@harrylabsj/kiwi 0.6.0

package/dist/counterparty/shopping-cli-hosted/index.js

@@ -0,0 +1,337 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * ShoppingCliHostedChannel — 包装现有 commerce client 的 hosted 通道
+ * （基线 §5 / §24 Hosted Reliability / §21 Authority Model）。
+ *
+ * 边界（§24）：
+ *   - claim / heartbeat / complete / fail / abandon 是**通道内部机制**，
+ *     不暴露到 CounterpartyChannel 接口；上层只看到 send/getState/subscribe/close。
+ *   - 不伪造 A2A claim/heartbeat 语义——它们是 shopping-cli 权威生命周期的一部分。
+ *
+ * 生命周期（对齐 runtime/negotiation-turn.ts）：
+ *   - open    内部 claim 待处理消息（消息未绑定 claim 时 open 仍可成功，send 前再 claim）；
+ *   - getState 返回 shopping-cli 权威快照（§21：authoritative snapshot >
+ *            local cache > reasoning state）；claim 存活期内可读；
+ *   - send    KNP→legacy 转译（LegacyNegotiationAdapter，§35：lossless→translate，
+ *            lossy→fail closed，unsupported→human/fallback）→ submitNegotiationDecision
+ *            → 按 PolicyResult 结算 claim（accepted/human_required→complete；
+ *            rejected_retryable→fail 可重claim）；
+ *   - subscribe 轮询 + heartbeat 保持 claim 存活，会话状态变化发 RemoteEvent；
+ *   - close   未结算的 claim 转 abandon（release，可被其他 worker 重claim）。
+ *
+ * 任何失败抛 ChannelError，绝不自动降级到其他通道（不变量 21）。
+ */
+import { CommerceError, idempotencyKey } from "../../commerce/types.js";
+import { LegacyNegotiationAdapter } from "../../protocol/legacy-shopping-negotiation/adapter.js";
+import { legacyMessageIdToKnp } from "../../protocol/legacy-shopping-negotiation/mapping.js";
+import { PROTOCOL_VERSION } from "../../negotiation/types.js";
+import { ChannelError, } from "../channel.js";
+const HOSTED_CAPABILITY = { capability: "shopping.negotiation.hosted", protocol_version: "0.1" };
+/** 会话状态 → 稳定观察点判定（终态或等待输入）。 */
+function isStableConversationStatus(status) {
+    return status === "human_required" || status === "closed";
+}
+export class ShoppingCliHostedChannel {
+    kind = "shopping-cli-hosted";
+    client;
+    ledger;
+    now;
+    agentId;
+    adapter = new LegacyNegotiationAdapter();
+    constructor(options) {
+        this.client = options.client;
+        this.ledger = options.ledger;
+        this.now = options.now ?? (() => new Date().toISOString());
+        this.agentId = options.agentId ?? "kiwi.hosted";
+    }
+    async open(input) {
+        const handle = new ShoppingCliHostedHandle({
+            client: this.client,
+            ledger: this.ledger,
+            now: this.now,
+            agentId: this.agentId,
+            adapter: this.adapter,
+            negotiationId: input.negotiation_id,
+            senderIdentity: input.sender_identity,
+            identity: input.identity,
+            openConversationId: input.remote?.conversation_id,
+            openMessageId: input.remote?.message_id,
+        });
+        await handle.acquireClaim();
+        return handle;
+    }
+}
+class ShoppingCliHostedHandle {
+    kind = "shopping-cli-hosted";
+    identity;
+    deps;
+    closed = false;
+    subscriptions = new Set();
+    claimHeld = false;
+    settled = false;
+    constructor(deps) {
+        this.deps = deps;
+        this.identity = deps.identity;
+    }
+    assertOpen() {
+        if (this.closed) {
+            throw new ChannelError("shopping-cli-hosted", "channel_closed", "shopping-cli-hosted channel is closed");
+        }
+    }
+    /** ref 解析：调用方 ref 优先，回落 open 绑定的会话/消息。 */
+    refOf(ref) {
+        const conversationId = ref?.conversation_id ?? this.deps.openConversationId;
+        const messageId = ref?.message_id ?? this.deps.openMessageId;
+        if (conversationId === undefined || messageId === undefined) {
+            throw new ChannelError("shopping-cli-hosted", "send_failed", "shopping-cli-hosted requires conversation_id + message_id in ref");
+        }
+        return { conversation_id: conversationId, message_id: messageId };
+    }
+    toChannelError(err) {
+        if (err instanceof ChannelError)
+            return err;
+        if (err instanceof CommerceError) {
+            return new ChannelError("shopping-cli-hosted", "send_failed", `commerce client error (${err.kind}): ${err.message}`);
+        }
+        return new ChannelError("shopping-cli-hosted", "send_failed", err instanceof Error ? err.message : String(err));
+    }
+    claimKey(messageId) {
+        return idempotencyKey(this.deps.agentId, messageId, PROTOCOL_VERSION);
+    }
+    /** 内部 claim（§24，open/send 时触发）：失败/不可 claim → 抛 ChannelError。 */
+    async claim(conversation_id, message_id) {
+        const result = await this.deps.client.claimMessage({
+            conversation_id,
+            message_id,
+            idempotency_key: this.claimKey(message_id),
+        });
+        if (!result.claimed) {
+            throw new ChannelError("shopping-cli-hosted", "send_failed", `claim denied for message ${message_id} (status ${result.status})`);
+        }
+        return result;
+    }
+    /** open 时获取 claim（内部机制）；无会话锚点时不强制。 */
+    async acquireClaim() {
+        if (this.deps.openConversationId === undefined || this.deps.openMessageId === undefined) {
+            return;
+        }
+        await this.claim(this.deps.openConversationId, this.deps.openMessageId);
+        this.claimHeld = true;
+    }
+    /** 内部结算：accepted/human_required → complete；rejected_retryable → fail（可重claim）。 */
+    async settleClaim(message_id, result) {
+        if (result.result === "accepted" || result.result === "human_required") {
+            return this.deps.client.completeClaim({
+                message_id,
+                idempotency_key: this.claimKey(message_id),
+            });
+        }
+        return this.deps.client.failClaim({
+            message_id,
+            idempotency_key: this.claimKey(message_id),
+            error: `policy rejected: ${result.public_reason}`,
+        });
+    }
+    async send(input) {
+        this.assertOpen();
+        const envelope = input.envelope;
+        const { conversation_id, message_id } = this.refOf(input.ref);
+        // 1. claim（通道内部机制，§24）。open 已持有时不重复 claim（同键重claim返回
+        //    claimed=false，会误判为失败）。
+        if (!this.claimHeld) {
+            try {
+                await this.claim(conversation_id, message_id);
+                this.claimHeld = true;
+            }
+            catch (err) {
+                throw this.toChannelError(err);
+            }
+        }
+        // 2. KNP → legacy 转译（§35：lossless→translate，lossy→fail closed，unsupported→human）。
+        const translation = this.deps.adapter.envelopeToLegacyDecision(envelope);
+        if (!("translated" in translation)) {
+            // 受保护语义不可表达：release claim（可重claim），fail-closed。
+            const translationError = `translation ${"fail_closed" in translation ? "fail_closed" : "requires_human"}: ${translation.reason}`;
+            await this.deps.client
+                .failClaim({
+                message_id,
+                idempotency_key: this.claimKey(message_id),
+                error: translationError,
+            })
+                .catch(() => undefined);
+            this.settled = true;
+            throw new ChannelError("shopping-cli-hosted", "unsupported_action", `KNP envelope cannot be expressed in shopping.negotiation/0.1: ${translation.reason}`);
+        }
+        const decision = translation.translated;
+        // 3. 提交决策（policy gate 权威，§21）。
+        let policy;
+        try {
+            policy = await this.deps.client.submitNegotiationDecision({
+                decision,
+                idempotency_key: this.claimKey(message_id),
+            });
+        }
+        catch (err) {
+            await this.deps.client
+                .failClaim({
+                message_id,
+                idempotency_key: this.claimKey(message_id),
+                error: `submit failed: ${err instanceof Error ? err.message : String(err)}`,
+            })
+                .catch(() => undefined);
+            this.settled = true;
+            throw this.toChannelError(err);
+        }
+        // 4. 结算 claim（内部，§24）。
+        await this.settleClaim(message_id, policy).catch(() => undefined);
+        this.settled = true;
+        // 5. 出站落账（§22：message_sent 证据）。
+        if (this.deps.ledger !== undefined) {
+            this.deps.ledger.append({
+                event_kind: "message_sent",
+                negotiation_id: this.deps.negotiationId,
+                message_id: envelope.message_id,
+                remote_context_id: conversation_id,
+                identity: {
+                    sender_identity: this.deps.senderIdentity,
+                    counterparty_identity: this.deps.identity,
+                    actor: envelope.actor,
+                },
+                capability: { ...HOSTED_CAPABILITY },
+                wire_digest: envelope.digest,
+                wire_payload: envelope,
+                outcome: {
+                    kind: "ok",
+                    result: { policy_result: policy.result, message_id: policy.message_id },
+                },
+                occurred_at: this.deps.now(),
+            });
+        }
+        // ref 指向被 claim 的消息（getState 的权威快照仍以 claim 为锚，§21）。
+        const ref = {
+            negotiation_id: this.deps.negotiationId,
+            conversation_id,
+            message_id,
+        };
+        return { channel: "shopping-cli-hosted", ref, policy };
+    }
+    async getState(ref) {
+        this.assertOpen();
+        const { conversation_id, message_id } = this.refOf(ref);
+        let snapshot;
+        try {
+            snapshot = await this.deps.client.getNegotiationSnapshot({
+                conversation_id,
+                message_id,
+            });
+        }
+        catch (err) {
+            throw this.toChannelError(err);
+        }
+        if (this.deps.ledger !== undefined) {
+            this.deps.ledger.append({
+                event_kind: "system",
+                negotiation_id: this.deps.negotiationId,
+                remote_context_id: conversation_id,
+                identity: {
+                    sender_identity: this.deps.senderIdentity,
+                    counterparty_identity: this.deps.identity,
+                },
+                capability: { ...HOSTED_CAPABILITY },
+                outcome: {
+                    kind: "ok",
+                    result: { snapshot_state: snapshot.conversation.status },
+                },
+                occurred_at: this.deps.now(),
+            });
+        }
+        const messageIds = snapshot.messages
+            .map((m) => legacyMessageIdToKnp(m.id))
+            .filter((id) => id !== null);
+        return {
+            channel: "shopping-cli-hosted",
+            state: snapshot.conversation.status,
+            stable: isStableConversationStatus(snapshot.conversation.status),
+            snapshot,
+            message_ids: messageIds,
+            observed_at: this.deps.now(),
+        };
+    }
+    async subscribe(ref, handler) {
+        this.assertOpen();
+        const { conversation_id, message_id } = this.refOf(ref);
+        let stopped = false;
+        const stop = () => {
+            stopped = true;
+        };
+        this.subscriptions.add(stop);
+        const run = async () => {
+            try {
+                // 首个 tick 推送当前权威快照（§21）。
+                let state = await this.getState({ negotiation_id: this.deps.negotiationId, conversation_id, message_id });
+                await handler({
+                    channel: "shopping-cli-hosted",
+                    kind: "state_changed",
+                    ref: { negotiation_id: this.deps.negotiationId, conversation_id, message_id },
+                    state,
+                });
+                while (!stopped && !state.stable) {
+                    // heartbeat 保持 claim 存活（§24 Hosted Reliability，内部机制）。
+                    await this.deps.client.heartbeat({ message_id }).catch(() => undefined);
+                    await new Promise((resolve) => setTimeout(resolve, 100));
+                    state = await this.getState({ negotiation_id: this.deps.negotiationId, conversation_id, message_id });
+                    await handler({
+                        channel: "shopping-cli-hosted",
+                        kind: "state_changed",
+                        ref: { negotiation_id: this.deps.negotiationId, conversation_id, message_id },
+                        state,
+                    });
+                }
+            }
+            catch (err) {
+                await handler({
+                    channel: "shopping-cli-hosted",
+                    kind: "error",
+                    ref: { negotiation_id: this.deps.negotiationId, conversation_id, message_id },
+                    error: this.toChannelError(err),
+                });
+            }
+            finally {
+                this.subscriptions.delete(stop);
+            }
+        };
+        void run();
+        return stop;
+    }
+    async close() {
+        this.closed = true;
+        for (const stop of this.subscriptions)
+            await stop();
+        this.subscriptions.clear();
+        // 未结算的 claim 转 abandon（release，可被其他 worker 重claim；§16.2 语义）。
+        if (this.claimHeld && !this.settled && this.deps.openMessageId !== undefined) {
+            await this.deps.client
+                .abandonClaim({
+                message_id: this.deps.openMessageId,
+                idempotency_key: this.claimKey(this.deps.openMessageId),
+                error: "hosted channel closed before the claim was settled",
+            })
+                .catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/counterparty/shopping-cli-hosted/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/counterparty/shopping-cli-hosted/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAA4B,MAAM,4BAA4B,CAAC;AAExF,OAAO,EACL,YAAY,GASb,MAAM,eAAe,CAAC;AAWvB,MAAM,iBAAiB,GAAG,EAAE,UAAU,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,KAAK,EAAW,CAAC;AAE1G,+BAA+B;AAC/B,SAAS,0BAA0B,CAAC,MAAc;IAChD,OAAO,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,QAAQ,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC1B,IAAI,GAAG,qBAA8B,CAAC;IAC9B,MAAM,CAAiB;IACvB,MAAM,CAAe;IACrB,GAAG,CAAe;IAClB,OAAO,CAAS;IAChB,OAAO,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAE1D,YAAY,OAAwC;QAClD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAuB;QAChC,MAAM,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,KAAK,CAAC,cAAc;YACnC,cAAc,EAAE,KAAK,CAAC,eAAe;YACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe;YACjD,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAeD,MAAM,uBAAuB;IAClB,IAAI,GAAG,qBAA8B,CAAC;IACtC,QAAQ,CAAS;IACT,IAAI,CAA8B;IAC3C,MAAM,GAAG,KAAK,CAAC;IACN,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/D,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,IAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,0CAA0C;IAClC,KAAK,CAAC,GAAe;QAC3B,MAAM,cAAc,GAAG,GAAG,EAAE,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC5E,MAAM,SAAS,GAAG,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QAC7D,IAAI,cAAc,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,IAAI,YAAY,CACpB,qBAAqB,EACrB,aAAa,EACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IAEO,cAAc,CAAC,GAAY;QACjC,IAAI,GAAG,YAAY,YAAY;YAAE,OAAO,GAAG,CAAC;QAC5C,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO,IAAI,YAAY,CACrB,qBAAqB,EACrB,aAAa,EACb,0BAA0B,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,qBAAqB,EAAE,aAAa,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClH,CAAC;IAEO,QAAQ,CAAC,SAAiB;QAChC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACxE,CAAC;IAED,gEAAgE;IACxD,KAAK,CAAC,KAAK,CAAC,eAAuB,EAAE,UAAkB;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YACjD,eAAe;YACf,UAAU;YACV,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CACpB,qBAAqB,EACrB,aAAa,EACb,4BAA4B,UAAU,YAAY,MAAM,CAAC,MAAM,GAAG,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,YAAY;QAChB,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,MAAoB;QAChE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBACpC,UAAU;gBACV,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,UAAU;YACV,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1C,KAAK,EAAE,oBAAoB,MAAM,CAAC,aAAa,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAuB;QAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9D,qDAAqD;QACrD,4BAA4B;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,kFAAkF;QAClF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,CAAC,YAAY,IAAI,WAAW,CAAC,EAAE,CAAC;YACnC,gDAAgD;YAChD,MAAM,gBAAgB,GAAG,eAAe,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACjI,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;iBACnB,SAAS,CAAC;gBACT,UAAU;gBACV,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC1C,KAAK,EAAE,gBAAgB;aACxB,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,MAAM,IAAI,YAAY,CACpB,qBAAqB,EACrB,oBAAoB,EACpB,iEAAiE,WAAW,CAAC,MAAM,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC;QAExC,+BAA+B;QAC/B,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC;gBACxD,QAAQ;gBACR,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;iBACnB,SAAS,CAAC;gBACT,UAAU;gBACV,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC1C,KAAK,EAAE,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC5E,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,gCAAgC;QAChC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtB,UAAU,EAAE,cAAc;gBAC1B,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;gBACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,iBAAiB,EAAE,eAAe;gBAClC,QAAQ,EAAE;oBACR,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;oBACzC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;oBACzC,KAAK,EAAE,QAAQ,CAAC,KAAK;iBACtB;gBACD,UAAU,EAAE,EAAE,GAAG,iBAAiB,EAAE;gBACpC,WAAW,EAAE,QAAQ,CAAC,MAAM;gBAC5B,YAAY,EAAE,QAA8C;gBAC5D,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACxE;gBACD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,oDAAoD;QACpD,MAAM,GAAG,GAAc;YACrB,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YACvC,eAAe;YACf,UAAU;SACX,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAc;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,QAA6B,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;gBACvD,eAAe;gBACf,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtB,UAAU,EAAE,QAAQ;gBACpB,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;gBACvC,iBAAiB,EAAE,eAAe;gBAClC,QAAQ,EAAE;oBACR,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;oBACzC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;iBAC1C;gBACD,UAAU,EAAE,EAAE,GAAG,iBAAiB,EAAE;gBACpC,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;iBACzD;gBACD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACtC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,qBAAqB;YAC9B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM;YACnC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;YAChE,QAAQ;YACR,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAc,EAAE,OAA4B;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;YACpC,IAAI,CAAC;gBACH,yBAAyB;gBACzB,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC1G,MAAM,OAAO,CAAC;oBACZ,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,eAAe;oBACrB,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE;oBAC7E,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,sDAAsD;oBACtD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACxE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;oBACzD,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;oBACtG,MAAM,OAAO,CAAC;wBACZ,OAAO,EAAE,qBAAqB;wBAC9B,IAAI,EAAE,eAAe;wBACrB,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE;wBAC7E,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC;oBACZ,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,OAAO;oBACb,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE;oBAC7E,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC;QACF,KAAK,GAAG,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,6DAA6D;QAC7D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;iBACnB,YAAY,CAAC;gBACZ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;gBACnC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;gBACvD,KAAK,EAAE,oDAAoD;aAC5D,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/discovery/agent-card/error.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Agent Card 校验错误。`code` 对齐基线 §32 协议错误词表（schema_invalid /
+ * field_unsupported）；`secret_found` 是安全不变量 24 的拒绝信号。
+ */
+export type AgentCardErrorCode = "schema_invalid" | "field_unsupported" | "secret_found";
+export declare class AgentCardError extends Error {
+    readonly code: AgentCardErrorCode;
+    /** JSON Pointer 风格的字段路径。 */
+    readonly path: string;
+    constructor(code: AgentCardErrorCode, message: string, path: string);
+}
+/** 默认 schema 校验错误。 */
+export declare function schemaError(path: string, message: string): AgentCardError;

package/dist/discovery/agent-card/error.js

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export class AgentCardError extends Error {
+    code;
+    /** JSON Pointer 风格的字段路径。 */
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = "AgentCardError";
+        this.code = code;
+        this.path = path;
+    }
+}
+/** 默认 schema 校验错误。 */
+export function schemaError(path, message) {
+    return new AgentCardError("schema_invalid", message, path);
+}
+//# sourceMappingURL=error.js.map

package/dist/discovery/agent-card/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../src/discovery/agent-card/error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAqB;IAClC,4BAA4B;IACnB,IAAI,CAAS;IACtB,YAAY,IAAwB,EAAE,OAAe,EAAE,IAAY;QACjE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,sBAAsB;AACtB,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/discovery/agent-card/extensions.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AgentCard } from "./types.js";
+/** 判断一个 URI 是否是 Kiwi negotiation extension URI（§8.2 形态）。 */
+export declare function isNegotiationExtensionUri(uri: string): boolean;
+/** 从 card 的 extensions 声明中查找 negotiation extension（capabilities 与顶层都查）。 */
+export declare function findNegotiationExtensions(card: AgentCard): string[];

package/dist/discovery/agent-card/extensions.js

@@ -0,0 +1,59 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Kiwi Negotiation A2A Extension URI 识别（基线 §8.2 / §26）。
+ *
+ * 规范形态：
+ *   https://<domain>/a2a/extensions/negotiation/1.0
+ *
+ * authority 在示例中为 kiwi.harrylabsj.com，但识别规则只看 path 形态与 scheme，不绑定
+ * 具体 domain——生产部署时由 Kiwi 实际控制的域发布（§8.2 要求生产前替换示例
+ * authority）。非 http(s) scheme / 带 userinfo / 无 authority 均不识别。
+ */
+import { KIWI_NEGOTIATION_EXTENSION_PATH } from "./types.js";
+/** 判断一个 URI 是否是 Kiwi negotiation extension URI（§8.2 形态）。 */
+export function isNegotiationExtensionUri(uri) {
+    let url;
+    try {
+        url = new URL(uri);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== "https:" && url.protocol !== "http:")
+        return false;
+    if (url.username !== "" || url.password !== "")
+        return false;
+    if (url.hostname.length === 0)
+        return false;
+    return url.pathname === KIWI_NEGOTIATION_EXTENSION_PATH;
+}
+/** 从 card 的 extensions 声明中查找 negotiation extension（capabilities 与顶层都查）。 */
+export function findNegotiationExtensions(card) {
+    const uris = [];
+    const collect = (exts) => {
+        if (exts === undefined)
+            return;
+        for (const ext of exts) {
+            if (isNegotiationExtensionUri(ext.uri))
+                uris.push(ext.uri);
+        }
+    };
+    collect(card.capabilities?.extensions);
+    collect(card.extensions);
+    return uris;
+}
+//# sourceMappingURL=extensions.js.map

package/dist/discovery/agent-card/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../../src/discovery/agent-card/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAG7D,4DAA4D;AAC5D,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,GAAG,CAAC,QAAQ,KAAK,+BAA+B,CAAC;AAC1D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,IAAe;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,IAAsD,EAAQ,EAAE;QAC/E,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/discovery/agent-card/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AgentCard } from "./types.js";
+export type { AgentCapabilities, AgentCard, AgentExtension, AgentInterface, AgentProvider, AgentSecurityRequirement, AgentSecurityScheme, AgentSkill, CoreProtocolBinding, } from "./types.js";
+export { CORE_PROTOCOL_BINDINGS, KIWI_NEGOTIATION_EXTENSION_PATH, isCoreProtocolBinding, } from "./types.js";
+export type { AgentCardErrorCode } from "./error.js";
+export { AgentCardError, schemaError } from "./error.js";
+export { isAgentCardError, validateAgentCard } from "./validate.js";
+export { findNegotiationExtensions, isNegotiationExtensionUri } from "./extensions.js";
+export { assertNoAgentCardSecrets, scanAgentCardSecrets } from "./secrets.js";
+export type { SecretFinding, SecretKind, SecretScanResult } from "./secrets.js";
+/**
+ * 结构校验 + secret 扫描的组合入口。任何一步失败都抛 AgentCardError。
+ * 传入原始（未类型化）card，确保扩展/未知字段也在扫描范围内。
+ */
+export declare function parseAgentCard(value: unknown): AgentCard;

package/dist/discovery/agent-card/index.js

@@ -0,0 +1,38 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * discovery/agent-card — A2A Agent Card 模型（基线 §26）。
+ *
+ * 使用路径：先 validateAgentCard 做结构校验，再 assertNoAgentCardSecrets /
+ * scanAgentCardSecrets 做 secret 扫描（不变量 24）。parseAgentCard 是两者的组合。
+ */
+import { assertNoAgentCardSecrets } from "./secrets.js";
+import { validateAgentCard } from "./validate.js";
+export { CORE_PROTOCOL_BINDINGS, KIWI_NEGOTIATION_EXTENSION_PATH, isCoreProtocolBinding, } from "./types.js";
+export { AgentCardError, schemaError } from "./error.js";
+export { isAgentCardError, validateAgentCard } from "./validate.js";
+export { findNegotiationExtensions, isNegotiationExtensionUri } from "./extensions.js";
+export { assertNoAgentCardSecrets, scanAgentCardSecrets } from "./secrets.js";
+/**
+ * 结构校验 + secret 扫描的组合入口。任何一步失败都抛 AgentCardError。
+ * 传入原始（未类型化）card，确保扩展/未知字段也在扫描范围内。
+ */
+export function parseAgentCard(value) {
+    const card = validateAgentCard(value);
+    assertNoAgentCardSecrets(value);
+    return card;
+}
+//# sourceMappingURL=index.js.map

package/dist/discovery/agent-card/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/discovery/agent-card/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;GAKG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAclD,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAG9E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/discovery/agent-card/secrets.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export type SecretKind = "bearer_token" | "api_key" | "password" | "private_key" | "authorization_header" | "high_entropy_token" | "merchant_private_data" | "principal_private_state";
+export interface SecretFinding {
+    /** JSON Pointer 风格路径。 */
+    path: string;
+    kind: SecretKind;
+    detail: string;
+}
+export interface SecretScanResult {
+    ok: boolean;
+    findings: SecretFinding[];
+}
+/** 扫描任意 JSON 值（原始 card 含未知/扩展字段）。纯函数，不抛错。 */
+export declare function scanAgentCardSecrets(value: unknown): SecretScanResult;
+/** 若命中任一 secret 类发现则抛 AgentCardError("secret_found")。 */
+export declare function assertNoAgentCardSecrets(value: unknown): void;