@harrylabsj/kiwi 0.6.0

package/dist/a2a/client/jsonrpc.js

@@ -0,0 +1,85 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * JSON-RPC 2.0 帧（A2A JSONRPC binding，§43）。请求构造 + 响应解析。
+ *
+ * 响应解析 fail-closed：非对象 / jsonrpc 非 "2.0" / id 不匹配 / result 与 error
+ * 非二选一 / error 结构非法，全部抛 invalid_response。
+ */
+import { A2AClientError, invalidResponse } from "./error.js";
+export function buildJsonRpcRequest(method, params, id) {
+    return { jsonrpc: "2.0", id, method, params };
+}
+function requireJsonRpcError(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw invalidResponse("error must be an object");
+    }
+    const obj = value;
+    if (typeof obj.code !== "number" || typeof obj.message !== "string") {
+        throw invalidResponse("error must have numeric code and string message");
+    }
+    const parsed = { code: obj.code, message: obj.message };
+    if (obj.data !== undefined)
+        parsed.data = obj.data;
+    return parsed;
+}
+/**
+ * 解析 JSON-RPC 响应。返回 discriminated union；`error` 分支由调用方决定是否
+ * 抛出（client.request 会抛 jsonrpc_error）。
+ */
+export function parseJsonRpcResponse(raw, requestId) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw invalidResponse("response must be a JSON-RPC object");
+    }
+    const obj = raw;
+    if (obj.jsonrpc !== "2.0") {
+        throw invalidResponse('jsonrpc must be "2.0"');
+    }
+    if (typeof obj.id !== "string" || obj.id !== requestId) {
+        throw invalidResponse("response id does not match request id");
+    }
+    const hasResult = "result" in obj;
+    const hasError = "error" in obj;
+    if (hasResult === hasError) {
+        throw invalidResponse("response must have exactly one of result/error");
+    }
+    if (hasError) {
+        return { error: requireJsonRpcError(obj.error) };
+    }
+    return { result: obj.result };
+}
+/** 非 2xx + 合法 JSON-RPC error 体的识别（HTTP 错误携带 JSON-RPC error 的兼容路径）。 */
+export function tryParseJsonRpcError(raw, requestId) {
+    try {
+        const parsed = parseJsonRpcResponse(raw, requestId);
+        return "error" in parsed ? parsed.error : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** 断言请求是合法 JSON-RPC 对象（本地构造侧校验）。 */
+export function isJsonRpcRequest(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const obj = value;
+    return (obj.jsonrpc === "2.0" &&
+        typeof obj.id === "string" &&
+        typeof obj.method === "string" &&
+        ("params" in obj ? obj.params !== undefined : true));
+}
+export { A2AClientError };
+//# sourceMappingURL=jsonrpc.js.map

package/dist/a2a/client/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../../../src/a2a/client/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAiB7D,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAAe,EAAE,EAAU;IAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,eAAe,CAAC,yBAAyB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,eAAe,CAAC,iDAAiD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACtE,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,SAAiB;IAClE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,IAAI,GAAG,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,IAAI,GAAG,CAAC;IAChC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,eAAe,CAAC,gDAAgD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,SAAiB;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpD,OAAO,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,CACL,GAAG,CAAC,OAAO,KAAK,KAAK;QACrB,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;QAC1B,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAC9B,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/a2a/client/parse.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type A2ATask } from "./types.js";
+/** 解析 `message/send` / `tasks/get` 的 result：必须是 `{ task: A2ATask }`。 */
+export declare function parseTaskResult(result: unknown): A2ATask;

package/dist/a2a/client/parse.js

@@ -0,0 +1,134 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A2A 响应解析：把 JSON-RPC result 解析为结构化 A2ATask。
+ *
+ * fail-closed：对象形状、字段类型、Task 状态枚举、Part kind 均严格校验；
+ * 未知 Part kind（如未建模的 file part）与未知 Task state 一律拒绝
+ * （§4.6 unknown/畸形响应不得产生新的商业承诺）。
+ */
+import { A2AClientError } from "./error.js";
+import { A2A_TASK_STATES, } from "./types.js";
+function schemaInvalid(detail) {
+    return new A2AClientError("schema_invalid", `A2A response schema invalid: ${detail}`);
+}
+function requireObject(value, path) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw schemaInvalid(`${path} must be an object`);
+    }
+    return value;
+}
+function requireNonEmptyString(value, path) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw schemaInvalid(`${path} must be a non-empty string`);
+    }
+    return value;
+}
+function optionalRecord(value, path) {
+    return value === undefined ? undefined : requireObject(value, path);
+}
+function parsePart(value, path) {
+    const obj = requireObject(value, path);
+    const kind = requireNonEmptyString(obj.kind, `${path}/kind`);
+    if (kind === "text") {
+        const text = obj.text;
+        if (typeof text !== "string")
+            throw schemaInvalid(`${path}/text must be a string`);
+        return { kind: "text", text };
+    }
+    if (kind === "data") {
+        return { kind: "data", data: requireObject(obj.data, `${path}/data`) };
+    }
+    throw schemaInvalid(`${path}/kind is unsupported: ${kind}`);
+}
+function parseParts(value, path) {
+    if (!Array.isArray(value))
+        throw schemaInvalid(`${path} must be an array`);
+    if (value.length === 0)
+        throw schemaInvalid(`${path} must not be empty`);
+    return value.map((part, index) => parsePart(part, `${path}/${index}`));
+}
+function parseMessage(value, path) {
+    const obj = requireObject(value, path);
+    const role = obj.role;
+    if (role !== "agent" && role !== "user") {
+        throw schemaInvalid(`${path}/role must be agent or user`);
+    }
+    const message = {
+        role,
+        parts: parseParts(obj.parts, `${path}/parts`),
+        messageId: requireNonEmptyString(obj.messageId, `${path}/messageId`),
+    };
+    if (obj.taskId !== undefined)
+        message.taskId = requireNonEmptyString(obj.taskId, `${path}/taskId`);
+    if (obj.contextId !== undefined) {
+        message.contextId = requireNonEmptyString(obj.contextId, `${path}/contextId`);
+    }
+    const metadata = optionalRecord(obj.metadata, `${path}/metadata`);
+    if (metadata !== undefined)
+        message.metadata = metadata;
+    return message;
+}
+function parseArtifact(value, path) {
+    const obj = requireObject(value, path);
+    const artifact = { parts: parseParts(obj.parts, `${path}/parts`) };
+    if (obj.artifactId !== undefined) {
+        artifact.artifactId = requireNonEmptyString(obj.artifactId, `${path}/artifactId`);
+    }
+    const metadata = optionalRecord(obj.metadata, `${path}/metadata`);
+    if (metadata !== undefined)
+        artifact.metadata = metadata;
+    return artifact;
+}
+function parseTask(value, path) {
+    const obj = requireObject(value, path);
+    const task = {
+        id: requireNonEmptyString(obj.id, `${path}/id`),
+        status: (() => {
+            const status = requireObject(obj.status, `${path}/status`);
+            const state = requireNonEmptyString(status.state, `${path}/status/state`);
+            if (!A2A_TASK_STATES.includes(state)) {
+                throw schemaInvalid(`${path}/status/state is unsupported: ${state}`);
+            }
+            const parsed = { state: state };
+            if (status.message !== undefined) {
+                parsed.message = parseMessage(status.message, `${path}/status/message`);
+            }
+            if (status.timestamp !== undefined) {
+                parsed.timestamp = requireNonEmptyString(status.timestamp, `${path}/status/timestamp`);
+            }
+            return parsed;
+        })(),
+    };
+    if (obj.artifacts !== undefined) {
+        if (!Array.isArray(obj.artifacts))
+            throw schemaInvalid(`${path}/artifacts must be an array`);
+        task.artifacts = obj.artifacts.map((artifact, index) => parseArtifact(artifact, `${path}/artifacts/${index}`));
+    }
+    if (obj.contextId !== undefined) {
+        task.contextId = requireNonEmptyString(obj.contextId, `${path}/contextId`);
+    }
+    const metadata = optionalRecord(obj.metadata, `${path}/metadata`);
+    if (metadata !== undefined)
+        task.metadata = metadata;
+    return task;
+}
+/** 解析 `message/send` / `tasks/get` 的 result：必须是 `{ task: A2ATask }`。 */
+export function parseTaskResult(result) {
+    const root = requireObject(result, "result");
+    return parseTask(root.task, "result/task");
+}
+//# sourceMappingURL=parse.js.map

package/dist/a2a/client/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../../src/a2a/client/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EACL,eAAe,GAKhB,MAAM,YAAY,CAAC;AAEpB,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,gCAAgC,MAAM,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,aAAa,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,IAAY;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,aAAa,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,aAAa,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,aAAa,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAe;QAC1B,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QAC7C,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC;KACrE,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAC1B,OAAO,CAAC,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAgB,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;IAChF,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,QAAQ,CAAC,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAY;QACpB,EAAE,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC;QAC/C,MAAM,EAAE,CAAC,GAAG,EAAE;YACZ,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;YAC1E,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5D,MAAM,aAAa,CAAC,GAAG,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,MAAM,GAAsB,EAAE,KAAK,EAAE,KAAmC,EAAE,CAAC;YACjF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,CAAC,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE;KACL,CAAC;IACF,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,aAAa,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;QAC7F,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CACrD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,cAAc,KAAK,EAAE,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC"}

package/dist/a2a/client/types.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A2A Message / Task / Artifact 领域类型（§43 pin A2A v1.0.x）。
+ *
+ * 本 WP1 只建模出站 client 需要的子集：Message（Text Part + Data Part）、Task
+ * 状态、Artifact。file part 等未建模 kind 在响应解析时 fail-closed
+ * （parse.ts），不静默吞掉。
+ */
+export type A2APart = {
+    kind: "text";
+    text: string;
+} | {
+    kind: "data";
+    data: Record<string, unknown>;
+};
+export interface A2AMessage {
+    role: "agent" | "user";
+    parts: A2APart[];
+    messageId: string;
+    taskId?: string;
+    contextId?: string;
+    metadata?: Record<string, unknown>;
+}
+/** A2A Task 状态枚举（A2A v1.0）。 */
+export declare const A2A_TASK_STATES: readonly ["submitted", "working", "input-required", "completed", "canceled", "failed", "unknown"];
+export type A2ATaskState = (typeof A2A_TASK_STATES)[number];
+export interface A2ATaskStatus {
+    state: A2ATaskState;
+    message?: A2AMessage;
+    timestamp?: string;
+}
+export interface A2AArtifact {
+    parts: A2APart[];
+    artifactId?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface A2ATask {
+    id: string;
+    status: A2ATaskStatus;
+    artifacts?: A2AArtifact[];
+    contextId?: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * 出站签名挂点（WP5，RFC 9421 HTTP Message Signature）。
+ *
+ * client 在发起请求前调用 signer.sign(input)，把返回的请求头（content-digest /
+ * signature-input / signature）合并进 fetch 请求。signer 是结构性接口 ——
+ * trust/identity 的 HttpMessageSigner 直接满足该形状，client 不依赖 trust。
+ */
+export interface A2AOutboundRequest {
+    method: string;
+    /** 绝对 endpoint URL（@target-uri 与 @authority 由它派生）。 */
+    url: string;
+    /** 请求体字节。 */
+    body: Buffer;
+    /** 已有请求头（content-type 等），签名器可能把 content-digest 加入其中。 */
+    headers: Record<string, string>;
+}
+/** 出站签名器：返回要合并进请求的头。 */
+export interface A2AOutboundSigner {
+    readonly keyid: string;
+    sign(input: A2AOutboundRequest): Record<string, string>;
+}
+export interface A2AClientOptions {
+    /** 选定 binding 的端点 URL（来自 capability intersection 的 remote interface url）。 */
+    url: string;
+    /** 每请求超时 ms。默认 15000。 */
+    timeoutMs?: number;
+    /** 注入 fetch（测试用）。默认 globalThis.fetch。 */
+    fetchImpl?: typeof fetch;
+    /** 允许打到私网/保留网段（SSRF 逃生门，默认 false）。 */
+    allowPrivateRanges?: boolean;
+    /** 跳过 DNS 解析后的保留网段复查（仅测试/本机直连）。 */
+    skipDnsCheck?: boolean;
+    /** 注入 DNS 解析器（测试用）。默认 node:dns lookup all。 */
+    resolveIp?: (hostname: string) => Promise<string[]>;
+    /** 附加请求头（如认证）。 */
+    headers?: Record<string, string>;
+    /**
+     * UCP-Agent 宣告（基线 §25.1）：配置后出站请求携带
+     * `UCP-Agent: profile="<uri>"`（RFC 8941 Dictionary），声明本方的 UCP
+     * platform profile URI。HTTP-based A2A binding 用；可选。
+     */
+    ucpAgentProfile?: string;
+    /** 出站 HTTP Message Signature 签名器（可选；配置后每个请求都被签名）。 */
+    signer?: A2AOutboundSigner;
+}

package/dist/a2a/client/types.js

@@ -0,0 +1,26 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** A2A Task 状态枚举（A2A v1.0）。 */
+export const A2A_TASK_STATES = [
+    "submitted",
+    "working",
+    "input-required",
+    "completed",
+    "canceled",
+    "failed",
+    "unknown",
+];
+//# sourceMappingURL=types.js.map

package/dist/a2a/client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/a2a/client/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsBH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;CACD,CAAC"}

package/dist/a2a/client/url-policy.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export interface SafeTargetUrlOptions {
+    /** 允许私网/保留网段（默认 false）。loopback 始终允许。 */
+    allowPrivateRanges?: boolean;
+}
+export declare function ipv4ToInt(ip: string): number | undefined;
+export declare function isReservedIpv4(ip: string): {
+    reserved: boolean;
+    name?: string;
+};
+export declare function isReservedIpv6(ip: string): {
+    reserved: boolean;
+    name?: string;
+};
+/** loopback 主机：known hostname 或 loopback 范围字面 IP。 */
+export declare function isLoopbackHost(hostname: string): boolean;
+/**
+ * 静态 URL 安全校验（同步）。构造 client / 选中 binding 时执行。
+ * 返回规范化 URL；拒绝时抛 unsafe_target。
+ */
+export declare function assertSafeTargetUrl(value: string, options?: SafeTargetUrlOptions): URL;
+export interface ResolvableTargetUrlOptions extends SafeTargetUrlOptions {
+    skipDnsCheck?: boolean;
+    resolveIp?: (hostname: string) => Promise<string[]>;
+}
+/**
+ * 请求前的 DNS 复查：主机名解析出的每个 IP 都必须通过私网/保留网段判定。
+ * 字面 IP 跳过（静态校验已覆盖）；解析失败 fail-closed。
+ */
+export declare function assertResolvableTargetUrl(url: URL, options?: ResolvableTargetUrlOptions): Promise<void>;