agent-bridge-aun 1.0.49 → 1.0.58

package/dist/src-ts/plugins/aun/index.js

@@ -13,7 +13,6 @@ const node_os_1 = require("node:os");
 const _2020_1 = __importDefault(require("ajv/dist/2020"));
 const yaml_1 = require("yaml");
 const agent_1 = require("../../agent");
-const evolcore_1 = require("./evolcore");
 const messages_1 = require("./messages");
 const attachments_1 = require("./attachments");
 const ability_publication_1 = require("./ability-publication");
@@ -30,8 +29,12 @@ const directory_1 = require("./directory");
 const ownership_1 = require("./ownership");
 const sdk_loader_1 = require("./sdk-loader");
 const owned_profiles_1 = require("./owned-profiles");
+const menu_1 = require("./menu");
+const agentmd_menu_1 = require("./agentmd-menu");
+const agentmd_command_1 = require("./agentmd-command");
+const agentmd_natural_1 = require("./agentmd-natural");
 const manifest = {
-    id: "aun", version: "1.0.49", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.58", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health", "cli"],
     configSchema: "config.schema.json",
@@ -67,6 +70,7 @@ async function loadSdk() {
 const aidPattern = /^[a-z0-9][a-z0-9_-]{2,63}\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/;
 const aunRootFingerprint = "DD:09:E9:FD:31:6C:42:DC:7D:F3:5C:98:9C:2C:76:3A:A1:88:D8:4C:9C:C9:FC:D4:2E:A3:10:A2:62:1E:C5:45";
 const cliCommands = [
+    { name: "agentmd", summary: "读取或发布能力介绍与名片", usage: "mab aun agentmd get <aid> | set <aid> <name|description|version|tags|exttype|body> <值> | put <aid> <完整Markdown> [--json]" },
     { name: "status", summary: "查看 AUN 通道状态", usage: "mab aun status" },
     { name: "list", summary: "查看已连接 AID 和 Agent 关联", usage: "mab aun list" },
     { name: "agents", summary: "列出当前已就绪的 Agent 插件", usage: "mab aun agents" },
@@ -128,8 +132,11 @@ class AunPlugin {
     healthMessage = "尚未配置 AID";
     seen = new messages_1.DuplicateTracker();
     pendingMessages = new Map();
+    activeRuntimeSources = new Set();
     inboundMessages = new Set();
     acceptingMessages = false;
+    menu;
+    agentMdMenu = new agentmd_menu_1.AgentMdMenu();
     constructor(options = {}) {
         this.options = options;
         this.sdk = options.sdk;
@@ -308,6 +315,8 @@ class AunPlugin {
         create: async (aid, owner) => {
             if (!aidPattern.test(aid) || !aidPattern.test(owner))
                 throw new Error("需要有效的 AID 和 Owner AID");
+            if (!this.isBridgeAid(aid) && this.listStoreAids().includes(aid))
+                throw new Error("EvolCore 来源身份不能由本工程创建或连接，请使用新的 AID");
             if (this.creating)
                 throw new Error("正在创建身份，请稍后再试");
             this.creating = true;
@@ -332,6 +341,7 @@ class AunPlugin {
                     this.context?.logger.info("AUN 身份已创建", { aid });
                 }
                 const connectionError = !this.clients.has(aid) ? await this.connectAid(aid) : undefined;
+                let status = "已创建";
                 let directorySync;
                 try {
                     await this.syncOwnerDirectory(aid, owner);
@@ -339,18 +349,27 @@ class AunPlugin {
                     this.context?.logger.info("AUN 新 AID 已加入 Owner 名录", { aid });
                 }
                 catch (error) {
-                    directorySync = { status: "not_synced", error: safeError(error) };
-                    this.context?.logger.warn("AUN AID 已创建，但 Owner 名录未同步", { aid, error: directorySync.error });
+                    if (error instanceof fs_1.AunFsError && error.code === "OWNERSHIP_PENDING") {
+                        status = "等待 Owner 确认";
+                        directorySync = { status: "not_synced" };
+                        this.context?.logger.info("AUN AID 已创建并连接，关联请求已发送，等待 Owner 确认", { aid });
+                    }
+                    else {
+                        directorySync = { status: "not_synced", error: safeError(error) };
+                        this.context?.logger.warn("AUN AID 已创建，但 Owner 名录未同步", { aid, error: directorySync.error });
+                    }
                 }
-                return { aid, status: "已创建", connection: this.clients.has(aid) ? "ready" : "degraded", ...(connectionError ? { connectionError } : {}), directorySync };
+                return { aid, status, connection: this.clients.has(aid) ? "ready" : "degraded", ...(connectionError ? { connectionError } : {}), directorySync };
             }
             finally {
                 this.creating = false;
             }
         },
-        bind: async (pluginId, aid, port) => {
+        bind: async (pluginId, aid) => {
             if (!aid || !aidPattern.test(aid))
                 throw new Error("AID 格式无效，必须指定要关联的 AID");
+            if (!this.isBridgeAid(aid))
+                throw new Error("EvolCore 来源身份不能关联 Agent，请使用本工程创建的 AID");
             if (pluginId === "aun" || pluginId === "abweb")
                 throw new Error("只能关联 Agent 插件");
             if (this.context?.pluginStatus(pluginId) !== "ready")
@@ -366,14 +385,6 @@ class AunPlugin {
                 const loaded = this.store.load(aid);
                 if (!loaded.ok || !loaded.data)
                     throw new Error("AID 不在本地密钥库中，无法关联");
-                // 仅接管用户本次选中的 EvolCore Agent；纯密钥库身份不调用 ec。
-                if ((0, node_fs_1.existsSync)((0, node_path_1.join)(this.path(), "agents", aid, "config.json"))) {
-                    const method = await (0, evolcore_1.configureAidForPlugin)(pluginId, aid, port, this.options.runEc ?? evolcore_1.runEc, this.path());
-                    if (method === "json")
-                        this.context?.logger.warn("ec 命令不可用或失败，已通过 JSON 停用原 Agent 并配置 ecagent", { aid, pluginId });
-                    else
-                        this.context?.logger.info("已通过 ec 命令停用原 Agent 并切换为 ecagent", { aid, pluginId });
-                }
                 this.identities.add(aid);
                 if (!connection)
                     await this.connectAid(aid);
@@ -464,12 +475,25 @@ class AunPlugin {
     async syncOwnerDirectory(aid, ownerAid) {
         if (aid === ownerAid)
             throw new Error("新 AID 与 Owner AID 相同，未写入 Owner 名录");
+        const subClient = this.clients.get(aid)?.client;
+        if (this.store?.resolve && subClient?.checkOwnershipConsensus) {
+            const verified = await (0, ownership_1.readAunOwnership)(this.store, subClient, aid);
+            if (verified.declaredOwner !== ownerAid)
+                throw new fs_1.AunFsError("OWNERSHIP_CONFLICT", "指定 Owner 与已验签的现有 Owner 不同，未同步名录");
+            if (verified.ownership.status === "single_sided")
+                throw new fs_1.AunFsError("OWNERSHIP_PENDING", "关联请求已发送，等待 Owner 确认；确认前暂不加入通信名录，请勿重复创建 AID");
+            if (verified.ownership.status !== "consensus")
+                throw new fs_1.AunFsError("OWNERSHIP_UNAVAILABLE", `Owner 归属尚未核验完成（${verified.ownership.status}），未同步名录`);
+        }
         let client = this.ownerClients.get(ownerAid)?.client ?? this.clients.get(ownerAid)?.client;
         let temporary = false;
         if (!client) {
             const loaded = this.store?.load(ownerAid);
             if (!loaded?.ok || !loaded.data)
                 throw new Error("Owner AID 不在本地密钥库，AID 已创建但无法同步 Owner 名录");
+            // SDK load() 成功也可能只有公钥证书；list() 只返回持有有效私钥的身份。
+            if (!this.listStoreAids().includes(ownerAid))
+                throw new Error("本机没有 Owner 的有效私钥，AID 已创建但无法在本机同步 Owner 名录");
             await this.prepareTrustRoots(ownerAid);
             const trusted = this.store?.load(ownerAid);
             if (!trusted?.ok || !trusted.data)
@@ -507,6 +531,9 @@ class AunPlugin {
             }
         }
     }
+    isBridgeAid(aid) {
+        return this.createdAids.has(aid) || this.legacyCreatedAids.has(aid);
+    }
     async persist() {
         this.config.identities = [...this.identities].sort();
         this.config.created_aids = [...new Set([...this.createdAids, ...this.legacyCreatedAids])].sort();
@@ -628,6 +655,8 @@ class AunPlugin {
             ["POST", "/api/plugins/aun/abilities/owner-challenge", this.challengeAbilityOwner],
             ["GET", "/api/plugins/aun/abilities/pending", this.pendingAbilityOperations],
             ["POST", "/api/plugins/aun/abilities/confirm", this.confirmAbilityOperation],
+            ["GET", "/api/plugins/aun/abilities/grants", this.listAbilityGrants],
+            ["POST", "/api/plugins/aun/abilities/grants/revoke", this.revokeAbilityGrant],
             ["GET", "/api/plugins/aun/commands", this.listCommands],
             ["POST", "/api/plugins/aun/commands", this.runCommand],
             ["GET", fs_transfer_1.FS_TRANSFER_PATH, this.fsTransfer],
@@ -663,8 +692,59 @@ class AunPlugin {
         }
         if (this.aid)
             this.identities.add(this.aid);
-        if (staleOwnerVerification)
+        let removedExternalIdentity = false;
+        // 升级时先清理本地接管记录，不能为撤销旧发布而再次连接外部身份。
+        for (const aid of new Set([...this.identities, ...Object.keys(this.bindings), ...Object.keys(this.bindingTimes), ...Object.keys(this.abilitySelections), ...Object.keys(this.abilityOwners), ...Object.keys(this.abilityOwnerVerifications)])) {
+            if (this.isBridgeAid(aid))
+                continue;
+            await this.invalidateAbilityOperations(aid);
+            this.identities.delete(aid);
+            delete this.bindings[aid];
+            delete this.bindingTimes[aid];
+            delete this.abilitySelections[aid];
+            delete this.abilityOwners[aid];
+            delete this.abilityOwnerVerifications[aid];
+            if (this.aid === aid)
+                this.config.aid = this.aid = "";
+            removedExternalIdentity = true;
+            context.logger.info("AUN 已自动解除 EvolCore 来源身份的旧关联，不再连接或接管该身份", { aid });
+        }
+        if (staleOwnerVerification || removedExternalIdentity)
             await this.persist();
+        this.menu = new menu_1.AunMenu(context.dataDir, {
+            target: aid => this.acceptingMessages && this.bindings[aid] && this.clients.has(aid)
+                ? JSON.stringify([this.bindings[aid], this.bindingTimes[aid] ?? ""]) : undefined,
+            baseagent: aid => this.bindings[aid],
+            runtime: aid => this.runtimeMenuSnapshot(aid),
+            log: (message, fields) => context.logger.info(message, fields),
+            owner: async (aid) => {
+                try {
+                    const client = this.clients.get(aid)?.client;
+                    if (!client || !this.store)
+                        return "";
+                    const snapshot = await (0, ownership_1.readAunOwnership)(this.store, client, aid);
+                    return snapshot.ownership.status === "consensus" ? snapshot.ownership.owner_aid ?? "" : "";
+                }
+                catch {
+                    return "";
+                }
+            },
+            directory: async (aid, ownerAid) => {
+                const client = this.ownerClients.get(ownerAid)?.client ?? this.clients.get(ownerAid)?.client ?? this.clients.get(aid)?.client;
+                if (!client?.storage)
+                    throw new Error("Owner 名录读取不可用");
+                return (0, owner_directory_1.readOwnerDirectory)(client.storage, ownerAid);
+            },
+            send: (aid, params) => this.callAunWithRecovery(aid, params),
+            allowFrom: () => typeof this.config.allow_from === "string" ? this.config.allow_from : undefined,
+            agentmd: async (aid, raw) => {
+                const response = await this.agentMdMenu.handle(raw, aid, this.agentMdPort(aid), true);
+                if (!response)
+                    throw new Error("名片请求无效");
+                return response;
+            },
+        });
+        await this.menu.load();
         this.acceptingMessages = true;
         // 只订阅明确关联 Agent 的身份，避免接管 EvolCore 或其它 AID 的消息。
         for (const aid of Object.keys(this.bindings)) {
@@ -826,6 +906,7 @@ class AunPlugin {
     async deactivate(_reason) {
         this.status = "degraded";
         this.acceptingMessages = false;
+        this.agentMdMenu.clear();
         if (this.ownedProfileTimer)
             clearInterval(this.ownedProfileTimer);
         this.ownedProfileTimer = undefined;
@@ -859,6 +940,7 @@ class AunPlugin {
         await this.abilityOperations?.interruptExecuting();
         await Promise.allSettled(this.inboundMessages);
         await Promise.allSettled(this.pendingMessages.values());
+        this.menu = undefined;
         for (const { client } of this.clients.values())
             await client.close();
         this.clients.clear();
@@ -977,7 +1059,14 @@ class AunPlugin {
         const pluginId = this.bindings[aid];
         if (!pluginId || this.context?.pluginStatus(pluginId) !== "ready" || !this.context?.listPluginAbilities)
             return [];
-        return this.context.listPluginAbilities(pluginId, aid);
+        return (await this.context.listPluginAbilities(pluginId, aid)).map(definition => {
+            const properties = definition.params_schema.properties;
+            if (definition.path !== "agent/task/run" || properties?.task?.pattern !== "\\S")
+                return definition;
+            // AUN 共同 Schema 不支持 pattern，非空白校验在申请入口及原宿主执行入口保留。
+            const { pattern: _pattern, ...task } = properties.task;
+            return { ...definition, params_schema: { ...definition.params_schema, properties: { ...properties, task } } };
+        });
     }
     listAbilities = async (request, response) => {
         try {
@@ -988,7 +1077,7 @@ class AunPlugin {
                 const ownerAid = this.abilityOwners[aid];
                 const ownerVerified = Boolean(session && ownerAid && this.isAbilityOwnerVerified(aid, ownerAid));
                 const publishAvailable = Boolean(this.context?.managementActor?.(request) && ownerVerified && this.context?.callPluginAbility && this.abilityOperations && !this.abilityAuditUnavailable);
-                result[aid] = { agent: this.bindings[aid], selected: this.abilitySelections[aid] ?? [], definitions, published: Object.keys(this.abilityLedgers[aid] ?? {}).length > 0, pluginVersion: this.context?.pluginVersion?.(this.bindings[aid]), ownerAid, ownerVerified, publishAvailable, reason: publishAvailable ? "需本机已认证管理会话，每次执行仍须明确批准。" : "逐次 Owner 确认需本机已认证管理会话，并验证明确配置的 Owner AID；已有索引仍可撤销。" };
+                result[aid] = { agent: this.bindings[aid], selected: this.abilitySelections[aid] ?? [], definitions, published: Object.keys(this.abilityLedgers[aid] ?? {}).length > 0, pluginVersion: this.context?.pluginVersion?.(this.bindings[aid]), ownerAid, ownerVerified, publishAvailable, reason: publishAvailable ? "需本机已认证管理会话；调用须单次批准或有效的持续授权。" : "逐次 Owner 确认需本机已认证管理会话，并验证明确配置的 Owner AID；已有索引仍可撤销。" };
             }
             this.json(response, 200, { abilities: result });
         }
@@ -1120,15 +1209,49 @@ class AunPlugin {
             const body = await this.readJsonBody(request);
             if (typeof body.key !== "string" || typeof body.confirmationFingerprint !== "string" || typeof body.approved !== "boolean")
                 return this.json(response, 400, { error: "必须明确提交操作键、完整确认指纹和批准或拒绝决定" });
+            const grantDurationMs = body.grantDurationMs === undefined ? undefined : body.grantDurationMs === null ? null : body.grantDurationMs === 43_200_000 ? 43_200_000 : undefined;
+            if (body.grantDurationMs !== undefined && grantDurationMs === undefined)
+                return this.json(response, 400, { error: "持续授权只支持批准 12 小时（grantDurationMs=43200000）或永久（grantDurationMs=null）" });
+            if (grantDurationMs !== undefined && body.approved !== true)
+                return this.json(response, 400, { error: "持续授权只能随批准提交" });
             const context = this.context;
-            const result = await this.decideAbilityOperation(body.key, body.confirmationFingerprint, body.approved, () => this.context === context && Boolean(context.managementActor?.(request)) && context.managementSession?.(request)?.id === session.id);
+            const result = await this.decideAbilityOperation(body.key, body.confirmationFingerprint, body.approved, () => this.context === context && Boolean(context.managementActor?.(request)) && context.managementSession?.(request)?.id === session.id, undefined, { grantDurationMs });
             this.json(response, 200, result);
         }
         catch (error) {
             this.json(response, error instanceof AunCommandError ? error.statusCode : 409, { error: safeError(error) });
         }
     };
-    async decideAbilityOperation(key, fingerprint, approved, authorized, providerAid) {
+    listAbilityGrants = async (request, response) => {
+        if (!this.context?.managementActor?.(request) || !this.context?.managementSession?.(request))
+            return this.json(response, 403, { error: "读取持续授权需本机已认证管理会话" });
+        try {
+            this.json(response, 200, { grants: await this.abilityOperations?.listGrants() ?? [] });
+        }
+        catch (error) {
+            this.json(response, 503, { error: safeError(error) });
+        }
+    };
+    revokeAbilityGrant = async (request, response) => {
+        if (!this.context?.managementActor?.(request) || !this.context?.managementSession?.(request))
+            return this.json(response, 403, { error: "撤销持续授权需本机已认证管理会话" });
+        try {
+            const body = await this.readJsonBody(request);
+            const aid = typeof body.aid === "string" ? body.aid.trim() : "";
+            const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
+            if (!aid || !grantId)
+                return this.json(response, 400, { error: "需要 Provider AID 和授权 ID" });
+            const grant = await this.abilityOperations?.revokeGrant(aid, grantId);
+            if (!grant)
+                return this.json(response, 503, { error: "持久操作账本不可用" });
+            this.context?.logger.info("AUN Ability 持续授权已撤销", { aid, grantId });
+            this.json(response, 200, { ok: true, grant });
+        }
+        catch (error) {
+            this.json(response, error instanceof AunCommandError ? error.statusCode : 409, { error: safeError(error) });
+        }
+    };
+    async decideAbilityOperation(key, fingerprint, approved, authorized, providerAid, options = {}) {
         const store = this.abilityOperations;
         if (!store || this.abilityAuditUnavailable)
             throw new AunCommandError("持久操作账本不可用", 503);
@@ -1149,9 +1272,14 @@ class AunPlugin {
         }
         if (!authorized() || !this.acceptingMessages || !this.isAbilityOwnerVerified(original.providerAid, ownerAid))
             throw new AunCommandError("通道或 Owner 管理会话已失效", 403);
-        const confirmation = approved ? await store.approve(original.key, fingerprint) : await store.reject(original.key, fingerprint);
+        const confirmation = approved ? await store.approve(original.key, fingerprint, options) : await store.reject(original.key, fingerprint);
         let entry = confirmation.entry;
+        const grantId = options.grantId ?? confirmation.grant?.id;
+        if (options.grantDurationMs !== undefined && confirmation.grant)
+            this.context?.logger.info("AUN Ability 持续授权已保存", { aid: entry.providerAid, callerAid: entry.authenticatedCaller, path: entry.path, grantId, expiresAt: confirmation.grant.expiresAt, ownerAid });
         if (confirmation.started) {
+            if (options.grantId)
+                await this.sendAbilityResponse(entry.providerAid, entry.authenticatedCaller, this.abilityOperationResponse(entry));
             let result;
             let state;
             let handlerAuthorized = false;
@@ -1161,14 +1289,17 @@ class AunPlugin {
                 const confirmationExpired = Date.now() >= entry.confirmationExpiresAt;
                 const expired = messageExpired || confirmationExpired;
                 const invalidated = (this.abilityRevisions.get(entry.providerAid) ?? 0) !== revision || this.revokingAbilityAids.has(entry.providerAid);
-                if (failure || expired || invalidated || !authorized() || !this.isAbilityOwnerVerified(entry.providerAid, ownerAid) || this.abilityOwners[entry.providerAid] !== entry.executionTarget.ownerAid || this.bindings[entry.providerAid] !== entry.executionTarget.pluginId || (this.context?.pluginVersion?.(String(entry.executionTarget.pluginId)) ?? "") !== entry.executionTarget.pluginVersion) {
-                    result = { ...(0, ability_operations_1.abilityFailureResult)({ call_id: entry.callId, operation_id: entry.operationId, ability_path: entry.path, definition_id: entry.definitionId }, expired ? (messageExpired ? "message_expired" : "confirmation_expired") : failure?.code ?? (invalidated ? "provider_invalidated" : "permission_denied"), messageExpired ? "调用已超过最晚启动时间" : confirmationExpired ? "Owner 确认申请已过期，不会执行" : failure?.message ?? "Owner 管理会话或执行目标已改变，本次能力没有执行"), execution_state: "not_executed" };
+                const grantUnavailable = grantId !== undefined && !store.grantActive(grantId, entry);
+                if (failure || expired || invalidated || grantUnavailable || !authorized() || !this.isAbilityOwnerVerified(entry.providerAid, ownerAid) || this.abilityOwners[entry.providerAid] !== entry.executionTarget.ownerAid || this.bindings[entry.providerAid] !== entry.executionTarget.pluginId || (this.context?.pluginVersion?.(String(entry.executionTarget.pluginId)) ?? "") !== entry.executionTarget.pluginVersion) {
+                    result = { ...(0, ability_operations_1.abilityFailureResult)({ call_id: entry.callId, operation_id: entry.operationId, ability_path: entry.path, definition_id: entry.definitionId }, expired ? (messageExpired ? "message_expired" : "confirmation_expired") : grantUnavailable ? "grant_unavailable" : failure?.code ?? (invalidated ? "provider_invalidated" : "permission_denied"), messageExpired ? "调用已超过最晚启动时间" : confirmationExpired ? "Owner 确认申请已过期，不会执行" : grantUnavailable ? "持续授权已到期或撤销，本次能力没有执行" : failure?.message ?? "Owner 管理会话或执行目标已改变，本次能力没有执行"), execution_state: "not_executed" };
                     state = "failed";
                 }
                 else {
                     const context = this.context;
                     const confirmed = entry;
                     const beforeStart = () => {
+                        if (grantId !== undefined && !store.grantActive(grantId, confirmed))
+                            throw Object.assign(new Error("持续授权已到期或撤销，本次能力没有执行"), { code: "grant_unavailable" });
                         if (this.context !== context || this.abilityOperations !== store || this.abilityAuditUnavailable || !this.acceptingMessages || !authorized() || !this.isAbilityOwnerVerified(confirmed.providerAid, ownerAid) || this.abilityOwners[confirmed.providerAid] !== ownerAid)
                             throw Object.assign(new Error("管理会话、Owner 证明或操作账本已失效，本次能力没有执行"), { code: "confirmation_unavailable" });
                         const pluginId = String(confirmed.executionTarget.pluginId);
@@ -1177,7 +1308,7 @@ class AunPlugin {
                             throw Object.assign(new Error("Provider 发布、Owner policy 或执行目标已改变，本次能力没有执行"), { code: "provider_invalidated" });
                         handlerAuthorized = true;
                     };
-                    const value = await context.callPluginAbility(String(entry.executionTarget.pluginId), entry.path, entry.params, { providerAid: entry.providerAid, expiresAt: entry.expiresAt, beforeStart });
+                    const value = await context.callPluginAbility(String(entry.executionTarget.pluginId), entry.path, entry.params, { providerAid: entry.providerAid, callerAid: entry.authenticatedCaller, expiresAt: entry.expiresAt, beforeStart });
                     result = { type: "ability", role: "result", ok: true, execution_state: "completed", result: value };
                     state = "succeeded";
                 }
@@ -1185,15 +1316,15 @@ class AunPlugin {
             catch (error) {
                 this.context?.logger.warn("AUN Ability 执行失败，结果将持久保存", { aid: entry.providerAid, path: entry.path, error: safeError(error) });
                 const code = error.code;
-                const notExecuted = !handlerAuthorized && ["message_expired", "confirmation_expired", "provider_invalidated", "confirmation_unavailable"].includes(code ?? "");
-                result = { ...(0, ability_operations_1.abilityFailureResult)({ call_id: entry.callId, operation_id: entry.operationId, ability_path: entry.path, definition_id: entry.definitionId }, notExecuted ? code : "execution_failed", notExecuted ? (code === "message_expired" ? "调用已超过最晚启动时间" : code === "confirmation_expired" ? "Owner 确认申请已过期，不会执行" : "管理会话或 Provider 状态已改变，本次能力没有执行") : "能力执行失败，请检查 Provider 运行日志；不会自动重试"), execution_state: notExecuted ? "not_executed" : "failed" };
+                const notExecuted = !handlerAuthorized && ["message_expired", "confirmation_expired", "provider_invalidated", "confirmation_unavailable", "grant_unavailable"].includes(code ?? "");
+                result = { ...(0, ability_operations_1.abilityFailureResult)({ call_id: entry.callId, operation_id: entry.operationId, ability_path: entry.path, definition_id: entry.definitionId }, notExecuted ? code : "execution_failed", notExecuted ? (code === "message_expired" ? "调用已超过最晚启动时间" : code === "confirmation_expired" ? "Owner 确认申请已过期，不会执行" : code === "grant_unavailable" ? "持续授权已到期或撤销，本次能力没有执行" : "管理会话或 Provider 状态已改变，本次能力没有执行") : "能力执行失败，请检查 Provider 运行日志；不会自动重试"), execution_state: notExecuted ? "not_executed" : "failed" };
                 state = "failed";
             }
             entry = await store.finish(entry.key, state, result);
         }
-        const delivered = await this.sendAbilityResponse(entry.providerAid, entry.authenticatedCaller, this.abilityOperationResponse(entry));
-        this.context?.logger.info("AUN Ability 逐次确认完成", { aid: entry.providerAid, callerAid: entry.authenticatedCaller, operationId: entry.operationId, state: entry.state, delivered });
-        return { ok: true, state: entry.state, result: entry.result, delivered };
+        const delivered = options.deliver !== false ? await this.sendAbilityResponse(entry.providerAid, entry.authenticatedCaller, this.abilityOperationResponse(entry)) : false;
+        this.context?.logger.info("AUN Ability 逐次确认完成", { aid: entry.providerAid, callerAid: entry.authenticatedCaller, operationId: entry.operationId, state: entry.state, delivered, ...(grantId ? { grantId, grantExpiresAt: confirmation.grant?.expiresAt } : {}) });
+        return { ok: true, state: entry.state, result: entry.result, delivered, ...(confirmation.grant ? { grant: confirmation.grant } : {}) };
     }
     abilityApprovalViewKey(aid, ownerAid, threadId) {
         return JSON.stringify([aid, ownerAid, threadId ?? ""]);
@@ -1226,6 +1357,9 @@ class AunPlugin {
             `最晚启动：${new Date(entry.expiresAt).toLocaleString("zh-CN")}`,
             `确认：/ability approve ${entry.key} ${entry.confirmationFingerprint}`,
             `拒绝：/ability reject ${entry.key} ${entry.confirmationFingerprint}`,
+            `允许该 Peer 使用此能力12小时：/ability approve ${entry.key} ${entry.confirmationFingerprint} 12h`,
+            `永久允许该 Peer 使用此能力：/ability approve ${entry.key} ${entry.confirmationFingerprint} permanent`,
+            "持续授权涵盖所示 Peer 对此 Provider 的此项能力的所有合法参数；不是只批准本次参数。可用 /ability grants 查看并撤销。",
         ].join("\n");
     }
     async showAbilityPending(aid, ownerAid, threadId) {
@@ -1241,7 +1375,7 @@ class AunPlugin {
         const viewKey = this.abilityApprovalViewKey(aid, ownerAid, threadId);
         const view = { explicit: true, entries: undefined };
         this.abilityApprovalViews.set(viewKey, view);
-        const text = `待确认 Ability 调用清单（${entries.length} 项，仅包含本条消息展示的固定记录）\n\n${entries.map((entry, index) => `第 ${index + 1} 项\n${this.abilityEntrySummary(entry)}`).join("\n\n---\n\n")}\n\n回复“确认”或“拒绝”按本清单逐项处理；清单之后的新请求不会加入。`;
+        const text = `待确认 Ability 调用清单（${entries.length} 项，仅包含本条消息展示的固定记录）\n\n${entries.map((entry, index) => `第 ${index + 1} 项\n${this.abilityEntrySummary(entry)}`).join("\n\n---\n\n")}\n\n回复编号（例如 1,2,4）只处理选中项；回复“确认”或“拒绝”处理全部；回复“允许12小时”或“永久允许”为本清单各项授予相应持续授权，覆盖对应能力的所有合法参数。清单之后的新请求不会加入。`;
         await this.sendAbilityControlText(aid, ownerAid, text, threadId);
         if (this.abilityApprovalViews.get(viewKey) === view && this.abilityOperations === store && this.abilityOwners[aid] === ownerAid && this.acceptingMessages)
             view.entries = entries.map(({ key, confirmationFingerprint }) => ({ key, confirmationFingerprint }));
@@ -1250,15 +1384,20 @@ class AunPlugin {
         const raw = payload && typeof payload === "object" ? payload : undefined;
         const body = raw?.payload && typeof raw.payload === "object" && !Array.isArray(raw.payload) ? raw.payload : undefined;
         const text = typeof raw?.payload === "string" ? raw.payload : typeof body?.text === "string" ? body.text : "";
-        const isControlText = text === "确认" || text === "拒绝" || /^ *\/ability(?:\s|$)/.test(text);
-        if (!isControlText)
-            return false;
+        const isCommand = /^ *\/ability(?:\s|$)/.test(text);
         const ownerAid = this.abilityOwners[aid];
         const envelope = raw?.envelope && typeof raw.envelope === "object" ? raw.envelope : undefined;
         const sender = typeof raw?.from === "string" ? raw.from : typeof envelope?.from === "string" ? envelope.from : undefined;
+        const threadId = typeof body?.thread_id === "string" ? body.thread_id : undefined;
+        const isSelectionForView = Boolean(ownerAid && sender === ownerAid && (0, ability_control_1.isAbilitySelectionText)(text)
+            && this.abilityApprovalViews.has(this.abilityApprovalViewKey(aid, ownerAid, threadId)));
+        const isReply = !isCommand && !(0, ability_control_1.isAbilitySelectionText)(text) && (0, ability_control_1.parseAbilityControl)(text) !== undefined;
+        const isControlText = isCommand || isReply || isSelectionForView;
+        if (!isControlText)
+            return false;
         if (ownerAid && sender !== ownerAid)
-            return text === "确认" || text === "拒绝" ? false : true;
-        if (!ownerAid && (text === "确认" || text === "拒绝"))
+            return !isReply && !isSelectionForView;
+        if (!ownerAid && (isReply || isSelectionForView))
             return false;
         let authenticated = false;
         const context = this.context;
@@ -1277,30 +1416,42 @@ class AunPlugin {
             if (!this.isAbilityOwnerVerified(aid, ownerAid))
                 await this.saveAbilityOwnerVerification(aid, ownerAid);
             const { command, peerId, threadId } = message;
-            if (command.action === "confirm-view" || command.action === "reject-view") {
+            if (command.action === "confirm-view" || command.action === "reject-view" || command.action === "grant-view" || command.action === "select-view") {
                 const key = this.abilityApprovalViewKey(aid, ownerAid, threadId);
                 const view = this.abilityApprovalViews.get(key);
-                this.abilityApprovalViews.delete(key);
+                if (command.action !== "select-view")
+                    this.abilityApprovalViews.delete(key);
                 if (!view?.entries?.length) {
-                    await this.sendAbilityControlText(aid, peerId, "当前话题没有已展示的待确认清单。请先发送 /ability pending，核对清单后再回复确认或拒绝。", threadId);
+                    await this.sendAbilityControlText(aid, peerId, "当前话题没有完整的待确认清单，本次尚未批准任何调用。下面重新发送清单，请核对后再回复“确认”、“拒绝”、“允许12小时”或“永久允许”。", threadId);
+                    await this.showAbilityPending(aid, peerId, threadId);
                     return true;
                 }
-                const approved = command.action === "confirm-view";
+                const selected = command.action === "select-view" ? command.indexes.map(index => view.entries[index - 1]) : view.entries;
+                if (selected.some(entry => !entry)) {
+                    await this.sendAbilityControlText(aid, peerId, `Ability 清单编号无效：请输入 1 到 ${view.entries.length} 之间的编号，可用逗号或空格分隔。`, threadId);
+                    return true;
+                }
+                this.abilityApprovalViews.delete(key);
+                const approved = command.action !== "reject-view";
                 const results = [];
-                for (const entry of view.entries) {
+                for (const entry of selected) {
                     try {
-                        const result = await this.decideAbilityOperation(entry.key, entry.confirmationFingerprint, approved, authorized, aid);
-                        results.push(`${entry.key.slice(0, 12)}：${String(result.state)}`);
+                        const result = await this.decideAbilityOperation(entry.key, entry.confirmationFingerprint, approved, authorized, aid, command.action === "grant-view" ? { grantDurationMs: command.grantDurationMs } : {});
+                        results.push(`${entry.key.slice(0, 12)}：${String(result.state)}${result.grant ? `；已${result.grant.expiresAt === null ? "永久授权" : "授权12小时"}，发送 /ability grants 查看期限和撤销命令` : ""}`);
                     }
                     catch (error) {
                         results.push(`${entry.key.slice(0, 12)}：未处理（${safeError(error)}）`);
                     }
                 }
-                await this.sendAbilityControlText(aid, peerId, `${approved ? "确认" : "拒绝"}处理完成：\n${results.join("\n")}`, threadId);
+                const remaining = command.action === "select-view" ? view.entries.filter((entry, index) => !command.indexes.includes(index + 1)) : [];
+                if (remaining.length && this.abilityOperations === store && this.abilityOwners[aid] === ownerAid && this.acceptingMessages)
+                    this.abilityApprovalViews.set(key, { explicit: true, entries: remaining });
+                const remainingChoices = remaining.map((entry, index) => `${index + 1}（原第 ${view.entries.indexOf(entry) + 1} 项）`).join("、");
+                await this.sendAbilityControlText(aid, peerId, `${command.action === "select-view" ? "选中项" : approved ? "确认" : "拒绝"}处理完成：\n${results.join("\n")}${remaining.length ? `\n仍有 ${remaining.length} 项待处理，请按剩余项重新编号回复：${remainingChoices}。` : ""}`, threadId);
                 return true;
             }
             if (command.action === "help") {
-                await this.sendAbilityControlText(aid, peerId, "AUN Ability 管理命令：\n/ability list：查看当前 Provider 的能力\n/ability publish <路径...>：按完整路径列表发布\n/ability revoke：撤销本 Provider 的能力索引\n/ability pending：展示固定待确认清单\n/ability approve <操作键> <确认指纹>：批准单项\n/ability reject <操作键> <确认指纹>：拒绝单项\n也可在清单投递成功后回复“确认”或“拒绝”。", threadId);
+                await this.sendAbilityControlText(aid, peerId, "AUN Ability 管理命令：\n/ability list：查看当前 Provider 的能力\n/ability publish <路径...>：按完整路径列表发布\n/ability revoke：撤销本 Provider 的 Ability 索引\n/ability pending：展示固定待确认清单\n/ability approve <操作键> <确认指纹>：批准单项\n/ability reject <操作键> <确认指纹>：拒绝单项\n/ability approve <操作键> <确认指纹> 12h：授权所示 Peer 使用此能力12小时（所有合法参数）\n/ability approve <操作键> <确认指纹> permanent：永久授权所示 Peer 使用此能力（所有合法参数）\n/ability grants：查看持续授权及到期时间\n/ability revoke-grant <授权ID>：撤销持续授权\n也可在清单投递成功后回复编号（如 1,2,4）批准选中项；回复“确认”“拒绝”处理全部，或回复“允许12小时”“永久允许”授予持续授权。", threadId);
             }
             else if (command.action === "list") {
                 const definitions = await this.abilityDefinitions(aid);
@@ -1319,9 +1470,23 @@ class AunPlugin {
             }
             else if (command.action === "pending")
                 await this.showAbilityPending(aid, peerId, threadId);
+            else if (command.action === "grants") {
+                if (!store || this.abilityAuditUnavailable)
+                    throw new Error("持久操作账本不可用");
+                const grants = await store.listGrants(aid);
+                const lines = grants.map(grant => `${grant.revokedAt !== undefined ? "已撤销" : grant.expiresAt !== null && grant.expiresAt <= Date.now() ? "已到期" : "有效"} | ${grant.authenticatedCaller} | ${grant.path}\n授权ID：${grant.id}\n到期：${grant.expiresAt === null ? "永久（可随时撤销）" : new Date(grant.expiresAt).toLocaleString("zh-CN")}\n撤销：/ability revoke-grant ${grant.id}`);
+                await this.sendAbilityControlText(aid, peerId, lines.length ? lines.join("\n\n") : "当前没有持续授权。", threadId);
+            }
+            else if (command.action === "revoke-grant") {
+                if (!store || this.abilityAuditUnavailable || !authorized())
+                    throw new Error("持久操作账本或 Owner 会话不可用");
+                await store.revokeGrant(aid, command.grantId);
+                this.context?.logger.info("AUN Ability 持续授权已撤销", { aid, ownerAid, grantId: command.grantId });
+                await this.sendAbilityControlText(aid, peerId, `持续授权已撤销：${command.grantId}。此后新调用将重新审批。`, threadId);
+            }
             else if (command.action === "approve" || command.action === "reject") {
-                const result = await this.decideAbilityOperation(command.key, command.confirmationFingerprint, command.action === "approve", authorized, aid);
-                await this.sendAbilityControlText(aid, peerId, `Ability 操作状态：${String(result.state)}；结果已${result.delivered ? "回传 Peer" : "保存，等待重投"}。`, threadId);
+                const result = await this.decideAbilityOperation(command.key, command.confirmationFingerprint, command.action === "approve", authorized, aid, { grantDurationMs: command.grantDurationMs });
+                await this.sendAbilityControlText(aid, peerId, `Ability 操作状态：${String(result.state)}；结果已${result.delivered ? "回传 Peer" : "保存，等待重投"}。${result.grant ? `已${result.grant.expiresAt === null ? "永久授权" : "授权12小时"}，请发送 /ability grants 查看期限和撤销命令。` : ""}`, threadId);
             }
         }
         catch (error) {
@@ -1491,8 +1656,8 @@ class AunPlugin {
             }
             const command = input.argv[0];
             const legacyLocalCommand = !this.context?.managementActor && ["directory", "repair-owner", "repair-old-aids"].includes(command) && isLoopback(request.socket?.remoteAddress);
-            if (["fs", "directory", "repair-owner", "repair-old-aids"].includes(command) && !this.context?.managementActor?.(request) && !legacyLocalCommand)
-                throw new AunCommandError("AUN 文件、名录及归属命令需要本机或已认证的管理身份", 403, { code: "MANAGEMENT_AUTH_REQUIRED" });
+            if (["fs", "directory", "repair-owner", "repair-old-aids", "agentmd"].includes(command) && !this.context?.managementActor?.(request) && !legacyLocalCommand)
+                throw new AunCommandError("AUN 文件、名片、名录及归属命令需要本机或已认证的管理身份", 403, { code: "MANAGEMENT_AUTH_REQUIRED" });
             const result = await this.executeCommand(input.argv, controller.signal);
             const batchFailed = command === "repair-old-aids" && !!result.data && typeof result.data === "object" && Number(result.data.failed) > 0;
             this.commandResult(response, batchFailed ? 502 : 200, !batchFailed, result.message, result.data);
@@ -1508,6 +1673,22 @@ class AunPlugin {
     };
     async executeCommand(argv, signal) {
         const [command, ...args] = argv;
+        if (command === "agentmd") {
+            if (!args.length || args.length === 1 && ["help", "--help"].includes(args[0]))
+                return { message: cliCommands.find(item => item.name === "agentmd").usage };
+            const [verb, aid, ...values] = args;
+            if (!aidPattern.test(aid ?? ""))
+                throw new AunCommandError("需要有效的目标 AID");
+            const port = this.agentMdPort(aid);
+            let data;
+            try {
+                data = await this.agentMdMenu.local(aid, verb, values, { ...port, current: () => !signal?.aborted && port.current() });
+            }
+            catch (error) {
+                throw new AunCommandError(safeError(error), 409, { code: typeof error.code === "string" ? error.code : "REQUEST_FAILED" });
+            }
+            return { message: verb === "get" ? String(data.content) : "名片已发布并通过远端读回确认", data };
+        }
         if (command === "directory")
             return this.directoryCommand(args);
         if (command === "repair-owner")
@@ -1618,8 +1799,8 @@ class AunPlugin {
             let task;
             let operationError;
             if (verified.ownership.status !== "consensus") {
-                const local = this.store?.load(ownerAid);
-                const connectedOwner = this.clients.get(ownerAid)?.client;
+                const local = this.listStoreAids().includes(ownerAid) ? this.store?.load(ownerAid) : undefined;
+                const connectedOwner = this.ownerClients.get(ownerAid)?.client ?? this.clients.get(ownerAid)?.client;
                 let temporary;
                 try {
                     if (connectedOwner || local?.ok && local.data) {
@@ -1766,7 +1947,7 @@ class AunPlugin {
             await this.requireAgent(agent);
         }
         const created = await this.createIdentity(aid, owner);
-        const data = { created: true, aid, connection: created.connection ?? "ready", directorySync: created.directorySync };
+        const data = { created: true, aid, connection: created.connection ?? "ready", directorySync: created.directorySync, ...(created.status === "等待 Owner 确认" ? { status: created.status } : {}) };
         if (created.connection !== "ready")
             throw new AunCommandError("AID 已创建，但连接失败；请先执行 mab aun list 确认，不要重试创建", 502, { ...data, connectionError: created.connectionError });
         if (agent) {
@@ -1779,9 +1960,10 @@ class AunPlugin {
             }
         }
         return {
-            message: created.directorySync?.status === "not_synced"
-                ? `AID 已创建${agent ? `并关联到 ${agent}` : "并连接"}，但 Owner 名录未同步：${created.directorySync.error ?? "原因未知"}`
-                : agent ? `AID 已创建并关联到 ${agent}` : "AID 已创建并连接",
+            message: created.status === "等待 Owner 确认" ? `AID 已创建并连接${agent ? `并关联到 ${agent}` : ""}，关联请求已发送，等待 Owner 确认`
+                : created.directorySync?.status === "not_synced"
+                    ? `AID 已创建${agent ? `并关联到 ${agent}` : "并连接"}，但 Owner 名录未同步：${created.directorySync.error ?? "原因未知"}`
+                    : agent ? `AID 已创建并关联到 ${agent}` : "AID 已创建并连接",
             data: { ...data, ...(agent ? { agent } : {}) },
         };
     }
@@ -1790,6 +1972,8 @@ class AunPlugin {
             return await this.identity.create(aid, owner);
         }
         catch (error) {
+            if (!this.isBridgeAid(aid) && this.listStoreAids().includes(aid))
+                throw new AunCommandError("EvolCore 来源身份不能由本工程创建或连接，请使用新的 AID");
             if (this.identities.has(aid) || this.listStoreAids().includes(aid)) {
                 throw new AunCommandError("AID 可能已创建，但后续连接或保存失败；请先执行 mab aun list 确认，不要重试创建", 502, { created: true, aid });
             }
@@ -1839,6 +2023,25 @@ class AunPlugin {
             throw new AunCommandError("本机控制 API 响应未确认操作成功", 502);
         return result;
     }
+    async runtimeMenuSnapshot(aid) {
+        const pluginId = this.bindings[aid];
+        if (!pluginId)
+            throw new Error("当前身份未关联 Agent");
+        const keys = [...this.activeRuntimeSources].map(key => JSON.parse(key)).filter(key => key[0] === aid);
+        let config = {};
+        try {
+            config = await this.controlPayload(`/api/plugins/${encodeURIComponent(pluginId)}/config`);
+        }
+        catch { /* 无法读取配置时明确展示客户端管理，不猜测模型。 */ }
+        const text = (value) => typeof value === "string" && value.trim() && value.length <= 256 && !value.includes("******") ? value.trim() : undefined;
+        const desktop = !["personal-assistant", "claude-cli", "codex-cli"].includes(pluginId);
+        const delegated = pluginId === "personal-assistant" && config.modelProvider !== "openai" && config.modelProvider !== undefined;
+        const configured = !desktop && !delegated ? text(config.model) : undefined;
+        const model = configured ?? (delegated ? `由 ${text(config.modelPlugin) ?? text(config.modelProvider) ?? "模型来源"} 管理` : desktop ? "由桌面客户端管理（未上报具体模型）" : pluginId === "personal-assistant" ? "模型配置未上报" : "使用 CLI 默认模型（未上报具体模型）");
+        return { status: this.context?.pluginStatus(pluginId) === "ready" ? "running" : this.context?.pluginStatus(pluginId) ?? "unknown",
+            connected: this.clients.has(aid), activePeers: new Set(keys.map(key => key[1])).size, activeSessions: keys.length,
+            model, effort: "由客户端管理（未上报推理强度）", source: configured ? "agent" : "client" };
+    }
     async controlPayload(path, method = "GET", body) {
         const base = this.controlUrl();
         let response;
@@ -1932,6 +2135,17 @@ class AunPlugin {
         }
         if (await this.peerMessages?.accept(aid, payload))
             return;
+        const control = raw?.payload && typeof raw.payload === "object" ? raw.payload : undefined;
+        if (typeof control?.type === "string" && control.type.startsWith("menu.")) {
+            if (raw && await this.menu?.accept(aid, raw))
+                return;
+            await this.onAgentMdMenu(payload, aid);
+            return;
+        }
+        if (await this.onAgentMdText(raw, aid))
+            return;
+        if (await this.onNaturalProfile(raw, aid))
+            return;
         if (!agentPlugin) {
             this.context?.logger.warn("AUN 入站消息已忽略", { traceId: inboundId, aid, stage: "绑定检查", reason: "未绑定 Agent" });
             return;
@@ -1940,6 +2154,8 @@ class AunPlugin {
         const envelope = raw?.envelope && typeof raw.envelope === "object" ? raw.envelope : undefined;
         const sender = typeof raw?.from === "string" ? raw.from : typeof envelope?.from === "string" ? envelope.from : undefined;
         const inboundText = typeof raw?.payload === "string" ? raw.payload : typeof body?.text === "string" ? body.text : "";
+        if (raw && await this.menu?.accept(aid, raw))
+            return;
         const inboundThreadId = typeof body?.thread_id === "string" ? body.thread_id : undefined;
         if (inboundText === "确认" && this.ownerProof.hasPendingConfirmation(aid)) {
             const ownerAid = this.abilityOwners[aid];
@@ -2035,6 +2251,10 @@ class AunPlugin {
         }
         if (await this.onFsMessage(raw, message, aid))
             return;
+        if (this.menu && !await this.menu.allowsChat(aid, message.peerId)) {
+            this.context?.logger.info("AUN 联系人准入策略已拒绝消息", { aid, peer: message.peerId });
+            return;
+        }
         const sourceKey = JSON.stringify([aid, message.peerId, message.threadId ?? ""]);
         const pending = this.pendingMessages.get(sourceKey);
         if (pending && !message.attachments?.length && !message.attachmentError && newSessionCommand.test(message.text.trim())) {
@@ -2071,11 +2291,22 @@ class AunPlugin {
                 .finally(() => { notices.delete(notice); });
             notices.add(notice);
         };
-        const current = (pending ?? Promise.resolve()).catch(() => undefined).then(() => {
+        const current = (pending ?? Promise.resolve()).catch(() => undefined).then(async () => {
             clearInterval(queueTimer);
+            if (pending && this.menu && !await this.menu.allowsChat(aid, message.peerId))
+                return;
             if (pending)
                 reportQueue(true);
-            return this.processMessage(message, aid, agentPlugin, inboundId);
+            const isPrivate = !raw?.group_id && !raw?.group_aid && raw?.chat_type !== "group" && !envelope?.group_id && !envelope?.group_aid && envelope?.chat_type !== "group" && aidPattern.test(message.peerId);
+            if (isPrivate)
+                this.activeRuntimeSources.add(sourceKey);
+            try {
+                return await this.processMessage(message, aid, agentPlugin, inboundId);
+            }
+            finally {
+                if (isPrivate)
+                    this.activeRuntimeSources.delete(sourceKey);
+            }
         });
         this.pendingMessages.set(sourceKey, current);
         if (pending) {
@@ -2149,6 +2380,125 @@ class AunPlugin {
         }
         return true;
     }
+    agentMdPort(aid) {
+        const connection = this.clients.get(aid);
+        const store = this.store;
+        if (!connection || !store)
+            throw new AunCommandError("目标 AID 当前未连接");
+        const context = this.context;
+        const binding = this.bindings[aid];
+        const current = () => this.acceptingMessages && this.context === context && this.clients.get(aid) === connection && this.store === store && this.bindings[aid] === binding;
+        return {
+            current,
+            read: async () => {
+                const result = await (0, ownership_1.readAunOwnership)(store, connection.client, aid);
+                return { content: result.agentMd.content, etag: result.agentMd.etag ?? "", ownership: result.ownership };
+            },
+            parse: content => {
+                if (!this.sdk?.validateAgentMdDocument)
+                    throw Object.assign(new Error("SDK 不支持名片校验"), { code: "NOT_SUPPORTED" });
+                return this.sdk.validateAgentMdDocument(content, { expectedAid: aid, validateOwnership: false });
+            },
+            upload: async (content, sourceGuard) => {
+                if (!store.uploadAgentMd)
+                    throw Object.assign(new Error("SDK 不支持名片上传"), { code: "NOT_SUPPORTED" });
+                const result = await store.uploadAgentMd(aid, content, { sourceGuard });
+                if (!result.ok)
+                    throw Object.assign(new Error("SDK 名片上传未完成"), { code: result.error?.code === "conflict" ? "REMOTE_VERSION_CONFLICT" : "PUBLISH_NOT_CONFIRMED" });
+            },
+        };
+    }
+    async onAgentMdMenu(value, aid) {
+        const port = this.agentMdPort(aid);
+        const response = await this.agentMdMenu.handle(value, aid, port);
+        if (!response || !port.current())
+            return;
+        const event = value;
+        const envelope = event.envelope && typeof event.envelope === "object" ? event.envelope : undefined;
+        const peer = typeof event.from === "string" ? event.from : envelope?.from;
+        if (typeof peer !== "string" || !aidPattern.test(peer) || event.encrypted !== true || (envelope?.from !== undefined && envelope.from !== peer))
+            return;
+        try {
+            await this.callAunWithRecovery(aid, { to: peer, encrypt: true, payload: response, ...(typeof event.sender_device_id === "string" ? { to_device_id: event.sender_device_id } : {}) });
+        }
+        catch (error) {
+            this.context?.logger.warn("AUN 名片 Menu 响应未确认，请刷新远端状态", { aid, peer, error: safeError(error) });
+        }
+    }
+    async onNaturalProfile(event, receiverAid) {
+        if (!event || this.bindings[receiverAid] !== "personal-assistant")
+            return false;
+        const body = event.payload && typeof event.payload === "object" && !Array.isArray(event.payload) ? event.payload : undefined;
+        if (body?.type !== undefined && body.type !== "text")
+            return false;
+        const text = typeof event.payload === "string" ? event.payload : typeof body?.text === "string" ? body.text : "";
+        const command = (0, agentmd_natural_1.parseNaturalProfileCommand)(text);
+        if (!command)
+            return false;
+        const envelope = event.envelope && typeof event.envelope === "object" ? event.envelope : undefined;
+        const peer = typeof event.from === "string" ? event.from : envelope?.from;
+        if (typeof peer !== "string" || !aidPattern.test(peer) || event.encrypted !== true || (envelope?.from !== undefined && envelope.from !== peer) || (event.to !== undefined && event.to !== receiverAid) || (envelope?.to !== undefined && envelope.to !== receiverAid) || event.group_id || envelope?.group_id || event.group_aid || envelope?.group_aid || event.chat_type === "group" || envelope?.chat_type === "group")
+            return true;
+        let response;
+        try {
+            if (body?.attachments !== undefined || Buffer.byteLength(text) > 16 * 1024)
+                throw new Error("名片设置请使用不带附件的简短文字");
+            // 先核验当前用户对个人助理的权限，不使用消息正文自报身份。
+            const receiver = this.agentMdPort(receiverAid);
+            await this.agentMdMenu.text(event, receiverAid, "get", [], receiver);
+            const matches = command.target.includes(".") ? [...this.clients.keys()].filter(aid => aid === command.target) : [...this.clients.keys()].filter(aid => aid.split(".")[0] === command.target);
+            if (matches.length !== 1)
+                throw new Error(matches.length ? "目标名称有歧义，请提供完整 AID" : "目标未连接，请提供本机已连接 Agent 的准确 AID");
+            const target = matches[0];
+            const port = this.agentMdPort(target);
+            const data = await this.agentMdMenu.text(event, target, command.verb, command.values, { ...port, current: () => receiver.current() && port.current() }, receiverAid);
+            response = command.verb === "get" ? `${target} 当前名片：\n${data.content}` : `已更新 ${target} 的${command.values[0] === "description" ? "描述" : command.values[0] === "name" ? "名称" : "能力介绍"}，并通过远端验签读回确认。\n\n${command.values[1]}\n\n请在 App 刷新该 Agent 的资料页查看。`;
+        }
+        catch (error) {
+            response = `名片设置未完成：${safeError(error)}。没有确认成功前，请先查看目标名片，不要重复提交。`;
+        }
+        try {
+            await this.sendText(receiverAid, peer, response, typeof body?.thread_id === "string" ? body.thread_id : undefined, true);
+        }
+        catch (error) {
+            this.context?.logger.warn("个人助理名片设置回复未确认", { receiverAid, peer, error: safeError(error) });
+        }
+        return true;
+    }
+    async onAgentMdText(event, aid) {
+        if (!event)
+            return false;
+        const body = event.payload && typeof event.payload === "object" && !Array.isArray(event.payload) ? event.payload : undefined;
+        if (body?.type !== undefined && body.type !== "text")
+            return false;
+        const text = typeof event.payload === "string" ? event.payload : typeof body?.text === "string" ? body.text : "";
+        if (!/^(?:ec[ \t]+aid|mab[ \t]+aun)[ \t]+agentmd(?:[ \t]+|$)/.test(text))
+            return false;
+        const envelope = event.envelope && typeof event.envelope === "object" ? event.envelope : undefined;
+        const peer = typeof event.from === "string" ? event.from : envelope?.from;
+        if (typeof peer !== "string" || !aidPattern.test(peer) || event.encrypted !== true || (envelope?.from !== undefined && envelope.from !== peer) || event.group_id || envelope?.group_id || event.chat_type === "group" || envelope?.chat_type === "group")
+            return true;
+        let response;
+        try {
+            if (Buffer.byteLength(text) > 16 * 1024 || body?.attachments !== undefined)
+                throw new Error("名片命令不接受附件，且不能超过 16 KiB");
+            const command = (0, agentmd_command_1.parseAgentMdCommand)(text);
+            if (command.aid !== aid)
+                throw new Error("名片命令只能操作当前聊天的 Agent AID");
+            const data = await this.agentMdMenu.text(event, aid, command.verb, command.values, this.agentMdPort(aid));
+            response = command.json ? JSON.stringify({ ok: true, data }, null, 2) : command.verb === "get" ? String(data.content) : "能力介绍与名片已发布，并通过远端读回确认。App 刷新资料后可查看。";
+        }
+        catch (error) {
+            response = `名片命令未完成：${safeError(error)}。请先读取当前名片核对状态。`;
+        }
+        try {
+            await this.sendText(aid, peer, response, typeof body?.thread_id === "string" ? body.thread_id : undefined, true);
+        }
+        catch (error) {
+            this.context?.logger.warn("AUN 名片文本命令回复未确认，请核对远端状态", { aid, peer, error: safeError(error) });
+        }
+        return true;
+    }
     async onAbilityMessage(value, aid) {
         const receivedAt = Date.now();
         const call = (0, ability_operations_1.parseAbilityEnvelope)(value);
@@ -2170,8 +2520,11 @@ class AunPlugin {
             else {
                 const definitions = await this.abilityDefinitions(aid);
                 const capabilities = this.abilityOwners[aid] && this.abilityOperations && !this.abilityAuditUnavailable && this.context?.callPluginAbility
-                    ? definitions.filter(definition => (this.abilitySelections[aid] ?? []).includes(definition.path) && this.abilityLedgers[aid]?.[definition.path]?.definition_id === (0, ability_publication_1.abilityDefinitionId)({ ...definition })).map(({ contract_revision: _revision, ...definition }) => ({ ...definition, definition_id: this.abilityLedgers[aid][definition.path].definition_id })) : [];
-                result = { type: "ability", role: "result", call_id: payload.call_id, operation_id: payload.operation_id, ability_path: "protocol/discover", ok: true, execution_state: "completed", result: { spec_version: "aid-ability/2", capabilities } };
+                    ? definitions.filter(definition => (this.abilitySelections[aid] ?? []).includes(definition.path) && this.abilityLedgers[aid]?.[definition.path]?.definition_id === (0, ability_publication_1.abilityDefinitionId)({ ...definition })).map(({ contract_revision: _revision, ...definition }) => {
+                        const published = this.abilityLedgers[aid][definition.path];
+                        return { ...definition, definition_id: published.definition_id, release_id: published.release_id, plugin_version: published.plugin_version, detail_ref: `${aid}:/ability/definitions/${published.definition_id}/${definition.path}.json` };
+                    }) : [];
+                result = { type: "ability", role: "result", call_id: payload.call_id, operation_id: payload.operation_id, ability_path: "protocol/discover", ok: true, execution_state: "completed", result: { protocol: { spec_version: "aid-ability/2" }, spec_version: "aid-ability/2", capabilities } };
             }
         }
         else {
@@ -2215,8 +2568,20 @@ class AunPlugin {
                             else {
                                 const draft = await store.draft({ providerAid: aid, authenticatedCaller: callerAid, operationId: String(payload.operation_id), callId: String(payload.call_id), path, definitionId: String(payload.definition_id), params, effects: definition.effects, dedupeRetentionSeconds: definition.dedupe_retention_seconds, executionTarget: { pluginId, pluginVersion, ownerAid }, expiresAt, ...(payload.async === undefined ? {} : { async: payload.async }) });
                                 result = this.abilityOperationResponse(draft.entry);
-                                if (draft.created)
-                                    ownerNotice = draft.entry;
+                                if (draft.created) {
+                                    const grant = await store.activeGrant(draft.entry);
+                                    if (grant) {
+                                        const context = this.context;
+                                        const authorized = () => this.context === context && this.abilityOperations === store && this.acceptingMessages
+                                            && !this.revokingAbilityAids.has(aid) && this.clients.has(aid) && this.bindings[aid] === pluginId
+                                            && this.abilityOwners[aid] === ownerAid && this.isAbilityOwnerVerified(aid, ownerAid);
+                                        const decision = await this.decideAbilityOperation(draft.entry.key, draft.entry.confirmationFingerprint, true, authorized, aid, { grantId: grant.id, deliver: false });
+                                        result = decision.result ?? result;
+                                        this.context?.logger.info("AUN Ability 使用已存在的持续授权", { aid, callerAid, path, operationId: payload.operation_id, grantId: grant.id, stage: "持续授权准入" });
+                                    }
+                                    else
+                                        ownerNotice = draft.entry;
+                                }
                             }
                         }
                     }
@@ -2242,7 +2607,7 @@ class AunPlugin {
         const pending = (await this.abilityOperations?.pending() ?? []).filter(item => item.providerAid === entry.providerAid);
         if (pending.length !== 1 && !view.explicit)
             view.entries = undefined;
-        const text = `有新的远程 Ability 调用申请\n${this.abilityEntrySummary(entry)}\n\n审批窗口最长 12 小时，不会延长调用最晚启动时间或协议 TTL。\n只有本话题中唯一、已完整投递的申请可直接回复“确认”或“拒绝”；多项、已处理或不确定时先发送 /ability pending 查看固定清单。`;
+        const text = `有新的远程 Ability 调用申请\n${this.abilityEntrySummary(entry)}\n\n审批窗口最长 12 小时，不会延长调用最晚启动时间或协议 TTL。\n只有本话题中唯一、已完整投递的申请可直接回复“确认”或“拒绝”；也可回复“允许12小时”或“永久允许”明确授权该 Peer 对此能力的所有合法参数。多项、已处理或不确定时先发送 /ability pending 查看固定清单，再回复编号（如 1,2,4）处理选中项。`;
         try {
             await this.sendAbilityControlText(entry.providerAid, ownerAid, text);
             const current = (await this.abilityOperations?.pending() ?? []).filter(item => item.providerAid === entry.providerAid);
@@ -2285,6 +2650,8 @@ class AunPlugin {
             return { code: "ability_not_found", message: "绑定的 Agent 不再声明指定能力" };
         if (published.definition_id !== definitionId || definitionId !== (0, ability_publication_1.abilityDefinitionId)({ ...definition }))
             return { code: "contract_changed", message: "能力契约已变更，请重新发现后确认" };
+        if (path === "agent/task/run" && typeof params.task === "string" && !params.task.trim())
+            return { code: "invalid_params", message: "任务参数 task 不能只包含空白" };
         const ajv = new _2020_1.default({ allErrors: true, strict: false });
         const validate = ajv.compile(definition.params_schema);
         if (!validate(params))