@adcp/sdk 17.0.0-beta.1 → 17.0.0-beta.3

package/dist/lib/server/account-response-identity.d.mts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated.mjs';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.d.ts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.js

@@ -0,0 +1,52 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var account_response_identity_exports = {};
+__export(account_response_identity_exports, {
+  projectAccountResponseIdentityFields: () => projectAccountResponseIdentityFields
+});
+module.exports = __toCommonJS(account_response_identity_exports);
+var import_schema_loader = require('../validation/schema-loader.js');
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = (0, import_schema_loader.getSchemaValidatorByRef)(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  projectAccountResponseIdentityFields
+});

package/dist/lib/server/account-response-identity.mjs

@@ -0,0 +1,28 @@
+import { getSchemaValidatorByRef } from "../validation/schema-loader.mjs";
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = getSchemaValidatorByRef(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+export {
+  projectAccountResponseIdentityFields
+};

package/dist/lib/server/account-sync-contract.js

@@ -205,9 +205,9 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
           field: `accounts[${index}]${termsViolation ? ".payment_terms" : billingViolation ? ".billing" : ""}`
         }
       ).toStructuredError();
+      const anchor = row.account !== void 0 ? { account: row.account } : { brand: row.brand, operator: row.operator };
       row = {
-        brand: row.brand,
-        operator: row.operator,
+        ...anchor,
         ...priorId === row.account_id && priorId && { account_id: priorId },
         action: "failed",
         status: existing[offset]?.status ?? row.status,

package/dist/lib/server/account-sync-contract.mjs

@@ -178,9 +178,9 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
           field: `accounts[${index}]${termsViolation ? ".payment_terms" : billingViolation ? ".billing" : ""}`
         }
       ).toStructuredError();
+      const anchor = row.account !== void 0 ? { account: row.account } : { brand: row.brand, operator: row.operator };
       row = {
-        brand: row.brand,
-        operator: row.operator,
+        ...anchor,
         ...priorId === row.account_id && priorId && { account_id: priorId },
         action: "failed",
         status: existing[offset]?.status ?? row.status,

package/dist/lib/server/auth-signature.d.mts

@@ -64,8 +64,8 @@ export interface VerifySignatureAsAuthenticatorOptions {
      *  requests fall through to the next authenticator — so set it to whatever
      *  your `request_signing` capability claim advertises. */
     capability: VerifierCapability;
-    /** Resolves verification keys by `keyid`. */
-    jwks: JwksResolver;
+    /** Resolves legacy RFC 9421 keys. May be omitted for a Web Bot Auth-only endpoint. */
+    jwks?: JwksResolver;
     /**
      * Stores `(keyid, signature-bytes, expires)` tuples for replay detection.
      * Defaults to a fresh {@link InMemoryReplayStore} — fine for single-process

package/dist/lib/server/auth-signature.d.ts

@@ -64,8 +64,8 @@ export interface VerifySignatureAsAuthenticatorOptions {
      *  requests fall through to the next authenticator — so set it to whatever
      *  your `request_signing` capability claim advertises. */
     capability: VerifierCapability;
-    /** Resolves verification keys by `keyid`. */
-    jwks: JwksResolver;
+    /** Resolves legacy RFC 9421 keys. May be omitted for a Web Bot Auth-only endpoint. */
+    jwks?: JwksResolver;
     /**
      * Stores `(keyid, signature-bytes, expires)` tuples for replay detection.
      * Defaults to a fresh {@link InMemoryReplayStore} — fine for single-process

package/dist/lib/server/auth-signature.js

@@ -36,6 +36,8 @@ var import_verifier = require('../signing/verifier.js');
 var import_buyer_agent = require('./decisioning/buyer-agent.js');
 var import_auth = require('./auth.js');
 function verifySignatureAsAuthenticator(options) {
+  if (!options.jwks && !options.webBotAuth)
+    throw new TypeError("verifySignatureAsAuthenticator requires jwks or webBotAuth");
   const replayStore = options.replayStore ?? new import_replay.InMemoryReplayStore();
   const legacyOriginGate = options.assertLegacyOriginAllowed ?? (0, import_web_bot_auth.getWebBotAuthLegacyOriginGate)(options.webBotAuth?.resolvePrincipal);
   if (options.webBotAuth && !legacyOriginGate)
@@ -102,6 +104,7 @@ function verifySignatureAsAuthenticator(options) {
           }
         };
       }
+      if (!options.jwks) throw new import_web_bot_auth2.WebBotAuthError(403, "profile_disabled");
       result = await (0, import_verifier.verifyRequestSignature)(requestLike, {
         capability: options.capability,
         jwks: options.jwks,

package/dist/lib/server/auth-signature.mjs

@@ -36,6 +36,8 @@ import {
   tagAuthenticatorPresenceGated
 } from "./auth.mjs";
 function verifySignatureAsAuthenticator(options) {
+  if (!options.jwks && !options.webBotAuth)
+    throw new TypeError("verifySignatureAsAuthenticator requires jwks or webBotAuth");
   const replayStore = options.replayStore ?? new InMemoryReplayStore();
   const legacyOriginGate = options.assertLegacyOriginAllowed ?? getWebBotAuthLegacyOriginGate(options.webBotAuth?.resolvePrincipal);
   if (options.webBotAuth && !legacyOriginGate)
@@ -102,6 +104,7 @@ function verifySignatureAsAuthenticator(options) {
           }
         };
       }
+      if (!options.jwks) throw new WebBotAuthError(403, "profile_disabled");
       result = await verifyRequestSignature(requestLike, {
         capability: options.capability,
         jwks: options.jwks,

package/dist/lib/server/create-adcp-server.d.mts

@@ -946,8 +946,8 @@ export interface AdcpCapabilitiesOverrides {
 export interface SignedRequestsConfig {
     webBotAuth?: import('./auth-signature.mjs').VerifySignatureAsAuthenticatorOptions['webBotAuth'];
     assertLegacyOriginAllowed?: (agentUrl: string) => Promise<void>;
-    /** Resolves verification keys by `keyid`. */
-    jwks: JwksResolver;
+    /** Resolves legacy RFC 9421 keys. May be omitted for a Web Bot Auth-only endpoint. */
+    jwks?: JwksResolver;
     /** Stores `(keyid, signature-bytes, expires)` tuples for replay detection. */
     replayStore: ReplayStore;
     /** Consulted for revoked `kid` / `jti` before accepting a signature. */

package/dist/lib/server/create-adcp-server.d.ts

@@ -946,8 +946,8 @@ export interface AdcpCapabilitiesOverrides {
 export interface SignedRequestsConfig {
     webBotAuth?: import('./auth-signature').VerifySignatureAsAuthenticatorOptions['webBotAuth'];
     assertLegacyOriginAllowed?: (agentUrl: string) => Promise<void>;
-    /** Resolves verification keys by `keyid`. */
-    jwks: JwksResolver;
+    /** Resolves legacy RFC 9421 keys. May be omitted for a Web Bot Auth-only endpoint. */
+    jwks?: JwksResolver;
     /** Stores `(keyid, signature-bytes, expires)` tuples for replay detection. */
     replayStore: ReplayStore;
     /** Consulted for revoked `kid` / `jti` before accepting a signature. */

package/dist/lib/server/create-adcp-server.js

@@ -30,6 +30,7 @@ __export(create_adcp_server_exports, {
   requireSessionKey: () => requireSessionKey
 });
 module.exports = __toCommonJS(create_adcp_server_exports);
+var import_adcp_version_config = require('../utils/adcp-version-config.js');
 var import_web_bot_auth = require('../signing/web-bot-auth.js');
 var import_version = require('../adapters/version/index.js');
 var import_schema_loader = require('../validation/schema-loader.js');
@@ -40,7 +41,7 @@ var import_validation = require('../identity-3.3/validation.js');
 var import_trust = require('../identity-3.3/trust.js');
 var import_zod = require("zod");
 var import_version2 = require('../version.js');
-var import_adcp_version_config = require('../utils/adcp-version-config.js');
+var import_adcp_version_config2 = require('../utils/adcp-version-config.js');
 var import_errors = require('../errors/index.js');
 var import_schema_loader2 = require('../validation/schema-loader.js');
 var import_schemas = require('../schemas/index.js');
@@ -80,6 +81,7 @@ var import_middleware = require('../signing/middleware.js');
 var import_operation_resolution = require('../signing/operation-resolution.js');
 var import_account_mode = require('./account-mode.js');
 var import_test_controller_bridge = require('./test-controller-bridge.js');
+var import_signed_request_transport = require('./signed-request-transport.js');
 var import_version3 = require('../version.js');
 var import_schemas2 = require('../types/schemas.generated.js');
 var import_error_codes = require('../types/error-codes.js');
@@ -962,8 +964,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = (0, import_schema_loader2.getValidator)("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema((0, import_schema_loader2.getToolSchemaDocument)("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1392,7 +1393,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1416,12 +1419,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? (0, import_version.getVersionAdapter)("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -1453,6 +1467,8 @@ function resolveEffectiveSignedRequestPolicy(signedRequests, capabilityRequestSi
   };
 }
 function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning, adcpVersion) {
+  if (!signedRequests.jwks && !signedRequests.webBotAuth)
+    throw new TypeError("signedRequests requires jwks or webBotAuth");
   const legacyOriginGate = signedRequests.assertLegacyOriginAllowed ?? (0, import_web_bot_auth.getWebBotAuthLegacyOriginGate)(signedRequests.webBotAuth?.resolvePrincipal);
   if (signedRequests.webBotAuth && !legacyOriginGate)
     throw new Error(
@@ -1472,7 +1488,7 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
       required_for: requiredFor,
       ...effectiveRequestSigning.protocol_methods_required_for ? { protocol_methods_required_for: effectiveRequestSigning.protocol_methods_required_for } : {}
     },
-    jwks: signedRequests.jwks,
+    jwks: signedRequests.jwks ?? { resolve: async () => null },
     replayStore: signedRequests.replayStore,
     revocationStore: signedRequests.revocationStore,
     adcpVersion,
@@ -1545,6 +1561,12 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
         return true;
       }
     }
+    if (!signedRequests.jwks && (req.headers["signature"] !== void 0 || req.headers["signature-input"] !== void 0)) {
+      const refused = new import_web_bot_auth2.WebBotAuthError(403, "profile_disabled");
+      res.writeHead(refused.status, { ...refused.headers, "Content-Type": "application/json" });
+      res.end(JSON.stringify(refused.body));
+      return true;
+    }
     const reqShim = {
       method: req.method ?? "POST",
       url: req.url ?? "/mcp",
@@ -1798,7 +1820,7 @@ function supportedVersionsForTool(toolName, ranges, capConfig, serverPin) {
 }
 const PUSH_OPERATION_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,255}$/;
 function releaseRequiresPushOperationId(release) {
-  return (0, import_adcp_version_config.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
+  return (0, import_adcp_version_config2.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
 }
 function pushOperationIdError(params, release) {
   const config = params.push_notification_config;
@@ -2082,18 +2104,18 @@ function createAdcpServer(config) {
     logger.warn(message);
   }
   const credentialPolicyPatterns = credentialPolicy === void 0 || typeof credentialPolicy === "string" ? void 0 : credentialPolicy.patterns;
-  const adcpVersion = (0, import_adcp_version_config.resolveAdcpVersion)(
+  const adcpVersion = (0, import_adcp_version_config2.resolveAdcpVersion)(
     configuredAdcpVersion ?? (config.identity33 ? "3.3" : config.proposalNegotiation ? import_version3.ADCP_VERSION : void 0)
   );
   const toolVersionRanges = parseToolVersionRanges(config.toolVersions);
   const toolAvailableForRelease = (toolName, release) => toolIsAvailableInRelease(toolVersionRanges, toolName, release);
-  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config.isMovingAdcpPrereleaseFamilyAlias);
+  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config2.isMovingAdcpPrereleaseFamilyAlias);
   if (movingSupportedVersion) {
     throw new Error(
       `createAdcpServer: capabilities.supported_versions contains moving prerelease-family alias ${JSON.stringify(movingSupportedVersion)}; pin ${JSON.stringify((0, import_version2.toReleasePrecisionVersion)(import_version3.ADCP_VERSION))} instead`
     );
   }
-  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
+  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config2.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
   const maximumRelease = parseAdcpRelease(adcpVersion);
   const requestedDefaultRelease = configuredDefaultVersion === void 0 ? void 0 : parseAdcpRelease(configuredDefaultVersion);
   if (maximumRelease === void 0) {
@@ -2430,8 +2452,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, (0, import_error_arm_tools.getToolsWithErrorArm)(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2810,8 +2832,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -2840,7 +2862,7 @@ function createAdcpServer(config) {
           const offered = capabilitiesData.webhook_signing?.profiles ?? [
             "adcp/webhook-signing/v1"
           ];
-          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
+          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
             return finalize(
               (0, import_errors2.adcpError)("INVALID_REQUEST", {
                 message: "Unsupported or ambiguous webhook signing profile",
@@ -3028,7 +3050,7 @@ function createAdcpServer(config) {
             params,
             requestRelease.validationVersion,
             proposalRefinementCapabilities,
-            !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+            !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
           );
           if (!outcome.valid) {
             if ("refinementError" in outcome && outcome.refinementError?.code === "UNSUPPORTED_FEATURE") {
@@ -3101,7 +3123,7 @@ function createAdcpServer(config) {
           }
         }
         let unresolvedAccountPassThrough = false;
-        const requireVerifiedAccountReferences = strictAccountReferences || (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.validationVersion, "3.3.0-beta.0");
+        const requireVerifiedAccountReferences = strictAccountReferences || (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.validationVersion, "3.3.0-beta.0");
         const suppliedAccountRef = hasAccount && params.account != null && !(requireVerifiedAccountReferences && toolName === "list_accounts");
         if (suppliedAccountRef && toolName === "list_accounts") {
           (0, import_account_reference_warnings.warnAccountReferenceDeprecation)(
@@ -4003,8 +4025,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {
@@ -4040,7 +4062,7 @@ function createAdcpServer(config) {
               payload,
               requestRelease.validationVersion,
               void 0,
-              !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+              !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
             );
             if (!outcome.valid) {
               logger.warn(
@@ -4935,7 +4957,7 @@ function createAdcpServer(config) {
           delete validationPayload.media_buy.proposal_refinement;
           delete validationPayload.media_buy.lifecycle_tools;
         }
-        const responseOutcome = config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
+        const responseOutcome = config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
           "get_adcp_capabilities",
           "response",
           validationPayload,
@@ -5108,12 +5130,25 @@ function createAdcpServer(config) {
   (0, import_adcp_server.setMcpAppResources)(wrapped, mcpAppResources);
   if (signedRequests) {
     const preTransport = buildSignedRequestsPreTransport(signedRequests, enforcedRequestSigningPolicy, adcpVersion);
+    const transportPermitted = (0, import_signed_request_transport.registerSignedRequestTransportGuard)(wrapped, preTransport);
+    let preTransportConsumed = false;
     Object.defineProperty(wrapped, ADCP_PRE_TRANSPORT, {
-      value: preTransport,
+      get() {
+        preTransportConsumed = true;
+        return preTransport;
+      },
       enumerable: false,
-      writable: false,
       configurable: true
     });
+    const connect = wrapped.connect.bind(wrapped);
+    wrapped.connect = async (transport) => {
+      if (!preTransportConsumed && !transportPermitted(transport)) {
+        throw new Error(
+          "signedRequests verifier is not mounted: direct server.connect(transport) does not run HTTP middleware. Use serve(), createA2AAdapter(), or mount server[ADCP_PRE_TRANSPORT] before handling requests. For custom authentication, compose verifySignatureAsAuthenticator({ webBotAuth }) and capture rawBody."
+        );
+      }
+      return connect(transport);
+    };
   }
   const signedRequestsState = {
     autoWired: Boolean(signedRequests),

package/dist/lib/server/create-adcp-server.mjs

@@ -1,5 +1,11 @@
+import { isPre31AdcpVersion } from "../utils/adcp-version-config.mjs";
 import { assertWebBotAuthSigningKey, getWebBotAuthLegacyOriginGate } from "../signing/web-bot-auth.mjs";
-import { downgradeResponse, translationSteps, upgradeRequest } from "../adapters/version/index.mjs";
+import {
+  downgradeResponse,
+  getVersionAdapter,
+  translationSteps,
+  upgradeRequest
+} from "../adapters/version/index.mjs";
 import {
   isIdentity33SchemaScope,
   withIdentity33SchemaScope,
@@ -37,7 +43,13 @@ import {
   resolveAdcpVersion
 } from "../utils/adcp-version-config.mjs";
 import { ConfigurationError } from "../errors/index.mjs";
-import { getValidator, hasSchemaBundle, resolveBundleKey, getMcpProfileInputSchema } from "../validation/schema-loader.mjs";
+import {
+  getValidator,
+  getToolSchemaDocument,
+  hasSchemaBundle,
+  resolveBundleKey,
+  getMcpProfileInputSchema
+} from "../validation/schema-loader.mjs";
 import { TOOL_INPUT_SHAPES } from "../schemas/index.mjs";
 import { TaskTypeValues } from "../types/enums.generated.mjs";
 import { bundleSupportsAdcpVersionField } from "../protocols/index.mjs";
@@ -171,6 +183,7 @@ import {
   filterValidSeededRights,
   filterValidSeededSiOffering
 } from "./test-controller-bridge.mjs";
+import { registerSignedRequestTransportGuard } from "./signed-request-transport.mjs";
 import { ADCP_VERSION, LIBRARY_VERSION } from "../version.mjs";
 import { AccountReferenceSchema } from "../types/schemas.generated.mjs";
 import {
@@ -1053,8 +1066,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = getValidator("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema(getToolSchemaDocument("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1483,7 +1495,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && isPre31AdcpVersion(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1507,12 +1521,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && isPre31AdcpVersion(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? getVersionAdapter("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -1544,6 +1569,8 @@ function resolveEffectiveSignedRequestPolicy(signedRequests, capabilityRequestSi
   };
 }
 function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning, adcpVersion) {
+  if (!signedRequests.jwks && !signedRequests.webBotAuth)
+    throw new TypeError("signedRequests requires jwks or webBotAuth");
   const legacyOriginGate = signedRequests.assertLegacyOriginAllowed ?? getWebBotAuthLegacyOriginGate(signedRequests.webBotAuth?.resolvePrincipal);
   if (signedRequests.webBotAuth && !legacyOriginGate)
     throw new Error(
@@ -1563,7 +1590,7 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
       required_for: requiredFor,
       ...effectiveRequestSigning.protocol_methods_required_for ? { protocol_methods_required_for: effectiveRequestSigning.protocol_methods_required_for } : {}
     },
-    jwks: signedRequests.jwks,
+    jwks: signedRequests.jwks ?? { resolve: async () => null },
     replayStore: signedRequests.replayStore,
     revocationStore: signedRequests.revocationStore,
     adcpVersion,
@@ -1636,6 +1663,12 @@ function buildSignedRequestsPreTransport(signedRequests, effectiveRequestSigning
         return true;
       }
     }
+    if (!signedRequests.jwks && (req.headers["signature"] !== void 0 || req.headers["signature-input"] !== void 0)) {
+      const refused = new WebBotAuthError(403, "profile_disabled");
+      res.writeHead(refused.status, { ...refused.headers, "Content-Type": "application/json" });
+      res.end(JSON.stringify(refused.body));
+      return true;
+    }
     const reqShim = {
       method: req.method ?? "POST",
       url: req.url ?? "/mcp",
@@ -2521,8 +2554,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, getToolsWithErrorArm(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2901,8 +2934,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -4094,8 +4127,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {
@@ -5199,12 +5232,25 @@ function createAdcpServer(config) {
   setMcpAppResources(wrapped, mcpAppResources);
   if (signedRequests) {
     const preTransport = buildSignedRequestsPreTransport(signedRequests, enforcedRequestSigningPolicy, adcpVersion);
+    const transportPermitted = registerSignedRequestTransportGuard(wrapped, preTransport);
+    let preTransportConsumed = false;
     Object.defineProperty(wrapped, ADCP_PRE_TRANSPORT, {
-      value: preTransport,
+      get() {
+        preTransportConsumed = true;
+        return preTransport;
+      },
       enumerable: false,
-      writable: false,
       configurable: true
     });
+    const connect = wrapped.connect.bind(wrapped);
+    wrapped.connect = async (transport) => {
+      if (!preTransportConsumed && !transportPermitted(transport)) {
+        throw new Error(
+          "signedRequests verifier is not mounted: direct server.connect(transport) does not run HTTP middleware. Use serve(), createA2AAdapter(), or mount server[ADCP_PRE_TRANSPORT] before handling requests. For custom authentication, compose verifySignatureAsAuthenticator({ webBotAuth }) and capture rawBody."
+        );
+      }
+      return connect(transport);
+    };
   }
   const signedRequestsState = {
     autoWired: Boolean(signedRequests),