koh / sylius-a2a
Publishes an A2A Agent Card at /.well-known/agent-card.json, built from the shop's registered agent skills.
Requires
- php: ^8.5.11
- koh/sylius-agent-contracts: ^1.1
- sylius/sylius: ^2.2.9 || ^2.3.0
- symfony/config: ^7.4 || ^8.0
- symfony/dependency-injection: ^7.4 || ^8.0
- symfony/http-foundation: ^7.4 || ^8.0
- symfony/http-kernel: ^7.4 || ^8.0
- symfony/routing: ^7.4 || ^8.0
Requires (Dev)
- koh/dev-sylius: ^1.0
- phpstan/extension-installer: ^1.4.3
- phpstan/phpstan: ^2.3.1
- phpunit/phpunit: ^11.5.57
Suggests
None
Provides
None
Conflicts
None
Replaces
None
- v1.1.35
- v1.1.34
- v1.1.33
- v1.1.32
- v1.1.31
- v1.1.30
- v1.1.29
- v1.1.28
- v1.1.27
- v1.1.26
- v1.1.25
- v1.1.24
- v1.1.23
- v1.1.22
- v1.1.21
- v1.1.20
- v1.1.19
- v1.1.18
- v1.1.17
- v1.1.16
- v1.1.15
- v1.1.14
- v1.1.13
- v1.1.12
- v1.1.11
- v1.1.10
- v1.1.9
- v1.1.8
- v1.1.7
- v1.1.6
- v1.1.5
- v1.1.4
- v1.1.3
- v1.1.2
- v1.1.1
- v1.1.0
- dev-main / 1.0.x-dev
- v1.0.0
This package is auto-updated.
Last update: 2026-10-14 02:50:26 UTC
README
koh/sylius-a2a
Publishes an A2A Agent Card at
/.well-known/agent-card.json.
Install
composer require koh/sylius-a2a
// config/bundles.php Koh\SyliusA2a\KohSyliusA2aBundle::class => ['all' => true],
# config/routes/koh_agent.yaml koh_a2a: resource: '@KohSyliusA2aBundle/config/routes.php'
Configure
# config/packages/koh_a2a.yaml koh_a2a: version: '1.0.0' description: 'Tobacco, shipped from Germany.' # defaults to the channel name transport_path: '/_mcp'
transport_path must name an endpoint the shop actually serves. A card
advertising a transport that 404s is worse than no card.
Skills come from the registry
Not from a list in this package. Two other documents project the same skills —
the agent-skills index and the MCP server card — and hand-maintaining three
copies is how they end up disagreeing about what the shop can do. Register a
skill once by implementing AgentSkillProviderInterface from
koh/sylius-agent-contracts and all three follow.
A shop with no skills still serves the card. It is discovery, not a capability: an agent asking what this origin can do deserves an answer, even if the answer is "nothing yet".
Decommission
Remove the composer require, the bundle entry, the route import and
config/packages/koh_a2a.yaml. No table, no cache pool.
Security
Report vulnerabilities privately — see SECURITY.md. Advisories are published as CSAF 2.0 at https://ole-hartwig.eu/.well-known/csaf/.
Licence
MIT — see LICENSE.