@kodax-ai/kodax 0.7.67 → 0.7.69

package/dist/sdk-a2a.d.ts

@@ -0,0 +1,397 @@
+import { ar as ExternalAgentRegistration, u as AgentEffectDeclaration, x as AgentExecutorFactory } from './types-chunks/types.d-BtC4yLYO.js';
+import { RuntimeKodaXOptions, RuntimeWorkspaceBinding, RuntimeExecutionToolPolicy, RuntimeUserMarkdownAgentRef, KodaXRuntime, RuntimeExternalAgentsOptions } from './sdk-runtime.js';
+import { c as IntegrationConfigSnapshot, e as IntegrationConfigStatus } from './types-chunks/integration-config.d-ojG4swOP.js';
+import './types-chunks/types.d-TTvpAGWf.js';
+import './types-chunks/bash-prefix-extractor.d-BkIA8Wto.js';
+import './types-chunks/types.d-vJExiRje.js';
+import 'vscode-languageserver-protocol';
+import './types-chunks/cost-tracker.d-BeaenODW.js';
+import './types-chunks/capability.d-3C62G8Eq.js';
+import './types-chunks/base.d-CYjtB68X.js';
+import './types-chunks/config.d-CJy1WENT.js';
+import './types-chunks/manager.d-CoEuPRAo.js';
+import './types-chunks/run-manager.d-BaXtkryp.js';
+import './types-chunks/types.d-C9YHEAmA.js';
+import './types-chunks/utils.d-BbB5jzi1.js';
+import './types-chunks/guardrail.d-R7AiGfrI.js';
+import './types-chunks/guardrail.d-6ZDbNbHO.js';
+import 'readline';
+import './types-chunks/public-api.d-7G4--RZE.js';
+import 'child_process';
+
+declare const A2A_PROTOCOL_VERSION = "1.0";
+declare const A2A_EXECUTOR_ID = "kodax-a2a-v1-jsonrpc";
+type A2ATaskState = 'TASK_STATE_UNSPECIFIED' | 'TASK_STATE_SUBMITTED' | 'TASK_STATE_WORKING' | 'TASK_STATE_COMPLETED' | 'TASK_STATE_FAILED' | 'TASK_STATE_CANCELED' | 'TASK_STATE_INPUT_REQUIRED' | 'TASK_STATE_REJECTED' | 'TASK_STATE_AUTH_REQUIRED';
+interface A2APart {
+    readonly text?: string;
+    readonly raw?: string;
+    readonly url?: string;
+    readonly data?: unknown;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+    readonly filename?: string;
+    readonly mediaType?: string;
+}
+interface A2AMessage {
+    readonly messageId: string;
+    readonly contextId?: string;
+    readonly taskId?: string;
+    readonly role: 'ROLE_USER' | 'ROLE_AGENT';
+    readonly parts: readonly A2APart[];
+    readonly metadata?: Readonly<Record<string, unknown>>;
+    readonly extensions?: readonly string[];
+    readonly referenceTaskIds?: readonly string[];
+}
+interface A2ATaskStatus {
+    readonly state: A2ATaskState;
+    readonly message?: A2AMessage;
+    readonly timestamp?: string;
+}
+interface A2AArtifact {
+    readonly artifactId: string;
+    readonly name?: string;
+    readonly description?: string;
+    readonly parts: readonly A2APart[];
+    readonly metadata?: Readonly<Record<string, unknown>>;
+    readonly extensions?: readonly string[];
+}
+interface A2ATask {
+    readonly id: string;
+    readonly contextId: string;
+    readonly status: A2ATaskStatus;
+    readonly artifacts?: readonly A2AArtifact[];
+    readonly history?: readonly A2AMessage[];
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+interface A2AAgentInterface {
+    readonly url: string;
+    readonly protocolBinding: string;
+    readonly tenant?: string;
+    readonly protocolVersion: string;
+}
+interface A2AAgentSkill {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly tags: readonly string[];
+    readonly examples?: readonly string[];
+    readonly inputModes?: readonly string[];
+    readonly outputModes?: readonly string[];
+}
+interface A2AAgentCard {
+    readonly name: string;
+    readonly description: string;
+    readonly supportedInterfaces: readonly A2AAgentInterface[];
+    readonly version: string;
+    readonly capabilities: {
+        readonly streaming?: boolean;
+        readonly pushNotifications?: boolean;
+        readonly extendedAgentCard?: boolean;
+        readonly extensions?: readonly Readonly<Record<string, unknown>>[];
+    };
+    readonly securitySchemes?: Readonly<Record<string, unknown>>;
+    readonly securityRequirements?: readonly Readonly<Record<string, unknown>>[];
+    readonly defaultInputModes: readonly string[];
+    readonly defaultOutputModes: readonly string[];
+    readonly skills: readonly A2AAgentSkill[];
+}
+interface A2AJsonRpcRequest {
+    readonly jsonrpc: '2.0';
+    readonly id: string | number;
+    readonly method: string;
+    readonly params?: Readonly<Record<string, unknown>>;
+}
+interface A2AJsonRpcError {
+    readonly code: number;
+    readonly message: string;
+    readonly data?: unknown;
+}
+interface A2AJsonRpcResponse {
+    readonly jsonrpc: '2.0';
+    readonly id: string | number | null;
+    readonly result?: unknown;
+    readonly error?: A2AJsonRpcError;
+}
+interface A2ANetworkPolicy {
+    readonly allowedOrigins: readonly string[];
+    readonly allowPrivateAddresses: boolean;
+    readonly requestTimeoutMs: number;
+    readonly maxResponseBytes: number;
+    readonly maxRedirects: number;
+}
+interface A2AClientOptions {
+    readonly networkPolicy: A2ANetworkPolicy;
+    readonly pollIntervalMs: number;
+    readonly authorization?: string;
+    /** Trusted transport override. Supplying one opts out of the default DNS-pinned connector. */
+    readonly fetch?: typeof globalThis.fetch;
+}
+interface A2ARegistrationInput {
+    readonly agentId: string;
+    readonly agentCardUrl: string;
+    readonly credentialRef?: string;
+    readonly effects: Pick<AgentEffectDeclaration, 'remote'>;
+}
+interface A2ADiscoveredRegistration {
+    readonly registration: ExternalAgentRegistration;
+    readonly agentCard: A2AAgentCard;
+}
+interface A2APrincipal {
+    readonly subject: string;
+    readonly tenant?: string;
+    readonly scopes: readonly string[];
+}
+interface A2AAuthentication {
+    readonly securitySchemes: Readonly<Record<string, unknown>>;
+    readonly securityRequirements: readonly Readonly<Record<string, unknown>>[];
+    authenticate(request: Request): Promise<A2APrincipal | null>;
+}
+type A2AOperation = 'send-message' | 'send-streaming-message' | 'get-task' | 'list-tasks' | 'cancel-task' | 'subscribe-to-task' | 'get-extended-agent-card';
+interface A2AAuthorizationInput {
+    readonly principal: A2APrincipal;
+    readonly operation: A2AOperation;
+    readonly taskId?: string;
+    readonly contextId?: string;
+    readonly inputModes?: readonly string[];
+}
+interface A2AServerLimits {
+    readonly maxRequestBytes: number;
+    readonly maxPartBytes: number;
+    readonly maxConcurrentTasks: number;
+    /** Maximum synchronous SendMessage wait before returning the current task. */
+    readonly maxTaskWaitMs?: number;
+    /** @deprecated Use maxRetainedTasksPerPrincipal. */
+    readonly maxTasksPerPrincipal?: number;
+    readonly maxActiveTasksPerPrincipal?: number;
+    readonly maxRetainedTasksPerPrincipal?: number;
+    readonly maxEventsPerTask?: number;
+    readonly maxEventBytesPerTask?: number;
+    readonly maxWorkspaceBytesPerContext?: number;
+}
+type A2AServerExecution = {
+    readonly kind: 'runtime-default';
+    readonly profileId?: string;
+    readonly workspace: RuntimeWorkspaceBinding;
+    readonly toolPolicy: RuntimeExecutionToolPolicy;
+} | {
+    readonly kind: 'local-agent';
+    readonly agentRef: RuntimeUserMarkdownAgentRef;
+    readonly profileId?: string;
+    readonly workspace: RuntimeWorkspaceBinding;
+    readonly toolPolicy: RuntimeExecutionToolPolicy;
+};
+interface A2APublishedSkill extends A2AAgentSkill {
+}
+interface A2APublishedAgent {
+    readonly name: string;
+    readonly description: string;
+    readonly version: string;
+    readonly publicBaseUrl: string;
+    readonly skills: readonly A2APublishedSkill[];
+    readonly inputModes: readonly string[];
+    readonly outputModes: readonly string[];
+    readonly profileId?: string;
+    readonly projectPath?: string;
+    readonly runOptions?: RuntimeKodaXOptions;
+}
+interface A2AServerEvent {
+    readonly type: string;
+    readonly time: string;
+    readonly taskId?: string;
+    readonly contextId?: string;
+    readonly runId?: string;
+    readonly outcome?: 'accepted' | 'rejected' | 'completed' | 'failed';
+    readonly diagnosticId?: string;
+}
+interface A2AServerOptions {
+    readonly runtime: KodaXRuntime;
+    readonly agent: A2APublishedAgent;
+    /** When set, prepareKodaXA2AServer binds an immutable Runtime execution snapshot. */
+    readonly execution?: A2AServerExecution;
+    readonly dataDir: string;
+    readonly limits: A2AServerLimits;
+    readonly authentication: A2AAuthentication;
+    authorize(input: A2AAuthorizationInput): Promise<boolean>;
+    readonly extendedAgentCard?: A2AAgentCard;
+    readonly onEvent?: (event: A2AServerEvent) => void;
+    readonly now?: () => Date;
+    readonly signal?: AbortSignal;
+}
+interface A2AServerHotOptions {
+    readonly agent: A2APublishedAgent;
+    readonly limits: A2AServerLimits;
+    readonly authentication: A2AAuthentication;
+    authorize(input: A2AAuthorizationInput): Promise<boolean>;
+    readonly extendedAgentCard?: A2AAgentCard;
+}
+interface KodaXA2AServer {
+    readonly agentCard: A2AAgentCard;
+    whenReady(): Promise<void>;
+    handle(request: Request): Promise<Response>;
+    listen(input: {
+        readonly hostname: string;
+        readonly port: number;
+        readonly publicBaseUrl?: string;
+    }): Promise<string>;
+    /** Atomically replace publication/auth/limit policy for subsequent requests. */
+    updateHot(options: A2AServerHotOptions): void;
+    close(): Promise<void>;
+}
+type CreateA2AAgentExecutorFactory = (options: A2AClientOptions) => AgentExecutorFactory;
+
+declare class A2AError extends Error {
+    readonly code: number;
+    readonly httpStatus: number;
+    readonly data?: unknown | undefined;
+    constructor(code: number, message: string, httpStatus?: number, data?: unknown | undefined);
+}
+declare function errorMessage(error: unknown): string;
+
+declare function isRecord(value: unknown): value is Record<string, unknown>;
+declare function parseA2AAgentCard(value: unknown): A2AAgentCard;
+declare function parseA2APart(value: unknown): A2APart;
+declare function parseA2AMessage(value: unknown): A2AMessage;
+declare function parseA2ATask(value: unknown): A2ATask;
+declare function parseJsonRpcRequest(value: unknown): A2AJsonRpcRequest;
+
+declare function assertSafeA2AUrl(url: URL, policy: A2ANetworkPolicy): Promise<void>;
+interface SafeFetchResult {
+    readonly response: Response;
+    readonly body: Uint8Array;
+    readonly url: URL;
+}
+declare function safeA2AFetch(input: URL, init: RequestInit, policy: A2ANetworkPolicy, fetchImpl?: typeof fetch): Promise<SafeFetchResult>;
+declare function decodeUtf8(body: Uint8Array): string;
+
+declare function discoverA2ARegistration(input: A2ARegistrationInput, options: A2AClientOptions): Promise<A2ADiscoveredRegistration>;
+type A2AClientOptionsResolver = (registration: ExternalAgentRegistration) => A2AClientOptions;
+declare function createA2AAgentExecutorFactory(options: A2AClientOptions | A2AClientOptionsResolver): AgentExecutorFactory;
+
+declare function createKodaXA2AServer(options: A2AServerOptions): KodaXA2AServer;
+/** Prepare an immutable Runtime execution binding before exposing an A2A handler. */
+declare function prepareKodaXA2AServer(options: A2AServerOptions): Promise<KodaXA2AServer>;
+
+type A2AOutboundEffect = 'none' | 'read' | 'write' | 'unknown';
+interface A2AOutboundAgentConfig {
+    readonly cardUrl: string;
+    readonly credentialEnv?: string;
+    readonly effect: A2AOutboundEffect;
+}
+type A2AWorkspaceConfig = {
+    readonly mode: 'managed';
+} | {
+    readonly mode: 'fixed';
+    readonly root: string;
+};
+interface A2AToolPolicyConfig {
+    readonly workspace: 'none' | 'read' | 'write';
+    readonly process: 'deny' | 'isolated';
+    readonly network: {
+        readonly mode: 'deny';
+    } | {
+        readonly mode: 'allowlist';
+        readonly origins: readonly string[];
+    };
+    readonly tools: readonly string[];
+    readonly mcp: Readonly<Record<string, readonly string[]>>;
+    readonly skillScripts: Readonly<Record<string, readonly string[]>>;
+    readonly subagents: 'deny' | 'inherit';
+}
+interface A2AUserMarkdownAgentConfigRef {
+    readonly source: 'markdown:user';
+    readonly name: string;
+}
+interface A2AExecutionBase {
+    readonly profileId?: string;
+    readonly workspace: A2AWorkspaceConfig;
+    readonly toolPolicy: A2AToolPolicyConfig;
+}
+type A2AServerExecutionConfig = (A2AExecutionBase & {
+    readonly kind: 'runtime-default';
+}) | (A2AExecutionBase & {
+    readonly kind: 'local-agent';
+    readonly agentRef: A2AUserMarkdownAgentConfigRef;
+});
+interface A2APublishedSkillConfig {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly tags: readonly string[];
+}
+interface A2APublishedAgentConfig {
+    readonly name: string;
+    readonly description: string;
+    readonly version: string;
+    readonly skills: readonly A2APublishedSkillConfig[];
+    readonly inputModes: readonly string[];
+    readonly outputModes: readonly string[];
+}
+interface A2ABearerAuthenticationConfig {
+    readonly type: 'bearer-env';
+    readonly tokenEnv: string;
+    readonly principalId: string;
+}
+interface A2AServerLimitsConfig {
+    readonly maxRequestBytes: number;
+    readonly maxPartBytes: number;
+    readonly maxConcurrentTasks: number;
+    readonly maxTaskWaitMs: number;
+    readonly maxActiveTasksPerPrincipal: number;
+    readonly maxRetainedTasksPerPrincipal: number;
+    readonly maxEventsPerTask: number;
+    readonly maxEventBytesPerTask: number;
+    readonly maxWorkspaceBytesPerContext: number;
+}
+interface A2AServerConfig {
+    readonly execution: A2AServerExecutionConfig;
+    readonly published: A2APublishedAgentConfig;
+    readonly publicBaseUrl?: string;
+    readonly authentication: A2ABearerAuthenticationConfig;
+    readonly limits: A2AServerLimitsConfig;
+    readonly dataDir: string;
+}
+interface A2AIntegrationDocument {
+    readonly version: 1;
+    readonly agents: Readonly<Record<string, A2AOutboundAgentConfig>>;
+    readonly server?: A2AServerConfig;
+}
+interface A2AServerConfigChange {
+    readonly kind: 'none' | 'hot' | 'restart-required';
+    readonly fields: readonly string[];
+}
+declare function parseA2AIntegrationDocument(value: unknown): A2AIntegrationDocument;
+declare function readA2AIntegration(configHome: string): IntegrationConfigSnapshot<A2AIntegrationDocument>;
+declare function upsertA2AOutboundAgent(configHome: string, name: string, agent: A2AOutboundAgentConfig, expectedRevision?: string): IntegrationConfigSnapshot<A2AIntegrationDocument>;
+declare function removeA2AOutboundAgent(configHome: string, name: string, expectedRevision?: string): boolean;
+declare function setA2AServerConfig(configHome: string, server: A2AServerConfig | undefined, expectedRevision?: string): IntegrationConfigSnapshot<A2AIntegrationDocument>;
+declare function classifyA2AServerChange(current: A2AServerConfig | undefined, next: A2AServerConfig | undefined): A2AServerConfigChange;
+
+declare function createBearerEnvA2AAuthentication(config: A2AServerConfig['authentication'], env?: NodeJS.ProcessEnv): A2AAuthentication;
+declare function createA2AServerOptionsFromConfig(input: {
+    readonly runtime: KodaXRuntime;
+    readonly config: A2AServerConfig;
+    readonly listenBaseUrl: string;
+    readonly env?: NodeJS.ProcessEnv;
+}): A2AServerOptions;
+declare function createA2AServerHotOptions(input: {
+    readonly config: A2AServerConfig;
+    readonly listenBaseUrl: string;
+    readonly env?: NodeJS.ProcessEnv;
+}): A2AServerHotOptions;
+
+interface ConfiguredA2ARuntimeHandle {
+    readonly status: () => IntegrationConfigStatus;
+    reload(): Promise<void>;
+    close(): void;
+}
+interface ConfiguredA2ARuntimeIntegration {
+    readonly runtimeOptions: RuntimeExternalAgentsOptions;
+    start(runtime: KodaXRuntime): Promise<ConfiguredA2ARuntimeHandle>;
+}
+declare function createConfiguredA2ARuntimeIntegration(input: {
+    readonly configHome: string;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly onEvent?: (message: string) => void;
+}): ConfiguredA2ARuntimeIntegration;
+
+export { A2AError, A2A_EXECUTOR_ID, A2A_PROTOCOL_VERSION, assertSafeA2AUrl, classifyA2AServerChange, createA2AAgentExecutorFactory, createA2AServerHotOptions, createA2AServerOptionsFromConfig, createBearerEnvA2AAuthentication, createConfiguredA2ARuntimeIntegration, createKodaXA2AServer, decodeUtf8, discoverA2ARegistration, errorMessage, isRecord, parseA2AAgentCard, parseA2AIntegrationDocument, parseA2AMessage, parseA2APart, parseA2ATask, parseJsonRpcRequest, prepareKodaXA2AServer, readA2AIntegration, removeA2AOutboundAgent, safeA2AFetch, setA2AServerConfig, upsertA2AOutboundAgent };
+export type { A2AAgentCard, A2AAgentInterface, A2AAgentSkill, A2AArtifact, A2AAuthentication, A2AAuthorizationInput, A2ABearerAuthenticationConfig, A2AClientOptions, A2AClientOptionsResolver, A2ADiscoveredRegistration, A2AIntegrationDocument, A2AJsonRpcError, A2AJsonRpcRequest, A2AJsonRpcResponse, A2AMessage, A2ANetworkPolicy, A2AOperation, A2AOutboundAgentConfig, A2AOutboundEffect, A2APart, A2APrincipal, A2APublishedAgent, A2APublishedAgentConfig, A2APublishedSkill, A2APublishedSkillConfig, A2ARegistrationInput, A2AServerConfig, A2AServerConfigChange, A2AServerEvent, A2AServerExecution, A2AServerExecutionConfig, A2AServerHotOptions, A2AServerLimits, A2AServerLimitsConfig, A2AServerOptions, A2ATask, A2ATaskState, A2ATaskStatus, A2AToolPolicyConfig, A2AUserMarkdownAgentConfigRef, A2AWorkspaceConfig, ConfiguredA2ARuntimeHandle, ConfiguredA2ARuntimeIntegration, CreateA2AAgentExecutorFactory, KodaXA2AServer, SafeFetchResult };

package/dist/sdk-a2a.js

@@ -0,0 +1,9 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import"./chunks/chunk-NGJURAY5.js";import"./chunks/chunk-VAZ25MDX.js";import{f as ge,k as me,l as ye}from"./chunks/chunk-M7TCFYTO.js";import"./chunks/chunk-WW2O2DEP.js";import"./chunks/chunk-ZG4DMYBS.js";import"./chunks/chunk-URC6ZI6P.js";import"./chunks/chunk-PA76WUBL.js";import"./chunks/chunk-4WIODYOH.js";import"./chunks/chunk-I4TPQEJN.js";import"./chunks/chunk-Y4WOTWUC.js";import"./chunks/chunk-PQ3XUSY2.js";import"./chunks/chunk-UJEMSPM5.js";import"./chunks/chunk-VYKFM3TB.js";import{b as M}from"./chunks/chunk-AWMTNUDS.js";import"./chunks/chunk-F7C7J6IM.js";import"./chunks/chunk-NGHQIGVW.js";import{a as i}from"./chunks/chunk-ONUPGMER.js";var C="1.0",L="kodax-a2a-v1-jsonrpc";var u=class extends Error{constructor(n,r,s=200,o){super(r);this.code=n;this.httpStatus=s;this.data=o;this.name="A2AError"}code;httpStatus;data;static{i(this,"A2AError")}};function q(t){return t instanceof Error?t.message:String(t)}i(q,"errorMessage");var ze=new Set(["TASK_STATE_UNSPECIFIED","TASK_STATE_SUBMITTED","TASK_STATE_WORKING","TASK_STATE_COMPLETED","TASK_STATE_FAILED","TASK_STATE_CANCELED","TASK_STATE_INPUT_REQUIRED","TASK_STATE_REJECTED","TASK_STATE_AUTH_REQUIRED"]);function A(t){return t!==null&&typeof t=="object"&&!Array.isArray(t)}i(A,"isRecord");function w(t,e,n){let r=t[e];if(typeof r!="string"||r.trim().length===0)throw new u(-32602,`${n}.${e} must be a non-empty string.`);return r}i(w,"requiredString");function m(t,e){let n=t[e];return typeof n=="string"&&n.length>0?n:void 0}i(m,"optionalString");function D(t,e){if(!Array.isArray(t)||!t.every(n=>typeof n=="string"))throw new u(-32602,`${e} must be a string array.`);return t}i(D,"stringArray");function We(t){if(!A(t))throw new u(-32602,"Agent Card interface is invalid.");return{url:w(t,"url","interface"),protocolBinding:w(t,"protocolBinding","interface"),protocolVersion:w(t,"protocolVersion","interface"),...m(t,"tenant")?{tenant:m(t,"tenant")}:{}}}i(We,"parseInterface");function Xe(t){if(!A(t))throw new u(-32602,"Agent Card skill is invalid.");return{id:w(t,"id","skill"),name:w(t,"name","skill"),description:w(t,"description","skill"),tags:D(t.tags,"skill.tags"),...Array.isArray(t.examples)?{examples:D(t.examples,"skill.examples")}:{},...Array.isArray(t.inputModes)?{inputModes:D(t.inputModes,"skill.inputModes")}:{},...Array.isArray(t.outputModes)?{outputModes:D(t.outputModes,"skill.outputModes")}:{}}}i(Xe,"parseSkill");function he(t){if(!A(t))throw new u(-32602,"Agent Card must be an object.");let e=t.supportedInterfaces,n=t.skills;if(!Array.isArray(e)||e.length===0)throw new u(-32602,"Agent Card must declare supportedInterfaces.");if(!Array.isArray(n))throw new u(-32602,"Agent Card must declare skills.");if(!A(t.capabilities))throw new u(-32602,"Agent Card capabilities are invalid.");return{name:w(t,"name","Agent Card"),description:w(t,"description","Agent Card"),supportedInterfaces:e.map(We),version:w(t,"version","Agent Card"),capabilities:{...typeof t.capabilities.streaming=="boolean"?{streaming:t.capabilities.streaming}:{},...typeof t.capabilities.pushNotifications=="boolean"?{pushNotifications:t.capabilities.pushNotifications}:{},...typeof t.capabilities.extendedAgentCard=="boolean"?{extendedAgentCard:t.capabilities.extendedAgentCard}:{},...Array.isArray(t.capabilities.extensions)?{extensions:t.capabilities.extensions.filter(A)}:{}},...A(t.securitySchemes)?{securitySchemes:t.securitySchemes}:{},...Array.isArray(t.securityRequirements)?{securityRequirements:t.securityRequirements.filter(A)}:{},defaultInputModes:D(t.defaultInputModes,"Agent Card defaultInputModes"),defaultOutputModes:D(t.defaultOutputModes,"Agent Card defaultOutputModes"),skills:n.map(Xe)}}i(he,"parseA2AAgentCard");function we(t){if(!A(t))throw new u(-32602,"Message Part must be an object.");if(["text","raw","url","data"].filter(n=>t[n]!==void 0).length!==1)throw new u(-32602,"Message Part must contain exactly one content field.");return{...typeof t.text=="string"?{text:t.text}:{},...typeof t.raw=="string"?{raw:t.raw}:{},...typeof t.url=="string"?{url:t.url}:{},...t.data!==void 0?{data:t.data}:{},...A(t.metadata)?{metadata:t.metadata}:{},...m(t,"filename")?{filename:m(t,"filename")}:{},...m(t,"mediaType")?{mediaType:m(t,"mediaType")}:{}}}i(we,"parseA2APart");function v(t){if(!A(t))throw new u(-32602,"Message must be an object.");if(t.role!=="ROLE_USER"&&t.role!=="ROLE_AGENT")throw new u(-32602,"Message role is invalid.");if(!Array.isArray(t.parts)||t.parts.length===0)throw new u(-32602,"Message parts must not be empty.");return{messageId:w(t,"messageId","Message"),role:t.role,parts:t.parts.map(we),...m(t,"contextId")?{contextId:m(t,"contextId")}:{},...m(t,"taskId")?{taskId:m(t,"taskId")}:{},...A(t.metadata)?{metadata:t.metadata}:{}}}i(v,"parseA2AMessage");function Ge(t){if(!A(t)||!Array.isArray(t.parts)||t.parts.length===0)throw new u(-32603,"A2A artifact is invalid.");return{artifactId:w(t,"artifactId","Artifact"),parts:t.parts.map(we),...m(t,"name")?{name:m(t,"name")}:{},...m(t,"description")?{description:m(t,"description")}:{},...A(t.metadata)?{metadata:t.metadata}:{}}}i(Ge,"parseArtifact");function I(t){if(!A(t)||!A(t.status))throw new u(-32603,"A2A task is invalid.");let e=t.status.state;if(typeof e!="string"||!ze.has(e))throw new u(-32603,"A2A task state is invalid.");return{id:w(t,"id","Task"),contextId:w(t,"contextId","Task"),status:{state:e,...t.status.message!==void 0?{message:v(t.status.message)}:{},...m(t.status,"timestamp")?{timestamp:m(t.status,"timestamp")}:{}},...Array.isArray(t.artifacts)?{artifacts:t.artifacts.map(Ge)}:{},...Array.isArray(t.history)?{history:t.history.map(v)}:{},...A(t.metadata)?{metadata:t.metadata}:{}}}i(I,"parseA2ATask");function ke(t){if(!A(t)||t.jsonrpc!=="2.0")throw new u(-32600,"Invalid JSON-RPC request.");if(typeof t.id!="string"&&typeof t.id!="number")throw new u(-32600,"JSON-RPC request id is required.");return{jsonrpc:"2.0",id:t.id,method:w(t,"method","JSON-RPC request"),...A(t.params)?{params:t.params}:{}}}i(ke,"parseJsonRpcRequest");import{lookup as Ve}from"node:dns/promises";import{request as Qe}from"node:http";import{request as Ze}from"node:https";import{isIP as Ye}from"node:net";import{Readable as et}from"node:stream";function tt(t){let e=t.split(".").map(Number),[n,r]=e;return e.length!==4||n===void 0||r===void 0?!0:n===0||n===10||n===127||n===169&&r===254||n===172&&r>=16&&r<=31||n===192&&r===168||n>=224}i(tt,"isPrivateIpv4");function nt(t){let e=t.toLowerCase();return e==="::"||e==="::1"||e.startsWith("fc")||e.startsWith("fd")||e.startsWith("fe8")||e.startsWith("fe9")||e.startsWith("fea")||e.startsWith("feb")||e.startsWith("ff")}i(nt,"isPrivateIpv6");function Te(t){let e=Ye(t);return e===4?tt(t):e===6?nt(t):!0}i(Te,"isPrivateAddress");async function Se(t,e){if(t.protocol!=="https:"&&t.protocol!=="http:")throw new u(-32602,"A2A URL must use HTTP or HTTPS.");if(!e.allowedOrigins.includes(t.origin))throw new u(-32602,`A2A origin is not allowed: ${t.origin}`);if(t.username||t.password)throw new u(-32602,"A2A URL must not include credentials.");let n=await Ve(t.hostname,{all:!0,verbatim:!0});if(n.length===0)throw new u(-32602,"A2A hostname did not resolve.");if(t.protocol==="http:"&&!n.every(s=>Te(s.address)))throw new u(-32602,"Public A2A targets must use HTTPS.");if(!e.allowPrivateAddresses&&n.some(s=>Te(s.address)))throw new u(-32602,"A2A private network targets are not allowed.");let r=n[0];if(r===void 0||r.family!==4&&r.family!==6)throw new u(-32602,"A2A hostname returned an unsupported address.");return{address:r.address,family:r.family}}i(Se,"validateA2AUrl");async function rt(t,e){await Se(t,e)}i(rt,"assertSafeA2AUrl");function st(t){if(t==null||typeof t=="string")return t??void 0;if(t instanceof URLSearchParams)return t.toString();if(t instanceof Uint8Array)return t;if(t instanceof ArrayBuffer)return new Uint8Array(t);if(ArrayBuffer.isView(t))return new Uint8Array(t.buffer,t.byteOffset,t.byteLength);throw new u(-32602,"A2A request body type is not supported by the safe transport.")}i(st,"encodeRequestBody");function ot(t){return((e,n,r)=>{if(typeof n=="object"&&n.all){r(null,[t]);return}r(null,t.address,t.family)})}i(ot,"pinnedLookup");function it(t,e,n){return new Promise((r,s)=>{let o=new Headers(e.headers);o.set("accept-encoding","identity");let a=(t.protocol==="https:"?Ze:Qe)(t,{method:e.method,headers:Object.fromEntries(o),lookup:ot(n),signal:e.signal??void 0},d=>{let c=new Headers;for(let f=0;f<d.rawHeaders.length;f+=2){let E=d.rawHeaders[f],b=d.rawHeaders[f+1];E!==void 0&&b!==void 0&&c.append(E,b)}let l=d.statusCode??500,g=e.method!=="HEAD"&&l!==204&&l!==205&&l!==304?et.toWeb(d):null;r(new Response(g,{status:l,statusText:d.statusMessage,headers:c}))});a.once("error",s),a.end(st(e.body))})}i(it,"requestValidatedAddress");async function oe(t,e,n,r){let s=await Se(t,n);return r!==void 0?r(t,e):it(t,e,s)}i(oe,"openSafeA2AResponse");async function at(t,e){let n=t.headers.get("content-length");if(n&&Number(n)>e)throw new u(-32603,"A2A response is too large.");if(!t.body)return new Uint8Array;let r=t.body.getReader(),s=[],o=0;for(;;){let c=await r.read();if(c.done)break;if(o+=c.value.byteLength,o>e)throw await r.cancel(),new u(-32603,"A2A response is too large.");s.push(c.value)}let a=new Uint8Array(o),d=0;for(let c of s)a.set(c,d),d+=c.byteLength;return a}i(at,"boundedBody");async function W(t,e,n,r){let s=t,o=new Headers(e.headers).get("authorization");for(let a=0;a<=n.maxRedirects;a+=1){let d=new AbortController,c=setTimeout(()=>d.abort(new Error("A2A request timed out.")),n.requestTimeoutMs),l=new Headers(e.headers);o===null?l.delete("authorization"):l.set("authorization",o);try{let p=await oe(s,{...e,headers:l,redirect:"manual",signal:d.signal},n,r);if(p.status<300||p.status>=400)return{response:p,body:await at(p,n.maxResponseBytes),url:s};let g=p.headers.get("location");if(!g||a===n.maxRedirects)throw new u(-32603,"A2A redirect limit exceeded.");let f=new URL(g,s);await p.body?.cancel(),f.origin!==s.origin&&(o=null),s=f}finally{clearTimeout(c)}}throw new u(-32603,"A2A redirect limit exceeded.")}i(W,"safeA2AFetch");function X(t){return new TextDecoder("utf-8",{fatal:!0}).decode(t)}i(X,"decodeUtf8");import{createHash as dt,randomUUID as ie}from"node:crypto";function V(t){return Array.isArray(t)?`[${t.map(V).join(",")}]`:A(t)?`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${V(t[e])}`).join(",")}}`:JSON.stringify(t)??"null"}i(V,"stableJson");function Re(t){return`sha256:${dt("sha256").update(t).digest("hex")}`}i(Re,"sha256");function N(t){let e=t.executorConfig;if(!A(e))throw new Error("A2A registration executorConfig is missing.");if(typeof e.agentCardUrl!="string"||typeof e.interfaceUrl!="string")throw new Error("A2A registration endpoints are invalid.");return{agentCardUrl:e.agentCardUrl,interfaceUrl:e.interfaceUrl,...typeof e.tenant=="string"?{tenant:e.tenant}:{}}}i(N,"executorConfig");function ct(t){let e=t.supportedInterfaces.find(n=>n.protocolBinding.toUpperCase()==="JSONRPC"&&n.protocolVersion==="1.0");if(!e)throw new Error("Agent Card has no supported A2A 1.0 JSONRPC interface.");return e}i(ct,"chooseInterface");function de(t,e){try{return JSON.parse(t)}catch{throw new Error(`${e} returned invalid JSON.`)}}i(de,"parseJson");async function be(t,e){let n=await W(new URL(t.agentCardUrl),{headers:{accept:"application/json"}},e.networkPolicy,e.fetch);if(!n.response.ok)throw new Error(`Agent Card request failed with HTTP ${n.response.status}.`);if(!n.response.headers.get("content-type")?.toLowerCase().includes("json"))throw new Error("Agent Card response is not JSON.");let r=he(de(X(n.body),"Agent Card")),s=ct(r),o=V({agentCardUrl:n.url.href,interfaceUrl:s.url,protocolBinding:s.protocolBinding,protocolVersion:s.protocolVersion,tenant:s.tenant??""}),a=Re(V(r));return{agentCard:r,registration:{agentId:t.agentId,displayName:r.name,description:r.description,enabled:!0,executorId:L,protocol:"a2a",configurationRevision:a,endpointIdentityHash:Re(o),...t.credentialRef?{credentialRef:t.credentialRef}:{},executorConfig:{agentCardUrl:n.url.href,interfaceUrl:s.url,...s.tenant?{tenant:s.tenant}:{}},skills:r.skills.map(d=>d.id),inputModalities:r.defaultInputModes,outputModalities:r.defaultOutputModes,capabilities:{streaming:r.capabilities.streaming?"supported":"unsupported",durableTasks:"supported",inputRequired:"supported",cancellation:"supported",artifacts:"supported"},effects:{remote:t.effects.remote,workspace:"proposal"},health:{status:"healthy",checkedAt:new Date().toISOString()}}}}i(be,"discoverA2ARegistration");function ce(t){return t.metadata??{}}i(ce,"metadata");function Ee(t){let e=ce(t).directMessage;return e===void 0?void 0:v(e)}i(Ee,"directMessage");function ve(t){return{TASK_STATE_UNSPECIFIED:"unknown",TASK_STATE_SUBMITTED:"submitted",TASK_STATE_WORKING:"working",TASK_STATE_COMPLETED:"completed",TASK_STATE_FAILED:"failed",TASK_STATE_CANCELED:"canceled",TASK_STATE_INPUT_REQUIRED:"input-required",TASK_STATE_REJECTED:"rejected",TASK_STATE_AUTH_REQUIRED:"auth-required"}[t]}i(ve,"taskState");function Q(t){return t.flatMap(e=>e.text===void 0?[]:[e.text]).join(`
+`)}i(Q,"textFromParts");function ut(t){let e=t.parts.find(n=>n.url!==void 0);return{name:t.name??t.artifactId,...t.parts[0]?.mediaType?{mimeType:t.parts[0].mediaType}:{},...e?.url?{uri:e.url}:{},provenance:"a2a"}}i(ut,"artifactReference");function G(t){let e=(t.artifacts??[]).flatMap(s=>Q(s.parts)),n=t.status.message?Q(t.status.message.parts):"",r=[...e,n].filter(Boolean).join(`
+`);return{state:ve(t.status.state),...r?{output:r}:{},...t.status.state==="TASK_STATE_FAILED"?{error:n||"Remote A2A task failed."}:{},...t.artifacts?.length?{artifacts:t.artifacts.map(ut)}:{}}}i(G,"snapshotFromTask");function ae(t){return{state:"completed",output:Q(t.parts)}}i(ae,"snapshotFromMessage");function xe(t){return t==="completed"||t==="failed"||t==="canceled"||t==="rejected"}i(xe,"isTerminal");var ue=class{constructor(e,n,r){this.registration=e;this.context=n;this.options=r}registration;context;options;static{i(this,"A2AClientExecutor")}#e=!1;#t=new Set;async preflight(){try{return N(this.registration),{ok:!0}}catch(e){return{ok:!1,reasons:[e instanceof Error?e.message:String(e)]}}}async start(e){let n=e.idempotencyKey;if(!n)throw new Error("A2A executor requires an idempotency key.");let r=await this.sendMessage({message:{messageId:n,role:"ROLE_USER",parts:[{text:e.input??e.objective,mediaType:"text/plain"}]},configuration:{returnImmediately:!0}});if(A(r.task)){let s=I(r.task);return{idempotencyKey:n,remoteTaskId:s.id,metadata:{contextId:s.contextId}}}if(r.message!==void 0)return{idempotencyKey:n,metadata:{directMessage:v(r.message)}};throw new Error("A2A SendMessage returned neither task nor message.")}async*events(e){let n=Ee(e);if(n){yield ae(n);return}if(this.registration.capabilities.streaming==="supported"&&!this.registration.credentialRef)try{yield*this.streamEvents(e);return}catch(r){if(this.#e)return;M({source:"a2a.client",level:"warn",message:"A2A event stream failed; polling fallback started.",detail:r}),yield{progress:{message:"A2A stream unavailable; polling."}}}for(;!this.#e;){let r=await this.get(e);if(yield r,xe(r.state)||r.state==="input-required"||r.state==="auth-required")return;await new Promise(s=>setTimeout(s,this.options.pollIntervalMs))}}async get(e){let n=Ee(e);if(n)return ae(n);if(!e.remoteTaskId)throw new Error("A2A task reference has no remote task ID.");return G(I(await this.rpc("GetTask",this.taskParams(e))))}async sendInput(e,n){if(!e.remoteTaskId)throw new Error("Direct A2A responses cannot accept input.");await this.sendMessage({message:{messageId:ie(),taskId:e.remoteTaskId,...typeof ce(e).contextId=="string"?{contextId:ce(e).contextId}:{},role:"ROLE_USER",parts:[{text:n.content,mediaType:"text/plain"}]},configuration:{returnImmediately:!0}})}async cancel(e){return e.remoteTaskId?G(I(await this.rpc("CancelTask",this.taskParams(e)))):this.get(e)}async reconcile(e){return this.get(e)}async dispose(){this.#e=!0;for(let e of this.#t)e.abort(new Error("A2A executor disposed."))}async*streamEvents(e){if(!e.remoteTaskId)throw new Error("A2A stream requires a remote task ID.");let n=N(this.registration),r=new URL(n.interfaceUrl),s=new Headers({accept:"text/event-stream","a2a-version":"1.0","content-type":"application/json"});this.options.authorization&&s.set("authorization",this.options.authorization);let o=new AbortController;this.#t.add(o);let a,d=i(()=>{a!==void 0&&clearTimeout(a),a=void 0},"disarmTimeout"),c=i(l=>{d(),a=setTimeout(()=>o.abort(new Error(l)),this.options.networkPolicy.requestTimeoutMs),a.unref?.()},"armTimeout");try{c("A2A stream connection timed out.");let l=await oe(r,{method:"POST",headers:s,redirect:"manual",signal:o.signal,body:JSON.stringify({jsonrpc:"2.0",id:ie(),method:"SubscribeToTask",params:this.taskParams(e)})},this.options.networkPolicy,this.options.fetch);if(d(),!l.ok||!l.body)throw new Error(`A2A stream failed with HTTP ${l.status}.`);if(!l.headers.get("content-type")?.toLowerCase().startsWith("text/event-stream"))throw new Error("A2A stream returned an invalid content type.");let p=l.body.getReader(),g=new TextDecoder,f="",E=0;for(;!this.#e;){c("A2A stream was idle for too long.");let b=await p.read();if(d(),b.done)break;if(E+=b.value.byteLength,E>this.options.networkPolicy.maxResponseBytes)throw new Error("A2A stream exceeded the response size limit.");f+=g.decode(b.value,{stream:!0});let J=f.split(/\r?\n\r?\n/);f=J.pop()??"";for(let z of J){let re=z.split(/\r?\n/).filter(se=>se.startsWith("data:")).map(se=>se.slice(5).trimStart()).join(`
+`);if(!re)continue;let x=this.snapshotFromStreamPayload(de(re,"A2A stream"));if(x&&(yield x,x.state&&(xe(x.state)||x.state==="input-required"||x.state==="auth-required")))return}}}finally{d(),this.#t.delete(o)}}snapshotFromStreamPayload(e){if(!A(e))throw new Error("A2A stream frame is invalid.");if(e.error!==void 0){let n=A(e.error)?e.error:{};throw new u(typeof n.code=="number"?n.code:-32603,typeof n.message=="string"?n.message:"A2A stream error.")}if(A(e.result)){if(e.result.task!==void 0)return G(I(e.result.task));if(e.result.message!==void 0)return ae(v(e.result.message));if(A(e.result.statusUpdate)&&A(e.result.statusUpdate.status)){let n=e.result.statusUpdate.status.state;if(typeof n!="string")throw new Error("A2A status update has no state.");let r=e.result.statusUpdate.status.message,s=r===void 0?"":Q(v(r).parts);return{state:ve(n),...s?{output:s}:{}}}if(A(e.result.artifactUpdate)&&e.result.artifactUpdate.artifact!==void 0){let n=I({id:"stream-artifact",contextId:"stream-artifact",status:{state:"TASK_STATE_WORKING"},artifacts:[e.result.artifactUpdate.artifact]});return G(n)}}}taskParams(e){let n=N(this.registration);return{id:e.remoteTaskId,...n.tenant?{tenant:n.tenant}:{}}}async sendMessage(e){let n=await this.rpc("SendMessage",{...e,...N(this.registration).tenant?{tenant:N(this.registration).tenant}:{}});if(!A(n))throw new Error("A2A SendMessage result is invalid.");return n}async rpc(e,n){if(this.#e)throw new Error("A2A executor is disposed.");let r=i(s=>this.rpcWithAuthorization(e,n,s),"run");return this.registration.credentialRef?this.context.withCredential(this.registration.credentialRef,s=>r(`Bearer ${s}`)):r(this.options.authorization)}async rpcWithAuthorization(e,n,r){let s=N(this.registration),o=new Headers({accept:"application/json","a2a-version":"1.0","content-type":"application/json"});r&&o.set("authorization",r);let a=await W(new URL(s.interfaceUrl),{method:"POST",headers:o,body:JSON.stringify({jsonrpc:"2.0",id:ie(),method:e,params:n})},this.options.networkPolicy,this.options.fetch);if(!a.response.headers.get("content-type")?.toLowerCase().includes("json"))throw new Error("A2A JSON-RPC response has an invalid content type.");let d=de(X(a.body),"A2A endpoint");if(!A(d))throw new Error("A2A JSON-RPC response is invalid.");let c=d;if(c.error)throw new u(c.error.code,c.error.message,a.response.status);if(!a.response.ok)throw new Error(`A2A request failed with HTTP ${a.response.status}.`);return c.result}};function Ie(t){return{executorId:L,protocol:"a2a",async create(e,n){let r=typeof t=="function"?t(e):t;return new ue(e,n,r)}}}i(Ie,"createA2AAgentExecutorFactory");import{createHash as At,randomUUID as K}from"node:crypto";import j from"node:fs";import{createServer as pt}from"node:http";import U from"node:path";import{Readable as Pe}from"node:stream";import k from"node:fs";import le from"node:path";function _(t){return structuredClone(t)}i(_,"clone");function lt(t){if(!A(t))throw new Error("A2A task store record must be an object.");for(let e of["taskId","contextId","principalKey","runtimeIdentity","sessionId","createdAt","updatedAt"])if(typeof t[e]!="string")throw new Error(`A2A task store record has invalid ${e}.`);if(!A(t.messageDigests)||!Object.values(t.messageDigests).every(e=>typeof e=="string"))throw new Error("A2A task store message digests are invalid.");if(!Array.isArray(t.runIds)||!t.runIds.every(e=>typeof e=="string"))throw new Error("A2A task store run IDs are invalid.");if(!Array.isArray(t.history))throw new Error("A2A task store history is invalid.");if(!Number.isSafeInteger(t.eventSeq)||!Number.isSafeInteger(t.lastRuntimeEventSeq))throw new Error("A2A task store event cursors are invalid.");return{taskId:t.taskId,contextId:t.contextId,principalKey:t.principalKey,runtimeIdentity:t.runtimeIdentity,sessionId:t.sessionId,...typeof t.workspaceRoot=="string"?{workspaceRoot:t.workspaceRoot}:{},...typeof t.executionPolicyRevision=="string"?{executionPolicyRevision:t.executionPolicyRevision}:{},messageDigests:t.messageDigests,runIds:t.runIds,task:I(t.task),history:t.history,createdAt:t.createdAt,updatedAt:t.updatedAt,eventSeq:t.eventSeq,lastRuntimeEventSeq:t.lastRuntimeEventSeq,runtimeEventCount:Number.isSafeInteger(t.runtimeEventCount)?t.runtimeEventCount:0,runtimeEventBytes:Number.isSafeInteger(t.runtimeEventBytes)?t.runtimeEventBytes:0}}i(lt,"parseRecord");var Z=class{static{i(this,"A2AFileTaskStore")}#e=new Map;#t=new Map;#n;#r;#s;constructor(e){let n=le.resolve(e);k.mkdirSync(n,{recursive:!0,mode:448}),this.#n=le.join(n,"tasks.json"),this.#r=le.join(n,".server.lock"),this.#s=this.acquireLock();try{this.load()}catch(r){throw k.closeSync(this.#s),k.rmSync(this.#r,{force:!0}),r}}get(e){let n=this.#e.get(e);return n?_(n):void 0}findByMessage(e,n){for(let r of this.#e.values())if(r.principalKey===e&&r.messageDigests[n]!==void 0)return _(r)}list(e){return[...this.#e.values()].filter(n=>n.principalKey===e).sort((n,r)=>r.updatedAt.localeCompare(n.updatedAt)).map(_)}all(){return[...this.#e.values()].map(_)}save(e){let n=_(e);this.#e.set(e.taskId,n),this.persist();for(let r of this.#t.get(e.taskId)??[])r(_(n));return _(n)}subscribe(e,n){let r=this.#t.get(e)??new Set;return r.add(n),this.#t.set(e,r),()=>{r.delete(n),r.size===0&&this.#t.delete(e)}}close(){this.persist(),this.#t.clear(),k.closeSync(this.#s),k.rmSync(this.#r,{force:!0})}acquireLock(){let e=i(()=>{let n=k.openSync(this.#r,"wx",384);return k.writeFileSync(n,`${process.pid}
+`,"utf8"),k.fsyncSync(n),n},"attempt");try{return e()}catch(n){let r=!1;try{let s=Number.parseInt(k.readFileSync(this.#r,"utf8").trim(),10);if(Number.isSafeInteger(s)&&s>0)try{process.kill(s,0)}catch{r=!0}}catch{r=!1}if(!r)throw new Error("A2A task store is already owned by another server.",{cause:n});return k.rmSync(this.#r,{force:!0}),e()}}load(){if(!k.existsSync(this.#n))return;let e;try{e=JSON.parse(k.readFileSync(this.#n,"utf8"))}catch(n){throw new Error(`Failed to read A2A task store: ${n instanceof Error?n.message:String(n)}`)}if(!Array.isArray(e))throw new Error("A2A task store root must be an array.");for(let n of e){let r=lt(n);this.#e.set(r.taskId,r)}}persist(){let e=`${this.#n}.${process.pid}.tmp`;k.writeFileSync(e,`${JSON.stringify([...this.#e.values()],null,2)}
+`,{encoding:"utf8",mode:384}),k.renameSync(e,this.#n)}};var R=new Set(["TASK_STATE_COMPLETED","TASK_STATE_FAILED","TASK_STATE_CANCELED","TASK_STATE_REJECTED"]),ft=new Set(["CreateTaskPushNotificationConfig","GetTaskPushNotificationConfig","ListTaskPushNotificationConfigs","DeleteTaskPushNotificationConfig"]);function y(t){return t().toISOString()}i(y,"nowIso");function P(t){return At("sha256").update(t).digest("hex")}i(P,"sha256");function O(t){return P(`${t.subject}\0${t.tenant??""}`)}i(O,"principalKey");function Oe(t){let e=t.toLowerCase().replace(/^\[|\]$/g,"");return e==="localhost"||e==="127.0.0.1"||e==="::1"}i(Oe,"isLoopbackHostname");function gt(t){let e=new URL(t);if(e.protocol!=="https:"&&!(e.protocol==="http:"&&Oe(e.hostname)))throw new Error("Published A2A base URL must use HTTPS, except on loopback.");if(e.username||e.password)throw new Error("Published A2A base URL must not contain credentials.");return e}i(gt,"validateBaseUrl");function mt(t){let n={SendMessage:"send-message",SendStreamingMessage:"send-streaming-message",GetTask:"get-task",ListTasks:"list-tasks",CancelTask:"cancel-task",SubscribeToTask:"subscribe-to-task",GetExtendedAgentCard:"get-extended-agent-card"}[t];if(!n)throw new u(-32601,"Method not found.");return n}i(mt,"operationForMethod");function yt(t){return{queued:"TASK_STATE_SUBMITTED",running:"TASK_STATE_WORKING",waiting_permission:"TASK_STATE_WORKING",waiting_user_input:"TASK_STATE_INPUT_REQUIRED",completed:"TASK_STATE_COMPLETED",failed:"TASK_STATE_FAILED",cancelled:"TASK_STATE_CANCELED",interrupted:"TASK_STATE_FAILED"}[t]}i(yt,"statusState");function Ce(t,e,n){return{messageId:K(),taskId:t,contextId:e,role:"ROLE_AGENT",parts:[{text:n,mediaType:"text/plain"}]}}i(Ce,"agentMessage");function Ae(t,e=t.agent.publicBaseUrl){let n=new URL("/",gt(e)).href;return{name:t.agent.name,description:t.agent.description,supportedInterfaces:[{url:n,protocolBinding:"JSONRPC",protocolVersion:"1.0"}],version:t.agent.version,capabilities:{streaming:!0,pushNotifications:!1,extendedAgentCard:t.extendedAgentCard!==void 0},securitySchemes:t.authentication.securitySchemes,securityRequirements:t.authentication.securityRequirements,defaultInputModes:t.agent.inputModes,defaultOutputModes:t.agent.outputModes,skills:t.agent.skills}}i(Ae,"buildCard");function $(t,e=200,n){return new Response(JSON.stringify(t),{status:e,headers:{"content-type":"application/json; charset=utf-8",...n}})}i($,"jsonResponse");async function ht(t,e){let n=Number(t.headers.get("content-length"));if(Number.isFinite(n)&&n>e)throw new u(-32600,"A2A request exceeds the configured limit.",413);if(!t.body)return new Uint8Array;let r=[],s=0,o=t.body.getReader();for(;;){let c=await o.read();if(c.done)break;if(s+=c.value.byteLength,s>e)throw await o.cancel("A2A request size limit exceeded."),new u(-32600,"A2A request exceeds the configured limit.",413);r.push(c.value)}let a=new Uint8Array(s),d=0;for(let c of r)a.set(c,d),d+=c.byteLength;return a}i(ht,"readBoundedBody");function B(t,e){return $({jsonrpc:"2.0",id:t,result:e})}i(B,"rpcResult");function wt(t,e){let r={[-32001]:"TASK_NOT_FOUND",[-32002]:"TASK_NOT_CANCELABLE",[-32003]:"PUSH_NOTIFICATION_NOT_SUPPORTED",[-32004]:"UNSUPPORTED_OPERATION",[-32005]:"CONTENT_TYPE_NOT_SUPPORTED",[-32006]:"INVALID_AGENT_RESPONSE",[-32007]:"EXTENDED_AGENT_CARD_NOT_CONFIGURED",[-32008]:"EXTENSION_SUPPORT_REQUIRED",[-32009]:"VERSION_NOT_SUPPORTED"}[e.code],s=e.data??(r?[{"@type":"type.googleapis.com/google.rpc.ErrorInfo",reason:r,domain:"kodax.ai"}]:void 0);return $({jsonrpc:"2.0",id:t,error:{code:e.code,message:e.message,...s!==void 0?{data:s}:{}}},e.httpStatus)}i(wt,"rpcError");function _e(t){return P(JSON.stringify(t))}i(_e,"messageDigest");function kt(t){return t.text!==void 0?Buffer.byteLength(t.text):t.raw!==void 0?Buffer.byteLength(t.raw,"base64"):t.url!==void 0?Buffer.byteLength(t.url):Buffer.byteLength(JSON.stringify(t.data))}i(kt,"partBytes");function Ue(t){if(!j.existsSync(t))return 0;let e=0;for(let n of j.readdirSync(t,{withFileTypes:!0})){let r=U.join(t,n.name);n.isSymbolicLink()||(n.isDirectory()?e+=Ue(r):n.isFile()&&(e+=j.statSync(r).size))}return e}i(Ue,"directoryBytes");function Tt(t,e,n){if(t.role!=="ROLE_USER")throw new u(-32602,"Inbound message role must be ROLE_USER.");for(let r of t.parts){if(kt(r)>e)throw new u(-32602,"Message Part exceeds the configured limit.");if(r.url!==void 0)throw new u(-32602,"Remote file URLs are not accepted by this server.");if(r.raw!==void 0&&!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(r.raw))throw new u(-32602,"Message Part raw content is not valid base64.");let s=r.mediaType??(r.text!==void 0?"text/plain":r.data!==void 0?"application/json":"application/octet-stream");if(!n.includes(s))throw new u(-32005,`Media type ${s} is not supported.`)}}i(Tt,"validateInput");function St(t,e,n){if(n===0){let{history:s,...o}=t;return o}let r=n===void 0?e:e.slice(-n);return{...t,history:r}}i(St,"withHistory");var Y=class{constructor(e){this.options=e;this.#t=e.now??(()=>new Date),this.#e=new Z(e.dataDir),this.#i=Ae(e),this.#d=this.recover()}options;static{i(this,"KodaXA2AServerRuntime")}#e;#t;#n=new Map;#r=new Set;#s=new Map;#d;#a;#o=!1;#i;#c;get agentCard(){return structuredClone(this.#i)}async whenReady(){await this.#d}updateHot(e){if(this.#o)throw new Error("A2A server is closed.");this.options={...this.options,...e},this.#i=Ae(this.options,e.agent.publicBaseUrl)}async handle(e){if(await this.#d,this.#o)return $({error:"A2A server is closed."},503);let n=new URL(e.url);if(e.method==="GET"&&n.pathname==="/.well-known/agent-card.json"){let r=JSON.stringify(this.#i);return $(this.#i,200,{etag:`"${P(r)}"`,"cache-control":"public, max-age=300"})}return e.method!=="POST"||n.pathname!=="/"&&n.pathname!=="/a2a"?$({error:"Not found."},404):this.handleRpc(e)}async listen(e){if(this.#a)throw new Error("A2A server is already listening.");if(!Oe(e.hostname))throw new Error("The built-in A2A HTTP listener is loopback-only; use handle() behind TLS for public service.");let n=pt((o,a)=>{this.handleNodeRequest(o).then(d=>{if(a.statusCode=d.status,d.headers.forEach((c,l)=>a.setHeader(l,c)),!d.body){a.end();return}Pe.fromWeb(d.body).pipe(a)}).catch(d=>{let c=P(q(d)).slice(0,16);this.emit({type:"server.request_failed",time:y(this.#t),outcome:"failed",diagnosticId:c}),a.statusCode=500,a.setHeader("content-type","application/json; charset=utf-8"),a.end(JSON.stringify({error:"Internal server error.",diagnosticId:c}))})});this.#a=n,await new Promise((o,a)=>{n.once("error",a),n.listen(e.port,e.hostname,o)});let r=n.address();if(!r||typeof r=="string")throw new Error("A2A server did not expose a TCP address.");let s=`http://${e.hostname}:${r.port}`;return this.#c=e.publicBaseUrl??s,this.#i=Ae(this.options,this.#c),s}async close(){if(this.#o)return;this.#o=!0;for(let n of this.#r)n();this.#r.clear();for(let n of this.#n.values())n.close();this.#n.clear(),this.#e.close();let e=this.#a;this.#a=void 0,e&&await new Promise((n,r)=>e.close(s=>s?r(s):n())),await this.options.preparedExecution?.close()}async handleNodeRequest(e){let r=`http://${e.headers.host??"127.0.0.1"}${e.url??"/"}`,s=new Headers;for(let[a,d]of Object.entries(e.headers))if(typeof d=="string")s.set(a,d);else for(let c of d??[])s.append(a,c);let o={method:e.method,headers:s,...e.method==="GET"||e.method==="HEAD"?{}:{body:Pe.toWeb(e)},duplex:"half"};return this.handle(new Request(r,o))}async handleRpc(e){let n=this.options,r=null;try{let s=e.headers.get("a2a-version");if(s&&s!=="1.0")throw new u(-32009,"A2A version is not supported.");if(!e.headers.get("content-type")?.toLowerCase().includes("application/json"))throw new u(-32600,"A2A JSON-RPC requests require application/json.",415);let o=await ht(e,n.limits.maxRequestBytes),a;try{a=JSON.parse(new TextDecoder().decode(o))}catch{throw new u(-32700,"Invalid JSON payload.")}let d=ke(a);r=d.id;let c=await n.authentication.authenticate(e);if(!c)throw new u(-32600,"Authentication required.",401);if(ft.has(d.method))throw new u(-32003,"Push notifications are not supported.");let l=mt(d.method),p=typeof d.params?.id=="string"?d.params.id:A(d.params?.message)&&typeof d.params.message.taskId=="string"?d.params.message.taskId:void 0;if(!await n.authorize({principal:c,operation:l,...p?{taskId:p}:{}}))throw new u(-32001,"Task not found.");return await this.dispatch(d,c,n)}catch(s){let o=P(q(s)).slice(0,16),a=s instanceof u?s:new u(-32603,"Internal error.",500,[{"@type":"type.googleapis.com/google.rpc.ErrorInfo",reason:"INTERNAL",domain:"kodax.ai",metadata:{diagnosticId:o}}]);return this.emit({type:"rpc.failed",time:y(this.#t),outcome:"failed",diagnosticId:o}),wt(r,a)}}async dispatch(e,n,r){switch(e.method){case"SendMessage":return B(e.id,{task:await this.sendMessage(e.params,n,!1,r)});case"SendStreamingMessage":{let s=await this.sendMessage(e.params,n,!0,r);return this.streamTask(e.id,s.id,O(n))}case"GetTask":return B(e.id,await this.getTask(e.params,n));case"ListTasks":return B(e.id,this.listTasks(e.params,n));case"CancelTask":return B(e.id,await this.cancelTask(e.params,n,r));case"SubscribeToTask":return this.subscribeTask(e.id,e.params,n);case"GetExtendedAgentCard":{if(!r.extendedAgentCard)throw new u(-32007,"Extended Agent Card is not configured.");return B(e.id,r.extendedAgentCard)}default:throw new u(-32601,"Method not found.")}}async sendMessage(e,n,r,s){let o=O(n),a=this.#s.get(o)??Promise.resolve(),d=i(()=>{},"release"),c=new Promise(l=>{d=l});this.#s.set(o,c),await a;try{return await this.sendMessageUnserialized(e,n,r,s)}finally{d(),this.#s.get(o)===c&&this.#s.delete(o)}}async sendMessageUnserialized(e,n,r,s){let o=v(e?.message);Tt(o,s.limits.maxPartBytes,s.agent.inputModes);let a=O(n),d=_e(o),c=this.#e.findByMessage(a,o.messageId);if(c){if(c.messageDigests[o.messageId]!==d)throw new u(-32602,"Message ID was reused with different content.");return this.emit({type:"task.deduplicated",time:y(this.#t),taskId:c.taskId,contextId:c.contextId}),c.task}let l=o.taskId?this.requireOwnedTask(o.taskId,a):void 0;if(l&&o.contextId!==void 0&&o.contextId!==l.contextId)throw new u(-32602,"Message contextId does not match the task.");if(l&&l.task.status.state!=="TASK_STATE_INPUT_REQUIRED"&&l.task.status.state!=="TASK_STATE_AUTH_REQUIRED")throw new u(-32004,"Task is not waiting for input.");let p=this.#e.list(a),g=s.limits.maxRetainedTasksPerPrincipal??s.limits.maxTasksPerPrincipal??100;if(!l&&p.length>=g)throw new u(-32004,"Principal task limit reached.");let f=p.filter(x=>!R.has(x.task.status.state)).length;if(!l&&f>=(s.limits.maxActiveTasksPerPrincipal??4))throw new u(-32004,"Principal active task limit reached.");let E=this.#e.all().filter(x=>!R.has(x.task.status.state)).length;if(!l&&E>=s.limits.maxConcurrentTasks)throw new u(-32004,"Server task concurrency limit reached.");let b=l??await this.createRecord(o,a,s),J=l?this.appendMessage(b,o,d):b,z=await this.startRun(J,o,s);return r||A(e?.configuration)&&e.configuration.returnImmediately===!0?z.task:(await this.waitForTask(z.taskId,s.limits.maxTaskWaitMs??3e4)).task}async createRecord(e,n,r){let s=e.contextId??K(),o=this.#e.list(n).find(g=>g.contextId===s),a=P(`${n}\0${s}`),d=o?.workspaceRoot??await r.preparedExecution?.prepareWorkspace(a),c=o?{id:o.sessionId}:await r.runtime.sessions.create({title:`A2A: ${r.agent.name}`,surface:"a2a",...r.execution?.profileId||r.agent.profileId?{profileId:r.execution?.profileId??r.agent.profileId}:{},...d?{projectPath:d,gitRoot:d}:r.agent.projectPath?{projectPath:r.agent.projectPath}:{}}),l=K(),p=y(this.#t);return this.#e.save({taskId:l,contextId:s,principalKey:n,runtimeIdentity:r.runtime.identity.runtimeId,sessionId:c.id,...d?{workspaceRoot:d}:{},...r.preparedExecution?{executionPolicyRevision:r.preparedExecution.binding.executionPolicyRevision}:{},messageDigests:{[e.messageId]:_e(e)},runIds:[],task:{id:l,contextId:s,status:{state:"TASK_STATE_SUBMITTED",timestamp:p},history:[{...e,taskId:l,contextId:s}]},history:[{...e,taskId:l,contextId:s}],createdAt:p,updatedAt:p,eventSeq:1,lastRuntimeEventSeq:0,runtimeEventCount:0,runtimeEventBytes:0})}appendMessage(e,n,r){let s={...n,taskId:e.taskId,contextId:e.contextId};return this.#e.save({...e,messageDigests:{...e.messageDigests,[n.messageId]:r},history:[...e.history,s],task:{...e.task,history:[...e.history,s]},updatedAt:y(this.#t),eventSeq:e.eventSeq+1})}async startRun(e,n,r){let s=await this.inputsForMessage(e.taskId,n,r),o=r.preparedExecution;if(o&&e.executionPolicyRevision!==o.binding.executionPolicyRevision)throw new u(-32004,"A2A task execution binding revision changed.");let a=o?await o.start({sessionId:e.sessionId,inputs:s,principalKey:e.principalKey}):await r.runtime.runs.start({sessionId:e.sessionId,input:s,mode:"managed_task",permissionBroker:"runtime",...r.agent.runOptions?{options:r.agent.runOptions}:{},agentContext:{actorId:`a2a:${e.principalKey.slice(0,16)}`}}),d=this.#e.save({...e,runIds:[...e.runIds,a.runId],task:{...e.task,status:{state:"TASK_STATE_WORKING",timestamp:y(this.#t)}},updatedAt:y(this.#t),eventSeq:e.eventSeq+1});return this.subscribeRuntime(d,a.runId,r),a.result.then(c=>this.finishRun(d.taskId,c)).catch(c=>{this.failTask(d.taskId,q(c))}),this.emit({type:"task.started",time:y(this.#t),taskId:d.taskId,contextId:d.contextId,runId:a.runId,outcome:"accepted"}),d}async inputsForMessage(e,n,r){let s=[];for(let o of n.parts){if(o.text!==void 0){s.push({type:"text",text:o.text});continue}s.push(await this.materializePart(e,o,r))}return s}async materializePart(e,n,r){let s=n.mediaType??(n.data!==void 0?"application/json":"application/octet-stream"),o=n.data!==void 0?".json":".bin",a=this.#e.get(e),d=a?.workspaceRoot?U.join(a.workspaceRoot,"inbox",P(e)):U.join(U.resolve(r.dataDir),"attachments",P(e));j.mkdirSync(d,{recursive:!0,mode:448});let c=n.data!==void 0?Buffer.from(JSON.stringify(n.data),"utf8"):Buffer.from(n.raw??"","base64"),l=r.limits.maxWorkspaceBytesPerContext??1073741824;if(a?.workspaceRoot&&Ue(a.workspaceRoot)+c.byteLength>l)throw new u(-32004,"A2A context workspace size limit reached.");let p=n.filename?U.basename(n.filename).replace(/[^A-Za-z0-9._-]/g,"_"):`${K()}${o}`,g=U.join(d,`${K()}-${p}`);j.writeFileSync(g,c,{mode:384});let f=s.startsWith("image/")?"image":s.startsWith("video/")?"video":"file";return{type:"artifact_ref",artifactId:(await r.runtime.artifacts.create({kind:f,path:g,mediaType:s,mimeType:s,...n.filename?{name:U.basename(n.filename)}:{},source:"user-inline",description:"Inbound A2A message part"})).id,description:"Inbound A2A attachment"}}subscribeRuntime(e,n,r){this.#n.get(e.taskId)?.close();let s=r.runtime.events.subscribe({runId:n},o=>this.onRuntimeEvent(e.taskId,o,r));this.#n.set(e.taskId,s)}onRuntimeEvent(e,n,r){let s=this.#e.get(e);if(!s||R.has(s.task.status.state))return;let o=Buffer.byteLength(JSON.stringify(n)),a=s.runtimeEventCount+1,d=s.runtimeEventBytes+o;if(a>(r.limits.maxEventsPerTask??1e3)||d>(r.limits.maxEventBytesPerTask??16777216)){let l=s.runIds.at(-1);l&&r.runtime.runs.abort(l),this.failTask(e,"A2A task event quota exceeded.");return}let c=n.type==="user_input.requested"?"TASK_STATE_INPUT_REQUIRED":s.task.status.state;this.#e.save({...s,task:{...s.task,status:{...s.task.status,state:c,timestamp:n.time}},updatedAt:n.time,eventSeq:s.eventSeq+1,lastRuntimeEventSeq:Math.max(s.lastRuntimeEventSeq,n.seq),runtimeEventCount:a,runtimeEventBytes:d})}finishRun(e,n){if(this.#o)return;let r=this.#e.get(e);if(!r||R.has(r.task.status.state))return;let s=yt(n.phase),o=n.result?.lastText??n.error?.message??"",a=o?Ce(e,r.contextId,o):void 0,d=a?[...r.history,a]:r.history,c=o?[{artifactId:`final-${e}`,name:"final-output",parts:[{text:o,mediaType:"text/plain"}]}]:void 0;this.#e.save({...r,history:d,task:{...r.task,status:{state:s,...a?{message:a}:{},timestamp:y(this.#t)},...c?{artifacts:c}:{},history:d},updatedAt:y(this.#t),eventSeq:r.eventSeq+1}),this.#n.get(e)?.close(),this.#n.delete(e),this.emit({type:"task.finished",time:y(this.#t),taskId:e,contextId:r.contextId,outcome:s==="TASK_STATE_COMPLETED"?"completed":"failed"})}failTask(e,n){if(this.#o)return;let r=this.#e.get(e);if(!r||R.has(r.task.status.state))return;let s=Ce(e,r.contextId,n);this.#e.save({...r,task:{...r.task,status:{state:"TASK_STATE_FAILED",message:s,timestamp:y(this.#t)}},updatedAt:y(this.#t),eventSeq:r.eventSeq+1})}async getTask(e,n){let r=typeof e?.id=="string"?e.id:"",s=this.requireOwnedTask(r,O(n)),o=typeof e?.historyLength=="number"?e.historyLength:void 0;return St(s.task,s.history,o)}listTasks(e,n){let r=this.#e.list(O(n)).filter(c=>!(typeof e?.contextId=="string"&&c.contextId!==e.contextId||typeof e?.status=="string"&&c.task.status.state!==e.status)),s=typeof e?.pageSize=="number"?Math.max(1,Math.min(100,Math.floor(e.pageSize))):50,o=typeof e?.pageToken=="string"&&e.pageToken?Number(Buffer.from(e.pageToken,"base64url").toString("utf8")):0;if(!Number.isSafeInteger(o)||o<0)throw new u(-32602,"Invalid page token.");let a=r.slice(o,o+s),d=o+a.length;return{tasks:a.map(c=>e?.includeArtifacts===!0?c.task:{...c.task,artifacts:void 0}),nextPageToken:d<r.length?Buffer.from(String(d)).toString("base64url"):"",pageSize:s,totalSize:r.length}}async cancelTask(e,n,r){let s=typeof e?.id=="string"?e.id:"",o=this.requireOwnedTask(s,O(n));if(R.has(o.task.status.state))throw new u(-32002,"Task is not cancelable.");let a=o.runIds.at(-1);return a&&await r.runtime.runs.abort(a),this.#e.save({...o,task:{...o.task,status:{state:"TASK_STATE_CANCELED",timestamp:y(this.#t)}},updatedAt:y(this.#t),eventSeq:o.eventSeq+1}).task}subscribeTask(e,n,r){let s=typeof n?.id=="string"?n.id:"",o=this.requireOwnedTask(s,O(r));if(R.has(o.task.status.state))throw new u(-32004,"Cannot subscribe to a terminal task.");return this.streamTask(e,s,o.principalKey)}streamTask(e,n,r){let s=this.requireOwnedTask(n,r),o=new TextEncoder,a,d=i(()=>{},"cleanup"),c=!1,l=new ReadableStream({start:i(p=>{let g=i(()=>{c||(c=!0,d(),p.close())},"close");if(d=i(()=>{a?.(),this.#r.delete(g)},"cleanup"),this.#r.add(g),p.enqueue(o.encode(this.sse(e,{task:s.task}))),R.has(s.task.status.state)){g();return}a=this.#e.subscribe(n,f=>{p.enqueue(o.encode(this.sse(e,{statusUpdate:{taskId:n,contextId:f.contextId,status:f.task.status}}))),(R.has(f.task.status.state)||f.task.status.state==="TASK_STATE_INPUT_REQUIRED"||f.task.status.state==="TASK_STATE_AUTH_REQUIRED")&&g()})},"start"),cancel:i(()=>{c||(c=!0,d())},"cancel")});return new Response(l,{status:200,headers:{"content-type":"text/event-stream","cache-control":"no-cache"}})}sse(e,n){return`data: ${JSON.stringify({jsonrpc:"2.0",id:e,result:n})}
+
+`}waitForTask(e,n){let r=this.#e.get(e);return r?R.has(r.task.status.state)||r.task.status.state==="TASK_STATE_INPUT_REQUIRED"||r.task.status.state==="TASK_STATE_AUTH_REQUIRED"?Promise.resolve(r):new Promise(s=>{let o=!1,a=i(()=>{},"unsubscribe"),d=i(p=>{o||(o=!0,clearTimeout(c),a(),s(p))},"finish"),c=setTimeout(()=>d(this.#e.get(e)??r),n);a=this.#e.subscribe(e,p=>{(R.has(p.task.status.state)||p.task.status.state==="TASK_STATE_INPUT_REQUIRED"||p.task.status.state==="TASK_STATE_AUTH_REQUIRED")&&d(p)});let l=this.#e.get(e);l&&(R.has(l.task.status.state)||l.task.status.state==="TASK_STATE_INPUT_REQUIRED"||l.task.status.state==="TASK_STATE_AUTH_REQUIRED")&&d(l)}):Promise.reject(new u(-32001,"Task not found."))}requireOwnedTask(e,n){let r=this.#e.get(e);if(!r||r.principalKey!==n)throw new u(-32001,"Task not found.");return r}async recover(){let e=this.options;for(let n of this.#e.all()){if(R.has(n.task.status.state))continue;let r=n.runIds.at(-1);if(!r||n.runtimeIdentity!==e.runtime.identity.runtimeId){this.failTask(n.taskId,"Runtime execution was interrupted before A2A recovery.");continue}try{let s=await e.runtime.runs.get(r);if(s.phase==="running"||s.phase==="queued"||s.phase==="waiting_permission"||s.phase==="waiting_user_input"){for(let o of await e.runtime.events.replay({runId:r,sinceSeq:n.lastRuntimeEventSeq}))this.onRuntimeEvent(n.taskId,o,e);this.subscribeRuntime(n,r,e),e.runtime.runs.await(r).then(o=>this.finishRun(n.taskId,o)).catch(o=>{this.failTask(n.taskId,q(o))})}else this.finishRun(n.taskId,{runId:r,sessionId:n.sessionId,phase:s.phase})}catch(s){M({source:"a2a.server",level:"warn",message:"A2A task recovery could not reattach to its Runtime run.",detail:{taskId:n.taskId,error:s}}),this.failTask(n.taskId,"Runtime execution was unavailable during A2A recovery.")}}}emit(e){this.options.onEvent?.(e)}};function Mn(t){return new Y(t)}i(Mn,"createKodaXA2AServer");async function Rt(t){let e=t.execution;if(!e)throw new Error("A2A execution declaration is required for prepared serving.");let n=t.runtime.agents.execution;if(!n)throw new Error("local-agent-capability-unavailable: Runtime does not own an embedded execution binding service.");if(t.signal?.aborted)throw t.signal.reason??new Error("A2A preparation aborted.");let r=await n.openOwnerSession();try{let s=e.kind==="local-agent"?await n.bindLocal({ownerSessionId:r.ownerSessionId,ref:e.agentRef,profileId:e.profileId,workspace:e.workspace,toolPolicy:e.toolPolicy,workspaceByteLimit:t.limits.maxWorkspaceBytesPerContext}):await n.bindDefault({ownerSessionId:r.ownerSessionId,profileId:e.profileId,workspace:e.workspace,toolPolicy:e.toolPolicy,workspaceByteLimit:t.limits.maxWorkspaceBytesPerContext}),o=!1;return{service:n,ownerSessionId:r.ownerSessionId,binding:s,declaration:e,prepareWorkspace(a){return n.prepareWorkspace({ownerSessionId:r.ownerSessionId,bindingId:s.bindingId,contextKey:a})},start(a){let d={ownerSessionId:r.ownerSessionId,bindingId:s.bindingId,expectedExecutionPolicyRevision:s.executionPolicyRevision,sessionId:a.sessionId,input:a.inputs,permissionBroker:"runtime",agentContext:{actorId:`a2a:${a.principalKey.slice(0,16)}`}};if(e.kind==="local-agent"){let c="configurationRevision"in s&&typeof s.configurationRevision=="string"?s.configurationRevision:void 0;if(!c)throw new Error("Prepared local-Agent binding is missing its revision.");return n.startLocal({...d,expectedConfigurationRevision:c})}return n.startDefault(d)},async close(){o||(o=!0,await n.closeOwnerSession(r.ownerSessionId))}}}catch(s){throw await n.closeOwnerSession(r.ownerSessionId),s}}i(Rt,"prepareExecution");async function Dn(t){let e=await Rt(t);try{let n=new Y({...t,preparedExecution:e});return await n.whenReady(),n}catch(n){throw await e.close(),n}}i(Dn,"prepareKodaXA2AServer");import{createHash as Et}from"node:crypto";import{existsSync as xt,readFileSync as bt}from"node:fs";import ee from"node:path";import{isDeepStrictEqual as pe}from"node:util";var De={maxRequestBytes:33554432,maxPartBytes:16777216,maxConcurrentTasks:4,maxTaskWaitMs:3e4,maxActiveTasksPerPrincipal:4,maxRetainedTasksPerPrincipal:100,maxEventsPerTask:1e3,maxEventBytesPerTask:16777216,maxWorkspaceBytesPerContext:1073741824},Me=Object.keys(De),te=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,vt=/^[A-Za-z_][A-Za-z0-9_]*$/;function S(t,e){if(t===null||typeof t!="object"||Array.isArray(t))throw new Error(`${e} must be an object.`);return t}i(S,"record");function h(t,e,n){let r=new Set(e),s=Object.keys(t).find(o=>!r.has(o));if(s!==void 0)throw new Error(`${n} has unknown field "${s}".`)}i(h,"noUnknown");function T(t,e){if(typeof t!="string"||t.trim().length===0)throw new Error(`${e} must be a non-empty string.`);return t.trim()}i(T,"text");function H(t,e,n=!1){if(!Array.isArray(t)||!n&&t.length===0)throw new Error(`${e} must be ${n?"an":"a non-empty"} array of strings.`);let r=t.map((s,o)=>T(s,`${e}[${o}]`));if(new Set(r).size!==r.length)throw new Error(`${e} contains duplicates.`);return r}i(H,"stringList");function Ne(t,e,n=!0){let r=H(t,e,n);if(r.some(s=>s.includes("*")))throw new Error(`${e} does not accept wildcard authority.`);return r}i(Ne,"exactNames");function Le(t,e){let n=S(t,e),r={};for(let[s,o]of Object.entries(n)){if(!te.test(s)||s.includes("*"))throw new Error(`${e} keys must be exact names without wildcards.`);r[s]=Ne(o,`${e}.${s}`,!1)}return r}i(Le,"namedExactLists");function It(t,e){let n=S(t,e);h(n,["cardUrl","credentialEnv","effect"],e);let r=qe(n.cardUrl,`${e}.cardUrl`,!0),s=n.effect;if(!["none","read","write","unknown"].includes(String(s)))throw new Error(`${e}.effect is invalid.`);let o=n.credentialEnv===void 0?void 0:Be(n.credentialEnv,`${e}.credentialEnv`);return{cardUrl:r,...o?{credentialEnv:o}:{},effect:s}}i(It,"parseOutboundAgent");function qe(t,e,n){let r=T(t,e),s;try{s=new URL(r)}catch(a){throw new Error(`${e} must be an absolute HTTP URL.`,{cause:a})}if(s.username||s.password)throw new Error(`${e} must not contain embedded credentials.`);let o=["localhost","127.0.0.1","::1"].includes(s.hostname);if(s.protocol!=="https:"&&!(s.protocol==="http:"&&o&&n))throw new Error(`${e} must use HTTPS or explicit loopback HTTP.`);return s.toString()}i(qe,"parseHttpUrl");function Be(t,e){let n=T(t,e);if(!vt.test(n))throw new Error(`${e} must be an environment variable name.`);return n}i(Be,"parseEnvironmentName");function Pt(t){if(t===void 0)return{mode:"managed"};let e=S(t,"A2A server execution.workspace");if(e.mode==="managed")return h(e,["mode"],"A2A server execution.workspace"),{mode:"managed"};if(e.mode!=="fixed")throw new Error("A2A server execution.workspace.mode is invalid.");h(e,["mode","root"],"A2A server execution.workspace");let n=T(e.root,"A2A server execution.workspace.root");if(!ee.isAbsolute(n))throw new Error("Fixed A2A workspace root must be absolute.");return{mode:"fixed",root:ee.resolve(n)}}i(Pt,"parseWorkspace");function Ct(t){return{workspace:t.mode==="managed"?"write":"read",process:"deny",network:{mode:"deny"},tools:[],mcp:{},skillScripts:{},subagents:"deny"}}i(Ct,"defaultToolPolicy");function _t(t){let e=S(t,"A2A toolPolicy.network");if(e.mode==="deny")return h(e,["mode"],"A2A toolPolicy.network"),{mode:"deny"};if(e.mode!=="allowlist")throw new Error("A2A toolPolicy.network.mode is invalid.");h(e,["mode","origins"],"A2A toolPolicy.network");let n=H(e.origins,"A2A toolPolicy.network.origins").map(r=>{let s;try{s=new URL(r)}catch(o){throw new Error("A2A toolPolicy network origins must be absolute HTTP origins.",{cause:o})}if(!["http:","https:"].includes(s.protocol)||s.origin==="null")throw new Error("A2A toolPolicy network origins must be absolute HTTP origins.");return s.origin});if(new Set(n).size!==n.length)throw new Error("A2A toolPolicy.network.origins contains duplicates after normalization.");return{mode:"allowlist",origins:n}}i(_t,"parseNetworkPolicy");function Ot(t){let e=Le(t,"A2A toolPolicy.skillScripts");for(let[n,r]of Object.entries(e))e[n]=r.map(s=>{if(s.includes("\\")||ee.posix.isAbsolute(s))throw new Error("A2A skillScripts paths must use relative POSIX scripts/... paths.");let o=ee.posix.normalize(s);if(!o.startsWith("scripts/")||o.includes("../"))throw new Error("A2A skillScripts paths must remain below the Skill scripts directory.");return o});return e}i(Ot,"parseSkillScripts");function Ut(t,e){if(t===void 0)return Ct(e);let n=S(t,"A2A server execution.toolPolicy"),r=["workspace","process","network","tools","mcp","skillScripts","subagents"];if(h(n,r,"A2A server execution.toolPolicy"),r.some(a=>n[a]===void 0))throw new Error("A2A server execution.toolPolicy must be a complete object when present.");if(!["none","read","write"].includes(String(n.workspace)))throw new Error("A2A toolPolicy.workspace is invalid.");if(!["deny","isolated"].includes(String(n.process)))throw new Error("A2A toolPolicy.process is invalid.");if(!["deny","inherit"].includes(String(n.subagents)))throw new Error("A2A toolPolicy.subagents is invalid.");let s=Ot(n.skillScripts),o=Object.values(s).reduce((a,d)=>a+d.length,0);if(n.process==="deny"&&o>0)throw new Error("A2A toolPolicy process deny requires empty skillScripts.");if(n.process==="isolated"&&o===0)throw new Error("A2A toolPolicy process isolated requires non-empty skillScripts.");return{workspace:n.workspace,process:n.process,network:_t(n.network),tools:Ne(n.tools,"A2A toolPolicy.tools"),mcp:Le(n.mcp,"A2A toolPolicy.mcp"),skillScripts:s,subagents:n.subagents}}i(Ut,"parseToolPolicy");function Mt(t){let e=S(t,"A2A server execution"),n=Pt(e.workspace),r=Ut(e.toolPolicy,n),s=e.profileId===void 0?void 0:T(e.profileId,"A2A server execution.profileId");if(e.kind==="runtime-default")return h(e,["kind","workspace","toolPolicy","profileId"],"A2A server execution"),{kind:"runtime-default",workspace:n,toolPolicy:r,...s?{profileId:s}:{}};if(e.kind!=="local-agent")throw new Error("A2A server execution.kind is invalid.");h(e,["kind","agentRef","workspace","toolPolicy","profileId"],"A2A server execution");let o=S(e.agentRef,"A2A server execution.agentRef");if(h(o,["source","name"],"A2A server execution.agentRef"),o.source!=="markdown:user")throw new Error("A2A local Agent source must be markdown:user.");let a=T(o.name,"A2A server execution.agentRef.name");if(!te.test(a))throw new Error("A2A local Agent name is invalid.");return{kind:"local-agent",agentRef:{source:"markdown:user",name:a},workspace:n,toolPolicy:r,...s?{profileId:s}:{}}}i(Mt,"parseExecution");function Dt(t,e){let n=`A2A server published.skills[${e}]`,r=S(t,n);return h(r,["id","name","description","tags"],n),{id:T(r.id,`${n}.id`),name:T(r.name,`${n}.name`),description:T(r.description,`${n}.description`),tags:H(r.tags,`${n}.tags`,!0)}}i(Dt,"parsePublishedSkill");function Nt(t){let e=S(t,"A2A server published");if(h(e,["name","description","version","skills","inputModes","outputModes"],"A2A server published"),!Array.isArray(e.skills))throw new Error("A2A server published.skills must be an array.");let n=e.skills.map(Dt),r=n.map(s=>s.id);if(new Set(r).size!==r.length)throw new Error("A2A published Skill ids must be unique.");return{name:T(e.name,"A2A server published.name"),description:T(e.description,"A2A server published.description"),version:T(e.version,"A2A server published.version"),skills:n,inputModes:H(e.inputModes,"A2A server published.inputModes"),outputModes:H(e.outputModes,"A2A server published.outputModes")}}i(Nt,"parsePublished");function Lt(t){let e=S(t,"A2A server authentication");if(h(e,["type","tokenEnv","principalId"],"A2A server authentication"),e.type!=="bearer-env")throw new Error("A2A authentication type must be bearer-env.");return{type:"bearer-env",tokenEnv:Be(e.tokenEnv,"A2A server authentication.tokenEnv"),principalId:T(e.principalId,"A2A server authentication.principalId")}}i(Lt,"parseAuthentication");function qt(t,e){if(!Number.isSafeInteger(t)||Number(t)<=0)throw new Error(`${e} must be a positive safe integer.`);return Number(t)}i(qt,"positiveInteger");function Bt(t,e){let n=t===void 0?{}:S(t,"A2A server limits");h(n,Me,"A2A server limits");let r=Object.fromEntries(Me.map(o=>[o,n[o]===void 0?De[o]:qt(n[o],`A2A server limits.${o}`)]));if(r.maxPartBytes>r.maxRequestBytes)throw new Error("A2A server limits.maxPartBytes must not exceed maxRequestBytes.");let s=e.workspace.mode==="fixed"&&e.toolPolicy.workspace==="write";if(s&&n.maxConcurrentTasks===void 0)return{...r,maxConcurrentTasks:1};if(s&&r.maxConcurrentTasks!==1)throw new Error("A2A fixed writable workspace requires maxConcurrentTasks 1.");return r}i(Bt,"parseLimits");function Kt(t){let e=S(t,"A2A server");h(e,["execution","published","publicBaseUrl","authentication","limits","dataDir"],"A2A server");let n=Mt(e.execution),r=e.publicBaseUrl===void 0?void 0:qe(e.publicBaseUrl,"A2A server.publicBaseUrl",!0);return{execution:n,published:Nt(e.published),...r?{publicBaseUrl:r}:{},authentication:Lt(e.authentication),limits:Bt(e.limits,n),dataDir:T(e.dataDir,"A2A server.dataDir")}}i(Kt,"parseServer");function ne(t){let e=S(t,"A2A integration config");if(h(e,["version","agents","server"],"A2A integration config"),e.version!==1)throw new Error("A2A integration config version must be 1.");let n=S(e.agents,"A2A integration config agents"),r={};for(let[s,o]of Object.entries(n)){if(!te.test(s))throw new Error(`A2A outbound Agent name "${s}" is invalid.`);r[s]=It(o,`A2A outbound Agent "${s}"`)}return{version:1,agents:r,...e.server===void 0?{}:{server:Kt(e.server)}}}i(ne,"parseA2AIntegrationDocument");function jt(t){return Et("sha256").update(t).digest("hex")}i(jt,"hash");function F(t){let e=ge("a2a",t),n=xt(e),r=n?bt(e,"utf8"):JSON.stringify({version:1,agents:{}}),s;try{s=JSON.parse(r)}catch(o){throw new Error("Invalid A2A integration JSON.",{cause:o})}return{domain:"a2a",source:n?"user":"default",path:e,revision:jt(r),document:ne(s),loadedAt:new Date().toISOString()}}i(F,"readA2AIntegration");function fe(t,e,n){return me({domain:"a2a",configHome:t,document:e,validate:ne,...n?{expectedRevision:n}:{}})}i(fe,"writeA2AIntegration");function Hn(t,e,n,r){if(!te.test(e))throw new Error("A2A outbound Agent name is invalid.");let s=F(t);return fe(t,{...s.document,agents:{...s.document.agents,[e]:n}},r??(s.source==="user"?s.revision:void 0))}i(Hn,"upsertA2AOutboundAgent");function Fn(t,e,n){let r=F(t);if(r.document.agents[e]===void 0)return!1;let s={...r.document.agents};return delete s[e],fe(t,{...r.document,agents:s},n??(r.source==="user"?r.revision:void 0)),!0}i(Fn,"removeA2AOutboundAgent");function Jn(t,e,n){let r=F(t),s=e===void 0?{version:1,agents:r.document.agents}:{...r.document,server:e};return fe(t,s,n??(r.source==="user"?r.revision:void 0))}i(Jn,"setA2AServerConfig");function zn(t,e){if(pe(t,e))return{kind:"none",fields:[]};if(t===void 0||e===void 0)return{kind:"restart-required",fields:["server"]};let n=["execution","dataDir"].filter(s=>!pe(t[s],e[s])),r=["published","publicBaseUrl","authentication","limits"].filter(s=>!pe(t[s],e[s]));return n.length>0?{kind:"restart-required",fields:[...n,...r]}:{kind:"hot",fields:r}}i(zn,"classifyA2AServerChange");import{timingSafeEqual as $t}from"node:crypto";import Ke from"node:os";import je from"node:path";function Ht(t){return t==="~"?Ke.homedir():t.startsWith("~/")||t.startsWith("~\\")?je.join(Ke.homedir(),t.slice(2)):je.resolve(t)}i(Ht,"expandHome");function Ft(t){let e=t.headers.get("authorization");return(e?/^Bearer ([^\s]+)$/i.exec(e):null)?.[1]}i(Ft,"bearerToken");function Jt(t,e){let n=Buffer.from(t),r=Buffer.from(e);return n.byteLength===r.byteLength&&$t(n,r)}i(Jt,"equalSecret");function $e(t,e=process.env){let n=e[t.tokenEnv];if(!n)throw new Error(`A2A bearer token environment variable is unset: ${t.tokenEnv}.`);return{securitySchemes:{bearer:{type:"http",scheme:"bearer",bearerFormat:"opaque"}},securityRequirements:[{bearer:[]}],async authenticate(r){let s=Ft(r);return s&&Jt(n,s)?{subject:t.principalId,scopes:["a2a:invoke"]}:null}}}i($e,"createBearerEnvA2AAuthentication");function He(t,e){return{name:t.published.name,description:t.published.description,version:t.published.version,publicBaseUrl:t.publicBaseUrl??e,skills:t.published.skills,inputModes:t.published.inputModes,outputModes:t.published.outputModes,...t.execution.profileId?{profileId:t.execution.profileId}:{}}}i(He,"publishedAgent");function Fe(){return Promise.resolve(!0)}i(Fe,"authorization");function Zn(t){return{runtime:t.runtime,agent:He(t.config,t.listenBaseUrl),execution:t.config.execution,dataDir:Ht(t.config.dataDir),limits:t.config.limits,authentication:$e(t.config.authentication,t.env),authorize:Fe}}i(Zn,"createA2AServerOptionsFromConfig");function Yn(t){return{agent:He(t.config,t.listenBaseUrl),limits:t.config.limits,authentication:$e(t.config.authentication,t.env),authorize:Fe}}i(Yn,"createA2AServerHotOptions");function zt(t){let e=t.toLowerCase().replace(/^\[|\]$/g,"");return e==="localhost"||e==="127.0.0.1"||e==="::1"}i(zt,"isExactLoopback");function Je(t){return{allowedOrigins:[t.origin],allowPrivateAddresses:zt(t.hostname),requestTimeoutMs:1e4,maxResponseBytes:1e6,maxRedirects:3}}i(Je,"networkPolicy");function Wt(t){let e=t.executorConfig?.interfaceUrl;if(typeof e!="string")throw new Error("Configured A2A registration has no interface URL.");return new URL(e)}i(Wt,"registrationUrl");function Xt(){let t=i(e=>{if(!e.startsWith("env:")||e.length===4)throw new Error("Configured A2A credentials must use an environment reference.");return e.slice(4)},"environmentName");return{isAvailable(e){let n=process.env[t(e)];return typeof n=="string"&&n.length>0},async withCredential(e,n){let r=process.env[t(e)];if(!r)throw new Error("Configured A2A credential is unavailable.");return n(r)}}}i(Xt,"environmentCredentialBroker");function Gt(t,e){return{agentId:`external:${t}`,agentCardUrl:e.cardUrl,...e.credentialEnv?{credentialRef:`env:${e.credentialEnv}`}:{},effects:{remote:e.effect}}}i(Gt,"registrationInput");function ar(t){return{runtimeOptions:{factories:[Ie(n=>({networkPolicy:Je(Wt(n)),pollIntervalMs:500,...t.fetch?{fetch:t.fetch}:{}}))],policy:i(()=>({allowed:!0}),"policy"),credentialBroker:Xt()},async start(n){let r=new ye({domain:"a2a",configHome:t.configHome,validate:ne,read:i(()=>F(t.configHome),"read")}),s=i(async a=>{let d=await n.admin.agentRegistrations.list(),c=new Set(d.filter(l=>l.executorId===L).map(l=>l.agentId));for(let[l,p]of Object.entries(a.agents)){let g=`external:${l}`;try{let f=new URL(p.cardUrl),E=await be(Gt(l,p),{networkPolicy:Je(f),pollIntervalMs:500,...t.fetch?{fetch:t.fetch}:{}});await n.admin.agentRegistrations.upsert(E.registration),c.delete(g)}catch(f){M({source:"a2a.runtime-config",level:"warn",message:`A2A Agent "${l}" refresh failed; last-known-good registration retained.`,detail:f}),t.onEvent?.(`A2A Agent "${l}" could not be refreshed; its last-known-good registration was retained.`),c.delete(g)}}for(let l of c)await n.admin.agentRegistrations.remove(l)},"reconcile"),o=await r.initialize();return await s(o.document),r.subscribe(async(a,d)=>{a.revision!==d?.revision&&(await s(a.document),t.onEvent?.(`A2A configuration hot-reloaded (${Object.keys(a.document.agents).length} outbound Agents).`))}),r.startWatching(),{status:i(()=>r.status(),"status"),async reload(){await r.reload()},close(){r.close()}}}}}i(ar,"createConfiguredA2ARuntimeIntegration");export{u as A2AError,L as A2A_EXECUTOR_ID,C as A2A_PROTOCOL_VERSION,rt as assertSafeA2AUrl,zn as classifyA2AServerChange,Ie as createA2AAgentExecutorFactory,Yn as createA2AServerHotOptions,Zn as createA2AServerOptionsFromConfig,$e as createBearerEnvA2AAuthentication,ar as createConfiguredA2ARuntimeIntegration,Mn as createKodaXA2AServer,X as decodeUtf8,be as discoverA2ARegistration,q as errorMessage,A as isRecord,he as parseA2AAgentCard,ne as parseA2AIntegrationDocument,v as parseA2AMessage,we as parseA2APart,I as parseA2ATask,ke as parseJsonRpcRequest,Dn as prepareKodaXA2AServer,F as readA2AIntegration,Fn as removeA2AOutboundAgent,W as safeA2AFetch,Jn as setA2AServerConfig,Hn as upsertA2AOutboundAgent};