evolcore 0.0.25 → 0.0.26

package/dist/aun/menu-client.js

@@ -22,6 +22,80 @@ export class MenuClientError extends Error {
         this.name = 'MenuClientError';
     }
 }
+/** Uses the daemon's existing authenticated AUN channel and its normal ACK path. */
+export class ManagedMenuClient {
+    send;
+    pending = new Map();
+    constructor(send) {
+        this.send = send;
+    }
+    accept(fromAid, payload, encrypted) {
+        if (!payload || typeof payload !== 'object' || payload.type !== 'menu.response')
+            return false;
+        if (!encrypted)
+            return true;
+        try {
+            const response = parseMenuResponse(payload);
+            this.pending.get(this.key(fromAid, response.id))?.resolve(response);
+        }
+        catch { /* Invalid responses cannot complete a pending request. */ }
+        return true;
+    }
+    close() {
+        for (const pending of this.pending.values())
+            pending.reject(new MenuClientError('AUN_DISCONNECTED', 'AUN channel disconnected'));
+        this.pending.clear();
+    }
+    async request(options) {
+        if (!isValidAid(options.fromAid) || !isValidAid(options.targetAid))
+            throw new MenuClientError('INVALID_ARGUMENT', 'Valid sender and target AIDs are required');
+        if (options.aunPath !== undefined || options.slotId !== undefined || options.encrypt === false)
+            throw new MenuClientError('INVALID_ARGUMENT', 'Managed Menu uses the daemon connection with E2EE; connection overrides are forbidden');
+        const request = { ...options.request, id: options.request.id || crypto.randomUUID() };
+        const validation = validateMenuRequest(request);
+        if (validation)
+            throw new MenuClientError(validation.code, validation.message);
+        const timeout = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        if (!Number.isFinite(timeout) || timeout < 1000 || timeout > MAX_TIMEOUT_MS)
+            throw new MenuClientError('INVALID_ARGUMENT', 'timeout must be between 1s and 120s');
+        const key = this.key(options.targetAid, request.id);
+        if (this.pending.has(key))
+            throw new MenuClientError('CLIENT_BUSY', 'Request ID is already in flight for this daemon');
+        const headers = buildMenuClientProtectedHeaders({ clientName: 'ec-menu-client', clientVersion: readInstalledEvolcoreVersion(), remoteAccessToken: options.remoteAccessToken ?? options.ecwebToken });
+        const attempts = request.type === 'menu.query' || request.type === 'menu.options' ? 2 : 1;
+        let timer;
+        try {
+            for (let attempt = 0; attempt < attempts; attempt++) {
+                const response = new Promise((resolve, reject) => {
+                    this.pending.set(key, { resolve, reject });
+                    timer = setTimeout(() => reject(new MenuClientError('TIMEOUT', 'Remote Menu response timed out')), timeout);
+                });
+                const sent = this.send({ to: options.targetAid, payload: request, encrypt: true, protected_headers: headers })
+                    .then(result => {
+                    if (!(result?.message_id ?? result?.message?.message_id))
+                        throw new MenuClientError('SEND_FAILED', 'message.send returned no message_id');
+                });
+                try {
+                    const [, value] = await Promise.all([sent, response]);
+                    return value;
+                }
+                catch (error) {
+                    if (!(error instanceof MenuClientError) || error.code !== 'TIMEOUT' || attempt + 1 === attempts)
+                        throw error;
+                }
+                finally {
+                    clearTimeout(timer);
+                }
+            }
+            throw new MenuClientError('TIMEOUT', 'Remote Menu response timed out');
+        }
+        finally {
+            clearTimeout(timer);
+            this.pending.delete(key);
+        }
+    }
+    key(target, id) { return JSON.stringify([target, id]); }
+}
 async function callClient(conn, method, params) {
     try {
         return await conn.call(method, params);

package/dist/aun/msg/group.js

@@ -52,7 +52,7 @@ function groupThreadId(args, payload, runtimeContext) {
 }
 function applyGroupRoutingPayloadFields(payload, args, runtimeContext) {
     const threadId = groupThreadId(args, payload, runtimeContext);
-    if (threadId && typeof payload.thread_id !== 'string')
+    if (threadId)
         payload.thread_id = threadId;
 }
 function groupSendLogMetadata(args, payload, runtimeContext) {

package/dist/aun/msg/managed-operation.js

@@ -248,7 +248,7 @@ export function resolveManagedGroupOperation(argv) {
                     return checked;
             }
             const memberType = values.get('--member-type');
-            if (memberType !== undefined && memberType !== 'human' && memberType !== 'ai')
+            if (memberType !== undefined && memberType !== 'human' && memberType !== 'agent')
                 return failGroup('INVALID_ARGUMENT', 'invalid --member-type');
             extra.members = members;
             extra.memberType = memberType;

package/dist/aun/msg/p2p.js

@@ -67,7 +67,7 @@ function messageLogContent(body) {
 }
 function applyRoutingPayloadFields(payload, args, runtimeContext, includeRuntimeRef = true) {
     const threadId = msgSendThreadId(args, payload, runtimeContext);
-    if (threadId && !payload.thread_id)
+    if (threadId)
         payload.thread_id = threadId;
     if (!includeRuntimeRef)
         return;
@@ -135,6 +135,7 @@ async function tryDaemonMsgSend(args, payload, runtimeContext, file) {
         encrypt: args.encrypt,
         thread,
         returnPolicy: args.returnPolicy,
+        handoffContext: args.handoffContext,
         originSessionId: runtimeContext.sessionId,
         originMessageId: runtimeContext.messageId,
         delegationToken: process.env[AGENT_DELEGATION_TOKEN_ENV],
@@ -213,6 +214,10 @@ async function appendMsgSendOutboundLog(args, result, opts) {
     catch { /* daemon 不在或 IPC 失败都忽略 */ }
 }
 export async function msgSend(args) {
+    if (args.handoffContext !== undefined && (!process.env.EVOLCORE_SESSION_ID
+        || !args.handoffContext.trim() || args.handoffContext.length > 64 * 1024)) {
+        return { ok: false, code: 'INVALID_HANDOFF_CONTEXT', error: 'handoff context requires a managed session and 1–65536 characters' };
+    }
     const runtimeContext = await readBestTaskRuntimeContext();
     // Contact admission is a daemon-owned policy for managed Agent tasks. A
     // non-managed CLI caller may use any valid AUN sender identity and must not

package/dist/aun/msg/upload.js

@@ -20,6 +20,11 @@ export function isValidPayloadType(value) {
 }
 /** 单次上传最大大小（与 daemon sendFile 一致）。 */
 export const MAX_AUN_ATTACHMENT_SIZE = 10 * 1024 * 1024;
+/**
+ * Inline JSON-RPC 上传阈值。超过该大小直接使用上传会话，避免把文件
+ * Base64 编码后放进 storage.put_object 的 RPC 参数。
+ */
+export const INLINE_AUN_ATTACHMENT_SIZE = 64 * 1024;
 /** server 端 inline 上限错误的识别特征。优先匹配错误消息里的“inline 上限”字样。 */
 function isInlineLimitError(err) {
     const msg = err?.message ?? '';
@@ -44,26 +49,29 @@ export async function uploadBufferAndBuildPayload(conn, ownerAid, data, filename
     const objectKey = `shared/${crypto.randomUUID()}/${safeFilename}`;
     const total = data.length;
     const report = (phase, bytes) => opts?.onProgress?.({ phase, bytes, total });
-    // 1. 先按 inline 走
-    let inlineRejected = false;
-    try {
-        report('inline', 0);
-        await conn.call('storage.put_object', {
-            object_key: objectKey,
-            content: data.toString('base64'),
-            content_type: contentType,
-            is_private: false,
-            overwrite: true,
-        });
-        report('inline', total);
-    }
-    catch (e) {
-        if (!isInlineLimitError(e))
-            throw e;
-        inlineRejected = true;
+    // 小文件优先走 inline，兼容不支持上传会话的服务端；大文件直接走
+    // session，避免先构造一份可能超过 JSON-RPC 限制的 Base64 请求。
+    let useUploadSession = total > INLINE_AUN_ATTACHMENT_SIZE;
+    if (!useUploadSession) {
+        try {
+            report('inline', 0);
+            await conn.call('storage.put_object', {
+                object_key: objectKey,
+                content: data.toString('base64'),
+                content_type: contentType,
+                is_private: false,
+                overwrite: true,
+            });
+            report('inline', total);
+        }
+        catch (e) {
+            if (!isInlineLimitError(e))
+                throw e;
+            useUploadSession = true;
+        }
     }
-    // 2. inline 被拒：降级到 session + HTTP PUT
-    if (inlineRejected) {
+    // inline 被拒或文件超过 inline 阈值：session + HTTP PUT
+    if (useUploadSession) {
         report('session-create', 0);
         const session = await conn.call('storage.create_upload_session', {
             object_key: objectKey,
@@ -144,9 +152,9 @@ export async function uploadBufferAndBuildPayload(conn, ownerAid, data, filename
 /**
  * 上传本地文件并构造发送用的 payload。
  *
- * 策略：先无脑 storage.put_object（内联 base64）。server 报“超过 inline 上限”
- * 时降级到 storage.create_upload_session + HTTP PUT + storage.complete_upload，
- * 此时通过 onProgress 上报字节级进度。
+ * 策略：小文件使用 storage.put_object（内联 base64）；大文件直接使用
+ * storage.create_upload_session + HTTP PUT + storage.complete_upload，避免
+ * 将大文件编码后放入 JSON-RPC。此时通过 onProgress 上报字节级进度。
  */
 export async function uploadFileAndBuildPayload(conn, ownerAid, filePath, opts) {
     const absPath = path.resolve(filePath);