codex-a2a 0.6.0__tar.gz → 0.6.2__tar.gz

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/.github/workflows/ci.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Validation
 
 on:
   pull_request:
@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   quality-gate:
+    name: Validation Baseline
     runs-on: ubuntu-latest
 
     steps:
@@ -34,6 +35,7 @@ jobs:
         run: bash ./scripts/validate_baseline.sh
 
   runtime-matrix:
+    name: Runtime Matrix (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false

codex_a2a-0.6.2/.github/workflows/dependency-health.yml

@@ -0,0 +1,32 @@
+name: Dependency Health
+
+on:
+  workflow_dispatch:
+  schedule:
+    # 03:00 UTC on day-of-month 1
+    - cron: "0 3 1 * *"
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-health:
+    name: Dependency Health Audit
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: false
+
+      - name: Run dependency health checks
+        run: bash ./scripts/dependency_health.sh

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/.github/workflows/publish.yml

@@ -1,4 +1,4 @@
-name: Publish
+name: Release Publish
 
 on:
   push:
@@ -18,6 +18,7 @@ on:
 
 jobs:
   build_release_artifacts:
+    name: Build Release Artifacts
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -42,6 +43,17 @@ jobs:
         with:
           enable-cache: true
 
+      - name: Sync dependencies
+        run: uv sync --all-extras --frozen
+
+      - name: Export runtime requirements for vulnerability audit
+        run: >
+          uv export --format requirements.txt --no-dev --locked --no-emit-project
+          --output-file /tmp/runtime-requirements.txt >/dev/null
+
+      - name: Run runtime dependency vulnerability audit
+        run: uv run pip-audit --requirement /tmp/runtime-requirements.txt
+
       - name: Resolve release tag
         id: release_tag
         run: echo "tag=${RELEASE_TAG}" >> "$GITHUB_OUTPUT"
@@ -103,6 +115,7 @@ jobs:
           if-no-files-found: error
 
   publish_pypi:
+    name: Publish to PyPI
     runs-on: ubuntu-latest
     needs: build_release_artifacts
     if: github.event_name == 'push' || inputs.publish_to_pypi
@@ -120,6 +133,7 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
 
   publish_github_release:
+    name: Sync GitHub Release
     runs-on: ubuntu-latest
     needs:
       - build_release_artifacts

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/.gitignore

@@ -43,6 +43,8 @@ logs/
 run/
 .codex-a2a/
 *.db
+*.db-shm
+*.db-wal
 
 # Unit test / coverage reports
 htmlcov/

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-a2a
-Version: 0.6.0
+Version: 0.6.2
 Summary: Codex A2A runtime adapter
 Author: liujuanjuan1984@Intelligent-Internet
 License-Expression: Apache-2.0
@@ -24,15 +24,20 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: a2a-sdk==0.3.25
 Requires-Dist: aiosqlite<1.0,>=0.20
-Requires-Dist: fastapi<0.111,>=0.110
+Requires-Dist: fastapi<0.122,>=0.121
 Requires-Dist: httpx<0.29,>=0.28.1
+Requires-Dist: protobuf<7.0,>=6.33.5
+Requires-Dist: pyasn1<1.0,>=0.6.3
 Requires-Dist: pydantic<3.0,>=2.6
 Requires-Dist: pydantic-settings<3.0,>=2.2
+Requires-Dist: requests<3.0,>=2.33.0
 Requires-Dist: sqlalchemy<3.0,>=2.0
 Requires-Dist: sse-starlette<3.0,>=2.1
 Requires-Dist: uvicorn<0.30,>=0.29
 Provides-Extra: dev
+Requires-Dist: pip-audit<3.0,>=2.9; extra == "dev"
 Requires-Dist: pre-commit>=3.7; extra == "dev"
+Requires-Dist: pygments<3.0,>=2.20.0; extra == "dev"
 Requires-Dist: pytest>=8.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
 Requires-Dist: pytest-cov<8.0,>=5.0; extra == "dev"

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/pyproject.toml

@@ -26,10 +26,13 @@ classifiers = [
 dependencies = [
     "a2a-sdk==0.3.25",
     "aiosqlite>=0.20,<1.0",
-    "fastapi>=0.110,<0.111",
+    "fastapi>=0.121,<0.122",
     "httpx>=0.28.1,<0.29",
+    "protobuf>=6.33.5,<7.0",
+    "pyasn1>=0.6.3,<1.0",
     "pydantic>=2.6,<3.0",
     "pydantic-settings>=2.2,<3.0",
+    "requests>=2.33.0,<3.0",
     "sqlalchemy>=2.0,<3.0",
     "sse-starlette>=2.1,<3.0",
     "uvicorn>=0.29,<0.30",
@@ -37,7 +40,9 @@ dependencies = [
 
 [project.optional-dependencies]
 dev = [
+    "pip-audit>=2.9,<3.0",
     "pre-commit>=3.7",
+    "pygments>=2.20.0,<3.0",
     "pytest>=8.0",
     "pytest-asyncio>=0.23",
     "pytest-cov>=5.0,<8.0",

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/scripts/README.md

@@ -14,6 +14,7 @@ This document only explains the remaining repository-local maintainer scripts. U
 
 - [`scripts/validate_baseline.sh`](./validate_baseline.sh): run the default local validation baseline used by contributors and CI.
 - [`scripts/validate_runtime_matrix.sh`](./validate_runtime_matrix.sh): run the reduced runtime-only validation used by the multi-version CI matrix.
+- [`scripts/dependency_health.sh`](./dependency_health.sh): run the standalone dependency review flow (`sync`/`pip check`, outdated package listing, and dev vulnerability audit).
 - [`scripts/smoke_test_built_cli.sh`](./smoke_test_built_cli.sh): validate that a built wheel can be installed through `uv tool` and becomes healthy.
 - [`scripts/sync_codex_docs.sh`](./sync_codex_docs.sh): refresh local upstream Codex reference snapshots when maintainers need them.
 
@@ -27,5 +28,7 @@ The `Publish` workflow now separates build, PyPI publish, and GitHub Release syn
 
 ## Notes
 
+- `validate_baseline.sh` and `dependency_health.sh` intentionally remain separate entrypoints and share common prerequisites through [`health_common.sh`](./health_common.sh).
+- `validate_baseline.sh` now blocks on runtime dependency vulnerability audit, while `dependency_health.sh` remains focused on broader dependency review (`outdated` + dev audit).
 - End-user runtime startup does not use repository scripts. Prefer the published CLI command documented in [README.md](../README.md) and [docs/guide.md](../docs/guide.md).
 - Keep long-form documentation changes in `docs/` to avoid divergence.

codex_a2a-0.6.2/scripts/dependency_health.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# Run the standalone dependency health checks used by the dedicated workflow.
+set -euo pipefail
+
+# shellcheck source=./health_common.sh
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/health_common.sh"
+
+run_shared_repo_health_prerequisites "dependency-health"
+
+echo "[dependency-health] list outdated packages"
+uv pip list --outdated
+
+dev_requirements="$(mktemp)"
+trap 'rm -f "${dev_requirements}"' EXIT
+
+echo "[dependency-health] export dev extra requirements"
+uv export \
+  --format requirements.txt \
+  --extra dev \
+  --no-dev \
+  --locked \
+  --no-emit-project \
+  --output-file "${dev_requirements}" >/dev/null
+
+echo "[dependency-health] run dev dependency vulnerability audit"
+uv run pip-audit --requirement "${dev_requirements}"

codex_a2a-0.6.2/scripts/health_common.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# Shared prerequisites for repository health-check scripts.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+
+run_shared_repo_health_prerequisites() {
+  local label="${1:-health}"
+
+  cd "$ROOT_DIR"
+
+  if ! command -v uv >/dev/null 2>&1; then
+    echo "uv not found in PATH" >&2
+    exit 1
+  fi
+
+  echo "[${label}] sync locked environment"
+  uv sync --all-extras --frozen
+
+  echo "[${label}] verify dependency compatibility"
+  uv pip check
+}

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/scripts/validate_baseline.sh

@@ -11,6 +11,18 @@ uv run pre-commit run --all-files
 uv run mypy --config-file mypy.ini
 uv run pytest
 
+runtime_requirements="$(mktemp)"
+trap 'rm -f "${runtime_requirements}"' EXIT
+
+uv export \
+  --format requirements.txt \
+  --no-dev \
+  --locked \
+  --no-emit-project \
+  --output-file "${runtime_requirements}" >/dev/null
+
+uv run pip-audit --requirement "${runtime_requirements}"
+
 rm -f dist/codex_a2a-*.whl dist/codex_a2a-*.tar.gz
 build_warning_filters="ignore::UserWarning:vcs_versioning._backends._git,ignore::UserWarning:vcs_versioning.overrides"
 PYTHONWARNINGS="${build_warning_filters}${PYTHONWARNINGS:+,${PYTHONWARNINGS}}" uv build --no-sources

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/execution/stream_interrupts.py

@@ -3,6 +3,8 @@ from __future__ import annotations
 from collections.abc import Mapping
 from typing import Any
 
+from codex_a2a.upstream.interrupts import resolve_permission_interrupt_semantic
+
 _INTERRUPT_ASKED_EVENT_TYPES = {
     "permission.asked",
     "question.asked",
@@ -189,12 +191,18 @@ def extract_interrupt_asked_event(event: Mapping[str, Any]) -> dict[str, Any] |
     if not normalized_request_id:
         return None
     if event_type == "permission.asked":
-        details: dict[str, Any] = {
-            "permission": _first_nested_string(
+        permission = _first_nested_string(
+            props,
+            ("permission",),
+            ("metadata", "raw", "permission"),
+        ) or resolve_permission_interrupt_semantic(
+            _first_nested_string(
                 props,
-                ("permission",),
-                ("metadata", "raw", "permission"),
-            ),
+                ("metadata", "method"),
+            )
+        )
+        details: dict[str, Any] = {
+            "permission": permission,
             "patterns": extract_interrupt_patterns(props),
             "always": extract_string_list(_nested_value(props, "always"))
             or extract_string_list(_nested_value(props, "metadata", "raw", "always")),

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/jsonrpc/session_control.py

@@ -35,6 +35,7 @@ from codex_a2a.jsonrpc.payload_mapping import (
     as_a2a_message,
     message_to_item,
 )
+from codex_a2a.upstream.models import CodexRPCError, is_thread_not_found_error
 
 if TYPE_CHECKING:
     from codex_a2a.jsonrpc.application import CodexSessionQueryJSONRPCApplication
@@ -187,6 +188,21 @@ async def handle_session_control_request(
                 data={"type": "UPSTREAM_UNREACHABLE", "session_id": session_id},
             ),
         )
+    except CodexRPCError as exc:
+        if is_thread_not_found_error(exc):
+            return app._generate_error_response(
+                base_request.id,
+                JSONRPCError(
+                    code=ERR_SESSION_NOT_FOUND,
+                    message="Session not found",
+                    data={"type": "SESSION_NOT_FOUND", "session_id": session_id},
+                ),
+            )
+        logger.exception("Codex session control JSON-RPC method failed")
+        return app._generate_error_response(
+            base_request.id,
+            A2AError(root=InternalError(message=str(exc))),
+        )
     except Exception as exc:
         logger.exception("Codex session control JSON-RPC method failed")
         return app._generate_error_response(

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/jsonrpc/session_query.py

@@ -24,6 +24,7 @@ from codex_a2a.jsonrpc.payload_mapping import (
     as_a2a_session_task,
     extract_raw_items,
 )
+from codex_a2a.upstream.models import CodexRPCError, is_thread_not_found_error
 
 if TYPE_CHECKING:
     from codex_a2a.jsonrpc.application import CodexSessionQueryJSONRPCApplication
@@ -81,6 +82,21 @@ async def handle_session_query_request(
                 data={"type": "UPSTREAM_UNREACHABLE"},
             ),
         )
+    except CodexRPCError as exc:
+        if is_thread_not_found_error(exc) and session_id is not None:
+            return app._generate_error_response(
+                base_request.id,
+                JSONRPCError(
+                    code=ERR_SESSION_NOT_FOUND,
+                    message="Session not found",
+                    data={"type": "SESSION_NOT_FOUND", "session_id": session_id},
+                ),
+            )
+        logger.exception("Codex session query JSON-RPC method failed")
+        return app._generate_error_response(
+            base_request.id,
+            A2AError(root=InternalError(message=str(exc))),
+        )
     except Exception as exc:
         logger.exception("Codex session query JSON-RPC method failed")
         return app._generate_error_response(

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/upstream/conversation_facade.py

@@ -7,7 +7,12 @@ from typing import Any
 
 from codex_a2a.execution.request_overrides import RequestExecutionOptions
 from codex_a2a.input_mapping import build_turn_input_from_normalized_items
-from codex_a2a.upstream.models import CodexMessage, _TurnTracker
+from codex_a2a.upstream.models import (
+    CodexMessage,
+    CodexRPCError,
+    _TurnTracker,
+    is_thread_not_found_error,
+)
 from codex_a2a.upstream.request_mapping import (
     apply_thread_start_execution_options,
     apply_turn_start_execution_options,
@@ -37,6 +42,8 @@ class CodexConversationFacade:
         self._rpc_request = rpc_request
         self._get_or_create_tracker = get_or_create_tracker
         self._turn_trackers = turn_trackers
+        self._loaded_thread_ids: set[str] = set()
+        self._thread_resume_locks: dict[str, asyncio.Lock] = {}
 
     async def create_session(
         self,
@@ -67,7 +74,9 @@ class CodexConversationFacade:
         session_id = thread.get("id")
         if not isinstance(session_id, str) or not session_id.strip():
             raise RuntimeError("codex thread/start response missing thread id")
-        return session_id.strip()
+        session_id = session_id.strip()
+        self._loaded_thread_ids.add(session_id)
+        return session_id
 
     async def list_sessions(self, *, query: dict[str, Any]) -> list[dict[str, Any]]:
         rpc_params: dict[str, Any] = {}
@@ -98,6 +107,7 @@ class CodexConversationFacade:
         thread = normalize_thread_summary(result.get("thread"))
         if thread is None:
             raise RuntimeError("codex thread/fork response missing thread")
+        self._loaded_thread_ids.add(thread["id"])
         return thread
 
     async def thread_archive(self, thread_id: str) -> None:
@@ -113,6 +123,7 @@ class CodexConversationFacade:
         thread = normalize_thread_summary(result.get("thread"))
         if thread is None:
             raise RuntimeError("codex thread/unarchive response missing thread")
+        self._loaded_thread_ids.add(thread["id"])
         return thread
 
     async def thread_metadata_update(
@@ -216,7 +227,12 @@ class CodexConversationFacade:
             default_model_id=self._model_id,
         )
 
-        result = await self._rpc_request("turn/start", params)
+        result = await self._start_turn(
+            session_id,
+            params,
+            directory=directory,
+            execution_options=execution_options,
+        )
         if not isinstance(result, dict):
             raise RuntimeError("codex turn/start response missing result object")
         turn = result.get("turn")
@@ -268,7 +284,12 @@ class CodexConversationFacade:
             execution_options=coerce_request_execution_options(execution_options),
             default_model_id=self._model_id,
         )
-        result = await self._rpc_request("turn/start", params)
+        result = await self._start_turn(
+            session_id,
+            params,
+            directory=directory,
+            execution_options=execution_options,
+        )
         if not isinstance(result, dict):
             raise RuntimeError("codex turn/start response missing result object")
         turn = result.get("turn")
@@ -279,6 +300,96 @@ class CodexConversationFacade:
             raise RuntimeError("codex turn/start response missing turn id")
         return {"ok": True, "session_id": session_id, "turn_id": turn_id.strip()}
 
+    async def _start_turn(
+        self,
+        session_id: str,
+        params: dict[str, Any],
+        *,
+        directory: str | None,
+        execution_options: RequestExecutionOptions | None,
+    ) -> Any:
+        await self._ensure_thread_loaded(
+            session_id,
+            directory=directory,
+            execution_options=execution_options,
+        )
+        try:
+            result = await self._rpc_request("turn/start", params)
+        except CodexRPCError as exc:
+            if not is_thread_not_found_error(exc):
+                raise
+            self._loaded_thread_ids.discard(session_id)
+            await self._ensure_thread_loaded(
+                session_id,
+                directory=directory,
+                execution_options=execution_options,
+                force_resume=True,
+            )
+            result = await self._rpc_request("turn/start", params)
+        self._loaded_thread_ids.add(session_id)
+        return result
+
+    async def _ensure_thread_loaded(
+        self,
+        session_id: str,
+        *,
+        directory: str | None,
+        execution_options: RequestExecutionOptions | None,
+        force_resume: bool = False,
+    ) -> None:
+        if not force_resume and session_id in self._loaded_thread_ids:
+            return
+
+        lock = self._thread_resume_locks.setdefault(session_id, asyncio.Lock())
+        async with lock:
+            if not force_resume and session_id in self._loaded_thread_ids:
+                return
+
+            if not force_resume:
+                loaded_threads = await self._list_loaded_thread_ids()
+                self._loaded_thread_ids.update(loaded_threads)
+                if session_id in self._loaded_thread_ids:
+                    return
+
+            await self._resume_thread(
+                session_id,
+                directory=directory,
+                execution_options=execution_options,
+            )
+            self._loaded_thread_ids.add(session_id)
+
+    async def _list_loaded_thread_ids(self) -> set[str]:
+        result = await self._rpc_request("thread/loaded/list", {})
+        if not isinstance(result, dict):
+            return set()
+        data = result.get("data")
+        if not isinstance(data, list):
+            return set()
+        loaded: set[str] = set()
+        for item in data:
+            if isinstance(item, str) and item.strip():
+                loaded.add(item.strip())
+        return loaded
+
+    async def _resume_thread(
+        self,
+        session_id: str,
+        *,
+        directory: str | None,
+        execution_options: RequestExecutionOptions | None,
+    ) -> Any:
+        params: dict[str, Any] = {"threadId": session_id}
+        if directory:
+            params["cwd"] = directory
+        elif self._workspace_root:
+            params["cwd"] = self._workspace_root
+        apply_thread_start_execution_options(
+            params,
+            execution_options=coerce_request_execution_options(execution_options),
+            default_model_id=self._model_id,
+        )
+        return await self._rpc_request("thread/resume", params)
+
     async def turn_steer(
         self,
         thread_id: str,

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/upstream/interrupts.py

@@ -5,6 +5,13 @@ from collections.abc import Mapping
 from dataclasses import dataclass
 from typing import Any
 
+_PERMISSION_INTERRUPT_METHOD_MAP = {
+    "item/commandExecution/requestApproval": "command_execution",
+    "execCommandApproval": "command_execution",
+    "item/fileChange/requestApproval": "file_change",
+    "applyPatchApproval": "apply_patch",
+}
+
 
 def _normalized_string(value: Any) -> str | None:
     if not isinstance(value, str):
@@ -87,6 +94,13 @@ def _extract_mapping(params: dict[str, Any], key: str) -> dict[str, Any] | None:
     return dict(value)
 
 
+def resolve_permission_interrupt_semantic(method: str | None) -> str | None:
+    normalized_method = _normalized_string(method)
+    if normalized_method is None:
+        return None
+    return _PERMISSION_INTERRUPT_METHOD_MAP.get(normalized_method)
+
+
 class InterruptRequestError(RuntimeError):
     def __init__(
         self,
@@ -149,6 +163,9 @@ def build_codex_permission_interrupt_properties(
     )
     if display_message is not None:
         properties["display_message"] = display_message
+    permission = resolve_permission_interrupt_semantic(method)
+    if permission is not None:
+        properties["permission"] = permission
     patterns = _extract_permission_patterns(params)
     if patterns:
         properties["patterns"] = patterns

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a/upstream/models.py

@@ -24,6 +24,10 @@ class CodexRPCError(RuntimeError):
         self.data = data
 
 
+def is_thread_not_found_error(exc: BaseException) -> bool:
+    return isinstance(exc, CodexRPCError) and "thread not found" in str(exc).strip().lower()
+
+
 @dataclass
 class _PendingRpcRequest:
     request_id: str

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-a2a
-Version: 0.6.0
+Version: 0.6.2
 Summary: Codex A2A runtime adapter
 Author: liujuanjuan1984@Intelligent-Internet
 License-Expression: Apache-2.0
@@ -24,15 +24,20 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: a2a-sdk==0.3.25
 Requires-Dist: aiosqlite<1.0,>=0.20
-Requires-Dist: fastapi<0.111,>=0.110
+Requires-Dist: fastapi<0.122,>=0.121
 Requires-Dist: httpx<0.29,>=0.28.1
+Requires-Dist: protobuf<7.0,>=6.33.5
+Requires-Dist: pyasn1<1.0,>=0.6.3
 Requires-Dist: pydantic<3.0,>=2.6
 Requires-Dist: pydantic-settings<3.0,>=2.2
+Requires-Dist: requests<3.0,>=2.33.0
 Requires-Dist: sqlalchemy<3.0,>=2.0
 Requires-Dist: sse-starlette<3.0,>=2.1
 Requires-Dist: uvicorn<0.30,>=0.29
 Provides-Extra: dev
+Requires-Dist: pip-audit<3.0,>=2.9; extra == "dev"
 Requires-Dist: pre-commit>=3.7; extra == "dev"
+Requires-Dist: pygments<3.0,>=2.20.0; extra == "dev"
 Requires-Dist: pytest>=8.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
 Requires-Dist: pytest-cov<8.0,>=5.0; extra == "dev"

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ mypy.ini
 pyproject.toml
 uv.lock
 .github/workflows/ci.yml
+.github/workflows/dependency-health.yml
 .github/workflows/publish.yml
 docs/architecture.md
 docs/compatibility.md
@@ -17,6 +18,8 @@ docs/extension-specifications.md
 docs/guide.md
 docs/maintainer-architecture.md
 scripts/README.md
+scripts/dependency_health.sh
+scripts/health_common.sh
 scripts/publish_github_release.sh
 scripts/smoke_test_built_cli.sh
 scripts/sync_codex_docs.sh
@@ -177,6 +180,8 @@ tests/parts/__init__.py
 tests/parts/test_text.py
 tests/profile/__init__.py
 tests/profile/test_profile.py
+tests/scripts/__init__.py
+tests/scripts/test_script_health_contract.py
 tests/server/__init__.py
 tests/server/test_agent_card.py
 tests/server/test_auth.py

{codex_a2a-0.6.0 → codex_a2a-0.6.2}/src/codex_a2a.egg-info/requires.txt

@@ -1,15 +1,20 @@
 a2a-sdk==0.3.25
 aiosqlite<1.0,>=0.20
-fastapi<0.111,>=0.110
+fastapi<0.122,>=0.121
 httpx<0.29,>=0.28.1
+protobuf<7.0,>=6.33.5
+pyasn1<1.0,>=0.6.3
 pydantic<3.0,>=2.6
 pydantic-settings<3.0,>=2.2
+requests<3.0,>=2.33.0
 sqlalchemy<3.0,>=2.0
 sse-starlette<3.0,>=2.1
 uvicorn<0.30,>=0.29
 
 [dev]
+pip-audit<3.0,>=2.9
 pre-commit>=3.7
+pygments<3.0,>=2.20.0
 pytest>=8.0
 pytest-asyncio>=0.23
 pytest-cov<8.0,>=5.0