@adcp/sdk 16.2.0 → 16.4.0

package/dist/lib/server/error-arm-tools.js

@@ -37,49 +37,6 @@ var import_path = __toESM(require("path"));
 var import_version = require('../version.js');
 var import_schema_loader = require('../validation/schema-loader.js');
 var import_bundled_schema_store = require('../validation/bundled-schema-store.js');
-function findPrereleaseBundle(root, key) {
-  if (!(0, import_fs.existsSync)(root)) return void 0;
-  const candidates = (0, import_fs.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: (0, import_schema_loader.toReleasePrecisionWire)(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? import_path.default.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
-  const distRoot = import_path.default.join(__dirname, "..", "schemas-data");
-  const distCandidate = import_path.default.join(distRoot, key, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return import_path.default.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = import_path.default.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = import_path.default.join(cacheRoot, version, "bundled");
-  if ((0, import_bundled_schema_store.hasBundledSchemaStore)(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && (0, import_fs.existsSync)(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = (0, import_fs.readdirSync)(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return import_path.default.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return import_path.default.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -113,19 +70,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = import_path.default.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(import_path.default.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse((0, import_fs.readFileSync)(import_path.default.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = (0, import_bundled_schema_store.hasBundledSchemaStore)(bundledRoot);
+  const responses = bundled ? (0, import_bundled_schema_store.listBundledSchemaFiles)(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: import_path.default.basename(file, "-response.json").replace(/-/g, "_"), file })) : (0, import_schema_loader.listValidatorKeys)(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = (0, import_bundled_schema_store.loadBundledSchemaFile)(file);
+      const loaded = file ? (0, import_bundled_schema_store.loadBundledSchemaFile)(file) : (0, import_schema_loader.getToolSchemaDocument)(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -142,25 +101,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = import_path.default.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = import_version.ADCP_VERSION) {
-  const key = (0, import_schema_loader.resolveBundleKey)(version);
+  const bundleKey = (0, import_schema_loader.resolveBundleKey)(version);
+  let root;
+  try {
+    root = (0, import_schema_loader.resolveSchemaRoot)(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = (0, import_schema_loader.getSchemaLoaderGeneration)();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${import_path.default.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/server/error-arm-tools.mjs

@@ -1,60 +1,18 @@
-import { fileURLToPath as __adcpFileURLToPath } from "node:url";
-import { dirname as __adcpDirname } from "node:path";
-import { createRequire as __adcpCreateRequire } from "node:module";
-const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
-const require2 = __adcpCreateRequire(import.meta.url);
-import { readdirSync, readFileSync, existsSync } from "fs";
+import { readFileSync } from "fs";
 import path from "path";
 import { ADCP_VERSION } from "../version.mjs";
-import { resolveBundleKey, toReleasePrecisionWire } from "../validation/schema-loader.mjs";
+import {
+  getToolSchemaDocument,
+  getSchemaLoaderGeneration,
+  listValidatorKeys,
+  resolveBundleKey,
+  resolveSchemaRoot
+} from "../validation/schema-loader.mjs";
 import {
   hasBundledSchemaStore,
   listBundledSchemaFiles,
   loadBundledSchemaFile
 } from "../validation/bundled-schema-store.mjs";
-function findPrereleaseBundle(root, key) {
-  if (!existsSync(root)) return void 0;
-  const candidates = readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.endsWith(".previous")).map((entry) => {
-    try {
-      return { name: entry.name, releasePrecision: toReleasePrecisionWire(entry.name) };
-    } catch {
-      return void 0;
-    }
-  }).filter(
-    (entry) => entry !== void 0 && (entry.releasePrecision === key || entry.releasePrecision.startsWith(`${key}.`))
-  ).sort((a, b) => b.name.localeCompare(a.name, void 0, { numeric: true, sensitivity: "base" }));
-  return candidates[0] ? path.join(root, candidates[0].name) : void 0;
-}
-function resolveBundledRoot(version) {
-  const key = resolveBundleKey(version);
-  const distRoot = path.join(__dirname, "..", "schemas-data");
-  const distCandidate = path.join(distRoot, key, "bundled");
-  if (hasBundledSchemaStore(distCandidate)) return distCandidate;
-  const releasePrecisionMatch = /^\d+\.\d+-/.test(key);
-  if (releasePrecisionMatch) {
-    const distPrerelease = findPrereleaseBundle(distRoot, key);
-    if (distPrerelease) return path.join(distPrerelease, "bundled");
-  }
-  const cacheRoot = path.join(__dirname, "..", "..", "..", "schemas", "cache");
-  const exactCandidate = path.join(cacheRoot, version, "bundled");
-  if (hasBundledSchemaStore(exactCandidate)) return exactCandidate;
-  const minorMatch = key.match(/^(\d+)\.(\d+)$/);
-  if (minorMatch && existsSync(cacheRoot)) {
-    const [, major, minor] = minorMatch;
-    const prefix = `${major}.${minor}.`;
-    const cached = readdirSync(cacheRoot, { withFileTypes: true }).filter(
-      (e) => e.isDirectory() && e.name.startsWith(prefix) && !e.name.endsWith(".previous") && /^\d+\.\d+\.\d+$/.test(e.name)
-    ).map((e) => ({ name: e.name, patch: parseInt(e.name.slice(prefix.length), 10) })).filter((c) => Number.isFinite(c.patch)).sort((a, b) => b.patch - a.patch);
-    if (cached.length > 0) {
-      return path.join(cacheRoot, cached[0].name, "bundled");
-    }
-  }
-  if (releasePrecisionMatch) {
-    const cachePrerelease = findPrereleaseBundle(cacheRoot, key);
-    if (cachePrerelease) return path.join(cachePrerelease, "bundled");
-  }
-  return void 0;
-}
 function resolveBranch(branch, rootSchema) {
   if (!branch || typeof branch !== "object") return void 0;
   const obj = branch;
@@ -88,19 +46,21 @@ function describeErrorArm(branch, rootSchema) {
   }
   return { extraRequired: Object.freeze(extraRequired) };
 }
-function scanForErrorArmTools(bundledRoot) {
+function scanForErrorArmTools(root, version) {
+  const bundledRoot = path.join(root, "bundled");
   const map = /* @__PURE__ */ new Map();
   let manifestTools;
   try {
-    const manifest = JSON.parse(readFileSync(path.join(path.dirname(bundledRoot), "manifest.json"), "utf-8"));
+    const manifest = JSON.parse(readFileSync(path.join(root, "manifest.json"), "utf-8"));
     if (manifest.tools) manifestTools = new Set(Object.keys(manifest.tools));
   } catch {
   }
-  const files = listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json"));
-  for (const file of files) {
+  const bundled = hasBundledSchemaStore(bundledRoot);
+  const responses = bundled ? listBundledSchemaFiles(bundledRoot).filter((file) => file.endsWith("-response.json")).map((file) => ({ toolName: path.basename(file, "-response.json").replace(/-/g, "_"), file })) : listValidatorKeys(version).filter((key) => key.endsWith("::sync")).map((key) => ({ toolName: key.slice(0, -"::sync".length), file: void 0 }));
+  for (const { toolName, file } of responses) {
     let schema;
     try {
-      const loaded = loadBundledSchemaFile(file);
+      const loaded = file ? loadBundledSchemaFile(file) : getToolSchemaDocument(toolName, "sync", version)?.schema;
       if (!loaded) continue;
       schema = loaded;
     } catch {
@@ -117,25 +77,30 @@ function scanForErrorArmTools(bundledRoot) {
       }
     }
     if (!descriptor) continue;
-    const base = path.basename(file, "-response.json");
-    const toolName = base.replace(/-/g, "_");
     if (manifestTools && !manifestTools.has(toolName)) continue;
     map.set(toolName, descriptor);
   }
   return map;
 }
+let cachedGeneration = -1;
 const cachedMaps = /* @__PURE__ */ new Map();
 function getToolsWithErrorArm(version = ADCP_VERSION) {
-  const key = resolveBundleKey(version);
+  const bundleKey = resolveBundleKey(version);
+  let root;
+  try {
+    root = resolveSchemaRoot(version);
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+  const generation = getSchemaLoaderGeneration();
+  if (cachedGeneration !== generation) {
+    cachedMaps.clear();
+    cachedGeneration = generation;
+  }
+  const key = `${bundleKey}\0${path.resolve(root)}`;
   const cached = cachedMaps.get(key);
   if (cached) return cached;
-  const root = resolveBundledRoot(version);
-  if (!root) {
-    const empty = /* @__PURE__ */ new Map();
-    cachedMaps.set(key, empty);
-    return empty;
-  }
-  const map = scanForErrorArmTools(root);
+  const map = scanForErrorArmTools(root, version);
   cachedMaps.set(key, map);
   return map;
 }

package/dist/lib/server/index.d.mts

@@ -61,7 +61,7 @@ export type { AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermis
 export { requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE, ADCP_INSTRUCTIONS_FN, } from './create-adcp-server.mjs';
 export type { SessionContext, OnInstructionsError, MaybePromise, BridgeMarker } from './create-adcp-server.mjs';
 export type { AdcpServer, AdcpServerComplianceApi, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, } from './adcp-server.mjs';
-export type { AdcpServerConfig as LegacyAdcpServerConfig, WebhooksConfig, AdcpToolMap as LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpToolVersionRange, AdcpCustomToolConfig as LegacyAdcpCustomToolConfig, AdcpCustomToolHandler as LegacyAdcpCustomToolHandler, AdcpCustomToolHandlerExtra as LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext as LegacyHandlerContext, SessionKeyContext, MediaBuyHandlers as LegacyMediaBuyHandlers, ProposalNegotiationHandlers as LegacyProposalNegotiationHandlers, SignalsHandlers as LegacySignalsHandlers, CreativeHandlers as LegacyCreativeHandlers, GovernanceHandlers as LegacyGovernanceHandlers, AccountHandlers as LegacyAccountHandlers, EventTrackingHandlers as LegacyEventTrackingHandlers, SponsoredIntelligenceHandlers as LegacySponsoredIntelligenceHandlers, ResolveAccountContext as LegacyResolveAccountContext, } from './create-adcp-server.mjs';
+export type { AdcpServerConfig as LegacyAdcpServerConfig, WebhooksConfig, AdcpToolMap as LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpToolVersionRange, AdcpVersionTranslationEvent, AdcpCustomToolConfig as LegacyAdcpCustomToolConfig, AdcpCustomToolHandler as LegacyAdcpCustomToolHandler, AdcpCustomToolHandlerExtra as LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext as LegacyHandlerContext, SessionKeyContext, MediaBuyHandlers as LegacyMediaBuyHandlers, ProposalNegotiationHandlers as LegacyProposalNegotiationHandlers, SignalsHandlers as LegacySignalsHandlers, CreativeHandlers as LegacyCreativeHandlers, GovernanceHandlers as LegacyGovernanceHandlers, AccountHandlers as LegacyAccountHandlers, EventTrackingHandlers as LegacyEventTrackingHandlers, SponsoredIntelligenceHandlers as LegacySponsoredIntelligenceHandlers, ResolveAccountContext as LegacyResolveAccountContext, } from './create-adcp-server.mjs';
 export { DEFAULT_REPORTING_CAPABILITIES } from './product-defaults.mjs';
 export { isSandboxRequest, mergeSeededProductsIntoResponse, filterValidSeededProducts, filterValidSeededCreatives, filterValidSeededMediaBuys, filterValidSeededAccounts, filterValidSeededAccountFinancials, filterValidSeededCreativeFormats, mergeSeededCreativesIntoResponse, mergeSeededMediaBuysIntoResponse, mergeSeededAccountsIntoResponse, mergeSeededCreativeFormatsIntoResponse, pickSeededAccountFinancialsForRequest, replaceAccountFinancialsIfSeeded, bridgeFromTestControllerStore, bridgeFromSessionStore, } from './test-controller-bridge.mjs';
 export type { TestControllerBridge, TestControllerBridgeContext, BridgeFromSessionStoreOptions, SeededCreative, SeededMediaBuy, SeededAccountFinancials, } from './test-controller-bridge.mjs';

package/dist/lib/server/index.d.ts

@@ -61,7 +61,7 @@ export type { AdcpMcpResourceDefinition, McpAppResourceCsp, McpAppResourcePermis
 export { requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE, ADCP_INSTRUCTIONS_FN, } from './create-adcp-server';
 export type { SessionContext, OnInstructionsError, MaybePromise, BridgeMarker } from './create-adcp-server';
 export type { AdcpServer, AdcpServerComplianceApi, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, AdcpInvokeOptions, } from './adcp-server';
-export type { AdcpServerConfig as LegacyAdcpServerConfig, WebhooksConfig, AdcpToolMap as LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpToolVersionRange, AdcpCustomToolConfig as LegacyAdcpCustomToolConfig, AdcpCustomToolHandler as LegacyAdcpCustomToolHandler, AdcpCustomToolHandlerExtra as LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext as LegacyHandlerContext, SessionKeyContext, MediaBuyHandlers as LegacyMediaBuyHandlers, ProposalNegotiationHandlers as LegacyProposalNegotiationHandlers, SignalsHandlers as LegacySignalsHandlers, CreativeHandlers as LegacyCreativeHandlers, GovernanceHandlers as LegacyGovernanceHandlers, AccountHandlers as LegacyAccountHandlers, EventTrackingHandlers as LegacyEventTrackingHandlers, SponsoredIntelligenceHandlers as LegacySponsoredIntelligenceHandlers, ResolveAccountContext as LegacyResolveAccountContext, } from './create-adcp-server';
+export type { AdcpServerConfig as LegacyAdcpServerConfig, WebhooksConfig, AdcpToolMap as LegacyAdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpToolVersionRange, AdcpVersionTranslationEvent, AdcpCustomToolConfig as LegacyAdcpCustomToolConfig, AdcpCustomToolHandler as LegacyAdcpCustomToolHandler, AdcpCustomToolHandlerExtra as LegacyAdcpCustomToolHandlerExtra, McpAppUiMeta, McpAppMeta, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext as LegacyHandlerContext, SessionKeyContext, MediaBuyHandlers as LegacyMediaBuyHandlers, ProposalNegotiationHandlers as LegacyProposalNegotiationHandlers, SignalsHandlers as LegacySignalsHandlers, CreativeHandlers as LegacyCreativeHandlers, GovernanceHandlers as LegacyGovernanceHandlers, AccountHandlers as LegacyAccountHandlers, EventTrackingHandlers as LegacyEventTrackingHandlers, SponsoredIntelligenceHandlers as LegacySponsoredIntelligenceHandlers, ResolveAccountContext as LegacyResolveAccountContext, } from './create-adcp-server';
 export { DEFAULT_REPORTING_CAPABILITIES } from './product-defaults';
 export { isSandboxRequest, mergeSeededProductsIntoResponse, filterValidSeededProducts, filterValidSeededCreatives, filterValidSeededMediaBuys, filterValidSeededAccounts, filterValidSeededAccountFinancials, filterValidSeededCreativeFormats, mergeSeededCreativesIntoResponse, mergeSeededMediaBuysIntoResponse, mergeSeededAccountsIntoResponse, mergeSeededCreativeFormatsIntoResponse, pickSeededAccountFinancialsForRequest, replaceAccountFinancialsIfSeeded, bridgeFromTestControllerStore, bridgeFromSessionStore, } from './test-controller-bridge';
 export type { TestControllerBridge, TestControllerBridgeContext, BridgeFromSessionStoreOptions, SeededCreative, SeededMediaBuy, SeededAccountFinancials, } from './test-controller-bridge';

package/dist/lib/storage/interfaces.d.mts

@@ -135,6 +135,8 @@ export interface DeferredTaskState {
     serverVersion: 'v2' | 'v3';
     /** Per-operation AdCP wire release retained across durable resume. */
     wireAdcpVersion?: string;
+    /** Older release negotiated with the seller; resumed responses validate against it. */
+    negotiatedAdcpVersion?: string;
     /** Per-operation version-envelope mode retained across durable resume. */
     versionEnvelope?: import('../protocols/index.mjs').VersionEnvelopeMode;
     /** True when the original seller-version decision used the SDK's synthetic fallback. */

package/dist/lib/storage/interfaces.d.ts

@@ -135,6 +135,8 @@ export interface DeferredTaskState {
     serverVersion: 'v2' | 'v3';
     /** Per-operation AdCP wire release retained across durable resume. */
     wireAdcpVersion?: string;
+    /** Older release negotiated with the seller; resumed responses validate against it. */
+    negotiatedAdcpVersion?: string;
     /** Per-operation version-envelope mode retained across durable resume. */
     versionEnvelope?: import('../protocols').VersionEnvelopeMode;
     /** True when the original seller-version decision used the SDK's synthetic fallback. */

package/dist/lib/testing/compliance/comply.js

@@ -37,6 +37,7 @@ var import_storyboard_tracks = require('./storyboard-tracks.js');
 var import_runner = require('../storyboard/runner.js');
 var import_native_a2a_compliance = require('../storyboard/native-a2a-compliance.js');
 var import_test_kit = require('../storyboard/test-kit.js');
+var import_protected_context = require('../storyboard/protected-context.js');
 var import_spec_conformance = require('./spec-conformance.js');
 var import_default_invariants = require('../storyboard/default-invariants.js');
 var import_agent_routing = require('../storyboard/agent-routing.js');
@@ -429,6 +430,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return (0, import_client.withTestClientScope)(
     () => (0, import_protocols.withMCPConnectionScope)(
       async () => {
@@ -1077,6 +1084,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => (0, import_protected_context.isProtectedContextKey)(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/compliance/comply.mjs

@@ -16,6 +16,7 @@ import {
 } from "../storyboard/runner.mjs";
 import { applyNativeA2AComplianceTransportOptions } from "../storyboard/native-a2a-compliance.mjs";
 import { validateTestKit } from "../storyboard/test-kit.mjs";
+import { isProtectedContextKey } from "../storyboard/protected-context.mjs";
 import { checkAccountDiscoveryGate, isAccountBearingSpecialism } from "./spec-conformance.mjs";
 import { registerDefaultInvariants } from "../storyboard/default-invariants.mjs";
 import { hasAnyRequiredTool } from "../storyboard/agent-routing.mjs";
@@ -419,6 +420,12 @@ async function comply(agentUrl, options = {}) {
       `Refusing to run compliance against a non-HTTPS URL: ${agentUrl}. Production agents MUST terminate TLS. Pass { allow_http: true } (or --allow-http) for local development.`
     );
   }
+  const forced = options;
+  if (forced.prepared_fixtures !== void 0) {
+    throw new Error(
+      "comply() does not accept prepared_fixtures. Prepared state binds one storyboard digest, and comply selects its storyboard set from capability discovery at runtime \u2014 so there is no scope to authorize against before the agent is contacted. Call prepareStoryboardFixtures() and pass the state to runStoryboard() or runStoryboardStep() per storyboard instead. See docs/guides/COLLECTION-FIXTURE-FOUNDATION.md section 4."
+    );
+  }
   return withTestClientScope(
     () => withMCPConnectionScope(
       async () => {
@@ -1067,6 +1074,16 @@ function buildRoutedStoryboardRun(agentUrl, selected, runOptions, route) {
   const leak = testKitCredentialLeak(storyboard, agentUnderTestKeys);
   if (leak) return { refused: `${selected.id} cannot be routed: ${leak}` };
   const context = runOptions.context !== void 0 || route.context !== void 0 ? { ...runOptions.context, ...route.context } : void 0;
+  if (context !== void 0) {
+    const reserved = Object.keys(context).filter(
+      (key) => isProtectedContextKey(key) || key === "__proto__" || key === "constructor" || key === "prototype"
+    );
+    if (reserved.length > 0) {
+      return {
+        refused: `${selected.id} cannot be routed: route context declares reserved or prototype-sensitive key(s) ${reserved.join(", ")}; prepared state cannot be imported from route JSON`
+      };
+    }
+  }
   const options = {
     ...runOptions,
     agents: isolated,

package/dist/lib/testing/index.d.mts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store.mjs';
+export { PreparedFixturesDeniedError } from '../errors/index.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers.mjs';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester.mjs';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance/index.mjs';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner.mjs';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner.mjs';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation/index.mjs';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard/index.mjs';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard/index.mjs';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard/index.mjs';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';

package/dist/lib/testing/index.d.ts

@@ -1,4 +1,5 @@
 export { assertPendingWebFlowStoreRoundTrip, type PendingWebFlowStoreRoundTripOptions } from './pending-web-flow-store';
+export { PreparedFixturesDeniedError } from '../errors';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, } from './test-helpers';
 export { testAgent as runAgentTests, formatTestResults, formatTestResultsJSON, formatTestResultsSummary, setAgentTesterLogger, getLogger, createTestClient, runStep, testHealthCheck, testDiscovery, testCreateMediaBuy, testFullSalesFlow, testReportingFlow, testCreativeSync, testCreativeInline, testCreativeFlow, testSignalsFlow, testErrorHandling, testValidation, testPricingEdgeCases, testTemporalValidation, testBehaviorAnalysis, testResponseConsistency, testGovernancePropertyLists, testGovernanceContentStandards, testPropertyListFilters, testSISessionLifecycle, testSIAvailability, testSIHandoff, testCapabilityDiscovery, testSyncAudiences, resolveAccountForMediaBuy, resolveAccountForAudiences, testSchemaCompliance, testMediaBuyLifecycle, testTerminalStateEnforcement, testPackageLifecycle, testCreativeStateMachine, testMediaBuyStateMachine, testAccountStateMachine, testSessionStateMachine, testDeliverySimulation, testBudgetSimulation, testControllerValidation, testBrandRightsFlow, hasBrandRightsTools, hasGovernanceTools, hasSITools, likelySupportsV3, testAllScenarios, getApplicableScenarios, SCENARIO_REQUIREMENTS, DEFAULT_SCENARIOS, formatSuiteResults, formatSuiteResultsJSON, type TestScenario, type TestOptions, type OrchestratorOptions, type TestResult, type SuiteResult, type TestStepResult, type AgentProfile, type TaskResult, type TestClient, type Logger, } from './agent-tester';
 export { comply, buildComplianceBundleResults, formatComplianceResults, formatComplianceResultsJSON, buildComplianceSummary, SAMPLE_BRIEFS, getBriefById, getBriefsByVertical, type ComplyOptions, type ComplianceBundleAssessmentOptions, type ComplyRouteStoryboardContext, type ComplyStoryboardRoute, type ComplyStoryboardRouting, type ComplyStoryboardSkip, type ComplianceTrack, type TrackResult, type TestedTrackEntry, type TrackStatus, type ComplianceBundleResult, type ComplianceBundleStatus, type ComplianceResult, type ComplianceSummary, type ComplianceSummaryArtifact, type BuildSummaryOptions, type AdvisoryObservation, type ObservationSource, type SampleBrief, } from './compliance';
@@ -18,5 +19,7 @@ export { runAgainstLocalAgent } from './local-agent-runner';
 export type { LocalAgentRunResult, PerStoryboardOverride, RunAgainstLocalAgentOptions } from './local-agent-runner';
 export { registerExternalSchemaRoot, unregisterExternalSchemaRoot, withExternalSchemaRoot, withServedReleaseSchemaRoots, } from '../validation';
 export { runStoryboard, runStoryboardStep, applyAdcpVersionRunOptions, applyStoryboardVersionOptions, getFirstStepPreview, parseStoryboard, loadStoryboardFile, normalizeValidationOnlyTasks, VALIDATION_ONLY_TASK, applyFixtureBindingsToRequest, buildFixtureResolutionSpecs, FixtureBindingRegistry, matchesFixtureRequirements, normalizeFixtureMatchExpression, validateFixtureResolutionDeclarations, getComplianceCacheDir, loadComplianceIndex, listBundles, loadBundleStoryboards, listAllComplianceStoryboards, getComplianceStoryboardById, findBundleById, resolveBundleOrStoryboard, resolveStoryboardsForCapabilities, isComplianceVersionSupported, CapabilityResolutionError, TASK_TO_METHOD, executeStoryboardTask, expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives, extractContext, injectContext, runValidations, resolvePath, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, getSandboxEntities, getSandboxBrands, getSandboxBrand, isSandboxDomain, clearSandboxCache, registerAssertion, getAssertion, listAssertions, listDefaultAssertions, clearAssertionRegistry, resolveAssertions, type AssertionSpec, type AssertionContext, type AssertionResult, type RegisterAssertionOptions, type Storyboard, type StoryboardFixtureResolution, type FixtureResolutionStrategy, type FixtureMatchOperator, type FixtureMatchClause, type FixtureResolutionDeclaration, type ProductFixtureResolutionDeclaration, type PricingOptionFixtureResolutionDeclaration, type FixtureResolutionStatus, type FixtureResolutionRecord, type FixtureResolutionAttempt, type FixtureResolutionEvidence, type FixtureResolutionCoverageGap, type StoryboardInvariants, type StoryboardInvariantsObject, type StepInvariantsObject, type StoryboardPhase, type StoryboardStep, type RateLimitTripSpec, type StoryboardValidation, type RateLimitTripClient, type RateLimitTripFailureCode, type RateLimitTripObservation, type RateLimitTripObserverOptions, type RateLimitTripResponseSnapshot, type RateLimitTripStructuredResult, type RateLimitTripTaskOptions, type StoryboardContext, type StoryboardRunOptions, type TrustedMatchContextProviderEndpoint, type TrustedMatchContextRegistrationContext, type TrustedMatchContextRouterRunnerOptions, type TrustedMatchPublisherAuthOperation, type TrustedMatchPublisherCredentialState, type TrustedMatchPublisherAuthTls, type TrustedMatchPublisherAuthProbeConfiguration, type TrustedMatchPublisherAuthRunner, type ValidationResult, type StoryboardStepPreview, type StoryboardStepResult, type StoryboardStepHint, type StoryboardStepHintBase, type ContextValueRejectedHint, type ShapeDriftHint, type MissingRequiredFieldHint, type FormatMismatchHint, type MonotonicViolationHint, type ContextProvenanceEntry, type StoryboardPhaseResult, type StoryboardResult, type RunnerNotice, type NoticeCode, type NoticeSeverity, type AgentCapabilities, type BundleKind, type BundleRef, type CapabilityResolutionCode, type ComplianceIndex, type ComplianceIndexProtocol, type ComplianceIndexSpecialism, type ResolveOptions, type ResolvedBundle, type ResolvedStoryboards, type SandboxBrand, type SandboxAgent, type SandboxEntities, type BrandJson, type AdagentsJson, gradeOAuthMetadataGraph, gradeOAuthMetadataGraphVector, loadOAuthMetadataGraphVectors, normalizeOAuthResourceForComparison, redactOAuthUrlForOutput, type GradeOAuthMetadataGraphOptions, type OAuthMetadataGraphErrorCode, type OAuthMetadataGraphFinding, type OAuthMetadataGraphGrade, type OAuthMetadataGraphObservation, type OAuthMetadataGraphVector, type OAuthMetadataGraphVectorCorpus, BrandJsonSchema, AdagentsJsonSchema, MCP_SESSION_PROBE_TASK, } from './storyboard';
+export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETING_MODES, COLLECTION_WITNESS_KINDS, diffCollectionPairSets, evaluateCollectionSelection, formatCollectionPair, isProtectedContextKey, isTrustedPreparedFixtures, normalizeCollectionSelectors, prepareStoryboardFixtures, PREPARED_FIXTURES_CONTRACT_VERSION, PreparedStoryboardFixtures, productSatisfiesCollectionSelection, PROTECTED_CONTEXT_PREFIX, summarizeCollectionPairs, ProtectedContextViolation, readCollectionWitness, withPreparedFixtures, } from './storyboard';
+export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';

package/dist/lib/testing/index.js

@@ -20,6 +20,10 @@ var testing_exports = {};
 __export(testing_exports, {
   AdagentsJsonSchema: () => import_storyboard.AdagentsJsonSchema,
   BrandJsonSchema: () => import_storyboard.BrandJsonSchema,
+  COLLECTION_DIAGNOSTIC_LIMIT: () => import_storyboard2.COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT: () => import_storyboard2.COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES: () => import_storyboard2.COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS: () => import_storyboard2.COLLECTION_WITNESS_KINDS,
   CONTROLLER_SCENARIOS: () => import_test_controller.CONTROLLER_SCENARIOS,
   CapabilityResolutionError: () => import_storyboard.CapabilityResolutionError,
   DEFAULT_SCENARIOS: () => import_agent_tester.DEFAULT_SCENARIOS,
@@ -27,6 +31,11 @@ __export(testing_exports, {
   FixtureBindingRegistry: () => import_storyboard.FixtureBindingRegistry,
   GovernanceAgentStub: () => import_stubs.GovernanceAgentStub,
   MCP_SESSION_PROBE_TASK: () => import_storyboard.MCP_SESSION_PROBE_TASK,
+  PREPARED_FIXTURES_CONTRACT_VERSION: () => import_storyboard2.PREPARED_FIXTURES_CONTRACT_VERSION,
+  PROTECTED_CONTEXT_PREFIX: () => import_storyboard2.PROTECTED_CONTEXT_PREFIX,
+  PreparedFixturesDeniedError: () => import_errors.PreparedFixturesDeniedError,
+  PreparedStoryboardFixtures: () => import_storyboard2.PreparedStoryboardFixtures,
+  ProtectedContextViolation: () => import_storyboard2.ProtectedContextViolation,
   RATE_LIMIT_TRIP_CONTRACT: () => import_storyboard.RATE_LIMIT_TRIP_CONTRACT,
   RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS: () => import_storyboard.RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,
   RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX: () => import_storyboard.RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,
@@ -61,7 +70,9 @@ __export(testing_exports, {
   createTestAgent: () => import_test_helpers.createTestAgent,
   createTestClient: () => import_agent_tester.createTestClient,
   creativeAgent: () => import_test_helpers.creativeAgent,
+  diffCollectionPairSets: () => import_storyboard2.diffCollectionPairSets,
   enforceMapCap: () => import_test_controller.enforceMapCap,
+  evaluateCollectionSelection: () => import_storyboard2.evaluateCollectionSelection,
   executeStoryboardTask: () => import_storyboard.executeStoryboardTask,
   expandCreativeAssetDirectives: () => import_storyboard.expandCreativeAssetDirectives,
   expectControllerError: () => import_controller_assertions.expectControllerError,
@@ -75,6 +86,7 @@ __export(testing_exports, {
   filterValidSeededProducts: () => import_test_controller_bridge.filterValidSeededProducts,
   findBundleById: () => import_storyboard.findBundleById,
   findUnresolvedCreativeAssetDirectives: () => import_storyboard.findUnresolvedCreativeAssetDirectives,
+  formatCollectionPair: () => import_storyboard2.formatCollectionPair,
   formatComplianceResults: () => import_compliance.formatComplianceResults,
   formatComplianceResultsJSON: () => import_compliance.formatComplianceResultsJSON,
   formatSuiteResults: () => import_agent_tester.formatSuiteResults,
@@ -100,8 +112,10 @@ __export(testing_exports, {
   hasSITools: () => import_agent_tester.hasSITools,
   injectContext: () => import_storyboard.injectContext,
   isComplianceVersionSupported: () => import_storyboard.isComplianceVersionSupported,
+  isProtectedContextKey: () => import_storyboard2.isProtectedContextKey,
   isSandboxDomain: () => import_storyboard.isSandboxDomain,
   isSandboxRequest: () => import_test_controller_bridge.isSandboxRequest,
+  isTrustedPreparedFixtures: () => import_storyboard2.isTrustedPreparedFixtures,
   likelySupportsV3: () => import_agent_tester.likelySupportsV3,
   listAllComplianceStoryboards: () => import_storyboard.listAllComplianceStoryboards,
   listAssertions: () => import_storyboard.listAssertions,
@@ -124,12 +138,16 @@ __export(testing_exports, {
   mergeSeededCreativesIntoResponse: () => import_test_controller_bridge.mergeSeededCreativesIntoResponse,
   mergeSeededMediaBuysIntoResponse: () => import_test_controller_bridge.mergeSeededMediaBuysIntoResponse,
   mergeSeededProductsIntoResponse: () => import_test_controller_bridge.mergeSeededProductsIntoResponse,
+  normalizeCollectionSelectors: () => import_storyboard2.normalizeCollectionSelectors,
   normalizeFixtureMatchExpression: () => import_storyboard.normalizeFixtureMatchExpression,
   normalizeOAuthResourceForComparison: () => import_storyboard.normalizeOAuthResourceForComparison,
   normalizeValidationOnlyTasks: () => import_storyboard.normalizeValidationOnlyTasks,
   overlayById: () => import_seed_merge.overlayById,
   parseStoryboard: () => import_storyboard.parseStoryboard,
   pickSeededAccountFinancialsForRequest: () => import_test_controller_bridge.pickSeededAccountFinancialsForRequest,
+  prepareStoryboardFixtures: () => import_storyboard2.prepareStoryboardFixtures,
+  productSatisfiesCollectionSelection: () => import_storyboard2.productSatisfiesCollectionSelection,
+  readCollectionWitness: () => import_storyboard2.readCollectionWitness,
   redactOAuthUrlForOutput: () => import_storyboard.redactOAuthUrlForOutput,
   registerAssertion: () => import_storyboard.registerAssertion,
   registerExternalSchemaRoot: () => import_validation.registerExternalSchemaRoot,
@@ -139,7 +157,7 @@ __export(testing_exports, {
   resolveAccountForMediaBuy: () => import_agent_tester.resolveAccountForMediaBuy,
   resolveAssertions: () => import_storyboard.resolveAssertions,
   resolveBundleOrStoryboard: () => import_storyboard.resolveBundleOrStoryboard,
-  resolveCreativeBuildProbe: () => import_storyboard2.resolveCreativeBuildProbe,
+  resolveCreativeBuildProbe: () => import_storyboard3.resolveCreativeBuildProbe,
   resolvePath: () => import_storyboard.resolvePath,
   resolveStoryboardsForCapabilities: () => import_storyboard.resolveStoryboardsForCapabilities,
   runAgainstLocalAgent: () => import_local_agent_runner.runAgainstLocalAgent,
@@ -149,6 +167,7 @@ __export(testing_exports, {
   runStoryboardStep: () => import_storyboard.runStoryboardStep,
   runValidations: () => import_storyboard.runValidations,
   setAgentTesterLogger: () => import_agent_tester.setAgentTesterLogger,
+  summarizeCollectionPairs: () => import_storyboard2.summarizeCollectionPairs,
   testAccountStateMachine: () => import_agent_tester.testAccountStateMachine,
   testAgent: () => import_test_helpers.testAgent,
   testAgentA2A: () => import_test_helpers.testAgentA2A,
@@ -191,14 +210,16 @@ __export(testing_exports, {
   testTerminalStateEnforcement: () => import_agent_tester.testTerminalStateEnforcement,
   testValidation: () => import_agent_tester.testValidation,
   unregisterExternalSchemaRoot: () => import_validation.unregisterExternalSchemaRoot,
-  validateCreativeBuildProbeSpec: () => import_storyboard2.validateCreativeBuildProbeSpec,
+  validateCreativeBuildProbeSpec: () => import_storyboard3.validateCreativeBuildProbeSpec,
   validateFixtureResolutionDeclarations: () => import_storyboard.validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec: () => import_storyboard.validateRateLimitTripSpec,
   withExternalSchemaRoot: () => import_validation.withExternalSchemaRoot,
+  withPreparedFixtures: () => import_storyboard2.withPreparedFixtures,
   withServedReleaseSchemaRoots: () => import_validation.withServedReleaseSchemaRoots
 });
 module.exports = __toCommonJS(testing_exports);
 var import_pending_web_flow_store = require('./pending-web-flow-store.js');
+var import_errors = require('../errors/index.js');
 var import_test_helpers = require('./test-helpers.js');
 var import_agent_tester = require('./agent-tester.js');
 var import_compliance = require('./compliance/index.js');
@@ -212,10 +233,15 @@ var import_local_agent_runner = require('./local-agent-runner.js');
 var import_validation = require('../validation/index.js');
 var import_storyboard = require('./storyboard/index.js');
 var import_storyboard2 = require('./storyboard/index.js');
+var import_storyboard3 = require('./storyboard/index.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdagentsJsonSchema,
   BrandJsonSchema,
+  COLLECTION_DIAGNOSTIC_LIMIT,
+  COLLECTION_PAIR_LIMIT,
+  COLLECTION_TARGETING_MODES,
+  COLLECTION_WITNESS_KINDS,
   CONTROLLER_SCENARIOS,
   CapabilityResolutionError,
   DEFAULT_SCENARIOS,
@@ -223,6 +249,11 @@ var import_storyboard2 = require('./storyboard/index.js');
   FixtureBindingRegistry,
   GovernanceAgentStub,
   MCP_SESSION_PROBE_TASK,
+  PREPARED_FIXTURES_CONTRACT_VERSION,
+  PROTECTED_CONTEXT_PREFIX,
+  PreparedFixturesDeniedError,
+  PreparedStoryboardFixtures,
+  ProtectedContextViolation,
   RATE_LIMIT_TRIP_CONTRACT,
   RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,
   RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,
@@ -257,7 +288,9 @@ var import_storyboard2 = require('./storyboard/index.js');
   createTestAgent,
   createTestClient,
   creativeAgent,
+  diffCollectionPairSets,
   enforceMapCap,
+  evaluateCollectionSelection,
   executeStoryboardTask,
   expandCreativeAssetDirectives,
   expectControllerError,
@@ -271,6 +304,7 @@ var import_storyboard2 = require('./storyboard/index.js');
   filterValidSeededProducts,
   findBundleById,
   findUnresolvedCreativeAssetDirectives,
+  formatCollectionPair,
   formatComplianceResults,
   formatComplianceResultsJSON,
   formatSuiteResults,
@@ -296,8 +330,10 @@ var import_storyboard2 = require('./storyboard/index.js');
   hasSITools,
   injectContext,
   isComplianceVersionSupported,
+  isProtectedContextKey,
   isSandboxDomain,
   isSandboxRequest,
+  isTrustedPreparedFixtures,
   likelySupportsV3,
   listAllComplianceStoryboards,
   listAssertions,
@@ -320,12 +356,16 @@ var import_storyboard2 = require('./storyboard/index.js');
   mergeSeededCreativesIntoResponse,
   mergeSeededMediaBuysIntoResponse,
   mergeSeededProductsIntoResponse,
+  normalizeCollectionSelectors,
   normalizeFixtureMatchExpression,
   normalizeOAuthResourceForComparison,
   normalizeValidationOnlyTasks,
   overlayById,
   parseStoryboard,
   pickSeededAccountFinancialsForRequest,
+  prepareStoryboardFixtures,
+  productSatisfiesCollectionSelection,
+  readCollectionWitness,
   redactOAuthUrlForOutput,
   registerAssertion,
   registerExternalSchemaRoot,
@@ -345,6 +385,7 @@ var import_storyboard2 = require('./storyboard/index.js');
   runStoryboardStep,
   runValidations,
   setAgentTesterLogger,
+  summarizeCollectionPairs,
   testAccountStateMachine,
   testAgent,
   testAgentA2A,
@@ -391,5 +432,6 @@ var import_storyboard2 = require('./storyboard/index.js');
   validateFixtureResolutionDeclarations,
   validateRateLimitTripSpec,
   withExternalSchemaRoot,
+  withPreparedFixtures,
   withServedReleaseSchemaRoots
 });