@adcp/sdk 5.23.0 → 5.25.0

package/compliance/cache/3.0.1.previous/test-kits/nova-motors.yaml

@@ -1,262 +0,0 @@
-# Nova Motors — Signal-Focused Advertiser Test Kit
-#
-# Entity definition: fictional-entities.yaml → advertisers[nova_motors]
-# Data providers defined in this kit: see fictional-entities.yaml → data_providers
-#
-# This brand is registered as a sandbox brand in AgenticAdvertising.org (AAO).
-# Agents resolve novamotors.example via the standard AAO brand resolution path.
-# AAO returns the brand.json below but excludes sandbox brands from production
-# brand discovery results.
-
-id: nova_motors
-name: "Nova Motors"
-description: |
-  Signal-focused test kit for the Nova Motors Volta EV launch campaign.
-  Provides sample signal definitions, pricing options, and destination
-  configurations for testing signal agent storyboards.
-sandbox: true
-
-# security_baseline auth fixture — see acme-outdoor.yaml for semantics.
-#
-# probe_task is `get_signals` because this kit's primary consumers are
-# signal agents (specialisms/signal-owned, specialisms/signal-marketplace)
-# where list_creatives is not implemented. Non-signal storyboards that
-# reuse this kit (collection-lists, sales-broadcast-tv, sponsored-
-# intelligence) should select acme-outdoor for security_baseline, or
-# override probe_task at the storyboard layer.
-auth:
-  api_key: "demo-nova-motors-v1"
-  probe_task: get_signals
-
-brand:
-  house:
-    domain: "novamotors.example"
-    name: "Nova Motors"
-  brand_id: "nova_motors"
-  names:
-    - en: "Nova Motors"
-  description: "Electric vehicles for the next generation. The Volta EV — performance meets sustainability."
-  industry: "automotive"
-  keller_type: "master"
-  logos:
-    - url: "https://test-assets.adcontextprotocol.org/nova-motors/logo-primary.png"
-      orientation: "horizontal"
-      background: "light-bg"
-      variant: "primary"
-      width: 400
-      height: 100
-    - url: "https://test-assets.adcontextprotocol.org/nova-motors/logo-icon.png"
-      orientation: "square"
-      background: "transparent-bg"
-      variant: "icon"
-      width: 200
-      height: 200
-  colors:
-    primary: "#0D47A1"
-    secondary: "#00BFA5"
-    accent: "#FF6D00"
-    background: "#F5F5F5"
-    text: "#1A1A1A"
-  fonts:
-    heading:
-      family: "Inter"
-      weight: 700
-      url: "https://fonts.googleapis.com/css2?family=Inter:wght@700"
-    body:
-      family: "Inter"
-      weight: 400
-      url: "https://fonts.googleapis.com/css2?family=Inter"
-  tone:
-    voice: "Forward-thinking and precise. We speak to drivers who care about engineering and the planet — no greenwashing, no hype."
-    attributes:
-      - "innovative"
-      - "precise"
-      - "optimistic"
-    dos:
-      - "Lead with performance specs"
-      - "Reference sustainability with evidence"
-      - "Use clean, modern language"
-    donts:
-      - "Greenwash or overstate environmental claims"
-      - "Use legacy automotive clichés"
-      - "Condescend about range anxiety"
-
-campaign:
-  brand: "Nova Motors"
-  product: "Volta EV"
-  brief: "Reach in-market EV buyers with high purchase propensity, near dealerships, who haven't bought a Nova vehicle before."
-  budget: 250000
-  currency: "USD"
-  markets: ["US"]
-
-signals:
-  marketplace:
-    - signal_agent_segment_id: "trident_likely_ev_buyers"
-      name: "Likely EV Buyers"
-      data_provider_domain: "tridentauto.example"
-      signal_id: "likely_ev_buyers"
-      value_type: "binary"
-      signal_type: "marketplace"
-      coverage_percentage: 8
-      pricing:
-        - pricing_option_id: "po_trident_ev_cpm"
-          model: "cpm"
-          cpm: 3.50
-          currency: "USD"
-
-    - signal_agent_segment_id: "trident_purchase_propensity"
-      name: "Purchase Propensity"
-      data_provider_domain: "tridentauto.example"
-      signal_id: "purchase_propensity"
-      value_type: "numeric"
-      signal_type: "marketplace"
-      range:
-        min: 0
-        max: 1
-      coverage_percentage: 55
-      pricing:
-        - pricing_option_id: "po_trident_propensity_cpm"
-          model: "cpm"
-          cpm: 4.00
-          currency: "USD"
-
-    - signal_agent_segment_id: "meridian_competitor_visitors"
-      name: "Competitor Visitors"
-      data_provider_domain: "meridiangeo.example"
-      signal_id: "competitor_visitors"
-      value_type: "binary"
-      signal_type: "marketplace"
-      coverage_percentage: 6
-      pricing:
-        - pricing_option_id: "po_meridian_visitors_cpm"
-          model: "cpm"
-          cpm: 5.00
-          currency: "USD"
-
-    - signal_agent_segment_id: "shopgrid_new_to_brand"
-      name: "New to Brand"
-      data_provider_domain: "shopgrid.example"
-      signal_id: "new_to_brand"
-      value_type: "binary"
-      signal_type: "marketplace"
-      coverage_percentage: 25
-      pricing:
-        - pricing_option_id: "po_shopgrid_retail_cpm"
-          model: "cpm"
-          cpm: 3.50
-          currency: "USD"
-
-  owned:
-    - signal_agent_segment_id: "prism_high_ltv"
-      name: "High LTV Customers"
-      value_type: "binary"
-      signal_type: "owned"
-      coverage_percentage: 12
-      pricing:
-        - pricing_option_id: "po_prism_flat_monthly"
-          model: "flat_fee"
-          amount: 5000
-          period: "monthly"
-          currency: "USD"
-
-    - signal_agent_segment_id: "prism_cart_abandoner"
-      name: "Cart Abandoners"
-      value_type: "binary"
-      signal_type: "owned"
-      coverage_percentage: 18
-      pricing:
-        - pricing_option_id: "po_prism_abandoner_cpm"
-          model: "cpm"
-          cpm: 8.00
-          currency: "USD"
-
-    - signal_agent_segment_id: "prism_engagement_score"
-      name: "Engagement Score"
-      value_type: "numeric"
-      signal_type: "owned"
-      range:
-        min: 0
-        max: 100
-      coverage_percentage: 65
-      pricing:
-        - pricing_option_id: "po_prism_engagement_cpm"
-          model: "cpm"
-          cpm: 2.50
-          currency: "USD"
-
-    - signal_agent_segment_id: "prism_churn_risk"
-      name: "Churn Risk"
-      value_type: "categorical"
-      signal_type: "owned"
-      categories: ["low_risk", "medium_risk", "high_risk", "churned"]
-      coverage_percentage: 70
-      pricing:
-        - pricing_option_id: "po_prism_churn_pom"
-          model: "percent_of_media"
-          percent: 12
-          max_cpm: 3.00
-          currency: "USD"
-
-assets:
-  images:
-    - id: "hero_300x250"
-      url: "https://test-assets.adcontextprotocol.org/nova-motors/hero-300x250.jpg"
-      width: 300
-      height: 250
-      mime_type: "image/jpeg"
-      description: "Medium rectangle hero — Volta EV on coastal highway"
-
-    - id: "hero_728x90"
-      url: "https://test-assets.adcontextprotocol.org/nova-motors/hero-728x90.jpg"
-      width: 728
-      height: 90
-      mime_type: "image/jpeg"
-      description: "Leaderboard hero — Volta EV front profile with charging station"
-
-    - id: "hero_320x50"
-      url: "https://test-assets.adcontextprotocol.org/nova-motors/hero-320x50.jpg"
-      width: 320
-      height: 50
-      mime_type: "image/jpeg"
-      description: "Mobile banner hero — Volta EV dashboard detail"
-
-    - id: "hero_160x600"
-      url: "https://test-assets.adcontextprotocol.org/nova-motors/hero-160x600.jpg"
-      width: 160
-      height: 600
-      mime_type: "image/jpeg"
-      description: "Wide skyscraper hero — vertical Volta EV silhouette"
-
-    - id: "hero_master"
-      url: "https://test-assets.adcontextprotocol.org/nova-motors/hero-master.jpg"
-      width: 1200
-      height: 628
-      mime_type: "image/jpeg"
-      description: "Master hero image — high-res Volta EV in motion"
-
-  text:
-    headlines:
-      - "The Volta EV — 0 to 60 in 3.2s"
-      - "Performance Meets Sustainability"
-      - "Drive Electric. Drive Nova."
-    descriptions:
-      - "340 miles of range. 15-minute fast charge. The Volta EV is engineered for drivers who refuse to compromise."
-      - "Zero emissions, zero compromises. Test drive the Volta EV at your nearest Nova Motors dealer."
-    cta:
-      - "Reserve Yours"
-      - "Schedule a Test Drive"
-      - "Explore the Volta"
-
-  click_url: "https://novamotors.example/volta-ev"
-
-destinations:
-  platforms:
-    - type: "platform"
-      platform: "the-trade-desk"
-      account: "agency-123-ttd"
-    - type: "platform"
-      platform: "streamhaus"
-      account: "agency-ctv-seat-456"
-  agents:
-    - type: "agent"
-      agent_url: "https://wonderstruck.salesagents.example"

package/compliance/cache/3.0.1.previous/test-kits/osei-natural.yaml

@@ -1,126 +0,0 @@
-# Osei Natural — Beauty Advertiser Test Kit
-#
-# Entity definition: fictional-entities.yaml → advertisers[osei_natural]
-#
-# 8-person natural skincare company based in Nairobi. Represents the small
-# business that advertising should serve but currently doesn't.
-#
-# This brand is registered as a sandbox brand in AgenticAdvertising.org (AAO).
-# Agents resolve oseinatural.example via the standard AAO brand resolution path.
-# AAO returns the brand.json below but excludes sandbox brands from production
-# brand discovery results.
-
-id: osei_natural
-name: "Osei Natural"
-description: "Natural skincare brand for small-business advertiser storyboard testing"
-sandbox: true
-
-# security_baseline auth fixture — see acme-outdoor.yaml for semantics.
-auth:
-  api_key: "demo-osei-natural-v1"
-  probe_task: list_creatives
-
-brand:
-  house:
-    domain: "oseinatural.example"
-    name: "Osei Natural"
-  brand_id: "osei_natural"
-  names:
-    - en: "Osei Natural"
-  description: "Natural skincare rooted in East African botanicals. Small-batch, founder-led, and unapologetically simple."
-  industry: "beauty"
-  keller_type: "master"
-  logos:
-    - url: "https://test-assets.adcontextprotocol.org/osei-natural/logo-primary.png"
-      orientation: "horizontal"
-      background: "light-bg"
-      variant: "primary"
-      width: 400
-      height: 100
-    - url: "https://test-assets.adcontextprotocol.org/osei-natural/logo-icon.png"
-      orientation: "square"
-      background: "transparent-bg"
-      variant: "icon"
-      width: 200
-      height: 200
-  colors:
-    primary: "#5D4037"
-    secondary: "#C8E6C9"
-    accent: "#FF8F00"
-    background: "#FBF7F4"
-    text: "#2E2E2E"
-  fonts:
-    heading:
-      family: "Cormorant Garamond"
-      weight: 600
-      url: "https://fonts.googleapis.com/css2?family=Cormorant+Garamond:wght@600"
-    body:
-      family: "Lato"
-      weight: 400
-      url: "https://fonts.googleapis.com/css2?family=Lato"
-  tone:
-    voice: "Calm, grounded, and personal. Amara speaks directly to customers like a trusted friend sharing what works."
-    attributes:
-      - "authentic"
-      - "gentle"
-      - "personal"
-    dos:
-      - "Name specific botanicals and their origins"
-      - "Use first-person when appropriate — the founder is the brand"
-      - "Keep it warm and conversational"
-    donts:
-      - "Use clinical or pharmaceutical language"
-      - "Make anti-aging claims — Osei Natural is about care, not correction"
-      - "Erase the brand's Kenyan identity — it's a feature, not a detail"
-
-assets:
-  images:
-    - id: "hero_300x250"
-      url: "https://test-assets.adcontextprotocol.org/osei-natural/hero-300x250.jpg"
-      width: 300
-      height: 250
-      mime_type: "image/jpeg"
-      description: "Medium rectangle hero — product jars with botanical ingredients"
-
-    - id: "hero_728x90"
-      url: "https://test-assets.adcontextprotocol.org/osei-natural/hero-728x90.jpg"
-      width: 728
-      height: 90
-      mime_type: "image/jpeg"
-      description: "Leaderboard hero — Amara in workshop with shea butter"
-
-    - id: "hero_320x50"
-      url: "https://test-assets.adcontextprotocol.org/osei-natural/hero-320x50.jpg"
-      width: 320
-      height: 50
-      mime_type: "image/jpeg"
-      description: "Mobile banner hero — close-up of baobab oil serum"
-
-    - id: "hero_160x600"
-      url: "https://test-assets.adcontextprotocol.org/osei-natural/hero-160x600.jpg"
-      width: 160
-      height: 600
-      mime_type: "image/jpeg"
-      description: "Wide skyscraper hero — vertical product lineup on linen"
-
-    - id: "hero_master"
-      url: "https://test-assets.adcontextprotocol.org/osei-natural/hero-master.jpg"
-      width: 1200
-      height: 628
-      mime_type: "image/jpeg"
-      description: "Master hero image — high-res flat lay of full product range"
-
-  text:
-    headlines:
-      - "Your Skin Deserves Better Ingredients"
-      - "Small-Batch Skincare from Nairobi"
-      - "Rooted in East African Botanicals"
-    descriptions:
-      - "Shea butter, baobab oil, and aloe — sourced from East African growers, blended by hand in Nairobi. Osei Natural."
-      - "Eight people, twelve products, zero compromises. Natural skincare that actually works."
-    cta:
-      - "Shop the Collection"
-      - "Meet the Founder"
-      - "Try a Sample Kit"
-
-  click_url: "https://oseinatural.example/shop"

package/compliance/cache/3.0.1.previous/test-kits/signed-requests-runner.yaml

@@ -1,155 +0,0 @@
-# Signed-Requests Runner — Harness Contract Test Kit
-#
-# Applies to: universal/signed-requests.yaml (gated on
-# `request_signing.supported: true` in get_adcp_capabilities).
-#
-# The signed-requests storyboard grades an agent's RFC 9421 verifier against 28
-# conformance vectors at /compliance/{version}/test-vectors/request-signing/.
-# Most vectors are pure black-box: the runner constructs a signed HTTP request,
-# sends it, and checks the response. Three negative vectors assert behavior that
-# depends on verifier state the runner cannot set from the outside:
-#
-#   016-replayed-nonce   — replay cache must already contain (keyid, nonce)
-#   017-key-revoked      — keyid must already be in the revocation list
-#   020-rate-abuse       — per-keyid replay cache must be at its configured cap
-#
-# This test-kit defines the coordination contract between a black-box runner and
-# a request-signing agent under test. Agents advertising
-# `request_signing.supported: true` MUST pre-configure their verifier per this
-# contract before the negative phase runs. The runner reads this file to know
-# (a) the keyids it will sign with, (b) how to provoke each stateful negative
-# vector, and (c) the grading-time cap values it will target (which are NOT
-# production recommendations — see each field). See `scope` below for what the
-# contract does NOT specify.
-
-id: signed_requests_runner
-applies_to:
-  universal_storyboard: signed-requests
-
-description: |
-  Coordination contract between a black-box runner and a request-signing agent
-  under test. The runner signs vectors dynamically using the keypairs published
-  in keys.json. The agent pre-configures its verifier — accepted JWKS, pre-revoked
-  keyid, replay TTL, per-keyid cap — so that the three stateful negative vectors
-  produce their expected error codes without the runner injecting verifier state.
-
-  Vectors requiring coordination declare `requires_contract` in their fixture;
-  the runner gates those vectors on this contract being in scope.
-
-endpoint_scope: sandbox
-# The replay-window contract sends a live, validly-signed mutating request as
-# its first step (the second copy is what the grader expects to be rejected).
-# Running this against a production endpoint would create a real media buy.
-# Graders MUST target a sandbox/staging endpoint or an idempotency-keyed
-# sacrificial path the agent discards post-grading. Agents advertising
-# `request_signing.supported: true` SHOULD expose a dedicated grading endpoint
-# rather than grading in prod.
-
-harness_mode: black_box
-# Agents participating in a white-box test harness (e.g., SDK internal tests
-# against the reference verifier) MAY satisfy the stateful vectors via direct
-# state injection using the vector's `test_harness_state` block, and declare
-# `harness_mode: white_box` in their own runner configuration. AdCP Verified
-# grading runs in black_box mode only.
-
-runner_signing_keys:
-  # Runner signs every non-negative-key vector with one of these keypairs. The
-  # agent's verifier MUST treat these keyids as a registered test counterparty
-  # whose JWKS contains the corresponding public keys with
-  # adcp_use: "request-signing". Private keys for signing live in keys.json
-  # under `_private_d_for_test_only`.
-  - keyid: test-ed25519-2026
-    alg: ed25519
-    jwks_source: /compliance/{version}/test-vectors/request-signing/keys.json
-  - keyid: test-es256-2026
-    alg: ecdsa-p256-sha256
-    jwks_source: /compliance/{version}/test-vectors/request-signing/keys.json
-
-stateful_vector_contract:
-  replay_window:
-    # Vector 016-replayed-nonce.
-    #
-    # The runner provokes the replay rejection by sending the same signed
-    # request twice in sequence. The agent MUST accept the first submission
-    # (standard positive path) and reject the second with
-    # request_signature_replayed at checklist step 12.
-    #
-    # The agent's replay-cache TTL for this test counterparty MUST be at least
-    # `min_replay_ttl_seconds`, which is strictly greater than
-    # `max_interval_seconds` to absorb clock skew between runner and agent and
-    # scheduler jitter on either side. Otherwise the cache entry for the first
-    # request may evict before the second arrives and the vector will pass
-    # spuriously (i.e., both requests accepted = no replay rejection). The
-    # runner's own interval between the two submissions MUST NOT exceed
-    # `max_interval_seconds`.
-    #
-    # This supersedes vector 016's `test_harness_state.replay_cache_entries`
-    # for black-box mode. In white-box mode, the harness MAY inject the cache
-    # entry directly and skip the first request.
-    vector_id: 016-replayed-nonce
-    black_box_behavior: repeat_request
-    max_interval_seconds: 5
-    min_replay_ttl_seconds: 10
-
-  revocation:
-    # Vector 017-key-revoked.
-    #
-    # The runner cannot revoke a key on the agent's side. The agent MUST
-    # pre-configure its revocation list with `test-revoked-2026` before the
-    # negative phase runs. The runner signs vector 017 with this keyid and
-    # expects request_signature_key_revoked at checklist step 9.
-    #
-    # A dedicated revoked keypair (rather than reusing a runner signing key)
-    # keeps positive vectors and vector 017 independent: the positive phase
-    # remains runnable after vector 017 is graded.
-    vector_id: 017-key-revoked
-    pre_revoked_keyid: test-revoked-2026
-
-  rate_abuse:
-    # Vector 020-rate-abuse (checklist step 9a).
-    #
-    # The runner sends N+1 distinct-nonce requests signed by the same keyid
-    # within the window. The agent MUST reject the (N+1)th with
-    # request_signature_rate_abuse once the per-keyid cap is hit.
-    #
-    # `grading_target_per_keyid_cap_requests` is the cap the runner will
-    # target during grading — NOT a production recommendation. Agents MAY
-    # configure a lower cap for the test-kit counterparty only so grading
-    # finishes in a reasonable time. Production caps MUST follow the spec
-    # recommendation at docs/building/implementation/security.mdx
-    # §per-keyid cap (at least 1,000,000 entries per keyid). Implementers
-    # copying a value from this file into production code SHOULD use
-    # `production_min_per_keyid_cap_requests` below as the floor, not
-    # `grading_target_per_keyid_cap_requests`.
-    vector_id: 020-rate-abuse
-    grading_target_per_keyid_cap_requests: 100
-    production_min_per_keyid_cap_requests: 1000000
-    window_seconds: 60
-
-scope:
-  in_scope: |
-    - Keyids the runner will sign with and their JWKS source.
-    - Agent-side preconditions for each stateful negative vector.
-    - Grading-time cap the runner will target for rate-abuse grading (NOT a
-      production recommendation; see rate_abuse block).
-    - Minimum replay-cache TTL so the replay-window contract is reliable.
-    - Black-box vs. white-box harness mode selection.
-    - Endpoint scope (sandbox only — see endpoint_scope).
-  out_of_scope: |
-    - Specific error-code strings — those live in each vector's
-      expected_outcome.error_code and are graded byte-for-byte.
-    - Checklist step numbers — informational only; grading is on the error
-      code, not the step.
-    - Pre-signed Signature bytes in the vectors — unchanged by this contract.
-      Black-box runners re-sign dynamically; pre-signed bytes remain valid
-      for white-box cross-SDK byte-equivalence checks.
-    - The agent's internal replay TTL or cap storage mechanism — the contract
-      specifies observable behavior, not implementation.
-    - Production verifier configuration — this contract configures a test
-      counterparty only.
-
-references:
-  universal_storyboard: static/compliance/source/universal/signed-requests.yaml
-  test_vectors: /compliance/{version}/test-vectors/request-signing/
-  verifier_checklist: /docs/building/implementation/security.mdx#verifier-checklist-requests
-  runner_implementation: https://github.com/adcontextprotocol/adcp-client/issues/585