mu-agent-bridge 1.0.71 → 1.0.78

package/dist/src-ts/session-management.js

@@ -10,7 +10,7 @@ const session_summary_1 = require("./session-summary");
 class ManagementError extends Error {
 }
 const dailyPlugins = ["qwenwork", "workbuddy", "doubao", "chatgpt", "dsh"];
-const usage = "用法：/sessions today [插件ID] [--summary]；/sessions last <1–24>h [插件ID] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
+const usage = "用法：/sessions today [插件ID] [--summary]；/sessions last <1-24>h [插件ID] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
 function isDailySummaryRequest(text) {
     return /(?:今天|今日).{0,20}(?:聊了什么|聊了哪些|话题|小结|总结)|(?:小结|总结).{0,20}(?:今天|今日|对话)|最近\s*\d+\s*(?:小时|h).{0,20}(?:聊|话题|小结|总结|对话|消息)/i.test(text.trim());
 }
@@ -20,7 +20,7 @@ class SessionManagement {
     bindings;
     nativeProviders;
     archive;
-    settings = { enabled: false, grants: [] };
+    settings = { enabled: false, allowFrom: [], grants: [] };
     loaded;
     writes = Promise.resolve();
     snapshots = new Map();
@@ -41,12 +41,20 @@ class SessionManagement {
                 this.settings = this.validate(JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.directory, "session-management.json"), "utf8")));
             }
             catch (error) {
-                if (error.code !== "ENOENT")
+                if (error.code !== "ENOENT") {
                     this.audit("配置读取", { actor: "local", count: 0, status: "invalid" });
+                    throw new ManagementError("会话设置读取失败，请检查本机配置");
+                }
             }
             this.archive.setEnabled(this.settings.enabled);
         })();
-        await this.loaded;
+        try {
+            await this.loaded;
+        }
+        catch (error) {
+            this.loaded = undefined;
+            throw error;
+        }
     }
     async config() {
         await this.load();
@@ -111,13 +119,111 @@ class SessionManagement {
         if (revision !== this.revision)
             throw new ManagementError("权限或归档设置已变更，请重新执行 /sessions list");
     }
+    allowsAllHistory(context) {
+        return this.settings.allowFrom.length === 0 || this.settings.allowFrom.includes("*") || this.settings.allowFrom.includes(JSON.parse(context.source)[3]);
+    }
     sources(context) {
+        if (this.allowsAllHistory(context))
+            return undefined;
         const grant = this.settings.grants.find(item => item.managerSource === context.source && item.managerSessionId === context.sessionId);
         return [...new Set([context.source, ...(grant?.sources ?? [])])];
     }
     async catalog(sources, agentPlugin) {
         const result = await this.archive.snapshotSessions();
-        return { sessions: result.sessions.filter(item => sources.includes(item.source) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
+        return { sessions: result.sessions.filter(item => (!sources || sources.includes(item.source)) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
+    }
+    async summarizeToday(context, now = new Date()) {
+        await this.load();
+        validateSource(context.source);
+        if (!context.sessionId)
+            throw new ManagementError("当前逻辑会话无效");
+        if (!(now instanceof Date) || !Number.isFinite(now.getTime()))
+            throw new ManagementError("总结时间无效");
+        const revision = this.revision;
+        const start = new Date(now.getFullYear(), now.getMonth(), now.getDate());
+        const end = new Date(now.getFullYear(), now.getMonth(), now.getDate() + 1);
+        const cutoff = Math.min(now.getTime(), end.getTime());
+        const zone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+        const range = `${formatLocalDate(start)} 至 ${formatLocalDate(new Date(cutoff))} (${zone})`;
+        const limitation = "原生插件历史未纳入今日总结：缺少可验证的历史时间，仅统计归档正文";
+        const selected = [];
+        let characters = 0;
+        try {
+            const catalog = await this.catalog(this.sources(context));
+            this.checkRevision(revision);
+            for (const session of catalog.sessions) {
+                const turns = [];
+                const reasons = new Set([
+                    ...(session.missingReasons ?? []),
+                    ...(catalog.complete ? [] : ["归档目录不完整"]),
+                    limitation,
+                ]);
+                let complete = true;
+                for (let page = 1; page <= 20; page++) {
+                    const result = await this.archive.readSession(session.sessionId, { page, limit: 100 });
+                    this.checkRevision(revision);
+                    if (!result.session) {
+                        complete = false;
+                        reasons.add("会话正文不存在");
+                        break;
+                    }
+                    for (const reason of result.missingReasons)
+                        reasons.add(reason);
+                    complete &&= result.complete;
+                    for (const turn of result.turns) {
+                        const timestamp = Date.parse(turn.time);
+                        if (!Number.isFinite(timestamp)) {
+                            complete = false;
+                            reasons.add("部分正文时间未知");
+                            continue;
+                        }
+                        if (timestamp >= start.getTime() && timestamp <= cutoff) {
+                            characters += turn.text.length;
+                            if (characters > session_summary_1.MAX_SUMMARY_CHARACTERS)
+                                throw new ManagementError("总结输入超过60000字符，请缩小范围");
+                            turns.push({ role: turn.role, time: turn.time, text: turn.text });
+                        }
+                    }
+                    if (!result.hasNext)
+                        break;
+                    if (page === 20) {
+                        complete = false;
+                        reasons.add("正文超过20页，未完整读取");
+                    }
+                }
+                if (!turns.length)
+                    continue;
+                if (this.bindings?.isBusy(session.source))
+                    reasons.add("源会话正在运行，仅包含已完成轮次");
+                if (selected.length >= session_summary_1.MAX_SUMMARY_SESSIONS)
+                    throw new ManagementError(`今日会话超过 ${session_summary_1.MAX_SUMMARY_SESSIONS} 个，请缩小来源范围`);
+                selected.push({
+                    sessionId: session.sessionId, agentPlugin: session.agentPlugin, channel: session.channel,
+                    ...(session.title ? { title: session.title } : {}), firstSeenAt: session.firstSeenAt, updatedAt: session.updatedAt,
+                    complete: complete && reasons.size === 0, incompleteReasons: [...reasons], turns,
+                });
+            }
+            this.checkRevision(revision);
+            if (!selected.length) {
+                const result = { supported: false, text: `今日没有可总结的已归档会话（${range}）。${limitation}`, complete: false, sources: [] };
+                this.audit("今日总结", { actor: context.source, count: 0, status: "empty" });
+                return result;
+            }
+            const summarizer = this.settings.summarizer?.model;
+            const result = await new session_summary_1.SessionSummarizer(this.settings.summarizer).summarizeSessions({ sessions: selected }).catch(error => {
+                if (error instanceof session_summary_1.SessionSummaryError && error.code === "limit")
+                    throw new ManagementError(error.message);
+                throw new ManagementError("只读总结失败，请检查本机配置与模型服务");
+            });
+            this.checkRevision(revision);
+            const output = { ...result, text: `今日工作小结（${range}）：\n${result.text}\n\n说明：${limitation}` };
+            this.audit("今日总结", { actor: context.source, count: selected.length, status: result.supported ? "ok" : "unsupported", refs: selected.map(item => item.sessionId), summarizer });
+            return output;
+        }
+        catch (error) {
+            this.audit("今日总结", { actor: context.source, count: selected.length, status: "failed", ...(selected.length ? { refs: selected.map(item => item.sessionId) } : {}) });
+            throw error;
+        }
     }
     async command(text, context) {
         const dailyRequest = isDailySummaryRequest(text);
@@ -137,15 +243,15 @@ class SessionManagement {
             const recent = input.match(/^\/sessions last (\d+)h(?: (qwenwork|workbuddy|doubao|chatgpt|dsh))?( --summary)?$/i);
             const naturalRecent = dailyRequest ? input.match(/最近\s*(\d+)\s*(?:小时|h)/i) : undefined;
             if (naturalRecent)
-                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer), Number(naturalRecent[1]));
+                return await this.summarizeNativeToday(context, undefined, Boolean(this.settings.summarizer), Number(naturalRecent[1]));
             if (recent)
-                return await this.summarizeToday(context, recent[2], Boolean(recent[3]), Number(recent[1]));
+                return await this.summarizeNativeToday(context, recent[2], Boolean(recent[3]), Number(recent[1]));
             if (/^\/sessions last\b/i.test(input))
                 throw new ManagementError("时间范围须为最近1至24小时，例如 /sessions last 4h");
             if (dailyRequest)
-                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer));
+                return await this.summarizeNativeToday(context, undefined, Boolean(this.settings.summarizer));
             if (today)
-                return await this.summarizeToday(context, today[1], Boolean(today[2]));
+                return await this.summarizeNativeToday(context, today[1], Boolean(today[2]));
             const nativeList = input.match(/^\/sessions native-list ([a-z][a-z0-9-]*)(?: --page ([1-9]\d*))?$/);
             if (nativeList)
                 return await this.listNative(context, nativeList[1], nativeList[2] ? Number(nativeList[2]) : undefined);
@@ -240,7 +346,7 @@ class SessionManagement {
     providers() {
         return this.nativeProviders().map(({ pluginId, provider, status }) => ({ pluginId, scope: provider.scope, mode: provider.mode, limitation: provider.limitation, status }));
     }
-    async summarizeToday(context, onlyPlugin, summarize = false, hours) {
+    async summarizeNativeToday(context, onlyPlugin, summarize = false, hours) {
         const revision = this.revision;
         const cutoff = Date.now();
         const configured = this.settings.summarizer?.model;
@@ -370,6 +476,8 @@ class SessionManagement {
         return `${header}\n${result.text}`;
     }
     authorizedNative(context, pluginId, scope) {
+        if (this.allowsAllHistory(context))
+            return;
         const grant = this.settings.nativeGrants?.find(item => item.managerSource === context.source && item.managerSessionId === context.sessionId);
         if (!grant?.providers.some(item => item.pluginId === pluginId && (scope === undefined || item.scope === scope)))
             throw new ManagementError("无权读取该原生插件历史，请由本机管理员精确授权");
@@ -518,7 +626,7 @@ class SessionManagement {
             const catalog = await this.catalog(sources, plugin);
             const archived = catalog.sessions;
             const known = new Set(archived.map(item => item.sessionId));
-            const bound = (await this.bindings?.list() ?? []).filter(item => sources.includes(item.source) && (!plugin || item.agentPlugin === plugin) && !known.has(item.logicalSessionId)).map(item => ({ sessionId: item.logicalSessionId, source: item.source, agentPlugin: item.agentPlugin, channel: JSON.parse(item.source)[0], updatedAt: item.updatedAt }));
+            const bound = (await this.bindings?.list() ?? []).filter(item => (!sources || sources.includes(item.source)) && (!plugin || item.agentPlugin === plugin) && !known.has(item.logicalSessionId)).map(item => ({ sessionId: item.logicalSessionId, source: item.source, agentPlugin: item.agentPlugin, channel: JSON.parse(item.source)[0], updatedAt: item.updatedAt }));
             const sessions = [...archived, ...bound].filter(item => item.sessionId !== context.sessionId).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt) || a.sessionId.localeCompare(b.sessionId));
             this.checkRevision(revision);
             const key = (0, node_crypto_1.randomUUID)().replace(/-/g, "").slice(0, 12);
@@ -543,7 +651,8 @@ class SessionManagement {
         if (!snapshot || snapshot.revision !== this.revision || snapshot.expires < Date.now() || snapshot.context.source !== context.source || snapshot.context.sessionId !== context.sessionId)
             throw new ManagementError("编号无效或已过期，请重新执行 /sessions list");
         const session = snapshot.sessions[Number(match[2]) - 1];
-        if (!session || !this.sources(context).includes(session.source) || session.sessionId === context.sessionId)
+        const sources = this.sources(context);
+        if (!session || (sources && !sources.includes(session.source)) || session.sessionId === context.sessionId)
             throw new ManagementError("无权读取所选会话，请重新列举");
         return session;
     }
@@ -551,8 +660,11 @@ class SessionManagement {
         if (!value || typeof value !== "object" || Array.isArray(value))
             throw new ManagementError("归档设置必须是对象");
         const input = value;
-        if (Object.keys(input).some(key => !["enabled", "grants", "nativeGrants", "summarizer"].includes(key)) || typeof input.enabled !== "boolean" || !Array.isArray(input.grants) || input.grants.length > 500)
+        if (Object.keys(input).some(key => !["enabled", "allowFrom", "grants", "nativeGrants", "summarizer"].includes(key)) || typeof input.enabled !== "boolean" || !Array.isArray(input.grants) || input.grants.length > 500)
             throw new ManagementError("归档设置字段无效");
+        const allowFrom = input.allowFrom === undefined ? [] : input.allowFrom;
+        if (!Array.isArray(allowFrom) || allowFrom.length > 500 || allowFrom.some(value => value !== "*" && !exactIdentifier(value, 512)) || new Set(allowFrom).size !== allowFrom.length)
+            throw new ManagementError("allowFrom 来源白名单无效");
         const managers = new Set();
         const grants = input.grants.map((raw) => {
             if (!raw || typeof raw !== "object" || Array.isArray(raw))
@@ -614,7 +726,7 @@ class SessionManagement {
             const apiKey = config.apiKey === undefined && config.endpoint === previousEndpoint ? previousKey : config.apiKey;
             summarizer = { endpoint: config.endpoint, model: config.model, ...(apiKey ? { apiKey } : {}) };
         }
-        return { enabled: input.enabled, grants, ...(nativeGrants ? { nativeGrants } : {}), ...(summarizer ? { summarizer } : {}) };
+        return { enabled: input.enabled, allowFrom, grants, ...(nativeGrants ? { nativeGrants } : {}), ...(summarizer ? { summarizer } : {}) };
     }
 }
 exports.SessionManagement = SessionManagement;
@@ -631,6 +743,12 @@ function validateSource(value) {
     if (!Array.isArray(source) || source.length !== 5 || source.some(item => typeof item !== "string" || /[\u0000-\u001f]/.test(item)) || !["aun", "feishu"].includes(source[0]) || !source[3] || JSON.stringify(source) !== value)
         throw new ManagementError("来源格式无效");
 }
+function formatLocalDate(value) {
+    const pad = (part) => String(part).padStart(2, "0");
+    const offset = -value.getTimezoneOffset();
+    const sign = offset >= 0 ? "+" : "-";
+    return `${value.getFullYear()}-${pad(value.getMonth() + 1)}-${pad(value.getDate())} ${pad(value.getHours())}:${pad(value.getMinutes())}${sign}${pad(Math.floor(Math.abs(offset) / 60))}:${pad(Math.abs(offset) % 60)}`;
+}
 function exactIdentifier(value, maximum) {
     return typeof value === "string" && value.length > 0 && value.length <= maximum && !/[\u0000-\u001f*]/.test(value);
 }

package/dist/src-ts/version-manager.js

@@ -59,14 +59,17 @@ class VersionManager {
             if (!parseVersion(currentVersion))
                 throw new Error("当前版本号无效");
             const raw = await (this.options.npm ?? this.queryNpm)(["view", packageName, "version", "dist-tags", "--json"]);
-            const value = JSON.parse(raw);
-            const latestVersion = typeof value === "string" ? value : String(value.version ?? value.latest ?? "");
+            const parsed = JSON.parse(raw);
+            const value = (Array.isArray(parsed) && parsed.length === 1 ? parsed[0] : parsed);
+            const latestVersion = typeof value === "string" ? value : String(value?.version ?? value?.latest ?? "");
             if (!parseVersion(latestVersion))
                 throw new Error("npm 返回的版本号无效");
             status = { packageName, currentVersion, latestVersion, state: compareVersions(latestVersion, currentVersion) > 0 ? "update-available" : "latest", checkedAt: new Date().toISOString() };
         }
         catch (error) {
-            status = { packageName, currentVersion, state: "error", error: error instanceof Error ? error.message : String(error), checkedAt: new Date().toISOString() };
+            const message = error instanceof Error ? error.message : String(error);
+            const unpublished = /npm\s+error\s+code\s+E404\b|404\s+Not Found/i.test(message);
+            status = { packageName, currentVersion, state: unpublished ? "unpublished" : "error", error: unpublished ? "npm 包未发布或当前无权访问" : message, checkedAt: new Date().toISOString() };
         }
         this.statuses.set(packageName, status);
         await this.save();

package/dist/tests-ts/abweb-cli.test.js

@@ -35,7 +35,12 @@ class Element {
         fetch: async (path, options) => {
             let data = {};
             if (path === "/api/plugins")
-                data = { plugins: [{ id: "codex-cli", displayName: "Codex CLI", type: "agent", version: "1.0.0", status: "installed", path: "plugins/codex-cli", manifest: { executionMode: "cli" } }] };
+                data = { plugins: [
+                        { id: "codex-cli", displayName: "Codex CLI", type: "agent", version: "1.0.0", status: "installed", path: "plugins/codex-cli", manifest: { executionMode: "cli" } },
+                        { id: "qwenwork", displayName: "千问办公", type: "agent", version: "1.0.0", status: "ready", path: "plugins/qwenwork" },
+                        { id: "doubao", displayName: "豆包", type: "agent", version: "1.0.0", status: "ready", path: "plugins/doubao", manifest: { executionMode: "cdp" } },
+                        { id: "aun", displayName: "AUN", type: "channel", version: "1.0.0", status: "ready", path: "plugins/aun" },
+                    ] };
             if (path.endsWith("/config")) {
                 if (options.method === "PATCH")
                     saved = JSON.parse(options.body);
@@ -46,7 +51,10 @@ class Element {
     });
     await new Promise(resolve => setImmediate(resolve));
     const row = node("#plugins").children[0];
-    strict_1.default.match(row.children[1].textContent, /CLI/);
+    strict_1.default.equal(row.children[1].textContent, "Agent · CLI");
+    strict_1.default.equal(node("#plugins").children[1].children[1].textContent, "Agent · 桌面");
+    strict_1.default.equal(node("#plugins").children[2].children[1].textContent, "Agent · 桌面");
+    strict_1.default.equal(node("#plugins").children[3].children[1].textContent, "Channel");
     const configure = row.children.at(-1).children.find(child => child.textContent === "配置");
     strict_1.default.ok(configure, "CLI 插件必须提供配置按钮");
     await configure.onclick();

package/dist/tests-ts/abweb-model-config.test.js

@@ -0,0 +1,73 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const promises_1 = require("node:fs/promises");
+const node_vm_1 = require("node:vm");
+class Element {
+    hidden = false;
+    disabled = false;
+    value = "";
+    textContent = "";
+    placeholder = "";
+    open = false;
+    children = [];
+    options = [];
+    selectedIndex = 0;
+    onclick;
+    onchange;
+    onsubmit;
+    append(...children) { this.children.push(...children); this.options = this.children; }
+    replaceChildren(...children) { this.children = children; this.options = this.children; }
+    setAttribute() { }
+    showModal() { this.open = true; }
+    close() { this.open = false; }
+}
+for (const legacyWildcard of [false, true])
+    (0, node_test_1.default)(`ABWeb 个人助理模型设置保留配置，旧通配名单显示为空白（兼容模式：${legacyWildcard}）`, async () => {
+        const script = await (0, promises_1.readFile)("src-ts/plugins/abweb/public/app.js", "utf8");
+        const nodes = new Map();
+        const node = (selector) => { if (!nodes.has(selector))
+            nodes.set(selector, new Element()); return nodes.get(selector); };
+        const calls = [];
+        const plugin = { id: "personal-assistant", type: "agent", displayName: "个人助理", status: "ready", version: "1.0.0", path: "/plugins/personal-assistant" };
+        const config = { modelProvider: "plugin", modelPlugin: "workbuddy", apiKey: "******", endpoint: "http://127.0.0.1:1234/v1/chat/completions", model: "local", allowedPeers: legacyWildcard ? ["*"] : ["peer.agentid.cn"], allowedAgents: legacyWildcard ? ["*"] : ["dsh"], ownerAid: "owner.agentid.cn", timeoutMs: 120000 };
+        (0, node_vm_1.runInNewContext)(script, {
+            document: { querySelector: node, createElement: () => new Element(), hidden: false },
+            localStorage: { getItem: () => null, setItem() { }, removeItem() { } },
+            window: { addEventListener() { } }, setInterval() { }, confirm: () => false, structuredClone,
+            fetch: async (path, init) => {
+                calls.push({ path, method: init.method, body: init.body ? JSON.parse(init.body) : undefined });
+                const data = path.endsWith("/config") ? config : path === "/api/model-providers" ? { providers: [
+                        { id: "workbuddy", displayName: "WorkBuddy", status: "failed", available: false, reason: "桌面未连接" },
+                        { id: "qwenwork", displayName: "千问办公", status: "ready", available: true, reason: "" },
+                    ] } : { plugins: [plugin], messages: [], sessions: [], mode: "auto-install", config: { providers: {}, plugins: {} } };
+                return { ok: true, status: 200, json: async () => data };
+            },
+        });
+        await new Promise(resolve => setImmediate(resolve));
+        const buttons = (element) => [element, ...element.children.flatMap(buttons)];
+        const configure = buttons(node("#plugins")).find(item => item.textContent === "配置模型");
+        strict_1.default.ok(configure, "个人助理应显示配置入口");
+        configure.onclick();
+        await new Promise(resolve => setImmediate(resolve));
+        strict_1.default.equal(node("#assistant-config-dialog").open, true);
+        strict_1.default.equal(node("#assistant-model-provider").value, "plugin:workbuddy");
+        const choices = node("#assistant-model-provider").children;
+        strict_1.default.ok(choices.some(option => option.value === "plugin:qwenwork" && !option.disabled));
+        strict_1.default.ok(choices.some(option => option.value === "plugin:workbuddy" && option.disabled && /桌面未连接/.test(option.textContent)));
+        strict_1.default.ok(choices.every(option => option.value !== "claude-cli"), "未安装的 Claude CLI 不应被硬编码为可用来源");
+        strict_1.default.equal(node("#assistant-api-key").value, "");
+        strict_1.default.equal(node("#assistant-allowed-peers").value, legacyWildcard ? "" : "peer.agentid.cn");
+        strict_1.default.equal(node("#assistant-allowed-agents").value, legacyWildcard ? "" : "dsh");
+        node("#assistant-model-provider").value = "plugin:qwenwork";
+        node("#assistant-config-form").onsubmit({ preventDefault() { } });
+        await new Promise(resolve => setImmediate(resolve));
+        const saved = calls.find(call => call.method === "PATCH" && call.path.endsWith("personal-assistant/config"));
+        strict_1.default.ok(saved);
+        strict_1.default.deepEqual(saved.body, { modelPlugin: "qwenwork", ...(legacyWildcard ? { allowedPeers: [], allowedAgents: [] } : {}) });
+        strict_1.default.ok(calls.some(call => call.path === "/api/model-providers"));
+    });

package/dist/tests-ts/agent.test.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const agent_1 = require("../src-ts/agent");
+(0, node_test_1.default)("取消只结束调用方等待，不会停止仍在运行的桌面操作", async () => {
+    const controller = new AbortController();
+    let finish;
+    let operationFinished = false;
+    const operation = new Promise(resolve => { finish = () => { operationFinished = true; resolve("迟到结果"); }; });
+    const waiting = (0, agent_1.abortable)(operation, controller.signal);
+    controller.abort(new Error("请求已取消"));
+    await strict_1.default.rejects(waiting, /请求已取消/);
+    strict_1.default.equal(operationFinished, false);
+    finish();
+    strict_1.default.equal(await operation, "迟到结果");
+    strict_1.default.equal(operationFinished, true);
+});
+(0, node_test_1.default)("预取消仍观察已经启动的操作拒绝", async () => {
+    const controller = new AbortController();
+    controller.abort(new Error("预取消"));
+    await strict_1.default.rejects((0, agent_1.abortable)(Promise.reject(new Error("底层迟到失败")), controller.signal), /预取消/);
+    await new Promise(resolve => setImmediate(resolve));
+});

package/dist/tests-ts/aun-attachments.test.js

@@ -43,17 +43,20 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     strict_1.default.match(calls[0], /peer\.agentid\.cn/);
     strict_1.default.match(calls[1], /limit[^0-9]*33554433/);
 });
-(0, node_test_1.default)("AUN 出站上传保持私有并按对端创建 24 小时分享", async () => {
+(0, node_test_1.default)("AUN 出站上传使用公开标准对象引用，不创建私有分享", async () => {
     const calls = [];
     const storage = {
         async writeBytes(path, bytes, options) { calls.push(["write", { path, bytes, options }]); return { contentType: "text/plain", size_bytes: 3, sha256 }; },
         lowlevel: { async createShareLink(options) { calls.push(["share", options]); return { owner_aid: "self.agentid.cn", bucket: "default", object_key: options.objectKey, share_id: "Ab3xK9mZ2q", path_url: `https://self.agentid.cn/${options.objectKey}?t=Ab3xK9mZ2q`, allowed_aids: options.allowedAids }; } },
     };
     const result = await (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "报告.txt", contentType: "text/plain" }]);
-    strict_1.default.equal(result[0].url, "https://self.agentid.cn/" + result[0].object_key + "?t=Ab3xK9mZ2q");
-    strict_1.default.deepEqual((calls.find(([kind]) => kind === "share")?.[1]).allowedAids, ["peer.agentid.cn"]);
-    strict_1.default.equal((calls.find(([kind]) => kind === "share")?.[1]).expireInSeconds, 86400);
-    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.public, false);
+    strict_1.default.deepEqual(result[0], {
+        owner_aid: "self.agentid.cn", object_key: (calls.find(([kind]) => kind === "write")?.[1]).path.slice(1),
+        filename: "报告.txt", content_type: "text/plain", size_bytes: 3, sha256,
+    });
+    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.public, true);
+    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.overwrite, true);
+    strict_1.default.equal(calls.filter(([kind]) => kind === "share").length, 0);
 });
 (0, node_test_1.default)("AUN 视频上传遵循 EvolCore 标准对象引用，不创建私有分享", async () => {
     const writes = [];
@@ -66,14 +69,14 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     strict_1.default.deepEqual(writes[0].options, { contentType: "video/mp4", public: true, overwrite: true });
     strict_1.default.deepEqual(result, [{ owner_aid: "self.agentid.cn", object_key: writes[0].path.slice(1), filename: "视频.mp4", content_type: "video/mp4", size_bytes: 3, sha256 }]);
 });
-(0, node_test_1.default)("AUN 分享失败不会回退为公开上传", async () => {
-    let writeOptions;
+(0, node_test_1.default)("AUN 标准附件上传失败时不会创建分享", async () => {
+    let shareCalls = 0;
     const storage = {
-        async writeBytes(_path, _bytes, options) { writeOptions = options; return {}; },
-        lowlevel: { async createShareLink() { throw new Error("拒绝分享"); } },
+        async writeBytes() { throw new Error("存储不可用"); },
+        lowlevel: { async createShareLink() { shareCalls++; throw new Error("不应创建分享"); } },
     };
-    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /分享/);
-    strict_1.default.equal(writeOptions?.public, false);
+    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /上传 AUN FS 文件/);
+    strict_1.default.equal(shareCalls, 0);
 });
 (0, node_test_1.default)("AUN 元数据与正文的哈希不符时拒绝入站附件", async () => {
     const storage = { async stat() { return { size: 3, sha256: "0".repeat(64), contentType: "text/plain", type: "file" }; }, async readBytes() { return data; } };
@@ -86,12 +89,11 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     await strict_1.default.rejects(() => (0, attachments_1.downloadAunAttachment)({ storage }, ref), /引用|路径/);
     strict_1.default.equal(reads, 0);
 });
-(0, node_test_1.default)("AUN 私有分享拒绝服务端返回的公开授权或不匹配元数据", async () => {
-    const client = { storage: {
-            async writeBytes() { return { size: 3, sha256, contentType: "text/plain" }; },
-            lowlevel: { async createShareLink(options) { return { object_key: options.objectKey, share_id: "Ab3xK9mZ2q", allowed_aids: ["*"], path_url: `https://self.agentid.cn/${options.objectKey}?t=Ab3xK9mZ2q` }; } },
-        } };
-    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)(client, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /分享/);
+(0, node_test_1.default)("AUN 标准附件拒绝上传结果中的错配对象或哈希", async () => {
+    for (const metadata of [{ owner_aid: "other.agentid.cn" }, { object_key: "shared/other.txt" }, { sha256: "0".repeat(64) }]) {
+        const client = { storage: { async writeBytes() { return { size: 3, sha256, contentType: "text/plain", ...metadata }; } } };
+        await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)(client, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /引用|哈希/);
+    }
 });
 (0, node_test_1.default)("AUN 通用图片类型按普通文件传入", async () => {
     const storage = { async stat() { return { size: 3 }; }, async readBytes() { return data; } };

package/dist/tests-ts/aun-default-owner-page.test.js

@@ -51,7 +51,7 @@ const flush = () => new Promise((resolve) => setImmediate(resolve));
                 posts.push(JSON.parse(options.body));
                 return { ok: true, json: async () => ({ status: "已创建", connection: "ready" }) };
             }
-            const data = path === "/api/plugins/aun/config" ? { owner_aid: owner }
+            const data = path === "/api/plugins/aun/config" ? { owner_aid: owner, allow_from: "*" }
                 : path === "/api/plugins/aun/identities" ? { groups: { muAgentBridge: [], evolcore: [] } }
                     : { plugins: [] };
             return { ok: true, json: async () => data };
@@ -60,6 +60,7 @@ const flush = () => new Promise((resolve) => setImmediate(resolve));
     const create = node("#create-form");
     await flush();
     strict_1.default.equal(create.elements.ownerAid.value, "first.agentid.cn");
+    strict_1.default.equal(node("#config-form").elements.allow_from.value, "", "旧通配名单显示为空白，沿用接受所有来源的语义");
     owner = "second.agentid.cn";
     node("#refresh").onclick();
     await flush();

package/dist/tests-ts/aun-messages.test.js

@@ -14,6 +14,19 @@ const messages_1 = require("../src-ts/plugins/aun/messages");
         peerId: "other.agentid.cn", messageId: "m1", text: "你好", threadId: "t1",
     });
 });
+(0, node_test_1.default)("AUN 来源白名单使用 * 时接受所有 Peer", () => {
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "*")?.peerId, "peer.agentid.cn");
+});
+(0, node_test_1.default)("AUN 来源白名单可用逗号分隔限制来源，包含 * 时仍接受所有 Peer", () => {
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "other.agentid.cn, *")?.peerId, "peer.agentid.cn");
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "other.agentid.cn"), undefined);
+});
+(0, node_test_1.default)("AUN 错误和通知事件不作为任务触发自动互答", () => {
+    for (const type of ["error", "notice"]) {
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { type, text: "今日额度已用完", thread_id: "test-thread" } }, "self.agentid.cn"), undefined);
+    }
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { type: "text", text: "请分析今日额度已用完的原因" } }, "self.agentid.cn")?.text, "请分析今日额度已用完的原因");
+});
 (0, node_test_1.default)("AUN 纯附件消息保留可定位引用并拒绝任意 URL", () => {
     const message = (0, messages_1.normalizeAunMessage)({
         from: "peer.agentid.cn", message_id: "attachment-1", payload: {
@@ -61,3 +74,10 @@ const messages_1 = require("../src-ts/plugins/aun/messages");
     strict_1.default.equal(message?.attachments?.[0].ownerAid, "third.agentid.cn");
     strict_1.default.equal(message?.attachments?.[0].token, "Ab3xK9mZ2q");
 });
+(0, node_test_1.default)("AUN 来源留空或未配置时接受所有 Peer，仍忽略自身与空来源", () => {
+    for (const rule of [undefined, "", "  "]) {
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", rule)?.peerId, "peer.agentid.cn");
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "self.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", rule), undefined);
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "", payload: { text: "你好" } }, "self.agentid.cn", rule), undefined);
+    }
+});