@adcp/sdk 6.6.0 → 6.8.0

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-send-message-response.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.1/sponsored-intelligence/si-send-message-response.json",
+  "$id": "/schemas/3.0.5/sponsored-intelligence/si-send-message-response.json",
   "title": "SI Send Message Response",
   "description": "Brand agent's response to a user message",
   "x-status": "experimental",
@@ -20,13 +20,13 @@
           "description": "Conversational message from brand agent"
         },
         "surface": {
-          "$ref": "/schemas/3.0.1/a2ui/surface.json",
+          "$ref": "/schemas/3.0.5/a2ui/surface.json",
           "description": "A2UI surface with interactive components"
         },
         "ui_elements": {
           "type": "array",
           "items": {
-            "$ref": "/schemas/3.0.1/sponsored-intelligence/si-ui-element.json"
+            "$ref": "/schemas/3.0.5/sponsored-intelligence/si-ui-element.json"
           },
           "description": "Visual components to render (DEPRECATED: use surface instead)",
           "deprecated": true
@@ -39,7 +39,7 @@
       "description": "MCP resource URI for hosts with MCP Apps support (e.g., ui://si/session-abc123)"
     },
     "session_status": {
-      "$ref": "/schemas/3.0.1/enums/si-session-status.json",
+      "$ref": "/schemas/3.0.5/enums/si-session-status.json",
       "description": "Current session status. On a successful response, one of: active, pending_handoff, or complete. Terminated sessions return error codes (SESSION_NOT_FOUND or SESSION_TERMINATED) instead of a success response."
     },
     "handoff": {
@@ -105,14 +105,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "/schemas/3.0.1/core/error.json"
+        "$ref": "/schemas/3.0.5/core/error.json"
       }
     },
     "context": {
-      "$ref": "/schemas/3.0.1/core/context.json"
+      "$ref": "/schemas/3.0.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.1/core/ext.json"
+      "$ref": "/schemas/3.0.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-terminate-session-request.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.1/sponsored-intelligence/si-terminate-session-request.json",
+  "$id": "/schemas/3.0.5/sponsored-intelligence/si-terminate-session-request.json",
   "title": "SI Terminate Session Request",
   "description": "Request to terminate an SI session. Naturally idempotent — `session_id` is the dedup boundary, and terminating an already-terminated session is a no-op that returns the same terminal state. No `idempotency_key` is needed on this request.",
   "x-status": "experimental",
@@ -63,10 +63,10 @@
       "additionalProperties": true
     },
     "context": {
-      "$ref": "/schemas/3.0.1/core/context.json"
+      "$ref": "/schemas/3.0.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.1/core/ext.json"
+      "$ref": "/schemas/3.0.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-terminate-session-response.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.1/sponsored-intelligence/si-terminate-session-response.json",
+  "$id": "/schemas/3.0.5/sponsored-intelligence/si-terminate-session-response.json",
   "title": "SI Terminate Session Response",
   "description": "Confirmation of session termination",
   "x-status": "experimental",
@@ -16,7 +16,7 @@
       "description": "Whether session was successfully terminated"
     },
     "session_status": {
-      "$ref": "/schemas/3.0.1/enums/si-session-status.json",
+      "$ref": "/schemas/3.0.5/enums/si-session-status.json",
       "description": "Resulting session state. 'complete' for handoff_transaction/handoff_complete, 'terminated' for user_exit/session_timeout/host_terminated."
     },
     "acp_handoff": {
@@ -68,14 +68,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "/schemas/3.0.1/core/error.json"
+        "$ref": "/schemas/3.0.5/core/error.json"
       }
     },
     "context": {
-      "$ref": "/schemas/3.0.1/core/context.json"
+      "$ref": "/schemas/3.0.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.1/core/ext.json"
+      "$ref": "/schemas/3.0.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-ui-element.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.1/sponsored-intelligence/si-ui-element.json",
+  "$id": "/schemas/3.0.5/sponsored-intelligence/si-ui-element.json",
   "title": "SI UI Element",
   "description": "Standard visual component that brand returns and host renders",
   "x-status": "experimental",

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-05-01T16:29:44.064Z"
+  "synced_at": "2026-05-03T17:38:03.938Z"
 }

package/dist/lib/server/account-mode.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Account-mode primitives for sandbox-authority enforcement of
+ * `comply_test_controller` and other test-only surfaces.
+ *
+ * The hard rule: under no circumstances should the comply test
+ * controller (or any test-only surface) operate on a `live`-mode
+ * account. The flag must live on the resolved account, not on a
+ * process-level env var — env vars are operator-error-prone proxies
+ * for what is fundamentally an authority decision per principal.
+ *
+ * This module ships the type + helpers; auto-wiring into
+ * `createAdcpServerFromPlatform`'s `complyTest` path lands in a
+ * follow-up alongside mock-mode routing (#1435 Phase 2).
+ *
+ * @public
+ */
+/**
+ * Three operationally distinct account modes:
+ *
+ *   - `live`: production traffic. Adopter's upstream is truth. Test-only
+ *     surfaces (comply controller, force_*, simulate_*) are denied.
+ *   - `sandbox`: adopter's own test account. Their code path runs against
+ *     their test infrastructure. Test-only surfaces are allowed.
+ *   - `mock`: SDK-routed-to-mock-server. Adopter's code is bypassed; the
+ *     SDK forwards to the mock upstream backend. Test-only surfaces are
+ *     allowed.
+ *
+ * Default when unspecified: `live`. A missing or unknown `mode` reads
+ * as production, fail-closed for any test-only dispatch.
+ *
+ * See `docs/proposals/lifecycle-state-and-sandbox-authority.md` for the
+ * full three-mode design and Phase 1/2/3 rollout.
+ */
+export type AccountMode = 'live' | 'sandbox' | 'mock';
+/**
+ * Reads `mode` off any account-shaped value, with back-compat for
+ * the legacy `sandbox: boolean` field. Returns the explicit mode if
+ * present; otherwise infers `'sandbox'` from `sandbox === true`;
+ * otherwise `'live'`.
+ *
+ * Adopters that have not yet migrated to the `mode` field continue to
+ * work — `account.sandbox === true` reads as sandbox mode through this
+ * helper. New code should prefer `mode` directly.
+ *
+ * Prototype-pollution defense: both `mode` and `sandbox` are read via
+ * `Object.hasOwn` rather than bare property access. Bare access traverses
+ * the prototype chain, so an attacker who reaches a `__proto__`-via-merge
+ * sink upstream (reachable in MCP envelope handling and similar deep-merge
+ * sites) could stamp `Object.prototype.mode = 'sandbox'` and silently
+ * downgrade every account's gate to a no-op. The own-property check makes
+ * the gate immune to that class of attack regardless of upstream hardening.
+ */
+export declare function getAccountMode(account: unknown): AccountMode;
+/**
+ * Predicate: is the account in a non-production mode that admits
+ * test-only surfaces (comply controller, force_*, simulate_*)?
+ *
+ * Returns `true` for `mode === 'sandbox' | 'mock'` (or legacy
+ * `sandbox: true`); `false` for `mode === 'live'` or any account
+ * shape that doesn't carry the field.
+ */
+export declare function isSandboxOrMockAccount(account: unknown): boolean;
+/**
+ * Throws an `AdcpError('PERMISSION_DENIED')` if the account is not in
+ * a non-production mode. Use to gate dispatch of test-only surfaces.
+ *
+ * Fail-closed semantics:
+ *   - `account === undefined` (no resolved account): throws.
+ *   - `account.mode === 'live'` or unspecified + no `sandbox: true`:
+ *     throws.
+ *   - `account.mode === 'sandbox' | 'mock'` (or legacy `sandbox: true`):
+ *     no-op, dispatch proceeds.
+ *
+ * The `details` payload carries `{ scope: 'sandbox-gate', tool? }` so
+ * dashboards can distinguish gate-rejections from other permission
+ * denials.
+ *
+ * **Resolver discipline.** The strength of this gate depends entirely on
+ * how the adopter's `AccountStore.resolve` constructs its return value.
+ * Resolvers MUST NOT spread untrusted input (request body, headers,
+ * `ctx_metadata`, query params) into the resolved account — doing so lets
+ * a buyer self-promote to `mode: 'sandbox'` and unlock test-only surfaces
+ * on a live principal. Source `mode` (and `sandbox`) from a trusted store
+ * keyed by the authenticated principal; never from request data.
+ *
+ * **opts.message must be a static string literal.** The message is echoed
+ * on the wire inside the error envelope. Interpolating user-controlled
+ * values into it creates a reflection sink (PII leakage, log injection,
+ * downstream HTML rendering). Pick from a fixed set of messages keyed by
+ * `tool` if you need variants.
+ *
+ * @param account The resolved account (typically `ctx.account` inside
+ *   a tool dispatch). Pass `undefined` if no account resolved — the
+ *   helper fails closed.
+ * @param opts.tool Optional tool name to surface in the error details
+ *   (e.g., `'comply_test_controller'`).
+ * @param opts.message Optional override for the user-facing message.
+ *   MUST be a static string literal — see "opts.message" note above.
+ *
+ * @example
+ *   import { assertSandboxAccount } from '@adcp/sdk/server';
+ *
+ *   sandboxGate: input => {
+ *     const account = await resolveAccount(input);
+ *     assertSandboxAccount(account, { tool: 'comply_test_controller' });
+ *     return true;
+ *   }
+ */
+export declare function assertSandboxAccount(account: unknown, opts?: {
+    tool?: string;
+    message?: string;
+}): void;
+//# sourceMappingURL=account-mode.d.ts.map

package/dist/lib/server/account-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-mode.d.ts","sourceRoot":"","sources":["../../../src/lib/server/account-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAW5D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGhE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAU3G"}

package/dist/lib/server/account-mode.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * Account-mode primitives for sandbox-authority enforcement of
+ * `comply_test_controller` and other test-only surfaces.
+ *
+ * The hard rule: under no circumstances should the comply test
+ * controller (or any test-only surface) operate on a `live`-mode
+ * account. The flag must live on the resolved account, not on a
+ * process-level env var — env vars are operator-error-prone proxies
+ * for what is fundamentally an authority decision per principal.
+ *
+ * This module ships the type + helpers; auto-wiring into
+ * `createAdcpServerFromPlatform`'s `complyTest` path lands in a
+ * follow-up alongside mock-mode routing (#1435 Phase 2).
+ *
+ * @public
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAccountMode = getAccountMode;
+exports.isSandboxOrMockAccount = isSandboxOrMockAccount;
+exports.assertSandboxAccount = assertSandboxAccount;
+const async_outcome_1 = require("./decisioning/async-outcome");
+/**
+ * Reads `mode` off any account-shaped value, with back-compat for
+ * the legacy `sandbox: boolean` field. Returns the explicit mode if
+ * present; otherwise infers `'sandbox'` from `sandbox === true`;
+ * otherwise `'live'`.
+ *
+ * Adopters that have not yet migrated to the `mode` field continue to
+ * work — `account.sandbox === true` reads as sandbox mode through this
+ * helper. New code should prefer `mode` directly.
+ *
+ * Prototype-pollution defense: both `mode` and `sandbox` are read via
+ * `Object.hasOwn` rather than bare property access. Bare access traverses
+ * the prototype chain, so an attacker who reaches a `__proto__`-via-merge
+ * sink upstream (reachable in MCP envelope handling and similar deep-merge
+ * sites) could stamp `Object.prototype.mode = 'sandbox'` and silently
+ * downgrade every account's gate to a no-op. The own-property check makes
+ * the gate immune to that class of attack regardless of upstream hardening.
+ */
+function getAccountMode(account) {
+    if (account == null || typeof account !== 'object')
+        return 'live';
+    if (Object.hasOwn(account, 'mode')) {
+        const mode = account.mode;
+        if (mode === 'live' || mode === 'sandbox' || mode === 'mock')
+            return mode;
+    }
+    // Back-compat: legacy `sandbox: true` flag reads as `sandbox` mode.
+    if (Object.hasOwn(account, 'sandbox') && account.sandbox === true) {
+        return 'sandbox';
+    }
+    return 'live';
+}
+/**
+ * Predicate: is the account in a non-production mode that admits
+ * test-only surfaces (comply controller, force_*, simulate_*)?
+ *
+ * Returns `true` for `mode === 'sandbox' | 'mock'` (or legacy
+ * `sandbox: true`); `false` for `mode === 'live'` or any account
+ * shape that doesn't carry the field.
+ */
+function isSandboxOrMockAccount(account) {
+    const mode = getAccountMode(account);
+    return mode === 'sandbox' || mode === 'mock';
+}
+/**
+ * Throws an `AdcpError('PERMISSION_DENIED')` if the account is not in
+ * a non-production mode. Use to gate dispatch of test-only surfaces.
+ *
+ * Fail-closed semantics:
+ *   - `account === undefined` (no resolved account): throws.
+ *   - `account.mode === 'live'` or unspecified + no `sandbox: true`:
+ *     throws.
+ *   - `account.mode === 'sandbox' | 'mock'` (or legacy `sandbox: true`):
+ *     no-op, dispatch proceeds.
+ *
+ * The `details` payload carries `{ scope: 'sandbox-gate', tool? }` so
+ * dashboards can distinguish gate-rejections from other permission
+ * denials.
+ *
+ * **Resolver discipline.** The strength of this gate depends entirely on
+ * how the adopter's `AccountStore.resolve` constructs its return value.
+ * Resolvers MUST NOT spread untrusted input (request body, headers,
+ * `ctx_metadata`, query params) into the resolved account — doing so lets
+ * a buyer self-promote to `mode: 'sandbox'` and unlock test-only surfaces
+ * on a live principal. Source `mode` (and `sandbox`) from a trusted store
+ * keyed by the authenticated principal; never from request data.
+ *
+ * **opts.message must be a static string literal.** The message is echoed
+ * on the wire inside the error envelope. Interpolating user-controlled
+ * values into it creates a reflection sink (PII leakage, log injection,
+ * downstream HTML rendering). Pick from a fixed set of messages keyed by
+ * `tool` if you need variants.
+ *
+ * @param account The resolved account (typically `ctx.account` inside
+ *   a tool dispatch). Pass `undefined` if no account resolved — the
+ *   helper fails closed.
+ * @param opts.tool Optional tool name to surface in the error details
+ *   (e.g., `'comply_test_controller'`).
+ * @param opts.message Optional override for the user-facing message.
+ *   MUST be a static string literal — see "opts.message" note above.
+ *
+ * @example
+ *   import { assertSandboxAccount } from '@adcp/sdk/server';
+ *
+ *   sandboxGate: input => {
+ *     const account = await resolveAccount(input);
+ *     assertSandboxAccount(account, { tool: 'comply_test_controller' });
+ *     return true;
+ *   }
+ */
+function assertSandboxAccount(account, opts = {}) {
+    if (isSandboxOrMockAccount(account))
+        return;
+    throw new async_outcome_1.AdcpError('PERMISSION_DENIED', {
+        message: opts.message ?? 'Test-only surface requires a sandbox or mock account; resolved account is in live mode.',
+        details: {
+            scope: 'sandbox-gate',
+            reason: 'sandbox-or-mock-required',
+            ...(opts.tool && { tool: opts.tool }),
+        },
+    });
+}
+//# sourceMappingURL=account-mode.js.map

package/dist/lib/server/account-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-mode.js","sourceRoot":"","sources":["../../../src/lib/server/account-mode.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAyCH,wCAWC;AAUD,wDAGC;AAgDD,oDAUC;AAzHD,+DAAwD;AAqBxD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAI,OAA8B,CAAC,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,oEAAoE;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAK,OAAiC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,SAAgB,oBAAoB,CAAC,OAAgB,EAAE,OAA4C,EAAE;IACnG,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO;IAC5C,MAAM,IAAI,yBAAS,CAAC,mBAAmB,EAAE;QACvC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,yFAAyF;QAClH,OAAO,EAAE;YACP,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,0BAA0B;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACtC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/server/adcp-server.d.ts

@@ -159,6 +159,27 @@ export interface AdcpServerComplianceApi {
         allowProduction?: boolean;
     }): Promise<void>;
 }
+/**
+ * Phantom brand for {@link AdcpServer}. Makes the type nominal — a plain
+ * object that has the same methods structurally cannot be assigned to
+ * `AdcpServer` because it lacks this symbol-keyed property. Closes the
+ * door on `(plainObject as AdcpServer).registerTool(...)` patterns that
+ * tried to reach for an MCP-SDK method the framework intentionally
+ * doesn't expose.
+ *
+ * The brand is `never`-typed and never set on the runtime object, so
+ * `Object.getOwnPropertySymbols(server)` won't expose it — only the
+ * wrapper produced by `createAdcpServer()` carries the type-level
+ * signature, via the `as AdcpServerInternal` cast in `wrapMcpServer()`.
+ *
+ * Must be a real (non-`declare`) const so the d.ts emit retains it. An
+ * `export declare const X: unique symbol` in a `.ts` source file does
+ * not survive emit — the binding gets dropped from the published d.ts
+ * while consumers (the public `AdcpServer` interface) keep referencing
+ * it, which produces `TS2304: Cannot find name 'ADCP_SERVER_BRAND'` on
+ * any adopter `tsc --noEmit` against `@adcp/sdk/server` (issue #1236).
+ */
+export declare const ADCP_SERVER_BRAND: unique symbol;
 /**
  * Opaque handle returned by `createAdcpServer()`.
  *

package/dist/lib/server/adcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adcp-server.d.ts","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,mBAAmB;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC/D;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,qEAAqE;IACrE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC;IAErC;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,8CAA8C;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChH,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzG;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7D;;;;;;;;;;OAUG;IACH,cAAc,IAAI,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"adcp-server.d.ts","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,mBAAmB;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC/D;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,qEAAqE;IACrE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,MAAoC,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC;IAErC;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,8CAA8C;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,mBAAmB,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChH,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzG;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7D;;;;;;;;;;OAUG;IACH,cAAc,IAAI,MAAM,CAAC;CAC1B"}

package/dist/lib/server/adcp-server.js

@@ -28,12 +28,35 @@
  * (idempotency, governance, validation, response shape).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ADCP_CAPABILITIES = exports.ADCP_STATE_STORE = exports.ADCP_SDK_SERVER = void 0;
+exports.ADCP_CAPABILITIES = exports.ADCP_STATE_STORE = exports.ADCP_SDK_SERVER = exports.ADCP_SERVER_BRAND = void 0;
 exports.getSdkServer = getSdkServer;
 exports.isAdcpServer = isAdcpServer;
+exports.setSdkServerInstructions = setSdkServerInstructions;
+exports.wrapInitializeHandler = wrapInitializeHandler;
 exports.listRegisteredToolNames = listRegisteredToolNames;
 exports.wrapMcpServer = wrapMcpServer;
 const version_1 = require("../version");
+/**
+ * Phantom brand for {@link AdcpServer}. Makes the type nominal — a plain
+ * object that has the same methods structurally cannot be assigned to
+ * `AdcpServer` because it lacks this symbol-keyed property. Closes the
+ * door on `(plainObject as AdcpServer).registerTool(...)` patterns that
+ * tried to reach for an MCP-SDK method the framework intentionally
+ * doesn't expose.
+ *
+ * The brand is `never`-typed and never set on the runtime object, so
+ * `Object.getOwnPropertySymbols(server)` won't expose it — only the
+ * wrapper produced by `createAdcpServer()` carries the type-level
+ * signature, via the `as AdcpServerInternal` cast in `wrapMcpServer()`.
+ *
+ * Must be a real (non-`declare`) const so the d.ts emit retains it. An
+ * `export declare const X: unique symbol` in a `.ts` source file does
+ * not survive emit — the binding gets dropped from the published d.ts
+ * while consumers (the public `AdcpServer` interface) keep referencing
+ * it, which produces `TS2304: Cannot find name 'ADCP_SERVER_BRAND'` on
+ * any adopter `tsc --noEmit` against `@adcp/sdk/server` (issue #1236).
+ */
+exports.ADCP_SERVER_BRAND = Symbol('ADCP_SERVER_BRAND');
 /**
  * Symbol-keyed accessor for the underlying SDK `McpServer`. Used by
  * `serve()` to reach through the opaque wrapper when SDK-specific
@@ -89,6 +112,45 @@ function isAdcpServer(value) {
         exports.ADCP_SDK_SERVER in value &&
         typeof value.dispatchTestRequest === 'function');
 }
+/**
+ * Write the instructions string onto the low-level SDK server backing
+ * `mcpServer`. Called by the async-function-form instructions hook to
+ * inject the resolved string just before the MCP `initialize` response.
+ *
+ * @internal
+ * @remarks Pokes an SDK private field — see the "Private-field access" note above.
+ */
+function setSdkServerInstructions(mcpServer, value) {
+    const priv = mcpServer;
+    if (priv.server) {
+        priv.server._instructions = value;
+    }
+}
+/**
+ * Wrap the `initialize` request handler on `mcpServer` so that `wrapper`
+ * runs (and can await async work) before the original handler responds.
+ * The wrapper receives the original handler as its first argument and must
+ * call it to complete the handshake.
+ *
+ * The wrapper is invoked once per MCP `initialize` call on this server
+ * instance. Under `serve({ reuseAgent: false })` the server is created
+ * fresh per request, so the wrapper fires once per session. Under
+ * `reuseAgent: true` the `ADCP_INSTRUCTIONS_FN` check in `serve.ts`
+ * blocks the combination before the wrapper can be called a second time.
+ *
+ * @internal
+ * @remarks Pokes an SDK private field — see the "Private-field access" note above.
+ */
+function wrapInitializeHandler(mcpServer, wrapper) {
+    const priv = mcpServer;
+    const handlers = priv.server?._requestHandlers;
+    if (!handlers)
+        return;
+    const orig = handlers.get('initialize');
+    if (!orig)
+        return;
+    handlers.set('initialize', (req, extra) => wrapper(orig, req, extra));
+}
 function getRegisteredTool(server, name) {
     return server._registeredTools?.[name];
 }

package/dist/lib/server/adcp-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"adcp-server.js","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA6TH,oCAGC;AAOD,oCAOC;AAwCD,0DAGC;AAsBD,sCAoEC;AA9cD,wCAA0C;AAwQ1C;;;;;;;;GAQG;AACU,QAAA,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAErF;;;;;;;;;;GAUG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAOxF;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,SAAS,GAAI,MAAiD,CAAC,uBAAe,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,IAAI,IAAI;QACb,OAAO,KAAK,KAAK,QAAQ;QACzB,uBAAe,IAAK,KAAsC;QAC1D,OAAQ,KAAoB,CAAC,mBAAmB,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AA4BD,SAAS,iBAAiB,CAAC,MAAiB,EAAE,IAAY;IACxD,OAAQ,MAAuC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,MAAiB;IACvD,MAAM,UAAU,GAAI,MAAuC,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAiB,EACjB,MAAc;IAEd,OAAQ,MAAuC,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAC3B,KAAqC,EACrC,UAAoC,EACpC,cAAsB,sBAAY;IAElC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAkB,CAAC;IAC/B,MAAM,kBAAkB,GAA4B,UAAU,IAAI;QAChE,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,+GAA+G,CAClH,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAwB,EAAE,MAA8B,EAA6B,EAAE;QAC7G,MAAM,KAAK,GAA0E;YACnF,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SACrC,CAAC;QACF,IAAI,MAAM,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA2D,CAAC;YAChG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,EAAE,OAA0B,EAA4B,EAAE;QAC5E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAqD;YAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;SACvD,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACxD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAoB,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB;QAClC,CAAC,uBAAe,CAAC,EAAE,GAAG;QACtB,OAAO,CAAC,SAAS;YACf,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,GAAG,CAAC,OAAO,CAAC,SAA2D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK;YACH,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,UAAU,EAAE,kBAAkB;QAC9B,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,EAAE,QAAqD;QAC1E,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW;KAClC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"adcp-server.js","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAmUH,oCAGC;AAOD,oCAOC;AAwCD,4DAKC;AAiBD,sDAcC;AAcD,0DAGC;AAsBD,sCAoEC;AAtgBD,wCAA0C;AA0I1C;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAgH5E;;;;;;;;GAQG;AACU,QAAA,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAErF;;;;;;;;;;GAUG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAOxF;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,SAAS,GAAI,MAAiD,CAAC,uBAAe,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,IAAI,IAAI;QACb,OAAO,KAAK,KAAK,QAAQ;QACzB,uBAAe,IAAK,KAAsC;QAC1D,OAAQ,KAAoB,CAAC,mBAAmB,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AAgCD;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,SAAoB,EAAE,KAAyB;IACtF,MAAM,IAAI,GAAG,SAAyC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,qBAAqB,CACnC,SAAoB,EACpB,OAI+B;IAE/B,MAAM,IAAI,GAAG,SAAyC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAiB,EAAE,IAAY;IACxD,OAAQ,MAAuC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,MAAiB;IACvD,MAAM,UAAU,GAAI,MAAuC,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAiB,EACjB,MAAc;IAEd,OAAQ,MAAuC,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAC3B,KAAqC,EACrC,UAAoC,EACpC,cAAsB,sBAAY;IAElC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAkB,CAAC;IAC/B,MAAM,kBAAkB,GAA4B,UAAU,IAAI;QAChE,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,+GAA+G,CAClH,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAwB,EAAE,MAA8B,EAA6B,EAAE;QAC7G,MAAM,KAAK,GAA0E;YACnF,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SACrC,CAAC;QACF,IAAI,MAAM,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA2D,CAAC;YAChG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,EAAE,OAA0B,EAA4B,EAAE;QAC5E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAqD;YAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;SACvD,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACxD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAoB,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB;QAClC,CAAC,uBAAe,CAAC,EAAE,GAAG;QACtB,OAAO,CAAC,SAAS;YACf,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,GAAG,CAAC,OAAO,CAAC,SAA2D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK;YACH,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,UAAU,EAAE,kBAAkB;QAC9B,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,EAAE,QAAqD;QAC1E,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW;KAClC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/server/auth-signature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-signature.d.ts","sourceRoot":"","sources":["../../../src/lib/server/auth-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAgB,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAEL,KAAK,aAAa,EAElB,KAAK,aAAa,EAInB,MAAM,QAAQ,CAAC;AAEhB,MAAM,WAAW,qCAAqC;IACpD;;8DAE0D;IAC1D,UAAU,EAAE,kBAAkB,CAAC;IAC/B,6CAA6C;IAC7C,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,gBAAgB,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IACtF;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACjE,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACzD;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,aAAa,CAAC;CAC3D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,qCAAqC,GAAG,aAAa,CAuF5G;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,kCAAkC;IACjD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;CACxF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,aAAa,EAC3B,OAAO,GAAE,kCAAuC,GAC/C,aAAa,CAuEf;AAED,MAAM,WAAW,mCAAmC;IAClD,2GAA2G;IAC3G,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;CACxF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mCAAmC,GAAG,aAAa,CAKxG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAWjF"}
+{"version":3,"file":"auth-signature.d.ts","sourceRoot":"","sources":["../../../src/lib/server/auth-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAG5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAgB,MAAM,kBAAkB,CAAC;AAGzF,OAAO,EAEL,KAAK,aAAa,EAElB,KAAK,aAAa,EAInB,MAAM,QAAQ,CAAC;AAEhB,MAAM,WAAW,qCAAqC;IACpD;;8DAE0D;IAC1D,UAAU,EAAE,kBAAkB,CAAC;IAC/B,6CAA6C;IAC7C,IAAI,EAAE,YAAY,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,gBAAgB,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IACtF;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACjE,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACzD;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,aAAa,CAAC;CAC3D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,qCAAqC,GAAG,aAAa,CA6G5G;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,kCAAkC;IACjD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;CACxF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,aAAa,EAC3B,OAAO,GAAE,kCAAuC,GAC/C,aAAa,CAuEf;AAED,MAAM,WAAW,mCAAmC;IAClD,2GAA2G;IAC3G,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAC;CACxF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mCAAmC,GAAG,aAAa,CAKxG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAWjF"}

package/dist/lib/server/auth-signature.js

@@ -8,6 +8,7 @@ const errors_1 = require("../signing/errors");
 const replay_1 = require("../signing/replay");
 const revocation_1 = require("../signing/revocation");
 const verifier_1 = require("../signing/verifier");
+const buyer_agent_1 = require("./decisioning/buyer-agent");
 const auth_1 = require("./auth");
 /**
  * Build an {@link Authenticator} that verifies an RFC 9421 request signature.
@@ -80,6 +81,25 @@ function verifySignatureAsAuthenticator(options) {
             verified_at: result.verified_at,
             ...(result.agent_url !== undefined ? { agent_url: result.agent_url } : {}),
         };
+        // Stamp the kind-discriminated `credential` variant for the framework's
+        // dispatcher and `BuyerAgentRegistry` resolution (Phase 1 Stage 3 of
+        // #1269). Per adcontextprotocol/adcp#3831, `agent_url` here is the
+        // verifier's `agentUrlForKeyid` lookup result — derived from the
+        // `agents[]` entry whose `jwks_uri` resolved the keyid.
+        //
+        // When `agent_url` is unset (verifier wired without a keyid→agent URL
+        // resolver), we OMIT the `credential` rather than synthesize an
+        // `http_sig` variant that would otherwise carry an empty agent_url —
+        // Stage 1's runtime guard rejects malformed http_sig credentials, so
+        // emitting one would just trip the guard and confuse the audit trail.
+        const credential = signer.agent_url !== undefined
+            ? (0, buyer_agent_1.markVerifiedHttpSig)({
+                kind: 'http_sig',
+                keyid: signer.keyid,
+                agent_url: signer.agent_url,
+                verified_at: signer.verified_at,
+            })
+            : undefined;
         const principal = options.makePrincipal
             ? options.makePrincipal(signer)
             : {
@@ -91,6 +111,7 @@ function verifySignatureAsAuthenticator(options) {
                         ...(signer.agent_url !== undefined ? { agent_url: signer.agent_url } : {}),
                     },
                 },
+                ...(credential !== undefined && { credential }),
             };
         // Write the side-channel state only after the principal is fully built so
         // a throw from `makePrincipal` leaves `req.verifiedSigner` unset — the

package/dist/lib/server/auth-signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-signature.js","sourceRoot":"","sources":["../../../src/lib/server/auth-signature.ts"],"names":[],"mappings":";;AA0HA,wEAuFC;AAgHD,kEA2EC;AAgED,oEAKC;AA8BD,kDAWC;AAjdD,8CAA0D;AAE1D,8CAA0E;AAC1E,sDAAsF;AAEtF,kDAA6D;AAC7D,iCAQgB;AAwDhB;;;;;;;;;;GAUG;AACH,SAAgB,8BAA8B,CAAC,OAA8C;IAC3F,qEAAqE;IACrE,+DAA+D;IAC/D,mEAAmE;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,4BAAmB,EAAE,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,oCAAuB,EAAE,CAAC;IAEjF,MAAM,aAAa,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC/C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,IAAI,GAAI,GAA8C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAA6C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAgB;YAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;YAC3B,GAAG;YACH,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI;SACL,CAAC;QAEF,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,iCAAsB,EAAC,WAAW,EAAE;gBACjD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW;gBACX,eAAe;gBACf,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAA6C,CAAC;gBAClF,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,gBAAS,CAAC,uBAAuB,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,IAAI,gBAAS,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,IAAI,gBAAS,CAAC,oDAAoD,EAAE;gBACxE,KAAK,EAAE,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,MAAM,GAAG,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAS,CAAC,mDAAmD,EAAE;gBACvE,KAAK,EAAE,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC;aAC1F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAmB;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;YACrC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;YAC/B,CAAC,CAAC;gBACE,SAAS,EAAE,WAAW,MAAM,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE;oBACN,SAAS,EAAE;wBACT,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3E;iBACF;aACF,CAAC;QAEN,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,mDAAmD;QAClD,GAA6D,CAAC,cAAc,GAAG,MAAM,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO,IAAA,mCAA4B,EAAC,aAAa,CAAC,CAAC;AACrD,CAAC;AAkGD;;;;;;;;;;;;;GAaG;AACH,SAAgB,2BAA2B,CACzC,aAA4B,EAC5B,YAA2B,EAC3B,UAA8C,EAAE;IAEhD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAClD,MAAM,QAAQ,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,mEAAmE;gBACnE,iDAAiD;gBACjD,MAAM,IAAI,gBAAS,CAAC,wCAAwC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,oEAAoE;QACpE,oEAAoE;QACpE,6DAA6D;QAC7D,mBAAmB;QACnB,IAAI,cAAc,GAAsB,IAAI,CAAC;QAC7C,IAAI,aAAsB,CAAC;QAC3B,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,GAAG,IAAI,CAAC;YACrB,aAAa,GAAG,GAAG,CAAC;QACtB,CAAC;QACD,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,6DAA6D;QAC7D,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC;QACnD,mEAAmE;QACnE,4DAA4D;QAC5D,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAA6C,CAAC,CAAC;YAClF,IAAI,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAS,CAAC,0BAA0B,SAAS,GAAG,EAAE;oBAC1D,KAAK,EAAE,IAAI,8BAAqB,CAC9B,4BAA4B,EAC5B,CAAC,EACD,aAAa,SAAS,kFAAkF,CACzG;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,iEAAiE;QACjE,6DAA6D;QAC7D,uDAAuD;QACvD,IAAI,aAAa;YAAE,MAAM,aAAa,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAA,gCAAyB,EAAC,aAAa,CAAC,IAAI,IAAA,gCAAyB,EAAC,YAAY,CAAC,CAAC;IACjH,2DAA2D;IAC3D,kEAAkE;IAClE,qEAAqE;IACrE,wDAAwD;IACxD,0DAA0D;IAC1D,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,oBAAoB,IAAI,gBAAgB,EAAE,CAAC;QAC7C,IAAA,mCAA4B,EAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,IAAA,oCAA6B,EAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,SAAgB,4BAA4B,CAAC,OAA4C;IACvF,OAAO,2BAA2B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;QACtE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,mBAAmB,CAAC,GAAyB;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2C,CAAC;QACvE,IAAI,IAAI,EAAE,MAAM,KAAK,YAAY;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAwC,CAAC;QAC7D,OAAO,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,SAAS,kBAAkB,CAAC,GAAoB;IAC9C,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,CAAgC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAI,GAAG,CAAC,MAA8C,EAAE,SAAS,KAAK,IAAI,CAAC;IAC1F,MAAM,KAAK,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"auth-signature.js","sourceRoot":"","sources":["../../../src/lib/server/auth-signature.ts"],"names":[],"mappings":";;AA2HA,wEA6GC;AAgHD,kEA2EC;AAgED,oEAKC;AA8BD,kDAWC;AAxeD,8CAA0D;AAE1D,8CAA0E;AAC1E,sDAAsF;AAEtF,kDAA6D;AAC7D,2DAAgE;AAChE,iCAQgB;AAwDhB;;;;;;;;;;GAUG;AACH,SAAgB,8BAA8B,CAAC,OAA8C;IAC3F,qEAAqE;IACrE,+DAA+D;IAC/D,mEAAmE;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,4BAAmB,EAAE,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,oCAAuB,EAAE,CAAC;IAEjF,MAAM,aAAa,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC/C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,IAAI,GAAI,GAA8C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAA6C,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAgB;YAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;YAC3B,GAAG;YACH,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI;SACL,CAAC;QAEF,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,iCAAsB,EAAC,WAAW,EAAE;gBACjD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW;gBACX,eAAe;gBACf,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAA6C,CAAC;gBAClF,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,gBAAS,CAAC,uBAAuB,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,IAAI,gBAAS,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,IAAI,gBAAS,CAAC,oDAAoD,EAAE;gBACxE,KAAK,EAAE,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,MAAM,GAAG,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,gBAAS,CAAC,mDAAmD,EAAE;gBACvE,KAAK,EAAE,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC;aAC1F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAmB;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC;QAEF,wEAAwE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,iEAAiE;QACjE,wDAAwD;QACxD,EAAE;QACF,sEAAsE;QACtE,gEAAgE;QAChE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAA,iCAAmB,EAAC;gBAClB,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;YACrC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;YAC/B,CAAC,CAAC;gBACE,SAAS,EAAE,WAAW,MAAM,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE;oBACN,SAAS,EAAE;wBACT,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3E;iBACF;gBACD,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;aAChD,CAAC;QAEN,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,mDAAmD;QAClD,GAA6D,CAAC,cAAc,GAAG,MAAM,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO,IAAA,mCAA4B,EAAC,aAAa,CAAC,CAAC;AACrD,CAAC;AAkGD;;;;;;;;;;;;;GAaG;AACH,SAAgB,2BAA2B,CACzC,aAA4B,EAC5B,YAA2B,EAC3B,UAA8C,EAAE;IAEhD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAClD,MAAM,QAAQ,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,sEAAsE;gBACtE,mEAAmE;gBACnE,iDAAiD;gBACjD,MAAM,IAAI,gBAAS,CAAC,wCAAwC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,oEAAoE;QACpE,oEAAoE;QACpE,6DAA6D;QAC7D,mBAAmB;QACnB,IAAI,cAAc,GAAsB,IAAI,CAAC;QAC7C,IAAI,aAAsB,CAAC;QAC3B,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,aAAa,GAAG,IAAI,CAAC;YACrB,aAAa,GAAG,GAAG,CAAC;QACtB,CAAC;QACD,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,6DAA6D;QAC7D,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,cAAc,CAAC;QACnD,mEAAmE;QACnE,4DAA4D;QAC5D,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAA6C,CAAC,CAAC;YAClF,IAAI,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,gBAAS,CAAC,0BAA0B,SAAS,GAAG,EAAE;oBAC1D,KAAK,EAAE,IAAI,8BAAqB,CAC9B,4BAA4B,EAC5B,CAAC,EACD,aAAa,SAAS,kFAAkF,CACzG;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,iEAAiE;QACjE,6DAA6D;QAC7D,uDAAuD;QACvD,IAAI,aAAa;YAAE,MAAM,aAAa,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAA,gCAAyB,EAAC,aAAa,CAAC,IAAI,IAAA,gCAAyB,EAAC,YAAY,CAAC,CAAC;IACjH,2DAA2D;IAC3D,kEAAkE;IAClE,qEAAqE;IACrE,wDAAwD;IACxD,0DAA0D;IAC1D,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,oBAAoB,IAAI,gBAAgB,EAAE,CAAC;QAC7C,IAAA,mCAA4B,EAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,IAAA,oCAA6B,EAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,SAAgB,4BAA4B,CAAC,OAA4C;IACvF,OAAO,2BAA2B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;QACtE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,mBAAmB,CAAC,GAAyB;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2C,CAAC;QACvE,IAAI,IAAI,EAAE,MAAM,KAAK,YAAY;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAwC,CAAC;QAC7D,OAAO,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,SAAS,kBAAkB,CAAC,GAAoB;IAC9C,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,CAAgC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAI,GAAG,CAAC,MAA8C,EAAE,SAAS,KAAK,IAAI,CAAC;IAC1F,MAAM,KAAK,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC"}