@adcp/sdk 16.2.0 → 16.3.0

package/dist/lib/negotiation/version.js

@@ -0,0 +1,60 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var version_exports = {};
+__export(version_exports, {
+  applicableRefinementServedVersion: () => applicableRefinementServedVersion,
+  compareProposalRefinementVersions: () => compareProposalRefinementVersions,
+  describeRefinementVersion: () => describeRefinementVersion,
+  isProposalRefinementVersion: () => isProposalRefinementVersion
+});
+module.exports = __toCommonJS(version_exports);
+var import_semver = require("semver");
+var import_version = require('../version.js');
+function isProposalRefinementVersion(value) {
+  if (typeof value !== "string" || !/^3\.[23](?:-[A-Za-z0-9]+(?:[.-][A-Za-z0-9]+)*)?$/.test(value)) return false;
+  const comparable = value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return (0, import_semver.valid)(comparable) === comparable;
+}
+function applicableRefinementServedVersion(served, ceiling, discoveryCeiling = ceiling) {
+  if (!isProposalRefinementVersion(discoveryCeiling)) return void 0;
+  if (!isProposalRefinementVersion(ceiling) || compareProposalRefinementVersions(ceiling, discoveryCeiling) > 0)
+    return void 0;
+  if (typeof served !== "string" || !isProposalRefinementVersion(ceiling)) return void 0;
+  if (!isProposalRefinementVersion(served) && (0, import_semver.valid)(served) !== served) return void 0;
+  const release = (0, import_version.toReleasePrecisionVersion)(served);
+  return isProposalRefinementVersion(release) && compareProposalRefinementVersions(release, ceiling) <= 0 ? served : void 0;
+}
+function compareProposalRefinementVersions(left, right) {
+  const semver = (value) => value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return (0, import_semver.compare)(semver(left), semver(right));
+}
+function describeRefinementVersion(value) {
+  try {
+    return (JSON.stringify(value) ?? String(value)).slice(0, 160);
+  } catch {
+    return "[unserializable version]";
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  applicableRefinementServedVersion,
+  compareProposalRefinementVersions,
+  describeRefinementVersion,
+  isProposalRefinementVersion
+});

package/dist/lib/negotiation/version.mjs

@@ -0,0 +1,33 @@
+import { compare, valid } from "semver";
+import { toReleasePrecisionVersion } from "../version.mjs";
+function isProposalRefinementVersion(value) {
+  if (typeof value !== "string" || !/^3\.[23](?:-[A-Za-z0-9]+(?:[.-][A-Za-z0-9]+)*)?$/.test(value)) return false;
+  const comparable = value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return valid(comparable) === comparable;
+}
+function applicableRefinementServedVersion(served, ceiling, discoveryCeiling = ceiling) {
+  if (!isProposalRefinementVersion(discoveryCeiling)) return void 0;
+  if (!isProposalRefinementVersion(ceiling) || compareProposalRefinementVersions(ceiling, discoveryCeiling) > 0)
+    return void 0;
+  if (typeof served !== "string" || !isProposalRefinementVersion(ceiling)) return void 0;
+  if (!isProposalRefinementVersion(served) && valid(served) !== served) return void 0;
+  const release = toReleasePrecisionVersion(served);
+  return isProposalRefinementVersion(release) && compareProposalRefinementVersions(release, ceiling) <= 0 ? served : void 0;
+}
+function compareProposalRefinementVersions(left, right) {
+  const semver = (value) => value.replace(/^(3\.[23])(?=-|$)/, "$1.0");
+  return compare(semver(left), semver(right));
+}
+function describeRefinementVersion(value) {
+  try {
+    return (JSON.stringify(value) ?? String(value)).slice(0, 160);
+  } catch {
+    return "[unserializable version]";
+  }
+}
+export {
+  applicableRefinementServedVersion,
+  compareProposalRefinementVersions,
+  describeRefinementVersion,
+  isProposalRefinementVersion
+};

package/dist/lib/server/create-adcp-server.js

@@ -726,7 +726,7 @@ function validateFrameworkPayload(toolName, direction, payload, version, proposa
       };
     }
   }
-  const verification = (0, import_verification.validateRefineProposalsResponseShape)(payload);
+  const verification = (0, import_verification.validateRefineProposalsResponseShape)(payload, { adcpVersion: version });
   if (verification.ok) {
     return {
       valid: true,

package/dist/lib/server/create-adcp-server.mjs

@@ -817,7 +817,7 @@ function validateFrameworkPayload(toolName, direction, payload, version, proposa
       };
     }
   }
-  const verification = validateRefineProposalsResponseShape(payload);
+  const verification = validateRefineProposalsResponseShape(payload, { adcpVersion: version });
   if (verification.ok) {
     return {
       valid: true,

package/dist/lib/server/error-arm-tools.d.mts

@@ -10,10 +10,11 @@
  * response schema doesn't define it would add a key the schema
  * doesn't expect.
  *
- * Built lazily at first use from the bundled schema cache (the same
- * tree `schema-loader.ts` reads). The set is computed once per bundle
- * key (`resolveBundleKey('3.0.0')` → `'3.0'`) and memoised — the schema
- * tree is read-only at runtime, so a single scan is sufficient.
+ * Derived from the active schema-loader authority. Bundle inventories are
+ * memoised by bundle key and resolved root, with loader-epoch invalidation
+ * so scoped or re-registered candidate bundles cannot leak.
+ * Raw external roots use the loader's response index when no bundled
+ * store exists.
  *
  * Spec basis: `error-code.json#GOVERNANCE_DENIED` and
  * `#GOVERNANCE_UNAVAILABLE` both prescribe "populate `errors[].code` in
@@ -44,12 +45,11 @@ export interface ErrorArmDescriptor {
  * gate for two-layer auto-emission, plus the per-arm constants the
  * dispatcher needs to set when synthesising the wrap.
  *
- * Scans the bundled schema cache lazily on first call per bundle key
- * (one read per minor version per process). Returns a frozen, empty map
- * when no schema bundle is reachable — the dispatcher early-returns on
- * `map.size === 0`, so a missing bundle silently disables the wrap
- * rather than breaking server startup.
+ * Scans the active schema authority lazily. Missing roots return an empty map
+ * without caching, so later external registration takes effect. Re-registering
+ * or entering another schema scope invalidates cached inventories, including
+ * replacements of candidate bundles at the same path.
  */
 export declare function getToolsWithErrorArm(version?: string): ReadonlyMap<string, ErrorArmDescriptor>;
-/** Test hook: clear the per-bundle-key cache. */
+/** Test hook: clear cached error-arm inventories. */
 export declare function _resetErrorArmToolsCache(): void;

package/dist/lib/server/error-arm-tools.d.ts

@@ -10,10 +10,11 @@
  * response schema doesn't define it would add a key the schema
  * doesn't expect.
  *
- * Built lazily at first use from the bundled schema cache (the same
- * tree `schema-loader.ts` reads). The set is computed once per bundle
- * key (`resolveBundleKey('3.0.0')` → `'3.0'`) and memoised — the schema
- * tree is read-only at runtime, so a single scan is sufficient.
+ * Derived from the active schema-loader authority. Bundle inventories are
+ * memoised by bundle key and resolved root, with loader-epoch invalidation
+ * so scoped or re-registered candidate bundles cannot leak.
+ * Raw external roots use the loader's response index when no bundled
+ * store exists.
  *
  * Spec basis: `error-code.json#GOVERNANCE_DENIED` and
  * `#GOVERNANCE_UNAVAILABLE` both prescribe "populate `errors[].code` in
@@ -44,12 +45,11 @@ export interface ErrorArmDescriptor {
  * gate for two-layer auto-emission, plus the per-arm constants the
  * dispatcher needs to set when synthesising the wrap.
  *
- * Scans the bundled schema cache lazily on first call per bundle key
- * (one read per minor version per process). Returns a frozen, empty map
- * when no schema bundle is reachable — the dispatcher early-returns on
- * `map.size === 0`, so a missing bundle silently disables the wrap
- * rather than breaking server startup.
+ * Scans the active schema authority lazily. Missing roots return an empty map
+ * without caching, so later external registration takes effect. Re-registering
+ * or entering another schema scope invalidates cached inventories, including
+ * replacements of candidate bundles at the same path.
  */
 export declare function getToolsWithErrorArm(version?: string): ReadonlyMap<string, ErrorArmDescriptor>;
-/** Test hook: clear the per-bundle-key cache. */
+/** Test hook: clear cached error-arm inventories. */
 export declare function _resetErrorArmToolsCache(): void;

package/dist/lib/server/error-arm-tools.js

@@ -37,49 +37,6 @@ var import_path = __toESM(require("path"));
 var import_version = require('../version.js');
 var import_schema_loader = require('../validation/schema-loader.js');
 var import_bundled_schema_store = require('../validation/bundled-schema-store.js');
-function findPrereleaseBundle(root, key) {
-  if (!(0, import_fs.existsSync)(root)) return void 0;
-  const candidates = (0, import_fs.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: (0, import_schema_loader.toReleasePrecisionWire)(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? import_path.default.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
-  const distRoot = import_path.default.join(__dirname, "..", "schemas-data");
-  const distCandidate = import_path.default.join(distRoot, key, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return import_path.default.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = import_path.default.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = import_path.default.join(cacheRoot, version, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && (0, import_fs.existsSync)(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = (0, import_fs.readdirSync)(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return import_path.default.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return import_path.default.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -113,19 +70,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = import_path.default.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(import_path.default.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = (0, import_bundled_schema_store.hasBundledSchemaStore)(bundledRoot);
+  const responses = bundled ? (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: import_path.default.basename(file, "-response.json").replace(/-/g, "_"), file })) : (0, import_schema_loader.listValidatorKeys)(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = (0, import_bundled_schema_store.loadBundledSchemaFile)(file);
+      const loaded = file ? (0, import_bundled_schema_store.loadBundledSchemaFile)(file) : (0, import_schema_loader.getToolSchemaDocument)(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -142,25 +101,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = import_path.default.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = import_version.ADCP_VERSION) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
+  const bundleKey = (0, import_schema_loader.resolveBundleKey)(version);
+  let root;
+  try {
+    root = (0, import_schema_loader.resolveSchemaRoot)(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = (0, import_schema_loader.getSchemaLoaderGeneration)();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${import_path.default.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/server/error-arm-tools.mjs

@@ -1,60 +1,18 @@
-import { fileURLToPath as __adcpFileURLToPath } from "node:url";
-import { dirname as __adcpDirname } from "node:path";
-import { createRequire as __adcpCreateRequire } from "node:module";
-const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
-const require2 = __adcpCreateRequire(import.meta.url);
-import { readdirSync, readFileSync, existsSync } from "fs";
+import { readFileSync } from "fs";
 import path from "path";
 import { ADCP_VERSION } from "../version.mjs";
-import { resolveBundleKey, toReleasePrecisionWire } from "../validation/schema-loader.mjs";
+import {
+  getToolSchemaDocument,
+  getSchemaLoaderGeneration,
+  listValidatorKeys,
+  resolveBundleKey,
+  resolveSchemaRoot
+} from "../validation/schema-loader.mjs";
 import {
   hasBundledSchemaStore,
   listBundledSchemaFiles,
   loadBundledSchemaFile
 } from "../validation/bundled-schema-store.mjs";
-function findPrereleaseBundle(root, key) {
-  if (!existsSync(root)) return void 0;
-  const candidates = readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: toReleasePrecisionWire(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? path.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = resolveBundleKey(version);
-  const distRoot = path.join(__dirname, "..", "schemas-data");
-  const distCandidate = path.join(distRoot, key, "bundled");
-  if (hasBundledSchemaStore(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return path.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = path.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = path.join(cacheRoot, version, "bundled");
-  if (hasBundledSchemaStore(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && existsSync(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = readdirSync(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return path.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return path.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -88,19 +46,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = path.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse(readFileSync(path.join(path.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse(readFileSync(path.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = hasBundledSchemaStore(bundledRoot);
+  const responses = bundled ? listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: path.basename(file, "-response.json").replace(/-/g, "_"), file })) : listValidatorKeys(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = loadBundledSchemaFile(file);
+      const loaded = file ? loadBundledSchemaFile(file) : getToolSchemaDocument(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -117,25 +77,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = path.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = ADCP_VERSION) {
-  const key = resolveBundleKey(version);
+  const bundleKey = resolveBundleKey(version);
+  let root;
+  try {
+    root = resolveSchemaRoot(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = getSchemaLoaderGeneration();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${path.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/testing/compliance/comply.js

@@ -37,6 +37,7 @@ var import_storyboard_tracks = require('./storyboard-tracks.js');
 var import_runner = require('../storyboard/runner.js');
 var import_native_a2a_compliance = require('../storyboard/native-a2a-compliance.js');
 var import_test_kit = require('../storyboard/test-kit.js');
+var import_protected_context = require('../storyboard/protected-context.js');
 var import_spec_conformance = require('./spec-conformance.js');
 var import_default_invariants = require('../storyboard/default-invariants.js');
 var import_agent_routing = require('../storyboard/agent-routing.js');
@@ -429,6 +430,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return (0, import_client.withTestClientScope)(
     () => (0, import_protocols.withMCPConnectionScope)(
       async () => {
@@ -1077,6 +1084,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => (0, import_protected_context.isProtectedContextKey)(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/compliance/comply.mjs

@@ -16,6 +16,7 @@ import {
 } from "../storyboard/runner.mjs";
 import { applyNativeA2AComplianceTransportOptions } from "../storyboard/native-a2a-compliance.mjs";
 import { validateTestKit } from "../storyboard/test-kit.mjs";
+import { isProtectedContextKey } from "../storyboard/protected-context.mjs";
 import { checkAccountDiscoveryGate, isAccountBearingSpecialism } from "./spec-conformance.mjs";
 import { registerDefaultInvariants } from "../storyboard/default-invariants.mjs";
 import { hasAnyRequiredTool } from "../storyboard/agent-routing.mjs";
@@ -419,6 +420,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return withTestClientScope(
     () => withMCPConnectionScope(
       async () => {
@@ -1067,6 +1074,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => isProtectedContextKey(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/index.d.mts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store.mjs';
+export { PreparedFixturesDeniedError } from '../errors/index.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers.mjs';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester.mjs';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance/index.mjs';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner.mjs';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner.mjs';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation/index.mjs';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard/index.mjs';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard/index.mjs';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard/index.mjs';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';

package/dist/lib/testing/index.d.ts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store';
+export { PreparedFixturesDeniedError } from '../errors';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';