@actiondock/core 2.0.12 → 2.2.1

package/dist/ipc/types.d.ts

@@ -0,0 +1,42 @@
+/**
+ * 监督进程与宿主子进程间调用的 IPC 请求消息。
+ */
+export interface IpcCallMessage {
+    id: string;
+    type: "call";
+    method: string;
+    args: unknown[];
+}
+/**
+ * 宿主子进程回复给监督进程的 IPC 响应消息。
+ */
+export interface IpcResponseMessage {
+    id: string;
+    type: "response";
+    ok: boolean;
+    data?: unknown;
+    error?: {
+        code?: string;
+        message: string;
+        stack?: string;
+        details?: unknown;
+    };
+}
+/**
+ * 宿主子进程向监督进程流式推送的执行事件。
+ */
+export interface IpcEventMessage {
+    type: "event";
+    runId: string;
+    event: unknown;
+}
+/**
+ * 宿主子进程初始化就绪通知。
+ */
+export interface IpcReadyMessage {
+    type: "ready";
+}
+/**
+ * 联合 IPC 消息类型。
+ */
+export type IpcMessage = IpcCallMessage | IpcResponseMessage | IpcEventMessage | IpcReadyMessage;

package/dist/ipc/types.js

@@ -0,0 +1 @@
+export {};

package/dist/platform/default.d.ts

@@ -0,0 +1,32 @@
+import type { ProcessAPI } from "@actiondock/sdk";
+import { type Clock } from "../runtime/clock.js";
+import { type ModuleLoader } from "../runtime/module-loader.js";
+import type { FileSystem, RuntimePlatform, StorageFactory } from "./types.js";
+/**
+ * 默认运行时平台构建选项。
+ */
+export interface DefaultPlatformOptions {
+    /** 平台名称覆盖（默认使用 node） */
+    name?: "node" | "test";
+    /** 自定义文件系统实现（默认使用 NodeFileSystem） */
+    files?: FileSystem;
+    /** 自定义时间与时钟驱动（默认使用 SystemClock） */
+    clock?: Clock;
+    /** 自定义进程执行驱动（默认使用 DefaultProcessExecutor） */
+    process?: ProcessAPI;
+    /** 自定义源码加载驱动（默认使用 DefaultModuleLoader） */
+    modules?: ModuleLoader;
+    /** 自定义存储工厂（默认基于 core/storage 构造） */
+    storage?: StorageFactory;
+    /** 自定义 ActionDock 家目录 */
+    customHome?: string;
+    /** 自定义全局数据存储目录 */
+    dataDir?: string;
+    /** 文件系统沙箱根目录 */
+    rootDir?: string;
+}
+/**
+ * 创建默认 RuntimePlatform 平台实例。
+ * 直接基于 Node 原生与 Core 内核能力组装平台，禁止任何全局单例状态。
+ */
+export declare function createDefaultPlatform(options?: DefaultPlatformOptions): RuntimePlatform;

package/dist/platform/default.js

@@ -0,0 +1,40 @@
+import { SystemClock } from "../runtime/clock.js";
+import { DefaultModuleLoader } from "../runtime/module-loader.js";
+import { DefaultProcessExecutor } from "../runtime/process.js";
+import { createGlobalStorage as coreCreateGlobalStorage, createStorage as coreCreateStorage, } from "../storage/index.js";
+import { NodeFileSystem } from "./node-fs.js";
+/**
+ * 创建默认 RuntimePlatform 平台实例。
+ * 直接基于 Node 原生与 Core 内核能力组装平台，禁止任何全局单例状态。
+ */
+export function createDefaultPlatform(options = {}) {
+    const platformName = options.name ?? "node";
+    const clock = options.clock ?? new SystemClock();
+    const files = options.files ?? new NodeFileSystem({ rootDir: options.rootDir });
+    const modules = options.modules ?? new DefaultModuleLoader();
+    const process = options.process ?? new DefaultProcessExecutor();
+    const storage = options.storage ?? {
+        createStorage(packageId, opts) {
+            return coreCreateStorage(packageId, {
+                customHome: options.customHome,
+                dataDir: options.dataDir,
+                ...opts,
+            });
+        },
+        createGlobalStorage(opts) {
+            return coreCreateGlobalStorage({
+                customHome: options.customHome,
+                dataDir: options.dataDir,
+                ...opts,
+            });
+        },
+    };
+    return {
+        name: platformName,
+        clock,
+        files,
+        modules,
+        process,
+        storage,
+    };
+}

package/dist/platform/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./types.js";
+export * from "./node-fs.js";
+export * from "./default.js";

package/dist/platform/index.js

@@ -0,0 +1,3 @@
+export * from "./types.js";
+export * from "./node-fs.js";
+export * from "./default.js";

package/dist/platform/node-fs.d.ts

@@ -0,0 +1,37 @@
+import type { FileStat, FileSystem } from "./types.js";
+/**
+ * NodeFileSystem 配置选项。
+ */
+export interface NodeFileSystemOptions {
+    /**
+     * 安全沙箱根路径。
+     * 若指定，则所有文件系统操作将被强制约束在 rootDir 边界内，防止路径遍历逃逸。
+     */
+    rootDir?: string;
+}
+/**
+ * 基于 node:fs 和 node:path 的安全受限文件系统实现。
+ */
+export declare class NodeFileSystem implements FileSystem {
+    private readonly rootDir?;
+    constructor(options?: NodeFileSystemOptions);
+    /**
+     * 安全解析并校验路径边界。
+     */
+    private resolvePath;
+    readFile(path: string, encoding?: string): Promise<string>;
+    writeFile(path: string, content: string | Uint8Array): Promise<void>;
+    readdir(dir: string): Promise<string[]>;
+    stat(path: string): Promise<FileStat>;
+    exists(path: string): Promise<boolean>;
+    mkdir(dir: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    rm(path: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void>;
+    copy(src: string, dest: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+}

package/dist/platform/node-fs.js

@@ -0,0 +1,81 @@
+import { promises as fs } from "node:fs";
+import { dirname, isAbsolute, resolve } from "node:path";
+import { assertPathWithinRoot } from "../utils/index.js";
+/**
+ * 基于 node:fs 和 node:path 的安全受限文件系统实现。
+ */
+export class NodeFileSystem {
+    rootDir;
+    constructor(options = {}) {
+        if (options.rootDir) {
+            this.rootDir = resolve(options.rootDir);
+        }
+    }
+    /**
+     * 安全解析并校验路径边界。
+     */
+    resolvePath(targetPath) {
+        if (typeof targetPath !== "string" || targetPath.includes("\0")) {
+            throw new Error("Invalid path: contains null byte or non-string argument");
+        }
+        if (this.rootDir) {
+            const resolved = isAbsolute(targetPath)
+                ? resolve(targetPath)
+                : resolve(this.rootDir, targetPath);
+            assertPathWithinRoot(this.rootDir, resolved);
+            return resolved;
+        }
+        return resolve(targetPath);
+    }
+    async readFile(path, encoding = "utf-8") {
+        const resolved = this.resolvePath(path);
+        return await fs.readFile(resolved, { encoding: (encoding || "utf-8") });
+    }
+    async writeFile(path, content) {
+        const resolved = this.resolvePath(path);
+        const parentDir = dirname(resolved);
+        await fs.mkdir(parentDir, { recursive: true });
+        await fs.writeFile(resolved, content);
+    }
+    async readdir(dir) {
+        const resolved = this.resolvePath(dir);
+        return await fs.readdir(resolved);
+    }
+    async stat(path) {
+        const resolved = this.resolvePath(path);
+        const s = await fs.stat(resolved);
+        return {
+            isDirectory: () => s.isDirectory(),
+            isFile: () => s.isFile(),
+            size: s.size,
+        };
+    }
+    async exists(path) {
+        try {
+            const resolved = this.resolvePath(path);
+            await fs.access(resolved);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async mkdir(dir, options) {
+        const resolved = this.resolvePath(dir);
+        await fs.mkdir(resolved, { recursive: options?.recursive ?? true });
+    }
+    async rm(path, options) {
+        const resolved = this.resolvePath(path);
+        await fs.rm(resolved, {
+            recursive: options?.recursive ?? true,
+            force: options?.force ?? true,
+        });
+    }
+    async copy(src, dest, options) {
+        const resolvedSrc = this.resolvePath(src);
+        const resolvedDest = this.resolvePath(dest);
+        const parentDir = dirname(resolvedDest);
+        await fs.mkdir(parentDir, { recursive: true });
+        await fs.cp(resolvedSrc, resolvedDest, { recursive: options?.recursive ?? true });
+    }
+}

package/dist/platform/types.d.ts

@@ -0,0 +1,104 @@
+import type { ProcessAPI } from "@actiondock/sdk";
+import type { Clock } from "../runtime/clock.js";
+import type { ModuleLoader } from "../runtime/module-loader.js";
+import type { RuntimeStorage } from "../storage/types.js";
+/**
+ * 文件元数据信息契约。
+ */
+export interface FileStat {
+    /** 是否为目录 */
+    isDirectory(): boolean;
+    /** 是否为普通文件 */
+    isFile(): boolean;
+    /** 文件字节大小 */
+    size: number;
+}
+/**
+ * 跨运行时统一文件系统抽象契约。
+ */
+export interface FileSystem {
+    /** 读取文件内容 */
+    readFile(path: string, encoding?: string): Promise<string> | string;
+    /** 写入文件内容 */
+    writeFile(path: string, content: string | Uint8Array): Promise<void> | void;
+    /** 读取目录下的所有条目名称 */
+    readdir(dir: string): Promise<string[]> | string[];
+    /** 获取路径对应条目的元数据状态 */
+    stat(path: string): Promise<{
+        isDirectory(): boolean;
+        isFile(): boolean;
+        size: number;
+    }>;
+    /** 检查路径是否存在 */
+    exists(path: string): Promise<boolean> | boolean;
+    /** 创建目录 */
+    mkdir(dir: string, options?: {
+        recursive?: boolean;
+    }): Promise<void> | void;
+    /** 删除文件或目录 */
+    rm(path: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void> | void;
+    /** 拷贝文件或目录 */
+    copy(src: string, dest: string, options?: {
+        recursive?: boolean;
+    }): Promise<void> | void;
+}
+/**
+ * 跨运行时持久化存储工厂配置选项。
+ */
+export interface StorageFactoryOptions {
+    projectRoot?: string;
+    dataDir?: string;
+    inMemory?: boolean;
+    customHome?: string;
+}
+/**
+ * 跨运行时全局存储工厂配置选项。
+ */
+export interface GlobalStorageFactoryOptions {
+    dataDir?: string;
+    inMemory?: boolean;
+    customHome?: string;
+}
+/**
+ * 跨运行时持久化存储工厂契约。
+ */
+export interface StorageFactory {
+    /**
+     * 为指定 Package 创建或连接运行时存储。
+     */
+    createStorage(packageId: string, options?: StorageFactoryOptions): RuntimeStorage;
+    /**
+     * 创建或连接跨 Package 共享的全局存储。
+     */
+    createGlobalStorage(options?: GlobalStorageFactoryOptions): RuntimeStorage;
+}
+/**
+ * 跨运行时 HTTP 服务启动工厂契约。
+ */
+export interface HttpServerFactory {
+    /**
+     * 启动 HTTP 服务端实例。
+     */
+    launchHttpServer(options: any): Promise<any>;
+}
+/**
+ * 运行时底层环境核心标准契约。
+ * 提供统一的运行时契约，屏蔽宿主平台与测试沙箱环境的实现差异。
+ */
+export interface RuntimePlatform {
+    /** 运行时平台名称标识 */
+    readonly name: "node" | "test";
+    /** 统一时间与时钟驱动 */
+    readonly clock: Clock;
+    /** 统一文件系统操作驱动 */
+    readonly files: FileSystem;
+    /** 动态源码模块加载驱动 */
+    readonly modules: ModuleLoader;
+    /** 子进程衍生与执行驱动 */
+    readonly process: ProcessAPI;
+    /** 持久化数据库存储驱动工厂 */
+    readonly storage: StorageFactory;
+}

package/dist/platform/types.js

@@ -0,0 +1 @@
+export {};

package/dist/profile/client.d.ts

@@ -1,5 +1,11 @@
 import type { ExecutionResult, RunRecord } from "@actiondock/sdk";
-import type { RemoteHealthResult } from "./types";
+import type { RemoteHealthResult } from "./types.js";
+/**
+ * 校验在携带认证 Token 时传输层协议是否安全。
+ * 若请求携带认证 Token 且目标为非本地回环的明文 http://，默认报错拒绝。
+ * 可通过 allowInsecureHttp 选项、ACTIONDOCK_ALLOW_INSECURE_HTTP 环境变量或 --allow-insecure-http 命令行参数豁免。
+ */
+export declare function assertSecureTransport(serverUrl: string, token?: string, allowInsecureHttp?: boolean): void;
 /**
  * 调用远端 ActionDock 服务端执行 Action 时的选项参数。
  */
@@ -12,8 +18,12 @@ export interface RemoteExecuteOptions {
     timeoutMs?: number;
     /** 中断信号 */
     signal?: AbortSignal;
+    /** 幂等请求去重标识 */
+    requestId?: string;
     /** 是否异步触发（202 Accepted 立即返回 runId） */
     async?: boolean;
+    /** 是否允许通过非回环明文 HTTP 发送认证 Token */
+    allowInsecureHttp?: boolean;
 }
 /**
  * 远端 Action 执行结果信封对象。
@@ -28,29 +38,43 @@ export type RemoteExecutionResult<T = unknown> = ExecutionResult<T> & {
  * @param token 鉴权 Token（可选）
  * @param timeoutMs 探测超时时间（默认 5000ms）
  */
-export declare function checkRemoteHealth(serverUrl: string, token?: string, timeoutMs?: number): Promise<RemoteHealthResult>;
+export declare function checkRemoteHealth(serverUrl: string, token?: string, timeoutMs?: number, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<RemoteHealthResult>;
 export declare function executeRemoteAction<T = unknown>(serverUrl: string, actionId: string, input?: unknown, configOverridesOrOptions?: Record<string, unknown> | RemoteExecuteOptions, tokenArg?: string): Promise<RemoteExecutionResult<T>>;
-export declare function fetchRemoteRun(serverUrl: string, runId: string, token?: string): Promise<RunRecord>;
-export declare function cancelRemoteRun(serverUrl: string, runId: string, token?: string, reason?: string): Promise<{
+export declare function fetchRemoteRun(serverUrl: string, runId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<RunRecord>;
+export declare function cancelRemoteRun(serverUrl: string, runId: string, token?: string, reason?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<{
     ok: boolean;
     runId: string;
     status: string;
 }>;
-export declare function fetchRemoteActions(serverUrl: string, token?: string, intent?: string): Promise<Array<{
+export declare function fetchRemoteActions(serverUrl: string, token?: string, intent?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<Array<{
     id: string;
     description: string;
     packageId?: string;
 }>>;
-export declare function fetchRemoteActionShow(serverUrl: string, actionId: string, token?: string): Promise<any>;
+export declare function fetchRemoteActionShow(serverUrl: string, actionId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
 export declare function fetchRemoteInfo(serverUrl: string, token?: string, options?: {
     intent?: string;
     package?: string;
     tree?: boolean;
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteDoctor(serverUrl: string, token?: string, targetPackage?: string, options?: {
+    allowInsecureHttp?: boolean;
 }): Promise<any>;
-export declare function fetchRemoteDoctor(serverUrl: string, token?: string, targetPackage?: string): Promise<any>;
 export declare function fetchRemotePlaybooks(serverUrl: string, token?: string, options?: {
     intent?: string;
     package?: string;
+    allowInsecureHttp?: boolean;
 }): Promise<Array<{
     id: string;
     description: string;
@@ -58,13 +82,16 @@ export declare function fetchRemotePlaybooks(serverUrl: string, token?: string,
     packageId: string;
     filePath: string;
 }>>;
-export declare function fetchRemotePlaybookShow(serverUrl: string, playbookId: string, token?: string): Promise<any>;
+export declare function fetchRemotePlaybookShow(serverUrl: string, playbookId: string, token?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
 export declare function fetchRemoteRuns(serverUrl: string, token?: string, options?: {
     status?: string;
     actionId?: string;
     packageId?: string;
     intent?: string;
     limit?: number;
+    allowInsecureHttp?: boolean;
 }): Promise<{
     ok: boolean;
     total: number;
@@ -74,14 +101,17 @@ export declare function clearRemoteRuns(serverUrl: string, token?: string, optio
     packageId?: string;
     actionId?: string;
     status?: string;
+    allowInsecureHttp?: boolean;
 }): Promise<{
     ok: boolean;
     clearedCount: number;
 }>;
 export declare function fetchRemoteStateList(serverUrl: string, token?: string, options?: {
     package?: string;
+    action?: string;
     namespace?: string;
     prefix?: string;
+    allowInsecureHttp?: boolean;
 }): Promise<{
     ok: boolean;
     packageId: string;
@@ -89,28 +119,44 @@ export declare function fetchRemoteStateList(serverUrl: string, token?: string,
 }>;
 export declare function getRemoteStateKey(serverUrl: string, key: string, token?: string, options?: {
     package?: string;
+    action?: string;
     namespace?: string;
+    allowInsecureHttp?: boolean;
 }): Promise<any>;
 export declare function setRemoteStateKey(serverUrl: string, key: string, value: unknown, token?: string, options?: {
     package?: string;
+    action?: string;
     namespace?: string;
     ttl?: number;
+    allowInsecureHttp?: boolean;
 }): Promise<any>;
 export declare function deleteRemoteStateKey(serverUrl: string, key: string, token?: string, options?: {
     package?: string;
+    action?: string;
     namespace?: string;
+    allowInsecureHttp?: boolean;
 }): Promise<any>;
 export declare function clearRemoteState(serverUrl: string, token?: string, options?: {
     package?: string;
+    action?: string;
     namespace?: string;
     prefix?: string;
     all?: boolean;
+    allowInsecureHttp?: boolean;
 }): Promise<{
     ok: boolean;
     packageId: string;
     clearedCount: number;
 }>;
-export declare function fetchRemoteConfig(serverUrl: string, token?: string, packageId?: string): Promise<any>;
-export declare function setRemoteConfig(serverUrl: string, key: string, value: unknown, token?: string, packageId?: string): Promise<any>;
-export declare function deleteRemoteConfig(serverUrl: string, key: string, token?: string, packageId?: string): Promise<any>;
-export declare function fetchRemoteConfigEnv(serverUrl: string, token?: string, packageId?: string): Promise<any>;
+export declare function fetchRemoteConfig(serverUrl: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function setRemoteConfig(serverUrl: string, key: string, value: unknown, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function deleteRemoteConfig(serverUrl: string, key: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;
+export declare function fetchRemoteConfigEnv(serverUrl: string, token?: string, packageId?: string, options?: {
+    allowInsecureHttp?: boolean;
+}): Promise<any>;