evolcore 0.0.24 → 0.0.26

package/dist/aun/aid/agentmd.js

@@ -4,6 +4,88 @@ import { parseDocument } from 'yaml';
 import { getAidStore, loadAid, SLOT } from './store.js';
 import { agentMdPath, aidLocalDir, resolveRoot } from '../../paths.js';
 export const DEFAULT_AGENT_DESCRIPTION = 'EvolCore AI agent.';
+/**
+ * AUN 主体类型白名单。没有 `ai` / `codeagent` 这类取值：使用大模型的服务程序
+ * 一律归为 `agent`。新建 AID 未指定类型时使用 DEFAULT_AGENT_TYPE。
+ */
+export const AGENT_TYPES = ['human', 'agent', 'group', 'service', 'device', 'org'];
+export const DEFAULT_AGENT_TYPE = 'agent';
+/**
+ * 归一化主体类型：大小写不敏感，统一收敛为白名单里的小写形式。
+ * `--type AGENT` / `Agent` 都接受，最终写进 agent.md 的一律是小写 `agent`。
+ * 返回 undefined 表示输入不是可识别的类型（交由 validateAgentType 报错）。
+ */
+export function normalizeAgentType(type) {
+    if (typeof type !== 'string')
+        return undefined;
+    const lowered = type.trim().toLowerCase();
+    return AGENT_TYPES.includes(lowered) ? lowered : undefined;
+}
+/** Return a human-readable validation error for a type value, or null when valid. */
+export function validateAgentType(type) {
+    if (typeof type !== 'string' || !type.trim())
+        return 'must be a non-empty string';
+    if (!normalizeAgentType(type))
+        return `must be one of ${AGENT_TYPES.join(', ')}`;
+    return null;
+}
+/**
+ * agent.md 的尺寸与字段上限，取值必须与 fastaun 的 agent-md-schema 保持一致，
+ * 否则本地校验通过、上传时才被 SDK 拒绝（失败点后移且提示不同）。
+ * 参考 @agentunion/fastaun dist/agent-md-schema.js。
+ */
+export const AGENT_MD_MAX_PAYLOAD_BYTES = 4096;
+export const AGENT_DESCRIPTION_MAX_LENGTH = 100;
+export const AGENT_AVATAR_MAX_LENGTH = 256;
+/** 按 Unicode 码点计数——与 SDK 的 Array.from(value).length 对齐（代理对算一个字符）。 */
+function codePointLength(value) {
+    return Array.from(value).length;
+}
+export const AGENT_TAG_MIN_COUNT = 3;
+export const AGENT_TAG_MAX_COUNT = 6;
+export const AGENT_TAG_MAX_LENGTH = 50;
+const AGENT_TAG_PATTERN = /^[\p{L}\p{N}-]+$/u;
+/** Return a human-readable validation error for one tag, or null when valid. */
+export function validateAgentTag(tag) {
+    if (typeof tag !== 'string' || !tag.trim())
+        return 'must be a non-empty string';
+    const normalized = tag.trim();
+    if (Array.from(normalized).length > AGENT_TAG_MAX_LENGTH) {
+        return `must be at most ${AGENT_TAG_MAX_LENGTH} characters`;
+    }
+    if (!AGENT_TAG_PATTERN.test(normalized)) {
+        return 'must contain only Unicode letters, numbers, and hyphens';
+    }
+    return null;
+}
+/**
+ * Validate an agent.md tags value. Count constraints are optional because
+ * existing published agent.md files may contain fewer than three tags.
+ */
+export function validateAgentTags(tags, options = {}) {
+    if (!Array.isArray(tags))
+        return ['must be an array of strings'];
+    const errors = [];
+    const normalized = new Set();
+    tags.forEach((tag, index) => {
+        const error = validateAgentTag(tag);
+        if (error) {
+            errors.push(`tag ${index + 1} ${error}`);
+            return;
+        }
+        const value = tag.trim();
+        normalized.add(value);
+    });
+    const minCount = options.minCount;
+    const maxCount = options.maxCount;
+    if (minCount !== undefined && normalized.size < minCount) {
+        errors.push(`must contain at least ${minCount} unique tags`);
+    }
+    if (maxCount !== undefined && normalized.size > maxCount) {
+        errors.push(`must contain at most ${maxCount} unique tags`);
+    }
+    return errors;
+}
 const displayNameCache = new Map();
 const displayNamePending = new Map();
 const displayNameRevision = new Map();
@@ -85,9 +167,20 @@ export function invalidateAgentDisplayName(aid) {
 }
 export function buildInitialAgentMd(opts) {
     const agentName = opts.name?.trim() || opts.aid.split('.')[0];
-    const agentType = opts.type || 'ai';
+    // 未指定类型时用 DEFAULT_AGENT_TYPE（agent）；指定了就必须落在 AGENT_TYPES 白名单内。
+    // 大小写不敏感，写进 agent.md 的一律是归一化后的小写形式。
+    const requestedType = opts.type?.trim() || DEFAULT_AGENT_TYPE;
+    const typeError = validateAgentType(requestedType);
+    if (typeError)
+        throw new Error(`Invalid agent.md type: ${typeError}`);
+    const agentType = normalizeAgentType(requestedType) ?? DEFAULT_AGENT_TYPE;
     const description = opts.description?.trim() || DEFAULT_AGENT_DESCRIPTION;
-    return `---\naid: ${yamlDoubleQuote(opts.aid)}\nname: ${yamlDoubleQuote(agentName)}\ntype: ${yamlDoubleQuote(agentType)}\nversion: "1.0.0"\ndescription: ${yamlDoubleQuote(description)}\ntags:\n  - evolcore\n---\n`;
+    const rawTags = opts.tags?.length ? opts.tags : ['evolcore'];
+    const tagErrors = validateAgentTags(rawTags);
+    if (tagErrors.length > 0)
+        throw new Error(`Invalid agent.md tags: ${tagErrors.join('; ')}`);
+    const tags = [...new Set(rawTags.map(tag => tag.trim()))];
+    return `---\naid: ${yamlDoubleQuote(opts.aid)}\nname: ${yamlDoubleQuote(agentName)}\ntype: ${yamlDoubleQuote(agentType)}\nversion: "1.0.0"\ndescription: ${yamlDoubleQuote(description)}\ntags:\n${tags.map(tag => `  - ${yamlDoubleQuote(tag)}\n`).join('')}---\n`;
 }
 function ensureTrailingNewline(content) {
     return content.endsWith('\n') ? content : `${content}\n`;
@@ -105,8 +198,9 @@ function yamlDoubleQuote(value) {
 export function validateAgentMdFrontmatter(content, expectedAid) {
     const errors = [];
     const payload = stripAgentMdSignature(content);
-    if (Buffer.byteLength(payload, 'utf8') > 4 * 1024) {
-        errors.push('agent.md must not exceed 4KB before the signature block');
+    const payloadBytes = Buffer.byteLength(payload, 'utf8');
+    if (payloadBytes > AGENT_MD_MAX_PAYLOAD_BYTES) {
+        errors.push(`agent.md frontmatter and body must not exceed ${AGENT_MD_MAX_PAYLOAD_BYTES} bytes before the signature block (current: ${payloadBytes} bytes)`);
     }
     const frontmatter = payload.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/)?.[1];
     if (!frontmatter)
@@ -135,19 +229,50 @@ export function validateAgentMdFrontmatter(content, expectedAid) {
     requiredString('name');
     requiredString('type');
     const version = requiredString('version');
-    const description = requiredString('description');
+    // description 是可选字段（fastaun ≥0.5.13 起不再要求非空）：缺失或空串都合法，
+    // 仅在实际提供时校验类型与长度，与 SDK 的 agent-md-schema 保持一致。
+    const rawDescription = values.description;
+    let description;
+    if (rawDescription !== undefined && rawDescription !== null) {
+        if (typeof rawDescription !== 'string') {
+            errors.push('agent.md frontmatter description must be a string');
+        }
+        else {
+            description = rawDescription.trim();
+        }
+    }
     if (expectedAid && aid && aid !== expectedAid) {
         errors.push(`agent.md frontmatter aid must match upload target ${expectedAid}`);
     }
     if (version && !/^\d+\.\d+\.\d+$/.test(version)) {
         errors.push('agent.md frontmatter version must use major.minor.patch format');
     }
-    if (description && description.length > 100) {
-        errors.push('agent.md frontmatter description must be at most 100 characters');
+    // 长度按 Unicode 码点计、且对未 trim 的原值计数——与 SDK 完全一致，
+    // 否则含 emoji 或尾随空格的名片会本地放行、上传才被拒。
+    if (typeof rawDescription === 'string') {
+        const length = codePointLength(rawDescription);
+        if (length > AGENT_DESCRIPTION_MAX_LENGTH) {
+            errors.push(`agent.md frontmatter description must be at most ${AGENT_DESCRIPTION_MAX_LENGTH} characters (current: ${length})`);
+        }
+    }
+    // avatar：SDK 有 256 字符上限，本地此前完全没校验。
+    const rawAvatar = values.avatar;
+    if (rawAvatar !== undefined && rawAvatar !== null) {
+        if (typeof rawAvatar !== 'string') {
+            errors.push('agent.md frontmatter avatar must be a string');
+        }
+        else {
+            const length = codePointLength(rawAvatar);
+            if (length > AGENT_AVATAR_MAX_LENGTH) {
+                errors.push(`agent.md frontmatter avatar must be at most ${AGENT_AVATAR_MAX_LENGTH} characters (current: ${length})`);
+            }
+        }
     }
-    if (values.tags !== undefined && (!Array.isArray(values.tags)
-        || values.tags.some(tag => typeof tag !== 'string' || !tag.trim()))) {
-        errors.push('agent.md frontmatter tags must be an array of non-empty strings');
+    if (values.tags !== undefined) {
+        const tagErrors = validateAgentTags(values.tags);
+        if (tagErrors.length > 0) {
+            errors.push(`agent.md frontmatter tags ${tagErrors.join('; ')}`);
+        }
     }
     return { valid: errors.length === 0, errors };
 }

package/dist/aun/aid/client.js

@@ -39,7 +39,7 @@ export function suppressSdkLogs() {
     };
 }
 // ==================== SDK package ====================
-export const MIN_AUN_CORE_SDK = [0, 5, 6];
+export const MIN_AUN_CORE_SDK = [0, 5, 16];
 export const AUN_CORE_SDK_PKG = '@agentunion/fastaun';
 function compareVersion(a, min) {
     const parts = a.split('.').map(n => parseInt(n, 10));

package/dist/aun/aid/identity.js

@@ -114,7 +114,7 @@ export async function verifySignAbility(aid, opts) {
         // signAgentMd validates the same frontmatter contract as a published agent.md.
         // Keep the probe minimal, but make it a valid document so self-checks do not
         // reject otherwise healthy identities before exercising sign + verify.
-        const probe = `---\naid: "${aid}"\nname: "probe"\ntype: "ai"\nversion: "1.0.0"\ndescription: "Local signing self-check"\ntags:\n  - evolcore\n---\n`;
+        const probe = `---\naid: "${aid}"\nname: "probe"\ntype: "agent"\nversion: "1.0.0"\ndescription: "Local signing self-check"\ntags:\n  - evolcore\n---\n`;
         const signRes = aidObj.signAgentMd(probe);
         if (!signRes.ok) {
             return { ok: false, reason: `sign failed: ${String(signRes.error?.message || signRes.error?.code).slice(0, 120)}` };

package/dist/aun/aid/index.js

@@ -1,4 +1,5 @@
+export { AGENT_TAG_MIN_COUNT, AGENT_TAG_MAX_COUNT, AGENT_TAG_MAX_LENGTH, validateAgentTag, validateAgentTags, } from './agentmd.js';
 export { isValidAid, aidList, aidListVerified, aidCreate, aidShow, aidDelete, aidLookup, verifySignAbility, probePkiRecoverability, appendAidLifecycle, readAidLifecycle } from './identity.js';
-export { DEFAULT_AGENT_DESCRIPTION, buildInitialAgentMd, validateAgentMdFrontmatter, agentmdGet, agentmdPut, agentmdSync, invalidateAgentDisplayName, parseAgentDisplayName, refreshAgentDisplayName, resolveAgentDisplayName, stripAgentMdSignature, updateAgentMdFrontmatterAvatar, updateAgentMdFrontmatterName, } from './agentmd.js';
+export { AGENT_TYPES, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_TYPE, normalizeAgentType, validateAgentType, buildInitialAgentMd, validateAgentMdFrontmatter, agentmdGet, agentmdPut, agentmdSync, invalidateAgentDisplayName, parseAgentDisplayName, refreshAgentDisplayName, resolveAgentDisplayName, stripAgentMdSignature, updateAgentMdFrontmatterAvatar, updateAgentMdFrontmatterName, } from './agentmd.js';
 export { MIN_AUN_CORE_SDK, AUN_CORE_SDK_PKG, isAunSdkVersionOk, resolveAunCoreSdkPkg, ensureAunSdk, isAunSdkReady, downloadCaRoot, suppressSdkLogs, } from './client.js';
 export { getAidStore, loadClient, loadAid, AidLoadError, SLOT } from './store.js';

package/dist/aun/aid/managed-operation.js

@@ -2,6 +2,7 @@ import fs from 'fs';
 import path from 'path';
 import { resolveRoot } from '../../paths.js';
 import { agentmdGet, agentmdPut } from './agentmd.js';
+import { uploadAvatarBuffer, uploadAvatarUrl } from '../../utils/avatar-upload.js';
 import { aidLookup, aidShow } from './identity.js';
 import { isValidAid } from './validation.js';
 export class ManagedAidOperationError extends Error {
@@ -28,6 +29,32 @@ function parseAid(value) {
         return { ok: false, code: 'INVALID_AID', reason: `invalid AID: ${aid}` };
     return { ok: true, aid };
 }
+function parseAvatar(args) {
+    const aidResult = parseAid(args[1]);
+    if (!aidResult.ok)
+        return aidResult;
+    const sourceFlag = args[2];
+    const sourceValue = args[3];
+    if (sourceFlag !== '--file' && sourceFlag !== '--url') {
+        return { ok: false, code: 'INVALID_ARGUMENT', reason: 'avatar requires exactly one of --file <path> or --url <https-url>' };
+    }
+    if (!sourceValue || sourceValue.startsWith('-')) {
+        return { ok: false, code: 'INVALID_ARGUMENT', reason: `${sourceFlag} requires a non-empty value` };
+    }
+    if (args.length !== 4 && !(args.length === 6 && args[4] === '--format' && args[5] === 'json')) {
+        return { ok: false, code: 'NOT_ALLOWED', reason: 'avatar only supports an optional --format json suffix' };
+    }
+    return {
+        ok: true,
+        command: {
+            kind: 'avatar',
+            aid: aidResult.aid,
+            ...(sourceFlag === '--file' ? { filePath: sourceValue } : { url: sourceValue }),
+            operationId: 'ec.aid.avatar',
+            canonicalArgv: ['aid', 'avatar', aidResult.aid, sourceFlag, sourceValue],
+        },
+    };
+}
 /**
  * The daemon accepts only the narrowly scoped AID commands exposed to managed
  * tasks. Public lookup/get may name any valid AID; local show/publish remain
@@ -36,6 +63,8 @@ function parseAid(value) {
 export function resolveManagedAidOperation(argv) {
     const args = argv[0] === 'aid' ? argv.slice(1) : argv;
     const subcommand = args[0];
+    if (subcommand === 'avatar')
+        return parseAvatar(args);
     if ((subcommand === 'show' || subcommand === 'lookup') && hasOnlyOptionalJsonFormat(args, 1)) {
         const parsedAid = parseAid(args[1]);
         if (!parsedAid.ok)
@@ -68,7 +97,7 @@ export function resolveManagedAidOperation(argv) {
     return {
         ok: false,
         code: 'NOT_ALLOWED',
-        reason: 'Managed AID operations only allow exact show, lookup, agentmd get, or agentmd put commands with an optional --format json suffix',
+        reason: 'Managed AID operations only allow exact show, lookup, agentmd get, agentmd put, or avatar commands with supported options',
     };
 }
 export function managedAidShowViewForRole(role) {
@@ -93,6 +122,8 @@ const defaultDependencies = () => ({
     agentmdPut,
     existsSync: fs.existsSync,
     readFileSync: fs.readFileSync,
+    uploadAvatarBuffer,
+    uploadAvatarUrl,
 });
 /** Execute a validated AID operation from the daemon-owned host filesystem. */
 export async function executeManagedAidOperation(command, options = {}) {
@@ -125,5 +156,26 @@ export async function executeManagedAidOperation(command, options = {}) {
             await deps.agentmdPut(content, { aid: command.aid, aunPath });
             return { kind: command.kind, aid: command.aid, path: localPath };
         }
+        case 'avatar': {
+            const result = command.url
+                ? await deps.uploadAvatarUrl(command.aid, command.url, { aunPath })
+                : await deps.uploadAvatarBuffer(command.aid, options.avatarBuffer ?? deps.readFileSync(command.filePath), { aunPath });
+            if (!result.ok) {
+                throw new ManagedAidOperationError(result.code ?? 'UPLOAD_FAILED', result.error ?? 'avatar upload failed');
+            }
+            return {
+                kind: 'avatar',
+                aid: command.aid,
+                avatar: result.publicUrl,
+                objectKey: result.objectKey,
+                sha256: result.sha256,
+                mime: result.mime,
+                width: result.width,
+                height: result.height,
+                aspectRatio: result.aspectRatio,
+            };
+        }
+        default:
+            throw new ManagedAidOperationError('NOT_ALLOWED', `Unsupported managed AID operation: ${command.kind}`);
     }
 }

package/dist/aun/aid/store.js

@@ -80,10 +80,10 @@ export async function loadClient(store, aid) {
 /**
  * Enable bounded multi-page group pulls for the long-lived daemon client.
  *
- * The SDK's background realtime recovery path intentionally passes
- * `maxPages=1`; for a daemon this can strand a backlog after a tail sync.
- * This adapter only expands that sentinel value and leaves all other pull
- * options unchanged. It is isolated to the client that explicitly opts in.
+ * Older SDK recovery paths used `maxPages=1`; for a daemon that can strand a
+ * backlog after a tail sync. SDK 0.5.15 normally chooses a larger recovery
+ * window, but this adapter still expands an explicit single-page request and
+ * keeps older clients safe. It is isolated to the client that opts in.
  */
 export function enableFullGroupPullPagination(client) {
     const target = client;
@@ -110,13 +110,12 @@ export function enableFullGroupPullPagination(client) {
 /**
  * Make SDK pull delivery wait until EvolCore's application handlers finish.
  *
- * fastaun 0.5.13 publishes message events with dispatcher.enqueue(), then
- * advances its sequence tracker immediately.  That is a transport watermark,
- * so a daemon restart can acknowledge a message before the application has
- * durably claimed it.  The SDK keeps _publishAppEvent private, but the public
- * client is intentionally adapted here in one place: preserve the SDK's
- * normal publication path and wait for its dispatcher queue for pulled
- * message events before the pull operation commits the sequence.
+ * fastaun publishes message events asynchronously, while the sequence tracker
+ * is a transport watermark. A daemon restart can therefore acknowledge a
+ * pulled message before the application has durably claimed it. SDK 0.5.15
+ * split protocol and application queues; prefer its application-only flush so
+ * an unrelated protocol event cannot delay the pull commit. Older SDKs fall
+ * back to the combined flush method.
  */
 export function enableReliableMessageDelivery(client) {
     const target = client;
@@ -124,7 +123,12 @@ export function enableReliableMessageDelivery(client) {
         return false;
     const publish = target._publishAppEvent;
     const dispatcher = target._dispatcher;
-    if (typeof publish !== 'function' || !dispatcher || typeof dispatcher.flush !== 'function')
+    const flushApplication = typeof dispatcher?.flushApplication === 'function'
+        ? dispatcher.flushApplication.bind(dispatcher)
+        : typeof dispatcher?.flush === 'function'
+            ? dispatcher.flush.bind(dispatcher)
+            : undefined;
+    if (typeof publish !== 'function' || !flushApplication)
         return false;
     const wrappedPublish = async function (event, payload, source, ...rest) {
         const result = await publish.call(this, event, payload, source, ...rest);
@@ -135,7 +139,7 @@ export function enableReliableMessageDelivery(client) {
             && source !== 'push'
             && source !== 'inline-push';
         if (reliable)
-            await dispatcher.flush();
+            await flushApplication();
         return result;
     };
     Object.defineProperty(target, RELIABLE_MESSAGE_DELIVERY_PATCH, {

package/dist/aun/menu-client.js

@@ -22,6 +22,80 @@ export class MenuClientError extends Error {
         this.name = 'MenuClientError';
     }
 }
+/** Uses the daemon's existing authenticated AUN channel and its normal ACK path. */
+export class ManagedMenuClient {
+    send;
+    pending = new Map();
+    constructor(send) {
+        this.send = send;
+    }
+    accept(fromAid, payload, encrypted) {
+        if (!payload || typeof payload !== 'object' || payload.type !== 'menu.response')
+            return false;
+        if (!encrypted)
+            return true;
+        try {
+            const response = parseMenuResponse(payload);
+            this.pending.get(this.key(fromAid, response.id))?.resolve(response);
+        }
+        catch { /* Invalid responses cannot complete a pending request. */ }
+        return true;
+    }
+    close() {
+        for (const pending of this.pending.values())
+            pending.reject(new MenuClientError('AUN_DISCONNECTED', 'AUN channel disconnected'));
+        this.pending.clear();
+    }
+    async request(options) {
+        if (!isValidAid(options.fromAid) || !isValidAid(options.targetAid))
+            throw new MenuClientError('INVALID_ARGUMENT', 'Valid sender and target AIDs are required');
+        if (options.aunPath !== undefined || options.slotId !== undefined || options.encrypt === false)
+            throw new MenuClientError('INVALID_ARGUMENT', 'Managed Menu uses the daemon connection with E2EE; connection overrides are forbidden');
+        const request = { ...options.request, id: options.request.id || crypto.randomUUID() };
+        const validation = validateMenuRequest(request);
+        if (validation)
+            throw new MenuClientError(validation.code, validation.message);
+        const timeout = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        if (!Number.isFinite(timeout) || timeout < 1000 || timeout > MAX_TIMEOUT_MS)
+            throw new MenuClientError('INVALID_ARGUMENT', 'timeout must be between 1s and 120s');
+        const key = this.key(options.targetAid, request.id);
+        if (this.pending.has(key))
+            throw new MenuClientError('CLIENT_BUSY', 'Request ID is already in flight for this daemon');
+        const headers = buildMenuClientProtectedHeaders({ clientName: 'ec-menu-client', clientVersion: readInstalledEvolcoreVersion(), remoteAccessToken: options.remoteAccessToken ?? options.ecwebToken });
+        const attempts = request.type === 'menu.query' || request.type === 'menu.options' ? 2 : 1;
+        let timer;
+        try {
+            for (let attempt = 0; attempt < attempts; attempt++) {
+                const response = new Promise((resolve, reject) => {
+                    this.pending.set(key, { resolve, reject });
+                    timer = setTimeout(() => reject(new MenuClientError('TIMEOUT', 'Remote Menu response timed out')), timeout);
+                });
+                const sent = this.send({ to: options.targetAid, payload: request, encrypt: true, protected_headers: headers })
+                    .then(result => {
+                    if (!(result?.message_id ?? result?.message?.message_id))
+                        throw new MenuClientError('SEND_FAILED', 'message.send returned no message_id');
+                });
+                try {
+                    const [, value] = await Promise.all([sent, response]);
+                    return value;
+                }
+                catch (error) {
+                    if (!(error instanceof MenuClientError) || error.code !== 'TIMEOUT' || attempt + 1 === attempts)
+                        throw error;
+                }
+                finally {
+                    clearTimeout(timer);
+                }
+            }
+            throw new MenuClientError('TIMEOUT', 'Remote Menu response timed out');
+        }
+        finally {
+            clearTimeout(timer);
+            this.pending.delete(key);
+        }
+    }
+    key(target, id) { return JSON.stringify([target, id]); }
+}
 async function callClient(conn, method, params) {
     try {
         return await conn.call(method, params);

package/dist/aun/msg/group.js

@@ -52,7 +52,7 @@ function groupThreadId(args, payload, runtimeContext) {
 }
 function applyGroupRoutingPayloadFields(payload, args, runtimeContext) {
     const threadId = groupThreadId(args, payload, runtimeContext);
-    if (threadId && typeof payload.thread_id !== 'string')
+    if (threadId)
         payload.thread_id = threadId;
 }
 function groupSendLogMetadata(args, payload, runtimeContext) {

package/dist/aun/msg/managed-operation.js

@@ -248,7 +248,7 @@ export function resolveManagedGroupOperation(argv) {
                     return checked;
             }
             const memberType = values.get('--member-type');
-            if (memberType !== undefined && memberType !== 'human' && memberType !== 'ai')
+            if (memberType !== undefined && memberType !== 'human' && memberType !== 'agent')
                 return failGroup('INVALID_ARGUMENT', 'invalid --member-type');
             extra.members = members;
             extra.memberType = memberType;

package/dist/aun/msg/p2p.js

@@ -67,7 +67,7 @@ function messageLogContent(body) {
 }
 function applyRoutingPayloadFields(payload, args, runtimeContext, includeRuntimeRef = true) {
     const threadId = msgSendThreadId(args, payload, runtimeContext);
-    if (threadId && !payload.thread_id)
+    if (threadId)
         payload.thread_id = threadId;
     if (!includeRuntimeRef)
         return;
@@ -135,6 +135,7 @@ async function tryDaemonMsgSend(args, payload, runtimeContext, file) {
         encrypt: args.encrypt,
         thread,
         returnPolicy: args.returnPolicy,
+        handoffContext: args.handoffContext,
         originSessionId: runtimeContext.sessionId,
         originMessageId: runtimeContext.messageId,
         delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
@@ -213,6 +214,10 @@ async function appendMsgSendOutboundLog(args, result, opts) {
     catch { /* daemon 不在或 IPC 失败都忽略 */ }
 }
 export async function msgSend(args) {
+    if (args.handoffContext !== undefined && (!process.env.EVOLCORE_SESSION_ID
+        || !args.handoffContext.trim() || args.handoffContext.length > 64 * 1024)) {
+        return { ok: false, code: 'INVALID_HANDOFF_CONTEXT', error: 'handoff context requires a managed session and 1–65536 characters' };
+    }
     const runtimeContext = await readBestTaskRuntimeContext();
     // Contact admission is a daemon-owned policy for managed Agent tasks. A
     // non-managed CLI caller may use any valid AUN sender identity and must not

package/dist/aun/msg/upload.js

@@ -20,6 +20,11 @@ export function isValidPayloadType(value) {
 }
 /** 单次上传最大大小（与 daemon sendFile 一致）。 */
 export const MAX_AUN_ATTACHMENT_SIZE = 10 * 1024 * 1024;
+/**
+ * Inline JSON-RPC 上传阈值。超过该大小直接使用上传会话，避免把文件
+ * Base64 编码后放进 storage.put_object 的 RPC 参数。
+ */
+export const INLINE_AUN_ATTACHMENT_SIZE = 64 * 1024;
 /** server 端 inline 上限错误的识别特征。优先匹配错误消息里的“inline 上限”字样。 */
 function isInlineLimitError(err) {
     const msg = err?.message ?? '';
@@ -44,26 +49,29 @@ export async function uploadBufferAndBuildPayload(conn, ownerAid, data, filename
     const objectKey = `shared/${crypto.randomUUID()}/${safeFilename}`;
     const total = data.length;
     const report = (phase, bytes) => opts?.onProgress?.({ phase, bytes, total });
-    // 1. 先按 inline 走
-    let inlineRejected = false;
-    try {
-        report('inline', 0);
-        await conn.call('storage.put_object', {
-            object_key: objectKey,
-            content: data.toString('base64'),
-            content_type: contentType,
-            is_private: false,
-            overwrite: true,
-        });
-        report('inline', total);
-    }
-    catch (e) {
-        if (!isInlineLimitError(e))
-            throw e;
-        inlineRejected = true;
+    // 小文件优先走 inline，兼容不支持上传会话的服务端；大文件直接走
+    // session，避免先构造一份可能超过 JSON-RPC 限制的 Base64 请求。
+    let useUploadSession = total > INLINE_AUN_ATTACHMENT_SIZE;
+    if (!useUploadSession) {
+        try {
+            report('inline', 0);
+            await conn.call('storage.put_object', {
+                object_key: objectKey,
+                content: data.toString('base64'),
+                content_type: contentType,
+                is_private: false,
+                overwrite: true,
+            });
+            report('inline', total);
+        }
+        catch (e) {
+            if (!isInlineLimitError(e))
+                throw e;
+            useUploadSession = true;
+        }
     }
-    // 2. inline 被拒：降级到 session + HTTP PUT
-    if (inlineRejected) {
+    // inline 被拒或文件超过 inline 阈值：session + HTTP PUT
+    if (useUploadSession) {
         report('session-create', 0);
         const session = await conn.call('storage.create_upload_session', {
             object_key: objectKey,
@@ -144,9 +152,9 @@ export async function uploadBufferAndBuildPayload(conn, ownerAid, data, filename
 /**
  * 上传本地文件并构造发送用的 payload。
  *
- * 策略：先无脑 storage.put_object（内联 base64）。server 报“超过 inline 上限”
- * 时降级到 storage.create_upload_session + HTTP PUT + storage.complete_upload，
- * 此时通过 onProgress 上报字节级进度。
+ * 策略：小文件使用 storage.put_object（内联 base64）；大文件直接使用
+ * storage.create_upload_session + HTTP PUT + storage.complete_upload，避免
+ * 将大文件编码后放入 JSON-RPC。此时通过 onProgress 上报字节级进度。
  */
 export async function uploadFileAndBuildPayload(conn, ownerAid, filePath, opts) {
     const absPath = path.resolve(filePath);

package/dist/aun/storage/client.js

@@ -17,7 +17,10 @@ function pickUrl(value) {
     return typeof value === 'string' && value.trim() ? value : undefined;
 }
 export async function storageUpload(aid, localFile, remotePath, opts) {
-    const fileBuffer = fs.readFileSync(localFile);
+    const fileBuffer = Buffer.isBuffer(localFile) ? localFile : fs.readFileSync(localFile);
+    return storageUploadBuffer(aid, fileBuffer, remotePath, opts);
+}
+export async function storageUploadBuffer(aid, fileBuffer, remotePath, opts) {
     const contentType = opts?.contentType ?? 'application/octet-stream';
     const sha256 = crypto.createHash('sha256').update(fileBuffer).digest('hex');
     const createResult = await rpcCall(aid, 'storage.create_upload_session', {

package/dist/aun/storage/index.js

@@ -1,2 +1,2 @@
-export { storageUpload, storageLs, storageRm, storageQuota } from './client.js';
+export { storageUpload, storageUploadBuffer, storageLs, storageRm, storageQuota } from './client.js';
 export { storageDownload } from './download.js';