git-a2a

io.github.neprelPublished by GitHub account neprelv1.7.1Updated Oct 24, 2026

Git module dependencies and owning-agent routing for coding agents

Overview

AI-generated overview

Manages Git component dependencies for coding agents and reports which agent owns each dependency.

What you can do
git-a2a is a cross-platform component dependency manager exposed as a local MCP server. It resolves a component repository to one commit, applies it through platform adapters such as npm, Python, Go, Cargo, or a Git submodule, and records the owner agent's Agent Card reference. Six domain commands cover init, add, pull, remove, list, and whose; list and whose support JSON output. It does not send messages, manage tasks, run agents, or host Agent Cards.
When to use it
Use it when a coding agent needs to connect third-party component repositories into a project and later find the agent responsible for a given dependency. It suits polyglot projects where several package managers must bind to the same resolved commit, and where dependency changes should be pulled through a durable adapter choice.
Requirements
Runs as a local process on the desktop; no authentication, environment variables, or headers are declared. Installable via npm, OCI image, or an mcpb bundle, and also through Go, Homebrew, Scoop, PyPI, Nix, or release archives. Git and network access to the component repositories are needed; the demo requires Docker with Compose.
Before you install
add and pull write dependency declarations, lockfiles, and materialized code into the project, and remove deletes the selected dependency's integration and local files. Adapter and manager selection is durable, so a later PATH change cannot silently switch it. Agent Card references point to external agents; the card, not the manifest, is authoritative for interfaces and authentication.

Installation

In SourceWeft

  1. Open git-a2a in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

git-a2a

[built with HINT] [release] [CI] [npm] [PyPI] [Homebrew]

Connect a Git component together with the agent responsible for it.

git-a2a is a cross-platform component dependency manager. A component repository publishes code, one A2A Agent Card reference for its owner, and optionally a readable surface such as API documentation, examples, or source. A consumer connects the code through its own platform's adapter and records the exact commit, adapter, and package-manager variant.

git-a2a does not send messages, manage tasks, run agents, or host Agent Cards. Use the usable Agent Card reference shown by git a2a whose NAME with an external A2A client: an HTTPS URL or a local copy of a repository-relative card from the applied commit.

Quick start

Run the binary directly as git-a2a, or install it on PATH and use Git's equivalent git a2a form:

sh
git a2a initgit a2a add https://github.com/acme/lib-utils.git --name lib-utilsgit a2a listgit a2a whose lib-utilsgit a2a pull lib-utilsgit a2a remove lib-utils

Version 2.1.0 introduces whose NAME and removes the positional argument from list. Scripts using list NAME --json must use list --json and select the alias from the array.

There are exactly six domain commands:

CommandResult
initCreates a minimal schema 2 a2amodule.yml without overwriting an existing manifest.
add SOURCEResolves one commit, chooses applicable adapters, connects the component, and records its owner and surface.
pull [NAME]Updates one or every dependency through the adapters and variants chosen by add; with no dependencies it reports No dependencies. and succeeds without mutation.
remove NAMERemoves only the selected dependency's owned integration and local materialization.
listReports every direct dependency, commit, adapter, Agent Card, surface, and local problem; --json returns the existing array format.
whose NAMEReports one dependency's responsible agent, usable Agent Card reference, optional local surface, and recoverable metadata problems; --json returns one object.

pull is adapter lifecycle, not a wrapper around git pull. All bindings of a polyglot component use the same resolved commit. Adapter and manager selection is durable: a later change to PATH or consumer marker files cannot silently switch it.

End-to-end demo

The ACME app walkthrough demonstrates the complete loop: connect a component, discover its responsible agent, send a request through A2A, let the owner change the library, run git-a2a pull, and observe the new result. The app repository and library repository must be cloned next to each other. Docker with Compose is the only runtime requirement:

sh
git clone https://github.com/neprel/git-a2a-demo-acme-lib.gitgit clone https://github.com/neprel/git-a2a-demo-acme-app.gitcd git-a2a-demo-acme-app./demo/run.sh
# Short npm-only profileDEMO_PROFILE=npm ./demo/run.sh

The demo uses deterministic agents without LLM API keys, real A2A transport, the published git-a2a 2.0.0, and temporary local Git remotes. The separate demo client performs A2A communication; git-a2a manages dependency code and metadata. The agents exist only for the local run and are not permanently available public services. See the verified transcript for the recorded full-profile result.

Component contract

a2amodule.yml uses schema 2:

yaml
schema: 2component:  id: lib-utils  description: Shared parsing and validation utilities.  repository: https://github.com/acme/lib-utils.git  exports:    - adapter: npm      name: "@acme/lib-utils"    - adapter: pypi      name: acme-lib-utils  surface: docs/publicagent:  name: lib-utils-owner  card: https://agents.acme.example/lib-utils/.well-known/agent-card.json

The Agent Card remains the authority for the agent's interfaces, skills, and authentication. The manifest deliberately does not duplicate them. init may create an incomplete local manifest without agent; a repository consumed by add or pull must declare agent.card.

The optional component.surface is published data from the same applied commit and is materialized under .git-a2a/surfaces/NAME. If no surface is declared, no repository content is implicitly published. Surface is not an installation mechanism and is not a submodule.

See the manifest reference, authoring guide, consumer guide, and schema 1 migration guide.

Adapter matrix

Every existing platform integration is retained. Native adapters apply dependencies through the platform's own manager, updating declarations, native locks, and installed or resolved state; build-system adapters compose with one submodule checkout rather than copying source into a second tree.

ModeAdapters
Native Git dependencynpm (npm, Yarn, pnpm, Bun), Python (uv, Poetry, PDM, PEP 621/pip), Go, Cargo, SwiftPM, Pub, Bundler, Composer, Mix, Cabal/Stack, Zig, Clojure, Nix
Submodule + build integrationCMake, Gradle, MSBuild, Maven, Meson
Submodule onlyFallback when no integration applies or the native manager cannot represent the source

Git submodule is an ordinary adapter with the same add/pull/remove/inspect lifecycle. Native lockfiles remain owned by their package managers. See Works with for the detailed matrix and boundaries.

Installation

These existing installation channels are preserved. Commands track the latest stable release; pin a version in CI.

ChannelCommand
Gogo install github.com/neprel/git-a2a/v2/cmd/git-a2a@latest
Go zero-installgo run github.com/neprel/git-a2a/v2/cmd/git-a2a@latest --version
macOS/Linux installercurl -fsSL https://git-a2a.com/install.sh | bash
Windows installerirm https://git-a2a.com/install.ps1 | iex
Homebrewbrew install neprel/tap/git-a2a
Scoopscoop bucket add git-a2a https://github.com/neprel/scoop-bucket; scoop install git-a2a
npmnpx git-a2a@latest --version
PyPI with uvuvx git-a2a --version
PyPI with pipxpipx run git-a2a --version
Containerdocker run --pull=always --rm ghcr.io/neprel/git-a2a:latest --version
Nix flakenix run github:neprel/git-a2a -- --version

Linux .deb, .rpm, and .apk packages are attached to GitHub Releases. Release archives cover Darwin, Linux, and Windows on amd64/arm64 and include checksums and SBOMs. The standalone installers verify checksums and support version pinning, destination selection, and dry-run. Package-manager installs are updated with that package manager; the binary has no self-updater.

Maintainer and provenance details are in the release guide.

Documentation

The portable Agent Skill teaches a coding agent this six-command workflow. It does not configure an MCP server or agent harness.

Specification as source

Repository decisions and invariants live in .hint files beside the artifacts they govern. hint <path> returns the knowledge governing a path, and hint check <path...> validates the linked research records. The repository and CI use HINT 2.0.1. See HINT for the tool and format.

License: MIT.

Source: README.md at commit ce1bd69

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.7.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts