@ucptools/validator 1.0.0 → 1.0.1

package/api/generate.js

@@ -1,132 +0,0 @@
-/**
- * Vercel Serverless Function: Generate UCP Profile
- * POST /api/generate
- */
-
-function generateProfile({ domain, endpoint, capabilities }) {
-  const today = new Date().toISOString().split('T')[0];
-
-  const profile = {
-    ucp: {
-      version: today,
-      services: {
-        shopping: {
-          version: "1.0",
-          spec: "https://ucp.dev/specs/shopping/1.0",
-          rest: {
-            endpoint: endpoint,
-            auth: {
-              type: "oauth2",
-              flows: ["client_credentials"],
-              token_url: `${endpoint}/oauth/token`
-            }
-          }
-        }
-      },
-      capabilities: []
-    }
-  };
-
-  // Always add checkout (required)
-  profile.ucp.capabilities.push({
-    name: "dev.ucp.shopping.checkout",
-    version: "1.0",
-    spec: "https://ucp.dev/specs/shopping/checkout/1.0",
-    schema: "https://ucp.dev/schemas/shopping/checkout/1.0.json"
-  });
-
-  // Add optional capabilities
-  if (capabilities?.order) {
-    profile.ucp.capabilities.push({
-      name: "dev.ucp.shopping.order",
-      version: "1.0",
-      spec: "https://ucp.dev/specs/shopping/order/1.0",
-      schema: "https://ucp.dev/schemas/shopping/order/1.0.json"
-    });
-
-    // Add signing_keys for order capability
-    profile.signing_keys = [
-      {
-        kid: `${domain.replace(/\./g, '-')}-key-1`,
-        alg: "ES256",
-        use: "sig",
-        kty: "EC",
-        crv: "P-256",
-        x: "PLACEHOLDER_X_COORDINATE",
-        y: "PLACEHOLDER_Y_COORDINATE"
-      }
-    ];
-  }
-
-  if (capabilities?.fulfillment) {
-    profile.ucp.capabilities.push({
-      name: "dev.ucp.shopping.fulfillment",
-      version: "1.0",
-      spec: "https://ucp.dev/specs/shopping/fulfillment/1.0",
-      schema: "https://ucp.dev/schemas/shopping/fulfillment/1.0.json"
-    });
-  }
-
-  if (capabilities?.discount) {
-    profile.ucp.capabilities.push({
-      name: "dev.ucp.shopping.discount",
-      version: "1.0",
-      spec: "https://ucp.dev/specs/shopping/discount/1.0",
-      schema: "https://ucp.dev/schemas/shopping/discount/1.0.json"
-    });
-  }
-
-  return profile;
-}
-
-export default async function handler(req, res) {
-  // CORS headers
-  res.setHeader('Access-Control-Allow-Origin', '*');
-  res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
-  res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
-
-  if (req.method === 'OPTIONS') {
-    return res.status(200).end();
-  }
-
-  if (req.method !== 'POST') {
-    return res.status(405).json({ error: 'Method not allowed' });
-  }
-
-  const { domain, endpoint, capabilities } = req.body;
-
-  if (!domain) {
-    return res.status(400).json({ error: 'Missing required field: domain' });
-  }
-
-  if (!endpoint) {
-    return res.status(400).json({ error: 'Missing required field: endpoint' });
-  }
-
-  if (!endpoint.startsWith('https://')) {
-    return res.status(400).json({ error: 'Endpoint must use HTTPS' });
-  }
-
-  const cleanDomain = domain.replace(/^https?:\/\//, '').replace(/\/$/, '');
-  const cleanEndpoint = endpoint.replace(/\/$/, '');
-
-  const profile = generateProfile({
-    domain: cleanDomain,
-    endpoint: cleanEndpoint,
-    capabilities: capabilities || { checkout: true }
-  });
-
-  return res.status(200).json({
-    ok: true,
-    domain: cleanDomain,
-    profile,
-    deploy_to: `https://${cleanDomain}/.well-known/ucp`,
-    instructions: [
-      'Save this JSON as "ucp" (no extension) or "ucp.json"',
-      `Upload to your server at /.well-known/ucp`,
-      'Set Content-Type: application/json',
-      'Add CORS header: Access-Control-Allow-Origin: *',
-      profile.signing_keys ? 'Replace PLACEHOLDER values in signing_keys with your actual EC key' : null
-    ].filter(Boolean)
-  });
-}

package/api/security-scan.js

@@ -1,133 +0,0 @@
-/**
- * Vercel Serverless Function: Security Posture Scanner
- * POST /api/security-scan
- *
- * Scans UCP endpoints for common security misconfigurations.
- * Helps merchants understand their security posture before exposing
- * endpoints to AI agents.
- *
- * Request body:
- *   { "domain": "example.com", "options"?: { timeoutMs?: number } }
- *
- * Response:
- *   Security scan result including checks, score, grade, and recommendations.
- */
-
-export default async function handler(req, res) {
-    // Handle CORS
-    res.setHeader('Access-Control-Allow-Origin', '*');
-    res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
-
-    if (req.method === 'OPTIONS') {
-        return res.status(200).end();
-    }
-
-    if (req.method !== 'POST') {
-        return res.status(405).json({
-            error: 'Method not allowed',
-            message: 'Use POST to run a security scan',
-        });
-    }
-
-    try {
-        const { domain, options = {} } = req.body || {};
-
-        if (!domain) {
-            return res.status(400).json({
-                error: 'Missing domain',
-                message: 'Please provide a domain to scan',
-            });
-        }
-
-        // Clean domain
-        const cleanDomain = domain
-            .replace(/^https?:\/\//, '')
-            .replace(/\/.*$/, '')
-            .toLowerCase()
-            .trim();
-
-        if (!cleanDomain) {
-            return res.status(400).json({
-                error: 'Invalid domain',
-                message: 'Please provide a valid domain',
-            });
-        }
-
-        // Dynamic import of the security scanner
-        const { scanEndpointSecurity } = await import('../src/security/index.js');
-
-        // Run security scan
-        const scanOptions = {
-            timeoutMs: options.timeoutMs || 15000,
-        };
-
-        const result = await scanEndpointSecurity(cleanDomain, scanOptions);
-
-        // Build response
-        const response = {
-            ok: result.score >= 60,
-            domain: result.domain,
-            endpoint: result.endpoint,
-            scanned_at: result.scanned_at,
-
-            // Score and grade
-            score: result.score,
-            grade: result.grade,
-
-            // Summary
-            summary: result.summary,
-
-            // All checks with details
-            checks: result.checks.map(check => ({
-                id: check.id,
-                name: check.name,
-                description: check.description,
-                status: check.status,
-                severity: check.severity,
-                details: check.details,
-                recommendation: check.recommendation,
-            })),
-
-            // Group by status for easier UI rendering
-            by_status: {
-                passed: result.checks.filter(c => c.status === 'pass'),
-                failed: result.checks.filter(c => c.status === 'fail'),
-                warnings: result.checks.filter(c => c.status === 'warn'),
-                skipped: result.checks.filter(c => c.status === 'skip'),
-            },
-
-            // Critical issues that need immediate attention
-            critical_issues: result.checks.filter(
-                c => c.status === 'fail' && (c.severity === 'critical' || c.severity === 'high')
-            ),
-
-            // Badge
-            badge: {
-                text: `Security: ${result.grade} (${result.score}/100)`,
-                color: getBadgeColor(result.score),
-            },
-        };
-
-        return res.status(200).json(response);
-
-    } catch (error) {
-        console.error('Security scan error:', error);
-        return res.status(500).json({
-            error: 'Security scan failed',
-            message: error.message || 'An unexpected error occurred',
-        });
-    }
-}
-
-/**
- * Get badge color from score
- */
-function getBadgeColor(score) {
-    if (score >= 90) return 'brightgreen';
-    if (score >= 80) return 'green';
-    if (score >= 70) return 'yellowgreen';
-    if (score >= 60) return 'yellow';
-    if (score >= 40) return 'orange';
-    return 'red';
-}

package/api/simulate.js

@@ -1,187 +0,0 @@
-/**
- * Vercel Serverless Function: AI Agent Simulation
- * POST /api/simulate
- *
- * Simulates how an AI agent would interact with a UCP-enabled merchant.
- * Tests real-world functionality, not just spec compliance.
- *
- * Request body:
- *   { "domain": "example.com", "options"?: { ... } }
- *
- * Response:
- *   Complete simulation result including discovery, capabilities,
- *   services, checkout flow, and payment readiness.
- */
-
-export default async function handler(req, res) {
-    // Handle CORS
-    res.setHeader('Access-Control-Allow-Origin', '*');
-    res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
-
-    if (req.method === 'OPTIONS') {
-        return res.status(200).end();
-    }
-
-    if (req.method !== 'POST') {
-        return res.status(405).json({
-            error: 'Method not allowed',
-            message: 'Use POST to simulate AI agent interaction',
-        });
-    }
-
-    try {
-        const { domain, options = {} } = req.body || {};
-
-        if (!domain) {
-            return res.status(400).json({
-                error: 'Missing domain',
-                message: 'Please provide a domain to simulate',
-            });
-        }
-
-        // Clean domain
-        const cleanDomain = domain
-            .replace(/^https?:\/\//, '')
-            .replace(/\/.*$/, '')
-            .toLowerCase()
-            .trim();
-
-        if (!cleanDomain) {
-            return res.status(400).json({
-                error: 'Invalid domain',
-                message: 'Please provide a valid domain',
-            });
-        }
-
-        // Dynamic import of the simulator
-        const { simulateAgentInteraction } = await import('../src/simulator/index.js');
-
-        // Run simulation with timeout
-        const simulationOptions = {
-            timeoutMs: options.timeoutMs || 30000,
-            skipRestApiTest: options.skipRestApiTest || false,
-            skipSchemaValidation: options.skipSchemaValidation || false,
-            testCheckoutFlow: options.testCheckoutFlow !== false,
-            verbose: options.verbose || false,
-        };
-
-        const result = await simulateAgentInteraction(cleanDomain, simulationOptions);
-
-        // Build response
-        const response = {
-            ok: result.ok,
-            domain: result.domain,
-            simulated_at: result.simulatedAt,
-            duration_ms: result.durationMs,
-
-            // Score and grade
-            score: result.overallScore,
-            grade: getGrade(result.overallScore),
-
-            // Summary
-            summary: {
-                total_steps: result.summary.totalSteps,
-                passed: result.summary.passedSteps,
-                failed: result.summary.failedSteps,
-                warnings: result.summary.warningSteps,
-                skipped: result.summary.skippedSteps,
-            },
-
-            // Discovery
-            discovery: {
-                success: result.discovery.success,
-                profile_url: result.discovery.profileUrl,
-                services: result.discovery.services,
-                capabilities: result.discovery.capabilities,
-                transports: result.discovery.transports,
-                steps: result.discovery.steps,
-            },
-
-            // Capabilities
-            capabilities: result.capabilities.map(cap => ({
-                name: cap.name,
-                version: cap.version,
-                schema_accessible: cap.schemaAccessible,
-                spec_accessible: cap.specAccessible,
-                is_extension: cap.isExtension,
-                parent: cap.parentCapability,
-            })),
-
-            // Services
-            services: result.services.map(svc => ({
-                name: svc.name,
-                version: svc.version,
-                transports: svc.transports,
-            })),
-
-            // REST API (if tested)
-            rest_api: result.restApi ? {
-                success: result.restApi.success,
-                schema_loaded: result.restApi.schemaLoaded,
-                endpoint_accessible: result.restApi.endpointAccessible,
-                steps: result.restApi.steps,
-            } : null,
-
-            // Checkout flow (if tested)
-            checkout: result.checkout ? {
-                success: result.checkout.success,
-                can_create_checkout: result.checkout.canCreateCheckout,
-                checkout_schema_valid: result.checkout.checkoutSchemaValid,
-                order_flow_supported: result.checkout.orderFlowSupported,
-                fulfillment_supported: result.checkout.fulfillmentSupported,
-                steps: result.checkout.steps,
-            } : null,
-
-            // Payment readiness
-            payment: result.payment ? {
-                success: result.payment.success,
-                handlers_found: result.payment.handlersFound,
-                webhook_verifiable: result.payment.webhookVerifiable,
-                signing_key_valid: result.payment.signingKeyValid,
-                steps: result.payment.steps,
-            } : null,
-
-            // Recommendations
-            recommendations: result.recommendations,
-
-            // Badge
-            badge: {
-                text: `AI Agent Ready: ${getGrade(result.overallScore)} (${result.overallScore}/100)`,
-                color: getBadgeColor(result.overallScore),
-            },
-        };
-
-        return res.status(200).json(response);
-
-    } catch (error) {
-        console.error('Simulation error:', error);
-        return res.status(500).json({
-            error: 'Simulation failed',
-            message: error.message || 'An unexpected error occurred',
-        });
-    }
-}
-
-/**
- * Get letter grade from score
- */
-function getGrade(score) {
-    if (score >= 90) return 'A';
-    if (score >= 80) return 'B';
-    if (score >= 70) return 'C';
-    if (score >= 60) return 'D';
-    return 'F';
-}
-
-/**
- * Get badge color from score
- */
-function getBadgeColor(score) {
-    if (score >= 90) return 'brightgreen';
-    if (score >= 80) return 'green';
-    if (score >= 70) return 'yellowgreen';
-    if (score >= 60) return 'yellow';
-    if (score >= 40) return 'orange';
-    return 'red';
-}

package/api/tsconfig.json

@@ -1,10 +0,0 @@
-{
-  "extends": "../tsconfig.json",
-  "compilerOptions": {
-    "rootDir": "..",
-    "outDir": "../.vercel/output/functions",
-    "noEmit": true
-  },
-  "include": ["./**/*.ts", "../src/**/*.ts"],
-  "exclude": ["../node_modules", "../dist"]
-}