evolcore 0.0.1 → 0.0.3

package/dist/agents/runner-types.js

@@ -0,0 +1,75 @@
+export const BASEAGENT_RUNNER_UNAVAILABLE = 'BASEAGENT_RUNNER_UNAVAILABLE';
+export class BaseagentRunnerUnavailableError extends Error {
+    evolagentName;
+    baseagent;
+    availableBaseagents;
+    code = BASEAGENT_RUNNER_UNAVAILABLE;
+    constructor(evolagentName, baseagent, availableBaseagents) {
+        super(`Baseagent runner unavailable: ${evolagentName}::${baseagent}`);
+        this.evolagentName = evolagentName;
+        this.baseagent = baseagent;
+        this.availableBaseagents = availableBaseagents;
+        this.name = 'BaseagentRunnerUnavailableError';
+    }
+}
+// ── 类型守卫 ──
+export function hasModelSwitcher(agent) {
+    return typeof agent.setModel === 'function' && typeof agent.listModels === 'function';
+}
+export function hasPermissionController(agent) {
+    return typeof agent.setMode === 'function' && typeof agent.listModes === 'function';
+}
+export function hasCompact(agent) {
+    return typeof agent.compact === 'function';
+}
+export function hasClearSession(agent) {
+    return typeof agent.clearSession === 'function';
+}
+// ── Token usage helper functions ──
+export function numericToken(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : 0;
+}
+export function contextTokensForUsage(usage, isClaudeModel) {
+    if (!usage)
+        return 0;
+    if (!isClaudeModel)
+        return numericToken(usage.input_tokens);
+    return numericToken(usage.input_tokens)
+        + numericToken(usage.cache_creation_input_tokens)
+        + numericToken(usage.cache_read_input_tokens);
+}
+export function usageForContext(usage) {
+    const iterations = Array.isArray(usage?.iterations) ? usage.iterations : undefined;
+    const lastIteration = iterations?.slice().reverse().find(it => contextTokensForUsage(it, true) > 0);
+    return lastIteration ?? usage;
+}
+/** Models whose base ID uses a 1M context window when sent to the SDK with [1m]. */
+export const ONE_M_CONTEXT_MODEL_PREFIXES = ['claude-opus-4-8', 'claude-sonnet-4-6'];
+const ONE_M_CONTEXT_MODEL_ALIASES = ['opus', 'sonnet'];
+const CLAUDE_CONTEXT_MODEL_ALIASES = ['opus', 'sonnet', 'haiku'];
+export function isClaudeContextUsageModel(model) {
+    if (!model)
+        return false;
+    const baseModel = model.replace(/\[1m\]$/i, '');
+    return /^claude-/i.test(baseModel) || CLAUDE_CONTEXT_MODEL_ALIASES.includes(baseModel);
+}
+export function isOneMillionContextModel(model) {
+    if (!model)
+        return false;
+    if (ONE_M_CONTEXT_MODEL_ALIASES.includes(model))
+        return true;
+    if (/\[1m\]$/i.test(model))
+        return true;
+    if (/deepseek-v4/i.test(model))
+        return true;
+    const baseModel = model.replace(/\[1m\]$/i, '');
+    return ONE_M_CONTEXT_MODEL_PREFIXES.some(prefix => baseModel === prefix || baseModel.startsWith(`${prefix}-`));
+}
+/** Real context window size: 1M models = 1000000, otherwise 200000. */
+export function realContextWindowForModel(model) {
+    return isOneMillionContextModel(model) ? 1000000 : 200000;
+}
+/** autoCompact trigger threshold: 180000 for all models (conservative for cache limits). */
+export function autoCompactWindowForModel(_model) {
+    return 180000;
+}

package/dist/aun/aid/agentmd.js

@@ -0,0 +1,216 @@
+import fs from 'fs';
+import path from 'path';
+import { getAidStore, loadAid, SLOT } from './store.js';
+import { agentMdPath, aidLocalDir, resolveRoot } from '../../paths.js';
+export function buildInitialAgentMd(opts) {
+    const agentName = opts.aid.split('.')[0];
+    const agentType = opts.type || 'ai';
+    return `---\naid: "${opts.aid}"\nname: "${agentName}"\ntype: "${agentType}"\nversion: "1.0.0"\ndescription: ""\ntags:\n  - evolcore\n---\n`;
+}
+function ensureTrailingNewline(content) {
+    return content.endsWith('\n') ? content : `${content}\n`;
+}
+function lineValue(line) {
+    return line.replace(/\r?\n$/, '');
+}
+function lineEnding(line, fallback) {
+    return line.match(/\r?\n$/)?.[0] ?? fallback;
+}
+function yamlDoubleQuote(value) {
+    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+/**
+ * Remove the SDK-generated trailing signature block before modifying agent.md.
+ * Only a block at EOF is stripped, so body text that mentions AUN-SIGNATURE is preserved.
+ */
+export function stripAgentMdSignature(content) {
+    const signature = content.match(/(?:\r?\n)?<!-- AUN-SIGNATURE[\s\S]*?-->\s*$/);
+    if (!signature || signature.index === undefined)
+        return ensureTrailingNewline(content);
+    return ensureTrailingNewline(content.slice(0, signature.index));
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function updateAgentMdFrontmatterField(content, key, value, insertAfterKey) {
+    const original = content;
+    const payload = stripAgentMdSignature(content);
+    const lines = payload.match(/[^\n]*\n|[^\n]+$/g) ?? [];
+    const openLine = lines[0];
+    if (!openLine || lineValue(openLine) !== '---') {
+        throw new Error('agent.md has no YAML frontmatter');
+    }
+    const closeIndex = lines.findIndex((line, index) => index > 0 && lineValue(line) === '---');
+    if (closeIndex < 0) {
+        throw new Error('agent.md frontmatter is not closed');
+    }
+    const defaultEol = lineEnding(openLine, '\n');
+    const fmLines = lines.slice(1, closeIndex);
+    const fieldPattern = new RegExp(`^${escapeRegExp(key)}\\s*:`);
+    const fieldIndex = fmLines.findIndex(line => fieldPattern.test(lineValue(line)));
+    if (fieldIndex >= 0) {
+        const existingLine = fmLines[fieldIndex] ?? '';
+        fmLines[fieldIndex] = `${key}: ${yamlDoubleQuote(value)}${lineEnding(existingLine, defaultEol)}`;
+    }
+    else {
+        const anchorPattern = insertAfterKey ? new RegExp(`^${escapeRegExp(insertAfterKey)}\\s*:`) : null;
+        const anchorIndex = anchorPattern ? fmLines.findIndex(line => anchorPattern.test(lineValue(line))) : -1;
+        const insertIndex = anchorIndex >= 0 ? anchorIndex + 1 : fmLines.length;
+        fmLines.splice(insertIndex, 0, `${key}: ${yamlDoubleQuote(value)}${defaultEol}`);
+    }
+    const updated = ensureTrailingNewline([
+        lines[0],
+        ...fmLines,
+        ...lines.slice(closeIndex),
+    ].join(''));
+    return { content: updated, changed: updated !== original };
+}
+export function updateAgentMdFrontmatterAvatar(content, avatarUrl) {
+    return updateAgentMdFrontmatterField(content, 'avatar', avatarUrl, 'version');
+}
+export function updateAgentMdFrontmatterName(content, name) {
+    return updateAgentMdFrontmatterField(content, 'name', name, 'aid');
+}
+/** Normalize an SDK verification result to the local union type. */
+function normalizeVerification(v) {
+    const status = v.status === 'verified' ? 'verified' : v.status === 'unsigned' ? 'unsigned' : 'invalid';
+    return { status, ...(v.reason ? { reason: String(v.reason) } : {}) };
+}
+/**
+ * Verify locally-cached agent.md content offline via the AID value object.
+ * Loads the peer cert through the store (no network, no private key required).
+ */
+function verifyLocal(store, aid, content) {
+    if (!content.includes('AUN-SIGNATURE')) {
+        return { status: 'unsigned' };
+    }
+    try {
+        const aidObj = loadAid(store, aid);
+        const r = aidObj.verifyAgentMd(content);
+        if (!r.ok)
+            return { status: 'invalid', reason: r.error.message };
+        return normalizeVerification(r.data);
+    }
+    catch (e) {
+        // loadAid throws AidLoadError when the peer cert is missing/invalid.
+        return { status: 'invalid', reason: `certificate not available: ${String(e?.message || e).slice(0, 100)}` };
+    }
+}
+export async function agentmdGet(aid, opts) {
+    const aunPath = opts?.aunPath ?? resolveRoot();
+    const store = opts?.store ?? await getAidStore({ slotId: SLOT.cli, aunPath });
+    const ownStore = !opts?.store;
+    const localPath = agentMdPath(aid);
+    try {
+        let content;
+        let verification;
+        const r = await store.downloadAgentMd(aid);
+        if (r.ok) {
+            content = r.data.content;
+            verification = normalizeVerification(r.data.verification);
+        }
+        else {
+            // Network/fetch failed — fall back to local file.
+            if (!fs.existsSync(localPath)) {
+                throw new Error(`fetch agent.md failed for ${aid}: ${r.error.message}`);
+            }
+            content = fs.readFileSync(localPath, 'utf-8');
+            if (opts?.withVerification) {
+                verification = verifyLocal(store, aid, content);
+            }
+        }
+        if (!opts?.withVerification)
+            return content;
+        return { content, verification: verification ?? { status: 'unsigned' } };
+    }
+    finally {
+        if (ownStore)
+            try {
+                store.close();
+            }
+            catch { /* ignore */ }
+    }
+}
+/**
+ * Upload agent.md: write local file → store.uploadAgentMd (auto-auth + sign + upload).
+ *
+ * fastaun 0.4.7: uploadAgentMd moved from AUNClient to AIDStore; the store builds
+ * its own LocalTokenStore + AuthFlow internally, so no AUNClient/authenticate needed.
+ */
+export async function agentmdPut(content, opts) {
+    const aunPath = opts.aunPath ?? resolveRoot();
+    const store = opts.store ?? await getAidStore({ slotId: SLOT.cli, aunPath });
+    const ownStore = !opts.store;
+    const dir = aidLocalDir(opts.aid);
+    const filePath = path.join(dir, 'agent.md');
+    const existed = fs.existsSync(filePath);
+    // 先写本地文件（与旧行为一致：本地内容更新应在上传失败时仍保留）
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(filePath, content, 'utf-8');
+    try {
+        const r = await store.uploadAgentMd(opts.aid, content);
+        if (!r.ok)
+            throw new Error(`upload agent.md failed for ${opts.aid}: ${r.error.message}`);
+    }
+    catch (e) {
+        // 上传失败：仅当文件原本不存在（本次新建）时回滚，避免留下孤儿文件；
+        // 已存在的文件保留新内容（旧语义）。
+        if (!existed)
+            try {
+                fs.unlinkSync(filePath);
+            }
+            catch { /* ignore */ }
+        throw e;
+    }
+    finally {
+        if (ownStore)
+            try {
+                store.close();
+            }
+            catch { /* ignore */ }
+    }
+}
+/**
+ * Check if agent.md is up-to-date (30-day TTL), fetch if changed.
+ * Returns changed=true + content when a new version was downloaded.
+ *
+ * verification 透传 SDK 的验签结果：
+ * - downloaded（changed=true）时为 SDK downloadAgentMd 的 verification
+ * - 命中本地缓存或网络失败 fallback 时为 undefined（调用方需自行离线验签或视为未验证）
+ *
+ * Note: store.checkAgentMd tracks freshness via the store's in-memory cache,
+ * so a freshly-built store reports local_found=false and will fetch.
+ */
+export async function agentmdSync(aid, opts) {
+    const aunPath = opts?.aunPath ?? resolveRoot();
+    const store = opts?.store ?? await getAidStore({ slotId: SLOT.cli, aunPath });
+    const ownStore = !opts?.store;
+    const localPath = agentMdPath(aid);
+    try {
+        const check = await store.checkAgentMd(aid, 30);
+        // In sync (cache fresh) — return local file content with cached verification status.
+        if (check.ok && !check.data.needs_update && check.data.local_found) {
+            const content = fs.existsSync(localPath) ? fs.readFileSync(localPath, 'utf-8') : undefined;
+            const verification = check.data.verify_status
+                ? normalizeVerification({ status: check.data.verify_status, reason: check.data.verify_error || undefined })
+                : undefined;
+            return { changed: false, content, verification };
+        }
+        // Needs update (or check failed) — fetch fresh content.
+        // SDK's downloadAgentMd persists to disk internally (AgentMdManager.saveRecord → writeContent).
+        const fetched = await store.downloadAgentMd(aid);
+        if (fetched.ok) {
+            return { changed: true, content: fetched.data.content, verification: normalizeVerification(fetched.data.verification) };
+        }
+        // Fetch failed (network) — fall back to local file if present.
+        const content = fs.existsSync(localPath) ? fs.readFileSync(localPath, 'utf-8') : undefined;
+        return { changed: false, content };
+    }
+    finally {
+        if (ownStore)
+            try {
+                store.close();
+            }
+            catch { /* ignore */ }
+    }
+}

package/dist/aun/aid/client.js

@@ -0,0 +1,132 @@
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { execFileSync } from 'child_process';
+import { isWindows } from '../../utils/cross-platform.js';
+/**
+ * Suppress SDK console logs (DEBUG/INFO/WARN) in CLI context.
+ * Call once at CLI entry point — NOT at module load time, to avoid
+ * affecting the daemon process which imports this module for slash commands.
+ */
+export function suppressSdkLogs() {
+    process.env.AUN_LOG_INI_DISABLE = '1';
+    const _origLog = console.log;
+    const _origInfo = console.info;
+    const _origWarn = console.warn;
+    const _origStderrWrite = process.stderr.write.bind(process.stderr);
+    const SDK_LOG_RE = /^\[\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d+\]\[(?:DEBUG|INFO|WARN|ERROR)\]/;
+    const KEYSTORE_WARN_RE = /seed migration failed; continuing with legacy \.seed/;
+    console.log = (...args) => { if (typeof args[0] === 'string' && SDK_LOG_RE.test(args[0]))
+        return; _origLog(...args); };
+    console.info = (...args) => { if (typeof args[0] === 'string' && SDK_LOG_RE.test(args[0]))
+        return; _origInfo(...args); };
+    console.warn = (...args) => { if (typeof args[0] === 'string' && SDK_LOG_RE.test(args[0]))
+        return; _origWarn(...args); };
+    console.error = (...args) => { if (typeof args[0] === 'string' && SDK_LOG_RE.test(args[0]))
+        return; process.stderr.write(args.map(String).join(' ') + '\n'); };
+    // Also intercept direct stderr writes from Rust SDK
+    process.stderr.write = function (chunk, encoding, callback) {
+        const str = String(chunk);
+        // Filter out keystore migration warnings and other SDK logs
+        if (SDK_LOG_RE.test(str) || KEYSTORE_WARN_RE.test(str)) {
+            if (typeof encoding === 'function') {
+                encoding(); // callback is in encoding position
+            }
+            else if (callback) {
+                callback();
+            }
+            return true;
+        }
+        return _origStderrWrite(chunk, encoding, callback);
+    };
+}
+// ==================== Constants ====================
+export const MIN_AUN_CORE_SDK = [0, 4, 3];
+export const AUN_CORE_SDK_PKG = '@agentunion/fastaun';
+// ==================== SDK & Environment ====================
+function compareVersion(a, min) {
+    const parts = a.split('.').map(n => parseInt(n, 10));
+    if (parts.length < 3 || parts.some(isNaN))
+        return false;
+    if (parts[0] !== min[0])
+        return parts[0] > min[0];
+    if (parts[1] !== min[1])
+        return parts[1] > min[1];
+    return parts[2] >= min[2];
+}
+export function isAunSdkVersionOk(version) {
+    return compareVersion(version, MIN_AUN_CORE_SDK);
+}
+export function resolveAunCoreSdkPkg() {
+    try {
+        let dir = path.dirname(fileURLToPath(import.meta.url));
+        while (true) {
+            const candidate = path.join(dir, 'node_modules', AUN_CORE_SDK_PKG, 'package.json');
+            if (fs.existsSync(candidate)) {
+                const data = JSON.parse(fs.readFileSync(candidate, 'utf-8'));
+                if (data.name === AUN_CORE_SDK_PKG)
+                    return { version: data.version, path: candidate };
+            }
+            const parent = path.dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    catch { /* fall through */ }
+    try {
+        const npmCmd = isWindows ? 'npm.cmd' : 'npm';
+        const globalRoot = execFileSync(npmCmd, ['root', '-g'], {
+            encoding: 'utf-8', timeout: 10000, shell: isWindows,
+        }).trim();
+        const pkgPath = path.join(globalRoot, AUN_CORE_SDK_PKG, 'package.json');
+        if (fs.existsSync(pkgPath)) {
+            const data = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+            return { version: data.version, path: pkgPath };
+        }
+    }
+    catch { /* not found */ }
+    return null;
+}
+export async function ensureAunSdk() {
+    const installed = resolveAunCoreSdkPkg();
+    if (installed && isAunSdkVersionOk(installed.version))
+        return;
+    const { npmInstallGlobal } = await import('../../utils/npm-ops.js');
+    console.log(`正在安装 ${AUN_CORE_SDK_PKG}@latest...`);
+    await npmInstallGlobal(`${AUN_CORE_SDK_PKG}@latest`);
+}
+export function isAunSdkReady() {
+    const installed = resolveAunCoreSdkPkg();
+    return !!(installed && isAunSdkVersionOk(installed.version));
+}
+// ==================== CA Root ====================
+export async function downloadCaRoot(aunPath, gatewayUrl, indent = '') {
+    const caDir = path.join(aunPath, 'CA', 'root');
+    const caCertPath = path.join(caDir, 'root.crt');
+    if (fs.existsSync(caCertPath))
+        return true;
+    if (!gatewayUrl)
+        return false;
+    try {
+        fs.mkdirSync(caDir, { recursive: true });
+        const gwHttp = gatewayUrl.replace(/^wss?:/, 'https:').replace(/\/aun$/, '');
+        const resp = await fetch(`${gwHttp}/pki/chain`, { redirect: 'follow' });
+        if (!resp.ok) {
+            console.warn(`${indent}⚠ CA 根证书下载失败: HTTP ${resp.status}`);
+            return false;
+        }
+        const body = await resp.text();
+        if (!body.includes('BEGIN CERTIFICATE')) {
+            console.warn(`${indent}⚠ CA 根证书响应内容无效，跳过写入`);
+            return false;
+        }
+        fs.writeFileSync(caCertPath, body);
+        console.log(`${indent}✓ CA 根证书已下载`);
+        return true;
+    }
+    catch (e) {
+        console.warn(`${indent}⚠ CA 根证书下载失败: ${e}，可稍后手动下载`);
+        return false;
+    }
+}

package/dist/aun/aid/control-aid.js

@@ -0,0 +1,91 @@
+import crypto from 'crypto';
+import { aidCreate } from './index.js';
+import { getAidStore, SLOT } from './store.js';
+import { logger } from '../../utils/logger.js';
+const MAX_ATTEMPTS = 5;
+/** 解析控制 AID 的 issuer：环境变量 EVOLCORE_ISSUER → 兜底 agentid.pub */
+export function resolveControlIssuer() {
+    const env = process.env.EVOLCORE_ISSUER?.trim();
+    if (env) {
+        // Validate issuer format: must be valid domain-like structure
+        if (!/^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i.test(env)) {
+            logger.error(`[control-aid] Invalid EVOLCORE_ISSUER format: ${env}, using default`);
+            return 'agentid.pub';
+        }
+        // Prevent localhost/local domains
+        if (env === 'localhost' || env.endsWith('.localhost') || env.startsWith('127.') || env.startsWith('0.')) {
+            logger.error(`[control-aid] EVOLCORE_ISSUER cannot be localhost/local: ${env}, using default`);
+            return 'agentid.pub';
+        }
+        // Length limit
+        if (env.length > 253) {
+            logger.error(`[control-aid] EVOLCORE_ISSUER too long: ${env.length} chars, using default`);
+            return 'agentid.pub';
+        }
+    }
+    return env || 'agentid.pub';
+}
+/** 生成候选控制 AID：ec + 5位随机数字 + .{issuer} */
+export function candidateAid(issuer) {
+    const n = crypto.randomInt(10000, 100000); // 5 位：10000-99999
+    const finalIssuer = issuer || resolveControlIssuer();
+    return `ec${n}.${finalIssuer}`;
+}
+/**
+ * 候选 AID 是否已在 PKI 注册。
+ *
+ * 不用 store.exists（它走 HTTP HEAD /pki/cert/<aid>）——部分 Gateway 实现
+ * （Python websockets HTTP 处理）对 HEAD 直接空响应断连（curl 52 / socket hang up），
+ * 导致 exists 误报"网关不可达"。改用 store.resolve（走 GET），语义等价且 GET 正常返回：
+ *   - resolve ok            → 证书存在（HTTP 200）→ 已注册
+ *   - CERT_NOT_FOUND        → 404 → 未注册
+ *   - 其它 error            → 真·网络错误，向上抛出供 fail-fast
+ * skipAgentMd:true 避免多拉一次 agent.md（控制 AID 本就不传 agent.md）。
+ */
+async function candidateExists(store, candidate) {
+    const r = await store.resolve(candidate, { skipAgentMd: true });
+    if (r.ok)
+        return true;
+    if (r.error?.code === 'CERT_NOT_FOUND')
+        return false;
+    throw new Error(`Gateway 不可达，无法查重控制 AID：${r.error?.message ?? 'unknown'}`);
+}
+/**
+ * 生成控制 AID：循环候选 → candidateExists 查重（权威 PKI 判据）→ 不冲突则 aidCreate。
+ * - 查重走 GET 证书（见 candidateExists；不拉 agent.md，控制 AID 本就不传 agent.md）
+ * - fail-fast：查重探测失败（网关不可达）立即抛错，不掩盖成"均冲突"
+ * - agent.md 不上传：aidCreate 仅注册身份 + 写私钥，不调 agentmdPut
+ */
+export async function generateControlAid() {
+    const issuer = resolveControlIssuer();
+    const store = await getAidStore({ slotId: SLOT.cli });
+    try {
+        for (let i = 0; i < MAX_ATTEMPTS; i++) {
+            const candidate = candidateAid(issuer);
+            if (await candidateExists(store, candidate)) {
+                logger.info(`[control-aid] ${candidate} 已注册，重试 (${i + 1}/${MAX_ATTEMPTS})`);
+                continue;
+            }
+            const created = await aidCreate(candidate);
+            // 清理 aidCreate 内部另开的 client/store——关闭失败不可丢弃已注册的 AID（否则下次 init
+            // 会把它当冲突，白白消耗一次重试）。close 异常降级为 warn。
+            try {
+                await created.client?.close?.();
+            }
+            catch (e) {
+                logger.warn(`[control-aid] client.close() 失败（非致命）: ${e}`);
+            }
+            try {
+                await created.store?.close?.();
+            }
+            catch (e) {
+                logger.warn(`[control-aid] store.close() 失败（非致命）: ${e}`);
+            }
+            return { aid: created.aid, gateway: created.gateway };
+        }
+        throw new Error(`无法生成控制 AID：连续 ${MAX_ATTEMPTS} 次候选均冲突`);
+    }
+    finally {
+        store.close();
+    }
+}