@harrylabsj/kiwi 0.6.1 → 0.7.0

package/README.md

@@ -90,6 +90,34 @@ kiwi> /negotiate cagt_...            # 磋商 → agreement（无副作用）
 ```
 
 > 注册域名默认 `merchant-<agent_id>.local`，可用 `KIWI_CATALOG_DOMAIN` 覆盖；catalog 地址默认 `http://127.0.0.1:8600`（`KIWI_CATALOG_URL` 覆盖）。
+>
+> **公网 merchant**：A2A 节点默认监听回环并广告回环地址（仅本机可达）。要让
+> 外部 buyer 经 DNS + 反向代理（Caddy/Nginx）发现并直连，用
+> `KIWI_A2A_PUBLIC_URL=https://<domain>`（如 `https://veyquo.com`）覆盖——
+> 节点仍绑定 `127.0.0.1:<port>`，但 Agent Card / UCP / catalog 注册都广告该
+> 公网 HTTPS 地址，注册域名缺省取 `<domain>`（`KIWI_CATALOG_DOMAIN` 仍优先）。
+>
+> **⚠️ 公网形态的认证前置条件（审查 BUG-02）**：广告地址非 loopback 时，节点
+> **启动即失败**，除非显式配置入站认证验证器（`startA2aNode({authVerifier})`
+> 或 `A2AServer` 的等价接线）。原因：缺省 `LoopbackOnlyAuthVerifier` 只信任
+> socket 来源——反向代理从 `127.0.0.1` 连接节点，外部请求在应用层看起来就是
+> loopback 并被认证通过，"仅本机可访问"的安全边界在公网形态下失效。
+>
+> 公网部署必须二选一：
+> 1. **HTTP Message Signature 验证器**（推荐）：`HttpMessageSignatureVerifier`
+>    校验 RFC 9421 签名 + content-digest（带 body 的请求强制绑定请求体，
+>    见 BUG-06），对端须持有本节点信任的签名密钥；
+> 2. **明确、可审计的代理认证契约**：如反代层完成 TLS 客户端证书或等价强认证，
+>    并把验证结果以节点可审计的方式透传——不得只信任 `remoteAddress`。
+>
+> 本地形态（不设 `KIWI_A2A_PUBLIC_URL`）不受影响，维持 loopback 默认值。
+>
+> `KIWI_A2A_AUTH` env 提供三种内置模式：`loopback`（**仅限本地开发 /
+> 代理即边界**——节点只校验 socket 来源，经反代转发的公网流量在应用层
+> 全部是 loopback 被放行，等价无应用层认证；公网广告地址 + loopback
+> 启动时会输出醒目 stderr 警告）、`none`（显式可信网络/测试）、
+> `bearer:<token>`（校验 `Authorization: Bearer <token>`，**公网节点
+> 推荐**）。
 
 ### 真实商品闭环（shopping-cli 开放商品层）
 

package/contracts/candidate-agent-dto-1.0.README.md

@@ -1,28 +1,32 @@
 # CandidateAgent DTO 1.0 — vendored contract
 
-`candidate-agent-dto-1.0.schema.json` is a **vendored copy** of the canonical
-shopping-cli CandidateAgent DTO schema (contract **1.0**, draft-07).
+`candidate-agent-dto-1.0.schema.json` is the **normative wire contract** owned
+by `kiwi/contracts` (contract **1.0**, draft-07). The Python DTO implementation
+in `kiwi-catalog` is an implementation reference and must remain conformant.
 
 ## Source
 
 | | |
 |---|---|
-| Canonical definition | `shopping_cli/agent_catalog/candidate_dto.py` → `CANDIDATE_AGENT_SCHEMA` |
-| Repository | `shopping-cli`（契约 owner，见 shopping-cli 设计 §21 仓库归属） |
+| Wire-contract authority | `kiwi/contracts/candidate-agent-dto-1.0.schema.json` |
+| Implementation reference | `kiwi-catalog/kiwi_catalog/agent_catalog/candidate_dto.py` → `CANDIDATE_AGENT_SCHEMA` |
+| Contract owner | `kiwi`（跨仓库契约权威） |
 | Normative doc | `docs/a2a/candidate-agent-dto-1.0.md`（human-readable，字段语义） |
 | Design intent | shopping-cli 设计 §8.2（Search Result Contract）、§21（AgentDiscovery Integration with Kiwi）、§22（Hosted/Direct Status Model） |
 | `$id` | `urn:shopping-cli:candidate-agent:1.0` |
 
 ## Sync procedure
 
-Kiwi **MUST NOT** hand-edit this file.  Re-export from the canonical Python dict:
+Changes to this file are contract changes and must be reviewed in `kiwi` first.
+The catalog implementation is checked against this schema; it is not the source
+of wire truth. To regenerate a compatibility fixture from the implementation:
 
 ```sh
-cd /Users/jianghaidong/coding/shopping-cli
+cd /path/to/kiwi-catalog
 python3 -c "import json,sys; sys.path.insert(0,'.'); \
-from shopping_cli.agent_catalog.candidate_dto import CANDIDATE_AGENT_SCHEMA; \
+from kiwi_catalog.agent_catalog.candidate_dto import CANDIDATE_AGENT_SCHEMA; \
 print(json.dumps(CANDIDATE_AGENT_SCHEMA, indent=2, ensure_ascii=False))" \
-  > /Users/jianghaidong/coding/kiwi/contracts/candidate-agent-dto-1.0.schema.json
+  > /tmp/candidate-agent-dto-implementation.json
 ```
 
 A schema change that adds/renames/removes a field, changes a type, narrows the

package/contracts/conformance/python-service/README.md

@@ -0,0 +1,19 @@
+# Python service conformance kit (dev-only)
+
+This directory is a test contract, not a production runtime dependency. Each
+Python service supplies a tiny adapter exposing `apps(tmp_path)` with
+`fallback` and `fastapi` application objects. The shared cases then exercise
+only externally observable transport behavior.
+
+The first gate covers malformed-body routing order, body-size rejection,
+status/error envelopes, and secret non-reflection. Domain-specific auth,
+idempotency, and SQLite migration behavior remains owned by each service until
+two release cycles show that the semantics are genuinely identical.
+
+Run from a portfolio composition checkout:
+
+```sh
+PYTHONPATH=contracts/conformance/python-service:kiwi-catalog:shopping-cli \
+python contracts/conformance/python-service/run.py \
+  kiwi_catalog_conformance:apps shopping_cli_conformance:apps
+```

package/contracts/conformance/python-service/run.py

@@ -0,0 +1,134 @@
+"""Run the shared dev-only transport conformance cases for service adapters."""
+
+from __future__ import annotations
+
+import asyncio
+import importlib
+import json
+import sys
+import tempfile
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any, Callable, Iterable, Protocol
+
+
+@dataclass(frozen=True)
+class Response:
+    status: int
+    headers: dict[str, str]
+    body: dict[str, Any]
+
+
+class Adapter(Protocol):
+    def apps(self, root: Path) -> dict[str, Any]: ...
+
+
+def _asgi_request(app: Any, method: str, path: str, *, headers: dict[str, str], body: bytes) -> Response:
+    sent: list[dict[str, Any]] = []
+    pending = [body]
+
+    async def receive() -> dict[str, Any]:
+        chunk = pending.pop(0) if pending else b""
+        return {"type": "http.request", "body": chunk, "more_body": bool(pending)}
+
+    async def send(message: dict[str, Any]) -> None:
+        sent.append(message)
+
+    async def run() -> None:
+        await app(
+            {
+                "type": "http",
+                "method": method,
+                "path": path,
+                "headers": [(k.lower().encode(), v.encode()) for k, v in headers.items()],
+                "query_string": b"",
+            },
+            receive,
+            send,
+        )
+
+    asyncio.run(run())
+    start = next(item for item in sent if item["type"] == "http.response.start")
+    raw = b"".join(item.get("body", b"") for item in sent if item["type"] == "http.response.body")
+    return Response(
+        int(start["status"]),
+        {k.decode().lower(): v.decode() for k, v in start.get("headers", [])},
+        json.loads(raw.decode() or "{}"),
+    )
+
+
+def request(app: Any, method: str, path: str, *, headers: dict[str, str], body: bytes) -> Response:
+    if type(app).__name__ == "FastAPI":
+        from fastapi.testclient import TestClient
+
+        with TestClient(app) as client:
+            result = client.request(method, path, headers=headers, content=body)
+        return Response(result.status_code, {k.lower(): v for k, v in result.headers.items()}, result.json())
+    return _asgi_request(app, method, path, headers=headers, body=body)
+
+
+def _assert_error(response: Response, status: int) -> None:
+    assert response.status == status, response
+    assert response.body.get("ok") is False, response
+    assert isinstance(response.body.get("error"), str), response
+
+
+def run_cases(factory: Callable[[Path], dict[str, Any]], paths: dict[str, str]) -> None:
+    with tempfile.TemporaryDirectory(prefix="kiwi-conformance-") as raw:
+        apps = factory(Path(raw))
+        assert set(apps) == {"fallback", "fastapi"}, apps
+        for stack, app in apps.items():
+            malformed = request(
+                app,
+                "POST",
+                "/no-such-route",
+                headers={"content-type": "application/json", "authorization": "Bearer conformance-secret"},
+                body=b"not-json",
+            )
+            _assert_error(malformed, 404)
+            assert "conformance-secret" not in json.dumps(malformed.body), (stack, malformed)
+
+            wrong_method = request(
+                app,
+                "DELETE",
+                paths["known_post"],
+                headers={"content-type": "application/json"},
+                body=b"not-json",
+            )
+            _assert_error(wrong_method, 405)
+
+            oversized = request(
+                app,
+                "POST",
+                paths["known_post"],
+                headers={"content-type": "application/json", "content-length": "2000000"},
+                body=b"{}",
+            )
+            _assert_error(oversized, 413)
+
+            exact_shape = request(
+                app,
+                "POST",
+                paths["known_post"],
+                headers={"content-type": "application/json"},
+                body=b"{}",
+            )
+            assert exact_shape.status in {400, 404}, (stack, exact_shape)
+
+
+def main(argv: Iterable[str]) -> int:
+    specs = list(argv)
+    if not specs:
+        raise SystemExit("usage: run.py module:function [module:function ...]")
+    for spec in specs:
+        module_name, function_name = spec.split(":", 1)
+        module = importlib.import_module(module_name)
+        factory = getattr(module, function_name)
+        paths = getattr(module, "paths", lambda: {"known_post": "/products"})()
+        run_cases(factory, paths)
+        print(f"conformance passed: {spec}")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv[1:]))

package/contracts/kiwi-catalog/1.0/listing-record.schema.json

@@ -25,7 +25,12 @@
   },
   "then": { "required": ["source_product_ref"] },
   "else": {
-    "not": { "required": ["handoff_destination_types"] }
+    "not": {
+      "anyOf": [
+        { "required": ["handoff_destination_types"] },
+        { "required": ["handoff_destination_ref"] }
+      ]
+    }
   },
   "properties": {
     "listing_id": { "type": "string", "pattern": "^lst_" },
@@ -78,6 +83,11 @@
         ]
       }
     },
+    "handoff_destination_ref": {
+      "description": "每商品成交入口（KTH destination_ref）：商家声明并维护的实际交易入口。URL 类（external_checkout_url 等）为 https URL；联系/会话类为 opaque ref。URL 安全性由 handoff 执行侧（url-safety）负责",
+      "type": "string",
+      "minLength": 1
+    },
     "listing_digest": { "type": "string", "minLength": 1 },
     "publication_state": { "enum": ["ACTIVE", "WITHDRAWN", "SUSPENDED"] },
     "listing_freshness_state": { "enum": ["FRESH", "STALE"] },

package/contracts/kiwi-contracts.lock.json

@@ -0,0 +1,7 @@
+{
+  "lock_version": 1,
+  "source_repository": "harrylabsj/kiwi",
+  "source_commit": "009bc25cdae2668c8fd19ccedcc4e0c64a34f6be",
+  "bundle_sha256": "2dbbc52a1113dc5c05dc544802571ee188b44e1567d6bfb0cd8ccd87ea7f4998",
+  "contracts_manifest": "contracts/manifest.json"
+}

package/contracts/manifest.json

@@ -0,0 +1,61 @@
+{
+  "manifest_version": 1,
+  "authority": "kiwi/contracts",
+  "bundle_sha256": "2dbbc52a1113dc5c05dc544802571ee188b44e1567d6bfb0cd8ccd87ea7f4998",
+  "contracts": [
+    {
+      "id": "candidate-agent-dto",
+      "version": "1.0",
+      "path": "contracts/candidate-agent-dto-1.0.schema.json",
+      "sha256": "9c820cff1f998662dee6fe85f7a6a8bbc3d1a8bce8b8802b6483612ae06dec03"
+    },
+    {
+      "id": "kiwi-catalog-agent-record",
+      "version": "1.0",
+      "path": "contracts/kiwi-catalog/1.0/agent-record.schema.json",
+      "sha256": "2d4cc595f8fd5d7bd6b7ce45066519695ecf867a3f1089bf112d1bff1e30fe15"
+    },
+    {
+      "id": "kiwi-catalog-listing-record",
+      "version": "1.0",
+      "path": "contracts/kiwi-catalog/1.0/listing-record.schema.json",
+      "sha256": "9bdb2b262404b3a9fe57e4c4b09d337341d89f6b8aba40c54b49eaa46b687662"
+    },
+    {
+      "id": "kiwi-catalog-listing-search-result",
+      "version": "1.0",
+      "path": "contracts/kiwi-catalog/1.0/listing-search-result.schema.json",
+      "sha256": "c77792ffb7e4eb0a59cd0f4d48059686face8878674afac1090808ccb6c7fee7"
+    },
+    {
+      "id": "negotiation-envelope",
+      "version": "1.0",
+      "path": "contracts/negotiation/1.0/schema.json",
+      "sha256": "7a0da30fb8a6d91b653d9507beaa4615f263d4b26d7bc9c3e61f64853f3495c6"
+    },
+    {
+      "id": "shopping-negotiation-capabilities",
+      "version": "0.1",
+      "path": "contracts/shopping.negotiation/0.1/capabilities.schema.json",
+      "sha256": "386a6eda04d20e31519e86aa2c7b30403af5ec31dbd9ac0d15a440347d7e1356"
+    },
+    {
+      "id": "shopping-negotiation-decision",
+      "version": "0.1",
+      "path": "contracts/shopping.negotiation/0.1/decision.schema.json",
+      "sha256": "b98255cf779f76a15c5768dc75fd6d9cd5616c4cbaa0593053b113e7bd2c4ef1"
+    },
+    {
+      "id": "shopping-negotiation-policy-result",
+      "version": "0.1",
+      "path": "contracts/shopping.negotiation/0.1/policy-result.schema.json",
+      "sha256": "3b2dd7980c091c50f8a58dd18f15a0a56a483ba722c075153ee1c3be07c660e8"
+    },
+    {
+      "id": "shopping-negotiation-snapshot",
+      "version": "0.1",
+      "path": "contracts/shopping.negotiation/0.1/snapshot.schema.json",
+      "sha256": "3684e5674917b1d3777e298d9e18e34f3f124d1ba7534540de08023be45a4e27"
+    }
+  ]
+}

package/contracts/vectors/candidate-agent.invalid-private-field.json

@@ -0,0 +1,7 @@
+{
+  "catalog_agent_id": "cagt_test_merchant_001",
+  "verification": {"status": "discovered"},
+  "hosting": {"mode": "direct_only"},
+  "contract": {"name": "candidate-agent", "version": "1.0"},
+  "private_cost": 42
+}

package/contracts/vectors/candidate-agent.valid.json

@@ -0,0 +1,26 @@
+{
+  "catalog_agent_id": "cagt_test_merchant_001",
+  "merchant": {
+    "id": "merchant-001",
+    "name": "Test Merchant",
+    "domain": "test.example"
+  },
+  "discovery": {
+    "agent_card_url": "https://test.example/.well-known/agent-card.json"
+  },
+  "protocols": {
+    "a2a": ["1.0.0"]
+  },
+  "capabilities": ["com.harrylabsj.kiwi.shopping.negotiation"],
+  "verification": {
+    "status": "discovered",
+    "last_verified_at": "2026-01-01T00:00:00Z"
+  },
+  "hosting": {
+    "mode": "direct_only"
+  },
+  "contract": {
+    "name": "candidate-agent",
+    "version": "1.0"
+  }
+}

package/dist/a2a/client/client.js

@@ -91,47 +91,52 @@ export class A2AClient {
             ? baseHeaders
             : { ...baseHeaders, ...this.signer.sign({ method: "POST", url: this.url.href, body: Buffer.from(body, "utf8"), headers: baseHeaders }) };
         let response;
-        try {
-            response = await this.fetchImpl(this.url.href, {
-                method: "POST",
-                headers,
-                body,
-                // SSRF 防线：绝不跟随重定向——重定向目标不经过 SSRF/DNS 复查，且
-                // 3xx 可把请求体/认证头转发给第三方。resolve/ucp 已实施，本处对齐。
-                redirect: "manual",
-                signal: controller.signal,
-            });
-        }
-        catch (err) {
-            if (controller.signal.aborted) {
-                throw new A2AClientError("timeout", `A2A request timed out after ${this.timeoutMs}ms`);
-            }
-            throw new A2AClientError("network", `A2A request failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
-        if (isRedirectResponse(response)) {
-            throw new A2AClientError("http_status", `A2A endpoint must not redirect (HTTP ${response.status})`, { httpStatus: response.status });
-        }
         let raw;
         try {
-            // 响应体读取在超时覆盖内（timer 活到 body 读完；对端停滞 body 也会
-            // 被 abort 中断），且有大小上限（防恶意对端回传 GB 级 body 打爆内存）。
-            raw = await readJsonBody(response, { signal: controller.signal });
-        }
-        catch (err) {
-            if (controller.signal.aborted) {
-                throw new A2AClientError("timeout", `A2A request timed out after ${this.timeoutMs}ms`);
+            try {
+                response = await this.fetchImpl(this.url.href, {
+                    method: "POST",
+                    headers,
+                    body,
+                    // SSRF 防线：绝不跟随重定向——重定向目标不经过 SSRF/DNS 复查，且
+                    // 3xx 可把请求体/认证头转发给第三方。resolve/ucp 已实施，本处对齐。
+                    redirect: "manual",
+                    signal: controller.signal,
+                });
             }
-            if (err instanceof SafeHttpError && err.code === "response_too_large") {
-                throw invalidResponse(err.message);
+            catch (err) {
+                if (controller.signal.aborted) {
+                    throw new A2AClientError("timeout", `A2A request timed out after ${this.timeoutMs}ms`);
+                }
+                throw new A2AClientError("network", `A2A request failed: ${err instanceof Error ? err.message : String(err)}`);
             }
-            if (!response.ok) {
-                throw new A2AClientError("http_status", `A2A HTTP ${response.status} with non-JSON body`, {
-                    httpStatus: response.status,
-                });
+            if (isRedirectResponse(response)) {
+                throw new A2AClientError("http_status", `A2A endpoint must not redirect (HTTP ${response.status})`, { httpStatus: response.status });
+            }
+            try {
+                // 响应体读取在超时覆盖内（timer 活到 body 读完；对端停滞 body 也会
+                // 被 abort 中断），且有大小上限（防恶意对端回传 GB 级 body 打爆内存）。
+                raw = await readJsonBody(response, { signal: controller.signal });
+            }
+            catch (err) {
+                if (controller.signal.aborted) {
+                    throw new A2AClientError("timeout", `A2A request timed out after ${this.timeoutMs}ms`);
+                }
+                if (err instanceof SafeHttpError && err.code === "response_too_large") {
+                    throw invalidResponse(err.message);
+                }
+                if (!response.ok) {
+                    throw new A2AClientError("http_status", `A2A HTTP ${response.status} with non-JSON body`, {
+                        httpStatus: response.status,
+                    });
+                }
+                throw invalidResponse("response body is not JSON");
             }
-            throw invalidResponse("response body is not JSON");
         }
         finally {
+            // 审查 P2-02：所有路径（fetch 拒绝 / redirect / 非 2xx / body 读失败）
+            // 都必须清理超时 timer——此前只有 body 读的 finally 清理，fetch 抛错与
+            // redirect/非 2xx 的提前 throw 会泄漏存活 timer 与 AbortController。
             clearTimeout(timer);
         }
         if (!response.ok) {

package/dist/a2a/client/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/a2a/client/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzF,MAAM,OAAO,SAAS;IACH,GAAG,CAAM;IACT,SAAS,CAAS;IAClB,SAAS,CAAe;IACxB,kBAAkB,CAAU;IAC5B,YAAY,CAAU;IACtB,SAAS,CAA2C;IACpD,OAAO,CAAyB;IAChC,eAAe,CAAU;IACzB,MAAM,CAAqB;IAE5C,YAAY,OAAyB;QACnC,IAAI,CAAC,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,WAAW,CAAC,OAAmB,EAAE,SAAkB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE;YAC5C,OAAO,EAAE,OAA6C;YACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,MAAe;QAC/C,MAAM,yBAAyB,CAAC,IAAI,CAAC,GAAG,EAAE;YACxC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnE,MAAM,WAAW,GAA2B;YAC1C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,sEAAsE;YACtE,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,IAAI,CAAC,OAAO;SAChB,CAAC;QACF,kDAAkD;QAClD,wDAAwD;QACxD,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAE7I,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI;gBACJ,0CAA0C;gBAC1C,4CAA4C;gBAC5C,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,+BAA+B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,SAAS,EACT,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,wCAAwC,QAAQ,CAAC,MAAM,GAAG,EAC1D,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAChC,CAAC;QACJ,CAAC;QAED,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,4CAA4C;YAC5C,8CAA8C;YAC9C,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,+BAA+B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACtE,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,qBAAqB,EAAE;oBACxF,UAAU,EAAE,QAAQ,CAAC,MAAM;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,CAAC,2BAA2B,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,wCAAwC;YACxC,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,EAAE;oBAC9D,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,WAAW,EAAE,YAAY,CAAC,IAAI;oBAC9B,WAAW,EAAE,YAAY,CAAC,IAAI;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,EAAE,EAAE;gBACrE,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBAC9B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/a2a/client/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzF,MAAM,OAAO,SAAS;IACH,GAAG,CAAM;IACT,SAAS,CAAS;IAClB,SAAS,CAAe;IACxB,kBAAkB,CAAU;IAC5B,YAAY,CAAU;IACtB,SAAS,CAA2C;IACpD,OAAO,CAAyB;IAChC,eAAe,CAAU;IACzB,MAAM,CAAqB;IAE5C,YAAY,OAAyB;QACnC,IAAI,CAAC,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,WAAW,CAAC,OAAmB,EAAE,SAAkB;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE;YAC5C,OAAO,EAAE,OAA6C;YACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,MAAe;QAC/C,MAAM,yBAAyB,CAAC,IAAI,CAAC,GAAG,EAAE;YACxC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnE,MAAM,WAAW,GAA2B;YAC1C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,sEAAsE;YACtE,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,IAAI,CAAC,OAAO;SAChB,CAAC;QACF,kDAAkD;QAClD,wDAAwD;QACxD,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAE7I,IAAI,QAAkB,CAAC;QACvB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;oBAC7C,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI;oBACJ,0CAA0C;oBAC1C,4CAA4C;oBAC5C,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,+BAA+B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;gBACzF,CAAC;gBACD,MAAM,IAAI,cAAc,CACtB,SAAS,EACT,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1E,CAAC;YACJ,CAAC;YAED,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,wCAAwC,QAAQ,CAAC,MAAM,GAAG,EAC1D,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAChC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,4CAA4C;gBAC5C,8CAA8C;gBAC9C,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,+BAA+B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;gBACzF,CAAC;gBACD,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBACtE,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,qBAAqB,EAAE;wBACxF,UAAU,EAAE,QAAQ,CAAC,MAAM;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,eAAe,CAAC,2BAA2B,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,wDAAwD;YACxD,mDAAmD;YACnD,0DAA0D;YAC1D,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,wCAAwC;YACxC,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,EAAE;oBAC9D,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,WAAW,EAAE,YAAY,CAAC,IAAI;oBAC9B,WAAW,EAAE,YAAY,CAAC,IAAI;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,QAAQ,CAAC,MAAM,EAAE,EAAE;gBACrE,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC9D,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBAC9B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/a2a/client/url-policy.d.ts

@@ -14,8 +14,15 @@
  * limitations under the License.
  */
 export interface SafeTargetUrlOptions {
-    /** 允许私网/保留网段（默认 false）。loopback 始终允许。 */
+    /** 允许私网/保留网段（默认 false）。 */
     allowPrivateRanges?: boolean;
+    /**
+     * 允许**静态字面** loopback 目标（localhost / 127.0.0.1 / ::1；本地开发默认
+     * true，不可信 Agent Card 应传 false）。只影响 assertSafeTargetUrl 的字面判定；
+     * assertResolvableTargetUrl 的 DNS 复查不读取本字段——公共主机名解析到 loopback
+     * 始终拒绝（DNS rebinding 不放宽）。
+     */
+    allowLoopback?: boolean;
 }
 export declare function ipv4ToInt(ip: string): number | undefined;
 export declare function isReservedIpv4(ip: string): {

package/dist/a2a/client/url-policy.js

@@ -25,6 +25,11 @@
  * - 主机名先做保留主机名检查，再在请求前 DNS 解析复查解析出的 IP（DNS
  *   rebinding 的基础缓解；`allowPrivateRanges` 可显式逃生）。
  *
+ * `allowLoopback` 只放宽**静态字面 loopback**（localhost / 127.0.0.1 / ::1，
+ * 由 assertSafeTargetUrl 判定）供本地开发；公共主机名解析到 loopback（DNS
+ * rebinding）与私网/保留网段始终拒绝，不因 `allowLoopback` / `allowPrivateRanges`
+ * 之外的任何开关放宽。
+ *
  * 任何拒绝都抛 A2AClientError("unsafe_target")，fail-closed。
  */
 import { lookup } from "node:dns/promises";
@@ -197,8 +202,12 @@ export function assertSafeTargetUrl(value, options = {}) {
             throw unsafeTarget("cleartext HTTP only for loopback hosts (localhost, 127.0.0.1, ::1) — use HTTPS for remote endpoints");
         }
     }
-    if (loopback)
+    if (loopback) {
+        if (options.allowLoopback === false) {
+            throw unsafeTarget("A2A endpoint must not target loopback from an untrusted Agent Card");
+        }
         return url;
+    }
     if (isIpLiteral(hostname)) {
         const ip = stripBrackets(hostname);
         const check = isIP(ip) === 4 ? isReservedIpv4(ip) : isReservedIpv6(ip);
@@ -233,7 +242,14 @@ export async function assertResolvableTargetUrl(url, options = {}) {
     for (const ip of ips) {
         const version = isIP(ip);
         const check = version === 4 ? isReservedIpv4(ip) : version === 6 ? isReservedIpv6(ip) : { reserved: false };
-        // loopback 解析结果始终放行（与静态校验一致）；其余保留网段拒绝。
+        // A public hostname that resolves to loopback is a DNS-rebinding SSRF
+        // target and must ALWAYS fail closed. `allowLoopback` only relaxes the
+        // *static* literal-loopback check in assertSafeTargetUrl (localhost /
+        // 127.0.0.1 / ::1) for local development; it never legitimizes a
+        // hostname→loopback mapping, and it never relaxes private/reserved ranges.
+        if (isLoopbackHost(ip) && !isLoopbackHost(hostname)) {
+            throw unsafeTarget(`A2A endpoint host ${hostname} resolves to loopback (${ip})`);
+        }
         if (check.reserved && !isLoopbackHost(ip) && !options.allowPrivateRanges) {
             throw unsafeTarget(`A2A endpoint host ${hostname} resolves to a reserved network (${check.name})`);
         }

package/dist/a2a/client/url-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-policy.js","sourceRoot":"","sources":["../../../src/a2a/client/url-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAO5C,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpG,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,0BAA0B;IAC1B,eAAe;IACf,4BAA4B;IAC5B,iCAAiC;CAClC,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAYD,MAAM,WAAW,GAAuB;IACtC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAClE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACpE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACvE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;CACrE,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QAC/C,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,UAAU,KAAK,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACtF,IAAI,UAAU,KAAK,gBAAgB;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC3F,oDAAoD;IACpD,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,8CAA8C;IAC9C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3D,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC1D,+CAA+C;IAC/C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;IACvE,IAAI,WAAW,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,UAAgC,EAAE;IACnF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,YAAY,CAAC,4CAA4C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,YAAY,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,YAAY,CAChB,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,GAAG,CAAC;IAEzB,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAClD,MAAM,YAAY,CAAC,gDAAgD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;SAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvE,MAAM,YAAY,CAAC,sCAAsC,QAAQ,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAQ,EACR,UAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO;IACjC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE9D,MAAM,OAAO,GACX,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,CAAS,EAAE,EAAE,CACb,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChG,uCAAuC;QACvC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACzE,MAAM,YAAY,CAChB,qBAAqB,QAAQ,oCAAoC,KAAK,CAAC,IAAI,GAAG,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"url-policy.js","sourceRoot":"","sources":["../../../src/a2a/client/url-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAc5C,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpG,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,0BAA0B;IAC1B,eAAe;IACf,4BAA4B;IAC5B,iCAAiC;CAClC,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAYD,MAAM,WAAW,GAAuB;IACtC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAClE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACpE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACvE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACtE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAC1E,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACzE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACrE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE;CACrE,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QAC/C,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AACnE,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,UAAU,KAAK,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACtF,IAAI,UAAU,KAAK,gBAAgB;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC3F,oDAAoD;IACpD,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,8CAA8C;IAC9C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC3D,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC1D,+CAA+C;IAC/C,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;IACvE,IAAI,WAAW,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,aAAa,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,UAAgC,EAAE;IACnF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,YAAY,CAAC,4CAA4C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,YAAY,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,YAAY,CAChB,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,YAAY,CAAC,oEAAoE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAClD,MAAM,YAAY,CAAC,gDAAgD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;SAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvE,MAAM,YAAY,CAAC,sCAAsC,QAAQ,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAQ,EACR,UAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO;IACjC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE9D,MAAM,OAAO,GACX,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,CAAS,EAAE,EAAE,CACb,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChG,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,iEAAiE;QACjE,2EAA2E;QAC3E,IAAI,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,YAAY,CAAC,qBAAqB,QAAQ,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACzE,MAAM,YAAY,CAChB,qBAAqB,QAAQ,oCAAoC,KAAK,CAAC,IAAI,GAAG,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/a2a/clock.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 现实单调时钟（审查 BUG-01）：生产路径不得使用固定日期基准——此前
+ * node.ts / negotiate.ts 各自实现 monotonicNow，从固定 2026-08-07 起步、
+ * 每次调用只 +1ms。第三方会收到历史时间戳或已过期报价，本机又用同一假
+ * 时钟判断过期，形成"本机接受、外部拒绝"的互操作分裂；重启还会把时钟
+ * 重置回同一历史起点。
+ *
+ * 语义：返回墙钟 ISO 时间，但保证同进程内严格单调（max(墙钟, prev+1)）——
+ * 同一毫秒的多个事件不会产生相同时间戳（ledger 内容去重依赖相同内容，
+ * 时间戳不参与去重键，但 created_at 必须与现实时间一致）。
+ *
+ * 测试可注入固定时间源：createMonotonicClock(() => Date.parse("..."))。
+ */
+/** 构造现实单调时钟：返回 ISO 字符串，同进程内严格递增。 */
+export declare function createMonotonicClock(nowFn?: () => number): () => string;