adk_a2a_v1_push (erlang_adk v0.10.0)

View Source

Security boundary and bounded webhook transport for A2A 1.0 push.

Registration validates the immutable destination policy before a config is accepted. Delivery resolves the hostname again and connects to the vetted address, preventing redirects and DNS results for loopback/private ranges from bypassing the policy. Credentials are carried only in the private delivery job and are never included in public configs or returned errors.

Summary

Functions

deliver(Job, Policy)
normalize_policy(Options)
prepare_config(TaskId, ConfigId, Tenant, Config0, Policy)

Validate and split a protocol config into public and secret halves. The caller supplies the server-assigned config id and expected tenant.

Functions

deliver(Job, Policy)

-spec deliver(map(), map()) -> ok | {error, term()}.

normalize_policy(Options)

-spec normalize_policy(map()) -> {ok, map()} | {error, term()}.

prepare_config(TaskId, ConfigId, Tenant, Config0, Policy)

-spec prepare_config(binary(), binary(), binary() | undefined, map(), map()) ->
                        {ok, map(), map()} | {error, term()}.

Validate and split a protocol config into public and secret halves. The caller supplies the server-assigned config id and expected tenant.