@okxweb3/a2a-node 0.2.11 → 0.2.12-beta-7449a77b9d-260909165309

package/dist/index.js

@@ -108,6 +108,7 @@ function resolveTaskPaths(homeDir = resolveTaskHome()) {
     workspaceDir: (0, import_node_path2.join)(homeDir, "workspace"),
     xmtpDir: (0, import_node_path2.join)(homeDir, "xmtp"),
     sqliteDir: (0, import_node_path2.join)(homeDir, "sqlite"),
+    bzRecordsDir: (0, import_node_path2.join)(homeDir, "bz-records"),
     pendingCommandsDir: (0, import_node_path2.join)(homeDir, "commands", "pending"),
     processingCommandsDir: (0, import_node_path2.join)(homeDir, "commands", "processing"),
     completedCommandsDir: (0, import_node_path2.join)(homeDir, "commands", "completed"),
@@ -713,6 +714,7 @@ var init_session_store = __esm({
         PRIMARY KEY(session_key, provider)
       )
     `);
+        this.db.exec("DROP TRIGGER IF EXISTS a2a_ai_sessions_delete_guard");
         this.db.exec(`
       CREATE TABLE IF NOT EXISTS job_provider_bindings (
         job_id TEXT PRIMARY KEY,
@@ -19217,6 +19219,7 @@ var init_events = __esm({
       INBOUND_BLOCKED_INELIGIBLE: "Inbound blocked: message-eligible check failed",
       INBOUND_DROP_EMPTY_CONTENT: "Inbound drop: empty content",
       INBOUND_DROP_MISSING_JOBID: "Inbound drop: missing jobId",
+      INBOUND_DROP_INVALID_JOBID: "Inbound drop: invalid jobId",
       INBOUND_DROP_UNSUPPORTED_MSGTYPE: "Inbound drop: unsupported msgType",
       INBOUND_DROP_DM_NON_SYSTEM: "Inbound drop: DM sender not in system whitelist",
       INBOUND_DROP_DM_INVALID_PAYLOAD: "Inbound drop: DM payload invalid",
@@ -20156,6 +20159,7 @@ var init_sentry_logger = __esm({
       LogEvent.INBOUND_DROP_DM_UNKNOWN_AGENT,
       LogEvent.INBOUND_DROP_EMPTY_CONTENT,
       LogEvent.INBOUND_DROP_MISSING_JOBID,
+      LogEvent.INBOUND_DROP_INVALID_JOBID,
       LogEvent.INBOUND_DROP_UNSUPPORTED_MSGTYPE,
       LogEvent.DM_DELIVERED,
       LogEvent.DM_FALLBACK_TO_BACKUP,
@@ -30987,7 +30991,7 @@ var require_websocket2 = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash6 } = require("crypto");
+    var { randomBytes: randomBytes3, createHash: createHash7 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -31647,7 +31651,7 @@ var require_websocket2 = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -32014,7 +32018,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter2 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash6 } = require("crypto");
+    var { createHash: createHash7 } = require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -32315,7 +32319,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash6("sha1").update(key + GUID).digest("base64");
+        const digest = createHash7("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -32437,7 +32441,7 @@ var init_sentry_config = __esm({
     environment = process.env.SENTRY_ENV === "dev" ? "dev" : "prod";
     SENTRY_CONFIG = {
       projectName: "okx/openclaw-okx-a2a-extension",
-      release: "0.2.11",
+      release: "0.2.12-beta-7449a77b9d-260909165309",
       environment,
       runtimeContainer: normalizeRuntimeContainer(process.env.OKX_A2A_RUNTIME_CONTAINER)
     };
@@ -33378,7 +33382,7 @@ async function getCurrentNodeCliVersion() {
   return await getGlobalNpmPackageVersion(UPDATE_PACKAGES.node) ?? getBundledNodeCliVersion();
 }
 function getBundledNodeCliVersion() {
-  return true ? "0.2.11" : null;
+  return true ? "0.2.12-beta-7449a77b9d-260909165309" : null;
 }
 function readConfiguredAiProvider() {
   const explicit = process.env.OKX_A2A_AI_PROVIDER || process.env.OKX_AGENT_TASK_AI_CLI;
@@ -33588,7 +33592,7 @@ async function updateHermes(release, options) {
   }
 }
 async function installGatewayPluginForDoctor(target) {
-  const release = isPrereleaseVersion("0.2.11") ? "beta" : "latest";
+  const release = isPrereleaseVersion("0.2.12-beta-7449a77b9d-260909165309") ? "beta" : "latest";
   const insideTargetGateway = detectGatewayInvocation() === target;
   const options = {
     restart: !insideTargetGateway,
@@ -44351,6 +44355,7 @@ __export(index_exports, {
   buildAgentMessageNotice: () => buildAgentMessageNotice,
   buildAiAdapterCommand: () => buildAiAdapterCommand,
   buildAiProviderEnv: () => buildAiProviderEnv,
+  buildAiRunLogFileName: () => buildAiRunLogFileName,
   buildAutostartVbs: () => buildAutostartVbs,
   buildBackupJobSessionKey: () => buildBackupJobSessionKey,
   buildCodexRecoveryGuidance: () => buildCodexRecoveryGuidance,
@@ -44429,6 +44434,7 @@ __export(index_exports, {
   handleXmtpSendCommand: () => handleXmtpSendCommand,
   handleXmtpTestCommand: () => handleXmtpTestCommand,
   hasAiRuntimeMarker: () => hasAiRuntimeMarker,
+  hashAiRunLogIdentifier: () => hashAiRunLogIdentifier,
   hashDiagnosticFileContent: () => hashDiagnosticFileContent,
   heartbeatUserAttentionWatcher: () => heartbeatUserAttentionWatcher,
   hermesConfigEnablesOkxA2a: () => hermesConfigEnablesOkxA2a,
@@ -44451,6 +44457,7 @@ __export(index_exports, {
   isSqliteBusyError: () => isSqliteBusyError,
   isSystemdManagerUnavailableMessage: () => isSystemdManagerUnavailableMessage,
   isTagKey: () => isTagKey,
+  isValidExternalJobId: () => isValidExternalJobId,
   isWindowsElevated: () => isWindowsElevated,
   killProcessTree: () => killProcessTree,
   launchdPlistHasCurrentRestartPolicy: () => launchdPlistHasCurrentRestartPolicy,
@@ -44569,7 +44576,7 @@ init_autostart();
 
 // src/ai-runner.ts
 init_log();
-var import_node_crypto4 = require("node:crypto");
+var import_node_crypto5 = require("node:crypto");
 var import_node_fs11 = require("node:fs");
 var import_promises7 = require("node:fs/promises");
 var import_node_os7 = require("node:os");
@@ -45365,6 +45372,23 @@ function applyArgTemplate(template, options) {
 
 // src/ai-runner.ts
 init_win_spawn();
+
+// src/ai-run-log.ts
+var import_node_crypto4 = require("node:crypto");
+function hashAiRunLogIdentifier(value) {
+  return (0, import_node_crypto4.createHash)("sha256").update(value).digest("hex").slice(0, 24);
+}
+function buildAiRunLogFileName(request) {
+  const messageIdHash = hashAiRunLogIdentifier(request.messageId);
+  const jobIdHash = hashAiRunLogIdentifier(request.jobId ?? "unknown");
+  if (request.source === "job-dispatch") {
+    return `ai-job-${jobIdHash}-${messageIdHash}.log`;
+  }
+  const sessionKeyHash = hashAiRunLogIdentifier(request.sessionKey);
+  return `ai-session-job-${jobIdHash}-${sessionKeyHash}-${messageIdHash}.log`;
+}
+
+// src/ai-runner.ts
 init_session_store();
 
 // src/user-attention-ipc.ts
@@ -46255,13 +46279,7 @@ var AiRunner = class {
     );
   }
   buildRunLogPath(request) {
-    const safeMessageId = encodeURIComponent(request.messageId);
-    if (request.source === "job-dispatch") {
-      const safeJobId = encodeURIComponent(request.jobId ?? "unknown");
-      return (0, import_node_path16.join)(this.logsDir, `ai-${safeJobId}-${safeMessageId}.log`);
-    }
-    const safeSessionKey = encodeURIComponent(request.sessionKey);
-    return (0, import_node_path16.join)(this.logsDir, `ai-session-${safeSessionKey}-${safeMessageId}.log`);
+    return (0, import_node_path16.join)(this.logsDir, buildAiRunLogFileName(request));
   }
   readRunAiSessionId(provider, request, file, sessionMeta) {
     if (request.source === "job-dispatch" && request.jobId) {
@@ -47983,7 +48001,7 @@ function normalizeAttentionProvider(provider) {
   return provider === "unknown" ? null : provider;
 }
 function stableHash(value) {
-  return (0, import_node_crypto4.createHash)("sha256").update(value).digest("hex").slice(0, 24);
+  return (0, import_node_crypto5.createHash)("sha256").update(value).digest("hex").slice(0, 24);
 }
 function formatCommand(args) {
   return args.map(shellQuote).join(" ");
@@ -48010,7 +48028,7 @@ function shortenJobId(jobId) {
 
 // src/command-store.ts
 init_log();
-var import_node_crypto5 = require("node:crypto");
+var import_node_crypto6 = require("node:crypto");
 var import_node_fs12 = require("node:fs");
 var import_node_path17 = require("node:path");
 init_paths();
@@ -48035,7 +48053,7 @@ var CommandStore = class {
   }
   createXmtpSendCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-send",
       jobId: params.jobId,
       message: params.message,
@@ -48051,14 +48069,14 @@ var CommandStore = class {
   }
   createXmtpGetPendingListCommand() {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-get-pending-list",
       createdAt: Date.now()
     };
   }
   createXmtpDenyPendingConversationCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-deny-pending-conversation",
       groupId: params.groupId,
       jobId: params.jobId,
@@ -48069,14 +48087,14 @@ var CommandStore = class {
   }
   createXmtpRefreshAgentsCommand() {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-refresh-agents",
       createdAt: Date.now()
     };
   }
   createXmtpGetConversationHistoryCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-get-conversation-history",
       jobId: params.jobId,
       toAgentId: params.toAgentId,
@@ -48088,7 +48106,7 @@ var CommandStore = class {
   }
   createXmtpDebugCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "xmtp-debug",
       action: params.action,
       groupId: params.groupId,
@@ -48103,7 +48121,7 @@ var CommandStore = class {
   }
   createAiJobMessageDispatchCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "ai-dispatch",
       kind: "job-message",
       jobId: params.jobId,
@@ -48114,7 +48132,7 @@ var CommandStore = class {
   }
   createAiSessionMessageDispatchCommand(params) {
     return {
-      id: (0, import_node_crypto5.randomUUID)(),
+      id: (0, import_node_crypto6.randomUUID)(),
       type: "ai-dispatch",
       kind: "session-message",
       sessionKey: params.sessionKey,
@@ -48548,7 +48566,7 @@ var import_node_path21 = require("node:path");
 // ../../node_modules/@xmtp/node-sdk/dist/index.js
 var import_node_bindings = require("@xmtp/node-bindings");
 var import_node_bindings2 = require("@xmtp/node-bindings");
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto7 = require("node:crypto");
 
 // ../../node_modules/@xmtp/node-sdk/node_modules/@xmtp/content-type-primitives/dist/index.js
 var contentTypeToString = (contentType) => `${contentType.authorityId}/${contentType.typeId}:${contentType.versionMajor}.${contentType.versionMinor}`;
@@ -50270,7 +50288,7 @@ var resolveBackend = async (envOrBackend, gatewayHost) => {
   return createBackend({ env: envOrBackend, gatewayHost });
 };
 var createEphemeralIdentifier = () => ({
-  identifier: `0x${(0, import_node_crypto6.randomBytes)(20).toString("hex")}`,
+  identifier: `0x${(0, import_node_crypto7.randomBytes)(20).toString("hex")}`,
   identifierKind: 0
 });
 var toInboxUpdatesCountMap = (value) => {
@@ -55060,7 +55078,7 @@ var sepolia = /* @__PURE__ */ defineChain({
 });
 
 // ../../node_modules/@xmtp/agent-sdk/dist/index.js
-var import_node_crypto7 = require("node:crypto");
+var import_node_crypto8 = require("node:crypto");
 var version2 = "2.3.0";
 var fromSelf = (message, client) => {
   return message.senderInboxId === client.inboxId;
@@ -55755,7 +55773,7 @@ var Agent = class _Agent extends import_node_events.default {
     return this.#client.accountIdentifier?.identifier;
   }
 };
-var CANCEL_ACTION_ID = (0, import_node_crypto7.randomUUID)();
+var CANCEL_ACTION_ID = (0, import_node_crypto8.randomUUID)();
 var LimitedMap = class {
   #map = /* @__PURE__ */ new Map();
   #limit;
@@ -59132,7 +59150,7 @@ function buildSendEnvelope(params) {
 init_log();
 init_sentry_logger();
 init_log_fields();
-var import_node_crypto11 = require("node:crypto");
+var import_node_crypto12 = require("node:crypto");
 
 // ../core/src/a2a/concurrency.ts
 async function withSharedPromise(registry, key, fn) {
@@ -60580,17 +60598,17 @@ init_ai_provider();
 
 // src/agent-message-notice.ts
 init_log();
-var import_node_crypto10 = require("node:crypto");
+var import_node_crypto11 = require("node:crypto");
 init_session_store();
 init_ai_provider();
 
 // src/outbound-behavior.ts
 init_log();
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto10 = require("node:crypto");
 
 // src/openclaw-gateway.ts
 init_log();
-var import_node_crypto8 = require("node:crypto");
+var import_node_crypto9 = require("node:crypto");
 
 // ../core/src/openclaw-gateway-config.ts
 var import_node_fs17 = require("node:fs");
@@ -61083,7 +61101,7 @@ async function callDeleteSessions(params) {
   return await callOpenClawGateway({ method: "okx-a2a.delete_sessions", params });
 }
 async function callSessionsSend(params) {
-  const idempotencyKey = params.idempotencyKey ?? (0, import_node_crypto8.randomUUID)();
+  const idempotencyKey = params.idempotencyKey ?? (0, import_node_crypto9.randomUUID)();
   const sendParams = { key: params.key, message: params.message, idempotencyKey };
   try {
     return await callOpenClawGateway({ method: "sessions.send", params: sendParams });
@@ -61137,7 +61155,7 @@ async function sleep3(ms) {
 var MinimalGatewayClient = class {
   config;
   protocolVersion;
-  instanceId = (0, import_node_crypto8.randomUUID)();
+  instanceId = (0, import_node_crypto9.randomUUID)();
   pending = /* @__PURE__ */ new Map();
   ws = null;
   ready = false;
@@ -61225,7 +61243,7 @@ var MinimalGatewayClient = class {
       }));
     }
     const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const id = `okx-a2a-${++this.requestSeq}-${(0, import_node_crypto8.randomUUID)()}`;
+    const id = `okx-a2a-${++this.requestSeq}-${(0, import_node_crypto9.randomUUID)()}`;
     const frame = { type: "req", id, method, params };
     return new Promise((resolve11, reject) => {
       const timer = setTimeout(() => {
@@ -61351,7 +61369,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     client: {
       id: "gateway-client",
       displayName: "okx-a2a-node",
-      version: "0.2.11",
+      version: "0.2.12-beta-7449a77b9d-260909165309",
       platform: "node",
       mode: "backend",
       instanceId
@@ -61362,7 +61380,7 @@ function buildConnectParams(config, instanceId, protocolVersion) {
     commands: [],
     permissions: {},
     locale: Intl.DateTimeFormat().resolvedOptions().locale || "en-US",
-    userAgent: `okx-a2a-node/${"0.2.11"}`,
+    userAgent: `okx-a2a-node/${"0.2.12-beta-7449a77b9d-260909165309"}`,
     auth: {
       ...config.token ? { token: config.token } : {},
       ...config.password ? { password: config.password } : {}
@@ -61968,7 +61986,7 @@ function resolveSessionGateFallbackMs(env = process.env) {
   return DEFAULT_SESSION_GATE_FALLBACK_MS;
 }
 function resolveUserDeliveryId(input) {
-  return input.idempotencyKey?.trim() || (0, import_node_crypto9.randomUUID)();
+  return input.idempotencyKey?.trim() || (0, import_node_crypto10.randomUUID)();
 }
 var GATEWAY_RPC_TRANSPORT = "gateway_rpc";
 var USER_CHANNEL_TRANSPORT = "user_channel";
@@ -62881,7 +62899,7 @@ function buildSystemMessageIdempotencyKey(input) {
   return `system-message:${identity}`;
 }
 function stableHash2(value) {
-  return (0, import_node_crypto10.createHash)("sha256").update(value).digest("hex").slice(0, 24);
+  return (0, import_node_crypto11.createHash)("sha256").update(value).digest("hex").slice(0, 24);
 }
 
 // src/xmtp-send.ts
@@ -63425,7 +63443,7 @@ async function handleSqliteGroupSendCommand(params) {
     role: senderAgent?.role,
     sendDurationMs: Date.now() - sendStartMs
   });
-  const messageId = `outbound-${(0, import_node_crypto11.randomUUID)()}`;
+  const messageId = `outbound-${(0, import_node_crypto12.randomUUID)()}`;
   await notifyAgentMessageToUserAttention({
     direction: "outbound" /* OUTBOUND */,
     sender: {
@@ -63554,7 +63572,7 @@ async function handleGroupSendCommand(params) {
     sendDurationMs: Date.now() - sendStartMs
   });
   const now = Date.now();
-  const messageId = `outbound-${(0, import_node_crypto11.randomUUID)()}`;
+  const messageId = `outbound-${(0, import_node_crypto12.randomUUID)()}`;
   const stored = {
     id: messageId,
     direction: "outbound",
@@ -63773,7 +63791,7 @@ async function handleXmtpSendCommand(params) {
       sendDurationMs: Date.now() - sendStartMs
     });
     const now = Date.now();
-    const messageId = `outbound-${(0, import_node_crypto11.randomUUID)()}`;
+    const messageId = `outbound-${(0, import_node_crypto12.randomUUID)()}`;
     const stored = {
       id: messageId,
       direction: "outbound",
@@ -65435,7 +65453,7 @@ function trimForUser2(value) {
 
 // src/message-handler.ts
 init_log();
-var import_node_crypto12 = require("node:crypto");
+var import_node_crypto13 = require("node:crypto");
 init_sentry_logger();
 init_log_fields();
 init_paths();
@@ -65509,6 +65527,10 @@ function parseJson2(rawText) {
 function readString3(value) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
+var EXTERNAL_JOB_ID_PATTERN = /^0x[0-9a-fA-F]{64}$/;
+function isValidExternalJobId(value) {
+  return typeof value === "string" && EXTERNAL_JOB_ID_PATTERN.test(value);
+}
 function readNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : null;
 }
@@ -66437,7 +66459,7 @@ async function processFileMessage(ctx, deps, options = {}) {
   timing.mark("payloadParse", parseStartedAt);
   const directToUser = chatType === "dm" && parseResult.ok ? extractDirectToUserNotification(parseResult.data) : { kind: "none" };
   if (directToUser.kind === "invalid") {
-    const droppedMessageId = messageId || `direct-to-user-${(0, import_node_crypto12.randomUUID)()}`;
+    const droppedMessageId = messageId || `direct-to-user-${(0, import_node_crypto13.randomUUID)()}`;
     logger.error(
       LogEvent.INBOUND_DROP_DM_INVALID_PAYLOAD,
       new Error("Invalid direct-to-user system DM"),
@@ -66461,7 +66483,7 @@ async function processFileMessage(ctx, deps, options = {}) {
     await dispatchDirectToUserNotification({
       deps,
       notification: directToUser.notification,
-      messageId: messageId || `direct-to-user-${(0, import_node_crypto12.randomUUID)()}`,
+      messageId: messageId || `direct-to-user-${(0, import_node_crypto13.randomUUID)()}`,
       timing,
       source: options.source ?? "live"
     });
@@ -66469,7 +66491,7 @@ async function processFileMessage(ctx, deps, options = {}) {
   }
   const systemNotification = chatType === "dm" && parseResult.ok ? extractSystemNotification(parseResult.data) : null;
   if (systemNotification) {
-    const systemMessageId = messageId || `system-${(0, import_node_crypto12.randomUUID)()}`;
+    const systemMessageId = messageId || `system-${(0, import_node_crypto13.randomUUID)()}`;
     logWithTimestamp(
       `[okx-agent-task:${deps.myXmtpAddress}] xmtp_system_message_received agentId=${systemNotification.agentId ?? ""} msg=${shortenLogValue(systemMessageId)} event=${systemNotification.event ?? ""} job=${shortenLogValue(systemNotification.jobId)} conv=${conversationId} source=${options.source ?? "live"} rawBytes=${Buffer.byteLength(rawText, "utf8")} rawPreview=${previewRawEnvelope(rawText)}`
     );
@@ -66628,7 +66650,38 @@ async function processFileMessage(ctx, deps, options = {}) {
   const routeStartedAt = Date.now();
   const route = routeMessage(chatType, parseResult.ok, parseResult.data);
   timing.mark("routeResolve", routeStartedAt);
-  if (route.route === "job") {
+  if (route.route === "job" && parseResult.ok && isA2AEnvelope(parseResult.data) && !isValidExternalJobId(route.jobId)) {
+    const payloadObject = parseResult.data;
+    const sender = isPlainObject3(payloadObject.sender) ? payloadObject.sender : null;
+    logWithTimestamp(
+      `[okx-agent-task:${deps.myXmtpAddress}] inbound A2A message has invalid jobId, dropping: jobLength=${route.jobId.length} group=${conversationId}`
+    );
+    logger.info(LogEvent.INBOUND_DROP_INVALID_JOBID, timing.extras({
+      ...agentExtras({ walletAddress: deps.myXmtpAddress }),
+      peerWalletAddress: "",
+      peerInboxId: ctx.message.senderInboxId ?? "",
+      peerAgentId: readString3(sender?.agentId) ?? "",
+      conversationId,
+      messageId,
+      chatType,
+      ...inboundStageExtras("inbound/job_id_validation", "dropped"),
+      reason: "invalid_job_id_format"
+    }));
+    recordInvalidXmtpMessageBestEffort({
+      messageId,
+      groupId: conversationId,
+      jobId: null,
+      agentId: readString3(sender?.agentId),
+      localAgentId: XmtpService.getInstance().getAgentByAddress(deps.myXmtpAddress)?.agentId ?? null,
+      senderAddress: null,
+      senderInboxId: ctx.message.senderInboxId ?? "",
+      reason: "invalid_job_id_format",
+      stage: "inbound/job_id_validation",
+      logTag: `[okx-agent-task:${deps.myXmtpAddress}]`
+    });
+    return true;
+  }
+  if (route.route === "job" && chatType !== "group") {
     const providerBindStartedAt = Date.now();
     const providerGate = await bindMessageJobProviderToCurrentDefault(deps, route.jobId, "inbound-xmtp");
     timing.mark("providerBind", providerBindStartedAt);
@@ -66714,7 +66767,27 @@ async function processFileMessage(ctx, deps, options = {}) {
     if (!accepted) {
       return true;
     }
-    const routedMessageId = messageId || `group-${(0, import_node_crypto12.randomUUID)()}`;
+    const providerBindStartedAt = Date.now();
+    const providerGate = await bindMessageJobProviderToCurrentDefault(deps, route.jobId, "inbound-xmtp");
+    timing.mark("providerBind", providerBindStartedAt);
+    if (!providerGate.allowed) {
+      logger.info(LogEvent.INBOUND_IGNORED_NON_BUSINESS, timing.extras({
+        ...buildInboundTerminalExtras({
+          terminalState: "provider_gate_denied",
+          myXmtpAddress: deps.myXmtpAddress,
+          messageId,
+          conversationId,
+          chatType,
+          jobId: route.jobId,
+          route: route.route,
+          reason: "job_provider_gate_denied"
+        }),
+        routeReason: route.routeReason,
+        providerBinding: providerGate.provider ?? ""
+      }));
+      return true;
+    }
+    const routedMessageId = messageId || `group-${(0, import_node_crypto13.randomUUID)()}`;
     const sessionKey = ensureInboundGroupSession(deps, {
       jobId: route.jobId,
       myAgentId,
@@ -66780,7 +66853,7 @@ async function processFileMessage(ctx, deps, options = {}) {
     return true;
   }
   const stored = {
-    id: messageId || `local-${(0, import_node_crypto12.randomUUID)()}`,
+    id: messageId || `local-${(0, import_node_crypto13.randomUUID)()}`,
     direction: "inbound",
     route: route.route,
     routeReason: route.routeReason,
@@ -66961,7 +67034,7 @@ function processOfflineFromCoreDeps(store, ctx, deps, options) {
 function buildSystemStoredMessage(params) {
   const now = Date.now();
   return {
-    id: params.id ?? `system-${now}-${(0, import_node_crypto12.randomUUID)()}`,
+    id: params.id ?? `system-${now}-${(0, import_node_crypto13.randomUUID)()}`,
     direction: "system",
     route: "backup",
     routeReason: params.reason,
@@ -67123,7 +67196,7 @@ async function enqueueAiSessionMessageDispatch(params) {
 init_paths();
 
 // src/user-attention-watchers.ts
-var import_node_crypto13 = require("node:crypto");
+var import_node_crypto14 = require("node:crypto");
 init_sentry_logger();
 var USER_ATTENTION_WATCH_REPLACED_MESSAGE = "Another okx-a2a user watch with the same job scope was started, so this watcher has been closed. Do not run this watch command again automatically, because starting another watcher may interrupt a different session that is already monitoring task progress.";
 var USER_ATTENTION_WATCHER_SCAN_MS = 500;
@@ -67166,7 +67239,7 @@ function isOriginalParentProcessAlive(options) {
 }
 function registerUserAttentionWatcher(options) {
   return options.store.registerUserAttentionWatcher({
-    id: options.id ?? (0, import_node_crypto13.randomUUID)(),
+    id: options.id ?? (0, import_node_crypto14.randomUUID)(),
     provider: options.provider,
     jobId: options.jobId,
     nowMs: options.nowMs ?? Date.now(),
@@ -67729,12 +67802,12 @@ async function runListenerWithLock(options, paths) {
       });
     }
   });
-  service.setPluginVersion("0.2.11");
+  service.setPluginVersion("0.2.12-beta-7449a77b9d-260909165309");
   await service.init();
   const pluginVersionStatus = service.pluginVersionStatus;
   if (pluginVersionStatus.unavailable) {
     throw new Error(
-      `@okxweb3/a2a-node v${"0.2.11"} is below the required minimum v${pluginVersionStatus.minVersion}`
+      `@okxweb3/a2a-node v${"0.2.12-beta-7449a77b9d-260909165309"} is below the required minimum v${pluginVersionStatus.minVersion}`
     );
   }
   const systemConfig = service.getSystemConfig();
@@ -67762,7 +67835,7 @@ async function runListenerWithLock(options, paths) {
       onchainosAgentId: "*",
       reason: "system-config missing sentryDsn",
       pluginId: "@okxweb3/a2a-node",
-      pluginVersion: "0.2.11"
+      pluginVersion: "0.2.12-beta-7449a77b9d-260909165309"
     });
   }
   logWithTimestamp(
@@ -69138,6 +69211,11 @@ function getA2ACapabilities() {
       ok: true,
       fixCommands: [],
       message: ""
+    },
+    tradeRecordsV1: {
+      ok: true,
+      fixCommands: [],
+      message: ""
     }
   };
 }
@@ -69219,7 +69297,7 @@ var import_node_path34 = require("node:path");
 var import_jszip = __toESM(require_lib3());
 
 // src/logs-export-archive.ts
-var import_node_crypto14 = require("node:crypto");
+var import_node_crypto15 = require("node:crypto");
 var import_node_fs24 = require("node:fs");
 var import_promises13 = require("node:fs/promises");
 var import_node_path31 = require("node:path");
@@ -69855,7 +69933,7 @@ async function writeArchiveAtomically(outputPath, archive, overwrite) {
   await (0, import_promises13.mkdir)((0, import_node_path31.dirname)(outputPath), { recursive: true });
   const temporaryPath = (0, import_node_path31.join)(
     (0, import_node_path31.dirname)(outputPath),
-    `.${(0, import_node_path31.basename)(outputPath)}.${(0, import_node_crypto14.randomUUID)()}.tmp`
+    `.${(0, import_node_path31.basename)(outputPath)}.${(0, import_node_crypto15.randomUUID)()}.tmp`
   );
   try {
     await (0, import_promises13.writeFile)(temporaryPath, archive, { flag: "wx", mode: 384 });
@@ -69874,7 +69952,7 @@ async function writeArchiveAtomically(outputPath, archive, overwrite) {
   }
 }
 function hashDiagnosticFileContent(content) {
-  return (0, import_node_crypto14.createHash)("sha256").update(content).digest("hex");
+  return (0, import_node_crypto15.createHash)("sha256").update(content).digest("hex");
 }
 function isUnavailableError(err) {
   return !!err && typeof err === "object" && "diagnosticUnavailable" in err;
@@ -70134,7 +70212,7 @@ function isProvider2(value) {
 }
 
 // src/logs-export-utils.ts
-var import_node_crypto15 = require("node:crypto");
+var import_node_crypto16 = require("node:crypto");
 var import_node_fs26 = require("node:fs");
 var import_promises14 = require("node:fs/promises");
 var import_node_path33 = require("node:path");
@@ -70277,7 +70355,7 @@ async function assertRegularFile2(path2) {
 }
 async function inspectRegularFile(path2) {
   const file = await assertRegularFile2(path2);
-  const hash2 = (0, import_node_crypto15.createHash)("sha256");
+  const hash2 = (0, import_node_crypto16.createHash)("sha256");
   for await (const chunk of (0, import_node_fs26.createReadStream)(path2)) {
     hash2.update(chunk);
   }
@@ -70530,7 +70608,7 @@ async function exportDiagnosticLogs(options) {
     node: process.version,
     platform: process.platform,
     arch: process.arch,
-    packageVersion: true ? "0.2.11" : "unknown",
+    packageVersion: true ? "0.2.12-beta-7449a77b9d-260909165309" : "unknown",
     sensitiveContentIncluded: options.includeSensitiveContent,
     listenerAndLlmContentIncluded: true,
     credentialsAlwaysRedacted: true,
@@ -70749,9 +70827,11 @@ async function collectA2aLogs(state, paths, options, sessionKeys, correlationIds
       if (!name.endsWith(".log") || !name.startsWith("ai-") && !name.startsWith("ai-session-")) {
         continue;
       }
-      const matchesDirectJob = options.jobId ? name.startsWith(`ai-${encodeURIComponent(options.jobId)}-`) : true;
+      const matchesDirectJob = options.jobId ? name.startsWith(`ai-${encodeURIComponent(options.jobId)}-`) || name.startsWith(`ai-job-${hashAiRunLogIdentifier(options.jobId)}-`) : true;
       const matchesPersistedSession = sessionKeys.some(
-        (key) => name.startsWith(`ai-session-${encodeURIComponent(key)}-`)
+        (key) => name.startsWith(`ai-session-${encodeURIComponent(key)}-`) || new RegExp(
+          `^ai-session-job-[0-9a-f]{24}-${hashAiRunLogIdentifier(key)}-`
+        ).test(name)
       );
       const matchesJobSessionFilename = options.jobId ? matchesJobSessionLogFilename(name, options.jobId) : false;
       if (!matchesDirectJob && !matchesPersistedSession && !matchesJobSessionFilename) {
@@ -71364,7 +71444,7 @@ function matchesJobSessionLogFilename(name, jobId) {
   const encodedJobId = encodeURIComponent(jobId);
   const jobSessionPrefix = encodeURIComponent(`job:${encodedJobId}:`);
   const backupSessionKey = encodeURIComponent(`backup:${encodedJobId}`);
-  return name.startsWith(`ai-session-${jobSessionPrefix}`) || name.startsWith(`ai-session-${backupSessionKey}-`);
+  return name.startsWith(`ai-session-${jobSessionPrefix}`) || name.startsWith(`ai-session-${backupSessionKey}-`) || name.startsWith(`ai-session-job-${hashAiRunLogIdentifier(jobId)}-`);
 }
 function isOpenClawSessionLogName(name) {
   return name.endsWith(".jsonl") && name !== "sessions.json";
@@ -72412,7 +72492,7 @@ async function runDoctor(options = {}) {
     platform: options.platform ?? process.platform,
     env: options.env ?? process.env,
     target: options.target ?? resolveDoctorTarget(options.env ?? process.env),
-    cliVersion: options.cliVersion ?? (true ? "0.2.11" : "0.0.0"),
+    cliVersion: options.cliVersion ?? (true ? "0.2.12-beta-7449a77b9d-260909165309" : "0.0.0"),
     fixMode: options.fix === true,
     nonInteractive: options.nonInteractive === true,
     packageChanged: false,
@@ -72700,6 +72780,7 @@ init_autostart_windows();
   buildAgentMessageNotice,
   buildAiAdapterCommand,
   buildAiProviderEnv,
+  buildAiRunLogFileName,
   buildAutostartVbs,
   buildBackupJobSessionKey,
   buildCodexRecoveryGuidance,
@@ -72778,6 +72859,7 @@ init_autostart_windows();
   handleXmtpSendCommand,
   handleXmtpTestCommand,
   hasAiRuntimeMarker,
+  hashAiRunLogIdentifier,
   hashDiagnosticFileContent,
   heartbeatUserAttentionWatcher,
   hermesConfigEnablesOkxA2a,
@@ -72800,6 +72882,7 @@ init_autostart_windows();
   isSqliteBusyError,
   isSystemdManagerUnavailableMessage,
   isTagKey,
+  isValidExternalJobId,
   isWindowsElevated,
   killProcessTree,
   launchdPlistHasCurrentRestartPolicy,