@adcp/sdk 6.6.0 → 6.7.0

package/dist/lib/server/decisioning/resolve-presets.js

@@ -0,0 +1,142 @@
+"use strict";
+/**
+ * `composeMethod` presets for `accounts.resolve`. Standardize the security
+ * pattern multi-tenant adopters reach for: "the inner resolver found the
+ * account, but is the calling principal authorized for it?"
+ *
+ * Hooks here run as `after` on a `composeMethod`-wrapped `accounts.resolve`.
+ * When `inner` returns `null` they propagate `null` (no predicate runs);
+ * otherwise they call the predicate, and on deny return `null` (default —
+ * indistinguishable from "not found", guards against principal enumeration)
+ * or throw {@link PermissionDeniedError} (typed wire error; use only when
+ * the principal already knows the account exists).
+ *
+ * Closes adcp-client#1339.
+ *
+ * @public
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireAccountMatch = requireAccountMatch;
+exports.requireAdvertiserMatch = requireAdvertiserMatch;
+exports.requireOrgScope = requireOrgScope;
+const errors_typed_1 = require("./errors-typed");
+/**
+ * General-purpose post-resolve guard. After the wrapped `accounts.resolve`
+ * runs, calls `predicate(account, ctx)`; on `false` denies per `onDeny`.
+ *
+ * Building block for the specialized presets below; reach for it directly
+ * when your authorization rule needs custom logic.
+ *
+ * @example
+ * ```ts
+ * import { composeMethod, requireAccountMatch } from '@adcp/sdk/server';
+ *
+ * accounts: {
+ *   resolve: composeMethod(
+ *     baseResolve,
+ *     requireAccountMatch((account, ctx) =>
+ *       account.account_scope === 'brand' && ctx?.agent?.id === account.brand?.id
+ *     )
+ *   ),
+ * }
+ * ```
+ *
+ * @public
+ */
+function requireAccountMatch(predicate, options = {}) {
+    const onDeny = options.onDeny ?? 'null';
+    const action = options.action ?? 'accounts.resolve';
+    return {
+        after: async (result, _params, ctx) => {
+            if (result === null)
+                return null;
+            const ok = await predicate(result, ctx);
+            if (ok)
+                return result;
+            if (onDeny === 'throw') {
+                throw new errors_typed_1.PermissionDeniedError(action);
+            }
+            return null;
+        },
+    };
+}
+/**
+ * Gate resolved accounts on `account.advertiser` ∈ roster. Canonical
+ * multi-tenant pattern: each calling principal is configured with a list
+ * of advertisers it may transact for; the inner resolver finds the
+ * account by reference, this preset rejects when the resolved
+ * advertiser isn't in the roster.
+ *
+ * `getRoster` receives the `ResolveContext` and returns the principal's
+ * allowed advertisers (any iterable of strings — array, Set, async lookup).
+ * Accounts whose `advertiser` is undefined are denied.
+ *
+ * Equivalent to {@link requireAccountMatch} with an advertiser-extraction
+ * predicate; sugar for the canonical shape.
+ *
+ * @example
+ * ```ts
+ * import { composeMethod, requireAdvertiserMatch } from '@adcp/sdk/server';
+ *
+ * accounts: {
+ *   resolve: composeMethod(
+ *     baseResolve,
+ *     requireAdvertiserMatch(async (ctx) => tenantRoster.for(ctx?.agent))
+ *   ),
+ * }
+ * ```
+ *
+ * @public
+ */
+function requireAdvertiserMatch(getRoster, options = {}) {
+    return requireAccountMatch(async (account, ctx) => {
+        const advertiser = account.advertiser;
+        if (advertiser === undefined)
+            return false;
+        const roster = await getRoster(ctx);
+        for (const allowed of roster) {
+            if (allowed === advertiser)
+                return true;
+        }
+        return false;
+    }, options);
+}
+/**
+ * Gate resolved accounts on org scope: account-side org extractor + ctx-side
+ * org extractor + equality. Use when "is this principal in the same org as
+ * this account?" is the authorization rule.
+ *
+ * Both extractors must return a defined string for the check to pass; either
+ * returning `undefined` denies. Caller is responsible for whatever
+ * normalization (case-folding, trim, alias resolution) is appropriate for
+ * the org identifier shape — the preset compares with strict equality.
+ *
+ * @example
+ * ```ts
+ * import { composeMethod, requireOrgScope } from '@adcp/sdk/server';
+ *
+ * accounts: {
+ *   resolve: composeMethod(
+ *     baseResolve,
+ *     requireOrgScope(
+ *       (account) => account.ctx_metadata.orgId,
+ *       (ctx) => ctx?.authInfo?.extra?.orgId as string | undefined
+ *     )
+ *   ),
+ * }
+ * ```
+ *
+ * @public
+ */
+function requireOrgScope(getAccountOrg, getCtxOrg, options = {}) {
+    return requireAccountMatch((account, ctx) => {
+        const accountOrg = getAccountOrg(account);
+        if (accountOrg === undefined)
+            return false;
+        const ctxOrg = getCtxOrg(ctx);
+        if (ctxOrg === undefined)
+            return false;
+        return accountOrg === ctxOrg;
+    }, options);
+}
+//# sourceMappingURL=resolve-presets.js.map

package/dist/lib/server/decisioning/resolve-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-presets.js","sourceRoot":"","sources":["../../../../src/lib/server/decisioning/resolve-presets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAiEH,kDAiBC;AA8BD,wDAaC;AA6BD,0CAYC;AAjKD,iDAAuD;AAqCvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,mBAAmB,CACjC,SAAsG,EACtG,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC;IACpD,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACpC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,EAAE;gBAAE,OAAO,MAAM,CAAC;YACtB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,IAAI,oCAAqB,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,sBAAsB,CACpC,SAA4F,EAC5F,UAA+B,EAAE;IAEjC,OAAO,mBAAmB,CAAW,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,eAAe,CAC7B,aAAiE,EACjE,SAAkE,EAClE,UAA+B,EAAE;IAEjC,OAAO,mBAAmB,CAAW,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,UAAU,KAAK,MAAM,CAAC;IAC/B,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC"}

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.d.ts

@@ -0,0 +1,8 @@
+export interface EntityHydrationField {
+    /** Top-level property on the wire request object. */
+    readonly field: string;
+    /** Spec `x-entity` annotation — maps to `ResourceKind` at runtime. */
+    readonly xEntity: string;
+}
+export declare const TOOL_ENTITY_FIELDS: Readonly<Record<string, ReadonlyArray<EntityHydrationField>>>;
+//# sourceMappingURL=entity-hydration.generated.d.ts.map

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-hydration.generated.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/entity-hydration.generated.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAkF5F,CAAC"}

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.js

@@ -0,0 +1,101 @@
+"use strict";
+// Generated entity-hydration field map — do NOT edit by hand
+//
+// Source: `schemas/cache/3.0.5/manifest.json` + per-tool request
+// schemas. Every top-level `x-entity`-tagged string field on a request
+// schema lands here. The runtime hydrator (`from-platform.ts` →
+// `hydrateForTool`) walks this map plus the hand-curated
+// `ENTITY_TO_RESOURCE_KIND` table to drive auto-hydration without
+// re-walking schemas at startup.
+//
+// Renaming-firewall: if the spec renames `media_buy_id` → `mediabuy_id`,
+// the `x-entity` tag travels with it; the next codegen run picks up
+// the new field name automatically.
+//
+// Regenerate with: npm run generate-entity-hydration
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_ENTITY_FIELDS = void 0;
+exports.TOOL_ENTITY_FIELDS = {
+    acquire_rights: [
+        { field: "pricing_option_id", xEntity: "vendor_pricing_option" },
+        { field: "rights_id", xEntity: "rights_grant" },
+    ],
+    activate_signal: [
+        { field: "pricing_option_id", xEntity: "vendor_pricing_option" },
+        { field: "signal_agent_segment_id", xEntity: "signal_activation_id" },
+    ],
+    build_creative: [
+        { field: "creative_id", xEntity: "creative" },
+        { field: "media_buy_id", xEntity: "media_buy" },
+        { field: "package_id", xEntity: "package" },
+    ],
+    check_governance: [
+        { field: "plan_id", xEntity: "governance_plan" },
+    ],
+    create_media_buy: [
+        { field: "plan_id", xEntity: "governance_plan" },
+    ],
+    delete_collection_list: [
+        { field: "list_id", xEntity: "collection_list" },
+    ],
+    delete_property_list: [
+        { field: "list_id", xEntity: "property_list" },
+    ],
+    get_brand_identity: [
+        { field: "brand_id", xEntity: "advertiser_brand" },
+    ],
+    get_collection_list: [
+        { field: "list_id", xEntity: "collection_list" },
+    ],
+    get_property_list: [
+        { field: "list_id", xEntity: "property_list" },
+    ],
+    get_rights: [
+        { field: "brand_id", xEntity: "rights_holder_brand" },
+    ],
+    log_event: [
+        { field: "event_source_id", xEntity: "event_source" },
+    ],
+    preview_creative: [
+        { field: "creative_id", xEntity: "creative" },
+    ],
+    provide_performance_feedback: [
+        { field: "creative_id", xEntity: "creative" },
+        { field: "media_buy_id", xEntity: "media_buy" },
+        { field: "package_id", xEntity: "package" },
+    ],
+    report_plan_outcome: [
+        { field: "check_id", xEntity: "governance_check" },
+        { field: "plan_id", xEntity: "governance_plan" },
+    ],
+    si_get_offering: [
+        { field: "offering_id", xEntity: "offering" },
+    ],
+    si_initiate_session: [
+        { field: "media_buy_id", xEntity: "media_buy" },
+        { field: "offering_id", xEntity: "offering" },
+    ],
+    si_send_message: [
+        { field: "session_id", xEntity: "si_session" },
+    ],
+    si_terminate_session: [
+        { field: "session_id", xEntity: "si_session" },
+    ],
+    update_collection_list: [
+        { field: "list_id", xEntity: "collection_list" },
+    ],
+    update_media_buy: [
+        { field: "media_buy_id", xEntity: "media_buy" },
+    ],
+    update_property_list: [
+        { field: "list_id", xEntity: "property_list" },
+    ],
+    update_rights: [
+        { field: "pricing_option_id", xEntity: "vendor_pricing_option" },
+        { field: "rights_id", xEntity: "rights_grant" },
+    ],
+    validate_property_delivery: [
+        { field: "list_id", xEntity: "property_list" },
+    ],
+};
+//# sourceMappingURL=entity-hydration.generated.js.map

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-hydration.generated.js","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/entity-hydration.generated.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,EAAE;AACF,iEAAiE;AACjE,uEAAuE;AACvE,gEAAgE;AAChE,yDAAyD;AACzD,kEAAkE;AAClE,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AACpE,oCAAoC;AACpC,EAAE;AACF,qDAAqD;;;AASxC,QAAA,kBAAkB,GAAkE;IAC/F,cAAc,EAAE;QACd,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE;QAChE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE;KAChD;IACD,eAAe,EAAE;QACf,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE;QAChE,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,sBAAsB,EAAE;KACtE;IACD,cAAc,EAAE;QACd,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE;QAC7C,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;QAC/C,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;KAC5C;IACD,gBAAgB,EAAE;QAChB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,gBAAgB,EAAE;QAChB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,sBAAsB,EAAE;QACtB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,oBAAoB,EAAE;QACpB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE;KAC/C;IACD,kBAAkB,EAAE;QAClB,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE;KACnD;IACD,mBAAmB,EAAE;QACnB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,iBAAiB,EAAE;QACjB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE;KAC/C;IACD,UAAU,EAAE;QACV,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE;KACtD;IACD,SAAS,EAAE;QACT,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE;KACtD;IACD,gBAAgB,EAAE;QAChB,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE;KAC9C;IACD,4BAA4B,EAAE;QAC5B,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE;QAC7C,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;QAC/C,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;KAC5C;IACD,mBAAmB,EAAE;QACnB,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE;QAClD,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,eAAe,EAAE;QACf,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE;KAC9C;IACD,mBAAmB,EAAE;QACnB,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;QAC/C,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE;KAC9C;IACD,eAAe,EAAE;QACf,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE;KAC/C;IACD,oBAAoB,EAAE;QACpB,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE;KAC/C;IACD,sBAAsB,EAAE;QACtB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE;KACjD;IACD,gBAAgB,EAAE;QAChB,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE;KAChD;IACD,oBAAoB,EAAE;QACpB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE;KAC/C;IACD,aAAa,EAAE;QACb,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE;QAChE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE;KAChD;IACD,0BAA0B,EAAE;QAC1B,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE;KAC/C;CACF,CAAC"}

package/dist/lib/server/decisioning/runtime/from-platform.d.ts

@@ -37,9 +37,10 @@
  * `tasks/get` wire handler, per-server + module-level `publishStatusChange`.
  *
  * **Still deferred (rc.1+):** MCP Resources subscription projection for
- * `publishStatusChange`; `resolveAccount(undefined, { authInfo, toolName })`
- * refactor for `provide_performance_feedback` / `list_creative_formats`
- * no-account path in `'explicit'`-mode adopters (see `SalesPlatform` JSDoc).
+ * `publishStatusChange`. The no-account tool surface (`preview_creative`,
+ * `list_creative_formats`, `provide_performance_feedback`) is now typed
+ * via `NoAccountCtx<TCtxMeta>` — handlers receive `ctx.account: Account |
+ * undefined` and must narrow before reading `ctx_metadata`.
  *
  * Status: Preview / 6.0. Not yet exported from the public `./server`
  * subpath; reach in via `@adcp/sdk/server/decisioning/runtime` for
@@ -50,8 +51,10 @@
 import type { AdcpServer } from '../../adcp-server';
 import { type AdcpServerConfig, type HandlerContext } from '../../create-adcp-server';
 import type { DecisioningPlatform, RequiredPlatformsFor, RequiredCapabilitiesFor } from '../platform';
+import type { ComplianceTestingCapabilities } from '../capabilities';
 import type { Account } from '../account';
 import { type CtxMetadataStore } from '../../ctx-metadata';
+import type { MediaBuyStore } from '../../media-buy-store';
 import type { PgQueryable } from '../../postgres-task-store';
 import { type TaskRegistry, type TaskRecord } from './task-registry';
 import { type StatusChangeBus } from '../status-changes';
@@ -265,10 +268,19 @@ export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConf
      * without a gate AND without an env-flag escape (matches the standalone
      * `createComplyController` warning behavior).
      *
-     * **Capability-vs-adapter consistency.** If
-     * `capabilities.compliance_testing` is declared but `complyTest` is
-     * omitted, construction throws `PlatformConfigError` — the framework
-     * refuses to project a discovery block the runtime can't honor.
+     * **Capability-vs-adapter consistency.** Both directions are enforced:
+     *
+     * - `capabilities.compliance_testing` declared without `complyTest` →
+     *   `PlatformConfigError` at construction (and a **compile-time error**
+     *   when `P` is typed with `compliance_testing` non-optional, via
+     *   `RequiredOptsFor<P>`).
+     * - `complyTest` supplied without `capabilities.compliance_testing` →
+     *   `PlatformConfigError` at construction (runtime defense-in-depth).
+     *
+     * To enforce the invariant at compile time when building the platform
+     * as an object literal, wrap it with `definePlatformWithCompliance`:
+     * TypeScript will then require `compliance_testing` on the platform
+     * and `complyTest` on opts together.
      *
      * @public
      */
@@ -345,6 +357,39 @@ export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConf
      * @see docs/proposals/decisioning-platform-v6-1-ctx-metadata.md
      */
     ctxMetadata?: CtxMetadataStore;
+    /**
+     * Opinionated media-buy store that satisfies the seller spec contract for
+     * `targeting_overlay` echo: persist `packages[].targeting_overlay` from
+     * `create_media_buy`, echo it on `get_media_buys`, deep-merge across
+     * `update_media_buy` without dropping prior `property_list` /
+     * `collection_list` references.
+     *
+     * Wire to honor the
+     * `schemas/cache/<v>/media-buy/get-media-buys-response.json` contract
+     * without each adapter persisting + merging by hand. Sellers claiming
+     * `property-lists` / `collection-lists` MUST echo the persisted refs;
+     * `mediaBuyStore` is the framework-side way to do it.
+     *
+     * Backed by any `AdcpStateStore` — `InMemoryStateStore` for dev,
+     * `PostgresStateStore` for production. Failures are logged and swallowed
+     * (auto-echo MUST NOT break a successful seller response).
+     *
+     * @example
+     * ```ts
+     * import {
+     *   createAdcpServerFromPlatform,
+     *   createMediaBuyStore,
+     *   InMemoryStateStore,
+     * } from '@adcp/sdk/server';
+     *
+     * const stateStore = new InMemoryStateStore();
+     *
+     * createAdcpServerFromPlatform(myPlatform, {
+     *   mediaBuyStore: createMediaBuyStore({ store: stateStore }),
+     * });
+     * ```
+     */
+    mediaBuyStore?: MediaBuyStore;
     /**
      * Allow `push_notification_config.url` to point at loopback / private-IP
      * destinations. Default is `false` — the framework's request-ingest
@@ -367,6 +412,21 @@ export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConf
      * a one-shot console.warn at construction calling out the relaxation.
      */
     allowPrivateWebhookUrls?: boolean;
+    /**
+     * When `true`, throw `PlatformConfigError` at construction if any
+     * specialism declared in `capabilities.specialisms[]` is missing a
+     * platform method matching one of its required tools (per the manifest's
+     * `SPECIALISM_REQUIRED_TOOLS`). Default `false` — the framework emits a
+     * `console.warn` for each missing method instead, so adopters mid-
+     * implementation aren't blocked on incomplete specialism coverage.
+     *
+     * Recommended for production CI builds: catches "claimed sales-non-
+     * guaranteed but forgot to implement getProducts" before the deploy.
+     * Recommended off in dev / sandbox where adopters are iterating.
+     *
+     * Tracked: adcp-client#1299 (manifest adoption stage 3).
+     */
+    strictSpecialismValidation?: boolean;
     /**
      * Auto-fire a completion webhook on the sync-success arm of mutating
      * tools when the request supplied `push_notification_config.url`.
@@ -395,6 +455,29 @@ export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConf
      */
     autoEmitCompletionWebhooks?: boolean;
 }
+/**
+ * Derives the opts type for `createAdcpServerFromPlatform` based on whether
+ * the platform declares `capabilities.compliance_testing`.
+ *
+ * When `P` carries a non-optional `compliance_testing` block (e.g. because
+ * the caller used `definePlatformWithCompliance`), this resolves to
+ * `CreateAdcpServerFromPlatformOptions & { complyTest: ComplyControllerConfig }`,
+ * making `complyTest` required. For all other platform shapes the resolved
+ * type is the plain `CreateAdcpServerFromPlatformOptions` — no change.
+ *
+ * Both directions of the mismatch are still caught at runtime by the
+ * `PlatformConfigError` check in `createAdcpServerFromPlatform` as
+ * defense-in-depth for untyped callers.
+ *
+ * @public
+ */
+export type RequiredOptsFor<P extends DecisioningPlatform<any, any>> = P extends {
+    capabilities: {
+        compliance_testing: ComplianceTestingCapabilities;
+    };
+} ? CreateAdcpServerFromPlatformOptions & {
+    complyTest: ComplyControllerConfig;
+} : CreateAdcpServerFromPlatformOptions;
 /**
  * Adcp server returned by `createAdcpServerFromPlatform`. Adds task-state
  * accessors on top of the standard `AdcpServer` so test harnesses (and the
@@ -445,7 +528,7 @@ export interface DecisioningAdcpServer extends AdcpServer {
      */
     statusChange: StatusChangeBus;
 }
-export declare function createAdcpServerFromPlatform<P extends DecisioningPlatform<any, any>>(platform: P & RequiredPlatformsFor<P['capabilities']['specialisms'][number]> & RequiredCapabilitiesFor<P['capabilities']['specialisms'][number]>, opts: CreateAdcpServerFromPlatformOptions): DecisioningAdcpServer;
+export declare function createAdcpServerFromPlatform<P extends DecisioningPlatform<any, any>>(platform: P & RequiredPlatformsFor<P['capabilities']['specialisms'][number]> & RequiredCapabilitiesFor<P['capabilities']['specialisms'][number]>, opts: RequiredOptsFor<P>): DecisioningAdcpServer;
 /**
  * Merge adopter-supplied custom handlers with platform-derived handlers.
  * Platform-derived wins per-key when both define the same handler; adopter

package/dist/lib/server/decisioning/runtime/from-platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"from-platform.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/from-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAEL,KAAK,gBAAgB,EAQrB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,KAAK,EAAE,OAAO,EAAoB,MAAM,YAAY,CAAC;AAkB5D,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAkBlH,OAAO,EAAiC,KAAK,eAAe,EAAgC,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAoBzG;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEnG;;;;;;;OAOG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;;;;;;;OAUG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrG;AAED,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAC/D,gBAAgB,EAChB,gBAAgB,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,CACvD;IACC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAE9C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1D;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CAsCtC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjH;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,EAAE,eAAe,CAAC;CAC/B;AAOD,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAClF,QAAQ,EAAE,CAAC,GACT,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAC9D,uBAAuB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EACnE,IAAI,EAAE,mCAAmC,GACxC,qBAAqB,CA2iBvB;AA4KD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AA4J/D;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"from-platform.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/from-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAEL,KAAK,gBAAgB,EAQrB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EAAE,OAAO,EAAoC,MAAM,YAAY,CAAC;AA2B5E,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EACV,aAAa,EAKd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAkBlH,OAAO,EAAiC,KAAK,eAAe,EAAgC,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAmFzG;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEnG;;;;;;;OAOG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;;;;;;;OAUG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrG;AAED,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAC/D,gBAAgB,EAChB,gBAAgB,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,CACvD;IACC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAE9C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1D;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;;;;;;OAaG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CAsCtC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;IAC/E,YAAY,EAAE;QAAE,kBAAkB,EAAE,6BAA6B,CAAA;KAAE,CAAC;CACrE,GACG,mCAAmC,GAAG;IAAE,UAAU,EAAE,sBAAsB,CAAA;CAAE,GAC5E,mCAAmC,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjH;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,EAAE,eAAe,CAAC;CAC/B;AAOD,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAClF,QAAQ,EAAE,CAAC,GACT,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAC9D,uBAAuB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EACnE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GACvB,qBAAqB,CA+nBvB;AAoOD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AA4J/D;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}