@zhin.js/a2a 3.0.13 → 3.0.15

package/lib/workroom-callback-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-callback-runtime.d.ts","sourceRoot":"","sources":["../src/workroom-callback-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EACV,gCAAgC,EAChC,yBAAyB,EACzB,4BAA4B,EAC5B,mCAAmC,EACnC,6BAA6B,EAC9B,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC;IAC1E,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,MAAM,CACJ,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,mCAAmC,CAAC,CAAC;KACjD,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC9B,cAAc,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;KAC7E,CAAC,CAAC;IACH,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;KACzF,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,mCAAmC,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrE;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,GAAG,SAAS,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC/E,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,mCAAmC,CAAC,CAyF9C"}

package/lib/workroom-callback-runtime.js

@@ -0,0 +1,216 @@
+import { WorkroomA2aAuthenticationError } from './workroom-auth-registry.js';
+/**
+ * Installs the authority-isolated Workroom callback ingress. This route never
+ * invokes the ordinary A2A Agent executor; accepted observations can reach
+ * Workroom state only through the injected Callback Application.
+ */
+export async function installRuntimeWorkroomCallbacks(options) {
+    const path = normalizeExactPath(options.path ?? '/workroom-a2a/callback');
+    const ordinaryA2aBasePath = normalizeBasePath(options.ordinaryA2aBasePath ?? '/a2a');
+    if (ordinaryA2aBasePath === '/'
+        || path === ordinaryA2aBasePath
+        || path.startsWith(`${ordinaryA2aBasePath}/`)) {
+        throw new Error('Workroom callback path must be outside ordinary A2A inbound');
+    }
+    const maxBodyBytes = positiveInteger(options.maxBodyBytes, 'maxBodyBytes');
+    const controller = new AbortController();
+    const signal = options.signal
+        ? AbortSignal.any([options.signal, controller.signal])
+        : controller.signal;
+    let recovery = options.deferRecovery === true
+        ? undefined
+        : await recoverRegisteredLinks(options.dependencies, signal, options.onRecoveryError);
+    signal.throwIfAborted();
+    const unregister = options.http.route('POST', path, async (request, response) => {
+        const credential = bearerCredential(request);
+        if (!credential) {
+            writeJson(response, 401, { error: 'Unauthorized' });
+            return;
+        }
+        // Authenticate before consuming attacker-controlled request bytes. The
+        // Gateway authenticates again while deriving the immutable authority.
+        try {
+            options.dependencies.authRegistry.authenticate(credential);
+        }
+        catch {
+            writeJson(response, 401, { error: 'Unauthorized' });
+            return;
+        }
+        const requestController = new AbortController();
+        const abortRequest = () => requestController.abort(new Error('Callback request aborted'));
+        request.once('aborted', abortRequest);
+        const requestSignal = AbortSignal.any([signal, requestController.signal]);
+        try {
+            const body = await readRawBody(request, maxBodyBytes);
+            const result = await options.dependencies.gateway.handle({ credential, body }, requestSignal);
+            writeJson(response, 202, {
+                accepted: true,
+                duplicate: result.duplicate,
+                applicationStatus: result.application.status,
+            });
+        }
+        catch (error) {
+            if (error instanceof WorkroomA2aAuthenticationError) {
+                writeJson(response, 401, { error: 'Unauthorized' });
+            }
+            else if (error instanceof RuntimeWorkroomCallbackBodyError) {
+                writeJson(response, error.statusCode, { error: error.message }, error.closeConnection ? () => request.destroy() : undefined);
+            }
+            else if (!response.headersSent && signal.aborted && !requestController.signal.aborted) {
+                writeJson(response, 503, { error: 'Callback Host unavailable' });
+            }
+            else if (!response.headersSent && !requestSignal.aborted) {
+                writeJson(response, 400, { error: 'Callback rejected' });
+            }
+        }
+        finally {
+            request.off('aborted', abortRequest);
+        }
+    }, {
+        summary: 'Authenticated Workroom remote execution callback',
+        tags: ['workroom', 'a2a-callback'],
+    });
+    let disposed = false;
+    return Object.freeze({
+        get recovery() { return recovery; },
+        async recover(recoverySignal) {
+            const activeSignal = recoverySignal
+                ? AbortSignal.any([signal, recoverySignal])
+                : signal;
+            recovery = await recoverRegisteredLinks(options.dependencies, activeSignal, options.onRecoveryError);
+            return recovery;
+        },
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            controller.abort(new Error('Workroom callback Host retired'));
+            unregister();
+        },
+    });
+}
+async function recoverRegisteredLinks(dependencies, signal, onRecoveryError) {
+    signal.throwIfAborted();
+    const records = [...await dependencies.linkRegistry.listRegistered()]
+        .sort((left, right) => left.id.localeCompare(right.id));
+    let recovered = 0;
+    let failed = 0;
+    for (const record of records) {
+        signal.throwIfAborted();
+        try {
+            await dependencies.application.runOnce(record.id, signal);
+            recovered += 1;
+        }
+        catch (error) {
+            failed += 1;
+            onRecoveryError?.(record.id, error);
+        }
+        signal.throwIfAborted();
+    }
+    signal.throwIfAborted();
+    return Object.freeze({ registered: records.length, recovered, failed });
+}
+class RuntimeWorkroomCallbackBodyError extends Error {
+    statusCode;
+    closeConnection;
+    constructor(message, statusCode, closeConnection = false) {
+        super(message);
+        this.statusCode = statusCode;
+        this.closeConnection = closeConnection;
+        this.name = 'RuntimeWorkroomCallbackBodyError';
+    }
+}
+async function readRawBody(request, limit) {
+    const declaredLength = declaredContentLength(request);
+    if (declaredLength !== undefined && declaredLength > limit) {
+        request.pause();
+        throw new RuntimeWorkroomCallbackBodyError(`Callback body exceeds ${limit} bytes`, 413, true);
+    }
+    const chunks = await new Promise((resolve, reject) => {
+        const buffered = [];
+        let size = 0;
+        const cleanup = () => {
+            request.off('data', onData);
+            request.off('end', onEnd);
+            request.off('error', onError);
+            request.off('aborted', onAborted);
+        };
+        const onData = (chunk) => {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            size += buffer.length;
+            if (size > limit) {
+                request.pause();
+                cleanup();
+                reject(new RuntimeWorkroomCallbackBodyError(`Callback body exceeds ${limit} bytes`, 413, true));
+                return;
+            }
+            buffered.push(buffer);
+        };
+        const onEnd = () => {
+            cleanup();
+            resolve(buffered);
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error);
+        };
+        const onAborted = () => {
+            cleanup();
+            reject(new Error('Callback request aborted'));
+        };
+        request.on('data', onData);
+        request.once('end', onEnd);
+        request.once('error', onError);
+        request.once('aborted', onAborted);
+    });
+    if (chunks.length === 0) {
+        throw new RuntimeWorkroomCallbackBodyError('Callback body is required', 400);
+    }
+    return Buffer.concat(chunks);
+}
+function declaredContentLength(request) {
+    const value = request.headers['content-length'];
+    if (typeof value !== 'string' || !/^\d+$/u.test(value))
+        return undefined;
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) ? parsed : Number.POSITIVE_INFINITY;
+}
+function bearerCredential(request) {
+    const value = request.headers.authorization;
+    if (typeof value !== 'string')
+        return undefined;
+    const match = /^Bearer ([^\s]+)$/u.exec(value);
+    return match?.[1];
+}
+function normalizeExactPath(value) {
+    if (typeof value !== 'string' || !value.trim()) {
+        throw new Error('Workroom callback path is required');
+    }
+    const leading = value.startsWith('/') ? value : `/${value}`;
+    let end = leading.length;
+    while (end > 1 && leading.charCodeAt(end - 1) === 47)
+        end -= 1;
+    const normalized = leading.slice(0, end);
+    if (normalized.includes('*'))
+        throw new Error('Workroom callback path must be exact');
+    return normalized;
+}
+function normalizeBasePath(value) {
+    return normalizeExactPath(value);
+}
+function positiveInteger(value, field) {
+    if (!Number.isSafeInteger(value) || Number(value) < 1) {
+        throw new Error(`Workroom callback ${field} must be a positive safe integer`);
+    }
+    return Number(value);
+}
+function writeJson(response, status, value, afterSend) {
+    const body = JSON.stringify(value);
+    response.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'content-length': String(Buffer.byteLength(body)),
+        ...(afterSend ? { connection: 'close' } : {}),
+    });
+    response.end(body, afterSend);
+}
+//# sourceMappingURL=workroom-callback-runtime.js.map

package/lib/workroom-callback-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-callback-runtime.js","sourceRoot":"","sources":["../src/workroom-callback-runtime.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AA2C7E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAA+C;IAE/C,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,wBAAwB,CAAC,CAAC;IAC1E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC;IACrF,IAAI,mBAAmB,KAAK,GAAG;WAC1B,IAAI,KAAK,mBAAmB;WAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,mBAAmB,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACtB,IAAI,QAAQ,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI;QAC3C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxF,MAAM,CAAC,cAAc,EAAE,CAAC;IAExB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC9E,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC;YACH,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;YAC9F,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;aAC7C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,KAAK,YAAY,gCAAgC,EAAE,CAAC;gBAC7D,SAAS,CACP,QAAQ,EACR,KAAK,CAAC,UAAU,EAChB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EACxB,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxF,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3D,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,EAAE;QACD,OAAO,EAAE,kDAAkD;QAC3D,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,QAAQ,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,OAAO,CAAC,cAA4B;YACxC,MAAM,YAAY,GAAG,cAAc;gBACjC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gBAC3C,CAAC,CAAC,MAAM,CAAC;YACX,QAAQ,GAAG,MAAM,sBAAsB,CACrC,OAAO,CAAC,YAAY,EACpB,YAAY,EACZ,OAAO,CAAC,eAAe,CACxB,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC9D,UAAU,EAAE,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,YAAiD,EACjD,MAAmB,EACnB,eAAuE;IAEvE,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;SAClE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,CAAC;YACZ,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,gCAAiC,SAAQ,KAAK;IAGvC;IACA;IAHX,YACE,OAAe,EACN,UAAqB,EACrB,kBAAkB,KAAK;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,eAAU,GAAV,UAAU,CAAW;QACrB,oBAAe,GAAf,eAAe,CAAQ;QAGhC,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE,KAAa;IAChE,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,GAAG,KAAK,EAAE,CAAC;QAC3D,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,gCAAgC,CACxC,yBAAyB,KAAK,QAAQ,EACtC,GAAG,EACH,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;YACtB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,gCAAgC,CACzC,yBAAyB,KAAK,QAAQ,EACtC,GAAG,EACH,IAAI,CACL,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gCAAgC,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAwB;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IAC5D,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,kCAAkC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAChB,QAAwB,EACxB,MAAc,EACd,KAAc,EACd,SAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC"}

package/lib/workroom-remote-transport.d.ts

@@ -0,0 +1,58 @@
+import type { RemoteCallbackPollPort, RemoteCallbackPollRequest, RemoteCallbackPollSnapshot, WORKROOM_A2A_EXTENSION_URI, WorkroomRemoteDispatchOutboxItem } from '@zhin.js/agent';
+import type { WorkroomRemoteEndpointAuthority, WorkroomRemoteEndpointAuthorityPort, WorkroomRemoteDispatchObservation, WorkroomRemoteExecutorPort } from '@zhin.js/agent/runtime';
+import type { WorkroomA2aCredentialReference, WorkroomA2aSecureCredentialProvider } from './workroom-auth-registry.js';
+import { WorkroomA2aAuthRegistry } from './workroom-auth-registry.js';
+export interface WorkroomA2aRemoteTransportBindingInput {
+    readonly endpointId: string;
+    readonly cardDigest: string;
+    readonly authBindingId: string;
+    readonly dispatchUrl: string;
+    readonly pollUrl: string;
+    readonly credential: WorkroomA2aCredentialReference;
+    readonly authority?: Readonly<{
+        readonly workroomExtension: typeof WORKROOM_A2A_EXTENSION_URI;
+        readonly idempotentDispatch: boolean;
+        readonly typedCompletionEnvelope: boolean;
+        readonly workspaceProviders: readonly string[];
+    }>;
+    readonly enabled: boolean;
+}
+export interface WorkroomA2aHttpRemoteTransportOptions {
+    readonly authRegistry: WorkroomA2aAuthRegistry;
+    readonly callbackUrl: string;
+    readonly bindings: readonly WorkroomA2aRemoteTransportBindingInput[];
+    readonly secureCredentialProvider?: WorkroomA2aSecureCredentialProvider;
+    /** Trusted low-level seam. Production uses DNS validation plus a pinned Node socket. */
+    readonly network?: WorkroomA2aPinnedNetworkPort;
+    readonly maxResponseBytes?: number;
+}
+export interface WorkroomA2aResolvedAddress {
+    readonly address: string;
+    readonly family: 4 | 6;
+}
+export interface WorkroomA2aPinnedRequest {
+    readonly url: URL;
+    readonly address: string;
+    readonly family: 4 | 6;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: string;
+    readonly signal: AbortSignal;
+    readonly maxResponseBytes: number;
+}
+export interface WorkroomA2aPinnedNetworkPort {
+    resolve(hostname: string): Promise<readonly WorkroomA2aResolvedAddress[]>;
+    request(input: WorkroomA2aPinnedRequest): Promise<Response>;
+}
+/**
+ * Fixed-generation HTTP implementation of the Workroom A2A extension. It
+ * transports immutable envelopes and typed poll snapshots only; Task state
+ * remains owned by the local Workroom Kernel.
+ */
+export declare class WorkroomA2aHttpRemoteTransport implements WorkroomRemoteExecutorPort, RemoteCallbackPollPort, WorkroomRemoteEndpointAuthorityPort {
+    #private;
+    constructor(options: WorkroomA2aHttpRemoteTransportOptions);
+    resolve(endpointId: string): WorkroomRemoteEndpointAuthority | undefined;
+    dispatch(item: WorkroomRemoteDispatchOutboxItem, signal: AbortSignal, governedBody?: Uint8Array): Promise<WorkroomRemoteDispatchObservation>;
+    poll(request: RemoteCallbackPollRequest, signal: AbortSignal): Promise<RemoteCallbackPollSnapshot>;
+}
+//# sourceMappingURL=workroom-remote-transport.d.ts.map

package/lib/workroom-remote-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-remote-transport.d.ts","sourceRoot":"","sources":["../src/workroom-remote-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,+BAA+B,EAC/B,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,EAC3B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EACV,8BAA8B,EAE9B,mCAAmC,EACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAOtE,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,0BAA0B,CAAC;QAC9D,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;QAC1C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;KAChD,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,sCAAsC,EAAE,CAAC;IACrE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,mCAAmC,CAAC;IACxE,wFAAwF;IACxF,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7D;AAaD;;;;GAIG;AACH,qBAAa,8BACb,YAAW,0BAA0B,EAAE,sBAAsB,EAAE,mCAAmC;;gBAOpF,OAAO,EAAE,qCAAqC;IA+D1D,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,+BAA+B,GAAG,SAAS;IAKlE,QAAQ,CACZ,IAAI,EAAE,gCAAgC,EACtC,MAAM,EAAE,WAAW,EACnB,YAAY,CAAC,EAAE,UAAU,GACxB,OAAO,CAAC,iCAAiC,CAAC;IA4CvC,IAAI,CACR,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,0BAA0B,CAAC;CA+FvC"}