@adcp/sdk 16.1.0 → 16.3.0

package/dist/lib/signing/web-bot-auth.mjs

@@ -526,6 +526,9 @@ async function legacyRevocationCheck(options, origin, keyid) {
 function testKeysAllowed(allowTestKeys) {
   return allowTestKeys === true && ["test", "development"].includes(process.env.NODE_ENV ?? "");
 }
+function isRefusedWebBotAuthTestKey(kid, allowTestKeys) {
+  return TEST_KIDS.has(kid) && !testKeysAllowed(allowTestKeys);
+}
 async function verifyKeyDirectory(response, now = Date.now() / 1e3, options = {}) {
   try {
     if (!Number.isFinite(now)) denied("directory_invalid");
@@ -892,6 +895,7 @@ export {
   deferWebBotAuthPrincipalFailure,
   getWebBotAuthAuthorizationFailure,
   getWebBotAuthLegacyOriginGate,
+  isRefusedWebBotAuthTestKey,
   isVerifiedWebBotSigner,
   isWebBotAuthRevocationChecked,
   jwkThumbprint,

package/dist/lib/testing/compliance/comply.js

@@ -37,6 +37,7 @@ var import_storyboard_tracks = require('./storyboard-tracks.js');
 var import_runner = require('../storyboard/runner.js');
 var import_native_a2a_compliance = require('../storyboard/native-a2a-compliance.js');
 var import_test_kit = require('../storyboard/test-kit.js');
+var import_protected_context = require('../storyboard/protected-context.js');
 var import_spec_conformance = require('./spec-conformance.js');
 var import_default_invariants = require('../storyboard/default-invariants.js');
 var import_agent_routing = require('../storyboard/agent-routing.js');
@@ -429,6 +430,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return (0, import_client.withTestClientScope)(
     () => (0, import_protocols.withMCPConnectionScope)(
       async () => {
@@ -1077,6 +1084,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => (0, import_protected_context.isProtectedContextKey)(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/compliance/comply.mjs

@@ -16,6 +16,7 @@ import {
 } from "../storyboard/runner.mjs";
 import { applyNativeA2AComplianceTransportOptions } from "../storyboard/native-a2a-compliance.mjs";
 import { validateTestKit } from "../storyboard/test-kit.mjs";
+import { isProtectedContextKey } from "../storyboard/protected-context.mjs";
 import { checkAccountDiscoveryGate, isAccountBearingSpecialism } from "./spec-conformance.mjs";
 import { registerDefaultInvariants } from "../storyboard/default-invariants.mjs";
 import { hasAnyRequiredTool } from "../storyboard/agent-routing.mjs";
@@ -419,6 +420,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return withTestClientScope(
     () => withMCPConnectionScope(
       async () => {
@@ -1067,6 +1074,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => isProtectedContextKey(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/index.d.mts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store.mjs';
+export { PreparedFixturesDeniedError } from '../errors/index.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers.mjs';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester.mjs';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance/index.mjs';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner.mjs';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner.mjs';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation/index.mjs';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard/index.mjs';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard/index.mjs';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard/index.mjs';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';

package/dist/lib/testing/index.d.ts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store';
+export { PreparedFixturesDeniedError } from '../errors';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';

package/dist/lib/testing/index.js

@@ -20,6 +20,10 @@ var testing_exports = {};
 __export(testing_exports, {
   AdagentsJsonSchema: () => import_storyboard.AdagentsJsonSchema,
   BrandJsonSchema: () => import_storyboard.BrandJsonSchema,
+  COLLECTION_DIAGNOSTIC_LIMIT: () => import_storyboard2.COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT: () => import_storyboard2.COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES: () => import_storyboard2.COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS: () => import_storyboard2.COLLECTION_WITNESS_KINDS,
   CONTROLLER_SCENARIOS: () => import_test_controller.CONTROLLER_SCENARIOS,
   CapabilityResolutionError: () => import_storyboard.CapabilityResolutionError,
   DEFAULT_SCENARIOS: () => import_agent_tester.DEFAULT_SCENARIOS,
@@ -27,6 +31,11 @@ __export(testing_exports, {
   FixtureBindingRegistry: () => import_storyboard.FixtureBindingRegistry,
   GovernanceAgentStub: () => import_stubs.GovernanceAgentStub,
   MCP_SESSION_PROBE_TASK: () => import_storyboard.MCP_SESSION_PROBE_TASK,
+  PREPARED_FIXTURES_CONTRACT_VERSION: () => import_storyboard2.PREPARED_FIXTURES_CONTRACT_VERSION,
+  PROTECTED_CONTEXT_PREFIX: () => import_storyboard2.PROTECTED_CONTEXT_PREFIX,
+  PreparedFixturesDeniedError: () => import_errors.PreparedFixturesDeniedError,
+  PreparedStoryboardFixtures: () => import_storyboard2.PreparedStoryboardFixtures,
+  ProtectedContextViolation: () => import_storyboard2.ProtectedContextViolation,
   RATE_LIMIT_TRIP_CONTRACT: () => import_storyboard.RATE_LIMIT_TRIP_CONTRACT,
   RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS: () => import_storyboard.RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,
   RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX: () => import_storyboard.RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,
@@ -61,7 +70,9 @@ __export(testing_exports, {
   createTestAgent: () => import_test_helpers.createTestAgent,
   createTestClient: () => import_agent_tester.createTestClient,
   creativeAgent: () => import_test_helpers.creativeAgent,
+  diffCollectionPairSets: () => import_storyboard2.diffCollectionPairSets,
   enforceMapCap: () => import_test_controller.enforceMapCap,
+  evaluateCollectionSelection: () => import_storyboard2.evaluateCollectionSelection,
   executeStoryboardTask: () => import_storyboard.executeStoryboardTask,
   expandCreativeAssetDirectives: () => import_storyboard.expandCreativeAssetDirectives,
   expectControllerError: () => import_controller_assertions.expectControllerError,
@@ -75,6 +86,7 @@ __export(testing_exports, {
   filterValidSeededProducts: () => import_test_controller_bridge.filterValidSeededProducts,
   findBundleById: () => import_storyboard.findBundleById,
   findUnresolvedCreativeAssetDirectives: () => import_storyboard.findUnresolvedCreativeAssetDirectives,
+  formatCollectionPair: () => import_storyboard2.formatCollectionPair,
   formatComplianceResults: () => import_compliance.formatComplianceResults,
   formatComplianceResultsJSON: () => import_compliance.formatComplianceResultsJSON,
   formatSuiteResults: () => import_agent_tester.formatSuiteResults,
@@ -100,8 +112,10 @@ __export(testing_exports, {
   hasSITools: () => import_agent_tester.hasSITools,
   injectContext: () => import_storyboard.injectContext,
   isComplianceVersionSupported: () => import_storyboard.isComplianceVersionSupported,
+  isProtectedContextKey: () => import_storyboard2.isProtectedContextKey,
   isSandboxDomain: () => import_storyboard.isSandboxDomain,
   isSandboxRequest: () => import_test_controller_bridge.isSandboxRequest,
+  isTrustedPreparedFixtures: () => import_storyboard2.isTrustedPreparedFixtures,
   likelySupportsV3: () => import_agent_tester.likelySupportsV3,
   listAllComplianceStoryboards: () => import_storyboard.listAllComplianceStoryboards,
   listAssertions: () => import_storyboard.listAssertions,
@@ -124,12 +138,16 @@ __export(testing_exports, {
   mergeSeededCreativesIntoResponse: () => import_test_controller_bridge.mergeSeededCreativesIntoResponse,
   mergeSeededMediaBuysIntoResponse: () => import_test_controller_bridge.mergeSeededMediaBuysIntoResponse,
   mergeSeededProductsIntoResponse: () => import_test_controller_bridge.mergeSeededProductsIntoResponse,
+  normalizeCollectionSelectors: () => import_storyboard2.normalizeCollectionSelectors,
   normalizeFixtureMatchExpression: () => import_storyboard.normalizeFixtureMatchExpression,
   normalizeOAuthResourceForComparison: () => import_storyboard.normalizeOAuthResourceForComparison,
   normalizeValidationOnlyTasks: () => import_storyboard.normalizeValidationOnlyTasks,
   overlayById: () => import_seed_merge.overlayById,
   parseStoryboard: () => import_storyboard.parseStoryboard,
   pickSeededAccountFinancialsForRequest: () => import_test_controller_bridge.pickSeededAccountFinancialsForRequest,
+  prepareStoryboardFixtures: () => import_storyboard2.prepareStoryboardFixtures,
+  productSatisfiesCollectionSelection: () => import_storyboard2.productSatisfiesCollectionSelection,
+  readCollectionWitness: () => import_storyboard2.readCollectionWitness,
   redactOAuthUrlForOutput: () => import_storyboard.redactOAuthUrlForOutput,
   registerAssertion: () => import_storyboard.registerAssertion,
   registerExternalSchemaRoot: () => import_validation.registerExternalSchemaRoot,
@@ -139,7 +157,7 @@ __export(testing_exports, {
   resolveAccountForMediaBuy: () => import_agent_tester.resolveAccountForMediaBuy,
   resolveAssertions: () => import_storyboard.resolveAssertions,
   resolveBundleOrStoryboard: () => import_storyboard.resolveBundleOrStoryboard,
-  resolveCreativeBuildProbe: () => import_storyboard2.resolveCreativeBuildProbe,
+  resolveCreativeBuildProbe: () => import_storyboard3.resolveCreativeBuildProbe,
   resolvePath: () => import_storyboard.resolvePath,
   resolveStoryboardsForCapabilities: () => import_storyboard.resolveStoryboardsForCapabilities,
   runAgainstLocalAgent: () => import_local_agent_runner.runAgainstLocalAgent,
@@ -149,6 +167,7 @@ __export(testing_exports, {
   runStoryboardStep: () => import_storyboard.runStoryboardStep,
   runValidations: () => import_storyboard.runValidations,
   setAgentTesterLogger: () => import_agent_tester.setAgentTesterLogger,
+  summarizeCollectionPairs: () => import_storyboard2.summarizeCollectionPairs,
   testAccountStateMachine: () => import_agent_tester.testAccountStateMachine,
   testAgent: () => import_test_helpers.testAgent,
   testAgentA2A: () => import_test_helpers.testAgentA2A,
@@ -191,14 +210,16 @@ __export(testing_exports, {
   testTerminalStateEnforcement: () => import_agent_tester.testTerminalStateEnforcement,
   testValidation: () => import_agent_tester.testValidation,
   unregisterExternalSchemaRoot: () => import_validation.unregisterExternalSchemaRoot,
-  validateCreativeBuildProbeSpec: () => import_storyboard2.validateCreativeBuildProbeSpec,
+  validateCreativeBuildProbeSpec: () => import_storyboard3.validateCreativeBuildProbeSpec,
   validateFixtureResolutionDeclarations: () => import_storyboard.validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec: () => import_storyboard.validateRateLimitTripSpec,
   withExternalSchemaRoot: () => import_validation.withExternalSchemaRoot,
+  withPreparedFixtures: () => import_storyboard2.withPreparedFixtures,
   withServedReleaseSchemaRoots: () => import_validation.withServedReleaseSchemaRoots
 });
 module.exports = __toCommonJS(testing_exports);
 var import_pending_web_flow_store = require('./pending-web-flow-store.js');
+var import_errors = require('../errors/index.js');
 var import_test_helpers = require('./test-helpers.js');
 var import_agent_tester = require('./agent-tester.js');
 var import_compliance = require('./compliance/index.js');
@@ -212,10 +233,15 @@ var import_local_agent_runner = require('./local-agent-runner.js');
 var import_validation = require('../validation/index.js');
 var import_storyboard = require('./storyboard/index.js');
 var import_storyboard2 = require('./storyboard/index.js');
+var import_storyboard3 = require('./storyboard/index.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdagentsJsonSchema,
   BrandJsonSchema,
+  COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS,
   CONTROLLER_SCENARIOS,
   CapabilityResolutionError,
   DEFAULT_SCENARIOS,
@@ -223,6 +249,11 @@ var import_storyboard2 = require('./storyboard/index.js');
   FixtureBindingRegistry,
   GovernanceAgentStub,
   MCP_SESSION_PROBE_TASK,
+  PREPARED_FIXTURES_CONTRACT_VERSION,
+  PROTECTED_CONTEXT_PREFIX,
+  PreparedFixturesDeniedError,
+  PreparedStoryboardFixtures,
+  ProtectedContextViolation,
   RATE_LIMIT_TRIP_CONTRACT,
   RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,
   RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,
@@ -257,7 +288,9 @@ var import_storyboard2 = require('./storyboard/index.js');
   createTestAgent,
   createTestClient,
   creativeAgent,
+  diffCollectionPairSets,
   enforceMapCap,
+  evaluateCollectionSelection,
   executeStoryboardTask,
   expandCreativeAssetDirectives,
   expectControllerError,
@@ -271,6 +304,7 @@ var import_storyboard2 = require('./storyboard/index.js');
   filterValidSeededProducts,
   findBundleById,
   findUnresolvedCreativeAssetDirectives,
+  formatCollectionPair,
   formatComplianceResults,
   formatComplianceResultsJSON,
   formatSuiteResults,
@@ -296,8 +330,10 @@ var import_storyboard2 = require('./storyboard/index.js');
   hasSITools,
   injectContext,
   isComplianceVersionSupported,
+  isProtectedContextKey,
   isSandboxDomain,
   isSandboxRequest,
+  isTrustedPreparedFixtures,
   likelySupportsV3,
   listAllComplianceStoryboards,
   listAssertions,
@@ -320,12 +356,16 @@ var import_storyboard2 = require('./storyboard/index.js');
   mergeSeededCreativesIntoResponse,
   mergeSeededMediaBuysIntoResponse,
   mergeSeededProductsIntoResponse,
+  normalizeCollectionSelectors,
   normalizeFixtureMatchExpression,
   normalizeOAuthResourceForComparison,
   normalizeValidationOnlyTasks,
   overlayById,
   parseStoryboard,
   pickSeededAccountFinancialsForRequest,
+  prepareStoryboardFixtures,
+  productSatisfiesCollectionSelection,
+  readCollectionWitness,
   redactOAuthUrlForOutput,
   registerAssertion,
   registerExternalSchemaRoot,
@@ -345,6 +385,7 @@ var import_storyboard2 = require('./storyboard/index.js');
   runStoryboardStep,
   runValidations,
   setAgentTesterLogger,
+  summarizeCollectionPairs,
   testAccountStateMachine,
   testAgent,
   testAgentA2A,
@@ -391,5 +432,6 @@ var import_storyboard2 = require('./storyboard/index.js');
   validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec,
   withExternalSchemaRoot,
+  withPreparedFixtures,
   withServedReleaseSchemaRoots
 });

package/dist/lib/testing/index.mjs

@@ -1,4 +1,5 @@
 import { assertPendingWebFlowStoreRoundTrip } from "./pending-web-flow-store.mjs";
+import { PreparedFixturesDeniedError } from "../errors/index.mjs";
 import {
   testAgent,
   testAgentA2A,
@@ -189,10 +190,35 @@ import {
   AdagentsJsonSchema,
   MCP_SESSION_PROBE_TASK
 } from "./storyboard/index.mjs";
+import {
+  COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS,
+  diffCollectionPairSets,
+  evaluateCollectionSelection,
+  formatCollectionPair,
+  isProtectedContextKey,
+  isTrustedPreparedFixtures,
+  normalizeCollectionSelectors,
+  prepareStoryboardFixtures,
+  PREPARED_FIXTURES_CONTRACT_VERSION,
+  PreparedStoryboardFixtures,
+  productSatisfiesCollectionSelection,
+  PROTECTED_CONTEXT_PREFIX,
+  summarizeCollectionPairs,
+  ProtectedContextViolation,
+  readCollectionWitness,
+  withPreparedFixtures
+} from "./storyboard/index.mjs";
 import { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from "./storyboard/index.mjs";
 export {
   AdagentsJsonSchema,
   BrandJsonSchema,
+  COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS,
   CONTROLLER_SCENARIOS,
   CapabilityResolutionError,
   DEFAULT_SCENARIOS,
@@ -200,6 +226,11 @@ export {
   FixtureBindingRegistry,
   GovernanceAgentStub,
   MCP_SESSION_PROBE_TASK,
+  PREPARED_FIXTURES_CONTRACT_VERSION,
+  PROTECTED_CONTEXT_PREFIX,
+  PreparedFixturesDeniedError,
+  PreparedStoryboardFixtures,
+  ProtectedContextViolation,
   RATE_LIMIT_TRIP_CONTRACT,
   RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,
   RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,
@@ -234,7 +265,9 @@ export {
   createTestAgent,
   createTestClient,
   creativeAgent,
+  diffCollectionPairSets,
   enforceMapCap,
+  evaluateCollectionSelection,
   executeStoryboardTask,
   expandCreativeAssetDirectives,
   expectControllerError,
@@ -248,6 +281,7 @@ export {
   filterValidSeededProducts,
   findBundleById,
   findUnresolvedCreativeAssetDirectives,
+  formatCollectionPair,
   formatComplianceResults,
   formatComplianceResultsJSON,
   formatSuiteResults,
@@ -273,8 +307,10 @@ export {
   hasSITools,
   injectContext,
   isComplianceVersionSupported,
+  isProtectedContextKey,
   isSandboxDomain,
   isSandboxRequest,
+  isTrustedPreparedFixtures,
   likelySupportsV3,
   listAllComplianceStoryboards,
   listAssertions,
@@ -297,12 +333,16 @@ export {
   mergeSeededCreativesIntoResponse,
   mergeSeededMediaBuysIntoResponse,
   mergeSeededProductsIntoResponse,
+  normalizeCollectionSelectors,
   normalizeFixtureMatchExpression,
   normalizeOAuthResourceForComparison,
   normalizeValidationOnlyTasks,
   overlayById,
   parseStoryboard,
   pickSeededAccountFinancialsForRequest,
+  prepareStoryboardFixtures,
+  productSatisfiesCollectionSelection,
+  readCollectionWitness,
   redactOAuthUrlForOutput,
   registerAssertion,
   registerExternalSchemaRoot,
@@ -322,6 +362,7 @@ export {
   runStoryboardStep,
   runValidations,
   setAgentTesterLogger,
+  summarizeCollectionPairs,
   testAccountStateMachine,
   testAgent,
   testAgentA2A,
@@ -368,5 +409,6 @@ export {
   validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec,
   withExternalSchemaRoot,
+  withPreparedFixtures,
   withServedReleaseSchemaRoots
 };