@adcp/sdk 6.0.0 → 6.2.0

package/dist/lib/protocols/responseSizeLimit.js

@@ -0,0 +1,141 @@
+"use strict";
+// Response-body byte cap enforcement for hostile-vendor protection.
+//
+// Wraps a base fetch with a streaming size counter so the SDK aborts large
+// responses before any application-layer parsing buffers them. Active when
+// `responseSizeLimitStorage` carries a slot — installed unconditionally as
+// the innermost transport wrapper so production callers without the slot
+// pay only one ALS lookup per request.
+//
+// The wrapper composes inside `wrapFetchWithCapture`: the diagnostic capture
+// reads the size-limited body via `response.clone()`, so a hostile reply
+// can't blow memory through the capture path either.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.responseSizeLimitStorage = void 0;
+exports.withResponseSizeLimit = withResponseSizeLimit;
+exports.wrapFetchWithSizeLimit = wrapFetchWithSizeLimit;
+const node_async_hooks_1 = require("node:async_hooks");
+const errors_1 = require("../errors");
+exports.responseSizeLimitStorage = new node_async_hooks_1.AsyncLocalStorage();
+/**
+ * Run `fn` with a response body byte cap active. Every fetch made through
+ * a wrapped transport inside `fn` aborts with `ResponseTooLargeError` when
+ * the response body exceeds `maxResponseBytes`. Non-positive caps disable
+ * enforcement (ALS slot is not entered).
+ */
+function withResponseSizeLimit(maxResponseBytes, fn) {
+    if (!maxResponseBytes || !Number.isFinite(maxResponseBytes) || maxResponseBytes <= 0) {
+        return fn();
+    }
+    return exports.responseSizeLimitStorage.run({ maxResponseBytes }, fn);
+}
+function urlOfInput(input) {
+    if (typeof input === 'string')
+        return input;
+    if (input instanceof URL)
+        return input.toString();
+    return input.url;
+}
+/**
+ * Strip the search component from a URL before storing it on
+ * `ResponseTooLargeError`. Some agents publish manifests with auth tokens
+ * in the query string (`?api_key=…`); without redaction those land in
+ * `err.message`, `err.details.url`, and downstream log sinks.
+ *
+ * Returns the input unchanged when it can't be parsed (relative paths,
+ * non-URL inputs from custom test stubs) — the alternative is throwing,
+ * which would mask the original `ResponseTooLargeError`.
+ */
+function redactUrlForError(url) {
+    try {
+        const parsed = new URL(url);
+        parsed.search = '';
+        return parsed.toString();
+    }
+    catch {
+        return url;
+    }
+}
+/**
+ * Force `Accept-Encoding: identity` on outgoing requests when the size cap
+ * is active. Without this, undici sets `Accept-Encoding: gzip, deflate, br`
+ * by default and decompresses the body before our counter sees it — a
+ * hostile vendor can ship a 5 KB gzip blob that decompresses to GBs and
+ * costs the attacker nothing for asymmetric CPU burn before the cap fires.
+ * Forcing identity removes the asymmetry: the bomb has to be sent on the
+ * wire at full size, where `Content-Length` pre-check catches it.
+ *
+ * No-op when the caller already set their own `Accept-Encoding` (signing
+ * fetch may need a specific value to keep the signed bytes stable).
+ */
+function withIdentityEncoding(init) {
+    const headers = new Headers(init?.headers);
+    if (!headers.has('accept-encoding')) {
+        headers.set('accept-encoding', 'identity');
+    }
+    return { ...(init ?? {}), headers };
+}
+/**
+ * Wrap a fetch implementation so its responses honor the size cap from the
+ * active `responseSizeLimitStorage` slot. Pass-through when no slot is set.
+ *
+ * Pre-checks `Content-Length` and refuses to read the body when the declared
+ * size already exceeds the cap. Otherwise wraps `Response.body` in a
+ * `TransformStream` that counts bytes and errors with `ResponseTooLargeError`
+ * at the cap boundary, propagating to anyone reading the response (including
+ * `Response.clone()` branches used by the diagnostic capture wrapper).
+ */
+function wrapFetchWithSizeLimit(upstream) {
+    const wrapped = async (input, init) => {
+        const slot = exports.responseSizeLimitStorage.getStore();
+        if (!slot)
+            return upstream(input, init);
+        const response = await upstream(input, withIdentityEncoding(init));
+        return enforceSizeLimit(response, slot.maxResponseBytes, redactUrlForError(urlOfInput(input)));
+    };
+    return wrapped;
+}
+function enforceSizeLimit(response, maxBytes, url) {
+    // Cheap pre-check: if the server declares a Content-Length over the cap,
+    // tear the connection down before reading any of the body. Servers can
+    // omit or lie about Content-Length, which is why the streaming counter
+    // below is the authoritative enforcement.
+    const declared = parseContentLength(response.headers.get('content-length'));
+    if (declared !== undefined && declared > maxBytes) {
+        // Best-effort cancel so the runtime can release the socket. We swallow
+        // any rejection because the typed `ResponseTooLargeError` below is the
+        // signal the caller acts on — a `cancel()` rejection here would only
+        // happen if the body stream is already errored / locked, in which case
+        // the socket is already on its way down and there's nothing to recover.
+        response.body?.cancel().catch(() => { });
+        throw new errors_1.ResponseTooLargeError(maxBytes, 0, url, declared);
+    }
+    if (!response.body)
+        return response;
+    let bytesRead = 0;
+    const counter = new TransformStream({
+        transform(chunk, controller) {
+            bytesRead += chunk.byteLength;
+            if (bytesRead > maxBytes) {
+                controller.error(new errors_1.ResponseTooLargeError(maxBytes, bytesRead, url));
+                return;
+            }
+            controller.enqueue(chunk);
+        },
+    });
+    return new Response(response.body.pipeThrough(counter), {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers,
+    });
+}
+function parseContentLength(value) {
+    if (value === null)
+        return undefined;
+    const trimmed = value.trim();
+    if (!/^\d+$/.test(trimmed))
+        return undefined;
+    const parsed = Number(trimmed);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+//# sourceMappingURL=responseSizeLimit.js.map

package/dist/lib/protocols/responseSizeLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responseSizeLimit.js","sourceRoot":"","sources":["../../../src/lib/protocols/responseSizeLimit.ts"],"names":[],"mappings":";AAAA,oEAAoE;AACpE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,uCAAuC;AACvC,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,qDAAqD;;;AAiBrD,sDAKC;AA0DD,wDASC;AAvFD,uDAAqD;AACrD,sCAAkD;AAMrC,QAAA,wBAAwB,GAAG,IAAI,oCAAiB,EAAiB,CAAC;AAE/E;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAI,gBAAoC,EAAE,EAAoB;IACjG,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IACD,OAAO,gCAAwB,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClD,OAAO,KAAK,CAAC,GAAG,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,oBAAoB,CAAC,IAA6B;IACzD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAAC,QAAsB;IAC3D,MAAM,OAAO,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,gCAAwB,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,OAAO,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB,EAAE,QAAgB,EAAE,GAAW;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAClD,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,8BAAqB,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAEpC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,eAAe,CAAyB;QAC1D,SAAS,CAAC,KAAK,EAAE,UAAU;YACzB,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACzB,UAAU,CAAC,KAAK,CAAC,IAAI,8BAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YACD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;QACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAoB;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -0,0 +1,8 @@
+{
+  "source_repo": "adcontextprotocol/adcp",
+  "source_branch": "2.5-maintenance",
+  "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
+  "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
+  "upstream_adcp_version": "2.5.3",
+  "synced_at": "2026-05-01T11:46:06.203Z"
+}

package/dist/lib/schemas-data/v2.5/adagents.json

@@ -0,0 +1,494 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "/schemas/adagents.json",
+  "title": "Authorized Sales Agents",
+  "description": "Declaration of authorized sales agents for advertising inventory. Hosted at /.well-known/adagents.json on publisher domains. Can either contain the full structure inline or reference an authoritative URL.",
+  "oneOf": [
+    {
+      "type": "object",
+      "description": "URL reference variant - points to the authoritative location of the adagents.json file",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "description": "JSON Schema identifier for this adagents.json file"
+        },
+        "authoritative_location": {
+          "type": "string",
+          "format": "uri",
+          "pattern": "^https://",
+          "description": "HTTPS URL of the authoritative adagents.json file. When present, this file is a reference and the authoritative location contains the actual agent authorization data."
+        },
+        "last_updated": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp indicating when this reference was last updated"
+        }
+      },
+      "required": [
+        "authoritative_location"
+      ],
+      "additionalProperties": true
+    },
+    {
+      "type": "object",
+      "description": "Inline structure variant - contains full agent authorization data",
+      "properties": {
+        "$schema": {
+          "type": "string",
+          "description": "JSON Schema identifier for this adagents.json file"
+        },
+        "contact": {
+          "type": "object",
+          "description": "Contact information for the entity managing this adagents.json file (may be publisher or third-party operator)",
+          "properties": {
+            "name": {
+              "type": "string",
+              "description": "Name of the entity managing this file (e.g., 'Meta Advertising Operations', 'Clear Channel Digital')",
+              "minLength": 1,
+              "maxLength": 255
+            },
+            "email": {
+              "type": "string",
+              "format": "email",
+              "description": "Contact email for questions or issues with this authorization file",
+              "minLength": 1,
+              "maxLength": 255
+            },
+            "domain": {
+              "type": "string",
+              "description": "Primary domain of the entity managing this file",
+              "pattern": "^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$"
+            },
+            "seller_id": {
+              "type": "string",
+              "description": "Seller ID from IAB Tech Lab sellers.json (if applicable)",
+              "minLength": 1,
+              "maxLength": 255
+            },
+            "tag_id": {
+              "type": "string",
+              "description": "TAG Certified Against Fraud ID for verification (if applicable)",
+              "minLength": 1,
+              "maxLength": 100
+            }
+          },
+          "required": [
+            "name"
+          ],
+          "additionalProperties": true
+        },
+        "properties": {
+          "type": "array",
+          "description": "Array of all properties covered by this adagents.json file. Defines the canonical property list that authorized agents reference.",
+          "items": {
+            "$ref": "/schemas/core/property.json"
+          },
+          "minItems": 1
+        },
+        "tags": {
+          "type": "object",
+          "description": "Metadata for each tag referenced by properties. Provides human-readable context for property tag values.",
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "description": "Human-readable name for this tag"
+              },
+              "description": {
+                "type": "string",
+                "description": "Description of what this tag represents"
+              }
+            },
+            "required": [
+              "name",
+              "description"
+            ],
+            "additionalProperties": true
+          }
+        },
+        "authorized_agents": {
+          "type": "array",
+          "description": "Array of sales agents authorized to sell inventory for properties in this file",
+          "items": {
+            "oneOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "url": {
+                    "type": "string",
+                    "format": "uri",
+                    "description": "The authorized agent's API endpoint URL"
+                  },
+                  "authorized_for": {
+                    "type": "string",
+                    "description": "Human-readable description of what this agent is authorized to sell",
+                    "minLength": 1,
+                    "maxLength": 500
+                  },
+                  "authorization_type": {
+                    "type": "string",
+                    "const": "property_ids",
+                    "description": "Discriminator indicating authorization by specific property IDs"
+                  },
+                  "property_ids": {
+                    "type": "array",
+                    "description": "Property IDs this agent is authorized for. Resolved against the top-level properties array in this file",
+                    "items": {
+                      "$ref": "/schemas/core/property-id.json"
+                    },
+                    "minItems": 1
+                  }
+                },
+                "required": [
+                  "url",
+                  "authorized_for",
+                  "authorization_type",
+                  "property_ids"
+                ],
+                "additionalProperties": true
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "url": {
+                    "type": "string",
+                    "format": "uri",
+                    "description": "The authorized agent's API endpoint URL"
+                  },
+                  "authorized_for": {
+                    "type": "string",
+                    "description": "Human-readable description of what this agent is authorized to sell",
+                    "minLength": 1,
+                    "maxLength": 500
+                  },
+                  "authorization_type": {
+                    "type": "string",
+                    "const": "property_tags",
+                    "description": "Discriminator indicating authorization by property tags"
+                  },
+                  "property_tags": {
+                    "type": "array",
+                    "description": "Tags identifying which properties this agent is authorized for. Resolved against the top-level properties array in this file using tag matching",
+                    "items": {
+                      "$ref": "/schemas/core/property-tag.json"
+                    },
+                    "minItems": 1
+                  }
+                },
+                "required": [
+                  "url",
+                  "authorized_for",
+                  "authorization_type",
+                  "property_tags"
+                ],
+                "additionalProperties": true
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "url": {
+                    "type": "string",
+                    "format": "uri",
+                    "description": "The authorized agent's API endpoint URL"
+                  },
+                  "authorized_for": {
+                    "type": "string",
+                    "description": "Human-readable description of what this agent is authorized to sell",
+                    "minLength": 1,
+                    "maxLength": 500
+                  },
+                  "authorization_type": {
+                    "type": "string",
+                    "const": "inline_properties",
+                    "description": "Discriminator indicating authorization by inline property definitions"
+                  },
+                  "properties": {
+                    "type": "array",
+                    "description": "Specific properties this agent is authorized for (alternative to property_ids/property_tags)",
+                    "items": {
+                      "$ref": "/schemas/core/property.json"
+                    },
+                    "minItems": 1
+                  }
+                },
+                "required": [
+                  "url",
+                  "authorized_for",
+                  "authorization_type",
+                  "properties"
+                ],
+                "additionalProperties": true
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "url": {
+                    "type": "string",
+                    "format": "uri",
+                    "description": "The authorized agent's API endpoint URL"
+                  },
+                  "authorized_for": {
+                    "type": "string",
+                    "description": "Human-readable description of what this agent is authorized to sell",
+                    "minLength": 1,
+                    "maxLength": 500
+                  },
+                  "authorization_type": {
+                    "type": "string",
+                    "const": "publisher_properties",
+                    "description": "Discriminator indicating authorization for properties from other publisher domains"
+                  },
+                  "publisher_properties": {
+                    "type": "array",
+                    "description": "Properties from other publisher domains this agent is authorized for. Each entry specifies a publisher domain and which of their properties this agent can sell",
+                    "items": {
+                      "$ref": "/schemas/core/publisher-property-selector.json"
+                    },
+                    "minItems": 1
+                  }
+                },
+                "required": [
+                  "url",
+                  "authorized_for",
+                  "authorization_type",
+                  "publisher_properties"
+                ],
+                "additionalProperties": true
+              }
+            ]
+          },
+          "minItems": 1
+        },
+        "last_updated": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp indicating when this file was last updated"
+        }
+      },
+      "required": [
+        "authorized_agents"
+      ],
+      "additionalProperties": true
+    }
+  ],
+  "examples": [
+    {
+      "$schema": "/schemas/adagents.json",
+      "authoritative_location": "https://cdn.example.com/adagents/v2/adagents.json",
+      "last_updated": "2025-01-15T10:00:00Z"
+    },
+    {
+      "$schema": "/schemas/adagents.json",
+      "properties": [
+        {
+          "property_type": "website",
+          "name": "Example Site",
+          "identifiers": [
+            {
+              "type": "domain",
+              "value": "example.com"
+            }
+          ],
+          "publisher_domain": "example.com"
+        }
+      ],
+      "authorized_agents": [
+        {
+          "url": "https://agent.example.com",
+          "authorized_for": "Official sales agent",
+          "authorization_type": "property_tags",
+          "property_tags": [
+            "all"
+          ]
+        }
+      ],
+      "tags": {
+        "all": {
+          "name": "All Properties",
+          "description": "All properties in this file"
+        }
+      },
+      "last_updated": "2025-01-10T12:00:00Z"
+    },
+    {
+      "$schema": "/schemas/adagents.json",
+      "contact": {
+        "name": "Meta Advertising Operations",
+        "email": "adops@meta.com",
+        "domain": "meta.com",
+        "seller_id": "pub-meta-12345",
+        "tag_id": "12345"
+      },
+      "properties": [
+        {
+          "property_type": "mobile_app",
+          "name": "Instagram",
+          "identifiers": [
+            {
+              "type": "ios_bundle",
+              "value": "com.burbn.instagram"
+            },
+            {
+              "type": "android_package",
+              "value": "com.instagram.android"
+            }
+          ],
+          "tags": [
+            "meta_network",
+            "social_media"
+          ],
+          "publisher_domain": "instagram.com"
+        },
+        {
+          "property_type": "mobile_app",
+          "name": "Facebook",
+          "identifiers": [
+            {
+              "type": "ios_bundle",
+              "value": "com.facebook.Facebook"
+            },
+            {
+              "type": "android_package",
+              "value": "com.facebook.katana"
+            }
+          ],
+          "tags": [
+            "meta_network",
+            "social_media"
+          ],
+          "publisher_domain": "facebook.com"
+        },
+        {
+          "property_type": "mobile_app",
+          "name": "WhatsApp",
+          "identifiers": [
+            {
+              "type": "ios_bundle",
+              "value": "net.whatsapp.WhatsApp"
+            },
+            {
+              "type": "android_package",
+              "value": "com.whatsapp"
+            }
+          ],
+          "tags": [
+            "meta_network",
+            "messaging"
+          ],
+          "publisher_domain": "whatsapp.com"
+        }
+      ],
+      "tags": {
+        "meta_network": {
+          "name": "Meta Network",
+          "description": "All Meta-owned properties"
+        },
+        "social_media": {
+          "name": "Social Media Apps",
+          "description": "Social networking applications"
+        },
+        "messaging": {
+          "name": "Messaging Apps",
+          "description": "Messaging and communication apps"
+        }
+      },
+      "authorized_agents": [
+        {
+          "url": "https://meta-ads.com",
+          "authorized_for": "All Meta properties",
+          "authorization_type": "property_tags",
+          "property_tags": [
+            "meta_network"
+          ]
+        }
+      ],
+      "last_updated": "2025-01-10T15:30:00Z"
+    },
+    {
+      "$schema": "/schemas/adagents.json",
+      "contact": {
+        "name": "Tumblr Advertising"
+      },
+      "properties": [
+        {
+          "property_type": "website",
+          "name": "Tumblr Corporate",
+          "identifiers": [
+            {
+              "type": "domain",
+              "value": "tumblr.com"
+            }
+          ],
+          "tags": [
+            "corporate"
+          ],
+          "publisher_domain": "tumblr.com"
+        }
+      ],
+      "tags": {
+        "corporate": {
+          "name": "Corporate Properties",
+          "description": "Tumblr-owned corporate properties (not user blogs)"
+        }
+      },
+      "authorized_agents": [
+        {
+          "url": "https://tumblr-sales.com",
+          "authorized_for": "Tumblr corporate properties only",
+          "authorization_type": "property_tags",
+          "property_tags": [
+            "corporate"
+          ]
+        }
+      ],
+      "last_updated": "2025-01-10T16:00:00Z"
+    },
+    {
+      "$schema": "/schemas/adagents.json",
+      "contact": {
+        "name": "Example Third-Party Sales Agent",
+        "email": "sales@agent.example",
+        "domain": "agent.example"
+      },
+      "authorized_agents": [
+        {
+          "url": "https://agent.example/api",
+          "authorized_for": "CNN CTV properties via publisher authorization",
+          "authorization_type": "publisher_properties",
+          "publisher_properties": [
+            {
+              "publisher_domain": "cnn.com",
+              "selection_type": "by_id",
+              "property_ids": [
+                "cnn_ctv_app"
+              ]
+            }
+          ]
+        },
+        {
+          "url": "https://agent.example/api",
+          "authorized_for": "All CTV properties from multiple publishers",
+          "authorization_type": "publisher_properties",
+          "publisher_properties": [
+            {
+              "publisher_domain": "cnn.com",
+              "selection_type": "by_tag",
+              "property_tags": [
+                "ctv"
+              ]
+            },
+            {
+              "publisher_domain": "espn.com",
+              "selection_type": "by_tag",
+              "property_tags": [
+                "ctv"
+              ]
+            }
+          ]
+        }
+      ],
+      "last_updated": "2025-01-10T17:00:00Z"
+    }
+  ]
+}