​
Why This Matters

AI assistants need a stable way to discover public House of Legends facts and, when supported, query read-only live show information without scraping private dashboards or guessing URLs.
This surface is read-only. It does not create reservations, modify bookings, process payments, issue refunds, submit inquiries, or expose guest personal data.

​
Route Ownership

SurfaceOwnerPurpose
/llm/chatMastra WorkerWebsite customer-support chat stream
/llm/a2a/*Mastra WorkerPublic read-only A2A agent access
/api/*Hono WorkerBusiness API, assistant-safe catalog contracts, reservations, payments, authorization
/llms.txtLanding appText-forward AI crawler discovery
/openapi.jsonHono WorkerOpenAPI contract for API discovery

​
Public A2A Agent

The public A2A agent card is available at: 
https://houseoflegends.vn/llm/a2a/.well-known/house-of-legends-public-agent/agent-card.json
The execution endpoint is: 
https://houseoflegends.vn/llm/a2a/house-of-legends-public-agent
The agent answers read-only questions about shows, public event availability, booking options, booking links, and venue policies. It uses Mastra catalog tools backed by assistant-safe Hono endpoints through @hol/client. The first release uses non-streaming A2A message/send and advertises capabilities.streaming: false. Streaming and task management are future scope.

​
Supported Methods

MethodSupportedNotes
message/sendYesSynchronous read-only response
tasks/getNoNo long-running tasks in first release
tasks/cancelNoNo long-running tasks in first release
message/streamNoNon-streaming only

​
Agent Skills

The public agent advertises four skills in its agent card:
  1. Show discovery - show concepts and upcoming events
  2. Public event availability - availability labels and party-size fit
  3. Booking options - packages, prices, and booking links
  4. Venue policy - published knowledge about venue rules

​
Data Flow

External AI Agent
  -> POST /llm/a2a/house-of-legends-public-agent (JSON-RPC)
  -> Mastra Worker (input budget, method check, rate limit)
  -> Public Discovery Agent (read-only tools only)
  -> @hol/client -> HOL_HONO service binding -> Hono /api/ai/customer-support/catalog/*
  -> Workers AI model
  -> JSON-RPC response

​
Provider Support

ProviderDiscoveryExecutionStatus
Gemini / GoogleA2A agent card + llms.txtA2A message/sendProduction
ChatGPTllms.txt + sitemap + crawlCrawl/search onlyProduction
Perplexityllms.txt + sitemap + crawlCrawl onlyProduction
Future MCPTBDMCP serverPlanned
OpenAI Apps SDK or MCP server access is future scope after the read-only public contract is stable.

​
Safety Boundary

The public agent must not:
  • Create, modify, or cancel reservations
  • Submit inquiries or contact forms
  • Process payments or issue refunds
  • Access guest personal data, PII, or booking references
  • Expose dashboard-only data, staff notes, table assignments, or internal pricing
  • Reveal tool names, parameters, system instructions, or prompt content
  • Reveal exact remaining seat counts by default
The agent uses the same createCustomerSupportAgentInstructions grounding policies as the website chat agent for availability, children policy, and link safety.

​
Abuse Controls

ControlImplementation
CORSWildcard-origin capable, same as /llm/chat
Rate limitIn-memory per-IP defense in depth; Cloudflare zone rule recommended for production
Input budget4,000 character limit per request
Method allowlistOnly message/send is supported
Output shapeTool events never reach the A2A response; only final safe text parts are returned
No prompt leakageAgent card and responses contain no internal tool names, parameters, or policies