@keycardai/a2a 0.1.0

package/dist/esm/delegation.js

@@ -0,0 +1,120 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _DelegationClient_instances, _DelegationClient_config, _DelegationClient_tokenClient, _DelegationClient_discovery, _DelegationClient_getDelegationToken, _DelegationClient_sendMessage;
+import { TokenExchangeClient } from "@keycardai/oauth/tokenExchange";
+import { ClientSecret } from "@keycardai/oauth/server/clientSecret";
+import { ServiceDiscovery } from "./discovery.js";
+import { getAuthServerUrl } from "./config.js";
+const A2A_JSONRPC_PATH = "/a2a/jsonrpc";
+const A2A_PROTOCOL_VERSION = "0.3";
+const A2A_VERSION_HEADER = "x-a2a-protocol-version";
+/**
+ * Client for delegating tasks to remote A2A agent services with
+ * Keycard token exchange.
+ *
+ * ```ts
+ * const client = new DelegationClient(config);
+ *
+ * // Inside your AgentExecutor.execute():
+ * const auth = getKeycardAuth(requestContext);
+ * const result = await client.invokeService(targetUrl, "summarize this", {
+ *   subjectToken: auth!.token,
+ * });
+ * eventBus.publish(result.message);
+ * eventBus.finished();
+ * ```
+ *
+ * Python equivalent: `keycardai.a2a.DelegationClient`
+ */
+export class DelegationClient {
+    constructor(config, options) {
+        _DelegationClient_instances.add(this);
+        _DelegationClient_config.set(this, void 0);
+        _DelegationClient_tokenClient.set(this, void 0);
+        _DelegationClient_discovery.set(this, void 0);
+        __classPrivateFieldSet(this, _DelegationClient_config, config, "f");
+        __classPrivateFieldSet(this, _DelegationClient_discovery, options?.discovery ?? new ServiceDiscovery(), "f");
+        __classPrivateFieldSet(this, _DelegationClient_tokenClient, new TokenExchangeClient(getAuthServerUrl(config), {
+            credential: new ClientSecret(config.clientId, config.clientSecret),
+        }), "f");
+    }
+    /**
+     * Discover, authenticate, and invoke a remote A2A agent in one call.
+     */
+    async invokeService(serviceUrl, task, options) {
+        const agentCard = await __classPrivateFieldGet(this, _DelegationClient_discovery, "f").getServiceCard(serviceUrl);
+        const delegationToken = await __classPrivateFieldGet(this, _DelegationClient_instances, "m", _DelegationClient_getDelegationToken).call(this, serviceUrl, options.subjectToken);
+        const message = buildUserMessage(task, options.metadata);
+        const jsonrpcUrl = buildJsonrpcUrl(serviceUrl, agentCard);
+        const responseMessage = await __classPrivateFieldGet(this, _DelegationClient_instances, "m", _DelegationClient_sendMessage).call(this, jsonrpcUrl, message, delegationToken, options.timeoutMs);
+        return { message: responseMessage, agentCard };
+    }
+}
+_DelegationClient_config = new WeakMap(), _DelegationClient_tokenClient = new WeakMap(), _DelegationClient_discovery = new WeakMap(), _DelegationClient_instances = new WeakSet(), _DelegationClient_getDelegationToken = async function _DelegationClient_getDelegationToken(targetUrl, subjectToken) {
+    const response = await __classPrivateFieldGet(this, _DelegationClient_tokenClient, "f").exchangeToken({
+        subjectToken,
+        subjectTokenType: "urn:ietf:params:oauth:token-type:access_token",
+        resource: targetUrl,
+    });
+    return response.accessToken;
+}, _DelegationClient_sendMessage = async function _DelegationClient_sendMessage(jsonrpcUrl, message, bearerToken, timeoutMs = 30_000) {
+    const requestBody = {
+        jsonrpc: "2.0",
+        id: crypto.randomUUID(),
+        method: "message/send",
+        params: { message },
+    };
+    const response = await fetch(jsonrpcUrl, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Accept: "application/json",
+            Authorization: `Bearer ${bearerToken}`,
+            [A2A_VERSION_HEADER]: A2A_PROTOCOL_VERSION,
+        },
+        body: JSON.stringify(requestBody),
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (!response.ok) {
+        throw new Error(`DelegationClient: A2A request to "${jsonrpcUrl}" failed (HTTP ${response.status})`);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        throw new Error(`DelegationClient: response from "${jsonrpcUrl}" is not valid JSON`);
+    }
+    const envelope = body;
+    if (!envelope.result?.message) {
+        throw new Error(`DelegationClient: A2A error from "${jsonrpcUrl}": ${envelope.error?.message ?? "unknown error"}`);
+    }
+    return envelope.result.message;
+};
+function buildUserMessage(text, metadata) {
+    return {
+        messageId: crypto.randomUUID(),
+        role: "user",
+        parts: [{ kind: "text", text }],
+        ...(metadata ? { metadata } : {}),
+    };
+}
+function buildJsonrpcUrl(serviceUrl, agentCard) {
+    // agentCard.url IS the JSONRPC endpoint per the A2A spec — use it directly.
+    // Do not append A2A_JSONRPC_PATH: the agent card is built with getJsonrpcUrl()
+    // which already includes /a2a/jsonrpc, so appending would double the path.
+    if (agentCard.url) {
+        return agentCard.url;
+    }
+    return `${serviceUrl.replace(/\/$/, "")}${A2A_JSONRPC_PATH}`;
+}
+//# sourceMappingURL=delegation.js.map

package/dist/esm/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../../src/delegation.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAGpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA2B/C,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAEpD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,gBAAgB;IAK3B,YAAY,MAA0B,EAAE,OAA0C;;QAJlF,2CAA4B;QAC5B,gDAAkC;QAClC,8CAA6B;QAG3B,uBAAA,IAAI,4BAAW,MAAM,MAAA,CAAC;QACtB,uBAAA,IAAI,+BAAc,OAAO,EAAE,SAAS,IAAI,IAAI,gBAAgB,EAAE,MAAA,CAAC;QAC/D,uBAAA,IAAI,iCAAgB,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE;YACpE,UAAU,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC;SACnE,CAAC,MAAA,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,IAAY,EACZ,OAAsB;QAEtB,MAAM,SAAS,GAAG,MAAM,uBAAA,IAAI,mCAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,eAAe,GAAG,MAAM,uBAAA,IAAI,yEAAoB,MAAxB,IAAI,EAAqB,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,uBAAA,IAAI,kEAAa,MAAjB,IAAI,EAChC,UAAU,EACV,OAAO,EACP,eAAe,EACf,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;CA0DF;0NAxDC,KAAK,+CAAqB,SAAiB,EAAE,YAAoB;IAC/D,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,qCAAa,CAAC,aAAa,CAAC;QACrD,YAAY;QACZ,gBAAgB,EAAE,+CAA+C;QACjE,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,WAAW,CAAC;AAC9B,CAAC,kCAED,KAAK,wCACH,UAAkB,EAClB,OAAgB,EAChB,WAAmB,EACnB,SAAS,GAAG,MAAM;IAElB,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,EAAE,OAAO,EAAE;KACpB,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,CAAC,kBAAkB,CAAC,EAAE,oBAAoB;SAC3C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,kBAAkB,QAAQ,CAAC,MAAM,GAAG,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,qBAAqB,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAwE,CAAC;IAC1F,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;AACjC,CAAC;AAGH,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAkC;IACxE,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;QAC9B,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvB,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,SAAoB;IAC/D,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC,GAAG,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;AAC/D,CAAC"}

package/dist/esm/discovery.d.ts

@@ -0,0 +1,30 @@
+import type { AgentCard } from "@a2a-js/sdk";
+export type { AgentCard } from "@a2a-js/sdk";
+/**
+ * Fetches and caches agent cards from remote A2A services.
+ *
+ * Python equivalent: `keycardai.a2a.ServiceDiscovery`
+ */
+export declare class ServiceDiscovery {
+    #private;
+    constructor(options?: {
+        cacheTtlMs?: number;
+    });
+    /**
+     * Fetch the agent card from the given service URL.
+     * Validates that the card has a `name` field.
+     */
+    discoverService(serviceUrl: string): Promise<AgentCard>;
+    /**
+     * Return a cached agent card, fetching if absent or expired.
+     */
+    getServiceCard(serviceUrl: string, options?: {
+        forceRefresh?: boolean;
+    }): Promise<AgentCard>;
+    clearCache(): void;
+    getCacheStats(): {
+        size: number;
+        keys: string[];
+    };
+}
+//# sourceMappingURL=discovery.d.ts.map

package/dist/esm/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAU7C;;;;GAIG;AACH,qBAAa,gBAAgB;;gBAIf,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAI7C;;;OAGG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAqB7D;;OAEG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,SAAS,CAAC;IAWrB,UAAU,IAAI,IAAI;IAIlB,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE;CAGlD"}

package/dist/esm/discovery.js

@@ -0,0 +1,86 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _ServiceDiscovery_cacheTtlMs, _ServiceDiscovery_cache;
+const DEFAULT_CACHE_TTL_MS = 15 * 60 * 1000; // 15 minutes
+const AGENT_CARD_PATH = "/.well-known/agent-card.json";
+/**
+ * Fetches and caches agent cards from remote A2A services.
+ *
+ * Python equivalent: `keycardai.a2a.ServiceDiscovery`
+ */
+export class ServiceDiscovery {
+    constructor(options) {
+        _ServiceDiscovery_cacheTtlMs.set(this, void 0);
+        _ServiceDiscovery_cache.set(this, new Map());
+        __classPrivateFieldSet(this, _ServiceDiscovery_cacheTtlMs, options?.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS, "f");
+    }
+    /**
+     * Fetch the agent card from the given service URL.
+     * Validates that the card has a `name` field.
+     */
+    async discoverService(serviceUrl) {
+        const cardUrl = buildAgentCardUrl(serviceUrl);
+        const response = await fetch(cardUrl, {
+            headers: { Accept: "application/json" },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!response.ok) {
+            throw new Error(`ServiceDiscovery: failed to fetch agent card from "${cardUrl}" (HTTP ${response.status})`);
+        }
+        let card;
+        try {
+            card = await response.json();
+        }
+        catch {
+            throw new Error(`ServiceDiscovery: agent card at "${cardUrl}" is not valid JSON`);
+        }
+        validateAgentCard(card, cardUrl);
+        return card;
+    }
+    /**
+     * Return a cached agent card, fetching if absent or expired.
+     */
+    async getServiceCard(serviceUrl, options) {
+        const key = normalizeUrl(serviceUrl);
+        const cached = __classPrivateFieldGet(this, _ServiceDiscovery_cache, "f").get(key);
+        if (!options?.forceRefresh && cached && Date.now() < cached.expiresAt) {
+            return cached.card;
+        }
+        const card = await this.discoverService(serviceUrl);
+        __classPrivateFieldGet(this, _ServiceDiscovery_cache, "f").set(key, { card, expiresAt: Date.now() + __classPrivateFieldGet(this, _ServiceDiscovery_cacheTtlMs, "f") });
+        return card;
+    }
+    clearCache() {
+        __classPrivateFieldGet(this, _ServiceDiscovery_cache, "f").clear();
+    }
+    getCacheStats() {
+        return { size: __classPrivateFieldGet(this, _ServiceDiscovery_cache, "f").size, keys: Array.from(__classPrivateFieldGet(this, _ServiceDiscovery_cache, "f").keys()) };
+    }
+}
+_ServiceDiscovery_cacheTtlMs = new WeakMap(), _ServiceDiscovery_cache = new WeakMap();
+function buildAgentCardUrl(serviceUrl) {
+    const base = serviceUrl.endsWith("/") ? serviceUrl.slice(0, -1) : serviceUrl;
+    return `${base}${AGENT_CARD_PATH}`;
+}
+function normalizeUrl(url) {
+    return url.endsWith("/") ? url.slice(0, -1) : url;
+}
+function validateAgentCard(card, url) {
+    if (!card || typeof card !== "object" || Array.isArray(card)) {
+        throw new Error(`ServiceDiscovery: agent card at "${url}" is not a JSON object`);
+    }
+    const obj = card;
+    if (typeof obj.name !== "string" || !obj.name) {
+        throw new Error(`ServiceDiscovery: agent card at "${url}" is missing required field "name"`);
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/esm/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/discovery.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC1D,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAOvD;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAI3B,YAAY,OAAiC;QAH7C,+CAAoB;QACpB,kCAAS,IAAI,GAAG,EAAsB,EAAC;QAGrC,uBAAA,IAAI,gCAAe,OAAO,EAAE,UAAU,IAAI,oBAAoB,MAAA,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,sDAAsD,OAAO,WAAW,QAAQ,CAAC,MAAM,GAAG,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,qBAAqB,CAAC,CAAC;QACpF,CAAC;QACD,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,IAAiB,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,UAAkB,EAClB,OAAoC;QAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,uBAAA,IAAI,+BAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,YAAY,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACpD,uBAAA,IAAI,+BAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAA,IAAI,oCAAY,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,uBAAA,IAAI,+BAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,aAAa;QACX,OAAO,EAAE,IAAI,EAAE,uBAAA,IAAI,+BAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAA,IAAI,+BAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7E,OAAO,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,GAAW;IACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,wBAAwB,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,oCAAoC,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,14 @@
+export { KeycardUser, keycardUserBuilder, getKeycardAuth } from "./auth.js";
+export type { KeycardUserBuilderOptions } from "./auth.js";
+export { createKeycardRequestHandler, buildAgentCard } from "./server.js";
+export type { AgentExecutor, RequestContext, ExecutionEventBus } from "./server.js";
+export { InMemoryTaskStore } from "./server.js";
+export type { AgentServiceConfig } from "./config.js";
+export { getAgentCardUrl, getJsonrpcUrl, getAuthServerUrl } from "./config.js";
+export { ServiceDiscovery } from "./discovery.js";
+export { DelegationClient } from "./delegation.js";
+export type { DelegationResult, InvokeOptions } from "./delegation.js";
+export { agentCardHandler, jsonRpcHandler, restHandler, UserBuilder, } from "@a2a-js/sdk/server/express";
+export type { AgentCard, Message, Task } from "@a2a-js/sdk";
+export { DefaultRequestHandler } from "@a2a-js/sdk/server";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5E,YAAY,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAG3D,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1E,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIvE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,15 @@
+// Keycard auth adapter for @a2a-js/sdk
+export { KeycardUser, keycardUserBuilder, getKeycardAuth } from "./auth.js";
+// Server convenience helpers (thin wrappers over @a2a-js/sdk)
+export { createKeycardRequestHandler, buildAgentCard } from "./server.js";
+export { InMemoryTaskStore } from "./server.js";
+export { getAgentCardUrl, getJsonrpcUrl, getAuthServerUrl } from "./config.js";
+// Discovery
+export { ServiceDiscovery } from "./discovery.js";
+// Delegation client
+export { DelegationClient } from "./delegation.js";
+// Re-export the SDK's Express handlers and UserBuilder so customers
+// import from one place.
+export { agentCardHandler, jsonRpcHandler, restHandler, UserBuilder, } from "@a2a-js/sdk/server/express";
+export { DefaultRequestHandler } from "@a2a-js/sdk/server";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG5E,8DAA8D;AAC9D,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/E,YAAY;AACZ,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,oBAAoB;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,oEAAoE;AACpE,yBAAyB;AACzB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1 @@
+{"type": "module"}

package/dist/esm/server.d.ts

@@ -0,0 +1,32 @@
+import { DefaultRequestHandler, type AgentExecutor, type TaskStore } from "@a2a-js/sdk/server";
+import type { AgentCard } from "@a2a-js/sdk";
+import type { AgentServiceConfig } from "./config.js";
+export type { AgentExecutor, RequestContext, ExecutionEventBus } from "@a2a-js/sdk/server";
+export { InMemoryTaskStore } from "@a2a-js/sdk/server";
+/**
+ * Creates a `DefaultRequestHandler` from `@a2a-js/sdk` pre-wired with a
+ * `KeycardUser`-aware agent card and the provided executor.
+ *
+ * Pass the returned handler to the SDK's Express adapters alongside a
+ * `keycardUserBuilder` for auth:
+ *
+ * ```ts
+ * const requestHandler = createKeycardRequestHandler(executor, config, agentCard);
+ * const userBuilder = keycardUserBuilder({ issuer: "https://zone.keycard.cloud" });
+ *
+ * app.get("/.well-known/agent-card.json", agentCardHandler({ agentCardProvider: requestHandler }));
+ * app.post("/a2a/jsonrpc", jsonRpcHandler({ requestHandler, userBuilder }));
+ * ```
+ *
+ * Python equivalent: the composition of `create_agent_card_server`,
+ * `serve_agent`, and the `KeycardServerCallContextBuilder` from `keycardai-a2a`.
+ */
+export declare function createKeycardRequestHandler(executor: AgentExecutor, agentCard: AgentCard, options?: {
+    taskStore?: TaskStore;
+}): DefaultRequestHandler;
+/**
+ * Build an `AgentCard` from an `AgentServiceConfig` for use with
+ * `createKeycardRequestHandler`.
+ */
+export declare function buildAgentCard(config: AgentServiceConfig): AgentCard;
+//# sourceMappingURL=server.d.ts.map

package/dist/esm/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EAErB,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGtD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,SAAS,EACpB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAClC,qBAAqB,CAMvB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAiBpE"}

package/dist/esm/server.js

@@ -0,0 +1,47 @@
+import { DefaultRequestHandler, InMemoryTaskStore, } from "@a2a-js/sdk/server";
+import { getJsonrpcUrl } from "./config.js";
+export { InMemoryTaskStore } from "@a2a-js/sdk/server";
+/**
+ * Creates a `DefaultRequestHandler` from `@a2a-js/sdk` pre-wired with a
+ * `KeycardUser`-aware agent card and the provided executor.
+ *
+ * Pass the returned handler to the SDK's Express adapters alongside a
+ * `keycardUserBuilder` for auth:
+ *
+ * ```ts
+ * const requestHandler = createKeycardRequestHandler(executor, config, agentCard);
+ * const userBuilder = keycardUserBuilder({ issuer: "https://zone.keycard.cloud" });
+ *
+ * app.get("/.well-known/agent-card.json", agentCardHandler({ agentCardProvider: requestHandler }));
+ * app.post("/a2a/jsonrpc", jsonRpcHandler({ requestHandler, userBuilder }));
+ * ```
+ *
+ * Python equivalent: the composition of `create_agent_card_server`,
+ * `serve_agent`, and the `KeycardServerCallContextBuilder` from `keycardai-a2a`.
+ */
+export function createKeycardRequestHandler(executor, agentCard, options) {
+    return new DefaultRequestHandler(agentCard, options?.taskStore ?? new InMemoryTaskStore(), executor);
+}
+/**
+ * Build an `AgentCard` from an `AgentServiceConfig` for use with
+ * `createKeycardRequestHandler`.
+ */
+export function buildAgentCard(config) {
+    return {
+        name: config.serviceName,
+        description: config.description ?? "",
+        url: getJsonrpcUrl(config),
+        version: "0.1",
+        protocolVersion: "0.3",
+        capabilities: {},
+        defaultInputModes: ["text/plain"],
+        defaultOutputModes: ["text/plain"],
+        skills: config.skills?.map((s) => ({
+            id: s.id,
+            name: s.name,
+            description: s.description,
+            tags: s.tags ?? [],
+        })) ?? [],
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/esm/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAGlB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAuB,EACvB,SAAoB,EACpB,OAAmC;IAEnC,OAAO,IAAI,qBAAqB,CAC9B,SAAS,EACT,OAAO,EAAE,SAAS,IAAI,IAAI,iBAAiB,EAAE,EAC7C,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0B;IACvD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,EAAE;QAChB,iBAAiB,EAAE,CAAC,YAAY,CAAC;QACjC,kBAAkB,EAAE,CAAC,YAAY,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;SACnB,CAAC,CAAC,IAAI,EAAE;KACV,CAAC;AACJ,CAAC"}

package/dist/esm/types.d.ts

@@ -0,0 +1,84 @@
+/**
+ * A2A (Agent-to-Agent) protocol types.
+ * Reference: https://google.github.io/A2A
+ */
+export interface AgentSkill {
+    id: string;
+    name: string;
+    description?: string;
+    tags?: readonly string[];
+}
+export interface AgentCapabilities {
+    streaming?: boolean;
+    pushNotifications?: boolean;
+    stateTransitionHistory?: boolean;
+}
+/**
+ * Agent card served at `GET /.well-known/agent-card.json`.
+ * Describes the agent's identity, capabilities, and endpoint.
+ */
+export interface AgentCard {
+    name: string;
+    description?: string;
+    url: string;
+    version: string;
+    capabilities?: AgentCapabilities;
+    skills?: AgentSkill[];
+    defaultInputModes?: readonly string[];
+    defaultOutputModes?: readonly string[];
+}
+export interface TextPart {
+    type: "text";
+    text: string;
+}
+export interface DataPart {
+    type: "data";
+    data: Record<string, unknown>;
+}
+export type Part = TextPart | DataPart;
+export type MessageRole = "user" | "agent";
+export interface A2AMessage {
+    messageId: string;
+    role: MessageRole;
+    parts: readonly Part[];
+    metadata?: Record<string, unknown>;
+}
+export interface A2ARequest {
+    jsonrpc: "2.0";
+    id: string;
+    method: "message/send";
+    params: {
+        message: A2AMessage;
+    };
+}
+export interface A2ASuccessResponse {
+    jsonrpc: "2.0";
+    id: string;
+    result: {
+        message: A2AMessage;
+    };
+}
+export interface A2AErrorResponse {
+    jsonrpc: "2.0";
+    id: string;
+    error: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+export type A2AResponse = A2ASuccessResponse | A2AErrorResponse;
+export declare const A2A_JSONRPC_VERSION: "2.0";
+export declare const A2A_PROTOCOL_VERSION: "1.0";
+export declare const A2A_VERSION_HEADER: "x-a2a-protocol-version";
+export declare const A2A_JSONRPC_PATH: "/a2a/jsonrpc";
+export declare const A2A_AGENT_CARD_PATH: "/.well-known/agent-card.json";
+export declare const A2A_ERROR_CODES: {
+    readonly PARSE_ERROR: -32700;
+    readonly INVALID_REQUEST: -32600;
+    readonly METHOD_NOT_FOUND: -32601;
+    readonly INVALID_PARAMS: -32602;
+    readonly INTERNAL_ERROR: -32603;
+    readonly UNAUTHORIZED: -32001;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAMD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEvC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAMD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE;QACN,OAAO,EAAE,UAAU,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QACN,OAAO,EAAE,UAAU,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;AAEhE,eAAO,MAAM,mBAAmB,EAAG,KAAc,CAAC;AAClD,eAAO,MAAM,oBAAoB,EAAG,KAAc,CAAC;AACnD,eAAO,MAAM,kBAAkB,EAAG,wBAAiC,CAAC;AACpE,eAAO,MAAM,gBAAgB,EAAG,cAAuB,CAAC;AACxD,eAAO,MAAM,mBAAmB,EAAG,8BAAuC,CAAC;AAE3E,eAAO,MAAM,eAAe;;;;;;;CAOlB,CAAC"}

package/dist/esm/types.js

@@ -0,0 +1,18 @@
+/**
+ * A2A (Agent-to-Agent) protocol types.
+ * Reference: https://google.github.io/A2A
+ */
+export const A2A_JSONRPC_VERSION = "2.0";
+export const A2A_PROTOCOL_VERSION = "1.0";
+export const A2A_VERSION_HEADER = "x-a2a-protocol-version";
+export const A2A_JSONRPC_PATH = "/a2a/jsonrpc";
+export const A2A_AGENT_CARD_PATH = "/.well-known/agent-card.json";
+export const A2A_ERROR_CODES = {
+    PARSE_ERROR: -32700,
+    INVALID_REQUEST: -32600,
+    METHOD_NOT_FOUND: -32601,
+    INVALID_PARAMS: -32602,
+    INTERNAL_ERROR: -32603,
+    UNAUTHORIZED: -32001,
+};
+//# sourceMappingURL=types.js.map

package/dist/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwFH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAc,CAAC;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAc,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAiC,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAuB,CAAC;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,8BAAuC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW,EAAE,CAAC,KAAK;IACnB,eAAe,EAAE,CAAC,KAAK;IACvB,gBAAgB,EAAE,CAAC,KAAK;IACxB,cAAc,EAAE,CAAC,KAAK;IACtB,cAAc,EAAE,CAAC,KAAK;IACtB,YAAY,EAAE,CAAC,KAAK;CACZ,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@keycardai/a2a",
+  "version": "0.1.0",
+  "description": "[Preview] Keycard auth integration for Agent-to-Agent (A2A) protocol servers and clients",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/keycardai/typescript-sdk.git",
+    "directory": "packages/a2a"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js",
+      "types": "./dist/esm/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "typesVersions": {
+    "*": {
+      "*": [
+        "./dist/esm/*"
+      ]
+    }
+  },
+  "scripts": {
+    "build": "pnpm run build:esm && pnpm run build:cjs",
+    "build:esm": "tsc -p tsconfig.prod.json && echo '{\"type\": \"module\"}' > dist/esm/package.json",
+    "build:cjs": "tsc -p tsconfig.cjs.json && echo '{\"type\": \"commonjs\"}' > dist/cjs/package.json",
+    "test": "NODE_OPTIONS='--experimental-vm-modules' jest",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@a2a-js/sdk": "^0.3.13",
+    "@keycardai/express": "workspace:*",
+    "@keycardai/oauth": "workspace:*"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0"
+  },
+  "devDependencies": {
+    "@jest/globals": "^30.0.4",
+    "@types/express": "^5.0.3",
+    "@types/supertest": "^6.0.3",
+    "express": "^5.0.0",
+    "jest": "^30.0.4",
+    "supertest": "^7.1.1",
+    "ts-jest": "^29.4.0",
+    "typescript": "^5.8.3"
+  }
+}