@agent-native/core 0.101.10 → 0.101.11

package/corpus/templates/mail/server/lib/attachment-upload-ticket.ts

@@ -0,0 +1,234 @@
+import crypto from "node:crypto";
+
+import { getDbExec, isPostgres } from "@agent-native/core/db";
+import { getUserSetting } from "@agent-native/core/settings";
+import { nanoid } from "nanoid";
+
+import { extensionForUpload, mimeTypeForUpload } from "./media-upload.js";
+
+const SETTING_KEY = "mail-attachment-upload-ticket";
+const TICKET_TTL_MS = 5 * 60 * 1000;
+const MAX_PENDING_TICKETS = 20;
+const MAX_CAS_ATTEMPTS = 8;
+
+export interface AttachmentUploadTicket extends Record<string, unknown> {
+  uploadId: string;
+  filename: string;
+  originalName: string;
+  mimeType: string;
+  tokenHash: string;
+  expiresAt: number;
+}
+
+interface AttachmentUploadTickets extends Record<string, unknown> {
+  tickets: Record<string, AttachmentUploadTicket>;
+}
+
+function tokenHash(token: string): string {
+  return crypto.createHash("sha256").update(token).digest("hex");
+}
+
+function encodeOwner(ownerEmail: string): string {
+  return Buffer.from(ownerEmail, "utf8").toString("base64url");
+}
+
+function decodeOwner(token: string): string | null {
+  const ownerPart = token.split(".", 1)[0];
+  if (!ownerPart) return null;
+  try {
+    const owner = Buffer.from(ownerPart, "base64url").toString("utf8");
+    return owner.includes("@") ? owner : null;
+  } catch {
+    return null;
+  }
+}
+
+function hashesMatch(left: string, right: string): boolean {
+  const leftBuffer = Buffer.from(left, "utf8");
+  const rightBuffer = Buffer.from(right, "utf8");
+  if (leftBuffer.length !== rightBuffer.length) return false;
+  return crypto.timingSafeEqual(leftBuffer, rightBuffer);
+}
+
+function settingStorageKey(ownerEmail: string): string {
+  return `u:${ownerEmail}:${SETTING_KEY}`;
+}
+
+function settingsTable(): string {
+  return isPostgres() ? "public.settings" : "settings";
+}
+
+function parseTickets(raw: string | null): AttachmentUploadTickets {
+  if (!raw) return { tickets: {} };
+  try {
+    const parsed = JSON.parse(raw) as Partial<AttachmentUploadTickets>;
+    if (!parsed.tickets || typeof parsed.tickets !== "object") {
+      return { tickets: {} };
+    }
+    return {
+      tickets: Object.fromEntries(
+        Object.entries(parsed.tickets).filter(
+          ([uploadId, ticket]) =>
+            uploadId &&
+            ticket &&
+            typeof ticket === "object" &&
+            ticket.uploadId === uploadId,
+        ),
+      ),
+    };
+  } catch {
+    return { tickets: {} };
+  }
+}
+
+function pruneTickets(
+  tickets: Record<string, AttachmentUploadTicket>,
+  now: number,
+): Record<string, AttachmentUploadTicket> {
+  return Object.fromEntries(
+    Object.entries(tickets)
+      .filter(
+        ([, ticket]) =>
+          Number.isFinite(ticket.expiresAt) && ticket.expiresAt >= now,
+      )
+      .sort(([, left], [, right]) => right.expiresAt - left.expiresAt)
+      .slice(0, MAX_PENDING_TICKETS),
+  );
+}
+
+async function readTicketsRow(
+  ownerEmail: string,
+): Promise<{ raw: string | null; collection: AttachmentUploadTickets }> {
+  // This initializes the framework-owned settings table without duplicating
+  // its schema/startup logic. The raw read below deliberately bypasses the
+  // per-request settings cache because compare-and-swap retries need fresh data.
+  await getUserSetting(ownerEmail, SETTING_KEY);
+  const { rows } = await getDbExec().execute({
+    sql: `SELECT value FROM ${settingsTable()} WHERE key = ?`,
+    args: [settingStorageKey(ownerEmail)],
+  });
+  const raw = rows.length ? String(rows[0].value ?? rows[0][0]) : null;
+  return { raw, collection: parseTickets(raw) };
+}
+
+async function compareAndSwapTickets(
+  ownerEmail: string,
+  expectedRaw: string | null,
+  collection: AttachmentUploadTickets,
+): Promise<boolean> {
+  const value = JSON.stringify(collection);
+  const key = settingStorageKey(ownerEmail);
+  const client = getDbExec();
+  if (expectedRaw === null) {
+    const result = await client.execute({
+      sql: isPostgres()
+        ? `INSERT INTO ${settingsTable()} (key, value, updated_at) VALUES (?, ?, ?) ON CONFLICT (key) DO NOTHING`
+        : `INSERT OR IGNORE INTO ${settingsTable()} (key, value, updated_at) VALUES (?, ?, ?)`,
+      args: [key, value, Date.now()],
+    });
+    return result.rowsAffected === 1;
+  }
+  const result = await client.execute({
+    sql: `UPDATE ${settingsTable()} SET value = ?, updated_at = ? WHERE key = ? AND value = ?`,
+    args: [value, Date.now(), key, expectedRaw],
+  });
+  return result.rowsAffected === 1;
+}
+
+export async function createAttachmentUploadTicket(
+  ownerEmail: string,
+  originalName: string,
+): Promise<AttachmentUploadTicket & { token: string }> {
+  const uploadId = nanoid(12);
+  const filename = `${uploadId}${extensionForUpload(originalName)}`;
+  const token = `${encodeOwner(ownerEmail)}.${crypto.randomBytes(32).toString("base64url")}`;
+  const ticket: AttachmentUploadTicket = {
+    uploadId,
+    filename,
+    originalName,
+    mimeType: mimeTypeForUpload(originalName),
+    tokenHash: tokenHash(token),
+    expiresAt: Date.now() + TICKET_TTL_MS,
+  };
+
+  for (let attempt = 0; attempt < MAX_CAS_ATTEMPTS; attempt += 1) {
+    const { raw, collection } = await readTicketsRow(ownerEmail);
+    const tickets = pruneTickets(
+      // Put the new ticket first so stable sorting keeps it when many tickets
+      // share the same millisecond expiry at the collection limit.
+      { [uploadId]: ticket, ...collection.tickets },
+      Date.now(),
+    );
+    if (await compareAndSwapTickets(ownerEmail, raw, { tickets })) {
+      return { ...ticket, token };
+    }
+  }
+  throw new Error("Could not reserve an attachment upload ticket");
+}
+
+export async function verifyAttachmentUploadTicket(
+  uploadId: string,
+  token: string,
+): Promise<{ ownerEmail: string; ticket: AttachmentUploadTicket } | null> {
+  const ownerEmail = decodeOwner(token);
+  if (!ownerEmail) return null;
+
+  for (let attempt = 0; attempt < MAX_CAS_ATTEMPTS; attempt += 1) {
+    const { raw, collection } = await readTicketsRow(ownerEmail);
+    const tickets = pruneTickets(collection.tickets, Date.now());
+    const ticket = tickets[uploadId];
+    if (JSON.stringify(tickets) !== JSON.stringify(collection.tickets)) {
+      if (!(await compareAndSwapTickets(ownerEmail, raw, { tickets })))
+        continue;
+    }
+    if (
+      !ticket ||
+      typeof ticket.tokenHash !== "string" ||
+      !hashesMatch(ticket.tokenHash, tokenHash(token))
+    ) {
+      return null;
+    }
+    return { ownerEmail, ticket };
+  }
+  return null;
+}
+
+/**
+ * Atomically validates and removes a one-time upload capability.
+ *
+ * The caller must claim immediately before the storage side effect. Once this
+ * returns a ticket it cannot be reclaimed, even if storage later fails. That
+ * fail-closed behavior prevents retries from turning an ambiguous write into a
+ * replay vulnerability.
+ */
+export async function claimAttachmentUploadTicket(
+  uploadId: string,
+  token: string,
+): Promise<{ ownerEmail: string; ticket: AttachmentUploadTicket } | null> {
+  const ownerEmail = decodeOwner(token);
+  if (!ownerEmail) return null;
+
+  for (let attempt = 0; attempt < MAX_CAS_ATTEMPTS; attempt += 1) {
+    const { raw, collection } = await readTicketsRow(ownerEmail);
+    const tickets = pruneTickets(collection.tickets, Date.now());
+    const ticket = tickets[uploadId];
+    if (
+      !ticket ||
+      typeof ticket.tokenHash !== "string" ||
+      !hashesMatch(ticket.tokenHash, tokenHash(token))
+    ) {
+      if (JSON.stringify(tickets) !== JSON.stringify(collection.tickets)) {
+        if (!(await compareAndSwapTickets(ownerEmail, raw, { tickets }))) {
+          continue;
+        }
+      }
+      return null;
+    }
+
+    delete tickets[uploadId];
+    if (await compareAndSwapTickets(ownerEmail, raw, { tickets })) {
+      return { ownerEmail, ticket };
+    }
+  }
+  return null;
+}

package/corpus/templates/mail/server/lib/mail-connector-catalog.ts

@@ -1,8 +1,12 @@
 /**
  * Deliberately narrow authenticated MCP surface for Mail.
  *
- * External callers may read inbox coverage through list-emails. Other actions
- * remain available through the in-app agent, ask_app, or an explicit
- * full-catalog connection; tool-search alone never makes them callable.
+ * External callers may read inbox coverage and mint a short-lived attachment
+ * upload capability. Other actions remain available through the in-app agent,
+ * ask_app, or an explicit full-catalog connection; tool-search alone never
+ * makes them callable.
  */
-export const MAIL_CONNECTOR_CATALOG = ["list-emails"] as const;
+export const MAIL_CONNECTOR_CATALOG = [
+  "list-emails",
+  "create-attachment-upload",
+] as const;

package/corpus/templates/mail/server/lib/media-upload.ts

@@ -0,0 +1,114 @@
+import fs from "node:fs";
+import path from "node:path";
+
+import { uploadFile } from "@agent-native/core/file-upload";
+
+import { getStoredUpload, putStoredUpload } from "./upload-store.js";
+
+const UPLOADS_DIR = path.resolve("data/uploads");
+
+const MIME_MAP: Record<string, string> = {
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".svg": "image/svg+xml",
+  ".pdf": "application/pdf",
+  ".txt": "text/plain",
+  ".csv": "text/csv",
+  ".doc": "application/msword",
+  ".docx":
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  ".xls": "application/vnd.ms-excel",
+  ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  ".zip": "application/zip",
+};
+
+export const MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
+
+export interface StoredMediaUpload {
+  url: string;
+  filename: string;
+  originalName: string;
+  mimeType: string;
+  size: number;
+  provider?: string;
+}
+
+export class MediaStorageSetupError extends Error {
+  readonly storageSetupRequired = true;
+}
+
+export function extensionForUpload(originalName: string): string {
+  return path.extname(originalName).toLowerCase() || ".bin";
+}
+
+export function mimeTypeForUpload(originalName: string): string {
+  return (
+    MIME_MAP[extensionForUpload(originalName)] || "application/octet-stream"
+  );
+}
+
+export function uploadsDirectory(): string {
+  return UPLOADS_DIR;
+}
+
+export async function storeMediaUpload(input: {
+  ownerEmail: string;
+  data: Uint8Array;
+  filename: string;
+  originalName: string;
+}): Promise<StoredMediaUpload> {
+  if (input.data.byteLength > MAX_UPLOAD_BYTES) {
+    throw new Error("File too large (max 10 MB)");
+  }
+
+  const mimeType = mimeTypeForUpload(input.originalName);
+  const payload = {
+    url: `/api/media/${input.filename}`,
+    filename: input.filename,
+    originalName: input.originalName,
+    mimeType,
+    size: input.data.byteLength,
+  };
+
+  try {
+    const uploaded = await uploadFile({
+      data: input.data,
+      filename: input.originalName,
+      mimeType,
+      ownerEmail: input.ownerEmail,
+      recordAsset: false,
+    });
+    if (uploaded?.url) {
+      await putStoredUpload(input.ownerEmail, {
+        ...payload,
+        url: uploaded.url,
+        createdAt: Date.now(),
+      });
+      const persisted = await getStoredUpload(input.ownerEmail, input.filename);
+      if (persisted?.url !== uploaded.url) {
+        throw new Error("Uploaded file metadata did not persist");
+      }
+      return { ...payload, url: uploaded.url, provider: uploaded.provider };
+    }
+  } catch (error) {
+    if (process.env.NODE_ENV === "production") throw error;
+  }
+
+  if (process.env.NODE_ENV === "production") {
+    throw new MediaStorageSetupError(
+      "File storage is not configured. Connect Builder.io or another upload provider before attaching files in hosted environments.",
+    );
+  }
+
+  fs.mkdirSync(UPLOADS_DIR, { recursive: true });
+  const filePath = path.join(UPLOADS_DIR, input.filename);
+  fs.writeFileSync(filePath, input.data);
+  const storedSize = fs.statSync(filePath).size;
+  if (storedSize !== input.data.byteLength) {
+    throw new Error("Uploaded file did not persist completely");
+  }
+  return payload;
+}

package/corpus/templates/mail/server/plugins/auth.ts

@@ -51,5 +51,13 @@ export default createAuthPlugin({
   // GMAIL_PUSH_AUDIENCE is configured.
   // Cloud Scheduler POSTs to /api/gmail/watch/renew every 6h for watch
   // lifecycle; same OIDC-verification pattern.
-  publicPaths: ["/api/gmail/push", "/api/gmail/watch/renew", "/api/tracking"],
+  // Attachment upload capabilities carry their own short-lived, owner-bound
+  // bearer credential because a local MCP caller cannot attach the browser's
+  // session cookie to the subsequent raw-byte PUT.
+  publicPaths: [
+    "/api/gmail/push",
+    "/api/gmail/watch/renew",
+    "/api/tracking",
+    "/api/media/attachment-upload",
+  ],
 });

package/corpus/templates/mail/server/routes/api/media/attachment-upload/[uploadId].put.ts

@@ -0,0 +1 @@
+export { uploadAttachmentWithTicket as default } from "../../../../handlers/media.js";

package/dist/a2a/client.d.ts

@@ -1,4 +1,4 @@
-import type { AgentCard, Message, Task } from "./types.js";
+import type { A2AApprovedAction, AgentCard, Message, Task } from "./types.js";
 export declare class A2ATaskTimeoutError extends Error {
     readonly taskId: string;
     readonly lastTask: Task;
@@ -51,6 +51,7 @@ export declare class A2AClient {
     send(message: Message, opts?: {
         contextId?: string;
         metadata?: Record<string, unknown>;
+        approvedActions?: A2AApprovedAction[];
         /**
          * If true, ask the server to return the task immediately in `working`
          * state and process the handler in the background. The caller should
@@ -77,6 +78,7 @@ export declare class A2AClient {
     sendAndWait(message: Message, opts?: {
         contextId?: string;
         metadata?: Record<string, unknown>;
+        approvedActions?: A2AApprovedAction[];
         /** Total time to wait for completion. Default 5 min. */
         timeoutMs?: number;
         /** Poll interval. Default 2s. */
@@ -106,6 +108,8 @@ export declare function callAgent(url: string, text: string, opts?: {
     orgSecret?: string;
     /** Origin used to build links back to the receiving app. */
     requestOrigin?: string;
+    /** Exact downstream actions explicitly authorized in the caller's chat. */
+    approvedActions?: A2AApprovedAction[];
     /**
      * Use async/poll instead of a single blocking POST. Recommended for
      * cross-app calls that may exceed a synchronous serverless request budget.

package/dist/a2a/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/a2a/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,SAAS,EAGT,OAAO,EACP,IAAI,EACL,MAAM,YAAY,CAAC;AAEpB,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,YAAY,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAU5D;CACF;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC,GACA,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAgB,2BAA2B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,kBAAkB,CAAgB;IAC1C,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAElC,YACE,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAepE;IAED;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAuBrC;IAED,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,mBAAmB;YAQb,GAAG;IA+CX,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAUvC;IAEK,IAAI,CACR,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC;;;;;;;WAOG;QACH,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,OAAO,CAAC,IAAI,CAAC,CAef;IAED;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3C;IAED;;;;;;;;OAQG;IACG,WAAW,CACf,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,wDAAwD;QACxD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,iCAAiC;QACjC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,oEAAoE;QACpE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;KACjC,GACA,OAAO,CAAC,IAAI,CAAC,CA2Bf;IAEM,MAAM,CACX,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAChE,cAAc,CAAC,IAAI,CAAC,CAsEtB;YAEa,wBAAwB;YAyBxB,QAAQ;CA2BvB;AAgFD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CACjC,GACA,OAAO,CAAC,MAAM,CAAC,CAwEjB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/a2a/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,iBAAiB,EACjB,SAAS,EAGT,OAAO,EACP,IAAI,EACL,MAAM,YAAY,CAAC;AAEpB,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,YAAY,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAU5D;CACF;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC,GACA,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAgB,2BAA2B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,kBAAkB,CAAgB;IAC1C,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAElC,YACE,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAepE;IAED;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAuBrC;IAED,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,mBAAmB;YAQb,GAAG;IA+CX,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAUvC;IAEK,IAAI,CACR,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;QACtC;;;;;;;WAOG;QACH,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,OAAO,CAAC,IAAI,CAAC,CAkBf;IAED;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3C;IAED;;;;;;;;OAQG;IACG,WAAW,CACf,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;QACtC,wDAAwD;QACxD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,iCAAiC;QACjC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,oEAAoE;QACpE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;KACjC,GACA,OAAO,CAAC,IAAI,CAAC,CAmCf;IAEM,MAAM,CACX,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAChE,cAAc,CAAC,IAAI,CAAC,CAsEtB;YAEa,wBAAwB;YAyBxB,QAAQ;CA2BvB;AAgFD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACtC;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CACjC,GACA,OAAO,CAAC,MAAM,CAAC,CA8EjB"}

package/dist/a2a/client.js

@@ -160,6 +160,9 @@ export class A2AClient {
             message,
             contextId: opts?.contextId,
             metadata: opts?.metadata,
+            ...(opts?.approvedActions?.length
+                ? { approvedActions: opts.approvedActions }
+                : {}),
             ...(opts?.async ? { async: true } : {}),
         });
         if (response.error) {
@@ -190,9 +193,17 @@ export class A2AClient {
         const submitted = await this.send(message, {
             contextId: opts?.contextId,
             metadata: opts?.metadata,
+            ...(opts?.approvedActions?.length
+                ? { approvedActions: opts.approvedActions }
+                : {}),
             async: true,
         });
-        const terminalStates = new Set(["completed", "failed", "canceled"]);
+        const terminalStates = new Set([
+            "completed",
+            "failed",
+            "canceled",
+            "input-required",
+        ]);
         if (terminalStates.has(submitted.status.state))
             return submitted;
         const timeoutMs = opts?.timeoutMs ?? 5 * 60_000;
@@ -430,6 +441,9 @@ export async function callAgent(url, text, opts) {
                 task = await client.sendAndWait(message, {
                     contextId: opts?.contextId,
                     metadata,
+                    ...(opts?.approvedActions?.length
+                        ? { approvedActions: opts.approvedActions }
+                        : {}),
                     timeoutMs: opts?.timeoutMs,
                     pollIntervalMs: opts?.pollIntervalMs,
                     onUpdate: opts?.onUpdate,
@@ -439,6 +453,9 @@ export async function callAgent(url, text, opts) {
                 task = await client.send(message, {
                     contextId: opts?.contextId,
                     metadata,
+                    ...(opts?.approvedActions?.length
+                        ? { approvedActions: opts.approvedActions }
+                        : {}),
                 });
             }
             // Extract text from the response