@adcp/sdk 17.0.0-beta.2 → 17.0.0-beta.4

package/dist/lib/server/responses.js

@@ -124,7 +124,7 @@ function stripBusinessEntityBank(row, key) {
   }
   return stripped;
 }
-function stripAccountWriteOnlyFields(account) {
+function stripAccountWriteOnlyFields(account, syncResult = false) {
   const {
     destination_billing_entity: _destination,
     authInfo: _authInfo,
@@ -133,6 +133,10 @@ function stripAccountWriteOnlyFields(account) {
   } = account;
   const response = stripBusinessEntityBank(stripNotificationConfigSecrets(responseFields), "billing_entity");
   const stripped = { ...response, ...(0, import_account_response_identity.projectAccountResponseIdentityFields)(response) };
+  if (syncResult) {
+    for (const key of import_account_response_identity.ACCOUNT_REQUEST_RESULT_KEYS) delete stripped[key];
+    Object.assign(stripped, (0, import_account_response_identity.projectAccountRequestResultFields)(response));
+  }
   const reportingDeliveryConfigs = stripped.reporting_delivery_configs;
   if (reportingDeliveryConfigs === void 0) return stripped;
   return {
@@ -142,12 +146,12 @@ function stripAccountWriteOnlyFields(account) {
     )
   };
 }
-function stripAccountsWriteOnlyFields(data) {
+function stripAccountsWriteOnlyFields(data, syncResult = false) {
   if (!Array.isArray(data.accounts)) return data;
   return {
     ...data,
     accounts: data.accounts.map(
-      (account) => account != null && typeof account === "object" ? stripAccountWriteOnlyFields(account) : account
+      (account) => account != null && typeof account === "object" ? stripAccountWriteOnlyFields(account, syncResult) : account
     )
   };
 }
@@ -476,7 +480,7 @@ function creativeApprovalError(data) {
   return data;
 }
 function syncAccountsResponse(data, summary) {
-  const stripped = "accounts" in data ? stripAccountsWriteOnlyFields(data) : data;
+  const stripped = "accounts" in data ? stripAccountsWriteOnlyFields(data, true) : data;
   const defaultSummary = "errors" in stripped ? "Account sync error" : `Synced ${stripped.accounts?.length ?? 0} account${stripped.accounts?.length === 1 ? "" : "s"}`;
   return {
     content: [{ type: "text", text: summary ?? defaultSummary }],

package/dist/lib/server/responses.mjs

@@ -1,6 +1,10 @@
 import { validActionsForStatus } from "./media-buy-helpers.mjs";
 import { projectReportingDeliveryConfigStates } from "./reporting-delivery-config.mjs";
-import { projectAccountResponseIdentityFields } from "./account-response-identity.mjs";
+import {
+  ACCOUNT_REQUEST_RESULT_KEYS,
+  projectAccountRequestResultFields,
+  projectAccountResponseIdentityFields
+} from "./account-response-identity.mjs";
 const explicitResponseSummaries = /* @__PURE__ */ new WeakMap();
 function _getExplicitResponseSummary(response) {
   return explicitResponseSummaries.get(response);
@@ -64,7 +68,7 @@ function stripBusinessEntityBank(row, key) {
   }
   return stripped;
 }
-function stripAccountWriteOnlyFields(account) {
+function stripAccountWriteOnlyFields(account, syncResult = false) {
   const {
     destination_billing_entity: _destination,
     authInfo: _authInfo,
@@ -73,6 +77,10 @@ function stripAccountWriteOnlyFields(account) {
   } = account;
   const response = stripBusinessEntityBank(stripNotificationConfigSecrets(responseFields), "billing_entity");
   const stripped = { ...response, ...projectAccountResponseIdentityFields(response) };
+  if (syncResult) {
+    for (const key of ACCOUNT_REQUEST_RESULT_KEYS) delete stripped[key];
+    Object.assign(stripped, projectAccountRequestResultFields(response));
+  }
   const reportingDeliveryConfigs = stripped.reporting_delivery_configs;
   if (reportingDeliveryConfigs === void 0) return stripped;
   return {
@@ -82,12 +90,12 @@ function stripAccountWriteOnlyFields(account) {
     )
   };
 }
-function stripAccountsWriteOnlyFields(data) {
+function stripAccountsWriteOnlyFields(data, syncResult = false) {
   if (!Array.isArray(data.accounts)) return data;
   return {
     ...data,
     accounts: data.accounts.map(
-      (account) => account != null && typeof account === "object" ? stripAccountWriteOnlyFields(account) : account
+      (account) => account != null && typeof account === "object" ? stripAccountWriteOnlyFields(account, syncResult) : account
     )
   };
 }
@@ -416,7 +424,7 @@ function creativeApprovalError(data) {
   return data;
 }
 function syncAccountsResponse(data, summary) {
-  const stripped = "accounts" in data ? stripAccountsWriteOnlyFields(data) : data;
+  const stripped = "accounts" in data ? stripAccountsWriteOnlyFields(data, true) : data;
   const defaultSummary = "errors" in stripped ? "Account sync error" : `Synced ${stripped.accounts?.length ?? 0} account${stripped.accounts?.length === 1 ? "" : "s"}`;
   return {
     content: [{ type: "text", text: summary ?? defaultSummary }],

package/dist/lib/server/serve.js

@@ -36,6 +36,7 @@ var import_create_adcp_server = require('./create-adcp-server.js');
 var import_tasks = require('./tasks.js');
 var import_adcp_server = require('./adcp-server.js');
 var import_mcp_modern_server = require('./mcp-modern-server.js');
+var import_signed_request_transport = require('./signed-request-transport.js');
 class UnknownHostError extends Error {
   constructor(message = "Unknown host") {
     super(message);
@@ -407,7 +408,7 @@ function serve(createAgent, options) {
           return;
         }
       }
-      const attached = agentServer[import_create_adcp_server.ADCP_PRE_TRANSPORT];
+      const attached = (0, import_signed_request_transport.getSignedRequestPreTransport)(agentServer) ?? agentServer[import_create_adcp_server.ADCP_PRE_TRANSPORT];
       const autoWiredPreTransport = typeof attached === "function" ? attached : void 0;
       const activePreTransport = explicitPreTransport ?? autoWiredPreTransport;
       if (activePreTransport) {
@@ -487,6 +488,7 @@ function serve(createAgent, options) {
             const transport = new import_streamableHttp.StreamableHTTPServerTransport({
               sessionIdGenerator: void 0
             });
+            (0, import_signed_request_transport.permitSignedRequestTransport)(agentServer, transport);
             await agentServer.connect(transport);
             if (parsedBody !== void 0) {
               await transport.handleRequest(req, res, parsedBody);

package/dist/lib/server/serve.mjs

@@ -19,6 +19,7 @@ import {
 import { ADCP_TASK_MESSAGE_QUEUE } from "./tasks.mjs";
 import { getSdkServer, isAdcpServer } from "./adcp-server.mjs";
 import { createModernMcpServerAdapter } from "./mcp-modern-server.mjs";
+import { getSignedRequestPreTransport, permitSignedRequestTransport } from "./signed-request-transport.mjs";
 class UnknownHostError extends Error {
   constructor(message = "Unknown host") {
     super(message);
@@ -390,7 +391,7 @@ function serve(createAgent, options) {
           return;
         }
       }
-      const attached = agentServer[ADCP_PRE_TRANSPORT];
+      const attached = getSignedRequestPreTransport(agentServer) ?? agentServer[ADCP_PRE_TRANSPORT];
       const autoWiredPreTransport = typeof attached === "function" ? attached : void 0;
       const activePreTransport = explicitPreTransport ?? autoWiredPreTransport;
       if (activePreTransport) {
@@ -470,6 +471,7 @@ function serve(createAgent, options) {
             const transport = new StreamableHTTPServerTransport({
               sessionIdGenerator: void 0
             });
+            permitSignedRequestTransport(agentServer, transport);
             await agentServer.connect(transport);
             if (parsedBody !== void 0) {
               await transport.handleRequest(req, res, parsedBody);

package/dist/lib/server/signed-request-transport.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/lib/server/signed-request-transport.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/lib/server/signed-request-transport.js

@@ -0,0 +1,46 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var signed_request_transport_exports = {};
+__export(signed_request_transport_exports, {
+  getSignedRequestPreTransport: () => getSignedRequestPreTransport,
+  permitSignedRequestTransport: () => permitSignedRequestTransport,
+  registerSignedRequestTransportGuard: () => registerSignedRequestTransportGuard
+});
+module.exports = __toCommonJS(signed_request_transport_exports);
+const GUARD = /* @__PURE__ */ Symbol.for("@adcp/client.signedRequestTransportGuard");
+function guardFor(server) {
+  return server[GUARD];
+}
+function registerSignedRequestTransportGuard(server, preTransport) {
+  const entry = { preTransport, transports: /* @__PURE__ */ new WeakSet() };
+  Object.defineProperty(server, GUARD, { value: entry });
+  return (transport) => entry.transports.has(transport);
+}
+function getSignedRequestPreTransport(server) {
+  return guardFor(server)?.preTransport;
+}
+function permitSignedRequestTransport(server, transport) {
+  guardFor(server)?.transports.add(transport);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getSignedRequestPreTransport,
+  permitSignedRequestTransport,
+  registerSignedRequestTransportGuard
+});

package/dist/lib/server/signed-request-transport.mjs

@@ -0,0 +1,20 @@
+const GUARD = /* @__PURE__ */ Symbol.for("@adcp/client.signedRequestTransportGuard");
+function guardFor(server) {
+  return server[GUARD];
+}
+function registerSignedRequestTransportGuard(server, preTransport) {
+  const entry = { preTransport, transports: /* @__PURE__ */ new WeakSet() };
+  Object.defineProperty(server, GUARD, { value: entry });
+  return (transport) => entry.transports.has(transport);
+}
+function getSignedRequestPreTransport(server) {
+  return guardFor(server)?.preTransport;
+}
+function permitSignedRequestTransport(server, transport) {
+  guardFor(server)?.transports.add(transport);
+}
+export {
+  getSignedRequestPreTransport,
+  permitSignedRequestTransport,
+  registerSignedRequestTransportGuard
+};

package/dist/lib/server/test-controller.d.mts

@@ -367,6 +367,7 @@ export interface TestControllerStore {
     forceUpstreamUnavailable?(params: {
         tool: string;
         upstream_name?: string;
+        cache_age_seconds?: number;
     }): Promise<StateTransitionSuccess>;
 }
 /**

package/dist/lib/server/test-controller.d.ts

@@ -367,6 +367,7 @@ export interface TestControllerStore {
     forceUpstreamUnavailable?(params: {
         tool: string;
         upstream_name?: string;
+        cache_age_seconds?: number;
     }): Promise<StateTransitionSuccess>;
 }
 /**

package/dist/lib/server/test-controller.js

@@ -764,10 +764,14 @@ async function handleTestControllerRequestImpl(storeOrFactory, input, options) {
         if (typeof forceParams.tool !== "string" || forceParams.tool.length === 0) {
           return controllerError("INVALID_PARAMS", "force_upstream_unavailable requires params.tool");
         }
+        if (forceParams.cache_age_seconds !== void 0 && (!Number.isInteger(forceParams.cache_age_seconds) || forceParams.cache_age_seconds < 0)) {
+          return controllerError("INVALID_PARAMS", "cache_age_seconds must be a non-negative integer");
+        }
         return wrapStoreSuccess(
           await store.forceUpstreamUnavailable({
             tool: forceParams.tool,
-            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0
+            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0,
+            ...typeof forceParams.cache_age_seconds === "number" ? { cache_age_seconds: forceParams.cache_age_seconds } : {}
           })
         );
       }

package/dist/lib/server/test-controller.mjs

@@ -736,10 +736,14 @@ async function handleTestControllerRequestImpl(storeOrFactory, input, options) {
         if (typeof forceParams.tool !== "string" || forceParams.tool.length === 0) {
           return controllerError("INVALID_PARAMS", "force_upstream_unavailable requires params.tool");
         }
+        if (forceParams.cache_age_seconds !== void 0 && (!Number.isInteger(forceParams.cache_age_seconds) || forceParams.cache_age_seconds < 0)) {
+          return controllerError("INVALID_PARAMS", "cache_age_seconds must be a non-negative integer");
+        }
         return wrapStoreSuccess(
           await store.forceUpstreamUnavailable({
             tool: forceParams.tool,
-            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0
+            upstream_name: typeof forceParams.upstream_name === "string" ? forceParams.upstream_name : void 0,
+            ...typeof forceParams.cache_age_seconds === "number" ? { cache_age_seconds: forceParams.cache_age_seconds } : {}
           })
         );
       }

package/dist/lib/testing/index.d.mts

@@ -23,3 +23,4 @@ export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETIN
 export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesPreparationLookup, PreparedFixturesPreparationAuthorizer, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard/index.mjs';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard/index.mjs';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard/index.mjs';
+export { createStoryboardWebBotAuthFetch } from './storyboard/web-bot-auth.mjs';

package/dist/lib/testing/index.d.ts

@@ -23,3 +23,4 @@ export { COLLECTION_DIAGNOSTIC_LIMIT, COLLECTION_PAIR_LIMIT, COLLECTION_TARGETIN
 export type { CollectionNormalizationCode, CollectionNormalizationFailure, CollectionNormalizationResult, CrossPublisherCollectionRelation, CollectionPair, CollectionSelectionEvaluation, CollectionSelectionSelector, CollectionSelectionWitness, CollectionSelectorObject, CollectionWitnessKind, CollectionWitnessReadResult, FixtureContextOutput, NormalizedCollectionSelectors, PreparedFixtureBinding, PreparedFixtureSelection, PreparedFixturesAuthorizer, PreparedFixturesDecision, PreparedFixturesDisposition, PreparedFixturesLookup, PreparedFixturesPreparationLookup, PreparedFixturesPreparationAuthorizer, PreparedFixturesRefusal, PreparedFixturesRefusalCode, PreparedFixturesReference, PreparedSchemaArtifact, ProtectedContextViolationCode, ResolvedCollectionSelectionSelector, } from './storyboard';
 export { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from './storyboard';
 export type { CreativeBuildProbeSpec, CreativeBuildProbeInputFixture, CreativeBuildProbeResolution, } from './storyboard';
+export { createStoryboardWebBotAuthFetch } from './storyboard/web-bot-auth';

package/dist/lib/testing/index.js

@@ -67,6 +67,7 @@ __export(testing_exports, {
   comply: () => import_compliance.comply,
   createComplyController: () => import_comply_controller.createComplyController,
   createSeedFixtureCache: () => import_test_controller.createSeedFixtureCache,
+  createStoryboardWebBotAuthFetch: () => import_web_bot_auth.createStoryboardWebBotAuthFetch,
   createTestAgent: () => import_test_helpers.createTestAgent,
   createTestClient: () => import_agent_tester.createTestClient,
   creativeAgent: () => import_test_helpers.creativeAgent,
@@ -234,6 +235,7 @@ var import_validation = require('../validation/index.js');
 var import_storyboard = require('./storyboard/index.js');
 var import_storyboard2 = require('./storyboard/index.js');
 var import_storyboard3 = require('./storyboard/index.js');
+var import_web_bot_auth = require('./storyboard/web-bot-auth.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdagentsJsonSchema,
@@ -285,6 +287,7 @@ var import_storyboard3 = require('./storyboard/index.js');
   comply,
   createComplyController,
   createSeedFixtureCache,
+  createStoryboardWebBotAuthFetch,
   createTestAgent,
   createTestClient,
   creativeAgent,

package/dist/lib/testing/index.mjs

@@ -212,6 +212,7 @@ import {
   withPreparedFixtures
 } from "./storyboard/index.mjs";
 import { resolveCreativeBuildProbe, validateCreativeBuildProbeSpec } from "./storyboard/index.mjs";
+import { createStoryboardWebBotAuthFetch } from "./storyboard/web-bot-auth.mjs";
 export {
   AdagentsJsonSchema,
   BrandJsonSchema,
@@ -262,6 +263,7 @@ export {
   comply,
   createComplyController,
   createSeedFixtureCache,
+  createStoryboardWebBotAuthFetch,
   createTestAgent,
   createTestClient,
   creativeAgent,

package/dist/lib/testing/storyboard/canonical-format-satisfaction.js

@@ -47,13 +47,6 @@ const HANDLED_CANONICAL_PARAM_KEYS = /* @__PURE__ */ new Set([
   "duration_ms_range"
 ]);
 const ARRAY_SUBSET_PARAM_KEYS = /* @__PURE__ */ new Set(["video_codecs", "audio_codecs", "mime_types", "file_types", "formats"]);
-const OMITTABLE_DECLARATION_PARAMS = /* @__PURE__ */ new Set([
-  "asset_source",
-  "buyer_asset_acceptance",
-  "composition_model",
-  "slots",
-  "ssl_required"
-]);
 function validateCanonicalFormatSatisfaction(validation, request, context, taskResult) {
   if (typeof validation.value !== "boolean") {
     return {
@@ -484,14 +477,7 @@ function requireRemainingParamContainment(productParams, requestParams) {
   for (const [key, productValue] of Object.entries(productParams)) {
     if (HANDLED_CANONICAL_PARAM_KEYS.has(key) || productValue === void 0) continue;
     if (Array.isArray(productValue) && productValue.length === 0) continue;
-    if (requestParams[key] === void 0) {
-      if (OMITTABLE_DECLARATION_PARAMS.has(key)) continue;
-      return {
-        ok: false,
-        bug_class: "directionality",
-        detail: `Under-specified selector: product constrains params.${key}, but the request selector omits ${key}`
-      };
-    }
+    if (requestParams[key] === void 0) continue;
     const requestValue = requestParams[key];
     if (ARRAY_SUBSET_PARAM_KEYS.has(key)) {
       const subset = requireArraySubset(key, productValue, requestValue);

package/dist/lib/testing/storyboard/canonical-format-satisfaction.mjs

@@ -23,13 +23,6 @@ const HANDLED_CANONICAL_PARAM_KEYS = /* @__PURE__ */ new Set([
   "duration_ms_range"
 ]);
 const ARRAY_SUBSET_PARAM_KEYS = /* @__PURE__ */ new Set(["video_codecs", "audio_codecs", "mime_types", "file_types", "formats"]);
-const OMITTABLE_DECLARATION_PARAMS = /* @__PURE__ */ new Set([
-  "asset_source",
-  "buyer_asset_acceptance",
-  "composition_model",
-  "slots",
-  "ssl_required"
-]);
 function validateCanonicalFormatSatisfaction(validation, request, context, taskResult) {
   if (typeof validation.value !== "boolean") {
     return {
@@ -460,14 +453,7 @@ function requireRemainingParamContainment(productParams, requestParams) {
   for (const [key, productValue] of Object.entries(productParams)) {
     if (HANDLED_CANONICAL_PARAM_KEYS.has(key) || productValue === void 0) continue;
     if (Array.isArray(productValue) && productValue.length === 0) continue;
-    if (requestParams[key] === void 0) {
-      if (OMITTABLE_DECLARATION_PARAMS.has(key)) continue;
-      return {
-        ok: false,
-        bug_class: "directionality",
-        detail: `Under-specified selector: product constrains params.${key}, but the request selector omits ${key}`
-      };
-    }
+    if (requestParams[key] === void 0) continue;
     const requestValue = requestParams[key];
     if (ARRAY_SUBSET_PARAM_KEYS.has(key)) {
       const subset = requireArraySubset(key, productValue, requestValue);

package/dist/lib/testing/storyboard/index.d.mts

@@ -6,6 +6,7 @@
  * The canonical storyboard set lives in the AdCP compliance tarball
  * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.
  */
+export { createStoryboardWebBotAuthFetch } from './web-bot-auth.mjs';
 export type { A2ATaskEnvelope, AgentEntry, Storyboard, StoryboardFixtureResolution, FixtureResolutionStrategy, FixtureMatchOperator, FixtureMatchClause, FixtureResolutionDeclaration, ProductFixtureResolutionDeclaration, PricingOptionFixtureResolutionDeclaration, FixtureResolutionStatus, FixtureResolutionRecord, FixtureResolutionAttempt, FixtureResolutionEvidence, FixtureResolutionCoverageGap, StoryboardInvariants, StoryboardInvariantsObject, StepInvariantsObject, StoryboardPhase, StoryboardStep, RateLimitTripSpec, StoryboardValidation, StoryboardValidationCheck, WebhookFilterSpec, WebhookRetryTriggerSpec, WebhookAssertionErrorCode, ContextOutput, ContextInput, ContextProvenanceEntry, ContextValueRejectedHint, ShapeDriftHint, MissingRequiredFieldHint, FormatMismatchHint, MonotonicViolationHint, ImpairmentCoherenceHint, ImpairmentCoherenceNotApplicableHint, StoryboardContext, StoryboardRunOptions, PrepareStoryboardFixturesOptions, TrustedMatchContextProviderEndpoint, TrustedMatchContextRegistrationContext, TrustedMatchContextRouterRunnerOptions, TrustedMatchPublisherAuthOperation, TrustedMatchPublisherCredentialState, TrustedMatchPublisherAuthTls, TrustedMatchPublisherAuthProbeConfiguration, TrustedMatchPublisherAuthRunner, ValidationResult, StoryboardStepPreview, StoryboardStepResult, StoryboardStepHint, StoryboardStepHintBase, StoryboardPhaseResult, StoryboardResult, AssertionResult, StrictValidationSummary, StrictValidationVerdict, UpstreamTrafficPayloadMatch, RunnerNotice, NoticeCode, NoticeSeverity, } from './types.mjs';
 export { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types.mjs';
 export { MCP_SESSION_PROBE_TASK } from './types.mjs';

package/dist/lib/testing/storyboard/index.d.ts

@@ -6,6 +6,7 @@
  * The canonical storyboard set lives in the AdCP compliance tarball
  * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.
  */
+export { createStoryboardWebBotAuthFetch } from './web-bot-auth';
 export type { A2ATaskEnvelope, AgentEntry, Storyboard, StoryboardFixtureResolution, FixtureResolutionStrategy, FixtureMatchOperator, FixtureMatchClause, FixtureResolutionDeclaration, ProductFixtureResolutionDeclaration, PricingOptionFixtureResolutionDeclaration, FixtureResolutionStatus, FixtureResolutionRecord, FixtureResolutionAttempt, FixtureResolutionEvidence, FixtureResolutionCoverageGap, StoryboardInvariants, StoryboardInvariantsObject, StepInvariantsObject, StoryboardPhase, StoryboardStep, RateLimitTripSpec, StoryboardValidation, StoryboardValidationCheck, WebhookFilterSpec, WebhookRetryTriggerSpec, WebhookAssertionErrorCode, ContextOutput, ContextInput, ContextProvenanceEntry, ContextValueRejectedHint, ShapeDriftHint, MissingRequiredFieldHint, FormatMismatchHint, MonotonicViolationHint, ImpairmentCoherenceHint, ImpairmentCoherenceNotApplicableHint, StoryboardContext, StoryboardRunOptions, PrepareStoryboardFixturesOptions, TrustedMatchContextProviderEndpoint, TrustedMatchContextRegistrationContext, TrustedMatchContextRouterRunnerOptions, TrustedMatchPublisherAuthOperation, TrustedMatchPublisherCredentialState, TrustedMatchPublisherAuthTls, TrustedMatchPublisherAuthProbeConfiguration, TrustedMatchPublisherAuthRunner, ValidationResult, StoryboardStepPreview, StoryboardStepResult, StoryboardStepHint, StoryboardStepHintBase, StoryboardPhaseResult, StoryboardResult, AssertionResult, StrictValidationSummary, StrictValidationVerdict, UpstreamTrafficPayloadMatch, RunnerNotice, NoticeCode, NoticeSeverity, } from './types';
 export { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types';
 export { MCP_SESSION_PROBE_TASK } from './types';

package/dist/lib/testing/storyboard/index.js

@@ -60,6 +60,7 @@ __export(storyboard_exports, {
   clearSandboxCache: () => import_sandbox_entities.clearSandboxCache,
   compareCollectionPairs: () => import_collection_selection.compareCollectionPairs,
   createRunnerVariables: () => import_context.createRunnerVariables,
+  createStoryboardWebBotAuthFetch: () => import_web_bot_auth.createStoryboardWebBotAuthFetch,
   createWebhookReceiver: () => import_webhook_receiver.createWebhookReceiver,
   describeStoryboardCapabilityGates: () => import_runner.describeStoryboardCapabilityGates,
   detectContextRejectionHints: () => import_rejection_hints.detectContextRejectionHints,
@@ -136,6 +137,7 @@ __export(storyboard_exports, {
 });
 module.exports = __toCommonJS(storyboard_exports);
 var import_default_invariants = require('./default-invariants.js');
+var import_web_bot_auth = require('./web-bot-auth.js');
 var import_types = require('./types.js');
 var import_types2 = require('./types.js');
 var import_assertions = require('./assertions.js');
@@ -207,6 +209,7 @@ var import_creative_build_probe = require('./creative-build-probe.js');
   clearSandboxCache,
   compareCollectionPairs,
   createRunnerVariables,
+  createStoryboardWebBotAuthFetch,
   createWebhookReceiver,
   describeStoryboardCapabilityGates,
   detectContextRejectionHints,

package/dist/lib/testing/storyboard/index.mjs

@@ -1,5 +1,6 @@
 import { registerDefaultInvariants } from "./default-invariants.mjs";
 registerDefaultInvariants();
+import { createStoryboardWebBotAuthFetch } from "./web-bot-auth.mjs";
 import { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from "./types.mjs";
 import { MCP_SESSION_PROBE_TASK } from "./types.mjs";
 import {
@@ -164,6 +165,7 @@ export {
   clearSandboxCache,
   compareCollectionPairs,
   createRunnerVariables,
+  createStoryboardWebBotAuthFetch,
   createWebhookReceiver,
   describeStoryboardCapabilityGates,
   detectContextRejectionHints,

package/dist/lib/testing/storyboard/loader.js

@@ -96,6 +96,13 @@ function validateStoryboardShape(storyboard) {
     validateBranchSet(storyboard.id, phase);
     if (!phase.steps) continue;
     for (const step of phase.steps) {
+      if (step.enrich_request !== void 0 && (step.enrich_request !== true || !step.expect_error || step.negative_path !== "payload_well_formed")) {
+        throw new Error(
+          `[${storyboard.id}] ${step.id}: enrich_request requires expect_error: true and negative_path: payload_well_formed`
+        );
+      }
+      if (typeof step.auth === "object" && step.auth.type === "web_bot_auth" && (typeof step.auth.identity !== "string" || step.auth.identity.trim().length === 0))
+        throw new Error(`[${storyboard.id}] ${step.id}: web_bot_auth requires an identity name`);
       const rawStep = step;
       if (rawStep.task === void 0) {
         if (!Array.isArray(rawStep.validations) || rawStep.validations.length === 0) {

package/dist/lib/testing/storyboard/loader.mjs

@@ -68,6 +68,13 @@ function validateStoryboardShape(storyboard) {
     validateBranchSet(storyboard.id, phase);
     if (!phase.steps) continue;
     for (const step of phase.steps) {
+      if (step.enrich_request !== void 0 && (step.enrich_request !== true || !step.expect_error || step.negative_path !== "payload_well_formed")) {
+        throw new Error(
+          `[${storyboard.id}] ${step.id}: enrich_request requires expect_error: true and negative_path: payload_well_formed`
+        );
+      }
+      if (typeof step.auth === "object" && step.auth.type === "web_bot_auth" && (typeof step.auth.identity !== "string" || step.auth.identity.trim().length === 0))
+        throw new Error(`[${storyboard.id}] ${step.id}: web_bot_auth requires an identity name`);
       const rawStep = step;
       if (rawStep.task === void 0) {
         if (!Array.isArray(rawStep.validations) || rawStep.validations.length === 0) {

package/dist/lib/testing/storyboard/request-builder.js

@@ -248,12 +248,15 @@ const REQUEST_ENRICHERS = {
       budget: (typeof baseSample.budget === "number" ? baseSample.budget : void 0) ?? options.budget ?? Math.max(1e3, pricingOption?.min_spend_per_package ?? 1e3),
       pricing_option_id: fixturePricingOptionId ?? pricingOption?.pricing_option_id ?? context.pricing_option_id ?? "test-pricing"
     };
-    const sentPricingOption = fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, firstPkg.product_id, firstPkg.pricing_option_id);
-    if (baseSample.bid_price === void 0 && baseSample.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !(0, import_pricing_adapter.isFixedPricing)(sentPricingOption)) {
-      const floor = Number(sentPricingOption.floor_price) || 5;
-      firstPkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
-    }
     const additionalPkgs = samplePackages.slice(1).map((p) => (0, import_context.injectContext)({ ...p }, context));
+    const packages = [firstPkg, ...additionalPkgs];
+    for (const pkg of packages) {
+      const sentPricingOption = pkg === firstPkg && fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, pkg.product_id, pkg.pricing_option_id);
+      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !(0, import_pricing_adapter.isFixedPricing)(sentPricingOption)) {
+        const floor = Number(sentPricingOption.floor_price) || 5;
+        pkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
+      }
+    }
     const fixture = step.sample_request !== void 0 ? (0, import_context.injectContext)({ ...step.sample_request }, context) : {};
     const fixtureBody = omitEnvelopeFields(fixture);
     const fixtureHasPackages = Array.isArray(fixture.packages) && fixture.packages.length > 0;
@@ -275,7 +278,7 @@ const REQUEST_ENRICHERS = {
       brand: (0, import_client.resolveBrand)(options),
       start_time: startTime,
       end_time: endTime,
-      packages: [firstPkg, ...additionalPkgs]
+      packages
     };
   },
   update_media_buy(step, context, options) {

package/dist/lib/testing/storyboard/request-builder.mjs

@@ -222,12 +222,15 @@ const REQUEST_ENRICHERS = {
       budget: (typeof baseSample.budget === "number" ? baseSample.budget : void 0) ?? options.budget ?? Math.max(1e3, pricingOption?.min_spend_per_package ?? 1e3),
       pricing_option_id: fixturePricingOptionId ?? pricingOption?.pricing_option_id ?? context.pricing_option_id ?? "test-pricing"
     };
-    const sentPricingOption = fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, firstPkg.product_id, firstPkg.pricing_option_id);
-    if (baseSample.bid_price === void 0 && baseSample.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !isFixedPricing(sentPricingOption)) {
-      const floor = Number(sentPricingOption.floor_price) || 5;
-      firstPkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
-    }
     const additionalPkgs = samplePackages.slice(1).map((p) => injectContext({ ...p }, context));
+    const packages = [firstPkg, ...additionalPkgs];
+    for (const pkg of packages) {
+      const sentPricingOption = pkg === firstPkg && fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, pkg.product_id, pkg.pricing_option_id);
+      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !isFixedPricing(sentPricingOption)) {
+        const floor = Number(sentPricingOption.floor_price) || 5;
+        pkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
+      }
+    }
     const fixture = step.sample_request !== void 0 ? injectContext({ ...step.sample_request }, context) : {};
     const fixtureBody = omitEnvelopeFields(fixture);
     const fixtureHasPackages = Array.isArray(fixture.packages) && fixture.packages.length > 0;
@@ -249,7 +252,7 @@ const REQUEST_ENRICHERS = {
       brand: resolveBrand(options),
       start_time: startTime,
       end_time: endTime,
-      packages: [firstPkg, ...additionalPkgs]
+      packages
     };
   },
   update_media_buy(step, context, options) {