feat: feature auth hooks

.github/workflows/conventional-commits.yml

@@ -0,0 +1,26 @@
+name: "Conventional Commits"
+
+on:
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+permissions:
+  contents: read
+
+jobs:
+  main:
+    permissions:
+      pull-requests: read
+      statuses: write
+    name: Validate PR Title
+    runs-on: ubuntu-latest
+    steps:
+      - name: semantic-pull-request
+        uses: amannn/action-semantic-pull-request@v5.5.3
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          validateSingleCommit: false

.github/workflows/npm-publish.yml

@@ -1,35 +1,32 @@
 # This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
 # For more information see: https://docs.github.com/en/actions/publishing-packages/publishing-nodejs-packages
 
-name: Node.js Package
+name: Publish to NPM
 
 on:
   release:
     types: [created]
 
 jobs:
-  build:
+  publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 18
           registry-url: 'https://registry.npmjs.org'
-          cache: 'npm'
       - run: npm ci
-      - run: npm test
-
-  publish-npm:
-    needs: build
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
+      - run: npm run build
+
+      # Now configure with the publish service for install.
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 18
           registry-url: 'https://wombat-dressing-room.appspot.com/'
-      - run: npm ci
       - run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}

.github/workflows/release-please.yml

@@ -0,0 +1,19 @@
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+name: release-please
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          token: ${{ secrets.A2A_BOT_PAT }}
+          release-type: node

.github/workflows/unit-tests.yml

@@ -0,0 +1,25 @@
+# This workflow will do a clean installation of node dependencies, cache/restore them, build the source code and run tests across different versions of node
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-nodejs
+
+name: Run Unit Tests
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  test:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
+      with:
+        node-version: 18
+        registry-url: 'https://registry.npmjs.org'
+        cache: 'npm'
+    - run: npm ci
+    - run: npm test

CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## [0.3.1](https://github.com/a2aproject/a2a-js/compare/v0.3.0...v0.3.1) (2025-08-06)
+
+
+### Bug Fixes
+
+* add missing express entrypoint to tsup config ([#96](https://github.com/a2aproject/a2a-js/issues/96)) ([8e990e4](https://github.com/a2aproject/a2a-js/commit/8e990e497927e3554699f8ebb005829b170d9bc3))
+
+## [0.3.0](https://github.com/a2aproject/a2a-js/compare/v0.2.5...v0.3.0) (2025-08-05)
+
+
+### ⚠ BREAKING CHANGES
+
+* upgrade to a2a 0.3.0 spec version ([#87](https://github.com/a2aproject/a2a-js/issues/87))
+* make Express dependency optional
+
+### Features
+
+* make Express dependency optional ([60899c5](https://github.com/a2aproject/a2a-js/commit/60899c51e2910570402d1207f6b50952bed8862f))
+* upgrade to a2a 0.3.0 spec version ([#87](https://github.com/a2aproject/a2a-js/issues/87)) ([ae53da1](https://github.com/a2aproject/a2a-js/commit/ae53da1e36ff58912e01fefa854c5b3174edf7d8))
+
+## [0.2.5](https://github.com/a2aproject/a2a-js/compare/v0.2.4...v0.2.5) (2025-07-30)
+
+
+### Features
+
+* add support for custom agent card url. resolves [#68](https://github.com/a2aproject/a2a-js/issues/68) ([#79](https://github.com/a2aproject/a2a-js/issues/79)) ([dc92d32](https://github.com/a2aproject/a2a-js/commit/dc92d321ac7c142ff5232cdca0db8a24b4d76da0))
+* Export ExecutionEventQueue in server ([#61](https://github.com/a2aproject/a2a-js/issues/61)) ([530c0b9](https://github.com/a2aproject/a2a-js/commit/530c0b9f1fd50fafd991f640c119837860ae8c3f))
+* Export type AgentExecutionEvent ([#66](https://github.com/a2aproject/a2a-js/issues/66)) ([f4c81f4](https://github.com/a2aproject/a2a-js/commit/f4c81f41866c24d83823b5db7d24b5fdb56b37b4))
+
+
+### Bug Fixes
+
+* correct the example code ([#64](https://github.com/a2aproject/a2a-js/issues/64)) ([126eee4](https://github.com/a2aproject/a2a-js/commit/126eee4e3b79e9475a5af5cbebb0e98b68f286fa))
+* setting context id in _createRequestContext ([#49](https://github.com/a2aproject/a2a-js/issues/49)) ([1abc8a1](https://github.com/a2aproject/a2a-js/commit/1abc8a1f3590f78647d94c5a1e31444203e1131f))
+
 ## [0.2.4](https://github.com/a2aproject/a2a-js/compare/v0.2.3...v0.2.4) (2025-07-14)
 
 

README.md

@@ -21,12 +21,25 @@ You can install the A2A SDK using either `npm`.
 npm install @a2a-js/sdk
 ```
 
+### For Server Usage
+
+If you plan to use the A2A server functionality (A2AExpressApp), you'll also need to install Express as it's a peer dependency:
+
+```bash
+npm install express
+```
+
 You can also find JavaScript samples [here](https://github.com/google-a2a/a2a-samples/tree/main/samples/js).
 
 ## A2A Server
 
 This directory contains a TypeScript server implementation for the Agent-to-Agent (A2A) communication protocol, built using Express.js.
 
+**Note:** Express is a peer dependency for server functionality. Make sure to install it separately:
+```bash
+npm install express
+```
+
 ### 1. Define Agent Card
 
 ```typescript
@@ -42,6 +55,7 @@ const movieAgentCard: AgentCard = {
     organization: "A2A Agents",
     url: "https://example.com/a2a-agents", // Added provider URL
   },
+  protocolVersion: "0.3.0", // A2A protocol this agent supports.
   version: "0.0.2", // Incremented version
   capabilities: {
     streaming: true, // Supports streaming
@@ -81,12 +95,12 @@ const movieAgentCard: AgentCard = {
 import {
   InMemoryTaskStore,
   TaskStore,
-  A2AExpressApp,
   AgentExecutor,
   RequestContext,
   ExecutionEventBus,
   DefaultRequestHandler,
 } from "@a2a-js/sdk/server";
+import { A2AExpressApp } from "@a2a-js/sdk/server/express";
 
 // 1. Define your agent's logic as a AgentExecutor
 class MyAgentExecutor implements AgentExecutor {
@@ -234,7 +248,7 @@ expressApp.listen(PORT, () => {
     `[MyAgent] Server using new framework started on http://localhost:${PORT}`
   );
   console.log(
-    `[MyAgent] Agent Card: http://localhost:${PORT}/.well-known/agent.json`
+    `[MyAgent] Agent Card: http://localhost:${PORT}/.well-known/agent-card.json`
   );
   console.log("[MyAgent] Press Ctrl+C to stop the server");
 });

package.json

@@ -1,8 +1,11 @@
 {
   "name": "@a2a-js/sdk",
-  "version": "0.2.4",
+  "version": "0.3.1",
   "description": "Server & Client SDK for Agent2Agent protocol",
-  "repository": "google-a2a/a2a-js.git",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/a2aproject/a2a-js.git"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -20,6 +23,11 @@
       "import": "./dist/server/index.js",
       "require": "./dist/server/index.cjs"
     },
+    "./server/express": {
+      "types": "./dist/server/express/index.d.ts",
+      "import": "./dist/server/express/index.js",
+      "require": "./dist/server/express/index.cjs"
+    },
     "./client": {
       "types": "./dist/client/index.d.ts",
       "import": "./dist/client/index.js",
@@ -35,11 +43,13 @@
     "@genkit-ai/googleai": "^1.8.0",
     "@genkit-ai/vertexai": "^1.8.0",
     "@types/chai": "^5.2.2",
+    "@types/express": "^4.17.23",
     "@types/mocha": "^10.0.10",
     "@types/node": "^22.13.14",
     "@types/sinon": "^17.0.4",
     "c8": "^10.1.3",
     "chai": "^5.2.0",
+    "express": "^4.21.2",
     "genkit": "^1.8.0",
     "gts": "^6.0.2",
     "json-schema-to-typescript": "^15.0.4",
@@ -53,18 +63,24 @@
     "clean": "gts clean",
     "build": "tsup",
     "pretest": "npm run build",
-    "test": "mocha build/test/**/*.js",
+    "test": "mocha test/**/*.spec.ts",
     "coverage": "c8 npm run test",
     "generate": "curl https://raw.githubusercontent.com/google-a2a/A2A/refs/heads/main/specification/json/a2a.json > spec.json && node scripts/generateTypes.js && rm spec.json",
     "sample:cli": "tsx src/samples/cli.ts",
     "sample:movie-agent": "tsx src/samples/agents/movie-agent/index.ts"
   },
   "dependencies": {
-    "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.23",
-    "body-parser": "^2.2.0",
-    "cors": "^2.8.5",
-    "express": "^4.21.2",
     "uuid": "^11.1.0"
+  },
+  "peerDependencies": {
+    "express": "^4.21.2"
+  },
+  "peerDependenciesMeta": {
+    "express": {
+      "optional": true
+    }
+  },
+  "mocha": {
+    "require": "tsx"
   }
 }

src/a2a_response.ts

@@ -1,4 +1,4 @@
-import { SendMessageResponse, SendStreamingMessageResponse, GetTaskResponse, CancelTaskResponse, SetTaskPushNotificationConfigResponse, GetTaskPushNotificationConfigResponse, JSONRPCErrorResponse } from "./types.js";
+import { SendMessageResponse, SendStreamingMessageResponse, GetTaskResponse, CancelTaskResponse, SetTaskPushNotificationConfigResponse, GetTaskPushNotificationConfigResponse, JSONRPCErrorResponse, ListTaskPushNotificationConfigSuccessResponse, DeleteTaskPushNotificationConfigSuccessResponse, GetAuthenticatedExtendedCardSuccessResponse } from "./types.js";
 
 /**
  * Represents any valid JSON-RPC response defined in the A2A protocol.
@@ -10,5 +10,8 @@ export type A2AResponse =
   | CancelTaskResponse
   | SetTaskPushNotificationConfigResponse
   | GetTaskPushNotificationConfigResponse
+  | ListTaskPushNotificationConfigSuccessResponse
+  | DeleteTaskPushNotificationConfigSuccessResponse
+  | GetAuthenticatedExtendedCardSuccessResponse
   | JSONRPCErrorResponse; // Catch-all for other error responses