@agenticprimitives/a2a 0.0.0-alpha.4 → 0.0.0-alpha.40

package/dist/standard/caller.js

@@ -0,0 +1,176 @@
+// THE RUNTIME AS ITS OWN CALLER — spec 372 S3c.
+//
+// A person reaches the standard surface with a Home session bearer. An outside runtime — Claude Code, Goose,
+// a deploy bot — has no Home session and must never be given one: it is not a person, and a bearer minted for
+// a person is exactly the credential-sharing this estate exists to avoid. What it holds instead is what every
+// agent here holds: a SESSION WIRE (spec 350 §8) — a narrow delegation from its own Smart Agent to a key it
+// controls, timestamp-bounded, pinning the one skill it may exercise, signed by the agent's custody credential
+// and revocable on chain by that custodian at any moment.
+//
+// So the runtime signs each request with that key and presents the wire beside it. The server verifies, per
+// request and fail-closed: the wire's delegator IS the agent claimed; the wire's shape is sound (bounded,
+// pinned, never the any-skill sentinel); the raw signature recovers to the wire's delegate; the wire itself
+// verifies against the delegator on chain (ERC-1271) and is NOT revoked. Revoking the wire kills the caller
+// at the next request, everywhere, with no list to update.
+//
+// TWO SCHEMES, NOT A FALLBACK (ADR-0013). `Bearer` is a person's Home session; `A2A-Session` is an agent's
+// wire. The scheme token in the header selects ONE mechanism, and it fails closed on its own terms — neither
+// is ever tried after the other fails. Which one arrived says WHO is asking. Neither says what they may do.
+import { keccak256, toBytes } from 'viem';
+import { parseSessionWrappedSignature, verifySessionWrappedSignature, wrapSessionSignature } from '../session-wire.js';
+/** The Authorization scheme an agent presents its session wire under. */
+export const SESSION_AUTH_SCHEME = 'A2A-Session';
+/** The skill a session wire must pin to reach the standard surface: asking this agent, and nothing else.
+ *  A wire that names other selectors and not this one is refused — pinning is the point. */
+export const STANDARD_SURFACE_SKILL = 'harness.ask';
+/** The digest a caller signs — keccak over stable JSON, the a2a body-hash convention. */
+export function callerAssertionDigest(a) {
+    return keccak256(toBytes(JSON.stringify({
+        v: 'ap.a2a.caller-assertion.v1',
+        agent: a.agent.toLowerCase(),
+        method: a.method,
+        bodyHash: a.bodyHash.toLowerCase(),
+        issuedAt: a.issuedAt,
+        audience: a.audience.replace(/\/$/, '').toLowerCase(),
+    })));
+}
+/** keccak over the raw request body, exactly as it arrived — never over a re-serialized parse. */
+export const requestBodyHash = (raw) => keccak256(toBytes(raw));
+const b64urlDecode = (s) => {
+    const padded = s.replace(/-/g, '+').replace(/_/g, '/') + '='.repeat((4 - (s.length % 4)) % 4);
+    return atob(padded);
+};
+const b64urlEncode = (s) => btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+/** Build the `Authorization` header value a runtime sends. */
+export function sessionAuthorizationHeader(a) {
+    return `${SESSION_AUTH_SCHEME} ${b64urlEncode(JSON.stringify(a))}`;
+}
+/** Read an `A2A-Session` header. Returns null for any other scheme (a `Bearer` is a person's, not ours) and
+ *  for anything malformed — never a partial assertion. */
+export function parseSessionAuthorization(header) {
+    const m = new RegExp(`^${SESSION_AUTH_SCHEME}\\s+(.+)$`, 'i').exec((header ?? '').trim());
+    if (!m)
+        return null;
+    try {
+        const a = JSON.parse(b64urlDecode(m[1].trim()));
+        if (typeof a.agent !== 'string' || !/^0x[0-9a-fA-F]{40}$/.test(a.agent))
+            return null;
+        if (typeof a.method !== 'string' || !a.method)
+            return null;
+        if (typeof a.bodyHash !== 'string' || !/^0x[0-9a-fA-F]{64}$/.test(a.bodyHash))
+            return null;
+        if (typeof a.issuedAt !== 'number' || !Number.isFinite(a.issuedAt))
+            return null;
+        if (typeof a.audience !== 'string' || !a.audience)
+            return null;
+        if (typeof a.signature !== 'string' || !a.signature.startsWith('0x'))
+            return null;
+        return a;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The `principal` implementation for agents. Returns `{ agent, kind: 'agent' }` on every leg passing, and
+ * `null` otherwise — the server answers 401 and no method runs.
+ *
+ * SINGLE-USE. An accepted assertion's digest is SPENT: a captured request cannot be replayed while it is
+ * still fresh. With `claim` bound to the estate's single writer this holds everywhere; without it, only
+ * within this isolate — which on a fanned-out edge is no protection at all, and was observed live before
+ * the ledger existed. The claim happens AFTER the signature verifies, so an unauthenticated caller can
+ * spend nothing and write nothing.
+ */
+export function sessionWirePrincipal(deps) {
+    const maxAgeSec = deps.maxAgeSec ?? 120;
+    const skewSec = deps.skewSec ?? 30;
+    const now = deps.now ?? (() => Date.now());
+    const seen = new Map();
+    const refuse = (reason, agent) => { deps.onRefused?.(reason, agent); return null; };
+    return async (request) => {
+        const a = parseSessionAuthorization(request.headers.get('authorization'));
+        if (!a)
+            return null; // not our scheme — say nothing; another principal may own it
+        const nowSec = Math.floor(now() / 1000);
+        if (a.issuedAt > nowSec + skewSec)
+            return refuse('assertion is dated ahead', a.agent);
+        if (a.issuedAt < nowSec - maxAgeSec)
+            return refuse('assertion is stale', a.agent);
+        const audience = new URL(request.url).origin;
+        if (a.audience.replace(/\/$/, '').toLowerCase() !== audience.toLowerCase())
+            return refuse(`assertion is for ${a.audience}, not ${audience}`, a.agent);
+        let raw;
+        try {
+            raw = await request.clone().text();
+        }
+        catch {
+            return refuse('request body unreadable', a.agent);
+        }
+        if (requestBodyHash(raw).toLowerCase() !== a.bodyHash.toLowerCase())
+            return refuse('assertion does not bind this body', a.agent);
+        let method;
+        try {
+            method = JSON.parse(raw).method;
+        }
+        catch {
+            return refuse('body is not JSON', a.agent);
+        }
+        if (method !== a.method)
+            return refuse(`assertion is for ${a.method}, body calls ${String(method)}`, a.agent);
+        const digest = callerAssertionDigest(a);
+        // A cheap local reject first, so a replay landing on the isolate that served the original costs no
+        // chain read; the authoritative claim is below, after the signature verifies.
+        for (const [k, at] of seen)
+            if (at < nowSec - maxAgeSec - skewSec)
+                seen.delete(k);
+        if (seen.has(digest))
+            return refuse('assertion already used', a.agent);
+        const skill = typeof deps.skill === 'function' ? deps.skill(a.method) : (deps.skill ?? STANDARD_SURFACE_SKILL);
+        if (!skill)
+            return refuse(`no wire admits the method ${a.method} here`, a.agent);
+        const wrapped = parseSessionWrappedSignature(a.signature) !== null;
+        const ok = wrapped
+            ? await verifySessionWrappedSignature({
+                signer: a.agent.toLowerCase(),
+                digest,
+                signature: a.signature,
+                enforcers: deps.enforcers,
+                verifyDelegationSig: deps.verifyDelegationSig,
+                isRevoked: deps.isRevoked,
+                skill,
+                now: now(),
+            }).catch(() => false)
+            : deps.verifyAgentSignature
+                ? await deps.verifyAgentSignature(a.agent.toLowerCase(), digest, a.signature).catch(() => false)
+                : false;
+        if (!ok) {
+            return refuse(wrapped
+                ? 'session wire did not verify (shape, signature, delegator or revocation)'
+                : deps.verifyAgentSignature ? 'the agent\'s own signature did not verify' : 'a direct agent signature is not admitted here', a.agent);
+        }
+        // SPENT, now that it is known to be genuine: the single writer decides who was first. A ledger that
+        // cannot be reached refuses the call — a replay window is not something to fail open into (ADR-0013).
+        if (deps.claim) {
+            const claimed = await deps.claim(digest, (a.issuedAt + maxAgeSec + skewSec) * 1000).catch(() => false);
+            if (!claimed)
+                return refuse('assertion already used', a.agent);
+        }
+        seen.set(digest, nowSec);
+        return { agent: a.agent.toLowerCase(), kind: 'agent' };
+    };
+}
+/** THE CLIENT HALF — what a runtime holds to speak as itself: its agent, its session wire, and a signer over the
+ *  runtime's OWN key (a port: the private key never enters this package). Returns the per-request header builder
+ *  `createStandardA2aClient({ signRequest })` takes; each request's assertion binds the method, the body hash, the
+ *  audience and the moment, and is spent once at the addressed agent (S3c). The same code path the S3c gate drove. */
+export function sessionWireSigner(o) {
+    return async (raw, method) => {
+        const base = {
+            agent: o.agent.toLowerCase(), method, bodyHash: requestBodyHash(raw),
+            issuedAt: Math.floor((o.now ?? Date.now)() / 1000), audience: o.audience,
+        };
+        const sig = await o.signDigest(callerAssertionDigest(base));
+        return { authorization: sessionAuthorizationHeader({ ...base, signature: wrapSessionSignature(o.wire, sig) }) };
+    };
+}
+//# sourceMappingURL=caller.js.map

package/dist/standard/caller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.js","sourceRoot":"","sources":["../../src/standard/caller.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,6GAA6G;AAC7G,8GAA8G;AAC9G,8GAA8G;AAC9G,4GAA4G;AAC5G,+GAA+G;AAC/G,0DAA0D;AAC1D,EAAE;AACF,4GAA4G;AAC5G,0GAA0G;AAC1G,4GAA4G;AAC5G,4GAA4G;AAC5G,2DAA2D;AAC3D,EAAE;AACF,2GAA2G;AAC3G,6GAA6G;AAC7G,4GAA4G;AAC5G,OAAO,EAAE,SAAS,EAAE,OAAO,EAA0B,MAAM,MAAM,CAAC;AAElE,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,oBAAoB,EAAyB,MAAM,oBAAoB,CAAC;AAG9I,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD;4FAC4F;AAC5F,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAsBpD,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CAAC,CAAuC;IAC3E,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,CAAC,EAAE,4BAA4B;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;QAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;KACtD,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAW,EAAO,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAE7E,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE;IACzC,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE/G,8DAA8D;AAC9D,MAAM,UAAU,0BAA0B,CAAC,CAAoB;IAC7D,OAAO,GAAG,mBAAmB,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;0DAC0D;AAC1D,MAAM,UAAU,yBAAyB,CAAC,MAAiC;IACzE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,mBAAmB,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAA+B,CAAC;QAC/E,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrF,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClF,OAAO,CAAsB,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AA2CD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3G,OAAO,KAAK,EAAE,OAAgB,EAA6B,EAAE;QAC3D,MAAM,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,6DAA6D;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO;YAAE,OAAO,MAAM,CAAC,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,QAAQ,GAAG,MAAM,GAAG,SAAS;YAAE,OAAO,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,QAAQ,SAAS,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAEtJ,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACxG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC,mCAAmC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjI,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC,MAAM,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACxH,IAAI,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,gBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9G,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,mGAAmG;QACnG,8EAA8E;QAC9E,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO;gBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,sBAAsB,CAAC,CAAC;QAC/G,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,6BAA6B,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;QACnE,MAAM,EAAE,GAAG,OAAO;YAChB,CAAC,CAAC,MAAM,6BAA6B,CAAC;gBAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAa;gBACxC,MAAM;gBACN,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK;gBACL,GAAG,EAAE,GAAG,EAAE;aACX,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YACvB,CAAC,CAAC,IAAI,CAAC,oBAAoB;gBACzB,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAa,EAAE,MAAM,EAAE,CAAC,CAAC,SAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;gBAClH,CAAC,CAAC,KAAK,CAAC;QACZ,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,MAAM,CAAC,OAAO;gBACnB,CAAC,CAAC,yEAAyE;gBAC3E,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,+CAA+C,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1I,CAAC;QAED,oGAAoG;QACpG,sGAAsG;QACtG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACvG,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC;AAKD;;;sHAGsH;AACtH,MAAM,UAAU,iBAAiB,CAAC,CAQjC;IACC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAyC;YACjD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC;YACpE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACzE,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,aAAa,EAAE,0BAA0B,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAa,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC,CAAC;AACJ,CAAC"}

package/dist/standard/client.d.ts

@@ -0,0 +1,53 @@
+import type { AgentCardV1, MessageV1, PartV1, TaskV1 } from './types.js';
+export interface ResolvedAgentCard {
+    card: AgentCardV1;
+    /** SHA-256 over the card's bytes as served, hex — what a record pins and a later fetch is compared to. */
+    cardDigest: string;
+    /** The JSON-RPC 1.x interface the card publishes. */
+    endpoint: string;
+    cardUrl: string;
+}
+/** The A2A 1.0 JSON-RPC endpoint a card publishes (top-level `protocolVersion` covers a released card's interfaces). */
+export declare function jsonRpcEndpointOf(card: AgentCardV1 & {
+    protocolVersion?: string;
+}): string | null;
+/** Fetch a card, digest its bytes, read its endpoint. A card without a 1.x JSON-RPC interface is refused. */
+export declare function resolveAgentCard(cardUrl: string, fetchImpl?: typeof fetch, expectDigest?: string): Promise<ResolvedAgentCard>;
+export interface StandardA2aClientOptions {
+    endpoint: string;
+    fetch?: typeof fetch;
+    /** Extra headers on every call — a bearer, a session wire. Never a mandate. */
+    headers?: Record<string, string>;
+    /** Headers computed PER REQUEST from the raw body — the runtime's `A2A-Session` assertion (`sessionWireSigner`),
+     *  which binds the method, the body hash, the audience and the moment. Static `headers` cannot express that. */
+    signRequest?: (raw: string, method: string) => Promise<Record<string, string>>;
+}
+export interface SendResult {
+    task?: TaskV1;
+    message?: MessageV1;
+}
+export interface StandardA2aClient {
+    sendMessage(parts: PartV1[], opts?: {
+        metadata?: Record<string, unknown>;
+        extensions?: string[];
+        contextId?: string;
+        taskId?: string;
+    }): Promise<SendResult>;
+    getTask(id: string): Promise<TaskV1>;
+    /** Poll until the task is terminal or the deadline passes; the last task seen is returned either way. */
+    awaitTask(id: string, opts?: {
+        timeoutMs?: number;
+        everyMs?: number;
+    }): Promise<TaskV1>;
+    /** Send one text message and wait: the reply's text (status message + text artifacts) and the task. */
+    ask(text: string, opts?: {
+        metadata?: Record<string, unknown>;
+        timeoutMs?: number;
+    }): Promise<{
+        text: string;
+        task?: TaskV1;
+        message?: MessageV1;
+    }>;
+}
+export declare function createStandardA2aClient(o: StandardA2aClientOptions): StandardA2aClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/standard/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/standard/client.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAmB,MAAM,YAAY,CAAC;AAG1F,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,WAAW,CAAC;IAClB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD,wHAAwH;AACxH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAIjG;AAED,6GAA6G;AAC7G,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,KAAa,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAY1I;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;oHACgH;IAChH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,UAAU;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE;AAIlE,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7J,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,yGAAyG;IACzG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,uGAAuG;IACvG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACrJ;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,wBAAwB,GAAG,iBAAiB,CA4CtF"}

package/dist/standard/client.js

@@ -0,0 +1,88 @@
+import { TERMINAL_STATES } from './types.js';
+async function sha256Hex(text) {
+    const buf = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(text));
+    return `0x${[...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, '0')).join('')}`;
+}
+/** The A2A 1.0 JSON-RPC endpoint a card publishes (top-level `protocolVersion` covers a released card's interfaces). */
+export function jsonRpcEndpointOf(card) {
+    const top = /^1\./.test(String(card.protocolVersion ?? ''));
+    const hit = (card.supportedInterfaces ?? []).find((i) => i.protocolBinding === 'JSONRPC' && (/^1\./.test(String(i.protocolVersion ?? '')) || (i.protocolVersion === undefined && top)) && /^https:\/\//.test(String(i.url ?? '')));
+    return hit?.url ?? null;
+}
+/** Fetch a card, digest its bytes, read its endpoint. A card without a 1.x JSON-RPC interface is refused. */
+export async function resolveAgentCard(cardUrl, fetchImpl = fetch, expectDigest) {
+    if (!/^https:\/\//.test(cardUrl))
+        throw new Error('an agent card is fetched over https only');
+    const res = await fetchImpl(cardUrl, { headers: { accept: 'application/json' } });
+    if (!res.ok)
+        throw new Error(`the card at ${cardUrl} answered ${res.status}`);
+    const text = await res.text();
+    let card;
+    try {
+        card = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`the card at ${cardUrl} is not JSON`);
+    }
+    const cardDigest = await sha256Hex(text);
+    if (expectDigest && expectDigest.toLowerCase() !== cardDigest.toLowerCase())
+        throw new Error(`the card at ${cardUrl} is not the one pinned (${expectDigest.slice(0, 14)}… expected, ${cardDigest.slice(0, 14)}… served)`);
+    const endpoint = jsonRpcEndpointOf(card);
+    if (!endpoint)
+        throw new Error(`${card.name ?? cardUrl} publishes no A2A 1.x JSON-RPC interface`);
+    return { card, cardDigest, endpoint, cardUrl };
+}
+const hex32 = () => `0x${[...crypto.getRandomValues(new Uint8Array(32))].map((b) => b.toString(16).padStart(2, '0')).join('')}`;
+export function createStandardA2aClient(o) {
+    const fetchImpl = o.fetch ?? fetch;
+    let seq = 0;
+    const rpc = async (method, params) => {
+        const raw = JSON.stringify({ jsonrpc: '2.0', id: ++seq, method, params });
+        const signed = o.signRequest ? await o.signRequest(raw, method) : {};
+        const res = await fetchImpl(o.endpoint, { method: 'POST', headers: { 'content-type': 'application/json', accept: 'application/json', 'a2a-version': '1.0', ...(o.headers ?? {}), ...signed }, body: raw });
+        const body = (await res.json().catch(() => null));
+        if (!body)
+            throw new Error(`${o.endpoint} answered ${res.status} with no JSON-RPC body`);
+        if ('error' in body)
+            throw new Error(`${o.endpoint} ${method}: ${body.error.code} ${body.error.message}`);
+        return body.result;
+    };
+    const textOf = (t, m) => {
+        const parts = [];
+        const take = (ps) => { for (const p of ps ?? [])
+            if (typeof p.text === 'string' && p.text.trim())
+                parts.push(p.text.trim()); };
+        take(m?.parts);
+        take(t?.status?.message?.parts);
+        for (const a of t?.artifacts ?? [])
+            take(a.parts);
+        return parts.join('\n');
+    };
+    const client = {
+        async sendMessage(parts, opts) {
+            const message = { messageId: hex32(), role: 'ROLE_USER', parts, ...(opts?.contextId ? { contextId: opts.contextId } : {}), ...(opts?.taskId ? { taskId: opts.taskId } : {}), ...(opts?.extensions ? { extensions: opts.extensions } : {}), ...(opts?.metadata ? { metadata: opts.metadata } : {}) };
+            return rpc('SendMessage', { message });
+        },
+        async getTask(id) { return rpc('GetTask', { id }); },
+        async awaitTask(id, opts) {
+            const deadline = Date.now() + (opts?.timeoutMs ?? 20_000);
+            let last = await client.getTask(id);
+            while (!TERMINAL_STATES.has(last.status.state) && last.status.state !== 'TASK_STATE_INPUT_REQUIRED' && last.status.state !== 'TASK_STATE_AUTH_REQUIRED' && Date.now() < deadline) {
+                await new Promise((r) => setTimeout(r, opts?.everyMs ?? 500));
+                last = await client.getTask(id);
+            }
+            return last;
+        },
+        async ask(text, opts) {
+            const sent = await client.sendMessage([{ text }], opts?.metadata ? { metadata: opts.metadata } : undefined);
+            if (sent.message)
+                return { text: textOf(undefined, sent.message), message: sent.message };
+            if (!sent.task)
+                throw new Error('the agent answered with neither a task nor a message');
+            const task = TERMINAL_STATES.has(sent.task.status.state) ? sent.task : await client.awaitTask(sent.task.id, { timeoutMs: opts?.timeoutMs });
+            return { text: textOf(task), task };
+        },
+    };
+    return client;
+}
+//# sourceMappingURL=client.js.map

package/dist/standard/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/standard/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAW7C,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,iBAAiB,CAAC,IAAgD;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnO,OAAO,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,YAA0B,KAAK,EAAE,YAAqB;IAC5G,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,cAAc,CAAC,CAAC;IAAC,CAAC;IAChH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,YAAY,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,2BAA2B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;IAC1N,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,0CAA0C,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAcD,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAWxI,MAAM,UAAU,uBAAuB,CAAC,CAA2B;IACjE,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,KAAK,EAAM,MAAc,EAAE,MAAe,EAAc,EAAE;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3M,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA2B,CAAC;QAC5E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,aAAa,GAAG,CAAC,MAAM,wBAAwB,CAAC,CAAC;QACzF,IAAI,OAAO,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC,MAAW,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,CAAa,EAAU,EAAE;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,EAAa,EAAE,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;YAAE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACf,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,MAAM,GAAsB;QAChC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI;YAC3B,MAAM,OAAO,GAAc,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/S,OAAO,GAAG,CAAa,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,GAAG,CAAS,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;YAC1D,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,2BAA2B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,0BAA0B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBACjL,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI;YAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5G,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5I,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/standard/delegated.d.ts

@@ -0,0 +1,121 @@
+import type { Hex } from 'viem';
+import type { TaskState } from '@agenticprimitives/fulfillment';
+import type { DelegationWireV1 } from '../session-wire.js';
+import type { MessageV1, PartV1, TaskV1, TaskStateV1 } from './types.js';
+export declare const AP_DELEGATED_TASK_EXTENSION = "https://agenticprimitives.org/a2a/delegated-task/v1";
+/** What a `SendMessage` carries to create a delegation-authorized task. Rides in
+ *  `message.metadata[AP_DELEGATED_TASK_EXTENSION]`, with the URI also listed in `message.extensions`. */
+export interface DelegatedTaskV1 {
+    extension: typeof AP_DELEGATED_TASK_EXTENSION;
+    version: 1;
+    /** The grant that authorizes this task. Its delegate is the party the runtime checks against `requester`. */
+    delegation: DelegationWireV1;
+    /** The party the delegation was issued to — the principal's delegate, on whose behalf the task runs. */
+    requester: string;
+    /** The skill the receiving agent should run. Unknown ⇒ the task is rejected, as before. */
+    skill: string;
+    /** The SA that authored this message (signs the envelope). */
+    sender: string;
+    /** keccak over the input body — signed, and what binds `message.parts` to the signature. */
+    bodyHash: Hex;
+    /** Where the body will live in the assignee's vault. A placeholder the runtime overwrites with where it
+     *  actually landed; not signed, because `bodyHash` is what binds the content. */
+    bodyRef: {
+        owner: string;
+        recordType: string;
+    };
+    /** The sender's signature over `hashA2aMessage(envelope)` — re-derived and re-checked by the runtime. */
+    signature: Hex;
+    /** Seconds since the epoch, as the sender wrote it into the signed envelope. */
+    createdAt: number;
+    /** An existing task to resubmit against (the auth-required loop): a fresh grant for a parked task. */
+    taskId?: Hex;
+}
+/** The exact envelope the runtime verifies — rebuilt from the 1.0 message plus the extension, so
+ *  `hashA2aMessage` over it is byte-for-byte what the sender signed. */
+export interface ProfileMessageV1 {
+    messageId: string;
+    threadId?: string;
+    sender: string;
+    skill: string;
+    bodyRef: {
+        owner: string;
+        recordType: string;
+    };
+    bodyHash: Hex;
+    signature: Hex;
+    createdAt: number;
+}
+/** Rebuild the signed envelope from what arrived on the 1.0 wire. */
+export declare function toProfileMessage(message: MessageV1, ext: DelegatedTaskV1): ProfileMessageV1;
+/** The declaration a card makes so a peer learns this agent takes delegated tasks before calling. */
+export declare const DELEGATED_TASK_CARD_EXTENSION: {
+    readonly uri: "https://agenticprimitives.org/a2a/delegated-task/v1";
+    readonly required: false;
+    readonly description: "A task authorized by an ERC-7710 delegation carried on the message; the caller is authenticated by the Authorization header and must be the delegation's delegate. Adds the method GetTaskArtifact { id, artifactId } — a party reads an artifact BODY, which the task projection carries only as a ref and a hash (A2A-INV-04).";
+};
+/** The extension's one method beyond the core set: the artifact-body read a party is entitled to. */
+export declare const GET_TASK_ARTIFACT_METHOD: "GetTaskArtifact";
+/**
+ * Read the extension off a message. `null` when the message does not declare it — that is an ordinary
+ * conversational message, not an error. A message that DECLARES it and carries a malformed body is an
+ * error, and says which field: silently treating it as conversational would run the wrong executor under
+ * an authority the sender believed they had presented.
+ */
+export declare function readDelegatedTask(message: MessageV1 | null | undefined): DelegatedTaskV1 | {
+    error: string;
+} | null;
+/** Attach the extension to a message a client is about to send. */
+export declare function withDelegatedTask(message: MessageV1, req: Omit<DelegatedTaskV1, 'extension' | 'version'>): MessageV1;
+/** The input body a delegated task carries: one data part, so the raw body hash the caller signed binds it. */
+export declare const delegatedInputPart: (input: unknown) => PartV1;
+/** Read the input back off a delegated message. */
+export declare function delegatedInput(message: MessageV1): unknown;
+/** The profile's task states are the 1.0 states under other names — one for one, no remainder. */
+export declare const TASK_STATE_V1: Readonly<Record<TaskState, TaskStateV1>>;
+/** The runtime's name for a 1.0 state. `TASK_STATE_UNSPECIFIED` has no runtime name and is a `failed`
+ *  reading — a task in no state is not a task anyone should act on. */
+export declare function taskStateFromV1(state: TaskStateV1 | string): TaskState;
+/** What the projection needs from the runtime's record — structural, so this file imports no runtime. */
+export interface DelegatedTaskSourceV1 {
+    task: {
+        taskId: string;
+        state: TaskState;
+        assignee: string;
+        permissionGrantRef?: string;
+    };
+    principal: string;
+    sender: string;
+    skill: string;
+    inbound?: Array<{
+        messageId: string;
+        sender: string;
+        threadId?: string;
+        createdAt?: number;
+        bodyRef?: unknown;
+        bodyHash?: string;
+    }>;
+    artifacts?: Array<{
+        artifactId: string;
+        artifactKind?: string;
+        bodyRef?: unknown;
+        bodyHash?: string;
+    }>;
+    error?: string;
+    rev?: number;
+    updatedAt?: number;
+}
+/**
+ * Project a delegation-authorized task into the A2A 1.0 shape a client reads.
+ *
+ * BODIES DO NOT COME ALONG (A2A-INV-04). A message body and an artifact body live in the assignee's vault;
+ * what travels is the REF and the hash, in `metadata`, exactly as the profile's `tasks/get` returned refs
+ * only. A party reads a body with the artifact op it was already entitled to use — the projection widens
+ * nothing, and inlining here would have quietly turned a ref into a disclosure.
+ */
+export declare function delegatedTaskAsV1(src: DelegatedTaskSourceV1): TaskV1;
+/** The parties to a delegated task: its sender, the principal they act for, and the assignee. A `GetTask`
+ *  or `CancelTask` from anyone else is answered as though the task did not exist — telling a stranger that
+ *  it does is itself a disclosure (the profile's own rule, kept). */
+export declare function isPartyToDelegatedTask(task: TaskV1, agent: string | null | undefined): boolean;
+//# sourceMappingURL=delegated.d.ts.map

package/dist/standard/delegated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated.d.ts","sourceRoot":"","sources":["../../src/standard/delegated.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAErF,eAAO,MAAM,2BAA2B,wDAAwD,CAAC;AAEjG;yGACyG;AACzG,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,2BAA2B,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC;IACX,6GAA6G;IAC7G,UAAU,EAAE,gBAAgB,CAAC;IAC7B,wGAAwG;IACxG,SAAS,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,QAAQ,EAAE,GAAG,CAAC;IACd;qFACiF;IACjF,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,yGAAyG;IACzG,SAAS,EAAE,GAAG,CAAC;IACf,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,MAAM,CAAC,EAAE,GAAG,CAAC;CACd;AAED;wEACwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC;IACd,SAAS,EAAE,GAAG,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,gBAAgB,CAW3F;AAED,qGAAqG;AACrG,eAAO,MAAM,6BAA6B;;;;CAIhC,CAAC;AAEX,qGAAqG;AACrG,eAAO,MAAM,wBAAwB,EAAG,iBAA0B,CAAC;AAYnE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4BnH;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,SAAS,CAMpH;AAED,+GAA+G;AAC/G,eAAO,MAAM,kBAAkB,UAAW,OAAO,KAAG,MAAmC,CAAC;AAExF,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAG1D;AAED,kGAAkG;AAClG,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CASlE,CAAC;AAMF;uEACuE;AACvE,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpI,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAqCpE;AAED;;qEAEqE;AACrE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO9F"}