@ouro.bot/cli 0.1.0-alpha.652 → 0.1.0-alpha.654

package/dist/commerce/types.js

@@ -0,0 +1,3 @@
+"use strict";
+/* v8 ignore file -- type-only commerce authority records */
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/heart/daemon/cli-exec.js

@@ -368,6 +368,10 @@ function agentResolutionFailureMode(command) {
         case "inner.status":
         case "session.list":
             return "return-message";
+        case "a2a.card":
+        case "a2a.onboard":
+        case "a2a.serve":
+            return "throw";
         case "provider.use":
         case "provider.check":
         case "provider.status":
@@ -499,7 +503,7 @@ function writeSyncProbeSummary(deps, findings) {
 function bootPhasePlan(_daemonAlive) {
     return ["update check", "system setup", "sync probe", "starting daemon", "provider checks", "final daemon check"];
 }
-const FINAL_DAEMON_HEALTH_SETTLE_TIMEOUT_MS = 20_000;
+const FINAL_DAEMON_HEALTH_SETTLE_TIMEOUT_MS = 90_000;
 const FINAL_DAEMON_HEALTH_SETTLE_POLL_INTERVAL_MS = 500;
 /**
  * Layer 2: brief, scannable summary of a boot-sync-probe finding for the
@@ -2491,11 +2495,12 @@ function enableAgentSense(agent, sense, deps) {
         bluebubbles: senses.bluebubbles ?? { enabled: false },
         mail: senses.mail ?? { enabled: false },
         voice: senses.voice ?? { enabled: false },
+        a2a: senses.a2a ?? { enabled: false },
         [sense]: { ...existing, enabled: true },
     };
     fs.writeFileSync(configPath, `${JSON.stringify(raw, null, 2)}\n`, "utf-8");
 }
-const CONNECT_MENU_PROMPT = "Choose [1-7] or type a name: ";
+const CONNECT_MENU_PROMPT = "Choose [1-8] or type a name: ";
 function connectMenuIsTTY(deps) {
     return deps.isTTY ?? process.stdout.isTTY === true;
 }
@@ -2507,6 +2512,7 @@ function readConnectBaySenseFlags(agent, deps) {
         blueBubblesEnabled: parsed.senses?.bluebubbles?.enabled === true,
         mailEnabled: parsed.senses?.mail?.enabled === true,
         voiceEnabled: parsed.senses?.voice?.enabled === true,
+        a2aEnabled: parsed.senses?.a2a?.enabled === true,
     };
 }
 async function buildConnectMenu(agent, deps, onProgress) {
@@ -2536,7 +2542,7 @@ async function buildConnectMenu(agent, deps, onProgress) {
     const runtimeConfig = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(agent, { preserveCachedOnFailure: true });
     onProgress?.("loading this machine's settings");
     const machineRuntime = await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agent, currentMachineId(deps), { preserveCachedOnFailure: true });
-    const { teamsEnabled, blueBubblesEnabled, mailEnabled, voiceEnabled } = readConnectBaySenseFlags(agent, deps);
+    const { teamsEnabled, blueBubblesEnabled, mailEnabled, voiceEnabled, a2aEnabled } = readConnectBaySenseFlags(agent, deps);
     const perplexityApiKey = runtimeConfig.ok
         ? readRuntimeConfigString(runtimeConfig.config, "integrations.perplexityApiKey")
         : null;
@@ -2691,6 +2697,7 @@ async function buildConnectMenu(agent, deps, onProgress) {
             ? "ready"
             : "missing"
         : runtimeConfigReadStatus(runtimeConfig);
+    const a2aStatus = a2aEnabled ? "ready" : "missing";
     const entries = [
         {
             option: "1",
@@ -2805,6 +2812,20 @@ async function buildConnectMenu(agent, deps, onProgress) {
                 status: voiceStatus,
             }) ? `ouro connect voice --agent ${agent}` : undefined,
         },
+        {
+            option: "8",
+            name: "A2A",
+            section: "Portable",
+            status: a2aStatus,
+            description: "Agent-to-agent sense endpoint and peer onboarding.",
+            detailLines: a2aEnabled ? ["enabled in agent.json"] : ["not enabled in agent.json"],
+            nextAction: (0, connect_bay_1.connectEntryNeedsAttention)({
+                option: "8",
+                name: "A2A",
+                section: "Portable",
+                status: a2aStatus,
+            }) ? `ouro connect a2a --agent ${agent}` : undefined,
+        },
     ];
     const isTTY = connectMenuIsTTY(deps);
     return (0, connect_bay_1.renderConnectBay)(entries, {
@@ -4340,6 +4361,9 @@ function connectMenuTarget(answer) {
         return "mail";
     if (normalized === "7" || normalized === "voice" || normalized === "audio" || normalized === "speech")
         return "voice";
+    /* v8 ignore next -- direct `ouro connect a2a` covers behavior; interactive menu requires broader provider/vault readiness work @preserve */
+    if (normalized === "8" || normalized === "a2a" || normalized === "agent2agent" || normalized === "agent-to-agent")
+        return "a2a";
     return "cancel";
 }
 async function executeConnectVoice(agent, deps) {
@@ -4378,6 +4402,25 @@ async function executeConnectVoice(agent, deps) {
     deps.writeStdout(message);
     return message;
 }
+async function executeConnectA2A(agent, deps) {
+    const { defaultA2APort } = await Promise.resolve().then(() => __importStar(require("../../a2a/config")));
+    enableAgentSense(agent, "a2a", deps);
+    const syncSummary = pushAgentBundleAfterCliMutation(agent, deps);
+    const port = defaultA2APort(agent);
+    const message = [
+        `A2A connected for ${agent}`,
+        `The daemon-managed A2A sense will listen locally on port ${port} after \`ouro up\`.`,
+        `Local agent card: http://127.0.0.1:${port}/.well-known/agent-card.json`,
+        `Local JSON-RPC endpoint: http://127.0.0.1:${port}/a2a`,
+        "For a public endpoint, expose that local port through your chosen tunnel and publish the resulting base URL:",
+        `  ouro a2a card --agent ${agent} --base-url https://<public-host>`,
+        "Onboard a peer into the existing friend model:",
+        `  ouro a2a onboard --agent ${agent} --card-url https://<peer>/.well-known/agent-card.json --trust friend`,
+        ...(syncSummary ? [syncSummary] : []),
+    ].join("\n");
+    deps.writeStdout(message);
+    return message;
+}
 async function executeConnect(command, deps) {
     if (command.target === "providers")
         return executeConnectProviders(command.agent, deps);
@@ -4393,6 +4436,8 @@ async function executeConnect(command, deps) {
         return executeConnectMail(command.agent, deps, command);
     if (command.target === "voice")
         return executeConnectVoice(command.agent, deps);
+    if (command.target === "a2a")
+        return executeConnectA2A(command.agent, deps);
     const progress = createHumanCommandProgress(deps, "connect");
     let menu;
     try {
@@ -4404,7 +4449,7 @@ async function executeConnect(command, deps) {
     const promptInput = deps.promptInput;
     if (!promptInput) {
         const message = [
-            menu.replace(/\nChoose \[1-7\] or type a name: $/, ""),
+            menu.replace(/\nChoose \[1-8\] or type a name: $/, ""),
             "",
             `Run: ouro connect providers --agent ${command.agent}`,
             `Run: ouro connect perplexity --agent ${command.agent}`,
@@ -4413,6 +4458,7 @@ async function executeConnect(command, deps) {
             `Run: ouro connect bluebubbles --agent ${command.agent}`,
             `Run: ouro connect mail --agent ${command.agent}`,
             `Run: ouro connect voice --agent ${command.agent}`,
+            `Run: ouro connect a2a --agent ${command.agent}`,
         ].join("\n");
         deps.writeStdout(message);
         return message;
@@ -4432,6 +4478,9 @@ async function executeConnect(command, deps) {
         return executeConnectMail(command.agent, deps);
     if (answer === "voice")
         return executeConnectVoice(command.agent, deps);
+    /* v8 ignore next -- direct `ouro connect a2a` covers behavior; interactive menu requires broader provider/vault readiness work @preserve */
+    if (answer === "a2a")
+        return executeConnectA2A(command.agent, deps);
     const message = "connect cancelled.";
     deps.writeStdout(message);
     return message;
@@ -5262,6 +5311,69 @@ async function executeFriendCommand(command, store) {
     await store.put(command.friendId, { ...current, externalIds: filtered, updatedAt: now });
     return `unlinked ${command.provider}:${command.externalId} from ${command.friendId}`;
 }
+async function executeA2ACommand(command, deps) {
+    if (command.kind === "a2a.card") {
+        const { buildA2AAgentCard } = await Promise.resolve().then(() => __importStar(require("../../a2a/card")));
+        const { defaultA2APort } = await Promise.resolve().then(() => __importStar(require("../../a2a/config")));
+        const { endpointForCard } = await Promise.resolve().then(() => __importStar(require("../../a2a/client")));
+        const baseUrl = command.baseUrl ?? `http://127.0.0.1:${defaultA2APort(command.agent)}`;
+        const card = buildA2AAgentCard({ agentName: command.agent, baseUrl });
+        /* v8 ignore next -- buildA2AAgentCard always emits a JSON-RPC endpoint @preserve */
+        const endpoint = endpointForCard(card) ?? "unknown";
+        const message = command.json
+            ? JSON.stringify(card, null, 2)
+            : [
+                `A2A agent card for ${command.agent}`,
+                `card URL: ${baseUrl.replace(/\/+$/, "")}/.well-known/agent-card.json`,
+                `endpoint: ${endpoint}`,
+                JSON.stringify(card, null, 2),
+            ].join("\n");
+        deps.writeStdout(message);
+        return message;
+    }
+    /* v8 ignore next -- false branch is foreground serve, intentionally ignored below because it waits for signals @preserve */
+    if (command.kind === "a2a.onboard") {
+        const { onboardA2APeer } = await Promise.resolve().then(() => __importStar(require("../../a2a/onboarding")));
+        const record = await onboardA2APeer({
+            agentName: command.agent,
+            cardUrl: command.cardUrl,
+            ...(command.trustLevel ? { trustLevel: command.trustLevel } : {}),
+            ...(command.name ? { name: command.name } : {}),
+            /* v8 ignore next -- production CLI falls back to the canonical bundle root; tests inject isolated roots @preserve */
+            ...(deps.bundlesRoot ? { bundlesRoot: deps.bundlesRoot } : {}),
+            /* v8 ignore next -- production CLI uses global fetch; tests inject fetch for hermetic cards @preserve */
+            ...(deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}),
+        });
+        const message = [
+            `onboarded A2A peer: ${record.name}`,
+            `friend id: ${record.id}`,
+            /* v8 ignore next -- onboardA2APeer always writes an explicit TrustLevel @preserve */
+            `trust: ${record.trustLevel ?? "unknown"}`,
+            /* v8 ignore next -- onboardA2APeer validates and persists an A2A endpoint before returning @preserve */
+            `endpoint: ${record.agentMeta?.a2a?.endpointUrl ?? "unknown"}`,
+        ].join("\n");
+        deps.writeStdout(message);
+        return message;
+    }
+    /* v8 ignore start -- foreground serve intentionally waits for process signals; a2a/server has route-level coverage @preserve */
+    const { startA2AServer } = await Promise.resolve().then(() => __importStar(require("../../a2a/server")));
+    const handle = await startA2AServer({
+        agentName: command.agent,
+        ...(command.host ? { host: command.host } : {}),
+        ...(command.port ? { port: command.port } : {}),
+        ...(command.baseUrl ? { baseUrl: command.baseUrl } : {}),
+        ...(command.path ? { path: command.path } : {}),
+    });
+    const message = `A2A listening for ${command.agent}\nendpoint: ${handle.endpointUrl}\ncard: ${handle.url.replace(/\/+$/, "")}/.well-known/agent-card.json`;
+    deps.writeStdout(message);
+    await new Promise((resolve) => {
+        process.once("SIGINT", () => resolve());
+        process.once("SIGTERM", () => resolve());
+    });
+    await handle.close();
+    return message;
+    /* v8 ignore stop */
+}
 // ── Dev mode helpers ──
 /* v8 ignore start -- repo resolution for ouro dev: repoPath branch tested via daemon-cli-dev; clone requires real git/npm @preserve */
 function getDevConfigPath() {
@@ -6594,6 +6706,9 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
         deps.writeStdout(message);
         return message;
     }
+    if (command.kind === "a2a.card" || command.kind === "a2a.onboard" || command.kind === "a2a.serve") {
+        return executeA2ACommand(command, deps);
+    }
     // ── provider commands (local, no daemon socket needed) ──
     if (command.kind === "provider.use") {
         return executeProviderUse(command, deps);

package/dist/heart/daemon/cli-help.js

@@ -187,9 +187,16 @@ exports.COMMAND_REGISTRY = {
     connect: {
         category: "Auth",
         description: "Set up providers, portable integrations, and local senses from one guided screen",
-        usage: "ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail] [--agent <name>]",
+        usage: "ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice|a2a] [--agent <name>]",
         example: "ouro connect",
-        subcommands: ["providers", "perplexity", "embeddings", "teams", "bluebubbles", "mail"],
+        subcommands: ["providers", "perplexity", "embeddings", "teams", "bluebubbles", "mail", "voice", "a2a"],
+    },
+    a2a: {
+        category: "Friends",
+        description: "Publish A2A cards, onboard agent peers, and run the A2A sense server",
+        usage: "ouro a2a <card|onboard|serve> [--agent <name>]",
+        example: "ouro a2a card --agent <agent> --base-url https://agent.example",
+        subcommands: ["card", "onboard", "serve"],
     },
     mail: {
         category: "Auth",
@@ -330,6 +337,11 @@ const SUBCOMMAND_HELP = {
         usage: "ouro connect mail [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]",
         example: "ouro connect mail --agent <agent> --owner-email you@example.com --source hey",
     },
+    "connect a2a": {
+        description: "Enable the agent-to-agent A2A sense",
+        usage: "ouro connect a2a [--agent <name>]",
+        example: "ouro connect a2a --agent <agent>",
+    },
     "account ensure": {
         description: "Idempotently prepare an agent's vault-backed work substrate account and private Mailroom mailbox",
         usage: "ouro account ensure [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]",

package/dist/heart/daemon/cli-parse.js

@@ -84,7 +84,7 @@ function usage() {
         "  ouro -v|--version",
         "  ouro auth [--agent <name>] [--provider <provider>]",
         "  ouro account ensure [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]",
-        "  ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice] [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]",
+        "  ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice|a2a] [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]",
         "  ouro mail import-mbox --file <path> [--owner-email <email>] [--source <label>] [--agent <name>] [--foreground]",
         "  ouro mail backfill-indexes [--agent <name>] [--foreground]",
         "  ouro auth verify [--agent <name>] [--provider <provider>]",
@@ -117,6 +117,9 @@ function usage() {
         "  ouro inner [--agent <name>]",
         "  ouro friend link <agent> --friend <id> --provider <p> --external-id <eid>",
         "  ouro friend unlink <agent> --friend <id> --provider <p> --external-id <eid>",
+        "  ouro a2a card [--agent <name>] [--base-url <url>] [--json]",
+        "  ouro a2a onboard [--agent <name>] --card-url <url> [--trust <level>] [--name <name>]",
+        "  ouro a2a serve [--agent <name>] [--host <host>] [--port <port>] [--base-url <url>] [--path <path>]",
         "  ouro whoami [--agent <name>]",
         "  ouro session list [--agent <name>]",
         "  ouro mcp list",
@@ -254,7 +257,7 @@ function parseLinkCommand(args, kind = "friend.link") {
         throw new Error(`Usage\n${usage()}`);
     }
     if (!(0, types_1.isIdentityProvider)(providerRaw)) {
-        throw new Error(`Unknown identity provider '${providerRaw}'. Use aad|local|teams-conversation.`);
+        throw new Error(`Unknown identity provider '${providerRaw}'. Use aad|local|teams-conversation|imessage-handle|email-address|a2a-agent.`);
     }
     return {
         kind,
@@ -739,7 +742,9 @@ function normalizeConnectTarget(value) {
         return "mail";
     if (value === "voice" || value === "audio" || value === "speech")
         return "voice";
-    throw new Error("Usage: ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice] [--agent <name>]");
+    if (value === "a2a" || value === "agent2agent" || value === "agent-to-agent")
+        return "a2a";
+    throw new Error("Usage: ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice|a2a] [--agent <name>]");
 }
 function extractMailSourceFlags(args, usageText) {
     const rest = [];
@@ -792,7 +797,7 @@ function extractMailSourceFlags(args, usageText) {
     };
 }
 function parseConnectCommand(args) {
-    const usageText = "Usage: ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice] [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]";
+    const usageText = "Usage: ouro connect [providers|perplexity|embeddings|teams|bluebubbles|mail|voice|a2a] [--agent <name>] [--owner-email <email> --source <label>|--no-delegated-source] [--rotate-missing-mail-keys]";
     const { agent, rest: afterAgent } = extractAgentFlag(args);
     const mailFlags = extractMailSourceFlags(afterAgent, usageText);
     if (mailFlags.rest.length > 1)
@@ -1075,6 +1080,83 @@ function parseFriendCommand(args) {
         return parseLinkCommand(rest, "friend.unlink");
     throw new Error(`Usage\n${usage()}`);
 }
+function parseA2ACommand(args) {
+    const { agent, rest: cleaned } = extractAgentFlag(args);
+    const [sub, ...rest] = cleaned;
+    if (sub === "card") {
+        let baseUrl;
+        let json = false;
+        for (let i = 0; i < rest.length; i += 1) {
+            if (rest[i] === "--base-url" && rest[i + 1]) {
+                baseUrl = rest[++i];
+                continue;
+            }
+            if (rest[i] === "--json") {
+                json = true;
+                continue;
+            }
+            throw new Error("Usage: ouro a2a card [--agent <name>] [--base-url <url>] [--json]");
+        }
+        return { kind: "a2a.card", ...(agent ? { agent } : {}), ...(baseUrl ? { baseUrl } : {}), ...(json ? { json: true } : {}) };
+    }
+    if (sub === "onboard") {
+        let cardUrl;
+        let trustLevel;
+        let name;
+        const VALID_TRUST_LEVELS = new Set(["stranger", "acquaintance", "friend", "family"]);
+        for (let i = 0; i < rest.length; i += 1) {
+            if (rest[i] === "--card-url" && rest[i + 1]) {
+                cardUrl = rest[++i];
+                continue;
+            }
+            if (rest[i] === "--trust" && rest[i + 1]) {
+                const raw = rest[++i];
+                if (!VALID_TRUST_LEVELS.has(raw))
+                    throw new Error("Usage: ouro a2a onboard [--agent <name>] --card-url <url> [--trust <stranger|acquaintance|friend|family>] [--name <name>]");
+                trustLevel = raw;
+                continue;
+            }
+            if (rest[i] === "--name" && rest[i + 1]) {
+                name = rest[++i];
+                continue;
+            }
+            throw new Error("Usage: ouro a2a onboard [--agent <name>] --card-url <url> [--trust <level>] [--name <name>]");
+        }
+        if (!cardUrl)
+            throw new Error("Usage: ouro a2a onboard [--agent <name>] --card-url <url> [--trust <level>] [--name <name>]");
+        return { kind: "a2a.onboard", cardUrl, ...(agent ? { agent } : {}), ...(trustLevel ? { trustLevel } : {}), ...(name ? { name } : {}) };
+    }
+    if (sub === "serve") {
+        let host;
+        let port;
+        let baseUrl;
+        let path;
+        for (let i = 0; i < rest.length; i += 1) {
+            if (rest[i] === "--host" && rest[i + 1]) {
+                host = rest[++i];
+                continue;
+            }
+            if (rest[i] === "--port" && rest[i + 1]) {
+                const rawPort = Number.parseInt(rest[++i], 10);
+                if (!Number.isInteger(rawPort) || rawPort < 1 || rawPort > 65535)
+                    throw new Error("A2A port must be 1-65535");
+                port = rawPort;
+                continue;
+            }
+            if (rest[i] === "--base-url" && rest[i + 1]) {
+                baseUrl = rest[++i];
+                continue;
+            }
+            if (rest[i] === "--path" && rest[i + 1]) {
+                path = rest[++i];
+                continue;
+            }
+            throw new Error("Usage: ouro a2a serve [--agent <name>] [--host <host>] [--port <port>] [--base-url <url>] [--path <path>]");
+        }
+        return { kind: "a2a.serve", ...(agent ? { agent } : {}), ...(host ? { host } : {}), ...(port ? { port } : {}), ...(baseUrl ? { baseUrl } : {}), ...(path ? { path } : {}) };
+    }
+    throw new Error("Usage: ouro a2a card|onboard|serve ...");
+}
 function parseConfigCommand(args) {
     const { agent, rest: afterAgent } = extractAgentFlag(args);
     const { facing, rest: cleaned } = extractFacingFlag(afterAgent);
@@ -1473,6 +1555,8 @@ function parseOuroCommand(args) {
         return parseMigrateToDeskCommand(args.slice(1));
     if (head === "friend")
         return parseFriendCommand(args.slice(1));
+    if (head === "a2a")
+        return parseA2ACommand(args.slice(1));
     if (head === "config")
         return parseConfigCommand(args.slice(1));
     if (head === "mcp")

package/dist/heart/daemon/daemon.js

@@ -108,7 +108,8 @@ function parseOrphanPidsFromPs(psOutput, selfPid) {
             && !line.includes("daemon-entry.js")
             && !line.includes("bluebubbles/entry.js")
             && !line.includes("mail-entry.js")
-            && !line.includes("teams-entry.js"))
+            && !line.includes("teams-entry.js")
+            && !line.includes("a2a-entry.js"))
             continue;
         // Parse `<pid> <ppid> <command...>`. ps pads these with leading spaces.
         // Regex guarantees both groups are \d+ so parseInt can't produce NaN.

package/dist/heart/daemon/process-manager.js

@@ -287,7 +287,8 @@ class DaemonProcessManager {
                 this.notifySnapshotChange(state.snapshot);
                 return;
             }
-            const args = [entryScript, "--agent", state.config.agentArg ?? agent, ...(state.config.args ?? [])];
+            const agentArgs = state.config.getArgs?.() ?? state.config.args ?? [];
+            const args = [entryScript, "--agent", state.config.agentArg ?? agent, ...agentArgs];
             const child = this.spawnFn("node", args, {
                 cwd: runCwd,
                 env: state.config.env ? { ...process.env, ...state.config.env } : process.env,

package/dist/heart/daemon/runtime-logging.js

@@ -51,7 +51,7 @@ function defaultLoggingForProcess(processName) {
             sinks: ["ndjson"],
         };
     }
-    if (processName === "bluebubbles" || processName === "mail" || processName === "voice") {
+    if (processName === "bluebubbles" || processName === "mail" || processName === "voice" || processName === "a2a") {
         return {
             level: "warn",
             sinks: ["terminal", "ndjson"],

package/dist/heart/daemon/sense-manager.js

@@ -44,6 +44,7 @@ const provider_credentials_1 = require("../provider-credentials");
 const sense_truth_1 = require("../sense-truth");
 const machine_identity_1 = require("../machine-identity");
 const process_manager_1 = require("./process-manager");
+const config_1 = require("../../a2a/config");
 const DEFAULT_TEAMS_PORT = 3978;
 const DEFAULT_BLUEBUBBLES_PORT = 18790;
 const DEFAULT_BLUEBUBBLES_WEBHOOK_PATH = "/bluebubbles-webhook";
@@ -55,6 +56,7 @@ function defaultSenses() {
         bluebubbles: { ...identity_1.DEFAULT_AGENT_SENSES.bluebubbles },
         mail: { ...identity_1.DEFAULT_AGENT_SENSES.mail },
         voice: { ...identity_1.DEFAULT_AGENT_SENSES.voice },
+        a2a: { ...identity_1.DEFAULT_AGENT_SENSES.a2a },
     };
 }
 function readAgentSenses(agentJsonPath) {
@@ -80,7 +82,7 @@ function readAgentSenses(agentJsonPath) {
     if (!rawSenses || typeof rawSenses !== "object" || Array.isArray(rawSenses)) {
         return defaults;
     }
-    for (const sense of ["cli", "teams", "bluebubbles", "mail", "voice"]) {
+    for (const sense of ["cli", "teams", "bluebubbles", "mail", "voice", "a2a"]) {
         const rawSense = rawSenses[sense];
         if (!rawSense || typeof rawSense !== "object" || Array.isArray(rawSense)) {
             continue;
@@ -103,6 +105,25 @@ function numberField(record, key, fallback) {
     const value = record?.[key];
     return typeof value === "number" && Number.isFinite(value) ? value : fallback;
 }
+function a2aMachineRuntimeConfig(agent) {
+    const runtimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
+    const payload = runtimeConfig.ok ? runtimeConfig.config : {};
+    const a2a = payload.a2a;
+    return a2a && typeof a2a === "object" && !Array.isArray(a2a) ? a2a : undefined;
+}
+function managedA2AArgs(agent) {
+    const a2a = a2aMachineRuntimeConfig(agent);
+    const args = ["--port", String(numberField(a2a, "port", (0, config_1.defaultA2APort)(agent)))];
+    const host = textField(a2a, "host");
+    const endpointPath = (0, config_1.normalizeA2APath)(textField(a2a, "path") || config_1.A2A_DEFAULT_PATH);
+    const publicUrl = textField(a2a, "publicUrl");
+    if (host)
+        args.push("--host", host);
+    args.push("--path", endpointPath);
+    if (publicUrl)
+        args.push("--base-url", publicUrl);
+    return args;
+}
 function compactRuntimeConfigError(agent, error) {
     const compact = error.replace(/\s+/g, " ").trim();
     if (/credential vault is locked|vault locked|vault is locked/i.test(compact)) {
@@ -125,6 +146,7 @@ function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntim
         bluebubbles: { configured: false, detail: "not enabled in agent.json" },
         mail: { configured: false, detail: "not enabled in agent.json" },
         voice: { configured: false, detail: "not enabled in agent.json" },
+        a2a: { configured: false, detail: "not enabled in agent.json" },
     };
     const payload = runtimeConfig.ok ? runtimeConfig.config : {};
     const unavailableDetail = runtimeConfigUnavailableDetail(agent, runtimeConfig);
@@ -136,6 +158,7 @@ function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntim
     const mailroom = payload.mailroom;
     const integrations = payload.integrations;
     const voice = machinePayload.voice;
+    const a2a = machinePayload.a2a;
     if (senses.teams.enabled) {
         const missing = [];
         if (!textField(teams, "clientId"))
@@ -268,6 +291,16 @@ function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntim
                             : runtimeConfigUnavailableDetail(agent, machineRuntimeConfig),
             };
     }
+    if (senses.a2a.enabled) {
+        const port = numberField(a2a, "port", (0, config_1.defaultA2APort)(agent));
+        const endpointPath = (0, config_1.normalizeA2APath)(textField(a2a, "path") || config_1.A2A_DEFAULT_PATH);
+        const publicUrl = textField(a2a, "publicUrl");
+        base.a2a = {
+            configured: true,
+            /* v8 ignore next -- listSenseRows tests cover the public URL; daemon defaults cover the local port in live startup smoke @preserve */
+            detail: publicUrl ? `${publicUrl}${endpointPath}` : `:${port} ${endpointPath}`,
+        };
+    }
     return base;
 }
 function senseRepairHint(agent, sense) {
@@ -280,6 +313,10 @@ function senseRepairHint(agent, sense) {
     if (sense === "voice") {
         return `Agent-runnable: run 'ouro connect voice --agent ${agent}' for config guidance; use voice.twilioConversationEngine=openai-sip with voice.openaiRealtimeApiKey, voice.openaiSipProjectId, and voice.openaiSipWebhookSecret for preferred SIP phone voice; use openai-realtime for Media Streams fallback, or save ElevenLabs and local Whisper.cpp settings for cascade fallback; then run 'ouro up' again.`;
     }
+    /* v8 ignore next -- A2A currently has no credential-gated not-configured state; kept for future repair copy symmetry @preserve */
+    if (sense === "a2a") {
+        return `Agent-runnable: run 'ouro connect a2a --agent ${agent}', then restart with 'ouro up'.`;
+    }
     return `Run 'ouro connect bluebubbles --agent ${agent}' to attach BlueBubbles on this machine; then run 'ouro up' again.`;
 }
 function currentMachineId() {
@@ -290,7 +327,7 @@ function parseSenseSnapshotName(name) {
     if (parts.length !== 2)
         return null;
     const [agent, sense] = parts;
-    if (sense !== "teams" && sense !== "bluebubbles" && sense !== "mail" && sense !== "voice")
+    if (sense !== "teams" && sense !== "bluebubbles" && sense !== "mail" && sense !== "voice" && sense !== "a2a")
         return null;
     return { agent, sense };
 }
@@ -306,12 +343,14 @@ function managedSenseEntry(sense) {
         return "senses/bluebubbles/entry.js";
     if (sense === "voice")
         return "senses/voice-entry.js";
+    if (sense === "a2a")
+        return "senses/a2a-entry.js";
     return "senses/mail-entry.js";
 }
 function runtimeCredentialBootstrapFor(agent, sense) {
     const runtime = (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent);
-    const machineId = sense === "bluebubbles" || sense === "voice" ? currentMachineId() : undefined;
-    const machine = sense === "bluebubbles" || sense === "voice" ? (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent) : null;
+    const machineId = sense === "bluebubbles" || sense === "voice" || sense === "a2a" ? currentMachineId() : undefined;
+    const machine = sense === "bluebubbles" || sense === "voice" || sense === "a2a" ? (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent) : null;
     const providerPool = (0, provider_credentials_1.readProviderCredentialPool)(agent);
     const providerCredentialRecords = providerPool.ok
         ? Object.values(providerPool.pool.providers).filter((record) => !!record)
@@ -478,7 +517,7 @@ class DaemonSenseManager {
             return [agent, { senses, facts }];
         }));
         const managedSenseAgents = [...this.contexts.entries()].flatMap(([agent, context]) => {
-            return ["teams", "bluebubbles", "mail", "voice"]
+            return ["teams", "bluebubbles", "mail", "voice", "a2a"]
                 .filter((sense) => context.senses[sense].enabled)
                 .map((sense) => ({
                 name: `${agent}:${sense}`,
@@ -486,6 +525,7 @@ class DaemonSenseManager {
                 entry: managedSenseEntry(sense),
                 channel: sense,
                 autoStart: true,
+                ...(sense === "a2a" ? { args: managedA2AArgs(agent), getArgs: () => managedA2AArgs(agent) } : {}),
                 getRuntimeCredentialBootstrap: () => runtimeCredentialBootstrapFor(agent, sense),
             }));
         });
@@ -537,7 +577,7 @@ class DaemonSenseManager {
     async refreshSenseConfigAndRetry(name, parsed) {
         try {
             const refreshed = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(parsed.agent, { preserveCachedOnFailure: true });
-            const machineRefreshed = parsed.sense === "bluebubbles" || parsed.sense === "voice"
+            const machineRefreshed = parsed.sense === "bluebubbles" || parsed.sense === "voice" || parsed.sense === "a2a"
                 ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(parsed.agent, currentMachineId(), { preserveCachedOnFailure: true })
                 : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent);
             const context = this.contexts.get(parsed.agent);
@@ -576,14 +616,14 @@ class DaemonSenseManager {
     }
     async refreshEnabledSenseConfigs() {
         const refreshes = [...this.contexts.entries()].map(async ([agent, context]) => {
-            const enabledManagedSenses = ["teams", "bluebubbles", "mail", "voice"]
+            const enabledManagedSenses = ["teams", "bluebubbles", "mail", "voice", "a2a"]
                 .filter((sense) => context.senses[sense].enabled);
             /* v8 ignore next -- periodic refresh work only exists when a managed background sense is enabled @preserve */
             if (enabledManagedSenses.length === 0)
                 return;
             /* v8 ignore start -- periodic freshness refresh uses the same runtime readers covered by startup integration tests @preserve */
             const runtimeConfig = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(agent, { preserveCachedOnFailure: true });
-            const needsMachineConfig = enabledManagedSenses.some((sense) => sense === "bluebubbles" || sense === "voice");
+            const needsMachineConfig = enabledManagedSenses.some((sense) => sense === "bluebubbles" || sense === "voice" || sense === "a2a");
             const machineRuntimeConfig = needsMachineConfig
                 ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agent, currentMachineId(), { preserveCachedOnFailure: true })
                 : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
@@ -597,17 +637,29 @@ class DaemonSenseManager {
         await this.processManager.startAutoStartAgents();
     }
     triggerAutoStartSenses() {
-        if (this.processManager.triggerAutoStartAgents) {
-            this.processManager.triggerAutoStartAgents();
-            return;
-        }
-        void this.processManager.startAutoStartAgents().catch((error) => {
+        void this.refreshEnabledSenseConfigs()
+            .catch((error) => {
             (0, runtime_1.emitNervesEvent)({
                 level: "error",
                 component: "channels",
                 event: "channel.daemon_sense_autostart_error",
-                message: "sense autostart failed",
-                meta: { error: error instanceof Error ? error.message : String(error) },
+                message: "sense config refresh failed",
+                meta: { error: error instanceof Error ? error.message : /* v8 ignore next -- defensive non-Error refresh rejection @preserve */ String(error) },
+            });
+        })
+            .then(() => {
+            if (this.processManager.triggerAutoStartAgents) {
+                this.processManager.triggerAutoStartAgents();
+                return;
+            }
+            void this.processManager.startAutoStartAgents().catch((error) => {
+                (0, runtime_1.emitNervesEvent)({
+                    level: "error",
+                    component: "channels",
+                    event: "channel.daemon_sense_autostart_error",
+                    message: "sense autostart failed",
+                    meta: { error: error instanceof Error ? error.message : String(error) },
+                });
             });
         });
     }
@@ -712,6 +764,10 @@ class DaemonSenseManager {
                     optional: context.facts.voice.optional,
                     ...(runtime.get(agent)?.voice ?? {}),
                 },
+                a2a: {
+                    configured: context.facts.a2a.configured,
+                    ...(runtime.get(agent)?.a2a ?? {}),
+                },
             };
             const inventory = (0, sense_truth_1.getSenseInventory)({ senses: context.senses }, runtimeInfo);
             return inventory.map((entry) => ({