mu-agent-bridge 1.0.15 → 1.0.17

package/README.md

@@ -1,7 +1,7 @@
 # mu-agent-bridge 动态插件平台
 
 运行时使用 TypeScript/Node.js，实现一个可动态发现、启动、停止、重载和安装插件的 daemon。
-当前插件包括千问办公 `qwenwork`、DeepSeek Harness `dsh`、豆包 `doubao`、基于 CodeBuddy CLI 的 `workbuddy`，以及插件化管理后台
+当前插件包括千问办公 `qwenwork`、DeepSeek Harness `dsh`、豆包 `doubao`、基于 CodeBuddy CLI 的 `workbuddy`、远程 ChatGPT/Codex CDP 插件 `chatgpt`，以及插件化管理后台
 `abweb`。插件之间独立失败，管理 API 和 OpenAI 兼容接口由同一个本地控制服务提供。
 
 ## 快速开始
@@ -14,18 +14,16 @@ npm run start
 
 默认监听 `http://127.0.0.1:26107`，管理页面为 `http://127.0.0.1:26107/abweb/`，管理 API 为 `/api/health`、`/api/plugins`，千问办公的
 OpenAI 兼容 API 为 `/v1/models` 和 `/v1/chat/completions`。管理页面位于 `/abweb`。
-千问办公插件使用 CDP `9226`；没有运行千问办公时，daemon 仍会启动，qwenwork 会显示为失败状态，
+千问办公插件使用 CDP `9228`；没有运行千问办公时，daemon 仍会启动，qwenwork 会显示为失败状态，
 可以通过管理 API 重载。
 
 安装后使用 `mab start` 启动。旧桥仍可使用 `17893`，不会与管理页面冲突。局域网访问时设置
 `AGENT_BRIDGE_HOST=0.0.0.0` 和 `AGENT_BRIDGE_TOKEN`，然后访问
 `http://<Windows 主机 IP>:26107/abweb/`。页面使用一次性配置码配对后管理插件；请只在可信网络使用。
-已有 AID 的连接状态由 AUN 插件查询，只有当前已连接的身份才能关联 Agent。
-本机 AID 来自 AUN 插件自身的密钥库，不依赖 `ec` 命令，`ec stop` 后仍会显示。
+已有 AID 的连接状态由 AUN 插件自己建立和查询，只有当前已连接的身份才能关联 Agent。
+AUN 插件通过 SDK 枚举 EvolCore 的本地 AID，并逐个建立连接；ABWeb 只展示已连接 AID，并按 EvolCore 与 mu-agent-bridge 分组，未连接身份不显示。状态检测不调用 `ec agent list/show`。
 创建新 AID 必须填写 Owner AID，并安装、启动 AUN 插件；创建与通信由该插件完成。
-已连接身份保存在 AUN 插件自身的密钥库和配置中。
-关联 AID 到 DSH 或千问办公等 Agent 时，由 AUN 插件直接保持该身份连接并把来信转给
-对应 Agent，回复经 AUN 发送；关联不再执行 `ec agent set/reload` 配置 EvolCore 路由。
+本工程创建的身份由 AUN 插件保持连接并收发消息；EvolCore 来源身份只用于连接状态检测，不订阅消息，避免重复收信。将 EvolCore 身份关联到 Agent 时，AUN 插件仍执行既有 `ec agent set/reload` 路由配置；该命令不用于检测连接状态。
 其他 Agent 插件可关联 AUN 插件自己创建的身份，由通道直接转发来信和回复。
 Windows 可运行 `start-mab.ps1` 注册并启动登录时自动运行的计划任务；令牌保存在
 `%USERPROFILE%\.mab\token.txt`，页面输入该令牌即可使用管理 API。
@@ -42,7 +40,14 @@ abweb 的“配置码”栏；配对码 10 分钟有效，只能使用一次，
 
 ## npm 插件
 
-默认包 `mu-agent-bridge` 内置千问办公和管理页面；其他插件单独发布为 npm 包。安装与发布说明见
+默认包 `mu-agent-bridge` 已内置 abweb、AUN、千问办公、DSH、豆包、飞书、WorkBuddy 和 ChatGPT/Codex 八个插件，直接安装即可使用：
+
+```powershell
+npm install -g mu-agent-bridge@latest
+mab start
+```
+
+八个插件会从核心包的 `plugins/` 目录自动发现。插件仍分别发布为独立 npm 包，可用于单独测试、升级或替换版本。安装与发布说明见
 [`docs/npm-publishing.md`](docs/npm-publishing.md)。
 
 `mab start` 启动时会查询核心包和托管插件的 npm 最新版本，检查状态保存于 mab 状态目录的
@@ -50,6 +55,9 @@ abweb 的“配置码”栏；配对码 10 分钟有效，只能使用一次，
 升级失败会恢复旧插件并继续启动。Windows 的 `start-mab.ps1` 登录计划任务会在启动 daemon 前
 更新全局核心包，健康检查失败时恢复备份。全局单独安装的插件及 Linux 核心自动升级暂不受管理。
 
+可用 `mab status` 查看后台、插件以及 AUN 已连接 AID 和关联 Agent 的状态。AUN 插件自己加载本地
+`~/.evolcore/AIDs` 并建立连接，不要求先启动 `ec start`，也不调用 `ec agent list/show`。
+
 插件更新策略可在 ABWeb 的“版本管理”中选择：默认“自动下载并安装”；“自动下载，手动安装”会把新版本缓存到状态目录并等待页面操作；“手动下载和安装”只检查版本。策略保存在 `state/update-policy.json`，插件下载缓存位于 `state/downloads`。
 
 运行时会发现核心包依赖和 `AGENT_BRIDGE_PLUGIN_PACKAGES` 中声明的 npm 包。插件包在自己的
@@ -64,7 +72,7 @@ abweb 插件目录从 npm 搜索带 `mu-agent-bridge-plugin` 关键词的包，
 插件仍在 daemon 的同一个 Node.js 进程内运行。修改插件入口依赖后应重启 daemon，避免模块缓存
 影响新代码。
 
-npm 尚未发布时，核心包内置的千问办公与 abweb 仍会出现在插件下拉框。abweb 的“安装本地插件”
+npm 尚未发布时，核心包内置的八个默认插件仍会出现在插件列表。abweb 的“安装本地插件”
 可填写 **Windows 主机上**包含 `plugin.json` 的目录路径，例如编译后的
 `C:\path\to\agent_bridge\packages\dsh`；安装后可在下拉框中启动。已内置的千问办公无需再次安装。
 “安装 npm 插件”只适用于包已经公开发布的情况。npm 发布令牌仅供发布脚本向 npm 官网认证，
@@ -100,7 +108,7 @@ $env:CODEBUDDY_NPM_DIR = 'C:\path\to\node_modules\@tencent-ai\codebuddy-code'
 
 千问工作区默认使用 `%APPDATA%\QwenWorkCN\workspace`，可用 `$env:QWEN_WORKSPACE`
 覆盖；AUN 数据默认使用 `$env:EVOLCORE_HOME` 或用户目录下的 `.evolcore`。
-千问 CDP 端口默认为 `9226`，也可用 `$env:QWEN_CDP_PORT` 覆盖。
+千问 CDP 端口默认为 `9228`，也可用 `$env:QWEN_CDP_PORT` 或 `$env:AGENT_BRIDGE_QWEN_CDP_PORT` 覆盖。守护进程注入端口优先级最高，用来覆盖插件配置中的冲突端口；之后依次读取插件配置、环境变量和默认值。守护进程监听端口被占用时，会按 `AGENT_BRIDGE_FALLBACK_PORTS` 或系统临时端口回退，并在启动日志中报告实际端口。豆包和 WorkBuddy 分别使用 `DOUBAO_CDP_PORT`、`WORKBUDDY_CDP_PORT`，也支持对应的 `AGENT_BRIDGE_*_CDP_PORT`。
 
 ## 自检与运行
 

package/dist/src-ts/cli.js

@@ -37,6 +37,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_path_1 = require("node:path");
 const node_http_1 = require("node:http");
 const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
 const node_os_1 = require("node:os");
 const node_child_process_1 = require("node:child_process");
 const node_util_1 = require("node:util");
@@ -70,8 +71,17 @@ async function selfTest(task) {
         console.error(`session=${response.sessionId}`);
     return 0;
 }
+async function daemonPort() {
+    try {
+        const address = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.resolve)(stateDirectory(), "daemon-address.json"), "utf8"));
+        if (Number.isInteger(address.port) && address.port > 0)
+            return address.port;
+    }
+    catch { /* 后台未写入地址时使用配置端口 */ }
+    return Number(process.env.AGENT_BRIDGE_PORT ?? "26107");
+}
 async function pair() {
-    const port = Number(process.env.AGENT_BRIDGE_PORT ?? "26107");
+    const port = await daemonPort();
     const result = await new Promise((resolve, reject) => {
         const req = (0, node_http_1.request)({ host: "127.0.0.1", port, path: "/api/pair-code", method: "GET" }, (res) => {
             let body = "";
@@ -109,6 +119,50 @@ async function update() {
     console.log("核心已更新，已请求 mab 计划任务重新启动");
     return 0;
 }
+async function status() {
+    const port = await daemonPort();
+    const get = (path) => new Promise((resolve, reject) => {
+        const req = (0, node_http_1.request)({ host: "127.0.0.1", port, path, method: "GET" }, (res) => {
+            let body = "";
+            res.setEncoding("utf8");
+            res.on("data", (chunk) => body += chunk);
+            res.on("end", () => {
+                try {
+                    const value = JSON.parse(body);
+                    if ((res.statusCode ?? 500) >= 400)
+                        reject(new Error(value.error ?? `HTTP ${res.statusCode}`));
+                    else
+                        resolve(value);
+                }
+                catch {
+                    reject(new Error("后台响应格式错误"));
+                }
+            });
+        });
+        req.setTimeout(5000, () => req.destroy(new Error("连接后台超时")));
+        req.on("error", reject);
+        req.end();
+    });
+    try {
+        const [plugins, health, aids] = await Promise.all([get("/api/plugins"), get("/api/health"), get("/api/plugins/aun/identities")]);
+        console.log(`后台：运行中（端口 ${port}）`);
+        console.log(`插件：${health.plugins ?? plugins.plugins?.length ?? 0} 个`);
+        for (const plugin of plugins.plugins ?? [])
+            console.log(`  ${plugin.id} ${plugin.version}：${plugin.status}`);
+        const groups = aids.groups ?? { muAgentBridge: [], evolcore: [] };
+        const all = aids.aids ?? [...(groups.muAgentBridge ?? []), ...(groups.evolcore ?? [])];
+        console.log(`AUN 已连接 AID：${all.length} 个`);
+        for (const aid of groups.muAgentBridge ?? [])
+            console.log(`  ${aid}：本工程${aids.bindings?.[aid] ? ` → ${aids.bindings[aid]}` : ""}`);
+        for (const aid of groups.evolcore ?? [])
+            console.log(`  ${aid}：EvolCore${aids.bindings?.[aid] ? ` → ${aids.bindings[aid]}` : ""}`);
+        return 0;
+    }
+    catch (error) {
+        console.error(`后台未运行或无法访问：${error instanceof Error ? error.message : String(error)}`);
+        return 1;
+    }
+}
 async function serve() {
     const manager = new plugin_manager_1.PluginManager({
         pluginsDir: (0, node_path_1.resolve)(process.env.AGENT_BRIDGE_PLUGINS_DIR ?? (0, node_path_1.resolve)(__dirname, "..", "..", "plugins")),
@@ -125,8 +179,14 @@ async function serve() {
     if (host !== "127.0.0.1" && host !== "localhost" && host !== "::1" && !process.env.AGENT_BRIDGE_TOKEN) {
         throw new Error("局域网监听必须设置 AGENT_BRIDGE_TOKEN");
     }
-    const server = new control_server_1.ControlServer({ manager, host, port, token: process.env.AGENT_BRIDGE_TOKEN });
+    const fallbackPorts = (process.env.AGENT_BRIDGE_FALLBACK_PORTS ?? "").split(",").map((value) => Number(value.trim())).filter((value) => Number.isInteger(value) && value >= 0);
+    if (port > 0 && !fallbackPorts.length)
+        fallbackPorts.push(0);
+    const server = new control_server_1.ControlServer({ manager, host, port, fallbackPorts, token: process.env.AGENT_BRIDGE_TOKEN });
     const address = await server.start();
+    const addressFile = (0, node_path_1.resolve)(stateDirectory(), "daemon-address.json");
+    await (0, promises_1.mkdir)(stateDirectory(), { recursive: true });
+    await (0, promises_1.writeFile)(addressFile, JSON.stringify({ host: address.host, port: address.port, pid: process.pid }));
     logger.info(`daemon listening on http://${address.host}:${address.port}`);
     const order = ["abweb", ...manager.list().map((plugin) => plugin.id).filter((id) => id !== "abweb")];
     for (const id of order) {
@@ -155,6 +215,12 @@ async function serve() {
             }
         }
         await server.stop();
+        try {
+            const address = JSON.parse(await (0, promises_1.readFile)(addressFile, "utf8"));
+            if (address.pid === process.pid)
+                await (0, promises_1.rm)(addressFile, { force: true });
+        }
+        catch { /* 地址文件可能已被清理 */ }
         clearInterval(updateTimer);
     };
     process.once("SIGINT", () => void shutdown().finally(() => process.exit(0)));
@@ -201,6 +267,8 @@ async function main() {
     const args = process.argv.slice(2);
     if (args.includes("pair"))
         return pair();
+    if (args[0] === "status")
+        return status();
     if (args[0] === "update")
         return update();
     const selfTestIndex = args.indexOf("--self-test");
@@ -208,7 +276,7 @@ async function main() {
         return selfTest(args[selfTestIndex + 1] ?? "hi");
     if (args.includes("--serve") || args.includes("start"))
         return serve();
-    console.error("用法：mab start | mab --self-test <任务>");
+    console.error("用法：mab start | mab status | mab --self-test <任务>");
     return 2;
 }
 main().then((code) => { process.exitCode = code; }).catch((error) => {

package/dist/src-ts/control-server.js

@@ -4,9 +4,10 @@ exports.ControlServer = exports.listExistingAids = void 0;
 const node_http_1 = require("node:http");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
+const local_aids_1 = require("./local-aids");
 const openai_adapter_1 = require("./plugins/qwenwork/openai-adapter");
-var local_aids_1 = require("./local-aids");
-Object.defineProperty(exports, "listExistingAids", { enumerable: true, get: function () { return local_aids_1.listExistingAids; } });
+var local_aids_2 = require("./local-aids");
+Object.defineProperty(exports, "listExistingAids", { enumerable: true, get: function () { return local_aids_2.listExistingAids; } });
 const AID_PATTERN = /^[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?){2,}$/;
 class ControlServer {
     options;
@@ -21,8 +22,36 @@ class ControlServer {
         this.options = options;
         this.server = (0, node_http_1.createServer)((req, res) => { void this.handle(req, res); });
     }
-    async start() { return new Promise((resolve, reject) => { const host = this.options.host ?? "127.0.0.1"; this.server.once("error", reject); this.server.listen(this.options.port ?? 0, host, () => { this.server.removeListener("error", reject); const info = this.server.address(); if (!info || typeof info === "string")
-        return reject(new Error("failed to bind control server")); this.address = { host, port: info.port }; resolve(this.address); }); }); }
+    async start() {
+        const host = this.options.host ?? "127.0.0.1";
+        const candidates = [this.options.port ?? 0, ...(this.options.fallbackPorts ?? [])];
+        for (const port of candidates) {
+            try {
+                const address = await new Promise((resolve, reject) => {
+                    const onError = (error) => { this.server.removeListener("listening", onListening); reject(error); };
+                    const onListening = () => {
+                        this.server.removeListener("error", onError);
+                        const info = this.server.address();
+                        if (!info || typeof info === "string") {
+                            reject(new Error("后台监听地址无效"));
+                            return;
+                        }
+                        resolve({ host, port: info.port });
+                    };
+                    this.server.once("error", onError);
+                    this.server.once("listening", onListening);
+                    this.server.listen(port, host);
+                });
+                this.address = address;
+                return address;
+            }
+            catch (error) {
+                if (error.code !== "EADDRINUSE" || port === candidates.at(-1))
+                    throw error;
+            }
+        }
+        throw new Error("后台监听失败");
+    }
     async stop() { if (!this.server.listening)
         return; await new Promise((resolve, reject) => this.server.close((error) => error ? reject(error) : resolve())); }
     async handle(req, res) {
@@ -102,9 +131,8 @@ class ControlServer {
             if (method === "GET" && url.pathname === "/api/aids") {
                 const identity = this.identity();
                 const groups = identity ? await identity.list() : { evolcore: [], muAgentBridge: [] };
-                // 本地 AID 由 AUN 插件的密钥库提供（groups.local），不再依赖 ec 查询 EvolCore
-                const aids = [...new Set([...groups.evolcore, ...groups.muAgentBridge, ...groups.local ?? []])];
-                return this.json(res, 200, { aids, groups, localAids: [], canCreate: Boolean(identity), message: identity ? "" : "请先安装并启动 AUN 插件，才能创建或关联 AID" });
+                const aids = [...new Set([...groups.evolcore, ...groups.muAgentBridge])];
+                return this.json(res, 200, { aids, groups, localAids: (await (0, local_aids_1.listExistingAids)()).filter((aid) => !aids.includes(aid)), canCreate: Boolean(identity), message: identity ? "" : "请先安装并启动 AUN 插件，才能创建或关联 AID" });
             }
             if (method === "POST" && url.pathname === "/api/aids") {
                 const body = await this.body(req);
@@ -189,6 +217,13 @@ class ControlServer {
             }
             if (await this.options.manager.dispatchHttp(req, res))
                 return;
+            // 根路径直接进入 abweb 管理页面，避免用户手敲 /abweb/
+            if (method === "GET" && (url.pathname === "/" || url.pathname === "")) {
+                res.statusCode = 302;
+                res.setHeader("location", "/abweb/");
+                res.end();
+                return;
+            }
             return this.json(res, 404, { error: "not found" });
         }
         catch (error) {

package/dist/src-ts/llprobe-qwen-bridge.js

@@ -7,7 +7,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
  */
 const node_http_1 = require("node:http");
 const node_crypto_1 = require("node:crypto");
-const PORT = Number(process.env.QWEN_CDP_PORT ?? '9226');
+const PORT = Number(process.env.QWEN_CDP_PORT ?? '9228');
 const SUBCHAT = process.env.QWEN_SUBCHAT ?? 'muj55ep9426gudjw';
 const CHAT = process.env.QWEN_CHAT ?? 'muj55ep9u6wbv0eo';
 const CWD = process.env.QWEN_WORKSPACE ?? `${process.env.APPDATA ?? ''}\\QwenWorkCN\\workspace`;

package/dist/src-ts/local-aids.js

@@ -4,8 +4,8 @@ exports.listExistingAids = listExistingAids;
 const promises_1 = require("node:fs/promises");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-async function listExistingAids() {
-    const root = (0, node_path_1.resolve)(process.env.EVOLCORE_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".evolcore"), "AIDs");
+async function listExistingAids(aunRoot) {
+    const root = (0, node_path_1.resolve)(aunRoot ?? process.env.EVOLCORE_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".evolcore"), "AIDs");
     let names;
     try {
         names = await (0, promises_1.readdir)(root);

package/dist/src-ts/plugin-manager.js

@@ -138,8 +138,11 @@ class PluginManager {
         this.log("info", `开始升级插件：${id}`, { packageName, version }, "插件升级");
         await (0, promises_1.mkdir)(staging, { recursive: true });
         try {
-            if (!cached)
-                await this.downloadPackage(packageName, version).then((downloaded) => (0, promises_1.rename)(downloaded, staging));
+            if (!cached) {
+                const downloaded = await this.downloadPackage(packageName, version);
+                await (0, promises_1.cp)(downloaded, staging, { recursive: true, force: true });
+                await (0, promises_1.rm)(downloaded, { recursive: true, force: true });
+            }
             const candidate = (0, node_path_1.join)(staging, "node_modules", packageName);
             const meta = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(candidate, "package.json"), "utf8"));
             if (meta.name !== packageName || !meta.version || (version && meta.version !== version))
@@ -307,6 +310,11 @@ class PluginManager {
                         }
                     },
                 },
+                runtime: { ports: {
+                        qwenwork: Number(process.env.AGENT_BRIDGE_QWEN_CDP_PORT ?? process.env.QWEN_CDP_PORT ?? "9228"),
+                        doubao: Number(process.env.AGENT_BRIDGE_DOUBAO_CDP_PORT ?? process.env.DOUBAO_CDP_PORT ?? "9227"),
+                        workbuddy: Number(process.env.AGENT_BRIDGE_WORKBUDDY_CDP_PORT ?? process.env.WORKBUDDY_CDP_PORT ?? "9229"),
+                    } },
             });
             loaded.instance = instance;
             loaded.record.status = "ready";

package/dist/src-ts/plugin-manifest.js

@@ -4,6 +4,7 @@ exports.validateManifest = validateManifest;
 const node_path_1 = require("node:path");
 const agent_1 = require("./agent");
 const semver = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+const httpUrl = /^https?:\/\/.+$/;
 function validateManifest(value, baseDir) {
     if (!value || typeof value !== "object")
         throw new agent_1.AgentError("invalid plugin manifest");
@@ -27,6 +28,8 @@ function validateManifest(value, baseDir) {
         throw new agent_1.AgentError("invalid plugin process");
     if (m.managementPage !== undefined && ((m.type ?? inferredType) !== "channel" || m.managementPage !== `/abweb/channels/${m.id}`))
         throw new agent_1.AgentError("插件管理页面路径无效");
+    if (m.clientDownloadUrl !== undefined && (typeof m.clientDownloadUrl !== "string" || !httpUrl.test(m.clientDownloadUrl)))
+        throw new agent_1.AgentError("客户端下载地址必须是 http(s) URL");
     if (m.dependencies && (!m.dependencies || typeof m.dependencies !== "object" || Array.isArray(m.dependencies) || Object.entries(m.dependencies).some(([id, range]) => !/^[a-z][a-z0-9-]{1,63}$/.test(id) || typeof range !== "string" || !range.trim())))
         throw new agent_1.AgentError("插件依赖声明无效");
     if (baseDir) {
@@ -36,5 +39,5 @@ function validateManifest(value, baseDir) {
         if ((0, node_path_1.isAbsolute)(m.entry) || rel.startsWith(`..${node_path_1.sep}`) || rel === "..")
             throw new agent_1.AgentError("plugin entry path escapes plugin directory");
     }
-    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], configSchema: m.configSchema, routes: m.routes, ...(m.dependencies ? { dependencies: { ...m.dependencies } } : {}), ...(m.managementPage ? { managementPage: m.managementPage } : {}) };
+    return { id: m.id, version: m.version, displayName: m.displayName ?? m.id, type: m.type ?? inferredType, entry: m.entry, apiVersion: m.apiVersion, process: m.process ?? "in-process", capabilities: [...m.capabilities], configSchema: m.configSchema, routes: m.routes, ...(m.dependencies ? { dependencies: { ...m.dependencies } } : {}), ...(m.managementPage ? { managementPage: m.managementPage } : {}), ...(m.clientDownloadUrl ? { clientDownloadUrl: m.clientDownloadUrl } : {}) };
 }

package/dist/src-ts/plugin.js

@@ -1,2 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRuntimePort = resolveRuntimePort;
+function resolveRuntimePort(config, runtime, pluginId, envName, fallback) {
+    const injected = runtime?.ports?.[pluginId];
+    if (typeof injected === "number" && Number.isInteger(injected) && injected > 0)
+        return injected;
+    const configured = config.cdpPort;
+    if (typeof configured === "number" && Number.isInteger(configured) && configured > 0)
+        return configured;
+    const environment = Number(process.env[envName] ?? "");
+    return Number.isInteger(environment) && environment > 0 ? environment : fallback;
+}

package/dist/src-ts/plugins/abweb/public/app.js

@@ -239,6 +239,16 @@
                 detail.textContent = `依赖：${plugin.dependencyStatus.join("；")}`;
                 state.append(detail);
             }
+            // 插件未就绪且声明了客户端下载地址时，给出获取桌面客户端的入口
+            if (plugin.manifest?.clientDownloadUrl && plugin.status !== "ready") {
+                const link = document.createElement("a");
+                link.className = "plugin-id";
+                link.href = plugin.manifest.clientDownloadUrl;
+                link.target = "_blank";
+                link.rel = "noreferrer noopener";
+                link.textContent = "下载客户端";
+                state.append(link);
+            }
             const controls = document.createElement("td");
             controls.className = "controls";
             if (pluginVersions[plugin.id]?.state === "update-available" && plugin.path.includes("node_modules")) {

package/dist/src-ts/plugins/aun/evolcore.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runEc = runEc;
+exports.configureAidForPlugin = configureAidForPlugin;
+const node_child_process_1 = require("node:child_process");
+const node_util_1 = require("node:util");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+async function runEc(args) {
+    try {
+        const { stdout } = await execFileAsync("ec", args, { shell: process.platform === "win32", timeout: 15_000, maxBuffer: 1024 * 1024 });
+        return JSON.parse(stdout);
+    }
+    catch (error) {
+        const stdout = error.stdout;
+        if (stdout) {
+            try {
+                return JSON.parse(stdout);
+            }
+            catch { /* 保留原始命令错误 */ }
+        }
+        throw error;
+    }
+}
+async function configureAidForPlugin(pluginId, aid, port, run = runEc) {
+    if (!aid)
+        return;
+    if (!/^[a-z0-9_-]+$/.test(pluginId))
+        throw new Error("插件 ID 格式无效");
+    const path = pluginId === "dsh" ? "/dsh/v1" : pluginId === "qwenwork" ? "/v1" : `/api/agents/${pluginId}/v1`;
+    for (const [key, value] of [
+        ["baseagents.ecagent.baseUrl", `http://127.0.0.1:${port}${path}`],
+        ["baseagents.ecagent.apiKey", "mab-local"],
+        ["baseagents.ecagent.model", pluginId],
+        ["active_baseagent", "ecagent"],
+    ]) {
+        const result = await run(["agent", "set", aid, key, value, "--format", "json"]);
+        if (!result?.ok)
+            throw new Error(`配置 AID ${aid} 失败：${key}；${result?.code ?? ""} ${result?.error ?? "未知错误"}`);
+    }
+    const result = await run(["agent", "reload", aid, "--format", "json"]);
+    if (!result?.ok)
+        throw new Error(`重载 AID ${aid} 失败：${result?.code ?? ""} ${result?.error ?? "未知错误"}`);
+}

package/dist/src-ts/plugins/aun/index.js

@@ -2,12 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AunPlugin = void 0;
 const promises_1 = require("node:fs/promises");
+const node_fs_1 = require("node:fs");
 const node_module_1 = require("node:module");
 const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
 const node_url_1 = require("node:url");
 const messages_1 = require("./messages");
+const evolcore_1 = require("./evolcore");
 const manifest = {
-    id: "aun", version: "1.0.6", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.10", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health"],
     configSchema: "config.schema.json",
@@ -36,6 +39,7 @@ class AunPlugin {
     store;
     clients = new Map();
     identities = new Set();
+    legacyCreatedAids = new Set();
     bindings = {};
     bindingTimes = {};
     creating = false;
@@ -53,13 +57,11 @@ class AunPlugin {
     }
     identity = {
         list: async () => {
-            // 不再依赖 ec 命令：本地密钥库的 AID 全部列出，本工程连接的 AID 以 clients 为准
-            const local = this.listStoreAids();
+            const connected = [...this.clients.keys()];
             return {
-                evolcore: [],
-                muAgentBridge: [...this.clients.keys()].sort(),
+                evolcore: connected.filter((aid) => !this.identities.has(aid) && !this.legacyCreatedAids.has(aid)).sort(),
+                muAgentBridge: connected.filter((aid) => this.identities.has(aid) || this.legacyCreatedAids.has(aid)).sort(),
                 localMuAgentBridge: [...this.identities].filter((aid) => !this.clients.has(aid)).sort(),
-                local,
             };
         },
         create: async (aid, owner) => {
@@ -94,7 +96,7 @@ class AunPlugin {
                 this.creating = false;
             }
         },
-        bind: async (pluginId, aid, _port) => {
+        bind: async (pluginId, aid, port) => {
             if (pluginId === "aun" || pluginId === "abweb")
                 throw new Error("只能关联 Agent 插件");
             const previous = this.bindings;
@@ -107,7 +109,7 @@ class AunPlugin {
                         throw new Error("AID 格式无效");
                     if (this.context?.pluginStatus(pluginId) !== "ready")
                         throw new Error("目标 Agent 插件未启动");
-                    if (this.identities.has(aid)) {
+                    if (this.identities.has(aid) || this.legacyCreatedAids.has(aid)) {
                         if (!this.clients.has(aid))
                             await this.connectAid(aid);
                         if (!this.clients.has(aid))
@@ -120,20 +122,15 @@ class AunPlugin {
                         this.bindings[aid] = pluginId;
                     }
                     else {
-                        // 不再调用 ec：只要 AID 在本地密钥库中就直接连接并绑定
-                        const loaded = this.store.load(aid);
-                        if (!loaded.ok || !loaded.data)
-                            throw new Error("AID 不在本地密钥库中，无法关联");
-                        await this.connectAid(aid);
-                        if (!this.clients.has(aid))
+                        const connected = await this.identity.list();
+                        if (![...connected.evolcore, ...connected.muAgentBridge].includes(aid))
                             throw new Error("AID 当前未连接");
+                        await (0, evolcore_1.configureAidForPlugin)(pluginId, aid, port);
                         for (const [identity, target] of Object.entries(this.bindings))
                             if (target === pluginId) {
                                 delete this.bindings[identity];
                                 delete this.bindingTimes[identity];
                             }
-                        this.bindings[aid] = pluginId;
-                        this.identities.add(aid);
                     }
                 }
                 else {
@@ -167,6 +164,18 @@ class AunPlugin {
     async activate(context) {
         this.context = context;
         this.config = { ...context.config };
+        this.legacyCreatedAids.clear();
+        try {
+            const created = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(context.dataDir, "..", "created-aids.json"), "utf8"));
+            if (Array.isArray(created))
+                for (const aid of created)
+                    if (typeof aid === "string" && aidPattern.test(aid))
+                        this.legacyCreatedAids.add(aid);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                context.logger.warn("读取旧版身份创建记录失败", { error: safeError(error) });
+        }
         for (const key of ["aid", "owner_aid", "aun_path", "encryption_seed", "root_ca_path", "allow_from", "agent_plugin"]) {
             if (this.config[key] !== undefined && typeof this.config[key] !== "string")
                 throw new Error(`${key} 必须是字符串`);
@@ -207,6 +216,10 @@ class AunPlugin {
             this.identities.add(this.aid);
         for (const aid of this.identities)
             await this.connectAid(aid);
+        // AUN 插件直接连接本地密钥库中的所有 AID，不依赖 ec 进程或 CLI。
+        for (const aid of this.listStoreAids())
+            if (!this.clients.has(aid))
+                await this.connectAid(aid);
     }
     async connectAid(aid) {
         try {
@@ -214,12 +227,14 @@ class AunPlugin {
             if (!loaded.ok || !loaded.data)
                 throw new Error(loaded.error?.message ?? "本地密钥库中不存在该 AID");
             const client = new this.sdk.AUNClient(loaded.data.aid);
-            const subscription = client.on("message.received", (payload) => this.onMessage(payload, aid));
+            const subscription = this.identities.has(aid) || this.legacyCreatedAids.has(aid)
+                ? client.on("message.received", (payload) => this.onMessage(payload, aid))
+                : undefined;
             try {
                 await client.connect();
             }
             catch (error) {
-                subscription.unsubscribe();
+                subscription?.unsubscribe();
                 await client.close();
                 throw error;
             }
@@ -236,7 +251,7 @@ class AunPlugin {
     async deactivate(_reason) {
         this.status = "degraded";
         for (const { client, subscription } of this.clients.values()) {
-            subscription.unsubscribe();
+            subscription?.unsubscribe();
             await client.close();
         }
         this.clients.clear();
@@ -253,10 +268,13 @@ class AunPlugin {
     async handle(_request) { throw new Error("AUN 是入站通道插件"); }
     path() {
         const configured = this.config.aun_path;
-        return typeof configured === "string" && configured.trim() ? configured : (0, node_path_1.join)(this.context.dataDir, "aun");
+        if (typeof configured === "string" && configured.trim())
+            return configured;
+        return (0, node_path_1.resolve)(process.env.AUN_HOME ?? process.env.EVOLCORE_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".evolcore"));
     }
     newStore() {
-        return new this.sdk.AIDStore({ aunPath: this.path(), encryptionSeed: typeof this.config.encryption_seed === "string" ? this.config.encryption_seed : "", verifySsl: typeof this.config.verify_ssl === "boolean" ? this.config.verify_ssl : true, rootCaPath: this.config.root_ca_path });
+        const rootCaPath = typeof this.config.root_ca_path === "string" && this.config.root_ca_path ? this.config.root_ca_path : (0, node_path_1.join)(this.path(), "CA", "root", "root.crt");
+        return new this.sdk.AIDStore({ aunPath: this.path(), encryptionSeed: typeof this.config.encryption_seed === "string" && this.config.encryption_seed ? this.config.encryption_seed : "evol", verifySsl: typeof this.config.verify_ssl === "boolean" ? this.config.verify_ssl : true, rootCaPath: (0, node_fs_1.existsSync)(rootCaPath) ? rootCaPath : undefined });
     }
     createAid = async (request, response) => {
         let input;
@@ -301,8 +319,8 @@ class AunPlugin {
     }
     listIdentities = async (_request, response) => {
         const groups = await this.identity.list();
-        const connected = new Set([...groups.evolcore, ...groups.muAgentBridge, ...groups.localMuAgentBridge ?? []]);
-        const localAids = (groups.local ?? []).filter((aid) => !connected.has(aid));
+        const connected = new Set([...groups.evolcore, ...groups.muAgentBridge]);
+        const localAids = this.listStoreAids().filter((aid) => !connected.has(aid));
         this.json(response, 200, { groups, localAids, bindings: this.bindings, bindingTimes: this.bindingTimes });
     };
     saveSettings = async (request, response) => {

package/dist/src-ts/plugins/aun/public/app.js

@@ -31,7 +31,7 @@
         configForm.elements.encryption_seed.value = "";
       }
       list.replaceChildren();
-      const entries = [["本工程 · 已连接", identities.groups.muAgentBridge || []], ["本机 AID", identities.groups.local || []], ["本工程 · 未连接", identities.groups.localMuAgentBridge || []]]
+      const entries = [["本工程 · 已连接", identities.groups.muAgentBridge || []], ["EvolCore · 已连接", identities.groups.evolcore || []]]
         .flatMap(([label, values], group) => values.map((aid) => ({ aid, label, group, bound: identities.bindings?.[aid] || agents.find((agent) => agent.id && agent.configAid === aid)?.id || "", time: Date.parse(identities.bindingTimes?.[aid] || "") || 0 })));
       entries.sort((a, b) => Number(Boolean(b.bound)) - Number(Boolean(a.bound)) || a.group - b.group || b.time - a.time || a.aid.localeCompare(b.aid));
       for (const { aid, label, bound } of entries) {
@@ -42,8 +42,8 @@
           select.value = bound; select.onchange = () => { if (select.value) void bind(aid, select.value); };
           cell.append(select); row.append(cell); list.append(row);
       }
-      if (!list.children.length) { const row = document.createElement("tr"); const cell = document.createElement("td"); cell.colSpan = 4; cell.textContent = "暂无 AID"; row.append(cell); list.append(row); }
-      show(`${(identities.groups.muAgentBridge || []).length} 个已连接，${(identities.groups.local || []).length} 个本机 AID`);
+      if (!list.children.length) { const row = document.createElement("tr"); const cell = document.createElement("td"); cell.colSpan = 4; cell.textContent = "暂无已连接 AID"; row.append(cell); list.append(row); }
+      show(`${(identities.groups.evolcore || []).length + (identities.groups.muAgentBridge || []).length} 个已连接 AID`);
     } catch (error) { show(String(error), true); }
     finally { loading = false; }
   }