@ryubyte/dsh-a2a 0.2.0 → 0.3.0

package/README.en.md

@@ -9,6 +9,23 @@ It turns a DSH instance into a full A2A peer in both directions:
 - **Client mode (outbound)** — discover a remote agent via its **AgentCard**, map each **skill** to a DSH model tool (`a2a__<name>__<skill>`), and execute remote tasks through A2A **JSON-RPC**.
 - **Server mode (inbound)** — expose this DSH to other agents: `/.well-known/agent-card.json` plus a JSON-RPC endpoint (`SendMessage`, `GetTask`, `ListTasks`, `CancelTask`, `SendStreamingMessage` over SSE) on the DSH webserver.
 
+## Installation
+
+Install into a profile with one command and restart:
+
+    dsh plugin --profile web add @ryubyte/dsh-a2a
+    dsh --profile web
+
+`dsh plugin` installs the package into the profile and auto-registers the
+plugin layer (this package declares `dsh.bundle.patch` in `package.json`) — no
+manual configuration is needed.
+
+## Screenshots
+
+| Connected agents (this DSH as a client) | Public service (this DSH as an agent) |
+|---|---|
+| ![Connected agents panel](docs/screenshots/panel-client.png) | ![Public service panel](docs/screenshots/panel-server.png) |
+
 ## Features
 
 ### Protocol surface (A2A v1.0)
@@ -51,46 +68,6 @@ land in that profile directory, so they are read no matter which working
 directory you launch from. Hand-writing `a2a.json` is still supported (below),
 but **a new user can do everything through the UI**.
 
-## Screenshots
-
-| Connected agents (this DSH as a client) | Public service (this DSH as an agent) |
-|---|---|
-| ![Connected agents panel](docs/screenshots/panel-client.png) | ![Public service panel](docs/screenshots/panel-server.png) |
-
-## Installation
-
-### Option 1: from npm (recommended)
-
-Once published to npm, install into the target profile with one command and
-restart:
-
-    dsh plugin --profile <profile> add @ryubyte/dsh-a2a
-    dsh --profile <profile>
-
-`dsh plugin` installs the package into the profile and auto-registers the
-plugin layer (this package declares `dsh.bundle.patch` in `package.json`) — no
-manual configuration is needed.
-
-### Option 2: from the repository (development)
-
-For hacking on the code, requires Node.js >= 22:
-
-    # 1. Clone the repo
-    git clone https://github.com/ryubyte/dsh-a2a.git
-    cd dsh-a2a
-
-    # 2. Install deps and build
-    npm install
-    npm run build
-
-    # 3. Link into the target profile
-    dsh plugin --profile <profile> add link:$(pwd)
-
-    # 4. Restart
-    dsh --profile <profile>
-
-After changing source, re-run `npm run build` and restart.
-
 ## Usage
 
 ### 1. Configure a remote agent (outbound)
@@ -160,7 +137,7 @@ Other A2A clients discover this DSH via the auto-inferred
 
 On each inbound task the server picks an executor in this order:
 
-1. **Explicit `execute`** (injected programmatically) — yours wins.
+1. **Explicit `execute`** (injected via composition config) — yours wins.
 2. **This DSH's own agent session** (the default, when an agent loop is
    present) — **one session per A2A `contextId`**: the first task for a context
    `ctx.agents.create()`s a session (later tasks for the same context reuse it,
@@ -195,37 +172,6 @@ On each inbound task the server picks an executor in this order:
 > a `/bin/sh -c` command — trusted clients only. For production put a TLS
 > reverse proxy in front and set `authToken` as needed.
 
-### 3. Programmatic use
-
-```ts
-import { A2AClient, A2AServer, TaskStore } from '@ryubyte/dsh-a2a';
-
-// outbound: connect to a remote agent
-const client = await A2AClient.connect('https://agent.example.com');
-const { task } = await client.sendMessage({
-  messageId: crypto.randomUUID(),
-  role: 'ROLE_USER',
-  parts: [{ text: 'Draft a report' }],
-});
-for await (const ev of client.streamMessage({ messageId: crypto.randomUUID(), role: 'ROLE_USER', parts: [{ text: 'hi' }] })) {
-  // ev.statusUpdate | ev.artifactUpdate | ev.task | ev.message
-}
-
-// inbound: wire a custom executor to your own agent loop
-const store = new TaskStore();
-const server = new A2AServer({
-  baseUrl: 'http://127.0.0.1:3080',
-  agentName: 'My DSH',
-  agentDescription: '...',
-  agentVersion: '1.0.0',
-  execute: async ({ message }) => ({
-    messageId: crypto.randomUUID(),
-    role: 'ROLE_AGENT',
-    parts: [{ text: await myAgentRun(message.parts) }],
-  }),
-}, store);
-```
-
 ## Directory structure
 
     src/
@@ -282,12 +228,4 @@ const server = new A2AServer({
   webserver binds loopback by default, so put a TLS reverse proxy in front
   before exposing beyond localhost.
 - Bearer tokens — both the outbound per-agent token and the inbound endpoint
-  `authToken` — are stored in plaintext in `a2a.json`; secure the file yourself.
-
-## Development
-
-```bash
-npm install
-npm run build    # tsc(types) + tsdown(lib) + wrap client → lib/client.js
-npm test         # node:test + tsx (unit/integration) + client-bundle smoke
-```
+  `authToken` — are stored in plaintext in `a2a.json`; secure the file yourself.

package/README.md

@@ -9,6 +9,21 @@
 - **Client 模式（出站）**——通过远程 Agent 的 **AgentCard** 发现它，把每个 **skill** 映射为 DSH 模型工具（`a2a__<name>__<skill>`），通过 A2A **JSON-RPC** 执行远程任务。
 - **Server 模式（入站）**——把本 DSH 暴露给其他 Agent：在 DSH webserver 上提供 `/.well-known/agent-card.json` 与 JSON-RPC 端点（`SendMessage`、`GetTask`、`ListTasks`、`CancelTask`、基于 SSE 的 `SendStreamingMessage`）。
 
+## 安装
+
+一行命令装进 profile，重启即生效：
+
+    dsh plugin --profile web add @ryubyte/dsh-a2a
+    dsh --profile web
+
+`dsh plugin` 会把包装进 profile 并自动加入插件层（本包在 package.json 里声明了 `dsh.bundle.patch`），无需手动改任何配置。
+
+## 截图
+
+| 连接的 Agent（本 DSH 作为客户端） | 对外服务（本 DSH 作为 Agent） |
+|---|---|
+| ![连接的 Agent 面板](docs/screenshots/panel-client.png) | ![对外服务面板](docs/screenshots/panel-server.png) |
+
 ## 功能
 
 ### 协议能力（A2A v1.0）
@@ -43,43 +58,6 @@
 
 配置以 **`a2a.json`（按 profile 存放，可完全通过 UI 管理）为准**，无需改动组合配置即可管理 Agent 与对外服务。文件定位不依赖启动目录：插件解析进程命令行里的 `--profile <name>`（`dsh web` 别名同样识别为 `web` profile），读写 `~/.dsh/profiles/<name>/a2a.json`——UI 首次生成的配置也会写到该 profile 目录，从任意工作目录启动都能读到。手写 `a2a.json` 仍然支持（见下文），但**新用户完全靠 UI 即可完成配置与上线**。
 
-## 截图
-
-| 连接的 Agent（本 DSH 作为客户端） | 对外服务（本 DSH 作为 Agent） |
-|---|---|
-| ![连接的 Agent 面板](docs/screenshots/panel-client.png) | ![对外服务面板](docs/screenshots/panel-server.png) |
-
-## 安装
-
-### 方式一：从 npm 安装（推荐）
-
-插件发布到 npm 后，一行命令装进目标 profile，重启即生效：
-
-    dsh plugin --profile <profile> add @ryubyte/dsh-a2a
-    dsh --profile <profile>
-
-`dsh plugin` 会把包装进 profile 并自动加入插件层（本包在 package.json 里声明了 `dsh.bundle.patch`），无需手动改任何配置。
-
-### 方式二：从仓库安装（开发调试）
-
-用于改代码调试，需要 Node.js >= 22 与 pnpm：
-
-    # 1. 克隆仓库
-    git clone https://github.com/ryubyte/dsh-a2a.git
-    cd dsh-a2a
-
-    # 2. 安装依赖并构建
-    npm install
-    npm run build
-
-    # 3. 链接进目标 profile
-    dsh plugin --profile <profile> add link:$(pwd)
-
-    # 4. 重启
-    dsh --profile <profile>
-
-改完源码后重跑 `npm run build` 再重启即可。
-
 ## 使用
 
 ### 1. 配置远程 Agent（出站）
@@ -139,7 +117,7 @@
 
 server 模式收到任务后，按以下优先级选择 executor：
 
-1. **显式 `execute`**（编程接入时注入）—— 用你的。
+1. **显式 `execute`**（通过 composition 配置注入）—— 用你的。
 2. **本 DSH 的 agent 会话**（默认，当 agent 循环就位时）—— 按 A2A `contextId` **一个对话一个会话**：某 `contextId` 首个任务 `ctx.agents.create()` 建会话（后续同 `contextId` 复用同一会话，历史累积；进程重启后按需 `resume`），把消息作为 `next-turn` 唤醒项发给它，等 `whenIdle()`，取最新 assistant 回复作为 A2A artifact。同一 `contextId` 的并发任务按序串行，不同 `contextId` 并行。会话不逐任务释放（否则无法累积上下文），插件卸载/下线时统一释放。开 server 即可「接收并处理任务」，无需写代码。
 3. **`notConfiguredExecutor`**（兜底）—— 既没注入 `execute`、composition 里又没有可用 agent 循环（如仅 dsh-base 的最小 profile）时，返回「no executor configured — inject one」，**不执行任何命令**。
 
@@ -151,37 +129,6 @@ server 模式收到任务后，按以下优先级选择 executor：
 >
 > 本机自测也可显式传入 `shellExecutor`（把 prompt 当作 shell 命令执行，仅限可信客户端）；生产请置于 TLS 反向代理之后并按需配 `authToken`。
 
-### 3. 编程接入
-
-```ts
-import { A2AClient, A2AServer, TaskStore } from '@ryubyte/dsh-a2a';
-
-// 出站：连接远程 Agent
-const client = await A2AClient.connect('https://agent.example.com');
-const { task } = await client.sendMessage({
-  messageId: crypto.randomUUID(),
-  role: 'ROLE_USER',
-  parts: [{ text: 'Draft a report' }],
-});
-for await (const ev of client.streamMessage({ messageId: crypto.randomUUID(), role: 'ROLE_USER', parts: [{ text: 'hi' }] })) {
-  // ev.statusUpdate | ev.artifactUpdate | ev.task | ev.message
-}
-
-// 入站：自定义 executor 接入 DSH agent 循环
-const store = new TaskStore();
-const server = new A2AServer({
-  baseUrl: 'http://127.0.0.1:3080',
-  agentName: 'My DSH',
-  agentDescription: '...',
-  agentVersion: '1.0.0',
-  execute: async ({ message }) => ({
-    messageId: crypto.randomUUID(),
-    role: 'ROLE_AGENT',
-    parts: [{ text: await myAgentRun(message.parts) }],
-  }),
-}, store);
-```
-
 ## 目录结构
 
     src/
@@ -217,11 +164,3 @@ const server = new A2AServer({
 - 入站服务的执行策略见[入站任务由谁执行](#入站任务由谁执行executor-优先级)：有 agent 循环时默认由本 DSH 会话执行（绑定工作目录 cwd），否则（且未注入 executor）**拒绝执行**并返回「no executor configured」。`shellExecutor` 仅限本地自测。无论哪种 executor，都切勿向不受信网络暴露 server 模式（默认无鉴权，除非配置 `authToken`）。
 - A2A 规范要求生产 `AgentInterface.url` 使用 HTTPS；DSH webServer 默认仅绑 loopback，对外暴露前需自行加 TLS。
 - Bearer token（出站按 Agent 配置的、入站保护端点的 `authToken`）均明文存于 `a2a.json`，请自行保证该文件权限。
-
-## 开发
-
-```bash
-npm install
-npm run build    # tsc(types) + tsdown(lib) + wrap client → lib/client.js
-npm test         # node:test + tsx（单元 / 集成）+ client-bundle smoke
-```

package/lib/client.js

@@ -199,6 +199,11 @@ window.__ModuleLoader__.load({
 		.a2a-auth-state[data-on='false'] { color: var(--dsw-alias-label-tertiary, #81858c); }
 		.a2a-auth-input-row { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
 		.a2a-auth-input-row .a2a-input { flex: 1; min-width: 220px; }
+		.a2a-cors-list { display: flex; flex-wrap: wrap; gap: 6px; }
+		.a2a-cors-chip { display: inline-flex; align-items: center; gap: 6px; font-size: 12px; font-family: var(--ds-font-family-code, ui-monospace, monospace); padding: 2px 6px 2px 8px; border-radius: var(--dsw-radius-sm, 6px); background: var(--dsw-alias-interactive-bg-hover, rgba(0,0,0,0.05)); border: .5px solid var(--dsw-alias-border-l3, #d0d3d9); color: var(--dsw-alias-label-secondary, #4a4f57); }
+		.a2a-cors-chip-x { border: none; background: none; cursor: pointer; font-size: 14px; line-height: 1; padding: 0 2px; color: var(--dsw-alias-label-tertiary, #81858c); }
+		.a2a-cors-chip-x:hover:not(:disabled) { color: var(--dsw-alias-state-error-primary, #f04438); }
+		.a2a-cors-chip-x:disabled { cursor: default; opacity: .4; }
 
 		/* ---- inbound table ---- */
 		.a2a-table-wrap { overflow-x: auto; border: 1px solid var(--dsw-alias-border-l1, rgba(127,127,127,.12)); border-radius: 10px; }
@@ -303,21 +308,13 @@ window.__ModuleLoader__.load({
 				const dispose = injectDashboardStyles();
 				return () => dispose();
 			}, "dsh-a2a: dashboard styles");
-			ctx.effect(() => {
-				try {
-					const off = ctx.slots.register({
-						name: "settings.section",
-						id: "a2a",
-						order: 90,
-						label: () => "A2A 连接",
-						inject: () => ({})
-					}, DashboardSection);
-					return () => off();
-				} catch (err) {
-					console.error("[dsh-a2a] failed to register settings section:", err);
-					return () => {};
-				}
-			}, "dsh-a2a: settings section");
+			ctx.effect(() => ctx.slots.inject("settings.section", () => ctx.slots.register({
+				name: "settings.section",
+				id: "a2a",
+				order: 90,
+				label: () => "A2A 连接",
+				inject: () => ({})
+			}, DashboardSection)), "dsh-a2a: settings section");
 		}
 		async function fetchSnapshot() {
 			const res = await fetch("/a2a/api", { headers: { accept: "application/json" } });
@@ -390,6 +387,8 @@ window.__ModuleLoader__.load({
 			const [addToken, setAddToken] = (0, react.useState)("");
 			/** Inbound authToken input (serve tab); empty string means "clear". */
 			const [authInput, setAuthInput] = (0, react.useState)("");
+			/** New-origin input for the inbound CORS allowlist editor (serve tab). */
+			const [corsInput, setCorsInput] = (0, react.useState)("");
 			/** Serve-identity edit mode + form draft (server tab). All hooks stay at the
 			* top level in fixed order; a single shared draft avoids per-card hooks. */
 			const [editingServe, setEditingServe] = (0, react.useState)(false);
@@ -541,7 +540,7 @@ window.__ModuleLoader__.load({
 			})), (0, react.createElement)("div", { className: "a2a-hint" }, "若远程 Agent 需要鉴权,填入 token;导入与后续调用都会带上。token 会明文存入 a2a.json。"), discovering ? (0, react.createElement)("div", { className: "a2a-hint" }, "正在读取 Agent Card…") : discovered ? (0, react.createElement)("div", { className: "a2a-preview" }, (0, react.createElement)("div", { className: "a2a-preview-head" }, (0, react.createElement)("span", { className: "a2a-preview-name" }, discovered.name), discovered.version ? (0, react.createElement)("span", { className: "a2a-preview-version a2a-mono" }, `v${discovered.version}`) : null, stateDot("connected")), discovered.description ? (0, react.createElement)("div", { className: "a2a-preview-desc" }, discovered.description) : null, (discovered.skills?.length ?? 0) > 0 ? (0, react.createElement)("div", { className: "a2a-skill-list" }, (0, react.createElement)("div", { className: "a2a-skill-list-title" }, "Skills"), ...(discovered.skills ?? []).map((s) => (0, react.createElement)("div", { key: s.id }, `• ${s.name}${s.description ? ` — ${s.description}` : ""}`))) : null, discovered.endpoint ? (0, react.createElement)("div", { className: "a2a-preview-meta a2a-mono" }, `端点 ${discovered.endpoint}`) : null, (0, react.createElement)("div", { className: "a2a-btn-row" }, actionBtn("连接", true, () => void doConnect(), busy?.startsWith("add-agent:") ?? false), actionBtn("取消", false, () => {
 				setDiscovered(null);
 				setAddUrl("");
-			}, false))) : (0, react.createElement)("div", { className: "a2a-hint" }, "输入远程 Agent 的 Agent Card URL 并点击\"导入\"，将自动读取其名称、描述、技能与能力，确认后建立连接。"))) : null, tab === "server" ? (0, react.createElement)("div", { className: "a2a-stack" }, serve ? editingServe ? serveEditPanel(serveDraft, setServeDraft, (also) => void saveServeIdentity(also), () => setEditingServe(false), busy, false) : needsServeSetup(serve) ? serveEditPanel(serveDraft, setServeDraft, (also) => void saveServeIdentity(also), () => setEditingServe(false), busy, true) : serveViewPanel(serve, busy, act, authInput, setAuthInput, startEditServe) : null, (0, react.createElement)("div", { className: "a2a-crew" }, sec("入站连接（谁在连接本 DSH）", inbound.length), inbound.length === 0 ? emptyRow("暂无入站连接。其他 A2A 客户端调用本 DSH 的 JSON-RPC 端点后会显示在这里。") : (0, react.createElement)("div", { className: "a2a-table-wrap" }, (0, react.createElement)("table", { className: "a2a-table" }, (0, react.createElement)("thead", null, headRow([
+			}, false))) : (0, react.createElement)("div", { className: "a2a-hint" }, "输入远程 Agent 的 Agent Card URL 并点击\"导入\"，将自动读取其名称、描述、技能与能力，确认后建立连接。"))) : null, tab === "server" ? (0, react.createElement)("div", { className: "a2a-stack" }, serve ? editingServe ? serveEditPanel(serveDraft, setServeDraft, (also) => void saveServeIdentity(also), () => setEditingServe(false), busy, false) : needsServeSetup(serve) ? serveEditPanel(serveDraft, setServeDraft, (also) => void saveServeIdentity(also), () => setEditingServe(false), busy, true) : serveViewPanel(serve, busy, act, authInput, setAuthInput, corsInput, setCorsInput, startEditServe) : null, (0, react.createElement)("div", { className: "a2a-crew" }, sec("入站连接（谁在连接本 DSH）", inbound.length), inbound.length === 0 ? emptyRow("暂无入站连接。其他 A2A 客户端调用本 DSH 的 JSON-RPC 端点后会显示在这里。") : (0, react.createElement)("div", { className: "a2a-table-wrap" }, (0, react.createElement)("table", { className: "a2a-table" }, (0, react.createElement)("thead", null, headRow([
 				"来源",
 				"地址",
 				"首次连接",
@@ -722,7 +721,7 @@ window.__ModuleLoader__.load({
 		* "编辑" button that flips the section into {@link serveEditPanel}. Pure (no
 		* hooks): the edit-mode flag and draft live in the parent section.
 		*/
-		function serveViewPanel(serve, busy, act, authInput, setAuthInput, onEdit) {
+		function serveViewPanel(serve, busy, act, authInput, setAuthInput, corsInput, setCorsInput, onEdit) {
 			return (0, react.createElement)("div", { className: "a2a-panel" }, (0, react.createElement)("div", { className: "a2a-serve-head" }, sec("A2A 服务（本 DSH 作为 Agent 对外）", 0), stateDot(serve.enabled ? "connected" : "disconnected"), (0, react.createElement)("span", {
 				className: "a2a-serve-status",
 				"data-on": String(serve.enabled)
@@ -732,7 +731,7 @@ window.__ModuleLoader__.load({
 			})) : null, serve.agentCardUrl ? (0, react.createElement)("div", { className: "a2a-meta-row" }, (0, react.createElement)("span", { className: "a2a-meta-key" }, "Agent Card"), (0, react.createElement)("span", { className: "a2a-serve-endpoint a2a-mono" }, serve.agentCardUrl), (0, react.createElement)(CopyButton, {
 				text: serve.agentCardUrl,
 				label: "Agent Card URL"
-			})) : null, (serve.skills?.length ?? 0) > 0 ? (0, react.createElement)("div", { className: "a2a-skill-list" }, (0, react.createElement)("div", { className: "a2a-skill-list-title" }, "Skills"), ...(serve.skills ?? []).map((s) => (0, react.createElement)("div", { key: s.id }, `• ${s.name}${s.description ? ` — ${s.description}` : ""}`))) : null), serve.enabled ? executorNote(serve) : null, serve.enabled ? authControl(serve, busy, act, authInput, setAuthInput) : null);
+			})) : null, (serve.skills?.length ?? 0) > 0 ? (0, react.createElement)("div", { className: "a2a-skill-list" }, (0, react.createElement)("div", { className: "a2a-skill-list-title" }, "Skills"), ...(serve.skills ?? []).map((s) => (0, react.createElement)("div", { key: s.id }, `• ${s.name}${s.description ? ` — ${s.description}` : ""}`))) : null), serve.enabled ? executorNote(serve) : null, serve.enabled ? authControl(serve, busy, act, authInput, setAuthInput) : null, serve.enabled ? corsControl(serve, busy, act, corsInput, setCorsInput) : null);
 		}
 		/**
 		* Serve-identity edit form (also the guided-setup card for fresh installs).
@@ -814,6 +813,52 @@ window.__ModuleLoader__.load({
 				setAuthInput("");
 			}, busy === "set-server-auth:") : null), (0, react.createElement)("div", { className: "a2a-hint" }, "token 会明文存入 a2a.json,重启后仍生效。设置后,入站 JSON-RPC 请求需带 Authorization: Bearer <token>。"));
 		}
+		/**
+		* Inbound CORS allowlist control for the serve tab: shows the allowed browser
+		* origins and lets the operator add/remove them. Empty = no CORS (default),
+		* so cross-origin browser clients are blocked. Origins are exact
+		* scheme+host+port strings; the literal `*` opens it to any site (warned).
+		* Applies live (persisted to a2a.json) — no restart needed.
+		*/
+		function corsControl(serve, busy, act, corsInput, setCorsInput) {
+			const origins = serve.corsOrigins ?? [];
+			const hasWildcard = origins.includes("*");
+			const isBusy = busy === "set-server-cors:";
+			const save = (next) => {
+				act("set-server-cors", "", { corsOrigins: next });
+			};
+			const addOrigin = () => {
+				const v = corsInput.trim();
+				if (!v || origins.includes(v)) {
+					setCorsInput("");
+					return;
+				}
+				save([...origins, v]);
+				setCorsInput("");
+			};
+			return (0, react.createElement)("div", { className: "a2a-auth" }, (0, react.createElement)("div", { className: "a2a-auth-row" }, (0, react.createElement)("span", { className: "a2a-auth-label" }, "跨域访问 (CORS)"), stateDot(origins.length > 0 ? hasWildcard ? "reconnecting" : "connected" : "disabled"), (0, react.createElement)("span", {
+				className: "a2a-auth-state",
+				"data-on": String(origins.length > 0)
+			}, origins.length === 0 ? "未开启(浏览器跨源调用被拒)" : hasWildcard ? "允许任意来源(*)" : `已允许 ${origins.length} 个来源`)), origins.length > 0 ? (0, react.createElement)("div", { className: "a2a-cors-list" }, ...origins.map((o) => (0, react.createElement)("span", {
+				key: o,
+				className: "a2a-cors-chip"
+			}, o, (0, react.createElement)("button", {
+				className: "a2a-cors-chip-x",
+				title: "移除",
+				disabled: isBusy,
+				onClick: () => save(origins.filter((x) => x !== o))
+			}, "×")))) : null, (0, react.createElement)("div", { className: "a2a-auth-input-row" }, (0, react.createElement)("input", {
+				className: "a2a-input",
+				type: "text",
+				placeholder: "添加来源,如 http://localhost:8080 或 *",
+				value: corsInput,
+				disabled: isBusy,
+				onChange: (e) => setCorsInput(e.target.value),
+				onKeyDown: (e) => {
+					if (e.key === "Enter") addOrigin();
+				}
+			}), actionBtn("添加", true, addOrigin, isBusy || !corsInput.trim()), origins.length > 0 ? actionBtn("清空", false, () => save([]), isBusy) : null), (0, react.createElement)("div", { className: "a2a-hint" }, hasWildcard ? "⚠️ 已允许任意来源(*):用户浏览器打开的任何网站都能跨源调用本入站端点。仅在完全可信的本机环境使用,并建议同时配置入站鉴权 token。" : "填入完整来源(协议+主机+端口,精确匹配)。留空则默认禁止浏览器跨源调用;写 * 可放开任意来源(不推荐)。跨域配置明文存入 a2a.json,实时生效。"));
+		}
 		function inboundRow(p, busy, act) {
 			return (0, react.createElement)("tr", { key: p.id }, (0, react.createElement)("td", { "data-label": "来源" }, p.label), (0, react.createElement)("td", {
 				className: "a2a-cell-mono",

package/lib/index.js

@@ -695,6 +695,16 @@ var A2AServer = class {
 		applyAuthScheme(card, token);
 		return card;
 	}
+	/**
+	* True when the request carries the configured bearer token. Public wrapper
+	* for transports that must decide response headers/status BEFORE streaming
+	* frames — see index.ts's SSE branch, which must send `content-type:
+	* text/event-stream` + CORS headers before the first `res.write()`, and
+	* therefore needs the auth outcome up front.
+	*/
+	checkAuth(req) {
+		return this.authorized(req);
+	}
 	/** True when the request carries the configured bearer token. */
 	authorized(req) {
 		const token = this.options.authToken;
@@ -1190,10 +1200,7 @@ function createDshAgentExecutor(agents, opts) {
 				type: "text",
 				text: prompt
 			}],
-			source: {
-				kind: "plugin",
-				plugin
-			}
+			source: { kind: `plugin:${plugin}` }
 		});
 		agent.send(userMessage, "next-turn", true);
 		if (justOpened) try {
@@ -1440,6 +1447,14 @@ var DashboardRegistry = class {
 					message: "set-server-auth is not wired (server mode not mounted)"
 				};
 			}
+			case "set-server-cors": {
+				const raw = payload?.corsOrigins;
+				const origins = Array.isArray(raw) ? raw.filter((o) => typeof o === "string") : [];
+				return this.hooks.setServerCors ? this.hooks.setServerCors(origins) : {
+					ok: false,
+					message: "set-server-cors is not wired (server mode not mounted)"
+				};
+			}
 			case "server-status": return this.hooks.serverStatus ? Promise.resolve(this.hooks.serverStatus()) : {
 				ok: false,
 				message: "server-status is not wired (server mode not mounted)"
@@ -1676,6 +1691,7 @@ function mergePersisted(base, persisted) {
 		if (pServer.agentVersion) merged.agentVersion = pServer.agentVersion;
 		if (pServer.endpointPath) merged.endpointPath = pServer.endpointPath;
 		if (pServer.authToken !== void 0) merged.authToken = pServer.authToken;
+		if (pServer.corsOrigins !== void 0) merged.corsOrigins = pServer.corsOrigins;
 		if (pServer.skills) merged.skills = pServer.skills;
 	}
 	return merged;
@@ -2222,12 +2238,23 @@ function apply(ctx, config = {}) {
 				}, store);
 				let enabled = wantsServer;
 				let disposers = [];
+				let corsAllowlist = normalizeOrigins(mergedConfig.corsOrigins);
+				if (corsAllowlist.includes("*")) logger?.warn?.("[a2a] corsOrigins includes \"*\": the inbound A2A endpoint accepts cross-origin browser calls from ANY site. Set an explicit origin allowlist unless this host is fully trusted and, ideally, gate it with authToken.");
 				const registerRoutes = () => {
+					const cors = (req) => corsHeadersFor(req.headers.origin, corsAllowlist);
 					disposers.push(webServer.register({
 						kind: "exact",
 						path: "/.well-known/agent-card.json",
-						handler: async (_req, res) => {
-							res.writeHead(200, { "content-type": "application/json" });
+						handler: async (req, res) => {
+							if (req.method === "OPTIONS") {
+								res.writeHead(204, cors(req));
+								res.end();
+								return;
+							}
+							res.writeHead(200, {
+								"content-type": "application/json",
+								...cors(req)
+							});
 							res.end(JSON.stringify(server.card));
 						}
 					}));
@@ -2235,34 +2262,54 @@ function apply(ctx, config = {}) {
 						kind: "prefix",
 						path: server.endpointPath,
 						handler: async (req, res) => {
+							const ch = cors(req);
+							if (req.method === "OPTIONS") {
+								res.writeHead(204, ch);
+								res.end();
+								return;
+							}
 							const isStream = (req.headers.accept ?? "").includes("text/event-stream");
 							if (req.method === "GET" && (req.url ?? "").startsWith(server.endpointPath + "/card")) {
-								res.writeHead(200, { "content-type": "application/json" });
+								res.writeHead(200, {
+									"content-type": "application/json",
+									...ch
+								});
 								res.end(JSON.stringify(server.card));
 								return;
 							}
 							if (req.method !== "POST") {
-								res.writeHead(405, { "content-type": "text/plain" });
+								res.writeHead(405, {
+									"content-type": "text/plain",
+									...ch
+								});
 								res.end("Method Not Allowed");
 								return;
 							}
 							const body = await readBody(req);
 							if (isStream) {
-								const stream = await server.handleStream(toServerReq(req), body, (frame) => res.write(frame));
-								if (stream.status !== 200) {
-									res.writeHead(stream.status, {
+								if (!server.checkAuth(toServerReq(req))) {
+									res.writeHead(401, {
 										"content-type": "text/plain",
-										...stream.headers ?? {}
+										...ch,
+										"WWW-Authenticate": "Bearer"
 									});
 									res.end("Unauthorized");
 									return;
 								}
+								res.writeHead(200, {
+									"content-type": "text/event-stream",
+									"cache-control": "no-cache",
+									connection: "keep-alive",
+									...ch
+								});
+								await server.handleStream(toServerReq(req), body, (frame) => res.write(frame));
 								res.end();
 								return;
 							}
 							const out = await server.handle(toServerReq(req), body);
 							res.writeHead(out.status, {
 								"content-type": out.contentType,
+								...ch,
 								...out.headers ?? {}
 							});
 							res.end(out.body);
@@ -2385,11 +2432,34 @@ function apply(ctx, config = {}) {
 							message: token ? "已设置入站鉴权 token" : "已清除入站鉴权 token"
 						};
 					},
+					setServerCors: async (origins) => {
+						corsAllowlist = normalizeOrigins(origins);
+						if (corsAllowlist.includes("*")) logger?.warn?.("[a2a] corsOrigins set to include \"*\": the inbound A2A endpoint now accepts cross-origin browser calls from ANY site.");
+						const next = loadConfig();
+						next.server = {
+							...next.server ?? {},
+							corsOrigins: corsAllowlist.length > 0 ? corsAllowlist : void 0
+						};
+						const res = saveConfig(next);
+						if (!res.ok) {
+							logger?.error?.(`[a2a] failed to persist corsOrigins to ${res.path}: ${res.message}`);
+							return {
+								ok: false,
+								message: `applied in-memory but failed to save: ${res.message}`
+							};
+						}
+						logger?.info?.(`[a2a] inbound CORS allowlist updated (${corsAllowlist.length} origin(s), saved to ${res.path})`);
+						return {
+							ok: true,
+							message: corsAllowlist.length > 0 ? `已更新跨域白名单 (${corsAllowlist.length} 个来源)` : "已清空跨域白名单(默认禁止跨源)"
+						};
+					},
 					serverStatus: () => ({
 						ok: true,
 						message: JSON.stringify({
 							enabled,
-							...serverCard()
+							...serverCard(),
+							corsOrigins: corsAllowlist
 						})
 					})
 				});
@@ -2538,6 +2608,42 @@ async function readBody(req) {
 		req.once("error", reject);
 	});
 }
+/** Normalize a CORS origin allowlist: trim, drop empties, de-duplicate. */
+function normalizeOrigins(origins) {
+	if (!origins) return [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const o of origins) {
+		const t = typeof o === "string" ? o.trim() : "";
+		if (t) seen.add(t);
+	}
+	return [...seen];
+}
+/**
+* Resolve CORS headers for one inbound A2A request against the configured
+* origin allowlist. Returns `{}` (no CORS) when the request has no `Origin`,
+* the allowlist is empty, or the origin isn't allowed — so a disallowed
+* cross-origin browser call is blocked by the browser exactly as before this
+* feature existed. An allowed origin is echoed back verbatim (never `*` unless
+* the operator explicitly configured `['*']`), with `Vary: Origin` so shared
+* caches don't leak one origin's response to another. Credentials are never
+* allowed: inbound auth is a Bearer header, not a cookie.
+*/
+function corsHeadersFor(reqOrigin, allowed) {
+	if (allowed.length === 0) return {};
+	const wildcard = allowed.includes("*");
+	let allowOrigin;
+	if (wildcard) allowOrigin = reqOrigin ?? "*";
+	else if (reqOrigin && allowed.includes(reqOrigin)) allowOrigin = reqOrigin;
+	if (!allowOrigin) return {};
+	const headers = {
+		"Access-Control-Allow-Origin": allowOrigin,
+		"Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+		"Access-Control-Allow-Headers": "Content-Type, Authorization",
+		"Access-Control-Max-Age": "86400"
+	};
+	if (allowOrigin !== "*") headers["Vary"] = "Origin";
+	return headers;
+}
 /** Loopback/same-origin trust fence for the dashboard API (no remote write). */
 function trustedLoopback(req) {
 	const host = req.headers.host;

package/lib/types/a2a-config.d.ts

@@ -42,6 +42,8 @@ export interface PersistedServerConfig {
     endpointPath?: string;
     /** Optional shared bearer token protecting the inbound /a2a endpoint. */
     authToken?: string;
+    /** Browser origins allowed to call the inbound A2A routes (CORS allowlist); empty/absent = no CORS. `["*"]` opts into wildcard. */
+    corsOrigins?: string[];
     skills?: Array<{
         id: string;
         name: string;

package/lib/types/a2a-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"a2a-config.d.ts","sourceRoot":"","sources":["../../src/a2a-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAaxD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAW5D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAoD1C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,kBAAkB,CAW/C;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAatG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,GAAG,eAAe,CAmBpG"}
+{"version":3,"file":"a2a-config.d.ts","sourceRoot":"","sources":["../../src/a2a-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mIAAmI;IACnI,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAaxD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAW5D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAoD1C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,kBAAkB,CAW/C;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAatG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,GAAG,eAAe,CAoBpG"}

package/lib/types/client/dashboard.css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.css.d.ts","sourceRoot":"","sources":["../../../src/client/dashboard.css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AAmQjE;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,IAAI,CAiBlD"}
+{"version":3,"file":"dashboard.css.d.ts","sourceRoot":"","sources":["../../../src/client/dashboard.css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AAwQjE;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,IAAI,CAiBlD"}

package/lib/types/client/index.d.ts

@@ -13,7 +13,7 @@
  * on the product's `--dsw-alias-*` design tokens, so light/dark themes and
  * narrow-window layouts follow the DSH shell. No inline styles.
  */
-import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
 import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import { type ReactElement } from 'react';
 /** Services this plugin needs from the client runtime. */

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,OAAO,CAAC;AAG9E,0DAA0D;AAC1D,eAAO,MAAM,MAAM,UAAY,CAAC;AAEhC,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAyB9C;AA8DD,KAAK,YAAY,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AA+FrD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CA8UnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,OAAO,CAAC;AAG9E,0DAA0D;AAC1D,eAAO,MAAM,MAAM,UAAY,CAAC;AAEhC,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA6B9C;AA8DD,KAAK,YAAY,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAiGrD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAgVnE"}

package/lib/types/dashboard.d.ts

@@ -101,6 +101,8 @@ export interface DashboardControlHooks {
     setServerEnabled?: (enabled: boolean) => Promise<ControlResult>;
     /** Set or clear the inbound server's shared bearer token at runtime (persisted). */
     setServerAuthToken?: (token?: string) => Promise<ControlResult>;
+    /** Replace the inbound CORS origin allowlist at runtime (persisted); empty = no CORS. */
+    setServerCors?: (origins: string[]) => Promise<ControlResult>;
     /** Read current inbound server status (for the serve panel). */
     serverStatus?: () => ControlResult;
     /** Runtime-remove an outbound agent by its connection id. */