Function handleSyncCreatives

server/src/training-agent/task-handlers.ts:2036–2151

(args: ToolArgs, ctx: TrainingContext)

}

export async function handleSyncCreatives(args: ToolArgs, ctx: TrainingContext) {
  const req = args as unknown as SyncCreativesRequest & ToolArgs & { dry_run?: boolean };
  const session = await getSession(sessionKeyFromArgs(req, ctx.mode, ctx.userId, ctx.moduleId));
  const isDryRun = req.dry_run === true;

  if (!req.creatives?.length) {
    return {
      errors: [{ code: 'INVALID_REQUEST', message: 'creatives array is required' }] as TaskError[],
    };
  }

  if (!isDryRun && session.creatives.size + req.creatives.length > MAX_CREATIVES_PER_SESSION) {
    return {
      errors: [{ code: 'LIMIT_EXCEEDED', message: `Session limit reached (max ${MAX_CREATIVES_PER_SESSION} creatives). Start a new session.` }] as TaskError[],
    };
  }

  // Build a set of valid format IDs for validation
  const validFormatIds = new Set(getFormats().map(f => f.format_id.id));
  const ownAgentUrlCanonical = canonicalizeAgentUrl(getAgentUrl());

  const results: SyncCreativeResult[] = [];
  for (const creative of req.creatives) {
    if (!creative.creative_id) {
      return {
        errors: [{
          code: 'INVALID_REQUEST',
          message: 'creative_id is required on each creative. The buyer assigns creative IDs.',
        }],
      };
    }
    const creativeId = creative.creative_id;
    const formatId = creative.format_id as FormatID;

    // Reject clearly-malformed agent_urls before we persist them. Prevents
    // javascript:/data: or overlong URLs landing in JSONB via the pointer.
    if (formatId?.agent_url !== undefined) {
      if (typeof formatId.agent_url !== 'string' || formatId.agent_url.length === 0 || formatId.agent_url.length > MAX_URL_LEN) {
        return { errors: [{ code: 'INVALID_REQUEST', message: `format_id.agent_url: must be a non-empty string up to ${MAX_URL_LEN} chars` }] as TaskError[] };
      }
      if (!/^https?:\/\//i.test(formatId.agent_url)) {
        return { errors: [{ code: 'INVALID_REQUEST', message: 'format_id.agent_url: must use http:// or https://' }] as TaskError[] };
      }
    }

    // Validate format_id only when the format is claimed against this agent.
    // Cross-agent format references (e.g. creative.adcontextprotocol.org) are
    // resolved by the referenced creative agent at render time — the seller
    // just stores the pointer. Compare canonical forms so a trailing slash
    // or case variant of the local URL still counts as local.
    const isLocalFormat = !formatId?.agent_url
      || canonicalizeAgentUrl(formatId.agent_url) === ownAgentUrlCanonical;
    if (formatId?.id && isLocalFormat && !validFormatIds.has(formatId.id)) {
      return {
        errors: [{
          code: 'INVALID_REQUEST',
          message: `Unknown format_id "${formatId.id}". Use list_creative_formats to see available formats.`,
        }] as TaskError[],