embed-a2a

Overview ¶

Command embed-a2a demonstrates mounting HumanAgent's A2A 1.0 HTTP+JSON caller surface inside an application-owned router.

The X-Example-* headers below are deliberately NOT a production authentication scheme. They only make the host callback boundary visible. Production code must either verify JWT/session/mTLS inside Authenticate, or trust identity headers only behind a verified proxy hop that strips client copies and prevents direct access to this handler.

This example intentionally does not listen on a socket and does not create a fake worker. A real host owns the HTTP server and connects a separately authenticated HumanAgent worker transport.