@aeolus-fleet/gateway 0.29.2 → 0.30.0

package/README.md

@@ -21,6 +21,9 @@ DATABASE_URL=postgresql://... FLEET_URL=https://fleet.example.com npm start
 | `INSTALLATION_TOKEN` | unset | The token a hosting service presents to the installation procedures (at least 32 characters, decision 0021). Unset: they are off and every fleet is served, as a self-hosted gateway needs; set: a fleet is served once switched on |
 | `PAGASAE_URL`, `PAGASAE_CLIENT_ID`, `PAGASAE_CLIENT_SECRET` | unset | pagasae, where people sign in (decision 0054), and the gateway's client there, registered with the redirect URI `<GATEWAY_PUBLIC_URL>/pagasae/callback`. All three or none; unset, nobody signs in, so no MCP client connects (only an account asks for one) |
 | `PAGASAE_APP_CLIENT_ID`, `PAGASAE_APP_CLIENT_SECRET` | unset | The gateway's pages as an app at pagasae (its `APP_CLIENTS`, redirect URI `<GATEWAY_PUBLIC_URL>/sign-in/done`), apart from the client for outside MCP clients: people sign in to the pages with the account sign-in every Aeolus app shares (aeolus-fleet's header design, H5). Both or neither, beside `PAGASAE_URL`; unset, nobody signs in to the web app's pages |
+| `EMAIL_WAKE_WINDOW_MINUTES` | `60` | At least 1. The email channel sends one person ship at most one wake per this many minutes; what waits meanwhile goes in the next wake (aeolus-fleet's wake a person design, W3, W10). Email wakes need `PAGASAE_URL` and `INSTALLATION_TOKEN`, which the gateway presents to pagasae's `/api/wakes` |
+| `WEB_PUSH_PUBLIC_KEY`, `WEB_PUSH_PRIVATE_KEY`, `WEB_PUSH_SUBJECT` | unset | The gateway's push keys (VAPID, as `npx web-push generate-vapid-keys` makes them), which sign each web push wake, and the `mailto:` or `https:` URL a push service may contact about them. All three or none; unset, the overview offers no web push |
+| `WEB_PUSH_WAKE_WINDOW_MINUTES` | `10` | At least 1. Web push sends one person ship at most one wake per this many minutes; what waits meanwhile goes in the next wake (W3, W10) |
 | `LOG_LEVEL` | `info` | `fatal`, `error`, `warn`, `info`, `debug`, `trace` or `silent` |
 
 | Command | Does |
@@ -40,7 +43,7 @@ The API is tRPC at `/trpc`. Its procedures take an actor (decision 0057): an acc
 
 ## Parties
 
-argo approves an outside MCP server as a party with `parties.approve` (argo's console session): its name, its Streamable HTTP URL, the credential the gateway calls it with (a static bearer, or OAuth client credentials with their issuer), the owner argo picks for it (a person's ship or argo) and how many calls it takes at once (1 to 10, the most core's pushReceive hands at once; 4 by default). The gateway, as its own ship, commissions the party's app proxy ship of type `mcp-server` with that owner, crews it, and keeps its crew token. argo labels the proxy ship in the console, as any ship, for the network rules to select it. `parties.list` shows each party without its credential or crew token, with its proxy ship's owner and scopes as the fleet holds them, read as the actor who asked (decision 0056: the owner is core's, and the gateway keeps none of its own; null outside the actor's read reach, while there is no proxy ship, or while the fleet does not answer). `parties.get {name}` shows one. `parties.changeOwner {name, ownerShipId}` (needs `fleet:owner`) and `parties.changeScopes {name, grant, revoke}` (needs `scopes:grant`, only scopes the actor holds) change the proxy ship in the fleet as the actor, so the fleet checks its manage reach (decision 0056); the gateway keeps neither. `parties.retire` retires a party (decision 0056): it needs `fleet:manage`, and the gateway retires the proxy ship in the fleet as the actor who asked, so the fleet checks its manage reach; only then does the gateway forget the party and revoke its client's tokens. A proxy ship retired already counts as retired. Adding it again is a new request. A proxy ship left awaiting crew (the commission's answer was lost, and its secret with it) takes a new secret from a new starting prompt with `parties.crew`.
+argo approves an outside MCP server as a party with `parties.approve` (argo's console session): its name, its Streamable HTTP URL, the credential the gateway calls it with (none, for a server reached only on a private network, so the gateway sends no Authorization header; a static bearer; or OAuth client credentials with their issuer), the owner argo picks for it (a person's ship or argo), how many calls it takes at once (1 to 10, the most core's pushReceive hands at once; 4 by default) and, from an actor that also holds `gateway:approve`, `tools`: each tool the check answered, switched on or off. The gateway, as its own ship, commissions the party's app proxy ship of type `mcp-server` with that owner, crews it, and keeps its crew token. argo labels the proxy ship in the console, as any ship, for the network rules to select it. `parties.list` shows each party without its credential or crew token, with its proxy ship's owner and scopes as the fleet holds them, read as the actor who asked (decision 0056: the owner is core's, and the gateway keeps none of its own; null outside the actor's read reach, while there is no proxy ship, or while the fleet does not answer). `parties.get {name}` shows one. `parties.changeOwner {name, ownerShipId}` (needs `fleet:owner`) and `parties.changeScopes {name, grant, revoke}` (needs `scopes:grant`, only scopes the actor holds) change the proxy ship in the fleet as the actor, so the fleet checks its manage reach (decision 0056); the gateway keeps neither. `parties.retire` retires a party (decision 0056): it needs `fleet:manage`, and the gateway retires the proxy ship in the fleet as the actor who asked, so the fleet checks its manage reach; only then does the gateway forget the party and revoke its client's tokens. A proxy ship retired already counts as retired. Adding it again is a new request. A proxy ship left awaiting crew (the commission's answer was lost, and its secret with it) takes a new secret from a new starting prompt with `parties.crew`.
 
 Once a proxy ship is crewed, the gateway's ship writes what the gateway checked about it as verified facts (`fleet:verify`, decision 0059), which discovery shows beside its statement: `tlsHost` for an MCP server reached over https, `clientIdDocumentDomain` for an MCP client known by an https metadata document. A write the fleet refuses is logged and leaves the approval as it is; in a fleet that applies its own network rules the gateway's ship has no manage reach over its proxy ships, so the fleet refuses them there. The gateway's ship needs `fleet:verify` to connect.
 
@@ -48,14 +51,18 @@ The gateway keeps outside credentials and crew tokens as they are in its own dat
 
 `parties.state` states the proxy ship anew from the server's `tools/list`: each tool is one capability with its MCP fields and annotations, called with `application/vnd.aeolus.mcp-tool+json; name=<tool>` (the tool arguments as a JSON object) and answered with `application/vnd.aeolus.mcp-result+json; name=<tool>` (the tool result). The summary names the party only, never its URL or credential. Each capability states the gateway's own timing: `waitMs`, how long an outside client waits for the answer (`MCP_WAIT_MAX_MS`), and `deadlineMs`, when the gateway gives up on the server's `tools/call` (`TOOL_CALL_TIMEOUT_MS`). `parties.markTool` marks a tool repeatable, or takes the mark off, and states it at once: only argo's mark lets the gateway hand a call that died unanswered again; the server's hints never do.
 
+Each tool of a server has a switch, per party: every ship that may reach the party reaches the same tools (aeolus-fleet#1151). The statement holds only the tools switched on, and a call to a tool not switched on is answered the error result `tool not enabled for this party` and never reaches the server. `parties.switchTool {name, tool, isOn}` (needs `gateway:approve`) keeps one switch, then states the proxy ship at once; while it cannot be stated, the switch waits for its next statement, and calls are refused at once all the same. `parties.tools` answers each tool the server lists now with its switch, `isNew` for one listed after the switches were kept, and `isReadOnly` when its annotations say so. A tool the server adds later starts off. A party added with no tool choice (before switches, through a request, or by an actor without `gateway:approve`) keeps every tool it lists at its next statement on.
+
 ## The parties pages
 
-The parties pages are the web app's, for accounts by scope, in the fleet their address names (`?fleet=<fleet id>`): `/parties` (the parties with their state, and for an account holding `fleet:manage` a form to approve an MCP server and per party the forms to hand over a new secret, state its tools and mark a tool repeatable), `/outside-parties` (the switch, for `fleet:network`, and every outside party), one outside party at `/outside-parties/<name>` (changing its owner and scopes, retiring it) and adding a server at `/outside-parties/add`. Each page asks the API, from the web app's server at the gateway's own port on this machine, as the browser that asked; each form is a server action the same server answers, and the API checks every scope.
+The parties pages are the web app's, for accounts by scope, in the fleet their address names (`?fleet=<fleet id>`): `/parties` (the parties with their state, and for an account holding `fleet:manage` a form to approve an MCP server and per party the forms to hand over a new secret, state its tools and mark a tool repeatable), `/outside-parties` (the switch, for `fleet:network`, and every outside party), one outside party at `/outside-parties/<name>` (changing its owner and scopes, retiring it, and for an account holding `gateway:approve` a switch per tool of a server, each saying what it did) and adding a server at `/outside-parties/add` (its tools to switch for an account holding `gateway:approve`). Each page asks the API, from the web app's server at the gateway's own port on this machine, as the browser that asked; each form is a server action the same server answers, and the API checks every scope.
 
 ## The Overview
 
 `/overview?fleet=<fleet id>` is the web app's, for an account signed in with the shared sign-in: what waits on them, their inbox in two groups (what waits, and what they opened and have not answered or done), the requests to decide for a holder of `gateway:approve`, each decided at `/overview/requests/<request id>`, and the requests they asked. Opening a delivery acknowledges it and shows it whole once; it is answered or done in place. The page reads itself again whenever its fleet's requests change, following the API's `requests.changes` (server-sent events) through `/overview/changes`.
 
+While an Overview page is in focus it holds `/overview/focus` open (the API's `people.focus`), and the gateway hands what arrives for the person through channel `page`, sending no wake (wake a person, W6). Its section When something waits turns web push on for a browser (asking the browser's permission), lists the browsers turned on and removes one, where the gateway holds push keys; nothing is on by default. A web push wake says only the fleet's name, that something waits and the Overview's link, shown by the `/wake-worker.js` service worker. A browser whose push service answers 404 or 410 takes no wake again, and the section says it is gone.
+
 ## MCP out
 
 From its start, and as soon as a party is crewed, the gateway takes the calls of each crewed party's proxy ship as its crew (interop 5.2). A ship of the fleet calls a tool by sending the proxy ship the tool's input type, `application/vnd.aeolus.mcp-tool+json; name=<tool>`, with the tool arguments as a JSON object. The gateway reports it handed, makes the `tools/call` with the vault's credential, and replies with the result (an error result included) naming the request, then acknowledges and reports it handled. It keeps each call in its database, so a restart replies again and never calls again what may have run.
@@ -73,10 +80,11 @@ The gateway is an OAuth 2.1 authorization server for outside MCP clients, such a
 - `/.well-known/oauth-protected-resource` (RFC 9728) names the gateway as the authorization server of its MCP endpoint, `<GATEWAY_PUBLIC_URL>/mcp`; `/.well-known/oauth-authorization-server` (RFC 8414) states what it serves.
 - A client is pre-registered by argo with `oauth.registerClient` (its name, its redirect URIs, and whether it keeps a secret, answered once), or known by its client metadata document (CIMD): its client id is the https URL of that document. There is no dynamic registration.
 - `/authorize` checks the request and sends the browser to the web app's `/authorize/pick`, which shows the client and two picks (decision 0056, Q1 a): sign in as yourself, or ask for access for this client. Either sends the person to pagasae to sign in. Whatever stops the browser, an unknown client or a sign-in from another browser among them, is the web app's page `/authorize/failed`. Only the authorization code flow with PKCE S256 is served, and the `resource` must be the gateway's MCP endpoint (RFC 8707).
-- A person signs in through pagasae (decision 0054). pagasae answers their only fleet, or asks which, and sends them back to `/pagasae/callback`; signed in as themselves, the gateway keeps their account's grant (the account, its fleet, its person ship and pagasae's tokens) and sends their client back with its code, with no approval. The sign-in under way travels sealed in pagasae's `state`, so nothing is stored before the fleet is known. The browser that starts it holds a secret sealed with it, in an HttpOnly cookie sent only to `/pagasae/callback` for its 10 minutes, so no other browser finishes it (login CSRF). A fleet the gateway does not serve is refused. A person's client is served their person ship's tools: `aeolus_inbox` (what waits, by titles only, at most 10), `aeolus_open` (one delivery whole; opening it acknowledges it), `aeolus_answer` (a reply to its sender, then it is handled) and `aeolus_done` (handled with no answer). The gateway makes these calls as the crew of the account's own person ship, with the account's token (decision 0057): it crews the ship once, shared by every client of the person, and crews it again when its lease ended. An account with no person ship is told so, and the fleet is asked nothing. `aeolus_ask_for_server` asks for an outside MCP server by its http or https address, as the account (decision 0056): it opens a pending request, or joins the one pending for the same server, and an approver adds the server with its credential. A server that is a party already is said so. While the fleet's outside parties are off, nobody asks.
+- A person signs in through pagasae (decision 0054). pagasae answers their only fleet, or asks which, and sends them back to `/pagasae/callback`; signed in as themselves, the gateway keeps their account's grant (the account, its fleet, its person ship and pagasae's tokens) and sends their client back with its code, with no approval. The sign-in under way travels sealed in pagasae's `state`, so nothing is stored before the fleet is known. The browser that starts it holds a secret sealed with it, in an HttpOnly cookie sent only to `/pagasae/callback` for its 10 minutes, so no other browser finishes it (login CSRF). A fleet the gateway does not serve is refused. A person's client is served their person ship's tools: `aeolus_inbox` (what waits, by titles only, at most 10), `aeolus_open` (one delivery whole; opening it acknowledges it), `aeolus_answer` (a reply to its sender, then it is handled) and `aeolus_done` (handled with no answer). The gateway makes these calls as the crew of the account's own person ship, with the account's token (decision 0057): it crews the ship once, shared by every client of the person, and crews it again when its lease ended. An account with no person ship is told so, and the fleet is asked nothing. `aeolus_ask_for_server` asks for an outside MCP server by its http or https address, as the account (decision 0056): it opens a pending request, or joins the one pending for the same server, and an approver adds the server with its credential. A server that is a party already is said so. While the fleet's outside parties are off, nobody asks. The overview's When something waits section turns email on and off for the person's person ship, nothing on by default (aeolus-fleet's wake a person design, W8). The gateway waits on every person ship it crews; once a delivery that was never handed waits and email is on, it asks pagasae to send the person's account a wake, which says only that something waits in the fleet, with the overview's link, at most once per `EMAIL_WAKE_WINDOW_MINUTES`; each delivery it covers is then handed no. 1 with channel `email`. A wake pagasae refuses or does not answer hands nothing and is tried again, after 1, 5, then every 15 minutes.
 - The web app's pages sign people in with the shared account sign-in (header design H5): `/sign-in/start?return_to=<a path of the gateway's>` sends the browser to pagasae with the code flow and PKCE, naming no fleet, and `/sign-in/done` takes it back to the page; the gateway keeps nothing, as pagasae keeps the sign-in in its own cookie `aeolus_account_session` on the domain every Aeolus app shares. A page names its fleet in its address (`?fleet=<fleet id>`) and the web app's server forwards that sign-in alone and that fleet in the `aeolus-fleet` header; the API then acts as the account by the token pagasae exchanges the sign-in for in that fleet, kept until a minute before it ends. `account.inView` answers the page who it shows the fleet as (its account and scopes), the fleet to go to when it names none (the first whose gateway the account may open), or the app to go to where the account may not open the gateway (H9); UNAUTHORIZED with no shared sign-in. What went wrong is the page `/sign-in/failed`. A form posting to `/sign-in/end` from the gateway's own pages ends the shared sign-in at pagasae, signing the person out of every Aeolus app.
 - A person who asks for access for the client asks as their account. A client that is a party already is sent back with its party's code at once. Otherwise the account opens a pending request for the client, or joins the one pending, and its browser waits at the web app's `/authorize/waiting/approval`, which follows the request on `/authorize/waiting/live` and goes back to `/authorize/waiting` once it no longer waits, there to be sent on: approved and its proxy ship crewed, the client gets its party's code; denied or expired, `access_denied`. Closed meanwhile, the next try after a deny or expiry ends with `access_denied` once, and a later try asks anew. The waiting travels sealed in the page's address, and the browser holds the sign-in's secret in an HttpOnly cookie sent only to the waiting addresses, for the request's 7 days. While the fleet's outside parties are off, nobody asks. Each client party has its own app proxy ship, of type `mcp-client`; every token of a client party names its party, so every fleet call the client makes is its proxy ship's, within its reach; a person's token names their account's grant. `parties.list` shows client parties beside server parties.
 - `/token` takes a code once, within its minute, for an access token (one hour) and a refresh token (30 days). Refreshing rotates the pair; a code or a refresh token used twice revokes what it gave.
+- ID-JAG (aeolus-fleet company sign-in design, slice 6): a person's MCP client whose company manages it (enterprise-managed authorization) posts to `/token` the ID-JAG its company identity provider issued for the gateway's issuer, with the JWT bearer grant (`urn:ietf:params:oauth:grant-type:jwt-bearer`, the ID-JAG as `assertion`), and needs no browser. Only a client argo registered for the code flow does, with its secret if it has one; anyone else is `invalid_client`. The gateway hands the ID-JAG to pagasae by token exchange with its own client, naming the client, and pagasae checks it against the organisation's connected Okta and finds the account a sign-in there recorded. The account's grant is kept as after a browser sign-in, and the client gets an access token (one hour) acting as the account in the client's fleet, with no refresh token: it asks its identity provider for a new ID-JAG. ID-JAG is only available for accounts in one fleet: pagasae refuses an account with rights in several (`invalid_grant`), and the person signs in at the gateway's address to choose. A refusal at pagasae is `invalid_grant`; pagasae not answering is `temporarily_unavailable` (503). The metadata states the grant and `authorization_grant_profiles_supported: ["urn:ietf:params:oauth:grant-profile:id-jag"]` where people sign in through pagasae.
 
 Codes and tokens are kept only as hashes, and so are client secrets.
 

package/dist/adapters/a2a/a2a-agents.d.ts

@@ -0,0 +1,6 @@
+import type { A2aAgents, GatewayStatuses } from '../../core/a2a-out/ports.js';
+export declare function createA2aAgents(deps: {
+    timeoutMs: number;
+}): A2aAgents;
+/** The gateway's own statuses, as the A2A JSON the sender reads: the state, with the reason as the agent's message. */
+export declare const gatewayStatuses: GatewayStatuses;

package/dist/adapters/a2a/a2a-agents.js

@@ -0,0 +1,238 @@
+/**
+ * The outside A2A agents the gateway calls (slice 6), through @a2a-js/sdk's
+ * client over JSON-RPC or HTTP+JSON (A11), one client per call with the
+ * credential from the vault: none, a bearer, or a token the issuer gives
+ * for client credentials. A failure reads as where it happened, so the core
+ * decides whether it may hand the message again: an A2A error or an HTTP
+ * 4xx is the agent's refusal; a 5xx, a timeout or a connection broken mid
+ * answer is no answer, and it may have run; a credential the issuer would
+ * not give, or an agent no connection reached, sent nothing. Each task,
+ * status, artifact and message reads as the A2A JSON it came as.
+ */
+import { AgentCard, GetTaskRequest, Message, SendMessageRequest, StreamResponse, SubscribeToTaskRequest, TaskState } from '@a2a-js/sdk';
+import { Client, JsonRpcTransportFactory, RestTransportFactory } from '@a2a-js/sdk/client';
+import { A2AError, TaskNotFoundError } from '@a2a-js/sdk/errors';
+import { z } from 'zod';
+/** The A2A version the gateway speaks to an agent. */
+const A2A_VERSION = '1.0';
+const HTTP_SERVER_ERROR = 500;
+const HTTP_CLIENT_ERROR = 400;
+/** A token kept until this long before it expires. */
+const TOKEN_MARGIN_MS = 30_000;
+const MS_PER_SECOND = 1_000;
+/** The gateway reached no agent: its credential could not be had, or no connection was made. Nothing ran. */
+class NotSentError extends Error {
+}
+/** The agent answered a 5xx: it may have run. */
+class NoAnswerError extends Error {
+}
+const STATES = {
+    [TaskState.TASK_STATE_UNSPECIFIED]: 'unspecified',
+    [TaskState.TASK_STATE_SUBMITTED]: 'submitted',
+    [TaskState.TASK_STATE_WORKING]: 'working',
+    [TaskState.TASK_STATE_COMPLETED]: 'completed',
+    [TaskState.TASK_STATE_FAILED]: 'failed',
+    [TaskState.TASK_STATE_CANCELED]: 'canceled',
+    [TaskState.TASK_STATE_INPUT_REQUIRED]: 'inputRequired',
+    [TaskState.TASK_STATE_REJECTED]: 'rejected',
+    [TaskState.TASK_STATE_AUTH_REQUIRED]: 'authRequired',
+    [TaskState.UNRECOGNIZED]: 'unspecified',
+};
+function partsOf(parts) {
+    return parts.map((part) => {
+        switch (part.content?.$case) {
+            case 'text':
+                return { kind: 'text', text: part.content.value, mediaType: part.mediaType === '' ? 'text/plain' : part.mediaType };
+            case 'data':
+                return { kind: 'data', data: part.content.value, mediaType: part.mediaType === '' ? 'application/json' : part.mediaType };
+            case 'raw':
+            case 'url':
+            case undefined:
+                return { kind: 'other' };
+        }
+    });
+}
+const jsonOf = (event) => JSON.stringify(StreamResponse.toJSON(event));
+function statusEvent(update) {
+    return { kind: 'status', state: STATES[update.status?.state ?? TaskState.TASK_STATE_UNSPECIFIED], timestamp: update.status?.timestamp ?? null, json: jsonOf({ payload: { $case: 'statusUpdate', value: { ...update, metadata: undefined } } }) };
+}
+function artifactEvent(update) {
+    return { kind: 'artifact', artifactId: update.artifact?.artifactId ?? '', isAppended: update.append, parts: partsOf(update.artifact?.parts ?? []), json: jsonOf({ payload: { $case: 'artifactUpdate', value: update } }) };
+}
+const messageEvent = (message) => ({ kind: 'message', messageId: message.messageId, parts: partsOf(message.parts), json: jsonOf({ payload: { $case: 'message', value: message } }) });
+/** A task as it stands: each artifact, then its status. */
+function eventsOfTask(task) {
+    return [...task.artifacts.map((artifact) => artifactEvent({ taskId: task.id, contextId: task.contextId, artifact, append: false, lastChunk: true, metadata: undefined })), statusEvent({ taskId: task.id, contextId: task.contextId, status: task.status })];
+}
+function eventsOfStream(response) {
+    switch (response.payload?.$case) {
+        case 'task':
+            return eventsOfTask(response.payload.value);
+        case 'message':
+            return [messageEvent(response.payload.value)];
+        case 'statusUpdate':
+            return [statusEvent(response.payload.value)];
+        case 'artifactUpdate':
+            return [artifactEvent(response.payload.value)];
+        case undefined:
+            return [];
+    }
+}
+function partJsonOf(part) {
+    switch (part.kind) {
+        case 'text':
+            return { text: part.text, mediaType: part.mediaType };
+        case 'data':
+            return { data: part.data, mediaType: part.mediaType };
+        case 'other':
+            return {};
+    }
+}
+/** The SDK's Message for the gateway's: its parts, or the sender's own A2A Message with the gateway's ids put in. */
+function sdkMessageOf(message) {
+    const ids = { messageId: message.messageId, ...(message.taskId === null ? {} : { taskId: message.taskId }), ...(message.contextId === null ? {} : { contextId: message.contextId }) };
+    return message.content.kind === 'whole'
+        ? Message.fromJSON({ role: 'ROLE_USER', ...message.content.message, ...ids })
+        : Message.fromJSON({ ...ids, role: 'ROLE_USER', parts: message.content.parts.map(partJsonOf) });
+}
+const systemError = z.object({ code: z.string() });
+/** No connection was made, so nothing was sent. */
+function isConnectionRefused(error) {
+    const cause = error instanceof Error ? error.cause : undefined;
+    const failure = systemError.safeParse(cause);
+    return failure.success && ['ECONNREFUSED', 'ENOTFOUND', 'EHOSTUNREACH'].includes(failure.data.code);
+}
+const reasonOf = (error) => (error instanceof Error ? error.message : String(error));
+const metadataSchema = z.object({ token_endpoint: z.url() });
+const tokenSchema = z.object({ access_token: z.string().min(1), expires_in: z.number().optional() });
+/** A token the issuer gives for client credentials, kept until it nearly expires. */
+function createTokens() {
+    const kept = new Map();
+    return async (credential, signal) => {
+        const key = JSON.stringify([credential.issuer, credential.clientId, credential.scope ?? '']);
+        const held = kept.get(key);
+        if (held !== undefined && held.until > Date.now()) {
+            return held.token;
+        }
+        try {
+            const metadata = metadataSchema.parse(await (await fetch(`${credential.issuer.replace(/\/$/, '')}/.well-known/oauth-authorization-server`, { signal })).json());
+            const answer = await fetch(metadata.token_endpoint, {
+                method: 'POST',
+                signal,
+                headers: { 'content-type': 'application/x-www-form-urlencoded', authorization: `Basic ${Buffer.from(`${credential.clientId}:${credential.clientSecret}`).toString('base64')}` },
+                body: new URLSearchParams({ grant_type: 'client_credentials', ...(credential.scope === undefined ? {} : { scope: credential.scope }) }),
+            });
+            if (!answer.ok) {
+                throw new Error(`the issuer answered ${String(answer.status)}`);
+            }
+            const given = tokenSchema.parse(await answer.json());
+            kept.set(key, { token: given.access_token, until: Date.now() + (given.expires_in ?? 0) * MS_PER_SECOND - TOKEN_MARGIN_MS });
+            return given.access_token;
+        }
+        catch (error) {
+            throw new NotSentError(`The issuer gave no token for the client credentials: ${reasonOf(error)}`);
+        }
+    };
+}
+export function createA2aAgents(deps) {
+    const tokenOf = createTokens();
+    /** A client for one call, its every request signed in and timed out, and what the agent's HTTP answer was. */
+    const clientFor = async (connection, signal) => {
+        const observed = { status: undefined };
+        const { credential } = connection;
+        const authorization = credential.kind === 'none' ? undefined : credential.kind === 'bearer' ? `Bearer ${credential.token}` : `Bearer ${await tokenOf(credential, signal)}`;
+        const fetchImpl = async (input, init) => {
+            const headers = new Headers(init?.headers);
+            if (authorization !== undefined) {
+                headers.set('authorization', authorization);
+            }
+            let response;
+            try {
+                response = await fetch(input, { ...init, headers, signal: init?.signal ? AbortSignal.any([init.signal, signal]) : signal });
+            }
+            catch (error) {
+                throw isConnectionRefused(error) ? new NotSentError(reasonOf(error)) : error;
+            }
+            observed.status = response.status;
+            if (response.status >= HTTP_SERVER_ERROR) {
+                await response.body?.cancel();
+                throw new NoAnswerError(`The agent answered ${String(response.status)}`);
+            }
+            return response;
+        };
+        const card = AgentCard.fromJSON({ name: 'outside agent', supportedInterfaces: [{ url: connection.endpoint.url, protocolBinding: connection.endpoint.protocolBinding, protocolVersion: A2A_VERSION }] });
+        const factory = connection.endpoint.protocolBinding === 'HTTP+JSON' ? new RestTransportFactory({ fetchImpl }) : new JsonRpcTransportFactory({ fetchImpl });
+        return { client: new Client(await factory.create(connection.endpoint.url, card), card), observed };
+    };
+    /** Where a failure happened: refused by the agent, never sent, or unanswered; a task the agent knows no more is gone. */
+    const failureOf = (error, observed) => {
+        if (error instanceof NotSentError) {
+            return { kind: 'notSent', reason: error.message };
+        }
+        if (error instanceof NoAnswerError) {
+            return { kind: 'unanswered', reason: error.message };
+        }
+        if (error instanceof TaskNotFoundError) {
+            return { kind: 'gone', reason: reasonOf(error) };
+        }
+        if (error instanceof A2AError || (observed.status !== undefined && observed.status >= HTTP_CLIENT_ERROR)) {
+            return { kind: 'refused', reason: observed.status !== undefined && observed.status >= HTTP_CLIENT_ERROR ? `The agent answered ${String(observed.status)}: ${reasonOf(error)}` : reasonOf(error) };
+        }
+        return { kind: 'unanswered', reason: reasonOf(error) };
+    };
+    return {
+        send: async (connection, message) => {
+            const signal = AbortSignal.timeout(deps.timeoutMs);
+            let observed = { status: undefined };
+            try {
+                const made = await clientFor(connection, signal);
+                observed = made.observed;
+                const answer = await made.client.sendMessage(SendMessageRequest.fromJSON({ message: Message.toJSON(sdkMessageOf(message)), configuration: { returnImmediately: true } }), { signal });
+                return 'messageId' in answer ? { kind: 'message', event: messageEvent(answer) } : { kind: 'task', taskId: answer.id, contextId: answer.contextId, events: eventsOfTask(answer) };
+            }
+            catch (error) {
+                const failure = failureOf(error, observed);
+                return failure.kind === 'gone' ? { kind: 'refused', reason: failure.reason } : failure;
+            }
+        },
+        getTask: async (connection, taskId) => {
+            const signal = AbortSignal.timeout(deps.timeoutMs);
+            let observed = { status: undefined };
+            try {
+                const made = await clientFor(connection, signal);
+                observed = made.observed;
+                return { kind: 'read', events: eventsOfTask(await made.client.getTask(GetTaskRequest.fromJSON({ id: taskId }), { signal })) };
+            }
+            catch (error) {
+                const failure = failureOf(error, observed);
+                return failure.kind === 'gone' || failure.kind === 'refused' ? failure : { kind: 'unanswered', reason: failure.reason };
+            }
+        },
+        subscribe: async (connection, { taskId, timeoutMs, signal, onEvent }) => {
+            const until = AbortSignal.any([signal, AbortSignal.timeout(timeoutMs)]);
+            let observed = { status: undefined };
+            try {
+                const made = await clientFor(connection, until);
+                observed = made.observed;
+                for await (const response of made.client.resubscribeTask(SubscribeToTaskRequest.fromJSON({ id: taskId }), { signal: until })) {
+                    for (const event of eventsOfStream(response)) {
+                        await onEvent(event);
+                    }
+                }
+                return { kind: 'closed' };
+            }
+            catch (error) {
+                const failure = failureOf(error, observed);
+                return failure.kind === 'gone' || failure.kind === 'refused' ? failure : { kind: 'broken', reason: failure.reason };
+            }
+        },
+    };
+}
+/** The gateway's own statuses, as the A2A JSON the sender reads: the state, with the reason as the agent's message. */
+export const gatewayStatuses = {
+    statusOf: ({ taskId, contextId, state, reason, messageId }) => {
+        const message = Message.fromJSON({ messageId, taskId, contextId, role: 'ROLE_AGENT', parts: [{ text: reason }] });
+        return statusEvent({ taskId, contextId, status: { state: state === 'failed' ? TaskState.TASK_STATE_FAILED : TaskState.TASK_STATE_REJECTED, message, timestamp: undefined } });
+    },
+};
+//# sourceMappingURL=a2a-agents.js.map

package/dist/adapters/a2a/a2a-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-agents.js","sourceRoot":"","sources":["../../../src/adapters/a2a/a2a-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,sBAAsB,EAAE,SAAS,EAAuE,MAAM,aAAa,CAAC;AAC7M,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,sDAAsD;AACtD,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,sDAAsD;AACtD,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B,6GAA6G;AAC7G,MAAM,YAAa,SAAQ,KAAK;CAAG;AAEnC,iDAAiD;AACjD,MAAM,aAAc,SAAQ,KAAK;CAAG;AAEpC,MAAM,MAAM,GAAkC;IAC5C,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,aAAa;IACjD,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,WAAW;IAC7C,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,SAAS;IACzC,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,WAAW;IAC7C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,QAAQ;IACvC,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,UAAU;IAC3C,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,eAAe;IACtD,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,UAAU;IAC3C,CAAC,SAAS,CAAC,wBAAwB,CAAC,EAAE,cAAc;IACpD,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,aAAa;CACxC,CAAC;AAEF,SAAS,OAAO,CAAC,KAAsB;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAa,EAAE;QACnC,QAAQ,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACtH,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5H,KAAK,KAAK,CAAC;YACX,KAAK,KAAK,CAAC;YACX,KAAK,SAAS;gBACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEvF,SAAS,WAAW,CAAC,MAA6E;IAChG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACnP,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B;IACpD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7N,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAE3M,2DAA2D;AAC3D,SAAS,YAAY,CAAC,IAAU;IAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC/P,CAAC;AAED,SAAS,cAAc,CAAC,QAAwB;IAC9C,QAAQ,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAChC,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,SAAS;YACZ,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,KAAK,cAAc;YACjB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,KAAK,gBAAgB;YACnB,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,KAAK,OAAO;YACV,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,qHAAqH;AACrH,SAAS,YAAY,CAAC,OAAwB;IAC5C,MAAM,GAAG,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACtL,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;QACrC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;QAC7E,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD,mDAAmD;AACnD,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9F,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC7D,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAErG,qFAAqF;AACrF,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4C,CAAC;IACjE,OAAO,KAAK,EAAE,UAAuE,EAAE,MAAmB,EAAmB,EAAE;QAC7H,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChK,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC/K,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;aACxI,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,aAAa,GAAG,eAAe,EAAE,CAAC,CAAC;YAC5H,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,wDAAwD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA2B;IACzD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAE/B,8GAA8G;IAC9G,MAAM,SAAS,GAAG,KAAK,EAAE,UAA2B,EAAE,MAAmB,EAAE,EAAE;QAC3E,MAAM,QAAQ,GAAmC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvE,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QAClC,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3K,MAAM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9H,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/E,CAAC;YACD,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAClC,IAAI,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACxM,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,eAAe,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,uBAAuB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3J,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrG,CAAC,CAAC;IAEF,yHAAyH;IACzH,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,QAAwC,EAAE,EAAE;QAC7E,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAW,CAAC;QAC7D,CAAC;QACD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAW,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAW,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,YAAY,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAW,CAAC;QAC7M,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAW,CAAC;IAClE,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAwB,EAAE;YACxD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,QAAQ,GAAmC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACjD,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtL,OAAO,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YACnL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAqB,EAAE;YACvD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,QAAQ,GAAmC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBACjD,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAChI,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1H,CAAC;QACH,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAA4B,EAAE;YAChG,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,QAAQ,GAAmC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAChD,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBAC7H,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7C,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC3C,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACtH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClH,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAChL,CAAC;CACF,CAAC"}

package/dist/adapters/a2a/agent-cards.d.ts

@@ -0,0 +1,4 @@
+import type { AgentCards } from '../../core/a2a-out/ports.js';
+export declare function createHttpAgentCards(deps: {
+    timeoutMs: number;
+}): AgentCards;

package/dist/adapters/a2a/agent-cards.js

@@ -0,0 +1,90 @@
+/**
+ * The reader of an outside A2A agent's public card (slice 5): a GET at the
+ * address an approver typed, with no credential, as a public card is read.
+ * The answer is the proto's AgentCard as JSON: proto JSON leaves an empty
+ * list out, so a list left out reads as empty. Only the fields the gateway
+ * uses are kept. It follows no redirect, so the card is read where the
+ * approver said, as the domain written as its fact is that one. The whole
+ * read takes at most the timeout, and at most 1 MB of the answer is read.
+ */
+import { z } from 'zod';
+import { err, ok } from '../../core/shared/result.js';
+/** The most of an answer read as a card. */
+const CARD_MAX_BYTES = 1024 * 1024;
+const listOf = (item) => z.array(item).default([]);
+const agentCardSchema = z.object({
+    name: z.string().min(1),
+    description: z.string(),
+    version: z.string().min(1),
+    supportedInterfaces: listOf(z.object({ url: z.string(), protocolBinding: z.string(), protocolVersion: z.string() })),
+    capabilities: z.object({ streaming: z.boolean().optional() }),
+    defaultInputModes: listOf(z.string()),
+    defaultOutputModes: listOf(z.string()),
+    skills: listOf(z.object({ id: z.string(), name: z.string(), description: z.string(), tags: listOf(z.string()), inputModes: listOf(z.string()), outputModes: listOf(z.string()) })),
+});
+/** The answer's body as text, or none once it is over the cap. */
+async function cappedTextOf(response) {
+    if (response.body === null) {
+        return '';
+    }
+    const reader = response.body.getReader();
+    const chunks = [];
+    let read = 0;
+    for (let next = await reader.read(); !next.done; next = await reader.read()) {
+        // A fetch body yields bytes; Node's types name its chunks any.
+        const chunk = next.value;
+        if (!(chunk instanceof Uint8Array)) {
+            throw new TypeError('A fetch body yielded no bytes');
+        }
+        read += chunk.byteLength;
+        if (read > CARD_MAX_BYTES) {
+            await reader.cancel();
+            return undefined;
+        }
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function cardOf(text) {
+    let json;
+    try {
+        json = JSON.parse(text);
+    }
+    catch {
+        return err({ kind: 'NOT_A_CARD', reason: 'the answer is no JSON' });
+    }
+    const parsed = agentCardSchema.safeParse(json);
+    if (!parsed.success) {
+        return err({ kind: 'NOT_A_CARD', reason: parsed.error.issues.map((issue) => `${issue.path.join('.')}: ${issue.message}`).join('; ') });
+    }
+    const { name, description, supportedInterfaces, capabilities, defaultInputModes, defaultOutputModes, skills } = parsed.data;
+    return ok({
+        name,
+        description,
+        supportedInterfaces,
+        defaultInputModes,
+        defaultOutputModes,
+        isStreaming: capabilities.streaming === true,
+        skills: skills.map(({ id, name: skillName, description: skillDescription, inputModes, outputModes }) => ({ id, name: skillName, description: skillDescription, inputModes, outputModes })),
+    });
+}
+export function createHttpAgentCards(deps) {
+    return {
+        read: async (cardUrl) => {
+            const signal = AbortSignal.timeout(deps.timeoutMs);
+            try {
+                const response = await fetch(cardUrl, { headers: { accept: 'application/json' }, redirect: 'manual', signal });
+                if (!response.ok) {
+                    await response.body?.cancel();
+                    return err({ kind: 'UNREACHABLE', reason: `the card address answered ${String(response.status)}` });
+                }
+                const text = await cappedTextOf(response);
+                return text === undefined ? err({ kind: 'NOT_A_CARD', reason: 'the answer is over 1 MB' }) : cardOf(text);
+            }
+            catch (error) {
+                return err({ kind: 'UNREACHABLE', reason: signal.aborted ? `no card within ${String(deps.timeoutMs)} ms` : error instanceof Error ? error.message : String(error) });
+            }
+        },
+    };
+}
+//# sourceMappingURL=agent-cards.js.map

package/dist/adapters/a2a/agent-cards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-cards.js","sourceRoot":"","sources":["../../../src/adapters/a2a/agent-cards.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,6BAA6B,CAAC;AAEnE,4CAA4C;AAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC,MAAM,MAAM,GAAG,CAAsB,IAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAE3E,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7D,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,MAAM,EAAE,MAAM,CACZ,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CACnK;CACF,CAAC,CAAC;AAEH,kEAAkE;AAClE,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5E,+DAA+D;QAC/D,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5H,OAAO,EAAE,CAAC;QACR,IAAI;QACJ,WAAW;QACX,mBAAmB;QACnB,iBAAiB;QACjB,kBAAkB;QAClB,WAAW,EAAE,YAAY,CAAC,SAAS,KAAK,IAAI;QAC5C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;KAC3L,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA2B;IAC9D,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/G,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC9B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtG,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvK,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/crypto/agent-keys.d.ts

@@ -0,0 +1,3 @@
+import type { AgentKeys } from '../../core/a2a-out/ports.js';
+/** The ids of A2A out as an HMAC under the gateway's secret, of the parts as a JSON array so no part runs into the next. */
+export declare function createAgentKeys(secret: string): AgentKeys;

package/dist/adapters/crypto/agent-keys.js

@@ -0,0 +1,13 @@
+import { createHmac } from 'node:crypto';
+/** Each derivation under its own label, so a reply key is never also a messageId. */
+const MESSAGE_LABEL = 'a2a-message';
+const REPLY_LABEL = 'a2a-reply';
+/** The ids of A2A out as an HMAC under the gateway's secret, of the parts as a JSON array so no part runs into the next. */
+export function createAgentKeys(secret) {
+    const derived = (parts) => createHmac('sha256', secret).update(JSON.stringify(parts)).digest('base64url');
+    return {
+        messageIdOf: (fleetId, messageId) => derived([MESSAGE_LABEL, fleetId, messageId]),
+        replyKeyOf: (fleetId, { taskId, event }) => derived([REPLY_LABEL, fleetId, taskId, event]),
+    };
+}
+//# sourceMappingURL=agent-keys.js.map

package/dist/adapters/crypto/agent-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-keys.js","sourceRoot":"","sources":["../../../src/adapters/crypto/agent-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,qFAAqF;AACrF,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,4HAA4H;AAC5H,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO;QACL,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACjF,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/dist/adapters/crypto/call-keys.js

@@ -2,6 +2,7 @@ import { createHmac, randomUUID } from 'node:crypto';
 /** Each derivation under its own label, so a key is never also a handle. */
 const IDEMPOTENCY_LABEL = 'idempotency-key';
 const HANDLE_LABEL = 'handle';
+const CONTEXT_LABEL = 'context';
 /**
  * Keys as an HMAC under the gateway's secret, of the parts as a JSON array so
  * no part's colon or comma runs into the next. A client's key is never sent
@@ -13,6 +14,7 @@ export function createCallKeys(secret) {
         idempotencyKeyOf: ({ fleetId, party, key }) => derived([IDEMPOTENCY_LABEL, fleetId, party, key]),
         newIdempotencyKey: () => randomUUID(),
         handleOf: (fleetId, messageId) => derived([HANDLE_LABEL, fleetId, messageId]),
+        contextIdOf: (fleetId, messageId) => derived([CONTEXT_LABEL, fleetId, messageId]),
     };
 }
 //# sourceMappingURL=call-keys.js.map

package/dist/adapters/crypto/call-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-keys.js","sourceRoot":"","sources":["../../../src/adapters/crypto/call-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIrD,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO;QACL,gBAAgB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAChG,iBAAiB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACrC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;KAC9E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"call-keys.js","sourceRoot":"","sources":["../../../src/adapters/crypto/call-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIrD,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpH,OAAO;QACL,gBAAgB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAChG,iBAAiB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACrC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7E,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC"}

package/dist/adapters/fleet/core-version.d.ts

@@ -6,6 +6,6 @@
 import { type VersionFetch } from '@aeolus-fleet/common';
 export type { VersionFetch };
 /** The oldest core the gateway runs against: the ship contract it calls (docs/compatibility.md). */
-export declare const MINIMUM_CORE_VERSION = "0.29.1";
+export declare const MINIMUM_CORE_VERSION = "0.30.0";
 /** Stops the start when the fleet's core is older than the gateway needs, or does not say its version. */
 export declare function requireCoreVersion(fleetUrl: string, fetch?: VersionFetch): Promise<void>;

package/dist/adapters/fleet/core-version.js

@@ -7,7 +7,7 @@ import { coreVersionRefusal } from '@aeolus-fleet/common';
 import { ConfigError } from '../../config.js';
 import { runningVersion } from '../http/version.js';
 /** The oldest core the gateway runs against: the ship contract it calls (docs/compatibility.md). */
-export const MINIMUM_CORE_VERSION = '0.29.1';
+export const MINIMUM_CORE_VERSION = '0.30.0';
 /** Stops the start when the fleet's core is older than the gateway needs, or does not say its version. */
 export async function requireCoreVersion(fleetUrl, fetch = globalThis.fetch) {
     const refusal = await coreVersionRefusal({ packageName: 'gateway', version: runningVersion(), minimum: MINIMUM_CORE_VERSION, fleetUrl, fetch });

package/dist/adapters/fleet/fleet-ships.d.ts

@@ -1,6 +1,8 @@
 import type { FleetShips } from '../../core/parties/ports.js';
 /**
  * The fleet's ships as the actor reads them (fleet.list, decision 0057):
- * those within its read reach, as only they carry their kind.
+ * those within its read reach, as only they carry their kind. The fleet
+ * answers a page at a time (performance S6), so the list reads on from each
+ * page's next cursor until it is null.
  */
 export declare function createFleetShips(fleetUrl: string): FleetShips;

package/dist/adapters/fleet/fleet-ships.js

@@ -1,22 +1,31 @@
 import { fleetListOutputSchema } from '@aeolus-fleet/common';
+import { PAGE_SIZE_MAX } from '@aeolus-fleet/common/rules';
 import { err, ok } from '../../core/shared/result.js';
 import { readAs } from './actor-door.js';
 /**
  * The fleet's ships as the actor reads them (fleet.list, decision 0057):
- * those within its read reach, as only they carry their kind.
+ * those within its read reach, as only they carry their kind. The fleet
+ * answers a page at a time (performance S6), so the list reads on from each
+ * page's next cursor until it is null.
  */
 export function createFleetShips(fleetUrl) {
     return {
         list: async (as) => {
-            const read = await readAs(fleetUrl, { as, procedure: 'list', input: {} });
-            if (!read.isOk) {
-                return read;
-            }
-            const ships = fleetListOutputSchema.safeParse(read.value);
-            if (!ships.success) {
-                return err({ code: 'UNAVAILABLE', message: 'The fleet answered no ships' });
-            }
-            return ok(ships.data.flatMap((ship) => ('isInReadReach' in ship ? [] : [{ shipId: ship.id, name: ship.name, kind: ship.kind, status: ship.status }])));
+            const ships = [];
+            let cursor;
+            do {
+                const read = await readAs(fleetUrl, { as, procedure: 'list', input: { ...(cursor === undefined ? {} : { cursor }), limit: PAGE_SIZE_MAX } });
+                if (!read.isOk) {
+                    return read;
+                }
+                const page = fleetListOutputSchema.safeParse(read.value);
+                if (!page.success) {
+                    return err({ code: 'UNAVAILABLE', message: 'The fleet answered no ships' });
+                }
+                ships.push(...page.data.items.flatMap((ship) => ('isInReadReach' in ship ? [] : [{ shipId: ship.id, name: ship.name, kind: ship.kind, status: ship.status }])));
+                cursor = page.data.nextCursor ?? undefined;
+            } while (cursor !== undefined);
+            return ok(ships);
         },
     };
 }

package/dist/adapters/fleet/fleet-ships.js.map

@@ -1 +1 @@
-{"version":3,"file":"fleet-ships.js","sourceRoot":"","sources":["../../../src/adapters/fleet/fleet-ships.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAG7D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"fleet-ships.js","sourceRoot":"","sources":["../../../src/adapters/fleet/fleet-ships.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,MAAM,KAAK,GAAgB,EAAE,CAAC;YAC9B,IAAI,MAA0B,CAAC;YAC/B,GAAG,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;gBAC7I,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;YAC7C,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;YAC/B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/fleet/rest-fleet-door.d.ts

@@ -1,5 +1,5 @@
 import type { FleetDoor, GatewayInbox } from '../../core/connection/ports.js';
-import type { CallSender, Discovery, ReplyReceiver } from '../../core/mcp-in/ports.js';
+import type { CallSender, Discovery, ReplyReceiver, SentMessages } from '../../core/mcp-in/ports.js';
 import type { ProxyShipCrew } from '../../core/mcp-out/hand-call.js';
 import type { StatementDoor } from '../../core/mcp-out/state-party.js';
 import type { ProxyShipDoor } from '../../core/parties/ports.js';
@@ -9,7 +9,7 @@ export declare function createRestFleetDoor(fleetUrl: string, options?: {
     busyWaitsMs?: readonly number[];
     random?: () => number;
     wait?: (waitMs: number) => Promise<void>;
-}): FleetDoor & ProxyShipDoor & StatementDoor & ProxyShipCrew & Discovery & CallSender & ReplyReceiver & AccountDoor & Owners & {
+}): FleetDoor & ProxyShipDoor & StatementDoor & ProxyShipCrew & Discovery & CallSender & ReplyReceiver & SentMessages & AccountDoor & Owners & {
     person: PersonShipDoor;
     gatewayInbox: GatewayInbox;
 };