@a2a-js/sdk 0.3.3 → 0.3.5

package/README.md

@@ -163,19 +163,22 @@ class TaskExecutor implements AgentExecutor {
     requestContext: RequestContext,
     eventBus: ExecutionEventBus
   ): Promise<void> {
-    const { taskId, contextId } = requestContext;
-
-    // 1. Create and publish the initial task object.
-    const initialTask: Task = {
-      kind: "task",
-      id: taskId,
-      contextId: contextId,
-      status: {
-        state: "submitted",
-        timestamp: new Date().toISOString(),
-      },
-    };
-    eventBus.publish(initialTask);
+    const { taskId, contextId, userMessage, task } = requestContext;
+
+    // 1. Create and publish the initial task object if it doesn't exist.
+    if (!task) {
+      const initialTask: Task = {
+        kind: "task",
+        id: taskId,
+        contextId: contextId,
+        status: {
+          state: "submitted",
+          timestamp: new Date().toISOString(),
+        },
+        history: [userMessage]
+      };
+      eventBus.publish(initialTask);
+    }
 
     // 2. Create and publish an artifact.
     const artifactUpdate: TaskArtifactUpdateEvent = {
@@ -281,6 +284,28 @@ const client = await A2AClient.fromCardUrl(
 await client.sendMessage({ message: { messageId: uuidv4(), role: "user", parts: [{ kind: "text", text: "A message requiring custom headers." }], kind: "message" } });
 ```
 
+### Example: Specifying a Timeout
+
+This example creates a `fetch` wrapper that sets a timeout for every outgoing request.
+
+```typescript
+import { A2AClient } from "@a2a-js/sdk/client";
+
+// 1. Create a wrapper around the global fetch function.
+const fetchWithTimeout: typeof fetch = async (url, init) => {
+  return fetch(url, { ...init, signal: AbortSignal.timeout(5000)});
+};
+
+// 2. Provide the custom fetch implementation to the client.
+const client = await A2AClient.fromCardUrl(
+  "http://localhost:4000/.well-known/agent-card.json",
+  { fetchImpl: fetchWithTimeout }
+);
+
+// Now, all requests made by this client instance will have a configured timeout.
+await client.sendMessage({ message: { messageId: uuidv4(), role: "user", parts: [{ kind: "text", text: "A message requiring custom headers." }], kind: "message" } });
+```
+
 ### Using the Provided `AuthenticationHandler`
 
 For advanced authentication scenarios, the SDK includes a higher-order function `createAuthenticatingFetchWithRetry` and an `AuthenticationHandler` interface. This utility automatically adds authorization headers and can retry requests that fail with authentication errors (e.g., 401 Unauthorized).
@@ -354,15 +379,22 @@ class StreamingExecutor implements AgentExecutor {
     requestContext: RequestContext,
     eventBus: ExecutionEventBus
   ): Promise<void> {
-    const { taskId, contextId } = requestContext;
-
-    // 1. Publish initial 'submitted' state.
-    eventBus.publish({
-      kind: "task",
-      id: taskId,
-      contextId,
-      status: { state: "submitted", timestamp: new Date().toISOString() },
-    });
+    const { taskId, contextId, userMessage, task } = requestContext;
+
+    // 1. Create and publish the initial task object if it doesn't exist.
+    if (!task) {
+      const initialTask: Task = {
+        kind: "task",
+        id: taskId,
+        contextId: contextId,
+        status: {
+          state: "submitted",
+          timestamp: new Date().toISOString(),
+        },
+        history: [userMessage]
+      };
+      eventBus.publish(initialTask);
+    }
 
     // 2. Publish 'working' state.
     eventBus.publish({
@@ -535,6 +567,107 @@ class CancellableExecutor implements AgentExecutor {
 }
 ```
 
+## A2A Push Notifications
+
+For very long-running tasks (e.g., lasting minutes, hours, or even days) or when clients cannot or prefer not to maintain persistent connections (like mobile clients or serverless functions), A2A supports asynchronous updates via push notifications. This mechanism allows the A2A Server to actively notify a client-provided webhook when a significant task update occurs.
+
+### Server-Side Configuration
+
+To enable push notifications, your agent card must declare support:
+
+```typescript
+const movieAgentCard: AgentCard = {
+  // ... other properties
+  capabilities: {
+    streaming: true,
+    pushNotifications: true, // Enable push notifications
+    stateTransitionHistory: true,
+  },
+  // ... rest of agent card
+};
+```
+
+When creating the `DefaultRequestHandler`, you can optionally provide custom push notification components:
+
+```typescript
+import { 
+  DefaultRequestHandler, 
+  InMemoryPushNotificationStore,
+  DefaultPushNotificationSender 
+} from "@a2a-js/sdk/server";
+
+// Optional: Custom push notification store and sender
+const pushNotificationStore = new InMemoryPushNotificationStore();
+const pushNotificationSender = new DefaultPushNotificationSender(
+  pushNotificationStore,
+  {
+    timeout: 5000, // 5 second timeout
+    tokenHeaderName: 'X-A2A-Notification-Token' // Custom header name
+  }
+);
+
+const requestHandler = new DefaultRequestHandler(
+  movieAgentCard,
+  taskStore,
+  agentExecutor,
+  undefined, // eventBusManager (optional)
+  pushNotificationStore, // custom store
+  pushNotificationSender, // custom sender
+  undefined // extendedAgentCard (optional)
+);
+```
+
+### Client-Side Usage
+
+Configure push notifications when sending messages:
+
+```typescript
+// Configure push notification for a message
+const pushConfig: PushNotificationConfig = {
+  id: "my-notification-config", // Optional, defaults to task ID
+  url: "https://my-app.com/webhook/task-updates",
+  token: "your-auth-token" // Optional authentication token
+};
+
+const sendParams: MessageSendParams = {
+  message: {
+    messageId: uuidv4(),
+    role: "user",
+    parts: [{ kind: "text", text: "Hello, agent!" }],
+    kind: "message",
+  },
+  configuration: {
+    blocking: true,
+    acceptedOutputModes: ["text/plain"],
+    pushNotificationConfig: pushConfig // Add push notification config
+  },
+};
+```
+
+### Webhook Endpoint Implementation
+
+Your webhook endpoint should expect POST requests with the task data:
+
+```typescript
+// Example Express.js webhook endpoint
+app.post('/webhook/task-updates', (req, res) => {
+  const task = req.body; // The complete task object
+  
+  // Verify the token if provided
+  const token = req.headers['x-a2a-notification-token'];
+  if (token !== 'your-auth-token') {
+    return res.status(401).json({ error: 'Unauthorized' });
+  }
+  
+  console.log(`Task ${task.id} status: ${task.status.state}`);
+  
+  // Process the task update
+  // ...
+  
+  res.status(200).json({ received: true });
+});
+```
+
 ## License
 
 This project is licensed under the terms of the [Apache 2.0 License](https://raw.githubusercontent.com/google-a2a/a2a-python/refs/heads/main/LICENSE).

package/dist/{chunk-JA52GYRU.js → chunk-SY3G7ITG.js}

@@ -100,10 +100,8 @@ var JsonRpcTransportHandler = class {
       } else {
         throw A2AError.parseError("Invalid request body type.");
       }
-      if (rpcRequest.jsonrpc !== "2.0" || !rpcRequest.method || typeof rpcRequest.method !== "string") {
-        throw A2AError.invalidRequest(
-          "Invalid JSON-RPC request structure."
-        );
+      if (!this.isRequestValid(rpcRequest)) {
+        throw A2AError.invalidRequest("Invalid JSON-RPC Request.");
       }
     } catch (error) {
       const a2aError = error instanceof A2AError ? error : A2AError.parseError(error.message || "Failed to parse JSON request.");
@@ -123,8 +121,8 @@ var JsonRpcTransportHandler = class {
           result
         };
       }
-      if (!rpcRequest.params) {
-        throw A2AError.invalidParams(`'params' is required for '${method}'`);
+      if (!this.paramsAreValid(rpcRequest.params)) {
+        throw A2AError.invalidParams(`Invalid method parameters.`);
       }
       if (method === "message/stream" || method === "tasks/resubscribe") {
         const params = rpcRequest.params;
@@ -199,6 +197,37 @@ var JsonRpcTransportHandler = class {
       };
     }
   }
+  // Validates the basic structure of a JSON-RPC request
+  isRequestValid(rpcRequest) {
+    if (rpcRequest.jsonrpc !== "2.0") {
+      return false;
+    }
+    if ("id" in rpcRequest) {
+      const id = rpcRequest.id;
+      const isString = typeof id === "string";
+      const isInteger = typeof id === "number" && Number.isInteger(id);
+      const isNull = id === null;
+      if (!isString && !isInteger && !isNull) {
+        return false;
+      }
+    }
+    if (!rpcRequest.method || typeof rpcRequest.method !== "string") {
+      return false;
+    }
+    return true;
+  }
+  // Validates that params is an object with non-empty string keys
+  paramsAreValid(params) {
+    if (typeof params !== "object" || params === null || Array.isArray(params)) {
+      return false;
+    }
+    for (const key of Object.keys(params)) {
+      if (key === "") {
+        return false;
+      }
+    }
+    return true;
+  }
 };
 
 export {

package/dist/client/index.cjs

@@ -243,6 +243,28 @@ var A2AClient = class _A2AClient {
       params
     );
   }
+  /**
+   * Lists the push notification configurations for a given task.
+   * @param params Parameters containing the taskId.
+   * @returns A Promise resolving to ListTaskPushNotificationConfigResponse.
+   */
+  async listTaskPushNotificationConfig(params) {
+    return this._postRpcRequest(
+      "tasks/pushNotificationConfig/list",
+      params
+    );
+  }
+  /**
+   * Deletes the push notification configuration for a given task.
+   * @param params Parameters containing the taskId and push notification configuration ID.
+   * @returns A Promise resolving to DeleteTaskPushNotificationConfigResponse.
+   */
+  async deleteTaskPushNotificationConfig(params) {
+    return this._postRpcRequest(
+      "tasks/pushNotificationConfig/delete",
+      params
+    );
+  }
   /**
    * Retrieves a task by its ID.
    * @param params Parameters containing the taskId and optional historyLength.
@@ -259,6 +281,17 @@ var A2AClient = class _A2AClient {
   async cancelTask(params) {
     return this._postRpcRequest("tasks/cancel", params);
   }
+  /**
+   * @template TExtensionParams The type of parameters for the custom extension method.
+   * @template TExtensionResponse The type of response expected from the custom extension method. 
+   * This should extend JSONRPCResponse. This ensures the extension response is still a valid A2A response.
+   * @param method Custom JSON-RPC method defined in the AgentCard's extensions.
+   * @param params Extension paramters defined in the AgentCard's extensions.
+   * @returns A Promise that resolves to the RPC response.
+   */
+  async callExtensionMethod(method, params) {
+    return this._postRpcRequest(method, params);
+  }
   /**
    * Resubscribes to a task's event stream using Server-Sent Events (SSE).
    * This is used if a previous SSE connection for an active task was broken.

package/dist/client/index.d.cts

@@ -1,4 +1,4 @@
-import { ac as AgentCard, w as MessageSendParams, S as SendMessageResponse, B as Message, aw as Task, aO as TaskStatusUpdateEvent, aQ as TaskArtifactUpdateEvent, Z as TaskPushNotificationConfig, b as SetTaskPushNotificationConfigResponse, X as TaskIdParams, c as GetTaskPushNotificationConfigResponse, V as TaskQueryParams, G as GetTaskResponse, C as CancelTaskResponse, i as JSONRPCResponse, J as JSONRPCErrorResponse } from '../types-DNKcmF0f.cjs';
+import { ac as AgentCard, w as MessageSendParams, S as SendMessageResponse, B as Message, aw as Task, aO as TaskStatusUpdateEvent, aQ as TaskArtifactUpdateEvent, Z as TaskPushNotificationConfig, b as SetTaskPushNotificationConfigResponse, X as TaskIdParams, c as GetTaskPushNotificationConfigResponse, a5 as ListTaskPushNotificationConfigParams, j as ListTaskPushNotificationConfigResponse, a7 as DeleteTaskPushNotificationConfigParams, g as DeleteTaskPushNotificationConfigResponse, V as TaskQueryParams, G as GetTaskResponse, C as CancelTaskResponse, i as JSONRPCResponse, J as JSONRPCErrorResponse } from '../types-DNKcmF0f.cjs';
 
 type A2AStreamEventData = Message | Task | TaskStatusUpdateEvent | TaskArtifactUpdateEvent;
 interface A2AClientOptions {
@@ -81,6 +81,18 @@ declare class A2AClient {
      * @returns A Promise resolving to GetTaskPushNotificationConfigResponse.
      */
     getTaskPushNotificationConfig(params: TaskIdParams): Promise<GetTaskPushNotificationConfigResponse>;
+    /**
+     * Lists the push notification configurations for a given task.
+     * @param params Parameters containing the taskId.
+     * @returns A Promise resolving to ListTaskPushNotificationConfigResponse.
+     */
+    listTaskPushNotificationConfig(params: ListTaskPushNotificationConfigParams): Promise<ListTaskPushNotificationConfigResponse>;
+    /**
+     * Deletes the push notification configuration for a given task.
+     * @param params Parameters containing the taskId and push notification configuration ID.
+     * @returns A Promise resolving to DeleteTaskPushNotificationConfigResponse.
+     */
+    deleteTaskPushNotificationConfig(params: DeleteTaskPushNotificationConfigParams): Promise<DeleteTaskPushNotificationConfigResponse>;
     /**
      * Retrieves a task by its ID.
      * @param params Parameters containing the taskId and optional historyLength.
@@ -93,6 +105,15 @@ declare class A2AClient {
      * @returns A Promise resolving to CancelTaskResponse, which contains the updated Task object or an error.
      */
     cancelTask(params: TaskIdParams): Promise<CancelTaskResponse>;
+    /**
+     * @template TExtensionParams The type of parameters for the custom extension method.
+     * @template TExtensionResponse The type of response expected from the custom extension method.
+     * This should extend JSONRPCResponse. This ensures the extension response is still a valid A2A response.
+     * @param method Custom JSON-RPC method defined in the AgentCard's extensions.
+     * @param params Extension paramters defined in the AgentCard's extensions.
+     * @returns A Promise that resolves to the RPC response.
+     */
+    callExtensionMethod<TExtensionParams, TExtensionResponse extends JSONRPCResponse>(method: string, params: TExtensionParams): Promise<TExtensionResponse>;
     /**
      * Resubscribes to a task's event stream using Server-Sent Events (SSE).
      * This is used if a previous SSE connection for an active task was broken.

package/dist/client/index.d.ts

@@ -1,4 +1,4 @@
-import { ac as AgentCard, w as MessageSendParams, S as SendMessageResponse, B as Message, aw as Task, aO as TaskStatusUpdateEvent, aQ as TaskArtifactUpdateEvent, Z as TaskPushNotificationConfig, b as SetTaskPushNotificationConfigResponse, X as TaskIdParams, c as GetTaskPushNotificationConfigResponse, V as TaskQueryParams, G as GetTaskResponse, C as CancelTaskResponse, i as JSONRPCResponse, J as JSONRPCErrorResponse } from '../types-DNKcmF0f.js';
+import { ac as AgentCard, w as MessageSendParams, S as SendMessageResponse, B as Message, aw as Task, aO as TaskStatusUpdateEvent, aQ as TaskArtifactUpdateEvent, Z as TaskPushNotificationConfig, b as SetTaskPushNotificationConfigResponse, X as TaskIdParams, c as GetTaskPushNotificationConfigResponse, a5 as ListTaskPushNotificationConfigParams, j as ListTaskPushNotificationConfigResponse, a7 as DeleteTaskPushNotificationConfigParams, g as DeleteTaskPushNotificationConfigResponse, V as TaskQueryParams, G as GetTaskResponse, C as CancelTaskResponse, i as JSONRPCResponse, J as JSONRPCErrorResponse } from '../types-DNKcmF0f.js';
 
 type A2AStreamEventData = Message | Task | TaskStatusUpdateEvent | TaskArtifactUpdateEvent;
 interface A2AClientOptions {
@@ -81,6 +81,18 @@ declare class A2AClient {
      * @returns A Promise resolving to GetTaskPushNotificationConfigResponse.
      */
     getTaskPushNotificationConfig(params: TaskIdParams): Promise<GetTaskPushNotificationConfigResponse>;
+    /**
+     * Lists the push notification configurations for a given task.
+     * @param params Parameters containing the taskId.
+     * @returns A Promise resolving to ListTaskPushNotificationConfigResponse.
+     */
+    listTaskPushNotificationConfig(params: ListTaskPushNotificationConfigParams): Promise<ListTaskPushNotificationConfigResponse>;
+    /**
+     * Deletes the push notification configuration for a given task.
+     * @param params Parameters containing the taskId and push notification configuration ID.
+     * @returns A Promise resolving to DeleteTaskPushNotificationConfigResponse.
+     */
+    deleteTaskPushNotificationConfig(params: DeleteTaskPushNotificationConfigParams): Promise<DeleteTaskPushNotificationConfigResponse>;
     /**
      * Retrieves a task by its ID.
      * @param params Parameters containing the taskId and optional historyLength.
@@ -93,6 +105,15 @@ declare class A2AClient {
      * @returns A Promise resolving to CancelTaskResponse, which contains the updated Task object or an error.
      */
     cancelTask(params: TaskIdParams): Promise<CancelTaskResponse>;
+    /**
+     * @template TExtensionParams The type of parameters for the custom extension method.
+     * @template TExtensionResponse The type of response expected from the custom extension method.
+     * This should extend JSONRPCResponse. This ensures the extension response is still a valid A2A response.
+     * @param method Custom JSON-RPC method defined in the AgentCard's extensions.
+     * @param params Extension paramters defined in the AgentCard's extensions.
+     * @returns A Promise that resolves to the RPC response.
+     */
+    callExtensionMethod<TExtensionParams, TExtensionResponse extends JSONRPCResponse>(method: string, params: TExtensionParams): Promise<TExtensionResponse>;
     /**
      * Resubscribes to a task's event stream using Server-Sent Events (SSE).
      * This is used if a previous SSE connection for an active task was broken.

package/dist/client/index.js

@@ -218,6 +218,28 @@ var A2AClient = class _A2AClient {
       params
     );
   }
+  /**
+   * Lists the push notification configurations for a given task.
+   * @param params Parameters containing the taskId.
+   * @returns A Promise resolving to ListTaskPushNotificationConfigResponse.
+   */
+  async listTaskPushNotificationConfig(params) {
+    return this._postRpcRequest(
+      "tasks/pushNotificationConfig/list",
+      params
+    );
+  }
+  /**
+   * Deletes the push notification configuration for a given task.
+   * @param params Parameters containing the taskId and push notification configuration ID.
+   * @returns A Promise resolving to DeleteTaskPushNotificationConfigResponse.
+   */
+  async deleteTaskPushNotificationConfig(params) {
+    return this._postRpcRequest(
+      "tasks/pushNotificationConfig/delete",
+      params
+    );
+  }
   /**
    * Retrieves a task by its ID.
    * @param params Parameters containing the taskId and optional historyLength.
@@ -234,6 +256,17 @@ var A2AClient = class _A2AClient {
   async cancelTask(params) {
     return this._postRpcRequest("tasks/cancel", params);
   }
+  /**
+   * @template TExtensionParams The type of parameters for the custom extension method.
+   * @template TExtensionResponse The type of response expected from the custom extension method. 
+   * This should extend JSONRPCResponse. This ensures the extension response is still a valid A2A response.
+   * @param method Custom JSON-RPC method defined in the AgentCard's extensions.
+   * @param params Extension paramters defined in the AgentCard's extensions.
+   * @returns A Promise that resolves to the RPC response.
+   */
+  async callExtensionMethod(method, params) {
+    return this._postRpcRequest(method, params);
+  }
   /**
    * Resubscribes to a task's event stream using Server-Sent Events (SSE).
    * This is used if a previous SSE connection for an active task was broken.

package/dist/server/express/index.cjs

@@ -138,10 +138,8 @@ var JsonRpcTransportHandler = class {
       } else {
         throw A2AError.parseError("Invalid request body type.");
       }
-      if (rpcRequest.jsonrpc !== "2.0" || !rpcRequest.method || typeof rpcRequest.method !== "string") {
-        throw A2AError.invalidRequest(
-          "Invalid JSON-RPC request structure."
-        );
+      if (!this.isRequestValid(rpcRequest)) {
+        throw A2AError.invalidRequest("Invalid JSON-RPC Request.");
       }
     } catch (error) {
       const a2aError = error instanceof A2AError ? error : A2AError.parseError(error.message || "Failed to parse JSON request.");
@@ -161,8 +159,8 @@ var JsonRpcTransportHandler = class {
           result
         };
       }
-      if (!rpcRequest.params) {
-        throw A2AError.invalidParams(`'params' is required for '${method}'`);
+      if (!this.paramsAreValid(rpcRequest.params)) {
+        throw A2AError.invalidParams(`Invalid method parameters.`);
       }
       if (method === "message/stream" || method === "tasks/resubscribe") {
         const params = rpcRequest.params;
@@ -237,6 +235,37 @@ var JsonRpcTransportHandler = class {
       };
     }
   }
+  // Validates the basic structure of a JSON-RPC request
+  isRequestValid(rpcRequest) {
+    if (rpcRequest.jsonrpc !== "2.0") {
+      return false;
+    }
+    if ("id" in rpcRequest) {
+      const id = rpcRequest.id;
+      const isString = typeof id === "string";
+      const isInteger = typeof id === "number" && Number.isInteger(id);
+      const isNull = id === null;
+      if (!isString && !isInteger && !isNull) {
+        return false;
+      }
+    }
+    if (!rpcRequest.method || typeof rpcRequest.method !== "string") {
+      return false;
+    }
+    return true;
+  }
+  // Validates that params is an object with non-empty string keys
+  paramsAreValid(params) {
+    if (typeof params !== "object" || params === null || Array.isArray(params)) {
+      return false;
+    }
+    for (const key of Object.keys(params)) {
+      if (key === "") {
+        return false;
+      }
+    }
+    return true;
+  }
 };
 
 // src/constants.ts
@@ -256,12 +285,24 @@ var A2AExpressApp = class {
    * @param app Optional existing Express app.
    * @param baseUrl The base URL for A2A endpoints (e.g., "/a2a/api").
    * @param middlewares Optional array of Express middlewares to apply to the A2A routes.
-   * @param agentCardPath Optional custom path for the agent card endpoint (defaults to /.well-known/agent-card.json).
+   * @param agentCardPath Optional custom path for the agent card endpoint (defaults to .well-known/agent-card.json).
    * @returns The Express app with A2A routes.
    */
   setupRoutes(app, baseUrl = "", middlewares, agentCardPath = AGENT_CARD_PATH) {
     const router = import_express.default.Router();
     router.use(import_express.default.json(), ...middlewares ?? []);
+    router.use((err, req, res, next) => {
+      if (err instanceof SyntaxError && "body" in err) {
+        const a2aError = A2AError.parseError("Invalid JSON payload.");
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: null,
+          error: a2aError.toJSONRPCError()
+        };
+        return res.status(400).json(errorResponse);
+      }
+      next(err);
+    });
     router.get(`/${agentCardPath}`, async (req, res) => {
       try {
         const agentCard = await this.requestHandler.getAgentCard();

package/dist/server/express/index.d.cts

@@ -11,7 +11,7 @@ declare class A2AExpressApp {
      * @param app Optional existing Express app.
      * @param baseUrl The base URL for A2A endpoints (e.g., "/a2a/api").
      * @param middlewares Optional array of Express middlewares to apply to the A2A routes.
-     * @param agentCardPath Optional custom path for the agent card endpoint (defaults to /.well-known/agent-card.json).
+     * @param agentCardPath Optional custom path for the agent card endpoint (defaults to .well-known/agent-card.json).
      * @returns The Express app with A2A routes.
      */
     setupRoutes(app: Express, baseUrl?: string, middlewares?: Array<RequestHandler | ErrorRequestHandler>, agentCardPath?: string): Express;

package/dist/server/express/index.d.ts

@@ -11,7 +11,7 @@ declare class A2AExpressApp {
      * @param app Optional existing Express app.
      * @param baseUrl The base URL for A2A endpoints (e.g., "/a2a/api").
      * @param middlewares Optional array of Express middlewares to apply to the A2A routes.
-     * @param agentCardPath Optional custom path for the agent card endpoint (defaults to /.well-known/agent-card.json).
+     * @param agentCardPath Optional custom path for the agent card endpoint (defaults to .well-known/agent-card.json).
      * @returns The Express app with A2A routes.
      */
     setupRoutes(app: Express, baseUrl?: string, middlewares?: Array<RequestHandler | ErrorRequestHandler>, agentCardPath?: string): Express;

package/dist/server/express/index.js

@@ -4,7 +4,7 @@ import {
 import {
   A2AError,
   JsonRpcTransportHandler
-} from "../../chunk-JA52GYRU.js";
+} from "../../chunk-SY3G7ITG.js";
 
 // src/server/express/a2a_express_app.ts
 import express from "express";
@@ -21,12 +21,24 @@ var A2AExpressApp = class {
    * @param app Optional existing Express app.
    * @param baseUrl The base URL for A2A endpoints (e.g., "/a2a/api").
    * @param middlewares Optional array of Express middlewares to apply to the A2A routes.
-   * @param agentCardPath Optional custom path for the agent card endpoint (defaults to /.well-known/agent-card.json).
+   * @param agentCardPath Optional custom path for the agent card endpoint (defaults to .well-known/agent-card.json).
    * @returns The Express app with A2A routes.
    */
   setupRoutes(app, baseUrl = "", middlewares, agentCardPath = AGENT_CARD_PATH) {
     const router = express.Router();
     router.use(express.json(), ...middlewares ?? []);
+    router.use((err, req, res, next) => {
+      if (err instanceof SyntaxError && "body" in err) {
+        const a2aError = A2AError.parseError("Invalid JSON payload.");
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: null,
+          error: a2aError.toJSONRPCError()
+        };
+        return res.status(400).json(errorResponse);
+      }
+      next(err);
+    });
     router.get(`/${agentCardPath}`, async (req, res) => {
       try {
         const agentCard = await this.requestHandler.getAgentCard();