@adcp/sdk 6.5.0 → 6.7.0

package/dist/lib/server/decisioning/tenant-store.d.ts

@@ -0,0 +1,200 @@
+/**
+ * `createTenantStore` — opinionated `AccountStore` builder for multi-tenant
+ * adapters. Canonicalizes the two-path resolution shape (operator-routed
+ * for tools that carry `account` on the wire; auth-derived for tools that
+ * don't) and bakes in the tenant-isolation gate that adopters historically
+ * had to write — and silently fail to write — by hand.
+ *
+ * Full walkthrough with same-tenant invariant + production caveats:
+ * `skills/build-holdco-agent/SKILL.md`. Worked example:
+ * `examples/hello_seller_adapter_multi_tenant.ts`.
+ *
+ * Status: Preview / 6.x.
+ *
+ * @public
+ */
+import type { ResolveContext, Account, AccountStore, SyncAccountsResultRow } from './account';
+import type { AccountReference, SyncGovernanceRequest, SyncGovernanceSuccess } from '../../types/tools.generated';
+type SyncGovernanceEntry = SyncGovernanceRequest['accounts'][number];
+type SyncGovernanceRow = SyncGovernanceSuccess['accounts'][number];
+/**
+ * Adopter contract for `createTenantStore`. Every callback is sync OR async;
+ * the helper awaits.
+ *
+ * Tenant isolation is enforced by comparing `tenantId(authTenant)` against
+ * `tenantId(entryTenant)` per-entry on `sync_accounts` / `sync_governance`.
+ * Mismatches produce a `'failed'` row with `code: 'PERMISSION_DENIED'` —
+ * the adopter's `upsertRow` / `syncGovernanceRow` callbacks NEVER see a
+ * cross-tenant entry. Fail-closed when `resolveFromAuth` returns null
+ * (unknown principal): every entry fails `PERMISSION_DENIED` regardless of
+ * its operator. Don't fork this around to fail-open — adopters who copied
+ * the prior fail-open shape (`if (homeTenantId && tenantId !== homeTenantId)`)
+ * silently disabled isolation when a credential lacked a tenant binding.
+ *
+ * @template TTenant Adopter's tenant model (e.g., `TenantState`, a row
+ *                   from a `tenants` table). Compared via `tenantId`,
+ *                   not by reference.
+ * @template TCtxMeta Shape of `Account.ctx_metadata`. Threads through to
+ *                    every specialism handler via `ctx.account.ctx_metadata`.
+ */
+export interface TenantStoreConfig<TTenant, TCtxMeta = Record<string, unknown>> {
+    /**
+     * Path 1: account ref carries `account_id` OR `(brand, operator)`.
+     * Resolve to the tenant the ref points at — independent of who the
+     * caller is. Return null if the ref is unknown (helper emits
+     * `ACCOUNT_NOT_FOUND` for that row).
+     *
+     * Receives the full `AccountReference` so adopters can route on
+     * `ref.sandbox` (Pattern 2: separate sandbox tenant) or read the
+     * `account_id` arm of the discriminated union.
+     */
+    resolveByRef(ref: AccountReference): TTenant | null | Promise<TTenant | null>;
+    /**
+     * Path 2: no account ref on the wire (`get_brand_identity`, `get_rights`,
+     * `provide_performance_feedback`, `list_creative_formats`). Derive the
+     * tenant from the auth principal. Return null if no principal is
+     * resolvable (no auth, no `agentRegistry`, principal not registered).
+     *
+     * Used by both `accounts.resolve(undefined, ctx)` (no-account tools)
+     * AND the tenant-isolation gate on per-entry tools — `null` here
+     * means EVERY entry on `sync_accounts` / `sync_governance` fails
+     * `PERMISSION_DENIED` (fail-closed).
+     */
+    resolveFromAuth(ctx: ResolveContext): TTenant | null | Promise<TTenant | null>;
+    /**
+     * Stable identity for tenant-equality checks. The helper compares
+     * `tenantId(authTenant) === tenantId(entryTenant)` to enforce isolation.
+     * Reference equality is fragile (Postgres-backed stores hand back fresh
+     * objects each fetch); a stable string id closes that gap.
+     */
+    tenantId(tenant: TTenant): string;
+    /**
+     * Project `(tenant, ref)` to the framework `Account<TCtxMeta>`. Called by
+     * `accounts.resolve` after tenant resolution. Adopters thread sandbox
+     * routing here (`sandbox: ref?.sandbox`), pin `ctx_metadata` for
+     * downstream handlers, and shape `name` / `operator` / `brand` to match
+     * the wire echo conventions their buyers expect.
+     *
+     * `ref` is `undefined` on Path-2 (no-account tools) — adopters returning
+     * a synthetic publisher-wide singleton omit `ref?.sandbox` (no sandbox
+     * boundary applies).
+     */
+    tenantToAccount(tenant: TTenant, ref: AccountReference | undefined, ctx: ResolveContext): Account<TCtxMeta> | Promise<Account<TCtxMeta>>;
+    /**
+     * Per-entry `sync_accounts` storage callback. Called for each entry whose
+     * `(authTenant === entryTenant)` check passed. Receives the resolved
+     * tenant + the original ref + ctx. Returns a `SyncAccountsResultRow`.
+     *
+     * Cross-tenant entries and unknown-ref entries never reach this callback
+     * — the helper builds `PERMISSION_DENIED` / `ACCOUNT_NOT_FOUND` rows for
+     * those before invoking your code. The adopter's only job is the actual
+     * upsert.
+     *
+     * Optional. Omit if your platform doesn't claim `sync_accounts`; the
+     * helper leaves `accounts.upsert` undefined and the framework returns
+     * `UNSUPPORTED_FEATURE`.
+     */
+    upsertRow?(tenant: TTenant, ref: AccountReference, ctx: ResolveContext): SyncAccountsResultRow | Promise<SyncAccountsResultRow>;
+    /**
+     * Per-entry `sync_governance` storage callback. Same gating rules as
+     * `upsertRow` — cross-tenant entries are rejected before reaching this
+     * code. Adopters persist the buyer's governance-agent binding (including
+     * write-only `authentication.credentials`, which the framework strips
+     * from the response automatically — see `toWireSyncGovernanceRow`).
+     *
+     * Optional. Omit if your platform doesn't claim `sync_governance`.
+     */
+    syncGovernanceRow?(tenant: TTenant, entry: SyncGovernanceEntry, ctx: ResolveContext): SyncGovernanceRow | Promise<SyncGovernanceRow>;
+}
+/**
+ * Build an `AccountStore<TCtxMeta>` whose `resolve` / `upsert` /
+ * `syncGovernance` methods enforce tenant isolation.
+ *
+ * The helper produces:
+ *
+ * - `accounts.resolve(ref, ctx)` — calls `resolveByRef(ref)` when `ref` is
+ *   set, otherwise `resolveFromAuth(ctx)`. Projects via `tenantToAccount`.
+ *   Returns `null` if the resolver returned `null` (framework emits
+ *   `ACCOUNT_NOT_FOUND` for tools that require an account, or treats
+ *   absence as "no tenant" for tools that don't).
+ *
+ * - `accounts.upsert(refs, ctx)` — for each ref:
+ *     1. Resolve the entry's tenant via `resolveByRef`.
+ *     2. Resolve the auth principal's tenant via `resolveFromAuth(ctx)`
+ *        (computed once per request).
+ *     3. If the entry tenant is unknown, emit `ACCOUNT_NOT_FOUND`.
+ *     4. If the auth tenant is unknown OR differs from the entry tenant,
+ *        emit `PERMISSION_DENIED` (fail-closed).
+ *     5. Otherwise, invoke the adopter's `upsertRow`.
+ *
+ * - `accounts.syncGovernance(entries, ctx)` — same gating as `upsert`,
+ *   shaped for the `SyncGovernanceResponseRow` arm (`status: 'failed'`
+ *   with per-entry `errors`).
+ *
+ * `accounts.list` and `accounts.reportUsage` / `accounts.getAccountFinancials`
+ * are NOT generated by this helper — those tools have shapes (cursor
+ * pagination; per-row account refs spanning multiple tenants in
+ * `report_usage`) that don't fit the per-entry-then-row pattern. Adopters
+ * who claim those capabilities extend the returned store with
+ * `Object.assign`:
+ *
+ * ```ts
+ * const accounts = Object.assign(
+ *   createTenantStore<TenantState, TenantMeta>({...}),
+ *   { list: async (filter, ctx) => { ... } }
+ * );
+ * ```
+ *
+ * **Direct mutation of `upsert` / `syncGovernance` is locked.** The helper
+ * makes those properties non-writable (`Object.defineProperty`) so an
+ * adopter who writes `accounts.upsert = customHandler` after construction
+ * gets a TypeError instead of silently bypassing the tenant gate. If you
+ * really need a different `upsert`, don't use the helper — write a plain
+ * `AccountStore` and own the gate.
+ */
+export declare function createTenantStore<TTenant, TCtxMeta = Record<string, unknown>>(config: TenantStoreConfig<TTenant, TCtxMeta>): AccountStore<TCtxMeta>;
+/**
+ * Read fields from an `AccountReference` without per-arm narrowing. The wire
+ * type is a discriminated union (`{account_id} | {brand, operator}`) — schema
+ * validation upstream guarantees one arm is populated, so widening to an
+ * all-optional record is safe and saves a `'in' ref ? ref.x : fallback` dance
+ * inside `tenantToAccount` / `resolveByRef` / failed-row builders.
+ *
+ * Use inside adopter `createTenantStore({...})` callbacks to read
+ * `ref.operator`, `ref.brand?.domain`, or `ref.account_id` without inline
+ * casts. This is the same helper the framework uses internally for its
+ * `PERMISSION_DENIED` / `ACCOUNT_NOT_FOUND` row construction.
+ *
+ * ```ts
+ * tenantToAccount: (tenant, ref, ctx) => {
+ *   const r = narrowAccountRef(ref);
+ *   return {
+ *     id: tenant.id,
+ *     operator: r?.operator ?? ctx?.agent?.agent_url ?? 'derived',
+ *     ...(r?.brand?.domain && { brand: { domain: r.brand.domain } }),
+ *
+ *   };
+ * }
+ * ```
+ *
+ * Returns `undefined` on `undefined` input — the no-account-tool path.
+ */
+export declare function narrowAccountRef(ref: AccountReference): {
+    account_id?: string;
+    operator?: string;
+    brand?: {
+        domain?: string;
+    };
+    sandbox?: boolean;
+};
+export declare function narrowAccountRef(ref: undefined): undefined;
+export declare function narrowAccountRef(ref: AccountReference | undefined): {
+    account_id?: string;
+    operator?: string;
+    brand?: {
+        domain?: string;
+    };
+    sandbox?: boolean;
+} | undefined;
+export {};
+//# sourceMappingURL=tenant-store.d.ts.map

package/dist/lib/server/decisioning/tenant-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-store.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/tenant-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAElH,KAAK,mBAAmB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,KAAK,iBAAiB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC5E;;;;;;;;;OASG;IACH,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE9E;;;;;;;;;;OAUG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE/E;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAElC;;;;;;;;;;OAUG;IACH,eAAe,CACb,MAAM,EAAE,OAAO,EACf,GAAG,EAAE,gBAAgB,GAAG,SAAS,EACjC,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAElD;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,CACR,MAAM,EAAE,OAAO,EACf,GAAG,EAAE,gBAAgB,EACrB,GAAG,EAAE,cAAc,GAClB,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE1D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,CAChB,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,mBAAmB,EAC1B,GAAG,EAAE,cAAc,GAClB,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3E,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,GAC3C,YAAY,CAAC,QAAQ,CAAC,CAyExB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AACF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,CAAC;AAC5D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,GAC9D;IACE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACD,SAAS,CAAC"}

package/dist/lib/server/decisioning/tenant-store.js

@@ -0,0 +1,182 @@
+"use strict";
+/**
+ * `createTenantStore` — opinionated `AccountStore` builder for multi-tenant
+ * adapters. Canonicalizes the two-path resolution shape (operator-routed
+ * for tools that carry `account` on the wire; auth-derived for tools that
+ * don't) and bakes in the tenant-isolation gate that adopters historically
+ * had to write — and silently fail to write — by hand.
+ *
+ * Full walkthrough with same-tenant invariant + production caveats:
+ * `skills/build-holdco-agent/SKILL.md`. Worked example:
+ * `examples/hello_seller_adapter_multi_tenant.ts`.
+ *
+ * Status: Preview / 6.x.
+ *
+ * @public
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTenantStore = createTenantStore;
+exports.narrowAccountRef = narrowAccountRef;
+/**
+ * Build an `AccountStore<TCtxMeta>` whose `resolve` / `upsert` /
+ * `syncGovernance` methods enforce tenant isolation.
+ *
+ * The helper produces:
+ *
+ * - `accounts.resolve(ref, ctx)` — calls `resolveByRef(ref)` when `ref` is
+ *   set, otherwise `resolveFromAuth(ctx)`. Projects via `tenantToAccount`.
+ *   Returns `null` if the resolver returned `null` (framework emits
+ *   `ACCOUNT_NOT_FOUND` for tools that require an account, or treats
+ *   absence as "no tenant" for tools that don't).
+ *
+ * - `accounts.upsert(refs, ctx)` — for each ref:
+ *     1. Resolve the entry's tenant via `resolveByRef`.
+ *     2. Resolve the auth principal's tenant via `resolveFromAuth(ctx)`
+ *        (computed once per request).
+ *     3. If the entry tenant is unknown, emit `ACCOUNT_NOT_FOUND`.
+ *     4. If the auth tenant is unknown OR differs from the entry tenant,
+ *        emit `PERMISSION_DENIED` (fail-closed).
+ *     5. Otherwise, invoke the adopter's `upsertRow`.
+ *
+ * - `accounts.syncGovernance(entries, ctx)` — same gating as `upsert`,
+ *   shaped for the `SyncGovernanceResponseRow` arm (`status: 'failed'`
+ *   with per-entry `errors`).
+ *
+ * `accounts.list` and `accounts.reportUsage` / `accounts.getAccountFinancials`
+ * are NOT generated by this helper — those tools have shapes (cursor
+ * pagination; per-row account refs spanning multiple tenants in
+ * `report_usage`) that don't fit the per-entry-then-row pattern. Adopters
+ * who claim those capabilities extend the returned store with
+ * `Object.assign`:
+ *
+ * ```ts
+ * const accounts = Object.assign(
+ *   createTenantStore<TenantState, TenantMeta>({...}),
+ *   { list: async (filter, ctx) => { ... } }
+ * );
+ * ```
+ *
+ * **Direct mutation of `upsert` / `syncGovernance` is locked.** The helper
+ * makes those properties non-writable (`Object.defineProperty`) so an
+ * adopter who writes `accounts.upsert = customHandler` after construction
+ * gets a TypeError instead of silently bypassing the tenant gate. If you
+ * really need a different `upsert`, don't use the helper — write a plain
+ * `AccountStore` and own the gate.
+ */
+function createTenantStore(config) {
+    const store = {
+        resolve: async (ref, ctx) => {
+            const resolveCtx = ctx ?? {};
+            const tenant = ref ? await config.resolveByRef(ref) : await config.resolveFromAuth(resolveCtx);
+            if (tenant == null)
+                return null;
+            return await config.tenantToAccount(tenant, ref, resolveCtx);
+        },
+    };
+    if (config.upsertRow) {
+        const upsertRow = config.upsertRow;
+        const upsert = async (refs, ctx) => {
+            const resolveCtx = ctx ?? {};
+            const authTenant = await config.resolveFromAuth(resolveCtx);
+            const authTenantKey = authTenant != null ? config.tenantId(authTenant) : undefined;
+            // Sequential, not Promise.all: adopter `upsertRow` callbacks
+            // commonly mutate shared tenant state (the multi-tenant adapter's
+            // `tenant.accounts.set(...)` is the canonical example). Concurrent
+            // invocations against the same tenant are an entropy source the
+            // helper shouldn't introduce. Adopters who want parallel writes
+            // can fan out inside their callback against an upstream that
+            // tolerates it.
+            const rows = [];
+            for (const ref of refs) {
+                const entryTenant = await config.resolveByRef(ref);
+                if (entryTenant == null) {
+                    rows.push(buildSyncAccountsFailedRow(ref, 'ACCOUNT_NOT_FOUND', accountNotFoundMessage(ref)));
+                    continue;
+                }
+                const entryKey = config.tenantId(entryTenant);
+                if (authTenantKey == null || authTenantKey !== entryKey) {
+                    rows.push(buildSyncAccountsFailedRow(ref, 'PERMISSION_DENIED', permissionDeniedMessage(ref)));
+                    continue;
+                }
+                rows.push(await upsertRow(entryTenant, ref, resolveCtx));
+            }
+            return rows;
+        };
+        Object.defineProperty(store, 'upsert', { value: upsert, writable: false, configurable: false, enumerable: true });
+    }
+    if (config.syncGovernanceRow) {
+        const syncGovernanceRow = config.syncGovernanceRow;
+        const syncGovernance = async (entries, ctx) => {
+            const resolveCtx = ctx ?? {};
+            const authTenant = await config.resolveFromAuth(resolveCtx);
+            const authTenantKey = authTenant != null ? config.tenantId(authTenant) : undefined;
+            const rows = [];
+            for (const entry of entries) {
+                const entryTenant = await config.resolveByRef(entry.account);
+                if (entryTenant == null) {
+                    rows.push(buildSyncGovernanceFailedRow(entry, 'ACCOUNT_NOT_FOUND', accountNotFoundMessage(entry.account)));
+                    continue;
+                }
+                const entryKey = config.tenantId(entryTenant);
+                if (authTenantKey == null || authTenantKey !== entryKey) {
+                    rows.push(buildSyncGovernanceFailedRow(entry, 'PERMISSION_DENIED', permissionDeniedMessage(entry.account)));
+                    continue;
+                }
+                rows.push(await syncGovernanceRow(entryTenant, entry, resolveCtx));
+            }
+            return rows;
+        };
+        Object.defineProperty(store, 'syncGovernance', {
+            value: syncGovernance,
+            writable: false,
+            configurable: false,
+            enumerable: true,
+        });
+    }
+    return store;
+}
+function narrowAccountRef(ref) {
+    if (ref === undefined)
+        return undefined;
+    return ref;
+}
+/**
+ * Build a failed `sync_accounts` row when the helper rejects an entry
+ * (cross-tenant or unknown ref). The wire schema requires `brand` +
+ * `operator` on every row, so when the input ref is `account_id`-only
+ * we synthesize `'unknown'` placeholders — the buyer's `errors[0].code`
+ * is the actionable signal; `brand` / `operator` here are wire-required
+ * scaffolding, not authoritative echoes.
+ */
+function buildSyncAccountsFailedRow(ref, code, message) {
+    const r = narrowAccountRef(ref);
+    return {
+        brand: { domain: r.brand?.domain ?? 'unknown.example' },
+        operator: r.operator ?? 'unknown',
+        action: 'failed',
+        status: 'rejected',
+        errors: [{ code, message }],
+        ...(r.account_id != null && { account_id: r.account_id }),
+    };
+}
+function buildSyncGovernanceFailedRow(entry, code, message) {
+    return {
+        account: entry.account,
+        status: 'failed',
+        errors: [{ code, message }],
+    };
+}
+function accountNotFoundMessage(ref) {
+    const r = narrowAccountRef(ref);
+    if (r.account_id)
+        return `Unknown account_id: ${r.account_id}`;
+    if (r.operator)
+        return `Unknown operator: ${r.operator}`;
+    return 'Unknown account reference';
+}
+function permissionDeniedMessage(ref) {
+    const r = narrowAccountRef(ref);
+    const subject = r.operator ?? r.account_id ?? 'this account';
+    return `Buyer agent has no authority over '${subject}' (tenant mismatch or auth principal not registered).`;
+}
+//# sourceMappingURL=tenant-store.js.map

package/dist/lib/server/decisioning/tenant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-store.js","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/tenant-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAiKH,8CA2EC;AA2CD,4CAKC;AAzKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,SAAgB,iBAAiB,CAC/B,MAA4C;IAE5C,MAAM,KAAK,GAA2B;QACpC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,UAAU,GAAG,GAAG,IAAI,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC/F,IAAI,MAAM,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,MAAM,GAAkD,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAChF,MAAM,UAAU,GAAG,GAAG,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,aAAa,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,6DAA6D;YAC7D,kEAAkE;YAClE,mEAAmE;YACnE,gEAAgE;YAChE,gEAAgE;YAChE,6DAA6D;YAC7D,gBAAgB;YAChB,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7F,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC9C,IAAI,aAAa,IAAI,IAAI,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;oBACxD,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC9F,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnD,MAAM,cAAc,GAA0D,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACnG,MAAM,UAAU,GAAG,GAAG,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,aAAa,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,IAAI,GAAwB,EAAE,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7D,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC3G,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC9C,IAAI,aAAa,IAAI,IAAI,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;oBACxD,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC5G,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB,EAAE;YAC7C,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AA2CD,SAAgB,gBAAgB,CAC9B,GAAiC;IAEjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,GAAiG,CAAC;AAC3G,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CACjC,GAAqB,EACrB,IAA+C,EAC/C,OAAe;IAEf,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,iBAAiB,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS;QACjC,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,KAA0B,EAC1B,IAA+C,EAC/C,OAAe;IAEf,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAqB;IACnD,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,uBAAuB,CAAC,CAAC,UAAU,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAqB;IACpD,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,cAAc,CAAC;IAC7D,OAAO,sCAAsC,OAAO,uDAAuD,CAAC;AAC9G,CAAC"}

package/dist/lib/server/decisioning/validate-specialisms.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Runtime validation for specialism→required-tools coverage.
+ *
+ * When an adopter declares a specialism in `capabilities.specialisms[]`, the
+ * AdCP spec implies the agent supports every tool in that specialism's
+ * required-tool list (per `manifest.specialisms[*].required_tools` —
+ * `SPECIALISM_REQUIRED_TOOLS` in `manifest.generated.ts`). This module checks
+ * that the adopter's platform object exposes a method matching every required
+ * tool, and emits actionable warnings (or throws under strict mode) when
+ * something's missing.
+ *
+ * The check is **method-presence anywhere on the platform**, not method-on-
+ * specific-field. Required tools can span platform fields (`sync_accounts`
+ * lives on `accounts`, not on the specialism's primary platform field), and
+ * the SDK doesn't enforce a 1:1 specialism→field mapping. The looser check
+ * catches the common adopter mistake (forgot to implement) without
+ * false-positives on legitimate layout choices.
+ *
+ * Tracked: adcp-client#1192 (manifest adoption) → #1299 (stage 3).
+ *
+ * Companion to the build-time type-check fixture at
+ * `src/lib/server/decisioning/specialism-required-tools.type-checks.ts`,
+ * which catches the inverse failure mode (SDK's hand-maintained platform
+ * interfaces drifting away from manifest's required-tools contract).
+ */
+/**
+ * Convert a snake_case tool name to its expected camelCase platform method
+ * name. The transform is mechanical — every required tool in 3.0.4 follows
+ * this convention. If a future spec introduces a tool whose canonical method
+ * name diverges (e.g., the kebab segment maps to an acronym), add an
+ * override here rather than reaching for a more elaborate mapping table.
+ */
+export declare function toolNameToMethodName(tool: string): string;
+interface ValidatorIssue {
+    specialism: string;
+    tool: string;
+    method: string;
+}
+/**
+ * Validate that `platform` exposes a method for every required tool of every
+ * declared specialism. Returns the list of missing (specialism, tool, method)
+ * triples. Callers decide whether to warn or throw — `createAdcpServer`
+ * defaults to console.warn for ergonomic dev feedback; opt in via the
+ * `strictSpecialismValidation` config flag to escalate.
+ *
+ * Specialisms not present in `SPECIALISM_REQUIRED_TOOLS` (preview-only or
+ * not yet enumerated by the manifest) are silently passed — the manifest is
+ * the source of truth, and a missing entry there means the spec hasn't yet
+ * formalized the required tools for that specialism.
+ *
+ * The optional `requiredToolsLookup` parameter exists for testing — production
+ * callers omit it and get the manifest-derived `SPECIALISM_REQUIRED_TOOLS`.
+ * Tests can inject synthetic data so the validator's behavior can be exercised
+ * even when the manifest's `required_tools` field is empty (3.0.4 ships every
+ * specialism with `required_tools: []` per spec; coverage activates when the
+ * spec authors populate the field).
+ */
+export declare function validateSpecialismRequiredTools(platform: unknown, specialisms: readonly string[] | undefined, requiredToolsLookup?: Record<string, readonly string[] | undefined>): ValidatorIssue[];
+/**
+ * Format a single issue as a human-readable warning line. The format names
+ * the specialism, the missing tool, and the method an adopter should
+ * implement, so the dev fix is obvious from the log.
+ */
+export declare function formatSpecialismIssue(issue: ValidatorIssue): string;
+export {};
+//# sourceMappingURL=validate-specialisms.d.ts.map

package/dist/lib/server/decisioning/validate-specialisms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-specialisms.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/validate-specialisms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,OAAO,EACjB,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,mBAAmB,GAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAA6B,GAC7F,cAAc,EAAE,CAclB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAQnE"}

package/dist/lib/server/decisioning/validate-specialisms.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Runtime validation for specialism→required-tools coverage.
+ *
+ * When an adopter declares a specialism in `capabilities.specialisms[]`, the
+ * AdCP spec implies the agent supports every tool in that specialism's
+ * required-tool list (per `manifest.specialisms[*].required_tools` —
+ * `SPECIALISM_REQUIRED_TOOLS` in `manifest.generated.ts`). This module checks
+ * that the adopter's platform object exposes a method matching every required
+ * tool, and emits actionable warnings (or throws under strict mode) when
+ * something's missing.
+ *
+ * The check is **method-presence anywhere on the platform**, not method-on-
+ * specific-field. Required tools can span platform fields (`sync_accounts`
+ * lives on `accounts`, not on the specialism's primary platform field), and
+ * the SDK doesn't enforce a 1:1 specialism→field mapping. The looser check
+ * catches the common adopter mistake (forgot to implement) without
+ * false-positives on legitimate layout choices.
+ *
+ * Tracked: adcp-client#1192 (manifest adoption) → #1299 (stage 3).
+ *
+ * Companion to the build-time type-check fixture at
+ * `src/lib/server/decisioning/specialism-required-tools.type-checks.ts`,
+ * which catches the inverse failure mode (SDK's hand-maintained platform
+ * interfaces drifting away from manifest's required-tools contract).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toolNameToMethodName = toolNameToMethodName;
+exports.validateSpecialismRequiredTools = validateSpecialismRequiredTools;
+exports.formatSpecialismIssue = formatSpecialismIssue;
+const manifest_generated_1 = require("../../types/manifest.generated");
+/**
+ * Convert a snake_case tool name to its expected camelCase platform method
+ * name. The transform is mechanical — every required tool in 3.0.4 follows
+ * this convention. If a future spec introduces a tool whose canonical method
+ * name diverges (e.g., the kebab segment maps to an acronym), add an
+ * override here rather than reaching for a more elaborate mapping table.
+ */
+function toolNameToMethodName(tool) {
+    return tool.replace(/_([a-z])/g, (_, c) => c.toUpperCase());
+}
+/**
+ * Walk the platform object's top-level fields and check whether any field
+ * exposes a callable property matching `methodName`. Returns true on first
+ * match. The platform layout is adopter-controlled — we look across every
+ * field rather than mapping tool→field upfront.
+ *
+ * **Top-level functions on the platform root are NOT searched.** The SDK
+ * convention is sub-platform fields (`{ sales: SalesPlatform, accounts:
+ * AccountsPlatform, ... }`), and a future adopter who tries
+ * `{ getProducts: () => ... }` directly on the root would get a confusing
+ * warning. If that pattern needs supporting, extend the loop to also check
+ * `typeof (platform as any)[methodName] === 'function'` — but the
+ * non-conventional layout test (`single mega-platform exposes all methods`
+ * in `validate-specialisms.test.js`) already covers the alternative
+ * single-field-of-everything pattern, which is the legitimate flat-layout
+ * case adopters might choose.
+ */
+function hasMethodAnywhere(platform, methodName) {
+    if (!platform || typeof platform !== 'object')
+        return false;
+    for (const value of Object.values(platform)) {
+        if (value && typeof value === 'object') {
+            const method = value[methodName];
+            if (typeof method === 'function')
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Validate that `platform` exposes a method for every required tool of every
+ * declared specialism. Returns the list of missing (specialism, tool, method)
+ * triples. Callers decide whether to warn or throw — `createAdcpServer`
+ * defaults to console.warn for ergonomic dev feedback; opt in via the
+ * `strictSpecialismValidation` config flag to escalate.
+ *
+ * Specialisms not present in `SPECIALISM_REQUIRED_TOOLS` (preview-only or
+ * not yet enumerated by the manifest) are silently passed — the manifest is
+ * the source of truth, and a missing entry there means the spec hasn't yet
+ * formalized the required tools for that specialism.
+ *
+ * The optional `requiredToolsLookup` parameter exists for testing — production
+ * callers omit it and get the manifest-derived `SPECIALISM_REQUIRED_TOOLS`.
+ * Tests can inject synthetic data so the validator's behavior can be exercised
+ * even when the manifest's `required_tools` field is empty (3.0.4 ships every
+ * specialism with `required_tools: []` per spec; coverage activates when the
+ * spec authors populate the field).
+ */
+function validateSpecialismRequiredTools(platform, specialisms, requiredToolsLookup = manifest_generated_1.SPECIALISM_REQUIRED_TOOLS) {
+    if (!specialisms || specialisms.length === 0)
+        return [];
+    const issues = [];
+    for (const specialism of specialisms) {
+        const required = requiredToolsLookup[specialism];
+        if (!required)
+            continue;
+        for (const tool of required) {
+            const method = toolNameToMethodName(tool);
+            if (!hasMethodAnywhere(platform, method)) {
+                issues.push({ specialism, tool, method });
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Format a single issue as a human-readable warning line. The format names
+ * the specialism, the missing tool, and the method an adopter should
+ * implement, so the dev fix is obvious from the log.
+ */
+function formatSpecialismIssue(issue) {
+    return (`[adcp/server] specialism '${issue.specialism}' requires tool '${issue.tool}' ` +
+        `but no platform field exposes a '${issue.method}' method. ` +
+        `Either implement the method, drop the specialism from capabilities.specialisms, ` +
+        `or pass strictSpecialismValidation: false to silence (not recommended — ` +
+        `naive AdCP buyers will hit runtime errors when they call the unsupported tool).`);
+}
+//# sourceMappingURL=validate-specialisms.js.map

package/dist/lib/server/decisioning/validate-specialisms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-specialisms.js","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/validate-specialisms.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;AAWH,oDAEC;AAuDD,0EAkBC;AAOD,sDAQC;AAnGD,uEAA2E;AAE3E;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9D,CAAC;AAQD;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB,CAAC,QAAiB,EAAE,UAAkB;IAC9D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAmC,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAI,KAAiC,CAAC,UAAU,CAAC,CAAC;YAC9D,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,+BAA+B,CAC7C,QAAiB,EACjB,WAA0C,EAC1C,sBAAqE,8CAAyB;IAE9F,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,KAAqB;IACzD,OAAO,CACL,6BAA6B,KAAK,CAAC,UAAU,oBAAoB,KAAK,CAAC,IAAI,IAAI;QAC/E,oCAAoC,KAAK,CAAC,MAAM,YAAY;QAC5D,kFAAkF;QAClF,0EAA0E;QAC1E,iFAAiF,CAClF,CAAC;AACJ,CAAC"}

package/dist/lib/server/index.d.ts

@@ -7,10 +7,13 @@ export type { PickSafeDetailsOptions } from './pick-safe-details';
 export { wrapEnvelope } from './wrap-envelope';
 export type { WrapEnvelopeOptions } from './wrap-envelope';
 export { ERROR_ENVELOPE_FIELD_ALLOWLIST, DEFAULT_ERROR_ENVELOPE_FIELDS, ADCP_ERROR_FIELD_ALLOWLIST, CONFLICT_ADCP_ERROR_ALLOWLIST, } from './envelope-allowlist';
-export { capabilitiesResponse, productsResponse, mediaBuyResponse, deliveryResponse, listAccountsResponse, listCreativeFormatsResponse, updateMediaBuyResponse, getMediaBuysResponse, performanceFeedbackResponse, buildCreativeResponse, buildCreativeMultiResponse, previewCreativeResponse, creativeDeliveryResponse, listCreativesResponse, listPropertyListsResponse, listCollectionListsResponse, listContentStandardsResponse, getPlanAuditLogsResponse, syncCreativesResponse, getSignalsResponse, activateSignalResponse, cancelMediaBuyResponse, acquireRightsResponse, acquireRightsAcquired, acquireRightsPendingApproval, acquireRightsRejected, syncAccountsResponse, syncGovernanceResponse, reportUsageResponse, toStructuredContent, } from './responses';
+export { capabilitiesResponse, productsResponse, mediaBuyResponse, deliveryResponse, listAccountsResponse, listCreativeFormatsResponse, updateMediaBuyResponse, getMediaBuysResponse, performanceFeedbackResponse, buildCreativeResponse, buildCreativeMultiResponse, previewCreativeResponse, creativeDeliveryResponse, listCreativesResponse, listPropertyListsResponse, listCollectionListsResponse, listContentStandardsResponse, getPlanAuditLogsResponse, syncCreativesResponse, getSignalsResponse, activateSignalResponse, cancelMediaBuyResponse, acquireRightsResponse, acquireRightsAcquired, acquireRightsPendingApproval, acquireRightsRejected, updateRightsResponse, updateRightsSuccess, creativeApprovalResponse, creativeApprovalApproved, creativeApprovalRejected, creativeApprovalPendingReview, creativeApprovalError, syncAccountsResponse, syncGovernanceResponse, reportUsageResponse, toStructuredContent, } from './responses';
 export type { McpToolResponse } from './responses';
 export { validActionsForStatus } from './media-buy-helpers';
 export type { ValidAction, CancelMediaBuyInput } from './media-buy-helpers';
+export { createMediaBuyStore, DEFAULT_MEDIA_BUY_STORE_COLLECTION } from './media-buy-store';
+export type { MediaBuyStore, CreateMediaBuyStoreOptions, CreateMediaBuyInputForStore, CreateMediaBuyResultForStore, UpdateMediaBuyInputForStore, GetMediaBuysResultForStore, } from './media-buy-store';
+export { MEDIA_BUY_TRANSITIONS, CREATIVE_ASSET_TRANSITIONS, isLegalMediaBuyTransition, isLegalCreativeTransition, assertMediaBuyTransition, assertCreativeTransition, } from './state-machine';
 export { taskToolResponse, registerAdcpTaskTool, createTaskCapableServer, InMemoryTaskStore, isTerminal, } from './tasks';
 export type { AdcpTaskToolConfig, TaskStore, TaskMessageQueue, CreateTaskOptions, ToolTaskHandler, CreateTaskRequestHandlerExtra, TaskRequestHandlerExtra, CreateTaskResult, GetTaskResult, Task, } from './tasks';
 export { PostgresTaskStore, cleanupExpiredTasks, getMcpTasksMigration, MCP_TASKS_MIGRATION, } from './postgres-task-store';
@@ -32,7 +35,8 @@ export type { AdcpStateStore, InMemoryStateStoreOptions, ListOptions, ListResult
 export { PostgresStateStore, getAdcpStateMigration, ADCP_STATE_MIGRATION } from './postgres-state-store';
 export type { PostgresStateStoreOptions } from './postgres-state-store';
 export { structuredSerialize, structuredDeserialize } from './structured-serialize';
-export { requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE } from './create-adcp-server';
+export { requireSessionKey, ADCP_PRE_TRANSPORT, ADCP_SIGNED_REQUESTS_STATE, ADCP_INSTRUCTIONS_FN, } from './create-adcp-server';
+export type { SessionContext, OnInstructionsError } from './create-adcp-server';
 export type { AdcpServer, AdcpServerComplianceApi, AdcpServerTransport, AdcpTestRequest, AdcpTestToolsCallRequest, AdcpTestResponse, } from './adcp-server';
 export type { AdcpServerConfig, WebhooksConfig, AdcpToolMap, AdcpServerToolName, AdcpCapabilitiesConfig, AdcpCapabilitiesOverrides, AdcpCustomToolConfig, AdcpLogger, SignedRequestsConfig, AdcpPreTransport, AdcpSignedRequestsState, HandlerContext, SessionKeyContext, MediaBuyHandlers, SignalsHandlers, CreativeHandlers, GovernanceHandlers, AccountHandlers, EventTrackingHandlers, SponsoredIntelligenceHandlers, ResolveAccountContext, } from './create-adcp-server';
 export { DEFAULT_REPORTING_CAPABILITIES } from './product-defaults';
@@ -54,4 +58,9 @@ export type { ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection,
 export * from './decisioning';
 export { createCtxMetadataStore, memoryCtxMetadataStore, pgCtxMetadataStore, getCtxMetadataMigration, cleanupExpiredCtxMetadata, CTX_METADATA_MIGRATION, CtxMetadataValidationError, ADCP_INTERNAL_TAG, DEFAULT_MAX_VALUE_BYTES, MAX_TTL_SECONDS, stripCtxMetadata, hasCtxMetadata, ctxMetadataResultKey, scopeCtxMetadataKey, } from './ctx-metadata';
 export type { CtxMetadataStore, CtxMetadataStoreConfig, CtxMetadataBackend, CtxMetadataEntry, CtxMetadataRef, ResourceKind as CtxMetadataResourceKind, MemoryCtxMetadataStoreOptions, PgCtxMetadataBackendOptions, WireShape, } from './ctx-metadata';
+export { createTranslationMap, createUpstreamHttpClient } from './upstream-helpers';
+export type { TranslationMap, UpstreamAuth, AuthContext, UpstreamCallOptions, UpstreamHttpClientOptions, UpstreamHttpClient, UpstreamHttpResult, } from './upstream-helpers';
+export { InMemoryImplicitAccountStore, defaultImplicitKeyFn, type ImplicitAccountStoreOptions, } from '../adapters/implicit-account-store';
+export { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions, } from '../adapters/oauth-passthrough-resolver';
+export { createRosterAccountStore, type RosterAccountStoreOptions } from '../adapters/roster-account-store';
 //# sourceMappingURL=index.d.ts.map