@adcp/sdk 6.9.0 → 6.10.0

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/003-bookkeeping-stripped.json

@@ -0,0 +1,60 @@
+{
+  "name": "GA-internal bookkeeping fields are stripped before hashing",
+  "spec_reference": "#plan-state-binding (closed exclusion list)",
+  "description": "A GA hashing its persisted plan state directly MUST strip version, status, syncedAt, revisionHistory, committedBudget, committedByType. This vector has those fields populated on the stored plan but the expected hash equals vector 001 (the same plan, no bookkeeping). NOTE: this invariant proves bookkeeping stripping is deterministic for identical business-content preimages. It does NOT generalize to \"business-equivalent plans hash identically\" — see vectors 004a/004b (omitted vs explicit null), 005a/005b (array order), and 006a/006b (ext rotation) for cases where business-equivalent plans produce distinct hashes because JCS preserves those distinctions bit-exactly.",
+  "cross_reference": {
+    "same_hash_as": "001-minimal-plan",
+    "rationale": "Bookkeeping fields are in the closed exclusion list; stripping them yields the same preimage as vector 001."
+  },
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "version": 7,
+    "status": "active",
+    "syncedAt": "2026-04-19T12:00:00Z",
+    "revisionHistory": [
+      {
+        "version": 6,
+        "syncedAt": "2026-04-18T12:00:00Z"
+      }
+    ],
+    "committedBudget": 42500,
+    "committedByType": {
+      "media_buy": 42500
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "a11d2314312dcdcc203db35ff8e7ddfdf64761f0320f54d16f318e1415421be7",
+    "plan_hash": "oR0jFDEtzcwgPbNf-Ofd_fZHYfAyD1TRbzGOFBVCG-c"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/004a-human-review-omitted.json

@@ -0,0 +1,43 @@
+{
+  "name": "human_review_required omitted",
+  "spec_reference": "#plan-state-binding (JCS preserves omitted vs null)",
+  "description": "Paired with 004b. JCS and SHA-256 distinguish an omitted optional field from an explicit null.",
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "a11d2314312dcdcc203db35ff8e7ddfdf64761f0320f54d16f318e1415421be7",
+    "plan_hash": "oR0jFDEtzcwgPbNf-Ofd_fZHYfAyD1TRbzGOFBVCG-c"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/004b-human-review-explicit-null.json

@@ -0,0 +1,49 @@
+{
+  "name": "human_review_required explicitly null",
+  "spec_reference": "#plan-state-binding (JCS preserves omitted vs null)",
+  "description": "Paired with 004a. Expected hash differs from 004a — explicit null is a distinct encoding.",
+  "cross_reference": {
+    "differs_from": "004a-human-review-omitted",
+    "rationale": "Explicit null produces \"human_review_required\":null in JCS output; omitted produces no key at all. Distinct preimages → distinct hashes."
+  },
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "human_review_required": null
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      },
+      "human_review_required": null
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"human_review_required\":null,\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "3568d008c09986610eb381dcf458a9f501a766afd3e397c30751944f8eb0f7a7",
+    "plan_hash": "NWjQCMCZhmEOs4Hc9Fip9QGnZq_T45fDB1GUT46w96c"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/005a-policy-categories-order-1.json

@@ -0,0 +1,53 @@
+{
+  "name": "policy_categories in order [fair_housing, fair_lending]",
+  "spec_reference": "#plan-state-binding (JCS preserves array order)",
+  "description": "Paired with 005b. JCS preserves array element order per RFC 8785 §3.2.3; buyers SHOULD emit in stable order across re-syncs.",
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "human_review_required": true,
+    "policy_categories": [
+      "fair_housing",
+      "fair_lending"
+    ]
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      },
+      "human_review_required": true,
+      "policy_categories": [
+        "fair_housing",
+        "fair_lending"
+      ]
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"human_review_required\":true,\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\",\"policy_categories\":[\"fair_housing\",\"fair_lending\"]}",
+    "sha256_hex": "873140944d87fb2348f8c779314afaf14366ee6363ff4b442ad4f9c00ea1ffd7",
+    "plan_hash": "hzFAlE2H-yNI-Md5MUr68UNm7mNj_0tEKtT5wA6h_9c"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/005b-policy-categories-order-2.json

@@ -0,0 +1,57 @@
+{
+  "name": "policy_categories in order [fair_lending, fair_housing]",
+  "spec_reference": "#plan-state-binding (JCS preserves array order)",
+  "description": "Paired with 005a. Same array contents, different order → different hash.",
+  "cross_reference": {
+    "differs_from": "005a-policy-categories-order-1",
+    "rationale": "JCS preserves array order; reordered elements produce distinct canonical bytes."
+  },
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "human_review_required": true,
+    "policy_categories": [
+      "fair_lending",
+      "fair_housing"
+    ]
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      },
+      "human_review_required": true,
+      "policy_categories": [
+        "fair_lending",
+        "fair_housing"
+      ]
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"human_review_required\":true,\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\",\"policy_categories\":[\"fair_lending\",\"fair_housing\"]}",
+    "sha256_hex": "30aa868c704d6263eab60889cc96f78895a12cd4e7267f5a166491b49c8773b1",
+    "plan_hash": "MKqGjHBNYmPqtgiJzJb3iJWhLNTnJn9aFmSRtJyHc7E"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/006a-ext-trace-v1.json

@@ -0,0 +1,49 @@
+{
+  "name": "ext.trace_id set to trace_v1",
+  "spec_reference": "#plan-state-binding (ext is IN the preimage)",
+  "description": "Paired with 006b. ext is part of the preimage — rotating values in ext invalidate outstanding tokens. Buyers MUST NOT put retry-unstable values in ext on a plan.",
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "ext": {
+      "trace_id": "trace_v1"
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      },
+      "ext": {
+        "trace_id": "trace_v1"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"ext\":{\"trace_id\":\"trace_v1\"},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "bbd9f05621f57c47192461637a0340f32c5e9a47471239fd88aafc6f3507493c",
+    "plan_hash": "u9nwViH1fEcZJGFjegNA8yxemkdHEjn9iKr8bzUHSTw"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/006b-ext-trace-v2.json

@@ -0,0 +1,53 @@
+{
+  "name": "ext.trace_id set to trace_v2",
+  "spec_reference": "#plan-state-binding (ext is IN the preimage)",
+  "description": "Paired with 006a. Different ext value → different hash.",
+  "cross_reference": {
+    "differs_from": "006a-ext-trace-v1",
+    "rationale": "ext is hashed. A rotating trace_id in ext produces a distinct hash on every re-sync even when declared intent is identical."
+  },
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Drive awareness for Q1 launch.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    },
+    "ext": {
+      "trace_id": "trace_v2"
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Drive awareness for Q1 launch.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      },
+      "ext": {
+        "trace_id": "trace_v2"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"ext\":{\"trace_id\":\"trace_v2\"},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Drive awareness for Q1 launch.\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "fd4184804334c01b245ebd63c4b99dbd6c72d8a244bf4eabde3ceb3d15ba1194",
+    "plan_hash": "_UGEgEM0wBskXr1jxLmdvWxy2KJEv06r3jzrPRW6EZQ"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/007-unicode-objectives.json

@@ -0,0 +1,43 @@
+{
+  "name": "objectives contains emoji, combining marks, and RTL text",
+  "spec_reference": "#plan-state-binding (JCS does not Unicode-normalize per RFC 8785 §3.2.5)",
+  "description": "Verifies JCS implementations handle non-ASCII without normalization. The plan objectives field contains an emoji (🚀), a combining mark (é = U+0065 U+0301, not the precomposed U+00E9), and RTL Hebrew text.",
+  "plan_as_supplied": {
+    "plan_id": "plan_minimal_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Spring launch 🚀 for café chain — brand awareness. שלום",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_minimal_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Spring launch 🚀 for café chain — brand awareness. שלום",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"currency\":\"USD\",\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Spring launch 🚀 for café chain — brand awareness. שלום\",\"plan_id\":\"plan_minimal_2026\"}",
+    "sha256_hex": "5e237889cb966d17dad1ec51e1a2087c086f528b81ffb1e02f45145f16e7d824",
+    "plan_hash": "XiN4icuWbRfa0exR4aIIfAhvUouB_7HgL0UUXxbn2CQ"
+  },
+  "$comment": "Generated by .context/generate-plan-hash-vectors.mjs. Re-run on spec changes."
+}

package/compliance/cache/3.0.6.previous/test-vectors/plan-hash/008-numeric-canonicalization.json

@@ -0,0 +1,65 @@
+{
+  "name": "Numeric canonicalization with fractional percentages",
+  "spec_reference": "#plan-state-binding",
+  "description": "Exercises RFC 8785 §3.2.2.3 number serialization with fractional values (33.33, 33.334, 66.666) in budget.per_seller_max_pct and budget.allocations[*].max_pct. Pins implementer library choice: a hand-rolled `JSON.stringify + key sort` will likely diverge on edge cases (trailing zeros, scientific notation borderline) that a JCS-compliant library handles correctly.",
+  "plan_as_supplied": {
+    "plan_id": "plan_numeric_2026",
+    "brand": {
+      "domain": "example.com"
+    },
+    "objectives": "Exercise JCS numeric canonicalization with fractional budget-allocation percentages.",
+    "budget": {
+      "total": 100000,
+      "currency": "USD",
+      "reallocation_threshold": 5000,
+      "per_seller_max_pct": 33.33,
+      "allocations": {
+        "media_buy": {
+          "amount": 66667,
+          "max_pct": 66.666
+        },
+        "rights_license": {
+          "amount": 33333,
+          "max_pct": 33.334
+        }
+      }
+    },
+    "flight": {
+      "start": "2026-04-01T00:00:00Z",
+      "end": "2026-06-30T00:00:00Z"
+    }
+  },
+  "expected": {
+    "preimage": {
+      "plan_id": "plan_numeric_2026",
+      "brand": {
+        "domain": "example.com"
+      },
+      "objectives": "Exercise JCS numeric canonicalization with fractional budget-allocation percentages.",
+      "budget": {
+        "total": 100000,
+        "currency": "USD",
+        "reallocation_threshold": 5000,
+        "per_seller_max_pct": 33.33,
+        "allocations": {
+          "media_buy": {
+            "amount": 66667,
+            "max_pct": 66.666
+          },
+          "rights_license": {
+            "amount": 33333,
+            "max_pct": 33.334
+          }
+        }
+      },
+      "flight": {
+        "start": "2026-04-01T00:00:00Z",
+        "end": "2026-06-30T00:00:00Z"
+      }
+    },
+    "jcs_bytes": "{\"brand\":{\"domain\":\"example.com\"},\"budget\":{\"allocations\":{\"media_buy\":{\"amount\":66667,\"max_pct\":66.666},\"rights_license\":{\"amount\":33333,\"max_pct\":33.334}},\"currency\":\"USD\",\"per_seller_max_pct\":33.33,\"reallocation_threshold\":5000,\"total\":100000},\"flight\":{\"end\":\"2026-06-30T00:00:00Z\",\"start\":\"2026-04-01T00:00:00Z\"},\"objectives\":\"Exercise JCS numeric canonicalization with fractional budget-allocation percentages.\",\"plan_id\":\"plan_numeric_2026\"}",
+    "sha256_hex": "3c16152597702b471c673eaa7ad501c3ad6e9720f8ff0b5c47f6cb3db79e0da5",
+    "plan_hash": "PBYVJZdwK0ccZz6qetUBw61ulyD4_wtcR_bLPbeeDaU"
+  },
+  "$comment": "Computed with canonicalize@3.0.0 + Node.js crypto.createHash('sha256'). Re-verify if the canonicalize dependency is upgraded; numeric serialization edge cases (trailing zeros, scientific-notation thresholds) may shift across library versions."
+}