@adcp/sdk 17.0.0-beta.1 → 17.0.0-beta.3

package/dist/lib/server/media-buy-store.js

@@ -25,6 +25,25 @@ module.exports = __toCommonJS(media_buy_store_exports);
 var import_targeting_input = require('../media-buy/targeting-input.js');
 var import_state_store = require('./state-store.js');
 const DEFAULT_MEDIA_BUY_STORE_COLLECTION = "media_buys_targeting";
+const PACKAGE_IDENTITY_FIELDS = ["package_id", "product_id", "buyer_ref"];
+function compatibleIdentity(left, right) {
+  if (!left || !right) return false;
+  return PACKAGE_IDENTITY_FIELDS.every((key) => !left[key] || !right[key] || left[key] === right[key]);
+}
+function sharesIdentity(left, right) {
+  if (!left || !right) return false;
+  return compatibleIdentity(left, right) && PACKAGE_IDENTITY_FIELDS.some((key) => left[key] && left[key] === right[key]);
+}
+function matchContextPackage(requests, responses, index) {
+  const matches = requests.filter((request) => sharesIdentity(request, responses[index]));
+  if (matches.length === 1 && responses.filter((response) => sharesIdentity(matches[0], response)).length === 1) {
+    return matches[0];
+  }
+  if (requests.length === responses.length && requests.every((request, i) => compatibleIdentity(request, responses[i]))) {
+    return requests[index];
+  }
+  return void 0;
+}
 function createMediaBuyStore(options) {
   const collection = options.collection ?? DEFAULT_MEDIA_BUY_STORE_COLLECTION;
   function viewFor(accountId) {
@@ -42,8 +61,9 @@ function createMediaBuyStore(options) {
     async persistFromCreate(accountId, request, result) {
       const requestPackages = request.packages ?? [];
       const responsePackages = result.packages ?? [];
-      if (requestPackages.length === 0 || !result.media_buy_id) return;
-      const persistedPackages = [];
+      if (!result.media_buy_id) return;
+      const prior = await loadRecord(accountId, result.media_buy_id);
+      const byId = new Map((prior?.packages ?? []).map((pkg) => [pkg.package_id, { ...pkg }]));
       for (let i = 0; i < requestPackages.length; i++) {
         const reqPkg = requestPackages[i];
         if (!reqPkg?.targeting_overlay) continue;
@@ -54,12 +74,26 @@ function createMediaBuyStore(options) {
         if (!packageId) continue;
         const persistedOverlay = respPkg?.targeting_overlay ?? (0, import_targeting_input.resolveTargetingInput)(reqPkg.targeting_overlay);
         if (!persistedOverlay) continue;
-        persistedPackages.push({ package_id: packageId, targeting_overlay: persistedOverlay });
+        byId.set(packageId, { ...byId.get(packageId), package_id: packageId, targeting_overlay: persistedOverlay });
       }
-      if (persistedPackages.length === 0) return;
+      for (const [index, response] of responsePackages.entries()) {
+        if (!response.package_id) continue;
+        const context2 = matchContextPackage(requestPackages, responsePackages, index)?.context ?? response.context;
+        const stored = byId.get(response.package_id);
+        if (context2 !== void 0 && stored?.context === void 0) {
+          byId.set(response.package_id, {
+            ...stored,
+            package_id: response.package_id,
+            context: structuredClone(context2)
+          });
+        }
+      }
+      const context = prior?.context ?? request.context ?? result.context;
+      if (byId.size === 0 && context === void 0) return;
       await writeRecord(accountId, {
         media_buy_id: result.media_buy_id,
-        packages: persistedPackages
+        ...context !== void 0 ? { context: structuredClone(context) } : {},
+        packages: Array.from(byId.values())
       });
     },
     async mergeFromUpdate(accountId, mediaBuyId, patch) {
@@ -67,42 +101,56 @@ function createMediaBuyStore(options) {
         media_buy_id: mediaBuyId,
         packages: []
       };
-      const byId = new Map(prior.packages.map((p) => [p.package_id, p.targeting_overlay]));
+      const byId = new Map(prior.packages.map((p) => [p.package_id, { ...p }]));
       for (const pkg of patch.packages ?? []) {
         const packageId = pkg?.package_id;
         if (!packageId) continue;
         if (!("targeting_overlay" in pkg)) continue;
         const incoming = pkg.targeting_overlay;
         if (incoming === void 0) continue;
-        const merged = (0, import_targeting_input.applyTargetingInput)(byId.get(packageId), incoming);
-        if (merged) byId.set(packageId, merged);
-        else byId.delete(packageId);
+        const stored = byId.get(packageId);
+        const merged = (0, import_targeting_input.applyTargetingInput)(stored?.targeting_overlay, incoming);
+        if (merged) byId.set(packageId, { ...stored, package_id: packageId, targeting_overlay: merged });
+        else if (stored?.context !== void 0) {
+          byId.set(packageId, { package_id: packageId, context: stored.context });
+        } else byId.delete(packageId);
       }
       for (const pkg of patch.new_packages ?? []) {
         if (!pkg?.targeting_overlay || !pkg.package_id) continue;
         const resolved = (0, import_targeting_input.resolveTargetingInput)(pkg.targeting_overlay);
-        if (resolved) byId.set(pkg.package_id, resolved);
+        if (resolved)
+          byId.set(pkg.package_id, {
+            ...byId.get(pkg.package_id),
+            package_id: pkg.package_id,
+            targeting_overlay: resolved
+          });
       }
       await writeRecord(accountId, {
-        media_buy_id: mediaBuyId,
-        packages: Array.from(byId.entries()).map(([package_id, targeting_overlay]) => ({
-          package_id,
-          targeting_overlay
-        }))
+        ...prior,
+        packages: Array.from(byId.values())
       });
     },
     async backfill(accountId, result) {
       const buys = result.media_buys;
       if (!buys || buys.length === 0) return result;
       for (const buy of buys) {
-        if (!buy?.media_buy_id || !buy.packages) continue;
+        if (!buy?.media_buy_id) continue;
         const record = await loadRecord(accountId, buy.media_buy_id);
         if (!record) continue;
-        const overlayById = new Map(record.packages.map((p) => [p.package_id, p.targeting_overlay]));
-        for (const pkg of buy.packages) {
-          if (!pkg?.package_id || pkg.targeting_overlay !== void 0) continue;
-          const persisted = overlayById.get(pkg.package_id);
-          if (persisted) pkg.targeting_overlay = persisted;
+        if (buy.context === void 0 && record.context !== void 0) {
+          buy.context = structuredClone(record.context);
+        }
+        const byId = new Map(record.packages.map((p) => [p.package_id, p]));
+        for (const pkg of buy.packages ?? []) {
+          if (!pkg?.package_id) continue;
+          const persisted = byId.get(pkg.package_id);
+          if (!persisted) continue;
+          if (pkg.targeting_overlay === void 0 && persisted.targeting_overlay !== void 0) {
+            pkg.targeting_overlay = persisted.targeting_overlay;
+          }
+          if (pkg.context === void 0 && persisted.context !== void 0) {
+            pkg.context = structuredClone(persisted.context);
+          }
         }
       }
       return result;

package/dist/lib/server/media-buy-store.mjs

@@ -1,6 +1,25 @@
 import { applyTargetingInput, resolveTargetingInput } from "../media-buy/targeting-input.mjs";
 import { scopedStore } from "./state-store.mjs";
 const DEFAULT_MEDIA_BUY_STORE_COLLECTION = "media_buys_targeting";
+const PACKAGE_IDENTITY_FIELDS = ["package_id", "product_id", "buyer_ref"];
+function compatibleIdentity(left, right) {
+  if (!left || !right) return false;
+  return PACKAGE_IDENTITY_FIELDS.every((key) => !left[key] || !right[key] || left[key] === right[key]);
+}
+function sharesIdentity(left, right) {
+  if (!left || !right) return false;
+  return compatibleIdentity(left, right) && PACKAGE_IDENTITY_FIELDS.some((key) => left[key] && left[key] === right[key]);
+}
+function matchContextPackage(requests, responses, index) {
+  const matches = requests.filter((request) => sharesIdentity(request, responses[index]));
+  if (matches.length === 1 && responses.filter((response) => sharesIdentity(matches[0], response)).length === 1) {
+    return matches[0];
+  }
+  if (requests.length === responses.length && requests.every((request, i) => compatibleIdentity(request, responses[i]))) {
+    return requests[index];
+  }
+  return void 0;
+}
 function createMediaBuyStore(options) {
   const collection = options.collection ?? DEFAULT_MEDIA_BUY_STORE_COLLECTION;
   function viewFor(accountId) {
@@ -18,8 +37,9 @@ function createMediaBuyStore(options) {
     async persistFromCreate(accountId, request, result) {
       const requestPackages = request.packages ?? [];
       const responsePackages = result.packages ?? [];
-      if (requestPackages.length === 0 || !result.media_buy_id) return;
-      const persistedPackages = [];
+      if (!result.media_buy_id) return;
+      const prior = await loadRecord(accountId, result.media_buy_id);
+      const byId = new Map((prior?.packages ?? []).map((pkg) => [pkg.package_id, { ...pkg }]));
       for (let i = 0; i < requestPackages.length; i++) {
         const reqPkg = requestPackages[i];
         if (!reqPkg?.targeting_overlay) continue;
@@ -30,12 +50,26 @@ function createMediaBuyStore(options) {
         if (!packageId) continue;
         const persistedOverlay = respPkg?.targeting_overlay ?? resolveTargetingInput(reqPkg.targeting_overlay);
         if (!persistedOverlay) continue;
-        persistedPackages.push({ package_id: packageId, targeting_overlay: persistedOverlay });
+        byId.set(packageId, { ...byId.get(packageId), package_id: packageId, targeting_overlay: persistedOverlay });
       }
-      if (persistedPackages.length === 0) return;
+      for (const [index, response] of responsePackages.entries()) {
+        if (!response.package_id) continue;
+        const context2 = matchContextPackage(requestPackages, responsePackages, index)?.context ?? response.context;
+        const stored = byId.get(response.package_id);
+        if (context2 !== void 0 && stored?.context === void 0) {
+          byId.set(response.package_id, {
+            ...stored,
+            package_id: response.package_id,
+            context: structuredClone(context2)
+          });
+        }
+      }
+      const context = prior?.context ?? request.context ?? result.context;
+      if (byId.size === 0 && context === void 0) return;
       await writeRecord(accountId, {
         media_buy_id: result.media_buy_id,
-        packages: persistedPackages
+        ...context !== void 0 ? { context: structuredClone(context) } : {},
+        packages: Array.from(byId.values())
       });
     },
     async mergeFromUpdate(accountId, mediaBuyId, patch) {
@@ -43,42 +77,56 @@ function createMediaBuyStore(options) {
         media_buy_id: mediaBuyId,
         packages: []
       };
-      const byId = new Map(prior.packages.map((p) => [p.package_id, p.targeting_overlay]));
+      const byId = new Map(prior.packages.map((p) => [p.package_id, { ...p }]));
       for (const pkg of patch.packages ?? []) {
         const packageId = pkg?.package_id;
         if (!packageId) continue;
         if (!("targeting_overlay" in pkg)) continue;
         const incoming = pkg.targeting_overlay;
         if (incoming === void 0) continue;
-        const merged = applyTargetingInput(byId.get(packageId), incoming);
-        if (merged) byId.set(packageId, merged);
-        else byId.delete(packageId);
+        const stored = byId.get(packageId);
+        const merged = applyTargetingInput(stored?.targeting_overlay, incoming);
+        if (merged) byId.set(packageId, { ...stored, package_id: packageId, targeting_overlay: merged });
+        else if (stored?.context !== void 0) {
+          byId.set(packageId, { package_id: packageId, context: stored.context });
+        } else byId.delete(packageId);
       }
       for (const pkg of patch.new_packages ?? []) {
         if (!pkg?.targeting_overlay || !pkg.package_id) continue;
         const resolved = resolveTargetingInput(pkg.targeting_overlay);
-        if (resolved) byId.set(pkg.package_id, resolved);
+        if (resolved)
+          byId.set(pkg.package_id, {
+            ...byId.get(pkg.package_id),
+            package_id: pkg.package_id,
+            targeting_overlay: resolved
+          });
       }
       await writeRecord(accountId, {
-        media_buy_id: mediaBuyId,
-        packages: Array.from(byId.entries()).map(([package_id, targeting_overlay]) => ({
-          package_id,
-          targeting_overlay
-        }))
+        ...prior,
+        packages: Array.from(byId.values())
       });
     },
     async backfill(accountId, result) {
       const buys = result.media_buys;
       if (!buys || buys.length === 0) return result;
       for (const buy of buys) {
-        if (!buy?.media_buy_id || !buy.packages) continue;
+        if (!buy?.media_buy_id) continue;
         const record = await loadRecord(accountId, buy.media_buy_id);
         if (!record) continue;
-        const overlayById = new Map(record.packages.map((p) => [p.package_id, p.targeting_overlay]));
-        for (const pkg of buy.packages) {
-          if (!pkg?.package_id || pkg.targeting_overlay !== void 0) continue;
-          const persisted = overlayById.get(pkg.package_id);
-          if (persisted) pkg.targeting_overlay = persisted;
+        if (buy.context === void 0 && record.context !== void 0) {
+          buy.context = structuredClone(record.context);
+        }
+        const byId = new Map(record.packages.map((p) => [p.package_id, p]));
+        for (const pkg of buy.packages ?? []) {
+          if (!pkg?.package_id) continue;
+          const persisted = byId.get(pkg.package_id);
+          if (!persisted) continue;
+          if (pkg.targeting_overlay === void 0 && persisted.targeting_overlay !== void 0) {
+            pkg.targeting_overlay = persisted.targeting_overlay;
+          }
+          if (pkg.context === void 0 && persisted.context !== void 0) {
+            pkg.context = structuredClone(persisted.context);
+          }
         }
       }
       return result;

package/dist/lib/server/notification-subscriptions/runtime.d.mts

@@ -1,7 +1,7 @@
 import type { WebhookAttemptSuppressionReason } from '../webhook-emitter.mjs';
 import type { NotificationSubscriptionConfigInput, NotificationSubscriptionView, NotificationSuppressionDisposition, PersistentNotificationRuntime, PersistentNotificationRuntimeOptions, StoredNotificationSubscription } from './types.mjs';
 export declare const CALLER_NOTIFICATION_TYPES: readonly ["capabilities.changed", "principal.changed"];
-export declare const ACCOUNT_NOTIFICATION_TYPES: readonly ["creative.status_changed", "creative.assignment_changed", "indicators.changed", "creative.purged", "account.status_changed", "account.change_recorded", "product.created", "product.updated", "product.priced", "product.removed", "signal.created", "signal.updated", "signal.priced", "signal.removed", "wholesale_feed.bulk_change", "reporting.delivery_ready", "reporting.status_changed", "reporting.ledger_changed"];
+export declare const ACCOUNT_NOTIFICATION_TYPES: readonly ["creative.status_changed", "creative.assignment_changed", "indicators.changed", "creative.purged", "account.status_changed", "account.change_recorded", "product.created", "product.updated", "product.priced", "product.removed", "signal.created", "signal.updated", "signal.priced", "signal.removed", "wholesale_feed.bulk_change", "collection_card.updated", "collection_card.removed", "collection_catalog.bulk_change", "proposal.created", "reporting.delivery_ready", "reporting.status_changed", "reporting.ledger_changed"];
 /**
  * Durable subscription control plane. The supplied emitter factory is called
  * exactly once with the runtime's mandatory live authorizer, preventing a

package/dist/lib/server/notification-subscriptions/runtime.d.ts

@@ -1,7 +1,7 @@
 import type { WebhookAttemptSuppressionReason } from '../webhook-emitter';
 import type { NotificationSubscriptionConfigInput, NotificationSubscriptionView, NotificationSuppressionDisposition, PersistentNotificationRuntime, PersistentNotificationRuntimeOptions, StoredNotificationSubscription } from './types';
 export declare const CALLER_NOTIFICATION_TYPES: readonly ["capabilities.changed", "principal.changed"];
-export declare const ACCOUNT_NOTIFICATION_TYPES: readonly ["creative.status_changed", "creative.assignment_changed", "indicators.changed", "creative.purged", "account.status_changed", "account.change_recorded", "product.created", "product.updated", "product.priced", "product.removed", "signal.created", "signal.updated", "signal.priced", "signal.removed", "wholesale_feed.bulk_change", "reporting.delivery_ready", "reporting.status_changed", "reporting.ledger_changed"];
+export declare const ACCOUNT_NOTIFICATION_TYPES: readonly ["creative.status_changed", "creative.assignment_changed", "indicators.changed", "creative.purged", "account.status_changed", "account.change_recorded", "product.created", "product.updated", "product.priced", "product.removed", "signal.created", "signal.updated", "signal.priced", "signal.removed", "wholesale_feed.bulk_change", "collection_card.updated", "collection_card.removed", "collection_catalog.bulk_change", "proposal.created", "reporting.delivery_ready", "reporting.status_changed", "reporting.ledger_changed"];
 /**
  * Durable subscription control plane. The supplied emitter factory is called
  * exactly once with the runtime's mandatory live authorizer, preventing a

package/dist/lib/server/notification-subscriptions/runtime.js

@@ -51,6 +51,10 @@ const ACCOUNT_NOTIFICATION_TYPES = Object.freeze([
   "signal.priced",
   "signal.removed",
   "wholesale_feed.bulk_change",
+  "collection_card.updated",
+  "collection_card.removed",
+  "collection_catalog.bulk_change",
+  "proposal.created",
   "reporting.delivery_ready",
   "reporting.status_changed",
   "reporting.ledger_changed"

package/dist/lib/server/notification-subscriptions/runtime.mjs

@@ -22,6 +22,10 @@ const ACCOUNT_NOTIFICATION_TYPES = Object.freeze([
   "signal.priced",
   "signal.removed",
   "wholesale_feed.bulk_change",
+  "collection_card.updated",
+  "collection_card.removed",
+  "collection_catalog.bulk_change",
+  "proposal.created",
   "reporting.delivery_ready",
   "reporting.status_changed",
   "reporting.ledger_changed"

package/dist/lib/server/responses.js

@@ -60,6 +60,7 @@ __export(responses_exports, {
 module.exports = __toCommonJS(responses_exports);
 var import_media_buy_helpers = require('./media-buy-helpers.js');
 var import_reporting_delivery_config = require('./reporting-delivery-config.js');
+var import_account_response_identity = require('./account-response-identity.js');
 const explicitResponseSummaries = /* @__PURE__ */ new WeakMap();
 function _getExplicitResponseSummary(response) {
   return explicitResponseSummaries.get(response);
@@ -124,7 +125,14 @@ function stripBusinessEntityBank(row, key) {
   return stripped;
 }
 function stripAccountWriteOnlyFields(account) {
-  const stripped = stripBusinessEntityBank(stripNotificationConfigSecrets(account), "billing_entity");
+  const {
+    destination_billing_entity: _destination,
+    authInfo: _authInfo,
+    ctx_metadata: _metadata,
+    ...responseFields
+  } = account;
+  const response = stripBusinessEntityBank(stripNotificationConfigSecrets(responseFields), "billing_entity");
+  const stripped = { ...response, ...(0, import_account_response_identity.projectAccountResponseIdentityFields)(response) };
   const reportingDeliveryConfigs = stripped.reporting_delivery_configs;
   if (reportingDeliveryConfigs === void 0) return stripped;
   return {

package/dist/lib/server/responses.mjs

@@ -1,5 +1,6 @@
 import { validActionsForStatus } from "./media-buy-helpers.mjs";
 import { projectReportingDeliveryConfigStates } from "./reporting-delivery-config.mjs";
+import { projectAccountResponseIdentityFields } from "./account-response-identity.mjs";
 const explicitResponseSummaries = /* @__PURE__ */ new WeakMap();
 function _getExplicitResponseSummary(response) {
   return explicitResponseSummaries.get(response);
@@ -64,7 +65,14 @@ function stripBusinessEntityBank(row, key) {
   return stripped;
 }
 function stripAccountWriteOnlyFields(account) {
-  const stripped = stripBusinessEntityBank(stripNotificationConfigSecrets(account), "billing_entity");
+  const {
+    destination_billing_entity: _destination,
+    authInfo: _authInfo,
+    ctx_metadata: _metadata,
+    ...responseFields
+  } = account;
+  const response = stripBusinessEntityBank(stripNotificationConfigSecrets(responseFields), "billing_entity");
+  const stripped = { ...response, ...projectAccountResponseIdentityFields(response) };
   const reportingDeliveryConfigs = stripped.reporting_delivery_configs;
   if (reportingDeliveryConfigs === void 0) return stripped;
   return {

package/dist/lib/server/serve.js

@@ -36,6 +36,7 @@ var import_create_adcp_server = require('./create-adcp-server.js');
 var import_tasks = require('./tasks.js');
 var import_adcp_server = require('./adcp-server.js');
 var import_mcp_modern_server = require('./mcp-modern-server.js');
+var import_signed_request_transport = require('./signed-request-transport.js');
 class UnknownHostError extends Error {
   constructor(message = "Unknown host") {
     super(message);
@@ -407,7 +408,7 @@ function serve(createAgent, options) {
           return;
         }
       }
-      const attached = agentServer[import_create_adcp_server.ADCP_PRE_TRANSPORT];
+      const attached = (0, import_signed_request_transport.getSignedRequestPreTransport)(agentServer) ?? agentServer[import_create_adcp_server.ADCP_PRE_TRANSPORT];
       const autoWiredPreTransport = typeof attached === "function" ? attached : void 0;
       const activePreTransport = explicitPreTransport ?? autoWiredPreTransport;
       if (activePreTransport) {
@@ -487,6 +488,7 @@ function serve(createAgent, options) {
             const transport = new import_streamableHttp.StreamableHTTPServerTransport({
               sessionIdGenerator: void 0
             });
+            (0, import_signed_request_transport.permitSignedRequestTransport)(agentServer, transport);
             await agentServer.connect(transport);
             if (parsedBody !== void 0) {
               await transport.handleRequest(req, res, parsedBody);

package/dist/lib/server/serve.mjs

@@ -19,6 +19,7 @@ import {
 import { ADCP_TASK_MESSAGE_QUEUE } from "./tasks.mjs";
 import { getSdkServer, isAdcpServer } from "./adcp-server.mjs";
 import { createModernMcpServerAdapter } from "./mcp-modern-server.mjs";
+import { getSignedRequestPreTransport, permitSignedRequestTransport } from "./signed-request-transport.mjs";
 class UnknownHostError extends Error {
   constructor(message = "Unknown host") {
     super(message);
@@ -390,7 +391,7 @@ function serve(createAgent, options) {
           return;
         }
       }
-      const attached = agentServer[ADCP_PRE_TRANSPORT];
+      const attached = getSignedRequestPreTransport(agentServer) ?? agentServer[ADCP_PRE_TRANSPORT];
       const autoWiredPreTransport = typeof attached === "function" ? attached : void 0;
       const activePreTransport = explicitPreTransport ?? autoWiredPreTransport;
       if (activePreTransport) {
@@ -470,6 +471,7 @@ function serve(createAgent, options) {
             const transport = new StreamableHTTPServerTransport({
               sessionIdGenerator: void 0
             });
+            permitSignedRequestTransport(agentServer, transport);
             await agentServer.connect(transport);
             if (parsedBody !== void 0) {
               await transport.handleRequest(req, res, parsedBody);

package/dist/lib/server/signed-request-transport.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/lib/server/signed-request-transport.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/server/signed-request-transport.js

@@ -0,0 +1,46 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var signed_request_transport_exports = {};
+__export(signed_request_transport_exports, {
+  getSignedRequestPreTransport: () => getSignedRequestPreTransport,
+  permitSignedRequestTransport: () => permitSignedRequestTransport,
+  registerSignedRequestTransportGuard: () => registerSignedRequestTransportGuard
+});
+module.exports = __toCommonJS(signed_request_transport_exports);
+const GUARD = /* @__PURE__ */ Symbol.for("@adcp/client.signedRequestTransportGuard");
+function guardFor(server) {
+  return server[GUARD];
+}
+function registerSignedRequestTransportGuard(server, preTransport) {
+  const entry = { preTransport, transports: /* @__PURE__ */ new WeakSet() };
+  Object.defineProperty(server, GUARD, { value: entry });
+  return (transport) => entry.transports.has(transport);
+}
+function getSignedRequestPreTransport(server) {
+  return guardFor(server)?.preTransport;
+}
+function permitSignedRequestTransport(server, transport) {
+  guardFor(server)?.transports.add(transport);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getSignedRequestPreTransport,
+  permitSignedRequestTransport,
+  registerSignedRequestTransportGuard
+});

package/dist/lib/server/signed-request-transport.mjs

@@ -0,0 +1,20 @@
+const GUARD = /* @__PURE__ */ Symbol.for("@adcp/client.signedRequestTransportGuard");
+function guardFor(server) {
+  return server[GUARD];
+}
+function registerSignedRequestTransportGuard(server, preTransport) {
+  const entry = { preTransport, transports: /* @__PURE__ */ new WeakSet() };
+  Object.defineProperty(server, GUARD, { value: entry });
+  return (transport) => entry.transports.has(transport);
+}
+function getSignedRequestPreTransport(server) {
+  return guardFor(server)?.preTransport;
+}
+function permitSignedRequestTransport(server, transport) {
+  guardFor(server)?.transports.add(transport);
+}
+export {
+  getSignedRequestPreTransport,
+  permitSignedRequestTransport,
+  registerSignedRequestTransportGuard
+};

package/dist/lib/server/test-controller.d.mts

@@ -367,6 +367,7 @@ export interface TestControllerStore {
     forceUpstreamUnavailable?(params: {
         tool: string;
         upstream_name?: string;
+        cache_age_seconds?: number;
     }): Promise<StateTransitionSuccess>;
 }
 /**

package/dist/lib/server/test-controller.d.ts

@@ -367,6 +367,7 @@ export interface TestControllerStore {
     forceUpstreamUnavailable?(params: {
         tool: string;
         upstream_name?: string;
+        cache_age_seconds?: number;
     }): Promise<StateTransitionSuccess>;
 }
 /**

package/dist/lib/server/test-controller.js

@@ -764,10 +764,14 @@ async function handleTestControllerRequestImpl(storeOrFactory, input, options) {
         if (typeof forceParams.tool !== "string" || forceParams.tool.length === 0) {
           return controllerError("INVALID_PARAMS", "force_upstream_unavailable requires params.tool");
         }
+        if (forceParams.cache_age_seconds !== void 0 && (!Number.isInteger(forceParams.cache_age_seconds) || forceParams.cache_age_seconds < 0)) {
+          return controllerError("INVALID_PARAMS", "cache_age_seconds must be a non-negative integer");
+        }
         return wrapStoreSuccess(
           await store.forceUpstreamUnavailable({
             tool: forceParams.tool,
-            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0
+            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0,
+            ...typeof forceParams.cache_age_seconds === "number" ? { cache_age_seconds: forceParams.cache_age_seconds } : {}
           })
         );
       }

package/dist/lib/server/test-controller.mjs

@@ -736,10 +736,14 @@ async function handleTestControllerRequestImpl(storeOrFactory, input, options) {
         if (typeof forceParams.tool !== "string" || forceParams.tool.length === 0) {
           return controllerError("INVALID_PARAMS", "force_upstream_unavailable requires params.tool");
         }
+        if (forceParams.cache_age_seconds !== void 0 && (!Number.isInteger(forceParams.cache_age_seconds) || forceParams.cache_age_seconds < 0)) {
+          return controllerError("INVALID_PARAMS", "cache_age_seconds must be a non-negative integer");
+        }
         return wrapStoreSuccess(
           await store.forceUpstreamUnavailable({
             tool: forceParams.tool,
-            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0
+            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0,
+            ...typeof forceParams.cache_age_seconds === "number" ? { cache_age_seconds: forceParams.cache_age_seconds } : {}
           })
         );
       }

package/dist/lib/signing/agent-fetch.d.mts

@@ -80,7 +80,7 @@ export interface BuildAgentSigningFetchOptions {
  *   1. Sign immediately when the payload carries webhook authentication.
  *   2. Resolve the AdCP operation and exact JSON-RPC protocol method.
  *   3. Consult each capability namespace independently; either can request
- *      signing. Legacy SDK task polls sign when the seller supports signing.
+ *      signing. SDK AdCP task polls sign when the seller supports signing.
  *   4. Resolve the seller's content-digest policy into a per-request toggle.
  *   5. Delegate to `createSigningFetch` with the decision baked in.
  */

package/dist/lib/signing/agent-fetch.d.ts

@@ -80,7 +80,7 @@ export interface BuildAgentSigningFetchOptions {
  *   1. Sign immediately when the payload carries webhook authentication.
  *   2. Resolve the AdCP operation and exact JSON-RPC protocol method.
  *   3. Consult each capability namespace independently; either can request
- *      signing. Legacy SDK task polls sign when the seller supports signing.
+ *      signing. SDK AdCP task polls sign when the seller supports signing.
  *   4. Resolve the seller's content-digest policy into a per-request toggle.
  *   5. Delegate to `createSigningFetch` with the decision baked in.
  */

package/dist/lib/signing/agent-fetch.js

@@ -157,13 +157,13 @@ function buildAgentSigningFetch(options) {
     }
     const operation = extractAdcpOperation(init?.body);
     if (operation === "get_adcp_capabilities" && (0, import_protocol_methods.hasUnsignedCapabilityBootstrap)(signing)) return false;
-    const isPollOperation = operation === "tasks_get" || operation === "tasks/get";
+    const isPollOperation = operation === "get_task_status" || operation === "tasks_get" || operation === "tasks/get";
     const methods = policyMethods ?? (isPollOperation ? jsonRpcMethodsForSigning(init?.body) : []);
     const profileCompatible = signing.profile === "web-bot-auth" ? (0, import_protocol_methods.signingListIncludes)(capability?.profiles, "web-bot-auth") : capability?.profiles === void 0 || (0, import_protocol_methods.signingListIncludes)(capability.profiles, "adcp/request-signing/v1");
-    const legacyPoll = profileCompatible && capability?.supported === true && (operation === "tasks_get" && methods.includes("tools/call") || operation === "tasks/get" && methods.some(
+    const signedPoll = profileCompatible && capability?.supported === true && ((operation === "tasks_get" || operation === "get_task_status") && methods.includes("tools/call") || (operation === "tasks/get" || operation === "get_task_status") && methods.some(
       (method) => ["message/send", "message/stream", "SendMessage", "SendStreamingMessage"].includes(method)
     ));
-    const sign = signing.profile === "web-bot-auth" && !!operation && (0, import_protocol_methods.signingListIncludes)(capability?.profiles, "web-bot-auth") || shouldSignOperation(operation, capability, signing) || methods.some((method) => shouldSignProtocolMethod(method, capability, signing)) || legacyPoll;
+    const sign = signing.profile === "web-bot-auth" && !!operation && (0, import_protocol_methods.signingListIncludes)(capability?.profiles, "web-bot-auth") || shouldSignOperation(operation, capability, signing) || methods.some((method) => shouldSignProtocolMethod(method, capability, signing)) || signedPoll;
     if (sign && signing.profile === "web-bot-auth" && !(0, import_protocol_methods.signingListIncludes)(capability?.profiles, "web-bot-auth"))
       throw new TypeError("Seller did not advertise the Web Bot Auth request signing profile");
     return sign;

package/dist/lib/signing/agent-fetch.mjs

@@ -139,13 +139,13 @@ function buildAgentSigningFetch(options) {
     }
     const operation = extractAdcpOperation(init?.body);
     if (operation === "get_adcp_capabilities" && hasUnsignedCapabilityBootstrap(signing)) return false;
-    const isPollOperation = operation === "tasks_get" || operation === "tasks/get";
+    const isPollOperation = operation === "get_task_status" || operation === "tasks_get" || operation === "tasks/get";
     const methods = policyMethods ?? (isPollOperation ? jsonRpcMethodsForSigning(init?.body) : []);
     const profileCompatible = signing.profile === "web-bot-auth" ? signingListIncludes(capability?.profiles, "web-bot-auth") : capability?.profiles === void 0 || signingListIncludes(capability.profiles, "adcp/request-signing/v1");
-    const legacyPoll = profileCompatible && capability?.supported === true && (operation === "tasks_get" && methods.includes("tools/call") || operation === "tasks/get" && methods.some(
+    const signedPoll = profileCompatible && capability?.supported === true && ((operation === "tasks_get" || operation === "get_task_status") && methods.includes("tools/call") || (operation === "tasks/get" || operation === "get_task_status") && methods.some(
       (method) => ["message/send", "message/stream", "SendMessage", "SendStreamingMessage"].includes(method)
     ));
-    const sign = signing.profile === "web-bot-auth" && !!operation && signingListIncludes(capability?.profiles, "web-bot-auth") || shouldSignOperation(operation, capability, signing) || methods.some((method) => shouldSignProtocolMethod(method, capability, signing)) || legacyPoll;
+    const sign = signing.profile === "web-bot-auth" && !!operation && signingListIncludes(capability?.profiles, "web-bot-auth") || shouldSignOperation(operation, capability, signing) || methods.some((method) => shouldSignProtocolMethod(method, capability, signing)) || signedPoll;
     if (sign && signing.profile === "web-bot-auth" && !signingListIncludes(capability?.profiles, "web-bot-auth"))
       throw new TypeError("Seller did not advertise the Web Bot Auth request signing profile");
     return sign;

package/dist/lib/testing/index.d.mts

@@ -23,3 +23,4 @@ export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETIN
 export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesPreparationLookup, PreparedFixturesPreparationAuthorizer, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard/index.mjs';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';
+export { createStoryboardWebBotAuthFetch } from './storyboard/web-bot-auth.mjs';

package/dist/lib/testing/index.d.ts

@@ -23,3 +23,4 @@ export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETIN
 export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesPreparationLookup, PreparedFixturesPreparationAuthorizer, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';
+export { createStoryboardWebBotAuthFetch } from './storyboard/web-bot-auth';