mu-agent-bridge 1.0.73 → 1.0.78

package/dist/src-ts/plugins/zcode/index.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZcodePlugin = exports.zcodeManifest = void 0;
+const node_child_process_1 = require("node:child_process");
+const agent_1 = require("../../agent");
+const plugin_1 = require("../../plugin");
+const cdp_client_1 = require("./cdp-client");
+const workbuddy_1 = require("../workbuddy");
+const desktop_launch_1 = require("../desktop-launch");
+exports.zcodeManifest = {
+    id: "zcode", version: "1.0.8", displayName: "ZCode", type: "agent",
+    entry: "dist/src-ts/plugins/zcode/index.js", apiVersion: "1", process: "in-process",
+    capabilities: ["chat", "health"], configSchema: "config.schema.json",
+};
+class ZcodePlugin {
+    options;
+    manifest = exports.zcodeManifest;
+    delegate;
+    process;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    get sessionOperations() { return this.delegate?.sessionOperations ?? []; }
+    async activate(context) {
+        const port = (0, plugin_1.resolveRuntimePort)(context.config, context.runtime, "zcode", "ZCODE_CDP_PORT", this.options.cdpPort ?? 9231);
+        const args = context.config.startupArgs ?? [];
+        if (!Array.isArray(args) || args.some(arg => typeof arg !== "string" || /^--remote-debugging-(?:port|address)(?:=|$)/i.test(arg)))
+            throw new Error("startupArgs 必须为字符串数组，CDP 地址和端口由插件配置管理");
+        const client = this.options.client ?? new cdp_client_1.ZcodeCdpClient({ port });
+        if (!this.options.client) {
+            const connect = client.connect.bind(client);
+            client.connect = async () => {
+                try {
+                    await connect();
+                }
+                catch (error) {
+                    const failure = error;
+                    if (context.config.autoStart === false || process.platform !== "win32" || failure.code !== "ECONNREFUSED" && failure.cause?.code !== "ECONNREFUSED")
+                        throw error;
+                    const executable = await (0, desktop_launch_1.findWindowsExecutable)("ZCode.exe", typeof context.config.executablePath === "string" ? context.config.executablePath : undefined);
+                    if (!executable)
+                        throw new Error("未找到 ZCode.exe，请检查开始菜单安装记录或配置 executablePath");
+                    context.logger.info("正在启动 ZCode 并等待 CDP", { executable, port });
+                    const env = { ...process.env };
+                    delete env.ELECTRON_RUN_AS_NODE;
+                    try {
+                        await (0, desktop_launch_1.launchManagedAndWait)(executable, [...args, "--remote-debugging-address=127.0.0.1", `--remote-debugging-port=${port}`], undefined, connect, typeof context.config.startupTimeoutMs === "number" ? context.config.startupTimeoutMs : 30_000, child => { this.process = child; }, (file, argv) => (0, node_child_process_1.spawn)(file, argv, { env, detached: true, stdio: "ignore", windowsHide: false }));
+                    }
+                    catch (cause) {
+                        const code = cause.code ?? (cause.cause?.code);
+                        if (code === "ENOENT" || code === "EACCES")
+                            throw new Error(`无法启动 ZCode：${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+                        throw new Error(`ZCode 已启动，但 CDP ${port} 未就绪；若桌面已打开，请先退出 ZCode，再重载插件使调试参数生效`, { cause });
+                    }
+                }
+            };
+        }
+        this.delegate = new workbuddy_1.WorkbuddyPlugin({ client, expertSelection: false, replyTimeoutLimitMs: Infinity });
+        await this.delegate.activate({ ...context, config: { ...context.config, transport: "cdp", cdpPort: port, autoStart: false, dailyPoints: false } });
+    }
+    async deactivate(reason) {
+        try {
+            await this.delegate?.deactivate(reason);
+        }
+        finally {
+            const child = this.process;
+            this.process = undefined;
+            this.delegate = undefined;
+            await (0, desktop_launch_1.terminateOwnedProcess)(child);
+        }
+    }
+    async health() {
+        return this.delegate ? this.delegate.health() : { status: "failed", message: "ZCode 插件尚未激活" };
+    }
+    async handle(request) {
+        if (!this.delegate)
+            throw new Error("ZCode 插件尚未激活");
+        try {
+            return await this.delegate.handle(request);
+        }
+        catch (error) {
+            if (!(error instanceof agent_1.AgentOperationError) || error.code !== "WORKBUDDY_TASK_FAILED")
+                throw error;
+            const cause = error.cause;
+            const detail = cause instanceof Error && cause.message.includes("WorkBuddy")
+                ? Object.assign(new Error(cause.message.replaceAll("WorkBuddy", "ZCode"), { cause: cause.cause }), { code: cause.code }) : cause;
+            throw new agent_1.AgentOperationError("ZCODE_TASK_FAILED", error.stage.replaceAll("WorkBuddy", "ZCode"), detail);
+        }
+    }
+    async controlSession(request) {
+        if (!this.delegate)
+            throw new Error("ZCode 插件尚未激活");
+        return this.delegate.controlSession(request);
+    }
+}
+exports.ZcodePlugin = ZcodePlugin;
+exports.default = ZcodePlugin;

package/dist/src-ts/session-management.js

@@ -20,7 +20,7 @@ class SessionManagement {
     bindings;
     nativeProviders;
     archive;
-    settings = { enabled: false, grants: [] };
+    settings = { enabled: false, allowFrom: [], grants: [] };
     loaded;
     writes = Promise.resolve();
     snapshots = new Map();
@@ -41,12 +41,20 @@ class SessionManagement {
                 this.settings = this.validate(JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(this.directory, "session-management.json"), "utf8")));
             }
             catch (error) {
-                if (error.code !== "ENOENT")
+                if (error.code !== "ENOENT") {
                     this.audit("配置读取", { actor: "local", count: 0, status: "invalid" });
+                    throw new ManagementError("会话设置读取失败，请检查本机配置");
+                }
             }
             this.archive.setEnabled(this.settings.enabled);
         })();
-        await this.loaded;
+        try {
+            await this.loaded;
+        }
+        catch (error) {
+            this.loaded = undefined;
+            throw error;
+        }
     }
     async config() {
         await this.load();
@@ -111,13 +119,18 @@ class SessionManagement {
         if (revision !== this.revision)
             throw new ManagementError("权限或归档设置已变更，请重新执行 /sessions list");
     }
+    allowsAllHistory(context) {
+        return this.settings.allowFrom.length === 0 || this.settings.allowFrom.includes("*") || this.settings.allowFrom.includes(JSON.parse(context.source)[3]);
+    }
     sources(context) {
+        if (this.allowsAllHistory(context))
+            return undefined;
         const grant = this.settings.grants.find(item => item.managerSource === context.source && item.managerSessionId === context.sessionId);
         return [...new Set([context.source, ...(grant?.sources ?? [])])];
     }
     async catalog(sources, agentPlugin) {
         const result = await this.archive.snapshotSessions();
-        return { sessions: result.sessions.filter(item => sources.includes(item.source) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
+        return { sessions: result.sessions.filter(item => (!sources || sources.includes(item.source)) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
     }
     async summarizeToday(context, now = new Date()) {
         await this.load();
@@ -463,6 +476,8 @@ class SessionManagement {
         return `${header}\n${result.text}`;
     }
     authorizedNative(context, pluginId, scope) {
+        if (this.allowsAllHistory(context))
+            return;
         const grant = this.settings.nativeGrants?.find(item => item.managerSource === context.source && item.managerSessionId === context.sessionId);
         if (!grant?.providers.some(item => item.pluginId === pluginId && (scope === undefined || item.scope === scope)))
             throw new ManagementError("无权读取该原生插件历史，请由本机管理员精确授权");
@@ -611,7 +626,7 @@ class SessionManagement {
             const catalog = await this.catalog(sources, plugin);
             const archived = catalog.sessions;
             const known = new Set(archived.map(item => item.sessionId));
-            const bound = (await this.bindings?.list() ?? []).filter(item => sources.includes(item.source) && (!plugin || item.agentPlugin === plugin) && !known.has(item.logicalSessionId)).map(item => ({ sessionId: item.logicalSessionId, source: item.source, agentPlugin: item.agentPlugin, channel: JSON.parse(item.source)[0], updatedAt: item.updatedAt }));
+            const bound = (await this.bindings?.list() ?? []).filter(item => (!sources || sources.includes(item.source)) && (!plugin || item.agentPlugin === plugin) && !known.has(item.logicalSessionId)).map(item => ({ sessionId: item.logicalSessionId, source: item.source, agentPlugin: item.agentPlugin, channel: JSON.parse(item.source)[0], updatedAt: item.updatedAt }));
             const sessions = [...archived, ...bound].filter(item => item.sessionId !== context.sessionId).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt) || a.sessionId.localeCompare(b.sessionId));
             this.checkRevision(revision);
             const key = (0, node_crypto_1.randomUUID)().replace(/-/g, "").slice(0, 12);
@@ -636,7 +651,8 @@ class SessionManagement {
         if (!snapshot || snapshot.revision !== this.revision || snapshot.expires < Date.now() || snapshot.context.source !== context.source || snapshot.context.sessionId !== context.sessionId)
             throw new ManagementError("编号无效或已过期，请重新执行 /sessions list");
         const session = snapshot.sessions[Number(match[2]) - 1];
-        if (!session || !this.sources(context).includes(session.source) || session.sessionId === context.sessionId)
+        const sources = this.sources(context);
+        if (!session || (sources && !sources.includes(session.source)) || session.sessionId === context.sessionId)
             throw new ManagementError("无权读取所选会话，请重新列举");
         return session;
     }
@@ -644,8 +660,11 @@ class SessionManagement {
         if (!value || typeof value !== "object" || Array.isArray(value))
             throw new ManagementError("归档设置必须是对象");
         const input = value;
-        if (Object.keys(input).some(key => !["enabled", "grants", "nativeGrants", "summarizer"].includes(key)) || typeof input.enabled !== "boolean" || !Array.isArray(input.grants) || input.grants.length > 500)
+        if (Object.keys(input).some(key => !["enabled", "allowFrom", "grants", "nativeGrants", "summarizer"].includes(key)) || typeof input.enabled !== "boolean" || !Array.isArray(input.grants) || input.grants.length > 500)
             throw new ManagementError("归档设置字段无效");
+        const allowFrom = input.allowFrom === undefined ? [] : input.allowFrom;
+        if (!Array.isArray(allowFrom) || allowFrom.length > 500 || allowFrom.some(value => value !== "*" && !exactIdentifier(value, 512)) || new Set(allowFrom).size !== allowFrom.length)
+            throw new ManagementError("allowFrom 来源白名单无效");
         const managers = new Set();
         const grants = input.grants.map((raw) => {
             if (!raw || typeof raw !== "object" || Array.isArray(raw))
@@ -707,7 +726,7 @@ class SessionManagement {
             const apiKey = config.apiKey === undefined && config.endpoint === previousEndpoint ? previousKey : config.apiKey;
             summarizer = { endpoint: config.endpoint, model: config.model, ...(apiKey ? { apiKey } : {}) };
         }
-        return { enabled: input.enabled, grants, ...(nativeGrants ? { nativeGrants } : {}), ...(summarizer ? { summarizer } : {}) };
+        return { enabled: input.enabled, allowFrom, grants, ...(nativeGrants ? { nativeGrants } : {}), ...(summarizer ? { summarizer } : {}) };
     }
 }
 exports.SessionManagement = SessionManagement;

package/dist/src-ts/version-manager.js

@@ -59,14 +59,17 @@ class VersionManager {
             if (!parseVersion(currentVersion))
                 throw new Error("当前版本号无效");
             const raw = await (this.options.npm ?? this.queryNpm)(["view", packageName, "version", "dist-tags", "--json"]);
-            const value = JSON.parse(raw);
-            const latestVersion = typeof value === "string" ? value : String(value.version ?? value.latest ?? "");
+            const parsed = JSON.parse(raw);
+            const value = (Array.isArray(parsed) && parsed.length === 1 ? parsed[0] : parsed);
+            const latestVersion = typeof value === "string" ? value : String(value?.version ?? value?.latest ?? "");
             if (!parseVersion(latestVersion))
                 throw new Error("npm 返回的版本号无效");
             status = { packageName, currentVersion, latestVersion, state: compareVersions(latestVersion, currentVersion) > 0 ? "update-available" : "latest", checkedAt: new Date().toISOString() };
         }
         catch (error) {
-            status = { packageName, currentVersion, state: "error", error: error instanceof Error ? error.message : String(error), checkedAt: new Date().toISOString() };
+            const message = error instanceof Error ? error.message : String(error);
+            const unpublished = /npm\s+error\s+code\s+E404\b|404\s+Not Found/i.test(message);
+            status = { packageName, currentVersion, state: unpublished ? "unpublished" : "error", error: unpublished ? "npm 包未发布或当前无权访问" : message, checkedAt: new Date().toISOString() };
         }
         this.statuses.set(packageName, status);
         await this.save();

package/dist/tests-ts/abweb-model-config.test.js

@@ -26,45 +26,48 @@ class Element {
     showModal() { this.open = true; }
     close() { this.open = false; }
 }
-(0, node_test_1.default)("ABWeb 个人助理动态列出模型来源，保留不可用选择及脱敏密钥和隐藏配置", async () => {
-    const script = await (0, promises_1.readFile)("src-ts/plugins/abweb/public/app.js", "utf8");
-    const nodes = new Map();
-    const node = (selector) => { if (!nodes.has(selector))
-        nodes.set(selector, new Element()); return nodes.get(selector); };
-    const calls = [];
-    const plugin = { id: "personal-assistant", type: "agent", displayName: "个人助理", status: "ready", version: "1.0.0", path: "/plugins/personal-assistant" };
-    const config = { modelProvider: "plugin", modelPlugin: "workbuddy", apiKey: "******", endpoint: "http://127.0.0.1:1234/v1/chat/completions", model: "local", allowedPeers: ["peer.agentid.cn"], allowedAgents: ["dsh"], ownerAid: "owner.agentid.cn", timeoutMs: 120000 };
-    (0, node_vm_1.runInNewContext)(script, {
-        document: { querySelector: node, createElement: () => new Element(), hidden: false },
-        localStorage: { getItem: () => null, setItem() { }, removeItem() { } },
-        window: { addEventListener() { } }, setInterval() { }, confirm: () => false, structuredClone,
-        fetch: async (path, init) => {
-            calls.push({ path, method: init.method, body: init.body ? JSON.parse(init.body) : undefined });
-            const data = path.endsWith("/config") ? config : path === "/api/model-providers" ? { providers: [
-                    { id: "workbuddy", displayName: "WorkBuddy", status: "failed", available: false, reason: "桌面未连接" },
-                    { id: "qwenwork", displayName: "千问办公", status: "ready", available: true, reason: "" },
-                ] } : { plugins: [plugin], messages: [], sessions: [], mode: "auto-install", config: { providers: {}, plugins: {} } };
-            return { ok: true, status: 200, json: async () => data };
-        },
+for (const legacyWildcard of [false, true])
+    (0, node_test_1.default)(`ABWeb 个人助理模型设置保留配置，旧通配名单显示为空白（兼容模式：${legacyWildcard}）`, async () => {
+        const script = await (0, promises_1.readFile)("src-ts/plugins/abweb/public/app.js", "utf8");
+        const nodes = new Map();
+        const node = (selector) => { if (!nodes.has(selector))
+            nodes.set(selector, new Element()); return nodes.get(selector); };
+        const calls = [];
+        const plugin = { id: "personal-assistant", type: "agent", displayName: "个人助理", status: "ready", version: "1.0.0", path: "/plugins/personal-assistant" };
+        const config = { modelProvider: "plugin", modelPlugin: "workbuddy", apiKey: "******", endpoint: "http://127.0.0.1:1234/v1/chat/completions", model: "local", allowedPeers: legacyWildcard ? ["*"] : ["peer.agentid.cn"], allowedAgents: legacyWildcard ? ["*"] : ["dsh"], ownerAid: "owner.agentid.cn", timeoutMs: 120000 };
+        (0, node_vm_1.runInNewContext)(script, {
+            document: { querySelector: node, createElement: () => new Element(), hidden: false },
+            localStorage: { getItem: () => null, setItem() { }, removeItem() { } },
+            window: { addEventListener() { } }, setInterval() { }, confirm: () => false, structuredClone,
+            fetch: async (path, init) => {
+                calls.push({ path, method: init.method, body: init.body ? JSON.parse(init.body) : undefined });
+                const data = path.endsWith("/config") ? config : path === "/api/model-providers" ? { providers: [
+                        { id: "workbuddy", displayName: "WorkBuddy", status: "failed", available: false, reason: "桌面未连接" },
+                        { id: "qwenwork", displayName: "千问办公", status: "ready", available: true, reason: "" },
+                    ] } : { plugins: [plugin], messages: [], sessions: [], mode: "auto-install", config: { providers: {}, plugins: {} } };
+                return { ok: true, status: 200, json: async () => data };
+            },
+        });
+        await new Promise(resolve => setImmediate(resolve));
+        const buttons = (element) => [element, ...element.children.flatMap(buttons)];
+        const configure = buttons(node("#plugins")).find(item => item.textContent === "配置模型");
+        strict_1.default.ok(configure, "个人助理应显示配置入口");
+        configure.onclick();
+        await new Promise(resolve => setImmediate(resolve));
+        strict_1.default.equal(node("#assistant-config-dialog").open, true);
+        strict_1.default.equal(node("#assistant-model-provider").value, "plugin:workbuddy");
+        const choices = node("#assistant-model-provider").children;
+        strict_1.default.ok(choices.some(option => option.value === "plugin:qwenwork" && !option.disabled));
+        strict_1.default.ok(choices.some(option => option.value === "plugin:workbuddy" && option.disabled && /桌面未连接/.test(option.textContent)));
+        strict_1.default.ok(choices.every(option => option.value !== "claude-cli"), "未安装的 Claude CLI 不应被硬编码为可用来源");
+        strict_1.default.equal(node("#assistant-api-key").value, "");
+        strict_1.default.equal(node("#assistant-allowed-peers").value, legacyWildcard ? "" : "peer.agentid.cn");
+        strict_1.default.equal(node("#assistant-allowed-agents").value, legacyWildcard ? "" : "dsh");
+        node("#assistant-model-provider").value = "plugin:qwenwork";
+        node("#assistant-config-form").onsubmit({ preventDefault() { } });
+        await new Promise(resolve => setImmediate(resolve));
+        const saved = calls.find(call => call.method === "PATCH" && call.path.endsWith("personal-assistant/config"));
+        strict_1.default.ok(saved);
+        strict_1.default.deepEqual(saved.body, { modelPlugin: "qwenwork", ...(legacyWildcard ? { allowedPeers: [], allowedAgents: [] } : {}) });
+        strict_1.default.ok(calls.some(call => call.path === "/api/model-providers"));
     });
-    await new Promise(resolve => setImmediate(resolve));
-    const buttons = (element) => [element, ...element.children.flatMap(buttons)];
-    const configure = buttons(node("#plugins")).find(item => item.textContent === "配置模型");
-    strict_1.default.ok(configure, "个人助理应显示配置入口");
-    configure.onclick();
-    await new Promise(resolve => setImmediate(resolve));
-    strict_1.default.equal(node("#assistant-config-dialog").open, true);
-    strict_1.default.equal(node("#assistant-model-provider").value, "plugin:workbuddy");
-    const choices = node("#assistant-model-provider").children;
-    strict_1.default.ok(choices.some(option => option.value === "plugin:qwenwork" && !option.disabled));
-    strict_1.default.ok(choices.some(option => option.value === "plugin:workbuddy" && option.disabled && /桌面未连接/.test(option.textContent)));
-    strict_1.default.ok(choices.every(option => option.value !== "claude-cli"), "未安装的 Claude CLI 不应被硬编码为可用来源");
-    strict_1.default.equal(node("#assistant-api-key").value, "");
-    node("#assistant-model-provider").value = "plugin:qwenwork";
-    node("#assistant-config-form").onsubmit({ preventDefault() { } });
-    await new Promise(resolve => setImmediate(resolve));
-    const saved = calls.find(call => call.method === "PATCH" && call.path.endsWith("personal-assistant/config"));
-    strict_1.default.ok(saved);
-    strict_1.default.deepEqual(saved.body, { modelPlugin: "qwenwork" });
-    strict_1.default.ok(calls.some(call => call.path === "/api/model-providers"));
-});

package/dist/tests-ts/aun-attachments.test.js

@@ -43,17 +43,20 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     strict_1.default.match(calls[0], /peer\.agentid\.cn/);
     strict_1.default.match(calls[1], /limit[^0-9]*33554433/);
 });
-(0, node_test_1.default)("AUN 出站上传保持私有并按对端创建 24 小时分享", async () => {
+(0, node_test_1.default)("AUN 出站上传使用公开标准对象引用，不创建私有分享", async () => {
     const calls = [];
     const storage = {
         async writeBytes(path, bytes, options) { calls.push(["write", { path, bytes, options }]); return { contentType: "text/plain", size_bytes: 3, sha256 }; },
         lowlevel: { async createShareLink(options) { calls.push(["share", options]); return { owner_aid: "self.agentid.cn", bucket: "default", object_key: options.objectKey, share_id: "Ab3xK9mZ2q", path_url: `https://self.agentid.cn/${options.objectKey}?t=Ab3xK9mZ2q`, allowed_aids: options.allowedAids }; } },
     };
     const result = await (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "报告.txt", contentType: "text/plain" }]);
-    strict_1.default.equal(result[0].url, "https://self.agentid.cn/" + result[0].object_key + "?t=Ab3xK9mZ2q");
-    strict_1.default.deepEqual((calls.find(([kind]) => kind === "share")?.[1]).allowedAids, ["peer.agentid.cn"]);
-    strict_1.default.equal((calls.find(([kind]) => kind === "share")?.[1]).expireInSeconds, 86400);
-    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.public, false);
+    strict_1.default.deepEqual(result[0], {
+        owner_aid: "self.agentid.cn", object_key: (calls.find(([kind]) => kind === "write")?.[1]).path.slice(1),
+        filename: "报告.txt", content_type: "text/plain", size_bytes: 3, sha256,
+    });
+    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.public, true);
+    strict_1.default.equal((calls.find(([kind]) => kind === "write")?.[1]).options.overwrite, true);
+    strict_1.default.equal(calls.filter(([kind]) => kind === "share").length, 0);
 });
 (0, node_test_1.default)("AUN 视频上传遵循 EvolCore 标准对象引用，不创建私有分享", async () => {
     const writes = [];
@@ -66,14 +69,14 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     strict_1.default.deepEqual(writes[0].options, { contentType: "video/mp4", public: true, overwrite: true });
     strict_1.default.deepEqual(result, [{ owner_aid: "self.agentid.cn", object_key: writes[0].path.slice(1), filename: "视频.mp4", content_type: "video/mp4", size_bytes: 3, sha256 }]);
 });
-(0, node_test_1.default)("AUN 分享失败不会回退为公开上传", async () => {
-    let writeOptions;
+(0, node_test_1.default)("AUN 标准附件上传失败时不会创建分享", async () => {
+    let shareCalls = 0;
     const storage = {
-        async writeBytes(_path, _bytes, options) { writeOptions = options; return {}; },
-        lowlevel: { async createShareLink() { throw new Error("拒绝分享"); } },
+        async writeBytes() { throw new Error("存储不可用"); },
+        lowlevel: { async createShareLink() { shareCalls++; throw new Error("不应创建分享"); } },
     };
-    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /分享/);
-    strict_1.default.equal(writeOptions?.public, false);
+    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)({ storage }, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /上传 AUN FS 文件/);
+    strict_1.default.equal(shareCalls, 0);
 });
 (0, node_test_1.default)("AUN 元数据与正文的哈希不符时拒绝入站附件", async () => {
     const storage = { async stat() { return { size: 3, sha256: "0".repeat(64), contentType: "text/plain", type: "file" }; }, async readBytes() { return data; } };
@@ -86,12 +89,11 @@ const sha256 = (0, node_crypto_1.createHash)("sha256").update(data).digest("hex"
     await strict_1.default.rejects(() => (0, attachments_1.downloadAunAttachment)({ storage }, ref), /引用|路径/);
     strict_1.default.equal(reads, 0);
 });
-(0, node_test_1.default)("AUN 私有分享拒绝服务端返回的公开授权或不匹配元数据", async () => {
-    const client = { storage: {
-            async writeBytes() { return { size: 3, sha256, contentType: "text/plain" }; },
-            lowlevel: { async createShareLink(options) { return { object_key: options.objectKey, share_id: "Ab3xK9mZ2q", allowed_aids: ["*"], path_url: `https://self.agentid.cn/${options.objectKey}?t=Ab3xK9mZ2q` }; } },
-        } };
-    await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)(client, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /分享/);
+(0, node_test_1.default)("AUN 标准附件拒绝上传结果中的错配对象或哈希", async () => {
+    for (const metadata of [{ owner_aid: "other.agentid.cn" }, { object_key: "shared/other.txt" }, { sha256: "0".repeat(64) }]) {
+        const client = { storage: { async writeBytes() { return { size: 3, sha256, contentType: "text/plain", ...metadata }; } } };
+        await strict_1.default.rejects(() => (0, attachments_1.uploadAunAttachments)(client, "self.agentid.cn", "peer.agentid.cn", [{ kind: "file", data, filename: "a.txt", contentType: "text/plain" }]), /引用|哈希/);
+    }
 });
 (0, node_test_1.default)("AUN 通用图片类型按普通文件传入", async () => {
     const storage = { async stat() { return { size: 3 }; }, async readBytes() { return data; } };

package/dist/tests-ts/aun-default-owner-page.test.js

@@ -51,7 +51,7 @@ const flush = () => new Promise((resolve) => setImmediate(resolve));
                 posts.push(JSON.parse(options.body));
                 return { ok: true, json: async () => ({ status: "已创建", connection: "ready" }) };
             }
-            const data = path === "/api/plugins/aun/config" ? { owner_aid: owner }
+            const data = path === "/api/plugins/aun/config" ? { owner_aid: owner, allow_from: "*" }
                 : path === "/api/plugins/aun/identities" ? { groups: { muAgentBridge: [], evolcore: [] } }
                     : { plugins: [] };
             return { ok: true, json: async () => data };
@@ -60,6 +60,7 @@ const flush = () => new Promise((resolve) => setImmediate(resolve));
     const create = node("#create-form");
     await flush();
     strict_1.default.equal(create.elements.ownerAid.value, "first.agentid.cn");
+    strict_1.default.equal(node("#config-form").elements.allow_from.value, "", "旧通配名单显示为空白，沿用接受所有来源的语义");
     owner = "second.agentid.cn";
     node("#refresh").onclick();
     await flush();

package/dist/tests-ts/aun-messages.test.js

@@ -14,6 +14,13 @@ const messages_1 = require("../src-ts/plugins/aun/messages");
         peerId: "other.agentid.cn", messageId: "m1", text: "你好", threadId: "t1",
     });
 });
+(0, node_test_1.default)("AUN 来源白名单使用 * 时接受所有 Peer", () => {
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "*")?.peerId, "peer.agentid.cn");
+});
+(0, node_test_1.default)("AUN 来源白名单可用逗号分隔限制来源，包含 * 时仍接受所有 Peer", () => {
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "other.agentid.cn, *")?.peerId, "peer.agentid.cn");
+    strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", "other.agentid.cn"), undefined);
+});
 (0, node_test_1.default)("AUN 错误和通知事件不作为任务触发自动互答", () => {
     for (const type of ["error", "notice"]) {
         strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { type, text: "今日额度已用完", thread_id: "test-thread" } }, "self.agentid.cn"), undefined);
@@ -67,3 +74,10 @@ const messages_1 = require("../src-ts/plugins/aun/messages");
     strict_1.default.equal(message?.attachments?.[0].ownerAid, "third.agentid.cn");
     strict_1.default.equal(message?.attachments?.[0].token, "Ab3xK9mZ2q");
 });
+(0, node_test_1.default)("AUN 来源留空或未配置时接受所有 Peer，仍忽略自身与空来源", () => {
+    for (const rule of [undefined, "", "  "]) {
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "peer.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", rule)?.peerId, "peer.agentid.cn");
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "self.agentid.cn", payload: { text: "你好" } }, "self.agentid.cn", rule), undefined);
+        strict_1.default.equal((0, messages_1.normalizeAunMessage)({ from: "", payload: { text: "你好" } }, "self.agentid.cn", rule), undefined);
+    }
+});