@adcp/sdk 13.0.4 → 13.1.1

package/dist/lib/net/agent-transport-fetch.mjs

@@ -2,14 +2,16 @@ import { lookup as dnsLookup } from "node:dns/promises";
 import { isIP } from "node:net";
 import { Agent, fetch as undiciFetch } from "undici";
 import { isAlwaysBlocked, isLikelyPrivateUrl, isPrivateIp } from "./address-guards.mjs";
+import { isCredentialHeaderName } from "./credential-headers.mjs";
 const REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
-const SENSITIVE_REDIRECT_HEADERS = ["authorization", "cookie", "proxy-authorization", "x-adcp-auth"];
 function createAgentTransportFetch(agentUrl, options = {}) {
   const lookup = options.lookup ?? ((hostname) => dnsLookup(hostname, { all: true }));
   const maxRedirects = options.maxRedirects ?? 5;
   const initialUrl = new URL(agentUrl);
   const allowPrivateEverywhere = options.allowPrivateIp === true || process.env.ADCP_ALLOW_INTERNAL_PROBES === "1" || process.env.ADCP_ALLOW_PRIVATE_AGENT_URL === "1";
   const allowPrivateInitialOrigin = isLikelyPrivateUrl(initialUrl.toString());
+  const originBoundHeaders = new Set((options.originBoundHeaders ?? []).map((name) => name.toLowerCase()));
+  const crossOriginCredentialPolicy = options.crossOriginCredentialPolicy ?? "strip";
   const dispatchers = /* @__PURE__ */ new Map();
   const dispatcherFor = (url) => {
     const cached = dispatchers.get(url.origin);
@@ -32,8 +34,40 @@ function createAgentTransportFetch(agentUrl, options = {}) {
     let headers = new Headers(request?.headers);
     new Headers(init?.headers).forEach((value, key) => headers.set(key, value));
     const redirectMode = init?.redirect ?? request?.redirect ?? "follow";
+    const stripOriginBoundHeaders = (target) => {
+      if (target.origin === initialUrl.origin) return;
+      const stripped = [];
+      for (const name of originBoundHeaders) {
+        if (headers.has(name)) {
+          headers.delete(name);
+          stripped.push(name);
+        }
+      }
+      if (stripped.length > 0) options.onOriginBoundHeadersStripped?.(stripped, target);
+    };
+    const credentialHeaderNames = () => {
+      const names = [];
+      headers.forEach((_value, name) => {
+        if (isCredentialHeaderName(name)) names.push(name.toLowerCase());
+      });
+      return [...new Set(names)].sort();
+    };
+    const handleCredentialedCrossOrigin = (target, operation) => {
+      if (target.origin === initialUrl.origin) return;
+      const names = credentialHeaderNames();
+      if (names.length === 0) return;
+      if (crossOriginCredentialPolicy === "strip") {
+        for (const name of names) headers.delete(name);
+        return;
+      }
+      throw new TypeError(
+        `Agent transport refused credentialed cross-origin ${operation} to ${target.origin}; credential headers: ${names.join(", ")}`
+      );
+    };
     for (let redirects = 0; ; redirects++) {
       assertTransportScheme(url);
+      stripOriginBoundHeaders(url);
+      handleCredentialedCrossOrigin(url, "dispatch");
       const headerRecord = {};
       headers.forEach((value, key) => {
         headerRecord[key] = value;
@@ -64,7 +98,8 @@ function createAgentTransportFetch(agentUrl, options = {}) {
       const next = new URL(response.headers.get("location"), url);
       await response.body?.cancel();
       if (next.origin !== url.origin) {
-        for (const header of SENSITIVE_REDIRECT_HEADERS) headers.delete(header);
+        stripOriginBoundHeaders(next);
+        handleCredentialedCrossOrigin(next, "redirect");
       }
       if (response.status === 303 || (response.status === 301 || response.status === 302) && method === "POST") {
         method = "GET";

package/dist/lib/net/agent-transport-fetch.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/net/agent-transport-fetch.ts"],"sourcesContent":["/**\n * DNS-resolving, connection-pinning fetch for MCP and A2A transports.\n *\n * A fetch instance is created alongside a cached protocol client. Each origin\n * is resolved once, every returned address is classified, and an undici Agent\n * pins subsequent connects to the validated address. Redirects are either\n * returned to callers that requested `manual`, or followed hop-by-hop through\n * the same validation path.\n */\nimport { lookup as dnsLookup } from 'node:dns/promises';\nimport { isIP } from 'node:net';\nimport { Agent, fetch as undiciFetch } from 'undici';\nimport { isAlwaysBlocked, isLikelyPrivateUrl, isPrivateIp } from './address-guards';\n\ntype ResolvedAddress = { address: string; family: number };\n\nexport interface AgentTransportFetchOptions {\n  /** A caller-owned fetch is trusted to provide its own connect-time pinning. */\n  trustedFetchFn?: typeof fetch;\n  /** @internal Deterministic network seam; production callers should omit. */\n  networkFetch?: (url: URL, init: RequestInit, dispatcher: Agent) => Promise<Response>;\n  /** Permit private DNS answers for this client. Prefer this to process-global flags. */\n  allowPrivateIp?: boolean;\n  /** Test seam for deterministic DNS answers. */\n  lookup?: (hostname: string) => Promise<ResolvedAddress[]>;\n  maxRedirects?: number;\n}\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);\nconst SENSITIVE_REDIRECT_HEADERS = ['authorization', 'cookie', 'proxy-authorization', 'x-adcp-auth'];\n\nexport function createAgentTransportFetch(agentUrl: string, options: AgentTransportFetchOptions = {}): typeof fetch {\n  const lookup = options.lookup ?? (hostname => dnsLookup(hostname, { all: true }));\n  const maxRedirects = options.maxRedirects ?? 5;\n  const initialUrl = new URL(agentUrl);\n  const allowPrivateEverywhere =\n    options.allowPrivateIp === true ||\n    process.env.ADCP_ALLOW_INTERNAL_PROBES === '1' ||\n    process.env.ADCP_ALLOW_PRIVATE_AGENT_URL === '1';\n  const allowPrivateInitialOrigin = isLikelyPrivateUrl(initialUrl.toString());\n  const dispatchers = new Map<string, Promise<Agent>>();\n\n  const dispatcherFor = (url: URL): Promise<Agent> => {\n    const cached = dispatchers.get(url.origin);\n    if (cached) return cached;\n    const allowPrivateIp = allowPrivateEverywhere || (allowPrivateInitialOrigin && url.origin === initialUrl.origin);\n    const pending = resolveAndCreateDispatcher(url, lookup, allowPrivateIp);\n    dispatchers.set(url.origin, pending);\n    pending.catch(() => dispatchers.delete(url.origin));\n    return pending;\n  };\n\n  return (async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {\n    const request = typeof Request !== 'undefined' && input instanceof Request ? input : undefined;\n    let url = new URL(request?.url ?? input.toString());\n    let method = (init?.method ?? request?.method ?? 'GET').toUpperCase();\n    let body = init?.body;\n    if (body === undefined && request?.body && method !== 'GET' && method !== 'HEAD') {\n      body = new Uint8Array(await request.clone().arrayBuffer());\n    }\n    const signal = init?.signal ?? request?.signal;\n    let headers = new Headers(request?.headers);\n    new Headers(init?.headers).forEach((value, key) => headers.set(key, value));\n    const redirectMode = init?.redirect ?? request?.redirect ?? 'follow';\n\n    for (let redirects = 0; ; redirects++) {\n      assertTransportScheme(url);\n      const headerRecord: Record<string, string> = {};\n      headers.forEach((value, key) => {\n        headerRecord[key] = value;\n      });\n      const requestInit = { ...init, method, body, headers, signal, redirect: 'manual' as const };\n      let response: Response;\n      if (options.trustedFetchFn) {\n        // Explicit trust means the caller owns connect-time DNS pinning. Do\n        // not pre-resolve here: hardened proxies and virtual test transports\n        // may intentionally use names the host resolver cannot resolve.\n        response = await options.trustedFetchFn(url, requestInit);\n      } else {\n        const dispatcher = await dispatcherFor(url);\n        response = options.networkFetch\n          ? await options.networkFetch(url, { ...requestInit, headers: headerRecord }, dispatcher)\n          : ((await undiciFetch(url, {\n              ...requestInit,\n              body: body as any,\n              headers: headerRecord,\n              dispatcher,\n            })) as unknown as Response);\n      }\n\n      if (!REDIRECT_STATUSES.has(response.status) || !response.headers.get('location')) return response;\n      if (redirectMode === 'manual') return response;\n      if (redirectMode === 'error') {\n        await response.body?.cancel();\n        throw new TypeError('Redirect encountered while redirect mode is error');\n      }\n      if (redirects >= maxRedirects) {\n        await response.body?.cancel();\n        throw new TypeError(`Agent transport exceeded ${maxRedirects} redirects`);\n      }\n\n      const next = new URL(response.headers.get('location')!, url);\n      await response.body?.cancel();\n      if (next.origin !== url.origin) {\n        for (const header of SENSITIVE_REDIRECT_HEADERS) headers.delete(header);\n      }\n      if (response.status === 303 || ((response.status === 301 || response.status === 302) && method === 'POST')) {\n        method = 'GET';\n        body = undefined;\n        headers.delete('content-length');\n        headers.delete('content-type');\n      }\n      url = next;\n    }\n  }) as typeof fetch;\n}\n\nasync function resolveAndCreateDispatcher(\n  url: URL,\n  lookup: (hostname: string) => Promise<ResolvedAddress[]>,\n  allowPrivateIp: boolean\n): Promise<Agent> {\n  const hostname = url.hostname.replace(/^\\[|\\]$/g, '');\n  const addresses = await lookup(hostname);\n  if (addresses.length === 0) throw new Error(`DNS returned no addresses for agent host ${hostname}`);\n  for (const entry of addresses) {\n    if (isAlwaysBlocked(entry.address)) {\n      throw new Error(`Agent host ${hostname} resolves to an always-blocked address`);\n    }\n    if (!allowPrivateIp && isPrivateIp(entry.address)) {\n      throw new Error(\n        `Agent host ${hostname} resolves to a private or loopback address; ` +\n          'set transport.allowPrivateIp=true for an explicitly trusted private agent, or provide a trustedFetchFn that enforces its own address policy'\n      );\n    }\n  }\n\n  const pinned = addresses[0]!;\n  const family = pinned.family === 6 ? 6 : 4;\n  return new Agent({\n    connect: {\n      rejectUnauthorized: true,\n      ...(url.protocol === 'https:' && isIP(hostname) === 0 ? { servername: hostname } : {}),\n      lookup: (_hostname, lookupOptions, callback) => {\n        if (lookupOptions?.all) callback(null, [{ address: pinned.address, family }]);\n        else callback(null, pinned.address, family);\n      },\n    },\n  });\n}\n\nfunction assertTransportScheme(url: URL): void {\n  if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n    throw new TypeError(`Agent transport does not allow ${url.protocol} URLs`);\n  }\n}\n"],"mappings":"AASA,SAAS,UAAU,iBAAiB;AACpC,SAAS,YAAY;AACrB,SAAS,OAAO,SAAS,mBAAmB;AAC5C,SAAS,iBAAiB,oBAAoB,mBAAmB;AAgBjE,MAAM,oBAAoB,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAC3D,MAAM,6BAA6B,CAAC,iBAAiB,UAAU,uBAAuB,aAAa;AAE5F,SAAS,0BAA0B,UAAkB,UAAsC,CAAC,GAAiB;AAClH,QAAM,SAAS,QAAQ,WAAW,cAAY,UAAU,UAAU,EAAE,KAAK,KAAK,CAAC;AAC/E,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,aAAa,IAAI,IAAI,QAAQ;AACnC,QAAM,yBACJ,QAAQ,mBAAmB,QAC3B,QAAQ,IAAI,+BAA+B,OAC3C,QAAQ,IAAI,iCAAiC;AAC/C,QAAM,4BAA4B,mBAAmB,WAAW,SAAS,CAAC;AAC1E,QAAM,cAAc,oBAAI,IAA4B;AAEpD,QAAM,gBAAgB,CAAC,QAA6B;AAClD,UAAM,SAAS,YAAY,IAAI,IAAI,MAAM;AACzC,QAAI,OAAQ,QAAO;AACnB,UAAM,iBAAiB,0BAA2B,6BAA6B,IAAI,WAAW,WAAW;AACzG,UAAM,UAAU,2BAA2B,KAAK,QAAQ,cAAc;AACtE,gBAAY,IAAI,IAAI,QAAQ,OAAO;AACnC,YAAQ,MAAM,MAAM,YAAY,OAAO,IAAI,MAAM,CAAC;AAClD,WAAO;AAAA,EACT;AAEA,UAAQ,OAAO,OAA0B,SAA0C;AACjF,UAAM,UAAU,OAAO,YAAY,eAAe,iBAAiB,UAAU,QAAQ;AACrF,QAAI,MAAM,IAAI,IAAI,SAAS,OAAO,MAAM,SAAS,CAAC;AAClD,QAAI,UAAU,MAAM,UAAU,SAAS,UAAU,OAAO,YAAY;AACpE,QAAI,OAAO,MAAM;AACjB,QAAI,SAAS,UAAa,SAAS,QAAQ,WAAW,SAAS,WAAW,QAAQ;AAChF,aAAO,IAAI,WAAW,MAAM,QAAQ,MAAM,EAAE,YAAY,CAAC;AAAA,IAC3D;AACA,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,QAAI,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC1C,QAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAC1E,UAAM,eAAe,MAAM,YAAY,SAAS,YAAY;AAE5D,aAAS,YAAY,KAAK,aAAa;AACrC,4BAAsB,GAAG;AACzB,YAAM,eAAuC,CAAC;AAC9C,cAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,qBAAa,GAAG,IAAI;AAAA,MACtB,CAAC;AACD,YAAM,cAAc,EAAE,GAAG,MAAM,QAAQ,MAAM,SAAS,QAAQ,UAAU,SAAkB;AAC1F,UAAI;AACJ,UAAI,QAAQ,gBAAgB;AAI1B,mBAAW,MAAM,QAAQ,eAAe,KAAK,WAAW;AAAA,MAC1D,OAAO;AACL,cAAM,aAAa,MAAM,cAAc,GAAG;AAC1C,mBAAW,QAAQ,eACf,MAAM,QAAQ,aAAa,KAAK,EAAE,GAAG,aAAa,SAAS,aAAa,GAAG,UAAU,IACnF,MAAM,YAAY,KAAK;AAAA,UACvB,GAAG;AAAA,UACH;AAAA,UACA,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACP;AAEA,UAAI,CAAC,kBAAkB,IAAI,SAAS,MAAM,KAAK,CAAC,SAAS,QAAQ,IAAI,UAAU,EAAG,QAAO;AACzF,UAAI,iBAAiB,SAAU,QAAO;AACtC,UAAI,iBAAiB,SAAS;AAC5B,cAAM,SAAS,MAAM,OAAO;AAC5B,cAAM,IAAI,UAAU,mDAAmD;AAAA,MACzE;AACA,UAAI,aAAa,cAAc;AAC7B,cAAM,SAAS,MAAM,OAAO;AAC5B,cAAM,IAAI,UAAU,4BAA4B,YAAY,YAAY;AAAA,MAC1E;AAEA,YAAM,OAAO,IAAI,IAAI,SAAS,QAAQ,IAAI,UAAU,GAAI,GAAG;AAC3D,YAAM,SAAS,MAAM,OAAO;AAC5B,UAAI,KAAK,WAAW,IAAI,QAAQ;AAC9B,mBAAW,UAAU,2BAA4B,SAAQ,OAAO,MAAM;AAAA,MACxE;AACA,UAAI,SAAS,WAAW,QAAS,SAAS,WAAW,OAAO,SAAS,WAAW,QAAQ,WAAW,QAAS;AAC1G,iBAAS;AACT,eAAO;AACP,gBAAQ,OAAO,gBAAgB;AAC/B,gBAAQ,OAAO,cAAc;AAAA,MAC/B;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,QACA,gBACgB;AAChB,QAAM,WAAW,IAAI,SAAS,QAAQ,YAAY,EAAE;AACpD,QAAM,YAAY,MAAM,OAAO,QAAQ;AACvC,MAAI,UAAU,WAAW,EAAG,OAAM,IAAI,MAAM,4CAA4C,QAAQ,EAAE;AAClG,aAAW,SAAS,WAAW;AAC7B,QAAI,gBAAgB,MAAM,OAAO,GAAG;AAClC,YAAM,IAAI,MAAM,cAAc,QAAQ,wCAAwC;AAAA,IAChF;AACA,QAAI,CAAC,kBAAkB,YAAY,MAAM,OAAO,GAAG;AACjD,YAAM,IAAI;AAAA,QACR,cAAc,QAAQ;AAAA,MAExB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,CAAC;AAC1B,QAAM,SAAS,OAAO,WAAW,IAAI,IAAI;AACzC,SAAO,IAAI,MAAM;AAAA,IACf,SAAS;AAAA,MACP,oBAAoB;AAAA,MACpB,GAAI,IAAI,aAAa,YAAY,KAAK,QAAQ,MAAM,IAAI,EAAE,YAAY,SAAS,IAAI,CAAC;AAAA,MACpF,QAAQ,CAAC,WAAW,eAAe,aAAa;AAC9C,YAAI,eAAe,IAAK,UAAS,MAAM,CAAC,EAAE,SAAS,OAAO,SAAS,OAAO,CAAC,CAAC;AAAA,YACvE,UAAS,MAAM,OAAO,SAAS,MAAM;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAgB;AAC7C,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,UAAM,IAAI,UAAU,kCAAkC,IAAI,QAAQ,OAAO;AAAA,EAC3E;AACF;","names":[]}
+{"version":3,"sources":["../../../src/lib/net/agent-transport-fetch.ts"],"sourcesContent":["/**\n * DNS-resolving, connection-pinning fetch for MCP and A2A transports.\n *\n * A fetch instance is created alongside a cached protocol client. Each origin\n * is resolved once, every returned address is classified, and an undici Agent\n * pins subsequent connects to the validated address. Redirects are either\n * returned to callers that requested `manual`, or followed hop-by-hop through\n * the same validation path.\n */\nimport { lookup as dnsLookup } from 'node:dns/promises';\nimport { isIP } from 'node:net';\nimport { Agent, fetch as undiciFetch } from 'undici';\nimport { isAlwaysBlocked, isLikelyPrivateUrl, isPrivateIp } from './address-guards';\nimport { isCredentialHeaderName } from './credential-headers';\n\ntype ResolvedAddress = { address: string; family: number };\n\nexport interface AgentTransportFetchOptions {\n  /** A caller-owned fetch is trusted to provide its own connect-time pinning. */\n  trustedFetchFn?: typeof fetch;\n  /** @internal Deterministic network seam; production callers should omit. */\n  networkFetch?: (url: URL, init: RequestInit, dispatcher: Agent) => Promise<Response>;\n  /** Permit private DNS answers for this client. Prefer this to process-global flags. */\n  allowPrivateIp?: boolean;\n  /** Test seam for deterministic DNS answers. */\n  lookup?: (hostname: string) => Promise<ResolvedAddress[]>;\n  maxRedirects?: number;\n  /**\n   * Caller-configured headers that are trusted only at the configured agent\n   * origin. Unlike the credential-name denylist, this binds arbitrary names\n   * (for example X-Session) without classifying their contents.\n   */\n  originBoundHeaders?: readonly string[];\n  /** Called after origin-bound headers are removed, without exposing values. */\n  onOriginBoundHeadersStripped?: (headerNames: readonly string[], target: URL) => void;\n  /**\n   * Cross-origin handling for credential-shaped headers added by protocol\n   * clients. Strict native A2A refuses; stable legacy A2A and MCP strip and\n   * continue so redirects/endpoints remain compatible without leaking them.\n   * @default 'strip'\n   */\n  crossOriginCredentialPolicy?: 'refuse' | 'strip';\n}\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);\n\nexport function createAgentTransportFetch(agentUrl: string, options: AgentTransportFetchOptions = {}): typeof fetch {\n  const lookup = options.lookup ?? (hostname => dnsLookup(hostname, { all: true }));\n  const maxRedirects = options.maxRedirects ?? 5;\n  const initialUrl = new URL(agentUrl);\n  const allowPrivateEverywhere =\n    options.allowPrivateIp === true ||\n    process.env.ADCP_ALLOW_INTERNAL_PROBES === '1' ||\n    process.env.ADCP_ALLOW_PRIVATE_AGENT_URL === '1';\n  const allowPrivateInitialOrigin = isLikelyPrivateUrl(initialUrl.toString());\n  const originBoundHeaders = new Set((options.originBoundHeaders ?? []).map(name => name.toLowerCase()));\n  // Preserve the stable public helper's compatibility behavior: credentials\n  // are origin-bound and removed on cross-origin dispatch. Security-sensitive\n  // native A2A call sites opt into `refuse` explicitly.\n  const crossOriginCredentialPolicy = options.crossOriginCredentialPolicy ?? 'strip';\n  const dispatchers = new Map<string, Promise<Agent>>();\n\n  const dispatcherFor = (url: URL): Promise<Agent> => {\n    const cached = dispatchers.get(url.origin);\n    if (cached) return cached;\n    const allowPrivateIp = allowPrivateEverywhere || (allowPrivateInitialOrigin && url.origin === initialUrl.origin);\n    const pending = resolveAndCreateDispatcher(url, lookup, allowPrivateIp);\n    dispatchers.set(url.origin, pending);\n    pending.catch(() => dispatchers.delete(url.origin));\n    return pending;\n  };\n\n  return (async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {\n    const request = typeof Request !== 'undefined' && input instanceof Request ? input : undefined;\n    let url = new URL(request?.url ?? input.toString());\n    let method = (init?.method ?? request?.method ?? 'GET').toUpperCase();\n    let body = init?.body;\n    if (body === undefined && request?.body && method !== 'GET' && method !== 'HEAD') {\n      body = new Uint8Array(await request.clone().arrayBuffer());\n    }\n    const signal = init?.signal ?? request?.signal;\n    let headers = new Headers(request?.headers);\n    new Headers(init?.headers).forEach((value, key) => headers.set(key, value));\n    const redirectMode = init?.redirect ?? request?.redirect ?? 'follow';\n\n    const stripOriginBoundHeaders = (target: URL): void => {\n      if (target.origin === initialUrl.origin) return;\n      const stripped: string[] = [];\n      for (const name of originBoundHeaders) {\n        if (headers.has(name)) {\n          headers.delete(name);\n          stripped.push(name);\n        }\n      }\n      if (stripped.length > 0) options.onOriginBoundHeadersStripped?.(stripped, target);\n    };\n\n    const credentialHeaderNames = (): string[] => {\n      const names: string[] = [];\n      headers.forEach((_value, name) => {\n        if (isCredentialHeaderName(name)) names.push(name.toLowerCase());\n      });\n      return [...new Set(names)].sort();\n    };\n\n    const handleCredentialedCrossOrigin = (target: URL, operation: 'dispatch' | 'redirect'): void => {\n      if (target.origin === initialUrl.origin) return;\n      const names = credentialHeaderNames();\n      if (names.length === 0) return;\n      if (crossOriginCredentialPolicy === 'strip') {\n        for (const name of names) headers.delete(name);\n        return;\n      }\n      throw new TypeError(\n        `Agent transport refused credentialed cross-origin ${operation} to ${target.origin}; ` +\n          `credential headers: ${names.join(', ')}`\n      );\n    };\n\n    for (let redirects = 0; ; redirects++) {\n      assertTransportScheme(url);\n      stripOriginBoundHeaders(url);\n      handleCredentialedCrossOrigin(url, 'dispatch');\n      const headerRecord: Record<string, string> = {};\n      headers.forEach((value, key) => {\n        headerRecord[key] = value;\n      });\n      const requestInit = { ...init, method, body, headers, signal, redirect: 'manual' as const };\n      let response: Response;\n      if (options.trustedFetchFn) {\n        // Explicit trust means the caller owns connect-time DNS pinning. Do\n        // not pre-resolve here: hardened proxies and virtual test transports\n        // may intentionally use names the host resolver cannot resolve.\n        response = await options.trustedFetchFn(url, requestInit);\n      } else {\n        const dispatcher = await dispatcherFor(url);\n        response = options.networkFetch\n          ? await options.networkFetch(url, { ...requestInit, headers: headerRecord }, dispatcher)\n          : ((await undiciFetch(url, {\n              ...requestInit,\n              body: body as any,\n              headers: headerRecord,\n              dispatcher,\n            })) as unknown as Response);\n      }\n\n      if (!REDIRECT_STATUSES.has(response.status) || !response.headers.get('location')) return response;\n      if (redirectMode === 'manual') return response;\n      if (redirectMode === 'error') {\n        await response.body?.cancel();\n        throw new TypeError('Redirect encountered while redirect mode is error');\n      }\n      if (redirects >= maxRedirects) {\n        await response.body?.cancel();\n        throw new TypeError(`Agent transport exceeded ${maxRedirects} redirects`);\n      }\n\n      const next = new URL(response.headers.get('location')!, url);\n      await response.body?.cancel();\n      if (next.origin !== url.origin) {\n        // Configured user headers are origin-bound regardless of their name.\n        // Remove them before the generic credential check so an X-Session-like\n        // header is stripped while SDK/auth/signature headers still fail closed.\n        stripOriginBoundHeaders(next);\n        handleCredentialedCrossOrigin(next, 'redirect');\n      }\n      if (response.status === 303 || ((response.status === 301 || response.status === 302) && method === 'POST')) {\n        method = 'GET';\n        body = undefined;\n        headers.delete('content-length');\n        headers.delete('content-type');\n      }\n      url = next;\n    }\n  }) as typeof fetch;\n}\n\nasync function resolveAndCreateDispatcher(\n  url: URL,\n  lookup: (hostname: string) => Promise<ResolvedAddress[]>,\n  allowPrivateIp: boolean\n): Promise<Agent> {\n  const hostname = url.hostname.replace(/^\\[|\\]$/g, '');\n  const addresses = await lookup(hostname);\n  if (addresses.length === 0) throw new Error(`DNS returned no addresses for agent host ${hostname}`);\n  for (const entry of addresses) {\n    if (isAlwaysBlocked(entry.address)) {\n      throw new Error(`Agent host ${hostname} resolves to an always-blocked address`);\n    }\n    if (!allowPrivateIp && isPrivateIp(entry.address)) {\n      throw new Error(\n        `Agent host ${hostname} resolves to a private or loopback address; ` +\n          'set transport.allowPrivateIp=true for an explicitly trusted private agent, or provide a trustedFetchFn that enforces its own address policy'\n      );\n    }\n  }\n\n  const pinned = addresses[0]!;\n  const family = pinned.family === 6 ? 6 : 4;\n  return new Agent({\n    connect: {\n      rejectUnauthorized: true,\n      ...(url.protocol === 'https:' && isIP(hostname) === 0 ? { servername: hostname } : {}),\n      lookup: (_hostname, lookupOptions, callback) => {\n        if (lookupOptions?.all) callback(null, [{ address: pinned.address, family }]);\n        else callback(null, pinned.address, family);\n      },\n    },\n  });\n}\n\nfunction assertTransportScheme(url: URL): void {\n  if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n    throw new TypeError(`Agent transport does not allow ${url.protocol} URLs`);\n  }\n}\n"],"mappings":"AASA,SAAS,UAAU,iBAAiB;AACpC,SAAS,YAAY;AACrB,SAAS,OAAO,SAAS,mBAAmB;AAC5C,SAAS,iBAAiB,oBAAoB,mBAAmB;AACjE,SAAS,8BAA8B;AA+BvC,MAAM,oBAAoB,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAEpD,SAAS,0BAA0B,UAAkB,UAAsC,CAAC,GAAiB;AAClH,QAAM,SAAS,QAAQ,WAAW,cAAY,UAAU,UAAU,EAAE,KAAK,KAAK,CAAC;AAC/E,QAAM,eAAe,QAAQ,gBAAgB;AAC7C,QAAM,aAAa,IAAI,IAAI,QAAQ;AACnC,QAAM,yBACJ,QAAQ,mBAAmB,QAC3B,QAAQ,IAAI,+BAA+B,OAC3C,QAAQ,IAAI,iCAAiC;AAC/C,QAAM,4BAA4B,mBAAmB,WAAW,SAAS,CAAC;AAC1E,QAAM,qBAAqB,IAAI,KAAK,QAAQ,sBAAsB,CAAC,GAAG,IAAI,UAAQ,KAAK,YAAY,CAAC,CAAC;AAIrG,QAAM,8BAA8B,QAAQ,+BAA+B;AAC3E,QAAM,cAAc,oBAAI,IAA4B;AAEpD,QAAM,gBAAgB,CAAC,QAA6B;AAClD,UAAM,SAAS,YAAY,IAAI,IAAI,MAAM;AACzC,QAAI,OAAQ,QAAO;AACnB,UAAM,iBAAiB,0BAA2B,6BAA6B,IAAI,WAAW,WAAW;AACzG,UAAM,UAAU,2BAA2B,KAAK,QAAQ,cAAc;AACtE,gBAAY,IAAI,IAAI,QAAQ,OAAO;AACnC,YAAQ,MAAM,MAAM,YAAY,OAAO,IAAI,MAAM,CAAC;AAClD,WAAO;AAAA,EACT;AAEA,UAAQ,OAAO,OAA0B,SAA0C;AACjF,UAAM,UAAU,OAAO,YAAY,eAAe,iBAAiB,UAAU,QAAQ;AACrF,QAAI,MAAM,IAAI,IAAI,SAAS,OAAO,MAAM,SAAS,CAAC;AAClD,QAAI,UAAU,MAAM,UAAU,SAAS,UAAU,OAAO,YAAY;AACpE,QAAI,OAAO,MAAM;AACjB,QAAI,SAAS,UAAa,SAAS,QAAQ,WAAW,SAAS,WAAW,QAAQ;AAChF,aAAO,IAAI,WAAW,MAAM,QAAQ,MAAM,EAAE,YAAY,CAAC;AAAA,IAC3D;AACA,UAAM,SAAS,MAAM,UAAU,SAAS;AACxC,QAAI,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC1C,QAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAC1E,UAAM,eAAe,MAAM,YAAY,SAAS,YAAY;AAE5D,UAAM,0BAA0B,CAAC,WAAsB;AACrD,UAAI,OAAO,WAAW,WAAW,OAAQ;AACzC,YAAM,WAAqB,CAAC;AAC5B,iBAAW,QAAQ,oBAAoB;AACrC,YAAI,QAAQ,IAAI,IAAI,GAAG;AACrB,kBAAQ,OAAO,IAAI;AACnB,mBAAS,KAAK,IAAI;AAAA,QACpB;AAAA,MACF;AACA,UAAI,SAAS,SAAS,EAAG,SAAQ,+BAA+B,UAAU,MAAM;AAAA,IAClF;AAEA,UAAM,wBAAwB,MAAgB;AAC5C,YAAM,QAAkB,CAAC;AACzB,cAAQ,QAAQ,CAAC,QAAQ,SAAS;AAChC,YAAI,uBAAuB,IAAI,EAAG,OAAM,KAAK,KAAK,YAAY,CAAC;AAAA,MACjE,CAAC;AACD,aAAO,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK;AAAA,IAClC;AAEA,UAAM,gCAAgC,CAAC,QAAa,cAA6C;AAC/F,UAAI,OAAO,WAAW,WAAW,OAAQ;AACzC,YAAM,QAAQ,sBAAsB;AACpC,UAAI,MAAM,WAAW,EAAG;AACxB,UAAI,gCAAgC,SAAS;AAC3C,mBAAW,QAAQ,MAAO,SAAQ,OAAO,IAAI;AAC7C;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,qDAAqD,SAAS,OAAO,OAAO,MAAM,yBACzD,MAAM,KAAK,IAAI,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,aAAS,YAAY,KAAK,aAAa;AACrC,4BAAsB,GAAG;AACzB,8BAAwB,GAAG;AAC3B,oCAA8B,KAAK,UAAU;AAC7C,YAAM,eAAuC,CAAC;AAC9C,cAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC9B,qBAAa,GAAG,IAAI;AAAA,MACtB,CAAC;AACD,YAAM,cAAc,EAAE,GAAG,MAAM,QAAQ,MAAM,SAAS,QAAQ,UAAU,SAAkB;AAC1F,UAAI;AACJ,UAAI,QAAQ,gBAAgB;AAI1B,mBAAW,MAAM,QAAQ,eAAe,KAAK,WAAW;AAAA,MAC1D,OAAO;AACL,cAAM,aAAa,MAAM,cAAc,GAAG;AAC1C,mBAAW,QAAQ,eACf,MAAM,QAAQ,aAAa,KAAK,EAAE,GAAG,aAAa,SAAS,aAAa,GAAG,UAAU,IACnF,MAAM,YAAY,KAAK;AAAA,UACvB,GAAG;AAAA,UACH;AAAA,UACA,SAAS;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACP;AAEA,UAAI,CAAC,kBAAkB,IAAI,SAAS,MAAM,KAAK,CAAC,SAAS,QAAQ,IAAI,UAAU,EAAG,QAAO;AACzF,UAAI,iBAAiB,SAAU,QAAO;AACtC,UAAI,iBAAiB,SAAS;AAC5B,cAAM,SAAS,MAAM,OAAO;AAC5B,cAAM,IAAI,UAAU,mDAAmD;AAAA,MACzE;AACA,UAAI,aAAa,cAAc;AAC7B,cAAM,SAAS,MAAM,OAAO;AAC5B,cAAM,IAAI,UAAU,4BAA4B,YAAY,YAAY;AAAA,MAC1E;AAEA,YAAM,OAAO,IAAI,IAAI,SAAS,QAAQ,IAAI,UAAU,GAAI,GAAG;AAC3D,YAAM,SAAS,MAAM,OAAO;AAC5B,UAAI,KAAK,WAAW,IAAI,QAAQ;AAI9B,gCAAwB,IAAI;AAC5B,sCAA8B,MAAM,UAAU;AAAA,MAChD;AACA,UAAI,SAAS,WAAW,QAAS,SAAS,WAAW,OAAO,SAAS,WAAW,QAAQ,WAAW,QAAS;AAC1G,iBAAS;AACT,eAAO;AACP,gBAAQ,OAAO,gBAAgB;AAC/B,gBAAQ,OAAO,cAAc;AAAA,MAC/B;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,eAAe,2BACb,KACA,QACA,gBACgB;AAChB,QAAM,WAAW,IAAI,SAAS,QAAQ,YAAY,EAAE;AACpD,QAAM,YAAY,MAAM,OAAO,QAAQ;AACvC,MAAI,UAAU,WAAW,EAAG,OAAM,IAAI,MAAM,4CAA4C,QAAQ,EAAE;AAClG,aAAW,SAAS,WAAW;AAC7B,QAAI,gBAAgB,MAAM,OAAO,GAAG;AAClC,YAAM,IAAI,MAAM,cAAc,QAAQ,wCAAwC;AAAA,IAChF;AACA,QAAI,CAAC,kBAAkB,YAAY,MAAM,OAAO,GAAG;AACjD,YAAM,IAAI;AAAA,QACR,cAAc,QAAQ;AAAA,MAExB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,CAAC;AAC1B,QAAM,SAAS,OAAO,WAAW,IAAI,IAAI;AACzC,SAAO,IAAI,MAAM;AAAA,IACf,SAAS;AAAA,MACP,oBAAoB;AAAA,MACpB,GAAI,IAAI,aAAa,YAAY,KAAK,QAAQ,MAAM,IAAI,EAAE,YAAY,SAAS,IAAI,CAAC;AAAA,MACpF,QAAQ,CAAC,WAAW,eAAe,aAAa;AAC9C,YAAI,eAAe,IAAK,UAAS,MAAM,CAAC,EAAE,SAAS,OAAO,SAAS,OAAO,CAAC,CAAC;AAAA,YACvE,UAAS,MAAM,OAAO,SAAS,MAAM;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAgB;AAC7C,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,UAAM,IAAI,UAAU,kCAAkC,IAAI,QAAQ,OAAO;AAAA,EAC3E;AACF;","names":[]}

package/dist/lib/net/credential-headers.d.mts

@@ -0,0 +1 @@
+export {};

package/dist/lib/net/credential-headers.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=credential-headers.d.ts.map

package/dist/lib/net/credential-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-headers.d.ts","sourceRoot":"","sources":["../../../src/lib/net/credential-headers.ts"],"names":[],"mappings":""}

package/dist/lib/net/credential-headers.js

@@ -0,0 +1,34 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var credential_headers_exports = {};
+__export(credential_headers_exports, {
+  isCredentialHeaderName: () => isCredentialHeaderName
+});
+module.exports = __toCommonJS(credential_headers_exports);
+const CREDENTIAL_HEADER_NAMES = /* @__PURE__ */ new Set(["authorization", "proxy-authorization", "cookie", "x-adcp-auth", "x-api-key"]);
+const CREDENTIAL_HEADER_RE = /(^|[-_])(auth(?:entication|orization)?|credentials?|secrets?|tokens?|keys?|api[-_]?keys?|access[-_]?keys?|private[-_]?keys?|password|passwd|signatures?|cert(?:ificate)?s?)([-_]|$)/i;
+function isCredentialHeaderName(name) {
+  const normalized = name.toLowerCase();
+  return CREDENTIAL_HEADER_NAMES.has(normalized) || CREDENTIAL_HEADER_RE.test(normalized);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  isCredentialHeaderName
+});
+//# sourceMappingURL=credential-headers.js.map

package/dist/lib/net/credential-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/net/credential-headers.ts"],"sourcesContent":["const CREDENTIAL_HEADER_NAMES = new Set(['authorization', 'proxy-authorization', 'cookie', 'x-adcp-auth', 'x-api-key']);\n\nconst CREDENTIAL_HEADER_RE =\n  /(^|[-_])(auth(?:entication|orization)?|credentials?|secrets?|tokens?|keys?|api[-_]?keys?|access[-_]?keys?|private[-_]?keys?|password|passwd|signatures?|cert(?:ificate)?s?)([-_]|$)/i;\n\n/** @internal Shared transport credential-header classifier for origin isolation. */\nexport function isCredentialHeaderName(name: string): boolean {\n  const normalized = name.toLowerCase();\n  return CREDENTIAL_HEADER_NAMES.has(normalized) || CREDENTIAL_HEADER_RE.test(normalized);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAM,0BAA0B,oBAAI,IAAI,CAAC,iBAAiB,uBAAuB,UAAU,eAAe,WAAW,CAAC;AAEtH,MAAM,uBACJ;AAGK,SAAS,uBAAuB,MAAuB;AAC5D,QAAM,aAAa,KAAK,YAAY;AACpC,SAAO,wBAAwB,IAAI,UAAU,KAAK,qBAAqB,KAAK,UAAU;AACxF;","names":[]}

package/dist/lib/net/credential-headers.mjs

@@ -0,0 +1,10 @@
+const CREDENTIAL_HEADER_NAMES = /* @__PURE__ */ new Set(["authorization", "proxy-authorization", "cookie", "x-adcp-auth", "x-api-key"]);
+const CREDENTIAL_HEADER_RE = /(^|[-_])(auth(?:entication|orization)?|credentials?|secrets?|tokens?|keys?|api[-_]?keys?|access[-_]?keys?|private[-_]?keys?|password|passwd|signatures?|cert(?:ificate)?s?)([-_]|$)/i;
+function isCredentialHeaderName(name) {
+  const normalized = name.toLowerCase();
+  return CREDENTIAL_HEADER_NAMES.has(normalized) || CREDENTIAL_HEADER_RE.test(normalized);
+}
+export {
+  isCredentialHeaderName
+};
+//# sourceMappingURL=credential-headers.mjs.map

package/dist/lib/net/credential-headers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/net/credential-headers.ts"],"sourcesContent":["const CREDENTIAL_HEADER_NAMES = new Set(['authorization', 'proxy-authorization', 'cookie', 'x-adcp-auth', 'x-api-key']);\n\nconst CREDENTIAL_HEADER_RE =\n  /(^|[-_])(auth(?:entication|orization)?|credentials?|secrets?|tokens?|keys?|api[-_]?keys?|access[-_]?keys?|private[-_]?keys?|password|passwd|signatures?|cert(?:ificate)?s?)([-_]|$)/i;\n\n/** @internal Shared transport credential-header classifier for origin isolation. */\nexport function isCredentialHeaderName(name: string): boolean {\n  const normalized = name.toLowerCase();\n  return CREDENTIAL_HEADER_NAMES.has(normalized) || CREDENTIAL_HEADER_RE.test(normalized);\n}\n"],"mappings":"AAAA,MAAM,0BAA0B,oBAAI,IAAI,CAAC,iBAAiB,uBAAuB,UAAU,eAAe,WAAW,CAAC;AAEtH,MAAM,uBACJ;AAGK,SAAS,uBAAuB,MAAuB;AAC5D,QAAM,aAAa,KAAK,YAAY;AACpC,SAAO,wBAAwB,IAAI,UAAU,KAAK,qBAAqB,KAAK,UAAU;AACxF;","names":[]}

package/dist/lib/protocols/a2a-native-v1.d.mts

@@ -0,0 +1,18 @@
+import { type Client } from '@a2a-js/sdk-v1/client';
+import { type CancelTaskRequest } from '@a2a-js/sdk-v1';
+import type { PushNotificationConfig } from '../types/tools.generated.mjs';
+export declare function createNativeA2AClientFromCardUrl(cardUrl: string, fetchImpl: typeof fetch): Promise<Client>;
+export declare function callNativeA2ATool(options: {
+    cardUrls: readonly string[];
+    fetchImpl: typeof fetch;
+    toolName: string;
+    parameters: Record<string, unknown>;
+    pushNotificationConfig?: PushNotificationConfig;
+    contextId?: string;
+    taskId?: string;
+    signal?: AbortSignal;
+}): Promise<unknown>;
+export declare function createNativeCancelTaskRequest(id: string): CancelTaskRequest;
+export declare function normalizeNativeA2AResult(result: any): {
+    result: unknown;
+};

package/dist/lib/protocols/a2a-native-v1.d.ts

@@ -0,0 +1,19 @@
+import { type Client } from '@a2a-js/sdk-v1/client';
+import { type CancelTaskRequest } from '@a2a-js/sdk-v1';
+import type { PushNotificationConfig } from '../types/tools.generated';
+export declare function createNativeA2AClientFromCardUrl(cardUrl: string, fetchImpl: typeof fetch): Promise<Client>;
+export declare function callNativeA2ATool(options: {
+    cardUrls: readonly string[];
+    fetchImpl: typeof fetch;
+    toolName: string;
+    parameters: Record<string, unknown>;
+    pushNotificationConfig?: PushNotificationConfig;
+    contextId?: string;
+    taskId?: string;
+    signal?: AbortSignal;
+}): Promise<unknown>;
+export declare function createNativeCancelTaskRequest(id: string): CancelTaskRequest;
+export declare function normalizeNativeA2AResult(result: any): {
+    result: unknown;
+};
+//# sourceMappingURL=a2a-native-v1.d.ts.map

package/dist/lib/protocols/a2a-native-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-native-v1.d.ts","sourceRoot":"","sources":["../../../src/lib/protocols/a2a-native-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,MAAM,EACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAmB,KAAK,iBAAiB,EAA2B,MAAM,gBAAgB,CAAC;AAClG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAOvE,wBAAsB,gCAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhH;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,OAAO,CAAC,CA0DnB;AAgDD,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,CAE3E;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,GAAG,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAiDzE"}

package/dist/lib/protocols/a2a-native-v1.js

@@ -0,0 +1,183 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var a2a_native_v1_exports = {};
+__export(a2a_native_v1_exports, {
+  callNativeA2ATool: () => callNativeA2ATool,
+  createNativeA2AClientFromCardUrl: () => createNativeA2AClientFromCardUrl,
+  createNativeCancelTaskRequest: () => createNativeCancelTaskRequest,
+  normalizeNativeA2AResult: () => normalizeNativeA2AResult
+});
+module.exports = __toCommonJS(a2a_native_v1_exports);
+var import_client = require("@a2a-js/sdk-v1/client");
+var import_sdk_v1 = require("@a2a-js/sdk-v1");
+var import_a2a_push_notification = require('./a2a-push-notification.js');
+var import_abort = require('./abort.js');
+const ADCP_A2A_EXTENSION = "https://adcontextprotocol.org/extensions/adcp/v3";
+const NATIVE_ONLY = Object.freeze({ enabled: false });
+async function createNativeA2AClientFromCardUrl(cardUrl, fetchImpl) {
+  const factory = new import_client.ClientFactory({
+    transports: [new import_client.JsonRpcTransportFactory({ fetchImpl, legacyCompat: NATIVE_ONLY })],
+    cardResolver: new import_client.DefaultAgentCardResolver({ fetchImpl, legacyCompat: NATIVE_ONLY })
+  });
+  return factory.createFromUrl(cardUrl, "");
+}
+async function callNativeA2ATool(options) {
+  let client;
+  let lastError;
+  for (const cardUrl of options.cardUrls) {
+    try {
+      client = await createNativeA2AClientFromCardUrl(cardUrl, options.fetchImpl);
+      break;
+    } catch (error) {
+      if ((0, import_abort.isAbortOrTimeoutError)(error)) throw error;
+      lastError = error;
+    }
+  }
+  if (!client) {
+    throw new Error(
+      "A2A agent card discovery failed. Native conformance uses the official A2A 1.0 client; for a maintained A2A 0.3 server use transport.legacyCompat.enabled=true (CLI: --a2a-legacy-compat).",
+      { cause: lastError }
+    );
+  }
+  const request = {
+    tenant: "",
+    message: {
+      messageId: `msg_${Date.now()}_${Math.random().toString(36).slice(2, 11)}`,
+      role: import_sdk_v1.Role.ROLE_USER,
+      parts: [
+        {
+          content: { $case: "data", value: { skill: options.toolName, input: options.parameters } },
+          metadata: void 0,
+          filename: "",
+          mediaType: "application/json"
+        }
+      ],
+      contextId: options.contextId ?? "",
+      taskId: options.taskId ?? "",
+      metadata: void 0,
+      extensions: [ADCP_A2A_EXTENSION],
+      referenceTaskIds: []
+    },
+    configuration: options.pushNotificationConfig ? {
+      acceptedOutputModes: ["application/json"],
+      taskPushNotificationConfig: (0, import_a2a_push_notification.toA2ATaskPushNotificationConfig)(options.pushNotificationConfig),
+      returnImmediately: false
+    } : void 0,
+    metadata: void 0
+  };
+  const result = await client.sendMessage(request, {
+    serviceParameters: import_client.ServiceParameters.create((0, import_client.withA2AExtensions)(ADCP_A2A_EXTENSION)),
+    signal: options.signal
+  });
+  return normalizeNativeA2AResult(result);
+}
+function normalizePart(part) {
+  switch (part?.content?.$case) {
+    case "data":
+      return { kind: "data", data: part.content.value, metadata: part.metadata };
+    case "text":
+      return { kind: "text", text: part.content.value, metadata: part.metadata };
+    case "url":
+      return {
+        kind: "file",
+        file: { uri: part.content.value, name: part.filename, mimeType: part.mediaType },
+        metadata: part.metadata
+      };
+    case "raw":
+      return {
+        kind: "file",
+        file: { bytes: part.content.value, name: part.filename, mimeType: part.mediaType },
+        metadata: part.metadata
+      };
+    default:
+      return part;
+  }
+}
+function taskStateName(state) {
+  switch (state) {
+    case import_sdk_v1.TaskState.TASK_STATE_SUBMITTED:
+      return "submitted";
+    case import_sdk_v1.TaskState.TASK_STATE_WORKING:
+      return "working";
+    case import_sdk_v1.TaskState.TASK_STATE_COMPLETED:
+      return "completed";
+    case import_sdk_v1.TaskState.TASK_STATE_FAILED:
+      return "failed";
+    case import_sdk_v1.TaskState.TASK_STATE_CANCELED:
+      return "canceled";
+    case import_sdk_v1.TaskState.TASK_STATE_INPUT_REQUIRED:
+      return "input-required";
+    case import_sdk_v1.TaskState.TASK_STATE_REJECTED:
+      return "rejected";
+    case import_sdk_v1.TaskState.TASK_STATE_AUTH_REQUIRED:
+      return "auth-required";
+    default:
+      return void 0;
+  }
+}
+function createNativeCancelTaskRequest(id) {
+  return { tenant: "", id, metadata: void 0 };
+}
+function normalizeNativeA2AResult(result) {
+  if (result && typeof result === "object") {
+    const oneof = result.result ?? result;
+    const payload = oneof.task ?? oneof.message ?? (oneof.$case === "task" ? oneof.task : void 0);
+    if (payload !== void 0) return normalizeNativeA2AResult(payload);
+    if ("error" in result) return result;
+  }
+  if (result && typeof result === "object" && typeof result.messageId === "string") {
+    return {
+      result: {
+        ...result,
+        kind: "message",
+        parts: Array.isArray(result.parts) ? result.parts.map(normalizePart) : []
+      }
+    };
+  }
+  if (result && typeof result === "object" && ("status" in result || "artifacts" in result || "history" in result)) {
+    return {
+      result: {
+        ...result,
+        kind: "task",
+        status: result.status ? {
+          ...result.status,
+          state: taskStateName(result.status.state),
+          message: result.status.message ? {
+            ...result.status.message,
+            kind: "message",
+            parts: Array.isArray(result.status.message.parts) ? result.status.message.parts.map(normalizePart) : []
+          } : void 0
+        } : void 0,
+        artifacts: Array.isArray(result.artifacts) ? result.artifacts.map((artifact) => ({
+          ...artifact,
+          parts: artifact.parts?.map(normalizePart) ?? []
+        })) : []
+      }
+    };
+  }
+  return { result };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  callNativeA2ATool,
+  createNativeA2AClientFromCardUrl,
+  createNativeCancelTaskRequest,
+  normalizeNativeA2AResult
+});
+//# sourceMappingURL=a2a-native-v1.js.map

package/dist/lib/protocols/a2a-native-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/protocols/a2a-native-v1.ts"],"sourcesContent":["import {\n  ClientFactory,\n  DefaultAgentCardResolver,\n  JsonRpcTransportFactory,\n  ServiceParameters,\n  withA2AExtensions,\n  type Client,\n} from '@a2a-js/sdk-v1/client';\nimport { Role, TaskState, type CancelTaskRequest, type SendMessageRequest } from '@a2a-js/sdk-v1';\nimport type { PushNotificationConfig } from '../types/tools.generated';\nimport { toA2ATaskPushNotificationConfig } from './a2a-push-notification';\nimport { isAbortOrTimeoutError } from './abort';\n\nconst ADCP_A2A_EXTENSION = 'https://adcontextprotocol.org/extensions/adcp/v3';\nconst NATIVE_ONLY = Object.freeze({ enabled: false });\n\nexport async function createNativeA2AClientFromCardUrl(cardUrl: string, fetchImpl: typeof fetch): Promise<Client> {\n  const factory = new ClientFactory({\n    transports: [new JsonRpcTransportFactory({ fetchImpl, legacyCompat: NATIVE_ONLY })],\n    cardResolver: new DefaultAgentCardResolver({ fetchImpl, legacyCompat: NATIVE_ONLY }),\n  });\n  return factory.createFromUrl(cardUrl, '');\n}\n\nexport async function callNativeA2ATool(options: {\n  cardUrls: readonly string[];\n  fetchImpl: typeof fetch;\n  toolName: string;\n  parameters: Record<string, unknown>;\n  pushNotificationConfig?: PushNotificationConfig;\n  contextId?: string;\n  taskId?: string;\n  signal?: AbortSignal;\n}): Promise<unknown> {\n  let client: Client | undefined;\n  let lastError: unknown;\n  for (const cardUrl of options.cardUrls) {\n    try {\n      client = await createNativeA2AClientFromCardUrl(cardUrl, options.fetchImpl);\n      break;\n    } catch (error) {\n      // Cancellation and deadlines are terminal caller intent, not evidence\n      // that the card URL is incompatible. Preserve their identity and avoid\n      // probing fallback card paths after the request has already ended.\n      if (isAbortOrTimeoutError(error)) throw error;\n      lastError = error;\n    }\n  }\n  if (!client) {\n    throw new Error(\n      'A2A agent card discovery failed. Native conformance uses the official A2A 1.0 client; ' +\n        'for a maintained A2A 0.3 server use transport.legacyCompat.enabled=true ' +\n        '(CLI: --a2a-legacy-compat).',\n      { cause: lastError }\n    );\n  }\n\n  const request: SendMessageRequest = {\n    tenant: '',\n    message: {\n      messageId: `msg_${Date.now()}_${Math.random().toString(36).slice(2, 11)}`,\n      role: Role.ROLE_USER,\n      parts: [\n        {\n          content: { $case: 'data', value: { skill: options.toolName, input: options.parameters } },\n          metadata: undefined,\n          filename: '',\n          mediaType: 'application/json',\n        },\n      ],\n      contextId: options.contextId ?? '',\n      taskId: options.taskId ?? '',\n      metadata: undefined,\n      extensions: [ADCP_A2A_EXTENSION],\n      referenceTaskIds: [],\n    },\n    configuration: options.pushNotificationConfig\n      ? {\n          acceptedOutputModes: ['application/json'],\n          taskPushNotificationConfig: toA2ATaskPushNotificationConfig(options.pushNotificationConfig),\n          returnImmediately: false,\n        }\n      : undefined,\n    metadata: undefined,\n  };\n\n  const result = await client.sendMessage(request, {\n    serviceParameters: ServiceParameters.create(withA2AExtensions(ADCP_A2A_EXTENSION)),\n    signal: options.signal,\n  });\n  return normalizeNativeA2AResult(result);\n}\n\nfunction normalizePart(part: any): Record<string, unknown> {\n  switch (part?.content?.$case) {\n    case 'data':\n      return { kind: 'data', data: part.content.value, metadata: part.metadata };\n    case 'text':\n      return { kind: 'text', text: part.content.value, metadata: part.metadata };\n    case 'url':\n      return {\n        kind: 'file',\n        file: { uri: part.content.value, name: part.filename, mimeType: part.mediaType },\n        metadata: part.metadata,\n      };\n    case 'raw':\n      return {\n        kind: 'file',\n        file: { bytes: part.content.value, name: part.filename, mimeType: part.mediaType },\n        metadata: part.metadata,\n      };\n    default:\n      return part;\n  }\n}\n\nfunction taskStateName(state: TaskState | undefined): string | undefined {\n  switch (state) {\n    case TaskState.TASK_STATE_SUBMITTED:\n      return 'submitted';\n    case TaskState.TASK_STATE_WORKING:\n      return 'working';\n    case TaskState.TASK_STATE_COMPLETED:\n      return 'completed';\n    case TaskState.TASK_STATE_FAILED:\n      return 'failed';\n    case TaskState.TASK_STATE_CANCELED:\n      return 'canceled';\n    case TaskState.TASK_STATE_INPUT_REQUIRED:\n      return 'input-required';\n    case TaskState.TASK_STATE_REJECTED:\n      return 'rejected';\n    case TaskState.TASK_STATE_AUTH_REQUIRED:\n      return 'auth-required';\n    default:\n      return undefined;\n  }\n}\n\nexport function createNativeCancelTaskRequest(id: string): CancelTaskRequest {\n  return { tenant: '', id, metadata: undefined };\n}\n\nexport function normalizeNativeA2AResult(result: any): { result: unknown } {\n  if (result && typeof result === 'object') {\n    const oneof = result.result ?? result;\n    const payload = oneof.task ?? oneof.message ?? (oneof.$case === 'task' ? oneof.task : undefined);\n    if (payload !== undefined) return normalizeNativeA2AResult(payload);\n    if ('error' in result) return result;\n  }\n  // Message.contextId is always materialized by the 1.0 protobuf runtime,\n  // including as an empty string. Check the message-only identifier first so\n  // a Message is never mistaken for a Task merely because it has contextId.\n  if (result && typeof result === 'object' && typeof result.messageId === 'string') {\n    return {\n      result: {\n        ...result,\n        kind: 'message',\n        parts: Array.isArray(result.parts) ? result.parts.map(normalizePart) : [],\n      },\n    };\n  }\n  if (result && typeof result === 'object' && ('status' in result || 'artifacts' in result || 'history' in result)) {\n    return {\n      result: {\n        ...result,\n        kind: 'task',\n        status: result.status\n          ? {\n              ...result.status,\n              state: taskStateName(result.status.state),\n              message: result.status.message\n                ? {\n                    ...result.status.message,\n                    kind: 'message',\n                    parts: Array.isArray(result.status.message.parts)\n                      ? result.status.message.parts.map(normalizePart)\n                      : [],\n                  }\n                : undefined,\n            }\n          : undefined,\n        artifacts: Array.isArray(result.artifacts)\n          ? result.artifacts.map((artifact: any) => ({\n              ...artifact,\n              parts: artifact.parts?.map(normalizePart) ?? [],\n            }))\n          : [],\n      },\n    };\n  }\n  return { result };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAOO;AACP,oBAAiF;AAEjF,mCAAgD;AAChD,mBAAsC;AAEtC,MAAM,qBAAqB;AAC3B,MAAM,cAAc,OAAO,OAAO,EAAE,SAAS,MAAM,CAAC;AAEpD,eAAsB,iCAAiC,SAAiB,WAA0C;AAChH,QAAM,UAAU,IAAI,4BAAc;AAAA,IAChC,YAAY,CAAC,IAAI,sCAAwB,EAAE,WAAW,cAAc,YAAY,CAAC,CAAC;AAAA,IAClF,cAAc,IAAI,uCAAyB,EAAE,WAAW,cAAc,YAAY,CAAC;AAAA,EACrF,CAAC;AACD,SAAO,QAAQ,cAAc,SAAS,EAAE;AAC1C;AAEA,eAAsB,kBAAkB,SASnB;AACnB,MAAI;AACJ,MAAI;AACJ,aAAW,WAAW,QAAQ,UAAU;AACtC,QAAI;AACF,eAAS,MAAM,iCAAiC,SAAS,QAAQ,SAAS;AAC1E;AAAA,IACF,SAAS,OAAO;AAId,cAAI,oCAAsB,KAAK,EAAG,OAAM;AACxC,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,MAGA,EAAE,OAAO,UAAU;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,UAA8B;AAAA,IAClC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,WAAW,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,MACvE,MAAM,mBAAK;AAAA,MACX,OAAO;AAAA,QACL;AAAA,UACE,SAAS,EAAE,OAAO,QAAQ,OAAO,EAAE,OAAO,QAAQ,UAAU,OAAO,QAAQ,WAAW,EAAE;AAAA,UACxF,UAAU;AAAA,UACV,UAAU;AAAA,UACV,WAAW;AAAA,QACb;AAAA,MACF;AAAA,MACA,WAAW,QAAQ,aAAa;AAAA,MAChC,QAAQ,QAAQ,UAAU;AAAA,MAC1B,UAAU;AAAA,MACV,YAAY,CAAC,kBAAkB;AAAA,MAC/B,kBAAkB,CAAC;AAAA,IACrB;AAAA,IACA,eAAe,QAAQ,yBACnB;AAAA,MACE,qBAAqB,CAAC,kBAAkB;AAAA,MACxC,gCAA4B,8DAAgC,QAAQ,sBAAsB;AAAA,MAC1F,mBAAmB;AAAA,IACrB,IACA;AAAA,IACJ,UAAU;AAAA,EACZ;AAEA,QAAM,SAAS,MAAM,OAAO,YAAY,SAAS;AAAA,IAC/C,mBAAmB,gCAAkB,WAAO,iCAAkB,kBAAkB,CAAC;AAAA,IACjF,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,SAAO,yBAAyB,MAAM;AACxC;AAEA,SAAS,cAAc,MAAoC;AACzD,UAAQ,MAAM,SAAS,OAAO;AAAA,IAC5B,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,UAAU,KAAK,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,UAAU,KAAK,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,KAAK,UAAU;AAAA,QAC/E,UAAU,KAAK;AAAA,MACjB;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,EAAE,OAAO,KAAK,QAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,KAAK,UAAU;AAAA,QACjF,UAAU,KAAK;AAAA,MACjB;AAAA,IACF;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,cAAc,OAAkD;AACvE,UAAQ,OAAO;AAAA,IACb,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT,KAAK,wBAAU;AACb,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,8BAA8B,IAA+B;AAC3E,SAAO,EAAE,QAAQ,IAAI,IAAI,UAAU,OAAU;AAC/C;AAEO,SAAS,yBAAyB,QAAkC;AACzE,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,QAAQ,OAAO,UAAU;AAC/B,UAAM,UAAU,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,SAAS,MAAM,OAAO;AACtF,QAAI,YAAY,OAAW,QAAO,yBAAyB,OAAO;AAClE,QAAI,WAAW,OAAQ,QAAO;AAAA,EAChC;AAIA,MAAI,UAAU,OAAO,WAAW,YAAY,OAAO,OAAO,cAAc,UAAU;AAChF,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,GAAG;AAAA,QACH,MAAM;AAAA,QACN,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,IAAI,aAAa,IAAI,CAAC;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,OAAO,WAAW,aAAa,YAAY,UAAU,eAAe,UAAU,aAAa,SAAS;AAChH,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,GAAG;AAAA,QACH,MAAM;AAAA,QACN,QAAQ,OAAO,SACX;AAAA,UACE,GAAG,OAAO;AAAA,UACV,OAAO,cAAc,OAAO,OAAO,KAAK;AAAA,UACxC,SAAS,OAAO,OAAO,UACnB;AAAA,YACE,GAAG,OAAO,OAAO;AAAA,YACjB,MAAM;AAAA,YACN,OAAO,MAAM,QAAQ,OAAO,OAAO,QAAQ,KAAK,IAC5C,OAAO,OAAO,QAAQ,MAAM,IAAI,aAAa,IAC7C,CAAC;AAAA,UACP,IACA;AAAA,QACN,IACA;AAAA,QACJ,WAAW,MAAM,QAAQ,OAAO,SAAS,IACrC,OAAO,UAAU,IAAI,CAAC,cAAmB;AAAA,UACvC,GAAG;AAAA,UACH,OAAO,SAAS,OAAO,IAAI,aAAa,KAAK,CAAC;AAAA,QAChD,EAAE,IACF,CAAC;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,OAAO;AAClB;","names":[]}

package/dist/lib/protocols/a2a-native-v1.mjs

@@ -0,0 +1,167 @@
+import { fileURLToPath as __adcpFileURLToPath } from "node:url";
+import { dirname as __adcpDirname } from "node:path";
+import { createRequire as __adcpCreateRequire } from "node:module";
+const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
+const require2 = __adcpCreateRequire(import.meta.url);
+import {
+  ClientFactory,
+  DefaultAgentCardResolver,
+  JsonRpcTransportFactory,
+  ServiceParameters,
+  withA2AExtensions
+} from "@a2a-js/sdk-v1/client";
+import { Role, TaskState } from "@a2a-js/sdk-v1";
+import { toA2ATaskPushNotificationConfig } from "./a2a-push-notification.mjs";
+import { isAbortOrTimeoutError } from "./abort.mjs";
+const ADCP_A2A_EXTENSION = "https://adcontextprotocol.org/extensions/adcp/v3";
+const NATIVE_ONLY = Object.freeze({ enabled: false });
+async function createNativeA2AClientFromCardUrl(cardUrl, fetchImpl) {
+  const factory = new ClientFactory({
+    transports: [new JsonRpcTransportFactory({ fetchImpl, legacyCompat: NATIVE_ONLY })],
+    cardResolver: new DefaultAgentCardResolver({ fetchImpl, legacyCompat: NATIVE_ONLY })
+  });
+  return factory.createFromUrl(cardUrl, "");
+}
+async function callNativeA2ATool(options) {
+  let client;
+  let lastError;
+  for (const cardUrl of options.cardUrls) {
+    try {
+      client = await createNativeA2AClientFromCardUrl(cardUrl, options.fetchImpl);
+      break;
+    } catch (error) {
+      if (isAbortOrTimeoutError(error)) throw error;
+      lastError = error;
+    }
+  }
+  if (!client) {
+    throw new Error(
+      "A2A agent card discovery failed. Native conformance uses the official A2A 1.0 client; for a maintained A2A 0.3 server use transport.legacyCompat.enabled=true (CLI: --a2a-legacy-compat).",
+      { cause: lastError }
+    );
+  }
+  const request = {
+    tenant: "",
+    message: {
+      messageId: `msg_${Date.now()}_${Math.random().toString(36).slice(2, 11)}`,
+      role: Role.ROLE_USER,
+      parts: [
+        {
+          content: { $case: "data", value: { skill: options.toolName, input: options.parameters } },
+          metadata: void 0,
+          filename: "",
+          mediaType: "application/json"
+        }
+      ],
+      contextId: options.contextId ?? "",
+      taskId: options.taskId ?? "",
+      metadata: void 0,
+      extensions: [ADCP_A2A_EXTENSION],
+      referenceTaskIds: []
+    },
+    configuration: options.pushNotificationConfig ? {
+      acceptedOutputModes: ["application/json"],
+      taskPushNotificationConfig: toA2ATaskPushNotificationConfig(options.pushNotificationConfig),
+      returnImmediately: false
+    } : void 0,
+    metadata: void 0
+  };
+  const result = await client.sendMessage(request, {
+    serviceParameters: ServiceParameters.create(withA2AExtensions(ADCP_A2A_EXTENSION)),
+    signal: options.signal
+  });
+  return normalizeNativeA2AResult(result);
+}
+function normalizePart(part) {
+  switch (part?.content?.$case) {
+    case "data":
+      return { kind: "data", data: part.content.value, metadata: part.metadata };
+    case "text":
+      return { kind: "text", text: part.content.value, metadata: part.metadata };
+    case "url":
+      return {
+        kind: "file",
+        file: { uri: part.content.value, name: part.filename, mimeType: part.mediaType },
+        metadata: part.metadata
+      };
+    case "raw":
+      return {
+        kind: "file",
+        file: { bytes: part.content.value, name: part.filename, mimeType: part.mediaType },
+        metadata: part.metadata
+      };
+    default:
+      return part;
+  }
+}
+function taskStateName(state) {
+  switch (state) {
+    case TaskState.TASK_STATE_SUBMITTED:
+      return "submitted";
+    case TaskState.TASK_STATE_WORKING:
+      return "working";
+    case TaskState.TASK_STATE_COMPLETED:
+      return "completed";
+    case TaskState.TASK_STATE_FAILED:
+      return "failed";
+    case TaskState.TASK_STATE_CANCELED:
+      return "canceled";
+    case TaskState.TASK_STATE_INPUT_REQUIRED:
+      return "input-required";
+    case TaskState.TASK_STATE_REJECTED:
+      return "rejected";
+    case TaskState.TASK_STATE_AUTH_REQUIRED:
+      return "auth-required";
+    default:
+      return void 0;
+  }
+}
+function createNativeCancelTaskRequest(id) {
+  return { tenant: "", id, metadata: void 0 };
+}
+function normalizeNativeA2AResult(result) {
+  if (result && typeof result === "object") {
+    const oneof = result.result ?? result;
+    const payload = oneof.task ?? oneof.message ?? (oneof.$case === "task" ? oneof.task : void 0);
+    if (payload !== void 0) return normalizeNativeA2AResult(payload);
+    if ("error" in result) return result;
+  }
+  if (result && typeof result === "object" && typeof result.messageId === "string") {
+    return {
+      result: {
+        ...result,
+        kind: "message",
+        parts: Array.isArray(result.parts) ? result.parts.map(normalizePart) : []
+      }
+    };
+  }
+  if (result && typeof result === "object" && ("status" in result || "artifacts" in result || "history" in result)) {
+    return {
+      result: {
+        ...result,
+        kind: "task",
+        status: result.status ? {
+          ...result.status,
+          state: taskStateName(result.status.state),
+          message: result.status.message ? {
+            ...result.status.message,
+            kind: "message",
+            parts: Array.isArray(result.status.message.parts) ? result.status.message.parts.map(normalizePart) : []
+          } : void 0
+        } : void 0,
+        artifacts: Array.isArray(result.artifacts) ? result.artifacts.map((artifact) => ({
+          ...artifact,
+          parts: artifact.parts?.map(normalizePart) ?? []
+        })) : []
+      }
+    };
+  }
+  return { result };
+}
+export {
+  callNativeA2ATool,
+  createNativeA2AClientFromCardUrl,
+  createNativeCancelTaskRequest,
+  normalizeNativeA2AResult
+};
+//# sourceMappingURL=a2a-native-v1.mjs.map

package/dist/lib/protocols/a2a-native-v1.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/lib/protocols/a2a-native-v1.ts"],"sourcesContent":["import { fileURLToPath as __adcpFileURLToPath } from 'node:url';\nimport { dirname as __adcpDirname } from 'node:path';\nimport { createRequire as __adcpCreateRequire } from 'node:module';\nconst __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));\nconst require = __adcpCreateRequire(import.meta.url);\nimport {\n  ClientFactory,\n  DefaultAgentCardResolver,\n  JsonRpcTransportFactory,\n  ServiceParameters,\n  withA2AExtensions,\n  type Client,\n} from '@a2a-js/sdk-v1/client';\nimport { Role, TaskState, type CancelTaskRequest, type SendMessageRequest } from '@a2a-js/sdk-v1';\nimport type { PushNotificationConfig } from '../types/tools.generated';\nimport { toA2ATaskPushNotificationConfig } from './a2a-push-notification';\nimport { isAbortOrTimeoutError } from './abort';\n\nconst ADCP_A2A_EXTENSION = 'https://adcontextprotocol.org/extensions/adcp/v3';\nconst NATIVE_ONLY = Object.freeze({ enabled: false });\n\nexport async function createNativeA2AClientFromCardUrl(cardUrl: string, fetchImpl: typeof fetch): Promise<Client> {\n  const factory = new ClientFactory({\n    transports: [new JsonRpcTransportFactory({ fetchImpl, legacyCompat: NATIVE_ONLY })],\n    cardResolver: new DefaultAgentCardResolver({ fetchImpl, legacyCompat: NATIVE_ONLY }),\n  });\n  return factory.createFromUrl(cardUrl, '');\n}\n\nexport async function callNativeA2ATool(options: {\n  cardUrls: readonly string[];\n  fetchImpl: typeof fetch;\n  toolName: string;\n  parameters: Record<string, unknown>;\n  pushNotificationConfig?: PushNotificationConfig;\n  contextId?: string;\n  taskId?: string;\n  signal?: AbortSignal;\n}): Promise<unknown> {\n  let client: Client | undefined;\n  let lastError: unknown;\n  for (const cardUrl of options.cardUrls) {\n    try {\n      client = await createNativeA2AClientFromCardUrl(cardUrl, options.fetchImpl);\n      break;\n    } catch (error) {\n      // Cancellation and deadlines are terminal caller intent, not evidence\n      // that the card URL is incompatible. Preserve their identity and avoid\n      // probing fallback card paths after the request has already ended.\n      if (isAbortOrTimeoutError(error)) throw error;\n      lastError = error;\n    }\n  }\n  if (!client) {\n    throw new Error(\n      'A2A agent card discovery failed. Native conformance uses the official A2A 1.0 client; ' +\n        'for a maintained A2A 0.3 server use transport.legacyCompat.enabled=true ' +\n        '(CLI: --a2a-legacy-compat).',\n      { cause: lastError }\n    );\n  }\n\n  const request: SendMessageRequest = {\n    tenant: '',\n    message: {\n      messageId: `msg_${Date.now()}_${Math.random().toString(36).slice(2, 11)}`,\n      role: Role.ROLE_USER,\n      parts: [\n        {\n          content: { $case: 'data', value: { skill: options.toolName, input: options.parameters } },\n          metadata: undefined,\n          filename: '',\n          mediaType: 'application/json',\n        },\n      ],\n      contextId: options.contextId ?? '',\n      taskId: options.taskId ?? '',\n      metadata: undefined,\n      extensions: [ADCP_A2A_EXTENSION],\n      referenceTaskIds: [],\n    },\n    configuration: options.pushNotificationConfig\n      ? {\n          acceptedOutputModes: ['application/json'],\n          taskPushNotificationConfig: toA2ATaskPushNotificationConfig(options.pushNotificationConfig),\n          returnImmediately: false,\n        }\n      : undefined,\n    metadata: undefined,\n  };\n\n  const result = await client.sendMessage(request, {\n    serviceParameters: ServiceParameters.create(withA2AExtensions(ADCP_A2A_EXTENSION)),\n    signal: options.signal,\n  });\n  return normalizeNativeA2AResult(result);\n}\n\nfunction normalizePart(part: any): Record<string, unknown> {\n  switch (part?.content?.$case) {\n    case 'data':\n      return { kind: 'data', data: part.content.value, metadata: part.metadata };\n    case 'text':\n      return { kind: 'text', text: part.content.value, metadata: part.metadata };\n    case 'url':\n      return {\n        kind: 'file',\n        file: { uri: part.content.value, name: part.filename, mimeType: part.mediaType },\n        metadata: part.metadata,\n      };\n    case 'raw':\n      return {\n        kind: 'file',\n        file: { bytes: part.content.value, name: part.filename, mimeType: part.mediaType },\n        metadata: part.metadata,\n      };\n    default:\n      return part;\n  }\n}\n\nfunction taskStateName(state: TaskState | undefined): string | undefined {\n  switch (state) {\n    case TaskState.TASK_STATE_SUBMITTED:\n      return 'submitted';\n    case TaskState.TASK_STATE_WORKING:\n      return 'working';\n    case TaskState.TASK_STATE_COMPLETED:\n      return 'completed';\n    case TaskState.TASK_STATE_FAILED:\n      return 'failed';\n    case TaskState.TASK_STATE_CANCELED:\n      return 'canceled';\n    case TaskState.TASK_STATE_INPUT_REQUIRED:\n      return 'input-required';\n    case TaskState.TASK_STATE_REJECTED:\n      return 'rejected';\n    case TaskState.TASK_STATE_AUTH_REQUIRED:\n      return 'auth-required';\n    default:\n      return undefined;\n  }\n}\n\nexport function createNativeCancelTaskRequest(id: string): CancelTaskRequest {\n  return { tenant: '', id, metadata: undefined };\n}\n\nexport function normalizeNativeA2AResult(result: any): { result: unknown } {\n  if (result && typeof result === 'object') {\n    const oneof = result.result ?? result;\n    const payload = oneof.task ?? oneof.message ?? (oneof.$case === 'task' ? oneof.task : undefined);\n    if (payload !== undefined) return normalizeNativeA2AResult(payload);\n    if ('error' in result) return result;\n  }\n  // Message.contextId is always materialized by the 1.0 protobuf runtime,\n  // including as an empty string. Check the message-only identifier first so\n  // a Message is never mistaken for a Task merely because it has contextId.\n  if (result && typeof result === 'object' && typeof result.messageId === 'string') {\n    return {\n      result: {\n        ...result,\n        kind: 'message',\n        parts: Array.isArray(result.parts) ? result.parts.map(normalizePart) : [],\n      },\n    };\n  }\n  if (result && typeof result === 'object' && ('status' in result || 'artifacts' in result || 'history' in result)) {\n    return {\n      result: {\n        ...result,\n        kind: 'task',\n        status: result.status\n          ? {\n              ...result.status,\n              state: taskStateName(result.status.state),\n              message: result.status.message\n                ? {\n                    ...result.status.message,\n                    kind: 'message',\n                    parts: Array.isArray(result.status.message.parts)\n                      ? result.status.message.parts.map(normalizePart)\n                      : [],\n                  }\n                : undefined,\n            }\n          : undefined,\n        artifacts: Array.isArray(result.artifacts)\n          ? result.artifacts.map((artifact: any) => ({\n              ...artifact,\n              parts: artifact.parts?.map(normalizePart) ?? [],\n            }))\n          : [],\n      },\n    };\n  }\n  return { result };\n}\n"],"mappings":"AAAA,SAAS,iBAAiB,2BAA2B;AACrD,SAAS,WAAW,qBAAqB;AACzC,SAAS,iBAAiB,2BAA2B;AACrD,MAAM,YAAY,cAAc,oBAAoB,YAAY,GAAG,CAAC;AACpE,MAAMA,WAAU,oBAAoB,YAAY,GAAG;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,MAAM,iBAAkE;AAEjF,SAAS,uCAAuC;AAChD,SAAS,6BAA6B;AAEtC,MAAM,qBAAqB;AAC3B,MAAM,cAAc,OAAO,OAAO,EAAE,SAAS,MAAM,CAAC;AAEpD,eAAsB,iCAAiC,SAAiB,WAA0C;AAChH,QAAM,UAAU,IAAI,cAAc;AAAA,IAChC,YAAY,CAAC,IAAI,wBAAwB,EAAE,WAAW,cAAc,YAAY,CAAC,CAAC;AAAA,IAClF,cAAc,IAAI,yBAAyB,EAAE,WAAW,cAAc,YAAY,CAAC;AAAA,EACrF,CAAC;AACD,SAAO,QAAQ,cAAc,SAAS,EAAE;AAC1C;AAEA,eAAsB,kBAAkB,SASnB;AACnB,MAAI;AACJ,MAAI;AACJ,aAAW,WAAW,QAAQ,UAAU;AACtC,QAAI;AACF,eAAS,MAAM,iCAAiC,SAAS,QAAQ,SAAS;AAC1E;AAAA,IACF,SAAS,OAAO;AAId,UAAI,sBAAsB,KAAK,EAAG,OAAM;AACxC,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,MAGA,EAAE,OAAO,UAAU;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,UAA8B;AAAA,IAClC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,WAAW,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,MACvE,MAAM,KAAK;AAAA,MACX,OAAO;AAAA,QACL;AAAA,UACE,SAAS,EAAE,OAAO,QAAQ,OAAO,EAAE,OAAO,QAAQ,UAAU,OAAO,QAAQ,WAAW,EAAE;AAAA,UACxF,UAAU;AAAA,UACV,UAAU;AAAA,UACV,WAAW;AAAA,QACb;AAAA,MACF;AAAA,MACA,WAAW,QAAQ,aAAa;AAAA,MAChC,QAAQ,QAAQ,UAAU;AAAA,MAC1B,UAAU;AAAA,MACV,YAAY,CAAC,kBAAkB;AAAA,MAC/B,kBAAkB,CAAC;AAAA,IACrB;AAAA,IACA,eAAe,QAAQ,yBACnB;AAAA,MACE,qBAAqB,CAAC,kBAAkB;AAAA,MACxC,4BAA4B,gCAAgC,QAAQ,sBAAsB;AAAA,MAC1F,mBAAmB;AAAA,IACrB,IACA;AAAA,IACJ,UAAU;AAAA,EACZ;AAEA,QAAM,SAAS,MAAM,OAAO,YAAY,SAAS;AAAA,IAC/C,mBAAmB,kBAAkB,OAAO,kBAAkB,kBAAkB,CAAC;AAAA,IACjF,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,SAAO,yBAAyB,MAAM;AACxC;AAEA,SAAS,cAAc,MAAoC;AACzD,UAAQ,MAAM,SAAS,OAAO;AAAA,IAC5B,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,UAAU,KAAK,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,UAAU,KAAK,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,EAAE,KAAK,KAAK,QAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,KAAK,UAAU;AAAA,QAC/E,UAAU,KAAK;AAAA,MACjB;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,EAAE,OAAO,KAAK,QAAQ,OAAO,MAAM,KAAK,UAAU,UAAU,KAAK,UAAU;AAAA,QACjF,UAAU,KAAK;AAAA,MACjB;AAAA,IACF;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,cAAc,OAAkD;AACvE,UAAQ,OAAO;AAAA,IACb,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT,KAAK,UAAU;AACb,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,8BAA8B,IAA+B;AAC3E,SAAO,EAAE,QAAQ,IAAI,IAAI,UAAU,OAAU;AAC/C;AAEO,SAAS,yBAAyB,QAAkC;AACzE,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,UAAM,QAAQ,OAAO,UAAU;AAC/B,UAAM,UAAU,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,SAAS,MAAM,OAAO;AACtF,QAAI,YAAY,OAAW,QAAO,yBAAyB,OAAO;AAClE,QAAI,WAAW,OAAQ,QAAO;AAAA,EAChC;AAIA,MAAI,UAAU,OAAO,WAAW,YAAY,OAAO,OAAO,cAAc,UAAU;AAChF,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,GAAG;AAAA,QACH,MAAM;AAAA,QACN,OAAO,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,IAAI,aAAa,IAAI,CAAC;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,OAAO,WAAW,aAAa,YAAY,UAAU,eAAe,UAAU,aAAa,SAAS;AAChH,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,GAAG;AAAA,QACH,MAAM;AAAA,QACN,QAAQ,OAAO,SACX;AAAA,UACE,GAAG,OAAO;AAAA,UACV,OAAO,cAAc,OAAO,OAAO,KAAK;AAAA,UACxC,SAAS,OAAO,OAAO,UACnB;AAAA,YACE,GAAG,OAAO,OAAO;AAAA,YACjB,MAAM;AAAA,YACN,OAAO,MAAM,QAAQ,OAAO,OAAO,QAAQ,KAAK,IAC5C,OAAO,OAAO,QAAQ,MAAM,IAAI,aAAa,IAC7C,CAAC;AAAA,UACP,IACA;AAAA,QACN,IACA;AAAA,QACJ,WAAW,MAAM,QAAQ,OAAO,SAAS,IACrC,OAAO,UAAU,IAAI,CAAC,cAAmB;AAAA,UACvC,GAAG;AAAA,UACH,OAAO,SAAS,OAAO,IAAI,aAAa,KAAK,CAAC;AAAA,QAChD,EAAE,IACF,CAAC;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,OAAO;AAClB;","names":["require"]}