evolcore 0.0.25 → 0.0.26

package/dist/agents/codex-runner.js

@@ -1,4 +1,6 @@
 import { getRunnerCatalog, catalogEfforts, assertCatalogSelectable } from '../core/model/model-catalog.js';
+// Codex/OpenAI API 不认识 Claude Code SDK 的窗口后缀，必须传入基础模型 ID。
+import { stripContextWindowSuffix } from '../core/model/context-window-suffix.js';
 import { hasTrustedFullAccessContext } from './runner-types.js';
 import { requestDangerousCommandPermission } from '../core/permission/approval-gateway.js';
 import { checkReadonly, checkDangerousCommand, evaluateToolPreflight } from '../core/permission/tool-policy.js';
@@ -9,7 +11,7 @@ import { resolveOpenaiConfig, resolveCodexCliPath } from './baseagent.js';
 import { logger } from '../utils/logger.js';
 import { summarizeToolInputForAudit } from '../utils/tool-summary.js';
 import { auditCodexApprovalDecision, auditPermissionLifecycle, auditToolPreflightDenial } from '../core/auth/authorization-audit.js';
-import { isRetryableError } from '../utils/error-utils.js';
+import { classifyError, ErrorType, isOutputTokenLimitError, isRetryableError } from '../utils/error-utils.js';
 import { renderActionAsText } from '../core/interaction-router.js';
 import { buildEnvelope, isInteractionSendAccepted, sendInteractionPayload } from '../core/message/message-utils.js';
 import { resolveCodexCapabilityThreadConfigForProject } from '../core/capability/capability-manager.js';
@@ -36,19 +38,22 @@ const MIME_EXT = {
     'image/webp': '.webp',
 };
 const APPROVAL_LOG_SUMMARY_MAX_LENGTH = 256;
+function toAgentErrorType(message) {
+    switch (classifyError(new Error(message))) {
+        case ErrorType.CONTEXT_TOO_LONG: return 'context_too_long';
+        case ErrorType.AUTH_ERROR: return 'auth';
+        case ErrorType.API_ERROR:
+        case ErrorType.STREAM_ERROR:
+        case ErrorType.SDK_TIMEOUT: return 'network';
+        default: return 'unknown';
+    }
+}
 export function formatApprovalLogSummary(summary) {
     const singleLine = summary.replace(/\s+/gu, ' ').trim();
     if (singleLine.length <= APPROVAL_LOG_SUMMARY_MAX_LENGTH)
         return singleLine;
     return singleLine.slice(0, APPROVAL_LOG_SUMMARY_MAX_LENGTH - 3).trimEnd() + '...';
 }
-/**
- * 规范化模型 ID：去掉 Claude Code SDK 专有的上下文窗口后缀 [1m]/[200k]
- * Codex/OpenAI API 不认识这些后缀，必须传入标准模型 ID
- */
-function stripContextWindowSuffix(modelId) {
-    return modelId.replace(/\[(?:1m|200k)\]$/i, '');
-}
 // ── Codex 模型目录（动态获取，含 effort） ──
 class AsyncEventQueue {
     queue = [];
@@ -198,11 +203,13 @@ function parseManagedPreToolUseDenial(value) {
         .trim();
     if (!reason)
         reason = 'EvolCore PreToolUse policy denied this tool call';
-    const policyCode = /工具调用已达到\s*\d+\s*次/.test(reason)
-        ? 'proactive_tool_report_required'
-        : /请先用\s+ec\s+(?:group\s+send|msg\s+send)/.test(reason)
-            ? 'proactive_first_send_required'
-            : 'managed_pre_tool_use_denied';
+    const policyCode = /当前汇报命令(?:未通过规范解析|不符合当前会话)/.test(reason)
+        ? 'proactive_send_invalid'
+        : /工具调用已达到\s*\d+\s*次/.test(reason)
+            ? 'proactive_tool_report_required'
+            : /请先用\s+ec\s+(?:group\s+send|msg\s+send)/.test(reason)
+                ? 'proactive_first_send_required'
+                : 'managed_pre_tool_use_denied';
     return { policyCode, reason };
 }
 function outputTextForManagedHook(value) {
@@ -442,6 +449,7 @@ export class CodexRunner {
             return existing;
         const client = new CodexAppServerClient({
             apiKey: this.resolvedConfig.apiKey,
+            authType: this.resolvedConfig.authType,
             baseUrl: this.resolvedConfig.baseUrl,
             provider: this.resolvedConfig.provider,
             headers: this.resolvedConfig.headers,
@@ -2607,7 +2615,7 @@ export class CodexRunner {
             release();
         }
     }
-    async forkSessionLocked(agentSessionId, projectPath, title) {
+    async forkSessionLocked(agentSessionId, projectPath, title, lastTurnId) {
         const sessionKey = this.findSessionKeyByThread(agentSessionId);
         const mode = this.chatModes.get(sessionKey) ?? this.currentMode;
         const executionSandbox = this.buildExecutionSandboxOptions(sessionKey, mode, projectPath);
@@ -2625,6 +2633,7 @@ export class CodexRunner {
             approvalsReviewer: 'user',
             ...(executionSandbox.sandbox ? { sandbox: executionSandbox.sandbox } : {}),
             config: this.sanitizeThreadEnvironmentConfig(this.mergeThreadConfig(executionSandbox.permissionProfileConfig, capabilityConfig, externalToolConfig, this.buildEvolcoreShellEnvironmentConfig(sessionKey, delegationCarrier), this.buildLifecycleLockdownConfig(mode)), mode),
+            ...(lastTurnId ? { lastTurnId } : {}),
         });
         const forkedThreadId = response.thread?.id;
         if (!forkedThreadId)
@@ -2639,29 +2648,80 @@ export class CodexRunner {
     async forkSessionAt(agentSessionId, projectPath, assistantMessageId, title) {
         const release = await this.acquireThreadOperation(this.threadOperationKey(agentSessionId), 'forkAt');
         try {
-            const turns = buildSessionTurnList(await this.getSessionMessages(agentSessionId, projectPath));
+            const appServer = this.getAppServerClientForThread(agentSessionId);
+            const history = await this.readForkHistory(appServer, agentSessionId);
+            const messages = this.mapThreadToSessionMessages(history, agentSessionId);
+            const turns = buildSessionTurnList(messages);
             const targetIndex = turns.findIndex(turn => turn.assistantUuid === assistantMessageId);
             if (targetIndex < 0)
                 throw new Error('fork point not found');
-            const forkedThreadId = await this.forkSessionLocked(agentSessionId, projectPath, title);
-            const turnsToDiscard = turns.length - targetIndex - 1;
-            if (turnsToDiscard > 0) {
-                const rollbackRelease = await this.acquireThreadOperation(this.threadOperationKey(forkedThreadId), 'rollback');
-                try {
-                    const rolledBack = await this.rollbackSessionTurnsLocked(forkedThreadId, turnsToDiscard);
-                    if (!rolledBack)
-                        throw new Error('forked thread rollback failed');
-                }
-                finally {
-                    rollbackRelease();
-                }
-            }
-            return forkedThreadId;
+            const targetTurnId = this.findTurnIdForAssistantMessage(history, assistantMessageId);
+            if (!targetTurnId)
+                throw new Error('fork point turn not found');
+            return await this.forkSessionLocked(agentSessionId, projectPath, title, targetTurnId);
         }
         finally {
             release();
         }
     }
+    findTurnIdForAssistantMessage(response, assistantMessageId) {
+        for (const turn of response.thread?.turns ?? []) {
+            if (typeof turn.id !== 'string' || !turn.id)
+                continue;
+            for (const item of this.getTurnItems(turn)) {
+                if (item.type === 'agentMessage' && item.id === assistantMessageId)
+                    return turn.id;
+            }
+            // Older app-server histories may omit item ids; the mapper then uses the
+            // turn id as the assistant message id fallback.
+            if (turn.id === assistantMessageId)
+                return turn.id;
+        }
+        return undefined;
+    }
+    async readForkHistory(appServer, threadId) {
+        let directRead;
+        let directReadError;
+        try {
+            directRead = await appServer.threadRead(threadId, true);
+            if ((directRead.thread?.turns?.length ?? 0) > 0)
+                return directRead;
+        }
+        catch (error) {
+            directReadError = error;
+        }
+        // Paginated threads reject full-history thread/read. Hydrate turns through
+        // the experimental paging RPC, retaining full items so assistant message
+        // IDs can be mapped to their containing turn.
+        const turns = [];
+        let cursor;
+        const seenCursors = new Set();
+        try {
+            do {
+                const page = await appServer.threadTurnsList(threadId, 100, cursor);
+                if (Array.isArray(page.data)) {
+                    turns.push(...page.data.filter((turn) => !!turn && typeof turn === 'object'));
+                }
+                const nextCursor = typeof page.nextCursor === 'string' && page.nextCursor ? page.nextCursor : undefined;
+                if (!nextCursor || seenCursors.has(nextCursor))
+                    break;
+                seenCursors.add(nextCursor);
+                cursor = nextCursor;
+            } while (true);
+        }
+        catch (error) {
+            if (directReadError)
+                throw directReadError;
+            throw error;
+        }
+        // Pages are returned newest-first when following `nextCursor`; restore
+        // chronological order before mapping turns to session messages.
+        if (turns.length > 0)
+            return { thread: { ...(directRead?.thread ?? {}), id: threadId, turns: turns.reverse() } };
+        if (directRead)
+            return directRead;
+        throw directReadError instanceof Error ? directReadError : new Error('Codex thread history unavailable');
+    }
     async setSessionName(agentSessionId, name) {
         return this.getAppServerClientForThread(agentSessionId).threadSetName(agentSessionId, name);
     }
@@ -4415,24 +4475,46 @@ export class CodexRunner {
                 this.clearPendingToolDenialsForTurn(state.threadId, turnId);
                 yield* this.reconcileOpenAppServerToolCalls(state, turnId);
                 if (turn.status === 'failed' && turn.error?.message) {
+                    logger.warn(`[CodexRunner] turn failed: ${JSON.stringify({
+                        sessionId, threadId: state.threadId, turnId, model: state.model,
+                        errorType: classifyError(new Error(turn.error.message)),
+                        message: formatApprovalLogSummary(turn.error.message),
+                        lastReportedUsage: state.tokenUsage?.last,
+                    })}`);
                     if (isRetryableError(new Error(turn.error.message))) {
                         throw new Error(turn.error.message);
                     }
-                    yield { type: 'error', error: turn.error.message, errorType: 'unknown' };
+                    yield { type: 'error', error: turn.error.message, errorType: toAgentErrorType(turn.error.message) };
                 }
                 yield this.mapAppServerTurnComplete(turn, state);
                 break;
             }
             case 'error': {
-                if (!params.message) {
-                    // SSE idle timeout reconnect — not a real task error, suppress
-                    logger.debug(`[CodexRunner] app-server SSE reconnect (no message)`);
+                // Current app-server uses error.message; older builds used message.
+                const message = typeof params.error?.message === 'string' ? params.error.message : params.message;
+                if (typeof message !== 'string' || !message.trim()) {
+                    logger.debug('[CodexRunner] app-server error notification without a diagnostic message');
                     break;
                 }
-                if (isRetryableError(new Error(params.message))) {
-                    throw new Error(params.message);
+                logger.warn(`[CodexRunner] error notification: ${JSON.stringify({
+                    sessionId, threadId: state.threadId, turnId: state.turnId, model: state.model,
+                    willRetry: params.willRetry ?? null,
+                    errorType: classifyError(new Error(message)), message: formatApprovalLogSummary(message),
+                })}`);
+                // Codex owns retries within this turn. Throwing here closes our subscription
+                // before its recovery can finish; runQuery must not submit the input again.
+                if (params.willRetry === true) {
+                    yield {
+                        type: 'notice', severity: 'warn', subtype: 'codex-model-retry',
+                        message: isOutputTokenLimitError(new Error(message))
+                            ? '模型响应达到输出上限，Codex 正在当前轮内重试。'
+                            : 'Codex 正在当前轮内重试模型请求。',
+                    };
+                    break;
                 }
-                yield { type: 'error', error: params.message, errorType: 'unknown' };
+                if (isRetryableError(new Error(message)))
+                    throw new Error(message);
+                yield { type: 'error', error: message, errorType: toAgentErrorType(message) };
                 break;
             }
         }
@@ -4863,16 +4945,17 @@ export class CodexRunner {
     }
     mapAppServerTurnComplete(turn, state) {
         const status = turn.status || 'completed';
+        const outputLimit = status === 'failed' && isOutputTokenLimitError(new Error(turn.error?.message ?? ''));
         const tokenUsage = this.mapCodexTokenUsage(state.tokenUsage?.last ?? turn.tokenUsage ?? turn.usage);
         const contextUsage = this.mapCodexContextUsage(turn.contextUsage ?? state.tokenUsage?.contextUsage ?? state.tokenUsage?.context);
         const terminalReason = status === 'completed'
             ? undefined
             : status === 'interrupted'
                 ? 'aborted_streaming'
-                : status;
+                : outputLimit ? 'max_output_tokens' : status;
         return {
             type: 'complete',
-            subtype: status === 'completed' ? 'success' : status,
+            subtype: status === 'completed' ? 'success' : outputLimit ? 'max_output_tokens' : status,
             isError: status === 'failed',
             errors: turn.error?.message ? [turn.error.message] : undefined,
             terminalReason,

package/dist/agents/ecagent-runner.js

@@ -1,4 +1,6 @@
 import { getRunnerCatalog, catalogEfforts, assertCatalogSelectable } from '../core/model/model-catalog.js';
+// Ecagent/OpenAI API 不认识 Claude Code SDK 的窗口后缀，必须传入基础模型 ID。
+import { stripContextWindowSuffix } from '../core/model/context-window-suffix.js';
 import fs from 'fs';
 import path from 'path';
 import { AgentHarness, JsonlSessionRepo, NodeExecutionEnv, } from '../../ecagent/dist/node.js';
@@ -18,21 +20,14 @@ import { appendRequestPath } from './request-identity.js';
 import { getManagedTaskTempDir } from '../cli/task-context.js';
 import { hasTrustedFullAccessContext } from './runner-types.js';
 const PROVIDER_ID = 'evolcore-gateway';
-const DEFAULT_SYSTEM_PROMPT = `You are ecagent, the coding agent built into EvolCore.
-Work directly in the current project. Inspect relevant files before changing them, keep edits scoped, and verify the result.
+const DEFAULT_SYSTEM_PROMPT = `You are ecagent, the coding agent built into EvolCore.
+Work directly in the current project. Inspect relevant files before changing them, keep edits scoped, and verify the result.
 Use the provided tools for filesystem and shell work. Never claim a tool action succeeded unless its result confirms success.`;
 const MAX_READ_BYTES = 1024 * 1024;
 const MAX_TOOL_OUTPUT = 200_000;
 const MAX_SCAN_FILES = 5_000;
 const MAX_SEARCH_RESULTS = 500;
 const DEFAULT_BASH_TIMEOUT_MS = 120_000;
-/**
- * 规范化模型 ID：去掉 Claude Code SDK 专有的上下文窗口后缀 [1m]/[200k]
- * Ecagent/OpenAI API 不认识这些后缀，必须传入标准模型 ID
- */
-function stripContextWindowSuffix(modelId) {
-    return modelId.replace(/\[(?:1m|200k)\]$/i, '');
-}
 class AsyncEventQueue {
     values = [];
     waiters = [];

package/dist/agents/gemini-runner.js

@@ -1,4 +1,6 @@
 import { getCatalog, assertCatalogSelectable } from '../core/model/model-catalog.js';
+// Gemini API 不认识 Claude Code SDK 的窗口后缀，必须传入基础模型 ID。
+import { stripContextWindowSuffix } from '../core/model/context-window-suffix.js';
 /**
  * Gemini Agent Runner
  *
@@ -33,13 +35,6 @@ const ANSI_RE = /\x1b\[[0-9;]*[a-zA-Z]|\x1b\].*?(?:\x1b\\|\x07)/g;
 function stripAnsi(text) {
     return text.replace(ANSI_RE, '');
 }
-/**
- * 规范化模型 ID：去掉 Claude Code SDK 专有的上下文窗口后缀 [1m]/[200k]
- * Gemini API 不认识这些后缀，必须传入标准模型 ID
- */
-function stripContextWindowSuffix(modelId) {
-    return modelId.replace(/\[(?:1m|200k)\]$/i, '');
-}
 // ── MIME → 扩展名映射 ──
 const MIME_EXT = {
     'image/png': '.png',

package/dist/agents/runner-types.js

@@ -1,3 +1,4 @@
+import { parseModelId, stripContextWindowSuffix } from '../core/model/context-window-suffix.js';
 export const BASEAGENT_RUNNER_UNAVAILABLE = 'BASEAGENT_RUNNER_UNAVAILABLE';
 export class BaseagentRunnerUnavailableError extends Error {
     evolagentName;
@@ -69,20 +70,22 @@ const CLAUDE_CONTEXT_MODEL_ALIASES = ['opus', 'sonnet', 'haiku'];
 export function isClaudeContextUsageModel(model) {
     if (!model)
         return false;
-    const baseModel = model.replace(/\[1m\]$/i, '');
+    const baseModel = stripContextWindowSuffix(model);
     return /^claude-/i.test(baseModel) || CLAUDE_CONTEXT_MODEL_ALIASES.includes(baseModel);
 }
 export function isOneMillionContextModel(model) {
     if (!model)
         return false;
+    // 显式后缀是网关给出的权威窗口，优先于本地前缀表：`claude-opus-5[200k]`
+    // 即使基础 ID 在 1M 名单里，也必须按 200k 处理。
+    const { base, contextWindow } = parseModelId(model);
+    if (contextWindow !== undefined)
+        return contextWindow >= 1_000_000;
     if (ONE_M_CONTEXT_MODEL_ALIASES.includes(model))
         return true;
-    if (/\[1m\]$/i.test(model))
+    if (/deepseek-v4/i.test(base))
         return true;
-    if (/deepseek-v4/i.test(model))
-        return true;
-    const baseModel = model.replace(/\[1m\]$/i, '');
-    return ONE_M_CONTEXT_MODEL_PREFIXES.some(prefix => baseModel === prefix || baseModel.startsWith(`${prefix}-`));
+    return ONE_M_CONTEXT_MODEL_PREFIXES.some(prefix => base === prefix || base.startsWith(`${prefix}-`));
 }
 /**
  * EvolCore's conservative local context-window catalog: 1M models = 1,000,000;
@@ -94,17 +97,22 @@ export function realContextWindowForModel(model) {
     return isOneMillionContextModel(model) ? 1000000 : 200000;
 }
 /**
- * The SDK's compaction threshold must leave room for the next model turn and
- * its tool results. Keep a 10k reserve for 200k-class windows and retain the
- * historical 350k cap for large-context models.
+ * EvolCore auto-compact threshold: fixed at 650k tokens regardless of model
+ * context window. Large-window models (1M) compress at 650k; small-window
+ * models (200k/128k) never reach this threshold and rely on the SDK's own
+ * built-in compaction instead.
  */
-export function autoCompactWindowForContextWindow(contextWindow) {
-    if (!contextWindow || contextWindow <= 0)
-        return undefined;
-    const reserve = Math.min(10_000, Math.floor(contextWindow * 0.05));
-    return Math.min(350_000, Math.max(1, contextWindow - reserve));
+export function autoCompactWindowForModel(_model) {
+    return 650_000;
 }
-/** Auto-compact threshold derived from the configured model context window. */
-export function autoCompactWindowForModel(model) {
-    return autoCompactWindowForContextWindow(realContextWindowForModel(model)) ?? 350_000;
+/**
+ * Threshold passed to the Claude Code SDK's autoCompactWindow option.
+ * Kept window-aware so the SDK's own built-in compaction continues to fire
+ * at the right point for small-context models (200k/128k), where EvolCore's
+ * fixed 650k threshold would never trigger.
+ */
+export function sdkAutoCompactWindowForModel(model) {
+    const contextWindow = realContextWindowForModel(model);
+    const reserve = Math.min(10_000, Math.floor(contextWindow * 0.05));
+    return Math.min(650_000, Math.max(1, contextWindow - reserve));
 }

package/dist/aun/aid/agentmd.js

@@ -4,10 +4,47 @@ import { parseDocument } from 'yaml';
 import { getAidStore, loadAid, SLOT } from './store.js';
 import { agentMdPath, aidLocalDir, resolveRoot } from '../../paths.js';
 export const DEFAULT_AGENT_DESCRIPTION = 'EvolCore AI agent.';
+/**
+ * AUN 主体类型白名单。没有 `ai` / `codeagent` 这类取值：使用大模型的服务程序
+ * 一律归为 `agent`。新建 AID 未指定类型时使用 DEFAULT_AGENT_TYPE。
+ */
+export const AGENT_TYPES = ['human', 'agent', 'group', 'service', 'device', 'org'];
+export const DEFAULT_AGENT_TYPE = 'agent';
+/**
+ * 归一化主体类型：大小写不敏感，统一收敛为白名单里的小写形式。
+ * `--type AGENT` / `Agent` 都接受，最终写进 agent.md 的一律是小写 `agent`。
+ * 返回 undefined 表示输入不是可识别的类型（交由 validateAgentType 报错）。
+ */
+export function normalizeAgentType(type) {
+    if (typeof type !== 'string')
+        return undefined;
+    const lowered = type.trim().toLowerCase();
+    return AGENT_TYPES.includes(lowered) ? lowered : undefined;
+}
+/** Return a human-readable validation error for a type value, or null when valid. */
+export function validateAgentType(type) {
+    if (typeof type !== 'string' || !type.trim())
+        return 'must be a non-empty string';
+    if (!normalizeAgentType(type))
+        return `must be one of ${AGENT_TYPES.join(', ')}`;
+    return null;
+}
+/**
+ * agent.md 的尺寸与字段上限，取值必须与 fastaun 的 agent-md-schema 保持一致，
+ * 否则本地校验通过、上传时才被 SDK 拒绝（失败点后移且提示不同）。
+ * 参考 @agentunion/fastaun dist/agent-md-schema.js。
+ */
+export const AGENT_MD_MAX_PAYLOAD_BYTES = 4096;
+export const AGENT_DESCRIPTION_MAX_LENGTH = 100;
+export const AGENT_AVATAR_MAX_LENGTH = 256;
+/** 按 Unicode 码点计数——与 SDK 的 Array.from(value).length 对齐（代理对算一个字符）。 */
+function codePointLength(value) {
+    return Array.from(value).length;
+}
 export const AGENT_TAG_MIN_COUNT = 3;
 export const AGENT_TAG_MAX_COUNT = 6;
 export const AGENT_TAG_MAX_LENGTH = 50;
-const AGENT_TAG_PATTERN = /^[\p{L}\p{N}]+$/u;
+const AGENT_TAG_PATTERN = /^[\p{L}\p{N}-]+$/u;
 /** Return a human-readable validation error for one tag, or null when valid. */
 export function validateAgentTag(tag) {
     if (typeof tag !== 'string' || !tag.trim())
@@ -17,7 +54,7 @@ export function validateAgentTag(tag) {
         return `must be at most ${AGENT_TAG_MAX_LENGTH} characters`;
     }
     if (!AGENT_TAG_PATTERN.test(normalized)) {
-        return 'must contain only Unicode letters and numbers';
+        return 'must contain only Unicode letters, numbers, and hyphens';
     }
     return null;
 }
@@ -130,7 +167,13 @@ export function invalidateAgentDisplayName(aid) {
 }
 export function buildInitialAgentMd(opts) {
     const agentName = opts.name?.trim() || opts.aid.split('.')[0];
-    const agentType = opts.type || 'ai';
+    // 未指定类型时用 DEFAULT_AGENT_TYPE（agent）；指定了就必须落在 AGENT_TYPES 白名单内。
+    // 大小写不敏感，写进 agent.md 的一律是归一化后的小写形式。
+    const requestedType = opts.type?.trim() || DEFAULT_AGENT_TYPE;
+    const typeError = validateAgentType(requestedType);
+    if (typeError)
+        throw new Error(`Invalid agent.md type: ${typeError}`);
+    const agentType = normalizeAgentType(requestedType) ?? DEFAULT_AGENT_TYPE;
     const description = opts.description?.trim() || DEFAULT_AGENT_DESCRIPTION;
     const rawTags = opts.tags?.length ? opts.tags : ['evolcore'];
     const tagErrors = validateAgentTags(rawTags);
@@ -155,8 +198,9 @@ function yamlDoubleQuote(value) {
 export function validateAgentMdFrontmatter(content, expectedAid) {
     const errors = [];
     const payload = stripAgentMdSignature(content);
-    if (Buffer.byteLength(payload, 'utf8') > 4 * 1024) {
-        errors.push('agent.md must not exceed 4KB before the signature block');
+    const payloadBytes = Buffer.byteLength(payload, 'utf8');
+    if (payloadBytes > AGENT_MD_MAX_PAYLOAD_BYTES) {
+        errors.push(`agent.md frontmatter and body must not exceed ${AGENT_MD_MAX_PAYLOAD_BYTES} bytes before the signature block (current: ${payloadBytes} bytes)`);
     }
     const frontmatter = payload.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/)?.[1];
     if (!frontmatter)
@@ -185,15 +229,44 @@ export function validateAgentMdFrontmatter(content, expectedAid) {
     requiredString('name');
     requiredString('type');
     const version = requiredString('version');
-    const description = requiredString('description');
+    // description 是可选字段（fastaun ≥0.5.13 起不再要求非空）：缺失或空串都合法，
+    // 仅在实际提供时校验类型与长度，与 SDK 的 agent-md-schema 保持一致。
+    const rawDescription = values.description;
+    let description;
+    if (rawDescription !== undefined && rawDescription !== null) {
+        if (typeof rawDescription !== 'string') {
+            errors.push('agent.md frontmatter description must be a string');
+        }
+        else {
+            description = rawDescription.trim();
+        }
+    }
     if (expectedAid && aid && aid !== expectedAid) {
         errors.push(`agent.md frontmatter aid must match upload target ${expectedAid}`);
     }
     if (version && !/^\d+\.\d+\.\d+$/.test(version)) {
         errors.push('agent.md frontmatter version must use major.minor.patch format');
     }
-    if (description && description.length > 100) {
-        errors.push('agent.md frontmatter description must be at most 100 characters');
+    // 长度按 Unicode 码点计、且对未 trim 的原值计数——与 SDK 完全一致，
+    // 否则含 emoji 或尾随空格的名片会本地放行、上传才被拒。
+    if (typeof rawDescription === 'string') {
+        const length = codePointLength(rawDescription);
+        if (length > AGENT_DESCRIPTION_MAX_LENGTH) {
+            errors.push(`agent.md frontmatter description must be at most ${AGENT_DESCRIPTION_MAX_LENGTH} characters (current: ${length})`);
+        }
+    }
+    // avatar：SDK 有 256 字符上限，本地此前完全没校验。
+    const rawAvatar = values.avatar;
+    if (rawAvatar !== undefined && rawAvatar !== null) {
+        if (typeof rawAvatar !== 'string') {
+            errors.push('agent.md frontmatter avatar must be a string');
+        }
+        else {
+            const length = codePointLength(rawAvatar);
+            if (length > AGENT_AVATAR_MAX_LENGTH) {
+                errors.push(`agent.md frontmatter avatar must be at most ${AGENT_AVATAR_MAX_LENGTH} characters (current: ${length})`);
+            }
+        }
     }
     if (values.tags !== undefined) {
         const tagErrors = validateAgentTags(values.tags);

package/dist/aun/aid/client.js

@@ -39,7 +39,7 @@ export function suppressSdkLogs() {
     };
 }
 // ==================== SDK package ====================
-export const MIN_AUN_CORE_SDK = [0, 5, 6];
+export const MIN_AUN_CORE_SDK = [0, 5, 16];
 export const AUN_CORE_SDK_PKG = '@agentunion/fastaun';
 function compareVersion(a, min) {
     const parts = a.split('.').map(n => parseInt(n, 10));

package/dist/aun/aid/identity.js

@@ -114,7 +114,7 @@ export async function verifySignAbility(aid, opts) {
         // signAgentMd validates the same frontmatter contract as a published agent.md.
         // Keep the probe minimal, but make it a valid document so self-checks do not
         // reject otherwise healthy identities before exercising sign + verify.
-        const probe = `---\naid: "${aid}"\nname: "probe"\ntype: "ai"\nversion: "1.0.0"\ndescription: "Local signing self-check"\ntags:\n  - evolcore\n---\n`;
+        const probe = `---\naid: "${aid}"\nname: "probe"\ntype: "agent"\nversion: "1.0.0"\ndescription: "Local signing self-check"\ntags:\n  - evolcore\n---\n`;
         const signRes = aidObj.signAgentMd(probe);
         if (!signRes.ok) {
             return { ok: false, reason: `sign failed: ${String(signRes.error?.message || signRes.error?.code).slice(0, 120)}` };

package/dist/aun/aid/index.js

@@ -1,5 +1,5 @@
 export { AGENT_TAG_MIN_COUNT, AGENT_TAG_MAX_COUNT, AGENT_TAG_MAX_LENGTH, validateAgentTag, validateAgentTags, } from './agentmd.js';
 export { isValidAid, aidList, aidListVerified, aidCreate, aidShow, aidDelete, aidLookup, verifySignAbility, probePkiRecoverability, appendAidLifecycle, readAidLifecycle } from './identity.js';
-export { DEFAULT_AGENT_DESCRIPTION, buildInitialAgentMd, validateAgentMdFrontmatter, agentmdGet, agentmdPut, agentmdSync, invalidateAgentDisplayName, parseAgentDisplayName, refreshAgentDisplayName, resolveAgentDisplayName, stripAgentMdSignature, updateAgentMdFrontmatterAvatar, updateAgentMdFrontmatterName, } from './agentmd.js';
+export { AGENT_TYPES, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_TYPE, normalizeAgentType, validateAgentType, buildInitialAgentMd, validateAgentMdFrontmatter, agentmdGet, agentmdPut, agentmdSync, invalidateAgentDisplayName, parseAgentDisplayName, refreshAgentDisplayName, resolveAgentDisplayName, stripAgentMdSignature, updateAgentMdFrontmatterAvatar, updateAgentMdFrontmatterName, } from './agentmd.js';
 export { MIN_AUN_CORE_SDK, AUN_CORE_SDK_PKG, isAunSdkVersionOk, resolveAunCoreSdkPkg, ensureAunSdk, isAunSdkReady, downloadCaRoot, suppressSdkLogs, } from './client.js';
 export { getAidStore, loadClient, loadAid, AidLoadError, SLOT } from './store.js';

package/dist/aun/aid/store.js

@@ -80,10 +80,10 @@ export async function loadClient(store, aid) {
 /**
  * Enable bounded multi-page group pulls for the long-lived daemon client.
  *
- * The SDK's background realtime recovery path intentionally passes
- * `maxPages=1`; for a daemon this can strand a backlog after a tail sync.
- * This adapter only expands that sentinel value and leaves all other pull
- * options unchanged. It is isolated to the client that explicitly opts in.
+ * Older SDK recovery paths used `maxPages=1`; for a daemon that can strand a
+ * backlog after a tail sync. SDK 0.5.15 normally chooses a larger recovery
+ * window, but this adapter still expands an explicit single-page request and
+ * keeps older clients safe. It is isolated to the client that opts in.
  */
 export function enableFullGroupPullPagination(client) {
     const target = client;
@@ -110,13 +110,12 @@ export function enableFullGroupPullPagination(client) {
 /**
  * Make SDK pull delivery wait until EvolCore's application handlers finish.
  *
- * fastaun 0.5.13 publishes message events with dispatcher.enqueue(), then
- * advances its sequence tracker immediately.  That is a transport watermark,
- * so a daemon restart can acknowledge a message before the application has
- * durably claimed it.  The SDK keeps _publishAppEvent private, but the public
- * client is intentionally adapted here in one place: preserve the SDK's
- * normal publication path and wait for its dispatcher queue for pulled
- * message events before the pull operation commits the sequence.
+ * fastaun publishes message events asynchronously, while the sequence tracker
+ * is a transport watermark. A daemon restart can therefore acknowledge a
+ * pulled message before the application has durably claimed it. SDK 0.5.15
+ * split protocol and application queues; prefer its application-only flush so
+ * an unrelated protocol event cannot delay the pull commit. Older SDKs fall
+ * back to the combined flush method.
  */
 export function enableReliableMessageDelivery(client) {
     const target = client;
@@ -124,7 +123,12 @@ export function enableReliableMessageDelivery(client) {
         return false;
     const publish = target._publishAppEvent;
     const dispatcher = target._dispatcher;
-    if (typeof publish !== 'function' || !dispatcher || typeof dispatcher.flush !== 'function')
+    const flushApplication = typeof dispatcher?.flushApplication === 'function'
+        ? dispatcher.flushApplication.bind(dispatcher)
+        : typeof dispatcher?.flush === 'function'
+            ? dispatcher.flush.bind(dispatcher)
+            : undefined;
+    if (typeof publish !== 'function' || !flushApplication)
         return false;
     const wrappedPublish = async function (event, payload, source, ...rest) {
         const result = await publish.call(this, event, payload, source, ...rest);
@@ -135,7 +139,7 @@ export function enableReliableMessageDelivery(client) {
             && source !== 'push'
             && source !== 'inline-push';
         if (reliable)
-            await dispatcher.flush();
+            await flushApplication();
         return result;
     };
     Object.defineProperty(target, RELIABLE_MESSAGE_DELIVERY_PATCH, {