@agentunion/fastaun-browser 0.5.6 → 0.5.9

package/_packed_docs/sdk/README.md

@@ -10,8 +10,9 @@ AUN（Agent Union Network）定义 Agent 之间安全通信的标准接口，基
 - **三主体 SDK 模型**：`AIDStore` 管理 keystore，`AID` 是不可变身份值对象，`AUNClient` 管理连接与会话。
 - **Gateway 连接**：当前各语言 SDK 稳定支持 Gateway 接入；Peer / Relay 仍处于协议定义或未实现状态。
 - **默认 E2EE**：P2P 和 Group V2 消息默认加密；普通明文消息需要显式关闭加密。
-- **统一 RPC / 事件 / Notify**：业务方法通过 `client.call(method, params)` 调用，事件通过 `client.on(event, handler)` 订阅；在线轻量通知通过 `client.notify()` 发送，支持同域和跨域在线 federation，详见 `Notify通知方案.md`。
-- **Service Proxy**：Python SDK 提供 `ServiceProxyClient`，provider 会先向 Gateway 注册 `proxy.*` 控制面服务列表，再在每条 proxy-server 隧道认证后注册数据面服务列表。
+- **统一 RPC / 事件 / Notify**：业务方法通过 `client.call(method, params)` 调用，事件通过 `client.on(event, handler)` 订阅；在线轻量通知通过 `client.notify()` 发送，支持同域和跨域在线 federation，详见 `Notify通知方案.md`。
+- **当前 access token**：自行发起要求 AID Bearer 的 HTTP 数据面请求时，每次请求前使用 Python `get_access_token()`、TypeScript / JavaScript `getAccessToken()` 或 Go `GetAccessToken()` 读取后台刷新维护的缓存；不得长期复用 `authenticate()` 首次返回的字符串。
+- **Service Proxy**：Python SDK 提供 `ServiceProxyClient`，provider 会先向 Gateway 注册 `proxy.*` 控制面服务列表，再在每条 proxy-server 隧道认证后注册数据面服务列表。
 
 ---
 
@@ -106,9 +107,9 @@ Layer 1: 安全层   TLS + AUN E2EE
 | [01-快速开始](01-快速开始.md) | 安装、三主体模型、最小示例、多语言构造 |
 | [02-WebSocket协议](02-WebSocket协议.md) | 握手流程、消息格式、Capabilities、裸 WebSocket 示例 |
 | [03-核心概念](03-核心概念.md) | AID、AIDStore、AUNClient、九态状态机、E2EE |
-| [04-连接与认证](04-连接与认证.md) | 注册、加载、认证、连接、Python Push 自动登记、事件、agent.md |
+| [04-连接与认证](04-连接与认证.md) | 注册、加载、认证、当前 access token getter、连接、Python Push 自动登记、事件、agent.md |
 | [05-E2EE加密通信](05-E2EE加密通信.md) | E2EE 收发、ProtectedHeaders、密钥管理 |
-| [06-API手册](06-API手册.md) | AIDStore / AID / AUNClient / Python PushFacade / ServiceProxyClient / 事件 / RPC 索引 |
+| [06-API手册](06-API手册.md) | AIDStore / AID / AUNClient / 四 SDK access token getter / Python PushFacade / ServiceProxyClient / 事件 / RPC 索引 |
 | [07-错误处理](07-错误处理.md) | Result、异常层级、错误码、重试策略 |
 | [08-最佳实践](08-最佳实践.md) | 幂等连接、多 AID、资源清理、测试数据保护 |
 | [AUN Storage架构设计](<../aun-fs/AUN Storage架构设计.md>) | Storage SDK VFS、控制面/数据面分离、服务端分层、类 Linux 权限、mount/symlink 和关键时序 |
@@ -121,7 +122,7 @@ RPC 专项手册：
 |------|------|
 | [09-message-rpc-manual.md](09-message-rpc-manual.md) | P2P 消息、ack、thought |
 | [09-group-rpc-manual.md](09-group-rpc-manual.md) | 群组生命周期、成员、群消息、群 thought、Group FS |
-| [09-storage-rpc-manual.md](09-storage-rpc-manual.md) | 对象存储 + POSIX VFS（fs/卷/软链/ACL/token） |
+| [09-storage-rpc-manual.md](09-storage-rpc-manual.md) | 对象存储 + POSIX VFS（fs/卷/软链/ACL/token）+ 数据面 HTTP 下载与 Bearer/ticket 边界 |
 | [09-collab-rpc-manual.md](09-collab-rpc-manual.md) | 协作层：版本化文档、乐观锁、三方合并、目录快照 |
 | [09-meta-rpc-manual.md](09-meta-rpc-manual.md) | ping / status / trust_roots |
 | [09-stream-rpc-manual.md](09-stream-rpc-manual.md) | 流式数据传输 |

package/dist/agent-md-schema.d.ts

@@ -0,0 +1,14 @@
+export declare const AGENT_MD_MAX_SIGNATURE_BYTES = 2048;
+export declare function validateAgentMdDocument(content: string, opts?: {
+    expectedAid?: string;
+    maxPayloadBytes?: number;
+    requireSignature?: boolean;
+    now?: number;
+}): {
+    payload: string;
+    frontmatter: Record<string, unknown>;
+    signature: Record<string, string> | null;
+};
+export declare function verifyAgentMdUpload(content: string, certPem: string, expectedAid: string, now?: number): Promise<void>;
+export declare function validateAgentMdCertificate(certPem: string, expectedAid: string, timestamp: number, now?: number, requireCurrentValidity?: boolean): void;
+//# sourceMappingURL=agent-md-schema.d.ts.map

package/dist/agent-md-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-md-schema.d.ts","sourceRoot":"","sources":["../src/agent-md-schema.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAqBjD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO;;;;EA2B/J;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5H;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,EACZ,sBAAsB,UAAO,GAC5B,IAAI,CASN"}

package/dist/agent-md-schema.js

@@ -0,0 +1,103 @@
+import { ValidationError } from './errors.js';
+import { parseAgentMdTailSignature, parseCertMetadata, verifySignatureWithCert, certFingerprint, publicKeyMatchesFingerprint, isStrictBase64 } from './cert-utils.js';
+import { parseDocument } from 'yaml';
+const AID_RE = /^[A-Za-z0-9_][A-Za-z0-9_-]*(?:\.[A-Za-z0-9_][A-Za-z0-9_-]*)+$/;
+const SEMVER_RE = /^\d+\.\d+\.\d+$/;
+export const AGENT_MD_MAX_SIGNATURE_BYTES = 2048;
+function assertValidUtf8Text(content) {
+    const encoded = new TextEncoder().encode(content);
+    if (new TextDecoder('utf-8', { fatal: true }).decode(encoded) !== content) {
+        throw new ValidationError('agent.md must be valid UTF-8 text');
+    }
+}
+function frontmatter(payload) {
+    const lines = payload.replace(/^\ufeff/, '').split(/\r\n|\n|\r/);
+    if (lines[0]?.trim() !== '---')
+        throw new ValidationError('agent.md must start with YAML frontmatter');
+    const end = lines.slice(1).findIndex((line) => line.trim() === '---');
+    if (end < 0)
+        throw new ValidationError('agent.md frontmatter is not closed');
+    const doc = parseDocument(lines.slice(1, end + 1).join('\n'), { uniqueKeys: true });
+    if (doc.errors.length)
+        throw new ValidationError(`agent.md frontmatter is invalid: ${doc.errors[0].message}`);
+    const result = doc.toJS();
+    if (!result || typeof result !== 'object' || Array.isArray(result))
+        throw new ValidationError('agent.md frontmatter must be a mapping');
+    return result;
+}
+export function validateAgentMdDocument(content, opts = {}) {
+    if (!String(content ?? '').trim())
+        throw new ValidationError('agent.md content cannot be empty');
+    assertValidUtf8Text(String(content));
+    if ((String(content).match(/<!-- AUN-SIGNATURE/g) ?? []).length > 1)
+        throw new ValidationError('agent.md must contain exactly one signature block');
+    const parsed = parseAgentMdTailSignature(String(content));
+    if (parsed.parseError)
+        throw new ValidationError(parsed.parseError);
+    if (opts.requireSignature && !parsed.fields)
+        throw new ValidationError('agent.md signature is required');
+    if (new TextEncoder().encode(parsed.payload).byteLength > (opts.maxPayloadBytes ?? 4096))
+        throw new ValidationError('agent.md payload exceeds 4096 bytes');
+    if (parsed.fields && new TextEncoder().encode(String(content)).byteLength - new TextEncoder().encode(parsed.payload).byteLength > AGENT_MD_MAX_SIGNATURE_BYTES)
+        throw new ValidationError(`agent.md signature block exceeds ${AGENT_MD_MAX_SIGNATURE_BYTES} bytes`);
+    const meta = frontmatter(parsed.payload);
+    for (const key of ['aid', 'name', 'type', 'version', 'description'])
+        if (!(key in meta))
+            throw new ValidationError(`agent.md frontmatter missing ${key}`);
+    if (typeof meta.aid !== 'string' || !AID_RE.test(meta.aid))
+        throw new ValidationError('agent.md frontmatter aid has invalid format');
+    if (opts.expectedAid && meta.aid.toLowerCase() !== opts.expectedAid.trim().toLowerCase())
+        throw new ValidationError('agent.md frontmatter aid does not match local AID');
+    for (const key of ['name', 'type', 'description'])
+        if (typeof meta[key] !== 'string' || !String(meta[key]).trim())
+            throw new ValidationError(`agent.md frontmatter ${key} must be a non-empty string`);
+    if (typeof meta.version !== 'string' || !SEMVER_RE.test(meta.version))
+        throw new ValidationError('agent.md version must be SemVer MAJOR.MINOR.PATCH');
+    if (Array.from(String(meta.description)).length > 100)
+        throw new ValidationError('agent.md description exceeds 100 characters');
+    if (meta.tags !== undefined && (!Array.isArray(meta.tags) || meta.tags.some((item) => typeof item !== 'string')))
+        throw new ValidationError('agent.md tags must be an array of strings');
+    const fields = parsed.fields;
+    if (fields) {
+        if (Object.keys(fields).some((key) => !['cert_fingerprint', 'public_key_fingerprint', 'timestamp', 'signature'].includes(key)))
+            throw new ValidationError('agent.md signature contains unknown fields');
+        if (!/^sha256:[0-9a-f]{64}$/i.test(fields.cert_fingerprint))
+            throw new ValidationError('agent.md cert_fingerprint is invalid');
+        if (fields.public_key_fingerprint && !/^sha256:[0-9a-f]{64}$/i.test(fields.public_key_fingerprint))
+            throw new ValidationError('agent.md public_key_fingerprint is invalid');
+        if (!/^\d+$/.test(fields.timestamp) || !isStrictBase64(fields.signature))
+            throw new ValidationError('agent.md signature fields are invalid');
+        const now = Math.trunc(opts.now ?? Date.now() / 1000);
+        const ts = Number(fields.timestamp);
+        if (ts > now + 300)
+            throw new ValidationError('agent.md signature timestamp is too far in the future');
+    }
+    return { payload: parsed.payload, frontmatter: meta, signature: fields };
+}
+export async function verifyAgentMdUpload(content, certPem, expectedAid, now) {
+    const parsed = validateAgentMdDocument(content, { expectedAid, requireSignature: true, now });
+    const fields = parsed.signature;
+    validateAgentMdCertificate(certPem, expectedAid, Number(fields.timestamp), now);
+    const actualCertFingerprint = (await certFingerprint(certPem)).toLowerCase();
+    if (actualCertFingerprint !== fields.cert_fingerprint.trim().toLowerCase())
+        throw new ValidationError('agent.md certificate fingerprint mismatch');
+    if (fields.public_key_fingerprint && !(await publicKeyMatchesFingerprint(certPem, fields.public_key_fingerprint)))
+        throw new ValidationError('agent.md public key fingerprint mismatch');
+    if (!(await verifySignatureWithCert(certPem, fields.signature, new TextEncoder().encode(parsed.payload))))
+        throw new ValidationError('agent.md signature verification failed');
+}
+export function validateAgentMdCertificate(certPem, expectedAid, timestamp, now, requireCurrentValidity = true) {
+    const metadata = parseCertMetadata(certPem);
+    const notBefore = Math.trunc(metadata.notBefore.getTime() / 1000);
+    const notAfter = Math.trunc(metadata.notAfter.getTime() / 1000);
+    const current = Math.trunc(now ?? Date.now() / 1000);
+    if (![notBefore, notAfter, current, timestamp].every(Number.isFinite))
+        throw new ValidationError('agent.md signing certificate is invalid');
+    if (requireCurrentValidity && (current < notBefore || current > notAfter))
+        throw new ValidationError('agent.md signing certificate is expired or not yet valid');
+    if (metadata.subject.trim().toLowerCase() !== expectedAid.trim().toLowerCase())
+        throw new ValidationError('agent.md signing certificate subject does not match AID');
+    if (timestamp < notBefore || timestamp > notAfter)
+        throw new ValidationError('agent.md signature timestamp is outside certificate validity');
+}
+//# sourceMappingURL=agent-md-schema.js.map

package/dist/agent-md-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-md-schema.js","sourceRoot":"","sources":["../src/agent-md-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,eAAe,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtK,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,MAAM,GAAG,+DAA+D,CAAC;AAC/E,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;QAC1E,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC;IACtE,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,oCAAoC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACxI,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,OAAqG,EAAE;IAC9J,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;IACjG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IACpJ,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAAC,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/H,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IACzG,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;IAC3J,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,4BAA4B;QAAE,MAAM,IAAI,eAAe,CAAC,oCAAoC,4BAA4B,QAAQ,CAAC,CAAC;IACpQ,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IAC1J,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;IACrI,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IACzK,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC;QAAE,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,eAAe,CAAC,wBAAwB,GAAG,6BAA6B,CAAC,CAAC;IACvM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;IACtJ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;IAChI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACzL,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;QACxM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QAC/H,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;QAC5K,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,uCAAuC,CAAC,CAAC;QAC7I,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,EAAE,GAAG,GAAG,GAAG,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAe,EAAE,WAAmB,EAAE,GAAY;IAC3G,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAU,CAAC;IAChI,0BAA0B,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,qBAAqB,GAAG,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,IAAI,qBAAqB,KAAK,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACnJ,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAC;IACzL,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;AACjL,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,WAAmB,EACnB,SAAiB,EACjB,GAAY,EACZ,sBAAsB,GAAG,IAAI;IAE7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IAC5I,IAAI,sBAAsB,IAAI,CAAC,OAAO,GAAG,SAAS,IAAI,OAAO,GAAG,QAAQ,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,0DAA0D,CAAC,CAAC;IACjK,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAC;IACrK,IAAI,SAAS,GAAG,SAAS,IAAI,SAAS,GAAG,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,8DAA8D,CAAC,CAAC;AAC/I,CAAC"}

package/dist/agent-md.d.ts

@@ -2,6 +2,11 @@ import { AID } from './aid.js';
 import type { TokenStore } from './keystore/index.js';
 import type { ModuleLogger } from './logger.js';
 import { type JsonObject } from './types.js';
+export declare function buildDefaultAgentMd(aid: string, options?: {
+    type?: string;
+    name?: string;
+    description?: string;
+}): string;
 export type AgentMdVerification = {
     status: string;
     reason?: string;
@@ -38,6 +43,7 @@ export interface AgentMdManagerOptions {
     aunPath: string;
     tokenStore?: TokenStore;
     logger?: ModuleLogger | null;
+    uploadViaGatewayHost?: boolean;
     ownerAidGetter?: () => string | null | undefined;
     currentAidGetter?: () => AID | null | undefined;
     gatewayResolver?: (aid: string) => Promise<string> | string;
@@ -48,6 +54,7 @@ export interface AgentMdManagerOptions {
 export declare class AgentMdManager {
     private _aunPath;
     private _agentMdPath;
+    private _uploadViaGatewayHost;
     private _tokenStore?;
     private _log;
     private _ownerAidGetter?;

package/dist/agent-md.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-md.d.ts","sourceRoot":"","sources":["../src/agent-md.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAG/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAY3D,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAkBF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpF,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA6BD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,eAAe,CAAC,CAAkC;IAC1D,OAAO,CAAC,iBAAiB,CAAC,CAA+B;IACzD,OAAO,CAAC,gBAAgB,CAAC,CAA4C;IACrE,OAAO,CAAC,aAAa,CAAC,CAAuE;IAC7F,OAAO,CAAC,oBAAoB,CAAC,CAAgE;IAC7F,OAAO,CAAC,aAAa,CAAC,CAAwB;IAC9C,OAAO,CAAC,MAAM,CAAmD;IACjE,OAAO,CAAC,cAAc,CAAkC;IACxD,OAAO,CAAC,cAAc,CAA0B;IAChD,OAAO,CAAC,cAAc,CAAyC;IAC/D,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,kBAAkB,CAAK;gBAEnB,IAAI,EAAE,qBAAqB;IAavC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAU/B,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IA8CjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,SAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAoDlG,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,SAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+DpE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,SAAK,EAAE,YAAY,SAAK,EAAE,MAAM,SAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBlF,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzE,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCjD,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IA4B/F,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKhD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAgChE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;WAkCnF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM1D,OAAO,CAAC,MAAM,CAAC,cAAc;IAO7B,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAQhC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;YAIL,eAAe;YAIf,YAAY;YAaZ,YAAY;IAM1B,OAAO,CAAC,IAAI;YAIE,WAAW;YAuBX,aAAa;YA+Cb,KAAK;YAkCL,YAAY;YAeZ,aAAa;YAgBb,SAAS;IAavB,OAAO,CAAC,gBAAgB;YAaV,oBAAoB;YASpB,mBAAmB;YAWnB,gBAAgB;YAShB,uBAAuB;CAkBtC"}
+{"version":3,"file":"agent-md.d.ts","sourceRoot":"","sources":["../src/agent-md.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAI/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAI3D,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACnE,MAAM,CAkBR;AAgJD,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAkBF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpF,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAqED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,qBAAqB,CAAU;IACvC,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,eAAe,CAAC,CAAkC;IAC1D,OAAO,CAAC,iBAAiB,CAAC,CAA+B;IACzD,OAAO,CAAC,gBAAgB,CAAC,CAA4C;IACrE,OAAO,CAAC,aAAa,CAAC,CAAuE;IAC7F,OAAO,CAAC,oBAAoB,CAAC,CAAgE;IAC7F,OAAO,CAAC,aAAa,CAAC,CAAwB;IAC9C,OAAO,CAAC,MAAM,CAAmD;IACjE,OAAO,CAAC,cAAc,CAAkC;IACxD,OAAO,CAAC,cAAc,CAA0B;IAChD,OAAO,CAAC,cAAc,CAAyC;IAC/D,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,kBAAkB,CAAK;gBAEnB,IAAI,EAAE,qBAAqB;IAcvC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAU/B,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAiDjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,SAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAoDlG,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,SAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+DpE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,SAAK,EAAE,YAAY,SAAK,EAAE,MAAM,SAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBlF,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzE,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCjD,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IA4B/F,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKhD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAgChE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;WAkCnF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM1D,OAAO,CAAC,MAAM,CAAC,cAAc;IAO7B,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAQhC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;YAIL,eAAe;YAIf,YAAY;YAaZ,YAAY;IAM1B,OAAO,CAAC,IAAI;YAIE,WAAW;YAqDX,aAAa;YA+Cb,KAAK;YAkCL,YAAY;YAeZ,aAAa;YAgBb,SAAS;IAavB,OAAO,CAAC,gBAAgB;YAaV,oBAAoB;YASpB,mBAAmB;YAWnB,gBAAgB;YAShB,uBAAuB;CAkBtC"}

package/dist/agent-md.js

@@ -1,8 +1,28 @@
 import { AID } from './aid.js';
 import { certMatchesFingerprint, parseAgentMdTailSignature } from './cert-utils.js';
+import { validateAgentMdDocument, verifyAgentMdUpload } from './agent-md-schema.js';
 import { AUNError, ClientSignatureError, NotFoundError, StateError, ValidationError } from './errors.js';
 import { isJsonObject } from './types.js';
 const DEFAULT_HTTP_TIMEOUT_MS = 30_000;
+export function buildDefaultAgentMd(aid, options = {}) {
+    const target = String(aid ?? '').trim();
+    const type = String(options.type ?? 'agent').trim() || 'agent';
+    const name = String(options.name ?? '').trim() || target.split('.', 1)[0] || target;
+    const normalized = String(options.description ?? '').trim().replace(/\s+/g, ' ') || `AUN ${type} ${name}`;
+    const description = Array.from(normalized).slice(0, 100).join('');
+    return [
+        '---',
+        `aid: ${JSON.stringify(target)}`,
+        `name: ${JSON.stringify(name)}`,
+        `type: ${JSON.stringify(type)}`,
+        'version: "1.0.0"',
+        `description: ${JSON.stringify(description)}`,
+        '---',
+        '',
+        `# ${name}`,
+        '',
+    ].join('\n');
+}
 const HEAD_HTTP_TIMEOUT_MS = 15_000;
 const noopLogger = {
     error: () => { },
@@ -10,7 +30,127 @@ const noopLogger = {
     info: () => { },
     debug: () => { },
 };
+function nodeBuiltin(name) {
+    const processLike = globalThis.process;
+    if (typeof processLike?.getBuiltinModule !== 'function')
+        return null;
+    try {
+        return processLike.getBuiltinModule(name);
+    }
+    catch {
+        return null;
+    }
+}
+function requestHeaders(init) {
+    const out = {};
+    try {
+        new Headers(init.headers).forEach((value, key) => {
+            out[key] = value;
+        });
+    }
+    catch {
+        return out;
+    }
+    return out;
+}
+function requestWithNodeHost(input, init, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        let parsed;
+        try {
+            parsed = new URL(input);
+        }
+        catch (error) {
+            reject(error);
+            return;
+        }
+        const module = parsed.protocol === 'https:'
+            ? nodeBuiltin('node:https')
+            : nodeBuiltin('node:http');
+        if (!module) {
+            reject(new Error('Node HTTP module is unavailable'));
+            return;
+        }
+        const headers = requestHeaders(init);
+        const options = {
+            method: init.method ?? 'GET',
+            headers,
+            timeout: timeoutMs,
+        };
+        if (parsed.protocol === 'https:') {
+            options.rejectUnauthorized = runtimeEnv('NODE_TLS_REJECT_UNAUTHORIZED') !== '0';
+        }
+        let settled = false;
+        let request = null;
+        const onAbort = () => {
+            request?.destroy(new Error('agent.md request aborted'));
+            finish(() => reject(new AUNError('agent.md request aborted')));
+        };
+        const finish = (callback) => {
+            if (settled)
+                return;
+            settled = true;
+            if (init.signal)
+                init.signal.removeEventListener('abort', onAbort);
+            callback();
+        };
+        if (init.signal?.aborted) {
+            onAbort();
+            return;
+        }
+        try {
+            request = module.request(input, options, (response) => {
+                const chunks = [];
+                response.on('data', (chunk) => {
+                    if (chunk instanceof Uint8Array)
+                        chunks.push(chunk);
+                    else
+                        chunks.push(new TextEncoder().encode(String(chunk ?? '')));
+                });
+                response.on('error', (error) => {
+                    finish(() => reject(error instanceof Error ? error : new Error(String(error))));
+                });
+                response.on('end', () => {
+                    const total = chunks.reduce((size, chunk) => size + chunk.byteLength, 0);
+                    const body = new Uint8Array(total);
+                    let offset = 0;
+                    for (const chunk of chunks) {
+                        body.set(chunk, offset);
+                        offset += chunk.byteLength;
+                    }
+                    const responseHeaders = {};
+                    for (const [key, value] of Object.entries(response.headers)) {
+                        if (typeof value === 'string')
+                            responseHeaders[key] = value;
+                        else if (Array.isArray(value))
+                            responseHeaders[key] = value[0] ?? '';
+                    }
+                    finish(() => resolve(new Response(body, {
+                        status: response.statusCode ?? 500,
+                        headers: responseHeaders,
+                    })));
+                });
+            });
+            request.on('error', (error) => {
+                finish(() => reject(error instanceof Error ? error : new Error(String(error))));
+            });
+            request.setTimeout(timeoutMs, () => {
+                request?.destroy();
+                finish(() => reject(new AUNError(`agent.md request timed out after ${timeoutMs}ms`)));
+            });
+            init.signal?.addEventListener('abort', onAbort, { once: true });
+            if (typeof init.body === 'string')
+                request.write(init.body);
+            request.end();
+        }
+        catch (error) {
+            finish(() => reject(error));
+        }
+    });
+}
 async function fetchWithTimeout(input, init, timeoutMs = DEFAULT_HTTP_TIMEOUT_MS) {
+    if (new Headers(init.headers).has('host')) {
+        return await requestWithNodeHost(input, init, timeoutMs);
+    }
     const controller = new AbortController();
     const timer = globalThis.setTimeout(() => controller.abort(), timeoutMs);
     try {
@@ -32,12 +172,54 @@ function headerValue(headers, name) {
 function agentMdHttpScheme(gatewayUrl) {
     return String(gatewayUrl ?? '').trim().toLowerCase().startsWith('ws://') ? 'http' : 'https';
 }
+function runtimeEnv(name) {
+    const processLike = globalThis.process;
+    return String(processLike?.env?.[name] ?? '').trim();
+}
+function nameServiceAgentMdUrl(aid, gatewayUrl) {
+    const configuredBase = runtimeEnv('AUN_NAMESERVICE_URL') || runtimeEnv('KITE_NAMESERVICE_URL');
+    if (configuredBase) {
+        try {
+            const parsed = new URL(configuredBase);
+            if (parsed.protocol && parsed.host) {
+                parsed.pathname = `${parsed.pathname.replace(/\/+$/g, '')}/agent.md`;
+                parsed.search = '';
+                parsed.hash = '';
+                return parsed.toString();
+            }
+        }
+        catch {
+            // 无效配置时回退到按 issuer 推导的 NameService 公网地址。
+        }
+    }
+    const target = String(aid ?? '').trim().toLowerCase();
+    const gatewayHost = (() => {
+        try {
+            return new URL(String(gatewayUrl ?? '').trim()).hostname.toLowerCase();
+        }
+        catch {
+            return '';
+        }
+    })();
+    const configuredIssuer = runtimeEnv('AUN_ISSUER_DOMAIN').toLowerCase();
+    const issuer = configuredIssuer
+        || (gatewayHost.startsWith('gateway.') ? gatewayHost.slice('gateway.'.length) : '')
+        || (target.includes('.') ? target.slice(target.indexOf('.') + 1) : '');
+    const host = runtimeEnv('AUN_SERVICE_PUBLIC_HOST_NAMESERVICE') || issuer;
+    if (!host)
+        return '';
+    const scheme = runtimeEnv('AUN_SERVICE_SCHEME_NAMESERVICE') || agentMdHttpScheme(gatewayUrl);
+    const port = runtimeEnv('AUN_SERVICE_PUBLIC_PORT_NAMESERVICE');
+    const hostWithPort = port && !host.includes(':') && !host.endsWith(`:${port}`) ? `${host}:${port}` : host;
+    return `${scheme}://${hostWithPort}/agent.md`;
+}
 function isRecord(value) {
     return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
 export class AgentMdManager {
     _aunPath;
     _agentMdPath;
+    _uploadViaGatewayHost;
     _tokenStore;
     _log;
     _ownerAidGetter;
@@ -55,6 +237,7 @@ export class AgentMdManager {
     constructor(opts) {
         this._aunPath = String(opts.aunPath ?? '');
         this._agentMdPath = this._defaultRoot();
+        this._uploadViaGatewayHost = opts.uploadViaGatewayHost ?? false;
         this._tokenStore = opts.tokenStore;
         this._log = opts.logger ?? noopLogger;
         this._ownerAidGetter = opts.ownerAidGetter;
@@ -93,6 +276,7 @@ export class AgentMdManager {
             const text = String(content ?? '');
             if (text.length === 0)
                 throw new ValidationError('uploadAgentMd requires non-empty content');
+            validateAgentMdDocument(text, { expectedAid: target });
             await this.saveRecord(target, {
                 content: text,
                 local_etag: await AgentMdManager.contentEtag(text),
@@ -103,11 +287,13 @@ export class AgentMdManager {
         if (localContent === null || localContent.length === 0) {
             throw new ValidationError('uploadAgentMd requires local agent.md content');
         }
+        validateAgentMdDocument(localContent, { expectedAid: target });
         const signedResult = await current.signAgentMd(localContent);
         if (!signedResult.ok) {
             throw new ClientSignatureError(signedResult.error.message || 'agent.md signing failed');
         }
         const signed = signedResult.data.signed;
+        await verifyAgentMdUpload(signed, current.certPem, target);
         const result = await this._uploadHttp(target, signed);
         const localEtag = await AgentMdManager.contentEtag(signed);
         const remoteEtag = String(result.etag ?? '').trim();
@@ -155,7 +341,7 @@ export class AgentMdManager {
             last_error: '',
         });
         let inSync = null;
-        if (target === this._ownerAid()) {
+        if (target.toLowerCase() === this._ownerAid().toLowerCase()) {
             const remote = contentResult.etag || String(saved.remote_etag ?? '');
             inSync = localEtag && remote ? localEtag === remote : false;
         }
@@ -480,7 +666,7 @@ export class AgentMdManager {
     async _resolvePeer(aid, certFingerprint) {
         const expectedFp = String(certFingerprint ?? '').trim().toLowerCase();
         const current = this._currentAid();
-        if (current?.aid === aid) {
+        if (current && current.aid.toLowerCase() === aid.toLowerCase()) {
             if (!expectedFp || await certMatchesFingerprint(current.certPem, expectedFp))
                 return current;
         }
@@ -502,14 +688,48 @@ export class AgentMdManager {
     async _uploadHttp(aid, content) {
         const gatewayUrl = await this._resolveGateway(aid);
         const token = await this._accessToken(aid, gatewayUrl);
-        const response = await fetchWithTimeout(this._url(aid, gatewayUrl), {
-            method: 'PUT',
-            headers: {
-                Authorization: `Bearer ${token}`,
-                'Content-Type': 'text/markdown; charset=utf-8',
-            },
-            body: content,
-        });
+        // 浏览器禁止覆盖 Host；动态 AID URL 由浏览器/Docker 的通配解析路由。
+        const viaGatewayHost = this._uploadViaGatewayHost && nodeBuiltin('node:http') !== null;
+        const headers = {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'text/markdown; charset=utf-8',
+            ...(viaGatewayHost ? { Host: this._safeAid(aid) } : {}),
+        };
+        let url = this._url(aid, gatewayUrl);
+        if (viaGatewayHost) {
+            try {
+                const parsedGateway = new URL(String(gatewayUrl ?? '').trim());
+                const gatewayHost = parsedGateway.hostname;
+                const gatewayPort = parsedGateway.port;
+                if (gatewayHost) {
+                    const host = gatewayPort && gatewayPort !== '443' && gatewayPort !== '20001'
+                        ? `${gatewayHost}:${gatewayPort}`
+                        : gatewayHost;
+                    url = `${agentMdHttpScheme(gatewayUrl)}://${host}/agent.md`;
+                }
+            }
+            catch {
+                // 无效 Gateway 地址时保留目标 AID URL。
+            }
+        }
+        let response;
+        try {
+            response = await fetchWithTimeout(url, { method: 'PUT', headers, body: content });
+        }
+        catch (error) {
+            if (!viaGatewayHost)
+                throw error;
+            const fallbackUrl = nameServiceAgentMdUrl(aid, gatewayUrl);
+            if (!fallbackUrl || fallbackUrl === url)
+                throw error;
+            response = await fetchWithTimeout(fallbackUrl, { method: 'PUT', headers, body: content });
+        }
+        if (response.status === 404 && viaGatewayHost) {
+            const fallbackUrl = nameServiceAgentMdUrl(aid, gatewayUrl);
+            if (fallbackUrl && fallbackUrl !== url) {
+                response = await fetchWithTimeout(fallbackUrl, { method: 'PUT', headers, body: content });
+            }
+        }
         if (response.status === 404) {
             throw new NotFoundError(`agent.md endpoint not found for aid: ${aid}`);
         }