pagination.max_results must be an integer from ${bounds.minimum} to ${bounds.maximum}`,
+      field: "pagination.max_results",
+      suggestion: `Send an integer from ${bounds.minimum} to ${bounds.maximum}, or omit it for the default of ${bounds.default}.`
+    });
+  }
+  return { pageSize: size, pagination };
+}
 function reportingRevisionNotFound() {
   return new import_async_outcome.AdcpError("REFERENCE_NOT_FOUND", {
     message: "Reporting revision is unavailable",
@@ -432,6 +471,7 @@ function createReportingDeliveryHandler(store, options = {}) {
   if (legacyRevisionReader !== void 0 && typeof legacyRevisionReader !== "function") {
     throw new TypeError("legacyRevisionReader must be a function");
   }
+  reportingPageBounds();
   const activeReadsByAccount = /* @__PURE__ */ new Map();
   const readFromSdkLedger = async (request, context) => {
     const accountId = resolvedAccountId(context.account);
@@ -454,12 +494,11 @@ function createReportingDeliveryHandler(store, options = {}) {
           field: "reporting_revision_id"
         });
       }
+      const { pageSize: maxResults, pagination } = reportingPagination(raw.pagination);
       const revision = await (0, import_revision_metadata.getRevisionMetadataFromStore)(store, raw.reporting_revision_id, accountId);
       if (!revision) return SDK_REVISION_NOT_OWNED;
       const obligation = await store.getObligation(revision.reporting_obligation_id);
       if (!obligation || obligation.account.account_id !== accountId) return SDK_REVISION_NOT_OWNED;
-      const pagination = isRecord(raw.pagination) ? raw.pagination : {};
-      const maxResults = typeof pagination.max_results === "number" && Number.isFinite(pagination.max_results) ? Math.max(1, Math.min(500, Math.trunc(pagination.max_results))) : 100;
       const totalCount = revision.binding.rowCount;
       let offset = 0;
       if (typeof pagination.cursor === "string") {
@@ -485,7 +524,7 @@ function createReportingDeliveryHandler(store, options = {}) {
             ...context.signal ? { signal: context.signal } : {}
           });
         } catch (error) {
-          if ((0, import_row_storage.isReportingRowStoreError)(error)) {
+          if ((0, import_row_storage_errors.isReportingRowStoreError)(error)) {
             if (error.code === "ROWS_EXPIRED") throw reportingRevisionNotFound();
             throw new import_async_outcome.AdcpError("SERVICE_UNAVAILABLE", {
               message: "Reporting revision rows are temporarily unavailable"

package/dist/lib/reporting/ledger/handler.mjs

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { ADCP_MAJOR_VERSION, ADCP_VERSION, toReleasePrecisionVersion } from "../../version.mjs";
 import { AdcpError } from "../../server/decisioning/async-outcome.mjs";
+import { getSchemaDocumentByRef } from "../../validation/schema-loader.mjs";
 import { canonicalJsonV1 } from "../source/index.mjs";
 import {
   evaluateReportingLedgerCoverageV1,
@@ -16,14 +17,13 @@ import {
   reportingEffectiveConsumerMismatchEscalationV1,
   projectReportingConsumerStatusMismatchV1,
   projectReportingObligationHealthV1,
-  projectReportingUnreadableRevisionHealthV1,
-  ReportingLedgerIssueIntegrityError
+  projectReportingUnreadableRevisionHealthV1
 } from "./health.mjs";
 import { compareReportingInstants } from "./instant.mjs";
 import { getRevisionMetadataFromStore, readRevisionRowsFromStore } from "./revision-metadata.mjs";
-import { isReportingRowStoreError } from "./row-storage.mjs";
+import { isReportingRowStoreError } from "./row-storage-errors.mjs";
 import { reportingPeriodSchedule } from "./schedule.mjs";
-import { ReportingLedgerSnapshotUnavailableError } from "./types.mjs";
+import { isReportingLedgerErrorNamed } from "./types.mjs";
 function createReportingStatusHandler(store, options) {
   const consumerMismatchEscalation = assertReportingConsumerMismatchEscalation(
     reportingEffectiveConsumerMismatchEscalationV1(
@@ -33,6 +33,7 @@ function createReportingStatusHandler(store, options) {
     )
   );
   const activeReadsByAccount = /* @__PURE__ */ new Map();
+  reportingPageBounds();
   return async (request, context) => {
     const raw = request;
     const resolvedAccount = isRecord(context.account) ? context.account : {};
@@ -66,9 +67,7 @@ function createReportingStatusHandler(store, options) {
         ...typeof raw.changes_after === "string" ? { changes_after: raw.changes_after } : {},
         ...isRecord(raw.period) ? { period: raw.period } : {}
       };
-      const pagination = isRecord(raw.pagination) ? raw.pagination : {};
-      const limitValue = pagination.max_results ?? pagination.limit ?? 100;
-      const limit = typeof limitValue === "number" && Number.isFinite(limitValue) ? Math.max(1, Math.min(500, Math.trunc(limitValue))) : 100;
+      const { pageSize: limit, pagination } = reportingPagination(raw.pagination);
       const cursor = typeof pagination.cursor === "string" ? pagination.cursor : void 0;
       let snapshotId;
       if (cursor) {
@@ -84,7 +83,7 @@ function createReportingStatusHandler(store, options) {
         try {
           snapshot = await store.createSnapshot(query);
         } catch (error) {
-          if (error instanceof ReportingLedgerSnapshotUnavailableError || error instanceof ReportingReadCapacityError) {
+          if (isReportingLedgerErrorNamed(error, "ReportingLedgerSnapshotUnavailableError") || error instanceof ReportingReadCapacityError) {
             return lookupUnavailable(view);
           }
           if (isContinuityError(error)) return operationalUnavailable(view);
@@ -96,7 +95,7 @@ function createReportingStatusHandler(store, options) {
         try {
           page = await store.readSnapshotPage(snapshotId ?? snapshot.snapshotId, accountId, cursor, limit);
         } catch (error) {
-          if (error instanceof ReportingLedgerSnapshotUnavailableError || error instanceof ReportingReadCapacityError) {
+          if (isReportingLedgerErrorNamed(error, "ReportingLedgerSnapshotUnavailableError") || error instanceof ReportingReadCapacityError) {
             return lookupUnavailable(view);
           }
           if (isContinuityError(error)) return operationalUnavailable(view);
@@ -397,7 +396,7 @@ function createReportingStatusHandler(store, options) {
         issues: issues.map(wireIssue)
       };
     } catch (error) {
-      if (error instanceof ReportingLedgerIssueIntegrityError) return operationalUnavailable(view);
+      if (isReportingLedgerErrorNamed(error, "ReportingLedgerIssueIntegrityError")) return operationalUnavailable(view);
       throw error;
     } finally {
       releaseReadSlot();
@@ -405,6 +404,45 @@ function createReportingStatusHandler(store, options) {
   };
 }
 const REPORTING_STATUS_REVISION_VIEW_MAX_ROWS = 1e4;
+let pageBounds;
+function reportingPageBounds() {
+  if (pageBounds) return pageBounds;
+  const document = getSchemaDocumentByRef("core/pagination-request.json");
+  const field = document?.schema.properties?.max_results;
+  const { minimum, maximum, default: initial } = field ?? {};
+  if (!Number.isSafeInteger(minimum) || !Number.isSafeInteger(maximum) || !Number.isSafeInteger(initial) || minimum < 1 || maximum < minimum || initial < minimum || initial > maximum) {
+    throw new Error("The AdCP pagination-request schema does not define bounds for max_results");
+  }
+  pageBounds = Object.freeze({
+    minimum,
+    maximum,
+    default: initial
+  });
+  return pageBounds;
+}
+function reportingPagination(value) {
+  const bounds = reportingPageBounds();
+  if (value !== void 0 && !isRecord(value)) {
+    throw new AdcpError("VALIDATION_ERROR", { message: "pagination must be an object", field: "pagination" });
+  }
+  const pagination = value ?? {};
+  if (pagination.cursor !== void 0 && typeof pagination.cursor !== "string") {
+    throw new AdcpError("VALIDATION_ERROR", {
+      message: "pagination.cursor must be a string",
+      field: "pagination.cursor"
+    });
+  }
+  const size = pagination.max_results;
+  if (size === void 0) return { pageSize: bounds.default, pagination };
+  if (typeof size !== "number" || !Number.isInteger(size) || size < bounds.minimum || size > bounds.maximum) {
+    throw new AdcpError("VALIDATION_ERROR", {
+      message: `pagination.max_results must be an integer from ${bounds.minimum} to ${bounds.maximum}`,
+      field: "pagination.max_results",
+      suggestion: `Send an integer from ${bounds.minimum} to ${bounds.maximum}, or omit it for the default of ${bounds.default}.`
+    });
+  }
+  return { pageSize: size, pagination };
+}
 function reportingRevisionNotFound() {
   return new AdcpError("REFERENCE_NOT_FOUND", {
     message: "Reporting revision is unavailable",
@@ -417,6 +455,7 @@ function createReportingDeliveryHandler(store, options = {}) {
   if (legacyRevisionReader !== void 0 && typeof legacyRevisionReader !== "function") {
     throw new TypeError("legacyRevisionReader must be a function");
   }
+  reportingPageBounds();
   const activeReadsByAccount = /* @__PURE__ */ new Map();
   const readFromSdkLedger = async (request, context) => {
     const accountId = resolvedAccountId(context.account);
@@ -439,12 +478,11 @@ function createReportingDeliveryHandler(store, options = {}) {
           field: "reporting_revision_id"
         });
       }
+      const { pageSize: maxResults, pagination } = reportingPagination(raw.pagination);
       const revision = await getRevisionMetadataFromStore(store, raw.reporting_revision_id, accountId);
       if (!revision) return SDK_REVISION_NOT_OWNED;
       const obligation = await store.getObligation(revision.reporting_obligation_id);
       if (!obligation || obligation.account.account_id !== accountId) return SDK_REVISION_NOT_OWNED;
-      const pagination = isRecord(raw.pagination) ? raw.pagination : {};
-      const maxResults = typeof pagination.max_results === "number" && Number.isFinite(pagination.max_results) ? Math.max(1, Math.min(500, Math.trunc(pagination.max_results))) : 100;
       const totalCount = revision.binding.rowCount;
       let offset = 0;
       if (typeof pagination.cursor === "string") {