fix: A2A top-level failures return failed Task with AdCP envelope, not JSON-RPC InternalError - #1547

Draft

numarasSigmaSoftware wants to merge 154 commits into

prebid:mainfrom

numarasSigmaSoftware:pr/a2a-error-routing

Commits on Jul 6, 2026

fix: A2A top-level failures return failed Task with AdCP envelope, not JSON-RPC InternalError

numarasSigmaSoftware
and
claude
committed
5657f80

Commits on Jul 9, 2026

fix: Cover A2A failed task routing
numarasSigmaSoftware
committed
8d78cb7
Merge branch 'prebid:main' into pr/a2a-error-routing
numarasSigmaSoftware
authored
8fca519
test: address non-blocking review follow-ups on A2A error routing

numarasSigmaSoftware
and
claude
committed
e6ef756

Commits on Jul 10, 2026

refactor: share the failed-Task envelope reader across test altitudes

numarasSigmaSoftware
and
claude
committed
7d540d0
test: harden the shared failed-Task reader pins

numarasSigmaSoftware
and
claude
committed
a5248fe

Commits on Jul 13, 2026

Commits on Jul 14, 2026

merge: upstream/main into pr/a2a-error-routing

numarasSigmaSoftware
and
claude
committed
fe4c23d
fix: close explicit-skill secret leak + orphan Task; de-advertise stub skills

numarasSigmaSoftware
and
claude
committed
5a23a65
fix: sanitize typed internal-error leaks + correlate A2A task id to workflow

numarasSigmaSoftware
and
claude
committed
176a5d4
fix: durable tasks/cancel + one webhook per workflow status change

numarasSigmaSoftware
and
claude
committed
0c10422
merge: upstream/main into pr/a2a-error-routing (adcp 6.6.0, #1417/#1430)

numarasSigmaSoftware
and
claude
committed
d037cc0

Commits on Jul 15, 2026

Commits on Jul 16, 2026

Commits on Jul 17, 2026

Commits on Jul 18, 2026

fix: correlate admin webhooks to buyer task IDs
numarasSigmaSoftware
committed
e3bf24e

Commits on Jul 19, 2026

chore: retrigger CI
numarasSigmaSoftware
committed
e29a490

Commits on Jul 21, 2026

Commits on Jul 22, 2026

refactor: route the last stragglers through their shared handles (A2A review round)

numarasSigmaSoftware
and
claude
committed
41cdfae
Merge remote-tracking branch 'upstream/main' into pr/a2a-error-routing
numarasSigmaSoftware
committed
bd0545f
fix: sanitize untyped failures at the tasks/get and tasks/cancel boundaries

numarasSigmaSoftware
and
claude
committed
b1b2076
test: one strict failed-Task reader; recovery required on the shared oracle

numarasSigmaSoftware
and
claude
committed
c8ca35a
test: route every hand-rolled secret check through the shared leak oracle

numarasSigmaSoftware
and
claude
committed
78ba8c4
fix: ground sanitized suggestions in the pinned spec enum

numarasSigmaSoftware
and
claude
committed
5d266a8
refactor: one sanitize composition, no dead machinery in on_message_send

numarasSigmaSoftware
and
claude
committed
6e08548
refactor: one name for the terminal-guarded workflow transition

numarasSigmaSoftware
and
claude
committed
34d3c3a
fix: policy-route tenant gate + step-type filter; unknown-action not silent

numarasSigmaSoftware
and
claude
committed
c55c904
test: enforce the A2A external_task_id forwarding (guard + behavioral)

numarasSigmaSoftware
and
claude
committed
8284a90
test: merge-durability guard catches empty/unmodeled refs; tighten complexity ratchet

numarasSigmaSoftware
and
claude
committed
c005712
refactor: strip cross-PR back-references; harden two A2A wire nits

numarasSigmaSoftware
and
claude
committed
269ea52
chore: formatting, lint, and durable-test docstring accuracy

numarasSigmaSoftware
and
claude
committed
4395a92
test: read the C3 forwarding assertion via the repository, not a raw session

numarasSigmaSoftware
and
claude
committed
32e7aa9

Commits on Jul 23, 2026

test: close the last oracle bypasses and pin the readers that grade them

numarasSigmaSoftware
and
claude
committed
806e52f
fix: one error framing for a failed Task, polled or synchronous

numarasSigmaSoftware
and
claude
committed
cfdeb1e
refactor: one reading of the acting user; canonical approvable set on the summary

numarasSigmaSoftware
and
claude
committed
99f4ff8
docs: correct claims that outran the code

numarasSigmaSoftware
and
claude
committed
c0daf64
refactor: route the admin policy read and the refused-claim redirect through one home

numarasSigmaSoftware
and
claude
committed
98ace2d
test: one home for the failed-Task client-facing scrub surface

numarasSigmaSoftware
and
claude
committed
090bbe6
docs: restore whitespace in prose comments; drop unresolvable local tracker ids

numarasSigmaSoftware
and
claude
committed
b13146e
fix: every A2A auth failure carries the AUTH_REQUIRED envelope, from one source

numarasSigmaSoftware
and
claude
committed
48989f7
test: the secret-leak oracle now defends itself

numarasSigmaSoftware
and
claude
committed
86edccc
refactor: shared failed-artifact locator, hoisted import, positive control for the adapter mock

numarasSigmaSoftware
and
claude
committed
d7abf17
fix: one enveloped source for every A2A rejection, graded arm by arm

numarasSigmaSoftware
and
claude
committed
19bb1a8
test: the secret-oracle self-test no longer grades itself

numarasSigmaSoftware
and
claude
committed
0a6c467
test: dedupe the approval setup; widen and anchor the repository guard

numarasSigmaSoftware
and
claude
committed
e0e40f4

Commits on Jul 24, 2026

test: pin the auth envelope's message/suggestion; dedupe the last approval-setup clone

numarasSigmaSoftware
and
claude
committed
916688e
test: pin the AUTH_REQUIRED envelope on the real JSON-RPC wire, not just the handler

numarasSigmaSoftware
and
claude
committed
8350ba3
fix: dedupe the A2A boundary-error arm; tighten CAS guard typing; fix conventions

numarasSigmaSoftware
and
claude
committed
33bb1f2
Merge upstream/main into pr/a2a-error-routing

numarasSigmaSoftware
and
claude
committed
47d6c76
test: update isolation tests for the merged TaskNotFoundError behavior

numarasSigmaSoftware
and
claude
committed
c945a39
test: make webhook dedup oracle deterministic
numarasSigmaSoftware
committed
b031a17

Commits on Jul 25, 2026

fix: record outer A2A task failures
numarasSigmaSoftware
committed
ee8743b
test: close PR 1547 review gaps
numarasSigmaSoftware
committed
63cbf33
fix: distinguish A2A authentication failures
numarasSigmaSoftware
committed
22c1c72
fix: classify malformed A2A credentials
numarasSigmaSoftware
committed
95d6065
fix: close A2A auth review gaps
numarasSigmaSoftware
committed
33b8fea
fix: harden cross-transport error boundaries
numarasSigmaSoftware
committed
e771533
fix: close validation and approval consistency gaps
numarasSigmaSoftware
committed
8f11cdc

Commits on Jul 27, 2026

fix: close validation and approval consistency gaps
numarasSigmaSoftware
committed
5b41082
fix: repair PR 1547 CI contracts
numarasSigmaSoftware
committed
61093b1

Commits on Jul 28, 2026

fix: close remaining PR 1547 review gaps
numarasSigmaSoftware
committed
dc1dc97
fix: align approval webhook fixture with catalog
numarasSigmaSoftware
committed
a2bdd62
test: align creative format mocks with protocol types
numarasSigmaSoftware
committed
3e52582
fix: preserve sanitized date validation contract
numarasSigmaSoftware
committed
27803bf
refactor: single-source the sanitized scrub text selection

numarasSigmaSoftware
and
claude
committed
a01544f
fix: one adapter-agnostic message for the waiting-for-creatives outcome

numarasSigmaSoftware
and
claude
committed
5af3f4f
refactor: type the two new signatures this branch left bare

numarasSigmaSoftware
and
claude
committed
540dd0a
fix: log the original exception at the REST boundary, not its sanitized twin

numarasSigmaSoftware
and
claude
committed
7d7e8ca
test: grade the untyped-crash arm the top-level-failure locks were named for

numarasSigmaSoftware
and
claude
committed
335fe38
test: expose the NL A2A wire envelope as a TransportResult

numarasSigmaSoftware
and
claude
committed
f047bd6
fix: frame NL client-correctable failures as failed Tasks, not InternalError

numarasSigmaSoftware
and
claude
committed
685ed0c
refactor: route the push-config handlers through the shared boundary arm

numarasSigmaSoftware
and
claude
committed
d91fc38
fix: make the pinned-schema provenance a checkable claim, not a label

numarasSigmaSoftware
and
claude
committed
a0a6562
docs: name the internal-bucket suggestion deviation and why it stands

numarasSigmaSoftware
and
claude
committed
ce45f9a

Commits on Jul 29, 2026

Commits on Jul 30, 2026

merge: resolve #1697 SSRF collision, keeping this branch's webhook-scrub fixes
numarasSigmaSoftware
committed
1dd5280
fix: honor the dev callback seam at webhook registration, not only delivery
numarasSigmaSoftware
committed
9deda75
test: stop patching the SSRF gate the comment says not to patch; drop an overclaim
numarasSigmaSoftware
committed
4889c1a
fix: let audited static validation messages reach the buyer

numarasSigmaSoftware
and
claude
committed
13483b2
fix: register and deliver webhooks under one HTTPS policy

numarasSigmaSoftware
and
claude
committed
399bb3c
fix: tell the operator to assign creatives instead of "waiting for 0"

numarasSigmaSoftware
and
claude
committed
97a6976
test: give _atomic_transition's tenant predicate a failing oracle

numarasSigmaSoftware
and
claude
committed
6756c3e
test: dispatch the NL A2A step through the shared harness seam

numarasSigmaSoftware
and
claude
committed
5abd6af
docs: correct the AUTH_OPTIONAL_SKILLS grounding to what the spec says

numarasSigmaSoftware
and
claude
committed
a436d04
fix: put the callback HTTPS rule where a testing flag cannot reach it

numarasSigmaSoftware
and
claude
committed
ee70d23
fix: keep the buyer's suggestion when a raise site opts its message in

numarasSigmaSoftware
and
claude
committed
edb898b
fix: say where the two-layer envelope actually reaches the buyer

numarasSigmaSoftware
and
claude
committed
2dfe3d7
test: grade two behaviours that were prose-only

numarasSigmaSoftware
and
claude
committed
562364e
test: make the auth non-disclosure check see the leak it names

numarasSigmaSoftware
and
claude
committed
2b59b0d
test: stop the SSRF host tests short-circuiting on scheme

numarasSigmaSoftware
and
claude
committed
cf05bb4
fix: keep the non-disclosure step — it was tested, not dead

numarasSigmaSoftware
and
claude
committed
3ab463a

Commits on Jul 31, 2026

fix: require HTTPS for callbacks unless development is declared explicitly

numarasSigmaSoftware
and
claude
committed
c3b6a10
fix: one scheme policy across all three webhook delivery sinks

numarasSigmaSoftware
and
claude
committed
e08193d
test: restore the discriminator the suggestion-parity suite grades

numarasSigmaSoftware
and
claude
committed
97ec54f
test: make the opt-in guard check the direction that can leak

numarasSigmaSoftware
and
claude
committed
649ed61
test: match the re-inline guard on the clause that survives a drift

numarasSigmaSoftware
and
claude
committed
8cceed3
test: make the cancel/approval TOCTOU ordering actually race

numarasSigmaSoftware
and
claude
committed
7e3c9e1

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

fix: stop threading the outer task id into sync_creatives [order R4-1]

numarasSigmaSoftware
and
claude
committed
e36919d