@botbotgo/agent-harness 0.0.218 → 0.0.219

package/README.md

@@ -1024,7 +1024,7 @@ ACP transport notes:
 - `serveAcpHttp(runtime)` exposes JSON-RPC over HTTP plus SSE runtime events so remote operator surfaces can connect without importing the runtime in-process.
 - ACP transport validation now covers the reference-client core flow: capability discovery, request submit, session lookup, request lookup, invalid-JSON handling, notification calls without response ids, stdio JSON-RPC, and HTTP plus SSE runtime notifications.
 - For the thinnest editor or CLI starter, begin with `agent-harness acp serve --workspace . --transport stdio` and mirror the `examples/protocol-hello-world/app/acp-stdio-hello-world.mjs` wire shape. Applications that want an in-process reference client can use `createAcpStdioClient(...)` to issue JSON-RPC requests and route runtime notifications without hand-rolling line parsing.
-- `serveA2aHttp(runtime)` exposes an A2A-compatible HTTP JSON-RPC bridge plus agent card discovery, mapping both existing methods such as `message/send` and A2A v1.0 PascalCase methods such as `SendMessage`, `GetTask`, `ListTasks`, `CancelTask`, `SubscribeToTask`, and `GetExtendedAgentCard` onto the existing session/request runtime surface. The v1.0 path publishes `supportedInterfaces`, `TASK_STATE_*` statuses, the `{ task }` `SendMessage` wrapper, an extended agent card with runtime discovery metadata, and explicit unsupported errors for streaming or push notifications.
+- `serveA2aHttp(runtime)` exposes an A2A-compatible HTTP JSON-RPC bridge plus agent card discovery, mapping both existing methods such as `message/send` and A2A v1.0 PascalCase methods such as `SendMessage`, `GetTask`, `ListTasks`, `CancelTask`, `SubscribeToTask`, and `GetExtendedAgentCard` onto the existing session/request runtime surface. The bridge now advertises both `1.0` and `0.3` JSON-RPC interfaces, validates `A2A-Version`, records `A2A-Extensions` into runtime invocation metadata, publishes `TASK_STATE_*` statuses plus the `{ task }` `SendMessage` wrapper, and still returns explicit unsupported errors for streaming or push notifications.
 - `serveAgUiHttp(runtime)` exposes an AG-UI-compatible HTTP SSE bridge that projects runtime lifecycle, text output, upstream thinking, step progress, and tool calls onto `RUN_*`, `TEXT_MESSAGE_*`, `THINKING_TEXT_MESSAGE_*`, `STEP_*`, and `TOOL_CALL_*` events for UI clients.
 - `createRuntimeMcpServer(runtime)` and `serveRuntimeMcpOverStdio(runtime)` expose the persisted runtime control surface itself as MCP tools, including sessions, requests, approvals, artifacts, events, and package export helpers.
 - `listRequestEvents(...)` and `exportRequestPackage(...)` are the request-first inspection helpers.

package/README.zh.md

@@ -982,7 +982,7 @@ ACP transport 说明：
 - `serveAcpHttp(runtime)` 提供基于 HTTP 的 JSON-RPC 与 SSE runtime events，适合远程界面或独立控制面接入。
 - ACP transport 现已覆盖核心参考客户端流程验证：capability discovery、request submit、session lookup、request lookup、invalid JSON 处理、无 id notification 不返回响应，以及 stdio JSON-RPC 与 HTTP + SSE runtime notifications。
 - 如果要从最薄的一层 editor / CLI starter 开始，优先用 `agent-harness acp serve --workspace . --transport stdio`，并直接参考 `examples/protocol-hello-world/app/acp-stdio-hello-world.mjs` 的 wire shape。需要在应用内使用 reference client 时，可直接用 `createAcpStdioClient(...)` 发起 JSON-RPC 请求并分流 runtime notifications，避免每个 sidecar 自己重写 line parsing。
-- `serveA2aHttp(runtime)` 提供 A2A HTTP JSON-RPC bridge 与 agent card discovery，同时兼容 `message/send` 这类旧方法，以及 `SendMessage`、`GetTask`、`ListTasks`、`CancelTask`、`SubscribeToTask`、`GetExtendedAgentCard` 这类 A2A v1.0 PascalCase 方法，并统一映射到现有 session/request 运行记录。v1.0 路径会发布 `supportedInterfaces`、`TASK_STATE_*` 状态、`SendMessage` 的 `{ task }` wrapper、带 runtime discovery metadata 的 extended agent card，并对 streaming 或 push notification 返回明确 unsupported error。
+- `serveA2aHttp(runtime)` 提供 A2A HTTP JSON-RPC bridge 与 agent card discovery，同时兼容 `message/send` 这类旧方法，以及 `SendMessage`、`GetTask`、`ListTasks`、`CancelTask`、`SubscribeToTask`、`GetExtendedAgentCard` 这类 A2A v1.0 PascalCase 方法，并统一映射到现有 session/request 运行记录。bridge 现在会同时声明 `1.0` 与 `0.3` 两个 JSON-RPC interface、校验 `A2A-Version`、把 `A2A-Extensions` 记录进 runtime invocation metadata、发布 `TASK_STATE_*` 状态与 `SendMessage` 的 `{ task }` wrapper，并继续对 streaming 或 push notification 返回明确 unsupported error。
 - `serveAgUiHttp(runtime)` 提供 AG-UI HTTP SSE bridge，把 runtime 生命周期、文本输出、upstream thinking、step 进度与 tool call 投影成 `RUN_*`、`TEXT_MESSAGE_*`、`THINKING_TEXT_MESSAGE_*`、`STEP_*` 与 `TOOL_CALL_*` 事件，便于 UI 客户端直接接入。
 - `createRuntimeMcpServer(runtime)` 与 `serveRuntimeMcpOverStdio(runtime)` 会把持久化 runtime 控制面本身暴露成 MCP tools，包括 sessions、requests、approvals、artifacts、events 与 package export helpers。
 - `listRequestEvents(...)` 与 `exportRequestPackage(...)` 是 request-first 的检查 helper。

package/dist/package-version.d.ts

@@ -1 +1 @@
-export declare const AGENT_HARNESS_VERSION = "0.0.217";
+export declare const AGENT_HARNESS_VERSION = "0.0.218";

package/dist/package-version.js

@@ -1 +1 @@
-export const AGENT_HARNESS_VERSION = "0.0.217";
+export const AGENT_HARNESS_VERSION = "0.0.218";

package/dist/protocol/a2a/http.d.ts

@@ -29,7 +29,7 @@ export type A2aAgentCard = {
     supportedInterfaces: Array<{
         url: string;
         protocolBinding: "JSONRPC";
-        protocolVersion: "1.0";
+        protocolVersion: string;
     }>;
     capabilities: {
         streaming: boolean;

package/dist/protocol/a2a/http.js

@@ -1,4 +1,5 @@
 import { createServer } from "node:http";
+const SUPPORTED_A2A_VERSIONS = ["1.0", "0.3"];
 function normalizePath(value, fallback) {
     const source = typeof value === "string" && value.trim().length > 0 ? value.trim() : fallback;
     return source.startsWith("/") ? source : `/${source}`;
@@ -36,6 +37,31 @@ function toSuccess(id, result) {
         result,
     };
 }
+function readServiceParameter(requestUrl, request, name) {
+    const headerValue = request.headers[name.toLowerCase()];
+    if (typeof headerValue === "string") {
+        return headerValue;
+    }
+    if (Array.isArray(headerValue)) {
+        return headerValue.join(",");
+    }
+    return requestUrl.searchParams.get(name) ?? undefined;
+}
+function parseA2aServiceParameters(requestUrl, request) {
+    const requestedVersion = readServiceParameter(requestUrl, request, "A2A-Version")?.trim() ?? "";
+    const normalizedVersion = requestedVersion.length === 0 ? "0.3" : requestedVersion;
+    if (!SUPPORTED_A2A_VERSIONS.includes(normalizedVersion)) {
+        return null;
+    }
+    const requestedExtensions = readServiceParameter(requestUrl, request, "A2A-Extensions") ?? "";
+    return {
+        version: normalizedVersion,
+        extensions: requestedExtensions
+            .split(",")
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0),
+    };
+}
 function parseTextPart(part) {
     if (!part || typeof part !== "object" || Array.isArray(part)) {
         return null;
@@ -89,6 +115,20 @@ function parseMessageSendParams(params) {
         ...(invocation ? { invocation } : {}),
     };
 }
+function attachServiceParameters(invocation, serviceParameters) {
+    return {
+        ...(invocation ?? {}),
+        protocol: {
+            ...(invocation?.protocol && typeof invocation.protocol === "object" && !Array.isArray(invocation.protocol)
+                ? invocation.protocol
+                : {}),
+            a2a: {
+                version: serviceParameters.version,
+                ...(serviceParameters.extensions.length > 0 ? { extensions: serviceParameters.extensions } : {}),
+            },
+        },
+    };
+}
 function parseTaskLocatorParams(params) {
     if (!params || typeof params !== "object" || Array.isArray(params)) {
         throw new Error("A2A task lookup requires params object.");
@@ -353,6 +393,11 @@ function buildAgentCard(runtime, options) {
                 protocolBinding: "JSONRPC",
                 protocolVersion: "1.0",
             },
+            {
+                url: options.rpcUrl,
+                protocolBinding: "JSONRPC",
+                protocolVersion: "0.3",
+            },
         ],
         capabilities: {
             streaming: false,
@@ -419,6 +464,16 @@ export async function serveA2aOverHttp(runtime, options = {}) {
     const httpServer = createServer(async (request, response) => {
         try {
             const requestUrl = new URL(request.url ?? "/", `http://${hostname}`);
+            const serviceParameters = parseA2aServiceParameters(requestUrl, request);
+            if (!serviceParameters) {
+                writeJson(response, 400, {
+                    error: {
+                        code: -32009,
+                        message: `A2A version not supported. Supported versions: ${SUPPORTED_A2A_VERSIONS.join(", ")}.`,
+                    },
+                });
+                return;
+            }
             if (request.method === "GET" && (requestUrl.pathname === agentCardPath || requestUrl.pathname === "/.well-known/agent.json")) {
                 writeJson(response, 200, buildAgentCard(runtime, buildCardOptions()));
                 return;
@@ -443,7 +498,7 @@ export async function serveA2aOverHttp(runtime, options = {}) {
                             agentId: parsed.agentId ?? options.defaultAgentId,
                             input: parsed.input,
                             ...(parsed.sessionId ? { threadId: parsed.sessionId } : {}),
-                            ...(parsed.invocation ? { invocation: parsed.invocation } : {}),
+                            invocation: attachServiceParameters(parsed.invocation, serviceParameters),
                         });
                         const session = await runtime.getThread(result.threadId);
                         const requestRecord = await runtime.getRun(result.runId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbotgo/agent-harness",
-  "version": "0.0.218",
+  "version": "0.0.219",
   "description": "Workspace runtime for multi-agent applications",
   "license": "MIT",
   "type": "module",