Merge branch 'main' into sql-support

Author: kthota-g

.github/workflows/security.yaml

@@ -0,0 +1,19 @@
+name: Bandit
+
+on:
+  workflow_dispatch:
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      actions: read
+      contents: read
+    steps:
+      - name: Perform Bandit Analysis
+        uses: PyCQA/bandit-action@v1
+        with:
+          severity: medium
+          confidence: medium
+          targets: "src/a2a"

.vscode/settings.json

@@ -1,5 +1,7 @@
 {
-  "python.testing.pytestArgs": ["tests"],
+  "python.testing.pytestArgs": [
+    "tests"
+  ],
   "python.testing.unittestEnabled": false,
   "python.testing.pytestEnabled": true,
   "editor.formatOnSave": true,
@@ -12,4 +14,10 @@
     }
   },
   "ruff.importStrategy": "fromEnvironment",
+  "files.insertFinalNewline": true,
+  "files.trimFinalNewlines": false,
+  "files.trimTrailingWhitespace": false,
+  "editor.rulers": [
+    80
+  ]
 }

CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## [0.2.10](https://github.com/a2aproject/a2a-python/compare/v0.2.9...v0.2.10) (2025-06-30)
+
+
+### ⚠ BREAKING CHANGES
+
+* Update to A2A Spec Version [0.2.5](https://github.com/a2aproject/A2A/releases/tag/v0.2.5) ([#197](https://github.com/a2aproject/a2a-python/issues/197))
+
+### Features
+
+* Add `append` and `last_chunk` to `add_artifact` method on `TaskUpdater` ([#186](https://github.com/a2aproject/a2a-python/issues/186)) ([8c6560f](https://github.com/a2aproject/a2a-python/commit/8c6560fd403887fab9d774bfcc923a5f6f459364))
+* add a2a routes to existing app ([#188](https://github.com/a2aproject/a2a-python/issues/188)) ([32fecc7](https://github.com/a2aproject/a2a-python/commit/32fecc7194a61c2f5be0b8795d5dc17cdbab9040))
+* Add middleware to the client SDK ([#171](https://github.com/a2aproject/a2a-python/issues/171)) ([efaabd3](https://github.com/a2aproject/a2a-python/commit/efaabd3b71054142109b553c984da1d6e171db24))
+* Add more task state management methods to TaskUpdater ([#208](https://github.com/a2aproject/a2a-python/issues/208)) ([2b3bf6d](https://github.com/a2aproject/a2a-python/commit/2b3bf6d53ac37ed93fc1b1c012d59c19060be000))
+* raise error for tasks in terminal states ([#215](https://github.com/a2aproject/a2a-python/issues/215)) ([a0bf13b](https://github.com/a2aproject/a2a-python/commit/a0bf13b208c90b439b4be1952c685e702c4917a0))
+
+### Bug Fixes
+
+* `consume_all` doesn't catch `asyncio.TimeoutError` in python 3.10 ([#216](https://github.com/a2aproject/a2a-python/issues/216)) ([39307f1](https://github.com/a2aproject/a2a-python/commit/39307f15a1bb70eb77aee2211da038f403571242))
+* Append metadata and context id when processing TaskStatusUpdateE… ([#238](https://github.com/a2aproject/a2a-python/issues/238)) ([e106020](https://github.com/a2aproject/a2a-python/commit/e10602033fdd4f4e6b61af717ffc242d772545b3))
+* Fix reference to `grpc.aio.ServicerContext` ([#237](https://github.com/a2aproject/a2a-python/issues/237)) ([0c1987b](https://github.com/a2aproject/a2a-python/commit/0c1987bb85f3e21089789ee260a0c62ac98b66a5))
+* Fixes Short Circuit clause for context ID ([#236](https://github.com/a2aproject/a2a-python/issues/236)) ([a5509e6](https://github.com/a2aproject/a2a-python/commit/a5509e6b37701dfb5c729ccc12531e644a12f8ae))
+* Resolve `APIKeySecurityScheme` parsing failed ([#226](https://github.com/a2aproject/a2a-python/issues/226)) ([aa63b98](https://github.com/a2aproject/a2a-python/commit/aa63b982edc2a07fd0df0b01fb9ad18d30b35a79))
+* send notifications on message not streaming ([#219](https://github.com/a2aproject/a2a-python/issues/219)) ([91539d6](https://github.com/a2aproject/a2a-python/commit/91539d69e5c757712c73a41ab95f1ec6656ef5cd)), closes [#218](https://github.com/a2aproject/a2a-python/issues/218)
+
+## [0.2.9](https://github.com/a2aproject/a2a-python/compare/v0.2.8...v0.2.9) (2025-06-24)
+
+### Bug Fixes
+
+* Set `protobuf==5.29.5` and `fastapi>=0.115.2` to prevent version conflicts ([#224](https://github.com/a2aproject/a2a-python/issues/224)) ([1412a85](https://github.com/a2aproject/a2a-python/commit/1412a855b4980d8373ed1cea38c326be74069633))
+
 ## [0.2.8](https://github.com/a2aproject/a2a-python/compare/v0.2.7...v0.2.8) (2025-06-12)
 
 

src/a2a/grpc/a2a_pb2.py

@@ -202,14 +202,15 @@ class AgentInterface(_message.Message):
     def __init__(self, url: _Optional[str] = ..., transport: _Optional[str] = ...) -> None: ...
 
 class AgentCard(_message.Message):
-    __slots__ = ("name", "description", "url", "preferred_transport", "additional_interfaces", "provider", "version", "documentation_url", "capabilities", "security_schemes", "security", "default_input_modes", "default_output_modes", "skills", "supports_authenticated_extended_card")
+    __slots__ = ("protocol_version", "name", "description", "url", "preferred_transport", "additional_interfaces", "provider", "version", "documentation_url", "capabilities", "security_schemes", "security", "default_input_modes", "default_output_modes", "skills", "supports_authenticated_extended_card")
     class SecuritySchemesEntry(_message.Message):
         __slots__ = ("key", "value")
         KEY_FIELD_NUMBER: _ClassVar[int]
         VALUE_FIELD_NUMBER: _ClassVar[int]
         key: str
         value: SecurityScheme
         def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[SecurityScheme, _Mapping]] = ...) -> None: ...
+    PROTOCOL_VERSION_FIELD_NUMBER: _ClassVar[int]
     NAME_FIELD_NUMBER: _ClassVar[int]
     DESCRIPTION_FIELD_NUMBER: _ClassVar[int]
     URL_FIELD_NUMBER: _ClassVar[int]
@@ -225,6 +226,7 @@ class AgentCard(_message.Message):
     DEFAULT_OUTPUT_MODES_FIELD_NUMBER: _ClassVar[int]
     SKILLS_FIELD_NUMBER: _ClassVar[int]
     SUPPORTS_AUTHENTICATED_EXTENDED_CARD_FIELD_NUMBER: _ClassVar[int]
+    protocol_version: str
     name: str
     description: str
     url: str
@@ -240,7 +242,7 @@ class AgentCard(_message.Message):
     default_output_modes: _containers.RepeatedScalarFieldContainer[str]
     skills: _containers.RepeatedCompositeFieldContainer[AgentSkill]
     supports_authenticated_extended_card: bool
-    def __init__(self, name: _Optional[str] = ..., description: _Optional[str] = ..., url: _Optional[str] = ..., preferred_transport: _Optional[str] = ..., additional_interfaces: _Optional[_Iterable[_Union[AgentInterface, _Mapping]]] = ..., provider: _Optional[_Union[AgentProvider, _Mapping]] = ..., version: _Optional[str] = ..., documentation_url: _Optional[str] = ..., capabilities: _Optional[_Union[AgentCapabilities, _Mapping]] = ..., security_schemes: _Optional[_Mapping[str, SecurityScheme]] = ..., security: _Optional[_Iterable[_Union[Security, _Mapping]]] = ..., default_input_modes: _Optional[_Iterable[str]] = ..., default_output_modes: _Optional[_Iterable[str]] = ..., skills: _Optional[_Iterable[_Union[AgentSkill, _Mapping]]] = ..., supports_authenticated_extended_card: bool = ...) -> None: ...
+    def __init__(self, protocol_version: _Optional[str] = ..., name: _Optional[str] = ..., description: _Optional[str] = ..., url: _Optional[str] = ..., preferred_transport: _Optional[str] = ..., additional_interfaces: _Optional[_Iterable[_Union[AgentInterface, _Mapping]]] = ..., provider: _Optional[_Union[AgentProvider, _Mapping]] = ..., version: _Optional[str] = ..., documentation_url: _Optional[str] = ..., capabilities: _Optional[_Union[AgentCapabilities, _Mapping]] = ..., security_schemes: _Optional[_Mapping[str, SecurityScheme]] = ..., security: _Optional[_Iterable[_Union[Security, _Mapping]]] = ..., default_input_modes: _Optional[_Iterable[str]] = ..., default_output_modes: _Optional[_Iterable[str]] = ..., skills: _Optional[_Iterable[_Union[AgentSkill, _Mapping]]] = ..., supports_authenticated_extended_card: bool = ...) -> None: ...
 
 class AgentProvider(_message.Message):
     __slots__ = ("url", "organization")

src/a2a/grpc/a2a_pb2.pyi

@@ -14,7 +14,7 @@ class A2AServiceStub(object):
     - Messages are not a standard resource so there is no get/delete/update/list
     interface, only a send and stream custom methods.
     - Tasks have a get interface and custom cancel and subscribe methods.
-    - TaskPushNotificationConfig are a resource whose parent is a task. 
+    - TaskPushNotificationConfig are a resource whose parent is a task.
     They have get, list and create methods.
     - AgentCard is a static resource with only a get method.
     fields are not present as they don't comply with AIP rules, and the
@@ -88,7 +88,7 @@ class A2AServiceServicer(object):
     - Messages are not a standard resource so there is no get/delete/update/list
     interface, only a send and stream custom methods.
     - Tasks have a get interface and custom cancel and subscribe methods.
-    - TaskPushNotificationConfig are a resource whose parent is a task. 
+    - TaskPushNotificationConfig are a resource whose parent is a task.
     They have get, list and create methods.
     - AgentCard is a static resource with only a get method.
     fields are not present as they don't comply with AIP rules, and the
@@ -241,7 +241,7 @@ class A2AService(object):
     - Messages are not a standard resource so there is no get/delete/update/list
     interface, only a send and stream custom methods.
     - Tasks have a get interface and custom cancel and subscribe methods.
-    - TaskPushNotificationConfig are a resource whose parent is a task. 
+    - TaskPushNotificationConfig are a resource whose parent is a task.
     They have get, list and create methods.
     - AgentCard is a static resource with only a get method.
     fields are not present as they don't comply with AIP rules, and the

src/a2a/grpc/a2a_pb2_grpc.py

@@ -106,7 +106,9 @@ class AgentSkill(BaseModel):
     Description of the skill - will be used by the client or a human
     as a hint to understand what the skill does.
     """
-    examples: list[str] | None = None
+    examples: list[str] | None = Field(
+        default=None, examples=[['I need a recipe for bread']]
+    )
     """
     The set of example scenarios that the skill can perform.
     Will be used by the client as a hint to understand how the skill can be used.
@@ -129,7 +131,7 @@ class AgentSkill(BaseModel):
     """
     Supported media types for output.
     """
-    tags: list[str]
+    tags: list[str] = Field(..., examples=[['cooking', 'customer support', 'billing']])
     """
     Set of tagwords describing classes of capabilities for this specific skill.
     """
@@ -1038,7 +1040,7 @@ class GetTaskPushNotificationConfigRequest(BaseModel):
     params: TaskIdParams | GetTaskPushNotificationConfigParams
     """
     A Structured value that holds the parameter values to be used during the invocation of the method.
-    TaskIdParams type is deprecated for this method
+    TaskIdParams type is deprecated for this method use `GetTaskPushNotificationConfigParams` instead.
     """
 
 
@@ -1493,7 +1495,7 @@ class TaskStatus(BaseModel):
     Additional status updates for client
     """
     state: TaskState
-    timestamp: str | None = None
+    timestamp: str | None = Field(default=None, examples=['2023-10-27T10:00:00Z'])
     """
     ISO 8601 datetime string when the status was recorded.
     """
@@ -1586,7 +1588,9 @@ class AgentCard(BaseModel):
     """
     Supported media types for output.
     """
-    description: str
+    description: str = Field(
+        ..., examples=['Agent that helps users with recipes and cooking.']
+    )
     """
     A human-readable description of the agent. Used to assist users and
     other agents in understanding what the agent can do.
@@ -1599,14 +1603,18 @@ class AgentCard(BaseModel):
     """
     A URL to an icon for the agent.
     """
-    name: str
+    name: str = Field(..., examples=['Recipe Agent'])
     """
     Human readable name of the agent.
     """
     preferredTransport: str | None = None
     """
     The transport of the preferred endpoint. If empty, defaults to JSONRPC.
     """
+    protocolVersion: str | None = '0.2.5'
+    """
+    The version of the A2A protocol this agent supports.
+    """
     provider: AgentProvider | None = None
     """
     The service provider of the agent
@@ -1633,7 +1641,7 @@ class AgentCard(BaseModel):
     A URL to the address the agent is hosted at. This represents the
     preferred endpoint as declared by the agent.
     """
-    version: str
+    version: str = Field(..., examples=['1.0.0'])
     """
     The version of the agent - format is up to the provider.
     """
@@ -1770,6 +1778,8 @@ class JSONRPCResponse(
         | CancelTaskSuccessResponse
         | SetTaskPushNotificationConfigSuccessResponse
         | GetTaskPushNotificationConfigSuccessResponse
+        | ListTaskPushNotificationConfigSuccessResponse
+        | DeleteTaskPushNotificationConfigSuccessResponse
     ]
 ):
     root: (
@@ -1780,6 +1790,8 @@ class JSONRPCResponse(
         | CancelTaskSuccessResponse
         | SetTaskPushNotificationConfigSuccessResponse
         | GetTaskPushNotificationConfigSuccessResponse
+        | ListTaskPushNotificationConfigSuccessResponse
+        | DeleteTaskPushNotificationConfigSuccessResponse
     )
     """
     Represents a JSON-RPC 2.0 Response object.