@adcp/sdk 5.23.0

package/dist/lib/validation/client-hooks.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Client-side hooks that run the schema validator around every AdCP tool
+ * call. Pre-send validation blocks malformed requests; post-receive
+ * validation catches field-name drift from agents (issue #688).
+ */
+import { type ValidationOutcome } from './schema-validator';
+export type ValidationMode = 'strict' | 'warn' | 'off';
+export interface ValidationHookConfig {
+    /** Validate outgoing requests. Default: strict in dev/test, warn in prod. */
+    requests?: ValidationMode;
+    /** Validate incoming responses. Default: strict in dev/test, warn in prod. */
+    responses?: ValidationMode;
+}
+/**
+ * Resolve the effective request/response modes.
+ *
+ * Response default: strict in dev/test, warn in prod (preserves the
+ * existing `strictSchemaValidation` contract).
+ *
+ * Request default: `warn` everywhere. Strict-by-default would break
+ * existing callers that intentionally send partial payloads (error-path
+ * tests, exploratory probes) — storyboards and third-party clients that
+ * want hard-stop enforcement should set `requests: 'strict'` explicitly.
+ */
+export declare function resolveValidationModes(config?: ValidationHookConfig): Required<ValidationHookConfig>;
+export interface DebugLogEntry {
+    type: 'info' | 'success' | 'warning' | 'error';
+    message: string;
+    timestamp: string;
+    [k: string]: unknown;
+}
+/**
+ * Run request validation per the configured mode.
+ * - `off`: no-op (true).
+ * - `warn`: log to debug + continue (true).
+ * - `strict`: throw `ValidationError` with JSON Pointer to the first bad field.
+ */
+export declare function validateOutgoingRequest(taskName: string, params: unknown, mode: ValidationMode, debugLogs?: DebugLogEntry[]): ValidationOutcome | undefined;
+/**
+ * Run response validation per the configured mode.
+ * - `off`: no-op (valid).
+ * - `warn`: log + return invalid outcome so the caller can surface details.
+ * - `strict`: return the invalid outcome so the caller fails the task.
+ * Does NOT throw — matches the existing response-side contract where a
+ * validation failure turns a task into `status: 'failed'` rather than
+ * raising out of the SDK.
+ */
+export declare function validateIncomingResponse(taskName: string, data: unknown, mode: ValidationMode, debugLogs?: DebugLogEntry[]): ValidationOutcome;
+//# sourceMappingURL=client-hooks.d.ts.map

package/dist/lib/validation/client-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-hooks.d.ts","sourceRoot":"","sources":["../../../src/lib/validation/client-hooks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmD,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG7G,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,8EAA8E;IAC9E,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAKpG;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAaD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,cAAc,EACpB,SAAS,CAAC,EAAE,aAAa,EAAE,GAC1B,iBAAiB,GAAG,SAAS,CAS/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,cAAc,EACpB,SAAS,CAAC,EAAE,aAAa,EAAE,GAC1B,iBAAiB,CAOnB"}

package/dist/lib/validation/client-hooks.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * Client-side hooks that run the schema validator around every AdCP tool
+ * call. Pre-send validation blocks malformed requests; post-receive
+ * validation catches field-name drift from agents (issue #688).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveValidationModes = resolveValidationModes;
+exports.validateOutgoingRequest = validateOutgoingRequest;
+exports.validateIncomingResponse = validateIncomingResponse;
+const schema_validator_1 = require("./schema-validator");
+const schema_errors_1 = require("./schema-errors");
+function defaultResponseMode() {
+    // Responses have been validated strictly by default since the SDK shipped
+    // Zod validation; preserve that in dev/test and soften to warn in prod.
+    return process.env.NODE_ENV === 'production' ? 'warn' : 'strict';
+}
+/**
+ * Resolve the effective request/response modes.
+ *
+ * Response default: strict in dev/test, warn in prod (preserves the
+ * existing `strictSchemaValidation` contract).
+ *
+ * Request default: `warn` everywhere. Strict-by-default would break
+ * existing callers that intentionally send partial payloads (error-path
+ * tests, exploratory probes) — storyboards and third-party clients that
+ * want hard-stop enforcement should set `requests: 'strict'` explicitly.
+ */
+function resolveValidationModes(config) {
+    return {
+        requests: config?.requests ?? 'warn',
+        responses: config?.responses ?? defaultResponseMode(),
+    };
+}
+function logWarning(debugLogs, taskName, outcome) {
+    if (!debugLogs)
+        return;
+    debugLogs.push({
+        type: 'warning',
+        message: `Schema validation warning for ${taskName}: ${(0, schema_validator_1.formatIssues)(outcome.issues)}`,
+        timestamp: new Date().toISOString(),
+        schemaVariant: outcome.variant,
+        issues: outcome.issues,
+    });
+}
+/**
+ * Run request validation per the configured mode.
+ * - `off`: no-op (true).
+ * - `warn`: log to debug + continue (true).
+ * - `strict`: throw `ValidationError` with JSON Pointer to the first bad field.
+ */
+function validateOutgoingRequest(taskName, params, mode, debugLogs) {
+    if (mode === 'off')
+        return undefined;
+    const outcome = (0, schema_validator_1.validateRequest)(taskName, params);
+    if (outcome.valid)
+        return outcome;
+    if (mode === 'warn') {
+        logWarning(debugLogs, taskName, outcome);
+        return outcome;
+    }
+    throw (0, schema_errors_1.buildValidationError)(taskName, 'request', outcome.issues);
+}
+/**
+ * Run response validation per the configured mode.
+ * - `off`: no-op (valid).
+ * - `warn`: log + return invalid outcome so the caller can surface details.
+ * - `strict`: return the invalid outcome so the caller fails the task.
+ * Does NOT throw — matches the existing response-side contract where a
+ * validation failure turns a task into `status: 'failed'` rather than
+ * raising out of the SDK.
+ */
+function validateIncomingResponse(taskName, data, mode, debugLogs) {
+    if (mode === 'off')
+        return { valid: true, issues: [], variant: 'sync' };
+    const outcome = (0, schema_validator_1.validateResponse)(taskName, data);
+    if (!outcome.valid && mode === 'warn') {
+        logWarning(debugLogs, taskName, outcome);
+    }
+    return outcome;
+}
+//# sourceMappingURL=client-hooks.js.map

package/dist/lib/validation/client-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-hooks.js","sourceRoot":"","sources":["../../../src/lib/validation/client-hooks.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AA+BH,wDAKC;AA0BD,0DAcC;AAWD,4DAYC;AAjGD,yDAA6G;AAC7G,mDAAuD;AAWvD,SAAS,mBAAmB;IAC1B,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB,CAAC,MAA6B;IAClE,OAAO;QACL,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,MAAM;QACpC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,mBAAmB,EAAE;KACtD,CAAC;AACJ,CAAC;AASD,SAAS,UAAU,CAAC,SAAsC,EAAE,QAAgB,EAAE,OAA0B;IACtG,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,SAAS,CAAC,IAAI,CAAC;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,iCAAiC,QAAQ,KAAK,IAAA,+BAAY,EAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACrF,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,QAAgB,EAChB,MAAe,EACf,IAAoB,EACpB,SAA2B;IAE3B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,IAAA,kCAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAClC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAA,oCAAoB,EAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CACtC,QAAgB,EAChB,IAAa,EACb,IAAoB,EACpB,SAA2B;IAE3B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACxE,MAAM,OAAO,GAAG,IAAA,mCAAgB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACtC,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/validation/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * AdCP Validation Utilities
+ * Functions for validating URLs, responses, and schemas
+ */
+export { validateRequest, validateResponse, formatIssues } from './schema-validator';
+export type { ValidationIssue, ValidationOutcome } from './schema-validator';
+export { buildValidationError, buildAdcpValidationErrorPayload } from './schema-errors';
+export type { ValidationErrorDetails, AdcpValidationErrorDetails } from './schema-errors';
+export { getValidator, listValidatorKeys } from './schema-loader';
+export type { Direction, ResponseVariant } from './schema-loader';
+export { validateOutgoingRequest, validateIncomingResponse, resolveValidationModes } from './client-hooks';
+export type { ValidationMode, ValidationHookConfig } from './client-hooks';
+/**
+ * Get expected response schema type for a given tool
+ */
+export declare function getExpectedSchema(toolName: string): string;
+/**
+ * Validate agent URL to prevent SSRF attacks
+ */
+export declare function validateAgentUrl(url: string): void;
+/**
+ * Validate AdCP response format and content
+ */
+export declare function validateAdCPResponse(response: any, expectedSchema: string): {
+    valid: boolean;
+    errors: string[];
+};
+/**
+ * Handle AdCP response with comprehensive error checking
+ */
+export declare function handleAdCPResponse(response: Response, expectedSchema: string, agentName: string): Promise<{
+    success: boolean;
+    data?: any;
+    error?: string;
+    warnings?: string[];
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/validation/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AACxF,YAAY,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC3G,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3E;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAmB1D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAwDlD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA6BhH;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,QAAQ,EAClB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwEhF"}

package/dist/lib/validation/index.js

@@ -0,0 +1,202 @@
+"use strict";
+/**
+ * AdCP Validation Utilities
+ * Functions for validating URLs, responses, and schemas
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveValidationModes = exports.validateIncomingResponse = exports.validateOutgoingRequest = exports.listValidatorKeys = exports.getValidator = exports.buildAdcpValidationErrorPayload = exports.buildValidationError = exports.formatIssues = exports.validateResponse = exports.validateRequest = void 0;
+exports.getExpectedSchema = getExpectedSchema;
+exports.validateAgentUrl = validateAgentUrl;
+exports.validateAdCPResponse = validateAdCPResponse;
+exports.handleAdCPResponse = handleAdCPResponse;
+var schema_validator_1 = require("./schema-validator");
+Object.defineProperty(exports, "validateRequest", { enumerable: true, get: function () { return schema_validator_1.validateRequest; } });
+Object.defineProperty(exports, "validateResponse", { enumerable: true, get: function () { return schema_validator_1.validateResponse; } });
+Object.defineProperty(exports, "formatIssues", { enumerable: true, get: function () { return schema_validator_1.formatIssues; } });
+var schema_errors_1 = require("./schema-errors");
+Object.defineProperty(exports, "buildValidationError", { enumerable: true, get: function () { return schema_errors_1.buildValidationError; } });
+Object.defineProperty(exports, "buildAdcpValidationErrorPayload", { enumerable: true, get: function () { return schema_errors_1.buildAdcpValidationErrorPayload; } });
+var schema_loader_1 = require("./schema-loader");
+Object.defineProperty(exports, "getValidator", { enumerable: true, get: function () { return schema_loader_1.getValidator; } });
+Object.defineProperty(exports, "listValidatorKeys", { enumerable: true, get: function () { return schema_loader_1.listValidatorKeys; } });
+var client_hooks_1 = require("./client-hooks");
+Object.defineProperty(exports, "validateOutgoingRequest", { enumerable: true, get: function () { return client_hooks_1.validateOutgoingRequest; } });
+Object.defineProperty(exports, "validateIncomingResponse", { enumerable: true, get: function () { return client_hooks_1.validateIncomingResponse; } });
+Object.defineProperty(exports, "resolveValidationModes", { enumerable: true, get: function () { return client_hooks_1.resolveValidationModes; } });
+/**
+ * Get expected response schema type for a given tool
+ */
+function getExpectedSchema(toolName) {
+    switch (toolName) {
+        case 'get_products':
+            return 'products';
+        case 'list_creative_formats':
+            return 'formats';
+        case 'create_media_buy':
+            return 'media_buy';
+        case 'manage_creative_assets':
+            return 'creative_management';
+        case 'sync_creatives':
+            return 'sync_response';
+        case 'list_creatives':
+            return 'creative_list';
+        case 'add_creative_assets':
+            return 'creative_upload';
+        default:
+            return 'generic';
+    }
+}
+/**
+ * Validate agent URL to prevent SSRF attacks
+ */
+function validateAgentUrl(url) {
+    // Handle edge cases first
+    if (!url || typeof url !== 'string') {
+        throw new Error('Agent URL is required and must be a string');
+    }
+    if (url.trim() === '') {
+        throw new Error('Agent URL cannot be empty');
+    }
+    // Ensure reasonable URL length
+    if (url.length > 2048) {
+        throw new Error('Agent URL is too long (max 2048 characters)');
+    }
+    try {
+        const parsedUrl = new URL(url.trim());
+        // Only allow HTTP/HTTPS protocols
+        if (!['http:', 'https:'].includes(parsedUrl.protocol)) {
+            throw new Error(`Protocol '${parsedUrl.protocol}' not allowed (only HTTP/HTTPS)`);
+        }
+        // Ensure URL has a valid hostname
+        if (!parsedUrl.hostname) {
+            throw new Error('URL must have a valid hostname');
+        }
+        // Block private IP ranges and localhost in production
+        if (process.env.NODE_ENV === 'production') {
+            const hostname = parsedUrl.hostname.toLowerCase();
+            if (['localhost', '127.0.0.1', '0.0.0.0', '::1'].includes(hostname) ||
+                hostname.startsWith('192.168.') ||
+                hostname.startsWith('10.') ||
+                hostname.match(/^172\.(1[6-9]|2[0-9]|3[01])\./)) {
+                throw new Error('Private network access not allowed in production');
+            }
+            // Block metadata endpoints
+            if (hostname === '169.254.169.254' || hostname === 'metadata.google.internal') {
+                throw new Error('Metadata endpoint access not allowed');
+            }
+        }
+    }
+    catch (e) {
+        if (e instanceof Error) {
+            // Don't double-wrap our own errors
+            if (e.message.includes('not allowed') || e.message.includes('required') || e.message.includes('cannot be')) {
+                throw e;
+            }
+            // Only wrap URL constructor errors with more context
+            throw new Error(`Invalid agent URL format: ${e.message}`);
+        }
+        throw new Error('Invalid agent URL format');
+    }
+}
+/**
+ * Validate AdCP response format and content
+ */
+function validateAdCPResponse(response, expectedSchema) {
+    const errors = [];
+    // Basic response structure validation
+    if (!response || typeof response !== 'object') {
+        errors.push('Response is not a valid object');
+        return { valid: false, errors };
+    }
+    // Check for AdCP-specific fields based on expected schema
+    if (expectedSchema === 'products') {
+        if (!Array.isArray(response.products)) {
+            errors.push('Missing or invalid products array');
+        }
+        else {
+            response.products.forEach((product, index) => {
+                if (!product.id)
+                    errors.push(`Product ${index}: Missing id field`);
+                if (!product.name)
+                    errors.push(`Product ${index}: Missing name field`);
+                if (!product.pricing_model)
+                    errors.push(`Product ${index}: Missing pricing_model field`);
+            });
+        }
+    }
+    if (expectedSchema === 'formats') {
+        if (!Array.isArray(response.formats) && !Array.isArray(response.creative_formats)) {
+            errors.push('Missing formats/creative_formats array');
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+/**
+ * Handle AdCP response with comprehensive error checking
+ */
+async function handleAdCPResponse(response, expectedSchema, agentName) {
+    const warnings = [];
+    // Check AdCP-specific response headers
+    const adcpVersion = response.headers.get('AdCP-Version');
+    if (!adcpVersion) {
+        warnings.push('Missing AdCP-Version header in response');
+    }
+    else if (adcpVersion !== '1.0') {
+        warnings.push(`Unexpected AdCP version: ${adcpVersion} (expected 1.0)`);
+    }
+    const responseId = response.headers.get('AdCP-Response-ID');
+    if (!responseId) {
+        warnings.push('Missing AdCP-Response-ID header in response');
+    }
+    const contentType = response.headers.get('Content-Type');
+    if (!contentType?.includes('application/vnd.adcp+json') && !contentType?.includes('application/json')) {
+        warnings.push(`Unexpected content type: ${contentType} (expected application/vnd.adcp+json)`);
+    }
+    // Parse response body
+    let responseData;
+    try {
+        const textResponse = await response.text();
+        if (!textResponse.trim()) {
+            return {
+                success: false,
+                error: `Empty response from ${agentName}`,
+                warnings,
+            };
+        }
+        responseData = JSON.parse(textResponse);
+    }
+    catch (parseError) {
+        return {
+            success: false,
+            error: `Invalid JSON response from ${agentName}: ${parseError instanceof Error ? parseError.message : 'Parse error'}`,
+            warnings,
+        };
+    }
+    // Check for JSON-RPC error response
+    const parsed = responseData;
+    if (parsed?.error || (parsed?.jsonrpc && parsed?.id !== undefined && !parsed?.result)) {
+        const errorObj = parsed.error;
+        return {
+            success: false,
+            error: `Agent returned JSON-RPC error: ${errorObj?.message || JSON.stringify(errorObj)}`,
+            warnings,
+            data: responseData, // Include raw data for debugging
+        };
+    }
+    // Validate response schema
+    const validation = validateAdCPResponse(responseData, expectedSchema);
+    if (!validation.valid) {
+        return {
+            success: false,
+            error: `Schema validation failed for ${agentName}: ${validation.errors.join(', ')}`,
+            warnings,
+            data: responseData, // Include raw data for debugging
+        };
+    }
+    return {
+        success: true,
+        data: responseData,
+        warnings: warnings.length > 0 ? warnings : undefined,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/lib/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/validation/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAcH,8CAmBC;AAKD,4CAwDC;AAKD,oDA6BC;AAKD,gDA4EC;AA/MD,uDAAqF;AAA5E,mHAAA,eAAe,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAAE,gHAAA,YAAY,OAAA;AAExD,iDAAwF;AAA/E,qHAAA,oBAAoB,OAAA;AAAE,gIAAA,+BAA+B,OAAA;AAE9D,iDAAkE;AAAzD,6GAAA,YAAY,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAExC,+CAA2G;AAAlG,uHAAA,uBAAuB,OAAA;AAAE,wHAAA,wBAAwB,OAAA;AAAE,sHAAA,sBAAsB,OAAA;AAGlF;;GAEG;AACH,SAAgB,iBAAiB,CAAC,QAAgB;IAChD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,cAAc;YACjB,OAAO,UAAU,CAAC;QACpB,KAAK,uBAAuB;YAC1B,OAAO,SAAS,CAAC;QACnB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC;QACrB,KAAK,wBAAwB;YAC3B,OAAO,qBAAqB,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,eAAe,CAAC;QACzB,KAAK,gBAAgB;YACnB,OAAO,eAAe,CAAC;QACzB,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC;QAC3B;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,0BAA0B;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,+BAA+B;IAC/B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAEtC,kCAAkC;QAClC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,CAAC,QAAQ,iCAAiC,CAAC,CAAC;QACpF,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAClD,IACE,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC/D,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC/B,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC1B,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAC/C,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,2BAA2B;YAC3B,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YACvB,mCAAmC;YACnC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3G,MAAM,CAAC,CAAC;YACV,CAAC;YACD,qDAAqD;YACrD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,QAAa,EAAE,cAAsB;IACxE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,sCAAsC;IACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAY,EAAE,KAAa,EAAE,EAAE;gBACxD,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,CAAC;gBACnE,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,sBAAsB,CAAC,CAAC;gBACvE,IAAI,CAAC,OAAO,CAAC,aAAa;oBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,+BAA+B,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,QAAkB,EAClB,cAAsB,EACtB,SAAiB;IAEjB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,uCAAuC;IACvC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,4BAA4B,WAAW,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtG,QAAQ,CAAC,IAAI,CAAC,4BAA4B,WAAW,uCAAuC,CAAC,CAAC;IAChG,CAAC;IAED,sBAAsB;IACtB,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,uBAAuB,SAAS,EAAE;gBACzC,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,8BAA8B,SAAS,KAC5C,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,aACrD,EAAE;YACF,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,YAAuC,CAAC;IACvD,IAAI,MAAM,EAAE,KAAK,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,EAAE,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAA4C,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YACxF,QAAQ;YACR,IAAI,EAAE,YAAY,EAAE,iCAAiC;SACtD,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gCAAgC,SAAS,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnF,QAAQ;YACR,IAAI,EAAE,YAAY,EAAE,iCAAiC;SACtD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC"}

package/dist/lib/validation/schema-errors.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Convert schema validation failures into the AdCP L3 `VALIDATION_ERROR`
+ * envelope and the `ValidationError` thrown type.
+ */
+import { ValidationError } from '../errors';
+import type { ValidationIssue } from './schema-validator';
+export interface ValidationErrorDetails {
+    /** Tool that was being validated. */
+    tool: string;
+    /** Which side of the exchange — request (outgoing) or response (incoming). */
+    side: 'request' | 'response';
+    /** All failures, each with a JSON Pointer to the bad field. */
+    issues: ValidationIssue[];
+}
+/**
+ * Build a `ValidationError` thrown by strict-mode client hooks. Keeps the
+ * existing constructor signature (`field, value, constraint`) but threads
+ * the full issue list through `details` so callers can inspect every
+ * pointer, not just the first.
+ */
+export declare function buildValidationError(tool: string, side: 'request' | 'response', issues: ValidationIssue[]): ValidationError;
+/**
+ * Shape of `adcp_error.details` inside a server-side `VALIDATION_ERROR`
+ * envelope. The issue list is ALSO promoted to the top level
+ * (`adcp_error.issues`) so operators see JSON Pointers on the first
+ * render; `details.issues` is kept as a spec-convention mirror for
+ * buyers that index into `details`. `schemaPath` is optional per-issue
+ * — the builder drops it by default in production so `oneOf` branch
+ * selection doesn't leak to buyers.
+ */
+export interface AdcpValidationErrorDetails {
+    tool: string;
+    side: 'request' | 'response';
+    issues: Array<Omit<ValidationIssue, 'schemaPath'> & {
+        schemaPath?: string;
+    }>;
+}
+/**
+ * Serialize issues for the server-side `adcpError('VALIDATION_ERROR', ...)` call.
+ *
+ * Issues appear at BOTH `adcp_error.issues` (top level, so operators
+ * and debuggers see them on first render) AND `adcp_error.details.issues`
+ * (the spec-convention location, so buyers that already index into
+ * `details` continue to work). Future buyers should prefer
+ * `adcp_error.issues`; the `details.issues` mirror is maintained for
+ * compatibility across the AdCP ecosystem until a spec decision settles
+ * where issues should canonically live.
+ *
+ * `exposeSchemaPath` controls whether each issue's AJV `schemaPath`
+ * (e.g. `#/oneOf/2/properties/status/enum`) crosses the wire. When
+ * false, schemaPath is stripped from the emitted `issues` (both
+ * copies) — buyers still get `pointer`, `message`, and `keyword`,
+ * which is enough to fix their payload, but the internal branch
+ * shape of the seller's handler isn't leaked. Defaults to the same
+ * policy as `exposeErrorDetails`: on in dev/test, off in production.
+ */
+export declare function buildAdcpValidationErrorPayload(tool: string, side: 'request' | 'response', issues: ValidationIssue[], options?: {
+    exposeSchemaPath?: boolean;
+}): {
+    message: string;
+    field?: string;
+    issues: Array<Omit<ValidationIssue, 'schemaPath'> & {
+        schemaPath?: string;
+    }>;
+    details: Record<string, unknown>;
+};
+//# sourceMappingURL=schema-errors.d.ts.map

package/dist/lib/validation/schema-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-errors.d.ts","sourceRoot":"","sources":["../../../src/lib/validation/schema-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,IAAI,EAAE,SAAS,GAAG,UAAU,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,GAAG,UAAU,EAC5B,MAAM,EAAE,eAAe,EAAE,GACxB,eAAe,CAOjB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,CAAC;IAC7B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,GAAG,UAAU,EAC5B,MAAM,EAAE,eAAe,EAAE,EACzB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAuCA"}

package/dist/lib/validation/schema-errors.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Convert schema validation failures into the AdCP L3 `VALIDATION_ERROR`
+ * envelope and the `ValidationError` thrown type.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildValidationError = buildValidationError;
+exports.buildAdcpValidationErrorPayload = buildAdcpValidationErrorPayload;
+const errors_1 = require("../errors");
+/**
+ * Build a `ValidationError` thrown by strict-mode client hooks. Keeps the
+ * existing constructor signature (`field, value, constraint`) but threads
+ * the full issue list through `details` so callers can inspect every
+ * pointer, not just the first.
+ */
+function buildValidationError(tool, side, issues) {
+    const first = issues[0];
+    const field = first?.pointer ?? '/';
+    const constraint = first ? `${first.keyword}: ${first.message}` : 'schema validation failed';
+    const err = new errors_1.ValidationError(field, undefined, `${tool} ${side}: ${constraint}`);
+    err.details = { tool, side, issues };
+    return err;
+}
+/**
+ * Serialize issues for the server-side `adcpError('VALIDATION_ERROR', ...)` call.
+ *
+ * Issues appear at BOTH `adcp_error.issues` (top level, so operators
+ * and debuggers see them on first render) AND `adcp_error.details.issues`
+ * (the spec-convention location, so buyers that already index into
+ * `details` continue to work). Future buyers should prefer
+ * `adcp_error.issues`; the `details.issues` mirror is maintained for
+ * compatibility across the AdCP ecosystem until a spec decision settles
+ * where issues should canonically live.
+ *
+ * `exposeSchemaPath` controls whether each issue's AJV `schemaPath`
+ * (e.g. `#/oneOf/2/properties/status/enum`) crosses the wire. When
+ * false, schemaPath is stripped from the emitted `issues` (both
+ * copies) — buyers still get `pointer`, `message`, and `keyword`,
+ * which is enough to fix their payload, but the internal branch
+ * shape of the seller's handler isn't leaked. Defaults to the same
+ * policy as `exposeErrorDetails`: on in dev/test, off in production.
+ */
+function buildAdcpValidationErrorPayload(tool, side, issues, options = {}) {
+    const first = issues[0];
+    const message = first != null
+        ? `${tool} ${side} failed schema validation at ${first.pointer}: ${first.message}`
+        : `${tool} ${side} failed schema validation`;
+    // `exposeSchemaPath` gates `schemaPath` only. Not `variants`.
+    // Different sensitivity classes justify different defaults:
+    //   - `schemaPath` (e.g. `#/properties/account/oneOf/2`) encodes which
+    //     branch of the validator rejected first — an implementation
+    //     detail that can fingerprint the seller's handler ordering.
+    //   - `variants[]` summarizes the PUBLIC spec's union shape (each
+    //     variant's required / properties keys). The bundled AdCP
+    //     schemas are already npm-shipped with `@adcp/sdk` and
+    //     published at adcontextprotocol.org — a motivated buyer has
+    //     them offline anyway. Gating would only hurt naive LLM clients
+    //     in production, which is exactly the audience `variants[]` was
+    //     built for (#919).
+    // If a future AdCP version ever admits per-seller schema extensions
+    // into the validator (today's validator only loads canonical spec
+    // from `schemas/cache/<version>/`), revisit this — at that point
+    // `variants[]` could start to reflect seller-internal shapes and the
+    // gating argument would apply.
+    const emittedIssues = options.exposeSchemaPath ? issues : issues.map(({ schemaPath: _schemaPath, ...rest }) => rest);
+    const payload = {
+        message,
+        issues: emittedIssues,
+        details: { tool, side, issues: emittedIssues },
+    };
+    if (first?.pointer)
+        payload.field = first.pointer;
+    return payload;
+}
+//# sourceMappingURL=schema-errors.js.map

package/dist/lib/validation/schema-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-errors.js","sourceRoot":"","sources":["../../../src/lib/validation/schema-errors.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAoBH,oDAWC;AAoCD,0EAiDC;AAlHD,sCAA4C;AAY5C;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,IAA4B,EAC5B,MAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,IAAI,GAAG,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,wBAAe,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC,CAAC;IACpF,GAAG,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAmC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,+BAA+B,CAC7C,IAAY,EACZ,IAA4B,EAC5B,MAAyB,EACzB,UAA0C,EAAE;IAO5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,OAAO,GACX,KAAK,IAAI,IAAI;QACX,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,gCAAgC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;QAClF,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,2BAA2B,CAAC;IACjD,8DAA8D;IAC9D,4DAA4D;IAC5D,uEAAuE;IACvE,iEAAiE;IACjE,iEAAiE;IACjE,kEAAkE;IAClE,8DAA8D;IAC9D,2DAA2D;IAC3D,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,wBAAwB;IACxB,oEAAoE;IACpE,kEAAkE;IAClE,iEAAiE;IACjE,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACrH,MAAM,OAAO,GAKT;QACF,OAAO;QACP,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAG3C;KACF,CAAC;IACF,IAAI,KAAK,EAAE,OAAO;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/validation/schema-loader.d.ts

@@ -0,0 +1,24 @@
+/**
+ * JSON Schema loader for AdCP tool request/response validation.
+ *
+ * Loads the bundled per-tool schemas shipped with the SDK plus the
+ * `core/` schemas that async response variants `$ref`, then compiles
+ * AJV validators lazily by `(toolName, direction)`.
+ */
+import { type ValidateFunction } from 'ajv';
+export type ResponseVariant = 'sync' | 'submitted' | 'working' | 'input-required';
+export type Direction = 'request' | ResponseVariant;
+declare const SCHEMA_FILENAME_SUFFIX: Record<Direction, string>;
+/**
+ * Look up the compiled AJV validator for a given tool + direction.
+ * Returns `undefined` when no schema exists for the pair — callers can
+ * skip validation cleanly (e.g., custom tools outside the AdCP spec).
+ */
+export declare function getValidator(toolName: string, direction: Direction): ValidateFunction | undefined;
+/** List of (toolName, direction) pairs that have schemas. Used by tests. */
+export declare function listValidatorKeys(): string[];
+/** Suffix used in the suffix table — exported for testing. */
+export { SCHEMA_FILENAME_SUFFIX };
+/** Test hook: reset cached state so a fresh init runs. */
+export declare function _resetValidationLoader(): void;
+//# sourceMappingURL=schema-loader.d.ts.map

package/dist/lib/validation/schema-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-loader.d.ts","sourceRoot":"","sources":["../../../src/lib/validation/schema-loader.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAMjD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAClF,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;AAOpD,QAAA,MAAM,sBAAsB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAMrD,CAAC;AAsNF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAsBjG;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAG5C;AAED,8DAA8D;AAC9D,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAElC,0DAA0D;AAC1D,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}