@actiondock/core 2.16.0 → 2.17.0

package/dist/execution/service.js

@@ -7,6 +7,7 @@ import { InMemoryEventSink } from "../runtime/events.js";
 import { ActionDockError, ACTION_CANCELLED, ACTION_FAILED, ACTION_NOT_FOUND, ACTION_TIMEOUT, EXECUTION_CONCURRENCY_LIMIT, EXECUTION_FAILED, IDEMPOTENCY_CONFLICT, INPUT_NOT_JSON, INPUT_VALIDATION_FAILED, INVALID_ARGUMENT, INVOCATION_UNSUPPORTED, OUTPUT_NOT_JSON, OUTPUT_VALIDATION_FAILED, RUN_REPOSITORY_UNAVAILABLE, SERVICE_CLOSED, UNHANDLED_EXECUTION_ERROR, describeActionLoadFailure, } from "../errors.js";
 import { resultStatusToRunStatus } from "../storage/types.js";
 import { createDefaultProcessOwner, } from "../invocation/types.js";
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 import { ActionRegistry, isActionDefinitionObject, resolveAnonymousActionId, } from "../runtime/action-registry.js";
 import { buildInitialRunRecord, createRunFinalizer, createRunOrThrow, tryCreateRun, } from "../runtime/run-persistence.js";
 import { createActionContext } from "../runtime/context.js";
@@ -432,6 +433,7 @@ export class DefaultExecutionService {
             process: opts.process || this.process,
             owner: opts.owner,
             requestId: opts.requestId,
+            origin: snapshotRunOrigin(opts.origin),
         };
     }
     async raceExecution(args) {
@@ -548,6 +550,7 @@ export class DefaultExecutionService {
             progress: context.progress,
             process: effectiveProcess,
             owner: effectiveOwner,
+            origin: context.origin,
         };
         return await invoker(childAction, childInput, invocationContext);
     }
@@ -712,8 +715,10 @@ export class DefaultExecutionService {
             message: `Action '${targetActionId}' not found in package '${targetPackageId}'`,
         };
         const rootRunId = context.rootRunId || context.parentRunId || runId;
+        const origin = snapshotRunOrigin(context.origin);
         const initialRun = {
             id: runId,
+            ...(origin !== undefined ? { origin } : {}),
             rootRunId,
             parentRunId: context.parentRunId,
             packageId: targetPackageId,
@@ -777,6 +782,7 @@ export class DefaultExecutionService {
             runId,
             rootRunId,
             parentRunId: context.parentRunId,
+            origin: context.origin,
             ownerId: context.principalId || context.tenantId || this.ownerId,
             hostSessionId: context.hostSessionId || this.hostSessionId,
             hostPid: this.hostPid,

package/dist/host/host.js

@@ -7,6 +7,7 @@ import { findProjectRoot, loadProjectConfig } from "../project/loader.js";
 import { hasPendingTransactions, isProjectLockHeld, recoverPendingTransactions } from "../project/transactions.js";
 import { listLinkedPackages } from "../registry/registry.js";
 import { InMemoryEventSink } from "../runtime/events.js";
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 import { ActionDockError, ACTION_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_SUBRUN_LIMIT, EXECUTION_FAILED, INVALID_ACTION_REF, PACKAGE_ID_CONFLICT, PACKAGE_NOT_FOUND, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, SERVICE_CLOSED, UNDECLARED_ACTION_DEPENDENCY, } from "../errors.js";
 import { InvocationPolicy } from "../invocation/policy.js";
 import { createAbortError } from "../ipc/service.js";
@@ -135,6 +136,7 @@ export class DefaultActionDockHost {
         };
         this.execution = {
             async run(ref, input, opts) {
+                const origin = snapshotRunOrigin(opts?.origin);
                 await self.ensureInitialized();
                 const actionRef = typeof ref === "string" ? parseActionRef(ref) : ref;
                 const cleanOpts = {
@@ -142,10 +144,12 @@ export class DefaultActionDockHost {
                     timeoutMs: opts?.timeoutMs,
                     config: opts?.config,
                     requestId: opts?.requestId,
+                    origin,
                 };
                 return self.runAction(actionRef, (input ?? {}), cleanOpts);
             },
             async start(ref, input, opts) {
+                const origin = snapshotRunOrigin(opts?.origin);
                 await self.ensureInitialized();
                 const actionRef = typeof ref === "string" ? parseActionRef(ref) : ref;
                 const cleanOpts = {
@@ -153,6 +157,7 @@ export class DefaultActionDockHost {
                     timeoutMs: opts?.timeoutMs,
                     config: opts?.config,
                     requestId: opts?.requestId,
+                    origin,
                 };
                 return self.startAction(actionRef, (input ?? {}), cleanOpts);
             },
@@ -634,6 +639,7 @@ export class DefaultActionDockHost {
                     progress: context.progress,
                     process: context.process,
                     owner: targetOwner,
+                    origin: context.origin,
                 };
                 const ticket = await targetRuntime.startInvocation(targetActionId, childInput, subInvocationContext);
                 if (!ticket.result) {
@@ -752,14 +758,18 @@ export class DefaultActionDockHost {
         return describeVisiblePlaybook(this.listRuntimes(), id, this.visibility());
     }
     async runAction(ref, input, options = {}) {
+        const origin = snapshotRunOrigin(options.origin);
+        const effectiveOptions = { ...options, origin };
         await this.ensureInitialized();
-        const ticket = await this.startAction(ref, input, options);
+        const ticket = await this.startAction(ref, input, effectiveOptions);
         if (!ticket.result) {
             throw new ActionDockError(EXECUTION_FAILED, `Execution ticket for run '${ticket.runId}' has no result Promise`);
         }
         return ticket.result;
     }
     async startAction(ref, input, options = {}) {
+        const origin = snapshotRunOrigin(options.origin);
+        const effectiveOptions = { ...options, origin };
         await this.ensureInitialized();
         if (this.isClosed) {
             throw new ActionDockError(SERVICE_CLOSED, "ActionDockHost is closed: new tasks rejected");
@@ -837,13 +847,14 @@ export class DefaultActionDockHost {
         const rootContext = createRootInvocationContext({
             targetPackage: targetRuntime.identity,
             callStack: [rootKey],
-            signal: options.signal,
-            timeoutMs: options.timeoutMs,
-            config: options.config,
-            requestId: options.requestId,
+            signal: effectiveOptions.signal,
+            timeoutMs: effectiveOptions.timeoutMs,
+            config: effectiveOptions.config,
+            requestId: effectiveOptions.requestId,
             hostSessionId: this.hostSessionId,
             maxCallDepth: this.maxCallDepth,
             process: this.options.process,
+            origin: effectiveOptions.origin,
         });
         // 调度目标包执行服务
         return targetRuntime.startInvocation(targetActionId, input, rootContext);

package/dist/index.d.ts

@@ -14,7 +14,7 @@ export type { TerminalRunStatus } from "./storage/types.js";
 export { parseDuration } from "./utils/index.js";
 export { toSnakeUpperCase, resolveEnvValue } from "./runtime/env.js";
 export type { ResolvedEnv } from "./runtime/env.js";
-export type { ActionRef, ResolvedActionRef, ExecutionResult, RunRecord, ExecutionEvent, } from "@actiondock/sdk";
+export type { ActionRef, ResolvedActionRef, ExecutionResult, RunRecord, RunOrigin, ExecutionEvent, } from "@actiondock/sdk";
 export type { RunOptions, ExecutionTicket, CancelResult, } from "./execution/types.js";
 export type { ActionSpec, ActionSummary, PlaybookSpec, PlaybookSummary, PackageInfo, ListActionsOptions, } from "./package/types.js";
 export { createNodePlatform, } from "./platform/node.js";

package/dist/invocation/types.d.ts

@@ -1,4 +1,4 @@
-import type { ActionDefinition, ActionRef, Logger, ProcessAPI, ProgressReporter } from "@actiondock/sdk";
+import type { ActionDefinition, ActionRef, Logger, ProcessAPI, ProgressReporter, RunOrigin } from "@actiondock/sdk";
 import type { ProcessOwner } from "../process/index.js";
 import { createPackageIdentity, type PackageIdentity } from "../runtime/identity.js";
 export { createPackageIdentity };
@@ -75,6 +75,8 @@ export interface InvocationContext {
     readonly process?: ProcessAPI;
     /** 进程属主身份 */
     readonly owner?: ProcessOwner;
+    /** 运行来源追踪快照 */
+    readonly origin?: RunOrigin;
 }
 /**
  * 内部调用上下文选项契约。
@@ -121,6 +123,8 @@ export interface CreateRootInvocationContextOptions {
     progress?: ProgressReporter;
     /** 显式执行归属所有者契约 */
     owner?: ProcessOwner;
+    /** 运行来源追踪快照 */
+    origin?: RunOrigin;
 }
 /**
  * 构造合法的受信任根调用上下文（Root InvocationContext）。

package/dist/invocation/types.js

@@ -1,4 +1,5 @@
 import { createPackageIdentity } from "../runtime/identity.js";
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 export { createPackageIdentity };
 /**
  * 构造默认进程归属所有者（ProcessOwner）的单一事实源工厂。
@@ -23,6 +24,7 @@ export function createInvocationContext(options) {
     const runId = options.runId ?? crypto.randomUUID();
     const rootRunId = options.rootRunId ?? runId;
     const pkg = options.package;
+    const origin = snapshotRunOrigin(options.origin);
     return {
         runId,
         rootRunId,
@@ -41,6 +43,7 @@ export function createInvocationContext(options) {
         logger: options.logger,
         progress: options.progress,
         process: options.process,
+        origin,
         owner: options.owner ??
             createDefaultProcessOwner({
                 tenantId: options.tenantId,
@@ -75,6 +78,7 @@ export function createRootInvocationContext(options) {
         owner: options.owner,
         tenantId: options.tenantId,
         principalId: options.principalId,
+        origin: options.origin,
     });
     return {
         runId: base.runId,
@@ -93,5 +97,6 @@ export function createRootInvocationContext(options) {
         progress: base.progress,
         process: base.process,
         owner: base.owner,
+        origin: base.origin,
     };
 }

package/dist/package/runtime.js

@@ -11,6 +11,7 @@ import { createPackageIdentity } from "../runtime/identity.js";
 import { ACTION_NOT_FOUND, ActionDockError, CAPABILITY_UNAVAILABLE, INVALID_ARGUMENT, INVOCATION_UNSUPPORTED, NOT_FOUND, SERVICE_CLOSED, } from "../errors.js";
 import { createAbortError } from "../ipc/service.js";
 import { createRootInvocationContext } from "../invocation/types.js";
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 import { buildStaticActionMap, buildStaticPlaybookMap } from "./static-index.js";
 import { applyActionSummaryFilters } from "./types.js";
 function normalizeStateReadArgs(arg1, arg2, arg3) {
@@ -550,9 +551,12 @@ export class DefaultPackageRuntime {
             maxCallDepth: this.options.maxCallDepth,
             logger: this.options.logger,
             process: this.options.process ?? this.platform.process,
+            origin: options?.origin,
         });
     }
     async runAction(id, input, options) {
+        const origin = snapshotRunOrigin(options?.origin);
+        const effectiveOptions = { ...options, origin };
         const service = await this.prepareExecution();
         let actionId = id;
         if (actionId.includes("/")) {
@@ -563,10 +567,12 @@ export class DefaultPackageRuntime {
                 throw new ActionDockError(INVOCATION_UNSUPPORTED, `PackageRuntime only accepts local action short ID '${id}'. Cross-package invocations must be dispatched via Host invoker.`);
             }
         }
-        const context = this.buildRootInvocationContext(actionId, options);
+        const context = this.buildRootInvocationContext(actionId, effectiveOptions);
         return service.execute(actionId, input, context);
     }
     async startAction(id, input, options) {
+        const origin = snapshotRunOrigin(options?.origin);
+        const effectiveOptions = { ...options, origin };
         const service = await this.prepareExecution();
         let actionId = id;
         if (actionId.includes("/")) {
@@ -577,7 +583,7 @@ export class DefaultPackageRuntime {
                 throw new ActionDockError(INVOCATION_UNSUPPORTED, `PackageRuntime only accepts local action short ID '${id}'. Cross-package invocations must be dispatched via Host invoker.`);
             }
         }
-        const context = this.buildRootInvocationContext(actionId, options);
+        const context = this.buildRootInvocationContext(actionId, effectiveOptions);
         return service.start(actionId, input, context);
     }
     async startInvocation(actionId, input, context) {

package/dist/project/init.js

@@ -86,10 +86,10 @@ export function initProject(targetDir, options = {}) {
             node: ">=24.12.0",
         },
         dependencies: {
-            "@actiondock/sdk": "^2.16.0",
+            "@actiondock/sdk": "^2.17.0",
         },
         devDependencies: {
-            "@actiondock/testing": "^2.16.0",
+            "@actiondock/testing": "^2.17.0",
             "@types/node": "^22.13.0",
             "tsx": "^4.19.0",
             "typescript": "^5.7.0",

package/dist/runtime/index.d.ts

@@ -6,3 +6,4 @@ export * from "./run-persistence.js";
 export * from "./standalone.js";
 export * from "./env.js";
 export * from "./events.js";
+export * from "./run-origin.js";

package/dist/runtime/index.js

@@ -6,3 +6,4 @@ export * from "./run-persistence.js";
 export * from "./standalone.js";
 export * from "./env.js";
 export * from "./events.js";
+export * from "./run-origin.js";

package/dist/runtime/run-origin.d.ts

@@ -0,0 +1,9 @@
+import type { RunOrigin } from "@actiondock/sdk";
+/**
+ * 运行来源快照辅助函数（纯领域无副作用，单一事实源）。
+ *
+ * 仅安全提取 channel、viewName 与 authenticated 3个非秘密字段并冻结对象，
+ * 严禁携带额外凭证或扩展字段，防范对象后续被篡改。
+ * 若入参缺省则返回 undefined；非法来源严格校验报错，杜绝静默吞没。
+ */
+export declare function snapshotRunOrigin(origin?: unknown): RunOrigin | undefined;

package/dist/runtime/run-origin.js

@@ -0,0 +1,33 @@
+import { ActionDockError, INVALID_ARGUMENT } from "../errors.js";
+/**
+ * 运行来源快照辅助函数（纯领域无副作用，单一事实源）。
+ *
+ * 仅安全提取 channel、viewName 与 authenticated 3个非秘密字段并冻结对象，
+ * 严禁携带额外凭证或扩展字段，防范对象后续被篡改。
+ * 若入参缺省则返回 undefined；非法来源严格校验报错，杜绝静默吞没。
+ */
+export function snapshotRunOrigin(origin) {
+    if (origin === undefined || origin === null) {
+        return undefined;
+    }
+    if (typeof origin !== "object" || Array.isArray(origin)) {
+        throw new ActionDockError(INVALID_ARGUMENT, "Invalid run origin: expected an object");
+    }
+    const raw = origin;
+    const channel = raw.channel;
+    if (channel !== "http" && channel !== "mcp") {
+        throw new ActionDockError(INVALID_ARGUMENT, "Invalid run origin channel: expected 'http' or 'mcp'");
+    }
+    const viewName = raw.viewName;
+    if (typeof viewName !== "string" || viewName.length === 0) {
+        throw new ActionDockError(INVALID_ARGUMENT, "Invalid run origin viewName: expected a non-empty string");
+    }
+    if (typeof raw.authenticated !== "boolean") {
+        throw new ActionDockError(INVALID_ARGUMENT, `Invalid run origin authenticated: expected boolean, got '${typeof raw.authenticated}'`);
+    }
+    return Object.freeze({
+        channel,
+        viewName,
+        authenticated: raw.authenticated,
+    });
+}

package/dist/runtime/run-persistence.d.ts

@@ -1,4 +1,4 @@
-import type { RuntimeError, RunRecord } from "@actiondock/sdk";
+import type { RuntimeError, RunOrigin, RunRecord } from "@actiondock/sdk";
 import type { RuntimeStorage, TerminalRunStatus } from "../storage/types.js";
 /**
  * 运行记录落库参数（RunRecord 构造与写入的领域入参）。
@@ -13,6 +13,8 @@ export interface InitialRunRecordInput {
     rootRunId: string;
     /** 父级运行 ID（嵌套调用场景下建立调用链树） */
     parentRunId?: string;
+    /** 运行来源追踪快照 */
+    origin?: RunOrigin;
     /** 执行归属所有者标识 */
     ownerId?: string;
     /** 执行宿主会话标识 */

package/dist/runtime/run-persistence.js

@@ -1,11 +1,14 @@
 import { ActionDockError, RUN_PERSISTENCE_FAILED, RUN_REPOSITORY_UNAVAILABLE } from "../errors.js";
+import { snapshotRunOrigin } from "./run-origin.js";
 /**
  * 构建运行初始记录（RunRecord 组装单一事实源）。
  */
 export function buildInitialRunRecord(params, status, error) {
     const { runId, rootRunId, parentRunId, ownerId, hostSessionId, hostPid, packageInstanceId, generationId, targetPackageId, targetActionId, startedAt, input, runnerPackageId, runnerPackageInstanceId, runnerGenerationId, runnerHostSessionId, } = params;
+    const origin = snapshotRunOrigin(params.origin);
     const record = {
         id: runId,
+        ...(origin !== undefined ? { origin } : {}),
         rootRunId,
         parentRunId,
         packageId: targetPackageId,

package/dist/server/policy.d.ts

@@ -1,3 +1,4 @@
+import type { RunOrigin } from "@actiondock/sdk";
 import { ActionDockError } from "../errors.js";
 import type { McpEndpointHandler } from "./mcp-endpoint.js";
 import type { EffectiveServerPolicy, ServerOptions, ServerViewOptions } from "./types.js";
@@ -136,3 +137,10 @@ export declare function assertActionAllowedByPolicy(action: {
  * @param policy 当前生效的服务端策略
  */
 export declare function assertPackageAllowedByPolicy(packageId: string, policy?: EffectiveServerPolicy): void;
+/**
+ * 构造受信任的服务端执行来源快照。
+ *
+ * 仅挑选 channel、viewName（默认 "default"）与 authenticated（视图配置非空有效令牌）。
+ * 严禁暴露令牌原文、片段或摘要。
+ */
+export declare function createServerRunOrigin(policy: Pick<EffectiveServerPolicy, "viewName" | "token">, channel: RunOrigin["channel"]): RunOrigin;

package/dist/server/policy.js

@@ -1,3 +1,4 @@
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 import { parseActionRef } from "../catalog/resolve-action.js";
 import { ActionDockError, ACTION_FORBIDDEN, PACKAGE_NOT_ALLOWED } from "../errors.js";
 import { safeEqual } from "./security.js";
@@ -366,3 +367,16 @@ export function assertPackageAllowedByPolicy(packageId, policy) {
         throw new PackageNotAllowedError(packageId);
     }
 }
+/**
+ * 构造受信任的服务端执行来源快照。
+ *
+ * 仅挑选 channel、viewName（默认 "default"）与 authenticated（视图配置非空有效令牌）。
+ * 严禁暴露令牌原文、片段或摘要。
+ */
+export function createServerRunOrigin(policy, channel) {
+    return snapshotRunOrigin({
+        channel,
+        viewName: policy.viewName || "default",
+        authenticated: Boolean(policy.token?.trim()),
+    });
+}

package/dist/server/routes/actions.js

@@ -2,6 +2,7 @@ import { parseActionRef } from "../../catalog/resolve-action.js";
 import { filterByIntent } from "../../utils/intent.js";
 import { ACTION_EXECUTION_ERROR, ACTION_FORBIDDEN, ACTION_NOT_FOUND, ACTION_START_FAILED, ACTION_TIMEOUT, ACTIONS_LIST_ERROR, IDEMPOTENCY_CONFLICT, INPUT_VALIDATION_FAILED, INVALID_JSON, PACKAGE_FORBIDDEN, PACKAGE_NOT_FOUND, REQUEST_TOO_LARGE, } from "../../errors.js";
 import { InvalidJsonError, readJsonBody, RequestTooLargeError } from "../body.js";
+import { createServerRunOrigin } from "../policy.js";
 import { filterActionsByPolicy, getSubPath, isActionAllowedByPolicy, isPackageAllowedByPolicy, jsonResponse, } from "./common.js";
 /**
  * 处理 Action 相关的 HTTP 路由（列表、规范查询、同步执行与异步启动）。
@@ -257,10 +258,12 @@ export async function handleActionsRoutes(ctx) {
         }
         if (isAsync) {
             try {
+                const origin = createServerRunOrigin(policy, "http");
                 const ticket = await service.execution.start(actionRefObj, input, {
                     timeoutMs,
                     config: configOverrides,
                     requestId,
+                    origin,
                 });
                 if (ticket.status === "failed") {
                     const res = await ticket.result;
@@ -296,11 +299,13 @@ export async function handleActionsRoutes(ctx) {
         }
         // 同步执行模式
         try {
+            const origin = createServerRunOrigin(policy, "http");
             const result = await service.execution.run(actionRefObj, input, {
                 signal: req.signal,
                 timeoutMs,
                 config: configOverrides,
                 requestId,
+                origin,
             });
             let status = 200;
             if (!result.ok) {

package/dist/service/types.d.ts

@@ -1,4 +1,4 @@
-import type { ActionRef, ExecutionEvent, ExecutionResult, JsonValue, RunRecord } from "@actiondock/sdk";
+import type { ActionRef, ExecutionEvent, ExecutionResult, JsonValue, RunOrigin, RunRecord } from "@actiondock/sdk";
 import type { ActionSpec, ActionSummary, ListActionsOptions, PackageInfo, PackageRuntime, PackageRuntimeOptions, PlaybookSpec, PlaybookSummary } from "../package/types.js";
 import type { CancelResult, ExecutionTicket } from "../execution/types.js";
 import type { ActionDockHostOptions } from "../host/types.js";
@@ -18,6 +18,8 @@ export interface RunOptions {
     config?: Record<string, JsonValue>;
     /** 幂等请求标识 */
     requestId?: string;
+    /** 运行来源追踪快照 */
+    origin?: RunOrigin;
 }
 /**
  * 统一协议版本常量。

package/dist/storage/sqlite-runs.js

@@ -1,5 +1,6 @@
 import { isTerminalRunStatus, DEFAULT_MAX_RUNS_PER_PACKAGE, DEFAULT_MIN_RETAIN_RUNS, DEFAULT_RUNS_RETENTION_MS } from "./types.js";
 import { safeParseStoredJson } from "./utils.js";
+import { snapshotRunOrigin } from "../runtime/run-origin.js";
 import { isRunHostDead } from "./run-liveness.js";
 import { ActionDockError, STORAGE_CLOSED, STORED_ERROR_DECODE_FAILED } from "../errors.js";
 export class SqliteRunsStore {
@@ -146,15 +147,17 @@ export class SqliteRunsStore {
     createRun(record) {
         const stmt = this.getStatement(`
       INSERT INTO runs (
-        id, root_run_id, parent_run_id, package_id, package_instance_id,
+        id, root_run_id, parent_run_id, origin_json, package_id, package_instance_id,
         action_id, generation_id, owner_id, host_session_id, host_pid, heartbeat_at,
         status, input_json, output_json,
         error_json, started_at, finished_at, duration_ms
       )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         const rootRunId = record.rootRunId || record.id;
         const parentRunId = record.parentRunId || null;
+        const origin = snapshotRunOrigin(record.origin);
+        const originJson = origin ? JSON.stringify(origin) : null;
         const packageInstanceId = record.packageInstanceId || record.packageId || this.packageId;
         const generationId = record.generationId || "1";
         const ownerId = record.ownerId || "local";
@@ -168,7 +171,7 @@ export class SqliteRunsStore {
         const errorJson = record.error ? JSON.stringify(record.error) : null;
         const finishedAt = record.finishedAt || null;
         const durationMs = typeof record.durationMs === "number" ? record.durationMs : null;
-        stmt.run(record.id, rootRunId, parentRunId, record.packageId || this.packageId, packageInstanceId, record.actionId ?? "", generationId, ownerId, hostSessionId, hostPid, heartbeatAt, record.status, inputJson, outputJson, errorJson, startedIso, finishedAt, durationMs);
+        stmt.run(record.id, rootRunId, parentRunId, originJson, record.packageId || this.packageId, packageInstanceId, record.actionId ?? "", generationId, ownerId, hostSessionId, hostPid, heartbeatAt, record.status, inputJson, outputJson, errorJson, startedIso, finishedAt, durationMs);
         this.runInsertCount++;
         const nowMs = this.clock.now().getTime();
         if (this.runInsertCount >= SqliteRunsStore.RUNS_CLEANUP_BATCH_THRESHOLD &&
@@ -595,8 +598,11 @@ export class SqliteRunsStore {
                 ? error
                 : { code: STORED_ERROR_DECODE_FAILED, message: String(error) }
             : undefined;
+        const rawOrigin = safeParseStoredJson(row.origin_json, `runs.origin db=${this.dbPath} package=${this.packageId} run=${row.id}`, { strict: true });
+        const origin = snapshotRunOrigin(rawOrigin);
         return {
             id: row.id,
+            ...(origin !== undefined ? { origin } : {}),
             rootRunId: row.root_run_id || row.id,
             parentRunId: row.parent_run_id || undefined,
             packageId: row.package_id,

package/dist/storage/sqlite-schema.js

@@ -49,6 +49,7 @@ export function initSchema(driver, dbPath, recoverOrphans, recoverDeadSessionFn,
           id TEXT PRIMARY KEY,
           root_run_id TEXT NOT NULL,
           parent_run_id TEXT,
+          origin_json TEXT,
           package_id TEXT NOT NULL,
           package_instance_id TEXT NOT NULL,
           action_id TEXT NOT NULL,
@@ -103,8 +104,11 @@ export function initSchema(driver, dbPath, recoverOrphans, recoverDeadSessionFn,
     }
     // 确保存量旧版本数据库补充新增的列或表
     if (version !== 0) {
+        const columns = driver.prepare("PRAGMA table_info(runs);").all();
+        if (Array.isArray(columns) && !columns.some((c) => c.name === "origin_json")) {
+            driver.exec("ALTER TABLE runs ADD COLUMN origin_json TEXT;");
+        }
         try {
-            const columns = driver.prepare("PRAGMA table_info(runs);").all();
             if (Array.isArray(columns) && !columns.some((c) => c.name === "host_session_id")) {
                 driver.exec("ALTER TABLE runs ADD COLUMN host_session_id TEXT;");
             }

package/dist/storage/utils.d.ts

@@ -17,6 +17,9 @@
  *
  * @param raw 存储层原始 JSON 字符串
  * @param context 存储路径上下文描述（包含数据库位置、包标识与键名）
- * @returns 解析成功返回解析后的值；入参为空返回 undefined；解析失败返回原始字符串
+ * @param options 严格模式下解析失败直接报错，且不输出原始载荷片段
+ * @returns 解析成功返回解析后的值；入参为空返回 undefined；默认模式解析失败返回原始字符串
  */
-export declare function safeParseStoredJson<T = unknown>(raw: string | null | undefined, context: string): T | undefined;
+export declare function safeParseStoredJson<T = unknown>(raw: string | null | undefined, context: string, options?: {
+    strict?: boolean;
+}): T | undefined;

package/dist/storage/utils.js

@@ -1,3 +1,4 @@
+import { ActionDockError, RUN_REPOSITORY_UNAVAILABLE } from "../errors.js";
 /**
  * 存储层 JSON 载荷统一安全解析工具。
  *
@@ -17,9 +18,10 @@
  *
  * @param raw 存储层原始 JSON 字符串
  * @param context 存储路径上下文描述（包含数据库位置、包标识与键名）
- * @returns 解析成功返回解析后的值；入参为空返回 undefined；解析失败返回原始字符串
+ * @param options 严格模式下解析失败直接报错，且不输出原始载荷片段
+ * @returns 解析成功返回解析后的值；入参为空返回 undefined；默认模式解析失败返回原始字符串
  */
-export function safeParseStoredJson(raw, context) {
+export function safeParseStoredJson(raw, context, options) {
     if (raw === null || raw === undefined) {
         return undefined;
     }
@@ -27,6 +29,9 @@ export function safeParseStoredJson(raw, context) {
         return JSON.parse(raw);
     }
     catch (err) {
+        if (options?.strict) {
+            throw new ActionDockError(RUN_REPOSITORY_UNAVAILABLE, `Corrupted stored JSON at ${context}`);
+        }
         const reason = err instanceof Error ? err.message : String(err);
         console.warn(`[actiondock] stored JSON corrupted at ${context}: ${reason}`);
         return raw;

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 /**
  * ActionDock 核心版本号单一事实源。
  */
-export declare const ACTIONDOCK_VERSION = "2.16.0";
+export declare const ACTIONDOCK_VERSION = "2.17.0";

package/dist/version.js

@@ -1,4 +1,4 @@
 /**
  * ActionDock 核心版本号单一事实源。
  */
-export const ACTIONDOCK_VERSION = "2.16.0";
+export const ACTIONDOCK_VERSION = "2.17.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actiondock/core",
-  "version": "2.16.0",
+  "version": "2.17.0",
   "description": "ActionDock Core Engine - Project loader, runtime execution, SQLite storage, standalone builder, and skill exporter",
   "type": "module",
   "main": "./dist/index.js",
@@ -59,7 +59,7 @@
     "test": "node ../../scripts/run-tests.ts"
   },
   "dependencies": {
-    "@actiondock/sdk": "^2.16.0",
+    "@actiondock/sdk": "^2.17.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "undici": "^7.29.1"