agentstudio 0.1.18 → 0.1.21

package/routes/__tests__/a2a.test.js

@@ -0,0 +1,622 @@
+"use strict";
+/**
+ * Unit tests for a2a.ts - A2A Protocol Endpoints
+ * Tests for Phase 3: US1 - Agent as A2A Server
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const express_1 = __importDefault(require("express"));
+const supertest_1 = __importDefault(require("supertest"));
+// Mock dependencies
+vitest_1.vi.mock('../../middleware/a2aAuth');
+vitest_1.vi.mock('../../middleware/rateLimiting');
+vitest_1.vi.mock('../../services/a2a/agentMappingService');
+vitest_1.vi.mock('../../services/a2a/apiKeyService');
+vitest_1.vi.mock('../../services/a2a/a2aQueryService', () => ({
+    executeA2AQuery: vitest_1.vi.fn().mockResolvedValue({
+        sessionId: 'test-session-id',
+        fullResponse: 'Processed message',
+        tokensUsed: 100
+    }),
+    executeA2AQueryStreaming: vitest_1.vi.fn().mockResolvedValue({
+        sessionId: 'test-session-id'
+    })
+}));
+vitest_1.vi.mock('../../services/agentStorage', () => ({
+    AgentStorage: vitest_1.vi.fn().mockImplementation(() => ({
+        getAgent: vitest_1.vi.fn().mockReturnValue({
+            id: 'ppt-editor',
+            name: 'PPT Editor',
+            description: 'An agent that edits PPT presentations',
+            systemPrompt: 'You are a PPT editing assistant',
+            allowedTools: ['Read', 'Write'],
+            enabled: true
+        })
+    }))
+}));
+vitest_1.vi.mock('../../services/projectMetadataStorage', () => ({
+    ProjectMetadataStorage: vitest_1.vi.fn().mockImplementation(() => ({
+        getProjectMetadata: vitest_1.vi.fn().mockReturnValue({
+            name: 'Test Project'
+        })
+    }))
+}));
+vitest_1.vi.mock('../../services/a2a/agentCardService', () => ({
+    generateAgentCard: vitest_1.vi.fn().mockReturnValue({
+        name: 'PPT Editor',
+        description: 'An agent that edits PPT presentations',
+        version: '1.0.0',
+        url: 'http://localhost:3000/a2a/test-a2a-agent-id',
+        skills: [],
+        securitySchemes: [{
+                type: 'apiKey',
+                in: 'header',
+                name: 'Authorization',
+                scheme: 'bearer'
+            }],
+        context: {
+            a2aAgentId: 'test-a2a-agent-id',
+            projectId: 'test-project',
+            agentType: 'ppt-editor',
+            workingDirectory: '/test/working/dir'
+        }
+    })
+}));
+vitest_1.vi.mock('../../utils/agentCardCache', () => ({
+    agentCardCache: {
+        get: vitest_1.vi.fn().mockReturnValue(null),
+        set: vitest_1.vi.fn()
+    }
+}));
+vitest_1.vi.mock('../../utils/claudeUtils', () => ({
+    buildQueryOptions: vitest_1.vi.fn().mockResolvedValue({
+        queryOptions: {
+            cwd: '/test/working/dir',
+            model: 'sonnet',
+            includePartialMessages: false
+        }
+    })
+}));
+vitest_1.vi.mock('../../services/a2a/a2aHistoryService', () => ({
+    a2aHistoryService: {
+        appendEvent: vitest_1.vi.fn().mockResolvedValue(undefined)
+    }
+}));
+vitest_1.vi.mock('../../services/a2a/taskManager', () => ({
+    taskManager: {
+        createTask: vitest_1.vi.fn().mockResolvedValue({
+            id: 'test-task-id',
+            taskId: 'test-task-id',
+            status: 'pending',
+            checkUrl: '/a2a/test-agent/tasks/test-task-id'
+        }),
+        getTask: vitest_1.vi.fn().mockImplementation((projectId, taskId) => {
+            if (taskId === 'test-task-id') {
+                return Promise.resolve({
+                    id: 'test-task-id',
+                    taskId: 'test-task-id',
+                    status: 'pending',
+                    createdAt: new Date().toISOString(),
+                    progress: { currentStep: 'Processing', percentComplete: 50 }
+                });
+            }
+            return Promise.resolve(null);
+        }),
+        cancelTask: vitest_1.vi.fn().mockResolvedValue({
+            id: 'test-task-id',
+            taskId: 'test-task-id',
+            status: 'canceled',
+            message: 'Task canceled successfully'
+        })
+    }
+}));
+vitest_1.vi.mock('../../services/sessionManager');
+vitest_1.vi.mock('../../utils/sessionUtils');
+(0, vitest_1.describe)('A2A Protocol Endpoints', () => {
+    let app;
+    (0, vitest_1.beforeEach)(async () => {
+        vitest_1.vi.clearAllMocks();
+        // Set up Express app with A2A routes
+        app = (0, express_1.default)();
+        app.use(express_1.default.json());
+        // Import mocked middleware
+        const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+        const { a2aRateLimiter, a2aStrictRateLimiter } = await Promise.resolve().then(() => __importStar(require('../../middleware/rateLimiting')));
+        // Mock middleware to add a2aContext
+        vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+            req.a2aContext = {
+                a2aAgentId: 'test-a2a-agent-id',
+                projectId: 'test-project',
+                agentType: 'ppt-editor',
+                workingDirectory: '/test/working/dir',
+                apiKeyId: 'test-key-id'
+            };
+            next();
+        });
+        // Mock rate limiters (no-op for tests)
+        vitest_1.vi.mocked(a2aRateLimiter).mockImplementation((req, res, next) => next());
+        vitest_1.vi.mocked(a2aStrictRateLimiter).mockImplementation((req, res, next) => next());
+        // Mock session management
+        const { handleSessionManagement } = await Promise.resolve().then(() => __importStar(require('../../utils/sessionUtils')));
+        vitest_1.vi.mocked(handleSessionManagement).mockResolvedValue({
+            claudeSession: {
+                sendMessage: vitest_1.vi.fn().mockImplementation((msg, callback) => {
+                    // Simulate immediate response
+                    callback({
+                        type: 'assistant',
+                        message: { content: [{ type: 'text', text: 'Processed message' }] }
+                    });
+                    callback({ type: 'result' });
+                    return Promise.resolve('req-id');
+                }),
+                getClaudeSessionId: vitest_1.vi.fn().mockReturnValue('test-session-id')
+            },
+            actualSessionId: 'test-session-id'
+        });
+        // Import and mount A2A router
+        const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+        app.use('/a2a/:a2aAgentId', a2aRouter.default);
+    });
+    (0, vitest_1.afterEach)(() => {
+        vitest_1.vi.clearAllMocks();
+    });
+    // ============================================================================
+    // T032: Test GET /.well-known/agent-card.json endpoint
+    // ============================================================================
+    (0, vitest_1.describe)('GET /.well-known/agent-card.json', () => {
+        (0, vitest_1.it)('should return agent card with 200 status', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/.well-known/agent-card.json')
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('name');
+            (0, vitest_1.expect)(response.body).toHaveProperty('description');
+            (0, vitest_1.expect)(response.body).toHaveProperty('version');
+            (0, vitest_1.expect)(response.body).toHaveProperty('url');
+            (0, vitest_1.expect)(response.body).toHaveProperty('skills');
+            (0, vitest_1.expect)(response.body).toHaveProperty('securitySchemes');
+            (0, vitest_1.expect)(response.body).toHaveProperty('context');
+        });
+        (0, vitest_1.it)('should include correct context information', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/.well-known/agent-card.json')
+                .expect(200);
+            (0, vitest_1.expect)(response.body.context).toMatchObject({
+                a2aAgentId: 'test-a2a-agent-id',
+                projectId: 'test-project',
+                agentType: 'ppt-editor',
+                workingDirectory: '/test/working/dir'
+            });
+        });
+        (0, vitest_1.it)('should include security schemes with API key authentication', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/.well-known/agent-card.json')
+                .expect(200);
+            (0, vitest_1.expect)(response.body.securitySchemes).toContainEqual({
+                type: 'apiKey',
+                in: 'header',
+                name: 'Authorization',
+                scheme: 'bearer'
+            });
+        });
+        (0, vitest_1.it)('should return 500 if authentication context is missing', async () => {
+            // Mock middleware to not add context
+            const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+            vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+                // Don't add a2aContext
+                next();
+            });
+            // Recreate app with new middleware behavior
+            app = (0, express_1.default)();
+            app.use(express_1.default.json());
+            const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+            app.use('/a2a/:a2aAgentId', a2aRouter.default);
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/.well-known/agent-card.json')
+                .expect(500);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('AUTH_CONTEXT_MISSING');
+        });
+    });
+    // ============================================================================
+    // T033: Test POST /messages endpoint
+    // ============================================================================
+    (0, vitest_1.describe)('POST /messages', () => {
+        (0, vitest_1.it)('should accept valid message and return 200 status', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Hello, agent!',
+                context: { key: 'value' }
+            })
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('response');
+            (0, vitest_1.expect)(response.body).toHaveProperty('sessionId');
+            (0, vitest_1.expect)(response.body).toHaveProperty('metadata');
+        });
+        (0, vitest_1.it)('should accept sessionId and return it with sessionMode=reuse', async () => {
+            const { handleSessionManagement } = await Promise.resolve().then(() => __importStar(require('../../utils/sessionUtils')));
+            vitest_1.vi.mocked(handleSessionManagement).mockResolvedValue({
+                claudeSession: {
+                    sendMessage: vitest_1.vi.fn().mockImplementation((msg, callback) => {
+                        callback({
+                            type: 'assistant',
+                            message: { content: [{ type: 'text', text: 'Response' }] }
+                        });
+                        callback({ type: 'result' });
+                        return Promise.resolve('req-id');
+                    }),
+                    getClaudeSessionId: vitest_1.vi.fn().mockReturnValue('existing-session-id')
+                },
+                actualSessionId: 'existing-session-id'
+            });
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Hello again',
+                sessionId: 'existing-session-id',
+                sessionMode: 'reuse' // Explicitly use reuse mode to test session management
+            })
+                .expect(200);
+            (0, vitest_1.expect)(response.body.sessionId).toBe('existing-session-id');
+            (0, vitest_1.expect)(handleSessionManagement).toHaveBeenCalledWith(vitest_1.expect.anything(), 'existing-session-id', vitest_1.expect.anything(), vitest_1.expect.anything(), undefined, undefined, 'reuse');
+        });
+        (0, vitest_1.it)('should process message with only required fields', async () => {
+            const { handleSessionManagement } = await Promise.resolve().then(() => __importStar(require('../../utils/sessionUtils')));
+            const handleSessionSpy = vitest_1.vi.mocked(handleSessionManagement);
+            // Clear previous calls to ensure clean state
+            handleSessionSpy.mockClear();
+            // Update the mock to return a working session
+            handleSessionSpy.mockResolvedValue({
+                claudeSession: {
+                    sendMessage: vitest_1.vi.fn().mockImplementation((msg, callback) => {
+                        // Simulate immediate response with correct message structure
+                        callback({
+                            type: 'assistant',
+                            message: {
+                                content: [
+                                    { type: 'text', text: 'Processed message' }
+                                ]
+                            }
+                        });
+                        callback({ type: 'result' });
+                        return Promise.resolve('req-id');
+                    }),
+                    getClaudeSessionId: vitest_1.vi.fn().mockReturnValue('test-session-id')
+                },
+                actualSessionId: 'test-session-id'
+            });
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Test message'
+            })
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('response');
+            (0, vitest_1.expect)(response.body.response).toContain('Processed message');
+            (0, vitest_1.expect)(response.body).toHaveProperty('sessionId');
+        });
+        (0, vitest_1.it)('should return 400 for missing message field', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                context: { key: 'value' }
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+            (0, vitest_1.expect)(response.body).toHaveProperty('details');
+        });
+        (0, vitest_1.it)('should return 400 for invalid message type', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 123 // Should be string
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+        });
+        (0, vitest_1.it)('should return 400 for empty message string', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: ''
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+        });
+        (0, vitest_1.it)('should return 500 if authentication context is missing', async () => {
+            // Mock middleware to not add context
+            const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+            vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+                next();
+            });
+            // Recreate app
+            app = (0, express_1.default)();
+            app.use(express_1.default.json());
+            const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+            app.use('/a2a/:a2aAgentId', a2aRouter.default);
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Test message'
+            })
+                .expect(500);
+            (0, vitest_1.expect)(response.body.code).toBe('AUTH_CONTEXT_MISSING');
+        });
+    });
+    // ============================================================================
+    // T034: Test POST /tasks endpoint
+    // ============================================================================
+    (0, vitest_1.describe)('POST /tasks', () => {
+        (0, vitest_1.it)('should accept valid task request and return 202 status', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Long running task',
+                timeout: 300000,
+                context: { key: 'value' }
+            })
+                .expect(202);
+            (0, vitest_1.expect)(response.body).toHaveProperty('taskId');
+            (0, vitest_1.expect)(response.body).toHaveProperty('status');
+            (0, vitest_1.expect)(response.body).toHaveProperty('checkUrl');
+            (0, vitest_1.expect)(response.body.status).toBe('pending');
+        });
+        (0, vitest_1.it)('should create task with only required fields', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task'
+            })
+                .expect(202);
+            (0, vitest_1.expect)(response.body).toHaveProperty('taskId');
+            (0, vitest_1.expect)(response.body.status).toBe('pending');
+        });
+        (0, vitest_1.it)('should return checkUrl with correct path', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task'
+            })
+                .expect(202);
+            (0, vitest_1.expect)(response.body.checkUrl).toContain('/a2a/test-a2a-agent-id/tasks/');
+            (0, vitest_1.expect)(response.body.checkUrl).toContain(response.body.taskId);
+        });
+        (0, vitest_1.it)('should return 400 for missing message field', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                timeout: 300000
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+        });
+        (0, vitest_1.it)('should return 400 for invalid timeout value', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task',
+                timeout: 'invalid' // Should be number
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+        });
+        (0, vitest_1.it)('should return 400 for negative timeout value', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task',
+                timeout: -1000
+            })
+                .expect(400);
+            (0, vitest_1.expect)(response.body.code).toBe('VALIDATION_ERROR');
+        });
+    });
+    // ============================================================================
+    // T035: Test authentication failure scenarios
+    // ============================================================================
+    (0, vitest_1.describe)('Authentication Failures', () => {
+        (0, vitest_1.beforeEach)(async () => {
+            // Mock auth middleware to reject requests
+            const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+            vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+                return res.status(401).json({
+                    error: 'Unauthorized',
+                    code: 'INVALID_API_KEY'
+                });
+            });
+            // Recreate app with failing auth
+            app = (0, express_1.default)();
+            app.use(express_1.default.json());
+            const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+            app.use('/a2a/:a2aAgentId', a2aRouter.default);
+        });
+        (0, vitest_1.it)('should reject agent card request without valid API key', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/.well-known/agent-card.json')
+                .expect(401);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('INVALID_API_KEY');
+        });
+        (0, vitest_1.it)('should reject message request without valid API key', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Test message'
+            })
+                .expect(401);
+            (0, vitest_1.expect)(response.body.code).toBe('INVALID_API_KEY');
+        });
+        (0, vitest_1.it)('should reject task creation without valid API key', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task'
+            })
+                .expect(401);
+            (0, vitest_1.expect)(response.body.code).toBe('INVALID_API_KEY');
+        });
+        (0, vitest_1.it)('should reject task status query without valid API key', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/tasks/test-task-id')
+                .expect(401);
+            (0, vitest_1.expect)(response.body.code).toBe('INVALID_API_KEY');
+        });
+        (0, vitest_1.it)('should reject task cancellation without valid API key', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .delete('/a2a/test-agent/tasks/test-task-id')
+                .expect(401);
+            (0, vitest_1.expect)(response.body.code).toBe('INVALID_API_KEY');
+        });
+    });
+    // ============================================================================
+    // T036: Test rate limiting behavior
+    // ============================================================================
+    (0, vitest_1.describe)('Rate Limiting', () => {
+        (0, vitest_1.it)('should enforce rate limit on task creation endpoint', async () => {
+            const { a2aStrictRateLimiter } = await Promise.resolve().then(() => __importStar(require('../../middleware/rateLimiting')));
+            // Mock rate limiter to reject request
+            vitest_1.vi.mocked(a2aStrictRateLimiter).mockImplementation((req, res, next) => {
+                return res.status(429).json({
+                    error: 'Too many requests',
+                    code: 'RATE_LIMIT_EXCEEDED',
+                    retryAfter: 3600
+                });
+            });
+            // Recreate app with rate limiting
+            app = (0, express_1.default)();
+            app.use(express_1.default.json());
+            const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+            const { a2aRateLimiter } = await Promise.resolve().then(() => __importStar(require('../../middleware/rateLimiting')));
+            vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+                req.a2aContext = {
+                    a2aAgentId: 'test-a2a-agent-id',
+                    projectId: 'test-project',
+                    agentType: 'ppt-editor',
+                    workingDirectory: '/test/working/dir',
+                    apiKeyId: 'test-key-id'
+                };
+                next();
+            });
+            vitest_1.vi.mocked(a2aRateLimiter).mockImplementation((req, res, next) => next());
+            const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+            app.use('/a2a/:a2aAgentId', a2aRouter.default);
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/tasks')
+                .send({
+                message: 'Test task'
+            })
+                .expect(429);
+            (0, vitest_1.expect)(response.body).toHaveProperty('error');
+            (0, vitest_1.expect)(response.body.code).toBe('RATE_LIMIT_EXCEEDED');
+            (0, vitest_1.expect)(response.body).toHaveProperty('retryAfter');
+        });
+        (0, vitest_1.it)('should enforce rate limit on regular endpoints', async () => {
+            const { a2aAuth } = await Promise.resolve().then(() => __importStar(require('../../middleware/a2aAuth')));
+            const { a2aRateLimiter, a2aStrictRateLimiter } = await Promise.resolve().then(() => __importStar(require('../../middleware/rateLimiting')));
+            // Mock rate limiter to reject request
+            vitest_1.vi.mocked(a2aRateLimiter).mockImplementation((req, res, next) => {
+                return res.status(429).json({
+                    error: 'Too many requests',
+                    code: 'RATE_LIMIT_EXCEEDED',
+                    retryAfter: 3600
+                });
+            });
+            // Recreate app with rate limiting
+            app = (0, express_1.default)();
+            app.use(express_1.default.json());
+            vitest_1.vi.mocked(a2aAuth).mockImplementation(async (req, res, next) => {
+                req.a2aContext = {
+                    a2aAgentId: 'test-a2a-agent-id',
+                    projectId: 'test-project',
+                    agentType: 'ppt-editor',
+                    workingDirectory: '/test/working/dir',
+                    apiKeyId: 'test-key-id'
+                };
+                next();
+            });
+            vitest_1.vi.mocked(a2aStrictRateLimiter).mockImplementation((req, res, next) => next());
+            const a2aRouter = await Promise.resolve().then(() => __importStar(require('../a2a')));
+            app.use('/a2a/:a2aAgentId', a2aRouter.default);
+            const response = await (0, supertest_1.default)(app)
+                .post('/a2a/test-agent/messages')
+                .send({
+                message: 'Test message'
+            })
+                .expect(429);
+            (0, vitest_1.expect)(response.body.code).toBe('RATE_LIMIT_EXCEEDED');
+        });
+    });
+    // ============================================================================
+    // Additional Tests for Task Management Endpoints
+    // ============================================================================
+    (0, vitest_1.describe)('GET /tasks/:taskId', () => {
+        (0, vitest_1.it)('should return task status with 200', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/tasks/test-task-id')
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('taskId');
+            (0, vitest_1.expect)(response.body).toHaveProperty('status');
+            (0, vitest_1.expect)(response.body).toHaveProperty('createdAt');
+        });
+        (0, vitest_1.it)('should include progress information', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .get('/a2a/test-agent/tasks/test-task-id')
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('progress');
+            (0, vitest_1.expect)(response.body.progress).toHaveProperty('currentStep');
+            (0, vitest_1.expect)(response.body.progress).toHaveProperty('percentComplete');
+        });
+    });
+    (0, vitest_1.describe)('DELETE /tasks/:taskId', () => {
+        (0, vitest_1.it)('should cancel task and return 200', async () => {
+            const response = await (0, supertest_1.default)(app)
+                .delete('/a2a/test-agent/tasks/test-task-id')
+                .expect(200);
+            (0, vitest_1.expect)(response.body).toHaveProperty('taskId');
+            (0, vitest_1.expect)(response.body).toHaveProperty('status');
+            (0, vitest_1.expect)(response.body.status).toBe('canceled');
+            (0, vitest_1.expect)(response.body).toHaveProperty('message');
+        });
+    });
+});
+//# sourceMappingURL=a2a.test.js.map