agent-bridge-aun 1.0.25 → 1.0.27

package/dist/src-ts/plugins/aun/attachments.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AunDownloadUrlError = void 0;
 exports.parseAunAttachment = parseAunAttachment;
 exports.downloadAunAttachments = downloadAunAttachments;
 exports.downloadAunAttachment = downloadAunAttachment;
@@ -162,10 +163,20 @@ async function downloadAunAttachments(client, refs) {
     (0, attachments_1.validateAttachments)(result);
     return result;
 }
+class AunDownloadUrlError extends Error {
+    diagnostic;
+    constructor(url, reason) {
+        super("AUN 下载地址无效");
+        this.name = "AunDownloadUrlError";
+        this.diagnostic = { protocol: url.protocol, hostname: url.hostname, port: url.port, reason };
+    }
+}
+exports.AunDownloadUrlError = AunDownloadUrlError;
 function checkedDownloadUrl(url) {
     const storagePort = url.port === "9470" && /^storage\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i.test(url.hostname);
-    if (url.protocol !== "https:" || url.username || url.password || url.port && !storagePort || url.hash || !url.hostname.includes(".") || /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) || url.hostname.includes(":"))
-        throw new Error("AUN 下载地址无效");
+    const reason = url.protocol !== "https:" ? "协议" : url.username || url.password ? "凭据" : url.port && !storagePort ? "端口" : url.hash ? "片段" : !url.hostname.includes(".") ? "主机名" : /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) ? "本机地址" : url.hostname.includes(":") ? "主机名" : undefined;
+    if (reason)
+        throw new AunDownloadUrlError(url, reason);
     return url;
 }
 async function readDownloadTicket(value, expectedSize) {
@@ -226,9 +237,21 @@ async function uploadAunAttachments(client, ownerAid, peerAid, items) {
         const objectKey = `shared/${(0, node_crypto_1.randomUUID)()}/${filename.replace(/[^A-Za-z0-9._-]/g, "_")}`;
         const sha256 = digest(item.data);
         const ref = { ownerAid, bucket: "default", objectKey, filename, contentType: item.contentType.toLowerCase(), sizeBytes: item.data.byteLength, sha256 };
-        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType: item.contentType, public: true, overwrite: true });
+        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType: item.contentType, public: false, overwrite: false });
         checkedMetadata({ ...uploaded, size: uploaded.size ?? uploaded.size_bytes ?? item.data.byteLength }, ref);
-        result.push({ owner_aid: ownerAid, object_key: objectKey, filename, size_bytes: item.data.byteLength, sha256, content_type: item.contentType });
+        const share = await client.storage.lowlevel.createShareLink({ owner: ownerAid, bucket: "default", objectKey, allowedAids: [peerAid], expireInSeconds: 86400 });
+        if (share.owner_aid && share.owner_aid !== ownerAid || share.bucket && share.bucket !== "default" || share.object_key && share.object_key !== objectKey)
+            throw new Error("AUN 附件分享对象不一致");
+        if (share.allowed_aids !== undefined && (!Array.isArray(share.allowed_aids) || share.allowed_aids.length !== 1 || share.allowed_aids[0] !== peerAid))
+            throw new Error("AUN 附件分享授权不一致");
+        const shareId = typeof share.share_id === "string" && /^[A-Za-z0-9]{10}$/.test(share.share_id) ? share.share_id : undefined;
+        if (share.share_id !== undefined && !shareId)
+            throw new Error("AUN 附件分享标识无效");
+        const url = typeof share.path_url === "string" && share.path_url ? share.path_url : shareId ? `https://${ownerAid}/${objectKey}?t=${shareId}` : "";
+        const token = url ? pathToken(url, ownerAid, objectKey) : undefined;
+        if (!token || shareId && shareId !== token)
+            throw new Error("AUN 附件分享链接无效");
+        result.push({ owner_aid: ownerAid, bucket: "default", object_key: objectKey, url, filename, content_type: item.contentType, size_bytes: item.data.byteLength, sha256 });
     }
     return result;
 }

package/dist/src-ts/plugins/aun/index.js

@@ -11,7 +11,7 @@ const node_url_1 = require("node:url");
 const messages_1 = require("./messages");
 const attachments_1 = require("./attachments");
 const manifest = {
-    id: "aun", version: "1.0.25", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.27", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health", "cli"],
     configSchema: "config.schema.json",
@@ -783,7 +783,7 @@ class AunPlugin {
             }
         }
         catch (error) {
-            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error) });
+            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error), ...(error instanceof attachments_1.AunDownloadUrlError ? { downloadUrl: error.diagnostic } : {}) });
             try {
                 await this.sendText(aid, message.peerId, `附件接收失败：${safeError(error)}`, message.threadId);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bridge-aun",
-  "version": "1.0.25",
+  "version": "1.0.27",
   "description": "mu-agent-bridge 的 AUN 通道插件。",
   "keywords": [
     "mu-agent-bridge-plugin",

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "aun",
-  "version": "1.0.25",
+  "version": "1.0.27",
   "type": "channel",
   "displayName": "AUN 通道",
   "entry": "dist/src-ts/plugins/aun/index.js",