@actiondock/core 2.0.11 → 2.2.0

package/dist/profile/client.d.ts

@@ -0,0 +1,162 @@
+import type { ExecutionResult, RunRecord } from "@actiondock/sdk";
+import type { RemoteHealthResult } from "./types.js";
+/**
+ * 校验在携带认证 Token 时传输层协议是否安全。
+ * 若请求携带认证 Token 且目标为非本地回环的明文 http://，默认报错拒绝。
+ * 可通过 allowInsecureHttp 选项、ACTIONDOCK_ALLOW_INSECURE_HTTP 环境变量或 --allow-insecure-http 命令行参数豁免。
+ */
+export declare function assertSecureTransport(serverUrl: string, token?: string, allowInsecureHttp?: boolean): void;
+/**
+ * 调用远端 ActionDock 服务端执行 Action 时的选项参数。
+ */
+export interface RemoteExecuteOptions {
+    /** 动态配置覆盖 */
+    configOverrides?: Record<string, unknown>;
+    /** 鉴权 Bearer Token */
+    token?: string;
+    /** 超时毫秒数 */
+    timeoutMs?: number;
+    /** 中断信号 */
+    signal?: AbortSignal;
+    /** 幂等请求去重标识 */
+    requestId?: string;
+    /** 是否异步触发（202 Accepted 立即返回 runId） */
+    async?: boolean;
+    /** 是否允许通过非回环明文 HTTP 发送认证 Token */
+    allowInsecureHttp?: boolean;
+}
+/**
+ * 远端 Action 执行结果信封对象。
+ */
+export type RemoteExecutionResult<T = unknown> = ExecutionResult<T> & {
+    status?: string;
+};
+/**
+ * 探测指定远端 ActionDock 服务的健康状态与网络延迟。
+ *
+ * @param serverUrl 目标服务端地址
+ * @param token 鉴权 Token（可选）
+ * @param timeoutMs 探测超时时间（默认 5000ms）
+ */
+export declare function checkRemoteHealth(serverUrl: string, token?: string, timeoutMs?: number, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<RemoteHealthResult>;
+export declare function executeRemoteAction<T = unknown>(serverUrl: string, actionId: string, input?: unknown, configOverridesOrOptions?: Record<string, unknown> | RemoteExecuteOptions, tokenArg?: string): Promise<RemoteExecutionResult<T>>;
+export declare function fetchRemoteRun(serverUrl: string, runId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<RunRecord>;
+export declare function cancelRemoteRun(serverUrl: string, runId: string, token?: string, reason?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<{
+    ok: boolean;
+    runId: string;
+    status: string;
+}>;
+export declare function fetchRemoteActions(serverUrl: string, token?: string, intent?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<Array<{
+    id: string;
+    description: string;
+    packageId?: string;
+}>>;
+export declare function fetchRemoteActionShow(serverUrl: string, actionId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteInfo(serverUrl: string, token?: string, options?: {
+    intent?: string;
+    package?: string;
+    tree?: boolean;
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteDoctor(serverUrl: string, token?: string, targetPackage?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemotePlaybooks(serverUrl: string, token?: string, options?: {
+    intent?: string;
+    package?: string;
+    allowInsecureHttp?: boolean;
+}): Promise<Array<{
+    id: string;
+    description: string;
+    actions: string[];
+    packageId: string;
+    filePath: string;
+}>>;
+export declare function fetchRemotePlaybookShow(serverUrl: string, playbookId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteRuns(serverUrl: string, token?: string, options?: {
+    status?: string;
+    actionId?: string;
+    packageId?: string;
+    intent?: string;
+    limit?: number;
+    allowInsecureHttp?: boolean;
+}): Promise<{
+    ok: boolean;
+    total: number;
+    items: RunRecord[];
+}>;
+export declare function clearRemoteRuns(serverUrl: string, token?: string, options?: {
+    packageId?: string;
+    actionId?: string;
+    status?: string;
+    allowInsecureHttp?: boolean;
+}): Promise<{
+    ok: boolean;
+    clearedCount: number;
+}>;
+export declare function fetchRemoteStateList(serverUrl: string, token?: string, options?: {
+    package?: string;
+    action?: string;
+    namespace?: string;
+    prefix?: string;
+    allowInsecureHttp?: boolean;
+}): Promise<{
+    ok: boolean;
+    packageId: string;
+    keys: string[];
+}>;
+export declare function getRemoteStateKey(serverUrl: string, key: string, token?: string, options?: {
+    package?: string;
+    action?: string;
+    namespace?: string;
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function setRemoteStateKey(serverUrl: string, key: string, value: unknown, token?: string, options?: {
+    package?: string;
+    action?: string;
+    namespace?: string;
+    ttl?: number;
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function deleteRemoteStateKey(serverUrl: string, key: string, token?: string, options?: {
+    package?: string;
+    action?: string;
+    namespace?: string;
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function clearRemoteState(serverUrl: string, token?: string, options?: {
+    package?: string;
+    action?: string;
+    namespace?: string;
+    prefix?: string;
+    all?: boolean;
+    allowInsecureHttp?: boolean;
+}): Promise<{
+    ok: boolean;
+    packageId: string;
+    clearedCount: number;
+}>;
+export declare function fetchRemoteConfig(serverUrl: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function setRemoteConfig(serverUrl: string, key: string, value: unknown, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function deleteRemoteConfig(serverUrl: string, key: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteConfigEnv(serverUrl: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;

package/dist/profile/client.js

@@ -0,0 +1,467 @@
+import { randomUUID } from "node:crypto";
+import { normalizeServerUrl } from "./manager.js";
+import { ACTION_CANCELLED, NETWORK_ERROR } from "../errors.js";
+import { isLoopbackHost } from "../server/security.js";
+/**
+ * 校验在携带认证 Token 时传输层协议是否安全。
+ * 若请求携带认证 Token 且目标为非本地回环的明文 http://，默认报错拒绝。
+ * 可通过 allowInsecureHttp 选项、ACTIONDOCK_ALLOW_INSECURE_HTTP 环境变量或 --allow-insecure-http 命令行参数豁免。
+ */
+export function assertSecureTransport(serverUrl, token, allowInsecureHttp) {
+    if (!token || !token.trim()) {
+        return;
+    }
+    const allow = allowInsecureHttp === true ||
+        (typeof process !== "undefined" &&
+            (process.env?.ACTIONDOCK_ALLOW_INSECURE_HTTP === "true" ||
+                process.env?.ACTIONDOCK_ALLOW_INSECURE_HTTP === "1" ||
+                process.argv?.includes("--allow-insecure-http")));
+    if (allow) {
+        return;
+    }
+    const base = normalizeServerUrl(serverUrl);
+    if (base.startsWith("http://")) {
+        try {
+            const parsed = new URL(base);
+            if (!isLoopbackHost(parsed.hostname)) {
+                const err = new Error(`Insecure HTTP connection with authentication token to non-loopback host '${parsed.hostname}' is prohibited. Use HTTPS or pass --allow-insecure-http to override.`);
+                err.code = "INSECURE_TRANSPORT";
+                throw err;
+            }
+        }
+        catch (e) {
+            if (e.code === "INSECURE_TRANSPORT") {
+                throw e;
+            }
+        }
+    }
+}
+function buildHeaders(token) {
+    const headers = {
+        Accept: "application/json",
+    };
+    if (token && token.trim()) {
+        headers.Authorization = `Bearer ${token.trim()}`;
+    }
+    return headers;
+}
+/**
+ * 探测指定远端 ActionDock 服务的健康状态与网络延迟。
+ *
+ * @param serverUrl 目标服务端地址
+ * @param token 鉴权 Token（可选）
+ * @param timeoutMs 探测超时时间（默认 5000ms）
+ */
+export async function checkRemoteHealth(serverUrl, token, timeoutMs = 5000, options) {
+    const startTime = Date.now();
+    let timer;
+    try {
+        assertSecureTransport(serverUrl, token, options?.allowInsecureHttp);
+        const base = normalizeServerUrl(serverUrl);
+        const v2Url = `${base}/api/v2/health`;
+        const controller = new AbortController();
+        timer = setTimeout(() => controller.abort(), timeoutMs);
+        let res = await fetch(v2Url, {
+            method: "GET",
+            headers: buildHeaders(token),
+            signal: controller.signal,
+        });
+        if (res.status === 404) {
+            try {
+                const v1Res = await fetch(`${base}/api/v1/health`, {
+                    method: "GET",
+                    headers: buildHeaders(token),
+                    signal: controller.signal,
+                });
+                if (v1Res.ok || v1Res.status !== 404) {
+                    res = v1Res;
+                }
+            }
+            catch { }
+        }
+        const latencyMs = Date.now() - startTime;
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            return {
+                ok: false,
+                latencyMs,
+                error: `Server responded with status ${res.status}: ${text || res.statusText}`,
+            };
+        }
+        const data = (await res.json().catch(() => ({})));
+        return {
+            ok: true,
+            status: data.status || "healthy",
+            version: data.version,
+            uptime: data.uptime,
+            latencyMs,
+        };
+    }
+    catch (err) {
+        const latencyMs = Date.now() - startTime;
+        return {
+            ok: false,
+            latencyMs,
+            error: err.name === "AbortError" ? "Connection timed out" : err.message,
+        };
+    }
+    finally {
+        if (timer !== undefined) {
+            clearTimeout(timer);
+        }
+    }
+}
+export async function executeRemoteAction(serverUrl, actionId, input = {}, configOverridesOrOptions, tokenArg) {
+    // Parse options / backwards compatibility
+    let configOverrides;
+    let token = tokenArg;
+    let timeoutMs;
+    let signal;
+    let isAsync = false;
+    let requestId;
+    let allowInsecureHttp;
+    if (configOverridesOrOptions && typeof configOverridesOrOptions === "object") {
+        if ("token" in configOverridesOrOptions ||
+            "timeoutMs" in configOverridesOrOptions ||
+            "signal" in configOverridesOrOptions ||
+            "async" in configOverridesOrOptions ||
+            "requestId" in configOverridesOrOptions ||
+            "configOverrides" in configOverridesOrOptions ||
+            "allowInsecureHttp" in configOverridesOrOptions) {
+            const opts = configOverridesOrOptions;
+            configOverrides = opts.configOverrides;
+            token = opts.token ?? tokenArg;
+            timeoutMs = opts.timeoutMs;
+            signal = opts.signal;
+            isAsync = Boolean(opts.async);
+            requestId = opts.requestId;
+            allowInsecureHttp = opts.allowInsecureHttp;
+        }
+        else {
+            configOverrides = configOverridesOrOptions;
+        }
+    }
+    assertSecureTransport(serverUrl, token, allowInsecureHttp);
+    const base = normalizeServerUrl(serverUrl);
+    const v2Url = `${base}/api/v2/actions/${encodeURIComponent(actionId)}/run`;
+    const executionPayload = {};
+    if (isAsync) {
+        executionPayload.mode = "async";
+    }
+    if (typeof timeoutMs === "number" && timeoutMs > 0) {
+        executionPayload.timeoutMs = timeoutMs;
+    }
+    if (requestId) {
+        executionPayload.requestId = requestId;
+    }
+    try {
+        const headers = {
+            ...buildHeaders(token),
+            "Content-Type": "application/json",
+        };
+        if (requestId) {
+            headers["Idempotency-Key"] = requestId;
+            headers["x-request-id"] = requestId;
+        }
+        const reqBody = JSON.stringify({
+            input,
+            config: configOverrides,
+            execution: Object.keys(executionPayload).length > 0 ? executionPayload : undefined,
+        });
+        let res = await fetch(v2Url, {
+            method: "POST",
+            headers,
+            body: reqBody,
+            signal,
+        });
+        if (res.status === 404) {
+            try {
+                const v1Res = await fetch(`${base}/api/v1/actions/${encodeURIComponent(actionId)}/run`, {
+                    method: "POST",
+                    headers,
+                    body: reqBody,
+                    signal,
+                });
+                if (v1Res.ok || v1Res.status !== 404) {
+                    res = v1Res;
+                }
+            }
+            catch { }
+        }
+        const data = (await res.json().catch(() => null));
+        if (data && typeof data === "object" && typeof data.ok === "boolean") {
+            return data;
+        }
+        if (!res.ok) {
+            return {
+                ok: false,
+                runId: randomUUID(),
+                error: {
+                    code: res.status === 401 ? "UNAUTHORIZED" : "REMOTE_EXECUTION_FAILED",
+                    message: `Remote server HTTP ${res.status}: ${res.statusText}`,
+                    details: data,
+                },
+            };
+        }
+        return {
+            ok: true,
+            runId: randomUUID(),
+            data,
+        };
+    }
+    catch (err) {
+        if (err.name === "AbortError" || signal?.aborted) {
+            return {
+                ok: false,
+                runId: randomUUID(),
+                error: {
+                    code: ACTION_CANCELLED,
+                    message: "Action execution was cancelled",
+                },
+            };
+        }
+        return {
+            ok: false,
+            runId: randomUUID(),
+            error: {
+                code: NETWORK_ERROR,
+                message: `Failed to connect to remote ActionDock server at ${serverUrl}: ${err.message}`,
+            },
+        };
+    }
+}
+async function fetchRemoteJson(serverUrl, path, token, options = {}) {
+    assertSecureTransport(serverUrl, token, options.allowInsecureHttp);
+    const base = normalizeServerUrl(serverUrl);
+    const normalizedPath = path.startsWith("/") ? path : `/${path}`;
+    const url = `${base}${normalizedPath}`;
+    const method = options.method || "GET";
+    const headers = {
+        ...buildHeaders(token),
+    };
+    if (options.body !== undefined) {
+        headers["Content-Type"] = "application/json";
+    }
+    let res = await fetch(url, {
+        method,
+        headers,
+        body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
+    });
+    if (res.status === 404 && normalizedPath.startsWith("/api/v2/")) {
+        const v1Path = normalizedPath.replace("/api/v2/", "/api/v1/");
+        try {
+            const v1Res = await fetch(`${base}${v1Path}`, {
+                method,
+                headers,
+                body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
+            });
+            if (v1Res.ok || v1Res.status !== 404) {
+                res = v1Res;
+            }
+        }
+        catch { }
+    }
+    const data = (await res.json().catch(() => ({})));
+    if (!res.ok || (options.method === "POST" && data && data.ok === false)) {
+        const errorPrefix = options.errorPrefix || "Remote request failed";
+        const msg = data?.error?.message || `${errorPrefix} (${res.status}): ${res.statusText}`;
+        const err = new Error(msg);
+        if (data?.error?.code) {
+            err.code = data.error.code;
+        }
+        err.status = res.status;
+        err.errorData = data?.error;
+        err.details = data?.error?.details ?? data?.error;
+        throw err;
+    }
+    return data;
+}
+export async function fetchRemoteRun(serverUrl, runId, token, options) {
+    return fetchRemoteJson(serverUrl, `/api/v2/runs/${encodeURIComponent(runId)}`, token, {
+        errorPrefix: `Failed to fetch remote run '${runId}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function cancelRemoteRun(serverUrl, runId, token, reason, options) {
+    return fetchRemoteJson(serverUrl, `/api/v2/runs/${encodeURIComponent(runId)}/cancel`, token, {
+        method: "POST",
+        body: { reason },
+        errorPrefix: `Failed to cancel remote run '${runId}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteActions(serverUrl, token, intent, options) {
+    const query = intent ? `?intent=${encodeURIComponent(intent)}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/actions${query}`, token, {
+        errorPrefix: "Failed to fetch remote actions",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteActionShow(serverUrl, actionId, token, options) {
+    return fetchRemoteJson(serverUrl, `/api/v2/actions/${encodeURIComponent(actionId)}`, token, {
+        errorPrefix: `Failed to fetch remote action '${actionId}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteInfo(serverUrl, token, options) {
+    const params = new URLSearchParams();
+    if (options?.intent)
+        params.set("intent", options.intent);
+    if (options?.package)
+        params.set("package", options.package);
+    if (options?.tree)
+        params.set("tree", "true");
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/info${qs}`, token, {
+        errorPrefix: "Failed to fetch remote info",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteDoctor(serverUrl, token, targetPackage, options) {
+    const query = targetPackage ? `?package=${encodeURIComponent(targetPackage)}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/doctor${query}`, token, {
+        errorPrefix: "Failed to fetch remote doctor report",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemotePlaybooks(serverUrl, token, options) {
+    const params = new URLSearchParams();
+    if (options?.intent)
+        params.set("intent", options.intent);
+    if (options?.package)
+        params.set("package", options.package);
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/playbooks${qs}`, token, {
+        errorPrefix: "Failed to fetch remote playbooks",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemotePlaybookShow(serverUrl, playbookId, token, options) {
+    return fetchRemoteJson(serverUrl, `/api/v2/playbooks/${encodeURIComponent(playbookId)}`, token, {
+        errorPrefix: `Failed to fetch remote playbook '${playbookId}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteRuns(serverUrl, token, options) {
+    const params = new URLSearchParams();
+    if (options?.status)
+        params.set("status", options.status);
+    if (options?.actionId)
+        params.set("actionId", options.actionId);
+    if (options?.packageId)
+        params.set("packageId", options.packageId);
+    if (options?.intent)
+        params.set("intent", options.intent);
+    if (options?.limit)
+        params.set("limit", String(options.limit));
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/runs${qs}`, token, {
+        errorPrefix: "Failed to fetch remote runs",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function clearRemoteRuns(serverUrl, token, options) {
+    return fetchRemoteJson(serverUrl, "/api/v2/runs/clear", token, {
+        method: "POST",
+        body: options || {},
+        errorPrefix: "Failed to clear remote runs",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteStateList(serverUrl, token, options) {
+    const params = new URLSearchParams();
+    if (options?.package)
+        params.set("package", options.package);
+    if (options?.action)
+        params.set("action", options.action);
+    if (options?.namespace !== undefined)
+        params.set("namespace", options.namespace);
+    if (options?.prefix)
+        params.set("prefix", options.prefix);
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/state${qs}`, token, {
+        errorPrefix: "Failed to list remote state keys",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function getRemoteStateKey(serverUrl, key, token, options) {
+    const params = new URLSearchParams();
+    if (options?.package)
+        params.set("package", options.package);
+    if (options?.action)
+        params.set("action", options.action);
+    if (options?.namespace !== undefined)
+        params.set("namespace", options.namespace);
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/state/${encodeURIComponent(key)}${qs}`, token, {
+        errorPrefix: `Failed to fetch remote state key '${key}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function setRemoteStateKey(serverUrl, key, value, token, options) {
+    return fetchRemoteJson(serverUrl, `/api/v2/state/${encodeURIComponent(key)}`, token, {
+        method: "PUT",
+        body: {
+            value,
+            package: options?.package,
+            action: options?.action,
+            namespace: options?.namespace,
+            ttl: options?.ttl,
+        },
+        errorPrefix: `Failed to set remote state key '${key}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function deleteRemoteStateKey(serverUrl, key, token, options) {
+    const params = new URLSearchParams();
+    if (options?.package)
+        params.set("package", options.package);
+    if (options?.action)
+        params.set("action", options.action);
+    if (options?.namespace !== undefined)
+        params.set("namespace", options.namespace);
+    const qs = params.toString() ? `?${params.toString()}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/state/${encodeURIComponent(key)}${qs}`, token, {
+        method: "DELETE",
+        errorPrefix: `Failed to delete remote state key '${key}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function clearRemoteState(serverUrl, token, options) {
+    return fetchRemoteJson(serverUrl, "/api/v2/state/clear", token, {
+        method: "POST",
+        body: options || {},
+        errorPrefix: "Failed to clear remote state",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteConfig(serverUrl, token, packageId, options) {
+    const query = packageId ? `?package=${encodeURIComponent(packageId)}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/config${query}`, token, {
+        errorPrefix: "Failed to fetch remote config",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function setRemoteConfig(serverUrl, key, value, token, packageId, options) {
+    return fetchRemoteJson(serverUrl, "/api/v2/config", token, {
+        method: "PUT",
+        body: { key, value, package: packageId },
+        errorPrefix: `Failed to set remote config '${key}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function deleteRemoteConfig(serverUrl, key, token, packageId, options) {
+    const query = packageId ? `?package=${encodeURIComponent(packageId)}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/config/${encodeURIComponent(key)}${query}`, token, {
+        method: "DELETE",
+        errorPrefix: `Failed to delete remote config '${key}'`,
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}
+export async function fetchRemoteConfigEnv(serverUrl, token, packageId, options) {
+    const query = packageId ? `?package=${encodeURIComponent(packageId)}` : "";
+    return fetchRemoteJson(serverUrl, `/api/v2/config/env${query}`, token, {
+        errorPrefix: "Failed to fetch remote config env checks",
+        allowInsecureHttp: options?.allowInsecureHttp,
+    });
+}

package/dist/profile/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./types.js";
+export * from "./manager.js";
+export * from "./client.js";

package/dist/profile/index.js

@@ -0,0 +1,3 @@
+export * from "./types.js";
+export * from "./manager.js";
+export * from "./client.js";

package/dist/profile/manager.d.ts

@@ -0,0 +1,47 @@
+import type { ProfileEntry, ProfilesConfig, ResolvedTarget, TokenResolutionSource } from "./types.js";
+/**
+ * 默认初始 Profiles 配置（预设 local 本地环境）。
+ */
+export declare const DEFAULT_PROFILES_CONFIG: ProfilesConfig;
+/**
+ * 格式化并规范化 Server URL 地址（若未指定协议，本地回环地址默认使用 http://，非本地回环地址默认使用 https://，并移除末尾斜杠）。
+ */
+export declare function normalizeServerUrl(url: string): string;
+/**
+ * 获取 profiles.json 配置文件的物理绝对路径（~/.actiondock/profiles.json）。
+ */
+export declare function getProfilesFilePath(customHome?: string): string;
+/**
+ * 加载并读取 profiles.json 配置文件。
+ */
+export declare function loadProfiles(customHome?: string): ProfilesConfig;
+/**
+ * 保存并写入 profiles.json 配置文件，并严格限制文件权限为 0600。
+ */
+export declare function saveProfiles(data: ProfilesConfig, customHome?: string): void;
+export declare function addProfile(name: string, entry: ProfileEntry, customHome?: string): void;
+export declare function removeProfile(name: string, customHome?: string): boolean;
+export declare function useProfile(name: string, customHome?: string): void;
+export declare function getProfile(name: string, customHome?: string): ProfileEntry | undefined;
+export declare function listProfiles(customHome?: string): Array<{
+    name: string;
+    isCurrent: boolean;
+    entry: ProfileEntry;
+}>;
+/**
+ * Resolves token following multi-tier precedence:
+ * 1. CLI explicit --token
+ * 2. profile.tokenEnv specified environment variable
+ * 3. Derived profile environment variable: ACTIONDOCK_<PROFILE>_TOKEN or <PROFILE>_TOKEN
+ * 4. Stored token in profiles.json (deprecated)
+ * 5. Global ACTIONDOCK_TOKEN
+ */
+export declare function resolveProfileToken(profileName?: string, entry?: ProfileEntry, explicitToken?: string): {
+    token?: string;
+    source: TokenResolutionSource;
+};
+export declare function resolveTarget(options?: {
+    profile?: string;
+    server?: string;
+    token?: string;
+}, customHome?: string): ResolvedTarget;