Method fetchAndValidate

server/src/validator.ts:68–154

(
    normalizedDomain: string,
    agentUrl: string,
    normalizedAgentUrl: string,
    scope: NormalizedScope
  )

  }

  private async fetchAndValidate(
    normalizedDomain: string,
    agentUrl: string,
    normalizedAgentUrl: string,
    scope: NormalizedScope
  ): Promise<AuthorizationResult> {
    const adagentsUrl = this.buildAdAgentsUrl(normalizedDomain);

    try {
      const fetched = await this.fetchAdAgentsJson(adagentsUrl);
      if (!fetched.data) {
        return {
          authorized: false,
          domain: normalizedDomain,
          agent_url: agentUrl,
          checked_at: new Date().toISOString(),
          error: fetched.error || "Unknown error",
          source: fetched.source,
        };
      }

      const data = fetched.data;
      if (!data.authorized_agents || !Array.isArray(data.authorized_agents)) {
        return {
          authorized: false,
          domain: normalizedDomain,
          agent_url: agentUrl,
          checked_at: new Date().toISOString(),
          error: "Invalid adagents.json format: missing authorized_agents array",
          source: fetched.source,
        };
      }

      const matchedAuthorization = data.authorized_agents.find((agent) =>
        this.matchesAuthorization(
          agent,
          normalizedDomain,
          normalizedAgentUrl,
          scope,
          data.properties || [],
          data.placements || [],
          data.placement_tags || {}
        )
      );

      return {
        authorized: !!matchedAuthorization,
        domain: normalizedDomain,
        agent_url: agentUrl,
        checked_at: new Date().toISOString(),
        source: fetched.source || adagentsUrl.toString(),
        matched_authorization: matchedAuthorization
          ? {
              authorization_type: matchedAuthorization.authorization_type,
              delegation_type: matchedAuthorization.delegation_type,
              exclusive: matchedAuthorization.exclusive,
              countries: matchedAuthorization.countries,
              collection_ids: this.flattenCollectionIds(matchedAuthorization.collections, normalizedDomain),