@adcp/sdk 16.0.0-beta.8 → 16.0.0

package/dist/lib/testing/storyboard/types.d.ts

@@ -1,3 +1,4 @@
+import type { CreativeBuildProbeSpec } from './creative-build-probe';
 /**
  * Types for storyboard-driven testing.
  *
@@ -269,6 +270,8 @@ export interface Storyboard {
      * Omitted handles retain the compatibility strategy `["seed"]`.
      */
     fixture_resolution?: StoryboardFixtureResolution;
+    /** Opt-in runner preparation; does not add an agent protocol capability. */
+    creative_build_probe?: CreativeBuildProbeSpec;
     /**
      * Initial context values declared by the storyboard YAML. Runner callers may
      * override these defaults with `StoryboardRunOptions.context`.
@@ -475,7 +478,7 @@ export interface FixtureResolutionAttempt {
 export type FixtureResolutionEvidence = FixtureResolutionAttempt;
 /** Machine-readable record emitted exactly once for every fixture handle. */
 export interface FixtureResolutionRecord {
-    fixture_type: 'product' | 'pricing_option';
+    fixture_type: 'product' | 'pricing_option' | 'creative_format';
     handle: string;
     product_handle?: string;
     requirements: FixtureMatchClause[];
@@ -483,8 +486,10 @@ export interface FixtureResolutionRecord {
     status: FixtureResolutionStatus;
     strategy?: FixtureResolutionStrategy;
     seller_ids?: {
-        product_id: string;
+        product_id?: string;
         pricing_option_id?: string;
+        capability_id?: string;
+        format_id?: Record<string, unknown>;
     };
 }
 /** One storyboard-scoped coverage gap produced by fixture resolution. */
@@ -890,7 +895,10 @@ export interface RateLimitTripSpec {
     /** Maximum retry_after wait the runner will honor. Defaults to 30 seconds. */
     replay_max_wait_seconds?: number;
 }
-export type StoryboardValidationCheck = 'response_schema' | 'field_present' | 'field_absent' | 'envelope_field_present' | 'envelope_field_absent' | 'envelope_field_value' | 'envelope_field_value_or_absent' | 'field_value' | 'field_value_or_absent'
+export type StoryboardValidationCheck = 'response_schema' | 'field_present'
+/** Every item carries a non-null field at `array[*].field`; absent, null,
+ *  or empty arrays grade not_applicable rather than passing vacuously. */
+ | 'all_fields_present' | 'field_absent' | 'envelope_field_present' | 'envelope_field_absent' | 'envelope_field_value' | 'envelope_field_value_or_absent' | 'field_value' | 'field_value_or_absent'
 /**
  * Assert that a string field in the task payload matches a JavaScript
  * regular expression source declared in `pattern`. Fails when the path is
@@ -1042,7 +1050,7 @@ export type StoryboardValidationCheck = 'response_schema' | 'field_present' | 'f
  * class: normalization, directionality, or range containment. Added for
  * adcp-client#2060.
  */
- | 'canonical_format_satisfaction'
+ | 'canonical_format_satisfaction' | 'property_list_reference'
 /**
  * Assert the cardinality of the array at `path`. Two configurations are
  * supported: exact-count via `value: N` (passes only when the resolved
@@ -1230,6 +1238,23 @@ export interface RefsResolveScope {
     equals: string;
 }
 export interface StoryboardValidation {
+    /** Managing endpoint; $agent_url uses the issuer's discovered MCP endpoint (adcp#8289). */
+    agent_url?: string;
+    /** Creation-response path to the issued list ID. Defaults to list.list_id. */
+    list_id_path?: string;
+    /** Creation-response path to the read-only credential. Defaults to auth_token. */
+    auth_token_path?: string;
+    /** Existing owner-created control list; accepts a resolved $context.<key>. */
+    denied_list_id?: string;
+    /** Maximum identifiers requested per page, 1 through 10000. Required by the probe. */
+    page_size?: number;
+    /** Maximum pages to traverse, 1 through 100. Required by the probe. */
+    max_pages?: number;
+    /** Exact unordered snapshot, compared by (type, value). Required by the probe. */
+    expected_identifiers?: Array<{
+        type: string;
+        value: string;
+    }>;
     /** Stable authored validation identifier echoed into runner results when present. */
     id?: string;
     /** Known validation kind, or a future string graded not_applicable by older runners. */
@@ -2152,7 +2177,7 @@ export interface RunnerSelectionResult {
  *
  * Spec: adcp-client#1626, adcp-client#2281, adcp-client#2356.
  */
-export type RequirementName = 'controller' | 'seeded_state' | 'real_wire' | 'webhook_receiver' | 'webhook_replay_receiver' | 'trusted_match_context_router_runner' | 'trusted_match_publisher_auth_runner' | 'request_signer' | 'multi_agent';
+export type RequirementName = 'controller' | 'seeded_state' | 'real_wire' | 'webhook_receiver' | 'webhook_replay_receiver' | 'trusted_match_context_router_runner' | 'trusted_match_publisher_auth_runner' | 'property_list_reference_runner' | 'request_signer' | 'multi_agent';
 /**
  * Enumeration of every requirement this SDK knows how to satisfy. The loader
  * accepts other non-empty strings for forward compatibility; the runner treats
@@ -2180,12 +2205,9 @@ export interface SchemaValidationError {
  * a deprecation or future-required advisory is the kind of thing a CI
  * gate or dashboard SHOULD have explicit handling for.
  *
- * Code naming generally follows the dot-namespaced convention `<topic>.<event>`
- * (e.g. `request_signing.required`, `webhook_signing.legacy_hmac_fallback.removed`);
- * prefer the upstream runner-output contract's canonical code when it
- * registers a different spelling. The *when* lives in the `effective_version`
- * field, never in the code. This keeps the surface stable across spec versions
- * — codes don't proliferate `_in_4_0` / `_in_5_0` siblings as the spec evolves.
+ * Use the upstream runner-output contract's canonical codes so consumers can
+ * aggregate the same advisory across runners. Keep each code stable for the
+ * same advisory, including its version suffix where the contract defines one.
  *
  * Adding a new code is a wire-surface change AND a TypeScript breaking
  * change for adopters who narrowed on `code`. Coordinate with the upstream
@@ -2199,10 +2221,10 @@ export type NoticeCode =
 'signed_requests_specialism_deprecated'
 /** Agent lacks `request_signing.supported: true`. Required for spend-committing
  *  operations in AdCP 4.0 per `effective_version`. */
- | 'request_signing.required'
+ | 'request_signing_required_in_4_0'
 /** Agent advertises `webhook_signing.legacy_hmac_fallback: true`. Removed in
  *  AdCP 4.0 per `effective_version`. */
- | 'webhook_signing.legacy_hmac_fallback.removed'
+ | 'legacy_hmac_fallback_removed_in_4_0'
 /** Runner stripped request fields missing from the agent's advertised tool input schema. */
  | 'input_schema_field_stripped'
 /** The preflight get_adcp_capabilities response failed schema validation. */
@@ -2310,9 +2332,9 @@ export interface ValidationResult {
     /** Optional remediation hint. */
     remediation?: string;
     /**
-     * Marker for an implemented check whose declared applicability conditions
-     * were not met. Unknown authored check kinds fail closed; they never set
-     * this flag or contribute a false green result. Entries carrying this flag
+     * Marker for a check that could not be graded because its applicability
+     * conditions were not met or the runner does not recognize its authored kind.
+     * Entries carrying this flag
      * contribute to `validations_not_applicable` so consumers can distinguish
      * inapplicable coverage from clean passes.
      */

package/dist/lib/testing/storyboard/types.js

@@ -68,6 +68,7 @@ const KNOWN_REQUIREMENTS = /* @__PURE__ */ new Set([
   "webhook_replay_receiver",
   "trusted_match_context_router_runner",
   "trusted_match_publisher_auth_runner",
+  "property_list_reference_runner",
   "request_signer",
   "multi_agent"
 ]);

package/dist/lib/testing/storyboard/types.mjs

@@ -42,6 +42,7 @@ const KNOWN_REQUIREMENTS = /* @__PURE__ */ new Set([
   "webhook_replay_receiver",
   "trusted_match_context_router_runner",
   "trusted_match_publisher_auth_runner",
+  "property_list_reference_runner",
   "request_signer",
   "multi_agent"
 ]);

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.8";
+export declare const RUNNER_CAPABILITY_VERSION = "16.0.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.8";
+export declare const RUNNER_CAPABILITY_VERSION = "16.0.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.js

@@ -75,10 +75,19 @@ function decorateValidationResult(result, context, validation) {
 }
 function runValidation(validation, ctx) {
   switch (validation.check) {
+    case "property_list_reference":
+      return {
+        check: validation.check,
+        passed: false,
+        description: validation.description,
+        error: "property_list_reference requires the asynchronous, credential-isolated storyboard runner."
+      };
     case "response_schema":
       return requireTaskResult(ctx, validation, (tr) => validateResponseSchema(validation, ctx, tr));
     case "field_present":
       return validateFieldPresent(validation, resolveTarget(ctx));
+    case "all_fields_present":
+      return validateAllFieldsPresent(validation, resolveTarget(ctx));
     case "field_absent":
       return validateFieldAbsent(validation, resolveTarget(ctx));
     case "envelope_field_present":
@@ -507,6 +516,61 @@ function validateFieldPresent(validation, taskResult) {
     actual: value ?? null
   };
 }
+function validateAllFieldsPresent(validation, taskResult) {
+  const base = { check: validation.check, description: validation.description, path: validation.path };
+  const path = validation.path ?? "";
+  const segments = (0, import_path.parsePathWithWildcards)(path);
+  const wildcardIndex = segments.indexOf(import_path.WILDCARD);
+  const wildcardOffset = path.indexOf("[*].");
+  if (wildcardOffset <= 0 || wildcardIndex <= 0 || typeof segments[wildcardIndex + 1] !== "string" || segments.lastIndexOf(import_path.WILDCARD) !== wildcardIndex) {
+    return {
+      ...base,
+      passed: false,
+      error: "all_fields_present requires an array path followed by exactly one [*] and a non-empty field path",
+      json_pointer: null,
+      expected: "array[*].field",
+      actual: validation.path ?? null
+    };
+  }
+  const arrayPath = path.slice(0, wildcardOffset);
+  const fieldPath = path.slice(wildcardOffset + "[*].".length);
+  const arrayPointer = (0, import_path.toJsonPointer)(arrayPath);
+  const items = (0, import_path.resolvePath)(taskResult.data, arrayPath);
+  if (items == null || Array.isArray(items) && items.length === 0) {
+    return {
+      ...base,
+      passed: true,
+      not_applicable: true,
+      note: `Array '${arrayPath}' is absent, null, or empty; all_fields_present has no items to inspect`
+    };
+  }
+  if (!Array.isArray(items)) {
+    return {
+      ...base,
+      passed: false,
+      error: `Expected an array at path: ${arrayPath}`,
+      json_pointer: arrayPointer,
+      expected: "array",
+      actual: items
+    };
+  }
+  const missing = [];
+  const fieldPointer = (0, import_path.toJsonPointer)(fieldPath);
+  for (let index = 0; index < items.length; index++) {
+    if ((0, import_path.resolvePath)(items[index], fieldPath) == null) {
+      missing.push(`${arrayPointer}/${index}${fieldPointer}`);
+    }
+  }
+  if (missing.length === 0) return { ...base, passed: true };
+  return {
+    ...base,
+    passed: false,
+    error: `${missing.length} of ${items.length} items lack a non-null '${fieldPath}' (first: ${missing[0]})`,
+    json_pointer: missing[0],
+    expected: validation.path,
+    actual: missing
+  };
+}
 function validateFieldAbsent(validation, taskResult) {
   const checkName = validation.check;
   if (!validation.path) {

package/dist/lib/testing/storyboard/validations.mjs

@@ -14,11 +14,13 @@ import { isJsonContentType } from "../test-controller.mjs";
 import { globToRegExp } from "../../utils/glob.mjs";
 import {
   parsePath,
+  parsePathWithWildcards,
   resolvePath,
   resolvePathAll,
   resolvePortableIdentifierPathAll,
   toJsonPointer,
-  validatePortableIdentifierPath
+  validatePortableIdentifierPath,
+  WILDCARD
 } from "./path.mjs";
 import { canonicalTargetUri } from "../../signing/canonicalize.mjs";
 import { detectShapeDriftHints } from "./shape-drift-hints.mjs";
@@ -54,10 +56,19 @@ function decorateValidationResult(result, context, validation) {
 }
 function runValidation(validation, ctx) {
   switch (validation.check) {
+    case "property_list_reference":
+      return {
+        check: validation.check,
+        passed: false,
+        description: validation.description,
+        error: "property_list_reference requires the asynchronous, credential-isolated storyboard runner."
+      };
     case "response_schema":
       return requireTaskResult(ctx, validation, (tr) => validateResponseSchema(validation, ctx, tr));
     case "field_present":
       return validateFieldPresent(validation, resolveTarget(ctx));
+    case "all_fields_present":
+      return validateAllFieldsPresent(validation, resolveTarget(ctx));
     case "field_absent":
       return validateFieldAbsent(validation, resolveTarget(ctx));
     case "envelope_field_present":
@@ -487,6 +498,61 @@ function validateFieldPresent(validation, taskResult) {
     actual: value ?? null
   };
 }
+function validateAllFieldsPresent(validation, taskResult) {
+  const base = { check: validation.check, description: validation.description, path: validation.path };
+  const path = validation.path ?? "";
+  const segments = parsePathWithWildcards(path);
+  const wildcardIndex = segments.indexOf(WILDCARD);
+  const wildcardOffset = path.indexOf("[*].");
+  if (wildcardOffset <= 0 || wildcardIndex <= 0 || typeof segments[wildcardIndex + 1] !== "string" || segments.lastIndexOf(WILDCARD) !== wildcardIndex) {
+    return {
+      ...base,
+      passed: false,
+      error: "all_fields_present requires an array path followed by exactly one [*] and a non-empty field path",
+      json_pointer: null,
+      expected: "array[*].field",
+      actual: validation.path ?? null
+    };
+  }
+  const arrayPath = path.slice(0, wildcardOffset);
+  const fieldPath = path.slice(wildcardOffset + "[*].".length);
+  const arrayPointer = toJsonPointer(arrayPath);
+  const items = resolvePath(taskResult.data, arrayPath);
+  if (items == null || Array.isArray(items) && items.length === 0) {
+    return {
+      ...base,
+      passed: true,
+      not_applicable: true,
+      note: `Array '${arrayPath}' is absent, null, or empty; all_fields_present has no items to inspect`
+    };
+  }
+  if (!Array.isArray(items)) {
+    return {
+      ...base,
+      passed: false,
+      error: `Expected an array at path: ${arrayPath}`,
+      json_pointer: arrayPointer,
+      expected: "array",
+      actual: items
+    };
+  }
+  const missing = [];
+  const fieldPointer = toJsonPointer(fieldPath);
+  for (let index = 0; index < items.length; index++) {
+    if (resolvePath(items[index], fieldPath) == null) {
+      missing.push(`${arrayPointer}/${index}${fieldPointer}`);
+    }
+  }
+  if (missing.length === 0) return { ...base, passed: true };
+  return {
+    ...base,
+    passed: false,
+    error: `${missing.length} of ${items.length} items lack a non-null '${fieldPath}' (first: ${missing[0]})`,
+    json_pointer: missing[0],
+    expected: validation.path,
+    actual: missing
+  };
+}
 function validateFieldAbsent(validation, taskResult) {
   const checkName = validation.check;
   if (!validation.path) {

package/dist/lib/testing/types.d.mts

@@ -34,7 +34,7 @@ export interface TestOptions {
     /**
      * Route compact media-buy storyboard steps through the SDK compatibility
      * coordinator. This lets the same compact-first storyboard exercise native
-     * 3.2 sellers and established v2.5–3.2 sellers without task-name branching.
+     * 3.2 sellers and established AdCP 3.0–3.2 sellers without task-name branching.
      * Mutating guarantee losses remain fail-closed unless named here.
      */
     mediaBuyLifecycleCompatibility?: import('../media-buy/compatibility.mjs').MediaBuyLifecycleCoordinatorOptions;
@@ -265,10 +265,24 @@ export interface TestOptions {
 }
 export interface TestStepResult {
     step: string;
+    /** Authored storyboard step identifier, independent of the display title. */
+    step_id?: string;
     task?: string;
     passed: boolean;
     duration_ms: number;
     details?: string;
+    /**
+     * Compact runner verdicts; excludes request/response payloads and diagnostic values.
+     * Skipped steps are not observable even when their retained validations have verdicts.
+     */
+    validations?: Array<{
+        id?: string;
+        check: string;
+        passed: boolean;
+        severity?: 'required' | 'advisory';
+        not_applicable?: boolean;
+        severity_promoted_from_advisory?: boolean;
+    }>;
     error?: string;
     response_preview?: string;
     observation_data?: Record<string, unknown>;

package/dist/lib/testing/types.d.ts

@@ -34,7 +34,7 @@ export interface TestOptions {
     /**
      * Route compact media-buy storyboard steps through the SDK compatibility
      * coordinator. This lets the same compact-first storyboard exercise native
-     * 3.2 sellers and established v2.5–3.2 sellers without task-name branching.
+     * 3.2 sellers and established AdCP 3.0–3.2 sellers without task-name branching.
      * Mutating guarantee losses remain fail-closed unless named here.
      */
     mediaBuyLifecycleCompatibility?: import('../media-buy/compatibility').MediaBuyLifecycleCoordinatorOptions;
@@ -265,10 +265,24 @@ export interface TestOptions {
 }
 export interface TestStepResult {
     step: string;
+    /** Authored storyboard step identifier, independent of the display title. */
+    step_id?: string;
     task?: string;
     passed: boolean;
     duration_ms: number;
     details?: string;
+    /**
+     * Compact runner verdicts; excludes request/response payloads and diagnostic values.
+     * Skipped steps are not observable even when their retained validations have verdicts.
+     */
+    validations?: Array<{
+        id?: string;
+        check: string;
+        passed: boolean;
+        severity?: 'required' | 'advisory';
+        not_applicable?: boolean;
+        severity_promoted_from_advisory?: boolean;
+    }>;
     error?: string;
     response_preview?: string;
     observation_data?: Record<string, unknown>;