fix: close #25

.changeset/repobot-ci-failing-on-main-all-checks-passed-security-audit-issue25.md

@@ -0,0 +1,14 @@
+---
+"@reaatech/a2a-reference-auth": patch
+"@reaatech/a2a-reference-cli": patch
+"@reaatech/a2a-reference-client": patch
+"@reaatech/a2a-reference-core": patch
+"@reaatech/a2a-reference-mcp-bridge": patch
+"@reaatech/a2a-reference-observability": patch
+"@reaatech/a2a-reference-persistence": patch
+"@reaatech/a2a-reference-server": patch
+---
+
+Fix: CI failing on main: All Checks Passed, Security Audit
+
+Closes #25

e2e/package.json

@@ -15,6 +15,6 @@
   "devDependencies": {
     "@types/node": "^25.6.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

examples/03-multi-agent-workflow/package.json

@@ -17,6 +17,6 @@
     "@types/node": "^25.6.0",
     "tsx": "^4.19.3",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

package.json

@@ -53,9 +53,9 @@
     "@biomejs/biome": "^1.9.4",
     "@changesets/changelog-github": "^0.6.0",
     "@changesets/cli": "^2.28.1",
-    "@vitest/coverage-v8": "3.2.4",
+    "@vitest/coverage-v8": "^4.1.0",
     "turbo": "^2.9.14",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/auth/package.json

@@ -44,6 +44,6 @@
     "@types/node": "^25.6.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/cli/package.json

@@ -42,6 +42,6 @@
     "@types/node": "^25.6.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/client/package.json

@@ -44,6 +44,6 @@
     "express": "^5.1.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/client/src/client-edge.test.ts

@@ -34,7 +34,7 @@ const testAgentCard = {
 const slowExecutor: AgentExecutor = {
   async execute(_ctx: ExecutionContext, bus: ExecutionEventBus) {
     bus.emitStatusUpdate({ kind: 'status', status: { state: 'working' } });
-    await new Promise((r) => setTimeout(r, 50));
+    await new Promise((r) => setTimeout(r, 500));
     bus.emitArtifactUpdate({
       kind: 'artifact',
       artifact: { parts: [{ kind: 'text', text: 'Done' }] },

packages/core/package.json

@@ -42,6 +42,6 @@
     "@types/node": "^25.6.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/mcp-bridge/package.json

@@ -45,6 +45,6 @@
     "@types/node": "^25.6.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/mcp-bridge/src/a2a-to-mcp.test.ts

@@ -42,43 +42,56 @@ const mockServerState = vi.hoisted(() => ({
 
 // Mock the A2AClient
 vi.mock('@reaatech/a2a-reference-client', () => ({
-  A2AClient: vi.fn().mockImplementation(() => ({
-    getAgentCard: vi.fn().mockImplementation(() => Promise.resolve(mockA2AState.agentCard)),
-    sendMessage: vi.fn().mockImplementation(() => Promise.resolve(mockA2AState.sendMessageResult)),
-    getTask: vi.fn().mockImplementation(() => Promise.resolve(mockA2AState.getTaskResult)),
-    subscribe: vi.fn().mockImplementation(async function* () {
-      for (const event of mockA2AState.subscribeEvents) {
-        yield event;
-      }
-    }),
-  })),
+  // biome-ignore lint/complexity/useArrowFunction: vitest 4 requires function expression for constructor compat
+  A2AClient: vi.fn().mockImplementation(function () {
+    return {
+      getAgentCard: vi.fn().mockImplementation(() => Promise.resolve(mockA2AState.agentCard)),
+      sendMessage: vi
+        .fn()
+        .mockImplementation(() => Promise.resolve(mockA2AState.sendMessageResult)),
+      getTask: vi.fn().mockImplementation(() => Promise.resolve(mockA2AState.getTaskResult)),
+      subscribe: vi.fn().mockImplementation(async function* () {
+        for (const event of mockA2AState.subscribeEvents) {
+          yield event;
+        }
+      }),
+    };
+  }),
 }));
 
 // Mock MCP SDK Server
 vi.mock('@modelcontextprotocol/sdk/server/index.js', () => ({
-  Server: vi.fn().mockImplementation(() => ({
-    setRequestHandler: vi
-      .fn()
-      .mockImplementation((schema: unknown, handler: (req: unknown) => Promise<unknown>) => {
-        const key =
-          schema === ListToolsRequestSchema
-            ? 'listTools'
-            : schema === CallToolRequestSchema
-              ? 'callTool'
-              : 'unknown';
-        mockHandlers.set(key, handler);
+  // biome-ignore lint/complexity/useArrowFunction: vitest 4 requires function expression for constructor compat
+  Server: vi.fn().mockImplementation(function () {
+    return {
+      setRequestHandler: vi
+        .fn()
+        .mockImplementation((schema: unknown, handler: (req: unknown) => Promise<unknown>) => {
+          const key =
+            schema === ListToolsRequestSchema
+              ? 'listTools'
+              : schema === CallToolRequestSchema
+                ? 'callTool'
+                : 'unknown';
+          mockHandlers.set(key, handler);
+        }),
+      connect: vi.fn().mockResolvedValue(undefined),
+      close: vi.fn().mockResolvedValue(undefined),
+      getClientCapabilities: vi.fn().mockImplementation(() => mockServerState.clientCapabilities),
+      createMessage: vi.fn().mockImplementation(async () => {
+        const result = mockServerState.createMessageResult;
+        if (result instanceof Error) throw result;
+        return result;
       }),
-    connect: vi.fn().mockResolvedValue(undefined),
-    close: vi.fn().mockResolvedValue(undefined),
-    getClientCapabilities: vi.fn().mockImplementation(() => mockServerState.clientCapabilities),
-    createMessage: vi
-      .fn()
-      .mockImplementation(() => Promise.resolve(mockServerState.createMessageResult)),
-  })),
+    };
+  }),
 }));
 
 vi.mock('@modelcontextprotocol/sdk/server/stdio.js', () => ({
-  StdioServerTransport: vi.fn().mockImplementation(() => ({})),
+  // biome-ignore lint/complexity/useArrowFunction: vitest 4 requires function expression for constructor compat
+  StdioServerTransport: vi.fn().mockImplementation(function () {
+    return {};
+  }),
 }));
 
 // Mock global fetch for sendTaskMessage
@@ -531,7 +544,7 @@ describe('A2aAsMcpServer', () => {
       artifacts: [],
     };
     mockServerState.clientCapabilities = { sampling: {} };
-    mockServerState.createMessageResult = Promise.reject(new Error('Sampling failed'));
+    mockServerState.createMessageResult = new Error('Sampling failed');
 
     const server = new A2aAsMcpServer({ a2aAgentUrl: 'http://localhost:3000' });
     await server.initialize();

packages/observability/package.json

@@ -42,6 +42,6 @@
     "@types/node": "^25.6.0",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/persistence/package.json

@@ -52,6 +52,6 @@
     "@types/pg": "^8.11.11",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }

packages/server/package.json

@@ -50,6 +50,6 @@
     "supertest": "^7.2.2",
     "tsup": "^8.4.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.1"
+    "vitest": "^4.1.0"
   }
 }