@adcp/sdk 16.0.0-beta.6 → 16.0.0-beta.8

package/dist/lib/server/auth.mjs

@@ -208,7 +208,13 @@ function respondUnauthorized(_req, res, options = {}) {
   if (options.errorDescription) parts.push(`error_description="${escapeQuotes(options.errorDescription)}"`);
   if (options.resourceMetadata) parts.push(`resource_metadata="${escapeQuotes(options.resourceMetadata)}"`);
   const scheme = useSignatureChallenge ? "Signature" : "Bearer";
+  const extra = Object.fromEntries(
+    Object.entries(options.headers ?? {}).filter(
+      ([name]) => !["content-type", "www-authenticate"].includes(name.toLowerCase())
+    )
+  );
   res.writeHead(options.status ?? 401, {
+    ...extra,
     "Content-Type": "application/json",
     "WWW-Authenticate": `${scheme} ${parts.join(", ")}`
   });

package/dist/lib/server/create-adcp-server.js

@@ -1438,6 +1438,8 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
       "Web Bot Auth requires origin revocation: use createIdentity33PrincipalResolver({ revocation }) or supply isRevoked"
     );
   const requiredFor = effectiveRequestSigning.required_for ?? [];
+  const advertisedProfiles = effectiveRequestSigning.profiles;
+  const webBotAuthAdvertised = !!signedRequests.webBotAuth && !!advertisedProfiles?.includes("web-bot-auth");
   const verifier = (0, import_middleware.createExpressVerifier)({
     capability: {
       supported: true,
@@ -1543,6 +1545,19 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
             res.setHeader(k, v);
             return {
               json(body) {
+                if (webBotAuthAdvertised && code === 401 && body?.error === "request_signature_required") {
+                  const hasBody = !!req.rawBody;
+                  if ((0, import_web_bot_auth2.advertisesOnlyWebBotAuth)(advertisedProfiles)) {
+                    const refused = (0, import_web_bot_auth2.unsignedWebBotAuthError)(hasBody);
+                    res.removeHeader("WWW-Authenticate");
+                    res.statusCode = refused.status;
+                    for (const [name, value] of Object.entries(refused.headers)) res.setHeader(name, value);
+                    res.setHeader("Content-Type", "application/json");
+                    res.end(JSON.stringify(refused.body));
+                    return;
+                  }
+                  res.setHeader("Accept-Signature", (0, import_web_bot_auth2.webBotAuthAcceptSignature)("sig1", hasBody));
+                }
                 res.setHeader("Content-Type", "application/json");
                 res.end(JSON.stringify(body));
               }
@@ -2127,6 +2142,7 @@ function createAdcpServer(config) {
     throw new Error("Select Web Bot Auth on each trusted webhook registration, not as a server-wide default");
   if (config.webhooks?.webBotAuth && !config.identity33)
     throw new Error("Web Bot Auth webhook signing requires the identity33 experiment");
+  if (config.webhooks?.webBotAuth?.key) (0, import_web_bot_auth.assertWebBotAuthSigningKey)(config.webhooks.webBotAuth.key);
   const toolsWithErrorArm = (0, import_error_arm_tools.getToolsWithErrorArm)(adcpVersion);
   const isProduction = process.env.NODE_ENV === "production";
   const requestValidationMode = validationConfig?.requests ?? (isProduction ? "off" : "strict");
@@ -4558,9 +4574,9 @@ function createAdcpServer(config) {
       algorithms: [
         .../* @__PURE__ */ new Set([
           algorithm,
-          ...webhooks.webBotAuth ? [
-            ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "P-256" ? "ecdsa-p256-sha256" : "ed25519"
-          ] : []
+          // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
+          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],
       ...webhooks.webBotAuth && { profiles: ["adcp/webhook-signing/v1", "web-bot-auth"] },

package/dist/lib/server/create-adcp-server.mjs

@@ -1,4 +1,4 @@
-import { getWebBotAuthLegacyOriginGate } from "../signing/web-bot-auth.mjs";
+import { assertWebBotAuthSigningKey, getWebBotAuthLegacyOriginGate } from "../signing/web-bot-auth.mjs";
 import {
   isIdentity33SchemaScope,
   withIdentity33SchemaScope,
@@ -12,6 +12,9 @@ import {
   webBotAuthToolFailure,
   selectSignatureProfile,
   verifyWebBotAuth,
+  advertisesOnlyWebBotAuth,
+  unsignedWebBotAuthError,
+  webBotAuthAcceptSignature,
   isWebBotAuthRevocationChecked,
   webBotAuthUnavailableResponse,
   WebBotAuthUnavailableError,
@@ -1526,6 +1529,8 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
       "Web Bot Auth requires origin revocation: use createIdentity33PrincipalResolver({ revocation }) or supply isRevoked"
     );
   const requiredFor = effectiveRequestSigning.required_for ?? [];
+  const advertisedProfiles = effectiveRequestSigning.profiles;
+  const webBotAuthAdvertised = !!signedRequests.webBotAuth && !!advertisedProfiles?.includes("web-bot-auth");
   const verifier = createExpressVerifier({
     capability: {
       supported: true,
@@ -1631,6 +1636,19 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
             res.setHeader(k, v);
             return {
               json(body) {
+                if (webBotAuthAdvertised && code === 401 && body?.error === "request_signature_required") {
+                  const hasBody = !!req.rawBody;
+                  if (advertisesOnlyWebBotAuth(advertisedProfiles)) {
+                    const refused = unsignedWebBotAuthError(hasBody);
+                    res.removeHeader("WWW-Authenticate");
+                    res.statusCode = refused.status;
+                    for (const [name, value] of Object.entries(refused.headers)) res.setHeader(name, value);
+                    res.setHeader("Content-Type", "application/json");
+                    res.end(JSON.stringify(refused.body));
+                    return;
+                  }
+                  res.setHeader("Accept-Signature", webBotAuthAcceptSignature("sig1", hasBody));
+                }
                 res.setHeader("Content-Type", "application/json");
                 res.end(JSON.stringify(body));
               }
@@ -2215,6 +2233,7 @@ function createAdcpServer(config) {
     throw new Error("Select Web Bot Auth on each trusted webhook registration, not as a server-wide default");
   if (config.webhooks?.webBotAuth && !config.identity33)
     throw new Error("Web Bot Auth webhook signing requires the identity33 experiment");
+  if (config.webhooks?.webBotAuth?.key) assertWebBotAuthSigningKey(config.webhooks.webBotAuth.key);
   const toolsWithErrorArm = getToolsWithErrorArm(adcpVersion);
   const isProduction = process.env.NODE_ENV === "production";
   const requestValidationMode = validationConfig?.requests ?? (isProduction ? "off" : "strict");
@@ -4646,9 +4665,9 @@ function createAdcpServer(config) {
       algorithms: [
         .../* @__PURE__ */ new Set([
           algorithm,
-          ...webhooks.webBotAuth ? [
-            ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "P-256" ? "ecdsa-p256-sha256" : "ed25519"
-          ] : []
+          // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
+          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],
       ...webhooks.webBotAuth && { profiles: ["adcp/webhook-signing/v1", "web-bot-auth"] },

package/dist/lib/server/decisioning/runtime/from-platform.js

@@ -311,7 +311,10 @@ function projectResponseCreativeIdentities(value, operation, legacyFormatConvert
   let projected = dataRecord;
   if ((0, import_types2.isProjectionProductInput)(projected)) {
     if (wireMode === "canonical") {
-      const canonical = (0, import_augment_response.toCanonicalOnlyResponse)({ products: [projected] }, { legacyFormatConverter });
+      const canonical = (0, import_augment_response.toCanonicalOnlyResponse)(
+        { products: [projected] },
+        { legacyFormatConverter, _inferDualEmissionLegacyRefs: false }
+      );
       if (canonical.diagnostics.length > 0 || canonical.response.products.length !== 1) {
         throw new import_creative_delivery.CreativeFormatProjectionError(
           operation,
@@ -550,7 +553,8 @@ function asCanonicalProductResponse(response, legacyFormatConverter) {
   assertSafeGetProductsResponse(response);
   validateDualProductFormatDeclarations(response, legacyFormatConverter);
   const projected = (0, import_augment_response.toCanonicalOnlyResponse)(response, {
-    legacyFormatConverter
+    legacyFormatConverter,
+    _inferDualEmissionLegacyRefs: false
   });
   const blockingDiagnostics = projected.diagnostics.filter(
     (diagnostic) => diagnostic.code !== "LEGACY_FORMAT_ID_DROPPED_UNMAPPED"

package/dist/lib/server/decisioning/runtime/from-platform.mjs

@@ -343,7 +343,10 @@ function projectResponseCreativeIdentities(value, operation, legacyFormatConvert
   let projected = dataRecord;
   if (isProjectionProductInput(projected)) {
     if (wireMode === "canonical") {
-      const canonical = toCanonicalOnlyResponse({ products: [projected] }, { legacyFormatConverter });
+      const canonical = toCanonicalOnlyResponse(
+        { products: [projected] },
+        { legacyFormatConverter, _inferDualEmissionLegacyRefs: false }
+      );
       if (canonical.diagnostics.length > 0 || canonical.response.products.length !== 1) {
         throw new CreativeFormatProjectionError(
           operation,
@@ -582,7 +585,8 @@ function asCanonicalProductResponse(response, legacyFormatConverter) {
   assertSafeGetProductsResponse(response);
   validateDualProductFormatDeclarations(response, legacyFormatConverter);
   const projected = toCanonicalOnlyResponse(response, {
-    legacyFormatConverter
+    legacyFormatConverter,
+    _inferDualEmissionLegacyRefs: false
   });
   const blockingDiagnostics = projected.diagnostics.filter(
     (diagnostic) => diagnostic.code !== "LEGACY_FORMAT_ID_DROPPED_UNMAPPED"

package/dist/lib/server/decisioning/specialisms/lists.d.mts

@@ -21,7 +21,7 @@
  * one-time fetch token sellers store in their secret manager; `delete_*`
  * revokes the token. Tokens are scoped per-seller for revocation.
  *
- * Status: Preview / 6.0.
+ * For standalone list-token reads, use registerPropertyListTool from @adcp/sdk/server.
  *
  * @public
  */
@@ -42,19 +42,19 @@ export type ListCollectionListsPayload = ServerPayload<ListCollectionListsRespon
 export type DeleteCollectionListPayload = ServerPayload<DeleteCollectionListResponse>;
 export interface PropertyListsPlatform<TCtxMeta = Record<string, unknown>> {
     /**
-     * Create a property list. Returns a `fetch_token` the buyer stores in
+     * Create a property list. Returns an `auth_token` the buyer stores in
      * their secret manager. Token is scoped to this list_id; MUST NOT be
      * reused across lists.
      */
     createPropertyList(req: CreatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<CreatePropertyListPayload>;
     /** Patch an existing property list. */
     updatePropertyList(req: UpdatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<UpdatePropertyListPayload>;
-    /** Read a property list by id. Sellers call this with the fetch_token. */
+    /** Read a property list by id. Sellers call this with the auth_token. */
     getPropertyList(req: GetPropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<GetPropertyListPayload>;
     /** Discover property lists the caller is authorized to read. */
     listPropertyLists(req: ListPropertyListsRequest, ctx: Ctx<TCtxMeta>): Promise<ListPropertyListsPayload>;
     /**
-     * Delete a property list. MUST revoke the fetch_token immediately and
+     * Delete a property list. MUST revoke the auth_token immediately and
      * signal cache invalidation to sellers (reduced cache_valid_until or
      * a list-changed webhook). Compromise-driven revocation MUST also
      * trigger this path.

package/dist/lib/server/decisioning/specialisms/lists.d.ts

@@ -21,7 +21,7 @@
  * one-time fetch token sellers store in their secret manager; `delete_*`
  * revokes the token. Tokens are scoped per-seller for revocation.
  *
- * Status: Preview / 6.0.
+ * For standalone list-token reads, use registerPropertyListTool from @adcp/sdk/server.
  *
  * @public
  */
@@ -42,19 +42,19 @@ export type ListCollectionListsPayload = ServerPayload<ListCollectionListsRespon
 export type DeleteCollectionListPayload = ServerPayload<DeleteCollectionListResponse>;
 export interface PropertyListsPlatform<TCtxMeta = Record<string, unknown>> {
     /**
-     * Create a property list. Returns a `fetch_token` the buyer stores in
+     * Create a property list. Returns an `auth_token` the buyer stores in
      * their secret manager. Token is scoped to this list_id; MUST NOT be
      * reused across lists.
      */
     createPropertyList(req: CreatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<CreatePropertyListPayload>;
     /** Patch an existing property list. */
     updatePropertyList(req: UpdatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<UpdatePropertyListPayload>;
-    /** Read a property list by id. Sellers call this with the fetch_token. */
+    /** Read a property list by id. Sellers call this with the auth_token. */
     getPropertyList(req: GetPropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<GetPropertyListPayload>;
     /** Discover property lists the caller is authorized to read. */
     listPropertyLists(req: ListPropertyListsRequest, ctx: Ctx<TCtxMeta>): Promise<ListPropertyListsPayload>;
     /**
-     * Delete a property list. MUST revoke the fetch_token immediately and
+     * Delete a property list. MUST revoke the auth_token immediately and
      * signal cache invalidation to sellers (reduced cache_valid_until or
      * a list-changed webhook). Compromise-driven revocation MUST also
      * trigger this path.

package/dist/lib/server/index.d.mts

@@ -105,3 +105,6 @@ export { createDerivedAccountStore, type DerivedAccountStoreOptions, type Derive
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode/index.mjs';
 export { mediaBuyActionResolver } from './media-buy-action-resolver.mjs';
 export type { SellerActionDecision, SellerActionResolutionOptions, SellerActionResolution, } from './media-buy-action-resolver.mjs';
+export * from '../identifiers.mjs';
+export { registerPropertyListTool, sendPropertyListChanged } from './property-lists.mjs';
+export type { PropertyListPage, PropertyListToolOptions, PropertyListChangedNotification, SendPropertyListChangedOptions, } from './property-lists.mjs';

package/dist/lib/server/index.d.ts

@@ -105,3 +105,6 @@ export { createDerivedAccountStore, type DerivedAccountStoreOptions, type Derive
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode';
 export { mediaBuyActionResolver } from './media-buy-action-resolver';
 export type { SellerActionDecision, SellerActionResolutionOptions, SellerActionResolution, } from './media-buy-action-resolver';
+export * from '../identifiers';
+export { registerPropertyListTool, sendPropertyListChanged } from './property-lists';
+export type { PropertyListPage, PropertyListToolOptions, PropertyListChangedNotification, SendPropertyListChangedOptions, } from './property-lists';

package/dist/lib/server/index.js

@@ -254,6 +254,7 @@ __export(server_exports, {
   redisWebhookDeliveryRecoveryBackend: () => import_webhook_delivery.redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore: () => import_webhook_delivery.redisWebhookDeliveryStore,
   registerAdcpTaskTool: () => import_tasks.registerAdcpTaskTool,
+  registerPropertyListTool: () => import_property_lists.registerPropertyListTool,
   registerTestController: () => import_test_controller.registerTestController,
   replaceAccountFinancialsIfSeeded: () => import_test_controller_bridge.replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned: () => import_auth_signature.requireAuthenticatedOrSigned,
@@ -269,6 +270,7 @@ __export(server_exports, {
   scopeCtxMetadataKey: () => import_ctx_metadata.scopeCtxMetadataKey,
   scopedStore: () => import_state_store.scopedStore,
   scrubExtensions: () => import_wire_safe.scrubExtensions,
+  sendPropertyListChanged: () => import_property_lists.sendPropertyListChanged,
   serve: () => import_serve.serve,
   signatureErrorCodeFromCause: () => import_auth.signatureErrorCodeFromCause,
   stripCtxMetadata: () => import_ctx_metadata.stripCtxMetadata,
@@ -353,6 +355,8 @@ var import_keyed_account_backend = require('../adapters/keyed-account-backend.js
 var import_derived_account_store = require('../adapters/derived-account-store.js');
 var import_socket_mode = require('./socket-mode/index.js');
 var import_media_buy_action_resolver = require('./media-buy-action-resolver.js');
+__reExport(server_exports, require('../identifiers.js'), module.exports);
+var import_property_lists = require('./property-lists.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   A2AInvocationError,
@@ -590,6 +594,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,
+  registerPropertyListTool,
   registerTestController,
   replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned,
@@ -605,6 +610,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   scopeCtxMetadataKey,
   scopedStore,
   scrubExtensions,
+  sendPropertyListChanged,
   serve,
   signatureErrorCodeFromCause,
   stripCtxMetadata,
@@ -631,5 +637,6 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   verifyProposalTermsDigest,
   verifySignatureAsAuthenticator,
   wrapEnvelope,
-  ...require('./decisioning/index.js')
+  ...require('./decisioning/index.js'),
+  ...require('../identifiers.js')
 });

package/dist/lib/server/index.mjs

@@ -302,6 +302,8 @@ import {
   WebSocketTransport
 } from "./socket-mode/index.mjs";
 import { mediaBuyActionResolver } from "./media-buy-action-resolver.mjs";
+export * from "../identifiers.mjs";
+import { registerPropertyListTool, sendPropertyListChanged } from "./property-lists.mjs";
 export {
   A2AInvocationError,
   ACCOUNT_NOTIFICATION_TYPES,
@@ -538,6 +540,7 @@ export {
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,
+  registerPropertyListTool,
   registerTestController,
   replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned,
@@ -553,6 +556,7 @@ export {
   scopeCtxMetadataKey,
   scopedStore,
   scrubExtensions,
+  sendPropertyListChanged,
   serve,
   signatureErrorCodeFromCause,
   stripCtxMetadata,

package/dist/lib/server/property-lists.d.mts

@@ -0,0 +1,36 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { GetPropertyListRequest, GetPropertyListResponse } from '../types/tools.generated.mjs';
+import type { WebhookEmitter, WebhookEmitParams, WebhookEmitResult } from './webhook-emitter.mjs';
+export type PropertyListPage = Pick<GetPropertyListResponse, 'list' | 'identifiers' | 'pagination' | 'resolved_at' | 'cache_valid_until' | 'coverage_gaps'>;
+export interface PropertyListToolOptions<TPrincipal> {
+    /** Verify this token's access to this exact list on every request/page. Return null/false to deny access. */
+    verifyToken: (input: {
+        listId: string;
+        token: string;
+    }) => TPrincipal | null | false | Promise<TPrincipal | null | false>;
+    /** Load an authorized page. Honor resolve:false without resolving identifiers. Cursors must be bound to the list and principal. */
+    loadPage: (request: GetPropertyListRequest, principal: TPrincipal) => Promise<PropertyListPage>;
+}
+/**
+ * Register a read-only MCP tool using per-list tokens, independently of normal
+ * platform account credentials. Tokens arrive through Authorization: Bearer
+ * or x-adcp-auth, never tool arguments. Mount on an MCP endpoint whose HTTP
+ * auth layer permits list tokens through to this verifier.
+ */
+export declare function registerPropertyListTool<TPrincipal>(server: McpServer, options: PropertyListToolOptions<TPrincipal>): import("@modelcontextprotocol/sdk/server/mcp.js").RegisteredTool;
+export interface PropertyListChangedNotification {
+    list_id: string;
+    list_name?: string;
+    resolved_at: string;
+    cache_valid_until?: string;
+    change_summary?: {
+        properties_added?: number;
+        properties_removed?: number;
+        total_properties?: number;
+    };
+}
+export type SendPropertyListChangedOptions = Pick<WebhookEmitParams, 'url' | 'delivery_id' | 'retries' | 'attemptAuthorizationContext'> & {
+    notification: PropertyListChangedNotification;
+};
+/** Send a summary-only notification through the SDK's signed, retrying delivery kernel. Reuse delivery_id and notification for retries. */
+export declare function sendPropertyListChanged(emitter: WebhookEmitter, options: SendPropertyListChangedOptions): Promise<WebhookEmitResult>;

package/dist/lib/server/property-lists.d.ts

@@ -0,0 +1,36 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { GetPropertyListRequest, GetPropertyListResponse } from '../types/tools.generated';
+import type { WebhookEmitter, WebhookEmitParams, WebhookEmitResult } from './webhook-emitter';
+export type PropertyListPage = Pick<GetPropertyListResponse, 'list' | 'identifiers' | 'pagination' | 'resolved_at' | 'cache_valid_until' | 'coverage_gaps'>;
+export interface PropertyListToolOptions<TPrincipal> {
+    /** Verify this token's access to this exact list on every request/page. Return null/false to deny access. */
+    verifyToken: (input: {
+        listId: string;
+        token: string;
+    }) => TPrincipal | null | false | Promise<TPrincipal | null | false>;
+    /** Load an authorized page. Honor resolve:false without resolving identifiers. Cursors must be bound to the list and principal. */
+    loadPage: (request: GetPropertyListRequest, principal: TPrincipal) => Promise<PropertyListPage>;
+}
+/**
+ * Register a read-only MCP tool using per-list tokens, independently of normal
+ * platform account credentials. Tokens arrive through Authorization: Bearer
+ * or x-adcp-auth, never tool arguments. Mount on an MCP endpoint whose HTTP
+ * auth layer permits list tokens through to this verifier.
+ */
+export declare function registerPropertyListTool<TPrincipal>(server: McpServer, options: PropertyListToolOptions<TPrincipal>): import("@modelcontextprotocol/sdk/server/mcp.js").RegisteredTool;
+export interface PropertyListChangedNotification {
+    list_id: string;
+    list_name?: string;
+    resolved_at: string;
+    cache_valid_until?: string;
+    change_summary?: {
+        properties_added?: number;
+        properties_removed?: number;
+        total_properties?: number;
+    };
+}
+export type SendPropertyListChangedOptions = Pick<WebhookEmitParams, 'url' | 'delivery_id' | 'retries' | 'attemptAuthorizationContext'> & {
+    notification: PropertyListChangedNotification;
+};
+/** Send a summary-only notification through the SDK's signed, retrying delivery kernel. Reuse delivery_id and notification for retries. */
+export declare function sendPropertyListChanged(emitter: WebhookEmitter, options: SendPropertyListChangedOptions): Promise<WebhookEmitResult>;

package/dist/lib/server/property-lists.js

@@ -0,0 +1,154 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var property_lists_exports = {};
+__export(property_lists_exports, {
+  registerPropertyListTool: () => registerPropertyListTool,
+  sendPropertyListChanged: () => sendPropertyListChanged
+});
+module.exports = __toCommonJS(property_lists_exports);
+var import_zod = require("zod");
+var import_schemas = require('../types/schemas.generated.js');
+var import_wire_shape = require('./ctx-metadata/wire-shape.js');
+function registerPropertyListTool(server, options) {
+  return server.registerTool(
+    "get_property_list",
+    {
+      description: "Retrieve an authorized property list and a page of resolved identifiers.",
+      inputSchema: import_schemas.GetPropertyListRequestSchema,
+      annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true }
+    },
+    async (request, extra) => {
+      const denied = () => toolError("PERMISSION_DENIED", "Property list access denied.", request.context);
+      const headers = extra.requestInfo?.headers ?? {};
+      for (const name of ["authorization", "x-adcp-auth"]) {
+        const values = Object.entries(headers).filter(([key]) => key.toLowerCase() === name);
+        if (values.length > 1 || values.length === 1 && typeof values[0][1] !== "string") return denied();
+      }
+      const readHeader = (name) => {
+        const values = Object.entries(headers).filter(([key]) => key.toLowerCase() === name);
+        if (values.length !== 1 || typeof values[0][1] !== "string") return void 0;
+        return values[0][1];
+      };
+      const authorization = readHeader("authorization");
+      const bearer = authorization?.match(/^Bearer ([^\s]+)$/i)?.[1];
+      const adcpToken = readHeader("x-adcp-auth");
+      const authenticatedToken = extra.authInfo?.token;
+      const tokens = [bearer, adcpToken, authenticatedToken].filter((token) => token !== void 0);
+      if (!tokens.length || tokens.some((token) => !token || token !== tokens[0]) || authorization !== void 0 && !bearer)
+        return denied();
+      let principal;
+      try {
+        principal = await options.verifyToken({ listId: request.list_id, token: tokens[0] });
+      } catch {
+        return denied();
+      }
+      if (principal === null || principal === false || principal === void 0) return denied();
+      try {
+        const page = await options.loadPage(request, principal);
+        if (page.list.list_id !== request.list_id) throw new Error("Invalid list identity");
+        if (request.resolve !== false && !Array.isArray(page.identifiers))
+          throw new Error("Missing resolved identifiers");
+        const limit = request.pagination?.max_results ?? 1e3;
+        if (request.resolve !== false && (page.identifiers?.length ?? 0) > limit) throw new Error("Invalid page size");
+        if (page.pagination?.has_more && !page.pagination.cursor) throw new Error("Missing continuation cursor");
+        if (!page.pagination?.has_more && page.pagination?.cursor) throw new Error("Unexpected continuation cursor");
+        const payload = import_schemas.GetPropertyListResponseSchema.parse({
+          list: Object.fromEntries(
+            [
+              "list_id",
+              "name",
+              "description",
+              "account",
+              "base_properties",
+              "filters",
+              "brand",
+              "webhook_url",
+              "cache_duration_hours",
+              "created_at",
+              "updated_at",
+              "property_count",
+              "pricing_options"
+            ].filter((key) => Object.hasOwn(page.list, key)).map((key) => [key, page.list[key]])
+          ),
+          ...page.identifiers !== void 0 ? { identifiers: page.identifiers.map((identifier) => ({ type: identifier.type, value: identifier.value })) } : {},
+          ...page.pagination !== void 0 ? {
+            pagination: {
+              has_more: page.pagination.has_more,
+              cursor: page.pagination.cursor,
+              total_count: page.pagination.total_count
+            }
+          } : {},
+          ...page.resolved_at !== void 0 ? { resolved_at: page.resolved_at } : {},
+          ...page.cache_valid_until !== void 0 ? { cache_valid_until: page.cache_valid_until } : {},
+          ...page.coverage_gaps !== void 0 ? { coverage_gaps: page.coverage_gaps } : {},
+          status: "completed",
+          ...request.resolve === false ? { identifiers: void 0, pagination: void 0 } : {},
+          ...request.context ? { context: request.context } : {}
+        });
+        (0, import_wire_shape.stripCtxMetadata)({ property_list: payload.list });
+        return { content: [{ type: "text", text: JSON.stringify(payload) }], structuredContent: payload };
+      } catch {
+        return toolError("INTERNAL_ERROR", "Property list could not be loaded.", request.context);
+      }
+    }
+  );
+}
+function toolError(code, message, context) {
+  const payload = { status: "failed", errors: [{ code, message }], ...context !== void 0 ? { context } : {} };
+  return {
+    isError: true,
+    content: [{ type: "text", text: JSON.stringify(payload) }],
+    structuredContent: payload
+  };
+}
+async function sendPropertyListChanged(emitter, options) {
+  const { notification, ...delivery } = options;
+  const dateTime = import_zod.z.string().datetime({ offset: true });
+  if (!notification.list_id || !dateTime.safeParse(notification.resolved_at).success || notification.cache_valid_until !== void 0 && !dateTime.safeParse(notification.cache_valid_until).success) {
+    throw new TypeError("Property-list notifications require a list_id and valid timestamps");
+  }
+  const summary = notification.change_summary === void 0 ? void 0 : Object.fromEntries(
+    ["properties_added", "properties_removed", "total_properties"].filter(
+      (key) => Object.hasOwn(notification.change_summary, key) && notification.change_summary[key] !== void 0
+    ).map((key) => [key, notification.change_summary[key]])
+  );
+  for (const count of Object.values(summary ?? {})) {
+    if (typeof count !== "number" || !Number.isSafeInteger(count) || count < 0)
+      throw new TypeError("Property-list change counts must be nonnegative integers");
+  }
+  return emitter.emit({
+    ...delivery,
+    authentication: null,
+    signingProfile: "adcp/webhook-signing/v1",
+    payload: {
+      event: "property_list_changed",
+      list_id: notification.list_id,
+      resolved_at: notification.resolved_at,
+      ...notification.list_name !== void 0 ? { list_name: notification.list_name } : {},
+      ...notification.cache_valid_until !== void 0 ? { cache_valid_until: notification.cache_valid_until } : {},
+      ...summary !== void 0 ? { change_summary: summary } : {},
+      signature: "rfc9421"
+    }
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  registerPropertyListTool,
+  sendPropertyListChanged
+});