A2A agent

Sweep exposes an A2A 1.0 agent.

• Agent Card: https://api.trustysweep.com/.well-known/agent-card.json (authenticated extended card at /a2a/authenticated-card).
• Transport: JSON-RPC at https://api.trustysweep.com/a2a with the A2A-Version: 1.0 header (methods SendMessage, SendStreamingMessage, GetTask, CancelTask, ListTasks, push-notification config).
• Security: OAuth 2.1 bearer tokens (scopes as in the API) or a developer key with a Sweep-Connection header.

Skills

analyze-storage-pressure, find-reclaimable-data, create-shadow-sweep, explain-plan, request-approval, execute-approved-plan, monitor-execution, retrieve-receipt, restore, migrate, analyze-trial-renewal-risk, analyze-meter-traps, reconcile-creator-revenue.

Task lifecycle

TASK_STATE_SUBMITTED → WORKING → COMPLETED | FAILED | CANCELED | REJECTED, with INPUT_REQUIRED when the delegating user must approve a step-up (the task carries the approval URL) and AUTH_REQUIRED when the token lacks scope. Tasks that execute a plan produce an artifact containing the signed receipt.

A2A tasks route through the same policy, plan and commit gates as everything else. Example: examples/a2a-client.