@actiondock/core 2.8.0 → 2.9.1

package/dist/server/routes/common.js

@@ -1,4 +1,7 @@
 import { assertValidPackageId } from "../../utils/index.js";
+import { ActionDockError, PACKAGE_NOT_FOUND } from "../../errors.js";
+import { ActionForbiddenError, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, isActionAllowed, isActionAllowedByPolicy, isManagementAllowedByPolicy, isPackageAllowedByPolicy, PackageNotAllowedError, } from "../policy.js";
+export { ActionForbiddenError, PackageNotAllowedError, isActionAllowed, isActionAllowedByPolicy, isPackageAllowedByPolicy, isManagementAllowedByPolicy, filterActionsByPolicy, filterPackagesByPolicy, assertActionAllowedByPolicy, assertPackageAllowedByPolicy, };
 /**
  * 构造带 CORS 头的标准 JSON HTTP 响应。
  */
@@ -20,36 +23,37 @@ export function getSubPath(pathname) {
     }
     return pathname;
 }
-import { ActionDockError, PACKAGE_NOT_FOUND, PACKAGE_NOT_ALLOWED } from "../../errors.js";
 /**
- * 包未列入白名单拒绝访问异常。
+ * 校验目标 action 是否属于允许动作白名单。
+ * 当 options 或 policy 中的 actionAllowlist 存在且目标 action 不在白名单中时抛出 403 ACTION_FORBIDDEN 异常。
  */
-export class PackageNotAllowedError extends ActionDockError {
-    status = 403;
-    statusCode = 403;
-    constructor(packageId) {
-        super(PACKAGE_NOT_ALLOWED, `Package '${packageId}' is not in the allowed package list`);
-        this.name = "PackageNotAllowedError";
-        Object.setPrototypeOf(this, PackageNotAllowedError.prototype);
-    }
+export function assertActionAllowed(action, options) {
+    const policy = options
+        ? {
+            packageAllowlist: options.packageAllowlist,
+            actionAllowlist: options.actionAllowlist,
+        }
+        : undefined;
+    assertActionAllowedByPolicy(action, policy);
 }
 /**
  * 校验目标 packageId 是否属于允许包白名单。
- * 当 options.packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
+ * 当 options 或 policy 中的 packageAllowlist 存在且目标 packageId 不在白名单中时抛出 403 PACKAGE_NOT_ALLOWED 异常。
  */
 export function assertPackageAllowed(packageId, options) {
-    if (options?.packageAllowlist &&
-        Array.isArray(options.packageAllowlist) &&
-        options.packageAllowlist.length > 0 &&
-        !options.packageAllowlist.includes(packageId)) {
-        throw new PackageNotAllowedError(packageId);
-    }
+    const policy = options
+        ? {
+            packageAllowlist: options.packageAllowlist,
+        }
+        : undefined;
+    assertPackageAllowedByPolicy(packageId, policy);
 }
 /**
  * 解析并确定生效的目标 packageId。
  * 遵循严格的解析规则与白名单检查。
  */
 export function resolveTargetPackageId(packages, requestedPackageId, options) {
+    const allowlist = options?.packageAllowlist;
     if (requestedPackageId) {
         if (requestedPackageId === "global") {
             return "global";
@@ -63,10 +67,10 @@ export function resolveTargetPackageId(packages, requestedPackageId, options) {
         return matched.id;
     }
     let targetId;
-    if (options?.packageAllowlist &&
-        Array.isArray(options.packageAllowlist) &&
-        options.packageAllowlist.length > 0) {
-        const allowed = packages.find((p) => options.packageAllowlist.includes(p.id));
+    if (allowlist &&
+        Array.isArray(allowlist) &&
+        allowlist.length > 0) {
+        const allowed = packages.find((p) => allowlist.includes(p.id));
         targetId = allowed ? allowed.id : (packages[0]?.id || "");
     }
     else if (packages.length > 0) {

package/dist/server/routes/config.d.ts

@@ -1,6 +1,6 @@
 import { type RouteContext } from "./common.js";
 /**
  * 处理配置元数据与当前值读取、更新及删除接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export declare function handleConfigRoutes(ctx: RouteContext): Promise<Response | null>;

package/dist/server/routes/config.js

@@ -2,7 +2,7 @@ import { CAPABILITY_UNAVAILABLE, CONFIG_DELETE_ERROR, CONFIG_ENV_ERROR, CONFIG_L
 import { resolveEnvValue } from "../../runtime/index.js";
 import { isSecretConfigKey, sanitizeConfigDefinitions } from "../../storage/index.js";
 import { readJsonBody } from "../body.js";
-import { getSubPath, jsonResponse, resolveTargetPackageId } from "./common.js";
+import { getSubPath, isManagementAllowedByPolicy, jsonResponse, resolveTargetPackageId, } from "./common.js";
 function isClientConfigError(err) {
     return (err?.code === PACKAGE_NOT_FOUND ||
         err?.code === INVALID_PACKAGE_ID ||
@@ -13,10 +13,10 @@ function isClientConfigError(err) {
 }
 /**
  * 处理配置元数据与当前值读取、更新及删除接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export async function handleConfigRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, options, service } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     const isConfigRoute = subpath === "/config" ||
         subpath.startsWith("/config/") ||
@@ -25,7 +25,7 @@ export async function handleConfigRoutes(ctx) {
         return null;
     }
     // 校验管理能力开关
-    if (options.enableManagement !== true || !service.management?.config) {
+    if (!isManagementAllowedByPolicy(policy) || !service.management?.config) {
         return jsonResponse({
             ok: false,
             error: {
@@ -39,7 +39,7 @@ export async function handleConfigRoutes(ctx) {
         try {
             const pkgs = await service.discovery.listPackages();
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const pkg = pkgs.find((p) => p.id === targetPackageId);
             const declared = pkg?.config || {};
             const envChecks = [];
@@ -76,7 +76,7 @@ export async function handleConfigRoutes(ctx) {
         try {
             const pkgs = await service.discovery.listPackages();
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const pkg = pkgs.find((p) => p.id === targetPackageId);
             const rawDeclared = pkg?.config || {};
             const declared = sanitizeConfigDefinitions(rawDeclared) || {};
@@ -112,7 +112,7 @@ export async function handleConfigRoutes(ctx) {
             const body = await readJsonBody(req, { maxBytes: options.maxBodyBytes });
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || body.package || undefined;
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const key = body.key;
             if (!key) {
                 return jsonResponse({ ok: false, error: { code: INVALID_ARGUMENT, message: "Config 'key' is required" } }, 400, corsHeaders);
@@ -141,7 +141,7 @@ export async function handleConfigRoutes(ctx) {
             const key = decodeURIComponent(configKeyMatch[1]);
             const pkgParam = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const deleted = await service.management.config.delete(targetPackageId, key);
             return jsonResponse({ ok: true, packageId: targetPackageId, key, deleted }, 200, corsHeaders);
         }

package/dist/server/routes/doctor.js

@@ -5,14 +5,14 @@ import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
  * 处理环境与依赖诊断接口（GET /api/v2/doctor 与 /doctor）。
  */
 export async function handleDoctorRoute(ctx) {
-    const { req, url, pathname, corsHeaders, projectRoot, customHome, service, options } = ctx;
+    const { req, url, pathname, corsHeaders, projectRoot, customHome, service, options, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     if (subpath !== "/doctor" || req.method !== "GET") {
         return null;
     }
     try {
         const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
-        if (options.packageAllowlist && options.packageAllowlist.length > 0) {
+        if (policy.packageAllowlist && policy.packageAllowlist.length > 0) {
             if (!targetPkg) {
                 return jsonResponse({
                     ok: false,
@@ -24,7 +24,7 @@ export async function handleDoctorRoute(ctx) {
             }
         }
         if (targetPkg) {
-            assertPackageAllowed(targetPkg, options);
+            assertPackageAllowed(targetPkg, policy);
         }
         let packageRoot;
         if (targetPkg) {
@@ -36,7 +36,7 @@ export async function handleDoctorRoute(ctx) {
             cwd: packageRoot || projectRoot || process.cwd(),
             packageIdOrPath: packageRoot || targetPkg,
             customHome,
-            packageAllowlist: options.packageAllowlist,
+            packageAllowlist: policy.packageAllowlist,
         });
         return jsonResponse({ ok: true, report }, 200, corsHeaders);
     }

package/dist/server/routes/health.js

@@ -6,12 +6,12 @@ import { jsonResponse } from "./common.js";
  * 处理健康检查与就绪状态接口（支持 /api/v2/health 与 /health）。
  */
 export async function handleHealthRoute(ctx) {
-    const { req, pathname, corsHeaders, options, projectRoot } = ctx;
+    const { req, pathname, corsHeaders, options, projectRoot, activePolicy: policy } = ctx;
     if (pathname !== "/api/v2/health" &&
         pathname !== "/health") {
         return null;
     }
-    if (!verifyBearerToken(req, options.token, options)) {
+    if (!verifyBearerToken(req, policy.token, options)) {
         return jsonResponse({
             ok: false,
             error: {

package/dist/server/routes/info.js

@@ -2,7 +2,7 @@ import { filterWithFallbackInfo } from "../../filter/index.js";
 import { INFO_ERROR, PACKAGE_NOT_ALLOWED, PACKAGE_NOT_FOUND, PACKAGES_INFO_ERROR } from "../../errors.js";
 import { ACTIONDOCK_VERSION } from "../../version.js";
 import { sanitizeConfigDefinitions } from "../../storage/index.js";
-import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
+import { assertPackageAllowed, filterPackagesByPolicy, getSubPath, jsonResponse } from "./common.js";
 function sanitizePackage(pkg, exposeDebugInfo) {
     if (!pkg)
         return pkg;
@@ -22,20 +22,17 @@ function sanitizePackage(pkg, exposeDebugInfo) {
  * - GET /api/v2/packages 与 GET /packages -> 委托 service.discovery.listPackages()
  */
 export async function handleInfoRoute(ctx) {
-    const { req, url, pathname, corsHeaders, options, service, projectRoot } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, projectRoot, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Packages List: GET /api/v2/packages, /packages
     if ((subpath === "/packages" || pathname === "/api/v2/packages" || pathname === "/packages") && req.method === "GET") {
         try {
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             const rawPackages = await service.discovery.listPackages();
-            let packages = rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo));
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                packages = packages.filter((p) => p.id && options.packageAllowlist.includes(p.id));
-            }
+            const packages = filterPackagesByPolicy(rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo)), policy);
             return jsonResponse({
                 ok: true,
                 packages,
@@ -64,13 +61,10 @@ export async function handleInfoRoute(ctx) {
             const intent = url.searchParams.get("intent") || undefined;
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             const rawPackages = await service.info();
-            let packages = rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo));
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                packages = packages.filter((p) => p.id && options.packageAllowlist.includes(p.id));
-            }
+            const packages = filterPackagesByPolicy(rawPackages.map((p) => sanitizePackage(p, options.exposeDebugInfo)), policy);
             if (isTree) {
                 return jsonResponse({ ok: true, type: "tree", packages }, 200, corsHeaders);
             }

package/dist/server/routes/playbooks.js

@@ -1,11 +1,11 @@
 import { filterByIntent } from "../../filter/index.js";
 import { PACKAGE_NOT_ALLOWED, PLAYBOOK_NOT_FOUND, PLAYBOOKS_LIST_ERROR } from "../../errors.js";
-import { assertPackageAllowed, getSubPath, jsonResponse } from "./common.js";
+import { assertPackageAllowed, getSubPath, isPackageAllowedByPolicy, jsonResponse } from "./common.js";
 /**
  * 处理 Playbook 规程相关的 HTTP 路由（列表与 SOP 详情查询）。
  */
 export async function handlePlaybooksRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, service, options } = ctx;
+    const { req, url, pathname, corsHeaders, service, options, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Playbooks List: GET /api/v2/playbooks, GET /playbooks
     if (subpath === "/playbooks" && req.method === "GET") {
@@ -13,14 +13,14 @@ export async function handlePlaybooksRoutes(ctx) {
             const intent = url.searchParams.get("intent") || undefined;
             const targetPkg = url.searchParams.get("package") || url.searchParams.get("packageId") || undefined;
             if (targetPkg) {
-                assertPackageAllowed(targetPkg, options);
+                assertPackageAllowed(targetPkg, policy);
             }
             let pbs = await service.discovery.listPlaybooks({ intent, package: targetPkg });
             if (targetPkg) {
                 pbs = pbs.filter((p) => p.packageId === targetPkg);
             }
-            if (options.packageAllowlist && Array.isArray(options.packageAllowlist) && options.packageAllowlist.length > 0) {
-                pbs = pbs.filter((p) => p.packageId && options.packageAllowlist.includes(p.packageId));
+            if (policy.packageAllowlist && Array.isArray(policy.packageAllowlist) && policy.packageAllowlist.length > 0) {
+                pbs = pbs.filter((p) => isPackageAllowedByPolicy(p.packageId, policy));
             }
             if (intent) {
                 pbs = filterByIntent(pbs, intent, [(p) => p.id, (p) => p.description || "", (p) => p.packageId || "", (p) => (p.actions || []).join(" ")], false);
@@ -46,7 +46,7 @@ export async function handlePlaybooksRoutes(ctx) {
         const packageId = decodeURIComponent(pkgPlaybookMatch[1]);
         const playbookId = decodeURIComponent(pkgPlaybookMatch[2]);
         try {
-            assertPackageAllowed(packageId, options);
+            assertPackageAllowed(packageId, policy);
         }
         catch (err) {
             return jsonResponse({
@@ -79,7 +79,7 @@ export async function handlePlaybooksRoutes(ctx) {
         if (playbookId.includes("/")) {
             const pkgFromRef = playbookId.slice(0, playbookId.lastIndexOf("/"));
             try {
-                assertPackageAllowed(pkgFromRef, options);
+                assertPackageAllowed(pkgFromRef, policy);
             }
             catch (err) {
                 return jsonResponse({
@@ -101,7 +101,7 @@ export async function handlePlaybooksRoutes(ctx) {
                     pkgId = matched.packageId;
                 }
             }
-            assertPackageAllowed(pkgId, options);
+            assertPackageAllowed(pkgId, policy);
             return jsonResponse(pb, 200, corsHeaders);
         }
         catch (err) {

package/dist/server/routes/runs.js

@@ -1,12 +1,13 @@
-import { CAPABILITY_UNAVAILABLE, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, EXECUTION_FAILED, PACKAGE_FORBIDDEN, RUN_ALREADY_FINISHED, RUN_INTERRUPTED, RUN_NOT_FOUND, RUNS_CLEAR_ERROR, RUNS_LIST_ERROR, } from "../../errors.js";
+import { ACTION_FORBIDDEN, CAPABILITY_UNAVAILABLE, EVENT_BACKPRESSURE_LIMIT, EVENT_CURSOR_EXPIRED, EXECUTION_FAILED, PACKAGE_FORBIDDEN, RUN_ALREADY_FINISHED, RUN_INTERRUPTED, RUN_NOT_FOUND, RUNS_CLEAR_ERROR, RUNS_LIST_ERROR, } from "../../errors.js";
 import { isTerminalRunStatus } from "../../storage/types.js";
+import { parseDuration } from "../../utils/index.js";
 import { readJsonBody } from "../body.js";
-import { getSubPath, jsonResponse } from "./common.js";
+import { getSubPath, isActionAllowedByPolicy, isPackageAllowedByPolicy, jsonResponse } from "./common.js";
 /**
  * 处理历史运行记录查询、清理、详情及 SSE 流式日志接口。
  */
 export async function handleRunsRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, options, service } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     // 1. Runs List: GET /api/v2/runs, GET /runs
     if (subpath === "/runs" && req.method === "GET") {
@@ -20,10 +21,7 @@ export async function handleRunsRoutes(ctx) {
             const limit = Number.isFinite(parsedLimit) && parsedLimit > 0
                 ? Math.min(parsedLimit, 500)
                 : 50;
-            if (packageId &&
-                options.packageAllowlist &&
-                options.packageAllowlist.length > 0 &&
-                !options.packageAllowlist.includes(packageId)) {
+            if (packageId && !isPackageAllowedByPolicy(packageId, policy)) {
                 return jsonResponse({
                     ok: false,
                     error: {
@@ -32,6 +30,15 @@ export async function handleRunsRoutes(ctx) {
                     },
                 }, 403, corsHeaders);
             }
+            if (actionId && !isActionAllowedByPolicy({ packageId, actionId }, policy)) {
+                return jsonResponse({
+                    ok: false,
+                    error: {
+                        code: ACTION_FORBIDDEN,
+                        message: `Action '${packageId ? `${packageId}/${actionId}` : actionId}' is not in the allowed action list`,
+                    },
+                }, 403, corsHeaders);
+            }
             let allRuns = await service.runs.list({
                 actionId,
                 status,
@@ -39,8 +46,11 @@ export async function handleRunsRoutes(ctx) {
                 intent,
                 limit,
             });
-            if (options.packageAllowlist && options.packageAllowlist.length > 0) {
-                allRuns = allRuns.filter((r) => !r.packageId || options.packageAllowlist.includes(r.packageId));
+            if (policy.packageAllowlist && policy.packageAllowlist.length > 0) {
+                allRuns = allRuns.filter((r) => isPackageAllowedByPolicy(r.packageId, policy));
+            }
+            if (policy.actionAllowlist && policy.actionAllowlist.length > 0) {
+                allRuns = allRuns.filter((r) => isActionAllowedByPolicy({ packageId: r.packageId, actionId: r.actionId }, policy));
             }
             const sliced = allRuns.slice(0, limit);
             return jsonResponse({ ok: true, total: allRuns.length, items: sliced }, 200, corsHeaders);
@@ -60,10 +70,32 @@ export async function handleRunsRoutes(ctx) {
             const packageId = url.searchParams.get("packageId") || body.packageId || undefined;
             const actionId = url.searchParams.get("actionId") || body.actionId || undefined;
             const status = url.searchParams.get("status") || body.status || undefined;
-            if (packageId &&
-                options.packageAllowlist &&
-                options.packageAllowlist.length > 0 &&
-                !options.packageAllowlist.includes(packageId)) {
+            const rawOlderThan = url.searchParams.get("olderThan") ||
+                url.searchParams.get("olderThanMs") ||
+                body.olderThan ||
+                body.olderThanMs;
+            let olderThanMs;
+            if (typeof rawOlderThan === "number" && rawOlderThan > 0) {
+                olderThanMs = rawOlderThan;
+            }
+            else if (typeof rawOlderThan === "string" && rawOlderThan.trim()) {
+                try {
+                    olderThanMs = parseDuration(rawOlderThan);
+                }
+                catch { }
+            }
+            const rawKeep = url.searchParams.get("keep") || body.keep;
+            let keep;
+            if (typeof rawKeep === "number" && rawKeep >= 0) {
+                keep = rawKeep;
+            }
+            else if (typeof rawKeep === "string" && rawKeep.trim()) {
+                const parsed = parseInt(rawKeep.trim(), 10);
+                if (!isNaN(parsed) && parsed >= 0) {
+                    keep = parsed;
+                }
+            }
+            if (packageId && !isPackageAllowedByPolicy(packageId, policy)) {
                 return jsonResponse({
                     ok: false,
                     error: {
@@ -74,7 +106,13 @@ export async function handleRunsRoutes(ctx) {
             }
             let clearedCount = 0;
             if (service.runs.clear) {
-                clearedCount = await service.runs.clear({ packageId, actionId, status });
+                clearedCount = await service.runs.clear({
+                    packageId,
+                    actionId,
+                    status,
+                    olderThanMs,
+                    keep,
+                });
             }
             return jsonResponse({ ok: true, clearedCount }, 200, corsHeaders);
         }
@@ -82,6 +120,23 @@ export async function handleRunsRoutes(ctx) {
             return jsonResponse({ ok: false, error: { code: RUNS_CLEAR_ERROR, message: err.message } }, 500, corsHeaders);
         }
     }
+    // 2.1 Runs Clean Expired: POST /api/v2/runs/clean-expired, POST /runs/clean-expired
+    if (subpath === "/runs/clean-expired" && req.method === "POST") {
+        try {
+            let body = {};
+            if (req.headers.get("content-type")?.includes("json")) {
+                body = await readJsonBody(req, { maxBytes: options.maxBodyBytes }).catch(() => ({}));
+            }
+            let cleanedCount = 0;
+            if (service.runs.cleanExpired) {
+                cleanedCount = await service.runs.cleanExpired(body);
+            }
+            return jsonResponse({ ok: true, cleanedCount }, 200, corsHeaders);
+        }
+        catch (err) {
+            return jsonResponse({ ok: false, error: { code: RUNS_CLEAR_ERROR, message: err.message } }, 500, corsHeaders);
+        }
+    }
     // 3. Run Events SSE: GET /api/v2/runs/:runId/events (and stream alias)
     const runEventsMatch = subpath.match(/^\/runs\/([^/]+)\/(events|stream)$/);
     if (runEventsMatch && req.method === "GET") {
@@ -90,14 +145,21 @@ export async function handleRunsRoutes(ctx) {
         if (!run) {
             return jsonResponse({ ok: false, error: { code: RUN_NOT_FOUND, message: `Run '${runId}' not found` } }, 404, corsHeaders);
         }
-        if (options.packageAllowlist &&
-            options.packageAllowlist.length > 0 &&
-            (!run.packageId || !options.packageAllowlist.includes(run.packageId))) {
+        if (!isPackageAllowedByPolicy(run.packageId, policy)) {
             return jsonResponse({
                 ok: false,
                 error: {
                     code: PACKAGE_FORBIDDEN,
-                    message: `Package '${run.packageId}' is not in the allowed package list`,
+                    message: `Package '${run.packageId || "unknown"}' is not in the allowed package list`,
+                },
+            }, 403, corsHeaders);
+        }
+        if (!isActionAllowedByPolicy({ packageId: run.packageId, actionId: run.actionId }, policy)) {
+            return jsonResponse({
+                ok: false,
+                error: {
+                    code: ACTION_FORBIDDEN,
+                    message: `Action '${run.packageId ? `${run.packageId}/${run.actionId}` : run.actionId}' is not in the allowed action list`,
                 },
             }, 403, corsHeaders);
         }
@@ -258,9 +320,7 @@ export async function handleRunsRoutes(ctx) {
                 },
             }, 404, corsHeaders);
         }
-        if (options.packageAllowlist &&
-            options.packageAllowlist.length > 0 &&
-            (!run.packageId || !options.packageAllowlist.includes(run.packageId))) {
+        if (!isPackageAllowedByPolicy(run.packageId, policy)) {
             return jsonResponse({
                 ok: false,
                 error: {
@@ -269,22 +329,43 @@ export async function handleRunsRoutes(ctx) {
                 },
             }, 403, corsHeaders);
         }
+        if (!isActionAllowedByPolicy({ packageId: run.packageId, actionId: run.actionId }, policy)) {
+            return jsonResponse({
+                ok: false,
+                error: {
+                    code: ACTION_FORBIDDEN,
+                    message: `Action '${run.packageId ? `${run.packageId}/${run.actionId}` : run.actionId}' is not in the allowed action list`,
+                },
+            }, 403, corsHeaders);
+        }
         return jsonResponse(run, 200, corsHeaders);
     }
     // 5. Run Cancel: POST /api/v2/runs/:runId/cancel, POST /runs/:runId/cancel
     const runCancelMatch = subpath.match(/^\/runs\/([^/]+)\/cancel$/);
     if (runCancelMatch && req.method === "POST") {
         const runId = decodeURIComponent(runCancelMatch[1]);
-        if (options.packageAllowlist && options.packageAllowlist.length > 0) {
+        if ((policy.packageAllowlist && policy.packageAllowlist.length > 0) ||
+            (policy.actionAllowlist && policy.actionAllowlist.length > 0)) {
             const run = await service.runs.get(runId);
-            if (run && (!run.packageId || !options.packageAllowlist.includes(run.packageId))) {
-                return jsonResponse({
-                    ok: false,
-                    error: {
-                        code: PACKAGE_FORBIDDEN,
-                        message: `Package '${run.packageId}' is not in the allowed package list`,
-                    },
-                }, 403, corsHeaders);
+            if (run) {
+                if (!isPackageAllowedByPolicy(run.packageId, policy)) {
+                    return jsonResponse({
+                        ok: false,
+                        error: {
+                            code: PACKAGE_FORBIDDEN,
+                            message: `Package '${run.packageId || "unknown"}' is not in the allowed package list`,
+                        },
+                    }, 403, corsHeaders);
+                }
+                if (!isActionAllowedByPolicy({ packageId: run.packageId, actionId: run.actionId }, policy)) {
+                    return jsonResponse({
+                        ok: false,
+                        error: {
+                            code: ACTION_FORBIDDEN,
+                            message: `Action '${run.packageId ? `${run.packageId}/${run.actionId}` : run.actionId}' is not in the allowed action list`,
+                        },
+                    }, 403, corsHeaders);
+                }
             }
         }
         let body = {};

package/dist/server/routes/state.d.ts

@@ -1,6 +1,6 @@
 import { type RouteContext } from "./common.js";
 /**
  * 处理状态键名列表、读取、写入、删除及清空接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export declare function handleStateRoutes(ctx: RouteContext): Promise<Response | null>;

package/dist/server/routes/state.js

@@ -1,7 +1,7 @@
 import { decodeStateKey } from "../../storage/index.js";
 import { AMBIGUOUS_STATE_KEY, CAPABILITY_UNAVAILABLE, INVALID_ARGUMENT, INVALID_PACKAGE_ID, PACKAGE_NOT_ALLOWED, PACKAGE_NOT_FOUND, PATH_TRAVERSAL, STATE_CLEAR_ERROR, STATE_KEY_ERROR, STATE_KEY_NOT_FOUND, STATE_LIST_ERROR, } from "../../errors.js";
 import { readJsonBody } from "../body.js";
-import { getSubPath, jsonResponse, resolveTargetPackageId } from "./common.js";
+import { getSubPath, isManagementAllowedByPolicy, jsonResponse, resolveTargetPackageId, } from "./common.js";
 function isClientStateError(err) {
     return (err?.code === PACKAGE_NOT_FOUND ||
         err?.code === INVALID_PACKAGE_ID ||
@@ -13,10 +13,10 @@ function isClientStateError(err) {
 }
 /**
  * 处理状态键名列表、读取、写入、删除及清空接口。
- * 在未显式开启管理功能 (options.enableManagement !== true) 时返回 403 拒绝。
+ * 在未显式开启管理功能时返回 403 拒绝。
  */
 export async function handleStateRoutes(ctx) {
-    const { req, url, pathname, corsHeaders, options, service } = ctx;
+    const { req, url, pathname, corsHeaders, options, service, activePolicy: policy } = ctx;
     const subpath = getSubPath(pathname);
     const isStateRoute = subpath === "/state" ||
         subpath.startsWith("/state/") ||
@@ -25,7 +25,7 @@ export async function handleStateRoutes(ctx) {
         return null;
     }
     // 校验管理能力开关
-    if (options.enableManagement !== true || !service.management?.state) {
+    if (!isManagementAllowedByPolicy(policy) || !service.management?.state) {
         return jsonResponse({
             ok: false,
             error: {
@@ -42,7 +42,7 @@ export async function handleStateRoutes(ctx) {
             const nsParam = url.searchParams.get("namespace") ?? undefined;
             const prefix = url.searchParams.get("prefix") || "";
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const keys = await service.management.state.list(targetPackageId, actionParam, {
                 namespace: nsParam,
                 prefix,
@@ -71,7 +71,7 @@ export async function handleStateRoutes(ctx) {
             const actionParam = url.searchParams.get("action") || url.searchParams.get("actionId") || body.action || body.actionId || "";
             const baseNs = body.namespace ?? (url.searchParams.get("namespace") || undefined);
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             const clearedCount = await service.management.state.clear(targetPackageId, actionParam, {
                 namespace: baseNs,
                 all: Boolean(body.all ?? url.searchParams.get("all") === "true"),
@@ -102,7 +102,7 @@ export async function handleStateRoutes(ctx) {
             const actionParam = url.searchParams.get("action") || url.searchParams.get("actionId") || "";
             const nsParam = url.searchParams.get("namespace") || undefined;
             const pkgs = await service.discovery.listPackages();
-            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, options);
+            const targetPackageId = resolveTargetPackageId(pkgs, pkgParam, policy);
             if (req.method === "GET") {
                 const entry = await service.management.state.get(targetPackageId, actionParam, key, {
                     namespace: nsParam,

package/dist/server/security.d.ts

@@ -15,6 +15,17 @@ export interface VerifyBearerTokenOptions {
     /** 是否允许通过 URL 查询参数携带 Token（默认 false） */
     allowQueryToken?: boolean;
 }
+/**
+ * 从 HTTP 请求中提取 Bearer Token。
+ *
+ * 默认仅接受 HTTP 请求头: `Authorization: Bearer <token>`。
+ * 仅当 allowQueryToken 为 true 时才允许解析 URL 查询参数 `?token=<token>`。
+ *
+ * @param req 传入的 HTTP Request 对象
+ * @param allowQueryToken 是否允许从 URL 查询参数解析 Token
+ * @returns 提取出的 Token 字符串，若未携带则返回 null
+ */
+export declare function extractBearerToken(req: Request, allowQueryToken?: boolean): string | null;
 /**
  * 校验 HTTP 请求中的鉴权令牌是否有效。
  *