mu-agent-bridge 1.0.34 → 1.0.39

package/dist/tests-ts/workbuddy-history.test.js

@@ -0,0 +1,256 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const node_vm_1 = require("node:vm");
+const workbuddy_1 = require("../src-ts/plugins/workbuddy");
+const cdp_client_1 = require("../src-ts/plugins/workbuddy/cdp-client");
+const logger = { info() { }, warn() { }, error() { } };
+const snapshot = () => ({ conversationId: "task-a", messages: [
+        { id: "u1", role: "user", text: "问题", complete: true },
+        { id: "a1", role: "assistant", text: "回答", complete: true },
+        { id: "draft", role: "assistant", text: "草稿", complete: false },
+        { id: "tool", role: "tool", text: "工具输出", complete: true },
+        { role: "user", text: "没有稳定 ID", complete: true },
+    ], missingReasons: [] });
+async function fixture(overrides = {}, config = { transport: "cdp" }) {
+    const calls = [];
+    let activeId = "task-a";
+    const client = {
+        connect: async () => undefined, close() { }, connected: () => true,
+        conversationId: async () => activeId,
+        historyAvailability: async () => ({ conversationId: activeId, waiting: false }),
+        readHistorySnapshot: async () => { calls.push("read"); return snapshot(); },
+        direct: async () => { calls.push("direct"); return "普通回复"; },
+        complete: async () => { calls.push("complete"); return { text: "普通回复" }; },
+        createTask: async () => { calls.push("createTask"); },
+        ...overrides,
+    };
+    const plugin = new workbuddy_1.WorkbuddyPlugin({ client });
+    await plugin.activate({ config, logger });
+    const history = plugin.sessionHistory;
+    strict_1.default.ok(history, "WorkBuddy 应公开受限原生历史 provider");
+    return { plugin, history, calls, client, setActiveId: (value) => { activeId = value; } };
+}
+(0, node_test_1.default)("WorkBuddy 原生历史只列出并读取当前任务，拒绝任意 ID 且不调用普通任务接口", async () => {
+    const { history, calls } = await fixture();
+    strict_1.default.equal(history.mode, "current");
+    const listed = await history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, true);
+    if (!listed.supported)
+        return;
+    strict_1.default.deepEqual(listed.sessions.map(item => item.id), ["task-a"]);
+    strict_1.default.equal(listed.complete, false);
+    strict_1.default.equal((await history.readSession({ sessionId: "other", limit: 100 })).supported, false);
+    const read = await history.readSession({ sessionId: "task-a", limit: 100 });
+    strict_1.default.equal(read.supported, true);
+    if (!read.supported)
+        return;
+    strict_1.default.deepEqual(read.turns, [{ id: "u1", role: "user", text: "问题" }, { id: "a1", role: "assistant", text: "回答" }]);
+    strict_1.default.equal(read.complete, false);
+    strict_1.default.ok(read.missingReasons.some(reason => /完整|已加载/.test(reason)));
+    strict_1.default.deepEqual(calls, ["read"]);
+});
+(0, node_test_1.default)("WorkBuddy CLI、旧客户端、断线、等待选择与未列出的任务明确不支持读取", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "wb-history-cli-"));
+    try {
+        const cliPath = (0, node_path_1.join)(root, "codebuddy.cjs");
+        await (0, promises_1.writeFile)(cliPath, "throw Error('不应运行 CLI');");
+        const cli = await fixture({}, { transport: "cli", cliPath });
+        strict_1.default.equal(cli.history.mode, "unsupported");
+        strict_1.default.equal((await cli.history.listSessions({ limit: 50 })).supported, false);
+        strict_1.default.deepEqual(cli.calls, []);
+    }
+    finally {
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+    for (const overrides of [
+        { readHistorySnapshot: undefined },
+        { connected: () => false },
+        { pendingInteractionSessionId: () => "logical-a" },
+        { historyAvailability: async () => ({ conversationId: "task-a", waiting: true }) },
+    ]) {
+        const { history, calls } = await fixture(overrides);
+        strict_1.default.equal((await history.listSessions({ limit: 50 })).supported, false);
+        strict_1.default.deepEqual(calls, []);
+    }
+    const { history, calls } = await fixture({ readHistorySnapshot: async () => ({ ...snapshot(), messages: [{ id: "a1", role: "assistant", text: "回复", complete: true }] }) });
+    const missingUser = await history.listSessions({ limit: 50 });
+    strict_1.default.equal(missingUser.supported, true);
+    if (!missingUser.supported)
+        return;
+    const result = await history.readSession({ sessionId: missingUser.sessions[0].id, limit: 100 });
+    strict_1.default.equal(result.supported, true);
+    if (result.supported) {
+        strict_1.default.equal(result.complete, false);
+        strict_1.default.ok(result.missingReasons.some(reason => /用户消息/.test(reason)));
+    }
+    strict_1.default.deepEqual(calls, []);
+});
+(0, node_test_1.default)("WorkBuddy 任务忙时立即拒绝历史读取，历史读取和 handle 共用队列", async () => {
+    let release;
+    const waiting = new Promise(resolve => { release = resolve; });
+    const { plugin, history } = await fixture({ complete: async () => { await waiting; return { text: "完成" }; } });
+    const request = plugin.handle({ task: "执行任务" });
+    const busy = await history.listSessions({ limit: 50 });
+    strict_1.default.equal(busy.supported, false);
+    if (!busy.supported)
+        strict_1.default.match(busy.reason, /忙/);
+    release();
+    await request;
+    let releaseRead;
+    let entered;
+    const reading = new Promise(resolve => { releaseRead = resolve; });
+    const started = new Promise(resolve => { entered = resolve; });
+    const next = await fixture({ readHistorySnapshot: async () => { entered(); await reading; return snapshot(); } });
+    await next.history.listSessions({ limit: 50 });
+    const read = next.history.readSession({ sessionId: "task-a", limit: 100 });
+    await started;
+    const handle = next.plugin.handle({ task: "普通任务" });
+    strict_1.default.deepEqual(next.calls, []);
+    releaseRead();
+    strict_1.default.equal((await read).supported, true);
+    await handle;
+    strict_1.default.deepEqual(next.calls, ["complete"]);
+});
+(0, node_test_1.default)("WorkBuddy 读取前后身份变化及快照任务不一致时拒绝", async () => {
+    const current = await fixture();
+    await current.history.listSessions({ limit: 50 });
+    current.setActiveId("task-b");
+    strict_1.default.equal((await current.history.readSession({ sessionId: "task-a", limit: 100 })).supported, false);
+    strict_1.default.deepEqual(current.calls, []);
+    let reads = 0;
+    const changed = await fixture({ conversationId: async () => ++reads <= 3 ? "task-a" : "task-b", historyAvailability: async () => ({ conversationId: ++reads <= 3 ? "task-a" : "task-b", waiting: false }) });
+    await changed.history.listSessions({ limit: 50 });
+    strict_1.default.equal((await changed.history.readSession({ sessionId: "task-a", limit: 100 })).supported, false);
+    const mismatch = await fixture({ readHistorySnapshot: async () => ({ ...snapshot(), conversationId: "task-b" }) });
+    await mismatch.history.listSessions({ limit: 50 });
+    strict_1.default.equal((await mismatch.history.readSession({ sessionId: "task-a", limit: 100 })).supported, false);
+});
+(0, node_test_1.default)("WorkBuddy 没有用户证据和被排除的未完成回复时保留明确缺失原因", async () => {
+    const value = await fixture({ readHistorySnapshot: async () => ({ ...snapshot(), messages: snapshot().messages.filter(item => item.role === "assistant" && item.complete), missingReasons: ["未完成助手回复已排除。"] }) });
+    const listed = await value.history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, true);
+    if (!listed.supported)
+        return;
+    const result = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 100 });
+    strict_1.default.equal(result.supported, true);
+    if (!result.supported)
+        return;
+    strict_1.default.equal(result.complete, false);
+    strict_1.default.ok(result.missingReasons.some(reason => /用户/.test(reason)));
+    strict_1.default.ok(result.missingReasons.some(reason => /未完成/.test(reason)));
+});
+(0, node_test_1.default)("WorkBuddy 分页上限、不可伪造游标及 60000 字符限制", async () => {
+    const value = await fixture({ readHistorySnapshot: async () => ({ ...snapshot(), messages: Array.from({ length: 3 }, (_, index) => ({ id: `u${index}`, role: "user", text: `问题${index}`, complete: true })) }) });
+    strict_1.default.equal((await value.history.listSessions({ limit: 51 })).supported, false);
+    strict_1.default.equal((await value.history.readSession({ sessionId: "task-a", limit: 101 })).supported, false);
+    strict_1.default.equal((await value.history.readSession({ sessionId: "task-a", limit: 0 })).supported, false);
+    strict_1.default.equal((await value.history.readSession({ sessionId: "task-a", limit: 1, cursor: "task-b" })).supported, false);
+    const listed = await value.history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, true);
+    if (!listed.supported)
+        return;
+    const first = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 1 });
+    strict_1.default.equal(first.supported, true);
+    if (!first.supported)
+        return;
+    strict_1.default.equal(first.turns.length, 1);
+    strict_1.default.ok(first.nextCursor);
+    strict_1.default.ok(!first.nextCursor.includes("task-a"));
+    const second = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 100, cursor: first.nextCursor });
+    strict_1.default.equal(second.supported, true);
+    if (second.supported)
+        strict_1.default.deepEqual(second.turns.map(turn => turn.id), ["u1", "u2"]);
+    strict_1.default.deepEqual(value.calls, []);
+    const oversized = await fixture({ readHistorySnapshot: async () => ({ ...snapshot(), messages: [{ id: "u1", role: "user", text: "字".repeat(60_001), complete: true }] }) });
+    const oversizedList = await oversized.history.listSessions({ limit: 50 });
+    strict_1.default.equal(oversizedList.supported, true);
+    if (!oversizedList.supported)
+        return;
+    const result = await oversized.history.readSession({ sessionId: oversizedList.sessions[0].id, limit: 100 });
+    strict_1.default.equal(result.supported, false);
+    if (!result.supported)
+        strict_1.default.match(result.reason, /60000/);
+});
+(0, node_test_1.default)("WorkBuddy CDP 历史 DOM 只读排除推理、工具、附件、草稿及未完成正文", async () => {
+    const client = new cdp_client_1.WorkbuddyCdpClient();
+    const read = client.readHistorySnapshot;
+    strict_1.default.equal(typeof read, "function", "CDP 应提供单独的只读历史快照方法");
+    const removed = [];
+    const body = (text) => ({ cloneNode: () => ({ textContent: text, querySelectorAll: (selector) => { removed.push(selector); return []; } }) });
+    const message = (id, role, text, finished) => ({
+        getAttribute: (name) => name === "data-message-id" ? id : null,
+        matches: (selector) => selector.includes(".cr-agent") && role === "assistant",
+        querySelector: (selector) => selector === '[data-user-content]' ? role === "user" ? body(text) : null : selector === '[data-assistant-content]' ? role === "assistant" ? body(text) : null : selector.includes("conversation-finished-footer") ? finished ? {} : null : null,
+    });
+    const selected = { className: "_selected_", getAttribute: () => "task-a" };
+    const expressions = [];
+    const internal = client;
+    internal.evaluate = async (expression) => {
+        expressions.push(expression);
+        return (0, node_vm_1.runInNewContext)(expression, { document: {
+                querySelectorAll: (selector) => selector === '[data-conversation-id]' ? [selected] : selector.includes("data-message-id") ? [message("u1", "user", "问题", true), message("a1", "assistant", "回答", true), message("draft", "assistant", "草稿", false)] : [],
+                querySelector: () => null,
+            } });
+    };
+    const result = await read.call(client);
+    strict_1.default.deepEqual(JSON.parse(JSON.stringify(result.messages)), [{ id: "u1", role: "user", text: "问题", complete: true }, { id: "a1", role: "assistant", text: "回答", complete: true }]);
+    strict_1.default.ok(removed.some(selector => /cr-reasoning/.test(selector) && /tool/.test(selector) && /artifact/.test(selector)));
+    strict_1.default.ok(expressions.every(expression => !/\.click\(|\.focus\(|fetch\(|Input\.|dispatchEvent|createTask|complete\(/.test(expression)));
+    internal.evaluate = async (expression) => (0, node_vm_1.runInNewContext)(expression, { document: {
+            querySelectorAll: (selector) => selector === '[data-conversation-id]' ? [selected] : [],
+            querySelector: (selector) => selector.includes("pending-sandbox-panel") ? {} : null,
+        } });
+    const waiting = await read.call(client);
+    strict_1.default.match(waiting.unavailableReason ?? "", /等待用户选择/);
+});
+(0, node_test_1.default)("WorkBuddy 当前页面存在未登记的等待选择时拒绝读取", async () => {
+    let waiting = false;
+    const value = await fixture({ historyAvailability: async () => ({ conversationId: "task-a", waiting }) });
+    const client = value.client;
+    const listed = await value.history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, true);
+    if (!listed.supported)
+        return;
+    waiting = true;
+    const result = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 100 });
+    strict_1.default.equal(result.supported, false);
+    if (!result.supported)
+        strict_1.default.match(result.reason, /等待用户选择/);
+});
+(0, node_test_1.default)("WorkBuddy 页面已等待选择时不列出任务", async () => {
+    const value = await fixture({ historyAvailability: async () => ({ conversationId: "task-a", waiting: true }) });
+    const listed = await value.history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, false);
+    if (!listed.supported)
+        strict_1.default.match(listed.reason, /等待用户选择/);
+});
+(0, node_test_1.default)("WorkBuddy 分页期间出现等待选择时拒绝续页并清除缓存", async () => {
+    let waiting = false;
+    const value = await fixture({
+        historyAvailability: async () => ({ conversationId: "task-a", waiting }),
+        readHistorySnapshot: async () => ({ ...snapshot(), messages: Array.from({ length: 2 }, (_, index) => ({ id: `u${index}`, role: "user", text: `问题${index}`, complete: true })) }),
+    });
+    const listed = await value.history.listSessions({ limit: 50 });
+    strict_1.default.equal(listed.supported, true);
+    if (!listed.supported)
+        return;
+    const first = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 1 });
+    strict_1.default.equal(first.supported, true);
+    if (!first.supported || !first.nextCursor)
+        return;
+    waiting = true;
+    const rejected = await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 1, cursor: first.nextCursor });
+    strict_1.default.equal(rejected.supported, false);
+    if (!rejected.supported)
+        strict_1.default.match(rejected.reason, /等待用户选择/);
+    waiting = false;
+    strict_1.default.equal((await value.history.readSession({ sessionId: listed.sessions[0].id, limit: 1, cursor: first.nextCursor })).supported, false);
+});

package/dist/tests-ts/workbuddy-plugin.test.js

@@ -110,6 +110,42 @@ const cdp_client_1 = require("../src-ts/plugins/workbuddy/cdp-client");
     internal.evaluate = async (expression) => (0, node_vm_1.runInNewContext)(expression, { document: { querySelectorAll: () => [message] }, URL, Uint8Array, btoa, fetch: async () => new Response(null, { status: 404 }) });
     await strict_1.default.rejects(() => internal.readArtifacts(new Set(["new"])), /产物读取失败/);
 });
+(0, node_test_1.default)("workbuddy 不回传视频产物，保留图片和普通附件", async () => {
+    const client = new cdp_client_1.WorkbuddyCdpClient();
+    const fetched = [];
+    let cancelled = false;
+    const cards = ["file:///C:/movie.MP4", "file:///C:/movie.bin", "file:///C:/image.png"].map(url => ({ getAttribute: () => url }));
+    const message = { getAttribute: () => "new", querySelector: () => null, querySelectorAll: () => cards };
+    const internal = client;
+    internal.evaluate = async (expression) => (0, node_vm_1.runInNewContext)(expression, {
+        document: { querySelectorAll: () => [message] }, URL, Uint8Array, btoa,
+        fetch: async (url) => {
+            fetched.push(url);
+            if (url.endsWith('.bin'))
+                return { ok: true, headers: { get: () => 'video/mp4' }, body: { cancel: async () => { cancelled = true; }, getReader() { throw new Error('不应读取视频'); } } };
+            return new Response(new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10, 1]));
+        },
+    });
+    strict_1.default.deepEqual((await internal.readArtifacts(new Set(['new']))).map(item => item.filename), ['image.png']);
+    strict_1.default.deepEqual(fetched, ['file:///C:/movie.bin', 'file:///C:/image.png']);
+    strict_1.default.equal(cancelled, true);
+});
+(0, node_test_1.default)("workbuddy 默认允许长任务等待一小时并遵守显式超时", async () => {
+    const timeouts = [];
+    const plugin = new workbuddy_1.WorkbuddyPlugin({ client: {
+            connect: async () => undefined, close() { }, connected: () => true,
+            direct: async () => '', complete: async (request) => { timeouts.push(request.timeoutMs); return { text: '已完成' }; },
+        } });
+    await plugin.activate({ config: { transport: 'cdp' }, logger: { info() { }, warn() { }, error() { } } });
+    try {
+        await plugin.handle({ task: '生成视频' });
+        await plugin.handle({ task: '继续', timeoutMs: 1234 });
+        strict_1.default.deepEqual(timeouts, [3_600_000, 1234]);
+    }
+    finally {
+        await plugin.deactivate('stop');
+    }
+});
 (0, node_test_1.default)("workbuddy CDP 读取当前产物面板隐藏文件时排除旧轮次与其他任务", async () => {
     const client = new cdp_client_1.WorkbuddyCdpClient();
     const fetched = [];
@@ -710,10 +746,17 @@ const cdp_client_1 = require("../src-ts/plugins/workbuddy/cdp-client");
         const client = new cdp_client_1.WorkbuddyCdpClient({ timeoutMs: 1 });
         const evaluator = client;
         evaluator.evaluate = async (expression) => (0, node_vm_1.runInNewContext)(expression, { document, location: { href: "app://workbuddy/task/old" } });
+        evaluator.pendingInteraction = { prompt: "请选择项目", options: ["项目甲"], sessionId: "old-session" };
+        evaluator.pendingInteractionCleanup = ["C:/Temp/旧附件.png"];
+        const cleaned = [];
+        evaluator.cleanupTemporaryFiles = async (paths) => { cleaned.push(...paths); };
         if (succeeds)
             await client.createTask();
         else
             await strict_1.default.rejects(() => client.createTask(), /新任务状态校验失败/);
+        strict_1.default.equal(client.pendingInteractionSessionId(), succeeds ? undefined : "old-session");
+        strict_1.default.deepEqual(cleaned, succeeds ? ["C:/Temp/旧附件.png"] : []);
+        strict_1.default.deepEqual(evaluator.pendingInteractionCleanup, succeeds ? undefined : ["C:/Temp/旧附件.png"]);
     }
 });
 (0, node_test_1.default)("workbuddy CDP 新建接受旧任务退回无 ID 落地页及已在落地页的启动", async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mu-agent-bridge",
-  "version": "1.0.34",
+  "version": "1.0.39",
   "description": "将 AUN Agent 连接到本地桌面 AI 客户端的插件平台。",
   "main": "dist/src-ts/cli.js",
   "bin": {

package/plugins/aun/dist/src-ts/plugins/aun/attachments.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AunDownloadUrlError = void 0;
 exports.parseAunAttachment = parseAunAttachment;
 exports.downloadAunAttachments = downloadAunAttachments;
 exports.downloadAunAttachment = downloadAunAttachment;
 exports.uploadAunAttachments = uploadAunAttachments;
 const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
 const attachments_1 = require("../../attachments");
 const aidPattern = /^[a-z0-9][a-z0-9_-]{2,63}\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/;
 const mimePattern = /^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+$/;
@@ -12,6 +14,21 @@ const imageTypes = new Set(["image/png", "image/jpeg", "image/webp"]);
 function digest(data) { return (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"); }
 function validKey(key) { return /^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*$/.test(key) && !key.split("/").some((part) => part === "." || part === ".."); }
 function validHash(value) { return /^[a-f0-9]{64}$/i.test(value); }
+function normalizedMime(value) {
+    if (value === undefined)
+        return;
+    if (typeof value !== "string" || /[\u0000-\u001f\u007f]/.test(value))
+        throw new Error("AUN 附件 MIME 类型无效");
+    if (!value.trim())
+        return;
+    try {
+        const type = new node_util_1.MIMEType(value).essence;
+        if (mimePattern.test(type))
+            return type;
+    }
+    catch { /* 统一报告无效类型。 */ }
+    throw new Error("AUN 附件 MIME 类型无效");
+}
 function validateReference(ref) {
     if (!aidPattern.test(ref.ownerAid) || !/^[A-Za-z0-9_-][A-Za-z0-9._-]{0,63}$/.test(ref.bucket) || !validKey(ref.objectKey))
         throw new Error("AUN 附件引用路径无效");
@@ -43,11 +60,9 @@ function parseAunAttachment(value) {
     const bucket = item.bucket === undefined ? "default" : typeof item.bucket === "string" ? item.bucket : "";
     const filename = (0, attachments_1.attachmentFilename)(typeof item.filename === "string" ? item.filename : objectKey);
     const ref = { ownerAid, bucket, objectKey, filename };
-    if (item.content_type !== undefined) {
-        if (typeof item.content_type !== "string")
-            throw new Error("AUN 附件 MIME 类型无效");
-        ref.contentType = item.content_type.toLowerCase();
-    }
+    const contentType = normalizedMime(item.content_type);
+    if (contentType)
+        ref.contentType = contentType;
     if (item.size_bytes !== undefined) {
         if (typeof item.size_bytes !== "number")
             throw new Error("AUN 附件大小无效");
@@ -81,10 +96,8 @@ function checkedMetadata(meta, ref) {
     if ([meta.owner, meta.owner_aid].some((owner) => owner && owner !== ref.ownerAid) || meta.bucket && meta.bucket !== ref.bucket
         || [meta.path, meta.object_key].some((path) => path && path !== `/${ref.objectKey}` && path !== ref.objectKey))
         throw new Error("AUN 附件元数据引用不一致");
-    const rawType = metadataValue(meta, "contentType", "content_type");
-    if (rawType && (typeof rawType !== "string" || !mimePattern.test(rawType)))
-        throw new Error("AUN 附件元数据 MIME 类型无效");
-    const contentType = typeof rawType === "string" && rawType ? rawType.toLowerCase() : ref.contentType ?? "application/octet-stream";
+    const rawType = normalizedMime(metadataValue(meta, "contentType", "content_type"));
+    const contentType = rawType ?? ref.contentType ?? "application/octet-stream";
     if (ref.contentType && rawType && ref.contentType.toLowerCase() !== contentType)
         throw new Error("AUN 附件 MIME 类型校验失败");
     const sha256 = typeof meta.sha256 === "string" && meta.sha256 ? meta.sha256.toLowerCase() : undefined;
@@ -162,9 +175,20 @@ async function downloadAunAttachments(client, refs) {
     (0, attachments_1.validateAttachments)(result);
     return result;
 }
+class AunDownloadUrlError extends Error {
+    diagnostic;
+    constructor(url, reason) {
+        super("AUN 下载地址无效");
+        this.name = "AunDownloadUrlError";
+        this.diagnostic = { protocol: url.protocol, hostname: url.hostname, port: url.port, reason };
+    }
+}
+exports.AunDownloadUrlError = AunDownloadUrlError;
 function checkedDownloadUrl(url) {
-    if (url.protocol !== "https:" || url.username || url.password || url.port || url.hash || !url.hostname.includes(".") || /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) || url.hostname.includes(":"))
-        throw new Error("AUN 下载地址无效");
+    const storagePort = url.port === "9470" && /^storage\.[a-z0-9-]+(?:\.[a-z0-9-]+)+$/i.test(url.hostname);
+    const reason = url.protocol !== "https:" ? "协议" : url.username || url.password ? "凭据" : url.port && !storagePort ? "端口" : url.hash ? "片段" : !url.hostname.includes(".") ? "主机名" : /^(?:localhost|127\.|0\.|10\.|192\.168\.|169\.254\.|172\.(?:1[6-9]|2\d|3[01])\.)/.test(url.hostname) ? "本机地址" : url.hostname.includes(":") ? "主机名" : undefined;
+    if (reason)
+        throw new AunDownloadUrlError(url, reason);
     return url;
 }
 async function readDownloadTicket(value, expectedSize) {
@@ -224,9 +248,16 @@ async function uploadAunAttachments(client, ownerAid, peerAid, items) {
         const filename = (0, attachments_1.attachmentFilename)(item.filename);
         const objectKey = `shared/${(0, node_crypto_1.randomUUID)()}/${filename.replace(/[^A-Za-z0-9._-]/g, "_")}`;
         const sha256 = digest(item.data);
-        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType: item.contentType.toLowerCase(), sizeBytes: item.data.byteLength, sha256 };
-        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType: item.contentType, public: false, overwrite: false });
+        const contentType = item.contentType.toLowerCase();
+        // 视频播放器不携带 AID 凭据，沿用 EvolCore 的标准可读对象上传方式。
+        const video = contentType.startsWith("video/");
+        const ref = { ownerAid, bucket: "default", objectKey, filename, contentType, sizeBytes: item.data.byteLength, sha256 };
+        const uploaded = await client.storage.writeBytes(`/${objectKey}`, item.data, { contentType, public: video, overwrite: video });
         checkedMetadata({ ...uploaded, size: uploaded.size ?? uploaded.size_bytes ?? item.data.byteLength }, ref);
+        if (video) {
+            result.push({ owner_aid: ownerAid, object_key: objectKey, filename, content_type: contentType, size_bytes: item.data.byteLength, sha256 });
+            continue;
+        }
         const share = await client.storage.lowlevel.createShareLink({ owner: ownerAid, bucket: "default", objectKey, allowedAids: [peerAid], expireInSeconds: 86400 });
         if (share.owner_aid && share.owner_aid !== ownerAid || share.bucket && share.bucket !== "default" || share.object_key && share.object_key !== objectKey)
             throw new Error("AUN 附件分享对象不一致");

package/plugins/aun/dist/src-ts/plugins/aun/index.js

@@ -11,7 +11,7 @@ const node_url_1 = require("node:url");
 const messages_1 = require("./messages");
 const attachments_1 = require("./attachments");
 const manifest = {
-    id: "aun", version: "1.0.23", type: "channel", displayName: "AUN 通道",
+    id: "aun", version: "1.0.30", type: "channel", displayName: "AUN 通道",
     entry: "dist/src-ts/plugins/aun/index.js", apiVersion: "1", process: "in-process",
     capabilities: ["channel", "channel.identity.create", "channel.receive", "channel.send", "health", "cli"],
     configSchema: "config.schema.json",
@@ -783,7 +783,7 @@ class AunPlugin {
             }
         }
         catch (error) {
-            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error) });
+            this.context?.logger.warn("AUN 附件下载失败", { error: safeError(error), ...(error instanceof attachments_1.AunDownloadUrlError ? { downloadUrl: error.diagnostic } : {}) });
             try {
                 await this.sendText(aid, message.peerId, `附件接收失败：${safeError(error)}`, message.threadId);
             }
@@ -817,15 +817,14 @@ class AunPlugin {
                     }
                     const groups = new Map();
                     for (const [index, item] of items.entries()) {
-                        const kind = item.kind;
-                        const ref = refs[index];
+                        const kind = item.kind === "file" && item.contentType.toLowerCase().startsWith("video/") ? "video" : item.kind;
                         const group = groups.get(kind) ?? [];
-                        group.push(ref);
+                        group.push(refs[index]);
                         groups.set(kind, group);
                     }
                     groupsCount = groups.size;
                     for (const [kind, group] of groups) {
-                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : "文件已生成。"), attachments: group };
+                        const payload = { type: kind, text: text || (kind === "image" ? "图片已生成。" : kind === "video" ? "视频已生成。" : "文件已生成。"), attachments: group };
                         if (message.threadId)
                             payload.thread_id = message.threadId;
                         if (message.messageId)

package/plugins/aun/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bridge-aun",
-  "version": "1.0.23",
+  "version": "1.0.30",
   "description": "mu-agent-bridge 的 AUN 通道插件。",
   "keywords": [
     "mu-agent-bridge-plugin",

package/plugins/aun/plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "aun",
-  "version": "1.0.23",
+  "version": "1.0.30",
   "type": "channel",
   "displayName": "AUN 通道",
   "entry": "dist/src-ts/plugins/aun/index.js",

package/plugins/chatgpt/dist/src-ts/attachments.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_TOTAL_ATTACHMENT_BYTES = exports.MAX_ATTACHMENTS = exports.MAX_ATTACHMENT_BYTES = void 0;
+exports.detectImageContentType = detectImageContentType;
+exports.attachmentFilename = attachmentFilename;
+exports.validateAttachment = validateAttachment;
+exports.validateAttachments = validateAttachments;
+exports.asAttachments = asAttachments;
+exports.MAX_ATTACHMENT_BYTES = 32 * 1024 * 1024;
+exports.MAX_ATTACHMENTS = 8;
+exports.MAX_TOTAL_ATTACHMENT_BYTES = 64 * 1024 * 1024;
+function detectImageContentType(data) {
+    if (data.length >= 8 && data.slice(0, 8).every((value, index) => value === [137, 80, 78, 71, 13, 10, 26, 10][index]))
+        return "image/png";
+    if (data.length >= 3 && data[0] === 0xff && data[1] === 0xd8 && data[2] === 0xff)
+        return "image/jpeg";
+    if (data.length >= 12 && String.fromCharCode(...data.slice(0, 4)) === "RIFF" && String.fromCharCode(...data.slice(8, 12)) === "WEBP")
+        return "image/webp";
+    return undefined;
+}
+function attachmentFilename(filename) {
+    if (typeof filename !== "string" || /[\u0000-\u001f\u007f]/.test(filename))
+        throw new Error("附件文件名无效");
+    const name = filename.split(/[\\/]/).pop() ?? "";
+    if (!name.trim() || name === "." || name === "..")
+        throw new Error("附件文件名无效");
+    return name;
+}
+function validateAttachment(item) {
+    if (!item || !(item.data instanceof Uint8Array) || item.data.byteLength === 0)
+        throw new Error("附件内容不能为空");
+    if (item.data.byteLength > exports.MAX_ATTACHMENT_BYTES)
+        throw new Error("单个附件不能超过 32 MiB");
+    attachmentFilename(item.filename);
+    if (item.kind !== "image" && item.kind !== "file")
+        throw new Error("附件类型无效");
+    if (typeof item.contentType !== "string" || !/^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+$/.test(item.contentType))
+        throw new Error("附件 MIME 类型无效");
+    if (item.kind === "image") {
+        const detected = detectImageContentType(item.data);
+        if (!detected || detected !== item.contentType.toLowerCase())
+            throw new Error("图片内容与 MIME 类型不一致");
+    }
+}
+function validateAttachments(items) {
+    if (!items)
+        return;
+    if (!Array.isArray(items))
+        throw new Error("附件列表无效");
+    if (items.length > exports.MAX_ATTACHMENTS)
+        throw new Error("单条消息最多包含 8 个附件");
+    let total = 0;
+    for (const item of items) {
+        validateAttachment(item);
+        total += item.data.byteLength;
+    }
+    if (total > exports.MAX_TOTAL_ATTACHMENT_BYTES)
+        throw new Error("单条消息附件总大小不能超过 64 MiB");
+}
+function asAttachments(images) {
+    return (images ?? []).map((image) => ({ ...image, kind: "image" }));
+}