@adcp/sdk 5.23.0

package/dist/lib/compliance-fixtures/test-authorization-server.js

@@ -0,0 +1,252 @@
+"use strict";
+/**
+ * In-process test authorization server for closed-loop compliance runs.
+ *
+ * Pairs with {@link seedComplianceFixtures} and `runAgainstLocalAgent` to
+ * let sellers grade `security_baseline`, `signed-requests`, and any other
+ * storyboard that needs real OAuth 2.0 tokens without reaching an
+ * external IdP.
+ *
+ * What it exposes:
+ *   - `/.well-known/oauth-authorization-server` — RFC 8414 metadata
+ *   - `/.well-known/jwks.json` — JWKS with the AS public key
+ *   - `/token` — client_credentials token endpoint (always issues; this is
+ *     a fixture, not a real IdP)
+ *
+ * What the caller gets back:
+ *   - `issuer` — set on the token `iss` and in PRM `authorization_servers`
+ *   - `jwksUri` — point `verifyBearer({ jwksUri })` at this
+ *   - `issueToken()` — mint a JWT for any audience / scope / subject
+ *   - `close()` — tear down the HTTP listener (idempotent)
+ *
+ * Uses RS256 by default. HS* algorithms are refused — they would fail
+ * `verifyBearer`'s asymmetric-only allowlist and teach sellers the wrong
+ * setup.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTestAuthorizationServer = createTestAuthorizationServer;
+const node_http_1 = require("node:http");
+const jose_1 = require("jose");
+const TOKEN_PATH = '/token';
+const JWKS_PATH = '/.well-known/jwks.json';
+const METADATA_PATH = '/.well-known/oauth-authorization-server';
+/**
+ * Start an in-process test authorization server. Safe to mount many
+ * times in the same process; each call binds a fresh ephemeral port.
+ */
+async function createTestAuthorizationServer(options = {}) {
+    const host = options.host ?? '127.0.0.1';
+    const algorithm = options.algorithm ?? 'RS256';
+    const tokenLifetimeSeconds = options.tokenLifetimeSeconds ?? 3600;
+    const subjects = { ...(options.subjects ?? {}) };
+    if (options.issuer && !/^https?:\/\//.test(options.issuer)) {
+        throw new Error(`createTestAuthorizationServer: issuer must be http(s); got ${options.issuer}`);
+    }
+    const { publicKey, privateKey } = await (0, jose_1.generateKeyPair)(algorithm, { extractable: true });
+    const publicJwk = await (0, jose_1.exportJWK)(publicKey);
+    const kid = await (0, jose_1.calculateJwkThumbprint)(publicJwk);
+    publicJwk.kid = kid;
+    publicJwk.alg = algorithm;
+    publicJwk.use = 'sig';
+    const state = {
+        issuer: options.issuer?.replace(/\/$/, '') ?? '',
+    };
+    const httpServer = (0, node_http_1.createServer)((req, res) => {
+        handleRequest(req, res, state.issuer, publicJwk, async (opts) => mintToken(opts));
+    });
+    await new Promise((resolve, reject) => {
+        const onError = (err) => reject(err);
+        httpServer.once('error', onError);
+        httpServer.listen(options.port ?? 0, host, () => {
+            httpServer.off('error', onError);
+            resolve();
+        });
+    });
+    const bound = httpServer.address();
+    const boundBase = `http://${formatHost(bound.address)}:${bound.port}`;
+    if (!state.issuer)
+        state.issuer = boundBase;
+    async function mintToken(opts) {
+        const preset = subjects[opts.sub] ?? {};
+        const mergedClaims = { ...preset, ...(opts.claims ?? {}) };
+        const scopeValue = Array.isArray(opts.scope) ? opts.scope.join(' ') : opts.scope;
+        const now = Math.floor(Date.now() / 1000);
+        const exp = now + (opts.expiresInSeconds ?? tokenLifetimeSeconds);
+        return new jose_1.SignJWT({
+            ...mergedClaims,
+            ...(scopeValue ? { scope: scopeValue } : {}),
+        })
+            .setProtectedHeader({ alg: algorithm, kid, typ: 'JWT' })
+            .setSubject(opts.sub)
+            .setIssuer(state.issuer)
+            .setAudience(opts.aud)
+            .setIssuedAt(now)
+            .setExpirationTime(exp)
+            .sign(privateKey);
+    }
+    return {
+        baseUrl: boundBase,
+        get issuer() {
+            return state.issuer;
+        },
+        get metadataUrl() {
+            return `${boundBase}${METADATA_PATH}`;
+        },
+        get jwksUri() {
+            return `${boundBase}${JWKS_PATH}`;
+        },
+        get tokenEndpoint() {
+            return `${boundBase}${TOKEN_PATH}`;
+        },
+        issueToken: mintToken,
+        close: () => closeServer(httpServer),
+    };
+}
+// ────────────────────────────────────────────────────────────
+// HTTP handlers
+// ────────────────────────────────────────────────────────────
+function handleRequest(req, res, issuer, publicJwk, issueToken) {
+    const { pathname } = new URL(req.url || '', 'http://localhost');
+    if (req.method === 'GET' && pathname === METADATA_PATH) {
+        respondJson(res, 200, buildMetadata(issuer));
+        return;
+    }
+    if (req.method === 'GET' && pathname === JWKS_PATH) {
+        respondJson(res, 200, { keys: [publicJwk] });
+        return;
+    }
+    if (req.method === 'POST' && pathname === TOKEN_PATH) {
+        handleTokenEndpoint(req, res, issueToken).catch(err => {
+            console.error('[adcp/test-authorization-server] token endpoint error:', err);
+            if (!res.headersSent)
+                respondJson(res, 500, { error: 'server_error' });
+        });
+        return;
+    }
+    res.statusCode = 404;
+    res.end();
+}
+function buildMetadata(issuer) {
+    return {
+        issuer,
+        token_endpoint: `${issuer}${TOKEN_PATH}`,
+        jwks_uri: `${issuer}${JWKS_PATH}`,
+        grant_types_supported: ['client_credentials'],
+        token_endpoint_auth_methods_supported: ['none', 'client_secret_basic', 'client_secret_post'],
+        response_types_supported: ['token'],
+        scopes_supported: ['adcp:read', 'adcp:write'],
+    };
+}
+async function handleTokenEndpoint(req, res, issueToken) {
+    const rawBody = await readBody(req);
+    const form = parseFormOrJson(rawBody, req.headers['content-type']);
+    const grantType = form.get('grant_type');
+    if (grantType !== 'client_credentials') {
+        respondJson(res, 400, {
+            error: 'unsupported_grant_type',
+            error_description: `Only client_credentials supported in the test AS; got ${grantType ?? '(none)'}`,
+        });
+        return;
+    }
+    const audience = form.get('resource') ?? form.get('audience');
+    if (!audience) {
+        respondJson(res, 400, {
+            error: 'invalid_request',
+            error_description: 'Missing `resource` (RFC 8707) or `audience` form parameter.',
+        });
+        return;
+    }
+    // Accept either form-posted `client_id` or HTTP Basic auth. The test AS
+    // does not enforce a client registry — it issues for any caller.
+    const clientId = form.get('client_id') ?? extractBasicAuthUsername(req.headers.authorization);
+    const sub = clientId ?? 'test-client';
+    const scope = form.get('scope') ?? undefined;
+    const token = await issueToken({
+        sub,
+        aud: audience,
+        scope,
+    });
+    respondJson(res, 200, {
+        access_token: token,
+        token_type: 'Bearer',
+        expires_in: 3600,
+        ...(scope ? { scope } : {}),
+    });
+}
+function respondJson(res, status, body) {
+    res.statusCode = status;
+    res.setHeader('content-type', 'application/json');
+    res.setHeader('cache-control', 'no-store');
+    res.end(JSON.stringify(body));
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        const MAX = 65_536;
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > MAX) {
+                reject(new Error('token endpoint body exceeded 64 KiB'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', reject);
+    });
+}
+function parseFormOrJson(raw, contentType) {
+    const out = new Map();
+    if (raw.length === 0)
+        return out;
+    const ct = Array.isArray(contentType) ? contentType[0] : contentType;
+    const looksJson = ct && /json/i.test(ct);
+    if (looksJson) {
+        try {
+            const obj = JSON.parse(raw);
+            for (const [k, v] of Object.entries(obj)) {
+                if (typeof v === 'string')
+                    out.set(k, v);
+            }
+            return out;
+        }
+        catch {
+            return out;
+        }
+    }
+    const params = new URLSearchParams(raw);
+    for (const [k, v] of params.entries())
+        out.set(k, v);
+    return out;
+}
+function extractBasicAuthUsername(auth) {
+    const header = Array.isArray(auth) ? auth[0] : auth;
+    if (!header || !/^basic\s+/i.test(header))
+        return undefined;
+    const b64 = header.replace(/^basic\s+/i, '').trim();
+    try {
+        const decoded = Buffer.from(b64, 'base64').toString('utf8');
+        const colonIdx = decoded.indexOf(':');
+        return colonIdx === -1 ? decoded : decoded.slice(0, colonIdx);
+    }
+    catch {
+        return undefined;
+    }
+}
+function formatHost(address) {
+    return address.includes(':') ? `[${address}]` : address;
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.closeAllConnections?.();
+        server.close(err => {
+            if (err && err.code !== 'ERR_SERVER_NOT_RUNNING')
+                reject(err);
+            else
+                resolve();
+        });
+    });
+}
+//# sourceMappingURL=test-authorization-server.js.map

package/dist/lib/compliance-fixtures/test-authorization-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-authorization-server.js","sourceRoot":"","sources":["../../../src/lib/compliance-fixtures/test-authorization-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;AA2EH,sEA4EC;AArJD,yCAAiG;AAEjG,+BAA6F;AA+D7F,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAEhE;;;GAGG;AACI,KAAK,UAAU,6BAA6B,CACjD,UAA0C,EAAE;IAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAC/C,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC;IAClE,MAAM,QAAQ,GAA4C,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IAE1F,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,sBAAe,EAAC,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,IAAA,gBAAS,EAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,IAAA,6BAAsB,EAAC,SAAS,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,GAAG,GAAG,CAAC;IACpB,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC;IAC1B,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC;IAEtB,MAAM,KAAK,GAAG;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE;KACjD,CAAC;IAEF,MAAM,UAAU,GAAG,IAAA,wBAAY,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC9C,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAiB,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IAE5C,KAAK,UAAU,SAAS,CAAC,IAAuB;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC;QAClE,OAAO,IAAI,cAAO,CAAC;YACjB,GAAG,YAAY;YACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;aACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACvD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;aACpB,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;aACvB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;aACrB,WAAW,CAAC,GAAG,CAAC;aAChB,iBAAiB,CAAC,GAAG,CAAC;aACtB,IAAI,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,IAAI,MAAM;YACR,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,IAAI,WAAW;YACb,OAAO,GAAG,SAAS,GAAG,aAAa,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,OAAO;YACT,OAAO,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,aAAa;YACf,OAAO,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC;QACrC,CAAC;QACD,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,gBAAgB;AAChB,+DAA+D;AAE/D,SAAS,aAAa,CACpB,GAAoB,EACpB,GAAmB,EACnB,MAAc,EACd,SAAc,EACd,UAAwD;IAExD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAEhE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QACvD,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnD,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACrD,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACpD,OAAO,CAAC,KAAK,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;IACrB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO;QACL,MAAM;QACN,cAAc,EAAE,GAAG,MAAM,GAAG,UAAU,EAAE;QACxC,QAAQ,EAAE,GAAG,MAAM,GAAG,SAAS,EAAE;QACjC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,qCAAqC,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;QAC5F,wBAAwB,EAAE,CAAC,OAAO,CAAC;QACnC,gBAAgB,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,GAAoB,EACpB,GAAmB,EACnB,UAAwD;IAExD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;QACvC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;YACpB,KAAK,EAAE,wBAAwB;YAC/B,iBAAiB,EAAE,yDAAyD,SAAS,IAAI,QAAQ,EAAE;SACpG,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;YACpB,KAAK,EAAE,iBAAiB;YACxB,iBAAiB,EAAE,6DAA6D;SACjF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,QAAQ,IAAI,aAAa,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAE7C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC;QAC7B,GAAG;QACH,GAAG,EAAE,QAAQ;QACb,KAAK;KACN,CAAC,CAAC;IACH,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;QACpB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACrE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,GAAG,GAAG,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,WAA0C;IAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACrE,MAAM,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAmC;IACnE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACjB,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,wBAAwB;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBACpF,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/conformance/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * AdCP conformance fuzzer.
+ *
+ * Property-based testing against an agent's published JSON schemas.
+ * Import from `@adcp/sdk/conformance` — kept off the runtime-client
+ * path so `fast-check` and the schema bundle only load when fuzzing.
+ *
+ * ```ts
+ * import { runConformance } from '@adcp/sdk/conformance';
+ *
+ * const report = await runConformance('https://agent.example.com', {
+ *   seed: 42,
+ *   tools: ['get_products', 'get_signals'],
+ * });
+ * if (report.totalFailures > 0) {
+ *   console.error(JSON.stringify(report.failures, null, 2));
+ *   process.exit(1);
+ * }
+ * ```
+ */
+export { runConformance } from './runConformance';
+export { seedFixtures } from './seeder';
+export type { SeedOptions, SeedResult, SeederName, SeedWarning } from './seeder';
+export { STATELESS_TIER_TOOLS, REFERENTIAL_STATELESS_TOOLS, UPDATE_TIER_TOOLS, DEFAULT_TOOLS, DEFAULT_TOOLS_WITH_UPDATES, } from './types';
+export type { ConformanceFailure, ConformanceFixtures, ConformanceReport, ConformanceToolName, ConformanceToolStats, OracleVerdict, RunConformanceOptions, SkipReason, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/conformance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/conformance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,0BAA0B,GAC3B,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,UAAU,GACX,MAAM,SAAS,CAAC"}

package/dist/lib/conformance/index.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * AdCP conformance fuzzer.
+ *
+ * Property-based testing against an agent's published JSON schemas.
+ * Import from `@adcp/sdk/conformance` — kept off the runtime-client
+ * path so `fast-check` and the schema bundle only load when fuzzing.
+ *
+ * ```ts
+ * import { runConformance } from '@adcp/sdk/conformance';
+ *
+ * const report = await runConformance('https://agent.example.com', {
+ *   seed: 42,
+ *   tools: ['get_products', 'get_signals'],
+ * });
+ * if (report.totalFailures > 0) {
+ *   console.error(JSON.stringify(report.failures, null, 2));
+ *   process.exit(1);
+ * }
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_TOOLS_WITH_UPDATES = exports.DEFAULT_TOOLS = exports.UPDATE_TIER_TOOLS = exports.REFERENTIAL_STATELESS_TOOLS = exports.STATELESS_TIER_TOOLS = exports.seedFixtures = exports.runConformance = void 0;
+var runConformance_1 = require("./runConformance");
+Object.defineProperty(exports, "runConformance", { enumerable: true, get: function () { return runConformance_1.runConformance; } });
+var seeder_1 = require("./seeder");
+Object.defineProperty(exports, "seedFixtures", { enumerable: true, get: function () { return seeder_1.seedFixtures; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "STATELESS_TIER_TOOLS", { enumerable: true, get: function () { return types_1.STATELESS_TIER_TOOLS; } });
+Object.defineProperty(exports, "REFERENTIAL_STATELESS_TOOLS", { enumerable: true, get: function () { return types_1.REFERENTIAL_STATELESS_TOOLS; } });
+Object.defineProperty(exports, "UPDATE_TIER_TOOLS", { enumerable: true, get: function () { return types_1.UPDATE_TIER_TOOLS; } });
+Object.defineProperty(exports, "DEFAULT_TOOLS", { enumerable: true, get: function () { return types_1.DEFAULT_TOOLS; } });
+Object.defineProperty(exports, "DEFAULT_TOOLS_WITH_UPDATES", { enumerable: true, get: function () { return types_1.DEFAULT_TOOLS_WITH_UPDATES; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/conformance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/conformance/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,mCAAwC;AAA/B,sGAAA,YAAY,OAAA;AAErB,iCAMiB;AALf,6GAAA,oBAAoB,OAAA;AACpB,oHAAA,2BAA2B,OAAA;AAC3B,0GAAA,iBAAiB,OAAA;AACjB,sGAAA,aAAa,OAAA;AACb,mHAAA,0BAA0B,OAAA"}

package/dist/lib/conformance/invariants/uniformError.d.ts

@@ -0,0 +1,45 @@
+import { AgentClient } from '../../core/AgentClient';
+import type { ConformanceFixtures, ConformanceToolName } from '../types';
+export type UniformErrorVerdict = 'pass' | 'fail' | 'skipped';
+export interface UniformErrorReport {
+    tool: ConformanceToolName;
+    /** Which pairing actually ran. */
+    mode: 'baseline' | 'cross-tenant';
+    verdict: UniformErrorVerdict;
+    /** Populated on verdict === 'skipped'. */
+    skipReason?: string;
+    /** Populated on verdict !== 'skipped'. */
+    differences?: string[];
+    /** Probe summaries for diagnostics. Sanitized via `summarizeCapture`. */
+    probes?: {
+        inaccessibleOrRandomA: ProbeSummary;
+        impossibleOrRandomB: ProbeSummary;
+    };
+}
+export interface ProbeSummary {
+    /** Label describing what kind of id was probed. */
+    label: 'cross-tenant' | 'impossible' | 'random-a' | 'random-b';
+    status: number | null;
+    headers: Record<string, string>;
+    body: string;
+    latencyMs: number;
+    /** Whether the capture body was truncated. */
+    bodyTruncated: boolean;
+}
+/** Tools eligible for the uniform-error probe. Used by the runner wiring. */
+export declare function toolsEligibleForUniformError(): ConformanceToolName[];
+export interface ProbeOptions {
+    /** Agent client that probes with the "caller" credentials (tenant B in cross-tenant mode). */
+    prober: AgentClient;
+    /** Fixtures accumulated so far — drawn from for cross-tenant mode. */
+    fixtures: ConformanceFixtures;
+    /** Whether a distinct cross-tenant token was configured. When false, mode is 'baseline'. */
+    crossTenantConfigured: boolean;
+    /**
+     * Cap individual probe body size in the capture. Defaults to the
+     * rawResponseCapture default. Not usually worth overriding.
+     */
+    maxBodyBytes?: number;
+}
+export declare function runUniformErrorInvariant(tool: ConformanceToolName, options: ProbeOptions): Promise<UniformErrorReport>;
+//# sourceMappingURL=uniformError.d.ts.map

package/dist/lib/conformance/invariants/uniformError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniformError.d.ts","sourceRoot":"","sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAGzE,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,kCAAkC;IAClC,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;IAClC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,yEAAyE;IACzE,MAAM,CAAC,EAAE;QACP,qBAAqB,EAAE,YAAY,CAAC;QACpC,mBAAmB,EAAE,YAAY,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,KAAK,EAAE,cAAc,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,CAAC;IAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,aAAa,EAAE,OAAO,CAAC;CACxB;AA6ED,6EAA6E;AAC7E,wBAAgB,4BAA4B,IAAI,mBAAmB,EAAE,CAEpE;AAED,MAAM,WAAW,YAAY;IAC3B,8FAA8F;IAC9F,MAAM,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,4FAA4F;IAC5F,qBAAqB,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA0D7B"}

package/dist/lib/conformance/invariants/uniformError.js

@@ -0,0 +1,179 @@
+"use strict";
+// Uniform error response invariant (adcp spec § error-handling).
+//
+// The spec MUSTs that a seller returns byte-equivalent responses for
+// "the id exists but the caller lacks access" vs "the id does not
+// exist" — through every observable channel (error code/message/field/
+// details, HTTP status, A2A task state / MCP isError, response headers,
+// latency distribution). Distinguishing the two leaks cross-tenant
+// existence information.
+//
+// This invariant exercises the MUST with a paired probe: two requests
+// to the same tool, compared byte-for-byte.
+//
+// Pairing modes:
+//   - baseline: two fresh UUIDs, single auth token. Catches id-echo
+//     leaks, header divergence, and grossly different latency. Does
+//     not catch cross-tenant leaks — both ids are impossible, so the
+//     "inaccessible vs unknown" branch never fires.
+//   - cross-tenant: one seeded id owned by tenant A plus one fresh
+//     UUID, both probed as tenant B. Catches the full MUST.
+//
+// Tool coverage is keyed by TOOL_ID_CONFIG below. A tool must expose
+// a single scalar "lookup id" field and have a matching seeder before
+// it can be probed.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toolsEligibleForUniformError = toolsEligibleForUniformError;
+exports.runUniformErrorInvariant = runUniformErrorInvariant;
+const node_crypto_1 = require("node:crypto");
+const rawResponseCapture_1 = require("../../protocols/rawResponseCapture");
+const uniformErrorComparator_1 = require("./uniformErrorComparator");
+const TOOL_ID_CONFIG = {
+    get_property_list: {
+        idField: 'list_id',
+        fixtureKey: 'list_ids',
+        buildRequest: id => ({ list_id: id }),
+    },
+    get_content_standards: {
+        idField: 'standards_id',
+        fixtureKey: 'standards_ids',
+        buildRequest: id => ({ standards_id: id }),
+    },
+    get_media_buy_delivery: {
+        idField: 'media_buy_id',
+        fixtureKey: 'media_buy_ids',
+        buildRequest: id => {
+            // Spec-min request: one buy id + a date range wide enough to avoid
+            // per-seller reporting-window rejection. Dates are arbitrary — the
+            // resolution happens before access-check per the spec, so the
+            // response must be byte-equivalent regardless of window.
+            const now = new Date();
+            const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);
+            const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);
+            return { media_buy_ids: [id], start_date: start, end_date: end };
+        },
+    },
+    get_creative_delivery: {
+        idField: 'creative_id',
+        fixtureKey: 'creative_ids',
+        buildRequest: id => {
+            const now = new Date();
+            const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);
+            const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);
+            return { creative_ids: [id], start_date: start, end_date: end };
+        },
+    },
+    tasks_get: {
+        idField: 'task_id',
+        fixtureKey: 'task_ids',
+        buildRequest: id => ({ task_id: id }),
+    },
+    get_signals: {
+        idField: 'signal_ids',
+        // No seeder for signals today (catalog signals are provider-
+        // controlled, not agent-created). Baseline-only: two fresh UUIDs
+        // wrapped in a SignalID shape, probed under the single caller
+        // token. Cross-tenant mode becomes available when the signals
+        // protocol grows a create/sync path and a seeder produces ids.
+        buildRequest: id => ({
+            signal_ids: [{ source: 'catalog', data_provider_domain: 'conformance.example', id }],
+        }),
+    },
+};
+/** Tools eligible for the uniform-error probe. Used by the runner wiring. */
+function toolsEligibleForUniformError() {
+    return Object.keys(TOOL_ID_CONFIG);
+}
+async function runUniformErrorInvariant(tool, options) {
+    const config = TOOL_ID_CONFIG[tool];
+    if (!config) {
+        return {
+            tool,
+            mode: options.crossTenantConfigured ? 'cross-tenant' : 'baseline',
+            verdict: 'skipped',
+            skipReason: 'tool not in TOOL_ID_CONFIG',
+        };
+    }
+    // Resolve the pair of ids under probe.
+    //
+    // Cross-tenant mode needs a seeded id (tenant A owns the resource;
+    // tenant B is probing it — that's the "exists but inaccessible" leg).
+    // Missing seeded id (or a tool with no fixtureKey at all, like
+    // get_signals) → fall back to baseline rather than skipping; the
+    // baseline still catches id-echo and header-divergence leaks.
+    const seededPool = config.fixtureKey ? (options.fixtures[config.fixtureKey] ?? []) : [];
+    const seededId = seededPool[0];
+    const mode = options.crossTenantConfigured && seededId ? 'cross-tenant' : 'baseline';
+    const idA = mode === 'cross-tenant' ? seededId : (0, node_crypto_1.randomUUID)();
+    const idB = (0, node_crypto_1.randomUUID)();
+    const labelA = mode === 'cross-tenant' ? 'cross-tenant' : 'random-a';
+    const labelB = mode === 'cross-tenant' ? 'impossible' : 'random-b';
+    const captureOpts = { maxBodyBytes: options.maxBodyBytes };
+    const probeA = await capturedProbe(options.prober, tool, config.buildRequest(idA), captureOpts);
+    const probeB = await capturedProbe(options.prober, tool, config.buildRequest(idB), captureOpts);
+    if (!probeA.capture || !probeB.capture) {
+        // One side didn't produce a capture — the underlying transport
+        // surfaced an error before we could observe the response (e.g.,
+        // the SDK threw an AuthenticationRequiredError). Report the root
+        // cause so the operator knows why the invariant skipped.
+        const reason = probeA.error ?? probeB.error ?? 'no capture observed';
+        return {
+            tool,
+            mode,
+            verdict: 'skipped',
+            skipReason: `probe did not produce a raw capture (${reason})`,
+        };
+    }
+    const comparison = (0, uniformErrorComparator_1.compareProbes)(probeA.capture, probeB.capture);
+    return {
+        tool,
+        mode,
+        verdict: comparison.equivalent ? 'pass' : 'fail',
+        differences: comparison.differences,
+        probes: {
+            inaccessibleOrRandomA: summarizeCapture(probeA.capture, labelA),
+            impossibleOrRandomB: summarizeCapture(probeB.capture, labelB),
+        },
+    };
+}
+/**
+ * Execute a probe inside a capture context and return the tool-call
+ * response. Filters captures to POST — MCP's tool call and A2A's
+ * `sendMessage` are both POSTs, while A2A's `/.well-known/agent.json`
+ * discovery (issued on a fresh client) is a GET that we must not
+ * confuse with the tool response.
+ */
+async function capturedProbe(agent, tool, request, options) {
+    try {
+        const { captures } = await (0, rawResponseCapture_1.withRawResponseCapture)(async () => {
+            await agent.executeTask(tool, request);
+        }, options);
+        const toolCallCapture = lastPostCapture(captures);
+        if (!toolCallCapture) {
+            return { error: 'captured only non-POST traffic' };
+        }
+        return { capture: toolCallCapture };
+    }
+    catch (err) {
+        return { error: err instanceof Error ? err.message : String(err) };
+    }
+}
+function lastPostCapture(captures) {
+    for (let i = captures.length - 1; i >= 0; i--) {
+        const cap = captures[i];
+        if (cap && cap.method === 'POST')
+            return cap;
+    }
+    return undefined;
+}
+function summarizeCapture(cap, label) {
+    return {
+        label,
+        status: cap.status,
+        headers: cap.headers,
+        body: cap.body,
+        latencyMs: cap.latencyMs,
+        bodyTruncated: cap.bodyTruncated,
+    };
+}
+//# sourceMappingURL=uniformError.js.map

package/dist/lib/conformance/invariants/uniformError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniformError.js","sourceRoot":"","sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"names":[],"mappings":";AAAA,iEAAiE;AACjE,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,yBAAyB;AACzB,EAAE;AACF,sEAAsE;AACtE,4CAA4C;AAC5C,EAAE;AACF,iBAAiB;AACjB,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AACrE,oDAAoD;AACpD,mEAAmE;AACnE,4DAA4D;AAC5D,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,oBAAoB;;AAiHpB,oEAEC;AAgBD,4DA6DC;AA7LD,6CAAyC;AACzC,2EAAiG;AAEjG,qEAAqF;AAqDrF,MAAM,cAAc,GAAuD;IACzE,iBAAiB,EAAE;QACjB,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,UAAU;QACtB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KACtC;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;KAC3C;IACD,sBAAsB,EAAE;QACtB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,EAAE,CAAC,EAAE;YACjB,mEAAmE;YACnE,mEAAmE;YACnE,8DAA8D;YAC9D,yDAAyD;YACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACnE,CAAC;KACF;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,cAAc;QAC1B,YAAY,EAAE,EAAE,CAAC,EAAE;YACjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAClE,CAAC;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,UAAU;QACtB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KACtC;IACD,WAAW,EAAE;QACX,OAAO,EAAE,YAAY;QACrB,6DAA6D;QAC7D,iEAAiE;QACjE,8DAA8D;QAC9D,8DAA8D;QAC9D,+DAA+D;QAC/D,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACnB,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;SACrF,CAAC;KACH;CACF,CAAC;AAEF,6EAA6E;AAC7E,SAAgB,4BAA4B;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAA0B,CAAC;AAC9D,CAAC;AAgBM,KAAK,UAAU,wBAAwB,CAC5C,IAAyB,EACzB,OAAqB;IAErB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;YACjE,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,4BAA4B;SACzC,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,EAAE;IACF,mEAAmE;IACnE,sEAAsE;IACtE,+DAA+D;IAC/D,iEAAiE;IACjE,8DAA8D;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAA+B,OAAO,CAAC,qBAAqB,IAAI,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IAEjH,MAAM,GAAG,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAE,QAAmB,CAAC,CAAC,CAAC,IAAA,wBAAU,GAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAA,wBAAU,GAAE,CAAC;IACzB,MAAM,MAAM,GAA0B,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5F,MAAM,MAAM,GAA0B,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;IAE1F,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAE3D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;IAEhG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,+DAA+D;QAC/D,gEAAgE;QAChE,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACrE,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,wCAAwC,MAAM,GAAG;SAC9D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,sCAAa,EAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjE,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAChD,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE;YACN,qBAAqB,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;YAC/D,mBAAmB,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAkB,EAClB,IAAyB,EACzB,OAAgC,EAChC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,2CAAsB,EAAC,KAAK,IAAI,EAAE;YAC3D,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAmC;IAC1D,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAmB,EAAE,KAA4B;IACzE,OAAO;QACL,KAAK;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;AACJ,CAAC"}

package/dist/lib/conformance/invariants/uniformErrorComparator.d.ts

@@ -0,0 +1,8 @@
+import type { RawHttpCapture } from '../../protocols/rawResponseCapture';
+export interface ProbeComparisonResult {
+    equivalent: boolean;
+    differences: string[];
+    latencyDeltaMs: number;
+}
+export declare function compareProbes(a: RawHttpCapture, b: RawHttpCapture): ProbeComparisonResult;
+//# sourceMappingURL=uniformErrorComparator.d.ts.map

package/dist/lib/conformance/invariants/uniformErrorComparator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniformErrorComparator.d.ts","sourceRoot":"","sources":["../../../../src/lib/conformance/invariants/uniformErrorComparator.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAqED,wBAAgB,aAAa,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAezF"}