@adcp/sdk 16.0.0 → 16.2.0

package/dist/lib/identity-3.3/jws-artifacts.mjs

@@ -0,0 +1,234 @@
+import { compactVerify, decodeProtectedHeader, importJWK } from "jose";
+import { ssrfSafeFetch } from "../net/index.mjs";
+import { canonicalAgentOrigin } from "../signing/agent-resolver/canonicalize.mjs";
+import { eTldPlusOne } from "../signing/agent-resolver/etld.mjs";
+import { parseStrictJson } from "../signing/agent-resolver/strict-json.mjs";
+import {
+  isRefusedWebBotAuthTestKey,
+  jwkThumbprint,
+  receivedAgentOrigin
+} from "../signing/web-bot-auth.mjs";
+class JwsArtifactError extends Error {
+  constructor(code, message, options) {
+    super(message);
+    this.code = code;
+    this.name = "JwsArtifactError";
+    if (options?.cause !== void 0) Object.defineProperty(this, "cause", { value: options.cause });
+  }
+  code;
+  /** True for outages: retry later, never treat as absence or as a verdict on the artifact. */
+  get transient() {
+    return this.code === "jws_key_unavailable" || this.code === "jws_revocation_unavailable";
+  }
+}
+async function selectJwsArtifactProfile(signingAgentUrl, trust) {
+  const origin = canonicalAgentOrigin(signingAgentUrl);
+  try {
+    eTldPlusOne(origin);
+  } catch {
+    return { profile: "3.2", origin, reason: "no_trust_record" };
+  }
+  let record;
+  try {
+    record = await trust.get(origin);
+  } catch (cause) {
+    throw new JwsArtifactError("jws_key_unavailable", "Issuer trust record is unavailable", { cause });
+  }
+  if (record.status !== "present") return { profile: "3.2", origin, reason: "no_trust_record" };
+  const listed = (record.record.agents ?? []).some((agent) => {
+    try {
+      return canonicalAgentOrigin(agent.url) === origin;
+    } catch {
+      return false;
+    }
+  });
+  return listed ? { profile: "web-bot-auth", origin, operator: record.operator } : { profile: "3.2", origin, reason: "unlisted" };
+}
+async function verifyWebBotAuthJwsArtifact(token, origin, options) {
+  if (typeof options.typ !== "string" || !options.typ)
+    throw new TypeError("verifyWebBotAuthJwsArtifact requires the typ the surface accepts");
+  if (options.revocation === void 0)
+    throw new TypeError("verifyWebBotAuthJwsArtifact requires a revocation resolver, or revocation: false");
+  let header;
+  try {
+    header = decodeProtectedHeader(token);
+  } catch {
+    throw new JwsArtifactError("jws_invalid", "Malformed JWS protected header");
+  }
+  if (header.typ !== options.typ)
+    throw new JwsArtifactError("jws_invalid", "JWS typ is not the one this surface accepts");
+  if (header.alg !== "EdDSA") throw new JwsArtifactError("jws_invalid", "A Web Bot Auth JWS artifact uses alg EdDSA");
+  const kid = header.kid;
+  if (typeof kid !== "string" || kid.length === 0 || kid.length > 256)
+    throw new JwsArtifactError("jws_key_unknown", "JWS kid is missing");
+  try {
+    origin = receivedAgentOrigin(canonicalAgentOrigin(origin));
+  } catch {
+    throw new JwsArtifactError("jws_key_unknown", "Signing origin is not an https origin");
+  }
+  let key = null;
+  let keySource = "directory";
+  let directoryFailure;
+  try {
+    key = await options.directory.resolve(kid, origin);
+  } catch (cause) {
+    directoryFailure = cause;
+  }
+  if (!key && options.archive) {
+    const archived = await options.archive.resolve(origin, kid);
+    if (archived) {
+      key = archived;
+      keySource = "archive";
+    }
+  }
+  if (!key) {
+    if (directoryFailure !== void 0)
+      throw new JwsArtifactError("jws_key_unavailable", "Issuer key directory is unavailable", {
+        cause: directoryFailure
+      });
+    throw new JwsArtifactError("jws_key_unknown", "No key at the issuer origin carries this kid");
+  }
+  if (key.kty !== "OKP" || key.crv !== "Ed25519" || typeof key.x !== "string")
+    throw new JwsArtifactError("jws_invalid", "A Web Bot Auth JWS artifact is signed with an Ed25519 key");
+  let thumbprint;
+  try {
+    thumbprint = jwkThumbprint(key);
+  } catch {
+    throw new JwsArtifactError("jws_invalid", "Key thumbprint cannot be computed");
+  }
+  if (kid !== thumbprint) throw new JwsArtifactError("jws_invalid", "JWS kid is not the key JWK thumbprint");
+  let verified;
+  try {
+    const publicKey = { kty: "OKP", crv: "Ed25519", x: key.x };
+    verified = await compactVerify(token, await importJWK(publicKey, "EdDSA"), {
+      algorithms: ["EdDSA"],
+      ...options.crit ? { crit: options.crit } : {}
+    });
+  } catch {
+    throw new JwsArtifactError("jws_invalid", "JWS signature verification failed");
+  }
+  const result = {
+    origin,
+    kid,
+    key,
+    keySource,
+    protectedHeader: verified.protectedHeader,
+    payload: verified.payload
+  };
+  if (options.revocation) {
+    let status;
+    try {
+      status = await options.revocation.status(origin, kid);
+    } catch (cause) {
+      throw new JwsArtifactError("jws_revocation_unavailable", "Issuer revocation status could not be established", {
+        cause
+      });
+    }
+    if (status === "unknown" || status === "absent" && (options.revocationAbsent ?? "reject") === "reject")
+      throw new JwsArtifactError("jws_revocation_unavailable", "Issuer revocation status could not be established");
+    if (status === "revoked") {
+      if ((options.revokedKey ?? "reject") === "reject")
+        throw new JwsArtifactError("jws_key_revoked", "Signing key is revoked by its origin");
+      try {
+        const detail = await options.revocation.detail(origin, kid);
+        if (detail) result.revocationDetail = detail;
+      } catch (cause) {
+        throw new JwsArtifactError("jws_revocation_unavailable", "Issuer revocation detail could not be read", {
+          cause
+        });
+      }
+    }
+    result.revocation = status;
+  }
+  return result;
+}
+const GOVERNANCE_KEY_ARCHIVE_PATH = "/.well-known/jwks-archive.json";
+const ARCHIVE_FAILURE_COOLDOWN_SECONDS = 60;
+class GovernanceKeyArchiveResolver {
+  constructor(options = {}) {
+    this.options = options;
+    const maxAge = options.maxAgeSeconds ?? 300;
+    if (!Number.isFinite(maxAge) || maxAge < 0)
+      throw new TypeError("maxAgeSeconds must be a finite, non-negative number");
+    this.maxOrigins = options.maxOrigins ?? 256;
+    if (!Number.isSafeInteger(this.maxOrigins) || this.maxOrigins < 1)
+      throw new TypeError("maxOrigins must be a positive safe integer");
+  }
+  options;
+  cache = /* @__PURE__ */ new Map();
+  failures = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  maxOrigins;
+  async resolve(origin, kid) {
+    origin = receivedAgentOrigin(canonicalAgentOrigin(origin));
+    const now = (this.options.now ?? (() => Date.now() / 1e3))();
+    const cached = this.cache.get(origin);
+    let keys;
+    if (cached && cached.freshUntil > now) keys = cached.keys;
+    else {
+      const failure = this.failures.get(origin);
+      if (failure && failure.until > now)
+        throw new JwsArtifactError("jws_key_unavailable", "Governance key archive is unavailable", {
+          cause: failure.cause
+        });
+      let pending = this.pending.get(origin);
+      if (!pending) {
+        pending = this.fetch(origin, now);
+        this.pending.set(origin, pending);
+      }
+      try {
+        keys = await pending;
+      } finally {
+        if (this.pending.get(origin) === pending) this.pending.delete(origin);
+      }
+    }
+    return keys.find((key) => key.kid === kid) ?? null;
+  }
+  async fetch(origin, now) {
+    let keys;
+    try {
+      const response = await ssrfSafeFetch(origin + GOVERNANCE_KEY_ARCHIVE_PATH, {
+        ...this.options.fetchOptions,
+        headers: { accept: "application/json" },
+        timeoutMs: 1e4,
+        maxBodyBytes: 1024 * 1024
+      });
+      if (response.status === 404 || response.status === 410) keys = [];
+      else {
+        if (response.status !== 200) throw new Error(`Archive answered ${response.status}`);
+        const document = parseStrictJson(new TextDecoder("utf-8", { fatal: true }).decode(response.body), 32);
+        if (!Array.isArray(document.keys) || document.keys.length > 4096) throw new Error("Invalid key archive");
+        keys = [];
+        for (const raw of document.keys) {
+          if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+          const jwk = raw;
+          if (Object.keys(jwk).some((name) => PRIVATE_JWK_MEMBERS.has(name.toLowerCase()) || name.startsWith("_private")))
+            throw new Error("Key archive publishes private key material");
+          if (jwk.kty !== "OKP" || jwk.crv !== "Ed25519" || typeof jwk.x !== "string") continue;
+          const thumbprint = jwkThumbprint(jwk);
+          if (jwk.kid !== void 0 && jwk.kid !== thumbprint) continue;
+          if (isRefusedWebBotAuthTestKey(thumbprint, this.options.allowTestKeys)) continue;
+          keys.push({ kty: "OKP", crv: "Ed25519", x: jwk.x, kid: thumbprint });
+        }
+      }
+    } catch (cause) {
+      if (this.failures.size >= this.maxOrigins && !this.failures.has(origin))
+        this.failures.delete(this.failures.keys().next().value);
+      this.failures.set(origin, { until: now + ARCHIVE_FAILURE_COOLDOWN_SECONDS, cause });
+      throw new JwsArtifactError("jws_key_unavailable", "Governance key archive is unavailable", { cause });
+    }
+    this.failures.delete(origin);
+    if (this.cache.size >= this.maxOrigins && !this.cache.has(origin))
+      this.cache.delete(this.cache.keys().next().value);
+    this.cache.set(origin, { keys, freshUntil: now + (this.options.maxAgeSeconds ?? 300) });
+    return keys;
+  }
+}
+const PRIVATE_JWK_MEMBERS = /* @__PURE__ */ new Set(["d", "p", "q", "dp", "dq", "qi", "oth", "k"]);
+export {
+  GOVERNANCE_KEY_ARCHIVE_PATH,
+  GovernanceKeyArchiveResolver,
+  JwsArtifactError,
+  selectJwsArtifactProfile,
+  verifyWebBotAuthJwsArtifact
+};

package/dist/lib/identity-3.3/revocation.d.mts

@@ -78,6 +78,13 @@ export declare class OriginRevocationResolver {
      */
     status(originUrl: string, keyid: string): Promise<OriginRevocationStatus>;
     private currentStatus;
+    /**
+     * The most severe detail stored for a revoked key (R9: `keyCompromise` and
+     * the earliest `invalidity_date` win), or undefined when the key is not
+     * revoked. Reads the history store only; call {@link status} first to refresh.
+     * Throws {@link WebBotAuthUnavailableError} when the store fails.
+     */
+    detail(originUrl: string, keyid: string): Promise<RevocationDetail | undefined>;
     private readStored;
     private refresh;
     private now;

package/dist/lib/identity-3.3/revocation.d.ts

@@ -78,6 +78,13 @@ export declare class OriginRevocationResolver {
      */
     status(originUrl: string, keyid: string): Promise<OriginRevocationStatus>;
     private currentStatus;
+    /**
+     * The most severe detail stored for a revoked key (R9: `keyCompromise` and
+     * the earliest `invalidity_date` win), or undefined when the key is not
+     * revoked. Reads the history store only; call {@link status} first to refresh.
+     * Throws {@link WebBotAuthUnavailableError} when the store fails.
+     */
+    detail(originUrl: string, keyid: string): Promise<RevocationDetail | undefined>;
     private readStored;
     private refresh;
     private now;

package/dist/lib/identity-3.3/revocation.js

@@ -186,6 +186,19 @@ class OriginRevocationResolver {
     }
     return settled();
   }
+  /**
+   * The most severe detail stored for a revoked key (R9: `keyCompromise` and
+   * the earliest `invalidity_date` win), or undefined when the key is not
+   * revoked. Reads the history store only; call {@link status} first to refresh.
+   * Throws {@link WebBotAuthUnavailableError} when the store fails.
+   */
+  async detail(originUrl, keyid) {
+    try {
+      return await this.readStored((0, import_canonicalize.canonicalAgentOrigin)(originUrl), keyid);
+    } catch (error) {
+      throw new import_web_bot_auth.WebBotAuthUnavailableError("revocation_persistence_failed", error);
+    }
+  }
   async readStored(origin, keyid) {
     try {
       return await this.options.store.get(origin, keyid);

package/dist/lib/identity-3.3/revocation.mjs

@@ -165,6 +165,19 @@ class OriginRevocationResolver {
     }
     return settled();
   }
+  /**
+   * The most severe detail stored for a revoked key (R9: `keyCompromise` and
+   * the earliest `invalidity_date` win), or undefined when the key is not
+   * revoked. Reads the history store only; call {@link status} first to refresh.
+   * Throws {@link WebBotAuthUnavailableError} when the store fails.
+   */
+  async detail(originUrl, keyid) {
+    try {
+      return await this.readStored(canonicalAgentOrigin(originUrl), keyid);
+    } catch (error) {
+      throw new WebBotAuthUnavailableError("revocation_persistence_failed", error);
+    }
+  }
   async readStored(origin, keyid) {
     try {
       return await this.options.store.get(origin, keyid);

package/dist/lib/identity-3.3/schemas.draft.js

@@ -242,7 +242,7 @@ var schemas_draft_default = [
         properties: {
           grantee: {
             $ref: "#/definitions/domain",
-            description: "Domain of the organization receiving the grant. Its agents resolve to this domain through its own trust.json."
+            description: "Registrable domain (eTLD+1) of the organization receiving the grant, under the pinned Public Suffix List snapshot, ICANN and private sections (spec R3a step 1). Its agents resolve to this domain through its own trust.json. A host below a registrable domain (t1.vendor.example) is not one, and neither is a public suffix itself (github.io); alice.github.io is one, because github.io is in the private section. A grant whose grantee is not a registrable domain covers no claim, and its scopes still count for exclusive_grants, as L2 \xA7Grants in trust records describes (docs/building/by-layer/L2/accounts-and-agents.mdx). A pattern can't evaluate the Public Suffix List, so verifiers apply the rule. To limit a grant to some of the grantee's agents, list them in agents[]."
           },
           agents: {
             type: "array",

package/dist/lib/identity-3.3/schemas.draft.mjs

@@ -219,7 +219,7 @@ var schemas_draft_default = [
         properties: {
           grantee: {
             $ref: "#/definitions/domain",
-            description: "Domain of the organization receiving the grant. Its agents resolve to this domain through its own trust.json."
+            description: "Registrable domain (eTLD+1) of the organization receiving the grant, under the pinned Public Suffix List snapshot, ICANN and private sections (spec R3a step 1). Its agents resolve to this domain through its own trust.json. A host below a registrable domain (t1.vendor.example) is not one, and neither is a public suffix itself (github.io); alice.github.io is one, because github.io is in the private section. A grant whose grantee is not a registrable domain covers no claim, and its scopes still count for exclusive_grants, as L2 \xA7Grants in trust records describes (docs/building/by-layer/L2/accounts-and-agents.mdx). A pattern can't evaluate the Public Suffix List, so verifiers apply the rule. To limit a grant to some of the grantee's agents, list them in agents[]."
           },
           agents: {
             type: "array",

package/dist/lib/identity-3.3/trust.d.mts

@@ -34,6 +34,14 @@ export declare class TrustMembershipError extends IdentityAuthorizationError {
 }
 /** Schema plus semantic checks; publication never includes identity keys. */
 export declare function validateTrustRecord(value: unknown): asserts value is TrustRecord;
+/**
+ * Publication rules beyond the schema: every grant's `grantee` is a
+ * registrable domain and every `agents[].url` parses as an agent origin. A
+ * relying party ignores a grant that breaks either, so publishing one grants
+ * nothing while still making `grants[]` exhaustive for its scopes.
+ */
+export declare function assertPublishableTrustRecord(record: TrustRecord): void;
+/** Validate ({@link assertPublishableTrustRecord}) and copy a trust record for publication. */
 export declare function createTrustRecord(record: TrustRecord): TrustRecord;
 export type TrustFetchResult = {
     status: 'present';

package/dist/lib/identity-3.3/trust.d.ts

@@ -34,6 +34,14 @@ export declare class TrustMembershipError extends IdentityAuthorizationError {
 }
 /** Schema plus semantic checks; publication never includes identity keys. */
 export declare function validateTrustRecord(value: unknown): asserts value is TrustRecord;
+/**
+ * Publication rules beyond the schema: every grant's `grantee` is a
+ * registrable domain and every `agents[].url` parses as an agent origin. A
+ * relying party ignores a grant that breaks either, so publishing one grants
+ * nothing while still making `grants[]` exhaustive for its scopes.
+ */
+export declare function assertPublishableTrustRecord(record: TrustRecord): void;
+/** Validate ({@link assertPublishableTrustRecord}) and copy a trust record for publication. */
 export declare function createTrustRecord(record: TrustRecord): TrustRecord;
 export type TrustFetchResult = {
     status: 'present';

package/dist/lib/identity-3.3/trust.js

@@ -32,6 +32,7 @@ __export(trust_exports, {
   TrustEvaluator: () => TrustEvaluator,
   TrustMembershipError: () => TrustMembershipError,
   TrustRecordUnavailableError: () => TrustRecordUnavailableError,
+  assertPublishableTrustRecord: () => assertPublishableTrustRecord,
   authorizeDemandGrant: () => authorizeDemandGrant,
   createTrustRecord: () => createTrustRecord,
   validateIdentity33Schema: () => validateIdentity33Schema,
@@ -110,8 +111,34 @@ function validateTrustRecord(value) {
     origins.add(origin);
   }
 }
-function createTrustRecord(record) {
+function registrableGrantee(grantee) {
+  try {
+    return (0, import_etld.eTldPlusOne)(grantee) === grantee ? grantee : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function grantAgentOrigin(url) {
+  try {
+    return (0, import_canonicalize.canonicalAgentOrigin)(url);
+  } catch {
+    return void 0;
+  }
+}
+function assertPublishableTrustRecord(record) {
   validateTrustRecord(record);
+  for (const grant of record.grants ?? []) {
+    if (registrableGrantee(grant.grantee) === void 0)
+      throw new TypeError(
+        `Grant grantee "${grant.grantee}" is not a registrable domain; name the organization's registrable domain and narrow with agents[]`
+      );
+    for (const agent of grant.agents ?? [])
+      if (grantAgentOrigin(agent.url) === void 0)
+        throw new TypeError(`Grant agents[] URL "${agent.url}" is not a valid agent origin`);
+  }
+}
+function createTrustRecord(record) {
+  assertPublishableTrustRecord(record);
   return structuredClone(record);
 }
 class TrustEvaluator {
@@ -308,13 +335,15 @@ function authorityGroup(operator) {
   const provider = (0, import_tldts.parse)(operator).domain;
   return `private:${provider ?? operator}`;
 }
+function grantsScope(grant, scope) {
+  return grant.scopes.some(
+    (granted) => granted === "*" || granted === scope || granted === "adcp:all" && scope.startsWith("adcp:")
+  );
+}
 function grantMatches(grant, target, claim, now) {
-  if ((0, import_etld.eTldPlusOne)(grant.grantee) !== target) return false;
-  if (!grant.scopes.some(
-    (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-  ))
-    return false;
-  if (grant.agents && !grant.agents.some((agent) => (0, import_canonicalize.canonicalAgentOrigin)(agent.url) === (0, import_canonicalize.canonicalAgentOrigin)(claim.signerOrigin)))
+  if (registrableGrantee(grant.grantee) !== target) return false;
+  if (!grantsScope(grant, claim.scope)) return false;
+  if (grant.agents && !grant.agents.some((agent) => grantAgentOrigin(agent.url) === (0, import_canonicalize.canonicalAgentOrigin)(claim.signerOrigin)))
     return false;
   const brands = grant.profiles?.adcp?.brands;
   if (brands && !brands.includes("*") && (!claim.brand.brand_id || !brands.includes(claim.brand.brand_id)))
@@ -361,11 +390,10 @@ async function authorizeDemandGrant(claim, options) {
       if (second) return result("trust", [brand, account, operator], [first[0], second]);
     }
   }
-  const covered = (record.record.grants ?? []).some(
-    (g) => ((0, import_etld.eTldPlusOne)(g.grantee) === account || selfOperated && (0, import_etld.eTldPlusOne)(g.grantee) === operator) && g.scopes.some(
-      (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-    )
-  );
+  const covered = (record.record.grants ?? []).some((g) => {
+    const grantee = registrableGrantee(g.grantee);
+    return grantee !== void 0 && (grantee === account || selfOperated && grantee === operator) && grantsScope(g, claim.scope);
+  });
   if (!covered && !record.record.exclusive_grants && await options.sellerAuthorization?.(claim))
     return result("seller", [brand, account, operator]);
   throw new IdentityAuthorizationError("grant_absent");
@@ -376,6 +404,7 @@ async function authorizeDemandGrant(claim, options) {
   TrustEvaluator,
   TrustMembershipError,
   TrustRecordUnavailableError,
+  assertPublishableTrustRecord,
   authorizeDemandGrant,
   createTrustRecord,
   validateIdentity33Schema,

package/dist/lib/identity-3.3/trust.mjs

@@ -70,8 +70,34 @@ function validateTrustRecord(value) {
     origins.add(origin);
   }
 }
-function createTrustRecord(record) {
+function registrableGrantee(grantee) {
+  try {
+    return eTldPlusOne(grantee) === grantee ? grantee : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function grantAgentOrigin(url) {
+  try {
+    return canonicalAgentOrigin(url);
+  } catch {
+    return void 0;
+  }
+}
+function assertPublishableTrustRecord(record) {
   validateTrustRecord(record);
+  for (const grant of record.grants ?? []) {
+    if (registrableGrantee(grant.grantee) === void 0)
+      throw new TypeError(
+        `Grant grantee "${grant.grantee}" is not a registrable domain; name the organization's registrable domain and narrow with agents[]`
+      );
+    for (const agent of grant.agents ?? [])
+      if (grantAgentOrigin(agent.url) === void 0)
+        throw new TypeError(`Grant agents[] URL "${agent.url}" is not a valid agent origin`);
+  }
+}
+function createTrustRecord(record) {
+  assertPublishableTrustRecord(record);
   return structuredClone(record);
 }
 class TrustEvaluator {
@@ -268,13 +294,15 @@ function authorityGroup(operator) {
   const provider = parseDomain(operator).domain;
   return `private:${provider ?? operator}`;
 }
+function grantsScope(grant, scope) {
+  return grant.scopes.some(
+    (granted) => granted === "*" || granted === scope || granted === "adcp:all" && scope.startsWith("adcp:")
+  );
+}
 function grantMatches(grant, target, claim, now) {
-  if (eTldPlusOne(grant.grantee) !== target) return false;
-  if (!grant.scopes.some(
-    (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-  ))
-    return false;
-  if (grant.agents && !grant.agents.some((agent) => canonicalAgentOrigin(agent.url) === canonicalAgentOrigin(claim.signerOrigin)))
+  if (registrableGrantee(grant.grantee) !== target) return false;
+  if (!grantsScope(grant, claim.scope)) return false;
+  if (grant.agents && !grant.agents.some((agent) => grantAgentOrigin(agent.url) === canonicalAgentOrigin(claim.signerOrigin)))
     return false;
   const brands = grant.profiles?.adcp?.brands;
   if (brands && !brands.includes("*") && (!claim.brand.brand_id || !brands.includes(claim.brand.brand_id)))
@@ -321,11 +349,10 @@ async function authorizeDemandGrant(claim, options) {
       if (second) return result("trust", [brand, account, operator], [first[0], second]);
     }
   }
-  const covered = (record.record.grants ?? []).some(
-    (g) => (eTldPlusOne(g.grantee) === account || selfOperated && eTldPlusOne(g.grantee) === operator) && g.scopes.some(
-      (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-    )
-  );
+  const covered = (record.record.grants ?? []).some((g) => {
+    const grantee = registrableGrantee(g.grantee);
+    return grantee !== void 0 && (grantee === account || selfOperated && grantee === operator) && grantsScope(g, claim.scope);
+  });
   if (!covered && !record.record.exclusive_grants && await options.sellerAuthorization?.(claim))
     return result("seller", [brand, account, operator]);
   throw new IdentityAuthorizationError("grant_absent");
@@ -335,6 +362,7 @@ export {
   TrustEvaluator,
   TrustMembershipError,
   TrustRecordUnavailableError,
+  assertPublishableTrustRecord,
   authorizeDemandGrant,
   createTrustRecord,
   validateIdentity33Schema,

package/dist/lib/index.d.mts

@@ -36,17 +36,17 @@ export { match, attachMatch } from './core/match.mjs';
 export type { MatchHandlers, PartialMatchHandlers } from './core/match.mjs';
 export { ProtocolResponseParser, responseParser, ADCP_STATUS, type ADCPStatus } from './core/ProtocolResponseParser.mjs';
 export { ResponseValidator, responseValidator, type ValidationResult, type ValidationOptions, } from './core/ResponseValidator.mjs';
-export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes.mjs';
+export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, TrackTaskRequest, TrackedTask, SubmittedContinuation, TaskInfo, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes.mjs';
 export type { GovernanceConfig, CampaignGovernanceConfig, GovernanceCheckResult, GovernanceOutcome, GovernanceFinding, GovernanceIntentDetails, GovernanceCondition, GovernanceEscalation, NormalizedGovernanceApproved, NormalizedGovernanceConditions, NormalizedGovernanceDenied, NormalizedGovernanceVerdict, } from './core/GovernanceTypes.mjs';
 export { GovernanceMiddleware } from './core/GovernanceMiddleware.mjs';
 export { isGovernanceApproved, isGovernanceConditions, isGovernanceDenied, normalizeGovernanceVerdict, } from './core/GovernanceTypes.mjs';
 export type { GovernanceDebugEntry } from './core/GovernanceMiddleware.mjs';
-export { GOVERNANCE_AUTHORIZATION_CRITICAL_CLAIMS, GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceCommitment, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, buildGovernanceIntentRequest, buildGovernanceProposedCommitment, buildHumanReviewPlan, buildHumanOverride, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, getGovernanceEnforcementTasks, governancePurchaseTypeForTask, governanceTaskRequiresProposedCommitment, targetDeclaresGovernanceEnforcement, targetDeclaresLegacyGovernanceAwareness, validateGovernancePlan, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, REGULATED_HUMAN_REVIEW_CATEGORIES, ANNEX_III_POLICY_IDS, } from './governance/index.mjs';
+export { GOVERNANCE_AUTHORIZATION_CRITICAL_CLAIMS, GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceCommitment, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, buildGovernanceIntentRequest, buildGovernanceProposedCommitment, buildHumanReviewPlan, buildHumanOverride, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, getGovernanceEnforcementTasks, governancePurchaseTypeForTask, governanceTaskRequiresProposedCommitment, targetDeclaresGovernanceEnforcement, targetDeclaresLegacyGovernanceAwareness, validateGovernancePlan, verifyGovernanceAuthorization, verifyHistoricalGovernanceContext, createGovernanceAgentJwksResolver, REGULATED_HUMAN_REVIEW_CATEGORIES, ANNEX_III_POLICY_IDS, } from './governance/index.mjs';
 export { ssrfSafeFetch, decodeBodyAsJsonOrText, SSRF_TRANSIENT_CODES, SsrfRefusedError, isPrivateIp, isAlwaysBlocked, isLikelyPrivateUrl, type SsrfRefusedCode, type SsrfDnsLookup, type SsrfFetchOptions, type SsrfFetchResult, } from './net/index.mjs';
 export { createCanonicalReferenceCache, createCanonicalReferenceResolver, canonicalReferenceCacheKey, resolveCanonicalReference, resolveFormatSchemaReference, resolvePlatformExtensionsReference, type CanonicalReference, type CanonicalReferenceCache, type CanonicalReferenceCacheOptions, type CanonicalReferenceError, type CanonicalReferenceErrorCode, type CanonicalReferenceFailureResult, type CanonicalReferenceKind, type CanonicalReferenceResolveOptions, type CanonicalReferenceResolvedResult, type CanonicalReferenceResolver, type CanonicalReferenceResolverOptions, type CanonicalReferenceResult, type CanonicalReferenceStatus, type ExternalRefDigestMap, type FormatSchemaReferenceResolvedResult, type FormatSchemaReferenceResult, type PlatformExtensionsReferenceResult, } from './canonical-references/index.mjs';
 export { assessAcceptancePolicy, createAcceptancePolicyCatalogResolver, resolveAcceptancePolicyCatalog, resolveAcceptancePolicyProfiles, resolveVerifiedAcceptancePolicyProfiles, type AcceptancePolicyCatalog, type AcceptancePolicyCatalogErrorCode, type AcceptancePolicyCatalogFailure, type AcceptancePolicyCatalogIssue, type AcceptancePolicyCatalogResolver, type AcceptancePolicyCatalogResult, type AcceptancePolicyCatalogSuccess, type AcceptancePolicyDiscoveryCapability, type AcceptancePolicyProfile, type AcceptancePolicyProfileResolution, type AcceptancePolicyRegistryPolicy, type AcceptancePolicyRegistryResolver, type AcceptancePolicyReference, type AcceptancePolicyRequirement, type AcceptancePolicyRule, type AcceptancePolicySurface, type RegistryAcceptancePolicyProfileReference, type ResolveAcceptancePolicyCatalogOptions, type ResolveVerifiedAcceptancePolicyProfilesOptions, type ResolvedAcceptancePolicyDefault, type VerifiedAcceptancePolicyProfilesResult, type VerifiedAcceptancePolicyProfilesSuccess, } from './acceptance-policy/index.mjs';
 export { type AcceptancePolicyAssessment, type AcceptancePolicyAssessmentDiagnostic, type AcceptancePolicyAssessmentDiagnosticCode, type AcceptancePolicyMatchedRule, type AcceptancePolicyOutcome, type AssessAcceptancePolicyInput, } from './acceptance-policy/evaluator.mjs';
-export type { BuildGovernanceExecutionRequestInput, BuildGovernanceIntentRequestInput, BuildHumanReviewPlanInput, BuildHumanOverrideInput, DataSubjectContestation, GovernanceAuthorizationClaims, GovernanceAuthorizationCriticalClaim, GovernanceAuthorizationErrorCode, GovernanceAuthorizationFailure, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceEnforcementMode, GovernanceEnforcementTask, GovernancePlan, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, GovernanceValidationIssue, HumanOverride, InMemoryGovernanceReplayStoreOptions, PlanBudget, ReallocationAutonomy, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from './governance/index.mjs';
+export type { BuildGovernanceExecutionRequestInput, BuildGovernanceIntentRequestInput, BuildHumanReviewPlanInput, BuildHumanOverrideInput, DataSubjectContestation, GovernanceAuthorizationClaims, GovernanceAuthorizationCriticalClaim, GovernanceAuthorizationErrorCode, GovernanceAuthorizationFailure, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceEnforcementMode, GovernanceEnforcementTask, GovernancePlan, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, GovernanceValidationIssue, HumanOverride, InMemoryGovernanceReplayStoreOptions, PlanBudget, ReallocationAutonomy, VerifyGovernanceAuthorizationOptions, VerifyHistoricalGovernanceContextOptions, HistoricalGovernanceContextResult, GovernanceBuyerIdentity, } from './governance/index.mjs';
 export type { BaseTaskEvent, ProtocolRequestEvent, ProtocolResponseEvent, TaskStatusEvent, ObjectEvent, TaskEvent, TaskEventCallbacks, } from './core/TaskEventTypes.mjs';
 export { createOperationId } from './core/TaskEventTypes.mjs';
 export type { AsyncHandlerConfig, WebhookMetadata, Activity, NotificationMetadata, MediaBuyDeliveryNotification, CreateMediaBuyStatusChangeHandler, UpdateMediaBuyStatusChangeHandler, SyncCreativesStatusChangeHandler, GetProductsStatusChangeHandler, ListProductsStatusChangeHandler, } from './core/AsyncHandler.mjs';

package/dist/lib/index.d.ts

@@ -36,17 +36,17 @@ export { match, attachMatch } from './core/match';
 export type { MatchHandlers, PartialMatchHandlers } from './core/match';
 export { ProtocolResponseParser, responseParser, ADCP_STATUS, type ADCPStatus } from './core/ProtocolResponseParser';
 export { ResponseValidator, responseValidator, type ValidationResult, type ValidationOptions, } from './core/ResponseValidator';
-export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes';
+export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, TrackTaskRequest, TrackedTask, SubmittedContinuation, TaskInfo, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes';
 export type { GovernanceConfig, CampaignGovernanceConfig, GovernanceCheckResult, GovernanceOutcome, GovernanceFinding, GovernanceIntentDetails, GovernanceCondition, GovernanceEscalation, NormalizedGovernanceApproved, NormalizedGovernanceConditions, NormalizedGovernanceDenied, NormalizedGovernanceVerdict, } from './core/GovernanceTypes';
 export { GovernanceMiddleware } from './core/GovernanceMiddleware';
 export { isGovernanceApproved, isGovernanceConditions, isGovernanceDenied, normalizeGovernanceVerdict, } from './core/GovernanceTypes';
 export type { GovernanceDebugEntry } from './core/GovernanceMiddleware';
-export { GOVERNANCE_AUTHORIZATION_CRITICAL_CLAIMS, GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceCommitment, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, buildGovernanceIntentRequest, buildGovernanceProposedCommitment, buildHumanReviewPlan, buildHumanOverride, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, getGovernanceEnforcementTasks, governancePurchaseTypeForTask, governanceTaskRequiresProposedCommitment, targetDeclaresGovernanceEnforcement, targetDeclaresLegacyGovernanceAwareness, validateGovernancePlan, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, REGULATED_HUMAN_REVIEW_CATEGORIES, ANNEX_III_POLICY_IDS, } from './governance';
+export { GOVERNANCE_AUTHORIZATION_CRITICAL_CLAIMS, GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceCommitment, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, buildGovernanceIntentRequest, buildGovernanceProposedCommitment, buildHumanReviewPlan, buildHumanOverride, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, getGovernanceEnforcementTasks, governancePurchaseTypeForTask, governanceTaskRequiresProposedCommitment, targetDeclaresGovernanceEnforcement, targetDeclaresLegacyGovernanceAwareness, validateGovernancePlan, verifyGovernanceAuthorization, verifyHistoricalGovernanceContext, createGovernanceAgentJwksResolver, REGULATED_HUMAN_REVIEW_CATEGORIES, ANNEX_III_POLICY_IDS, } from './governance';
 export { ssrfSafeFetch, decodeBodyAsJsonOrText, SSRF_TRANSIENT_CODES, SsrfRefusedError, isPrivateIp, isAlwaysBlocked, isLikelyPrivateUrl, type SsrfRefusedCode, type SsrfDnsLookup, type SsrfFetchOptions, type SsrfFetchResult, } from './net';
 export { createCanonicalReferenceCache, createCanonicalReferenceResolver, canonicalReferenceCacheKey, resolveCanonicalReference, resolveFormatSchemaReference, resolvePlatformExtensionsReference, type CanonicalReference, type CanonicalReferenceCache, type CanonicalReferenceCacheOptions, type CanonicalReferenceError, type CanonicalReferenceErrorCode, type CanonicalReferenceFailureResult, type CanonicalReferenceKind, type CanonicalReferenceResolveOptions, type CanonicalReferenceResolvedResult, type CanonicalReferenceResolver, type CanonicalReferenceResolverOptions, type CanonicalReferenceResult, type CanonicalReferenceStatus, type ExternalRefDigestMap, type FormatSchemaReferenceResolvedResult, type FormatSchemaReferenceResult, type PlatformExtensionsReferenceResult, } from './canonical-references';
 export { assessAcceptancePolicy, createAcceptancePolicyCatalogResolver, resolveAcceptancePolicyCatalog, resolveAcceptancePolicyProfiles, resolveVerifiedAcceptancePolicyProfiles, type AcceptancePolicyCatalog, type AcceptancePolicyCatalogErrorCode, type AcceptancePolicyCatalogFailure, type AcceptancePolicyCatalogIssue, type AcceptancePolicyCatalogResolver, type AcceptancePolicyCatalogResult, type AcceptancePolicyCatalogSuccess, type AcceptancePolicyDiscoveryCapability, type AcceptancePolicyProfile, type AcceptancePolicyProfileResolution, type AcceptancePolicyRegistryPolicy, type AcceptancePolicyRegistryResolver, type AcceptancePolicyReference, type AcceptancePolicyRequirement, type AcceptancePolicyRule, type AcceptancePolicySurface, type RegistryAcceptancePolicyProfileReference, type ResolveAcceptancePolicyCatalogOptions, type ResolveVerifiedAcceptancePolicyProfilesOptions, type ResolvedAcceptancePolicyDefault, type VerifiedAcceptancePolicyProfilesResult, type VerifiedAcceptancePolicyProfilesSuccess, } from './acceptance-policy';
 export { type AcceptancePolicyAssessment, type AcceptancePolicyAssessmentDiagnostic, type AcceptancePolicyAssessmentDiagnosticCode, type AcceptancePolicyMatchedRule, type AcceptancePolicyOutcome, type AssessAcceptancePolicyInput, } from './acceptance-policy/evaluator';
-export type { BuildGovernanceExecutionRequestInput, BuildGovernanceIntentRequestInput, BuildHumanReviewPlanInput, BuildHumanOverrideInput, DataSubjectContestation, GovernanceAuthorizationClaims, GovernanceAuthorizationCriticalClaim, GovernanceAuthorizationErrorCode, GovernanceAuthorizationFailure, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceEnforcementMode, GovernanceEnforcementTask, GovernancePlan, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, GovernanceValidationIssue, HumanOverride, InMemoryGovernanceReplayStoreOptions, PlanBudget, ReallocationAutonomy, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from './governance';
+export type { BuildGovernanceExecutionRequestInput, BuildGovernanceIntentRequestInput, BuildHumanReviewPlanInput, BuildHumanOverrideInput, DataSubjectContestation, GovernanceAuthorizationClaims, GovernanceAuthorizationCriticalClaim, GovernanceAuthorizationErrorCode, GovernanceAuthorizationFailure, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceEnforcementMode, GovernanceEnforcementTask, GovernancePlan, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, GovernanceValidationIssue, HumanOverride, InMemoryGovernanceReplayStoreOptions, PlanBudget, ReallocationAutonomy, VerifyGovernanceAuthorizationOptions, VerifyHistoricalGovernanceContextOptions, HistoricalGovernanceContextResult, GovernanceBuyerIdentity, } from './governance';
 export type { BaseTaskEvent, ProtocolRequestEvent, ProtocolResponseEvent, TaskStatusEvent, ObjectEvent, TaskEvent, TaskEventCallbacks, } from './core/TaskEventTypes';
 export { createOperationId } from './core/TaskEventTypes';
 export type { AsyncHandlerConfig, WebhookMetadata, Activity, NotificationMetadata, MediaBuyDeliveryNotification, CreateMediaBuyStatusChangeHandler, UpdateMediaBuyStatusChangeHandler, SyncCreativesStatusChangeHandler, GetProductsStatusChangeHandler, ListProductsStatusChangeHandler, } from './core/AsyncHandler';

package/dist/lib/index.js

@@ -714,6 +714,7 @@ __export(index_exports, {
   vastAssetSlot: () => import_format_asset_slot_builders.vastAssetSlot,
   vastGroupAsset: () => import_format_asset_slot_builders.vastGroupAsset,
   verifyGovernanceAuthorization: () => import_governance.verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext: () => import_governance.verifyHistoricalGovernanceContext,
   verifyIntrospection: () => import_server.verifyIntrospection,
   videoAsset: () => import_asset_builders.videoAsset,
   videoAssetSlot: () => import_format_asset_slot_builders.videoAssetSlot,
@@ -1558,6 +1559,7 @@ function createAdCPClientFromEnv() {
   vastAssetSlot,
   vastGroupAsset,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   verifyIntrospection,
   videoAsset,
   videoAssetSlot,

package/dist/lib/index.mjs

@@ -160,6 +160,7 @@ import {
   targetDeclaresLegacyGovernanceAwareness,
   validateGovernancePlan,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   createGovernanceAgentJwksResolver,
   REGULATED_HUMAN_REVIEW_CATEGORIES,
   ANNEX_III_POLICY_IDS
@@ -1520,6 +1521,7 @@ export {
   vastAssetSlot,
   vastGroupAsset,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   verifyIntrospection,
   videoAsset,
   videoAssetSlot,