@actiondock/core 2.8.0 → 2.9.0

package/dist/server/routes/actions.js

@@ -1,13 +1,13 @@
 import { parseActionRef } from "../../catalog/resolve-action.js";
 import { filterByIntent } from "../../filter/index.js";
-import { ACTION_EXECUTION_ERROR, ACTION_NOT_FOUND, ACTION_START_FAILED, ACTION_TIMEOUT, ACTIONS_LIST_ERROR, IDEMPOTENCY_CONFLICT, INPUT_VALIDATION_FAILED, INVALID_JSON, PACKAGE_FORBIDDEN, PACKAGE_NOT_FOUND, REQUEST_TOO_LARGE, } from "../../errors.js";
+import { ACTION_EXECUTION_ERROR, ACTION_FORBIDDEN, ACTION_NOT_FOUND, ACTION_START_FAILED, ACTION_TIMEOUT, ACTIONS_LIST_ERROR, IDEMPOTENCY_CONFLICT, INPUT_VALIDATION_FAILED, INVALID_JSON, PACKAGE_FORBIDDEN, PACKAGE_NOT_FOUND, REQUEST_TOO_LARGE, } from "../../errors.js";
 import { InvalidJsonError, readJsonBody, RequestTooLargeError } from "../body.js";
-import { getSubPath, jsonResponse } from "./common.js";
+import { filterActionsByPolicy, getSubPath, isActionAllowedByPolicy, isPackageAllowedByPolicy, jsonResponse, } from "./common.js";
 /**
  * 处理 Action 相关的 HTTP 路由（列表、规范查询、同步执行与异步启动）。
  */
 export async function handleActionsRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, options, service } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Actions List: GET /api/v2/actions, GET /actions
     if (subpath === "/actions" && req.method === "GET") {
@@ -25,9 +25,7 @@ export async function handleActionsRoutes(ctx) {
             if (targetPkg) {
                 actions = actions.filter((a) => a.packageId === targetPkg || a.id.startsWith(`${targetPkg}/`));
             }
-            if (options.packageAllowlist && options.packageAllowlist.length > 0) {
-                actions = actions.filter((a) => a.packageId && options.packageAllowlist.includes(a.packageId));
-            }
+            actions = filterActionsByPolicy(actions, policy);
             if (intent) {
                 actions = filterByIntent(actions, intent, [(a) => a.id, (a) => a.description || "", (a) => a.packageId || ""], false);
             }
@@ -45,16 +43,23 @@ export async function handleActionsRoutes(ctx) {
     if (pkgActionShowMatch && req.method === "GET") {
         const packageId = decodeURIComponent(pkgActionShowMatch[1]);
         const actionId = decodeURIComponent(pkgActionShowMatch[2]);
-        if (options.packageAllowlist && options.packageAllowlist.length > 0) {
-            if (!options.packageAllowlist.includes(packageId)) {
-                return jsonResponse({
-                    ok: false,
-                    error: {
-                        code: PACKAGE_FORBIDDEN,
-                        message: `Package '${packageId}' is not in the allowed package list`,
-                    },
-                }, 403, corsHeaders);
-            }
+        if (!isPackageAllowedByPolicy(packageId, policy)) {
+            return jsonResponse({
+                ok: false,
+                error: {
+                    code: PACKAGE_FORBIDDEN,
+                    message: `Package '${packageId}' is not in the allowed package list`,
+                },
+            }, 403, corsHeaders);
+        }
+        if (!isActionAllowedByPolicy({ packageId, actionId }, policy)) {
+            return jsonResponse({
+                ok: false,
+                error: {
+                    code: ACTION_FORBIDDEN,
+                    message: `Action '${packageId}/${actionId}' is not in the allowed action list`,
+                },
+            }, 403, corsHeaders);
         }
         const ref = `${packageId}/${actionId}`;
         try {
@@ -77,8 +82,8 @@ export async function handleActionsRoutes(ctx) {
         const actionId = decodeURIComponent(actionShowMatch[1]);
         try {
             const parsed = parseActionRef(actionId);
-            if (parsed.packageId && options.packageAllowlist && options.packageAllowlist.length > 0) {
-                if (!options.packageAllowlist.includes(parsed.packageId)) {
+            if (parsed.packageId) {
+                if (!isPackageAllowedByPolicy(parsed.packageId, policy)) {
                     return jsonResponse({
                         ok: false,
                         error: {
@@ -87,19 +92,35 @@ export async function handleActionsRoutes(ctx) {
                         },
                     }, 403, corsHeaders);
                 }
+                if (!isActionAllowedByPolicy({ packageId: parsed.packageId, actionId: parsed.actionId }, policy)) {
+                    return jsonResponse({
+                        ok: false,
+                        error: {
+                            code: ACTION_FORBIDDEN,
+                            message: `Action '${actionId}' is not in the allowed action list`,
+                        },
+                    }, 403, corsHeaders);
+                }
             }
         }
         catch { }
         try {
             const spec = await service.discovery.describeAction(actionId);
-            if (options.packageAllowlist &&
-                options.packageAllowlist.length > 0 &&
-                (!spec.packageId || !options.packageAllowlist.includes(spec.packageId))) {
+            if (!isPackageAllowedByPolicy(spec.packageId, policy)) {
                 return jsonResponse({
                     ok: false,
                     error: {
                         code: PACKAGE_FORBIDDEN,
-                        message: `Package '${spec.packageId}' is not in the allowed package list`,
+                        message: `Package '${spec.packageId || "unknown"}' is not in the allowed package list`,
+                    },
+                }, 403, corsHeaders);
+            }
+            if (!isActionAllowedByPolicy({ packageId: spec.packageId, actionId: spec.id }, policy)) {
+                return jsonResponse({
+                    ok: false,
+                    error: {
+                        code: ACTION_FORBIDDEN,
+                        message: `Action '${spec.packageId ? `${spec.packageId}/${spec.id}` : spec.id}' is not in the allowed action list`,
                     },
                 }, 403, corsHeaders);
             }
@@ -127,9 +148,10 @@ export async function handleActionsRoutes(ctx) {
         let actionRef;
         let endpointMode;
         let pkgId;
+        let actId;
         if (pkgRunMatch) {
             pkgId = decodeURIComponent(pkgRunMatch[1]);
-            const actId = decodeURIComponent(pkgRunMatch[2]);
+            actId = decodeURIComponent(pkgRunMatch[2]);
             endpointMode = pkgRunMatch[3];
             actionRef = `${pkgId}/${actId}`;
         }
@@ -139,30 +161,52 @@ export async function handleActionsRoutes(ctx) {
             try {
                 const parsed = parseActionRef(actionRef);
                 pkgId = parsed.packageId;
+                actId = parsed.actionId;
             }
             catch { }
         }
-        // 校验 Package 允许白名单
-        if (options.packageAllowlist && options.packageAllowlist.length > 0) {
-            if (!pkgId) {
-                try {
-                    const spec = await service.discovery.describeAction(actionRef);
-                    pkgId = spec?.packageId;
-                }
-                catch { }
+        // 解析并补全包与动作标识（仅在必要时单次查询 spec）
+        if ((!pkgId || !actId) && (policy.packageAllowlist?.length || policy.actionAllowlist?.length)) {
+            try {
+                const spec = await service.discovery.describeAction(actionRef);
+                pkgId = pkgId || spec?.packageId;
+                actId = actId || spec?.id;
             }
-            if (!pkgId || !options.packageAllowlist.includes(pkgId)) {
-                return jsonResponse({
-                    ok: false,
-                    runId: "",
-                    error: {
-                        code: PACKAGE_FORBIDDEN,
-                        message: pkgId
-                            ? `Package '${pkgId}' is not in the allowed package list`
-                            : `Action '${actionRef}' does not belong to any allowed package`,
-                    },
-                }, 403, corsHeaders);
+            catch { }
+        }
+        if (!actId) {
+            try {
+                const parsed = parseActionRef(actionRef);
+                actId = parsed.actionId;
+                pkgId = pkgId || parsed.packageId;
             }
+            catch {
+                actId = actionRef;
+            }
+        }
+        // 校验 Package 允许白名单
+        if (!isPackageAllowedByPolicy(pkgId, policy)) {
+            return jsonResponse({
+                ok: false,
+                runId: "",
+                error: {
+                    code: PACKAGE_FORBIDDEN,
+                    message: pkgId
+                        ? `Package '${pkgId}' is not in the allowed package list`
+                        : `Action '${actionRef}' does not belong to any allowed package`,
+                },
+            }, 403, corsHeaders);
+        }
+        // 校验 Action 允许白名单
+        if (!isActionAllowedByPolicy({ packageId: pkgId, actionId: actId }, policy)) {
+            return jsonResponse({
+                ok: false,
+                runId: "",
+                error: {
+                    code: ACTION_FORBIDDEN,
+                    message: `Action '${actionRef}' is not in the allowed action list`,
+                },
+            }, 403, corsHeaders);
         }
         let body = {};
         try {

package/dist/server/routes/common.d.ts

@@ -1,19 +1,8 @@
 import type { PackageInfo } from "../../package/types.js";
-import type { ActionDockService } from "../../service/types.js";
-import type { ServerOptions } from "../types.js";
-/**
- * 路由处理统一上下文对象。
- */
-export interface RouteContext {
-    req: Request;
-    url: URL;
-    pathname: string;
-    corsHeaders: Record<string, string>;
-    projectRoot: string | null;
-    customHome?: string;
-    service: ActionDockService;
-    options: ServerOptions;
-}
+import type { EffectiveServerPolicy, RouteContext, ServerOptions } from "../types.js";
+import { ActionForbiddenError, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, isActionAllowed, isActionAllowedByPolicy, isManagementAllowedByPolicy, isPackageAllowedByPolicy, PackageNotAllowedError } from "../policy.js";
+export type { RouteContext };
+export { ActionForbiddenError, PackageNotAllowedError, isActionAllowed, isActionAllowedByPolicy, isPackageAllowedByPolicy, isManagementAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, };
 /**
  * 构造带 CORS 头的标准 JSON HTTP 响应。
  */
@@ -22,22 +11,22 @@ export declare function jsonResponse(data: unknown, status?: number, corsHeaders
  * 剥离标准版本前缀 (/api/v2/)，获取相对路由子路径。
  */
 export declare function getSubPath(pathname: string): string;
-import { ActionDockError } from "../../errors.js";
 /**
- * 包未列入白名单拒绝访问异常。
+ * 校验目标 action 是否属于允许动作白名单。
+ * 当 options 或 policy 中的 actionAllowlist 存在且目标 action 不在白名单中时抛出 403 ACTION_FORBIDDEN 异常。
  */
-export declare class PackageNotAllowedError extends ActionDockError {
-    status: number;
-    statusCode: number;
-    constructor(packageId: string);
-}
+export declare function assertActionAllowed(action: {
+    actionId?: string;
+    id?: string;
+    packageId?: string;
+} | string, options?: ServerOptions | EffectiveServerPolicy): void;
 /**
  * 校验目标 packageId 是否属于允许包白名单。
- * 当 options.packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
+ * 当 options 或 policy 中的 packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
  */
-export declare function assertPackageAllowed(packageId: string, options?: ServerOptions): void;
+export declare function assertPackageAllowed(packageId: string, options?: ServerOptions | EffectiveServerPolicy): void;
 /**
  * 解析并确定生效的目标 packageId。
  * 遵循严格的解析规则与白名单检查。
  */
-export declare function resolveTargetPackageId(packages: PackageInfo[], requestedPackageId?: string, options?: ServerOptions): string;
+export declare function resolveTargetPackageId(packages: PackageInfo[], requestedPackageId?: string, options?: ServerOptions | EffectiveServerPolicy): string;

package/dist/server/routes/common.js

@@ -1,4 +1,7 @@
 import { assertValidPackageId } from "../../utils/index.js";
+import { ActionDockError, PACKAGE_NOT_FOUND } from "../../errors.js";
+import { ActionForbiddenError, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, isActionAllowed, isActionAllowedByPolicy, isManagementAllowedByPolicy, isPackageAllowedByPolicy, PackageNotAllowedError, } from "../policy.js";
+export { ActionForbiddenError, PackageNotAllowedError, isActionAllowed, isActionAllowedByPolicy, isPackageAllowedByPolicy, isManagementAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, };
 /**
  * 构造带 CORS 头的标准 JSON HTTP 响应。
  */
@@ -20,36 +23,37 @@ export function getSubPath(pathname) {
     }
     return pathname;
 }
-import { ActionDockError, PACKAGE_NOT_FOUND, PACKAGE_NOT_ALLOWED } from "../../errors.js";
 /**
- * 包未列入白名单拒绝访问异常。
+ * 校验目标 action 是否属于允许动作白名单。
+ * 当 options 或 policy 中的 actionAllowlist 存在且目标 action 不在白名单中时抛出 403 ACTION_FORBIDDEN 异常。
  */
-export class PackageNotAllowedError extends ActionDockError {
-    status = 403;
-    statusCode = 403;
-    constructor(packageId) {
-        super(PACKAGE_NOT_ALLOWED, `Package '${packageId}' is not in the allowed package list`);
-        this.name = "PackageNotAllowedError";
-        Object.setPrototypeOf(this, PackageNotAllowedError.prototype);
-    }
+export function assertActionAllowed(action, options) {
+    const policy = options
+        ? {
+            packageAllowlist: options.packageAllowlist,
+            actionAllowlist: options.actionAllowlist,
+        }
+        : undefined;
+    assertActionAllowedByPolicy(action, policy);
 }
 /**
  * 校验目标 packageId 是否属于允许包白名单。
- * 当 options.packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
+ * 当 options 或 policy 中的 packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
  */
 export function assertPackageAllowed(packageId, options) {
-    if (options?.packageAllowlist &&
-        Array.isArray(options.packageAllowlist) &&
-        options.packageAllowlist.length > 0 &&
-        !options.packageAllowlist.includes(packageId)) {
-        throw new PackageNotAllowedError(packageId);
-    }
+    const policy = options
+        ? {
+            packageAllowlist: options.packageAllowlist,
+        }
+        : undefined;
+    assertPackageAllowedByPolicy(packageId, policy);
 }
 /**
  * 解析并确定生效的目标 packageId。
  * 遵循严格的解析规则与白名单检查。
  */
 export function resolveTargetPackageId(packages, requestedPackageId, options) {
+    const allowlist = options?.packageAllowlist;
     if (requestedPackageId) {
         if (requestedPackageId === "global") {
             return "global";
@@ -63,10 +67,10 @@ export function resolveTargetPackageId(packages, requestedPackageId, options) {
         return matched.id;
     }
     let targetId;
-    if (options?.packageAllowlist &&
-        Array.isArray(options.packageAllowlist) &&
-        options.packageAllowlist.length > 0) {
-        const allowed = packages.find((p) => options.packageAllowlist.includes(p.id));
+    if (allowlist &&
+        Array.isArray(allowlist) &&
+        allowlist.length > 0) {
+        const allowed = packages.find((p) => allowlist.includes(p.id));
         targetId = allowed ? allowed.id : (packages[0]?.id || "");
     }
     else if (packages.length > 0) {

package/dist/server/routes/config.d.ts

@@ -1,6 +1,6 @@
 import { type RouteContext } from "./common.js";
 /**
  * 处理配置元数据与当前值读取、更新及删除接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export declare function handleConfigRoutes(ctx: RouteContext): Promise<Response | null>;

package/dist/server/routes/config.js

@@ -2,7 +2,7 @@ import { CAPABILITY_UNAVAILABLE, CONFIG_DELETE_ERROR, CONFIG_ENV_ERROR, CONFIG_L
 import { resolveEnvValue } from "../../runtime/index.js";
 import { isSecretConfigKey, sanitizeConfigDefinitions } from "../../storage/index.js";
 import { readJsonBody } from "../body.js";
-import { getSubPath, jsonResponse, resolveTargetPackageId } from "./common.js";
+import { getSubPath, isManagementAllowedByPolicy, jsonResponse, resolveTargetPackageId, } from "./common.js";
 function isClientConfigError(err) {
     return (err?.code === PACKAGE_NOT_FOUND ||
         err?.code === INVALID_PACKAGE_ID ||
@@ -13,10 +13,10 @@ function isClientConfigError(err) {
 }
 /**
  * 处理配置元数据与当前值读取、更新及删除接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export async function handleConfigRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, options, service } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     const isConfigRoute = subpath === "/config" ||
         subpath.startsWith("/config/") ||
@@ -25,7 +25,7 @@ export async function handleConfigRoutes(ctx) {
         return null;
     }
     // 校验管理能力开关
-    if (options.enableManagement !== true || !service.management?.config) {
+    if (!isManagementAllowedByPolicy(policy) || !service.management?.config) {
         return jsonResponse({
             ok: false,
             error: {
@@ -39,7 +39,7 @@ export async function handleConfigRoutes(ctx) {
         try {
             const pkgs = await service.discovery.listPackages();
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const pkg = pkgs.find((p) => p.id === targetPackageId);
             const declared = pkg?.config || {};
             const envChecks = [];
@@ -76,7 +76,7 @@ export async function handleConfigRoutes(ctx) {
         try {
             const pkgs = await service.discovery.listPackages();
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const pkg = pkgs.find((p) => p.id === targetPackageId);
             const rawDeclared = pkg?.config || {};
             const declared = sanitizeConfigDefinitions(rawDeclared) || {};
@@ -112,7 +112,7 @@ export async function handleConfigRoutes(ctx) {
             const body = await readJsonBody(req, { maxBytes: options.maxBodyBytes });
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || body.package || undefined;
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const key = body.key;
             if (!key) {
                 return jsonResponse({ ok: false, error: { code: INVALID_ARGUMENT, message: "Config 'key' is required" } }, 400, corsHeaders);
@@ -141,7 +141,7 @@ export async function handleConfigRoutes(ctx) {
             const key = decodeURIComponent(configKeyMatch[1]);
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const deleted = await service.management.config.delete(targetPackageId, key);
             return jsonResponse({ ok: true, packageId: targetPackageId, key, deleted }, 200, corsHeaders);
         }

package/dist/server/routes/doctor.js

@@ -5,14 +5,14 @@ import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
  * 处理环境与依赖诊断接口（GET /api/v2/doctor 与 /doctor）。
  */
 export async function handleDoctorRoute(ctx) {
-    const { req, url, pathname, corsHeaders, projectRoot, customHome, service, options } = ctx;
+    const { req, url, pathname, corsHeaders, projectRoot, customHome, service, options, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     if (subpath !== "/doctor" || req.method !== "GET") {
         return null;
     }
     try {
         const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-        if (options.packageAllowlist && options.packageAllowlist.length > 0) {
+        if (policy.packageAllowlist && policy.packageAllowlist.length > 0) {
             if (!targetPkg) {
                 return jsonResponse({
                     ok: false,
@@ -24,7 +24,7 @@ export async function handleDoctorRoute(ctx) {
             }
         }
         if (targetPkg) {
-            assertPackageAllowed(targetPkg, options);
+            assertPackageAllowed(targetPkg, policy);
         }
         let packageRoot;
         if (targetPkg) {
@@ -36,7 +36,7 @@ export async function handleDoctorRoute(ctx) {
             cwd: packageRoot || projectRoot || process.cwd(),
             packageIdOrPath: packageRoot || targetPkg,
             customHome,
-            packageAllowlist: options.packageAllowlist,
+            packageAllowlist: policy.packageAllowlist,
         });
         return jsonResponse({ ok: true, report }, 200, corsHeaders);
     }

package/dist/server/routes/health.js

@@ -6,12 +6,12 @@ import { jsonResponse } from "./common.js";
  * 处理健康检查与就绪状态接口（支持 /api/v2/health 与 /health）。
  */
 export async function handleHealthRoute(ctx) {
-    const { req, pathname, corsHeaders, options, projectRoot } = ctx;
+    const { req, pathname, corsHeaders, options, projectRoot, activePolicy: policy } = ctx;
     if (pathname !== "/api/v2/health" &&
         pathname !== "/health") {
         return null;
     }
-    if (!verifyBearerToken(req, options.token, options)) {
+    if (!verifyBearerToken(req, policy.token, options)) {
         return jsonResponse({
             ok: false,
             error: {

package/dist/server/routes/info.js

@@ -2,7 +2,7 @@ import { filterWithFallbackInfo } from "../../filter/index.js";
 import { INFO_ERROR, PACKAGE_NOT_ALLOWED, PACKAGE_NOT_FOUND, PACKAGES_INFO_ERROR } from "../../errors.js";
 import { ACTIONDOCK_VERSION } from "../../version.js";
 import { sanitizeConfigDefinitions } from "../../storage/index.js";
-import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
+import { assertPackageAllowed, filterPackagesByPolicy, getSubPath, jsonResponse } from "./common.js";
 function sanitizePackage(pkg, exposeDebugInfo) {
     if (!pkg)
         return pkg;
@@ -22,20 +22,17 @@ function sanitizePackage(pkg, exposeDebugInfo) {
  * - GET /api/v2/packages 与 GET /packages -> 委托 service.discovery.listPackages()
  */
 export async function handleInfoRoute(ctx) {
-    const { req, url, pathname, corsHeaders, options, service, projectRoot } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, projectRoot, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Packages List: GET /api/v2/packages, /packages
     if ((subpath === "/packages" || pathname === "/api/v2/packages" || pathname === "/packages") && req.method === "GET") {
         try {
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             const rawPackages = await service.discovery.listPackages();
-            let packages = rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo));
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                packages = packages.filter((p) => p.id && options.packageAllowlist.includes(p.id));
-            }
+            const packages = filterPackagesByPolicy(rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo)), policy);
             return jsonResponse({
                 ok: true,
                 packages,
@@ -64,13 +61,10 @@ export async function handleInfoRoute(ctx) {
             const intent = url.searchParams.get("intent") || undefined;
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             const rawPackages = await service.info();
-            let packages = rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo));
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                packages = packages.filter((p) => p.id && options.packageAllowlist.includes(p.id));
-            }
+            const packages = filterPackagesByPolicy(rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo)), policy);
             if (isTree) {
                 return jsonResponse({ ok: true, type: "tree", packages }, 200, corsHeaders);
             }

package/dist/server/routes/playbooks.js

@@ -1,11 +1,11 @@
 import { filterByIntent } from "../../filter/index.js";
 import { PACKAGE_NOT_ALLOWED, PLAYBOOK_NOT_FOUND, PLAYBOOKS_LIST_ERROR } from "../../errors.js";
-import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
+import { assertPackageAllowed, getSubPath, isPackageAllowedByPolicy, jsonResponse } from "./common.js";
 /**
  * 处理 Playbook 规程相关的 HTTP 路由（列表与 SOP 详情查询）。
  */
 export async function handlePlaybooksRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, service, options } = ctx;
+    const { req, url, pathname, corsHeaders, service, options, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Playbooks List: GET /api/v2/playbooks, GET /playbooks
     if (subpath === "/playbooks" && req.method === "GET") {
@@ -13,14 +13,14 @@ export async function handlePlaybooksRoutes(ctx) {
             const intent = url.searchParams.get("intent") || undefined;
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             let pbs = await service.discovery.listPlaybooks({ intent, package: targetPkg });
             if (targetPkg) {
                 pbs = pbs.filter((p) => p.packageId === targetPkg);
             }
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                pbs = pbs.filter((p) => p.packageId && options.packageAllowlist.includes(p.packageId));
+            if (policy.packageAllowlist && Array.isArray(policy.packageAllowlist) && policy.packageAllowlist.length > 0) {
+                pbs = pbs.filter((p) => isPackageAllowedByPolicy(p.packageId, policy));
             }
             if (intent) {
                 pbs = filterByIntent(pbs, intent, [(p) => p.id, (p) => p.description || "", (p) => p.packageId || "", (p) => (p.actions || []).join(" ")], false);
@@ -46,7 +46,7 @@ export async function handlePlaybooksRoutes(ctx) {
         const packageId = decodeURIComponent(pkgPlaybookMatch[1]);
         const playbookId = decodeURIComponent(pkgPlaybookMatch[2]);
         try {
-            assertPackageAllowed(packageId, options);
+            assertPackageAllowed(packageId, policy);
         }
         catch (err) {
             return jsonResponse({
@@ -79,7 +79,7 @@ export async function handlePlaybooksRoutes(ctx) {
         if (playbookId.includes("/")) {
             const pkgFromRef = playbookId.slice(0, playbookId.lastIndexOf("/"));
             try {
-                assertPackageAllowed(pkgFromRef, options);
+                assertPackageAllowed(pkgFromRef, policy);
             }
             catch (err) {
                 return jsonResponse({
@@ -101,7 +101,7 @@ export async function handlePlaybooksRoutes(ctx) {
                     pkgId = matched.packageId;
                 }
             }
-            assertPackageAllowed(pkgId, options);
+            assertPackageAllowed(pkgId, policy);
             return jsonResponse(pb, 200, corsHeaders);
         }
         catch (err) {