@adcp/sdk 13.0.0-rc.8 → 13.0.0-rc.9

package/dist/lib/testing/storyboard/validations.d.mts

@@ -10,6 +10,7 @@
 import type { TaskResult } from '../types.mjs';
 import type { A2ATaskEnvelope, HttpProbeResult, RunnerRequestRecord, RunnerResponseRecord, StoryboardContext, StoryboardValidation, ValidationResult } from './types.mjs';
 import type { UpstreamTrafficSuccess } from '../test-controller.mjs';
+import type { OAuthMetadataGraphGrade } from './oauth-metadata-graph/index.mjs';
 /**
  * Broader validation context that carries the run-level state a single
  * validation might need: the task result (for MCP tools), the HTTP probe
@@ -97,6 +98,8 @@ export interface ValidationContext {
      * two checks grade `not_applicable`.
      */
     crossResponses?: CrossResponseSet;
+    /** Async-prefetched result consumed by the oauth_metadata_graph check. */
+    oauthMetadataGraph?: OAuthMetadataGraphGrade;
 }
 /**
  * Aggregated cross-response data for `cross_response_*` validations on a

package/dist/lib/testing/storyboard/validations.d.ts

@@ -10,6 +10,7 @@
 import type { TaskResult } from '../types';
 import type { A2ATaskEnvelope, HttpProbeResult, RunnerRequestRecord, RunnerResponseRecord, StoryboardContext, StoryboardValidation, ValidationResult } from './types';
 import type { UpstreamTrafficSuccess } from '../test-controller';
+import type { OAuthMetadataGraphGrade } from './oauth-metadata-graph';
 /**
  * Broader validation context that carries the run-level state a single
  * validation might need: the task result (for MCP tools), the HTTP probe
@@ -97,6 +98,8 @@ export interface ValidationContext {
      * two checks grade `not_applicable`.
      */
     crossResponses?: CrossResponseSet;
+    /** Async-prefetched result consumed by the oauth_metadata_graph check. */
+    oauthMetadataGraph?: OAuthMetadataGraphGrade;
 }
 /**
  * Aggregated cross-response data for `cross_response_*` validations on a

package/dist/lib/testing/storyboard/validations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validations.d.ts","sourceRoot":"","sources":["../../../../src/lib/testing/storyboard/validations.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EAEpB,iBAAiB,EACjB,oBAAoB,EAGpB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAgB,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAgB/E;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,gCAAgC,CAAC;IACnD;;;;;OAKG;IACH,cAAc,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC9D;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,yEAAyE;IACzE,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,sFAAsF;IACtF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACjD;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,6BAA6B,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,4FAA4F;IAC5F,OAAO,EAAE,sBAAsB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,CAElH;AA4dD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE3F;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAszFzD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"validations.d.ts","sourceRoot":"","sources":["../../../../src/lib/testing/storyboard/validations.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EAEpB,iBAAiB,EACjB,oBAAoB,EAGpB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAgB,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAe/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGtE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,gCAAgC,CAAC;IACnD;;;;;OAKG;IACH,cAAc,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC9D;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,yEAAyE;IACzE,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,sFAAsF;IACtF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACjD;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,6BAA6B,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,4FAA4F;IAC5F,OAAO,EAAE,sBAAsB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,CAElH;AA0dD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE3F;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA61FzD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC"}

package/dist/lib/testing/storyboard/validations.js

@@ -38,6 +38,7 @@ var import_shape_drift_hints = require('./shape-drift-hints.js');
 var import_test_kit = require('./test-kit.js');
 var import_canonical_format_satisfaction = require('./canonical-format-satisfaction.js');
 var import_rate_limit_trip = require('./rate-limit-trip.js');
+var import_oauth_metadata_graph = require('./oauth-metadata-graph/index.js');
 var import_shape_drift_hints2 = require('./shape-drift-hints.js');
 var import_path2 = require('./path.js');
 function runValidations(validations, context) {
@@ -92,6 +93,8 @@ function runValidation(validation, ctx) {
       return requireHttpResult(ctx, validation, (hr) => validateOn401RequireHeader(validation, hr));
     case "resource_equals_agent_url":
       return requireHttpResult(ctx, validation, (hr) => validateResourceEqualsAgentUrl(validation, hr, ctx.agentUrl));
+    case "oauth_metadata_graph":
+      return validateOAuthMetadataGraph(validation, ctx.oauthMetadataGraph);
     case "any_of":
       return validateAnyOf(validation, ctx.contributions);
     case "a2a_submitted_artifact":
@@ -140,11 +143,12 @@ function runValidation(validation, ctx) {
     default:
       return {
         check: validation.check,
-        passed: true,
-        not_applicable: true,
+        passed: false,
         description: validation.description,
-        note: `runner does not implement check type '${validation.check}' \u2014 graded as not_applicable to preserve forward compatibility`,
-        json_pointer: null
+        error: `runner does not implement authored check type '${validation.check}'`,
+        json_pointer: null,
+        expected: "a validation check implemented by this runner",
+        actual: validation.check
       };
   }
 }
@@ -1120,21 +1124,6 @@ function validateOn401RequireHeader(validation, hr) {
     actual: value ?? null
   };
 }
-function normalizeAgentUrl(url) {
-  try {
-    const u = new URL(url);
-    u.hash = "";
-    u.search = "";
-    u.username = "";
-    u.password = "";
-    if (u.pathname.length > 1 && u.pathname.endsWith("/")) {
-      u.pathname = u.pathname.slice(0, -1);
-    }
-    return `${u.protocol.toLowerCase()}//${u.host.toLowerCase()}${u.pathname}`;
-  } catch {
-    return url;
-  }
-}
 const AGENT_CARD_SUFFIX_RE = /\/\.well-known\/agent(?:-card)?\.json$/i;
 function canonicalizeAgentUrlForScope(url) {
   try {
@@ -1166,12 +1155,14 @@ function validateResourceEqualsAgentUrl(validation, hr, agentUrl) {
       description: validation.description,
       error: "Response body missing string `resource` field.",
       json_pointer: "/resource",
-      expected: normalizeAgentUrl(agentUrl),
+      expected: (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)((0, import_oauth_metadata_graph.normalizeOAuthResourceForComparison)(agentUrl)),
       actual: null
     };
   }
-  const expected = normalizeAgentUrl(agentUrl);
-  const actual = normalizeAgentUrl(resource);
+  const expected = (0, import_oauth_metadata_graph.normalizeOAuthResourceForComparison)(agentUrl);
+  const actual = (0, import_oauth_metadata_graph.normalizeOAuthResourceForComparison)(resource);
+  const displayExpected = (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(expected);
+  const displayActual = (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(actual);
   const passed = actual === expected;
   let redactedError;
   if (!passed) {
@@ -1182,7 +1173,7 @@ function validateResourceEqualsAgentUrl(validation, hr, agentUrl) {
     }
     const expectedHost = new URL(expected).host;
     const hostDiffers = actualHost !== expectedHost;
-    redactedError = `RFC 9728 \`resource\` does not equal the URL clients call (${expected}). ` + (hostDiffers ? `Advertised host differs from the agent host \u2014 the most common cause is copying your authorization server origin into \`resource\`. ` : `Advertised path differs from the agent path. `) + `Fix: set \`resource\` equal to the full agent URL in your protected-resource metadata document.`;
+    redactedError = `RFC 9728 \`resource\` does not equal the URL clients call (${displayExpected}). ` + (hostDiffers ? `Advertised host differs from the agent host \u2014 the most common cause is copying your authorization server origin into \`resource\`. ` : `Advertised path differs from the agent path. `) + `Fix: set \`resource\` equal to the full agent URL in your protected-resource metadata document.`;
   }
   if (passed) {
     return {
@@ -1198,10 +1189,59 @@ function validateResourceEqualsAgentUrl(validation, hr, agentUrl) {
     description: validation.description,
     error: redactedError,
     json_pointer: "/resource",
+    expected: displayExpected,
+    actual: displayActual
+  };
+}
+function validateOAuthMetadataGraph(validation, grade) {
+  const expected = {
+    profile: "adcp/oauth-metadata-graph/v1",
+    require_authorization_servers: true,
+    follow_all_authorization_servers: true,
+    probe_advertised_endpoints: true
+  };
+  if (!grade) {
+    return {
+      check: validation.check,
+      passed: false,
+      description: validation.description,
+      error: "oauth_metadata_graph was not prefetched by the storyboard runner",
+      json_pointer: null,
+      expected,
+      actual: null
+    };
+  }
+  if (grade.success) {
+    return {
+      check: validation.check,
+      passed: true,
+      description: validation.description,
+      json_pointer: null,
+      expected,
+      observations: grade.observations
+    };
+  }
+  const primary = grade.findings[0];
+  return {
+    check: validation.check,
+    passed: false,
+    description: validation.description,
+    error: `${grade.error_code}: ${grade.error}`,
+    json_pointer: primary?.field ? findingFieldToJsonPointer(primary.field) : null,
     expected,
-    actual
+    actual: {
+      code: grade.error_code,
+      ...primary?.url && { url: primary.url },
+      ...primary?.field && { field: primary.field },
+      ...primary?.message && { detail: primary.message }
+    },
+    observations: grade.observations
   };
 }
+function findingFieldToJsonPointer(field) {
+  const segments = field.replace(/\[(\d+)\]/g, ".$1").split(".");
+  return `/${segments.map((segment) => segment.replace(/~/g, "~0").replace(/\//g, "~1")).join("/")}`;
+}
 function validateAnyOf(validation, contributions) {
   const flags = Array.isArray(validation.allowed_values) ? validation.allowed_values.map(String) : [];
   const passed = flags.some((f) => contributions.has(f));