@actiondock/core 2.18.0 → 2.20.0

package/dist/host/host.js

@@ -8,16 +8,20 @@ import { hasPendingTransactions, isProjectLockHeld, recoverPendingTransactions }
 import { listLinkedPackages } from "../registry/registry.js";
 import { InMemoryEventSink } from "../runtime/events.js";
 import { snapshotRunOrigin } from "../runtime/run-origin.js";
-import { ActionDockError, ACTION_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_SUBRUN_LIMIT, EXECUTION_FAILED, INVALID_ACTION_REF, PACKAGE_ID_CONFLICT, PACKAGE_NOT_FOUND, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, SERVICE_CLOSED, UNDECLARED_ACTION_DEPENDENCY, } from "../errors.js";
+import { ActionDockError, ACTION_CANCELLED, ACTION_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_SUBRUN_LIMIT, EXECUTION_FAILED, INVALID_ACTION_REF, PACKAGE_ID_CONFLICT, PACKAGE_NOT_FOUND, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, SERVICE_CLOSED, UNDECLARED_ACTION_DEPENDENCY, } from "../errors.js";
 import { InvocationPolicy } from "../invocation/policy.js";
+import { loadActionBindings, resolveActionBinding, validateActionBindings, } from "../invocation/bindings.js";
+import { RemoteInvocationExecutor } from "../invocation/remote.js";
+import { resolveTarget } from "../profile/manager.js";
 import { createAbortError } from "../ipc/service.js";
 import { DataDirLock } from "../storage/data-dir-lock.js";
 import { DefaultActionCatalog, DefaultPackageGraph, PackageGraphBuilder, resolveAction, } from "../catalog/index.js";
 import { parseActionRef } from "../catalog/resolve-action.js";
 import { buildRuntimeError, collectPackageInfos, describeActionAcrossRuntimes, describeVisiblePlaybook, isRootCallVisible, listVisiblePlaybooks, packageNotFoundMessage, parseRefLoose, resolveProjectRoot, } from "./routing.js";
 import { CAPABILITY_UNAVAILABLE } from "../errors.js";
-import { createGlobalStorage, isSecretConfigKey } from "../storage/index.js";
+import { createGlobalStorage, redactConfigValueAtPaths, redactConfigValueForDeclarations } from "../storage/index.js";
 import { filterByIntent } from "../utils/intent.js";
+import { assertConcreteConfigKey, isConfigTemplate, resolveConfigDeclaration, validateConfigValue, } from "../project/config-declarations.js";
 function isPackageRuntime(item) {
     return (typeof item === "object" &&
         item !== null &&
@@ -60,6 +64,8 @@ export class DefaultActionDockHost {
     hostSessionId;
     options;
     runtimes = new Map();
+    extraRuntimes = new Set();
+    extraRuntimeScopes = new Map();
     policy;
     hostPublicPackageIds = new Set();
     maxCallDepth;
@@ -76,6 +82,9 @@ export class DefaultActionDockHost {
     globalStorage;
     initPromise;
     isInitialized = false;
+    actionBindings = new Map();
+    remoteTargets = new Map();
+    remoteInvoker;
     discovery;
     execution;
     runs;
@@ -100,6 +109,7 @@ export class DefaultActionDockHost {
         }
         this.hostSessionId = randomUUID();
         this.options = options;
+        this.remoteInvoker = new RemoteInvocationExecutor({ logger: options.logger });
         this.maxCallDepth = options.maxCallDepth ?? 16;
         this.maxSubRuns = options.maxSubRuns ?? 64;
         this.policy = new InvocationPolicy({
@@ -348,6 +358,21 @@ export class DefaultActionDockHost {
         // 持有者在返回前打开共享全局存储，保留对全局库存储错误的提前发现能力
         this.getGlobalStorage();
     }
+    /** 返回的 Runtime 由 Host 统一接管，端口只清理自身缓存和附属资源。 */
+    async closeInvocationTargets() {
+        const extras = Array.from(this.extraRuntimes).filter((runtime) => this.runtimes.get(runtime.packageId) !== runtime);
+        this.extraRuntimes.clear();
+        this.extraRuntimeScopes.clear();
+        const results = await Promise.allSettled(extras.map((runtime) => runtime.close()));
+        const errors = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+        try {
+            await this.options.platform?.invocationTargets?.close?.();
+        }
+        catch (error) {
+            errors.push(error);
+        }
+        return errors;
+    }
     /**
      * 异步安全回滚初始化失败时所占用的资源。
      */
@@ -363,7 +388,11 @@ export class DefaultActionDockHost {
                 // 忽略 Runtime 关闭异常
             }
         }));
+        const invocationCloseErrors = await this.closeInvocationTargets();
         this.runtimes.clear();
+        this.actionBindings.clear();
+        this.remoteTargets.clear();
+        await this.remoteInvoker.close();
         try {
             this.globalStorage?.close();
         }
@@ -379,6 +408,8 @@ export class DefaultActionDockHost {
         }
         this.dataDirLock = undefined;
         this.isClosed = true;
+        if (invocationCloseErrors.length)
+            throw new AggregateError(invocationCloseErrors, "Invocation target cleanup failed");
     }
     /**
      * 阶段函数：注册显式传入的 packages 列表（PackageRuntimeOptions 配置或包目录物理路径）。
@@ -551,21 +582,75 @@ export class DefaultActionDockHost {
      * 铁律 2：跨包调用改走 ActionInvoker 回到 Host 执行主链，经由唯一的 InvocationPolicy 授权后调用目标 Package 的 ExecutionService。
      */
     createActionInvoker(callerRuntime) {
-        return async (childAction, childInput, context) => {
-            const resolved = resolveAction(childAction, {
+        return async (childAction, childInput, context, options) => {
+            if (this.isClosed)
+                throw new ActionDockError(SERVICE_CLOSED, "ActionDockHost is closed");
+            if (context.signal.aborted)
+                throw new ActionDockError(ACTION_CANCELLED, "Caller invocation is cancelled");
+            const parsed = parseActionRef(childAction);
+            // 裸引用仍由既有解析器消歧；远端专属依赖须使用完全限定引用。
+            const localResolved = parsed.packageId ? undefined : resolveAction(childAction, {
                 caller: callerRuntime.packageId,
                 graph: this.graph,
                 catalog: this.catalog,
             });
-            const targetPackageId = resolved.package.id;
-            const targetActionId = resolved.ref.actionId;
-            const isSamePackage = targetPackageId === callerRuntime.packageId;
-            const targetRuntime = isSamePackage ? callerRuntime : this.getRuntime(targetPackageId);
-            if (!targetRuntime) {
-                throw new ActionDockError(PACKAGE_NOT_FOUND, packageNotFoundMessage(targetPackageId, this.failedLinkedPackages));
+            const targetPackageId = parsed.packageId ?? localResolved.package.id;
+            const targetActionId = parsed.actionId;
+            const canonicalRef = `${targetPackageId}/${targetActionId}`;
+            const canonicalActionRef = { packageId: targetPackageId, actionId: targetActionId };
+            const callerBindings = this.actionBindings.get(callerRuntime.packageId) ?? {};
+            const isNamedTarget = Boolean(options?.binding && options.binding !== "default");
+            // 目标装配是同步解析，不在此引入另一条执行或网络调用链。
+            const targetOverride = this.options.platform?.invocationTargets?.resolve(canonicalActionRef, options, {
+                packageId: callerRuntime.packageId,
+                actionId: context.caller?.actionId,
+            });
+            let targetRuntime;
+            let targetScope;
+            let isRemote = false;
+            let remoteProfile;
+            if (targetOverride) {
+                if (targetOverride.runtime.packageId !== targetPackageId) {
+                    throw new ActionDockError(INVALID_ACTION_REF, `Invocation target packageId mismatch: expected '${targetPackageId}', got '${targetOverride.runtime.packageId}'`);
+                }
+                targetRuntime = targetOverride.runtime;
+                this.extraRuntimes.add(targetRuntime);
+                this.bindRuntime(targetRuntime);
+                targetScope = targetOverride.scope ?? (isNamedTarget ? `binding:${options?.binding}` : undefined);
+                if (targetScope)
+                    this.extraRuntimeScopes.set(targetRuntime, targetScope);
+            }
+            else {
+                // 没有绑定的旧调用不引入额外的清单命名约束，保持编程式 Runtime 兼容。
+                const binding = options?.binding !== undefined || Object.hasOwn(callerBindings, canonicalRef)
+                    ? resolveActionBinding(callerBindings, canonicalRef, options?.binding)
+                    : undefined;
+                if (binding?.type === "remote") {
+                    isRemote = true;
+                    remoteProfile = binding.profile;
+                    targetScope = `profile:${binding.profile}`;
+                }
+                else {
+                    isRemote = false;
+                    if (!localResolved) {
+                        resolveAction(childAction, { caller: callerRuntime.packageId, graph: this.graph, catalog: this.catalog });
+                    }
+                    const isLogicalSamePackage = targetPackageId === callerRuntime.packageId;
+                    targetRuntime = isLogicalSamePackage ? callerRuntime : this.getRuntime(targetPackageId);
+                    if (targetRuntime)
+                        targetScope = this.extraRuntimeScopes.get(targetRuntime);
+                    if (!targetRuntime) {
+                        throw new ActionDockError(PACKAGE_NOT_FOUND, packageNotFoundMessage(targetPackageId, this.failedLinkedPackages));
+                    }
+                }
             }
+            const isLogicalSamePackage = targetPackageId === callerRuntime.packageId;
+            const isPhysicalSameRuntime = Boolean(targetRuntime && targetRuntime === callerRuntime);
+            const requiresExplicitUses = Boolean(isRemote ||
+                targetOverride?.requiresExplicitUses ||
+                (isNamedTarget && targetOverride !== undefined));
             // 跨包 uses 依赖声明校验（统一委托 InvocationPolicy 单一事实源）
-            if (!isSamePackage) {
+            if (!isLogicalSamePackage || requiresExplicitUses) {
                 let declaredUses = context.caller?.declaredUses;
                 if (!declaredUses) {
                     try {
@@ -580,7 +665,11 @@ export class DefaultActionDockHost {
                     packageId: callerRuntime.packageId,
                     actionId: context.caller?.actionId || "",
                     declaredUses,
-                }, { packageId: targetPackageId, actionId: targetActionId }, this.graph);
+                }, {
+                    packageId: targetPackageId,
+                    actionId: targetActionId,
+                    requiresExplicitUses,
+                }, this.graph);
                 if (authErr) {
                     const hint = authErr.details?.hint;
                     const msg = hint ? `${authErr.message}\n${hint}` : authErr.message;
@@ -593,7 +682,7 @@ export class DefaultActionDockHost {
                 throw new ActionDockError(depthErr.code, depthErr.message, depthErr.details);
             }
             // 调用链环路死锁检测
-            const cycle = this.policy.checkCycle(context.callStack, targetActionId, targetPackageId, callerRuntime.packageId);
+            const cycle = this.policy.checkCycle(context.callStack, targetActionId, targetPackageId, callerRuntime.packageId, targetScope);
             if (cycle.error) {
                 throw new ActionDockError(cycle.error.code, cycle.error.message, cycle.error.details);
             }
@@ -608,14 +697,18 @@ export class DefaultActionDockHost {
             }
             try {
                 const nextCallStack = [...context.callStack, cycle.callKey];
+                if (isRemote) {
+                    const candidate = this.catalog.find({ packageId: targetPackageId, actionId: targetActionId })[0];
+                    return await this.remoteInvoker.invoke(this.remoteTargets.get(remoteProfile), { packageId: targetPackageId, actionId: targetActionId }, childInput, { ...context, callStack: nextCallStack }, { binding: options?.binding ?? "default", profile: remoteProfile }, candidate?.contract);
+                }
                 const targetOwner = context.owner
                     ? {
                         tenantId: context.owner.tenantId,
                         principalId: context.owner.principalId,
-                        packageInstanceId: isSamePackage
+                        packageInstanceId: isPhysicalSameRuntime
                             ? (context.owner.packageInstanceId || callerRuntime.identity.instanceId)
                             : targetRuntime.identity.instanceId,
-                        generationId: isSamePackage
+                        generationId: isPhysicalSameRuntime
                             ? (context.owner.generationId || callerRuntime.identity.generation)
                             : targetRuntime.identity.generation,
                     }
@@ -626,6 +719,7 @@ export class DefaultActionDockHost {
                     parentRunId: context.parentRunId,
                     caller: context.caller,
                     callStack: nextCallStack,
+                    targetScope,
                     package: targetRuntime.identity,
                     signal: context.signal,
                     timeoutMs: context.timeoutMs,
@@ -699,6 +793,27 @@ export class DefaultActionDockHost {
             }
             throw new ActionDockError(PACKAGE_ID_CONFLICT, `Package ID conflict: package '${runtime.packageId}' is already registered in host`);
         }
+        const explicitBindings = this.options.actionBindings;
+        const bindings = explicitBindings && Object.hasOwn(explicitBindings, runtime.packageId)
+            ? validateActionBindings(explicitBindings[runtime.packageId])
+            : runtime.packageRoot ? loadActionBindings(runtime.packageRoot) : validateActionBindings({});
+        for (const group of Object.values(bindings)) {
+            for (const target of Object.values(group)) {
+                if (target.type !== "remote" || this.remoteTargets.has(target.profile))
+                    continue;
+                const resolved = resolveTarget({ profile: target.profile }, this.options.customHome);
+                if (resolved.type !== "remote" || !resolved.serverUrl) {
+                    throw new ActionDockError(INVALID_ACTION_REF, `Binding profile '${target.profile}' must identify a remote service`);
+                }
+                this.remoteTargets.set(target.profile, Object.freeze({
+                    serverUrl: resolved.serverUrl,
+                    token: resolved.token,
+                    insecure: resolved.insecure,
+                    allowInsecureHttp: resolved.allowInsecureHttp,
+                }));
+            }
+        }
+        this.actionBindings.set(runtime.packageId, bindings);
         this.runtimes.set(runtime.packageId, runtime);
         if (isPublic) {
             this.hostPublicPackageIds.add(runtime.packageId);
@@ -906,6 +1021,12 @@ export class DefaultActionDockHost {
                     const batch = await runtime.listRuns({
                         actionId: query.actionId,
                         status: query.status,
+                        channel: query.channel,
+                        view: query.view,
+                        since: query.since,
+                        until: query.until,
+                        rootRunId: query.rootRunId,
+                        parentRunId: query.parentRunId,
                         requestIds: query.requestIds,
                         limit: BATCH_SIZE,
                         offset: batchOffset,
@@ -921,8 +1042,21 @@ export class DefaultActionDockHost {
                         ...r,
                         packageId: r.packageId || runtime.packageId,
                     }));
-                    const filtered = filterByIntent(normalized, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
-                    matchedRecords.push(...filtered);
+                    let filtered = normalized;
+                    if (query.channel)
+                        filtered = filtered.filter((r) => r.origin?.channel === query.channel);
+                    if (query.view)
+                        filtered = filtered.filter((r) => r.origin?.viewName === query.view);
+                    if (query.since)
+                        filtered = filtered.filter((r) => r.startedAt >= query.since);
+                    if (query.until)
+                        filtered = filtered.filter((r) => r.startedAt <= query.until);
+                    if (query.rootRunId)
+                        filtered = filtered.filter((r) => r.rootRunId === query.rootRunId);
+                    if (query.parentRunId)
+                        filtered = filtered.filter((r) => r.parentRunId === query.parentRunId);
+                    const intentMatched = filterByIntent(filtered, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
+                    matchedRecords.push(...intentMatched);
                     if (matchedRecords.length >= neededCount) {
                         break;
                     }
@@ -944,6 +1078,12 @@ export class DefaultActionDockHost {
                         const batch = await runtime.listRuns({
                             actionId: query.actionId,
                             status: query.status,
+                            channel: query.channel,
+                            view: query.view,
+                            since: query.since,
+                            until: query.until,
+                            rootRunId: query.rootRunId,
+                            parentRunId: query.parentRunId,
                             requestIds: query.requestIds,
                             limit: BATCH_SIZE,
                             offset: batchOffset,
@@ -959,8 +1099,21 @@ export class DefaultActionDockHost {
                             ...r,
                             packageId: r.packageId || runtime.packageId,
                         }));
-                        const filtered = filterByIntent(normalized, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
-                        matchedRecords.push(...filtered);
+                        let filtered = normalized;
+                        if (query.channel)
+                            filtered = filtered.filter((r) => r.origin?.channel === query.channel);
+                        if (query.view)
+                            filtered = filtered.filter((r) => r.origin?.viewName === query.view);
+                        if (query.since)
+                            filtered = filtered.filter((r) => r.startedAt >= query.since);
+                        if (query.until)
+                            filtered = filtered.filter((r) => r.startedAt <= query.until);
+                        if (query.rootRunId)
+                            filtered = filtered.filter((r) => r.rootRunId === query.rootRunId);
+                        if (query.parentRunId)
+                            filtered = filtered.filter((r) => r.parentRunId === query.parentRunId);
+                        const intentMatched = filterByIntent(filtered, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
+                        matchedRecords.push(...intentMatched);
                         if (batch.length < BATCH_SIZE) {
                             break;
                         }
@@ -1043,6 +1196,12 @@ export class DefaultActionDockHost {
                     const batch = await runtime.listRuns({
                         actionId: query.actionId,
                         status: query.status,
+                        channel: query.channel,
+                        view: query.view,
+                        since: query.since,
+                        until: query.until,
+                        rootRunId: query.rootRunId,
+                        parentRunId: query.parentRunId,
                         requestIds: query.requestIds,
                         limit: BATCH_SIZE,
                         offset: batchOffset,
@@ -1058,8 +1217,21 @@ export class DefaultActionDockHost {
                         ...r,
                         packageId: r.packageId || runtime.packageId,
                     }));
-                    const filtered = filterByIntent(normalized, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
-                    count += filtered.length;
+                    let filtered = normalized;
+                    if (query.channel)
+                        filtered = filtered.filter((r) => r.origin?.channel === query.channel);
+                    if (query.view)
+                        filtered = filtered.filter((r) => r.origin?.viewName === query.view);
+                    if (query.since)
+                        filtered = filtered.filter((r) => r.startedAt >= query.since);
+                    if (query.until)
+                        filtered = filtered.filter((r) => r.startedAt <= query.until);
+                    if (query.rootRunId)
+                        filtered = filtered.filter((r) => r.rootRunId === query.rootRunId);
+                    if (query.parentRunId)
+                        filtered = filtered.filter((r) => r.parentRunId === query.parentRunId);
+                    const intentMatched = filterByIntent(filtered, intentStr, [(r) => r.id, (r) => r.actionId, (r) => r.status, (r) => r.packageId], false);
+                    count += intentMatched.length;
                     if (batch.length < BATCH_SIZE) {
                         break;
                     }
@@ -1079,6 +1251,12 @@ export class DefaultActionDockHost {
                 const all = await runtime.listRuns({
                     actionId: query?.actionId,
                     status: query?.status,
+                    channel: query?.channel,
+                    view: query?.view,
+                    since: query?.since,
+                    until: query?.until,
+                    rootRunId: query?.rootRunId,
+                    parentRunId: query?.parentRunId,
                     requestIds: query?.requestIds,
                     limit: 100_000,
                     signal: effectiveSignal,
@@ -1086,7 +1264,20 @@ export class DefaultActionDockHost {
                 if (effectiveSignal?.aborted) {
                     throw createAbortError(effectiveSignal.reason);
                 }
-                total += all.length;
+                let filtered = all;
+                if (query?.channel)
+                    filtered = filtered.filter((r) => r.origin?.channel === query.channel);
+                if (query?.view)
+                    filtered = filtered.filter((r) => r.origin?.viewName === query.view);
+                if (query?.since)
+                    filtered = filtered.filter((r) => r.startedAt >= query.since);
+                if (query?.until)
+                    filtered = filtered.filter((r) => r.startedAt <= query.until);
+                if (query?.rootRunId)
+                    filtered = filtered.filter((r) => r.rootRunId === query.rootRunId);
+                if (query?.parentRunId)
+                    filtered = filtered.filter((r) => r.parentRunId === query.parentRunId);
+                total += filtered.length;
             }
         }
         return total;
@@ -1165,17 +1356,26 @@ export class DefaultActionDockHost {
         }
         return this.globalStorage;
     }
-    findDeclaredConfigItem(key) {
-        let foundItem;
+    findAllDeclaredConfigItems(key) {
+        const items = [];
         for (const runtime of this.listRuntimes()) {
-            const item = runtime.projectConfig?.config?.[key];
-            if (item) {
-                if (item.secret)
-                    return item;
-                foundItem = item;
+            const decl = resolveConfigDeclaration(runtime.projectConfig?.config, key);
+            if (decl?.item) {
+                items.push(decl.item);
             }
         }
-        return foundItem;
+        return items;
+    }
+    protectGlobalConfigView(view) {
+        if (view.source !== "global")
+            return view;
+        const items = this.findAllDeclaredConfigItems(view.key);
+        if (items.length === 0)
+            return view;
+        // 外部注入的运行时可能持有独立全局库；只能加强它返回的安全值，不能换读 Host 的库。
+        const merged = redactConfigValueForDeclarations(view.value, items);
+        const safe = redactConfigValueAtPaths(merged.value, [...view.redactedPaths, ...merged.redactedPaths]);
+        return { ...view, ...safe, secret: view.secret || merged.secret };
     }
     resolveRuntime(packageId) {
         if (packageId) {
@@ -1196,25 +1396,32 @@ export class DefaultActionDockHost {
     }
     async getConfig(packageId, key) {
         await this.ensureInitialized();
+        assertConcreteConfigKey(key);
         if (packageId === "global") {
             const globalStorage = this.getGlobalStorage();
             const val = globalStorage.getConfig(key);
             const configured = val !== undefined;
-            const declaredItem = this.findDeclaredConfigItem(key);
-            const isSecret = isSecretConfigKey(key, declaredItem);
+            const items = this.findAllDeclaredConfigItems(key);
+            const redacted = redactConfigValueForDeclarations(val, items);
             return {
                 key,
                 configured,
-                secret: isSecret,
-                source: configured ? "global" : "default",
-                value: !isSecret && configured ? val : undefined,
+                secret: redacted.secret,
+                source: configured ? "global" : null,
+                value: redacted.value,
+                redactedPaths: redacted.redactedPaths,
             };
         }
-        return this.requireRuntime(packageId).getConfig(key);
+        return this.protectGlobalConfigView(await this.requireRuntime(packageId).getConfig(key));
     }
     async setConfig(packageId, key, value) {
         await this.ensureInitialized();
+        assertConcreteConfigKey(key);
         if (packageId === "global") {
+            const items = this.findAllDeclaredConfigItems(key);
+            for (const item of items) {
+                validateConfigValue(key, value, item);
+            }
             await this.getGlobalStorage().setConfig(key, value);
             return;
         }
@@ -1222,6 +1429,7 @@ export class DefaultActionDockHost {
     }
     async deleteConfig(packageId, key) {
         await this.ensureInitialized();
+        assertConcreteConfigKey(key);
         if (packageId === "global") {
             return await this.getGlobalStorage().deleteConfig(key);
         }
@@ -1232,19 +1440,26 @@ export class DefaultActionDockHost {
         if (packageId === "global") {
             const globalStorage = this.getGlobalStorage();
             const all = globalStorage.listConfig();
-            return Object.entries(all).map(([key, val]) => {
-                const declaredItem = this.findDeclaredConfigItem(key);
-                const isSecret = isSecretConfigKey(key, declaredItem);
-                return {
+            const views = [];
+            for (const [key, val] of Object.entries(all)) {
+                if (isConfigTemplate(key)) {
+                    continue;
+                }
+                const items = this.findAllDeclaredConfigItems(key);
+                const redacted = redactConfigValueForDeclarations(val, items);
+                views.push({
                     key,
                     configured: true,
-                    secret: isSecret,
+                    secret: redacted.secret,
                     source: "global",
-                    value: isSecret ? undefined : val,
-                };
-            });
+                    value: redacted.value,
+                    redactedPaths: redacted.redactedPaths,
+                });
+            }
+            return views;
         }
-        return this.requireRuntime(packageId).listConfig();
+        const views = await this.requireRuntime(packageId).listConfig();
+        return views.map((view) => this.protectGlobalConfigView(view));
     }
     async getState(packageId, actionId, key, options) {
         await this.ensureInitialized();
@@ -1301,7 +1516,11 @@ export class DefaultActionDockHost {
                 // 忽略 Runtime 关闭异常，确保全部安全释放
             }
         }));
+        const invocationCloseErrors = await this.closeInvocationTargets();
         this.runtimes.clear();
+        this.actionBindings.clear();
+        this.remoteTargets.clear();
+        await this.remoteInvoker.close();
         try {
             this.globalStorage?.close();
         }
@@ -1316,6 +1535,8 @@ export class DefaultActionDockHost {
             // 忽略目录排他锁释放异常
         }
         this.dataDirLock = undefined;
+        if (invocationCloseErrors.length)
+            throw new AggregateError(invocationCloseErrors, "Invocation target cleanup failed");
     }
 }
 /**

package/dist/host/types.d.ts

@@ -7,6 +7,7 @@ import type { EventSink } from "../runtime/events.js";
 import type { RuntimePlatform } from "../platform/types.js";
 import type { ActionDockService, ConfigValueView, EventsPort, ListRunsOptions, StateScopeOptions } from "../service/types.js";
 import type { StateEntry } from "../storage/types.js";
+import type { ActionBindings } from "../invocation/bindings.js";
 /**
  * 宿主事件服务端口（既作为独立方法调用，又满足 EventsPort 规范）。
  */
@@ -21,6 +22,8 @@ export interface HostEventsPort extends EventsPort {
  * ActionDock 宿主容器初始化配置选项。
  */
 export interface ActionDockHostOptions {
+    /** 按调用方包覆盖运行时命名绑定；未覆盖的包读取其 .actiondock/bindings.json。 */
+    actionBindings?: Readonly<Record<string, ActionBindings>>;
     /** 显式预注册的包列表（PackageRuntime 实例、PackageRuntimeOptions 配置或包目录物理路径）。Host 统一管理其生命周期，关闭时统一释放。 */
     packages?: Array<PackageRuntime | PackageRuntimeOptions | string>;
     /** 当前工程根目录绝对物理路径 */

package/dist/index.d.ts

@@ -7,15 +7,16 @@
  */
 export { ACTIONDOCK_VERSION } from "./version.js";
 export { createActionDock, connectActionDock, } from "./service/factory.js";
-export type { ActionDockService, ActionDockService as ActionDock, DiscoveryPort, ExecutionPort, RunsPort, EventsPort, RunEventSubscriptionOptions, ConfigPort, StatePort, CreateActionDockOptions, ConnectActionDockOptions, RemoteServiceOptions, ConfigValueView, ListRunsOptions, RunReadOptions, StateScopeOptions, } from "./service/types.js";
+export type { ActionDockService, ActionDockService as ActionDock, DiscoveryPort, ExecutionPort, RunsPort, EventsPort, RunEventSubscriptionOptions, ConfigPort, StatePort, CreateActionDockOptions, ConnectActionDockOptions, RemoteServiceOptions, ConfigValueView, ConfigSource, ListRunsOptions, RunReadOptions, StateScopeOptions, } from "./service/types.js";
 export { isTerminalRunStatus, DEFAULT_RUNS_RETENTION_MS, DEFAULT_MAX_RUNS_PER_PACKAGE, DEFAULT_MIN_RETAIN_RUNS, } from "./storage/types.js";
 export { isRunHostDead } from "./storage/run-liveness.js";
 export type { TerminalRunStatus } from "./storage/types.js";
 export { parseDuration } from "./utils/index.js";
 export { toSnakeUpperCase, resolveEnvValue } from "./runtime/env.js";
 export type { ResolvedEnv } from "./runtime/env.js";
-export type { ActionRef, ResolvedActionRef, ExecutionResult, RunRecord, RunOrigin, ExecutionEvent, } from "@actiondock/sdk";
+export type { ActionInvokeOptions, ActionRef, ResolvedActionRef, ExecutionResult, RunRecord, RunOrigin, ExecutionEvent, } from "@actiondock/sdk";
 export type { RunOptions, ExecutionTicket, CancelResult, } from "./execution/types.js";
+export type { ActionBindings, ActionBindingTarget } from "./invocation/bindings.js";
 export type { ActionSpec, ActionSummary, PlaybookSpec, PlaybookSummary, PackageInfo, ListActionsOptions, } from "./package/types.js";
 export { createNodePlatform, } from "./platform/node.js";
 export { startActionDockServer, } from "./server/server.js";
@@ -24,4 +25,4 @@ export { initProject } from "./project/init.js";
 export { loadProjectConfig, findProjectRoot, } from "./project/loader.js";
 export type { ProjectConfig, } from "./project/types.js";
 export type { PackageGraph, } from "./catalog/graph.js";
-export { ActionDockError, ProcessError, PACKAGE_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_NOT_FOUND, ACTION_LOAD_FAILED, ACTION_FAILED, ACTION_TIMEOUT, ACTION_CANCELLED, INPUT_VALIDATION_FAILED, OUTPUT_VALIDATION_FAILED, INPUT_NOT_JSON, OUTPUT_NOT_JSON, ACTION_SUBRUN_LIMIT, ACTION_CALL_CYCLE, UNDECLARED_ACTION_DEPENDENCY, INVALID_ACTION_REF, IDEMPOTENCY_CONFLICT, EXECUTION_FAILED, UNHANDLED_EXECUTION_ERROR, RUN_REPOSITORY_UNAVAILABLE, RUN_PERSISTENCE_FAILED, STANDALONE_ASYNC_UNSUPPORTED, HOST_PROCESS_EXITED, EXECUTION_ABORTED, TIMEOUT, NETWORK_ERROR, CAPABILITY_UNAVAILABLE, STATE_KEY_NOT_FOUND, STORAGE_BUSY, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, PROCESS_OUTPUT_LIMIT, PROCESS_SPAWN_ERROR, PROCESS_CANCELLED, PROCESS_TIMEOUT, UNAUTHORIZED, NOT_FOUND, SERVER_ERROR, PACKAGE_FORBIDDEN, ACTION_FORBIDDEN, PLAYBOOK_NOT_FOUND, REQUEST_TOO_LARGE, ACTION_START_FAILED, ACTION_EXECUTION_ERROR, DATA_DIR_IN_USE, DATA_DIR_RECOVERY_REQUIRED, PROCESS_FAILED, MCP_TOOL_NAME_COLLISION, ACCESS_DENIED, INVALID_FLAT_ARGUMENT, INVALID_JSON, INVALID_JSON_LITERAL, INPUT_PATH_CONFLICT, FLAT_INPUT_LIMIT_EXCEEDED, INPUT_LIMIT_EXCEEDED, INPUT_POLICY_VIOLATION, INPUT_CONFLICT, INPUT_FILE_NOT_FOUND, INPUT_FILE_READ_FAILED, INVALID_ARGUMENT, PACKAGE_NOT_ALLOWED, INVALID_PACKAGE_ID, PATH_TRAVERSAL, AMBIGUOUS_STATE_KEY, RUN_NOT_FOUND, RUN_ALREADY_FINISHED, PROJECT_ROOT_NOT_FOUND, describeActionLoadFailure, createErrorEnvelope, resolveExecutionHint, } from "./errors.js";
+export { ActionDockError, ProcessError, PACKAGE_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_NOT_FOUND, ACTION_LOAD_FAILED, ACTION_FAILED, ACTION_TIMEOUT, ACTION_CANCELLED, CONFIG_VALUE_INVALID, INPUT_VALIDATION_FAILED, OUTPUT_VALIDATION_FAILED, INPUT_NOT_JSON, OUTPUT_NOT_JSON, ACTION_SUBRUN_LIMIT, ACTION_CALL_CYCLE, UNDECLARED_ACTION_DEPENDENCY, INVALID_ACTION_REF, IDEMPOTENCY_CONFLICT, EXECUTION_FAILED, UNHANDLED_EXECUTION_ERROR, RUN_REPOSITORY_UNAVAILABLE, RUN_PERSISTENCE_FAILED, STANDALONE_ASYNC_UNSUPPORTED, HOST_PROCESS_EXITED, EXECUTION_ABORTED, TIMEOUT, NETWORK_ERROR, CAPABILITY_UNAVAILABLE, STATE_KEY_NOT_FOUND, STORAGE_BUSY, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, PROCESS_OUTPUT_LIMIT, PROCESS_SPAWN_ERROR, PROCESS_CANCELLED, PROCESS_TIMEOUT, UNAUTHORIZED, NOT_FOUND, SERVER_ERROR, PACKAGE_FORBIDDEN, ACTION_FORBIDDEN, PLAYBOOK_NOT_FOUND, REQUEST_TOO_LARGE, ACTION_START_FAILED, ACTION_EXECUTION_ERROR, DATA_DIR_IN_USE, DATA_DIR_RECOVERY_REQUIRED, PROCESS_FAILED, MCP_TOOL_NAME_COLLISION, ACCESS_DENIED, INVALID_FLAT_ARGUMENT, INVALID_JSON, INVALID_JSON_LITERAL, INPUT_PATH_CONFLICT, FLAT_INPUT_LIMIT_EXCEEDED, INPUT_LIMIT_EXCEEDED, INPUT_POLICY_VIOLATION, INPUT_CONFLICT, INPUT_FILE_NOT_FOUND, INPUT_FILE_READ_FAILED, INVALID_ARGUMENT, PACKAGE_NOT_ALLOWED, INVALID_PACKAGE_ID, PATH_TRAVERSAL, AMBIGUOUS_STATE_KEY, RUN_NOT_FOUND, RUN_ALREADY_FINISHED, PROJECT_ROOT_NOT_FOUND, describeActionLoadFailure, createErrorEnvelope, resolveExecutionHint, } from "./errors.js";

package/dist/index.js

@@ -20,4 +20,4 @@ export { startActionDockServer, } from "./server/server.js";
 export { initProject } from "./project/init.js";
 export { loadProjectConfig, findProjectRoot, } from "./project/loader.js";
 // 8. 统一错误模型与核心标准错误码常量
-export { ActionDockError, ProcessError, PACKAGE_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_NOT_FOUND, ACTION_LOAD_FAILED, ACTION_FAILED, ACTION_TIMEOUT, ACTION_CANCELLED, INPUT_VALIDATION_FAILED, OUTPUT_VALIDATION_FAILED, INPUT_NOT_JSON, OUTPUT_NOT_JSON, ACTION_SUBRUN_LIMIT, ACTION_CALL_CYCLE, UNDECLARED_ACTION_DEPENDENCY, INVALID_ACTION_REF, IDEMPOTENCY_CONFLICT, EXECUTION_FAILED, UNHANDLED_EXECUTION_ERROR, RUN_REPOSITORY_UNAVAILABLE, RUN_PERSISTENCE_FAILED, STANDALONE_ASYNC_UNSUPPORTED, HOST_PROCESS_EXITED, EXECUTION_ABORTED, TIMEOUT, NETWORK_ERROR, CAPABILITY_UNAVAILABLE, STATE_KEY_NOT_FOUND, STORAGE_BUSY, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, PROCESS_OUTPUT_LIMIT, PROCESS_SPAWN_ERROR, PROCESS_CANCELLED, PROCESS_TIMEOUT, UNAUTHORIZED, NOT_FOUND, SERVER_ERROR, PACKAGE_FORBIDDEN, ACTION_FORBIDDEN, PLAYBOOK_NOT_FOUND, REQUEST_TOO_LARGE, ACTION_START_FAILED, ACTION_EXECUTION_ERROR, DATA_DIR_IN_USE, DATA_DIR_RECOVERY_REQUIRED, PROCESS_FAILED, MCP_TOOL_NAME_COLLISION, ACCESS_DENIED, INVALID_FLAT_ARGUMENT, INVALID_JSON, INVALID_JSON_LITERAL, INPUT_PATH_CONFLICT, FLAT_INPUT_LIMIT_EXCEEDED, INPUT_LIMIT_EXCEEDED, INPUT_POLICY_VIOLATION, INPUT_CONFLICT, INPUT_FILE_NOT_FOUND, INPUT_FILE_READ_FAILED, INVALID_ARGUMENT, PACKAGE_NOT_ALLOWED, INVALID_PACKAGE_ID, PATH_TRAVERSAL, AMBIGUOUS_STATE_KEY, RUN_NOT_FOUND, RUN_ALREADY_FINISHED, PROJECT_ROOT_NOT_FOUND, describeActionLoadFailure, createErrorEnvelope, resolveExecutionHint, } from "./errors.js";
+export { ActionDockError, ProcessError, PACKAGE_NOT_FOUND, ACTION_PACKAGE_VERSION_CONFLICT, ACTION_NOT_FOUND, ACTION_LOAD_FAILED, ACTION_FAILED, ACTION_TIMEOUT, ACTION_CANCELLED, CONFIG_VALUE_INVALID, INPUT_VALIDATION_FAILED, OUTPUT_VALIDATION_FAILED, INPUT_NOT_JSON, OUTPUT_NOT_JSON, ACTION_SUBRUN_LIMIT, ACTION_CALL_CYCLE, UNDECLARED_ACTION_DEPENDENCY, INVALID_ACTION_REF, IDEMPOTENCY_CONFLICT, EXECUTION_FAILED, UNHANDLED_EXECUTION_ERROR, RUN_REPOSITORY_UNAVAILABLE, RUN_PERSISTENCE_FAILED, STANDALONE_ASYNC_UNSUPPORTED, HOST_PROCESS_EXITED, EXECUTION_ABORTED, TIMEOUT, NETWORK_ERROR, CAPABILITY_UNAVAILABLE, STATE_KEY_NOT_FOUND, STORAGE_BUSY, PROJECT_BUSY, PROJECT_RECOVERY_REQUIRED, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, PROCESS_OUTPUT_LIMIT, PROCESS_SPAWN_ERROR, PROCESS_CANCELLED, PROCESS_TIMEOUT, UNAUTHORIZED, NOT_FOUND, SERVER_ERROR, PACKAGE_FORBIDDEN, ACTION_FORBIDDEN, PLAYBOOK_NOT_FOUND, REQUEST_TOO_LARGE, ACTION_START_FAILED, ACTION_EXECUTION_ERROR, DATA_DIR_IN_USE, DATA_DIR_RECOVERY_REQUIRED, PROCESS_FAILED, MCP_TOOL_NAME_COLLISION, ACCESS_DENIED, INVALID_FLAT_ARGUMENT, INVALID_JSON, INVALID_JSON_LITERAL, INPUT_PATH_CONFLICT, FLAT_INPUT_LIMIT_EXCEEDED, INPUT_LIMIT_EXCEEDED, INPUT_POLICY_VIOLATION, INPUT_CONFLICT, INPUT_FILE_NOT_FOUND, INPUT_FILE_READ_FAILED, INVALID_ARGUMENT, PACKAGE_NOT_ALLOWED, INVALID_PACKAGE_ID, PATH_TRAVERSAL, AMBIGUOUS_STATE_KEY, RUN_NOT_FOUND, RUN_ALREADY_FINISHED, PROJECT_ROOT_NOT_FOUND, describeActionLoadFailure, createErrorEnvelope, resolveExecutionHint, } from "./errors.js";

package/dist/input/config-override.d.ts

@@ -0,0 +1,5 @@
+/** 配置赋值只识别等号左侧的 :=，不物化路径，也不把解析失败回退为字符串。 */
+export declare function parseConfigOverrideAssignment(pair: string): {
+    key: string;
+    value: unknown;
+};

package/dist/input/config-override.js

@@ -0,0 +1,23 @@
+import { ActionDockError, INVALID_ARGUMENT } from "../errors.js";
+import { assertConcreteConfigKey } from "../project/config-declarations.js";
+import { parseJson } from "./input-resolver.js";
+/** 配置赋值只识别等号左侧的 :=，不物化路径，也不把解析失败回退为字符串。 */
+export function parseConfigOverrideAssignment(pair) {
+    const equals = pair.indexOf("=");
+    if (equals < 0) {
+        throw new ActionDockError(INVALID_ARGUMENT, "Expected configuration assignment 'KEY=value' or 'KEY:=json'");
+    }
+    const json = equals > 0 && pair[equals - 1] === ":";
+    const key = pair.slice(0, json ? equals - 1 : equals);
+    assertConcreteConfigKey(key);
+    const rawValue = pair.slice(equals + 1);
+    if (!json)
+        return { key, value: rawValue };
+    try {
+        return { key, value: parseJson(rawValue, "configuration override") };
+    }
+    catch {
+        // JSON.parse 和通用输入校验的诊断可能含输入片段，不能直接回显或挂载 cause。
+        throw new ActionDockError(INVALID_ARGUMENT, `Invalid JSON configuration override for '${key}'`);
+    }
+}