feat(testing): governance/property-lists/content-standards/collection-lists seeded bridges (#1755 phase 2)

[bokelley]

Phase 2 of #1755 — extends TestControllerBridge<TAccount> with seeded bridges for the governance-domain read tools so platform-proxy sellers can run the storyboards that gate property-lists / collection-lists / content-standards / governance-aware-seller specialisms without rewriting upstream adapters.

Summary

Three new opt-in callbacks. Each seeded array feeds both the list and the get path for its entity, matching the user's instinct ("all or nothing, DX is odd otherwise"):

Callback	Dedup key	List path (append-merge, seeded wins)	Singleton path (replace)	Specialism unblocked
getSeededPropertyLists	list_id (verified PropertyList.list_id: string required)	list_property_lists — merge lists: PropertyList[], increment pagination.total_count by non-colliding count	get_property_list — pick by request.list_id, replace response.list, preserve handler identifiers / pagination / resolved_at / cache_valid_until / coverage_gaps / context / ext	property-lists, governance-aware-seller (property catalog seeding)
getSeededCollectionLists	list_id (verified CollectionList.list_id: string required)	list_collection_lists — symmetric with property lists	get_collection_list — symmetric; preserves handler collections / pagination / resolved_at / cache_valid_until / coverage_gaps / context / ext	collection-lists (program-level brand safety via IMDb/Gracenote/EIDR IDs)
getSeededContentStandards	standards_id (verified ContentStandards.standards_id: string required)	list_content_standards — success arm standards: ContentStandards[]; merge + update pagination.total_count	get_content_standards — success arm IS ContentStandards directly (NO envelope wrapper per AdCP 3.0.11) — replace entire response, preserve only handler ext (no context in the success arm shape)	content-standards (brand-safety / suitability policies)

All three bridges follow the established seeded-wins-on-collision precedent set by the six existing bridges (mergeSeededProducts / mergeSeededCreatives / mergeSeededMediaBuys / mergeSeededAccounts / mergeSeededMediaBuyDelivery / mergeSeededCreativeFormats) and the same triply-gated sandbox contract (controller present + sandbox marker on request + resolved account is sandbox: true when resolveAccount produced one). BridgeFromSessionStoreOptions gains matching selectSeededPropertyLists / selectSeededCollectionLists / selectSeededContentStandards selectors.

Tool skipped

list_authorized_properties — DELIBERATELY NOT ADDED. That tool was removed from AdCP and replaced by the get_adcp_capabilities discovery surface; no schema exists in schemas/cache/3.0.11/bundled/ (verified). The AuthorizedProperty type only survives in src/lib/types/v2-5/tools.generated.ts for legacy 2.5 compat. Old references in src/lib/discovery/property-crawler.ts (line 175) and src/lib/testing/scenarios/ confirm the migration ("Use capabilities API which replaced list_authorized_properties").

Schema-driven decisions

Verified each schema before designing the bridge:

• schemas/cache/3.0.11/bundled/property/list-property-lists-response.json — plain interface, required: [lists], pagination? optional. ✅ list-shape only.
• schemas/cache/3.0.11/bundled/property/get-property-list-response.json — required list, optional identifiers / pagination / resolved_at / cache_valid_until / coverage_gaps / context / ext. ✅ singleton replace of list field, preserve auxiliary data.
• schemas/cache/3.0.11/collection/list-collection-lists-response.json + get-collection-list-response.json — symmetric with property lists. ✅ same shape decision.
• schemas/cache/3.0.11/bundled/content-standards/list-content-standards-response.json — oneOf (success arm standards: ContentStandards[] / error arm errors: []). ✅ append-merge into success arm; error arm gated out by dispatcher's pre-existing !isErrorResponse(formatted) check.
• get-content-standards-response.json — oneOf where the success arm IS ContentStandards directly (no envelope). ✅ replace entire response, preserve handler ext only.

Test plan

• NODE_ENV=test npm test — 8769 pass / 0 fail / 3 skipped (pre-existing). Previous baseline 8748; +35 new test cases in test/lib/seed-per-tool-wiring.test.js (51 → 86 it() blocks).
• npm run typecheck — clean.
• npm run format:check — clean.
• npm run build — clean.
• Verified at runtime: seeded-only, handler-only, merge with new entries, collision dedup (seeded wins), mixed [A,B] + [B,C] → [A, B-seeded, C] with correct counts, sandbox-gating refusal, validation drop for missing/empty list_id / standards_id, singleton-replace passthrough on no-match, context+ext preservation on singleton replace (PropertyList / CollectionList preserve full envelope; ContentStandards preserves only ext).

Test mix per bridge (caveat: list+get share the seeded callback so I split the suite by tool):

• getSeededPropertyLists — 7 list-path tests + 4 get-path tests
• getSeededCollectionLists — 6 list-path tests + 4 get-path tests
• getSeededContentStandards — 6 list-path tests + 4 get-path tests
• bridgeFromSessionStore — 4 governance-selector wiring tests

Doc updates

• docs/guides/VALIDATE-YOUR-AGENT.md § Platform-proxy sellers — extended the selector table with 3 new entries (each tied to the specialism it unblocks), updated the "Singleton exception" callout to mention the new singleton-replace paths and ContentStandards' bare-entity success arm, updated the "Validation drops" bullet with the new dedup keys.

Files

• src/lib/server/test-controller-bridge.ts — interface additions; filterValidSeededPropertyLists / filterValidSeededCollectionLists / filterValidSeededContentStandards (reuse filterValidById); mergeSeededPropertyListsIntoResponse / mergeSeededCollectionListsIntoResponse / mergeSeededContentStandardsIntoResponse; pickSeededPropertyListForRequest / replacePropertyListIfSeeded; matching pairs for collection-list and content-standards; selector wiring in bridgeFromSessionStore.
• src/lib/server/create-adcp-server.ts — 3 new dispatch branches (each handles both list_* and get_* for its entity) added after the list_creative_formats branch, behind the same triply-gated sandbox check.
• test/lib/seed-per-tool-wiring.test.js — 35 new test cases, 7 new describe blocks.
• .changeset/seeded-governance-bridges.md — minor.

🤖 Generated with Claude Code

[bokelley]

Fix: ContentStandards singleton replace now preserves handler context

Both reviewers caught that the schema's success arm carries context alongside ext (top-level optional properties on the response, even though allOf: [ContentStandards] is the body shape). The initial commit dropped context on replace. Patched to mirror replaceAccountFinancialsIfSeeded's preservation pattern. Test added; JSDoc and VALIDATE-YOUR-AGENT.md callout corrected.