a2acalling 0.6.57 → 0.6.59

package/src/dashboard/public/style.css

@@ -4,6 +4,10 @@
   --ink: #13233a;
   --line: #d7dee6;
   --accent: #1466c1;
+
+  /* Map app vars to Shoelace design tokens */
+  --sl-color-primary-600: var(--accent);
+  --sl-font-sans: "IBM Plex Sans", "Segoe UI", sans-serif;
 }
 
 * {
@@ -12,7 +16,7 @@
 
 body {
   margin: 0;
-  font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
+  font-family: var(--sl-font-sans);
   color: var(--ink);
   background: linear-gradient(180deg, #eef3f8 0%, var(--bg) 100%);
 }
@@ -34,44 +38,10 @@ header p {
   font-size: 0.9rem;
 }
 
-nav {
-  display: flex;
-  gap: 0.5rem;
-  padding: 0.75rem 1rem;
-  border-bottom: 1px solid var(--line);
-  background: #f8fafc;
-}
-
-.tab {
-  border: 1px solid var(--line);
-  background: #fff;
-  color: var(--ink);
-  padding: 0.45rem 0.7rem;
-  border-radius: 8px;
-  cursor: pointer;
-}
-
-.tab.is-active {
-  border-color: var(--accent);
-  color: var(--accent);
-}
-
 main {
   padding: 1rem;
 }
 
-.panel {
-  display: none;
-  background: var(--panel);
-  border: 1px solid var(--line);
-  border-radius: 10px;
-  padding: 1rem;
-}
-
-.panel.is-active {
-  display: block;
-}
-
 h2,
 h3 {
   margin-top: 0;
@@ -92,66 +62,38 @@ h3 {
   margin-bottom: 0.9rem;
 }
 
-.card {
-  border: 1px solid var(--line);
-  border-radius: 10px;
-  padding: 0.75rem 0.8rem;
-  background: #fbfdff;
+/* Shoelace sl-card spacing */
+sl-card {
   margin-bottom: 0.9rem;
+  --padding: 0.75rem 0.8rem;
 }
 
-label {
-  display: block;
-  margin-bottom: 0.6rem;
-  font-size: 0.9rem;
-}
-
-input,
-textarea,
-select,
-button {
-  font: inherit;
-}
-
-input,
-textarea,
-select {
-  width: 100%;
-  border: 1px solid var(--line);
-  border-radius: 8px;
-  padding: 0.45rem 0.55rem;
-  background: #fff;
-}
-
-textarea {
-  resize: vertical;
-}
-
-button {
-  border: 1px solid var(--line);
-  border-radius: 8px;
-  background: #fff;
-  padding: 0.42rem 0.65rem;
-  cursor: pointer;
+sl-card::part(base) {
+  background: #fbfdff;
+  border-color: var(--line);
 }
 
-button:hover {
-  border-color: var(--accent);
-  color: var(--accent);
+/* Shoelace sl-details spacing */
+sl-details {
+  margin-bottom: 0.9rem;
 }
 
-.btn-link {
-  border: none;
-  background: none;
-  padding: 0;
-  color: var(--accent);
-  cursor: pointer;
+/* Shoelace sl-input, sl-textarea, sl-select spacing */
+sl-input,
+sl-textarea,
+sl-select,
+sl-checkbox {
+  margin-bottom: 0.6rem;
 }
 
-.btn-link:hover {
-  text-decoration: underline;
+/* Labels for inline wrapping around sl-select */
+label {
+  display: block;
+  margin-bottom: 0.6rem;
+  font-size: 0.9rem;
 }
 
+/* Tables */
 table {
   width: 100%;
   border-collapse: collapse;
@@ -175,11 +117,34 @@ tr[data-selected="1"] td {
   background: #f0f7ff;
 }
 
+/* Summary & transcript */
 .summary {
   max-width: 500px;
   white-space: pre-wrap;
 }
 
+.summary-pending {
+  color: #6b7280;
+  margin: 0.25em 0 0.75em;
+}
+
+.transcript-details {
+  margin-top: 1em;
+}
+
+.transcript {
+  max-width: 600px;
+  white-space: pre-wrap;
+  background: #f9fafb;
+  border: 1px solid #e5e7eb;
+  border-radius: 4px;
+  padding: 0.75em;
+  margin-top: 0.5em;
+  font-size: 0.85em;
+  max-height: 400px;
+  overflow-y: auto;
+}
+
 .mono {
   font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
 }
@@ -202,35 +167,261 @@ tr[data-selected="1"] td {
   display: none;
 }
 
-.status-pill {
-  display: inline-block;
-  padding: 0.15rem 0.45rem;
-  border-radius: 999px;
+/* Pin button for last-called contacts (sl-icon-button) */
+.pin-btn {
+  font-size: 1rem;
+  color: #b0bec5;
+}
+
+.pin-btn:hover {
+  color: var(--accent);
+}
+
+.pin-btn.pinned {
+  color: var(--accent);
+}
+
+/* Shoelace tab group customization */
+sl-tab-group {
+  --indicator-color: var(--accent);
+}
+
+sl-tab-group::part(base) {
+  background: var(--panel);
   border: 1px solid var(--line);
-  font-size: 0.78rem;
-  font-weight: 600;
+  border-radius: 10px;
 }
 
-.status-pill.ok {
-  background: #ecfdf3;
-  border-color: #9bd8b8;
-  color: #125934;
+sl-tab-group::part(nav) {
+  border-bottom: 1px solid var(--line);
+  background: #f8fafc;
 }
 
-.status-pill.warn {
-  background: #fff7e8;
-  border-color: #f1d08e;
-  color: #8a5a00;
+sl-tab-panel::part(base) {
+  padding: 1rem;
 }
 
-.status-pill.err {
-  background: #fff0f1;
-  border-color: #efb1b6;
-  color: #8c1d26;
+/* ── A2A-41: Topic/Goal list rows ──────────────────────────── */
+.topic-row {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.5rem;
+  padding: 0.5rem 0.6rem;
+  border: 1px solid var(--line);
+  border-radius: 6px;
+  margin-bottom: 0.4rem;
+  background: var(--panel);
+  cursor: grab;
+  transition: box-shadow 0.15s ease, border-color 0.15s ease;
+}
+
+.topic-row:hover {
+  border-color: var(--accent);
+  box-shadow: 0 1px 4px rgba(20, 102, 193, 0.1);
+}
+
+.topic-row.dragging {
+  opacity: 0.5;
+  border-style: dashed;
+}
+
+.topic-row.inherited {
+  opacity: 0.55;
+  background: #f8fafc;
+  cursor: default;
+  border-style: dashed;
+  border-color: #c5cfd9;
+}
+
+.topic-row.inherited .drag-handle,
+.topic-row.inherited .topic-delete-btn {
+  display: none;
+}
+
+.drag-handle {
+  color: #9ca8b5;
+  cursor: grab;
+  user-select: none;
+  font-size: 1.1rem;
+  line-height: 1;
+  padding-top: 2px;
+}
+
+.topic-content {
+  flex: 1;
+  min-width: 0;
+}
+
+.topic-header {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+}
+
+.topic-label {
+  flex: 1;
+  font-size: 0.9rem;
+}
+
+.topic-description {
+  margin-top: 0.35rem;
+  padding-left: 0.1rem;
+}
+
+.topic-desc-text {
+  font-size: 0.82rem;
+  color: #4b5d73;
+  margin: 0 0 0.3rem;
+  line-height: 1.4;
+}
+
+.inherited-badge {
+  font-size: 0.72rem;
+  color: #7a8da0;
+  font-style: italic;
+  margin-left: auto;
+}
+
+.add-item-btn {
+  width: 100%;
+  margin-top: 0.3rem;
+  border: 1px dashed var(--line);
+  border-radius: 6px;
+  padding: 0.4rem;
+  background: transparent;
+  color: #7a8da0;
+  cursor: pointer;
+  font-size: 0.85rem;
+  transition: border-color 0.15s, color 0.15s;
+}
+
+.add-item-btn:hover {
+  border-color: var(--accent);
+  color: var(--accent);
+}
+
+/* ── A2A-41: Tools checklist ───────────────────────────────── */
+.tools-checklist {
+  display: flex;
+  flex-direction: column;
+  gap: 0.35rem;
+}
+
+.tools-checklist sl-checkbox {
+  margin-bottom: 0;
+}
+
+.tools-checklist sl-checkbox::part(label) {
+  font-size: 0.88rem;
+}
+
+.tool-desc {
+  color: #4b5d73;
+  font-weight: normal;
+}
+
+/* ── A2A-41: Three-column tier layout ──────────────────────── */
+.tier-columns {
+  display: grid;
+  grid-template-columns: 1fr 1fr 1fr;
+  gap: 0.8rem;
+  margin-bottom: 1.2rem;
+}
+
+.tier-column {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  padding: 0.6rem;
+  background: #fbfdff;
+  min-height: 120px;
+}
+
+.tier-column h4 {
+  margin: 0 0 0.5rem;
+  font-size: 0.9rem;
+  color: var(--ink);
+  padding-bottom: 0.4rem;
+  border-bottom: 1px solid var(--line);
+}
+
+.tier-drop-zone {
+  min-height: 60px;
+  transition: background 0.15s ease;
+  border-radius: 4px;
+  padding: 0.2rem;
+}
+
+.tier-drop-zone.drag-over {
+  background: rgba(20, 102, 193, 0.06);
+  outline: 2px dashed var(--accent);
+  outline-offset: -2px;
+}
+
+/* ── A2A-41: Validation warnings ───────────────────────────── */
+.tier-warnings {
+  margin-bottom: 0.8rem;
+}
+
+.tier-warning {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.45rem 0.7rem;
+  border-radius: 6px;
+  font-size: 0.82rem;
+  margin-bottom: 0.3rem;
+}
+
+.tier-warning.warn {
+  background: #fef3c7;
+  border: 1px solid #f59e0b;
+  color: #92400e;
+}
+
+.tier-warning.danger {
+  background: #fee2e2;
+  border: 1px solid #ef4444;
+  color: #991b1b;
+}
+
+.tier-warning.info {
+  background: #dbeafe;
+  border: 1px solid #3b82f6;
+  color: #1e40af;
+}
+
+/* ── A2A-41: Preview dialog ────────────────────────────────── */
+#preview-content h4 {
+  font-size: 0.88rem;
+  margin: 0.8rem 0 0.3rem;
+  color: var(--ink);
+}
+
+#preview-content h4:first-child {
+  margin-top: 0;
+}
+
+#preview-content ul {
+  margin: 0;
+  padding-left: 1.2rem;
+}
+
+#preview-content li {
+  font-size: 0.85rem;
+  margin-bottom: 0.25rem;
+  line-height: 1.4;
+}
+
+#preview-content li strong {
+  color: var(--ink);
 }
 
 @media (max-width: 720px) {
-  nav {
+  sl-tab-group::part(nav) {
     overflow-x: auto;
   }
+  /* A2A-41: collapse three-column layout to single column on narrow screens */
+  .tier-columns {
+    grid-template-columns: 1fr;
+  }
 }

package/src/lib/config.js

@@ -106,17 +106,8 @@ function validateTierPatch(tierName, tierConfig) {
     out.description = sanitizeString(tierConfig.description, 300);
   }
 
-  if (tierConfig.disclosure !== undefined) {
-    if (typeof tierConfig.disclosure !== 'string') {
-      throw configValidationError(
-        'A2A_CONFIG_INVALID_TIER_DISCLOSURE',
-        `Invalid tier disclosure for "${tierName}": expected string`,
-        null,
-        { tier: tierName, received_type: typeof tierConfig.disclosure }
-      );
-    }
-    out.disclosure = sanitizeString(tierConfig.disclosure, 40) || 'minimal';
-  }
+  // A2A-41: disclosure field intentionally removed. If present in input,
+  // it is silently ignored for backward compatibility with older clients.
 
   if (tierConfig.capabilities !== undefined) {
     out.capabilities = validateStringArray(tierConfig.capabilities, `${tierName}.capabilities`, {
@@ -183,6 +174,9 @@ const DEFAULT_CONFIG = {
   },
   
   // Permission tiers
+  // A2A-41: disclosure field removed from tiers. It was intended to control
+  // HOW info is shared (freely/minimally/none) but was never consumed by
+  // prompt templates. The disclosure SYSTEM (disclosure.js, manifest) remains.
   tiers: {
     public: {
       name: 'Public',
@@ -191,7 +185,6 @@ const DEFAULT_CONFIG = {
       allowed_tools: ['Read', 'Grep', 'Glob'],
       topics: ['chat'],
       goals: [],
-      disclosure: 'minimal',
       examples: ['calendar availability', 'public social posts', 'general questions']
     },
     friends: {
@@ -201,7 +194,6 @@ const DEFAULT_CONFIG = {
       allowed_tools: ['Bash(readonly)', 'Read', 'Grep', 'Glob', 'WebSearch', 'WebFetch'],
       topics: ['chat', 'search', 'openclaw', 'a2a'],
       goals: [],
-      disclosure: 'public',
       examples: ['email summaries', 'schedule meetings', 'project discussions']
     },
     family: {
@@ -211,7 +203,6 @@ const DEFAULT_CONFIG = {
       allowed_tools: ['Bash', 'Read', 'Grep', 'Glob', 'WebSearch', 'WebFetch'],
       topics: ['chat', 'search', 'openclaw', 'a2a', 'tools', 'memory'],
       goals: [],
-      disclosure: 'public',
       examples: ['deep collaboration', 'private project context', 'personal notes']
     },
     custom: {
@@ -221,7 +212,6 @@ const DEFAULT_CONFIG = {
       allowed_tools: ['Read', 'Grep', 'Glob'],
       topics: [],
       goals: [],
-      disclosure: 'minimal',
       examples: []
     }
   },

package/src/lib/tokens.js

@@ -189,12 +189,14 @@ class TokenStore {
    * - Timeout: 5-300 seconds (enforced server-side)
    */
   create(options = {}) {
+    // A2A-41: disclosure field removed from tokens. Was never used by
+    // prompt generation. Existing tokens with disclosure field are harmless
+    // — the field is simply not read.
     const {
       name = 'unnamed',
       owner = null,
       expires = '1d',
       permissions = 'public',
-      disclosure = 'minimal',
       notify = 'all',
       maxCalls = 100,  // Default limit, not unlimited
       capabilities = null,  // Array of capability strings, snapshotted at creation
@@ -273,7 +275,6 @@ class TokenStore {
       allowed_tools: allowedTools || defaultTools[tier] || TokenStore.DEFAULT_ALLOWED_TOOLS.public,
       timeout_ms: parsePositiveTimeoutMs(timeoutMs),
       tier_settings: tierSettings || {},  // Snapshot of settings at creation
-      disclosure,
       notify,
       max_calls: maxCalls,
       calls_made: 0,
@@ -359,7 +360,6 @@ class TokenStore {
       allowed_tools: record.allowed_tools || TokenStore.DEFAULT_ALLOWED_TOOLS[tier] || TokenStore.DEFAULT_ALLOWED_TOOLS.public,
       timeout_ms: timeoutMs,
       tier_settings: record.tier_settings || {},
-      disclosure: record.disclosure,
       notify: record.notify,
       calls_remaining: record.max_calls ? record.max_calls - record.calls_made : null
     };

package/src/routes/a2a.js

@@ -350,7 +350,6 @@ function createRoutes(options = {}) {
       allowed_goals: validation.allowed_goals,
       allowed_tools: validation.allowed_tools,
       timeout_ms: validation.timeout_ms,
-      disclosure: validation.disclosure,
       caller: sanitizedCaller,
       conversation_id: conversation_id || `conv_${Date.now()}_${crypto.randomBytes(6).toString('hex')}`,
       trace_id: traceId,

package/src/routes/dashboard.js

@@ -1276,7 +1276,6 @@ function createDashboardApiRouter(options = {}) {
         allowed_tools: sanitizeStringArray(configTier.allowed_tools || [], 30, 80),
         topics: sanitizeStringArray(configTier.topics || []),
         goals: sanitizeStringArray(configTier.goals || []),
-        disclosure: configTier.disclosure || 'minimal',
         examples: sanitizeStringArray(configTier.examples || [], 20, 120),
         manifest: {
           topics: manifestTier.topics || [],
@@ -1310,7 +1309,6 @@ function createDashboardApiRouter(options = {}) {
     const update = {};
     if (body.name !== undefined) update.name = sanitizeString(body.name, 120);
     if (body.description !== undefined) update.description = sanitizeString(body.description, 300);
-    if (body.disclosure !== undefined) update.disclosure = sanitizeString(body.disclosure, 40) || 'minimal';
     if (body.capabilities !== undefined) update.capabilities = sanitizeStringArray(body.capabilities, 100, 120);
     if (body.allowed_tools !== undefined) update.allowed_tools = sanitizeStringArray(body.allowed_tools, 30, 80);
     if (body.examples !== undefined) update.examples = sanitizeStringArray(body.examples, 20, 120);
@@ -1375,7 +1373,6 @@ function createDashboardApiRouter(options = {}) {
           allowed_tools: sanitizeStringArray(body.allowed_tools || [], 30, 80),
           topics: sanitizeStringArray(body.topics || []),
           goals: sanitizeStringArray(body.goals || []),
-          disclosure: sanitizeString(body.disclosure || 'minimal', 40),
           examples: sanitizeStringArray(body.examples || [], 20, 120)
         });
       } catch (err) {

package/.claude/commands/a2a-call.md

@@ -1,26 +0,0 @@
----
-description: Call another A2A agent — starts a multi-turn conversation
-allowed-tools: [Bash, Read]
-argument-hint: <contact-or-url> <message>
----
-
-Call an A2A agent. This starts a multi-turn agent-to-agent conversation.
-
-## Usage
-
-```
-/a2a-call Alice "Hello! My owner wants to discuss the project."
-/a2a-call a2a://host.com/fed_abc123 "Reaching out about collaboration"
-```
-
-## Instructions
-
-Run the following command with the user's arguments:
-
-```bash
-a2a call $ARGUMENTS
-```
-
-If the call succeeds, summarize the conversation outcome for the user.
-If it fails with "not onboarded", tell the user to run `/a2a-setup` first.
-If it fails with "contact not found", suggest `/a2a-contacts` to see available contacts.

package/.claude/commands/a2a-contacts.md

@@ -1,31 +0,0 @@
----
-description: List A2A contacts — agents you can call or who can call you
-allowed-tools: [Bash]
-argument-hint: [add|show|ping|rm] [args...]
----
-
-Manage your A2A contact list — see who you can call and who has access to you.
-
-## Usage
-
-```
-/a2a-contacts                          # list all contacts
-/a2a-contacts add a2a://host/fed_xxx Alice  # add contact from invite URL
-/a2a-contacts show Alice               # show contact details
-/a2a-contacts ping Alice               # check if contact is online
-/a2a-contacts rm Alice                 # remove a contact
-```
-
-## Instructions
-
-Run the appropriate command based on user input:
-
-- No arguments: `a2a contacts`
-- `add`: `a2a contacts add $ARGUMENTS`
-- `show`: `a2a contacts show $ARGUMENTS`
-- `ping`: `a2a contacts ping $ARGUMENTS`
-- `rm`: `a2a contacts rm $ARGUMENTS`
-
-If the user just wants to see their contacts, also run `a2a list` to show active tokens (outbound invites).
-
-Format the output clearly: contact name, owner, status (online/offline), permission tier, last seen.

package/.claude/commands/a2a-invite.md

@@ -1,33 +0,0 @@
----
-description: Create an A2A invite token to share with another agent
-allowed-tools: [Bash]
-argument-hint: [name] [--tier public|friends|family] [--expires 7d]
----
-
-Create an A2A federation token and display the invite URL for sharing.
-
-## Usage
-
-```
-/a2a-invite Alice --tier friends --expires 7d
-/a2a-invite "Bob's Agent" --tier public
-/a2a-invite                              # interactive — uses defaults
-```
-
-## Instructions
-
-Parse the user's arguments and run:
-
-```bash
-a2a create $ARGUMENTS
-```
-
-If no arguments provided, run `a2a create` with no flags (interactive mode).
-
-After success, display the invite URL prominently and explain:
-1. The URL format: `a2a://<hostname>/<token>`
-2. Share this URL with the other agent's owner
-3. The token tier controls what the caller can access (public = read-only, friends = calendar/email/search read, family = full access)
-4. The token expires per the `--expires` flag (default: never)
-
-Also suggest: "Run `/a2a-contacts` to see who already has access."