@adcp/sdk 16.1.0 → 16.3.0

package/dist/lib/negotiation/version.js

@@ -0,0 +1,60 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var version_exports = {};
+__export(version_exports, {
+  applicableRefinementServedVersion: () => applicableRefinementServedVersion,
+  compareProposalRefinementVersions: () => compareProposalRefinementVersions,
+  describeRefinementVersion: () => describeRefinementVersion,
+  isProposalRefinementVersion: () => isProposalRefinementVersion
+});
+module.exports = __toCommonJS(version_exports);
+var import_semver = require("semver");
+var import_version = require('../version.js');
+function isProposalRefinementVersion(value) {
+  if (typeof value !== "string" || !/^3\.[23](?:-[A-Za-z0-9]+(?:[.-][A-Za-z0-9]+)*)?$/.test(value)) return false;
+  const comparable = value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return (0, import_semver.valid)(comparable) === comparable;
+}
+function applicableRefinementServedVersion(served, ceiling, discoveryCeiling = ceiling) {
+  if (!isProposalRefinementVersion(discoveryCeiling)) return void 0;
+  if (!isProposalRefinementVersion(ceiling) || compareProposalRefinementVersions(ceiling, discoveryCeiling) > 0)
+    return void 0;
+  if (typeof served !== "string" || !isProposalRefinementVersion(ceiling)) return void 0;
+  if (!isProposalRefinementVersion(served) && (0, import_semver.valid)(served) !== served) return void 0;
+  const release = (0, import_version.toReleasePrecisionVersion)(served);
+  return isProposalRefinementVersion(release) && compareProposalRefinementVersions(release, ceiling) <= 0 ? served : void 0;
+}
+function compareProposalRefinementVersions(left, right) {
+  const semver = (value) => value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return (0, import_semver.compare)(semver(left), semver(right));
+}
+function describeRefinementVersion(value) {
+  try {
+    return (JSON.stringify(value) ?? String(value)).slice(0, 160);
+  } catch {
+    return "[unserializable version]";
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  applicableRefinementServedVersion,
+  compareProposalRefinementVersions,
+  describeRefinementVersion,
+  isProposalRefinementVersion
+});

package/dist/lib/negotiation/version.mjs

@@ -0,0 +1,33 @@
+import { compare, valid } from "semver";
+import { toReleasePrecisionVersion } from "../version.mjs";
+function isProposalRefinementVersion(value) {
+  if (typeof value !== "string" || !/^3\.[23](?:-[A-Za-z0-9]+(?:[.-][A-Za-z0-9]+)*)?$/.test(value)) return false;
+  const comparable = value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return valid(comparable) === comparable;
+}
+function applicableRefinementServedVersion(served, ceiling, discoveryCeiling = ceiling) {
+  if (!isProposalRefinementVersion(discoveryCeiling)) return void 0;
+  if (!isProposalRefinementVersion(ceiling) || compareProposalRefinementVersions(ceiling, discoveryCeiling) > 0)
+    return void 0;
+  if (typeof served !== "string" || !isProposalRefinementVersion(ceiling)) return void 0;
+  if (!isProposalRefinementVersion(served) && valid(served) !== served) return void 0;
+  const release = toReleasePrecisionVersion(served);
+  return isProposalRefinementVersion(release) && compareProposalRefinementVersions(release, ceiling) <= 0 ? served : void 0;
+}
+function compareProposalRefinementVersions(left, right) {
+  const semver = (value) => value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return compare(semver(left), semver(right));
+}
+function describeRefinementVersion(value) {
+  try {
+    return (JSON.stringify(value) ?? String(value)).slice(0, 160);
+  } catch {
+    return "[unserializable version]";
+  }
+}
+export {
+  applicableRefinementServedVersion,
+  compareProposalRefinementVersions,
+  describeRefinementVersion,
+  isProposalRefinementVersion
+};

package/dist/lib/registry/types.generated.d.mts

@@ -4314,6 +4314,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4388,6 +4394,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4405,7 +4428,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**

package/dist/lib/registry/types.generated.d.ts

@@ -4314,6 +4314,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4388,6 +4394,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4405,7 +4428,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**

package/dist/lib/server/create-adcp-server.js

@@ -726,7 +726,7 @@ function validateFrameworkPayload(toolName, direction, payload, version, proposa
       };
     }
   }
-  const verification = (0, import_verification.validateRefineProposalsResponseShape)(payload);
+  const verification = (0, import_verification.validateRefineProposalsResponseShape)(payload, { adcpVersion: version });
   if (verification.ok) {
     return {
       valid: true,

package/dist/lib/server/create-adcp-server.mjs

@@ -817,7 +817,7 @@ function validateFrameworkPayload(toolName, direction, payload, version, proposa
       };
     }
   }
-  const verification = validateRefineProposalsResponseShape(payload);
+  const verification = validateRefineProposalsResponseShape(payload, { adcpVersion: version });
   if (verification.ok) {
     return {
       valid: true,

package/dist/lib/server/error-arm-tools.d.mts

@@ -10,10 +10,11 @@
  * response schema doesn't define it would add a key the schema
  * doesn't expect.
  *
- * Built lazily at first use from the bundled schema cache (the same
- * tree `schema-loader.ts` reads). The set is computed once per bundle
- * key (`resolveBundleKey('3.0.0')` → `'3.0'`) and memoised — the schema
- * tree is read-only at runtime, so a single scan is sufficient.
+ * Derived from the active schema-loader authority. Bundle inventories are
+ * memoised by bundle key and resolved root, with loader-epoch invalidation
+ * so scoped or re-registered candidate bundles cannot leak.
+ * Raw external roots use the loader's response index when no bundled
+ * store exists.
  *
  * Spec basis: `error-code.json#GOVERNANCE_DENIED` and
  * `#GOVERNANCE_UNAVAILABLE` both prescribe "populate `errors[].code` in
@@ -44,12 +45,11 @@ export interface ErrorArmDescriptor {
  * gate for two-layer auto-emission, plus the per-arm constants the
  * dispatcher needs to set when synthesising the wrap.
  *
- * Scans the bundled schema cache lazily on first call per bundle key
- * (one read per minor version per process). Returns a frozen, empty map
- * when no schema bundle is reachable — the dispatcher early-returns on
- * `map.size === 0`, so a missing bundle silently disables the wrap
- * rather than breaking server startup.
+ * Scans the active schema authority lazily. Missing roots return an empty map
+ * without caching, so later external registration takes effect. Re-registering
+ * or entering another schema scope invalidates cached inventories, including
+ * replacements of candidate bundles at the same path.
  */
 export declare function getToolsWithErrorArm(version?: string): ReadonlyMap<string, ErrorArmDescriptor>;
-/** Test hook: clear the per-bundle-key cache. */
+/** Test hook: clear cached error-arm inventories. */
 export declare function _resetErrorArmToolsCache(): void;

package/dist/lib/server/error-arm-tools.d.ts

@@ -10,10 +10,11 @@
  * response schema doesn't define it would add a key the schema
  * doesn't expect.
  *
- * Built lazily at first use from the bundled schema cache (the same
- * tree `schema-loader.ts` reads). The set is computed once per bundle
- * key (`resolveBundleKey('3.0.0')` → `'3.0'`) and memoised — the schema
- * tree is read-only at runtime, so a single scan is sufficient.
+ * Derived from the active schema-loader authority. Bundle inventories are
+ * memoised by bundle key and resolved root, with loader-epoch invalidation
+ * so scoped or re-registered candidate bundles cannot leak.
+ * Raw external roots use the loader's response index when no bundled
+ * store exists.
  *
  * Spec basis: `error-code.json#GOVERNANCE_DENIED` and
  * `#GOVERNANCE_UNAVAILABLE` both prescribe "populate `errors[].code` in
@@ -44,12 +45,11 @@ export interface ErrorArmDescriptor {
  * gate for two-layer auto-emission, plus the per-arm constants the
  * dispatcher needs to set when synthesising the wrap.
  *
- * Scans the bundled schema cache lazily on first call per bundle key
- * (one read per minor version per process). Returns a frozen, empty map
- * when no schema bundle is reachable — the dispatcher early-returns on
- * `map.size === 0`, so a missing bundle silently disables the wrap
- * rather than breaking server startup.
+ * Scans the active schema authority lazily. Missing roots return an empty map
+ * without caching, so later external registration takes effect. Re-registering
+ * or entering another schema scope invalidates cached inventories, including
+ * replacements of candidate bundles at the same path.
  */
 export declare function getToolsWithErrorArm(version?: string): ReadonlyMap<string, ErrorArmDescriptor>;
-/** Test hook: clear the per-bundle-key cache. */
+/** Test hook: clear cached error-arm inventories. */
 export declare function _resetErrorArmToolsCache(): void;

package/dist/lib/server/error-arm-tools.js

@@ -37,49 +37,6 @@ var import_path = __toESM(require("path"));
 var import_version = require('../version.js');
 var import_schema_loader = require('../validation/schema-loader.js');
 var import_bundled_schema_store = require('../validation/bundled-schema-store.js');
-function findPrereleaseBundle(root, key) {
-  if (!(0, import_fs.existsSync)(root)) return void 0;
-  const candidates = (0, import_fs.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: (0, import_schema_loader.toReleasePrecisionWire)(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? import_path.default.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
-  const distRoot = import_path.default.join(__dirname, "..", "schemas-data");
-  const distCandidate = import_path.default.join(distRoot, key, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return import_path.default.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = import_path.default.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = import_path.default.join(cacheRoot, version, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && (0, import_fs.existsSync)(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = (0, import_fs.readdirSync)(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return import_path.default.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return import_path.default.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -113,19 +70,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = import_path.default.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(import_path.default.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = (0, import_bundled_schema_store.hasBundledSchemaStore)(bundledRoot);
+  const responses = bundled ? (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: import_path.default.basename(file, "-response.json").replace(/-/g, "_"), file })) : (0, import_schema_loader.listValidatorKeys)(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = (0, import_bundled_schema_store.loadBundledSchemaFile)(file);
+      const loaded = file ? (0, import_bundled_schema_store.loadBundledSchemaFile)(file) : (0, import_schema_loader.getToolSchemaDocument)(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -142,25 +101,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = import_path.default.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = import_version.ADCP_VERSION) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
+  const bundleKey = (0, import_schema_loader.resolveBundleKey)(version);
+  let root;
+  try {
+    root = (0, import_schema_loader.resolveSchemaRoot)(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = (0, import_schema_loader.getSchemaLoaderGeneration)();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${import_path.default.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/server/error-arm-tools.mjs

@@ -1,60 +1,18 @@
-import { fileURLToPath as __adcpFileURLToPath } from "node:url";
-import { dirname as __adcpDirname } from "node:path";
-import { createRequire as __adcpCreateRequire } from "node:module";
-const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
-const require2 = __adcpCreateRequire(import.meta.url);
-import { readdirSync, readFileSync, existsSync } from "fs";
+import { readFileSync } from "fs";
 import path from "path";
 import { ADCP_VERSION } from "../version.mjs";
-import { resolveBundleKey, toReleasePrecisionWire } from "../validation/schema-loader.mjs";
+import {
+  getToolSchemaDocument,
+  getSchemaLoaderGeneration,
+  listValidatorKeys,
+  resolveBundleKey,
+  resolveSchemaRoot
+} from "../validation/schema-loader.mjs";
 import {
   hasBundledSchemaStore,
   listBundledSchemaFiles,
   loadBundledSchemaFile
 } from "../validation/bundled-schema-store.mjs";
-function findPrereleaseBundle(root, key) {
-  if (!existsSync(root)) return void 0;
-  const candidates = readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: toReleasePrecisionWire(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? path.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = resolveBundleKey(version);
-  const distRoot = path.join(__dirname, "..", "schemas-data");
-  const distCandidate = path.join(distRoot, key, "bundled");
-  if (hasBundledSchemaStore(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return path.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = path.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = path.join(cacheRoot, version, "bundled");
-  if (hasBundledSchemaStore(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && existsSync(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = readdirSync(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return path.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return path.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -88,19 +46,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = path.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse(readFileSync(path.join(path.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse(readFileSync(path.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = hasBundledSchemaStore(bundledRoot);
+  const responses = bundled ? listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: path.basename(file, "-response.json").replace(/-/g, "_"), file })) : listValidatorKeys(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = loadBundledSchemaFile(file);
+      const loaded = file ? loadBundledSchemaFile(file) : getToolSchemaDocument(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -117,25 +77,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = path.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = ADCP_VERSION) {
-  const key = resolveBundleKey(version);
+  const bundleKey = resolveBundleKey(version);
+  let root;
+  try {
+    root = resolveSchemaRoot(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = getSchemaLoaderGeneration();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${path.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/server/index.d.mts

@@ -83,8 +83,8 @@ export { createPinAndBindFetch, WEBHOOK_SSRF_POLICY, LOOPBACK_OK_WEBHOOK_SSRF_PO
 export type { PinAndBindFetchOptions, DnsLookupAll } from './pin-and-bind-fetch.mjs';
 export { checkGovernance, createAdcpGovernanceEnforcementMiddleware, governanceDeniedError, governanceUnavailableError, } from './governance.mjs';
 export type { AdcpGovernanceEnforcementMiddleware, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, } from './governance.mjs';
-export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, } from '../governance/index.mjs';
-export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from '../governance/index.mjs';
+export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, verifyHistoricalGovernanceContext, createGovernanceAgentJwksResolver, } from '../governance/index.mjs';
+export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, VerifyHistoricalGovernanceContextOptions, HistoricalGovernanceContextResult, GovernanceBuyerIdentity, } from '../governance/index.mjs';
 export { clearDefaultResolvedListCache, createResolvedListCache, DEFAULT_RESOLVE_LIST_PAGE_SIZE, defaultResolvedListCache, resolvePropertyList, resolveCollectionList, resolvedListCacheKey, matchesPropertyList, matchesCollectionList, } from './targeting-helpers.mjs';
 export type { ResolvedListCache, ResolvedListCacheEntry, ResolvedListCacheValue, ResolvedListKind, ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection, ResolveListCallTool, ResolveListOptions, } from './targeting-helpers.mjs';
 export * from './decisioning/index.mjs';

package/dist/lib/server/index.d.ts

@@ -83,8 +83,8 @@ export { createPinAndBindFetch, WEBHOOK_SSRF_POLICY, LOOPBACK_OK_WEBHOOK_SSRF_PO
 export type { PinAndBindFetchOptions, DnsLookupAll } from './pin-and-bind-fetch';
 export { checkGovernance, createAdcpGovernanceEnforcementMiddleware, governanceDeniedError, governanceUnavailableError, } from './governance';
 export type { AdcpGovernanceEnforcementMiddleware, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, } from './governance';
-export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, } from '../governance';
-export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from '../governance';
+export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, verifyHistoricalGovernanceContext, createGovernanceAgentJwksResolver, } from '../governance';
+export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, VerifyHistoricalGovernanceContextOptions, HistoricalGovernanceContextResult, GovernanceBuyerIdentity, } from '../governance';
 export { clearDefaultResolvedListCache, createResolvedListCache, DEFAULT_RESOLVE_LIST_PAGE_SIZE, defaultResolvedListCache, resolvePropertyList, resolveCollectionList, resolvedListCacheKey, matchesPropertyList, matchesCollectionList, } from './targeting-helpers';
 export type { ResolvedListCache, ResolvedListCacheEntry, ResolvedListCacheValue, ResolvedListKind, ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection, ResolveListCallTool, ResolveListOptions, } from './targeting-helpers';
 export * from './decisioning';

package/dist/lib/server/index.js

@@ -293,6 +293,7 @@ __export(server_exports, {
   verifyApiKey: () => import_auth.verifyApiKey,
   verifyBearer: () => import_auth.verifyBearer,
   verifyGovernanceAuthorization: () => import_governance2.verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext: () => import_governance2.verifyHistoricalGovernanceContext,
   verifyIntrospection: () => import_auth_introspection.verifyIntrospection,
   verifyProposalTermsDigest: () => import_verification.verifyProposalTermsDigest,
   verifySignatureAsAuthenticator: () => import_auth_signature.verifySignatureAsAuthenticator,
@@ -633,6 +634,7 @@ var import_property_lists = require('./property-lists.js');
   verifyApiKey,
   verifyBearer,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   verifyIntrospection,
   verifyProposalTermsDigest,
   verifySignatureAsAuthenticator,

package/dist/lib/server/index.mjs

@@ -236,6 +236,7 @@ import {
   computeGovernedPayloadHash,
   createGovernanceEnforcementMiddleware,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   createGovernanceAgentJwksResolver
 } from "../governance/index.mjs";
 import {
@@ -579,6 +580,7 @@ export {
   verifyApiKey,
   verifyBearer,
   verifyGovernanceAuthorization,
+  verifyHistoricalGovernanceContext,
   verifyIntrospection,
   verifyProposalTermsDigest,
   verifySignatureAsAuthenticator,

package/dist/lib/signing/web-bot-auth.js

@@ -35,6 +35,7 @@ __export(web_bot_auth_exports, {
   deferWebBotAuthPrincipalFailure: () => deferWebBotAuthPrincipalFailure,
   getWebBotAuthAuthorizationFailure: () => getWebBotAuthAuthorizationFailure,
   getWebBotAuthLegacyOriginGate: () => getWebBotAuthLegacyOriginGate,
+  isRefusedWebBotAuthTestKey: () => isRefusedWebBotAuthTestKey,
   isVerifiedWebBotSigner: () => isVerifiedWebBotSigner,
   isWebBotAuthRevocationChecked: () => isWebBotAuthRevocationChecked,
   jwkThumbprint: () => jwkThumbprint,
@@ -570,6 +571,9 @@ async function legacyRevocationCheck(options, origin, keyid) {
 function testKeysAllowed(allowTestKeys) {
   return allowTestKeys === true && ["test", "development"].includes(process.env.NODE_ENV ?? "");
 }
+function isRefusedWebBotAuthTestKey(kid, allowTestKeys) {
+  return TEST_KIDS.has(kid) && !testKeysAllowed(allowTestKeys);
+}
 async function verifyKeyDirectory(response, now = Date.now() / 1e3, options = {}) {
   try {
     if (!Number.isFinite(now)) denied("directory_invalid");
@@ -937,6 +941,7 @@ function createWebBotAuthFetch(upstream, key, options) {
   deferWebBotAuthPrincipalFailure,
   getWebBotAuthAuthorizationFailure,
   getWebBotAuthLegacyOriginGate,
+  isRefusedWebBotAuthTestKey,
   isVerifiedWebBotSigner,
   isWebBotAuthRevocationChecked,
   jwkThumbprint,