@agent-native/core 0.132.2 → 0.133.1

package/corpus/templates/slides/app/pages/Index.tsx

@@ -603,7 +603,7 @@ export default function Index() {
         deckId +
         ". Wait for each `add-slide` result before calling it again; do not batch or parallelize slide writes.",
       "If the user asked for a specific slide count, keep going sequentially until that count is reached unless a tool error blocks you.",
-      "Every slide is rendered into a fixed native canvas (default 16:9 is 960x540 CSS pixels). Keep each slide within the density limits in AGENTS.md; split dense source material across more slides instead of packing it tightly.",
+      "Every slide is rendered into a fixed native canvas (default 16:9 is 960x540 CSS pixels, with 740x380px available inside standard 80px 110px padding). Keep the main content within that fit budget; split dense source material across more slides instead of packing it tightly. Never use zoom, transform: scale(), clipping, or scroll overflow to hide content overflow, and keep body text at least 16px.",
       "Each slide's --content must be full HTML. Slide HTML templates are in your AGENTS.md.",
       "Do NOT use create-deck (the deck already exists). Do NOT call db-schema, the resources tool, or search-files.",
     ].join("\n");

package/corpus/templates/slides/changelog/2026-07-31-design-system-details-now-show-their-source-and-indexing-sta.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+Design system details now show their source and indexing status while they load with a clean placeholder.

package/corpus/templates/slides/changelog/2026-07-31-design-system-indexing-keeps-your-chosen-name-when-you-uploa.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-31
+---
+
+Design-system indexing keeps your chosen name when you upload a Figma file, supports unstar, and shares new organization systems with teammates.

package/corpus/templates/slides/changelog/2026-07-31-design-system-setup-keeps-focus-rings-visible-and-uses-a-sim.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+Design system setup keeps focus rings visible and uses a simpler dialog title.

package/corpus/templates/slides/changelog/2026-07-31-skip-prompt-is-now-available-in-the-new-deck-prompt-header.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+Skip prompt is now available in the new deck prompt header

package/corpus/templates/slides/changelog/2026-07-31-slides-now-detect-real-text-and-box-overflow-across-the-deck.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+Slides now detect real text and box overflow across the deck and verify bounded repairs.

package/corpus/templates/slides/changelog/2026-07-31-the-agent-native-logo-stays-visible-when-the-sidebar-is-coll.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+The Agent Native logo stays visible when the sidebar is collapsed and toggles the sidebar when clicked.

package/corpus/templates/slides/server/handlers/design-systems.ts

@@ -127,6 +127,7 @@ export const createDesignSystem = defineEventHandler(async (event) => {
       isDefault: body.isDefault ?? false,
       ownerEmail: email,
       orgId: orgId ?? null,
+      visibility: orgId ? "org" : "private",
       createdAt: now,
       updatedAt: now,
     });

package/corpus/templates/slides/server/handlers/index-design-system-sources.ts

@@ -52,6 +52,7 @@ export const indexDesignSystemSources = defineEventHandler(async (event) => {
         ownerEmail: email ?? session.email,
         orgId: orgId ?? null,
         projectName,
+        sourceKind: "figma",
       });
       return {
         ...result,

package/corpus/templates/slides/server/lib/builder-design-system-proxy.ts

@@ -2,8 +2,9 @@ import {
   createBuilderDesignSystemProxyFields,
   localBuilderDesignSystemId,
   type BuilderDesignSystemIndexResult,
+  type BuilderDesignSystemSourceKind,
 } from "@agent-native/core/server";
-import { eq } from "drizzle-orm";
+import { and, eq, isNull } from "drizzle-orm";
 import { nanoid } from "nanoid";
 
 import { getDb, schema } from "../db/index.js";
@@ -14,12 +15,14 @@ export async function upsertBuilderProxyDesignSystem({
   orgId,
   projectName,
   description,
+  sourceKind,
 }: {
   result: BuilderDesignSystemIndexResult;
   ownerEmail: string;
   orgId?: string | null;
   projectName?: string;
   description?: string;
+  sourceKind?: BuilderDesignSystemSourceKind;
 }) {
   const db = getDb();
   const now = new Date().toISOString();
@@ -31,20 +34,25 @@ export async function upsertBuilderProxyDesignSystem({
     projectName,
     description,
     surface: "slides",
+    sourceKind,
   });
   const [existing] = await db
     .select({
       id: schema.designSystems.id,
       ownerEmail: schema.designSystems.ownerEmail,
+      orgId: schema.designSystems.orgId,
     })
     .from(schema.designSystems)
     .where(eq(schema.designSystems.id, baseLocalDesignSystemId))
     .limit(1);
+  const existingBelongsToScope =
+    existing?.ownerEmail === ownerEmail &&
+    (existing?.orgId ?? null) === (orgId ?? null);
   const localDesignSystemId =
-    existing && existing.ownerEmail !== ownerEmail
+    existing && !existingBelongsToScope
       ? `${baseLocalDesignSystemId}-${nanoid(8)}`
       : baseLocalDesignSystemId;
-  if (existing && existing.ownerEmail === ownerEmail) {
+  if (existingBelongsToScope) {
     await db
       .update(schema.designSystems)
       .set({
@@ -60,7 +68,17 @@ export async function upsertBuilderProxyDesignSystem({
     const [ownedSystem] = await db
       .select({ id: schema.designSystems.id })
       .from(schema.designSystems)
-      .where(eq(schema.designSystems.ownerEmail, ownerEmail))
+      .where(
+        orgId
+          ? and(
+              eq(schema.designSystems.ownerEmail, ownerEmail),
+              eq(schema.designSystems.orgId, orgId),
+            )
+          : and(
+              eq(schema.designSystems.ownerEmail, ownerEmail),
+              isNull(schema.designSystems.orgId),
+            ),
+      )
       .limit(1);
     await db.insert(schema.designSystems).values({
       id: localDesignSystemId,
@@ -72,6 +90,7 @@ export async function upsertBuilderProxyDesignSystem({
       isDefault: !ownedSystem,
       ownerEmail,
       orgId: orgId ?? null,
+      visibility: orgId ? "org" : "private",
       createdAt: now,
       updatedAt: now,
     });

package/corpus/templates/slides/server/plugins/agent-chat.ts

@@ -12,6 +12,7 @@ const SLIDES_BACKGROUND_RUN_SOFT_TIMEOUT_MS = 13 * 60_000;
 
 const INITIAL_TOOL_NAMES = [
   "view-screen",
+  "get-layout-overflows",
   "list-decks",
   "get-deck",
   "get-deck-reference-context",
@@ -49,6 +50,10 @@ export default createAgentChatPlugin({
   prepareRequest: prepareSlidesChatAttachments,
   systemPrompt: `You are an AI deck assistant. You create, edit, import, export, style, share, and navigate decks through actions and shared application state.
 
+Layout-fit workflow is strict. When the user asks to fix overflow, first call view-screen and inspect the deck-wide layout-fit section. If it says measurements are unknown, do not claim the deck fits. Call get-layout-overflows when you need the structured per-slide results. Read the affected slides with get-deck, then make one bounded structural repair pass with one patch-slide operation per affected slide in a single patch-deck call. Wait for the action result and verify the persisted HTML with get-deck before saying it is fixed. If a fresh measurement still reports overflow, make at most one focused follow-up repair based on that measurement; never loop, repeatedly re-measure, or claim success after a chat response alone.
+
+Fit means the main content fits the native content area. A small outer-wrapper spill is tolerated by the measurement, but cards, text, columns, and other visible content must fit. Never use zoom, transform: scale(), overflow: hidden/scroll, clipping, or a smaller-than-16px body font to hide overflow. Preserve manually positioned freeform objects and their data-slide-object-id values; repair normal-flow structure, copy, gaps, or slide padding instead. A successful action result must include the affected slide IDs; if it does not, report that no verified write occurred.
+
 Provider-specific Slides actions are shortcuts, not limits. If a first-class action cannot express the exact Google Drive endpoint, file metadata field, export format, query, request body, pagination mode, payload shape, or API version needed, call provider-api-catalog and provider-api-docs as needed, then call provider-api-request against the real provider API. Use the raw provider API escape hatch instead of weakening the answer or claiming Slides cannot do something the underlying Google Drive API can do.
 
 Slides' Google Drive provider API uses the user's connected Google Docs OAuth account. The drive.file scope is intentionally limited to files the user selected or the app created. For large Drive file lists or metadata sweeps, pass stageAs and pagination options to provider-api-request, then use query-staged-dataset to count, filter, group, or project the staged rows.`,

package/corpus/templates/slides/server/plugins/creative-context.ts

@@ -9,7 +9,7 @@ import {
   type CreativeContextProjectionAdapters,
 } from "@agent-native/creative-context/server";
 import { listContextSources } from "@agent-native/creative-context/store";
-import { desc, eq } from "drizzle-orm";
+import { and, desc, eq, isNull } from "drizzle-orm";
 import { nanoid } from "nanoid";
 
 import { getDb, schema } from "../db/index.js";
@@ -52,10 +52,21 @@ function isProjectedLayout(value: unknown): value is ProjectedLayoutTemplate {
 async function ownedDesignSystems() {
   const ownerEmail = getRequestUserEmail();
   if (!ownerEmail) throw new Error("no authenticated user");
+  const orgId = getRequestOrgId();
   return getDb()
     .select()
     .from(schema.designSystems)
-    .where(eq(schema.designSystems.ownerEmail, ownerEmail))
+    .where(
+      orgId
+        ? and(
+            eq(schema.designSystems.ownerEmail, ownerEmail),
+            eq(schema.designSystems.orgId, orgId),
+          )
+        : and(
+            eq(schema.designSystems.ownerEmail, ownerEmail),
+            isNull(schema.designSystems.orgId),
+          ),
+    )
     .orderBy(
       desc(schema.designSystems.isDefault),
       desc(schema.designSystems.updatedAt),
@@ -67,6 +78,7 @@ async function ensureLayoutTarget() {
   if (existing[0]) return existing[0];
   const ownerEmail = getRequestUserEmail();
   if (!ownerEmail) throw new Error("no authenticated user");
+  const orgId = getRequestOrgId();
   const now = new Date().toISOString();
   const row = {
     id: nanoid(),
@@ -78,7 +90,8 @@ async function ensureLayoutTarget() {
       "Prefer approved Creative Context layout templates unchanged before adapting or generating a new layout.",
     isDefault: true,
     ownerEmail,
-    orgId: getRequestOrgId(),
+    orgId,
+    visibility: orgId ? ("org" as const) : ("private" as const),
     createdAt: now,
     updatedAt: now,
   };

package/corpus/templates/slides/server/workspace-defaults.ts

@@ -4,7 +4,7 @@ import {
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
 import { getOrgSetting, mutateOrgSetting } from "@agent-native/core/settings";
-import { and, eq, sql } from "drizzle-orm";
+import { and, eq, isNull, sql } from "drizzle-orm";
 
 import { getDb, schema } from "./db/index.js";
 
@@ -154,6 +154,7 @@ export async function assertWorkspaceVisible(
 export async function resolveDefaultDesignSystemId(
   ownerEmail: string,
 ): Promise<string | null> {
+  const orgId = getRequestOrgId();
   const personal = await getDb()
     .select({ id: schema.designSystems.id })
     .from(schema.designSystems)
@@ -161,6 +162,9 @@ export async function resolveDefaultDesignSystemId(
       and(
         eq(schema.designSystems.ownerEmail, ownerEmail),
         eq(schema.designSystems.isDefault, true),
+        orgId
+          ? eq(schema.designSystems.orgId, orgId)
+          : isNull(schema.designSystems.orgId),
       ),
     )
     .limit(1);

package/corpus/templates/slides/shared/slide-fit.ts

@@ -0,0 +1,26 @@
+export interface SlideFitMeasurement {
+  contentHash: string;
+  contentHeight: number;
+  contentWidth: number;
+  viewportHeight: number;
+  viewportWidth: number;
+  verticalOverflow: number;
+  horizontalOverflow: number;
+  measuredAt: number;
+}
+
+export interface DeckFitState {
+  deckId: string;
+  aspectRatio?: string | null;
+  slides: Record<string, SlideFitMeasurement>;
+}
+
+/** Stable, compact identity for checking whether a measurement matches HTML. */
+export function hashSlideContent(content: string): string {
+  let hash = 2166136261;
+  for (let index = 0; index < content.length; index += 1) {
+    hash ^= content.charCodeAt(index);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16);
+}

package/corpus/templates/tasks/app/components/layout/Sidebar.tsx

@@ -126,23 +126,50 @@ export function Sidebar({
       >
         <Link
           to="/tasks"
+          onClick={(event) => {
+            if (
+              !collapsible ||
+              !onCollapsedChange ||
+              event.metaKey ||
+              event.ctrlKey ||
+              event.shiftKey ||
+              event.altKey ||
+              event.button !== 0
+            ) {
+              return;
+            }
+            event.preventDefault();
+            onCollapsedChange(!collapsed);
+          }}
           className={cn(
             "flex min-w-0 items-center rounded outline-none focus-visible:ring-2 focus-visible:ring-ring",
             collapsed ? "size-7 justify-center" : "flex-1 gap-3",
           )}
-          aria-label={collapsed ? APP_TITLE : undefined}
+          aria-label={
+            collapsible && onCollapsedChange
+              ? collapsed
+                ? t("sidebar.expandSidebar")
+                : t("sidebar.collapseSidebar")
+              : collapsed
+                ? APP_TITLE
+                : undefined
+          }
         >
           <img
             src={appPath("/agent-native-icon-light.svg")}
             alt=""
             aria-hidden="true"
-            className="block h-4 w-auto shrink-0 dark:hidden"
+            width={28}
+            height={16}
+            className="block h-4 w-7 shrink-0 object-contain object-center dark:hidden"
           />
           <img
             src={appPath("/agent-native-icon-dark.svg")}
             alt=""
             aria-hidden="true"
-            className="hidden h-4 w-auto shrink-0 dark:block"
+            width={28}
+            height={16}
+            className="hidden h-4 w-7 shrink-0 object-contain object-center dark:block"
           />
           <div className={cn("min-w-0", collapsed && "sr-only")}>
             <p className="truncate text-sm font-semibold text-sidebar-accent-foreground">

package/corpus/templates/tasks/changelog/2026-07-31-clicking-the-agent-native-logo-now-toggles-the-app-sidebar.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-31
+---
+
+Clicking the Agent Native logo now toggles the app sidebar.

package/dist/a2a/correlation.d.ts

@@ -5,7 +5,10 @@ export declare function sanitizeA2ACorrelationId(value: unknown): string | undef
 /**
  * Keep only bounded, opaque ASCII correlation identifiers. These values
  * remain telemetry hints; authentication continues to come exclusively from
- * the verified A2A token/request context.
+ * the verified A2A token/request context. `callerModel` is the one value here
+ * a receiver may act on, and only as a preference — it never reaches identity,
+ * org, access, or approval resolution, and it can only name a model the
+ * receiver's own engine already offers (see `resolveDelegatedRunModel`).
  */
 export declare function sanitizeA2ACorrelationMetadata(value: unknown): A2ACorrelationMetadata;
 //# sourceMappingURL=correlation.d.ts.map

package/dist/a2a/correlation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"correlation.d.ts","sourceRoot":"","sources":["../../src/a2a/correlation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,eAAO,MAAM,+BAA+B,MAAM,CAAC;AACnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAqBzC,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,sBAAsB,CA6CxB"}
+{"version":3,"file":"correlation.d.ts","sourceRoot":"","sources":["../../src/a2a/correlation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,eAAO,MAAM,+BAA+B,MAAM,CAAC;AACnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAuBzC,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE3E;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,sBAAsB,CAkDxB"}

package/dist/a2a/correlation.js

@@ -2,6 +2,8 @@ export const MAX_A2A_CORRELATION_VALUE_CHARS = 200;
 export const MAX_A2A_DELEGATION_HOPS = 3;
 const APP_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 const CORRELATION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]*$/;
+// Model ids also carry `/` (provider-prefixed gateway ids).
+const MODEL_HINT_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/;
 function boundedIdentifier(value, pattern) {
     if (typeof value !== "string")
         return undefined;
@@ -19,7 +21,10 @@ export function sanitizeA2ACorrelationId(value) {
 /**
  * Keep only bounded, opaque ASCII correlation identifiers. These values
  * remain telemetry hints; authentication continues to come exclusively from
- * the verified A2A token/request context.
+ * the verified A2A token/request context. `callerModel` is the one value here
+ * a receiver may act on, and only as a preference — it never reaches identity,
+ * org, access, or approval resolution, and it can only name a model the
+ * receiver's own engine already offers (see `resolveDelegatedRunModel`).
  */
 export function sanitizeA2ACorrelationMetadata(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
@@ -30,6 +35,7 @@ export function sanitizeA2ACorrelationMetadata(value) {
     const parentRunId = sanitizeA2ACorrelationId(metadata.parentRunId);
     const parentTurnId = sanitizeA2ACorrelationId(metadata.parentTurnId);
     const invocationId = sanitizeA2ACorrelationId(metadata.invocationId);
+    const callerModel = boundedIdentifier(metadata.callerModel, MODEL_HINT_PATTERN);
     const providedDelegationDepth = typeof metadata.delegationDepth === "number" &&
         Number.isInteger(metadata.delegationDepth) &&
         metadata.delegationDepth >= 0 &&
@@ -62,6 +68,7 @@ export function sanitizeA2ACorrelationMetadata(value) {
         ...(invocationId ? { invocationId } : {}),
         ...(delegationDepth !== undefined ? { delegationDepth } : {}),
         ...(visitedApps.length > 0 ? { visitedApps } : {}),
+        ...(callerModel ? { callerModel } : {}),
     };
 }
 //# sourceMappingURL=correlation.js.map

package/dist/a2a/correlation.js.map

@@ -1 +1 @@
-{"version":3,"file":"correlation.js","sourceRoot":"","sources":["../../src/a2a/correlation.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAE/D,SAAS,iBAAiB,CACxB,KAAc,EACd,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,CAAC,OAAO;QACR,OAAO,CAAC,MAAM,GAAG,+BAA+B;QAChD,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,uBAAuB,GAC3B,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;QAC5C,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC1C,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC7B,QAAQ,CAAC,eAAe,IAAI,uBAAuB;QACjD,CAAC,CAAC,QAAQ,CAAC,eAAe;QAC1B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,CAAC,CAAC;YACE,GAAG,IAAI,GAAG,CACR,QAAQ,CAAC,WAAW;iBACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;iBACxD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAC/C;SACF,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,0CAA0C;IAC1C,MAAM,eAAe,GACnB,uBAAuB,KAAK,SAAS;QACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,SAAS,CAAC;QAC9C,CAAC,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;YACtC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACtB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC","sourcesContent":["import type { A2ACorrelationMetadata } from \"./types.js\";\n\nexport const MAX_A2A_CORRELATION_VALUE_CHARS = 200;\nexport const MAX_A2A_DELEGATION_HOPS = 3;\n\nconst APP_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\nconst CORRELATION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]*$/;\n\nfunction boundedIdentifier(\n  value: unknown,\n  pattern: RegExp,\n): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  if (\n    !trimmed ||\n    trimmed.length > MAX_A2A_CORRELATION_VALUE_CHARS ||\n    !pattern.test(trimmed)\n  ) {\n    return undefined;\n  }\n  return trimmed;\n}\n\nexport function sanitizeA2ACorrelationId(value: unknown): string | undefined {\n  return boundedIdentifier(value, CORRELATION_ID_PATTERN);\n}\n\n/**\n * Keep only bounded, opaque ASCII correlation identifiers. These values\n * remain telemetry hints; authentication continues to come exclusively from\n * the verified A2A token/request context.\n */\nexport function sanitizeA2ACorrelationMetadata(\n  value: unknown,\n): A2ACorrelationMetadata {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return {};\n  const metadata = value as Record<string, unknown>;\n  const callerApp = boundedIdentifier(metadata.callerApp, APP_ID_PATTERN);\n  const callerThreadId = sanitizeA2ACorrelationId(metadata.callerThreadId);\n  const parentRunId = sanitizeA2ACorrelationId(metadata.parentRunId);\n  const parentTurnId = sanitizeA2ACorrelationId(metadata.parentTurnId);\n  const invocationId = sanitizeA2ACorrelationId(metadata.invocationId);\n  const providedDelegationDepth =\n    typeof metadata.delegationDepth === \"number\" &&\n    Number.isInteger(metadata.delegationDepth) &&\n    metadata.delegationDepth >= 0 &&\n    metadata.delegationDepth <= MAX_A2A_DELEGATION_HOPS\n      ? metadata.delegationDepth\n      : undefined;\n  const visitedApps = Array.isArray(metadata.visitedApps)\n    ? [\n        ...new Set(\n          metadata.visitedApps\n            .map((value) => boundedIdentifier(value, APP_ID_PATTERN))\n            .filter((value): value is string => !!value),\n        ),\n      ].slice(0, MAX_A2A_DELEGATION_HOPS + 1)\n    : [];\n  const pathDepth = Math.min(MAX_A2A_DELEGATION_HOPS, visitedApps.length);\n  // Damaged lineage must never reset a nested call to depth zero. Derive at\n  // least the valid path length, and fail closed at the hop limit when a peer\n  // supplied an explicit but invalid depth.\n  const delegationDepth =\n    providedDelegationDepth !== undefined\n      ? Math.max(providedDelegationDepth, pathDepth)\n      : metadata.delegationDepth !== undefined\n        ? MAX_A2A_DELEGATION_HOPS\n        : visitedApps.length > 0\n          ? pathDepth\n          : undefined;\n  return {\n    ...(callerApp ? { callerApp } : {}),\n    ...(callerThreadId ? { callerThreadId } : {}),\n    ...(parentRunId ? { parentRunId } : {}),\n    ...(parentTurnId ? { parentTurnId } : {}),\n    ...(invocationId ? { invocationId } : {}),\n    ...(delegationDepth !== undefined ? { delegationDepth } : {}),\n    ...(visitedApps.length > 0 ? { visitedApps } : {}),\n  };\n}\n"]}
+{"version":3,"file":"correlation.js","sourceRoot":"","sources":["../../src/a2a/correlation.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAC/D,4DAA4D;AAC5D,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;AAE5D,SAAS,iBAAiB,CACxB,KAAc,EACd,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,CAAC,OAAO;QACR,OAAO,CAAC,MAAM,GAAG,+BAA+B;QAChD,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,iBAAiB,CACnC,QAAQ,CAAC,WAAW,EACpB,kBAAkB,CACnB,CAAC;IACF,MAAM,uBAAuB,GAC3B,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;QAC5C,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC1C,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC7B,QAAQ,CAAC,eAAe,IAAI,uBAAuB;QACjD,CAAC,CAAC,QAAQ,CAAC,eAAe;QAC1B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,CAAC,CAAC;YACE,GAAG,IAAI,GAAG,CACR,QAAQ,CAAC,WAAW;iBACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;iBACxD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAC/C;SACF,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,0CAA0C;IAC1C,MAAM,eAAe,GACnB,uBAAuB,KAAK,SAAS;QACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,SAAS,CAAC;QAC9C,CAAC,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;YACtC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACtB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC","sourcesContent":["import type { A2ACorrelationMetadata } from \"./types.js\";\n\nexport const MAX_A2A_CORRELATION_VALUE_CHARS = 200;\nexport const MAX_A2A_DELEGATION_HOPS = 3;\n\nconst APP_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;\nconst CORRELATION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]*$/;\n// Model ids also carry `/` (provider-prefixed gateway ids).\nconst MODEL_HINT_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/;\n\nfunction boundedIdentifier(\n  value: unknown,\n  pattern: RegExp,\n): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  if (\n    !trimmed ||\n    trimmed.length > MAX_A2A_CORRELATION_VALUE_CHARS ||\n    !pattern.test(trimmed)\n  ) {\n    return undefined;\n  }\n  return trimmed;\n}\n\nexport function sanitizeA2ACorrelationId(value: unknown): string | undefined {\n  return boundedIdentifier(value, CORRELATION_ID_PATTERN);\n}\n\n/**\n * Keep only bounded, opaque ASCII correlation identifiers. These values\n * remain telemetry hints; authentication continues to come exclusively from\n * the verified A2A token/request context. `callerModel` is the one value here\n * a receiver may act on, and only as a preference — it never reaches identity,\n * org, access, or approval resolution, and it can only name a model the\n * receiver's own engine already offers (see `resolveDelegatedRunModel`).\n */\nexport function sanitizeA2ACorrelationMetadata(\n  value: unknown,\n): A2ACorrelationMetadata {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return {};\n  const metadata = value as Record<string, unknown>;\n  const callerApp = boundedIdentifier(metadata.callerApp, APP_ID_PATTERN);\n  const callerThreadId = sanitizeA2ACorrelationId(metadata.callerThreadId);\n  const parentRunId = sanitizeA2ACorrelationId(metadata.parentRunId);\n  const parentTurnId = sanitizeA2ACorrelationId(metadata.parentTurnId);\n  const invocationId = sanitizeA2ACorrelationId(metadata.invocationId);\n  const callerModel = boundedIdentifier(\n    metadata.callerModel,\n    MODEL_HINT_PATTERN,\n  );\n  const providedDelegationDepth =\n    typeof metadata.delegationDepth === \"number\" &&\n    Number.isInteger(metadata.delegationDepth) &&\n    metadata.delegationDepth >= 0 &&\n    metadata.delegationDepth <= MAX_A2A_DELEGATION_HOPS\n      ? metadata.delegationDepth\n      : undefined;\n  const visitedApps = Array.isArray(metadata.visitedApps)\n    ? [\n        ...new Set(\n          metadata.visitedApps\n            .map((value) => boundedIdentifier(value, APP_ID_PATTERN))\n            .filter((value): value is string => !!value),\n        ),\n      ].slice(0, MAX_A2A_DELEGATION_HOPS + 1)\n    : [];\n  const pathDepth = Math.min(MAX_A2A_DELEGATION_HOPS, visitedApps.length);\n  // Damaged lineage must never reset a nested call to depth zero. Derive at\n  // least the valid path length, and fail closed at the hop limit when a peer\n  // supplied an explicit but invalid depth.\n  const delegationDepth =\n    providedDelegationDepth !== undefined\n      ? Math.max(providedDelegationDepth, pathDepth)\n      : metadata.delegationDepth !== undefined\n        ? MAX_A2A_DELEGATION_HOPS\n        : visitedApps.length > 0\n          ? pathDepth\n          : undefined;\n  return {\n    ...(callerApp ? { callerApp } : {}),\n    ...(callerThreadId ? { callerThreadId } : {}),\n    ...(parentRunId ? { parentRunId } : {}),\n    ...(parentTurnId ? { parentTurnId } : {}),\n    ...(invocationId ? { invocationId } : {}),\n    ...(delegationDepth !== undefined ? { delegationDepth } : {}),\n    ...(visitedApps.length > 0 ? { visitedApps } : {}),\n    ...(callerModel ? { callerModel } : {}),\n  };\n}\n"]}

package/dist/a2a/types.d.ts

@@ -117,9 +117,11 @@ export interface A2ASourceContextReference {
     integrationTaskId: string;
 }
 /**
- * Telemetry-only cross-app correlation. Receivers must never use these
- * caller-supplied values for identity, ownership, org scoping, access, or
- * approval decisions.
+ * Telemetry-only cross-app correlation, plus `callerModel` — a preference
+ * hint. Receivers must never use any caller-supplied value here for identity,
+ * ownership, org scoping, access, or approval decisions. `callerModel` widens
+ * this channel to a preference, never to an authorization: it may at most pick
+ * a model the receiver's already-resolved engine advertises.
  */
 export interface A2ACorrelationMetadata {
     callerApp?: string;
@@ -131,6 +133,12 @@ export interface A2ACorrelationMetadata {
     delegationDepth?: number;
     /** Bounded app ids already visited, used only for cycle prevention. */
     visitedApps?: string[];
+    /**
+     * Model the caller resolved for its own turn. A hint only: the receiver
+     * honours it just when it has no model of its own, and only after bounding
+     * it to its own engine's catalog.
+     */
+    callerModel?: string;
 }
 export interface A2AHandlerContext {
     taskId: string;

package/dist/a2a/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE5D,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAIlD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,SAAS,GACjB,WAAW,GACX,SAAS,GACT,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,KAAK,CAAC;IACvB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;CACvC;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oEAAoE;IACpE,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACtC,qEAAqE;IACrE,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;IACnC,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yDAAyD;IACzD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAC5D,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,CACtB,UAAU,EAAE,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC;CAClE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE5D,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAIlD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,SAAS,GACjB,WAAW,GACX,SAAS,GACT,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,KAAK,CAAC;IACvB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;CACvC;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oEAAoE;IACpE,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACtC,qEAAqE;IACrE,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;IACnC,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yDAAyD;IACzD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC;QAC5D,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,CACtB,UAAU,EAAE,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC;CAClE"}

package/dist/a2a/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"","sourcesContent":["// A2A Protocol types (spec v0.3) + framework config types\nimport type { PublicAgentActionConfig } from \"../action.js\";\n\nexport type {\n  A2AAgentActivityPhase,\n  A2AAgentActivitySnapshot,\n  A2AAgentActivityState,\n  A2AAgentActivityToolCall,\n  A2AAgentActivityToolStatus,\n} from \"./activity.js\";\n\n// --- Parts (content atoms) ---\n\nexport interface TextPart {\n  type: \"text\";\n  text: string;\n}\n\nexport interface FilePart {\n  type: \"file\";\n  file: {\n    name?: string;\n    mimeType?: string;\n    bytes?: string;\n    uri?: string;\n  };\n}\n\nexport interface DataPart {\n  type: \"data\";\n  data: Record<string, unknown>;\n}\n\nexport type Part = TextPart | FilePart | DataPart;\n\n// --- Messages and Tasks ---\n\nexport interface Message {\n  role: \"user\" | \"agent\";\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport type TaskState =\n  | \"submitted\"\n  | \"working\"\n  | \"processing\"\n  | \"completed\"\n  | \"failed\"\n  | \"canceled\"\n  | \"input-required\";\n\nexport interface TaskStatus {\n  state: TaskState;\n  message?: Message;\n  timestamp: string;\n}\n\nexport interface Artifact {\n  name?: string;\n  description?: string;\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface Task {\n  id: string;\n  contextId?: string;\n  status: TaskStatus;\n  history?: Message[];\n  artifacts?: Artifact[];\n  metadata?: Record<string, unknown>;\n}\n\n// --- Agent Card ---\n\nexport interface AgentSkill {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  examples?: string[];\n  public?: boolean;\n  readOnly?: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  publicAgent?: PublicAgentActionConfig;\n  /**\n   * JSON Schema for the action's `input`. Advertising a skill without it tells a\n   * caller the action exists but not how to call it, so callers invoke with `{}`\n   * and get a required-property error back.\n   */\n  inputSchema?: Record<string, unknown>;\n}\n\nexport interface AgentCapabilities {\n  streaming?: boolean;\n  pushNotifications?: boolean;\n  stateTransitionHistory?: boolean;\n}\n\nexport interface AgentSecurityScheme {\n  type: string;\n  scheme?: string;\n  bearerFormat?: string;\n  in?: string;\n  name?: string;\n}\n\nexport interface AgentCard {\n  name: string;\n  description: string;\n  url: string;\n  version: string;\n  protocolVersion: \"0.3\";\n  capabilities: AgentCapabilities;\n  skills: AgentSkill[];\n  securitySchemes?: Record<string, AgentSecurityScheme>;\n  security?: Record<string, string[]>[];\n}\n\n// --- JSON-RPC ---\n\nexport interface JsonRpcRequest {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface JsonRpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: \"2.0\";\n  id: string | number | null;\n  result?: unknown;\n  error?: JsonRpcError;\n}\n\n/** One exact downstream action explicitly authorized in the caller's chat. */\nexport interface A2AApprovedAction {\n  tool: string;\n  input: unknown;\n}\n\n/** Structured provenance accepted only from an authenticated A2A caller. */\nexport interface A2ASourceContext {\n  platform: \"slack\";\n  sourceUrl: string;\n}\n\n/** Opaque reference that a receiver must resolve through its trusted Dispatch app. */\nexport interface A2ASourceContextReference {\n  platform: \"slack\";\n  integrationTaskId: string;\n}\n\n/**\n * Telemetry-only cross-app correlation. Receivers must never use these\n * caller-supplied values for identity, ownership, org scoping, access, or\n * approval decisions.\n */\nexport interface A2ACorrelationMetadata {\n  callerApp?: string;\n  callerThreadId?: string;\n  parentRunId?: string;\n  parentTurnId?: string;\n  invocationId?: string;\n  /** Number of cross-app edges already traversed by this logical request. */\n  delegationDepth?: number;\n  /** Bounded app ids already visited, used only for cycle prevention. */\n  visitedApps?: string[];\n}\n\n// --- Framework config ---\n\nexport interface A2AHandlerContext {\n  taskId: string;\n  contextId?: string;\n  /** Metadata from the caller (e.g., userEmail for identity forwarding) */\n  metadata?: Record<string, unknown>;\n  /** Current H3 event when the handler is running inside an HTTP request. */\n  event?: unknown;\n  /** Exact one-time action grants from a JWT-authenticated caller. */\n  approvedActions?: A2AApprovedAction[];\n  /** Receiver-validated provenance from a JWT-authenticated caller. */\n  sourceContext?: A2ASourceContext;\n  writeArtifact: (name: string, content: string, mimeType?: string) => string;\n}\n\nexport interface A2AHandlerResult {\n  message: Message;\n  artifacts?: Artifact[];\n  /** Optional non-terminal state requested by the handler. */\n  taskState?: Extract<TaskState, \"input-required\">;\n}\n\nexport interface A2AApprovalExecution {\n  id: string;\n  taskId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  tool: string;\n  input: unknown;\n  approvalKey: string;\n  callId: string;\n}\n\n/** One explicitly exposed read-only app action invoked without an agent loop. */\nexport interface A2AReadOnlyActionInvocation {\n  action: string;\n  input: Record<string, unknown>;\n  invocationId: string;\n}\n\nexport interface A2AReadOnlyActionResult {\n  action: string;\n  status: \"completed\" | \"failed\";\n  output: string;\n}\n\nexport type A2AHandler = (\n  message: Message,\n  context: A2AHandlerContext,\n) => Promise<A2AHandlerResult> | AsyncGenerator<Message>;\n\nexport interface A2AConfig {\n  name: string;\n  /** Canonical receiver app id used only for telemetry attribution. */\n  appId?: string;\n  description: string;\n  version?: string;\n  skills: AgentSkill[];\n  /**\n   * Skills advertised only to a caller with a verified A2A identity — the set\n   * `actions/invoke` will actually run. Anonymous card fetches never see these.\n   * Without it the card advertises the public set, which is disjoint from the\n   * invocable set, so siblings are told nothing is directly callable.\n   */\n  authenticatedSkills?: AgentSkill[];\n  /** If true, public agent-card discovery includes only explicit public-safe skills. */\n  publicSkillsOnly?: boolean;\n  handler?: A2AHandler;\n  apiKeyEnv?: string;\n  streaming?: boolean;\n  /** Route async A2A work through the app's durable background worker when available. */\n  durableBackgroundRuns?: boolean;\n  /** Execute a persisted, human-approved A2A tool call. */\n  executeApproval?: (approval: A2AApprovalExecution) => Promise<{\n    status: \"completed\" | \"failed\";\n    output: string;\n  }>;\n  /** Execute an explicitly exposed read-only action without starting a model. */\n  executeReadOnlyAction?: (\n    invocation: A2AReadOnlyActionInvocation,\n  ) => Promise<Pick<A2AReadOnlyActionResult, \"status\" | \"output\">>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/a2a/types.ts"],"names":[],"mappings":"","sourcesContent":["// A2A Protocol types (spec v0.3) + framework config types\nimport type { PublicAgentActionConfig } from \"../action.js\";\n\nexport type {\n  A2AAgentActivityPhase,\n  A2AAgentActivitySnapshot,\n  A2AAgentActivityState,\n  A2AAgentActivityToolCall,\n  A2AAgentActivityToolStatus,\n} from \"./activity.js\";\n\n// --- Parts (content atoms) ---\n\nexport interface TextPart {\n  type: \"text\";\n  text: string;\n}\n\nexport interface FilePart {\n  type: \"file\";\n  file: {\n    name?: string;\n    mimeType?: string;\n    bytes?: string;\n    uri?: string;\n  };\n}\n\nexport interface DataPart {\n  type: \"data\";\n  data: Record<string, unknown>;\n}\n\nexport type Part = TextPart | FilePart | DataPart;\n\n// --- Messages and Tasks ---\n\nexport interface Message {\n  role: \"user\" | \"agent\";\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport type TaskState =\n  | \"submitted\"\n  | \"working\"\n  | \"processing\"\n  | \"completed\"\n  | \"failed\"\n  | \"canceled\"\n  | \"input-required\";\n\nexport interface TaskStatus {\n  state: TaskState;\n  message?: Message;\n  timestamp: string;\n}\n\nexport interface Artifact {\n  name?: string;\n  description?: string;\n  parts: Part[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface Task {\n  id: string;\n  contextId?: string;\n  status: TaskStatus;\n  history?: Message[];\n  artifacts?: Artifact[];\n  metadata?: Record<string, unknown>;\n}\n\n// --- Agent Card ---\n\nexport interface AgentSkill {\n  id: string;\n  name: string;\n  description: string;\n  tags?: string[];\n  examples?: string[];\n  public?: boolean;\n  readOnly?: boolean;\n  requiresAuth?: boolean;\n  isConsequential?: boolean;\n  publicAgent?: PublicAgentActionConfig;\n  /**\n   * JSON Schema for the action's `input`. Advertising a skill without it tells a\n   * caller the action exists but not how to call it, so callers invoke with `{}`\n   * and get a required-property error back.\n   */\n  inputSchema?: Record<string, unknown>;\n}\n\nexport interface AgentCapabilities {\n  streaming?: boolean;\n  pushNotifications?: boolean;\n  stateTransitionHistory?: boolean;\n}\n\nexport interface AgentSecurityScheme {\n  type: string;\n  scheme?: string;\n  bearerFormat?: string;\n  in?: string;\n  name?: string;\n}\n\nexport interface AgentCard {\n  name: string;\n  description: string;\n  url: string;\n  version: string;\n  protocolVersion: \"0.3\";\n  capabilities: AgentCapabilities;\n  skills: AgentSkill[];\n  securitySchemes?: Record<string, AgentSecurityScheme>;\n  security?: Record<string, string[]>[];\n}\n\n// --- JSON-RPC ---\n\nexport interface JsonRpcRequest {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface JsonRpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: \"2.0\";\n  id: string | number | null;\n  result?: unknown;\n  error?: JsonRpcError;\n}\n\n/** One exact downstream action explicitly authorized in the caller's chat. */\nexport interface A2AApprovedAction {\n  tool: string;\n  input: unknown;\n}\n\n/** Structured provenance accepted only from an authenticated A2A caller. */\nexport interface A2ASourceContext {\n  platform: \"slack\";\n  sourceUrl: string;\n}\n\n/** Opaque reference that a receiver must resolve through its trusted Dispatch app. */\nexport interface A2ASourceContextReference {\n  platform: \"slack\";\n  integrationTaskId: string;\n}\n\n/**\n * Telemetry-only cross-app correlation, plus `callerModel` — a preference\n * hint. Receivers must never use any caller-supplied value here for identity,\n * ownership, org scoping, access, or approval decisions. `callerModel` widens\n * this channel to a preference, never to an authorization: it may at most pick\n * a model the receiver's already-resolved engine advertises.\n */\nexport interface A2ACorrelationMetadata {\n  callerApp?: string;\n  callerThreadId?: string;\n  parentRunId?: string;\n  parentTurnId?: string;\n  invocationId?: string;\n  /** Number of cross-app edges already traversed by this logical request. */\n  delegationDepth?: number;\n  /** Bounded app ids already visited, used only for cycle prevention. */\n  visitedApps?: string[];\n  /**\n   * Model the caller resolved for its own turn. A hint only: the receiver\n   * honours it just when it has no model of its own, and only after bounding\n   * it to its own engine's catalog.\n   */\n  callerModel?: string;\n}\n\n// --- Framework config ---\n\nexport interface A2AHandlerContext {\n  taskId: string;\n  contextId?: string;\n  /** Metadata from the caller (e.g., userEmail for identity forwarding) */\n  metadata?: Record<string, unknown>;\n  /** Current H3 event when the handler is running inside an HTTP request. */\n  event?: unknown;\n  /** Exact one-time action grants from a JWT-authenticated caller. */\n  approvedActions?: A2AApprovedAction[];\n  /** Receiver-validated provenance from a JWT-authenticated caller. */\n  sourceContext?: A2ASourceContext;\n  writeArtifact: (name: string, content: string, mimeType?: string) => string;\n}\n\nexport interface A2AHandlerResult {\n  message: Message;\n  artifacts?: Artifact[];\n  /** Optional non-terminal state requested by the handler. */\n  taskState?: Extract<TaskState, \"input-required\">;\n}\n\nexport interface A2AApprovalExecution {\n  id: string;\n  taskId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  tool: string;\n  input: unknown;\n  approvalKey: string;\n  callId: string;\n}\n\n/** One explicitly exposed read-only app action invoked without an agent loop. */\nexport interface A2AReadOnlyActionInvocation {\n  action: string;\n  input: Record<string, unknown>;\n  invocationId: string;\n}\n\nexport interface A2AReadOnlyActionResult {\n  action: string;\n  status: \"completed\" | \"failed\";\n  output: string;\n}\n\nexport type A2AHandler = (\n  message: Message,\n  context: A2AHandlerContext,\n) => Promise<A2AHandlerResult> | AsyncGenerator<Message>;\n\nexport interface A2AConfig {\n  name: string;\n  /** Canonical receiver app id used only for telemetry attribution. */\n  appId?: string;\n  description: string;\n  version?: string;\n  skills: AgentSkill[];\n  /**\n   * Skills advertised only to a caller with a verified A2A identity — the set\n   * `actions/invoke` will actually run. Anonymous card fetches never see these.\n   * Without it the card advertises the public set, which is disjoint from the\n   * invocable set, so siblings are told nothing is directly callable.\n   */\n  authenticatedSkills?: AgentSkill[];\n  /** If true, public agent-card discovery includes only explicit public-safe skills. */\n  publicSkillsOnly?: boolean;\n  handler?: A2AHandler;\n  apiKeyEnv?: string;\n  streaming?: boolean;\n  /** Route async A2A work through the app's durable background worker when available. */\n  durableBackgroundRuns?: boolean;\n  /** Execute a persisted, human-approved A2A tool call. */\n  executeApproval?: (approval: A2AApprovalExecution) => Promise<{\n    status: \"completed\" | \"failed\";\n    output: string;\n  }>;\n  /** Execute an explicitly exposed read-only action without starting a model. */\n  executeReadOnlyAction?: (\n    invocation: A2AReadOnlyActionInvocation,\n  ) => Promise<Pick<A2AReadOnlyActionResult, \"status\" | \"output\">>;\n}\n"]}

package/dist/agent/engine/ai-sdk-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-sdk-engine.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/ai-sdk-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAqB7E,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAInB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,QAAA,MAAM,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,kBAAkB,CAyDpE,CAAC;AAMF,QAAA,MAAM,uBAAuB,EAKxB,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAEnC,QAAA,MAAM,yBAAyB,EAKf,MAAM,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAEzD,QAAA,MAAM,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAStD,CAAC;AAEF,QAAA,MAAM,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CASpD,CAAC;AA4CF,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmYD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,EACvB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,WAAW,CAEb;AA8CD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,GAClB,CAAC"}
+{"version":3,"file":"ai-sdk-engine.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/ai-sdk-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA4B7E,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAInB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,QAAA,MAAM,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,kBAAkB,CAyDpE,CAAC;AAMF,QAAA,MAAM,uBAAuB,EAKxB,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAEnC,QAAA,MAAM,yBAAyB,EAKf,MAAM,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;AAEzD,QAAA,MAAM,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAStD,CAAC;AAEF,QAAA,MAAM,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CASpD,CAAC;AA4CF,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA2YD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,EACvB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,WAAW,CAEb;AA8CD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,GAClB,CAAC"}