mu-agent-bridge 1.0.33 → 1.0.35

package/README.md

@@ -14,6 +14,8 @@ npm run start
 
 默认监听 `http://127.0.0.1:26107`，管理页面为 `http://127.0.0.1:26107/abweb/`，管理 API 为 `/api/health`、`/api/plugins`，千问办公的
 OpenAI 兼容 API 为 `/v1/models` 和 `/v1/chat/completions`。管理页面位于 `/abweb`。
+千问办公支持通过 AUN 输入文件、图片和视频附件，并从本轮“已展示最终文件”收集实际输出附件。输入附件文件名会追加本轮唯一后缀并保留扩展名，以便失败时只清理桥接自己的附件。插件等待生成结束后再回传，输出保留文件名和 MIME 类型；桌面客户端不支持的媒体能力以实际回复为准。
+
 千问办公插件使用 CDP `9228`；没有运行千问办公时，daemon 仍会启动，qwenwork 会显示为失败状态，
 可以通过管理 API 重载。
 

package/dist/src-ts/channel-sessions.js

@@ -22,7 +22,7 @@ class ChannelSessions {
                     throw new Error("通道会话文件格式无效");
                 for (const [key, value] of Object.entries(data)) {
                     const entry = value;
-                    if (!entry || typeof entry.sessionId !== "string" || typeof entry.source !== "string" || typeof entry.agentPlugin !== "string" || typeof entry.updatedAt !== "string")
+                    if (!entry || typeof entry.sessionId !== "string" || typeof entry.source !== "string" || typeof entry.agentPlugin !== "string" || typeof entry.updatedAt !== "string" || (entry.newSession !== undefined && typeof entry.newSession !== "boolean"))
                         throw new Error("通道会话记录无效");
                     this.sessions[key] = entry;
                 }
@@ -63,10 +63,10 @@ class ChannelSessions {
             const sessionId = !command && entry?.agentPlugin === agentPlugin ? entry.sessionId : (0, node_crypto_1.randomUUID)();
             const response = command
                 ? await control({ operation: "new", sessionId, ...(command[1]?.trim() ? { name: command[1].trim() } : {}) })
-                : await call(sessionId);
+                : await call(sessionId, !entry || entry.agentPlugin !== agentPlugin || entry.newSession === true);
             if (command && (typeof response.sessionId !== "string" || !response.sessionId.trim()))
                 throw new Error("插件未返回有效的新会话标识，原会话绑定保持不变");
-            const next = { source, agentPlugin, sessionId: response.sessionId || sessionId, updatedAt: new Date().toISOString() };
+            const next = { source, agentPlugin, sessionId: response.sessionId || sessionId, updatedAt: new Date().toISOString(), ...(command ? { newSession: true } : {}) };
             const save = this.writes.catch(() => { }).then(async () => {
                 const snapshot = { ...this.sessions, [source]: next };
                 await (0, promises_1.mkdir)(this.directory, { recursive: true });

package/dist/src-ts/dsh-agent.js

@@ -2,8 +2,64 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DshAgent = void 0;
 const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
 const agent_1 = require("./agent");
+const attachments_1 = require("./attachments");
 const dsh_paths_1 = require("./dsh-paths");
+const outputMimeTypes = {
+    ".csv": "text/csv", ".html": "text/html", ".json": "application/json", ".md": "text/markdown",
+    ".pdf": "application/pdf", ".txt": "text/plain", ".doc": "application/msword", ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    ".mp4": "video/mp4", ".mov": "video/quicktime", ".webm": "video/webm", ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp",
+};
+function digest(data) { return (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"); }
+function outputContentType(filename, data) {
+    return (0, attachments_1.detectImageContentType)(data) ?? outputMimeTypes[(0, node_path_1.extname)(filename).toLowerCase()] ?? "application/octet-stream";
+}
+async function readPresentedFiles(directory, paths, cwd, inputs, returnPaths) {
+    if (paths.length > attachments_1.MAX_ATTACHMENTS)
+        throw new Error("单条消息最多包含 8 个附件");
+    const result = [];
+    const root = (0, node_path_1.resolve)(directory);
+    if (await (0, promises_1.realpath)(directory) !== root || !(await (0, promises_1.lstat)(directory)).isDirectory())
+        throw new Error("DSH 输出目录已被替换");
+    let total = 0;
+    for (const value of paths) {
+        const target = (0, node_path_1.resolve)(cwd, value);
+        if ((0, node_path_1.dirname)(target) !== root || (0, node_path_1.dirname)(await (0, promises_1.realpath)(target)) !== root)
+            throw new Error("DSH 回传附件路径超出输出目录");
+        if (!(await (0, promises_1.lstat)(target)).isFile())
+            throw new Error("DSH 回传附件不是普通文件");
+        const handle = await (0, promises_1.open)(target, node_fs_1.constants.O_RDONLY | (node_fs_1.constants.O_NOFOLLOW ?? 0));
+        let data;
+        try {
+            const info = await handle.stat();
+            if (!info.isFile() || info.size < 1 || info.size > attachments_1.MAX_ATTACHMENT_BYTES)
+                throw new Error("DSH 回传附件大小无效，单个附件不能超过 32 MiB");
+            total += info.size;
+            if (total > attachments_1.MAX_TOTAL_ATTACHMENT_BYTES)
+                throw new Error("单条消息附件总大小不能超过 64 MiB");
+            const buffer = Buffer.alloc(info.size + 1);
+            const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+            if (bytesRead !== info.size)
+                throw new Error("DSH 回传附件大小发生变化");
+            data = new Uint8Array(buffer.subarray(0, bytesRead));
+        }
+        finally {
+            await handle.close();
+        }
+        const source = inputs[returnPaths.indexOf(target)];
+        const original = source && digest(source.data) === digest(data) ? source : inputs.find((input) => input.filename === (0, node_path_1.basename)(target) && digest(input.data) === digest(data));
+        const filename = (0, attachments_1.attachmentFilename)(original?.filename ?? (0, node_path_1.basename)(target));
+        const contentType = original?.contentType ?? outputContentType(filename, data);
+        result.push({ kind: contentType.startsWith("image/") ? "image" : "file", data, filename, contentType });
+    }
+    (0, attachments_1.validateAttachments)(result);
+    return result;
+}
 class DshAgent {
     name = "dsh";
     paths;
@@ -17,54 +73,93 @@ class DshAgent {
     async send(request) {
         if (!request.task.trim())
             throw new agent_1.AgentError("DSH task must not be empty");
-        const args = ["--expose-internals", this.paths.cli, "--profile", "headless", "--patch", this.paths.patch, "--json"];
-        if (request.sessionId)
-            args.push("--session-id", request.sessionId);
-        args.push("-");
-        const child = this.spawnProcess(this.paths.executable, args, {
-            cwd: request.cwd,
-            env: { ...process.env, ELECTRON_RUN_AS_NODE: "1" },
-            stdio: ["pipe", "pipe", "pipe"],
-        });
-        child.stdin.end(request.task, "utf8");
-        let output = "";
-        let errors = "";
-        let sessionId = request.sessionId;
-        let finalText = "";
-        child.stdout.setEncoding?.("utf8");
-        child.stderr.setEncoding?.("utf8");
-        child.stdout.on("data", (chunk) => {
-            output += chunk;
-            for (const line of output.split(/\r?\n/).slice(0, -1)) {
-                try {
-                    const event = JSON.parse(line);
-                    if (event.type === "session" && event.sessionId)
-                        sessionId = event.sessionId;
-                    if (event.type === "final" && event.text)
-                        finalText = event.text.trim();
+        (0, attachments_1.validateAttachments)(request.attachments);
+        const workDirectory = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "agent-bridge-dsh-"));
+        let failed = false;
+        try {
+            const outputDirectory = (0, node_path_1.join)(workDirectory, "output");
+            await (0, promises_1.mkdir)(outputDirectory, { recursive: true });
+            for (const [index, item] of (request.attachments ?? []).entries())
+                await (0, promises_1.writeFile)((0, node_path_1.join)(workDirectory, `${index}-${(0, attachments_1.attachmentFilename)(item.filename)}`), item.data, { mode: 0o600 });
+            const inputPaths = (request.attachments ?? []).map((item, index) => ({ path: (0, node_path_1.join)(workDirectory, `${index}-${(0, attachments_1.attachmentFilename)(item.filename)}`), returnPath: (0, node_path_1.join)(outputDirectory, `${index}-${(0, attachments_1.attachmentFilename)(item.filename)}`), filename: item.filename, contentType: item.contentType }));
+            for (const [index, item] of (request.attachments ?? []).entries())
+                await (0, promises_1.writeFile)(inputPaths[index].returnPath, item.data, { mode: 0o600 });
+            const task = `${request.task}\n\n请使用真实文件工具读取输入附件；生成的回传文件必须写入 outputDirectory 的直接子文件，并调用 present 工具声明文件。原附件已准备 returnPath 副本，原样回传时直接 present 此路径，无需 shell 复制。图片或视频无法理解时请明确说明，仍可原样回传。\n附件传输：\n${JSON.stringify({ inputs: inputPaths, outputDirectory })}`;
+            const args = ["--expose-internals", this.paths.cli, "--profile", "headless", "--patch", this.paths.patch, "--json"];
+            if (request.sessionId && !request.newSession)
+                args.push("--session-id", request.sessionId);
+            args.push("-");
+            const child = this.spawnProcess(this.paths.executable, args, {
+                cwd: request.cwd,
+                env: { ...process.env, ELECTRON_RUN_AS_NODE: "1" },
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+            let output = "";
+            let errors = "";
+            let sessionId = request.newSession ? undefined : request.sessionId;
+            let sessionCwd = request.cwd ?? process.cwd();
+            let finalText = "";
+            const presented = new Set();
+            const presentCalls = new Map();
+            child.stdout.setEncoding?.("utf8");
+            child.stderr.setEncoding?.("utf8");
+            child.stdout.on("data", (chunk) => {
+                output += chunk;
+                for (const line of output.split(/\r?\n/).slice(0, -1)) {
+                    try {
+                        const event = JSON.parse(line);
+                        if (event.type === "session" && event.sessionId)
+                            sessionId = event.sessionId;
+                        if (event.type === "session" && event.cwd)
+                            sessionCwd = event.cwd;
+                        if (event.type === "final" && event.text)
+                            finalText = event.text.trim();
+                        if (event.type === "tool_call" && event.tool === "present" && event.callId)
+                            presentCalls.set(event.callId, (event.input?.files ?? []).map((file) => file.path).filter((path) => typeof path === "string"));
+                        if (event.type === "tool_result" && event.status === "completed" && event.callId)
+                            for (const path of presentCalls.get(event.callId) ?? [])
+                                presented.add(path);
+                    }
+                    catch { /* 忽略诊断输出和未完成的 JSON 行。 */ }
                 }
-                catch { /* diagnostics and partial lines are ignored */ }
-            }
-            output = output.split(/\r?\n/).at(-1) ?? "";
-        });
-        child.stderr.on("data", (chunk) => { errors += chunk; });
-        await new Promise((resolve, reject) => {
-            const timer = setTimeout(() => {
-                child.kill();
-                reject(new agent_1.AgentError(`DSH task timed out after ${request.timeoutMs ?? this.defaultTimeoutMs}ms`));
-            }, request.timeoutMs ?? this.defaultTimeoutMs);
-            child.once("error", (error) => { clearTimeout(timer); reject(new agent_1.AgentError("failed to start DSH", { cause: error })); });
-            child.once("close", (code) => {
-                clearTimeout(timer);
-                if (code !== 0 && !finalText)
-                    reject(new agent_1.AgentError(errors.trim() || `DSH exited with code ${code}`));
-                else
-                    resolve();
+                output = output.split(/\r?\n/).at(-1) ?? "";
+            });
+            child.stderr.on("data", (chunk) => { errors += chunk; });
+            await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    child.kill();
+                    reject(new agent_1.AgentError(`DSH task timed out after ${request.timeoutMs ?? this.defaultTimeoutMs}ms`));
+                }, request.timeoutMs ?? this.defaultTimeoutMs);
+                child.once("error", (error) => { clearTimeout(timer); reject(new agent_1.AgentError("failed to start DSH", { cause: error })); });
+                child.once("close", (code) => {
+                    clearTimeout(timer);
+                    if (code !== 0 && !finalText)
+                        reject(new agent_1.AgentError(errors.trim() || `DSH exited with code ${code}`));
+                    else
+                        resolve();
+                });
+                child.stdin.end(task, "utf8");
             });
-        });
-        if (!finalText)
-            throw new agent_1.AgentError("DSH returned no final text");
-        return { text: finalText, sessionId };
+            if (request.newSession && !sessionId)
+                throw new agent_1.AgentError("DSH 未返回真实新会话标识，无法确认后续续聊目标");
+            const attachments = await readPresentedFiles(outputDirectory, [...presented], sessionCwd, request.attachments ?? [], inputPaths.map((item) => item.returnPath));
+            if (!finalText && !attachments.length)
+                throw new agent_1.AgentError("DSH 未返回正文或附件");
+            return { text: finalText, sessionId, ...(attachments?.length ? { attachments } : {}) };
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            try {
+                await (0, promises_1.rm)(workDirectory, { recursive: true, force: true });
+            }
+            catch (error) {
+                if (!failed)
+                    throw error;
+            }
+        }
     }
 }
 exports.DshAgent = DshAgent;

package/dist/src-ts/headless-account.patch.yml

@@ -1,5 +1,12 @@
-# Select the account-backed model used by the DeepSeek Harness desktop login.
+# 复用 DeepSeek Harness 桌面端登录账号的模型。
 - id: agent-default-model
   config:
     provider: deepseek-account
     model: deepseek-chat
+
+# headless 默认未挂载交付工具，显式启用真实文件交付事件。
+- insert:
+    - id: tool-present
+      name: '@deepseek-ai/dsh-tool-present'
+      config:
+        maxFiles: 8

package/dist/src-ts/plugin-manager.js

@@ -26,6 +26,7 @@ class PluginManager {
     options;
     controlUrl;
     plugins = new Map();
+    upgrades = new Map();
     httpRoutes = new Map();
     root;
     messages = [];
@@ -162,6 +163,22 @@ class PluginManager {
             })]);
     }
     async upgradePackage(id, packageName = `agent-bridge-${id}`, version) {
+        const pending = this.upgrades.get(id);
+        if (pending) {
+            if (pending.packageName === packageName && pending.version === version)
+                return pending.task;
+            throw new agent_1.AgentError("插件正在升级，请等待完成后再请求其他版本");
+        }
+        const task = this.performUpgrade(id, packageName, version);
+        this.upgrades.set(id, { packageName, version, task });
+        try {
+            return await task;
+        }
+        finally {
+            this.upgrades.delete(id);
+        }
+    }
+    async performUpgrade(id, packageName, version) {
         if (!/^agent-bridge-[a-z0-9-]+$/.test(packageName))
             throw new agent_1.AgentError("仅支持 agent-bridge-* npm 包名");
         if (version && !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
@@ -362,11 +379,19 @@ class PluginManager {
                         this.recordMessage(target, "request", message.text, message.peerId);
                         try {
                             const instance = this.plugins.get(target)?.instance;
-                            const control = instance?.sessionOperations?.includes("new") && instance.controlSession
+                            const control = instance?.sessionOperations?.includes("new")
                                 ? (request) => this.controlSession(target, request)
                                 : undefined;
                             const task = !message.text.trim() && message.attachments?.length ? "请处理收到的附件" : message.text;
-                            const response = await this.sessions.run(message, target, (sessionId) => this.handle(target, { task, sessionId, ...(message.attachments ? { attachments: message.attachments } : {}) }), control);
+                            const forwarded = new Set();
+                            const onMessage = async (text) => {
+                                if (!text.trim() || forwarded.has(text))
+                                    return;
+                                await message.reply(text);
+                                forwarded.add(text);
+                                this.recordMessage(target, "reply", text, message.peerId);
+                            };
+                            const response = await this.sessions.run(message, target, (sessionId, newSession) => this.handle(target, { task, sessionId, onMessage, ...(newSession ? { newSession: true } : {}), ...(message.attachments ? { attachments: message.attachments } : {}) }), control);
                             const attachments = response.attachments?.length ? response.attachments : (0, attachments_1.asAttachments)(response.images);
                             (0, attachments_1.validateAttachments)(attachments);
                             if (attachments.length) {
@@ -375,10 +400,10 @@ class PluginManager {
                                     throw new agent_1.AgentError("当前通道不支持附件回传");
                                 }
                                 await message.replyAttachments(attachments, response.text);
+                                this.recordMessage(target, "reply", response.text, message.peerId);
                             }
                             else
-                                await message.reply(response.text);
-                            this.recordMessage(target, "reply", response.text, message.peerId);
+                                await onMessage(response.text);
                         }
                         catch (error) {
                             this.recordMessage(target, "error", error instanceof Error ? error.message : String(error), message.peerId);
@@ -549,9 +574,11 @@ class PluginManager {
         const loaded = this.plugins.get(id);
         if (!loaded?.instance || loaded.record.status !== "ready")
             throw new agent_1.AgentError(`插件 ${id} 未就绪，无法控制会话`);
-        if (!loaded.instance.sessionOperations?.includes(request.operation) || !loaded.instance.controlSession)
+        if (!loaded.instance.sessionOperations?.includes(request.operation))
             throw new agent_1.AgentError(`插件 ${id} 不支持新建会话`);
-        const response = await loaded.instance.controlSession(request);
+        const response = loaded.instance.controlSession
+            ? await loaded.instance.controlSession(request)
+            : { text: `${loaded.record.displayName} 已创建新会话`, sessionId: request.sessionId };
         if (typeof response.sessionId !== "string" || !response.sessionId.trim())
             throw new agent_1.AgentError("插件未返回有效的新会话标识，原会话绑定保持不变");
         return response;
@@ -626,10 +653,13 @@ class PluginManager {
         const packagedFile = (0, node_path_1.join)(record.path, record.manifest.entry);
         const developmentFile = (0, node_path_1.resolve)(__dirname, "plugins", record.id, (0, node_path_1.basename)(record.manifest.entry));
         const file = (0, node_fs_1.existsSync)(packagedFile) ? packagedFile : developmentFile;
-        // CommonJS is the platform's compiled format; evict the module cache for reload.
+        // 同时刷新插件内部依赖，避免升级后仍运行旧版 CDP 客户端。
         const req = (0, node_module_1.createRequire)(file);
         const resolved = req.resolve(file);
-        delete req.cache[resolved];
+        const moduleRoot = (0, node_fs_1.existsSync)(packagedFile) ? (0, node_path_1.resolve)(record.path) : (0, node_path_1.dirname)(file);
+        for (const cached of Object.keys(req.cache))
+            if (cached === resolved || cached.startsWith(`${moduleRoot}${node_path_1.sep}`))
+                delete req.cache[cached];
         const mod = req(resolved);
         let value = mod.default ?? mod.plugin ?? mod;
         // Entries may export a ready instance, a factory, or a class. Supporting all

package/dist/src-ts/plugins/aun/attachments.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AunDownloadUrlError = void 0;
 exports.parseAunAttachment = parseAunAttachment;
 exports.downloadAunAttachments = downloadAunAttachments;
 exports.downloadAunAttachment = downloadAunAttachment;
 exports.uploadAunAttachments = uploadAunAttachments;
 const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
 const attachments_1 = require("../../attachments");
 const aidPattern = /^[a-z0-9][a-z0-9_-]{2,63}\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/;
 const mimePattern = /^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+$/;
@@ -12,6 +14,21 @@ const imageTypes = new Set(["image/png", "image/jpeg", "image/webp"]);
 function digest(data) { return (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"); }
 function validKey(key) { return /^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*$/.test(key) && !key.split("/").some((part) => part === "." || part === ".."); }
 function validHash(value) { return /^[a-f0-9]{64}$/i.test(value); }
+function normalizedMime(value) {
+    if (value === undefined)
+        return;
+    if (typeof value !== "string" || /[\u0000-\u001f\u007f]/.test(value))
+        throw new Error("AUN 附件 MIME 类型无效");
+    if (!value.trim())
+        return;
+    try {
+        const type = new node_util_1.MIMEType(value).essence;
+        if (mimePattern.test(type))
+            return type;
+    }
+    catch { /* 统一报告无效类型。 */ }
+    throw new Error("AUN 附件 MIME 类型无效");
+}
 function validateReference(ref) {
     if (!aidPattern.test(ref.ownerAid) || !/^[A-Za-z0-9_-][A-Za-z0-9._-]{0,63}$/.test(ref.bucket) || !validKey(ref.objectKey))
         throw new Error("AUN 附件引用路径无效");
@@ -43,11 +60,9 @@ function parseAunAttachment(value) {
     const bucket = item.bucket === undefined ? "default" : typeof item.bucket === "string" ? item.bucket : "";
     const filename = (0, attachments_1.attachmentFilename)(typeof item.filename === "string" ? item.filename : objectKey);
     const ref = { ownerAid, bucket, objectKey, filename };
-    if (item.content_type !== undefined) {
-        if (typeof item.content_type !== "string")
-            throw new Error("AUN 附件 MIME 类型无效");
-        ref.contentType = item.content_type.toLowerCase();
-    }
+    const contentType = normalizedMime(item.content_type);
+    if (contentType)
+        ref.contentType = contentType;
     if (item.size_bytes !== undefined) {
         if (typeof item.size_bytes !== "number")
             throw new Error("AUN 附件大小无效");
@@ -81,10 +96,8 @@ function checkedMetadata(meta, ref) {
     if ([meta.owner, meta.owner_aid].some((owner) => owner && owner !== ref.ownerAid) || meta.bucket && meta.bucket !== ref.bucket
         || [meta.path, meta.object_key].some((path) => path && path !== `/${ref.objectKey}` && path !== ref.objectKey))
         throw new Error("AUN 附件元数据引用不一致");
-    const rawType = metadataValue(meta, "contentType", "content_type");
-    if (rawType && (typeof rawType !== "string" || !mimePattern.test(rawType)))
-        throw new Error("AUN 附件元数据 MIME 类型无效");
-    const contentType = typeof rawType === "string" && rawType ? rawType.toLowerCase() : ref.contentType ?? "application/octet-stream";
+    const rawType = normalizedMime(metadataValue(meta, "contentType", "content_type"));
+    const contentType = rawType ?? ref.contentType ?? "application/octet-stream";
     if (ref.contentType && rawType && ref.contentType.toLowerCase() !== contentType)
         throw new Error("AUN 附件 MIME 类型校验失败");
     const sha256 = typeof meta.sha256 === "string" && meta.sha256 ? meta.sha256.toLowerCase() : undefined;
@@ -162,9 +175,20 @@ async function downloadAunAttachments(client, refs) {
     (0, attachments_1.validateAttachments)(result);
     return result;
 }
+class AunDownloadUrlError extends Error {
+    diagnostic;
+    constructor(url, reason) {
+        super("AUN 下载地址无效");
+        this.name = "AunDownloadUrlError";
+        this.diagnostic = { protocol: url.protocol, hostname: url.hostname, port: url.port, reason };
+    }
+}
+exports.AunDownloadUrlError = AunDownloadUrlError;
 function checkedDownloadUrl(url) {
-    if (url.protocol !== "https:" || url.username || url.password || url.port || url.hash || !url.hostname.includes(".") || /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) || url.hostname.includes(":"))
-        throw new Error("AUN 下载地址无效");
+    const storagePort = url.port === "9470" && /^storage\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i.test(url.hostname);
+    const reason = url.protocol !== "https:" ? "协议" : url.username || url.password ? "凭据" : url.port && !storagePort ? "端口" : url.hash ? "片段" : !url.hostname.includes(".") ? "主机名" : /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) ? "本机地址" : url.hostname.includes(":") ? "主机名" : undefined;
+    if (reason)
+        throw new AunDownloadUrlError(url, reason);
     return url;
 }
 async function readDownloadTicket(value, expectedSize) {
@@ -224,9 +248,16 @@ async function uploadAunAttachments(client, ownerAid, peerAid, items) {
         const filename = (0, attachments_1.attachmentFilename)(item.filename);
         const objectKey = `shared/${(0, node_crypto_1.randomUUID)()}/${filename.replace(/[^A-Za-z0-9._-]/g, "_")}`;
         const sha256 = digest(item.data);
-        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType: item.contentType.toLowerCase(), sizeBytes: item.data.byteLength, sha256 };
-        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType: item.contentType, public: false, overwrite: false });
+        const contentType = item.contentType.toLowerCase();
+        // 视频播放器不携带 AID 凭据，沿用 EvolCore 的标准可读对象上传方式。
+        const video = contentType.startsWith("video/");
+        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType, sizeBytes: item.data.byteLength, sha256 };
+        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType, public: video, overwrite: video });
         checkedMetadata({ ...uploaded, size: uploaded.size ?? uploaded.size_bytes ?? item.data.byteLength }, ref);
+        if (video) {
+            result.push({ owner_aid: ownerAid, object_key: objectKey, filename, content_type: contentType, size_bytes: item.data.byteLength, sha256 });
+            continue;
+        }
         const share = await client.storage.lowlevel.createShareLink({ owner: ownerAid, bucket: "default", objectKey, allowedAids: [peerAid], expireInSeconds: 86400 });
         if (share.owner_aid && share.owner_aid !== ownerAid || share.bucket && share.bucket !== "default" || share.object_key && share.object_key !== objectKey)
             throw new Error("AUN 附件分享对象不一致");

package/dist/src-ts/plugins/aun/index.js

@@ -11,7 +11,7 @@ const node_url_1 = require("node:url");
 const messages_1 = require("./messages");
 const attachments_1 = require("./attachments");
 const manifest = {
-    id: "aun", version: "1.0.23", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.30", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health", "cli"],
     configSchema: "config.schema.json",
@@ -783,7 +783,7 @@ class AunPlugin {
             }
         }
         catch (error) {
-            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error) });
+            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error), ...(error instanceof attachments_1.AunDownloadUrlError ? { downloadUrl: error.diagnostic } : {}) });
             try {
                 await this.sendText(aid, message.peerId, `附件接收失败：${safeError(error)}`, message.threadId);
             }
@@ -817,15 +817,14 @@ class AunPlugin {
                     }
                     const groups = new Map();
                     for (const [index, item] of items.entries()) {
-                        const kind = item.kind;
-                        const ref = refs[index];
+                        const kind = item.kind === "file" && item.contentType.toLowerCase().startsWith("video/") ? "video" : item.kind;
                         const group = groups.get(kind) ?? [];
-                        group.push(ref);
+                        group.push(refs[index]);
                         groups.set(kind, group);
                     }
                     groupsCount = groups.size;
                     for (const [kind, group] of groups) {
-                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : "文件已生成。"), attachments: group };
+                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : kind === "video" ? "视频已生成。" : "文件已生成。"), attachments: group };
                         if (message.threadId)
                             payload.thread_id = message.threadId;
                         if (message.messageId)