mu-agent-bridge 1.0.71 → 1.0.78

package/dist/tests-ts/plugin-manager.test.js

@@ -45,6 +45,149 @@ const node_http_1 = require("node:http");
 const plugin_manager_1 = require("../src-ts/plugin-manager");
 const version_manager_1 = require("../src-ts/version-manager");
 const channel_sessions_1 = require("../src-ts/channel-sessions");
+async function withMappedNpmPackage(run) {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-package-id-"));
+    const source = (0, node_path_1.join)(root, "source");
+    const bin = (0, node_path_1.join)(root, "bin");
+    const previousPath = process.env.PATH;
+    await (0, promises_1.mkdir)(source);
+    await (0, promises_1.mkdir)(bin);
+    await (0, promises_1.writeFile)((0, node_path_1.join)(source, "package.json"), JSON.stringify({ name: "agent-bridge-pa", version: "1.0.1", agentBridge: { id: "personal-assistant", plugin: "./plugin.json", type: "agent" } }));
+    await (0, promises_1.writeFile)((0, node_path_1.join)(source, "plugin.json"), JSON.stringify({ id: "personal-assistant", version: "1.0.1", entry: "index.js", apiVersion: "1", capabilities: ["chat"] }));
+    await (0, promises_1.writeFile)((0, node_path_1.join)(source, "index.js"), "module.exports={activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),handle:async()=>({text:'完成'})};");
+    await (0, promises_1.writeFile)((0, node_path_1.join)(bin, "npm"), `#!${process.execPath}\nconst fs=require('node:fs');const path=require('node:path');const args=process.argv.slice(2);if(args[0]==='install'){const prefix=args[args.indexOf('--prefix')+1];fs.mkdirSync(path.join(prefix,'node_modules'),{recursive:true});fs.cpSync(${JSON.stringify(source)},path.join(prefix,'node_modules','agent-bridge-pa'),{recursive:true});}`);
+    await (0, promises_1.chmod)((0, node_path_1.join)(bin, "npm"), 0o755);
+    process.env.PATH = `${bin}:${previousPath ?? ""}`;
+    try {
+        await run(root, source);
+    }
+    finally {
+        if (previousPath === undefined)
+            delete process.env.PATH;
+        else
+            process.env.PATH = previousPath;
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+}
+(0, node_test_1.default)("npm 显式 ID 支持下载、安装和默认升级且配置归属不变", { skip: process.platform === "win32" }, async () => {
+    await withMappedNpmPackage(async (root) => {
+        const stateDir = (0, node_path_1.join)(root, "state");
+        const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir, publisherResolver: async () => "m2lihui", versions: new version_manager_1.VersionManager({ stateDir, npm: async () => '"1.0.2"' }) });
+        await (0, promises_1.mkdir)((0, node_path_1.join)(stateDir, "personal-assistant"), { recursive: true });
+        await (0, promises_1.writeFile)((0, node_path_1.join)(stateDir, "personal-assistant", "config.json"), JSON.stringify({ aid: "existing.agentid.cn" }));
+        try {
+            const downloaded = await manager.downloadPackage("agent-bridge-pa", "1.0.1");
+            strict_1.default.equal(await manager.cachedPackage("agent-bridge-pa", "1.0.1"), downloaded);
+            strict_1.default.equal((await manager.installPackage("agent-bridge-pa@1.0.1")).id, "personal-assistant");
+            strict_1.default.deepEqual(await manager.config("personal-assistant"), { aid: "existing.agentid.cn" });
+            const restarted = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir, publisherResolver: async () => "m2lihui" });
+            strict_1.default.deepEqual((await restarted.discover()).map(({ id, packageName }) => [id, packageName]), [["personal-assistant", "agent-bridge-pa"]]);
+            const candidate = (0, node_path_1.join)(root, "upgrade", "node_modules", "agent-bridge-pa");
+            await (0, promises_1.mkdir)(candidate, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(candidate, "package.json"), JSON.stringify({ name: "agent-bridge-pa", version: "1.0.2", agentBridge: { id: "personal-assistant", plugin: "./plugin.json" } }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(candidate, "plugin.json"), JSON.stringify({ id: "personal-assistant", version: "1.0.2", entry: "index.js", apiVersion: "1", capabilities: ["chat"] }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(candidate, "index.js"), "module.exports={activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'})};");
+            manager.downloadPackage = async (name) => { strict_1.default.equal(name, "agent-bridge-pa"); return (0, node_path_1.join)(root, "upgrade"); };
+            strict_1.default.equal((await manager.upgradePackage("personal-assistant", undefined, "1.0.2")).version, "1.0.2");
+            strict_1.default.deepEqual(await manager.config("personal-assistant"), { aid: "existing.agentid.cn" });
+        }
+        finally {
+            if (manager.get("personal-assistant")?.instance)
+                await manager.stop("personal-assistant");
+            await manager.logs.flush();
+        }
+    });
+});
+(0, node_test_1.default)("npm 安装按解析后的 ID 拒绝不同来源覆盖并清理失败下载", { skip: process.platform === "win32" }, async () => {
+    await withMappedNpmPackage(async (root) => {
+        const directory = (0, node_path_1.join)(root, "plugins", "personal-assistant");
+        await (0, promises_1.mkdir)(directory, { recursive: true });
+        await (0, promises_1.writeFile)((0, node_path_1.join)(directory, "package.json"), JSON.stringify({ name: "agent-bridge-personal-assistant", version: "1.0.0", agentBridge: { plugin: "./plugin.json" } }));
+        await (0, promises_1.writeFile)((0, node_path_1.join)(directory, "plugin.json"), JSON.stringify({ id: "personal-assistant", version: "1.0.0", entry: "index.js", apiVersion: "1", capabilities: [] }));
+        const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir: (0, node_path_1.join)(root, "state"), publisherResolver: async () => "m2lihui" });
+        try {
+            await manager.discover();
+            await strict_1.default.rejects(manager.installPackage("agent-bridge-pa"), /插件已经存在|来源冲突/);
+            strict_1.default.equal(manager.list()[0].packageName, "agent-bridge-personal-assistant");
+            strict_1.default.equal(manager.list()[0].path, directory);
+            await strict_1.default.rejects((0, promises_1.readFile)((0, node_path_1.join)(root, "state", "npm", "agent-bridge-pa", "node_modules", "agent-bridge-pa", "package.json")), /ENOENT/);
+        }
+        finally {
+            await manager.logs.flush();
+        }
+    });
+});
+(0, node_test_1.default)("npm 显式 ID、清单和请求版本必须匹配", { skip: process.platform === "win32" }, async () => {
+    await withMappedNpmPackage(async (root, source) => {
+        const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir: (0, node_path_1.join)(root, "state"), publisherResolver: async () => "m2lihui" });
+        try {
+            for (const id of ["other", "", null, 12]) {
+                await (0, promises_1.writeFile)((0, node_path_1.join)(source, "package.json"), JSON.stringify({ name: "agent-bridge-pa", version: "1.0.1", agentBridge: { id, plugin: "./plugin.json" } }));
+                await strict_1.default.rejects(manager.downloadPackage("agent-bridge-pa", "1.0.1"), /ID|清单/);
+                await strict_1.default.rejects(manager.installPackage("agent-bridge-pa@1.0.1"), /ID|清单/);
+            }
+            await (0, promises_1.writeFile)((0, node_path_1.join)(source, "package.json"), JSON.stringify({ name: "agent-bridge-pa", version: "1.0.1", agentBridge: { id: "personal-assistant", plugin: "./plugin.json" } }));
+            await strict_1.default.rejects(manager.installPackage("agent-bridge-pa@1.0.2"), /版本/);
+        }
+        finally {
+            await manager.logs.flush();
+        }
+    });
+});
+(0, node_test_1.default)("目录发现校验显式 ID 并保留不同来源的现有插件", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-package-source-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: root, stateDir: (0, node_path_1.join)(root, "state"), publisherResolver: async () => "m2lihui" });
+    try {
+        for (const [folder, name, version, id] of [["aa", "agent-bridge-personal-assistant", "1.0.0", undefined], ["bb", "agent-bridge-pa", "2.0.0", "personal-assistant"]]) {
+            const directory = (0, node_path_1.join)(root, folder);
+            await (0, promises_1.mkdir)(directory);
+            await (0, promises_1.writeFile)((0, node_path_1.join)(directory, "package.json"), JSON.stringify({ name, version, agentBridge: { id, plugin: "./plugin.json" } }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(directory, "plugin.json"), JSON.stringify({ id: "personal-assistant", version, entry: "index.js", apiVersion: "1", capabilities: [] }));
+        }
+        await manager.discover();
+        strict_1.default.equal(manager.list()[0].packageName, "agent-bridge-personal-assistant");
+        await manager.logs.flush();
+        strict_1.default.ok((await manager.logs.page()).logs.some(entry => entry.level === "warn" && entry.message.includes("来源冲突")));
+        await (0, promises_1.writeFile)((0, node_path_1.join)(root, "bb", "package.json"), JSON.stringify({ name: "agent-bridge-pa", version: "2.0.0", agentBridge: { id: "other", plugin: "./plugin.json" } }));
+        await strict_1.default.rejects(manager.discover(), /ID|清单/);
+    }
+    finally {
+        await manager.logs.flush();
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)("模型来源只列出显式声明者并且只能调用已就绪的独立入口", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-model-provider-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir: (0, node_path_1.join)(root, "state") });
+    try {
+        for (const [id, capabilities, provider] of [
+            ["model-agent", ["chat", "model-provider"], "({complete:async request=>({text:JSON.stringify({keys:Object.keys(request),prompt:request.prompt})})})"],
+            ["ordinary-agent", ["chat"], "undefined"],
+        ]) {
+            const dir = (0, node_path_1.join)(root, "plugins", id);
+            await (0, promises_1.mkdir)(dir, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "plugin.json"), JSON.stringify({ id, version: "1.0.0", entry: "index.js", apiVersion: "1", capabilities }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "index.js"), `module.exports={manifest:require('./plugin.json'),activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),handle:async()=>({text:'task'}),modelProvider:${provider}};`);
+        }
+        await manager.discover();
+        strict_1.default.deepEqual(manager.listModelProviders().map(item => item.id), ["model-agent"]);
+        strict_1.default.equal(manager.listModelProviders()[0].available, false);
+        await strict_1.default.rejects(() => manager.completeModelProvider("model-agent", { prompt: "hello", sessionId: "private-session", timeoutMs: 1000, signal: new AbortController().signal }), /未就绪/);
+        await manager.start("model-agent");
+        await manager.start("ordinary-agent");
+        strict_1.default.equal(manager.listModelProviders()[0].available, true);
+        const input = { prompt: "hello", sessionId: "private-session", timeoutMs: 1000, signal: new AbortController().signal, management: {}, onMessage: () => { }, attachments: [] };
+        const result = await manager.completeModelProvider("model-agent", input);
+        strict_1.default.deepEqual(JSON.parse(result.text), { keys: ["prompt", "sessionId", "timeoutMs", "signal"], prompt: "hello" });
+        await strict_1.default.rejects(manager.completeModelProvider("ordinary-agent", input), /未声明模型来源/);
+    }
+    finally {
+        for (const id of ["model-agent", "ordinary-agent"])
+            if (manager.get(id)?.instance)
+                await manager.stop(id);
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
 (0, node_test_1.default)("启动按钮恢复已退出的桌面 Agent，健康实例和依赖保持运行", async () => {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-desktop-start-"));
     const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir: (0, node_path_1.join)(root, "state") });
@@ -472,6 +615,41 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });
+(0, node_test_1.default)("插件整体默认配置用于启动并保留用户显式限制", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-config-defaults-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: (0, node_path_1.join)(root, "plugins"), stateDir: (0, node_path_1.join)(root, "state") });
+    try {
+        for (const id of ["with-defaults", "without-defaults"]) {
+            const dir = (0, node_path_1.join)(root, "plugins", id);
+            await (0, promises_1.mkdir)(dir, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "plugin.json"), JSON.stringify({ id, version: "1.0.0", entry: "index.js", configSchema: "config.schema.json", apiVersion: "1", capabilities: ["chat"] }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "config.schema.json"), JSON.stringify({ type: "object", properties: { allowedPeers: { type: "array", items: { type: "string" }, default: ["*"] }, allowedAgents: { type: "array", items: { type: "string" } }, aid: { type: "string" } }, ...(id === "with-defaults" ? { default: { allowedPeers: ["*"], allowedAgents: ["workbuddy"] } } : {}) }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "index.js"), "module.exports=class{async activate(c){this.config=c.config}async deactivate(){}async health(){return {status:'ready'}}async handle(){return {text:JSON.stringify(this.config)}}};");
+        }
+        await manager.discover();
+        const defaults = { allowedPeers: ["*"], allowedAgents: ["workbuddy"] };
+        strict_1.default.deepEqual(await manager.config("with-defaults"), defaults);
+        await manager.start("with-defaults");
+        strict_1.default.deepEqual(JSON.parse((await manager.handle("with-defaults", { task: "查看配置" })).text), defaults);
+        await manager.saveConfig("with-defaults", { aid: "assistant.agentid.cn" });
+        strict_1.default.deepEqual(await manager.config("with-defaults"), { ...defaults, aid: "assistant.agentid.cn" });
+        await manager.saveConfig("with-defaults", { allowedPeers: [], allowedAgents: [] });
+        strict_1.default.deepEqual(await manager.config("with-defaults"), { allowedPeers: [], allowedAgents: [], aid: "assistant.agentid.cn" });
+        await manager.reload("with-defaults");
+        strict_1.default.deepEqual(JSON.parse((await manager.handle("with-defaults", { task: "查看限制" })).text).allowedPeers, []);
+        strict_1.default.deepEqual(await manager.config("without-defaults"), {});
+        for (const value of ["{损坏", "null", "[]", '"无效配置"']) {
+            await (0, promises_1.writeFile)((0, node_path_1.join)(root, "state", "with-defaults", "config.json"), value);
+            await strict_1.default.rejects(manager.config("with-defaults"), /配置.*无法读取|配置.*无效/);
+        }
+    }
+    finally {
+        if (manager.get("with-defaults")?.instance)
+            await manager.stop("with-defaults");
+        await manager.logs.flush();
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
 (0, node_test_1.default)("插件配置按 schema 重载并拒绝无效值", async () => {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "agent-bridge-config-"));
     try {
@@ -642,6 +820,7 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         const callPlugin = globalThis.callPlugin;
         strict_1.default.ok(callPlugin);
         strict_1.default.deepEqual(await callPlugin("target", { task: "你好" }), { text: "target:你好" });
+        await strict_1.default.rejects(() => callPlugin("target", { task: "推理", modelResponseSchema: { type: "object" } }), /无工具模型/);
         await strict_1.default.rejects(() => callPlugin("source", { task: "loop" }), /自身|self/);
         await manager.stop("target");
         await strict_1.default.rejects(() => callPlugin("target", { task: "offline" }), /未就绪|not ready/);
@@ -651,6 +830,142 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });
+(0, node_test_1.default)("管理能力只由 AUN ingress 签发并逐次校验白名单，重载后旧能力失效", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "agent-bridge-request-management-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: root, stateDir: (0, node_path_1.join)(root, "state") });
+    try {
+        const writePlugin = async (id, type, capabilities, code) => {
+            const dir = (0, node_path_1.join)(root, id);
+            await (0, promises_1.mkdir)(dir, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "plugin.json"), JSON.stringify({ id, version: "1.0.0", type, entry: "index.js", apiVersion: "1", capabilities }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "index.js"), code);
+        };
+        await writePlugin("personal-assistant", "agent", ["chat", "management"], "module.exports={manifest:require('./plugin.json'),activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),handle:async(r)=>{globalThis.managementRequest=r;if(r.management){globalThis.managementAbilities=await r.management.listAgents();await r.management.summarizeToday();if(globalThis.managementPause){globalThis.managementReady();await new Promise(resolve=>globalThis.managementContinue=resolve)}if(!globalThis.managementPause)globalThis.managementCall=await r.management.callAgent('target','任务');try{await r.management.callAgent(globalThis.managementPause?'target':'unlisted','任务')}catch(e){globalThis.managementDenied=e.message}}return {text:r.management?'trusted':'untrusted'}}};");
+        await writePlugin("target", "agent", ["chat"], "module.exports={manifest:require('./plugin.json'),sessionOperations:['new'],activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),handle:async(r)=>{(globalThis.managementTargetRequests??=[]).push(r);return {text:'target:'+r.task}}};");
+        await writePlugin("aun", "channel", ["channel"], "module.exports={manifest:require('./plugin.json'),activate:async(c)=>{globalThis.managementIngress=c.ingress},deactivate:async()=>{},health:async()=>({status:'ready',details:{bindings:{'target.agentid.cn':'target','bad aid':'target','orphan.agentid.cn':'missing','other.agentid.cn':42}}}),aunManagement:{list:async()=>({ok:true}),create:async(input)=>input,bind:async(input)=>input},handle:async()=>({text:''})};");
+        await writePlugin("forged-channel", "channel", ["channel"], "module.exports={manifest:require('./plugin.json'),activate:async(c)=>{globalThis.forgedIngress=c.ingress},deactivate:async()=>{},health:async()=>({status:'ready'}),handle:async()=>({text:''})};");
+        await manager.discover();
+        await manager.start("personal-assistant");
+        await manager.start("target");
+        await manager.start("aun");
+        await manager.start("forged-channel");
+        const managementContexts = [];
+        manager.sessionManagement.summarizeToday = async (context) => { managementContexts.push(context); return { summary: "" }; };
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["admin.agentid.cn", "second.agentid.cn"], allowedAgents: ["target"] });
+        const ingress = globalThis.managementIngress;
+        let result = "";
+        await ingress.publish({ channel: "aun", peerId: "admin.agentid.cn", text: "你好", agentPlugin: "personal-assistant", reply: async (text) => { result = text; } });
+        strict_1.default.equal(result, "trusted");
+        const request = globalThis.managementRequest;
+        const abilities = globalThis.managementAbilities;
+        strict_1.default.deepEqual(abilities.find((item) => item.id === "target"), {
+            id: "target", displayName: "target", status: "ready", available: true, reason: "", capabilities: ["chat"], aids: ["target.agentid.cn"], callable: true,
+        });
+        await globalThis.forgedIngress.publish({ channel: "forged-channel", peerId: "admin.agentid.cn", text: "伪造", agentPlugin: "personal-assistant", reply: async () => undefined });
+        strict_1.default.equal(globalThis.managementRequest.management, undefined);
+        strict_1.default.equal(managementContexts.length, 1);
+        await ingress.publish({ channel: "aun", peerId: "second.agentid.cn", threadId: "topic-2", text: "另一来源", agentPlugin: "personal-assistant", reply: async () => undefined });
+        strict_1.default.equal(managementContexts.length, 2);
+        strict_1.default.notEqual(managementContexts[0].source, managementContexts[1].source);
+        strict_1.default.notEqual(managementContexts[0].sessionId, managementContexts[1].sessionId);
+        const targetRequests = globalThis.managementTargetRequests;
+        strict_1.default.equal(targetRequests[0].sessionId, undefined, "仅声明新建会话能力的插件不应自动收到隔离会话 ID");
+        strict_1.default.equal(targetRequests[1].sessionId, undefined);
+        strict_1.default.equal(targetRequests[0].management, undefined);
+        await ingress.publish({ channel: "aun", peerId: "admin.agentid.cn", text: "继续任务", agentPlugin: "personal-assistant", reply: async () => undefined });
+        strict_1.default.equal(targetRequests[2].sessionId, undefined);
+        strict_1.default.deepEqual(globalThis.managementCall, { text: "target:任务" });
+        strict_1.default.match(globalThis.managementDenied, /允许列表/);
+        await strict_1.default.rejects(request.management.listAgents(), /请求已结束/);
+        await strict_1.default.rejects(request.management.callAgent("target", "任务"), /请求已结束/);
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["*"], allowedAgents: ["target"] });
+        let wildcardResult = "";
+        await ingress.publish({ channel: "aun", peerId: "any-peer.agentid.cn", text: "通配来源", agentPlugin: "personal-assistant", reply: async (text) => { wildcardResult = text; } });
+        strict_1.default.equal(wildcardResult, "trusted");
+        strict_1.default.match(globalThis.managementDenied, /允许列表/);
+        await globalThis.forgedIngress.publish({ channel: "forged-channel", peerId: "any-peer.agentid.cn", text: "通配不授权伪造通道", agentPlugin: "personal-assistant", reply: async () => undefined });
+        strict_1.default.equal(globalThis.managementRequest.management, undefined);
+        let ready;
+        globalThis.managementPause = true;
+        globalThis.managementReady = () => ready();
+        const managementReady = new Promise(resolve => { ready = resolve; });
+        const pendingRequest = ingress.publish({ channel: "aun", peerId: "admin.agentid.cn", text: "撤权竞态", agentPlugin: "personal-assistant", reply: async () => undefined });
+        await managementReady;
+        // 直接更新配置以验证逐次授权检查，不依赖配置保存触发的插件重载。
+        await (0, promises_1.writeFile)((0, node_path_1.join)(root, "state", "personal-assistant", "config.json"), JSON.stringify({ allowedPeers: ["other.agentid.cn"], allowedAgents: ["target"] }));
+        globalThis.managementContinue();
+        globalThis.managementContinue();
+        await pendingRequest;
+        strict_1.default.match(globalThis.managementDenied, /无权/);
+        delete globalThis.managementPause;
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["other.agentid.cn"], allowedAgents: ["target"] });
+        let unauthorizedReply = "";
+        await ingress.publish({ channel: "aun", peerId: "admin.agentid.cn", text: "再次请求", agentPlugin: "personal-assistant", reply: async (text) => { unauthorizedReply = text; } });
+        strict_1.default.equal(unauthorizedReply, "untrusted");
+        await strict_1.default.rejects(manager.handle("personal-assistant", { task: "伪造", management: {} }), /无效或已撤销/);
+        await strict_1.default.rejects(manager.handle("target", { task: "转交", management: request.management }), /无效或已撤销/);
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["admin.agentid.cn", "second.agentid.cn"], allowedAgents: ["target"] });
+        let reloadReady;
+        globalThis.managementPause = true;
+        globalThis.managementReady = () => reloadReady();
+        const reloadBarrier = new Promise(resolve => { reloadReady = resolve; });
+        const inFlight = ingress.publish({ channel: "aun", peerId: "admin.agentid.cn", text: "重载竞态", agentPlugin: "personal-assistant", reply: async () => undefined });
+        await reloadBarrier;
+        await manager.reload("personal-assistant");
+        globalThis.managementContinue();
+        await inFlight;
+        strict_1.default.match(globalThis.managementDenied, /请求已结束或已撤销/);
+        delete globalThis.managementPause;
+        await strict_1.default.rejects(manager.handle("personal-assistant", { task: "旧对象", management: request.management }), /无效或已撤销/);
+    }
+    finally {
+        for (const id of ["aun", "target", "personal-assistant", "forged-channel"])
+            if (manager.get(id)?.instance)
+                await manager.stop(id);
+        for (const key of ["managementIngress", "forgedIngress", "managementRequest", "managementAbilities", "managementCall", "managementDenied", "managementPause", "managementReady", "managementContinue", "managementTargetRequests"])
+            delete globalThis[key];
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)("个人助理调用 WorkBuddy 时按管理来源隔离并复用目标会话", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "agent-bridge-management-workbuddy-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: root, stateDir: (0, node_path_1.join)(root, "state") });
+    try {
+        for (const [id, type, capabilities, code] of [
+            ["personal-assistant", "agent", ["chat", "management"], "handle:async(r)=>r.management.callAgent('workbuddy',r.task)"],
+            ["workbuddy", "agent", ["chat"], "sessionOperations:['new'],handle:async(r)=>{(globalThis.workbuddyManagementRequests??=[]).push(r);return {text:r.task}}"],
+            ["aun", "channel", ["channel"], "activate:async(c)=>{globalThis.workbuddyManagementIngress=c.ingress},handle:async()=>({text:''})"],
+        ]) {
+            const dir = (0, node_path_1.join)(root, id);
+            await (0, promises_1.mkdir)(dir, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "plugin.json"), JSON.stringify({ id, type, capabilities, version: "1.0.0", entry: "index.js", apiVersion: "1" }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "index.js"), `module.exports={manifest:require('./plugin.json'),activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),${code}};`);
+        }
+        await manager.discover();
+        await manager.saveConfig("workbuddy", { executablePath: process.execPath });
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["admin.agentid.cn", "second.agentid.cn"], allowedAgents: ["workbuddy"] });
+        for (const id of ["workbuddy", "personal-assistant", "aun"])
+            await manager.start(id);
+        const ingress = globalThis.workbuddyManagementIngress;
+        for (const peerId of ["admin.agentid.cn", "second.agentid.cn", "admin.agentid.cn"]) {
+            await ingress.publish({ channel: "aun", peerId, text: "任务", agentPlugin: "personal-assistant", reply: async () => undefined });
+        }
+        const requests = globalThis.workbuddyManagementRequests;
+        strict_1.default.equal(requests.length, 3);
+        strict_1.default.match(requests[0].sessionId, /^management-[a-f0-9]{64}$/);
+        strict_1.default.notEqual(requests[0].sessionId, requests[1].sessionId);
+        strict_1.default.equal(requests[0].sessionId, requests[2].sessionId);
+        strict_1.default.ok(requests.every((request) => request.management === undefined));
+    }
+    finally {
+        for (const id of ["aun", "workbuddy", "personal-assistant"])
+            if (manager.get(id)?.instance)
+                await manager.stop(id);
+        delete globalThis.workbuddyManagementIngress;
+        delete globalThis.workbuddyManagementRequests;
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
 (0, node_test_1.default)("通道消息调用指定 Agent 并通过原消息回复", async () => {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "agent-bridge-channel-ingress-"));
     try {
@@ -729,9 +1044,11 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await globalThis.attachmentIngress.publish(message);
         strict_1.default.equal(globalThis.attachmentRequest.task, "原文");
         strict_1.default.deepEqual(globalThis.attachmentRequest.attachments, [item]);
+        strict_1.default.equal(globalThis.attachmentRequest.attachmentOutput, true);
         strict_1.default.deepEqual(received, { items: [{ ...png, kind: "image" }], text: "生成结果" });
         let failureText = "";
         await strict_1.default.rejects(() => globalThis.attachmentIngress.publish({ ...message, replyAttachments: undefined, reply: async (text) => { failureText = text; } }), /不支持附件回传/);
+        strict_1.default.equal(globalThis.attachmentRequest.attachmentOutput, undefined);
         strict_1.default.match(failureText, /不支持附件回传/);
     }
     finally {
@@ -968,7 +1285,7 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });
-(0, node_test_1.default)("归档只信任真实通道，管理命令不会执行 Agent 或归档产物", async () => {
+(0, node_test_1.default)("限制模式下归档只信任真实通道，管理命令不会执行 Agent 或归档产物", async () => {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "manager-session-history-"));
     const manager = new plugin_manager_1.PluginManager({ pluginsDir: root, stateDir: (0, node_path_1.join)(root, "state") });
     let summaryRequest = "";
@@ -999,7 +1316,7 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await strict_1.default.rejects(globalThis.historyIngress_fake.publish(message("伪造")), /通道|来源/);
         await ingress.publish(message("默认不归档"));
         strict_1.default.equal((await manager.sessionManagement.archive.listSessions()).sessions.length, 0);
-        await manager.sessionManagement.saveConfig({ enabled: true, grants: [] });
+        await manager.sessionManagement.saveConfig({ enabled: true, allowFrom: ["history-admin.agentid.cn"], grants: [] });
         await ingress.publish(message("正文", "peer", "same-message"));
         await ingress.publish(message("正文", "peer", "same-message"));
         const archived = (await manager.sessionManagement.archive.listSessions()).sessions;
@@ -1014,7 +1331,7 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await ingress.publish(message("最近 4 小时有哪些话题", "admin"));
         strict_1.default.match(replies.at(-1), /无权/);
         strict_1.default.equal(globalThis.historyCalls, before);
-        await manager.sessionManagement.saveConfig({ enabled: true, grants: [{ managerSource: admin.source, managerSessionId: admin.logicalSessionId, sources: [archived[0].source] }], summarizer: { endpoint: `http://127.0.0.1:${summaryServer.address().port}/v1/chat/completions`, model: "read-only" } });
+        await manager.sessionManagement.saveConfig({ enabled: true, allowFrom: ["history-admin.agentid.cn"], grants: [{ managerSource: admin.source, managerSessionId: admin.logicalSessionId, sources: [archived[0].source] }], summarizer: { endpoint: `http://127.0.0.1:${summaryServer.address().port}/v1/chat/completions`, model: "read-only" } });
         await ingress.publish(message("/sessions list", "admin"));
         const ref = replies.at(-1).split("\n")[0].split(" ")[0];
         await ingress.publish(message(`/sessions summary --from ${ref} 比较内容`, "admin"));
@@ -1028,7 +1345,7 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         await ingress.publish(message("/sessions list", "admin"));
         strict_1.default.ok(!replies.at(-1).includes("agent2"));
         const sources = (await manager.sessionManagement.archive.listSessions()).sessions.map(item => item.source);
-        await manager.sessionManagement.saveConfig({ enabled: true, grants: [{ managerSource: admin.source, managerSessionId: admin.logicalSessionId, sources }], summarizer: { endpoint: `http://127.0.0.1:${summaryServer.address().port}/v1/chat/completions`, model: "read-only" } });
+        await manager.sessionManagement.saveConfig({ enabled: true, allowFrom: ["history-admin.agentid.cn"], grants: [{ managerSource: admin.source, managerSessionId: admin.logicalSessionId, sources }], summarizer: { endpoint: `http://127.0.0.1:${summaryServer.address().port}/v1/chat/completions`, model: "read-only" } });
         await ingress.publish(message("/sessions list", "admin"));
         const refs = replies.at(-1).split("\n").filter(line => /^[a-f0-9]{12}\./.test(line)).map(line => line.split(" ")[0]);
         strict_1.default.equal(refs.length, 2);
@@ -1243,3 +1560,38 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         }
     }
 });
+(0, node_test_1.default)("个人助理兼容旧 AUN 的只读身份查询，保留绑定并转交附件回传能力", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-pa-legacy-aun-"));
+    const manager = new plugin_manager_1.PluginManager({ pluginsDir: root, stateDir: (0, node_path_1.join)(root, "state") });
+    try {
+        for (const [id, type, capabilities, code] of [
+            ["aun", "channel", ["channel"], "activate:async(c)=>{globalThis.legacyPaIngress=c.ingress},identity:{list:async()=>({evolcore:['worker.agentid.cn'],muAgentBridge:['pa.agentid.cn'],localMuAgentBridge:['local.agentid.cn']})},health:async()=>({status:'ready',details:{bindings:{'worker.agentid.cn':'workbuddy'}}})"],
+            ["personal-assistant", "agent", ["chat", "management"], "handle:async(r)=>{globalThis.legacyPaIdentities=await r.management.listAunIdentities();return r.management.callAgent('workbuddy',r.task)}"],
+            ["workbuddy", "agent", ["chat"], "sessionOperations:['new'],handle:async(r)=>{globalThis.legacyPaTarget=r;await r.onMessage('执行中');return {text:'完成'}}"],
+        ]) {
+            const dir = (0, node_path_1.join)(root, id);
+            await (0, promises_1.mkdir)(dir, { recursive: true });
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "plugin.json"), JSON.stringify({ id, type, capabilities, version: "1.0.0", entry: "index.js", apiVersion: "1" }));
+            await (0, promises_1.writeFile)((0, node_path_1.join)(dir, "index.js"), `module.exports={manifest:require('./plugin.json'),activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'}),${code}};`);
+        }
+        await manager.discover();
+        await manager.saveConfig("workbuddy", { executablePath: process.execPath });
+        await manager.saveConfig("personal-assistant", { allowedPeers: ["*"], allowedAgents: ["workbuddy"] });
+        for (const id of ["workbuddy", "personal-assistant", "aun"])
+            await manager.start(id);
+        const replies = [];
+        await globalThis.legacyPaIngress.publish({ channel: "aun", peerId: "owner.agentid.cn", agentPlugin: "personal-assistant", text: "生成图片", reply: async (s) => { replies.push(s); }, replyAttachments: async () => { } });
+        strict_1.default.deepEqual(globalThis.legacyPaIdentities, { aids: ["local.agentid.cn", "pa.agentid.cn", "worker.agentid.cn"], bindings: { "worker.agentid.cn": "workbuddy" } });
+        strict_1.default.equal(globalThis.legacyPaTarget.attachmentOutput, true);
+        strict_1.default.equal(globalThis.legacyPaTarget.management, undefined);
+        strict_1.default.deepEqual(replies, ["执行中", "完成"]);
+    }
+    finally {
+        for (const id of ["aun", "personal-assistant", "workbuddy"])
+            if (manager.get(id)?.instance)
+                await manager.stop(id);
+        for (const key of ["legacyPaIngress", "legacyPaIdentities", "legacyPaTarget"])
+            delete globalThis[key];
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});