@ucptools/validator 1.0.0 → 1.1.0

package/dist/validator/rules-validator.js

@@ -0,0 +1,306 @@
+"use strict";
+/**
+ * UCP Rules Validator
+ * Validates UCP-specific business rules (no network calls)
+ *
+ * Updated per UCP Specification 2026-01-11:
+ * - Namespace-to-origin binding validation (security requirement)
+ * - Extension chain validation
+ * - Transport-specific field validation (schema, endpoint requirements)
+ * - HTTPS endpoint validation
+ *
+ * Note: signing_keys and payment.handlers are now validated in structural-validator.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateRules = validateRules;
+const validation_js_1 = require("../types/validation.js");
+const ucp_profile_js_1 = require("../types/ucp-profile.js");
+const utils_js_1 = require("./utils.js");
+/**
+ * Validate UCP business rules
+ */
+function validateRules(profile) {
+    const issues = [];
+    // Validate namespace/origin binding for capabilities
+    issues.push(...validateNamespaceOrigins(profile));
+    // Validate extension chains (no orphaned extends)
+    issues.push(...validateExtensions(profile));
+    // Validate endpoint rules and transport-specific requirements
+    issues.push(...validateEndpoints(profile));
+    // Note: signing_keys validation is now handled in structural validator
+    // (required for all profiles per UCP spec 2026-01-11, not just Order capability)
+    return issues;
+}
+/**
+ * Validate namespace and URL origin binding
+ * - dev.ucp.* capabilities must have spec/schema from ucp.dev
+ * - com.vendor.* capabilities must have spec/schema from vendor's domain
+ */
+function validateNamespaceOrigins(profile) {
+    const issues = [];
+    const capabilities = (0, utils_js_1.normalizeCapabilities)(profile.ucp.capabilities);
+    for (let i = 0; i < capabilities.length; i++) {
+        const cap = capabilities[i];
+        const path = `$.ucp.capabilities["${cap.name}"]`;
+        // Check dev.ucp.* namespace
+        if (cap.name.startsWith(ucp_profile_js_1.CAPABILITY_NAMESPACES.UCP_OFFICIAL)) {
+            // Spec must be from ucp.dev
+            if (cap.spec && !isUcpDevOrigin(cap.spec)) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.NS_ORIGIN_MISMATCH,
+                    path: `${path}.spec`,
+                    message: `dev.ucp.* capability spec must be hosted on ucp.dev`,
+                    hint: `Use https://ucp.dev/specification/... instead of "${cap.spec}"`,
+                });
+            }
+            // Schema must be from ucp.dev
+            if (cap.schema && !isUcpDevOrigin(cap.schema)) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.NS_ORIGIN_MISMATCH,
+                    path: `${path}.schema`,
+                    message: `dev.ucp.* capability schema must be hosted on ucp.dev`,
+                    hint: `Use https://ucp.dev/schemas/... instead of "${cap.schema}"`,
+                });
+            }
+        }
+        // Check vendor namespace (com.vendor.*)
+        if (cap.name.startsWith(ucp_profile_js_1.CAPABILITY_NAMESPACES.VENDOR_PREFIX)) {
+            const vendorDomain = extractVendorDomain(cap.name);
+            if (vendorDomain) {
+                // Spec origin should match vendor domain
+                if (cap.spec && !isOriginFromDomain(cap.spec, vendorDomain)) {
+                    issues.push({
+                        severity: 'warn',
+                        code: validation_js_1.ValidationErrorCodes.NS_ORIGIN_MISMATCH,
+                        path: `${path}.spec`,
+                        message: `Vendor capability spec should be hosted on vendor's domain (${vendorDomain})`,
+                        hint: `Consider hosting spec at https://${vendorDomain}/...`,
+                    });
+                }
+                // Schema origin should match vendor domain
+                if (cap.schema && !isOriginFromDomain(cap.schema, vendorDomain)) {
+                    issues.push({
+                        severity: 'warn',
+                        code: validation_js_1.ValidationErrorCodes.NS_ORIGIN_MISMATCH,
+                        path: `${path}.schema`,
+                        message: `Vendor capability schema should be hosted on vendor's domain (${vendorDomain})`,
+                        hint: `Consider hosting schema at https://${vendorDomain}/...`,
+                    });
+                }
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Validate extension chains - ensure parent capabilities exist
+ */
+function validateExtensions(profile) {
+    const issues = [];
+    const capabilities = (0, utils_js_1.normalizeCapabilities)(profile.ucp.capabilities);
+    // Build set of capability names
+    const capabilityNames = new Set(capabilities.map(c => c.name));
+    for (const cap of capabilities) {
+        if (cap.extends) {
+            // Check if parent capability exists in this profile
+            if (!capabilityNames.has(cap.extends)) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.ORPHANED_EXTENSION,
+                    path: `$.ucp.capabilities["${cap.name}"].extends`,
+                    message: `Extension "${cap.name}" references non-existent parent capability "${cap.extends}"`,
+                    hint: `Add "${cap.extends}" to capabilities or remove the extends field`,
+                });
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Validate endpoint rules and transport-specific requirements (per UCP spec 2026-01-11)
+ */
+function validateEndpoints(profile) {
+    const issues = [];
+    const normalizedServices = (0, utils_js_1.normalizeServices)(profile.ucp.services);
+    for (const { name: serviceName, service } of normalizedServices) {
+        const basePath = `$.ucp.services["${serviceName}"]`;
+        // Validate REST transport (requires schema and endpoint)
+        if (service.rest) {
+            if (!service.rest.schema) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.REST_MISSING_SCHEMA,
+                    path: `${basePath}.rest.schema`,
+                    message: `Service "${serviceName}" REST transport missing required "schema" field`,
+                    hint: 'Add schema URL pointing to OpenAPI 3.x specification',
+                });
+            }
+            if (!service.rest.endpoint) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.REST_MISSING_ENDPOINT,
+                    path: `${basePath}.rest.endpoint`,
+                    message: `Service "${serviceName}" REST transport missing required "endpoint" field`,
+                    hint: 'Add endpoint URL (base URL for REST API)',
+                });
+            }
+            else {
+                issues.push(...validateEndpoint(service.rest.endpoint, `${basePath}.rest.endpoint`));
+            }
+        }
+        // Validate MCP transport (requires schema and endpoint)
+        if (service.mcp) {
+            if (!service.mcp.schema) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.MCP_MISSING_SCHEMA,
+                    path: `${basePath}.mcp.schema`,
+                    message: `Service "${serviceName}" MCP transport missing required "schema" field`,
+                    hint: 'Add schema URL pointing to OpenRPC specification',
+                });
+            }
+            if (!service.mcp.endpoint) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.MCP_MISSING_ENDPOINT,
+                    path: `${basePath}.mcp.endpoint`,
+                    message: `Service "${serviceName}" MCP transport missing required "endpoint" field`,
+                    hint: 'Add endpoint URL (base URL for MCP server)',
+                });
+            }
+            else {
+                issues.push(...validateEndpoint(service.mcp.endpoint, `${basePath}.mcp.endpoint`));
+            }
+        }
+        // Validate A2A transport (requires agentCard with Agent Card URL)
+        if (service.a2a) {
+            if (!service.a2a.agentCard) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.A2A_MISSING_ENDPOINT,
+                    path: `${basePath}.a2a.agentCard`,
+                    message: `Service "${serviceName}" A2A transport missing required "agentCard" field`,
+                    hint: 'Add agentCard URL pointing to Agent Card',
+                });
+            }
+            else {
+                issues.push(...validateEndpoint(service.a2a.agentCard, `${basePath}.a2a.agentCard`));
+            }
+        }
+        // Validate EP (Embedded/Plugin) transport (requires schema)
+        if (service.embedded) {
+            if (!service.embedded.schema) {
+                issues.push({
+                    severity: 'error',
+                    code: validation_js_1.ValidationErrorCodes.EP_MISSING_SCHEMA,
+                    path: `${basePath}.embedded.schema`,
+                    message: `Service "${serviceName}" Embedded transport missing required "schema" field`,
+                    hint: 'Add schema URL pointing to OpenRPC specification',
+                });
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Validate a single endpoint URL
+ */
+function validateEndpoint(endpoint, path) {
+    const issues = [];
+    // Must be HTTPS
+    if (!endpoint.startsWith('https://')) {
+        issues.push({
+            severity: 'error',
+            code: validation_js_1.ValidationErrorCodes.ENDPOINT_NOT_HTTPS,
+            path,
+            message: `Endpoint must use HTTPS`,
+            hint: `Change "${endpoint}" to use https://`,
+        });
+    }
+    // Should not have trailing slash
+    if (endpoint.endsWith('/')) {
+        issues.push({
+            severity: 'warn',
+            code: validation_js_1.ValidationErrorCodes.ENDPOINT_TRAILING_SLASH,
+            path,
+            message: `Endpoint should not have a trailing slash`,
+            hint: `Remove trailing slash from "${endpoint}"`,
+        });
+    }
+    // Check for private IP ranges (basic check)
+    if (isPrivateIpEndpoint(endpoint)) {
+        issues.push({
+            severity: 'warn',
+            code: validation_js_1.ValidationErrorCodes.PRIVATE_IP_ENDPOINT,
+            path,
+            message: `Endpoint appears to use a private IP address`,
+            hint: `Use a public domain name for production profiles`,
+        });
+    }
+    return issues;
+}
+/**
+ * Check if URL is from ucp.dev origin
+ */
+function isUcpDevOrigin(url) {
+    try {
+        const parsed = new URL(url);
+        return parsed.hostname === 'ucp.dev' || parsed.hostname.endsWith('.ucp.dev');
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Extract vendor domain from capability name
+ * e.g., "com.example.feature" -> "example.com"
+ */
+function extractVendorDomain(name) {
+    if (!name.startsWith('com.')) {
+        return null;
+    }
+    const parts = name.split('.');
+    if (parts.length < 3) {
+        return null;
+    }
+    // "com.example.feature" -> "example.com"
+    return `${parts[1]}.com`;
+}
+/**
+ * Check if URL origin matches expected domain
+ */
+function isOriginFromDomain(url, domain) {
+    try {
+        const parsed = new URL(url);
+        return parsed.hostname === domain || parsed.hostname.endsWith(`.${domain}`);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check if endpoint uses private IP address
+ */
+function isPrivateIpEndpoint(endpoint) {
+    try {
+        const parsed = new URL(endpoint);
+        const hostname = parsed.hostname;
+        // Check for localhost
+        if (hostname === 'localhost' || hostname === '127.0.0.1') {
+            return true;
+        }
+        // Check for private IP ranges (simplified)
+        if (hostname.startsWith('10.') ||
+            hostname.startsWith('192.168.') ||
+            hostname.match(/^172\.(1[6-9]|2[0-9]|3[0-1])\./)) {
+            return true;
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=rules-validator.js.map

package/dist/validator/rules-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-validator.js","sourceRoot":"","sources":["../../src/validator/rules-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAWH,sCAgBC;AAvBD,0DAA8D;AAC9D,4DAAoF;AACpF,yCAAsE;AAEtE;;GAEG;AACH,SAAgB,aAAa,CAAC,OAAmB;IAC/C,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,qDAAqD;IACrD,MAAM,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IAElD,kDAAkD;IAClD,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3C,uEAAuE;IACvE,iFAAiF;IAEjF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,OAAmB;IACnD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,IAAA,gCAAqB,EAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAErE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,uBAAuB,GAAG,CAAC,IAAI,IAAI,CAAC;QAEjD,4BAA4B;QAC5B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,sCAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5D,4BAA4B;YAC5B,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;oBAC7C,IAAI,EAAE,GAAG,IAAI,OAAO;oBACpB,OAAO,EAAE,qDAAqD;oBAC9D,IAAI,EAAE,qDAAqD,GAAG,CAAC,IAAI,GAAG;iBACvE,CAAC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;oBAC7C,IAAI,EAAE,GAAG,IAAI,SAAS;oBACtB,OAAO,EAAE,uDAAuD;oBAChE,IAAI,EAAE,+CAA+C,GAAG,CAAC,MAAM,GAAG;iBACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,sCAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,YAAY,EAAE,CAAC;gBACjB,yCAAyC;gBACzC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC5D,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;wBAC7C,IAAI,EAAE,GAAG,IAAI,OAAO;wBACpB,OAAO,EAAE,+DAA+D,YAAY,GAAG;wBACvF,IAAI,EAAE,oCAAoC,YAAY,MAAM;qBAC7D,CAAC,CAAC;gBACL,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;oBAChE,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;wBAC7C,IAAI,EAAE,GAAG,IAAI,SAAS;wBACtB,OAAO,EAAE,iEAAiE,YAAY,GAAG;wBACzF,IAAI,EAAE,sCAAsC,YAAY,MAAM;qBAC/D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAmB;IAC7C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,IAAA,gCAAqB,EAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAErE,gCAAgC;IAChC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,oDAAoD;YACpD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;oBAC7C,IAAI,EAAE,uBAAuB,GAAG,CAAC,IAAI,YAAY;oBACjD,OAAO,EAAE,cAAc,GAAG,CAAC,IAAI,gDAAgD,GAAG,CAAC,OAAO,GAAG;oBAC7F,IAAI,EAAE,QAAQ,GAAG,CAAC,OAAO,+CAA+C;iBACzE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAmB;IAC5C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAG,IAAA,4BAAiB,EAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEnE,KAAK,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,mBAAmB,WAAW,IAAI,CAAC;QAEpD,yDAAyD;QACzD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,mBAAmB;oBAC9C,IAAI,EAAE,GAAG,QAAQ,cAAc;oBAC/B,OAAO,EAAE,YAAY,WAAW,kDAAkD;oBAClF,IAAI,EAAE,sDAAsD;iBAC7D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,qBAAqB;oBAChD,IAAI,EAAE,GAAG,QAAQ,gBAAgB;oBACjC,OAAO,EAAE,YAAY,WAAW,oDAAoD;oBACpF,IAAI,EAAE,0CAA0C;iBACjD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,gBAAgB,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;oBAC7C,IAAI,EAAE,GAAG,QAAQ,aAAa;oBAC9B,OAAO,EAAE,YAAY,WAAW,iDAAiD;oBACjF,IAAI,EAAE,kDAAkD;iBACzD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,oBAAoB;oBAC/C,IAAI,EAAE,GAAG,QAAQ,eAAe;oBAChC,OAAO,EAAE,YAAY,WAAW,mDAAmD;oBACnF,IAAI,EAAE,4CAA4C;iBACnD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,QAAQ,eAAe,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,oBAAoB;oBAC/C,IAAI,EAAE,GAAG,QAAQ,gBAAgB;oBACjC,OAAO,EAAE,YAAY,WAAW,oDAAoD;oBACpF,IAAI,EAAE,0CAA0C;iBACjD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,QAAQ,gBAAgB,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oCAAoB,CAAC,iBAAiB;oBAC5C,IAAI,EAAE,GAAG,QAAQ,kBAAkB;oBACnC,OAAO,EAAE,YAAY,WAAW,sDAAsD;oBACtF,IAAI,EAAE,kDAAkD;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,IAAY;IACtD,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,gBAAgB;IAChB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,oCAAoB,CAAC,kBAAkB;YAC7C,IAAI;YACJ,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,WAAW,QAAQ,mBAAmB;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,oCAAoB,CAAC,uBAAuB;YAClD,IAAI;YACJ,OAAO,EAAE,2CAA2C;YACpD,IAAI,EAAE,+BAA+B,QAAQ,GAAG;SACjD,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,oCAAoB,CAAC,mBAAmB;YAC9C,IAAI;YACJ,OAAO,EAAE,8CAA8C;YACvD,IAAI,EAAE,kDAAkD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAAc;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,sBAAsB;QACtB,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1B,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/validator/sdk-validator.d.ts

@@ -0,0 +1,58 @@
+/**
+ * SDK-based Validator
+ * Validates UCP profiles using the official @ucp-js/sdk Zod schemas
+ *
+ * This provides spec-compliant validation using the official UCP SDK,
+ * ensuring alignment with the latest UCP specification.
+ */
+import { UcpDiscoveryProfileSchema, UcpClassSchema, UcpServiceSchema, CapabilityDiscoverySchema, SigningKeySchema, type UcpDiscoveryProfile, type UcpClass, type UcpService, type CapabilityDiscovery, type SigningKey } from '@ucp-js/sdk';
+import type { ValidationIssue } from '../types/validation.js';
+/**
+ * SDK validation result
+ */
+export interface SdkValidationResult {
+    valid: boolean;
+    issues: ValidationIssue[];
+    sdkVersion: string;
+    parsedProfile?: UcpDiscoveryProfile;
+}
+/**
+ * Get the current SDK version
+ */
+export declare function getSdkVersion(): string;
+/**
+ * Validate a UCP profile using the official SDK schema
+ *
+ * This uses the UcpDiscoveryProfileSchema from @ucp-js/sdk to validate
+ * the entire profile structure against the official UCP specification.
+ */
+export declare function validateWithSdk(profile: unknown): SdkValidationResult;
+/**
+ * Safe parse - doesn't throw, returns result with errors
+ */
+export declare function safeValidateWithSdk(profile: unknown): SdkValidationResult;
+/**
+ * Validate only the UCP object (version, services, capabilities)
+ */
+export declare function validateUcpObject(ucp: unknown): SdkValidationResult;
+/**
+ * Validate a single service definition
+ */
+export declare function validateServiceWithSdk(serviceName: string, service: unknown): SdkValidationResult;
+/**
+ * Validate a single capability definition
+ */
+export declare function validateCapabilityWithSdk(index: number, capability: unknown): SdkValidationResult;
+/**
+ * Validate signing keys array
+ */
+export declare function validateSigningKeysWithSdk(signingKeys: unknown): SdkValidationResult;
+/**
+ * Check if a profile passes SDK validation (quick boolean check)
+ */
+export declare function isSdkCompliant(profile: unknown): boolean;
+/**
+ * Export SDK schemas for direct use
+ */
+export { UcpDiscoveryProfileSchema, UcpClassSchema, UcpServiceSchema, CapabilityDiscoverySchema, SigningKeySchema, type UcpDiscoveryProfile, type UcpClass, type UcpService, type CapabilityDiscovery, type SigningKey, };
+//# sourceMappingURL=sdk-validator.d.ts.map

package/dist/validator/sdk-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-validator.d.ts","sourceRoot":"","sources":["../../src/validator/sdk-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACH,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAClB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAGtC;AAuED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAmCrE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAmBzE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,CA2BnE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,GACjB,mBAAmB,CAwBrB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,OAAO,GACpB,mBAAmB,CAwBrB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACtC,WAAW,EAAE,OAAO,GACrB,mBAAmB,CA0BrB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGxD;AAED;;GAEG;AACH,OAAO,EACH,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,UAAU,GAClB,CAAC"}