@okxweb3/a2a-node 0.0.20-beta-17d080241c-260626165511 → 0.0.20

package/dist/cli.js

@@ -2189,7 +2189,8 @@ function isDaemonCommand(value) {
     return true;
   }
   if (parsed.type === "xmtp-deny-pending-conversation") {
-    return typeof parsed.groupId === "string";
+    const command = parsed;
+    return typeof command.groupId === "string" || typeof command.jobId === "string";
   }
   if (parsed.type === "xmtp-refresh-agents") {
     return true;
@@ -2260,6 +2261,7 @@ var init_command_store = __esm({
           id: (0, import_node_crypto2.randomUUID)(),
           type: "xmtp-deny-pending-conversation",
           groupId: params.groupId,
+          jobId: params.jobId,
           agentId: params.agentId,
           createdAt: Date.now()
         };
@@ -7817,7 +7819,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     client: {
       id: "gateway-client",
       displayName: "okx-a2a-node",
-      version: "0.0.20-beta-17d080241c-260626165511",
+      version: "0.0.20",
       platform: "node",
       mode: "backend",
       instanceId
@@ -7828,7 +7830,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     commands: [],
     permissions: {},
     locale: Intl.DateTimeFormat().resolvedOptions().locale || "en-US",
-    userAgent: `okx-a2a-node/${"0.0.20-beta-17d080241c-260626165511"}`,
+    userAgent: `okx-a2a-node/${"0.0.20"}`,
     auth: {
       ...config.token ? { token: config.token } : {},
       ...config.password ? { password: config.password } : {}
@@ -25047,7 +25049,7 @@ var init_sentry_config = __esm({
     environment = process.env.SENTRY_ENV === "dev" ? "dev" : "prod";
     SENTRY_CONFIG = {
       projectName: "okx/openclaw-okx-a2a-extension",
-      release: "0.0.20-beta-17d080241c-260626165511",
+      release: "0.0.20",
       environment
     };
   }
@@ -86161,6 +86163,19 @@ var init_system_config = __esm({
 });
 
 // ../core/src/xmtp-sdk/onchainos/index.ts
+function messageEligibleUnavailableError(input) {
+  const lines = [
+    MESSAGE_ELIGIBILITY_SERVICE_UNAVAILABLE_AI_HINT,
+    `message-eligible failed: ${input.reason}`
+  ];
+  if (input.stdout) {
+    lines.push("Raw tool stdout:", input.stdout);
+  }
+  if (input.stderr) {
+    lines.push("Raw tool stderr:", input.stderr);
+  }
+  return new Error(lines.join("\n"), { cause: input.cause });
+}
 function isAccountAgentGroup(item) {
   return typeof item === "object" && item !== null && Array.isArray(item.agentList);
 }
@@ -86506,7 +86521,12 @@ async function checkMessageEligible(params) {
     ]));
   } catch (err2) {
     guardCatchSessionExpired2(err2, "message-eligible");
-    throw new Error("message-eligible-cli-error", { cause: err2 });
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-cli-error",
+      stdout: typeof err2?.stdout === "string" ? err2.stdout : "",
+      stderr: typeof err2?.stderr === "string" ? err2.stderr : "",
+      cause: err2
+    });
   }
   if (stderr) {
     logWithTimestamp(`[onchainos] stderr (message-eligible): ${stderr}`);
@@ -86525,7 +86545,12 @@ async function checkMessageEligible(params) {
       providerSecurityRate: String(params.providerSecurityRate)
     });
   } catch (err2) {
-    throw new Error("message-eligible-json-parse-failed", { cause: err2 });
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-json-parse-failed",
+      stdout,
+      stderr,
+      cause: err2
+    });
   }
   if (!res.ok) {
     guardSessionExpired2(stdout, "message-eligible");
@@ -86549,7 +86574,11 @@ async function checkMessageEligible(params) {
         reason: "ok=false"
       })
     );
-    throw new Error("message-eligible-ok-false");
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-ok-false",
+      stdout,
+      stderr
+    });
   }
   logWithTimestamp(
     `[onchainos] message-eligible result: eligible=${res.data.eligible}`
@@ -86597,7 +86626,7 @@ async function fetchSensitiveWords() {
   );
   return result;
 }
-var lastExpiredNotifyAt, EXPIRED_NOTIFY_COOLDOWN_MS, PAGE_SIZE, agentByIdCache, ONCHAINOS_CHAIN_INDEX;
+var MESSAGE_ELIGIBILITY_SERVICE_UNAVAILABLE_AI_HINT, lastExpiredNotifyAt, EXPIRED_NOTIFY_COOLDOWN_MS, PAGE_SIZE, agentByIdCache, ONCHAINOS_CHAIN_INDEX;
 var init_onchainos = __esm({
   "../core/src/xmtp-sdk/onchainos/index.ts"() {
     "use strict";
@@ -86612,6 +86641,7 @@ var init_onchainos = __esm({
     init_cli_response();
     init_session_expired();
     init_system_config();
+    MESSAGE_ELIGIBILITY_SERVICE_UNAVAILABLE_AI_HINT = "Message eligibility service is temporarily unavailable. Please try again later.";
     lastExpiredNotifyAt = 0;
     EXPIRED_NOTIFY_COOLDOWN_MS = 5 * 60 * 1e3;
     PAGE_SIZE = 50;
@@ -87277,26 +87307,17 @@ async function assertOutboundEligible(params) {
   }
   const isSenderClient = senderAgent.role === 1 /* CLIENT */;
   const providerSecurityRate = (isSenderClient ? receiverAgent.securityRate : senderAgent.securityRate) ?? 0;
-  let result;
-  try {
-    result = await checkMessageEligible({
-      agentId: senderAgent.agentId,
-      clientAgentId: isSenderClient ? senderAgent.agentId : receiverAgent.agentId,
-      providerAgentId: isSenderClient ? receiverAgent.agentId : senderAgent.agentId,
-      clientCommunicationAddress: isSenderClient ? senderCommunicationAddress : receiverCommunicationAddress,
-      providerCommunicationAddress: isSenderClient ? receiverCommunicationAddress : senderCommunicationAddress,
-      jobId,
-      groupId,
-      direction: isSenderClient ? "client_to_provider" : "provider_to_client",
-      providerSecurityRate
-    });
-  } catch (err2) {
-    logWithTimestamp(
-      `[okx-agent-task] outbound message-eligible call failed, letting send continue: senderAgentId=${senderAgent.agentId} receiverAgentId=${receiverAgent.agentId} job=${jobId} group=${groupId}`,
-      err2
-    );
-    return;
-  }
+  const result = await checkMessageEligible({
+    agentId: senderAgent.agentId,
+    clientAgentId: isSenderClient ? senderAgent.agentId : receiverAgent.agentId,
+    providerAgentId: isSenderClient ? receiverAgent.agentId : senderAgent.agentId,
+    clientCommunicationAddress: isSenderClient ? senderCommunicationAddress : receiverCommunicationAddress,
+    providerCommunicationAddress: isSenderClient ? receiverCommunicationAddress : senderCommunicationAddress,
+    jobId,
+    groupId,
+    direction: isSenderClient ? "client_to_provider" : "provider_to_client",
+    providerSecurityRate
+  });
   logWithTimestamp(
     `[okx-agent-task] outbound message-eligible: senderAgentId=${senderAgent.agentId} receiverAgentId=${receiverAgent.agentId} job=${jobId} group=${groupId} result=${JSON.stringify(result)}`
   );
@@ -90595,6 +90616,7 @@ function commandSentryExtra(command, extra = {}) {
     base3.toXmtpAddress = command.toXmtpAddress ?? "";
   } else if (command.type === "xmtp-deny-pending-conversation") {
     base3.groupId = command.groupId;
+    base3.jobId = command.jobId ?? "";
     base3.agentId = command.agentId ?? "";
   } else if (command.type === "xmtp-get-conversation-history") {
     base3.jobId = command.jobId;
@@ -90826,13 +90848,18 @@ async function handleDaemonCommand(command, params) {
     return { ok: true, messageId: result.messageId };
   }
   if (command.type === "xmtp-get-pending-list") {
-    const result = [];
-    for (const [address] of params.service.getClients()) {
-      result.push(...await params.service.listUnknownGroups(address));
-    }
-    return { ok: true, payload: filterKnownPendingGroups(result, params.sessionStore) };
+    return { ok: true, payload: await listPendingTaskRequests(params) };
   }
   if (command.type === "xmtp-deny-pending-conversation") {
+    if (command.jobId) {
+      return {
+        ok: true,
+        payload: await denyPendingConversationsByJobId(command.jobId, params)
+      };
+    }
+    if (!command.groupId) {
+      throw new Error("xmtp-deny-pending-conversation requires groupId or jobId");
+    }
     if (command.agentId) {
       const address = params.service.getAddressByAgentId(command.agentId);
       if (!address) {
@@ -90865,6 +90892,51 @@ async function handleDaemonCommand(command, params) {
     }
   };
 }
+async function listPendingTaskRequests(params) {
+  const result = [];
+  for (const [address] of params.service.getClients()) {
+    result.push(...await params.service.listUnknownGroups(address));
+  }
+  return filterKnownPendingGroups(result, params.sessionStore);
+}
+async function denyPendingConversationsByJobId(jobId, params) {
+  const pending = await listPendingTaskRequests(params);
+  const matched = pending.filter((item) => isPlainObject2(item) && readString2(item.jobId) === jobId);
+  const clientAddresses = [...params.service.getClients().keys()];
+  const targetsByKey = /* @__PURE__ */ new Map();
+  const groupIds = /* @__PURE__ */ new Set();
+  for (const item of matched) {
+    if (!isPlainObject2(item)) {
+      continue;
+    }
+    const groupId = readString2(item.groupId);
+    if (!groupId) {
+      continue;
+    }
+    groupIds.add(groupId);
+    const address = readString2(item.myXmtpAddress);
+    const addresses = address ? [address] : clientAddresses;
+    for (const candidate of addresses) {
+      targetsByKey.set(`${candidate}
+${groupId}`, { address: candidate, groupId });
+    }
+  }
+  const results = await Promise.all(
+    [...targetsByKey.values()].map(async (target) => ({
+      ...target,
+      denied: await params.service.denyGroup(target.address, target.groupId)
+    }))
+  );
+  const deniedOn = results.filter((result) => result.denied).map(({ address, groupId }) => ({ address, groupId }));
+  return {
+    denied: deniedOn.length > 0,
+    jobId,
+    matched: matched.length,
+    groupIds: [...groupIds],
+    deniedClientCount: deniedOn.length,
+    deniedOn
+  };
+}
 function filterKnownPendingGroups(items, sessionStore) {
   if (!sessionStore) {
     return items;
@@ -91019,7 +91091,8 @@ function formatCommandCompleted(command, result) {
     return `[okx-agent-task] xmtp-get-pending-list command completed id=${command.id}`;
   }
   if (command.type === "xmtp-deny-pending-conversation") {
-    return `[okx-agent-task] xmtp-deny-pending-conversation command completed id=${command.id} group=${command.groupId}`;
+    const target = command.jobId ? `job=${command.jobId}` : `group=${command.groupId}`;
+    return `[okx-agent-task] xmtp-deny-pending-conversation command completed id=${command.id} ${target}`;
   }
   if (command.type === "xmtp-get-conversation-history") {
     const rows = Array.isArray(result.payload) ? result.payload.length : 0;
@@ -91852,11 +91925,13 @@ async function verifyInboundA2AGroupMessage(params) {
         return false;
       }
     } catch (err2) {
+      const failureMessage = err2 instanceof Error ? err2.message : String(err2);
       logWithTimestamp(
-        `[okx-agent-task:${myXmtpAddress}] message-eligible call failed, letting message through:`,
+        `[okx-agent-task:${myXmtpAddress}] message-eligible call failed, dropping message:
+${failureMessage}`,
         err2
       );
-      logger.error(LogEvent.INBOUND_ELIGIBILITY_BYPASSED, err2 instanceof Error ? err2 : new Error(String(err2)), {
+      logger.error(LogEvent.INBOUND_BLOCKED_INELIGIBLE, err2 instanceof Error ? err2 : new Error(String(err2)), {
         ...agentExtras({ walletAddress: myXmtpAddress, onchainosAgentId: myAgent.agentId }),
         peerWalletAddress: senderAddress,
         peerInboxId: senderInboxId,
@@ -91867,9 +91942,22 @@ async function verifyInboundA2AGroupMessage(params) {
         direction: isSenderClient ? "client_to_provider" : "provider_to_client",
         providerSecurityRate: String(providerSecurityRate),
         stage: "inbound/eligibility_check",
-        reason: "exception",
+        reason: "eligibility_service_error",
         ...timing?.extras()
       });
+      recordInvalidXmtpMessageBestEffort({
+        messageId,
+        groupId,
+        jobId,
+        agentId: senderAgentId,
+        localAgentId: myAgent.agentId,
+        senderAddress,
+        senderInboxId,
+        reason: failureMessage,
+        stage: "inbound/eligibility_check",
+        logTag: `[okx-agent-task:${myXmtpAddress}]`
+      });
+      return false;
     }
   }
   const content3 = readString3(payload.content);
@@ -92787,12 +92875,12 @@ async function runListenerWithLock(options, paths) {
       }));
     }
   });
-  service.setPluginVersion("0.0.20-beta-17d080241c-260626165511");
+  service.setPluginVersion("0.0.20");
   await service.init();
   const pluginVersionStatus = service.pluginVersionStatus;
   if (pluginVersionStatus.unavailable) {
     throw new Error(
-      `@okxweb3/a2a-node v${"0.0.20-beta-17d080241c-260626165511"} is below the required minimum v${pluginVersionStatus.minVersion}`
+      `@okxweb3/a2a-node v${"0.0.20"} is below the required minimum v${pluginVersionStatus.minVersion}`
     );
   }
   const systemConfig = service.getSystemConfig();
@@ -92810,7 +92898,7 @@ async function runListenerWithLock(options, paths) {
       onchainosAgentId: "*",
       reason: "system-config missing sentryDsn",
       pluginId: "@okxweb3/a2a-node",
-      pluginVersion: "0.0.20-beta-17d080241c-260626165511"
+      pluginVersion: "0.0.20"
     });
   }
   logWithTimestamp(
@@ -95975,7 +96063,7 @@ async function getCurrentNodeCliVersion() {
   return await getGlobalNpmPackageVersion(UPDATE_PACKAGES.node) ?? getBundledNodeCliVersion();
 }
 function getBundledNodeCliVersion() {
-  return true ? "0.0.20-beta-17d080241c-260626165511" : null;
+  return true ? "0.0.20" : null;
 }
 function readConfiguredAiProvider() {
   const explicit = process.env.OKX_AGENT_TASK_AI_CLI ?? process.env.OKX_A2A_AI_PROVIDER;
@@ -96808,7 +96896,7 @@ init_sentry_logger();
 init_sentry_config();
 var CURRENT_GATEWAY_SESSION_KEYS_ENV2 = "OKX_A2A_CURRENT_GATEWAY_SESSION_KEYS";
 function printUsage2() {
-  console.log(`okx-a2a ${"0.0.20-beta-17d080241c-260626165511"}
+  console.log(`okx-a2a ${"0.0.20"}
 
 Usage:
   okx-a2a <command> [options]
@@ -96845,7 +96933,7 @@ Run \`okx-a2a <command> -h\` for command-specific help.
 `);
 }
 function printVersion() {
-  console.log("0.0.20-beta-17d080241c-260626165511");
+  console.log("0.0.20");
 }
 function printDaemonUsage() {
   console.log(`Usage: okx-a2a daemon <start|restart|stop|status|autostart> [options]
@@ -96877,10 +96965,34 @@ function printTaskUsage() {
 Commands:
   requests [--json] [--timeout-ms <ms>]
           List pending XMTP task requests.
-  reject --group-id <id> [--agent-id <id>] [--json]
+  reject (--job-id <id> | --group-id <id> [--agent-id <id>]) [--json] [--timeout-ms <ms>]
           Deny a pending XMTP conversation.
 `);
 }
+function printTaskSubcommandUsage(subcommand) {
+  if (subcommand === "requests") {
+    console.log(`Usage: okx-a2a task requests [options]
+
+Options:
+  --json              Print machine-readable JSON output.
+  --timeout-ms <ms>   Timeout while waiting for daemon result. Default: 60000.
+`);
+    return true;
+  }
+  if (subcommand === "reject") {
+    console.log(`Usage: okx-a2a task reject (--job-id <id> | --group-id <id> [--agent-id <id>]) [options]
+
+Options:
+  --job-id <id>       Deny every pending conversation matching this job id.
+  --group-id <id>     XMTP group id for the pending conversation.
+  --agent-id <id>     Agent id whose pending conversation should be denied.
+  --json              Print machine-readable JSON output.
+  --timeout-ms <ms>   Timeout while waiting for daemon result. Default: 60000.
+`);
+    return true;
+  }
+  return false;
+}
 function printAgentUsage() {
   console.log(`Usage: okx-a2a agent <refresh|bypass> [options]
 
@@ -97327,13 +97439,10 @@ function assertOnlyKnownOptions(args, input) {
 async function queueXmtpDaemonCommand(args, type) {
   const json = hasFlag2(args, "--json");
   const timeoutMsRaw = readOption3(args, "--timeout-ms");
-  const wait3 = type === "xmtp-get-pending-list";
+  const wait3 = type === "xmtp-get-pending-list" || type === "xmtp-deny-pending-conversation";
   await assertDaemonRunningForQueuedCommand2(type);
   const commands = new CommandStore();
-  const command = type === "xmtp-get-pending-list" ? commands.createXmtpGetPendingListCommand() : type === "xmtp-deny-pending-conversation" ? commands.createXmtpDenyPendingConversationCommand({
-    groupId: readRequiredOption4(args, "--group-id"),
-    agentId: readOption3(args, "--agent-id")
-  }) : commands.createXmtpRefreshAgentsCommand();
+  const command = type === "xmtp-get-pending-list" ? commands.createXmtpGetPendingListCommand() : type === "xmtp-deny-pending-conversation" ? commands.createXmtpDenyPendingConversationCommand(readDenyPendingConversationOptions(args)) : commands.createXmtpRefreshAgentsCommand();
   await commands.submit(command);
   if (!wait3) {
     outputCommandResult(json, { id: command.id, ok: true, completedAt: Date.now(), payload: { queued: true } }, `${type} queued command=${command.id}`);
@@ -97342,19 +97451,45 @@ async function queueXmtpDaemonCommand(args, type) {
   const timeoutMs = timeoutMsRaw ? Number(timeoutMsRaw) : 6e4;
   const result = await commands.waitForResult(command.id, timeoutMs);
   if (!result) {
-    throw new Error(`${type} timed out waiting for command=${command.id}`);
+    outputCommandResult(json, {
+      id: command.id,
+      ok: false,
+      completedAt: Date.now(),
+      error: `${type} timed out waiting for command=${command.id}`
+    }, `ok=false ${type} command=${command.id} error=timed out waiting for daemon result`);
+    process.exitCode = 1;
+    return;
   }
   if (!result.ok) {
-    throw new Error(`${type} failed command=${command.id}: ${result.error ?? "unknown error"}`);
+    outputCommandResult(json, result, formatDaemonCommandResult(type, result));
+    process.exitCode = 1;
+    return;
   }
   outputCommandResult(json, result, formatDaemonCommandResult(type, result));
 }
 async function handleTaskCommand(args) {
-  if (hasHelpFlag5(args)) {
+  const subcommand = args[0];
+  if (!subcommand || args.every(isHelpArg4)) {
     printTaskUsage();
     return;
   }
-  const subcommand = args[0];
+  if (subcommand === "help") {
+    const helpTarget = args.slice(1).find((arg) => !isHelpArg4(arg));
+    if (!helpTarget) {
+      printTaskUsage();
+      return;
+    }
+    if (!printTaskSubcommandUsage(helpTarget)) {
+      throw new Error(`Unknown task command: ${helpTarget}`);
+    }
+    return;
+  }
+  if (hasHelpFlag5(args.slice(1))) {
+    if (!printTaskSubcommandUsage(subcommand)) {
+      throw new Error(`Unknown task command: ${subcommand}`);
+    }
+    return;
+  }
   const rest = args.slice(1);
   if (subcommand === "requests") {
     await queueXmtpDaemonCommand(rest, "xmtp-get-pending-list");
@@ -97422,9 +97557,32 @@ function readRequiredOption4(args, name2) {
   }
   return value;
 }
+function readDenyPendingConversationOptions(args) {
+  const jobId = readOption3(args, "--job-id");
+  const groupId = readOption3(args, "--group-id");
+  const agentId = readOption3(args, "--agent-id");
+  if (jobId) {
+    if (groupId || agentId) {
+      throw new Error("task reject --job-id cannot be used with --group-id or --agent-id");
+    }
+    return { jobId };
+  }
+  if (!groupId) {
+    throw new Error("task reject requires --job-id <id> or --group-id <id>");
+  }
+  return {
+    groupId,
+    ...agentId ? { agentId } : {}
+  };
+}
 function outputCommandResult(json, result, human) {
   if (json) {
-    console.log(JSON.stringify({ ok: result.ok, commandId: result.id, payload: result.payload ?? null }));
+    console.log(JSON.stringify({
+      ok: result.ok,
+      commandId: result.id,
+      payload: result.payload ?? null,
+      error: result.error ?? null
+    }));
     return;
   }
   console.log(human);
@@ -97446,12 +97604,18 @@ function printXmtpSendCommandResult(json, result) {
   console.log(`ok=false xmtp-send failed command=${result.id} error=${result.error ?? "unknown error"}`);
 }
 function formatDaemonCommandResult(type, result) {
+  if (!result.ok) {
+    return `ok=false ${type} command=${result.id} error=${result.error ?? "unknown error"}`;
+  }
   if (type === "xmtp-get-pending-list") {
     return JSON.stringify(result.payload ?? [], null, 2);
   }
   if (type === "xmtp-deny-pending-conversation") {
     const payload2 = result.payload;
-    return `denied=${payload2?.denied ? "yes" : "no"} groupId=${payload2?.groupId ?? ""} clients=${payload2?.deniedClientCount ?? 0}`;
+    const target = payload2?.jobId ? `jobId=${payload2.jobId}` : `groupId=${payload2?.groupId ?? ""}`;
+    const matched = typeof payload2?.matched === "number" ? ` matched=${payload2.matched}` : "";
+    const groupIds = payload2?.groupIds?.length ? ` groupIds=${payload2.groupIds.join(",")}` : "";
+    return `ok=true denied=${payload2?.denied ? "true" : "false"} ${target}${matched}${groupIds} clients=${payload2?.deniedClientCount ?? 0}`;
   }
   const payload = result.payload;
   return `agents=${payload?.agentCount ?? 0} activeClients=${payload?.activeClients ?? 0} changed=${payload?.changed ? "yes" : "no"} added=${payload?.added?.length ?? 0} removed=${payload?.removed?.length ?? 0}`;
@@ -98109,7 +98273,7 @@ async function main() {
   process.exitCode = 1;
 }
 function shouldDeferHelpToNestedHandler(command, args) {
-  if (command !== "session" && command !== "user") {
+  if (command !== "session" && command !== "user" && command !== "task") {
     return false;
   }
   return args.some((arg) => !isHelpArg4(arg));

package/dist/index.js

@@ -74676,6 +74676,7 @@ var CommandStore = class {
       id: (0, import_node_crypto4.randomUUID)(),
       type: "xmtp-deny-pending-conversation",
       groupId: params.groupId,
+      jobId: params.jobId,
       agentId: params.agentId,
       createdAt: Date.now()
     };
@@ -74957,7 +74958,8 @@ function isDaemonCommand(value) {
     return true;
   }
   if (parsed.type === "xmtp-deny-pending-conversation") {
-    return typeof parsed.groupId === "string";
+    const command = parsed;
+    return typeof command.groupId === "string" || typeof command.jobId === "string";
   }
   if (parsed.type === "xmtp-refresh-agents") {
     return true;
@@ -85737,6 +85739,20 @@ async function fetchSystemConfig(options) {
 }
 
 // ../core/src/xmtp-sdk/onchainos/index.ts
+var MESSAGE_ELIGIBILITY_SERVICE_UNAVAILABLE_AI_HINT = "Message eligibility service is temporarily unavailable. Please try again later.";
+function messageEligibleUnavailableError(input) {
+  const lines = [
+    MESSAGE_ELIGIBILITY_SERVICE_UNAVAILABLE_AI_HINT,
+    `message-eligible failed: ${input.reason}`
+  ];
+  if (input.stdout) {
+    lines.push("Raw tool stdout:", input.stdout);
+  }
+  if (input.stderr) {
+    lines.push("Raw tool stderr:", input.stderr);
+  }
+  return new Error(lines.join("\n"), { cause: input.cause });
+}
 function isAccountAgentGroup(item) {
   return typeof item === "object" && item !== null && Array.isArray(item.agentList);
 }
@@ -86087,7 +86103,12 @@ async function checkMessageEligible(params) {
     ]));
   } catch (err2) {
     guardCatchSessionExpired2(err2, "message-eligible");
-    throw new Error("message-eligible-cli-error", { cause: err2 });
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-cli-error",
+      stdout: typeof err2?.stdout === "string" ? err2.stdout : "",
+      stderr: typeof err2?.stderr === "string" ? err2.stderr : "",
+      cause: err2
+    });
   }
   if (stderr) {
     logWithTimestamp(`[onchainos] stderr (message-eligible): ${stderr}`);
@@ -86106,7 +86127,12 @@ async function checkMessageEligible(params) {
       providerSecurityRate: String(params.providerSecurityRate)
     });
   } catch (err2) {
-    throw new Error("message-eligible-json-parse-failed", { cause: err2 });
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-json-parse-failed",
+      stdout,
+      stderr,
+      cause: err2
+    });
   }
   if (!res.ok) {
     guardSessionExpired2(stdout, "message-eligible");
@@ -86130,7 +86156,11 @@ async function checkMessageEligible(params) {
         reason: "ok=false"
       })
     );
-    throw new Error("message-eligible-ok-false");
+    throw messageEligibleUnavailableError({
+      reason: "message-eligible-ok-false",
+      stdout,
+      stderr
+    });
   }
   logWithTimestamp(
     `[onchainos] message-eligible result: eligible=${res.data.eligible}`
@@ -86661,7 +86691,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     client: {
       id: "gateway-client",
       displayName: "okx-a2a-node",
-      version: "0.0.20-beta-17d080241c-260626165511",
+      version: "0.0.20",
       platform: "node",
       mode: "backend",
       instanceId
@@ -86672,7 +86702,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     commands: [],
     permissions: {},
     locale: Intl.DateTimeFormat().resolvedOptions().locale || "en-US",
-    userAgent: `okx-a2a-node/${"0.0.20-beta-17d080241c-260626165511"}`,
+    userAgent: `okx-a2a-node/${"0.0.20"}`,
     auth: {
       ...config.token ? { token: config.token } : {},
       ...config.password ? { password: config.password } : {}
@@ -88140,26 +88170,17 @@ async function assertOutboundEligible(params) {
   }
   const isSenderClient = senderAgent.role === 1 /* CLIENT */;
   const providerSecurityRate = (isSenderClient ? receiverAgent.securityRate : senderAgent.securityRate) ?? 0;
-  let result;
-  try {
-    result = await checkMessageEligible({
-      agentId: senderAgent.agentId,
-      clientAgentId: isSenderClient ? senderAgent.agentId : receiverAgent.agentId,
-      providerAgentId: isSenderClient ? receiverAgent.agentId : senderAgent.agentId,
-      clientCommunicationAddress: isSenderClient ? senderCommunicationAddress : receiverCommunicationAddress,
-      providerCommunicationAddress: isSenderClient ? receiverCommunicationAddress : senderCommunicationAddress,
-      jobId,
-      groupId,
-      direction: isSenderClient ? "client_to_provider" : "provider_to_client",
-      providerSecurityRate
-    });
-  } catch (err2) {
-    logWithTimestamp(
-      `[okx-agent-task] outbound message-eligible call failed, letting send continue: senderAgentId=${senderAgent.agentId} receiverAgentId=${receiverAgent.agentId} job=${jobId} group=${groupId}`,
-      err2
-    );
-    return;
-  }
+  const result = await checkMessageEligible({
+    agentId: senderAgent.agentId,
+    clientAgentId: isSenderClient ? senderAgent.agentId : receiverAgent.agentId,
+    providerAgentId: isSenderClient ? receiverAgent.agentId : senderAgent.agentId,
+    clientCommunicationAddress: isSenderClient ? senderCommunicationAddress : receiverCommunicationAddress,
+    providerCommunicationAddress: isSenderClient ? receiverCommunicationAddress : senderCommunicationAddress,
+    jobId,
+    groupId,
+    direction: isSenderClient ? "client_to_provider" : "provider_to_client",
+    providerSecurityRate
+  });
   logWithTimestamp(
     `[okx-agent-task] outbound message-eligible: senderAgentId=${senderAgent.agentId} receiverAgentId=${receiverAgent.agentId} job=${jobId} group=${groupId} result=${JSON.stringify(result)}`
   );
@@ -88894,6 +88915,7 @@ function commandSentryExtra(command, extra = {}) {
     base3.toXmtpAddress = command.toXmtpAddress ?? "";
   } else if (command.type === "xmtp-deny-pending-conversation") {
     base3.groupId = command.groupId;
+    base3.jobId = command.jobId ?? "";
     base3.agentId = command.agentId ?? "";
   } else if (command.type === "xmtp-get-conversation-history") {
     base3.jobId = command.jobId;
@@ -89125,13 +89147,18 @@ async function handleDaemonCommand(command, params) {
     return { ok: true, messageId: result.messageId };
   }
   if (command.type === "xmtp-get-pending-list") {
-    const result = [];
-    for (const [address] of params.service.getClients()) {
-      result.push(...await params.service.listUnknownGroups(address));
-    }
-    return { ok: true, payload: filterKnownPendingGroups(result, params.sessionStore) };
+    return { ok: true, payload: await listPendingTaskRequests(params) };
   }
   if (command.type === "xmtp-deny-pending-conversation") {
+    if (command.jobId) {
+      return {
+        ok: true,
+        payload: await denyPendingConversationsByJobId(command.jobId, params)
+      };
+    }
+    if (!command.groupId) {
+      throw new Error("xmtp-deny-pending-conversation requires groupId or jobId");
+    }
     if (command.agentId) {
       const address = params.service.getAddressByAgentId(command.agentId);
       if (!address) {
@@ -89164,6 +89191,51 @@ async function handleDaemonCommand(command, params) {
     }
   };
 }
+async function listPendingTaskRequests(params) {
+  const result = [];
+  for (const [address] of params.service.getClients()) {
+    result.push(...await params.service.listUnknownGroups(address));
+  }
+  return filterKnownPendingGroups(result, params.sessionStore);
+}
+async function denyPendingConversationsByJobId(jobId, params) {
+  const pending = await listPendingTaskRequests(params);
+  const matched = pending.filter((item) => isPlainObject2(item) && readString2(item.jobId) === jobId);
+  const clientAddresses = [...params.service.getClients().keys()];
+  const targetsByKey = /* @__PURE__ */ new Map();
+  const groupIds = /* @__PURE__ */ new Set();
+  for (const item of matched) {
+    if (!isPlainObject2(item)) {
+      continue;
+    }
+    const groupId = readString2(item.groupId);
+    if (!groupId) {
+      continue;
+    }
+    groupIds.add(groupId);
+    const address = readString2(item.myXmtpAddress);
+    const addresses = address ? [address] : clientAddresses;
+    for (const candidate of addresses) {
+      targetsByKey.set(`${candidate}
+${groupId}`, { address: candidate, groupId });
+    }
+  }
+  const results = await Promise.all(
+    [...targetsByKey.values()].map(async (target) => ({
+      ...target,
+      denied: await params.service.denyGroup(target.address, target.groupId)
+    }))
+  );
+  const deniedOn = results.filter((result) => result.denied).map(({ address, groupId }) => ({ address, groupId }));
+  return {
+    denied: deniedOn.length > 0,
+    jobId,
+    matched: matched.length,
+    groupIds: [...groupIds],
+    deniedClientCount: deniedOn.length,
+    deniedOn
+  };
+}
 function filterKnownPendingGroups(items, sessionStore) {
   if (!sessionStore) {
     return items;
@@ -89318,7 +89390,8 @@ function formatCommandCompleted(command, result) {
     return `[okx-agent-task] xmtp-get-pending-list command completed id=${command.id}`;
   }
   if (command.type === "xmtp-deny-pending-conversation") {
-    return `[okx-agent-task] xmtp-deny-pending-conversation command completed id=${command.id} group=${command.groupId}`;
+    const target = command.jobId ? `job=${command.jobId}` : `group=${command.groupId}`;
+    return `[okx-agent-task] xmtp-deny-pending-conversation command completed id=${command.id} ${target}`;
   }
   if (command.type === "xmtp-get-conversation-history") {
     const rows = Array.isArray(result.payload) ? result.payload.length : 0;
@@ -90103,11 +90176,13 @@ async function verifyInboundA2AGroupMessage(params) {
         return false;
       }
     } catch (err2) {
+      const failureMessage = err2 instanceof Error ? err2.message : String(err2);
       logWithTimestamp(
-        `[okx-agent-task:${myXmtpAddress}] message-eligible call failed, letting message through:`,
+        `[okx-agent-task:${myXmtpAddress}] message-eligible call failed, dropping message:
+${failureMessage}`,
         err2
       );
-      logger.error(LogEvent.INBOUND_ELIGIBILITY_BYPASSED, err2 instanceof Error ? err2 : new Error(String(err2)), {
+      logger.error(LogEvent.INBOUND_BLOCKED_INELIGIBLE, err2 instanceof Error ? err2 : new Error(String(err2)), {
         ...agentExtras({ walletAddress: myXmtpAddress, onchainosAgentId: myAgent.agentId }),
         peerWalletAddress: senderAddress,
         peerInboxId: senderInboxId,
@@ -90118,9 +90193,22 @@ async function verifyInboundA2AGroupMessage(params) {
         direction: isSenderClient ? "client_to_provider" : "provider_to_client",
         providerSecurityRate: String(providerSecurityRate),
         stage: "inbound/eligibility_check",
-        reason: "exception",
+        reason: "eligibility_service_error",
         ...timing?.extras()
       });
+      recordInvalidXmtpMessageBestEffort({
+        messageId,
+        groupId,
+        jobId,
+        agentId: senderAgentId,
+        localAgentId: myAgent.agentId,
+        senderAddress,
+        senderInboxId,
+        reason: failureMessage,
+        stage: "inbound/eligibility_check",
+        logTag: `[okx-agent-task:${myXmtpAddress}]`
+      });
+      return false;
     }
   }
   const content3 = readString3(payload.content);
@@ -90887,7 +90975,7 @@ function userWatchEventDeliveredSentryExtra(event) {
 var environment = process.env.SENTRY_ENV === "dev" ? "dev" : "prod";
 var SENTRY_CONFIG = {
   projectName: "okx/openclaw-okx-a2a-extension",
-  release: "0.0.20-beta-17d080241c-260626165511",
+  release: "0.0.20",
   environment
 };
 
@@ -91114,12 +91202,12 @@ async function runListenerWithLock(options, paths) {
       }));
     }
   });
-  service.setPluginVersion("0.0.20-beta-17d080241c-260626165511");
+  service.setPluginVersion("0.0.20");
   await service.init();
   const pluginVersionStatus = service.pluginVersionStatus;
   if (pluginVersionStatus.unavailable) {
     throw new Error(
-      `@okxweb3/a2a-node v${"0.0.20-beta-17d080241c-260626165511"} is below the required minimum v${pluginVersionStatus.minVersion}`
+      `@okxweb3/a2a-node v${"0.0.20"} is below the required minimum v${pluginVersionStatus.minVersion}`
     );
   }
   const systemConfig = service.getSystemConfig();
@@ -91137,7 +91225,7 @@ async function runListenerWithLock(options, paths) {
       onchainosAgentId: "*",
       reason: "system-config missing sentryDsn",
       pluginId: "@okxweb3/a2a-node",
-      pluginVersion: "0.0.20-beta-17d080241c-260626165511"
+      pluginVersion: "0.0.20"
     });
   }
   logWithTimestamp(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okxweb3/a2a-node",
-  "version": "0.0.20-beta-17d080241c-260626165511",
+  "version": "0.0.20",
   "description": "Host-agnostic Node CLI for E2E encrypted agent-to-agent communication via XMTP",
   "main": "dist/index.js",
   "bin": {