@adcp/sdk 16.0.0-beta.7 → 16.0.0-beta.9

package/dist/lib/signing/parser.js

@@ -86,10 +86,10 @@ function parseSignature(headerValue, expectedLabel, encoding = "legacy-base64url
   if (!rawBytes) malformed(`Signature header does not contain a byte sequence for label "${expectedLabel}"`);
   if (encoding === "rfc8941-base64") {
     if (!(0, import_content_digest.isPaddedStandardBase64)(rawBytes)) {
-      malformed("Signature value must use padded standard Base64 for AdCP 3.2+");
+      malformed("Signature value must use padded standard Base64 for the selected signing profile");
     }
   } else if (!/^[A-Za-z0-9_-]+$/.test(rawBytes)) {
-    malformed("Signature value must use unpadded Base64URL for AdCP 3.0/3.1");
+    malformed("Signature value must use unpadded Base64URL for the selected signing profile");
   }
   let dict;
   try {

package/dist/lib/signing/parser.mjs

@@ -60,10 +60,10 @@ function parseSignature(headerValue, expectedLabel, encoding = "legacy-base64url
   if (!rawBytes) malformed(`Signature header does not contain a byte sequence for label "${expectedLabel}"`);
   if (encoding === "rfc8941-base64") {
     if (!isPaddedStandardBase64(rawBytes)) {
-      malformed("Signature value must use padded standard Base64 for AdCP 3.2+");
+      malformed("Signature value must use padded standard Base64 for the selected signing profile");
     }
   } else if (!/^[A-Za-z0-9_-]+$/.test(rawBytes)) {
-    malformed("Signature value must use unpadded Base64URL for AdCP 3.0/3.1");
+    malformed("Signature value must use unpadded Base64URL for the selected signing profile");
   }
   let dict;
   try {

package/dist/lib/signing/server.d.mts

@@ -10,7 +10,7 @@
  */
 export type { SsrfDnsLookup } from '../net/index.mjs';
 export { buildResponseSignatureBase, buildSignatureBase, canonicalAuthority, canonicalMethod, canonicalTargetUri, formatSignatureParams, getHeaderValue, type RequestLike, type RequestCanonicalizationProfile, type ResponseLike, type SignatureParams, } from './canonicalize.mjs';
-export { computeContentDigest, contentDigestMatches, parseContentDigest } from './content-digest.mjs';
+export { computeContentDigest, contentDigestMatches, parseContentDigest, type SfBinaryEncoding, } from './content-digest.mjs';
 export { requestContextFromExpress, requestContextFromFetch, requestContextFromLambda, type ExpressRequestLike, type FetchRequestLike, type LambdaRequestEvent, type RequestContextFromExpressOptions, type RequestContextFromLambdaOptions, } from './request-context.mjs';
 export { jwkToPublicKey, verifySignature, verifySignatureAsync } from './crypto.mjs';
 export { RequestSignatureError, RequestSigningErrorCodeMetadata, type RequestSignatureErrorCode, ResponseSignatureError, type ResponseSignatureErrorCode, WebhookSignatureError, type WebhookSignatureErrorCode, } from './errors.mjs';

package/dist/lib/signing/server.d.ts

@@ -10,7 +10,7 @@
  */
 export type { SsrfDnsLookup } from '../net';
 export { buildResponseSignatureBase, buildSignatureBase, canonicalAuthority, canonicalMethod, canonicalTargetUri, formatSignatureParams, getHeaderValue, type RequestLike, type RequestCanonicalizationProfile, type ResponseLike, type SignatureParams, } from './canonicalize';
-export { computeContentDigest, contentDigestMatches, parseContentDigest } from './content-digest';
+export { computeContentDigest, contentDigestMatches, parseContentDigest, type SfBinaryEncoding, } from './content-digest';
 export { requestContextFromExpress, requestContextFromFetch, requestContextFromLambda, type ExpressRequestLike, type FetchRequestLike, type LambdaRequestEvent, type RequestContextFromExpressOptions, type RequestContextFromLambdaOptions, } from './request-context';
 export { jwkToPublicKey, verifySignature, verifySignatureAsync } from './crypto';
 export { RequestSignatureError, RequestSigningErrorCodeMetadata, type RequestSignatureErrorCode, ResponseSignatureError, type ResponseSignatureErrorCode, WebhookSignatureError, type WebhookSignatureErrorCode, } from './errors';

package/dist/lib/signing/server.mjs

@@ -7,7 +7,11 @@ import {
   formatSignatureParams,
   getHeaderValue
 } from "./canonicalize.mjs";
-import { computeContentDigest, contentDigestMatches, parseContentDigest } from "./content-digest.mjs";
+import {
+  computeContentDigest,
+  contentDigestMatches,
+  parseContentDigest
+} from "./content-digest.mjs";
 import {
   requestContextFromExpress,
   requestContextFromFetch,

package/dist/lib/signing/webhook-verifier.d.mts

@@ -22,6 +22,7 @@
  * so failures can point at a specific spec clause. Numbers are 1-based to
  * match the security doc.
  */
+import { type SfBinaryEncoding } from './content-digest.mjs';
 import type { JwksResolver } from './jwks.mjs';
 import { type PublisherSigningKeyPin } from './publisher-pins.mjs';
 import { type ReplayStore } from './replay.mjs';
@@ -43,6 +44,16 @@ export interface WebhookRequestLike {
 export declare const WEBHOOK_MANDATORY_COMPONENTS: ReadonlyArray<string>;
 export interface VerifyWebhookOptions {
     jwks: JwksResolver;
+    /**
+     * Trusted receiver configuration for the Signature byte sequence.
+     * Defaults to `legacy-base64url`, as the AdCP webhook-v1 profile requires
+     * throughout 3.x. Set `rfc8941-base64` only for an explicitly configured
+     * peer emitting standard padded Base64 (for example, a generic RFC 9421
+     * request signer with the webhook tag). There is no encoding fallback.
+     * URL canonicalization remains AdCP 3.2 in either mode; Signature encoding
+     * does not identify a webhook's AdCP version.
+     */
+    signatureEncoding?: SfBinaryEncoding;
     /** Applicable publishers from the verifier's own media-buy record. */
     publisherPins?: readonly PublisherSigningKeyPin[];
     /** Log the underlying request_signature_* discovery cause locally. */

package/dist/lib/signing/webhook-verifier.d.ts

@@ -22,6 +22,7 @@
  * so failures can point at a specific spec clause. Numbers are 1-based to
  * match the security doc.
  */
+import { type SfBinaryEncoding } from './content-digest';
 import type { JwksResolver } from './jwks';
 import { type PublisherSigningKeyPin } from './publisher-pins';
 import { type ReplayStore } from './replay';
@@ -43,6 +44,16 @@ export interface WebhookRequestLike {
 export declare const WEBHOOK_MANDATORY_COMPONENTS: ReadonlyArray<string>;
 export interface VerifyWebhookOptions {
     jwks: JwksResolver;
+    /**
+     * Trusted receiver configuration for the Signature byte sequence.
+     * Defaults to `legacy-base64url`, as the AdCP webhook-v1 profile requires
+     * throughout 3.x. Set `rfc8941-base64` only for an explicitly configured
+     * peer emitting standard padded Base64 (for example, a generic RFC 9421
+     * request signer with the webhook tag). There is no encoding fallback.
+     * URL canonicalization remains AdCP 3.2 in either mode; Signature encoding
+     * does not identify a webhook's AdCP version.
+     */
+    signatureEncoding?: SfBinaryEncoding;
     /** Applicable publishers from the verifier's own media-buy record. */
     publisherPins?: readonly PublisherSigningKeyPin[];
     /** Log the underlying request_signature_* discovery cause locally. */

package/dist/lib/signing/webhook-verifier.js

@@ -50,6 +50,7 @@ const WEBHOOK_MANDATORY_COMPONENTS = [
   "content-digest"
 ];
 async function verifyWebhookSignature(request, options) {
+  const signatureEncoding = resolveSignatureEncoding(options.signatureEncoding);
   const currentTime = options.now ?? (() => Date.now() / 1e3);
   const now = currentTime();
   const requiredTag = options.requiredTag ?? WEBHOOK_SIGNING_TAG;
@@ -66,12 +67,12 @@ async function verifyWebhookSignature(request, options) {
   let parsedSig;
   try {
     parsedInput = (0, import_parser.parseSignatureInput)(sigInputHeader);
-    parsedSig = (0, import_parser.parseSignature)(sigHeader, parsedInput.label);
+    parsedSig = (0, import_parser.parseSignature)(sigHeader, parsedInput.label, signatureEncoding);
   } catch (err) {
     throw new import_errors.WebhookSignatureError(
       "webhook_signature_header_malformed",
       1,
-      err instanceof Error ? err.message : String(err)
+      `${err instanceof Error ? err.message : String(err)} (webhook signatureEncoding="${signatureEncoding}").`
     );
   }
   requireParams(parsedInput);
@@ -239,6 +240,12 @@ async function verifyWebhookSignature(request, options) {
     verified_at: Math.floor(now)
   };
 }
+function resolveSignatureEncoding(encoding = "legacy-base64url") {
+  if (encoding !== "legacy-base64url" && encoding !== "rfc8941-base64") {
+    throw new TypeError('signatureEncoding must be "legacy-base64url" or "rfc8941-base64".');
+  }
+  return encoding;
+}
 function assertDelegatedOperatorAuthorizationActive(validUntil, now) {
   if (validUntil !== void 0 && (!Number.isFinite(validUntil) || now >= validUntil)) {
     throw new import_errors.WebhookSignatureError(
@@ -345,9 +352,10 @@ function isWebhookLoopbackHost(hostname) {
   return LOOPBACK_IPV4.test(normalized);
 }
 function createWebhookVerifier(options) {
+  const signatureEncoding = resolveSignatureEncoding(options.signatureEncoding);
   const replayStore = options.replayStore ?? new import_replay.InMemoryReplayStore();
   const revocationStore = options.revocationStore ?? new import_revocation.InMemoryRevocationStore();
-  return (request) => verifyWebhookSignature(request, { ...options, replayStore, revocationStore });
+  return (request) => verifyWebhookSignature(request, { ...options, signatureEncoding, replayStore, revocationStore });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/lib/signing/webhook-verifier.mjs

@@ -23,6 +23,7 @@ const WEBHOOK_MANDATORY_COMPONENTS = [
   "content-digest"
 ];
 async function verifyWebhookSignature(request, options) {
+  const signatureEncoding = resolveSignatureEncoding(options.signatureEncoding);
   const currentTime = options.now ?? (() => Date.now() / 1e3);
   const now = currentTime();
   const requiredTag = options.requiredTag ?? WEBHOOK_SIGNING_TAG;
@@ -39,12 +40,12 @@ async function verifyWebhookSignature(request, options) {
   let parsedSig;
   try {
     parsedInput = parseSignatureInput(sigInputHeader);
-    parsedSig = parseSignature(sigHeader, parsedInput.label);
+    parsedSig = parseSignature(sigHeader, parsedInput.label, signatureEncoding);
   } catch (err) {
     throw new WebhookSignatureError(
       "webhook_signature_header_malformed",
       1,
-      err instanceof Error ? err.message : String(err)
+      `${err instanceof Error ? err.message : String(err)} (webhook signatureEncoding="${signatureEncoding}").`
     );
   }
   requireParams(parsedInput);
@@ -212,6 +213,12 @@ async function verifyWebhookSignature(request, options) {
     verified_at: Math.floor(now)
   };
 }
+function resolveSignatureEncoding(encoding = "legacy-base64url") {
+  if (encoding !== "legacy-base64url" && encoding !== "rfc8941-base64") {
+    throw new TypeError('signatureEncoding must be "legacy-base64url" or "rfc8941-base64".');
+  }
+  return encoding;
+}
 function assertDelegatedOperatorAuthorizationActive(validUntil, now) {
   if (validUntil !== void 0 && (!Number.isFinite(validUntil) || now >= validUntil)) {
     throw new WebhookSignatureError(
@@ -318,9 +325,10 @@ function isWebhookLoopbackHost(hostname) {
   return LOOPBACK_IPV4.test(normalized);
 }
 function createWebhookVerifier(options) {
+  const signatureEncoding = resolveSignatureEncoding(options.signatureEncoding);
   const replayStore = options.replayStore ?? new InMemoryReplayStore();
   const revocationStore = options.revocationStore ?? new InMemoryRevocationStore();
-  return (request) => verifyWebhookSignature(request, { ...options, replayStore, revocationStore });
+  return (request) => verifyWebhookSignature(request, { ...options, signatureEncoding, replayStore, revocationStore });
 }
 export {
   WEBHOOK_MANDATORY_COMPONENTS,

package/dist/lib/supply-path/verify.js

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var verify_exports = {};
 __export(verify_exports, {
@@ -25,7 +35,6 @@ module.exports = __toCommonJS(verify_exports);
 var import_abort = require('../protocols/abort.js');
 var import_publisher_property_selector = require('../discovery/publisher-property-selector.js');
 var import_validation = require('./validation.js');
-var import_registry = require('../registry/index.js');
 var import_fetch_evidence = require('./fetch-evidence.js');
 var import_evaluate = require('./evaluate.js');
 var import_validation2 = require('./validation.js');
@@ -34,7 +43,8 @@ const MAX_PROPERTY_SELECTOR_EXPANSIONS = 4096;
 async function verifySupplyPath(request, options = { source: "authoritative" }) {
   const normalized = (0, import_validation2.validateSupplyPathRequest)(request);
   if (options.source === "registry") {
-    const result = await (options.registry ?? new import_registry.RegistryClient()).verifySupplyPath(normalized);
+    const registry = options.registry ?? new (await import("../registry/index.js")).RegistryClient();
+    const result = await registry.verifySupplyPath(normalized);
     (0, import_validation2.assertRegistrySupplyPathResult)(result, normalized);
     return result;
   }

package/dist/lib/supply-path/verify.mjs

@@ -4,7 +4,6 @@ import {
   expandPublisherPropertySelector
 } from "../discovery/publisher-property-selector.mjs";
 import { domain, records, strings } from "./validation.mjs";
-import { RegistryClient } from "../registry/index.mjs";
 import { SupplyPathEvidenceSession } from "./fetch-evidence.mjs";
 import {
   isUnqualifiedPropertySelector,
@@ -20,7 +19,8 @@ const MAX_PROPERTY_SELECTOR_EXPANSIONS = 4096;
 async function verifySupplyPath(request, options = { source: "authoritative" }) {
   const normalized = validateSupplyPathRequest(request);
   if (options.source === "registry") {
-    const result = await (options.registry ?? new RegistryClient()).verifySupplyPath(normalized);
+    const registry = options.registry ?? new (await import("../registry/index.mjs")).RegistryClient();
+    const result = await registry.verifySupplyPath(normalized);
     assertRegistrySupplyPathResult(result, normalized);
     return result;
   }

package/dist/lib/testing/compliance/comply.js

@@ -758,11 +758,9 @@ function inferDiscoveredServerAdcpVersion(profile, complianceVersion) {
   }
   if (profile.adcp_build_version) return profile.adcp_build_version;
   if (isLegacyPre31TypescriptSdkProfile(profile)) return "3.0";
-  if (isLegacyV2Profile(profile)) return "v2.5";
   return void 0;
 }
 function negotiateVersionEnvelope(profile, complianceVersion) {
-  if (isLegacyV2Profile(profile)) return "none";
   const supported = profile.adcp_supported_versions;
   if (supported?.length && supported.every(import_adcp_version_config.isPre31AdcpVersion)) return "major-only";
   if (profile.adcp_build_version && (0, import_adcp_version_config.isPre31AdcpVersion)(profile.adcp_build_version)) return "major-only";
@@ -770,12 +768,6 @@ function negotiateVersionEnvelope(profile, complianceVersion) {
   if ((0, import_adcp_version_config.isPre31AdcpVersion)(complianceVersion) && isLegacyV3Profile(profile)) return "major-only";
   return void 0;
 }
-function isLegacyV2Profile(profile) {
-  if (profile.adcp_version === "v2") return true;
-  const majors = profile.adcp_major_versions ?? [];
-  if (majors.length > 0) return majors.includes(2) && !majors.includes(3);
-  return !profile.tools.includes("get_adcp_capabilities");
-}
 function isLegacyV3Profile(profile) {
   if (profile.adcp_version === "v3") return true;
   if (profile.adcp_major_versions?.includes(3)) return true;

package/dist/lib/testing/compliance/comply.mjs

@@ -748,11 +748,9 @@ function inferDiscoveredServerAdcpVersion(profile, complianceVersion) {
   }
   if (profile.adcp_build_version) return profile.adcp_build_version;
   if (isLegacyPre31TypescriptSdkProfile(profile)) return "3.0";
-  if (isLegacyV2Profile(profile)) return "v2.5";
   return void 0;
 }
 function negotiateVersionEnvelope(profile, complianceVersion) {
-  if (isLegacyV2Profile(profile)) return "none";
   const supported = profile.adcp_supported_versions;
   if (supported?.length && supported.every(isPre31AdcpVersion)) return "major-only";
   if (profile.adcp_build_version && isPre31AdcpVersion(profile.adcp_build_version)) return "major-only";
@@ -760,12 +758,6 @@ function negotiateVersionEnvelope(profile, complianceVersion) {
   if (isPre31AdcpVersion(complianceVersion) && isLegacyV3Profile(profile)) return "major-only";
   return void 0;
 }
-function isLegacyV2Profile(profile) {
-  if (profile.adcp_version === "v2") return true;
-  const majors = profile.adcp_major_versions ?? [];
-  if (majors.length > 0) return majors.includes(2) && !majors.includes(3);
-  return !profile.tools.includes("get_adcp_capabilities");
-}
 function isLegacyV3Profile(profile) {
   if (profile.adcp_version === "v3") return true;
   if (profile.adcp_major_versions?.includes(3)) return true;

package/dist/lib/testing/compliance/storyboard-tracks.js

@@ -151,11 +151,22 @@ function mapStepToTestStep(stepResult) {
   }).join("; ");
   return {
     step: stepResult.title,
+    step_id: stepResult.step_id,
     task: stepResult.task,
     passed: stepResult.passed,
     duration_ms: stepResult.duration_ms,
     error: stepResult.error,
     details: validationDetails || void 0,
+    validations: stepResult.validations.map((v) => ({
+      ...v.id !== void 0 && { id: v.id },
+      check: v.check,
+      passed: v.passed,
+      ...v.severity !== void 0 && { severity: v.severity },
+      ...v.not_applicable !== void 0 && { not_applicable: v.not_applicable },
+      ...v.severity_promoted_from_advisory !== void 0 && {
+        severity_promoted_from_advisory: v.severity_promoted_from_advisory
+      }
+    })),
     observation_data: stepResult.response,
     warnings: stepResult.skipped ? [stepResult.skip?.detail ?? skipReasonLabel(stepResult.skip_reason) ?? "Step skipped"] : void 0,
     ...stepResult.skipped && { skipped: true },

package/dist/lib/testing/compliance/storyboard-tracks.mjs

@@ -126,11 +126,22 @@ function mapStepToTestStep(stepResult) {
   }).join("; ");
   return {
     step: stepResult.title,
+    step_id: stepResult.step_id,
     task: stepResult.task,
     passed: stepResult.passed,
     duration_ms: stepResult.duration_ms,
     error: stepResult.error,
     details: validationDetails || void 0,
+    validations: stepResult.validations.map((v) => ({
+      ...v.id !== void 0 && { id: v.id },
+      check: v.check,
+      passed: v.passed,
+      ...v.severity !== void 0 && { severity: v.severity },
+      ...v.not_applicable !== void 0 && { not_applicable: v.not_applicable },
+      ...v.severity_promoted_from_advisory !== void 0 && {
+        severity_promoted_from_advisory: v.severity_promoted_from_advisory
+      }
+    })),
     observation_data: stepResult.response,
     warnings: stepResult.skipped ? [stepResult.skip?.detail ?? skipReasonLabel(stepResult.skip_reason) ?? "Step skipped"] : void 0,
     ...stepResult.skipped && { skipped: true },

package/dist/lib/testing/index.d.mts

@@ -18,3 +18,5 @@ export { runAgainstLocalAgent } from './local-agent-runner.mjs';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner.mjs';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation/index.mjs';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard/index.mjs';
+export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
+export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';

package/dist/lib/testing/index.d.ts

@@ -18,3 +18,5 @@ export { runAgainstLocalAgent } from './local-agent-runner';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard';
+export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
+export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';

package/dist/lib/testing/index.js

@@ -139,6 +139,7 @@ __export(testing_exports, {
   resolveAccountForMediaBuy: () => import_agent_tester.resolveAccountForMediaBuy,
   resolveAssertions: () => import_storyboard.resolveAssertions,
   resolveBundleOrStoryboard: () => import_storyboard.resolveBundleOrStoryboard,
+  resolveCreativeBuildProbe: () => import_storyboard2.resolveCreativeBuildProbe,
   resolvePath: () => import_storyboard.resolvePath,
   resolveStoryboardsForCapabilities: () => import_storyboard.resolveStoryboardsForCapabilities,
   runAgainstLocalAgent: () => import_local_agent_runner.runAgainstLocalAgent,
@@ -190,6 +191,7 @@ __export(testing_exports, {
   testTerminalStateEnforcement: () => import_agent_tester.testTerminalStateEnforcement,
   testValidation: () => import_agent_tester.testValidation,
   unregisterExternalSchemaRoot: () => import_validation.unregisterExternalSchemaRoot,
+  validateCreativeBuildProbeSpec: () => import_storyboard2.validateCreativeBuildProbeSpec,
   validateFixtureResolutionDeclarations: () => import_storyboard.validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec: () => import_storyboard.validateRateLimitTripSpec,
   withExternalSchemaRoot: () => import_validation.withExternalSchemaRoot,
@@ -209,6 +211,7 @@ var import_test_controller_bridge = require('../server/test-controller-bridge.js
 var import_local_agent_runner = require('./local-agent-runner.js');
 var import_validation = require('../validation/index.js');
 var import_storyboard = require('./storyboard/index.js');
+var import_storyboard2 = require('./storyboard/index.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdagentsJsonSchema,
@@ -332,6 +335,7 @@ var import_storyboard = require('./storyboard/index.js');
   resolveAccountForMediaBuy,
   resolveAssertions,
   resolveBundleOrStoryboard,
+  resolveCreativeBuildProbe,
   resolvePath,
   resolveStoryboardsForCapabilities,
   runAgainstLocalAgent,
@@ -383,6 +387,7 @@ var import_storyboard = require('./storyboard/index.js');
   testTerminalStateEnforcement,
   testValidation,
   unregisterExternalSchemaRoot,
+  validateCreativeBuildProbeSpec,
   validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec,
   withExternalSchemaRoot,

package/dist/lib/testing/index.mjs

@@ -189,6 +189,7 @@ import {
   AdagentsJsonSchema,
   MCP_SESSION_PROBE_TASK
 } from "./storyboard/index.mjs";
+import { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from "./storyboard/index.mjs";
 export {
   AdagentsJsonSchema,
   BrandJsonSchema,
@@ -311,6 +312,7 @@ export {
   resolveAccountForMediaBuy,
   resolveAssertions,
   resolveBundleOrStoryboard,
+  resolveCreativeBuildProbe,
   resolvePath,
   resolveStoryboardsForCapabilities,
   runAgainstLocalAgent,
@@ -362,6 +364,7 @@ export {
   testTerminalStateEnforcement,
   testValidation,
   unregisterExternalSchemaRoot,
+  validateCreativeBuildProbeSpec,
   validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec,
   withExternalSchemaRoot,

package/dist/lib/testing/scenarios/capabilities.d.mts

@@ -3,7 +3,7 @@
  *
  * Tests agent capability discovery including:
  * - get_adcp_capabilities (v3 agents)
- * - Synthetic capability detection (v2 agents)
+ * - Rejection of agents missing AdCP 3 capability discovery
  * - Protocol/tool cross-validation
  */
 import type { TestOptions, TestStepResult, AgentProfile } from '../types.mjs';
@@ -14,7 +14,7 @@ import type { TestOptions, TestStepResult, AgentProfile } from '../types.mjs';
  * 1. Discover agent profile (tools list)
  * 2. If get_adcp_capabilities exists, call it and validate response
  * 3. Cross-check reported protocols against available tools
- * 4. For v2 agents, build synthetic capabilities and note v3 upgrade path
+ * 4. Reject agents without AdCP 3 discovery
  */
 export declare function testCapabilityDiscovery(agentUrl: string, options: TestOptions): Promise<{
     steps: TestStepResult[];

package/dist/lib/testing/scenarios/capabilities.d.ts

@@ -3,7 +3,7 @@
  *
  * Tests agent capability discovery including:
  * - get_adcp_capabilities (v3 agents)
- * - Synthetic capability detection (v2 agents)
+ * - Rejection of agents missing AdCP 3 capability discovery
  * - Protocol/tool cross-validation
  */
 import type { TestOptions, TestStepResult, AgentProfile } from '../types';
@@ -14,7 +14,7 @@ import type { TestOptions, TestStepResult, AgentProfile } from '../types';
  * 1. Discover agent profile (tools list)
  * 2. If get_adcp_capabilities exists, call it and validate response
  * 3. Cross-check reported protocols against available tools
- * 4. For v2 agents, build synthetic capabilities and note v3 upgrade path
+ * 4. Reject agents without AdCP 3 discovery
  */
 export declare function testCapabilityDiscovery(agentUrl: string, options: TestOptions): Promise<{
     steps: TestStepResult[];

package/dist/lib/testing/scenarios/capabilities.js

@@ -72,8 +72,8 @@ async function testCapabilityDiscovery(agentUrl, options) {
       step.error = result.error || "get_adcp_capabilities failed";
       steps.push(step);
       const toolInfos = profile.tools.map((name) => ({ name }));
-      capabilities = (0, import_capabilities.buildSyntheticCapabilities)(toolInfos);
-      profile.adcp_version = "v2";
+      capabilities = (0, import_capabilities.buildSyntheticV3Capabilities)(toolInfos);
+      profile.adcp_version = "v3";
       profile.supported_protocols = capabilities.protocols;
       steps.push({
         step: "Fallback to synthetic capabilities",
@@ -83,54 +83,21 @@ async function testCapabilityDiscovery(agentUrl, options) {
       });
     } else {
       const toolInfos = profile.tools.map((name) => ({ name }));
-      capabilities = (0, import_capabilities.buildSyntheticCapabilities)(toolInfos);
-      profile.adcp_version = "v2";
+      capabilities = (0, import_capabilities.buildSyntheticV3Capabilities)(toolInfos);
+      profile.adcp_version = "v3";
       profile.supported_protocols = capabilities.protocols;
       step.passed = false;
       step.error = "get_adcp_capabilities returned no data";
       steps.push(step);
     }
   } else {
-    const toolInfos = profile.tools.map((name) => ({ name }));
-    capabilities = (0, import_capabilities.buildSyntheticCapabilities)(toolInfos);
-    profile.adcp_version = "v2";
-    profile.supported_protocols = capabilities.protocols;
-    profile.supports_governance = capabilities.protocols.includes("governance");
-    profile.supports_si = capabilities.protocols.includes("sponsored_intelligence");
     steps.push({
-      step: "Build synthetic capabilities (v2)",
-      task: void 0,
-      passed: true,
+      step: "Require AdCP 3 capability discovery",
+      passed: false,
       duration_ms: 0,
-      details: `Agent does not support get_adcp_capabilities. Detected ${capabilities.protocols.length} protocol(s) from tools.`,
-      response_preview: JSON.stringify(
-        {
-          version: capabilities.version,
-          protocols: capabilities.protocols,
-          features: capabilities.features,
-          _synthetic: true
-        },
-        null,
-        2
-      )
+      error: "Agent does not advertise get_adcp_capabilities. AdCP 2 reached end of life on 2026-08-01; upgrade the agent to AdCP 3."
     });
-    const v3ToolsPresent = [
-      ...import_capabilities.GOVERNANCE_TOOLS,
-      ...import_capabilities.SPONSORED_INTELLIGENCE_TOOLS,
-      ...import_capabilities.TRUSTED_MATCH_TOOLS,
-      ...import_capabilities.COMPLIANCE_TOOLS
-    ].filter((t) => profile.tools.includes(t));
-    if (v3ToolsPresent.length > 0) {
-      steps.push({
-        step: "v3 upgrade potential detected",
-        passed: true,
-        duration_ms: 0,
-        details: `Agent has ${v3ToolsPresent.length} v3 tool(s) but missing get_adcp_capabilities`,
-        warnings: [
-          `Consider implementing get_adcp_capabilities for better protocol discovery. v3 tools detected: ${v3ToolsPresent.join(", ")}`
-        ]
-      });
-    }
+    return { steps, profile };
   }
   const { steps: crossValidationSteps } = crossValidateProtocolsAndTools(capabilities, profile.tools);
   steps.push(...crossValidationSteps);