@cap-js/agents 0.0.0 → 0.9.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                Apache License
+                        Version 2.0, January 2004
+                    http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction,
+    and distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by
+    the copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all
+    other entities that control, are controlled by, or are under common
+    control with that entity. For the purposes of this definition,
+    "control" means (i) the power, direct or indirect, to cause the
+    direction or management of such entity, whether by contract or
+    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+    outstanding shares, or (iii) beneficial ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity
+    exercising permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation
+    source, and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical
+    transformation or translation of a Source form, including but
+    not limited to compiled object code, generated documentation,
+    and conversions to other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or
+    Object form, made available under the License, as indicated by a
+    copyright notice that is included in or attached to the work
+    (an example is provided in the Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object
+    form, that is based on (or derived from) the Work and for which the
+    editorial revisions, annotations, elaborations, or other modifications
+    represent, as a whole, an original work of authorship. For the purposes
+    of this License, Derivative Works shall not include works that remain
+    separable from, or merely link (or bind by name) to the interfaces of,
+    the Work and Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including
+    the original version of the Work and any modifications or additions
+    to that Work or Derivative Works thereof, that is intentionally
+    submitted to Licensor for inclusion in the Work by the copyright owner
+    or by an individual or Legal Entity authorized to submit on behalf of
+    the copyright owner. For the purposes of this definition, "submitted"
+    means any form of electronic, verbal, or written communication sent
+    to the Licensor or its representatives, including but not limited to
+    communication on electronic mailing lists, source code control systems,
+    and issue tracking systems that are managed by, or on behalf of, the
+    Licensor for the purpose of discussing and improving the Work, but
+    excluding communication that is conspicuously marked or otherwise
+    designated in writing by the copyright owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity
+    on behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    copyright license to reproduce, prepare Derivative Works of,
+    publicly display, publicly perform, sublicense, and distribute the
+    Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    (except as stated in this section) patent license to make, have made,
+    use, offer to sell, sell, import, and otherwise transfer the Work,
+    where such license applies only to those patent claims licensable
+    by such Contributor that are necessarily infringed by their
+    Contribution(s) alone or by combination of their Contribution(s)
+    with the Work to which such Contribution(s) was submitted. If You
+    institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work
+    or a Contribution incorporated within the Work constitutes direct
+    or contributory patent infringement, then any patent licenses
+    granted to You under this License for that Work shall terminate
+    as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+    Work or Derivative Works thereof in any medium, with or without
+    modifications, and in Source or Object form, provided that You
+    meet the following conditions:
+
+    (a) You must give any other recipients of the Work or
+        Derivative Works a copy of this License; and
+
+    (b) You must cause any modified files to carry prominent notices
+        stating that You changed the files; and
+
+    (c) You must retain, in the Source form of any Derivative Works
+        that You distribute, all copyright, patent, trademark, and
+        attribution notices from the Source form of the Work,
+        excluding those notices that do not pertain to any part of
+        the Derivative Works; and
+
+    (d) If the Work includes a "NOTICE" text file as part of its
+        distribution, then any Derivative Works that You distribute must
+        include a readable copy of the attribution notices contained
+        within such NOTICE file, excluding those notices that do not
+        pertain to any part of the Derivative Works, in at least one
+        of the following places: within a NOTICE text file distributed
+        as part of the Derivative Works; within the Source form or
+        documentation, if provided along with the Derivative Works; or,
+        within a display generated by the Derivative Works, if and
+        wherever such third-party notices normally appear. The contents
+        of the NOTICE file are for informational purposes only and
+        do not modify the License. You may add Your own attribution
+        notices within Derivative Works that You distribute, alongside
+        or as an addendum to the NOTICE text from the Work, provided
+        that such additional attribution notices cannot be construed
+        as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and
+    may provide additional or different license terms and conditions
+    for use, reproduction, or distribution of Your modifications, or
+    for any such Derivative Works as a whole, provided Your use,
+    reproduction, and distribution of the Work otherwise complies with
+    the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+    any Contribution intentionally submitted for inclusion in the Work
+    by You to the Licensor shall be under the terms and conditions of
+    this License, without any additional terms or conditions.
+    Notwithstanding the above, nothing herein shall supersede or modify
+    the terms of any separate license agreement you may have executed
+    with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+    names, trademarks, service marks, or product names of the Licensor,
+    except as required for reasonable and customary use in describing the
+    origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+    agreed to in writing, Licensor provides the Work (and each
+    Contributor provides its Contributions) on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+    implied, including, without limitation, any warranties or conditions
+    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+    PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any
+    risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+    whether in tort (including negligence), contract, or otherwise,
+    unless required by applicable law (such as deliberate and grossly
+    negligent acts) or agreed to in writing, shall any Contributor be
+    liable to You for damages, including any direct, indirect, special,
+    incidental, or consequential damages of any character arising as a
+    result of this License or out of the use or inability to use the
+    Work (including but not limited to damages for loss of goodwill,
+    work stoppage, computer failure or malfunction, or any and all
+    other commercial damages or losses), even if such Contributor
+    has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+    the Work or Derivative Works thereof, You may choose to offer,
+    and charge a fee for, acceptance of support, warranty, indemnity,
+    or other liability obligations and/or rights consistent with this
+    License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf
+    of any other Contributor, and only if You agree to indemnify,
+    defend, and hold each Contributor harmless for any liability
+    incurred by, or claims asserted against, such Contributor by reason
+    of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+    To apply the Apache License to your work, attach the following
+    boilerplate notice, with the fields enclosed by brackets "[]"
+    replaced with your own identifying information. (Don't include
+    the brackets!)  The text should be enclosed in the appropriate
+    comment syntax for the file format. We also recommend that a
+    file or class name and description of purpose be included on the
+    same "printed page" as the copyright notice for easier
+    identification within third-party archives.
+
+Copyright 2026 SAP SE
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,155 @@
+[![REUSE status](https://api.reuse.software/badge/github.com/cap-js/agents)](https://api.reuse.software/info/github.com/cap-js/agents)
+
+# SAP Cloud Application Programming Model, agent development plugin for Node.js
+
+## About this project
+
+CDS plugin for building agents based on the [A2A](https://a2a-protocol.org) protocol.
+
+## Requirements and Setup
+
+We use the [@capire/bookshop](https://github.com/capire/bookshop) as a running sample hereinafter. Clone it and open it in VSCode as follows:
+
+```bash
+git clone https://github.com/capire/bookshop
+code bookshop
+```
+
+Within your project root run this to add the plugin:
+
+```bash
+npm add @cap-js/agents
+```
+
+Annotate the `CatalogService` with `@agent`:
+
+```cds
+// srv/cat-service.cds
+...
+annotate CatalogService with @agent;
+```
+
+Start your server with `cds watch` and note that the A2A protocol gets served:
+
+```bash
+[cds] - serving CatalogService {
+  at: [ ..., '/a2a/browse' ],
+  ...
+}
+```
+
+For local development, the plugin serves a chat preview at `http://localhost:4004/a2a/browse/preview/` and features a mock LLM.
+To use a real LLM, simply bind your app to an existing instance of SAP AI Core and start your server in `hybrid` profile:
+
+```bash
+cds bind -2 <instance>
+cds w --profile hybrid
+```
+
+See [SAP AI Core → Create a Service Instance](https://help.sap.com/docs/sap-ai-core/sap-ai-core-service-guide/create-service-instance) for how to create an instance.
+
+## Ways to Build Agents
+
+Both approaches start from a CDS service annotated with `@agent` (as shown in [Requirements and Setup](#requirements-and-setup)). They differ only in how the agent's behaviour is defined.
+
+### Agentify Existing CAP Services
+
+With `@agent` alone, the plugin auto-generates tools from the service's entities and actions, creates a ReAct agent loop, and serves it as a remote agent — no code required.
+
+```cds
+@agent
+service CatalogService {
+  entity Books as projection on my.Books;
+  action submitOrder(book: Books:ID, quantity: Integer) returns { stock: Integer };
+}
+```
+
+### Markdown-Based Agents
+
+To define an agent's identity, behaviour, and skills explicitly, add a sibling directory matching the slugified service name. When present, it replaces the default agentification: instead of the auto-generated ReAct agent, the plugin auto-builds the agent from the directory at startup — no JavaScript handler required.
+
+```
+srv/
+├─ cat-service.cds
+└─ catalog-agent/                ← matches the slugified service name
+   ├─ AGENTS.md                  ← agent identity + behaviour
+   └─ skills/
+      └─ book-purchase/
+         └─ SKILL.md             ← workflow + examples
+```
+
+`AGENTS.md` defines who the agent is. The frontmatter populates the agent card;
+the body is the agent's system prompt:
+
+```md
+---
+name: catalog-agent
+version: "1.0.0"
+description: >
+  Bookshop assistant for placing book orders on behalf of the user.
+---
+
+# Catalog Agent
+
+## Identity
+
+You are the **Catalog Agent**, a helpful assistant for the capire bookshop.
+...
+```
+
+## Human-in-the-Loop
+
+Annotate a CDS action with `@agent.hitl` to require human approval before the agent may execute it. When the agent decides to call the action, the task pauses and transitions to the A2A [`input-required`](https://a2a-protocol.org/latest/specification/#413-taskstate) state instead of running the action immediately.
+
+```cds
+// srv/cat-service.cds
+...
+annotate CatalogService.submitOrder with @agent.hitl;
+```
+
+## Configuration
+
+The LLM used by an agent is configured via `cds.requires.llm`. You can provide a `kind` as with [any required service](https://cap.cloud.sap/docs/node.js/core-services#required-services).
+
+```jsonc
+"cds": {
+  "requires": {
+    "llm": {
+      "kind": "aicore",
+      "model": "anthropic--claude-4.6-sonnet"
+    }
+  }
+}
+```
+
+| Kind     | Description                                                           |
+| -------- | --------------------------------------------------------------------- |
+| `aicore` | The default for `production` and `hybrid`, connects to SAP AI Core    |
+| `mock`   | The default for `development`, provides a mocked response when called |
+
+## Advanced
+
+The following capabilities are experimental and documented separately. Their public surface may change.
+
+- [Connectivity](.docs/connectivity.md) — destination-based connectivity, `AICORE_SERVICE_KEY` / `ANTHROPIC_API_KEY`, and the `anthropic` kind
+- [Configuration](.docs/configuration.md) — using multiple models, global and per-service settings, file I/O, and push notifications
+- [Quota Enforcement](.docs/quota.md) — configurable rate limits and resource quotas
+- [Audit Logging](.docs/audit-logging.md) — immutable audit trail of agent decisions and tool usage
+- [Telemetry](.docs/telemetry.md) — OpenTelemetry metrics, tracing, and MLflow export
+- [Content Filter](.docs/content-filter.md) — SAP AI Core content filtering and prompt injection shielding
+
+## Support, Feedback, Contributing
+
+This project is open to feature requests/suggestions, bug reports etc. via [GitHub issues](https://github.com/cap-js/agents/issues). Contribution and feedback are encouraged and always welcome. For more information about how to contribute, the project structure, as well as additional contribution information, see our [Contribution Guidelines](CONTRIBUTING.md).
+
+## Security / Disclosure
+
+If you find any bug that may be a security problem, please follow the instructions found [in our security policy](https://github.com/cap-js/agents/security/policy) on how to report it. Please do not create GitHub issues for security-related doubts or problems.
+
+## Code of Conduct
+
+We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone. By participating in this project, you agree to abide by its [Code of Conduct](https://github.com/cap-js/.github/blob/main/CODE_OF_CONDUCT.md) at all times.
+
+## Licensing
+
+Copyright 2026 SAP SE or an SAP affiliate company and cap-js/mcp contributors. Please see our [LICENSE](./LICENSES/Apache-2.0.txt) for copyright and license information. Detailed information including third-party components and their licensing/copyright information is available [via the REUSE tool](https://api.reuse.software/info/github.com/cap-js/agents).

package/_i18n/messages.properties

@@ -0,0 +1,31 @@
+# Agent status messages (shown during task execution)
+agent_status_calling_tools = Calling {0}
+agent_status_querying = Querying {0}
+agent_status_processing_response = Processing tool response
+agent_status_processing_responses = Processing tool responses
+
+# Authentication
+UNAUTHORIZED = Unauthorized
+FORBIDDEN = Forbidden
+
+# Input validation
+MESSAGE_TOO_LONG = The message must not exceed {0} characters.
+
+# Quota enforcement
+QUOTA_CONCURRENT_TASKS = The maximum of {0} concurrent tasks is reached. Please try again later.
+QUOTA_CONCURRENT_TASKS_PER_USER = The maximum of {0} concurrent tasks per user is reached. Please try again later.
+QUOTA_TASKS_PER_HOUR = The maximum of {0} tasks per hour for this tenant is reached. Please try again later.
+QUOTA_TASKS_PER_HOUR_PER_USER = The maximum of {0} tasks per hour per user is reached. Please try again later.
+QUOTA_TOOL_CALLS_PER_HOUR = The maximum amount of tool calls per hour was used ({0}). Please try again later.
+QUOTA_LLM_TOKENS_PER_DAY = The maximum amount of LLM tokens for today was already used ({0}). Please try again tomorrow.
+
+# Content filter
+CONTENT_FILTER_BLOCKED = Your input was blocked by the content safety filter. Please rephrase.
+CONTENT_FILTER_UNAVAILABLE = The content safety check is temporarily unavailable. Please try again.
+CONTENT_FILTER_TOOL_BLOCKED = The last tool called yielded a malicious result. Please try a different direction to avoid the same malicious data.
+
+# Push notifications
+PUSH_URL_NOT_ALLOWED = Push notification callback URL ''{0}'' not in allowed domains: {1}
+
+# HITL
+RESUME_REQUIRES_TEXT = Resume message must contain text (e.g. ''approve'' or ''reject'') or a data part.

package/cds-plugin.js

@@ -0,0 +1,140 @@
+import cds from "@sap/cds"
+
+const LOG = cds.log("agents")
+import { patchLangChain } from "./lib/telemetry/tracing.js"
+import cds_compile_to_a2a from "./lib/compile.js"
+import registerDefaultAgentHandlers from "./srv/handlers/index.js"
+import { slugified } from "./lib/utils/markdown.js"
+
+cds.compile.to.a2a = cds_compile_to_a2a
+
+// Detect optional peer plugins (@cap-js/telemetry, @cap-js/audit-logging)
+const hasTelemetry = !!cds.env.requires?.telemetry
+const hasAuditLog = !!cds.env.requires?.["audit-log"]
+const hasMetrics = !!cds.env.requires?.telemetry?.["metrics"]
+const hasTracing = !!cds.env.requires?.telemetry?.["tracing"]
+if (!hasTelemetry && cds.env.profiles?.includes("production"))
+  LOG.warn("@cap-js/telemetry not configured - metrics and tracing disabled")
+if (!hasAuditLog && cds.env.profiles?.includes("production"))
+  LOG.warn("@cap-js/audit-logging not configured - audit events disabled")
+if (hasTelemetry && !hasMetrics && cds.env.profiles?.includes("production"))
+  LOG.warn("@cap-js/telemetry has no metrics configured - metrics disabled")
+if (hasTelemetry && !hasTracing && cds.env.profiles?.includes("production"))
+  LOG.warn("@cap-js/telemetry has no tracing configured - tracing disabled")
+
+// Enable doc comments in CSN for agent card generation
+cds.env.cdsc = { ...cds.env.cdsc, docComment: true }
+
+// Ensure A2A correlation fields are indexed by SAP Cloud Logging
+cds.env.log ??= {}
+const cls_fields = (cds.env.log.cls_custom_fields ??= [])
+if (!cls_fields.includes("agent.task.id")) cls_fields.push("agent.task.id")
+if (!cls_fields.includes("agent.context.id")) cls_fields.push("agent.context.id")
+
+cds.on("bootstrap", (app) => {
+  const providers = {
+    ["llm-mock"]: {},
+    anthropic: {
+      opus: "claude-opus-latest",
+      sonnet: "claude-sonnet-latest",
+      haiku: "claude-haiku-latest",
+    },
+    aicore: {
+      opus: "anthropic--claude-4.8-opus",
+      sonnet: "anthropic--claude-4.6-sonnet",
+      haiku: "anthropic--claude-4.5-haiku",
+    },
+  }
+
+  for (const [name, s] of Object.entries(cds.env.requires)) {
+    const kind = s?.kind ?? s
+    if (typeof kind !== "string") continue
+    let [provider, model] = kind.split("/")
+    if (name.startsWith("llm") && !providers[provider] && providers["llm-" + provider])
+      provider = "llm-" + provider
+    if (providers[provider] && model) {
+      s.kind = provider
+      s.model = providers[provider][model] ?? model
+    }
+  }
+
+  const profiles = cds.env.profiles || []
+  const isDev = profiles.includes("development") && !profiles.includes("production")
+  if (!isDev) return
+  if (cds.env.server?.index === false) return
+
+  const AGENT_BLOCK = /(<div id="[^"]+-agent">[\s\S]*?<\/h3>)[\s\S]*?<\/ul>\s*<\/div>/g
+
+  app.get("/", (_req, res, next) => {
+    const origSend = res.send.bind(res)
+    res.send = (body) => {
+      if (typeof body === "string") {
+        body = body.replace(AGENT_BLOCK, (_m, head) => `${head}\n      </div>`)
+      }
+      return origSend(body)
+    }
+    next()
+  })
+})
+
+cds.on("serving", (srv) => {
+  if (!(srv instanceof cds.ApplicationService)) return
+  if (!srv.definition?.["@agent"]) return
+  registerDefaultAgentHandlers(srv)
+})
+
+// Schedule active_users metric computation + MLflow exporter
+cds.on("served", async () => {
+  if (hasTelemetry) {
+    const { setupActiveUsersMetric } = await import("./lib/telemetry/active-users.js")
+    setupActiveUsersMetric()
+    // Defer LangChain patching so the CDS model is fully loaded before patches land.
+    // opt-out via cds.env.agents.trace_langchain = false
+    if (cds.env.agents?.trace_langchain !== false) {
+      await patchLangChain()
+    }
+  }
+
+  if (cds.env.agents?.mlflow) {
+    const { setupMlflowExporter } = await import("./lib/telemetry/mlflow.js")
+    setupMlflowExporter()
+  }
+})
+
+// Bootstrap sidecar mode when the agent-sidecar profile is active
+if (cds.env.profiles?.includes("agent-sidecar")) {
+  // Auto-mark @agent services as external so CDS does not serve them locally.
+  // Auto-mark them as hcql services served externally, they are served from the main app.
+  // This runs after model load but before cds.serve() filters definitions,
+  // so users don't need to add these things manually.
+  cds.on("loaded", (csn) => {
+    const hcql = cds.requires.kinds["hcql"]
+    const agentSidecar = cds.requires.agent || {}
+    const hcqlBase = agentSidecar.url // For local development the base URL is given in the package.json
+    const agentCredentials = agentSidecar.credentials || {}
+    for (const [name, def] of Object.entries(csn.definitions || {})) {
+      if (def.kind !== "service") continue
+      if (!def["@agent"]) continue
+      // Mark as external so CDS does not serve it locally — it will be served via HCQL from the main app.
+      def["@cds.external"] = true
+      // Java main apps use the CDS service name in the HCQL path (/hcql/CatalogService),
+      // Node.js main apps use the slugified path (/hcql/catalog).
+      const isJava = !cds.env.profiles?.includes("node")
+      let n = isJava ? name : slugified(name)
+      if (cds.requires[name]) continue // skip if user provided service-specific config for this service
+      if (cds.requires[n]) continue // skip if user provided service-specific config for possibly the slugified version
+      const newRequiresEntry = { ...hcql, kind: "hcql" }
+      newRequiresEntry.credentials = {
+        ...agentCredentials,
+        ...(hcqlBase && { url: `${hcqlBase}/${n.split(".").pop()}` }),
+        ...(agentCredentials.destination && { path: `/${n.split(".").pop()}` }),
+      }
+      cds.requires[n] = newRequiresEntry
+    }
+  })
+
+  cds.on("served", async () => {
+    const { bootstrapSidecar } = await import("./lib/sidecar.js")
+    await bootstrapSidecar()
+  })
+}

package/index.cds

@@ -0,0 +1,105 @@
+using {managed} from '@sap/cds/common';
+using {Attachments} from '@cap-js/attachments';
+
+namespace cap.agent;
+
+/**
+ * Stores A2A task objects for retrieval via tasks/get.
+ */
+entity Tasks : managed {
+      /**
+       * A2A task ID (server-generated UUID)
+       */
+  key taskId         : String;
+      /**
+       * Groups related tasks into conversations
+       */
+      contextId      : String;
+      /**
+       * Current task state (submitted, working, completed, failed, etc.)
+       */
+      state          : String;
+      /**
+       * Full serialized A2A Task JSON
+       */
+      data           : LargeString;
+      /**
+       * Fully qualified CDS service name
+       */
+      agentService   : String;
+      /**
+       * Combined LLM Input and Output tokens used for this task
+       */
+      usageLlmTokens : Integer64 default 0;
+      /**
+       * Amount of tool calls made by this task
+       */
+      usageToolCalls : Integer default 0;
+
+      /** Push notification (webhook) configs for this task. Cascade-deleted. */
+      pushConfigs    : Composition of many PushNotificationConfigs
+                         on pushConfigs.taskId = taskId;
+
+      /**
+       * Files received from user or downstream agents for this task.
+       * Conversation-scoped reads use up_.contextId path expression.
+       */
+      inputFiles     : Composition of many Attachments;
+
+      /**
+       * Files written by agent via /outputs/ path for this task.
+       */
+      outputFiles    : Composition of many Attachments;
+}
+
+entity Checkpoints : managed {
+  key thread_id            : String;
+  key checkpoint_ns        : String default '';
+  key checkpoint_id        : String;
+      parent_checkpoint_id : String;
+      parent               : Association to one Checkpoints
+                               on parent.checkpoint_id = parent_checkpoint_id;
+      checkpoint           : LargeString;
+      metadata             : LargeString;
+      writes               : Composition of many CheckpointWrites
+                               on  writes.thread_id     = thread_id
+                               and writes.checkpoint_ns = checkpoint_ns
+                               and writes.checkpoint_id = checkpoint_id;
+}
+
+entity CheckpointWrites {
+  key thread_id     : String;
+  key checkpoint_ns : String default '';
+  key checkpoint_id : String;
+      checkpoint    : Association to one Checkpoints
+                        on  checkpoint.checkpoint_id = checkpoint_id
+                        and checkpoint.checkpoint_ns = checkpoint_ns
+                        and checkpoint.thread_id     = thread_id;
+  key task_id       : String;
+      task          : Association to one Tasks
+                        on task.taskId = task_id;
+  key idx           : Integer;
+      channel       : String;
+      value         : LargeString;
+}
+
+/**
+ * Stores push notification (webhook) configs registered by clients for task updates.
+ *
+ * REVISIT: A2A spec supports `authentication: { schemes: ["Bearer"], credentials: "..." }`
+ * and `token` fields on PushNotificationConfig for authenticated callbacks. When needed:
+ * 1. Add `schemes: String(512)` column (non-secret metadata, JSON array e.g. '["Bearer"]')
+ * 2. Store token/credentials in SAP Credential Store — NOT in DB
+ *    - Use @sap-cloud-sdk/connectivity getServiceBinding("credstore") for binding
+ *    - Use @sap-cloud-sdk/http-client executeHttpRequest with mTLS destination
+ *    - Throw at save-time if credstore not bound but secret provided (not at startup)
+ * 3. Implement custom PushNotificationSender (6th arg to DefaultRequestHandler) that
+ *    sends `Authorization: <scheme> <credentials>` header from authentication field
+ *    and `X-A2A-Notification-Token` header from token field
+ */
+entity PushNotificationConfigs : managed {
+  key taskId    : String;
+  key configId  : String;
+      task      : Association to one Tasks on task.taskId = taskId;
+      url       : String(2048);
+}

package/lib/agents/markdown/backends/mime-utils.js

@@ -0,0 +1,37 @@
+export function isTextMime(mimeType) {
+  if (!mimeType) return false
+  if (mimeType.startsWith("text/")) return true
+  return [
+    "application/json",
+    "application/xml",
+    "application/csv",
+    "application/x-ndjson",
+    "application/ld+json",
+    "application/graphql",
+    "application/yaml",
+    "application/x-yaml",
+    "application/toml",
+    "application/javascript",
+    "application/ecmascript",
+    "application/sql",
+  ].includes(mimeType)
+}
+
+export function globToRegex(pattern) {
+  let re = "^"
+  for (let i = 0; i < pattern.length; i++) {
+    const c = pattern[i]
+    if (c === "*") re += ".*"
+    else if (c === "?") re += "."
+    else if (c === "[") {
+      const close = pattern.indexOf("]", i)
+      if (close === -1) re += "\\["
+      else {
+        re += pattern.slice(i, close + 1)
+        i = close
+      }
+    } else if (".+^${}()|\\".includes(c)) re += "\\" + c
+    else re += c
+  }
+  return new RegExp(re + "$")
+}