agent-bridge-aun 1.0.40 → 1.0.44

package/dist/src-ts/plugins/aun/messages.js

@@ -10,7 +10,7 @@ function normalizeAunMessage(payload, selfAid, allowFrom) {
     const data = payload;
     const peerId = typeof data.from === "string" ? data.from.trim() : "";
     const rules = (allowFrom ?? "").split(",").map((value) => value.trim()).filter(Boolean);
-    if (!peerId || peerId === selfAid || (rules.length > 0 && !rules.includes(peerId)))
+    if (!peerId || peerId === selfAid || (rules.length > 0 && !rules.includes("*") && !rules.includes(peerId)))
         return undefined;
     const body = data.payload && typeof data.payload === "object" ? data.payload : {};
     // 对端的系统事件只作通知，转为任务回复会导致两个 Agent 循环互答。

package/dist/src-ts/plugins/aun/public/app.js

@@ -4,6 +4,12 @@
   const list = find("#identities");
   const createForm = find("#create-form");
   const configForm = find("#config-form");
+  const abilityList = find("#abilities");
+  const pendingList = find("#ability-pending");
+  const abilityRows = new Map();
+  let pendingSnapshot;
+  let pendingRows = [];
+  let confirming = false;
   let agents = [];
   let loading = false;
 
@@ -29,7 +35,8 @@
       agents = (plugins.plugins || []).filter((plugin) => plugin.type === "agent");
       if (refreshForm) createForm.elements.ownerAid.value = config.owner_aid || "";
       if (refreshForm) {
-        for (const key of ["allow_from", "aun_path"]) configForm.elements[key].value = config[key] || "";
+        configForm.elements.allow_from.value = config.allow_from?.split(",").some(value => value.trim() === "*") ? "" : config.allow_from || "";
+        configForm.elements.aun_path.value = config.aun_path || "";
         configForm.elements.encryption_seed.value = "";
       }
       list.replaceChildren();
@@ -52,10 +59,129 @@
           cell.append(select); row.append(cell); list.append(row);
       }
       if (!list.children.length) { const row = document.createElement("tr"); const cell = document.createElement("td"); cell.colSpan = 4; cell.textContent = "暂无已连接 AID"; row.append(cell); list.append(row); }
+      await loadAbilities(refreshForm);
+      await loadPending();
       show(`${entries.length} 个已连接 AID`);
     } catch (error) { show(String(error), true); }
     finally { loading = false; }
   }
+  function emptyRow(list, columns, message) {
+    const row = document.createElement("tr"); const cell = document.createElement("td"); cell.colSpan = columns; cell.textContent = message; row.append(cell); list.replaceChildren(row);
+  }
+  function ownerVerified(aid) {
+    const state = abilityRows.get(aid);
+    return Boolean(state?.item.ownerVerified && !state.challengeBusy && state.owner.value.trim() === state.item.ownerAid);
+  }
+  async function loadAbilities(refresh = true) {
+    const { abilities } = await request("/api/plugins/aun/abilities");
+    if (refresh) abilityRows.clear();
+    for (const [aid, item] of Object.entries(abilities || {})) {
+      const existing = abilityRows.get(aid);
+      if (existing) { existing.item = item; existing.sync(); continue; }
+      const row = document.createElement("tr");
+      for (const value of [aid, `${item.agent} / ${item.pluginVersion || "版本未知"}`]) { const cell = document.createElement("td"); cell.textContent = value; row.append(cell); }
+      const ownerCell = document.createElement("td"); ownerCell.className = "ability-owner";
+      const owner = document.createElement("input"); owner.type = "text"; owner.value = item.ownerAid || ""; owner.placeholder = "明确指定 Owner AID"; owner.setAttribute("aria-label", `${aid} 宿主委托 Owner AID`);
+      const challenge = document.createElement("button"); challenge.type = "button"; challenge.textContent = "发送 Owner 验证";
+      const proof = document.createElement("p"); proof.setAttribute("role", "status");
+      ownerCell.append(owner, challenge, proof); row.append(ownerCell);
+      const choices = document.createElement("td");
+      choices.className = "ability-options";
+      for (const definition of item.definitions || []) {
+        const label = document.createElement("label"); const input = document.createElement("input"); input.type = "checkbox"; input.value = definition.path; input.checked = (item.selected || []).includes(definition.path);
+        label.append(input, document.createTextNode(`${definition.name}（${definition.path}）`)); label.title = definition.summary; choices.append(label);
+      }
+      if (!choices.children.length) choices.textContent = "关联插件未就绪或没有声明能力";
+      if (item.reason) { const reason = document.createElement("p"); reason.textContent = item.reason; choices.append(reason); }
+      const actions = document.createElement("td");
+      const save = document.createElement("button"); save.type = "button"; save.textContent = "保存发布";
+      const revoke = document.createElement("button"); revoke.type = "button"; revoke.textContent = "撤销发布";
+      const state = { row, owner, item, busy: false, challengeBusy: false, challengeExpiresAt: 0, sync: () => {
+        const verified = ownerVerified(aid);
+        save.disabled = state.busy || !state.item.publishAvailable || !verified;
+        save.title = verified ? state.item.reason || "保存当前选择的能力" : "请先验证当前管理会话的宿主委托 Owner";
+        revoke.disabled = state.busy || !state.item.published;
+        challenge.disabled = state.challengeBusy || !owner.value.trim();
+        proof.textContent = verified ? "当前管理会话的 Owner 已验证；每次调用仍须单独批准。" : state.challengeExpiresAt > Date.now() && owner.value.trim() === state.item.ownerAid ? `等待指定 Owner 通过 AUN 回复验证指令；验证截止：${new Date(state.challengeExpiresAt).toLocaleString()}` : "当前 Owner 未验证，请发送验证。";
+      } };
+      abilityRows.set(aid, state);
+      owner.oninput = () => { state.sync(); for (const pending of pendingRows) pending.sync(); };
+      challenge.onclick = async () => {
+        if (state.challengeBusy || !owner.value.trim()) return;
+        const ownerAid = owner.value.trim();
+        state.challengeBusy = true;
+        state.item = { ...state.item, ownerVerified: false, publishAvailable: false };
+        state.sync(); for (const pending of pendingRows) pending.sync();
+        try {
+          const result = await request("/api/plugins/aun/abilities/owner-challenge", "POST", { aid, ownerAid });
+          state.item = { ...state.item, ownerAid, ownerVerified: false, publishAvailable: false };
+          state.challengeExpiresAt = result.expiresAt;
+          notify("Owner 验证已发送", `验证指令已通过 AUN 发送给 ${ownerAid}。请该 Owner 在 AUN 中回复收到的 /ability-owner 指令；仅验证当前管理会话，不会执行能力。`);
+        } catch (error) { notify("Owner 验证发送失败", errorMessage(error), true); }
+        finally { state.challengeBusy = false; state.sync(); for (const pending of pendingRows) pending.sync(); }
+      };
+      const publish = async (paths) => {
+        if (state.busy) return;
+        if (paths.length && (!ownerVerified(aid) || !state.item.publishAvailable)) { notify("能力发布失败", "请先验证当前管理会话的宿主委托 Owner", true); return; }
+        state.busy = true; state.sync();
+        try { await request("/api/plugins/aun/abilities/publish", "POST", { aid, paths }); await loadAbilities(); notify("能力发布结果", paths.length ? `${aid} 已更新能力索引` : `${aid} 已撤销本通道发布的能力`); }
+        catch (error) { notify("能力发布失败", errorMessage(error), true); }
+        finally { state.busy = false; state.sync(); }
+      };
+      save.onclick = () => void publish([...choices.querySelectorAll("input:checked")].map(input => input.value));
+      revoke.onclick = () => void publish([]);
+      actions.append(save, revoke); row.append(choices, actions); state.sync();
+    }
+    for (const aid of abilityRows.keys()) if (!Object.hasOwn(abilities || {}, aid)) abilityRows.delete(aid);
+    const rows = [...abilityRows.values()].map(state => state.row);
+    if (refresh || rows.length !== abilityList.children.length || rows.some((row, index) => row !== abilityList.children[index])) abilityList.replaceChildren(...rows);
+    if (!abilityList.children.length) emptyRow(abilityList, 5, "暂无关联 Agent 的 AID");
+    for (const pending of pendingRows) pending.sync();
+  }
+  async function loadPending(force = false) {
+    const interacting = () => confirming || (!force && document.activeElement && pendingList.contains(document.activeElement));
+    if (interacting()) return;
+    const { operations = [] } = await request("/api/plugins/aun/abilities/pending");
+    if (interacting()) return;
+    const snapshot = JSON.stringify(operations);
+    if (snapshot === pendingSnapshot) { for (const pending of pendingRows) pending.sync(); return; }
+    pendingSnapshot = snapshot; pendingRows = []; pendingList.replaceChildren();
+    for (const entry of operations) {
+      const row = document.createElement("tr");
+      const cell = (text, pre = false) => { const td = document.createElement("td"); const content = pre ? document.createElement("pre") : td; content.textContent = text; if (pre) td.append(content); row.append(td); return td; };
+      cell(entry.providerAid); cell(entry.authenticatedCaller);
+      cell(`operation_id: ${entry.operationId}\nkey: ${entry.key}\nconfirmationFingerprint: ${entry.confirmationFingerprint}`, true);
+      cell(`path: ${entry.path}\ndefinition_id: ${entry.definitionId}`, true);
+      cell(JSON.stringify(entry.params, null, 2), true);
+      const details = cell(""); const contract = document.createElement("pre"); contract.textContent = `effects: ${JSON.stringify(entry.effects)}\n执行目标: ${JSON.stringify(entry.executionTarget, null, 2)}\n过期时间: ${new Date(entry.expiresAt).toLocaleString()} (${entry.expiresAt})\n状态: ${entry.state}`; details.append(contract);
+      const expiry = document.createElement("p"); details.append(expiry);
+      const actions = cell(""); const proof = document.createElement("p");
+      const approve = document.createElement("button"); approve.type = "button"; approve.textContent = "批准一次";
+      const reject = document.createElement("button"); reject.type = "button"; reject.textContent = "拒绝";
+      const pending = { sync: () => {
+        const verified = ownerVerified(entry.providerAid);
+        const expired = !Number.isFinite(entry.expiresAt) || entry.expiresAt <= Date.now();
+        const unavailable = confirming || !verified || entry.state !== "pending_confirmation";
+        approve.disabled = unavailable || expired; reject.disabled = unavailable;
+        expiry.textContent = expired ? "已过期，不能批准" : "有效期内，每次批准只执行本条请求";
+        proof.textContent = verified ? "当前会话的 Owner 已验证" : "此 Provider 的 Owner 未验证，请先验证 Owner";
+      } };
+      const confirm = async (approved) => {
+        pending.sync();
+        if (confirming || (approved ? approve.disabled : reject.disabled)) return;
+        confirming = true; for (const item of pendingRows) item.sync();
+        try {
+          const result = await request("/api/plugins/aun/abilities/confirm", "POST", { key: entry.key, confirmationFingerprint: entry.confirmationFingerprint, approved });
+          notify("能力确认结果", `状态：${result.state}\n${result.result ? JSON.stringify(result.result, null, 2) : ""}\n${result.delivered ? "结果已回投调用方" : "结果尚未送达调用方；不会自动重复执行"}`, result.state === "failed" || result.state === "unknown" || result.delivered === false);
+        } catch (error) { notify("能力确认失败", errorMessage(error), true); }
+        finally { confirming = false; for (const item of pendingRows) item.sync(); }
+        try { await loadPending(true); } catch (error) { show(`待确认列表刷新失败：${errorMessage(error)}`, true); }
+      };
+      approve.onclick = () => void confirm(true); reject.onclick = () => void confirm(false);
+      actions.append(proof, approve, reject); pendingRows.push(pending); pending.sync(); pendingList.append(row);
+    }
+    if (!pendingList.children.length) emptyRow(pendingList, 7, "暂无待确认的能力调用");
+  }
   async function bind(aid, pluginId) {
     try {
       await request(`/api/plugins/${encodeURIComponent(pluginId)}/aid`, "PATCH", { aid });

package/dist/src-ts/plugins/aun/public/index.html

@@ -6,8 +6,10 @@
     <header><h1>AUN 身份</h1><button id="refresh" type="button">刷新</button></header>
     <p id="status" role="status"></p>
     <div class="table-scroll"><table><thead><tr><th>AID</th><th>来源</th><th>已关联 Agent</th><th>操作</th></tr></thead><tbody id="identities"></tbody></table></div>
+    <section><h2>Agent 能力发布</h2><p>默认不发布。请为每个 AID 明确选择公开能力，并验证宿主本地委托策略中的 Owner AID；此配置不代表 AUN 协议中的 ownership 关系。验证指令只通过 AUN 发送给指定 Owner，Owner 回复收到的 /ability-owner 指令仅验证当前管理会话，不会执行业务。发布能力后，每次调用仍须单独确认。</p><div class="table-scroll"><table><thead><tr><th>Provider AID</th><th>关联 Agent / 版本</th><th>宿主委托 Owner</th><th>可发布能力</th><th>操作</th></tr></thead><tbody id="abilities"></tbody></table></div></section>
+    <section><h2>待确认能力调用</h2><p>核对认证调用方、原始参数、契约指纹、影响和执行目标后，逐项批准一次或拒绝。批准只绑定表格中的完整请求；过期请求不能批准。没有当前会话的 Owner 证明时，不能确认执行。</p><div class="table-scroll"><table class="ability-pending-table"><thead><tr><th>Provider AID</th><th>认证调用方</th><th>操作与确认指纹</th><th>能力路径 / 契约版本</th><th>原始参数</th><th>影响、执行目标与有效期</th><th>逐次确认</th></tr></thead><tbody id="ability-pending"></tbody></table></div></section>
     <form id="create-form"><h2>创建 AID</h2><div class="fields"><label>新 AID<input name="aid" required placeholder="例如：example.agentid.cn"></label><label>Owner AID<input name="ownerAid" placeholder="例如：owner.agentid.cn"><small class="hint">留空时使用已配置的默认 Owner；未配置时需填写。Owner 保存为本地归属配置；不代表 AUN 协议中的 Owner 关系已激活。</small></label></div><button type="submit">创建</button></form>
-    <form id="config-form"><h2>通道配置</h2><div class="fields"><label>允许的来源<input name="allow_from"></label><label>AUN 存储路径<input name="aun_path"></label><label>加密种子<input name="encryption_seed" type="password" autocomplete="new-password" placeholder="留空则不修改"></label></div><button type="submit">保存配置</button></form>
+    <form id="config-form"><h2>通道配置</h2><div class="fields"><label>允许的来源<input name="allow_from" placeholder="留空接受所有 Peer，填写 AID 后限制"></label><label>AUN 存储路径<input name="aun_path"></label><label>加密种子<input name="encryption_seed" type="password" autocomplete="new-password" placeholder="留空则不修改"></label></div><button type="submit">保存配置</button></form>
   </main>
   <script src="/abweb/channels/aun/app.js"></script>
 </body>

package/dist/src-ts/plugins/aun/public/style.css

@@ -17,5 +17,14 @@ table { width: 100%; min-width: 650px; border-collapse: collapse; font-size: 13p
 th, td { padding: 9px 8px; text-align: left; border-bottom: 1px solid #dce3df; }
 th { background: #edf1ef; color: #566761; }
 td select { max-width: 190px; }
+.ability-options label { display: flex; align-items: center; gap: 6px; }
+.ability-options input { min-height: auto; }
+.ability-owner { min-width: 220px; }
+.ability-owner input { width: 100%; margin-bottom: 6px; }
+td { vertical-align: top; }
+td button { margin: 0 6px 6px 0; }
+button:disabled { cursor: default; opacity: .55; }
+.ability-pending-table { min-width: 1050px; }
+.ability-pending-table pre { margin: 0; min-width: 160px; max-width: 340px; max-height: 260px; overflow: auto; white-space: pre-wrap; overflow-wrap: anywhere; font: inherit; }
 .error { color: #a83427; }
 @media (max-width: 620px) { .fields { grid-template-columns: 1fr; } }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bridge-aun",
-  "version": "1.0.40",
+  "version": "1.0.44",
   "description": "mu-agent-bridge 的 AUN 通道插件。",
   "keywords": [
     "mu-agent-bridge-plugin",
@@ -30,6 +30,7 @@
     "node": ">=22.16.0"
   },
   "dependencies": {
-    "@agentunion/fastaun": "0.5.18"
+    "@agentunion/fastaun": "0.5.18",
+    "ajv": "^8.20.0"
   }
 }

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "aun",
-  "version": "1.0.40",
+  "version": "1.0.44",
   "type": "channel",
   "displayName": "AUN 通道",
   "entry": "dist/src-ts/plugins/aun/index.js",