@adcp/sdk 6.9.0 → 6.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (233) hide show
  1. package/bin/adcp.js +285 -5
  2. package/compliance/cache/3.0.6.previous/domains/brand/index.yaml +163 -0
  3. package/compliance/cache/3.0.6.previous/domains/creative/index.yaml +412 -0
  4. package/compliance/cache/3.0.6.previous/domains/governance/index.yaml +683 -0
  5. package/compliance/cache/3.0.6.previous/domains/media-buy/creative-reception.yaml +247 -0
  6. package/compliance/cache/3.0.6.previous/domains/media-buy/index.yaml +769 -0
  7. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/create_media_buy_async.yaml +232 -0
  8. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/creative_fate_after_cancellation.yaml +414 -0
  9. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/delivery_reporting.yaml +205 -0
  10. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/governance_approved.yaml +211 -0
  11. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/governance_conditions.yaml +196 -0
  12. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/governance_denied.yaml +192 -0
  13. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/governance_denied_recovery.yaml +244 -0
  14. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/invalid_transitions.yaml +284 -0
  15. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/inventory_list_no_match.yaml +143 -0
  16. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/inventory_list_targeting.yaml +271 -0
  17. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/measurement_terms_rejected.yaml +195 -0
  18. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/pending_creatives_to_start.yaml +250 -0
  19. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/proposal_finalize.yaml +243 -0
  20. package/compliance/cache/3.0.6.previous/domains/media-buy/scenarios/refine_products.yaml +148 -0
  21. package/compliance/cache/3.0.6.previous/domains/media-buy/state-machine.yaml +442 -0
  22. package/compliance/cache/3.0.6.previous/domains/signals/index.yaml +266 -0
  23. package/compliance/cache/3.0.6.previous/domains/sponsored-intelligence/index.yaml +256 -0
  24. package/compliance/cache/3.0.6.previous/index.json +324 -0
  25. package/compliance/cache/3.0.6.previous/protocols/brand/index.yaml +163 -0
  26. package/compliance/cache/3.0.6.previous/protocols/creative/index.yaml +412 -0
  27. package/compliance/cache/3.0.6.previous/protocols/governance/index.yaml +683 -0
  28. package/compliance/cache/3.0.6.previous/protocols/media-buy/creative-reception.yaml +247 -0
  29. package/compliance/cache/3.0.6.previous/protocols/media-buy/index.yaml +769 -0
  30. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/create_media_buy_async.yaml +232 -0
  31. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/creative_fate_after_cancellation.yaml +414 -0
  32. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/delivery_reporting.yaml +205 -0
  33. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/governance_approved.yaml +211 -0
  34. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/governance_conditions.yaml +196 -0
  35. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/governance_denied.yaml +192 -0
  36. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/governance_denied_recovery.yaml +244 -0
  37. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/invalid_transitions.yaml +284 -0
  38. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/inventory_list_no_match.yaml +143 -0
  39. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/inventory_list_targeting.yaml +271 -0
  40. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/measurement_terms_rejected.yaml +195 -0
  41. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/pending_creatives_to_start.yaml +250 -0
  42. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/proposal_finalize.yaml +243 -0
  43. package/compliance/cache/3.0.6.previous/protocols/media-buy/scenarios/refine_products.yaml +148 -0
  44. package/compliance/cache/3.0.6.previous/protocols/media-buy/state-machine.yaml +442 -0
  45. package/compliance/cache/3.0.6.previous/protocols/signals/index.yaml +266 -0
  46. package/compliance/cache/3.0.6.previous/protocols/sponsored-intelligence/index.yaml +256 -0
  47. package/compliance/cache/3.0.6.previous/specialisms/audience-sync/index.yaml +280 -0
  48. package/compliance/cache/3.0.6.previous/specialisms/brand-rights/index.yaml +350 -0
  49. package/compliance/cache/3.0.6.previous/specialisms/brand-rights/scenarios/governance_denied.yaml +204 -0
  50. package/compliance/cache/3.0.6.previous/specialisms/collection-lists/index.yaml +359 -0
  51. package/compliance/cache/3.0.6.previous/specialisms/content-standards/index.yaml +572 -0
  52. package/compliance/cache/3.0.6.previous/specialisms/creative-ad-server/index.yaml +383 -0
  53. package/compliance/cache/3.0.6.previous/specialisms/creative-generative/generative-seller.yaml +758 -0
  54. package/compliance/cache/3.0.6.previous/specialisms/creative-generative/index.yaml +746 -0
  55. package/compliance/cache/3.0.6.previous/specialisms/creative-template/index.yaml +413 -0
  56. package/compliance/cache/3.0.6.previous/specialisms/governance-aware-seller/index.yaml +136 -0
  57. package/compliance/cache/3.0.6.previous/specialisms/governance-delivery-monitor/index.yaml +441 -0
  58. package/compliance/cache/3.0.6.previous/specialisms/governance-spend-authority/denied.yaml +221 -0
  59. package/compliance/cache/3.0.6.previous/specialisms/governance-spend-authority/index.yaml +330 -0
  60. package/compliance/cache/3.0.6.previous/specialisms/property-lists/index.yaml +482 -0
  61. package/compliance/cache/3.0.6.previous/specialisms/sales-broadcast-tv/index.yaml +689 -0
  62. package/compliance/cache/3.0.6.previous/specialisms/sales-catalog-driven/index.yaml +779 -0
  63. package/compliance/cache/3.0.6.previous/specialisms/sales-guaranteed/index.yaml +504 -0
  64. package/compliance/cache/3.0.6.previous/specialisms/sales-non-guaranteed/index.yaml +428 -0
  65. package/compliance/cache/3.0.6.previous/specialisms/sales-proposal-mode/index.yaml +520 -0
  66. package/compliance/cache/3.0.6.previous/specialisms/sales-social/index.yaml +584 -0
  67. package/compliance/cache/3.0.6.previous/specialisms/signal-marketplace/index.yaml +415 -0
  68. package/compliance/cache/3.0.6.previous/specialisms/signal-marketplace/scenarios/governance_denied.yaml +207 -0
  69. package/compliance/cache/3.0.6.previous/specialisms/signal-owned/index.yaml +316 -0
  70. package/compliance/cache/3.0.6.previous/test-kits/acme-outdoor.yaml +210 -0
  71. package/compliance/cache/3.0.6.previous/test-kits/bistro-oranje.yaml +126 -0
  72. package/compliance/cache/3.0.6.previous/test-kits/nova-motors.yaml +262 -0
  73. package/compliance/cache/3.0.6.previous/test-kits/osei-natural.yaml +126 -0
  74. package/compliance/cache/3.0.6.previous/test-kits/signed-requests-runner.yaml +155 -0
  75. package/compliance/cache/3.0.6.previous/test-kits/substitution-observer-runner.yaml +690 -0
  76. package/compliance/cache/3.0.6.previous/test-kits/summit-foods.yaml +125 -0
  77. package/compliance/cache/3.0.6.previous/test-kits/webhook-receiver-runner.yaml +265 -0
  78. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/001-minimal-plan.json +43 -0
  79. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/002-full-plan.json +217 -0
  80. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/003-bookkeeping-stripped.json +60 -0
  81. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/004a-human-review-omitted.json +43 -0
  82. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/004b-human-review-explicit-null.json +49 -0
  83. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/005a-policy-categories-order-1.json +53 -0
  84. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/005b-policy-categories-order-2.json +57 -0
  85. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/006a-ext-trace-v1.json +49 -0
  86. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/006b-ext-trace-v2.json +53 -0
  87. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/007-unicode-objectives.json +43 -0
  88. package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/008-numeric-canonicalization.json +65 -0
  89. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/README.md +219 -0
  90. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/canonicalization.json +241 -0
  91. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/keys.json +60 -0
  92. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/001-no-signature-header.json +24 -0
  93. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/002-wrong-tag.json +26 -0
  94. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/003-expired-signature.json +26 -0
  95. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/004-window-too-long.json +26 -0
  96. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/005-alg-not-allowed.json +26 -0
  97. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/006-missing-covered-component.json +26 -0
  98. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/007-missing-content-digest.json +26 -0
  99. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/008-unknown-keyid.json +26 -0
  100. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/009-key-ops-missing-verify.json +27 -0
  101. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/010-content-digest-mismatch.json +33 -0
  102. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/011-malformed-header.json +27 -0
  103. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/012-missing-expires-param.json +26 -0
  104. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/013-expires-le-created.json +27 -0
  105. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/014-missing-nonce-param.json +27 -0
  106. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/015-signature-invalid.json +28 -0
  107. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/016-replayed-nonce.json +35 -0
  108. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/017-key-revoked.json +38 -0
  109. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/018-digest-covered-when-forbidden.json +28 -0
  110. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/019-signature-without-signature-input.json +26 -0
  111. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/020-rate-abuse.json +34 -0
  112. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/021-duplicate-signature-input-label.json +31 -0
  113. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/022-multi-valued-content-type.json +31 -0
  114. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/023-multi-valued-content-digest.json +32 -0
  115. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/024-unquoted-string-param.json +31 -0
  116. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/025-jwk-alg-crv-mismatch.json +43 -0
  117. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/026-non-ascii-host.json +31 -0
  118. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/negative/027-webhook-registration-authentication-unsigned.json +25 -0
  119. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/001-basic-post.json +30 -0
  120. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/002-post-with-content-digest.json +31 -0
  121. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/003-es256-post.json +30 -0
  122. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/004-multiple-signature-labels.json +26 -0
  123. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/005-default-port-stripped.json +30 -0
  124. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/006-dot-segment-path.json +30 -0
  125. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/007-query-byte-preserved.json +30 -0
  126. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/008-percent-encoded-path.json +30 -0
  127. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/009-percent-encoded-unreserved-decoded.json +30 -0
  128. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/010-percent-encoded-slash-preserved.json +30 -0
  129. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/011-ipv6-authority.json +30 -0
  130. package/compliance/cache/3.0.6.previous/test-vectors/request-signing/positive/012-ipv6-authority-default-port-stripped.json +30 -0
  131. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/README.md +211 -0
  132. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/keys.json +61 -0
  133. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/001-wrong-tag.json +26 -0
  134. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/002-expired-signature.json +26 -0
  135. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/003-window-too-long.json +26 -0
  136. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/004-alg-not-allowed.json +26 -0
  137. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/005-missing-authority-component.json +26 -0
  138. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/006-missing-content-digest.json +25 -0
  139. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/007-unknown-keyid.json +26 -0
  140. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/008-wrong-adcp-use.json +26 -0
  141. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/009-content-digest-mismatch.json +26 -0
  142. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/010-malformed-signature-input.json +26 -0
  143. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/011-signature-without-input.json +25 -0
  144. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/012-missing-expires-param.json +26 -0
  145. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/013-expires-le-created.json +26 -0
  146. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/014-missing-nonce-param.json +26 -0
  147. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/015-signature-invalid.json +26 -0
  148. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/016-replayed-nonce.json +37 -0
  149. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/017-key-revoked.json +32 -0
  150. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/018-rate-abuse.json +33 -0
  151. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/019-revocation-stale.json +32 -0
  152. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/020-key-ops-missing-verify.json +41 -0
  153. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/negative/021-base64-alphabet-mixing.json +26 -0
  154. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/001-basic-post.json +24 -0
  155. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/002-es256-post.json +24 -0
  156. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/003-multiple-signature-labels.json +24 -0
  157. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/004-default-port-stripped.json +24 -0
  158. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/005-percent-encoded-path.json +24 -0
  159. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/006-query-byte-preserved.json +24 -0
  160. package/compliance/cache/3.0.6.previous/test-vectors/webhook-signing/positive/007-body-without-idempotency-key.json +25 -0
  161. package/compliance/cache/3.0.6.previous/universal/capability-discovery.yaml +125 -0
  162. package/compliance/cache/3.0.6.previous/universal/collection-lists-pagination-integrity.yaml +306 -0
  163. package/compliance/cache/3.0.6.previous/universal/content-standards-pagination-integrity.yaml +326 -0
  164. package/compliance/cache/3.0.6.previous/universal/deterministic-testing.yaml +1343 -0
  165. package/compliance/cache/3.0.6.previous/universal/error-compliance.yaml +474 -0
  166. package/compliance/cache/3.0.6.previous/universal/fictional-entities.yaml +307 -0
  167. package/compliance/cache/3.0.6.previous/universal/get-media-buys-pagination-integrity.yaml +160 -0
  168. package/compliance/cache/3.0.6.previous/universal/get-signals-pagination-integrity.yaml +211 -0
  169. package/compliance/cache/3.0.6.previous/universal/idempotency.yaml +593 -0
  170. package/compliance/cache/3.0.6.previous/universal/pagination-integrity-creative-formats.yaml +258 -0
  171. package/compliance/cache/3.0.6.previous/universal/pagination-integrity-list-accounts.yaml +262 -0
  172. package/compliance/cache/3.0.6.previous/universal/pagination-integrity.yaml +263 -0
  173. package/compliance/cache/3.0.6.previous/universal/property-lists-pagination-integrity.yaml +307 -0
  174. package/compliance/cache/3.0.6.previous/universal/runner-output-contract.yaml +358 -0
  175. package/compliance/cache/3.0.6.previous/universal/schema-validation.yaml +526 -0
  176. package/compliance/cache/3.0.6.previous/universal/security.yaml +431 -0
  177. package/compliance/cache/3.0.6.previous/universal/signed-requests.yaml +205 -0
  178. package/compliance/cache/3.0.6.previous/universal/storyboard-schema.yaml +1176 -0
  179. package/compliance/cache/3.0.6.previous/universal/v3-envelope-integrity.yaml +106 -0
  180. package/compliance/cache/3.0.6.previous/universal/webhook-emission.yaml +337 -0
  181. package/dist/lib/schemas-data/v2.5/_provenance.json +1 -1
  182. package/dist/lib/server/create-adcp-server.d.ts +33 -0
  183. package/dist/lib/server/create-adcp-server.d.ts.map +1 -1
  184. package/dist/lib/server/create-adcp-server.js +127 -1
  185. package/dist/lib/server/create-adcp-server.js.map +1 -1
  186. package/dist/lib/server/credential-policy.d.ts +221 -0
  187. package/dist/lib/server/credential-policy.d.ts.map +1 -0
  188. package/dist/lib/server/credential-policy.js +260 -0
  189. package/dist/lib/server/credential-policy.js.map +1 -0
  190. package/dist/lib/server/dynamic-registry.d.ts +219 -0
  191. package/dist/lib/server/dynamic-registry.d.ts.map +1 -0
  192. package/dist/lib/server/dynamic-registry.js +245 -0
  193. package/dist/lib/server/dynamic-registry.js.map +1 -0
  194. package/dist/lib/server/index.d.ts +8 -0
  195. package/dist/lib/server/index.d.ts.map +1 -1
  196. package/dist/lib/server/index.js +15 -4
  197. package/dist/lib/server/index.js.map +1 -1
  198. package/dist/lib/server/operational-platform.d.ts +239 -0
  199. package/dist/lib/server/operational-platform.d.ts.map +1 -0
  200. package/dist/lib/server/operational-platform.js +94 -0
  201. package/dist/lib/server/operational-platform.js.map +1 -0
  202. package/dist/lib/server/wire-safe.d.ts +211 -0
  203. package/dist/lib/server/wire-safe.d.ts.map +1 -0
  204. package/dist/lib/server/wire-safe.js +231 -0
  205. package/dist/lib/server/wire-safe.js.map +1 -0
  206. package/dist/lib/server/wire-spec-fields.generated.d.ts +168 -0
  207. package/dist/lib/server/wire-spec-fields.generated.d.ts.map +1 -0
  208. package/dist/lib/server/wire-spec-fields.generated.js +172 -0
  209. package/dist/lib/server/wire-spec-fields.generated.js.map +1 -0
  210. package/dist/lib/testing/compliance/index.d.ts +2 -0
  211. package/dist/lib/testing/compliance/index.d.ts.map +1 -1
  212. package/dist/lib/testing/compliance/index.js +6 -1
  213. package/dist/lib/testing/compliance/index.js.map +1 -1
  214. package/dist/lib/testing/compliance/summary.d.ts +77 -0
  215. package/dist/lib/testing/compliance/summary.d.ts.map +1 -0
  216. package/dist/lib/testing/compliance/summary.js +176 -0
  217. package/dist/lib/testing/compliance/summary.js.map +1 -0
  218. package/dist/lib/testing/storyboard/compliance.d.ts +26 -0
  219. package/dist/lib/testing/storyboard/compliance.d.ts.map +1 -1
  220. package/dist/lib/testing/storyboard/compliance.js +51 -0
  221. package/dist/lib/testing/storyboard/compliance.js.map +1 -1
  222. package/dist/lib/testing/storyboard/index.d.ts +2 -2
  223. package/dist/lib/testing/storyboard/index.d.ts.map +1 -1
  224. package/dist/lib/testing/storyboard/index.js +4 -2
  225. package/dist/lib/testing/storyboard/index.js.map +1 -1
  226. package/dist/lib/testing/storyboard/runner.d.ts.map +1 -1
  227. package/dist/lib/testing/storyboard/runner.js +58 -5
  228. package/dist/lib/testing/storyboard/runner.js.map +1 -1
  229. package/dist/lib/version.d.ts +3 -3
  230. package/dist/lib/version.d.ts.map +1 -1
  231. package/dist/lib/version.js +3 -3
  232. package/dist/lib/version.js.map +1 -1
  233. package/package.json +2 -2
@@ -0,0 +1,441 @@
1
+ id: governance_delivery_monitor
2
+ version: "1.0.0"
3
+ title: "Campaign governance — delivery monitoring with drift detection"
4
+ protocol: governance
5
+ category: governance_delivery_monitor
6
+ summary: "Governance agent monitors delivery, detects budget drift past thresholds, and triggers re-evaluation."
7
+ track: campaign_governance
8
+ required_tools:
9
+ - check_governance
10
+
11
+ # Cross-step assertion (adcp#2639): mid-flight drift can return a denial
12
+ # re-evaluation. The assertion gates any post-denial mutation on the
13
+ # affected plan, catching sellers that ignore a mid-campaign denial and
14
+ # keep delivering / committing new spend.
15
+ # Cross-step assertion (adcp#2664): status.monotonic rejects media_buy
16
+ # status transitions observed across steps that aren't on the spec
17
+ # lifecycle graph — paused → active → paused is fine,
18
+ # active → pending_creatives fails.
19
+ invariants:
20
+ - governance.denial_blocks_mutation
21
+ - status.monotonic
22
+
23
+ narrative: |
24
+ After a media buy is confirmed with governance approval, the governance agent monitors
25
+ delivery. When spend drifts past a reallocation threshold — for example, one line item
26
+ is overspending while another is underspending — the governance agent triggers a delivery
27
+ phase re-evaluation.
28
+
29
+ This storyboard covers the delivery monitoring governance flow: initial approval,
30
+ delivery metrics showing drift, governance re-check triggered by drift, and either
31
+ re-approval with adjusted conditions or a pause recommendation.
32
+
33
+ agent:
34
+ interaction_model: media_buy_seller
35
+ capabilities:
36
+ - sells_media
37
+ - governance_aware
38
+ examples:
39
+ - "Publisher platform with governance and delivery reporting"
40
+ - "Retail media network with pacing data"
41
+
42
+ caller:
43
+ role: buyer_agent
44
+ example: "Pinnacle Agency (buyer)"
45
+
46
+ prerequisites:
47
+ description: |
48
+ The caller needs a brand identity, operator credentials, a governance agent URL,
49
+ and an active media buy with delivery data. The governance plan defines a
50
+ reallocation threshold that triggers re-evaluation.
51
+ test_kit: "test-kits/acme-outdoor.yaml"
52
+ controller_seeding: true
53
+
54
+ fixtures:
55
+ products:
56
+ - product_id: "outdoor_display_q2"
57
+ delivery_type: "guaranteed"
58
+ channels: ["display"]
59
+ format_ids:
60
+ - id: "display_300x250"
61
+ - product_id: "outdoor_video_q2"
62
+ delivery_type: "guaranteed"
63
+ channels: ["video"]
64
+ format_ids:
65
+ - id: "video_15s"
66
+ pricing_options:
67
+ - product_id: "outdoor_display_q2"
68
+ pricing_option_id: "cpm_standard"
69
+ pricing_model: "cpm"
70
+ currency: "USD"
71
+ fixed_price: 8.0
72
+ - product_id: "outdoor_video_q2"
73
+ pricing_option_id: "cpm_standard"
74
+ pricing_model: "cpm"
75
+ currency: "USD"
76
+ fixed_price: 12.0
77
+ plans:
78
+ - plan_id: "gov_acme_delivery_monitor"
79
+ brand:
80
+ domain: "acmeoutdoor.example"
81
+ objectives: "Delivery-phase governance with drift detection and rebalancing"
82
+ budget:
83
+ total: 40000
84
+ currency: "USD"
85
+ reallocation_threshold: 8000
86
+ flight:
87
+ start: "2027-01-01T00:00:00Z"
88
+ end: "2027-12-31T23:59:59Z"
89
+ countries: ["US"]
90
+ custom_policies:
91
+ - policy_id: "drift_reevaluation"
92
+ enforcement: "must"
93
+ policy: "Re-evaluate governance if any line item drifts more than 20% from plan."
94
+ media_buys:
95
+ - media_buy_id: "mb_acme_q2_2026"
96
+ status: "active"
97
+ budget:
98
+ total: 40000
99
+ currency: "USD"
100
+ flight:
101
+ start: "2026-04-01T00:00:00Z"
102
+ end: "2026-06-30T23:59:59Z"
103
+
104
+ phases:
105
+ - id: capability_discovery
106
+ title: "Capability discovery"
107
+ narrative: |
108
+ The buyer calls get_adcp_capabilities to confirm the agent supports media buying before sending briefs or creating buys.
109
+
110
+ steps:
111
+ - id: get_capabilities
112
+ title: "Check agent capabilities"
113
+ narrative: |
114
+ Verify that the agent declares the expected protocol support before
115
+ proceeding with domain-specific operations.
116
+ task: get_adcp_capabilities
117
+ schema_ref: "protocol/get-adcp-capabilities-request.json"
118
+ response_schema_ref: "protocol/get-adcp-capabilities-response.json"
119
+ doc_ref: "/protocol/get_adcp_capabilities"
120
+ comply_scenario: capability_discovery
121
+ stateful: false
122
+ expected: |
123
+ Return capabilities declaring media_buy in supported_protocols, confirming the agent sells media.
124
+ sample_request:
125
+ context:
126
+ correlation_id: "governance_delivery_monitor--get_capabilities"
127
+ validations:
128
+ - check: response_schema
129
+ description: "Response matches get-adcp-capabilities-response.json schema"
130
+ - check: field_present
131
+ path: "supported_protocols"
132
+ description: "Agent declares supported protocols"
133
+
134
+ - check: field_present
135
+ path: "context"
136
+ description: "Response echoes back the context object"
137
+ - check: field_value
138
+ path: "context.correlation_id"
139
+ value: "governance_delivery_monitor--get_capabilities"
140
+ description: "Context correlation_id returned unchanged"
141
+ - id: plan_registration
142
+ title: "Register governance plan with delivery monitoring"
143
+ narrative: |
144
+ The buyer registers a governance plan that includes delivery monitoring thresholds.
145
+ When spend drift exceeds the reallocation threshold, the governance agent triggers
146
+ a delivery-phase re-evaluation.
147
+
148
+ steps:
149
+ - id: sync_plans
150
+ title: "Register a governance plan with reallocation threshold"
151
+ narrative: |
152
+ The buyer's governance agent registers a plan with full spending authority and
153
+ a 20% reallocation threshold. If any line item's spend drifts more than 20%
154
+ from the planned budget allocation, the governance agent re-evaluates.
155
+ task: sync_plans
156
+ schema_ref: "governance/sync-plans-request.json"
157
+ response_schema_ref: "governance/sync-plans-response.json"
158
+ doc_ref: "/governance/campaign/tasks/sync_plans"
159
+ comply_scenario: governance_delivery_monitor
160
+ stateful: true
161
+ expected: |
162
+ Acknowledge the governance plan:
163
+ - plan_id: identifier for this governance plan
164
+ - budget.reallocation_threshold: amount above which reallocation requires re-evaluation
165
+
166
+ sample_request:
167
+ idempotency_key: "governance-delivery-monitor-sync-plans-v1"
168
+ plans:
169
+ - plan_id: "gov_acme_delivery_monitor"
170
+ brand:
171
+ domain: "acmeoutdoor.example"
172
+ objectives: "Delivery-phase governance with drift detection and rebalancing"
173
+ budget:
174
+ total: 40000
175
+ currency: "USD"
176
+ reallocation_threshold: 8000
177
+ flight:
178
+ start: "2027-01-01T00:00:00Z"
179
+ end: "2027-12-31T23:59:59Z"
180
+ countries: ["US"]
181
+ custom_policies:
182
+ - policy_id: "drift_reevaluation"
183
+ enforcement: "must"
184
+ policy: "Re-evaluate governance if any line item drifts more than 20% from plan."
185
+
186
+ context:
187
+ correlation_id: "governance_delivery_monitor--sync_plans"
188
+ context_outputs:
189
+ - name: plan_id
190
+ path: 'plans[0].plan_id'
191
+ validations:
192
+ - check: response_schema
193
+ description: "Response matches sync-plans-response.json schema"
194
+
195
+ - check: field_present
196
+ path: "context"
197
+ description: "Response echoes back the context object"
198
+ - check: field_value
199
+ path: "context.correlation_id"
200
+ value: "governance_delivery_monitor--sync_plans"
201
+ description: "Context correlation_id returned unchanged"
202
+ - check: field_present
203
+ path: "plans[0].plan_id"
204
+ description: "Governance agent assigns plan_id — must be echoed in check_governance"
205
+ - id: initial_approval
206
+ title: "Initial governance check — approved"
207
+ narrative: |
208
+ The buyer proposes a media buy within authority. The governance agent approves
209
+ the buy with the delivery monitoring conditions active.
210
+
211
+ steps:
212
+ - id: check_governance_approved
213
+ title: "Pre-buy governance check (approved)"
214
+ narrative: |
215
+ The buyer calls check_governance with a media buy within authority. The governance
216
+ agent approves and notes that delivery monitoring is active with the 20% drift
217
+ threshold.
218
+ task: check_governance
219
+ schema_ref: "governance/check-governance-request.json"
220
+ response_schema_ref: "governance/check-governance-response.json"
221
+ doc_ref: "/governance/campaign/tasks/check_governance"
222
+ comply_scenario: governance_delivery_monitor
223
+ stateful: true
224
+ expected: |
225
+ Return an approved governance decision:
226
+ - decision: approved
227
+ - governance_context: token for the media buy
228
+ - monitoring: delivery phase governance is active
229
+
230
+ sample_request:
231
+ plan_id: "$context.plan_id"
232
+ caller: "https://pinnacle-agency.example"
233
+ tool: "create_media_buy"
234
+ payload:
235
+ account:
236
+ brand:
237
+ domain: "acmeoutdoor.example"
238
+ operator: "pinnacle-agency.example"
239
+ total_budget: 40000
240
+ packages:
241
+ - product_id: "sports_ctv_q2"
242
+ budget: 20000
243
+ - product_id: "outdoor_video_q2"
244
+ budget: 20000
245
+
246
+ context:
247
+ correlation_id: "governance_delivery_monitor--check_governance_approved"
248
+ validations:
249
+ - check: response_schema
250
+ description: "Response matches check-governance-response.json schema"
251
+ - check: field_present
252
+ path: "status"
253
+ description: "Response contains a governance decision"
254
+
255
+ - check: field_present
256
+ path: "context"
257
+ description: "Response echoes back the context object"
258
+ - check: field_value
259
+ path: "context.correlation_id"
260
+ value: "governance_delivery_monitor--check_governance_approved"
261
+ description: "Context correlation_id returned unchanged"
262
+ - id: create_buy
263
+ title: "Create media buy under governance approval"
264
+ narrative: |
265
+ With governance approved, the buyer creates the media buy. The seller confirms
266
+ and returns a media_buy_id the buyer will use to pull delivery metrics as the
267
+ campaign runs.
268
+
269
+ steps:
270
+ - id: create_media_buy
271
+ title: "Create a media buy"
272
+ narrative: |
273
+ The buyer creates the media buy with the governance_context from the approved
274
+ check. The seller confirms and returns a media_buy_id that subsequent delivery
275
+ monitoring steps reference.
276
+ task: create_media_buy
277
+ schema_ref: "media-buy/create-media-buy-request.json"
278
+ response_schema_ref: "media-buy/create-media-buy-response.json"
279
+ doc_ref: "/media-buy/task-reference/create_media_buy"
280
+ comply_scenario: governance_delivery_monitor
281
+ stateful: true
282
+ expected: |
283
+ Confirm the media buy:
284
+ - media_buy_id: platform-assigned identifier
285
+ - status: active
286
+ - packages: confirmed line items
287
+
288
+ sample_request:
289
+ account:
290
+ brand:
291
+ domain: "acmeoutdoor.example"
292
+ operator: "pinnacle-agency.example"
293
+ brand:
294
+ domain: "acmeoutdoor.example"
295
+ governance_context: "gov_ctx_acme_delivery_approved"
296
+ start_time: "2026-04-01T00:00:00Z"
297
+ end_time: "2026-06-30T23:59:59Z"
298
+ packages:
299
+ - product_id: "sports_ctv_q2"
300
+ budget: 20000
301
+ pricing_option_id: "cpm_guaranteed"
302
+ - product_id: "outdoor_video_q2"
303
+ budget: 20000
304
+ pricing_option_id: "cpm_standard"
305
+
306
+ idempotency_key: "$generate:uuid_v4#governance_delivery_monitor_create_buy_create_media_buy"
307
+ context:
308
+ correlation_id: "governance_delivery_monitor--create_media_buy"
309
+ context_outputs:
310
+ - name: media_buy_id
311
+ path: "media_buy_id"
312
+ validations:
313
+ - check: response_schema
314
+ description: "Response matches create-media-buy-response.json schema"
315
+ - check: field_present
316
+ path: "media_buy_id"
317
+ description: "Response contains a media_buy_id for delivery monitoring"
318
+
319
+ - check: field_present
320
+ path: "context"
321
+ description: "Response echoes back the context object"
322
+ - check: field_value
323
+ path: "context.correlation_id"
324
+ value: "governance_delivery_monitor--create_media_buy"
325
+ description: "Context correlation_id returned unchanged"
326
+ - id: delivery_monitoring
327
+ title: "Delivery metrics show budget drift"
328
+ narrative: |
329
+ The campaign is running. The buyer checks delivery and finds that one line item
330
+ is overspending while the other is underspending. The CTV line item has consumed
331
+ 70% of its budget at the halfway point while the video line item is at 30%.
332
+
333
+ steps:
334
+ - id: get_delivery
335
+ title: "Check delivery metrics"
336
+ narrative: |
337
+ The buyer requests delivery data and finds budget drift. One line item is
338
+ significantly overpacing while the other is underpacing.
339
+ task: get_media_buy_delivery
340
+ schema_ref: "media-buy/get-media-buy-delivery-request.json"
341
+ response_schema_ref: "media-buy/get-media-buy-delivery-response.json"
342
+ doc_ref: "/media-buy/task-reference/get_media_buy_delivery"
343
+ comply_scenario: governance_delivery_monitor
344
+ stateful: true
345
+ expected: |
346
+ Return delivery metrics showing drift:
347
+ - Per-package delivery with impressions, spend, and pacing
348
+ - One package overpacing (>60% spend at 50% flight)
349
+ - One package underpacing (<40% spend at 50% flight)
350
+
351
+ sample_request:
352
+ account:
353
+ brand:
354
+ domain: "acmeoutdoor.example"
355
+ operator: "pinnacle-agency.example"
356
+ media_buy_ids:
357
+ - "$context.media_buy_id"
358
+ include_package_daily_breakdown: true
359
+
360
+ context:
361
+ correlation_id: "governance_delivery_monitor--get_delivery"
362
+ validations:
363
+ - check: response_schema
364
+ description: "Response matches get-media-buy-delivery-response.json schema"
365
+ - check: field_present
366
+ path: "media_buy_deliveries"
367
+ description: "Response contains media buy delivery data"
368
+
369
+ - check: field_present
370
+ path: "context"
371
+ description: "Response echoes back the context object"
372
+ - check: field_value
373
+ path: "context.correlation_id"
374
+ value: "governance_delivery_monitor--get_delivery"
375
+ description: "Context correlation_id returned unchanged"
376
+ - id: drift_recheck
377
+ title: "Governance re-check — drift detected"
378
+ narrative: |
379
+ The buyer's governance agent detects that budget drift has exceeded the 20%
380
+ reallocation threshold. It triggers a delivery-phase governance check with the
381
+ current delivery data as evidence. The governance agent re-evaluates and returns
382
+ a decision — either re-approved with updated conditions or a recommendation to
383
+ pause and rebalance.
384
+
385
+ steps:
386
+ - id: check_governance_drift
387
+ title: "Delivery-phase governance re-check (drift exceeded)"
388
+ narrative: |
389
+ The buyer calls check_governance with phase: delivery and attaches
390
+ the current delivery metrics as evidence. The governance agent evaluates the
391
+ drift against the reallocation threshold and returns a decision.
392
+ task: check_governance
393
+ schema_ref: "governance/check-governance-request.json"
394
+ response_schema_ref: "governance/check-governance-response.json"
395
+ doc_ref: "/governance/campaign/tasks/check_governance"
396
+ comply_scenario: governance_delivery_monitor
397
+ stateful: true
398
+ expected: |
399
+ Return a governance decision about the delivery drift:
400
+ - decision: approved (with rebalancing conditions) or denied (pause recommended)
401
+ - findings: warning-severity findings noting the drift amounts
402
+ - severity: warning
403
+ - category_id: BUDGET_DRIFT_EXCEEDED
404
+ - explanation: explains which line items drifted and by how much
405
+ - conditions: if approved, conditions for rebalancing (e.g., "Reallocate $5K from CTV to video")
406
+
407
+ sample_request:
408
+ plan_id: "$context.plan_id"
409
+ caller: "https://pinnacle-agency.example"
410
+ phase: "delivery"
411
+ governance_context: "gov_ctx_acme_delivery_approved"
412
+ delivery_metrics:
413
+ reporting_period:
414
+ start: "2026-05-01T00:00:00Z"
415
+ end: "2026-05-15T00:00:00Z"
416
+ spend: 20000
417
+ cumulative_spend: 20000
418
+ channel_distribution:
419
+ ctv: 70
420
+ video: 30
421
+ pacing: "ahead"
422
+
423
+ context:
424
+ correlation_id: "governance_delivery_monitor--check_governance_drift"
425
+ validations:
426
+ - check: response_schema
427
+ description: "Response matches check-governance-response.json schema"
428
+ - check: field_present
429
+ path: "status"
430
+ description: "Response contains a governance decision"
431
+ - check: field_present
432
+ path: "findings"
433
+ description: "Response contains findings about the drift"
434
+
435
+ - check: field_present
436
+ path: "context"
437
+ description: "Response echoes back the context object"
438
+ - check: field_value
439
+ path: "context.correlation_id"
440
+ value: "governance_delivery_monitor--check_governance_drift"
441
+ description: "Context correlation_id returned unchanged"
@@ -0,0 +1,221 @@
1
+ id: governance_spend_authority/denied
2
+ version: "1.0.0"
3
+ title: "Campaign governance — denied"
4
+ category: governance_spend_authority
5
+ summary: "Governance agent denies a media buy that exceeds the agent's spending authority. No human escalation — the buy is blocked."
6
+ track: campaign_governance
7
+ required_tools:
8
+ - sync_plans
9
+ - check_governance
10
+
11
+ # Cross-step assertion (adcp#2639): once a plan is denied, no subsequent
12
+ # step in the same run may acquire a resource for that plan. Catches the
13
+ # failure mode where a seller surfaces the denial response but still
14
+ # creates the media buy / activates the signal / syncs the property list
15
+ # anyway. Plan-scoped — unrelated plans proceed normally.
16
+ # Cross-step assertion (adcp#2664): status.monotonic rejects media_buy
17
+ # status transitions observed across steps that aren't on the spec
18
+ # lifecycle graph — e.g. active → pending_creatives.
19
+ invariants:
20
+ - governance.denial_blocks_mutation
21
+ - status.monotonic
22
+
23
+ narrative: |
24
+ The buyer's governance agent registers a plan with strict spending authority. The buyer
25
+ then proposes a media buy that exceeds the agent's per-transaction threshold. The
26
+ governance agent denies the buy outright with a must-severity finding.
27
+
28
+ Unlike the escalation storyboard, there is no human override here. The denial is final.
29
+ The buyer must reduce the buy amount or restructure into smaller transactions that fall
30
+ within the agent's authority. This tests the hard-stop governance path.
31
+
32
+ agent:
33
+ interaction_model: media_buy_seller
34
+ capabilities:
35
+ - sells_media
36
+ - governance_aware
37
+ examples:
38
+ - "Publisher platform with governance support"
39
+ - "Retail media network"
40
+
41
+ caller:
42
+ role: buyer_agent
43
+ example: "Pinnacle Agency (buyer)"
44
+
45
+ prerequisites:
46
+ description: |
47
+ The caller needs a brand identity, operator credentials, and a governance agent URL.
48
+ The governance plan must define a per-transaction threshold below the intended buy amount.
49
+ test_kit: "test-kits/acme-outdoor.yaml"
50
+
51
+ phases:
52
+ - id: capability_discovery
53
+ title: "Capability discovery"
54
+ narrative: |
55
+ The buyer calls get_adcp_capabilities to confirm the agent supports media buying before sending briefs or creating buys.
56
+
57
+ steps:
58
+ - id: get_capabilities
59
+ title: "Check agent capabilities"
60
+ narrative: |
61
+ Verify that the agent declares the expected protocol support before
62
+ proceeding with domain-specific operations.
63
+ task: get_adcp_capabilities
64
+ schema_ref: "protocol/get-adcp-capabilities-request.json"
65
+ response_schema_ref: "protocol/get-adcp-capabilities-response.json"
66
+ doc_ref: "/protocol/get_adcp_capabilities"
67
+ comply_scenario: capability_discovery
68
+ stateful: false
69
+ expected: |
70
+ Return capabilities declaring media_buy in supported_protocols, confirming the agent sells media.
71
+ sample_request:
72
+ context:
73
+ correlation_id: "governance_spend_authority--denied--get_capabilities"
74
+ validations:
75
+ - check: response_schema
76
+ description: "Response matches get-adcp-capabilities-response.json schema"
77
+ - check: field_present
78
+ path: "supported_protocols"
79
+ description: "Agent declares supported protocols"
80
+
81
+ - check: field_present
82
+ path: "context"
83
+ description: "Response echoes back the context object"
84
+ - check: field_value
85
+ path: "context.correlation_id"
86
+ value: "governance_spend_authority--denied--get_capabilities"
87
+ description: "Context correlation_id returned unchanged"
88
+ - id: plan_registration
89
+ title: "Register governance plan"
90
+ narrative: |
91
+ The buyer registers a governance plan with strict spending authority. The plan sets
92
+ an agent_limited authority level with a $10K per-transaction threshold. Any buy above
93
+ this amount is denied without escalation.
94
+
95
+ steps:
96
+ - id: sync_plans
97
+ title: "Register a governance plan with strict authority"
98
+ narrative: |
99
+ The buyer's governance agent registers a plan with a $10K per-transaction limit
100
+ and no escalation path. Buys that exceed this threshold are denied outright.
101
+ task: sync_plans
102
+ schema_ref: "governance/sync-plans-request.json"
103
+ response_schema_ref: "governance/sync-plans-response.json"
104
+ doc_ref: "/governance/campaign/tasks/sync_plans"
105
+ comply_scenario: governance_spend_authority/denied
106
+ stateful: true
107
+ expected: |
108
+ Acknowledge the governance plan:
109
+ - plan_id: identifier for this governance plan
110
+ - budget.total: $10K cap that any single buy above will exceed
111
+
112
+ sample_request:
113
+ idempotency_key: "governance-spend-authority-denied-sync-plans-v1"
114
+ plans:
115
+ - plan_id: "gov_acme_strict"
116
+ brand:
117
+ domain: "acmeoutdoor.example"
118
+ objectives: "Acme Outdoor low-budget validation flight"
119
+ budget:
120
+ total: 10000
121
+ currency: "USD"
122
+ reallocation_threshold: 0
123
+ flight:
124
+ start: "2027-01-01T00:00:00Z"
125
+ end: "2027-12-31T23:59:59Z"
126
+ countries: ["US"]
127
+
128
+ context:
129
+ correlation_id: "governance_spend_authority--denied--sync_plans"
130
+ context_outputs:
131
+ - name: plan_id
132
+ path: 'plans[0].plan_id'
133
+ validations:
134
+ - check: response_schema
135
+ description: "Response matches sync-plans-response.json schema"
136
+
137
+ - check: field_present
138
+ path: "context"
139
+ description: "Response echoes back the context object"
140
+ - check: field_value
141
+ path: "context.correlation_id"
142
+ value: "governance_spend_authority--denied--sync_plans"
143
+ description: "Context correlation_id returned unchanged"
144
+ - check: field_present
145
+ path: "plans[0].plan_id"
146
+ description: "Governance agent assigns plan_id — must be echoed in check_governance"
147
+ - id: governance_check
148
+ title: "Governance check — denied"
149
+ narrative: |
150
+ The buyer proposes a $50K media buy against the $10K threshold. The governance agent
151
+ evaluates the binding and returns a denied decision with a must-severity finding
152
+ explaining the spending authority violation. No escalation instructions are provided
153
+ because the plan has no escalation path.
154
+
155
+ steps:
156
+ - id: check_governance_denied
157
+ title: "Pre-buy governance check (denied, no escalation)"
158
+ narrative: |
159
+ The buyer calls check_governance with a $50K media buy binding. The governance
160
+ agent denies the buy because the total exceeds the $10K per-transaction authority.
161
+ The response includes a critical-severity finding with the violation details.
162
+ task: check_governance
163
+ schema_ref: "governance/check-governance-request.json"
164
+ response_schema_ref: "governance/check-governance-response.json"
165
+ doc_ref: "/governance/campaign/tasks/check_governance"
166
+ comply_scenario: governance_spend_authority/denied
167
+ stateful: true
168
+ expected: |
169
+ Return a denied governance decision:
170
+ - decision: denied
171
+ - findings: array with at least one critical-severity finding
172
+ - severity: critical
173
+ - category_id: SPENDING_AUTHORITY_EXCEEDED
174
+ - explanation: explains the threshold and how much the buy exceeds it
175
+ - No escalation instructions (plan has no escalation path)
176
+
177
+ sample_request:
178
+ plan_id: "$context.plan_id"
179
+ caller: "https://pinnacle-agency.example"
180
+ tool: "create_media_buy"
181
+ payload:
182
+ idempotency_key: "$generate:uuid_v4#governance_spend_authority_denied_check_governance_denied_payload"
183
+ account:
184
+ brand:
185
+ domain: "acmeoutdoor.example"
186
+ operator: "pinnacle-agency.example"
187
+ brand:
188
+ domain: "acmeoutdoor.example"
189
+ start_time: "2027-01-01T00:00:00Z"
190
+ end_time: "2027-03-31T23:59:59Z"
191
+ packages:
192
+ - product_id: "sports_ctv_q2"
193
+ budget: 30000
194
+ pricing_option_id: "cpm_standard"
195
+ - product_id: "outdoor_video_q2"
196
+ budget: 20000
197
+ pricing_option_id: "cpm_standard"
198
+
199
+ context:
200
+ correlation_id: "governance_spend_authority--denied--check_governance_denied"
201
+ validations:
202
+ - check: response_schema
203
+ description: "Response matches check-governance-response.json schema"
204
+ - check: field_present
205
+ path: "status"
206
+ description: "Response contains a governance decision"
207
+ - check: field_value
208
+ path: "status"
209
+ value: "denied"
210
+ description: "Decision is denied"
211
+ - check: field_present
212
+ path: "findings"
213
+ description: "Response contains findings explaining the denial"
214
+
215
+ - check: field_present
216
+ path: "context"
217
+ description: "Response echoes back the context object"
218
+ - check: field_value
219
+ path: "context.correlation_id"
220
+ value: "governance_spend_authority--denied--check_governance_denied"
221
+ description: "Context correlation_id returned unchanged"