proofscan 0.10.61 → 0.11.0

package/README.ja.md

@@ -24,6 +24,7 @@ proofscan は MCP (Model Context Protocol) サーバー通信の完全な可視
 - 🐚 **[シェルモードガイド](docs/SHELL.ja.md)** - 対話型シェルと @参照
 - 🎭 **[プロキシガイド](docs/PROXY.ja.md)** - MCP プロキシサーバードキュメント
 - 📦 **[POPL ガイド](docs/POPL.ja.md)** - 公開可能証明台帳
+- 🖥️ **[MCP Apps UI](docs/MCP_APPS.ja.md)** - インタラクティブトレースビューア
 - 🔧 **[API ドキュメント](docs/API.ja.md)** - 開発者向け TypeScript API
 
 ## インストール

package/README.md

@@ -30,6 +30,7 @@ proofscan provides complete visibility into MCP (Model Context Protocol) server
 | 📦 **Catalog** | Search and install MCP servers from registry |
 | 📈 **Analyze** | Tool usage analysis across sessions |
 | 📝 **Plans** | Validation plans for automated testing |
+| 🖥️ **MCP Apps** | Interactive trace viewer UI in Claude Desktop |
 | 🌍 **i18n** | Multi-language support (English, 日本語) |
 
 ## Quick Links
@@ -41,6 +42,7 @@ proofscan provides complete visibility into MCP (Model Context Protocol) server
 - 🎭 **[Proxy Guide](docs/PROXY.md)** ([日本語](docs/PROXY.ja.md)) – MCP proxy server
 - 📦 **[POPL Guide](docs/POPL.md)** ([日本語](docs/POPL.ja.md)) – Public Observable Proof Ledger
 - 🔧 **[MCP Server Setup](docs/MCP_SERVER_SETUP_GUIDE.md)** ([日本語](docs/MCP_SERVER_SETUP_GUIDE.ja.md)) – Setting up MCP servers
+- 🖥️ **[MCP Apps UI](docs/MCP_APPS.md)** ([日本語](docs/MCP_APPS.ja.md)) – Interactive trace viewer UI
 
 ### For Developers
 

package/dist/a2a/agent-card.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Agent Card Fetching
+ *
+ * Fetches and parses Agent Cards from A2A agent endpoints.
+ */
+import type { AgentCard } from './types.js';
+export interface FetchAgentCardOptions {
+    timeout?: number;
+    headers?: Record<string, string>;
+    /** Allow private/local URLs (development only) */
+    allowLocal?: boolean;
+}
+export interface FetchAgentCardResult {
+    ok: boolean;
+    agentCard?: AgentCard;
+    hash?: string;
+    error?: string;
+    statusCode?: number;
+}
+/**
+ * Validates that a URL is not a private/internal URL
+ * Blocks localhost, private IP ranges, and non-HTTP/HTTPS protocols
+ * @param url - URL string to validate
+ * @returns true if URL should be blocked (private/local)
+ */
+export declare function isPrivateUrl(url: string): boolean;
+/**
+ * Normalizes URL for Agent Card endpoint
+ * Appends /.well-known/agent.json if not present
+ * Exported for testing
+ */
+export declare function normalizeAgentCardUrl(url: string): string;
+/**
+ * Fetch Agent Card from A2A agent endpoint
+ * @param url - Agent base URL or full Agent Card URL
+ * @param options - Fetch options (timeout, headers)
+ * @returns FetchAgentCardResult with parsed AgentCard or error
+ */
+export declare function fetchAgentCard(url: string, options?: FetchAgentCardOptions): Promise<FetchAgentCardResult>;
+//# sourceMappingURL=agent-card.d.ts.map

package/dist/a2a/agent-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-card.d.ts","sourceRoot":"","sources":["../../src/a2a/agent-card.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kDAAkD;IAClD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAOD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAiDjD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA4BzD;AASD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA4H/B"}

package/dist/a2a/agent-card.js

@@ -0,0 +1,227 @@
+/**
+ * Agent Card Fetching
+ *
+ * Fetches and parses Agent Cards from A2A agent endpoints.
+ */
+import { createHash } from 'crypto';
+import { parseAgentCard } from './config.js';
+/**
+ * Maximum allowed response body size (1MB)
+ */
+const MAX_RESPONSE_SIZE = 1024 * 1024;
+/**
+ * Validates that a URL is not a private/internal URL
+ * Blocks localhost, private IP ranges, and non-HTTP/HTTPS protocols
+ * @param url - URL string to validate
+ * @returns true if URL should be blocked (private/local)
+ */
+export function isPrivateUrl(url) {
+    const parsed = new URL(url);
+    const hostname = parsed.hostname.toLowerCase();
+    // localhost variants
+    if (hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1') {
+        return true;
+    }
+    // IPv6 loopback addresses (any within ::1/128)
+    if (hostname.startsWith('[') && hostname.includes('::')) {
+        const ipv6 = hostname.slice(1, -1);
+        if (ipv6 === '::1' || ipv6 === '0:0:0:0:0:0:0:1') {
+            return true;
+        }
+    }
+    // Private IPv4 address ranges
+    const ipv4Match = hostname.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
+    if (ipv4Match) {
+        const [, a, b] = ipv4Match.map(Number);
+        // 10.0.0.0/8
+        if (a === 10)
+            return true;
+        // 172.16.0.0/12
+        if (a === 172 && b >= 16 && b <= 31)
+            return true;
+        // 192.168.0.0/16
+        if (a === 192 && b === 168)
+            return true;
+        // 169.254.0.0/16 (link-local)
+        if (a === 169 && b === 254)
+            return true;
+        // 127.0.0.0/8 (loopback - extra safety)
+        if (a === 127)
+            return true;
+    }
+    // Private IPv6 address ranges
+    if (hostname.startsWith('[') && hostname.endsWith(']')) {
+        const ipv6 = hostname.slice(1, -1);
+        // fc00::/7 (unique local)
+        if (ipv6.startsWith('fc') || ipv6.startsWith('fd'))
+            return true;
+        // fe80::/10 (link-local)
+        if (ipv6.startsWith('fe8') || ipv6.startsWith('fe9') ||
+            ipv6.startsWith('fea') || ipv6.startsWith('feb'))
+            return true;
+    }
+    // Only allow HTTP and HTTPS protocols
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Normalizes URL for Agent Card endpoint
+ * Appends /.well-known/agent.json if not present
+ * Exported for testing
+ */
+export function normalizeAgentCardUrl(url) {
+    const normalizedUrl = url.trim();
+    // Check if URL already contains /.well-known/agent.json
+    if (normalizedUrl.includes('/.well-known/agent.json')) {
+        return normalizedUrl;
+    }
+    // Parse URL to handle query parameters and hash correctly
+    try {
+        const urlObj = new URL(normalizedUrl);
+        // Build base URL without trailing slash
+        const baseUrl = normalizedUrl.split('?')[0].split('#')[0].replace(/\/+$/, '');
+        const query = urlObj.search;
+        const hash = urlObj.hash;
+        // Reconstruct URL with agent.json appended
+        let result = `${baseUrl}/.well-known/agent.json`;
+        if (query)
+            result += query;
+        if (hash)
+            result += hash;
+        return result;
+    }
+    catch {
+        // Fallback: just append to the end if URL parsing fails
+        const baseUrl = normalizedUrl.replace(/\/+$/, '');
+        return `${baseUrl}/.well-known/agent.json`;
+    }
+}
+/**
+ * Computes SHA-256 hash of response body
+ */
+function computeHash(body) {
+    return createHash('sha256').update(body).digest('hex');
+}
+/**
+ * Fetch Agent Card from A2A agent endpoint
+ * @param url - Agent base URL or full Agent Card URL
+ * @param options - Fetch options (timeout, headers)
+ * @returns FetchAgentCardResult with parsed AgentCard or error
+ */
+export async function fetchAgentCard(url, options = {}) {
+    const { timeout = 10000, headers = {}, allowLocal = false } = options;
+    const agentCardUrl = normalizeAgentCardUrl(url);
+    // Validate URL format
+    try {
+        new URL(agentCardUrl);
+    }
+    catch {
+        return {
+            ok: false,
+            error: `Invalid URL: ${url}`,
+        };
+    }
+    // SSRF protection: Block private and local URLs
+    if (isPrivateUrl(agentCardUrl) && !allowLocal) {
+        return {
+            ok: false,
+            error: 'Private or local URLs are not allowed',
+        };
+    }
+    // Set up abort controller for timeout
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    try {
+        const response = await fetch(agentCardUrl, {
+            headers: {
+                'Accept': 'application/json',
+                ...headers,
+            },
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        // Response size limit: Check Content-Length header first
+        const contentLength = response.headers.get('content-length');
+        if (contentLength) {
+            const length = parseInt(contentLength, 10);
+            if (length > MAX_RESPONSE_SIZE) {
+                return {
+                    ok: false,
+                    statusCode: response.status,
+                    error: `Response too large: ${length} bytes (max ${MAX_RESPONSE_SIZE})`,
+                };
+            }
+        }
+        // Get response body
+        const bodyText = await response.text();
+        // Response size limit: Check actual body size
+        if (bodyText.length > MAX_RESPONSE_SIZE) {
+            return {
+                ok: false,
+                statusCode: response.status,
+                error: `Response body too large: ${bodyText.length} bytes (max ${MAX_RESPONSE_SIZE})`,
+            };
+        }
+        const hash = computeHash(bodyText);
+        // Handle non-OK responses
+        if (!response.ok) {
+            return {
+                ok: false,
+                statusCode: response.status,
+                error: `HTTP ${response.status}: ${response.statusText}`,
+                hash,
+            };
+        }
+        // Parse JSON
+        let parsedBody;
+        try {
+            parsedBody = JSON.parse(bodyText);
+        }
+        catch {
+            return {
+                ok: false,
+                statusCode: response.status,
+                error: 'Invalid JSON response',
+                hash,
+            };
+        }
+        // Validate Agent Card
+        const result = parseAgentCard(parsedBody);
+        if (!result.ok) {
+            return {
+                ok: false,
+                statusCode: response.status,
+                error: `Invalid Agent Card: ${result.error}`,
+                hash,
+            };
+        }
+        return {
+            ok: true,
+            agentCard: result.value,
+            hash,
+            statusCode: response.status,
+        };
+    }
+    catch (error) {
+        clearTimeout(timeoutId);
+        if (error instanceof Error) {
+            if (error.name === 'AbortError') {
+                return {
+                    ok: false,
+                    error: `Request timeout after ${timeout}ms`,
+                };
+            }
+            return {
+                ok: false,
+                error: error.message,
+            };
+        }
+        return {
+            ok: false,
+            error: String(error),
+        };
+    }
+}
+//# sourceMappingURL=agent-card.js.map

package/dist/a2a/agent-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-card.js","sourceRoot":"","sources":["../../src/a2a/agent-card.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAiB7C;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE/C,qBAAqB;IACrB,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,aAAa;QACb,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,gBAAgB;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,iBAAiB;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,8BAA8B;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,wCAAwC;QACxC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IAED,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,0BAA0B;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,yBAAyB;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACpE,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAEjC,wDAAwD;IACxD,IAAI,aAAa,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACtD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAEtC,wCAAwC;QACxC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,2CAA2C;QAC3C,IAAI,MAAM,GAAG,GAAG,OAAO,yBAAyB,CAAC;QACjD,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC;QAC3B,IAAI,IAAI;YAAE,MAAM,IAAI,IAAI,CAAC;QAEzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,GAAG,OAAO,yBAAyB,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,UAAiC,EAAE;IAEnC,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,UAAU,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACtE,MAAM,YAAY,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEhD,sBAAsB;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,gBAAgB,GAAG,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,uCAAuC;SAC/C,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACzC,OAAO,EAAE;gBACP,QAAQ,EAAE,kBAAkB;gBAC5B,GAAG,OAAO;aACX;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,yDAAyD;QACzD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC7D,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC/B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,KAAK,EAAE,uBAAuB,MAAM,eAAe,iBAAiB,GAAG;iBACxE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEvC,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,KAAK,EAAE,4BAA4B,QAAQ,CAAC,MAAM,eAAe,iBAAiB,GAAG;aACtF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEnC,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;gBACxD,IAAI;aACL,CAAC;QACJ,CAAC;QAED,aAAa;QACb,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,KAAK,EAAE,uBAAuB;gBAC9B,IAAI;aACL,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,KAAK,EAAE,uBAAuB,MAAM,CAAC,KAAK,EAAE;gBAC5C,IAAI;aACL,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,UAAU,EAAE,QAAQ,CAAC,MAAM;SAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,yBAAyB,OAAO,IAAI;iBAC5C,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/a2a/client.d.ts

@@ -0,0 +1,169 @@
+/**
+ * A2A Client
+ *
+ * Client for sending messages to A2A agents via JSON-RPC 2.0.
+ * Implements message/send, tasks/get, tasks/list, and tasks/cancel operations.
+ *
+ * Phase 4 - Client Implementation
+ * Phase 2 - Task Management (getTask, listTasks, cancelTask)
+ * Phase 2.4 - Task DB event recording
+ */
+import type { AgentCard, TaskStatusUpdateEvent, TaskArtifactUpdateEvent, StreamMessageResult, A2AMessage, A2ATask, Task, ListTasksParams, ListTasksResponse, AgentCapabilities } from './types.js';
+import type { EventsStore } from '../db/events-store.js';
+export type { A2AMessage, A2ATask, Task, ListTasksParams, ListTasksResponse } from './types.js';
+export interface SendMessageOptions {
+    timeout?: number;
+    headers?: Record<string, string>;
+    blocking?: boolean;
+}
+export interface SendMessageResult {
+    ok: boolean;
+    task?: A2ATask;
+    message?: A2AMessage;
+    error?: string;
+    statusCode?: number;
+}
+export interface StreamMessageOptions {
+    timeout?: number;
+    headers?: Record<string, string>;
+    onStatus?: (event: TaskStatusUpdateEvent) => void;
+    onArtifact?: (event: TaskArtifactUpdateEvent) => void;
+    onMessage?: (message: A2AMessage) => void;
+    onTask?: (task: A2ATask) => void;
+    onError?: (error: string) => void;
+    signal?: AbortSignal;
+}
+export interface GetTaskOptions {
+    historyLength?: number;
+    headers?: Record<string, string>;
+    timeout?: number;
+}
+export interface GetTaskResult {
+    ok: boolean;
+    task?: Task;
+    error?: string;
+    statusCode?: number;
+}
+export interface CancelTaskResult {
+    ok: boolean;
+    task?: Task;
+    error?: string;
+    statusCode?: number;
+}
+export interface ListTasksResult {
+    ok: boolean;
+    response?: ListTasksResponse;
+    error?: string;
+    statusCode?: number;
+}
+/**
+ * A2A Client for sending messages to agents
+ */
+export declare class A2AClient {
+    private baseUrl;
+    private defaultHeaders;
+    private agentCard;
+    private allowLocal;
+    private eventsStore?;
+    constructor(agentCard: AgentCard, options?: {
+        headers?: Record<string, string>;
+        allowLocal?: boolean;
+        eventsStore?: EventsStore;
+    });
+    /**
+     * Get EventsStore instance (Phase 2.4)
+     * @private
+     */
+    private getEventsStore;
+    /**
+     * Send a message to the agent
+     * POST /message/send (JSON-RPC 2.0)
+     */
+    sendMessage(message: string | A2AMessage, options?: SendMessageOptions): Promise<SendMessageResult>;
+    /**
+     * Get task by ID (Phase 2 - A2A Protocol Compliant)
+     * POST /a2a (JSON-RPC 2.0)
+     *
+     * @param taskId - The task ID to retrieve
+     * @param options - Optional: historyLength, headers, timeout
+     * @returns Promise<GetTaskResult> with task or error
+     */
+    getTask(taskId: string, options?: GetTaskOptions): Promise<GetTaskResult>;
+    /**
+     * List tasks with optional filters (Phase 2)
+     * POST /a2a (JSON-RPC 2.0)
+     *
+     * @param params - Optional: contextId, status, pageSize, pageToken, includeArtifacts
+     * @returns Promise<ListTasksResult> with tasks list or error
+     */
+    listTasks(params?: ListTasksParams): Promise<ListTasksResult>;
+    /**
+     * Cancel a task (Phase 2 - A2A Protocol Compliant)
+     * POST /a2a (JSON-RPC 2.0)
+     *
+     * @param taskId - The task ID to cancel
+     * @returns Promise<CancelTaskResult> with canceled task or error
+     */
+    cancelTask(taskId: string): Promise<CancelTaskResult>;
+    /**
+     * Stream message to agent
+     * POST /message/stream (JSON-RPC 2.0 + SSE response)
+     */
+    streamMessage(message: string | A2AMessage, options?: StreamMessageOptions): Promise<StreamMessageResult>;
+    /**
+     * Parse Task from JSON-RPC response
+     */
+    private parseTask;
+    /**
+     * Parse Message from JSON-RPC response
+     */
+    private parseMessage;
+    /**
+     * Parse Message Part from JSON-RPC response
+     */
+    private parsePart;
+    /**
+     * Parse task status string
+     */
+    private parseTaskStatus;
+    /**
+     * Parse SSE event data
+     */
+    private parseStreamEvent;
+    /**
+     * Parse status event
+     */
+    private parseStatusEvent;
+    /**
+     * Parse artifact event
+     */
+    private parseArtifactEvent;
+}
+/**
+ * Create A2A client from agent ID
+ * Fetches Agent Card from cache or remote endpoint
+ */
+export declare function createA2AClient(configDir: string, agentId: string): Promise<{
+    ok: true;
+    client: A2AClient;
+    agentCard: AgentCard;
+} | {
+    ok: false;
+    error: string;
+}>;
+/**
+ * Probe agent capabilities (Phase 2.5)
+ *
+ * Detects agent capabilities by:
+ * 1. Checking Agent Card capabilities field (if present)
+ * 2. Probing tasks/list endpoint to detect task support
+ *
+ * Note: Streaming capability is only detected from Agent Card, not probed,
+ * because SSE probing is more complex and unreliable.
+ *
+ * @param agentCard - The agent's Agent Card
+ * @param _allowLocal - Reserved for future use (URL validation)
+ * @returns Promise<AgentCapabilities> with detected capabilities
+ */
+export declare function probeCapabilities(agentCard: AgentCard, _allowLocal?: boolean): Promise<AgentCapabilities>;
+//# sourceMappingURL=client.d.ts.map

package/dist/a2a/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/a2a/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAe,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEhN,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAMzD,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAwBhG,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAClD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACtD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IAC1C,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACjC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAID,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,SAAS,CAAY;IAE7B,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,WAAW,CAAC,CAAc;gBAGhC,SAAS,EAAE,SAAS,EACpB,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,WAAW,CAAC,EAAE,WAAW,CAAC;KAC3B;IAmBH;;;OAGG;IACH,OAAO,CAAC,cAAc;IAItB;;;OAGG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC;IAgJ7B;;;;;;;OAOG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAgGnF;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IA8FnE;;;;;;OAMG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8E3D;;;OAGG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC;IAoI/B;;OAEG;IACH,OAAO,CAAC,SAAS;IAgCjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAwBpB;;OAEG;IACH,OAAO,CAAC,SAAS;IA4BjB;;OAEG;IACH,OAAO,CAAC,eAAe;IAsBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyCxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAiB3B;AAQD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAC/B,CA6DA;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,SAAS,EACpB,WAAW,GAAE,OAAe,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAsD5B"}