@actiondock/core 2.9.1 → 2.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actiondock/core",
-  "version": "2.9.1",
+  "version": "2.11.0",
   "description": "ActionDock Core Engine - Project loader, runtime execution, SQLite storage, standalone builder, and skill exporter",
   "type": "module",
   "main": "./dist/index.js",
@@ -9,45 +9,43 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "bun": "./src/index.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./server": {
       "types": "./dist/server/index.d.ts",
-      "bun": "./src/server/index.ts",
       "import": "./dist/server/index.js",
       "default": "./dist/server/index.js"
     },
     "./project": {
       "types": "./dist/project/index.d.ts",
-      "bun": "./src/project/index.ts",
       "import": "./dist/project/index.js",
       "default": "./dist/project/index.js"
     },
     "./registry": {
       "types": "./dist/registry/index.d.ts",
-      "bun": "./src/registry/index.ts",
       "import": "./dist/registry/index.js",
       "default": "./dist/registry/index.js"
     },
     "./profile": {
       "types": "./dist/profile/index.d.ts",
-      "bun": "./src/profile/index.ts",
       "import": "./dist/profile/index.js",
       "default": "./dist/profile/index.js"
     },
     "./graph": {
-      "types": "./dist/graph/index.d.ts",
-      "bun": "./src/graph/index.ts",
-      "import": "./dist/graph/index.js",
-      "default": "./dist/graph/index.js"
+      "types": "./dist/catalog/index.d.ts",
+      "import": "./dist/catalog/index.js",
+      "default": "./dist/catalog/index.js"
     },
     "./package": {
       "types": "./dist/package/index.d.ts",
-      "bun": "./src/package/index.ts",
       "import": "./dist/package/index.js",
       "default": "./dist/package/index.js"
+    },
+    "./warning": {
+      "types": "./dist/utils/warning.d.ts",
+      "import": "./dist/utils/warning.js",
+      "default": "./dist/utils/warning.js"
     }
   },
   "files": [
@@ -66,7 +64,7 @@
     "test": "node ../../scripts/run-tests.ts"
   },
   "dependencies": {
-    "@actiondock/sdk": "^2.9.1",
+    "@actiondock/sdk": "^2.11.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "undici": "^7.29.1"

package/dist/execution/index.d.ts

@@ -1,2 +0,0 @@
-export * from "./types.js";
-export { DefaultExecutionService, DefaultExecutionService as ExecutionService, type ExecutionServiceOptions, } from "./service.js";

package/dist/execution/index.js

@@ -1,2 +0,0 @@
-export * from "./types.js";
-export { DefaultExecutionService, DefaultExecutionService as ExecutionService, } from "./service.js";

package/dist/filter/index.d.ts

@@ -1 +0,0 @@
-export * from "./intent.js";

package/dist/filter/index.js

@@ -1 +0,0 @@
-export * from "./intent.js";

package/dist/graph/index.d.ts

@@ -1,4 +0,0 @@
-export * from "../catalog/graph.js";
-export { parseActionRef, resolveAction } from "../catalog/resolve-action.js";
-export { resolvePlaybook } from "../catalog/resolve-playbook.js";
-export { DefaultActionCatalog, type ActionCatalog } from "../catalog/action-catalog.js";

package/dist/graph/index.js

@@ -1,4 +0,0 @@
-export * from "../catalog/graph.js";
-export { parseActionRef, resolveAction } from "../catalog/resolve-action.js";
-export { resolvePlaybook } from "../catalog/resolve-playbook.js";
-export { DefaultActionCatalog } from "../catalog/action-catalog.js";

package/dist/input/metadata.d.ts

@@ -1,99 +0,0 @@
-import { type CliInputAdviceV1 } from "./advice.js";
-/**
- * CLI 输入传输机制元数据契约（v1）。
- */
-export interface InputTransportV1 {
-    version: 1;
-    defaultInputMode: "empty-object";
-    fullJson: {
-        inlineOption: "--input";
-        fileOption: "--input-file";
-        stdinValue: "-";
-        preferredLargeInputMode: "stdin";
-        encoding: "utf-8";
-        maxInputBytes: number;
-        maxJsonDepth: number;
-    };
-}
-/**
- * CLI 扁平编码规格元数据契约（v1）。
- */
-export interface CliInputEncodingV1 {
-    name: "flat-json-value";
-    version: 1;
-    scope: "cli-argv";
-    root: "object";
-    operators: {
-        string: "=";
-        json: ":=";
-    };
-    limits: {
-        maxAssignments: number;
-        maxPathDepth: number;
-        maxPathBytes: number;
-        maxPropertyKeyBytes: number;
-        maxRawValueBytes: number;
-        maxJsonLiteralBytes: number;
-        maxTotalRawBytes: number;
-        maxArrayIndex: number;
-        maxMaterializedBytes: number;
-        maxJsonDepth: number;
-    };
-}
-/**
- * CLI 输入安全策略元数据契约（v1）。
- */
-export interface InputPolicyV1 {
-    version: 1;
-    scope: "cli-pre-target";
-    propertyScope: "recursive";
-    forbiddenPropertyNames: readonly string[];
-}
-/**
- * CLI describe --json 输入元数据聚合契约（v1）。
- */
-export interface CliDescribeInputMetadataV1 {
-    inputTransport: InputTransportV1;
-    inputEncoding: CliInputEncodingV1;
-    inputPolicy: InputPolicyV1;
-    inputAdvice: CliInputAdviceV1;
-}
-/**
- * CLI 输入错误信封结构契约。
- */
-export interface CliInputErrorEnvelope {
-    ok: false;
-    error: {
-        code: string;
-        message: string;
-        details?: unknown;
-    };
-}
-/**
- * 构造输入传输层元数据（v1）。
- */
-export declare function buildInputTransportV1(): InputTransportV1;
-/**
- * 构造 CLI 扁平输入编码元数据（v1）。
- */
-export declare function buildCliInputEncodingV1(): CliInputEncodingV1;
-/**
- * 构造输入策略元数据（v1）。
- * 明确标注 scope 为 "cli-pre-target"，防止远端目标未隔离策略造成歧义。
- */
-export declare function buildInputPolicyV1(): InputPolicyV1;
-/**
- * 聚合构造 CLI describe --json 所需的完整输入元数据。
- *
- * @param schema Action 的 inputSchema 定义
- * @returns 包含 transport、encoding、policy 与 advice 的聚合元数据对象
- */
-export declare function buildCliDescribeInputMetadataV1(schema: unknown): CliDescribeInputMetadataV1;
-/**
- * 格式化输入异常为 CLI 人类可读文本。
- */
-export declare function formatInputErrorForCli(err: unknown): string;
-/**
- * 将输入异常转换为统一的 CLI 错误信封结构。
- */
-export declare function toCliInputErrorEnvelope(err: unknown): CliInputErrorEnvelope;

package/dist/input/metadata.js

@@ -1,99 +0,0 @@
-import { DEFAULT_MAX_INPUT_BYTES } from "./file-input.js";
-import { DEFAULT_MAX_JSON_DEPTH } from "../json/value-validator.js";
-import { DEFAULT_MAX_ASSIGNMENTS, DEFAULT_MAX_PATH_DEPTH, DEFAULT_MAX_PATH_LENGTH, DEFAULT_MAX_PROPERTY_KEY_LENGTH, DEFAULT_MAX_RAW_VALUE_LENGTH, DEFAULT_MAX_JSON_LITERAL_LENGTH, DEFAULT_MAX_TOTAL_RAW_BYTES, DEFAULT_MAX_ARRAY_INDEX, DEFAULT_MAX_MATERIALIZED_SIZE_BYTES, } from "./flat-parser.js";
-import { FORBIDDEN_ACTION_INPUT_PROPERTIES } from "./flat-predicates.js";
-import { buildCliInputAdviceV1 } from "./advice.js";
-/**
- * 构造输入传输层元数据（v1）。
- */
-export function buildInputTransportV1() {
-    return {
-        version: 1,
-        defaultInputMode: "empty-object",
-        fullJson: {
-            inlineOption: "--input",
-            fileOption: "--input-file",
-            stdinValue: "-",
-            preferredLargeInputMode: "stdin",
-            encoding: "utf-8",
-            maxInputBytes: DEFAULT_MAX_INPUT_BYTES,
-            maxJsonDepth: DEFAULT_MAX_JSON_DEPTH,
-        },
-    };
-}
-/**
- * 构造 CLI 扁平输入编码元数据（v1）。
- */
-export function buildCliInputEncodingV1() {
-    return {
-        name: "flat-json-value",
-        version: 1,
-        scope: "cli-argv",
-        root: "object",
-        operators: {
-            string: "=",
-            json: ":=",
-        },
-        limits: {
-            maxAssignments: DEFAULT_MAX_ASSIGNMENTS,
-            maxPathDepth: DEFAULT_MAX_PATH_DEPTH,
-            maxPathBytes: DEFAULT_MAX_PATH_LENGTH,
-            maxPropertyKeyBytes: DEFAULT_MAX_PROPERTY_KEY_LENGTH,
-            maxRawValueBytes: DEFAULT_MAX_RAW_VALUE_LENGTH,
-            maxJsonLiteralBytes: DEFAULT_MAX_JSON_LITERAL_LENGTH,
-            maxTotalRawBytes: DEFAULT_MAX_TOTAL_RAW_BYTES,
-            maxArrayIndex: DEFAULT_MAX_ARRAY_INDEX,
-            maxMaterializedBytes: DEFAULT_MAX_MATERIALIZED_SIZE_BYTES,
-            maxJsonDepth: DEFAULT_MAX_JSON_DEPTH,
-        },
-    };
-}
-/**
- * 构造输入策略元数据（v1）。
- * 明确标注 scope 为 "cli-pre-target"，防止远端目标未隔离策略造成歧义。
- */
-export function buildInputPolicyV1() {
-    return {
-        version: 1,
-        scope: "cli-pre-target",
-        propertyScope: "recursive",
-        forbiddenPropertyNames: FORBIDDEN_ACTION_INPUT_PROPERTIES,
-    };
-}
-/**
- * 聚合构造 CLI describe --json 所需的完整输入元数据。
- *
- * @param schema Action 的 inputSchema 定义
- * @returns 包含 transport、encoding、policy 与 advice 的聚合元数据对象
- */
-export function buildCliDescribeInputMetadataV1(schema) {
-    return {
-        inputTransport: buildInputTransportV1(),
-        inputEncoding: buildCliInputEncodingV1(),
-        inputPolicy: buildInputPolicyV1(),
-        inputAdvice: buildCliInputAdviceV1(schema),
-    };
-}
-/**
- * 格式化输入异常为 CLI 人类可读文本。
- */
-export function formatInputErrorForCli(err) {
-    const message = err?.message || String(err);
-    return `Error: ${message}`;
-}
-/**
- * 将输入异常转换为统一的 CLI 错误信封结构。
- */
-export function toCliInputErrorEnvelope(err) {
-    const code = err?.code || "INVALID_ARGUMENT";
-    const message = err?.message || String(err);
-    const details = err?.details;
-    return {
-        ok: false,
-        error: {
-            code,
-            message,
-            ...(details !== undefined ? { details } : {}),
-        },
-    };
-}

package/dist/invocation/index.d.ts

@@ -1,2 +0,0 @@
-export * from "./types.js";
-export * from "./policy.js";

package/dist/invocation/index.js

@@ -1,2 +0,0 @@
-export * from "./types.js";
-export * from "./policy.js";

package/dist/ipc/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./types.js";
-export * from "./diagnostic.js";
-export * from "./host.js";
-export * from "./service.js";

package/dist/ipc/index.js

@@ -1,4 +0,0 @@
-export * from "./types.js";
-export * from "./diagnostic.js";
-export * from "./host.js";
-export * from "./service.js";

package/dist/json/index.d.ts

@@ -1 +0,0 @@
-export * from "./value-validator.js";

package/dist/json/index.js

@@ -1 +0,0 @@
-export * from "./value-validator.js";

package/dist/json/value-validator.js

@@ -1,330 +0,0 @@
-import { isForbiddenActionInputPropertyName } from "../input/flat-predicates.js";
-/** 默认 JSON 最大嵌套深度限制（防止恶意超深结构） */
-export const DEFAULT_MAX_JSON_DEPTH = 256;
-/**
- * 按照 RFC 6901 转义单个 JSON Pointer 路径段。
- *
- * @param segment 路径段（属性名或数组索引）
- * @returns 转义后的路径段
- */
-export function escapeJsonPointerSegment(segment) {
-    return String(segment).replace(/~/g, "~0").replace(/\//g, "~1");
-}
-/**
- * 将路径段追加到基础 RFC 6901 JSON Pointer 路径后。
- *
- * @param basePath 基础路径
- * @param segment 待追加的路径段
- * @returns 拼接后的 JSON Pointer
- */
-export function appendJsonPointer(basePath, segment) {
-    return `${basePath}/${escapeJsonPointerSegment(segment)}`;
-}
-/**
- * 内部统一 JSON 值与输入策略遍历校验引擎。
- *
- * 遍历规范：
- * - 迭代式显式栈遍历：模拟调用栈，杜绝深层结构造成的堆栈溢出。
- * - 严格数值有限性：全链路检查所有数值满足 Number.isFinite，拦截 NaN 与 Infinity。
- * - 活跃祖先集合环路检测：仅在当前子树遍历期间在祖先集合中保留，完美放行有向无环（DAG）共享子结构。
- * - 严格对象与原型校验：仅允许 Object.prototype 与 null 原型，拒绝 Date、Map、Set 等非纯数据对象与类实例。
- * - 严格数组紧凑性：校验 0..length-1 全部存在，拒绝稀疏数组、额外属性与访问器元素。
- * - Proxy 异常防御：对所有反射与属性检查执行防护拦截，杜绝未分类异常泄漏。
- * - RFC 6901 路径追踪：全链路维护转义标准 JSON Pointer 路径。
- */
-function walkJsonValue(value, options, checkForbiddenProperties = false) {
-    const maxDepth = options?.maxDepth ?? DEFAULT_MAX_JSON_DEPTH;
-    const ancestors = new Set();
-    const stack = [{ type: "ENTER", value, depth: 0, path: "" }];
-    while (stack.length > 0) {
-        const frame = stack.pop();
-        if (frame.type === "EXIT") {
-            ancestors.delete(frame.target);
-            continue;
-        }
-        const { value: val, depth, path } = frame;
-        if (val === null || typeof val === "boolean" || typeof val === "string") {
-            continue;
-        }
-        if (typeof val === "number") {
-            if (!Number.isFinite(val) || Number.isNaN(val)) {
-                return {
-                    valid: false,
-                    kind: "json-value",
-                    code: "NON_FINITE_NUMBER",
-                    reason: `Number is non-finite or NaN (${val})`,
-                    path,
-                };
-            }
-            continue;
-        }
-        if (typeof val === "undefined") {
-            return {
-                valid: false,
-                kind: "json-value",
-                code: "UNDEFINED_JSON_VALUE",
-                reason: "Undefined value is not allowed in JSON",
-                path,
-            };
-        }
-        if (typeof val === "function" ||
-            typeof val === "symbol" ||
-            typeof val === "bigint") {
-            return {
-                valid: false,
-                kind: "json-value",
-                code: "UNSUPPORTED_JSON_TYPE",
-                reason: `Unsupported JSON type '${typeof val}'`,
-                path,
-            };
-        }
-        if (typeof val === "object") {
-            try {
-                if (ancestors.has(val)) {
-                    return {
-                        valid: false,
-                        kind: "json-value",
-                        code: "CIRCULAR_REFERENCE",
-                        reason: "Circular reference detected in object structure",
-                        path,
-                    };
-                }
-                if (depth > maxDepth) {
-                    return {
-                        valid: false,
-                        kind: "json-value",
-                        code: "MAX_JSON_DEPTH",
-                        reason: `Max JSON depth limit (${maxDepth}) exceeded`,
-                        path,
-                    };
-                }
-                const proto = Object.getPrototypeOf(val);
-                const isArr = Array.isArray(val);
-                if (isArr) {
-                    if (proto !== Array.prototype) {
-                        return {
-                            valid: false,
-                            kind: "json-value",
-                            code: "INVALID_JSON_OBJECT",
-                            reason: "Array prototype must be Array.prototype",
-                            path,
-                        };
-                    }
-                    const len = val.length;
-                    if (typeof len !== "number" ||
-                        !Number.isInteger(len) ||
-                        len < 0 ||
-                        len > Number.MAX_SAFE_INTEGER) {
-                        return {
-                            valid: false,
-                            kind: "json-value",
-                            code: "INVALID_JSON_OBJECT",
-                            reason: "Array length is invalid",
-                            path,
-                        };
-                    }
-                    const ownKeys = Reflect.ownKeys(val);
-                    if (ownKeys.length !== len + 1) {
-                        return {
-                            valid: false,
-                            kind: "json-value",
-                            code: "INVALID_JSON_OBJECT",
-                            reason: "Array must be dense without extra properties or holes",
-                            path,
-                        };
-                    }
-                    ancestors.add(val);
-                    stack.push({ type: "EXIT", target: val });
-                    for (let i = len - 1; i >= 0; i--) {
-                        const keyStr = String(i);
-                        const desc = Object.getOwnPropertyDescriptor(val, keyStr);
-                        const elemPath = appendJsonPointer(path, i);
-                        if (!desc) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Sparse array (missing element at index ${i})`,
-                                path: elemPath,
-                            };
-                        }
-                        if (desc.get !== undefined || desc.set !== undefined) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Accessor property not allowed at array index ${i}`,
-                                path: elemPath,
-                            };
-                        }
-                        if (!desc.enumerable) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Non-enumerable property not allowed at array index ${i}`,
-                                path: elemPath,
-                            };
-                        }
-                        if (desc.value === undefined) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "UNDEFINED_JSON_VALUE",
-                                reason: `Undefined value is not allowed at array index ${i}`,
-                                path: elemPath,
-                            };
-                        }
-                        stack.push({
-                            type: "ENTER",
-                            value: desc.value,
-                            depth: depth + 1,
-                            path: elemPath,
-                        });
-                    }
-                }
-                else {
-                    if (proto !== Object.prototype && proto !== null) {
-                        return {
-                            valid: false,
-                            kind: "json-value",
-                            code: "INVALID_JSON_OBJECT",
-                            reason: "Object prototype must be Object.prototype or null",
-                            path,
-                        };
-                    }
-                    const ownKeys = Reflect.ownKeys(val);
-                    ancestors.add(val);
-                    stack.push({ type: "EXIT", target: val });
-                    for (let i = ownKeys.length - 1; i >= 0; i--) {
-                        const key = ownKeys[i];
-                        if (typeof key !== "string") {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: "Symbol-keyed properties are not allowed in JSON object",
-                                path: appendJsonPointer(path, String(key)),
-                            };
-                        }
-                        const propPath = appendJsonPointer(path, key);
-                        if (checkForbiddenProperties &&
-                            isForbiddenActionInputPropertyName(key)) {
-                            return {
-                                valid: false,
-                                kind: "input-policy",
-                                code: "FORBIDDEN_PROPERTY",
-                                property: key,
-                                path: propPath,
-                                reason: `Forbidden property "${key}" is not allowed in Action input`,
-                            };
-                        }
-                        const desc = Object.getOwnPropertyDescriptor(val, key);
-                        if (!desc) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Property descriptor missing for key "${key}"`,
-                                path: propPath,
-                            };
-                        }
-                        if (desc.get !== undefined || desc.set !== undefined) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Accessor properties (getters/setters) are not allowed for key "${key}"`,
-                                path: propPath,
-                            };
-                        }
-                        if (!desc.enumerable) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "INVALID_JSON_OBJECT",
-                                reason: `Non-enumerable properties are not allowed for key "${key}"`,
-                                path: propPath,
-                            };
-                        }
-                        if (desc.value === undefined) {
-                            return {
-                                valid: false,
-                                kind: "json-value",
-                                code: "UNDEFINED_JSON_VALUE",
-                                reason: `Undefined value is not allowed for key "${key}"`,
-                                path: propPath,
-                            };
-                        }
-                        stack.push({
-                            type: "ENTER",
-                            value: desc.value,
-                            depth: depth + 1,
-                            path: propPath,
-                        });
-                    }
-                }
-            }
-            catch (err) {
-                return {
-                    valid: false,
-                    kind: "json-value",
-                    code: "INVALID_JSON_OBJECT",
-                    reason: `Failed to inspect object: ${err instanceof Error ? err.message : String(err)}`,
-                    path,
-                };
-            }
-        }
-    }
-    return { valid: true };
-}
-/**
- * 校验值是否为合法的 Canonical JSON 兼容结构。
- *
- * @param value 待校验的目标值
- * @param options 校验配置选项
- * @returns 校验结果对象
- */
-export function validateJsonValue(value, options) {
-    const res = walkJsonValue(value, options, false);
-    if (res.valid) {
-        return { valid: true };
-    }
-    if (res.kind === "input-policy") {
-        return {
-            valid: false,
-            code: "INVALID_JSON_OBJECT",
-            reason: res.reason,
-            path: res.path,
-        };
-    }
-    return {
-        valid: false,
-        code: res.code,
-        reason: res.reason,
-        path: res.path,
-    };
-}
-/**
- * 校验 Action 输入值是否满足 Canonical JsonValue 规范且符合 ActionDock 安全策略。
- * 在遍历过程中递归检查是否存在禁止属性（__proto__、constructor、prototype）。
- *
- * @param value 待校验的 Action 输入值
- * @param options 校验配置选项
- * @returns 校验结果对象
- */
-export function validateActionInputValue(value, options) {
-    return walkJsonValue(value, options, true);
-}
-/**
- * 断言值必须为合法的 Canonical JSON 兼容结构，若非法则抛出 TypeError。
- *
- * @param value 待断言的目标值
- * @param options 校验配置选项
- */
-export function assertJsonValue(value, options) {
-    const result = validateJsonValue(value, options);
-    if (!result.valid) {
-        throw new TypeError(`Invalid JSON value: ${result.reason}`);
-    }
-}

package/dist/node/index.d.ts

@@ -1 +0,0 @@
-export * from "./module-loader.js";

package/dist/node/index.js

@@ -1 +0,0 @@
-export * from "./module-loader.js";