a2a-exposed 0.8.10 → 0.8.11

package/lib/commands.mjs

@@ -253,13 +253,24 @@ export function peers(sub, args, o) {
 	}
 }
 
+const ownerConfigured = () => !!(baseUrl() && C.get("A2A_OWNER_TOKEN"));
+
+// Outbound delivery works with just a peer token unless --push is requested.
+// Persistence failures must not hide successful delivery (and invite a duplicate send).
+async function persistOutbound(method, path, body, action) {
+	if (!ownerConfigured()) return false;
+	try { await owner(method, path, body); return true; }
+	catch { console.error(`warning: could not ${action} to the worker`); return false; }
+}
+
 async function logHistory(ctx, entry) {
-	try { await owner("POST", "/owner/history", { contextId: ctx, ...entry }); }
-	catch { console.error("warning: could not log history to the worker"); }
+	await persistOutbound("POST", "/owner/history", { contextId: ctx, ...entry }, "log history");
 }
 
 export async function send(o) {
 	if (!o.to) die("--to required");
+	// The callback authenticates against the token saved through the owner API.
+	if (o.push && !ownerConfigured()) die("--push needs A2A_BASE_URL and A2A_OWNER_TOKEN (your Worker); configure both or omit --push and poll instead");
 	const [alias, base, tok] = resolvePeer(o.to);
 	const card = await fetchCard(base);
 	const [url, version] = pickEndpoint(base, card, o.proto);
@@ -272,7 +283,6 @@ export async function send(o) {
 	const conf = v1 ? { returnImmediately: true } : { blocking: false };
 	let pushToken = null;
 	if (o.push) {
-		if (!baseUrl()) die("--push needs A2A_BASE_URL (your Worker)");
 		pushToken = randomToken(24);
 		conf[v1 ? "taskPushNotificationConfig" : "pushNotificationConfig"] = { url: baseUrl() + "/push", token: pushToken };
 	}
@@ -282,10 +292,13 @@ export async function send(o) {
 	const isTask = obj && typeof obj === "object" && "status" in obj;
 	const ctx = (obj && obj.contextId) || o.context || newId();
 	const tid = isTask ? obj.id : null;
+	out(obj);
 	await logHistory(ctx, { dir: "out", peer: alias, taskId: tid, role: "user", text, data: { messageId: msg.messageId, endpoint: url, protocol: version } });
-	if (tid) await owner("POST", "/owner/outbound", { taskId: tid, contextId: ctx, peer: alias, endpoint: url, protocol: version, pushToken, task: obj });
+	if (tid) {
+		const saved = await persistOutbound("POST", "/owner/outbound", { taskId: tid, contextId: ctx, peer: alias, endpoint: url, protocol: version, pushToken, task: obj }, "save outbound task");
+		if (o.push && !saved) console.error(`warning: push updates cannot authenticate because the outbound task token could not be saved; use ${CLI} poll --to ${alias} ${tid} instead; the message was delivered, do not resend`);
+	}
 	else if (obj && obj.parts) await logHistory(ctx, { dir: "in", peer: alias, role: "agent", event: "direct_message", text: textOf(obj) });
-	out(obj);
 	if (tid) console.error(`# task ${tid}: ${plainState(obj)}  (check: ${CLI} poll --to ${alias} ${tid})`);
 }
 
@@ -294,17 +307,19 @@ export async function poll(taskId, o) {
 	const [alias, base, tok] = resolvePeer(o.to);
 	const tid = checkId(taskId, "taskId");
 	let rec = {};
-	try { rec = await owner("GET", `/owner/outbound/${q(tid)}`); } catch { rec = {}; }
+	if (ownerConfigured()) {
+		try { rec = await owner("GET", `/owner/outbound/${q(tid)}`); } catch { rec = {}; }
+	}
 	const [url, version] = rec.endpoint ? [rec.endpoint, rec.protocol || "0.3"] : pickEndpoint(base, await fetchCard(base), o.proto);
 	const res = await rpc(url, version, tok, "tasks/get", "GetTask", { id: tid }, { alias: C.loadPeers()[alias] ? alias : null, base });
+	out(res);
 	if (rec.endpoint) {
-		await owner("PUT", `/owner/outbound/${q(tid)}`, { task: res });
+		await persistOutbound("PUT", `/owner/outbound/${q(tid)}`, { task: res }, "update outbound task");
 		let txt = textOf((res.status || {}).message || {});
 		const arts = (res.artifacts || []).map((x) => textOf(x)).join("\n");
 		if (arts && arts !== txt) txt = (txt ? txt + "\n" : "") + arts;
 		await logHistory(rec.contextId, { dir: "in", peer: alias, taskId: tid, event: "poll", state: plainState(res), text: txt });
 	}
-	out(res);
 	console.error(`# task ${tid}: ${plainState(res)}`);
 }
 

package/lib/main.mjs

@@ -228,6 +228,8 @@ Outbound (agents you call)
                           differs between the two, connect/send/poll/peers/status warn (values never shown)
   send --to <alias|url> [--text T | stdin] [--context C] [--task T] [--push] [--proto 0.3|1.0]
   poll --to <alias|url> <taskId> [--proto 0.3|1.0]
+                          send/poll need only peer config; owner history/task storage is optional.
+                          Storage failures warn on stderr; the peer response still prints and exits 0
   outbound <taskId>       stored state of a task you sent (incl. pushed updates)
 
 Owner

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "a2a-exposed",
-	"version": "0.8.10",
+	"version": "0.8.11",
 	"description": "Give any AI agent a public A2A (Agent2Agent) endpoint: a Cloudflare Worker, a wake webhook, or scheduled checks",
 	"type": "module",
 	"bin": {
@@ -15,7 +15,8 @@
 	],
 	"scripts": {
 		"prepack": "node scripts/sync-worker.mjs && node -e \"require('fs').copyFileSync('../LICENSE','LICENSE')\"",
-		"test": "node --test test/*.test.mjs"
+		"test": "node --test test/*.test.mjs",
+		"test:coverage": "node --experimental-test-coverage --test-coverage-include=lib/** --test-reporter=spec --test-reporter=lcov --test-reporter-destination=stdout --test-reporter-destination=../coverage/cli.lcov --test test/*.test.mjs"
 	},
 	"engines": {
 		"node": ">=22.18"

package/worker/deploy.env.example

@@ -16,7 +16,7 @@ A2A_AGENT_DESCRIPTION=An AI agent reachable over A2A. Replies asynchronously.
 WAKE_PRESET=generic
 # WAKE_AGENT_ID=main
 # WAKE_KEY_HEADER=authorization
-# WAKE_KEY_PREFIX=Bearer 
+# WAKE_KEY_PREFIX="Bearer "
 # WAKE_BODY_TEMPLATE={"text":"{{summary}}"}
 # Command shown in wake hints (CLI: --cli-command; default "npx -y a2a-exposed@latest"). For a source checkout:
 # WAKE_CLI_COMMAND=node /path/to/a2a-exposed/cli/bin/a2a-exposed.mjs

package/worker/package.json

@@ -9,6 +9,7 @@
 		"deploy": "cf deploy",
 		"pretest": "node scripts/stamp-version.mjs",
 		"test": "node --import ./test/register-hooks.mjs --test test/*.test.ts",
+		"test:coverage": "node scripts/stamp-version.mjs && node --import ./test/register-hooks.mjs --experimental-test-coverage --test-coverage-include=src/** --test-reporter=spec --test-reporter=lcov --test-reporter-destination=stdout --test-reporter-destination=../coverage/worker.lcov --test test/*.test.ts",
 		"typecheck": "cf workers types && tsc"
 	},
 	"engines": {
@@ -16,11 +17,11 @@
 	},
 	"devDependencies": {
 		"@cloudflare/vite-plugin": "beta",
-		"cf": "^1.0.0-beta.13",
-		"esbuild": "^0.28.1",
+		"cf": "^1.0.0-beta.18",
+		"esbuild": "^0.28.2",
 		"miniflare": "^5.20261006.0-alpha",
 		"typescript": "^7.0.2",
-		"vite": "^8.3.0"
+		"vite": "^8.3.4"
 	},
 	"dependencies": {
 		"tunnelfetch": "1.13.0"

package/worker/src/version.ts

@@ -1,2 +1,2 @@
 /** Inbox build. Keep this equal to `version` in cli/package.json. */
-export const VERSION = "0.8.10";
+export const VERSION = "0.8.11";

package/worker/test/owner-rpc.test.ts

@@ -111,4 +111,4 @@ test("a token-shaped claim is blanked and the rest of the list is returned", ()
 	assert.equal(JSON.stringify(listed).includes(token), false);
 	assert.equal(JSON.stringify(listed).includes("t=" + "c".repeat(16)), false);
 	assert.equal(JSON.stringify(listed).includes("user:secret"), false);
-});
+});

package/worker/tsconfig.json

@@ -19,4 +19,4 @@
 		"cloudflare.config.ts",
 		".cloudflare/types"
 	]
-}
+}