@sema-agent/server 7.79.0 → 7.79.1

package/dist/http/request-guards.js

@@ -0,0 +1,205 @@
+import { GLOBAL_USAGE_KEY, usageRetryAfterMs } from "@sema-agent/core";
+import { HttpError, principalFrom } from "../security.js";
+import { RUN_NOT_FOUND_MESSAGE } from "./route-ctx.js";
+import { sendError } from "./send.js";
+import { authorized, systemFor, gatedPrincipal, explicitOperatorOk, runOwnerReadable, sendPrincipalRefusal } from "./principal-gate.js";
+const MAX_BODY = 8 * 1024 * 1024;
+export function createRequestGuards(ctx) {
+    const { deps } = ctx;
+    function quotaExceeded(req, res) {
+        if (!deps.costQuota)
+            return false;
+        const principal = gatedPrincipal(req, deps.config);
+        if (!principal)
+            return false;
+        const d = deps.costQuota.check(principal);
+        if (d.allowed)
+            return false;
+        deps.metrics?.inc("cost_quota_rejected_total");
+        res.setHeader("retry-after", String(d.retryAfterSec));
+        sendError(res, 429, "limit.cost_quota_exceeded", "cost quota exceeded", { usedMicroUsd: d.usedMicroUsd, limitMicroUsd: d.limitMicroUsd, retryAfterSec: d.retryAfterSec });
+        return true;
+    }
+    function ownerCostQuotaDenied(principal) {
+        if (!deps.costQuota || !principal)
+            return undefined;
+        const d = deps.costQuota.check(principal);
+        if (d.allowed)
+            return undefined;
+        deps.metrics?.inc("cost_quota_rejected_total");
+        return { status: 429, body: { error: "cost quota exceeded", errorCode: "limit.cost_quota_exceeded", usedMicroUsd: d.usedMicroUsd, limitMicroUsd: d.limitMicroUsd, retryAfterSec: d.retryAfterSec } };
+    }
+    async function ownerFleetLeaseDenied(owner) {
+        if (!deps.fleetLease || !owner)
+            return undefined;
+        const adm = await deps.fleetLease.admit(owner);
+        if (adm.ok)
+            return undefined;
+        deps.metrics?.inc("fleet_lease_rejected_total");
+        return { status: 429, body: { error: "budget exhausted (quota lease)", errorCode: "quota_exhausted", retryAfterSec: adm.retryAfterSec } };
+    }
+    async function ownerLeaseDenied(res, owner) {
+        if (!deps.fleetLease || !owner)
+            return false;
+        const adm = await deps.fleetLease.admit(owner);
+        if (adm.ok)
+            return false;
+        deps.metrics?.inc("fleet_lease_rejected_total");
+        res.setHeader("retry-after", String(adm.retryAfterSec));
+        sendError(res, 429, "quota_exhausted", "budget exhausted (quota lease)", { retryAfterSec: adm.retryAfterSec, ...(adm.detail ?? {}) });
+        return true;
+    }
+    function ownerQuotaDenied(res, owner) {
+        const denial = ownerCostQuotaDenied(owner);
+        if (!denial)
+            return false;
+        const { errorCode, error, ...extras } = denial.body;
+        res.setHeader("retry-after", String(extras.retryAfterSec));
+        sendError(res, denial.status, errorCode, error, extras);
+        return true;
+    }
+    async function leaseDenied(req, res) {
+        if (!deps.fleetLease)
+            return false;
+        const principal = gatedPrincipal(req, deps.config);
+        if (!principal)
+            return false;
+        const adm = await deps.fleetLease.admit(principal);
+        if (adm.ok)
+            return false;
+        deps.metrics?.inc("fleet_lease_rejected_total");
+        res.setHeader("retry-after", String(adm.retryAfterSec));
+        sendError(res, 429, "quota_exhausted", "budget exhausted (quota lease)", { retryAfterSec: adm.retryAfterSec, ...(adm.detail ?? {}) });
+        return true;
+    }
+    async function usageWindowDenialFor(key) {
+        const store = deps.usageWindowStore;
+        const windows = deps.config.usageWindows;
+        if (!store || !windows || windows.length === 0)
+            return undefined;
+        let retryAfterMs;
+        try {
+            retryAfterMs = usageRetryAfterMs(await store.read(key, windows, Date.now()));
+        }
+        catch (e) {
+            deps.logger?.warn?.("usage_window_admission_read_failed", { error: e instanceof Error ? e.message : String(e) });
+            return undefined;
+        }
+        if (retryAfterMs === undefined)
+            return undefined;
+        deps.metrics?.inc("usage_window_rejected_total");
+        deps.logger?.info?.("usage_window_exhausted", { hasPrincipal: key !== GLOBAL_USAGE_KEY, retryAfterMs });
+        const retryAfterSec = Math.max(1, Math.ceil(retryAfterMs / 1000));
+        return { status: 429, body: { error: "usage window exhausted (deployment token governance)", errorCode: "usage.window_exhausted", retryAfterSec }, retryAfterSec };
+    }
+    async function usageWindowDenied(req, res) {
+        const denial = await usageWindowDenialFor(gatedPrincipal(req, deps.config) || GLOBAL_USAGE_KEY);
+        if (!denial)
+            return false;
+        res.setHeader("retry-after", String(denial.retryAfterSec));
+        sendError(res, denial.status, denial.body.errorCode, denial.body.error, { retryAfterSec: denial.retryAfterSec });
+        return true;
+    }
+    function rateLimited(req, res) {
+        if (!deps.rateLimiter)
+            return false;
+        const key = (deps.config.directDoorActive ? undefined : principalFrom(req, deps.config)) ?? req.socket.remoteAddress ?? "anon";
+        const d = deps.rateLimiter.check(key);
+        if (d.allowed)
+            return false;
+        deps.metrics?.inc("rate_limited_total");
+        res.setHeader("retry-after", String(d.retryAfterSec));
+        sendError(res, 429, "limit.rate_exceeded", "rate limit exceeded", { retryAfterSec: d.retryAfterSec });
+        return true;
+    }
+    function safeDecode(seg) {
+        try {
+            return decodeURIComponent(seg);
+        }
+        catch {
+            return null;
+        }
+    }
+    function isFleetWide(req) {
+        const { authToken: at, traceToken: tt } = deps.config;
+        const anyAt = Boolean(at) || Object.keys(deps.config.authTokens ?? {}).length > 0;
+        return (!anyAt && !tt && !deps.config.requirePrincipal) || (anyAt && systemFor(req, deps.config) !== undefined) || (!!tt && authorized(req, tt));
+    }
+    function sessionOwnerScope(req) {
+        const fleetWide = isFleetWide(req);
+        const gateOwner = fleetWide ? null : (gatedPrincipal(req, deps.config) || null);
+        return { fleetWide, gateOwner };
+    }
+    function sessionOwnerScopeForWrite(req) {
+        const { authToken: at, traceToken: tt } = deps.config;
+        const anyAt = Boolean(at) || Object.keys(deps.config.authTokens ?? {}).length > 0;
+        const fleetWide = (!anyAt && !tt && !deps.config.requirePrincipal) || (anyAt && systemFor(req, deps.config) !== undefined);
+        const gateOwner = fleetWide ? null : (gatedPrincipal(req, deps.config) || null);
+        return { fleetWide, gateOwner };
+    }
+    function runOwnerOk(req, res, owner, notFoundForm = "run") {
+        const principal = gatedPrincipal(req, deps.config);
+        if (deps.config.requirePrincipal && !principal) {
+            sendPrincipalRefusal(res, req, deps.config);
+            return false;
+        }
+        if (!runOwnerReadable(principal, owner, deps.config)) {
+            if (notFoundForm === "session")
+                sendError(res, 404, "not_found.session", "session not found");
+            else
+                sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
+            return false;
+        }
+        return true;
+    }
+    const sessionAssertAbsentWarned = new Set();
+    function runSessionAcceptOk(req, res, run, face, notFoundError = RUN_NOT_FOUND_MESSAGE) {
+        if (!run.sessionId)
+            return true;
+        const asserted = new URL(req.url ?? "", "http://x").searchParams.get("session");
+        if (asserted === null) {
+            if (!sessionAssertAbsentWarned.has(face)) {
+                sessionAssertAbsentWarned.add(face);
+                console.warn(JSON.stringify({ ts: new Date().toISOString(), level: "warn", msg: "run_face_session_assert_absent", face, note: "caller sent no ?session= on a session-bound run — allowed in the accept phase; the enforcement train will 404 this ([1498]⑥/[1499])" }));
+            }
+            return true;
+        }
+        if (asserted === run.sessionId)
+            return true;
+        if (explicitOperatorOk(gatedPrincipal(req, deps.config), deps.config.operatorPrincipals))
+            return true;
+        sendError(res, 404, "not_found.run", notFoundError);
+        return false;
+    }
+    async function readJson(req) {
+        const chunks = [];
+        let size = 0;
+        for await (const c of req) {
+            size += c.length;
+            if (size > MAX_BODY)
+                throw new HttpError(413, "request body too large");
+            chunks.push(c);
+        }
+        if (chunks.length === 0)
+            return {};
+        try {
+            return JSON.parse(Buffer.concat(chunks).toString("utf8")) ?? {};
+        }
+        catch {
+            throw new HttpError(400, "invalid JSON body");
+        }
+    }
+    async function readRawBody(req, max) {
+        const chunks = [];
+        let size = 0;
+        for await (const c of req) {
+            size += c.length;
+            if (size > max)
+                throw new HttpError(413, "blob too large");
+            chunks.push(c);
+        }
+        return Buffer.concat(chunks);
+    }
+    return { quotaExceeded, ownerCostQuotaDenied, ownerFleetLeaseDenied, ownerLeaseDenied, ownerQuotaDenied, leaseDenied, usageWindowDenialFor, usageWindowDenied, rateLimited, safeDecode, isFleetWide, sessionOwnerScope, sessionOwnerScopeForWrite, runOwnerOk, runSessionAcceptOk, readJson, readRawBody };
+}
+//# sourceMappingURL=request-guards.js.map

package/dist/http/resume-legs.d.ts

@@ -0,0 +1,80 @@
+/**
+ * 续跑腿家族 + 路由 ctx 的装配(S-147 切片:`http/server.ts` 2378–4804 与 1119–1128 逐字搬家,正文一字未改)。
+ *
+ * 🔴 为什么 `routeCtxBase` 住在这个文件里而不是组合根:`startFreshHostTurn` 把**整只** ctx 交给
+ * `mintAndDriveDurableRun`,而 `ctx.legs` 装的正是本文件这几条腿 —— 两者是一个结。拆开只有两条路:
+ * ①晚绑 `let routeCtxBase`(编译期钉不住「谁忘了 bind」,静默 undefined);②改写调用点正文(证不了
+ * 字节不变)。同居是第三条,也是唯一一条既保住静态序又保住 move-only 的。序由 `const` 的 TDZ 亲自执法:
+ * 腿是提升的函数声明、ctx 是文件尾的 `const`,谁也不会在工厂执行期读到对方。
+ *
+ * ctx 字段 28 只(registry 7 + helpers 14 + deps/runnerFor/prepareSpec/finalizeTaskResult + 三只配额/租约/用量窗
+ * 判据)—— 这是**如实披露**的耦合读数(设计稿 §9:把它变小是波 3 的事,本刀不承诺)。型一律从既有型派生
+ * (`RunRegistry` / `RouteHelpers` / `RouteLegs` / `ReturnType<typeof createRequestGuards>`),不手抄签名 ⇒ 不会漂。
+ */
+import type { IncomingMessage } from "node:http";
+import { type QuestionAnswer, type CheckpointToken } from "@sema-agent/core";
+import type { DecideBinding } from "./wire-types.js";
+import type { CheckpointStoreFull } from "../plugins/store-backend.js";
+import { type HostDecision } from "../host-decision.js";
+import type { RouteCtxBase, DriveResumeArgs } from "./route-ctx.js";
+import { type TrustedRunInternals } from "./durable-run-leg.js";
+import type { RunRegistry, RouteHelpers, RouteLegs } from "./route-ctx.js";
+import type { createRequestGuards } from "./request-guards.js";
+import type { FlatServiceDeps } from "./server.js";
+export declare function createResumeLegs(ctx: {
+    deps: FlatServiceDeps;
+    runnerFor: NonNullable<FlatServiceDeps["runnerFor"]>;
+} & RunRegistry & RouteHelpers & Pick<RouteLegs, "prepareSpec" | "finalizeTaskResult"> & Pick<ReturnType<typeof createRequestGuards>, "ownerCostQuotaDenied" | "ownerFleetLeaseDenied" | "usageWindowDenialFor">): {
+    routeCtxBase: RouteCtxBase;
+    resumeCheckpoint: (sessionId: string, decision: "approve" | "deny", reason: string | undefined, hostDecision: HostDecision, req?: IncomingMessage, answer?: QuestionAnswer, binding?: DecideBinding, onResumeCommitted?: (grant: {
+        overrideSessionId?: string;
+        validatedToolName: string | null;
+    }) => Promise<void>, acceptEarly?: boolean, decider?: {
+        principal?: string;
+        explicitOperator: boolean;
+    }) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    driveResumeIntoRunLog: (args: DriveResumeArgs) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    driveResumeLeg: (args: DriveResumeArgs, onAccepted?: (receipt: {
+        status: number;
+        body: object;
+    }) => void) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    mayDiscloseRowError: (cs: CheckpointStoreFull, token: CheckpointToken, decider: {
+        principal?: string;
+        explicitOperator: boolean;
+    } | undefined) => Promise<boolean>;
+    resumePreempted: (sessionId: string, req: IncomingMessage | undefined, acceptEarly?: boolean, decider?: {
+        principal?: string;
+        explicitOperator: boolean;
+    }) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    startFreshHostTurn: (sessionId: string, objective: string, principal: string | undefined, req: IncomingMessage, trustedInternals: TrustedRunInternals, runId: string) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    resumeWake: (sessionId: string, message: string | undefined, caller: string | undefined, req: IncomingMessage | undefined, acceptEarly?: boolean, workflowParkedResume?: DriveResumeArgs["workflowParkedResume"], ownerLeaseAdmittedFor?: string) => Promise<{
+        status: number;
+        body: object;
+    }>;
+    resumePlanReview: (sessionId: string, decision: "approve" | "edit" | "reject", editedPlan: string | undefined, reason: string | undefined, req: IncomingMessage | undefined, log?: {
+        taskId?: string;
+        principalPresent?: boolean;
+    }, acceptEarly?: boolean, decider?: {
+        principal?: string;
+        explicitOperator: boolean;
+    }) => Promise<{
+        status: number;
+        body: object;
+    }>;
+};
+//# sourceMappingURL=resume-legs.d.ts.map