@sema-agent/server 7.79.0 → 7.79.2

package/dist/http/route-table.d.ts

@@ -0,0 +1,113 @@
+/**
+ * **路由声明表**(S-146,[ref] 波 2 第二刀)—— 「这是什么路由」这件事在本仓的**唯一属主**。
+ *
+ * ## 病(S-146 债行原文的读数)
+ * 同一件事此前有五份写法、两道扫源码文本的对账门,而那两道门已经**反向塑形了源码**:表里必须写
+ * 字面量不许引常量(否则门的正则抓不到)、注释里不许出现某两个字符(否则门的非贪婪捕获提前收尾)。
+ *  ① 分派序 = `handle()` 里 37 只 `if (await handleX(...)) return;`,鉴权/排空/破坏性写三道门按**行号**
+ *    插在链中间(4 只 handler 落在凭据门前);
+ *  ② `ROUTE_DOMAINS` = 同一条链的域名册,靠一道从 `handle()` 源码文本抽序的门与 ① 对拍(表曾漏员又乱序);
+ *  ③ `ROUTE_LABEL_PATTERNS` / `ROUTE_LABEL_LITERALS` = metrics/日志的标签名册;
+ *  ④ `isBillableSubmitPath` / `isMethodDispatchedSubmitPath` = 三道 503 计费门的 url 名单;
+ *  ⑤ `isCredentialGatedRewrite` = 无凭据部署上的改写门 url×方法 名单。
+ * 五份各自漂过:wake 不在 ④ 里(三道门对一条烧模型的腿全不生效)、`handleDiagnostics` 从不在 ② 里、
+ * `/v1/fleet/stream` 整条对 ③ 隐形。
+ *
+ * ## 形(规则少了几条)
+ * **一行 = 一条路由事实**,两张表:
+ *  · `ROUTES` —— **行序 = 分派序**,`position` 说它在全局服务凭据门的哪一侧。门不再「按行号插在链中间」,
+ *    而是在 `pre` 段与 `post` 段之间**恒定一处**执行 ⇒ ① 与 ② 合一(名册就是分派序本身,两者再不可能漂),
+ *    那道「从 handle() 源码抽序对拍」的门随之删掉 —— 不是放松,是它守的事变成了结构上不可违反。
+ *    ⚠️ 刻意**不引入 matcher**:handler 自己判 url 这一点一个字不动(改它等于重写 34 个域模块的判路)。
+ *  · `ROUTE_DECLARATIONS` —— ③④⑤ 合成一张;一行声明它的匹配式与它**真有**的性质
+ *    (`billable` / `credentialGated` / `methodDispatched`),没有该性质就不写那一列(零默认值)。
+ *
+ * 判据两条,逐字:
+ *  · **标签取首命中**(优先序):精确行先于形状行([[ref]] 的结论,这里是结构性的而不是靠行序),
+ *    形状行按声明序;没有任何行给标签 ⇒ `"other"`。
+ *  · **门取并集**(宁紧):一条 url 只要**有一行**声明了某性质,它就有该性质 —— 这正是旧谓词那几个
+ *    `||` 的逐字同义,也是「前缀行比标签行宽」这件事的正解(`/v1/devices/` 下将来长出的任何写动词
+ *    天然在改写门内,不必等谁想起来补一行标签)。
+ *
+ * 新增一条路由 = 新建 `routes/x.ts` + 本表加一行(+ `test/route-order-freeze.test.ts` 的冻结表加一行,
+ * 那是 position 的外部对拍源)。`position` 与匹配式都是必填 —— 忘了就是**编译红**,不是静默 404。
+ *
+ * 🔴 **旧禁令已解除**:标签表此前必须「写字面量不引常量」、注释里不许出现某两个字符 —— 那是两道
+ * 扫源码文本的门反向塑形源码的产物(它们的捕获正则抓不到常量、非贪婪捕获会被那对字符提前截断)。
+ * 两道门都改成读本表之后,这条禁令没有了对象,随它的 11 处行注一并删;要引常量就引(`routes/*.ts`
+ * 的 `*_PATH` 常量本来就是那些路径的单一属主)。
+ *
+ * 🔴 本文件是**叶模块**:只 import `routes/*.ts` 的 handler 与几只单源正则、以及类型。组合根与流水线
+ * (`server.ts` / `dispatch.ts`)一律反过来 import 它,值边单向,`test/module-cycle-gate.test.ts` 看守。
+ */
+import type { FlatServiceDeps } from "./server.js";
+import type { RouteHandler } from "./route-ctx.js";
+/** 一只域 handler 相对**全局服务凭据门**的位置。门前 = 未鉴权可达(每一只都要单独论证),门后 = 先过凭据。 */
+export type RoutePosition = "pre-credential" | "post-credential";
+export interface RouteRow {
+    /** 域入口(`routes/*.ts` 的 `handleX`)。签名一致性是编译期钉:入口漂了形 = 编译红,不是运行时静默 404。 */
+    readonly handler: RouteHandler;
+    /** 必填 —— 新增路由必须**显式**决定它在凭据门的哪一侧。 */
+    readonly position: RoutePosition;
+    /** 域名(kebab;= `routes/` 下的模块名)。评审把本表当「域全集」读时它是那份清单的名字列,
+     *  `test/route-shape-roster.test.ts` 层E 的能力位词干也取自这里 —— 域的身份是声明出来的,
+     *  不是从函数名反推的。函数真名与它的一致性由 `route-order-freeze` 自检格钉住。 */
+    readonly label: string;
+    /** **挂载条件**(只有真有条件的行才写):缺席 = 恒挂载。域头的合取式就是挂载条件 —— 阀门没开 ⇒
+     *  请求落到分派器尾的全局 404(**诚实缺席,不是 501**;判据全文在各域模块头注)。 */
+    readonly enabled?: (deps: FlatServiceDeps) => boolean;
+}
+export declare const ROUTES: readonly RouteRow[];
+/** 两段(`dispatch.ts` 的分派循环各跑一段)。段内序 = 本表行序;
+ *  「门前行不许出现在门后行之后」由 `test/route-order-freeze.test.ts` 钉住。 */
+export declare const PRE_CREDENTIAL_ROUTES: readonly RouteRow[];
+export declare const POST_CREDENTIAL_ROUTES: readonly RouteRow[];
+/** 改写门是**方法感知**的(它的撤销动词是 DELETE)。闭集 —— 加第五个动词是编译红。 */
+export type RouteMethod = "GET" | "POST" | "PUT" | "DELETE";
+interface RouteDeclFacts {
+    /** 「这条 url **烧模型**」—— drain / model-roster-pending / 无 service-token 三道 503 的共同判别。
+     *  没有这一列 = 不烧模型(零默认值:要它为真必须显式写出来,漏写的方向是**少收一笔账单**而不是
+     *  少一道门 —— 反了才是灾难,所以三道门读的是 true 这一侧)。 */
+    readonly billable?: true;
+    /** 「本条 url 在**没有任何 service credential** 的部署形下,这几个方法必须 fail-closed」。
+     *  判据(两个合取项)= 「授权的唯一输入是 principal 头」∧「持久改写,或爆炸半径跨租户的治理读」;
+     *  逐口论证在各 `routes/*.ts` 的头注里,本表只记结论。 */
+    readonly credentialGated?: readonly RouteMethod[];
+    /** 「这条 url **是**计费提交面,但它到底提不提交由**请求体里的方法**决定」—— 单 URL 多方法的
+     *  JSON-RPC 端点。两道**可用性** 503(drain / roster-pending)按 url 一刀切会把同端点上的纯读一起
+     *  关掉,所以分派器对本行**跳过**那两道,改由域模块在写分支里施加同样的两道(文案逐字同源)。
+     *  🔴 只豁免那两道,**不豁免安全轴**:`billable` 本身仍为 true,无 service token 那道 fail-closed
+     *  503 照旧罩着(它判的是「这台机能不能收写」,与方法无关,且必须在解析请求体之前)。 */
+    readonly methodDispatched?: true;
+}
+/**
+ * 一行的匹配式三选一(闭集;`path` 行的标签**就是** path 自身,所以它没有 label 列 —— 少一处手抄)。
+ * `prefix` 与 `pattern` 行的 label 可缺席:那是**纯门行**(比标签行宽,只供门的并集判据),
+ * 缺席 ⇒ 本行不铸任何标签。
+ */
+export type RouteDecl = (RouteDeclFacts & {
+    readonly path: string;
+}) | (RouteDeclFacts & {
+    readonly prefix: string;
+    readonly label?: string;
+}) | (RouteDeclFacts & {
+    readonly pattern: RegExp;
+    readonly label?: string;
+});
+/** 🔴 由 `test/route-shape-roster.test.ts` 棘轮看守:门机器枚举 `src/http/**` 的全部路由模式并断言每条
+ *  都映射到非 "other"——新路由不补本表该门当场红(census 抓获本表曾漂掉 56 条模式:session-sync/workspace/
+ *  workflows/subagents/attachments/images/leader 等整族全折 "other",metrics 不可分桶)。 */
+export declare const ROUTE_DECLARATIONS: readonly RouteDecl[];
+/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`). */
+export declare function routeLabel(_method: string, url: string): string;
+/** POST endpoints that trigger BILLABLE work — the fail-closed auth guard must cover ALL of them. */
+export declare function isBillableSubmitPath(url: string): boolean;
+/** [ref]([ref] 件5)—— **改写门**:不烧模型、但在没有任何 service credential 的部署形下必须
+ *  与 billable / bake 两族一样 fail-closed 的写门。与 `isBillableSubmitPath` **刻意分开**:这几扇门
+ *  `billable=false`(零模型工作),塞进那张名单会让它们连带吃 drain 与 roster-pending 两道 503 ——
+ *  而收编与规则读写在排空期/roster 未落时做完全无害。 */
+export declare function isCredentialGatedRewrite(method: string, url: string): boolean;
+/** 见 `RouteDeclFacts.methodDispatched` 的头注(单 URL 多方法端点)。 */
+export declare function isMethodDispatchedSubmitPath(url: string): boolean;
+export {};
+//# sourceMappingURL=route-table.d.ts.map

package/dist/http/route-table.js

@@ -0,0 +1,235 @@
+import { handleCapabilities } from "./routes/capabilities.js";
+import { handleObservability } from "./routes/observability.js";
+import { handleDiagnostics } from "./routes/diagnostics.js";
+import { handleAdoption } from "./routes/adoption.js";
+import { handleRetention } from "./routes/retention-ops.js";
+import { handleAdminDrain } from "./routes/admin-drain.js";
+import { handleDevices } from "./routes/devices.js";
+import { handleAdminConfigRefresh } from "./routes/admin-config-refresh.js";
+import { handleConfigCatalog } from "./routes/config-catalog.js";
+import { handleMemoryOptOut } from "./routes/admin-memory-optout.js";
+import { handleMemoryPolicy } from "./routes/memory-policy.js";
+import { handleMemoryBundle } from "./routes/memory-bundle.js";
+import { handleMemoryCompliance } from "./routes/memory-compliance.js";
+import { handleMemoryOrigin } from "./routes/memory-origin.js";
+import { handleMemoryConsolidation } from "./routes/memory-consolidation.js";
+import { handleSharedMemory } from "./routes/shared-memory.js";
+import { handleRules } from "./routes/rules.js";
+import { handleSessionsList } from "./routes/sessions-list.js";
+import { handleAgentRoster } from "./routes/agents-roster.js";
+import { handleSessions } from "./routes/sessions.js";
+import { handleSessionSync } from "./routes/session-sync.js";
+import { handleAttachments } from "./routes/attachments.js";
+import { handleFleet } from "./routes/fleet.js";
+import { handleA2aServe, handleA2a } from "./routes/a2a-serve.js";
+import { handleTraceUsage } from "./routes/trace-usage.js";
+import { handleWorkflows, handleWorkflowAgentSteer } from "./routes/workflows.js";
+import { handleNotifyWake, SESSION_WAKE_RE } from "./routes/notify-wake.js";
+import { handleApprovalsAssistant, ASSISTANT_RESUME_RE, ASSISTANT_PLAN_REVIEW_RE } from "./routes/approvals-assistant.js";
+import { handleRuns, handleRunVerbs, RUN_SUBAGENT_RESUME_RE } from "./routes/runs.js";
+import { handleRunMemoryCapture } from "./routes/run-memory-capture.js";
+import { handleSideQuery } from "./routes/side-query.js";
+import { handleTasks } from "./routes/tasks.js";
+import { handleLeader } from "./routes/leader.js";
+import { handleImages } from "./routes/images.js";
+export const ROUTES = [
+    { handler: handleTraceUsage, position: "pre-credential", label: "trace-usage" },
+    { handler: handleWorkflows, position: "pre-credential", label: "workflows" },
+    { handler: handleFleet, position: "pre-credential", label: "fleet" },
+    { handler: handleA2aServe, position: "pre-credential", label: "a2a-serve" },
+    { handler: handleCapabilities, position: "post-credential", label: "capabilities" },
+    { handler: handleSideQuery, position: "post-credential", label: "side-query" },
+    { handler: handleTasks, position: "post-credential", label: "tasks" },
+    { handler: handleRuns, position: "post-credential", label: "runs" },
+    { handler: handleA2a, position: "post-credential", label: "a2a" },
+    { handler: handleWorkflowAgentSteer, position: "post-credential", label: "workflow-agent-steer" },
+    { handler: handleRunVerbs, position: "post-credential", label: "run-verbs" },
+    { handler: handleRunMemoryCapture, position: "post-credential", label: "run-memory-capture" },
+    { handler: handleLeader, position: "post-credential", label: "leader" },
+    { handler: handleImages, position: "post-credential", label: "images" },
+    { handler: handleApprovalsAssistant, position: "post-credential", label: "approvals-assistant" },
+    { handler: handleObservability, position: "post-credential", label: "observability" },
+    { handler: handleDiagnostics, position: "post-credential", label: "diagnostics" },
+    { handler: handleAdoption, position: "post-credential", label: "adoption" },
+    { handler: handleRetention, position: "post-credential", label: "retention" },
+    { handler: handleAdminDrain, position: "post-credential", label: "admin-drain" },
+    { handler: handleDevices, position: "post-credential", label: "devices" },
+    { handler: handleAdminConfigRefresh, position: "post-credential", label: "admin-config-refresh" },
+    { handler: handleConfigCatalog, position: "post-credential", label: "config-catalog" },
+    { handler: handleMemoryOptOut, position: "post-credential", label: "memory-opt-out" },
+    { handler: handleMemoryPolicy, position: "post-credential", label: "memory-policy" },
+    { handler: handleMemoryBundle, position: "post-credential", label: "memory-bundle" },
+    { handler: handleMemoryCompliance, position: "post-credential", label: "memory-compliance" },
+    { handler: handleMemoryOrigin, position: "post-credential", label: "memory-origin" },
+    { handler: handleMemoryConsolidation, position: "post-credential", label: "memory-consolidation", enabled: (deps) => Boolean(deps.memoryConsolidation) },
+    { handler: handleRules, position: "post-credential", label: "rules" },
+    { handler: handleSharedMemory, position: "post-credential", label: "shared-memory", enabled: (deps) => Boolean(deps.sharedMemoryStore) && Boolean(deps.orgMemoryDirectory) },
+    { handler: handleSessionsList, position: "post-credential", label: "sessions-list" },
+    { handler: handleAgentRoster, position: "post-credential", label: "agent-roster" },
+    { handler: handleSessions, position: "post-credential", label: "sessions" },
+    { handler: handleSessionSync, position: "post-credential", label: "session-sync" },
+    { handler: handleAttachments, position: "post-credential", label: "attachments" },
+    { handler: handleNotifyWake, position: "post-credential", label: "notify-wake" },
+];
+export const PRE_CREDENTIAL_ROUTES = ROUTES.filter((r) => r.position === "pre-credential");
+export const POST_CREDENTIAL_ROUTES = ROUTES.filter((r) => r.position === "post-credential");
+export const ROUTE_DECLARATIONS = [
+    { path: "/health" },
+    { path: "/metrics" },
+    { path: "/metrics/summary" },
+    { path: "/metrics/plan-cache" },
+    { path: "/v1/models" },
+    { path: "/v1/tasks", billable: true },
+    { path: "/v1/tasks/stream", billable: true },
+    { path: "/v1/tasks/source-summary" },
+    { path: "/v1/runs", billable: true },
+    { path: "/v1/sessions" },
+    { path: "/v1/approvals" },
+    { path: "/v1/approvals/stream" },
+    { path: "/v1/assistant/inbox" },
+    { path: "/v1/assistant/tasks" },
+    { path: "/v1/usage" },
+    { path: "/v1/policy" },
+    { path: "/v1/capabilities" },
+    { path: "/v1/images" },
+    { path: "/v1/images/bakes" },
+    { path: "/v1/images/bakes/claim" },
+    { path: "/v1/images/select" },
+    { path: "/v1/images/register" },
+    { path: "/v1/workflows" },
+    { path: "/v1/attachments" },
+    { path: "/v1/leader", billable: true },
+    { path: "/v1/outcomes" },
+    { path: "/v1/side-query", billable: true },
+    { path: "/v1/devices", credentialGated: ["GET"] },
+    { path: "/v1/fleet/stream" },
+    { path: "/v1/memory/export", credentialGated: ["POST"] },
+    { path: "/v1/sendfile-links" },
+    { path: "/v1/memory/import", credentialGated: ["POST"] },
+    { path: "/v1/memory/erase", credentialGated: ["POST"] },
+    { path: "/v1/memory/origin/external", credentialGated: ["GET"] },
+    { path: "/v1/memory/origin/clearances", credentialGated: ["GET"] },
+    { path: "/v1/shared-memory/stores" },
+    { path: "/v1/diagnostics/wiring" },
+    { path: "/v1/adoption", credentialGated: ["POST"] },
+    { path: "/v1/admin/drain" },
+    { path: "/v1/admin/config/refresh" },
+    { path: "/v1/config/catalog" },
+    { path: "/v1/admin/memory-optout", credentialGated: ["GET", "PUT"] },
+    { path: "/v1/admin/memory/consolidation/run", billable: true },
+    { path: "/v1/admin/memory/consolidation" },
+    { path: "/v1/rules/cc-import/prepare" },
+    { path: "/v1/rules/cc-import/redeem" },
+    { path: "/v1/rules/local-import/prepare" },
+    { path: "/v1/rules/local-import/redeem" },
+    { path: "/v1/rules", credentialGated: ["DELETE"] },
+    { path: "/.well-known/agent-card.json" },
+    { path: "/v1/a2a", billable: true, methodDispatched: true },
+    { path: "/v1/agents/roster" },
+    { path: "/v1/ops/retention/audit" },
+    { pattern: /^\/v1\/runs\/[^/]+\/steer$/, label: "/v1/runs/:id/steer" },
+    { pattern: /^\/v1\/runs\/[^/]+\/memory\/capture-optout$/, label: "/v1/runs/:id/memory/capture-optout" },
+    { pattern: /^\/v1\/runs\/[^/]+\/interrupt$/, label: "/v1/runs/:id/interrupt" },
+    { pattern: /^\/v1\/runs\/[^/]+\/detach$/, label: "/v1/runs/:id/detach" },
+    { pattern: /^\/v1\/runs\/[^/]+\/cancel$/, label: "/v1/runs/:id/cancel" },
+    { pattern: /^\/v1\/runs\/[^/]+\/compact$/, label: "/v1/runs/:id/compact" },
+    { pattern: /^\/v1\/runs\/[^/]+\/events$/, label: "/v1/runs/:id/events" },
+    { pattern: RUN_SUBAGENT_RESUME_RE, label: "/v1/runs/:id/subagents/:sub/*", billable: true },
+    { pattern: /^\/v1\/runs\/[^/]+\/subagents\/[^/]+\/(steer|resume|output|stream)$/, label: "/v1/runs/:id/subagents/:sub/*" },
+    { pattern: /^\/v1\/runs\/[^/]+\/tasks\/[^/]+\/(output|stop)$/, label: "/v1/runs/:id/tasks/:tid/*" },
+    { pattern: /^\/v1\/runs\/[^/]+$/, label: "/v1/runs/:id" },
+    { pattern: /^\/v1\/images\/bakes\/[^/]+\/events$/, label: "/v1/images/bakes/:id/events" },
+    { pattern: /^\/v1\/images\/bakes\/[^/]+\/cancel$/, label: "/v1/images/bakes/:id/cancel" },
+    { pattern: /^\/v1\/images\/bakes\/[^/]+\/claim$/, label: "/v1/images/bakes/:id/claim" },
+    { pattern: /^\/v1\/images\/bakes\/[^/]+\/ingest$/, label: "/v1/images/bakes/:id/ingest" },
+    { pattern: /^\/v1\/images\/bakes\/[^/]+$/, label: "/v1/images/bakes/:id" },
+    { pattern: /^\/v1\/images\/digests\/[^/]+$/, label: "/v1/images/digests/:digest" },
+    { pattern: /^\/v1\/images\/[^/]+$/, label: "/v1/images/:profile" },
+    { pattern: /^\/v1\/approvals\/[^/]+\/decide$/, label: "/v1/approvals/:id/decide" },
+    { pattern: /^\/v1\/approvals\/[^/]+\/exemptions(\/[^/]+)?$/, label: "/v1/approvals/:id/exemptions" },
+    { pattern: SESSION_WAKE_RE, label: "/v1/sessions/:id/$verb", billable: true },
+    { pattern: /^\/v1\/sessions\/[^/]+\/(wake|fork|init|notify|events|head|mcp|a2a|policy|settings)$/, label: "/v1/sessions/:id/$verb" },
+    { pattern: /^\/v1\/admin\/memory-optout\/[^/]+$/, label: "/v1/admin/memory-optout/:principal" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/memory\/erase$/, label: "/v1/sessions/:id/memory/erase" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/memory-status$/, label: "/v1/sessions/:id/memory-status" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/(manifest|entries|plan)$/, label: "/v1/sessions/:id/sync/$verb" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/import(\/[^/]+\/entries)?$/, label: "/v1/sessions/:id/sync/import" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/blobs(\/[^/]+)?$/, label: "/v1/sessions/:id/sync/blobs" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/history\/blobs\/[^/]+$/, label: "/v1/sessions/:id/sync/history/blobs/:hash" },
+    { pattern: /^\/v1\/sessions\/[^/]+\/workspace(\/[^/]+(\/(tree|file|archive))?)?$/, label: "/v1/sessions/:id/workspace" },
+    { pattern: /^\/v1\/sessions\/[^/]+$/, label: "/v1/sessions/:id" },
+    { pattern: /^\/v1\/assistant\/tasks\/[^/]+\/preempt$/, label: "/v1/assistant/tasks/:id/preempt" },
+    { pattern: ASSISTANT_RESUME_RE, label: "/v1/assistant/tasks/:id/resume", billable: true },
+    { pattern: ASSISTANT_PLAN_REVIEW_RE, label: "/v1/assistant/tasks/:id/plan_review", billable: true },
+    { pattern: /^\/v1\/elicitations\/[^/]+\/respond$/, label: "/v1/elicitations/:id/respond" },
+    { pattern: /^\/v1\/questions\/[^/]+\/respond$/, label: "/v1/questions/:id/respond" },
+    { pattern: /^\/v1\/tool-approvals\/[^/]+\/respond$/, label: "/v1/tool-approvals/:id/respond" },
+    { pattern: /^\/v1\/workflows\/[^/]+\/agents\/[^/]+\/steer$/, label: "/v1/workflows/:id/agents/:aid/steer" },
+    { pattern: /^\/v1\/workflows\/[^/]+\/(stream|journal)$/, label: "/v1/workflows/:id/$sub" },
+    { pattern: /^\/v1\/workflows\/[^/]+$/, label: "/v1/workflows/:id" },
+    { pattern: /^\/v1\/tasks\/[^/]+\/asks\/[^/]+\/decision$/, label: "/v1/tasks/:id/asks/:askId/decision" },
+    { pattern: /^\/v1\/tasks\/[^/]+\/tool-results\/[^/]+$/, label: "/v1/tasks/:id/tool-results/:ref" },
+    { pattern: /^\/v1\/tasks\/[^/]+\/(turns|stream|artifacts)$/, label: "/v1/tasks/:id/$sub" },
+    { pattern: /^\/v1\/leader\/[^/]+$/, label: "/v1/leader/:id" },
+    { pattern: /^\/v1\/devices\/sessions\/[^/]+\/rebind$/, label: "/v1/devices/sessions/:id/rebind" },
+    { pattern: /^\/v1\/devices\/sessions\/[^/]+$/, label: "/v1/devices/sessions/:id", credentialGated: ["GET"] },
+    { pattern: /^\/v1\/attachments\/[^/]+$/, label: "/v1/attachments/:id" },
+    { pattern: /^\/v1\/capabilities\/scenarios\/[^/]+$/, label: "/v1/capabilities/scenarios/:name" },
+    { pattern: /^\/v1\/adoption\/[^/]+$/, label: "/v1/adoption/:id" },
+    { pattern: /^\/v1\/ops\/retention\/holds\/[^/]*$/, label: "/v1/ops/retention/holds/:domain" },
+    { pattern: /^\/v1\/memory\/sync\/[^/]+$/, label: "/v1/memory/sync/:scope" },
+    { pattern: /^\/v1\/memory\/entries\/[^/]+\/provenance$/, label: "/v1/memory/entries/:entryId/provenance", credentialGated: ["GET"] },
+    { pattern: /^\/v1\/memory\/origin\/entries\/[^/]+\/clear$/, label: "/v1/memory/origin/entries/:entryId/clear" },
+    { pattern: /^\/v1\/usage\/(summary|series|breakdown)$/, label: "/v1/usage/$sub" },
+    { pattern: /^\/v1\/shared-memory\/stores\/[^/]+\/documents$/, label: "/v1/shared-memory/stores/:store/documents" },
+    { pattern: /^\/v1\/shared-memory\/stores\/[^/]+\/document$/, label: "/v1/shared-memory/stores/:store/document" },
+    { prefix: "/v1/approvals", billable: true },
+    { prefix: "/v1/rules/cc-import/", credentialGated: ["POST"] },
+    { prefix: "/v1/rules/local-import/", credentialGated: ["POST"] },
+    { prefix: "/v1/memory/origin/entries/", credentialGated: ["POST"] },
+    { prefix: "/v1/devices/", credentialGated: ["POST"] },
+    { prefix: "/v1/admin/memory-optout/", credentialGated: ["PUT", "DELETE"] },
+];
+function declMatches(d, url) {
+    if ("path" in d)
+        return url === d.path;
+    if ("prefix" in d)
+        return url.startsWith(d.prefix);
+    return d.pattern.test(url);
+}
+const LABEL_BY_PATH = new Map(ROUTE_DECLARATIONS.flatMap((d) => ("path" in d ? [[d.path, d.path]] : [])));
+const SHAPED_LABEL_DECLS = ROUTE_DECLARATIONS.filter((d) => !("path" in d) && typeof d.label === "string");
+const BILLABLE_DECLS = ROUTE_DECLARATIONS.filter((d) => d.billable === true);
+const METHOD_DISPATCHED_DECLS = ROUTE_DECLARATIONS.filter((d) => d.methodDispatched === true);
+const CREDENTIAL_GATED_BY_METHOD = (() => {
+    const m = new Map();
+    for (const d of ROUTE_DECLARATIONS)
+        for (const method of d.credentialGated ?? []) {
+            const bucket = m.get(method);
+            if (bucket === undefined)
+                m.set(method, [d]);
+            else
+                bucket.push(d);
+        }
+    return m;
+})();
+export function routeLabel(_method, url) {
+    const exact = LABEL_BY_PATH.get(url);
+    if (exact !== undefined)
+        return exact;
+    for (const d of SHAPED_LABEL_DECLS)
+        if (declMatches(d, url))
+            return d.label;
+    return "other";
+}
+export function isBillableSubmitPath(url) {
+    return BILLABLE_DECLS.some((d) => declMatches(d, url));
+}
+export function isCredentialGatedRewrite(method, url) {
+    const rows = CREDENTIAL_GATED_BY_METHOD.get(method.toUpperCase());
+    return rows !== undefined && rows.some((d) => declMatches(d, url));
+}
+export function isMethodDispatchedSubmitPath(url) {
+    return METHOD_DISPATCHED_DECLS.some((d) => declMatches(d, url));
+}
+//# sourceMappingURL=route-table.js.map

package/dist/http/routes/admin-memory-optout.d.ts

@@ -42,7 +42,7 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { RouteCtx } from "../route-ctx.js";
 export declare const ADMIN_MEMORY_OPTOUT_PATH = "/v1/admin/memory-optout";
-/** 带参口(`:principal`)⇒ 名册门走 `ROUTE_LABEL_PATTERNS`(server.ts),不是 LITERALS。 */
+/** 带参口(`:principal`)⇒ 路由声明表(`http/route-table.ts`)里走 `pattern` 行,不是 `path` 行。 */
 export declare const ADMIN_MEMORY_OPTOUT_OVERRIDE_RE: RegExp;
 export declare function handleMemoryOptOut(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
 //# sourceMappingURL=admin-memory-optout.d.ts.map

package/dist/http/routes/memory-compliance.d.ts

@@ -96,7 +96,7 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { RouteCtx } from "../route-ctx.js";
 export declare const MEMORY_ERASE_PATH = "/v1/memory/erase";
-/** 单条出处读面。带参路径 ⇒ 名册门走 `ROUTE_LABEL_PATTERNS`(server.ts),不是 LITERALS。 */
+/** 单条出处读面。带参路径 ⇒ 路由声明表(`http/route-table.ts`)里走 `pattern` 行,不是 `path` 行。 */
 export declare const MEMORY_PROVENANCE_RE: RegExp;
 export declare function handleMemoryCompliance(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
 //# sourceMappingURL=memory-compliance.d.ts.map

package/dist/http/routes/memory-origin.d.ts

@@ -82,7 +82,7 @@ import { type OriginClearanceRow } from "@sema-agent/core";
 import type { RouteCtx } from "../route-ctx.js";
 export declare const MEMORY_ORIGIN_EXTERNAL_PATH = "/v1/memory/origin/external";
 export declare const MEMORY_ORIGIN_CLEARANCES_PATH = "/v1/memory/origin/clearances";
-/** 带参写口 ⇒ 名册门走 `ROUTE_LABEL_PATTERNS`(server.ts),不是 LITERALS。 */
+/** 带参写口 ⇒ 路由声明表(`http/route-table.ts`)里走 `pattern` 行,不是 `path` 行。 */
 export declare const MEMORY_ORIGIN_CLEAR_RE: RegExp;
 /**
  * 一条清标行 → wire 的**显式白名单**(F-7)。全文理由见文件头「为什么是白名单」。

package/dist/http/routes/rules.js

@@ -92,10 +92,10 @@ async function handleRulesBody(req, res, url, ctx, miss) {
     const { readJson, rateLimited } = ctx.helpers;
     const isPrepare = req.method === "POST" && url === RULES_CC_IMPORT_PREPARE_PATH;
     const isRedeem = req.method === "POST" && url === RULES_CC_IMPORT_REDEEM_PATH;
-    const isLocalPrepare = req.method === "POST" && url === "/v1/rules/local-import/prepare";
-    const isLocalRedeem = req.method === "POST" && url === "/v1/rules/local-import/redeem";
-    const isList = req.method === "GET" && url === "/v1/rules";
-    const isRevoke = req.method === "DELETE" && url === "/v1/rules";
+    const isLocalPrepare = req.method === "POST" && url === RULES_LOCAL_IMPORT_PREPARE_PATH;
+    const isLocalRedeem = req.method === "POST" && url === RULES_LOCAL_IMPORT_REDEEM_PATH;
+    const isList = req.method === "GET" && url === RULES_PATH;
+    const isRevoke = req.method === "DELETE" && url === RULES_PATH;
     if (!isPrepare && !isRedeem && !isList && !isRevoke && !isLocalPrepare && !isLocalRedeem) {
         miss.fell = true;
         return;

package/dist/http/server.d.ts

@@ -34,6 +34,11 @@ import { cascadeConfig } from "./run-meta.js";
 export { cascadeConfig };
 import { coarseStatusForState, errorCodeForExit } from "./routes/images.js";
 export { coarseStatusForState, errorCodeForExit };
+import { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills } from "./admission.js";
+import { hasServiceAuth } from "./dispatch.js";
+import { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath } from "./route-table.js";
+export { routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath, hasServiceAuth };
+export { MAX_SKILL_CONTENT_CHARS, MAX_SYSTEM_PROMPT_CHARS, MAX_OUTPUT_SCHEMA_CHARS, validateUserSkills };
 import { explicitOperatorOk, isOperator } from "./principal-gate.js";
 export { explicitOperatorOk, isOperator };
 /** Per-request authorization context resolved before building the spec (identity, owned session). */
@@ -730,43 +735,15 @@ export type FlatServiceDeps = ServiceCoreDeps & Partial<ServiceStoreDeps & Servi
 export type ServiceDeps = FlatServiceDeps & ServiceDepGroups;
 /** 分组入参 → 平铺视图(createHttpServer 的第一件事)。一组都没给 ⇒ 原样返回(存量调用零开销、零形变)。 */
 export declare function flattenServiceDeps(deps: ServiceDeps): FlatServiceDeps;
-/** = core `SKILL_CONTENT_MAX_CHARS`(1MB 加载门,core 1.293 起 invoke 全文零截断、超 1MB 整拒;常量在
- *  dist/core/runner/synthetic-tools.js:84,未从 core 包根导出,故钉本地孪生+本出处注记)。修7 曾对齐旧
- *  20k 截断门([ref] 飞轮考据:20k 是压缩保留区口径,invoke 时刻用错),core 1.293 撤门后本门跟随回收
- *  ([ref]① 收口)——HTTP 面与引擎加载门同值,超限 400 fail-loud 而非引擎侧整拒后难诊断。
- *
- *  🔴 **这是技能面**唯一**剩下的尺寸门,而且它不是超集帽**:引擎在装配期对超 1 MiB 的技能本就整拒
- *  (config 阶段错误),门上先答只是把同一个判决搬到调用方看得懂的地方。[ref] 退役的三条帽
- *  (条数 / description / name 长度)都没有这个性质——它们是本仓自造的、CC 与引擎都没有的门。 */
-export declare const MAX_SKILL_CONTENT_CHARS = 1048576;
-export declare const MAX_SYSTEM_PROMPT_CHARS = 16384;
-/** Cap on a request's `outputSchema` (JSON-serialized) — an uncapped schema bloats the prompt + the per-turn
- *  validation cost. 32KB comfortably holds a rich nested schema while bounding the abuse surface. */
-export declare const MAX_OUTPUT_SCHEMA_CHARS = 32768;
-/**
- * Validate `body.skills` —— **形**校验 + 一条引擎孪生门。返回错误串(→ 400)或 null。
- *
- * 🔴 **[ref](7.77.0,硬 BREAKING;零别名零双读)**:此前这里有三条本仓自造的拒绝臂,全部退役 ——
- *  · `at most 10 skills per request`(条数帽);
- *  · `skill.description must be a string of at most 1024 characters`(描述长度帽);
- *  · `skill.name must be a non-empty string of at most 64 characters` 里的 **长度**那一半。
- *
- * 退役的判据是**上游两侧都没有同形门**:CC 2.1.259 的技能清单渲染(`cli259.js:23195` 的预算算法)
- * 在超预算时把**描述裁短**、再不够就退成 name-only,**从不**因为条数多或描述长而拒掉一条技能;
- * 它的 `Ir()` 名字校验也只判非空 / 无配对代理 / 无首尾空白 / 无括号逗号控制字符,没有长度帽。
- * 引擎侧同理:唯一整拒的是 1 MiB 的单技能加载门。于是那三条帽是「装了 11 个技能就 400」这种
- * 纯本仓面的伤——收益是零(预算由渲染侧按字节兜),代价是用户装不进自己的技能库。
- *
- * **补偿**(三问的第三问):`settings.skillListingBudgetFraction` / `settings.skillListingMaxDescChars`
- * 两个旋钮直达引擎的渲染预算(per-turn 成本的真属主)。
- * ⚠️ **fraction 是**单向**的**:引擎的预算 = `min(窗口 × fraction, 8 000 字节)`,8 000 是**投递车道的结构
- * 上限**(清单帧与同 turn 的其它附件共用一份完整送达额度)⇒ **调低生效、调高被夹**;调高唯一的用处是让
- * 一个声明窗口小于 200 000 token 的模型把清单预算拿回大窗口的水平。别把这句读成「调用方可以随便加大」。
- * 体积面照旧由**非技能专属**的 8 MiB 请求体上限兜住(`MAX_BODY`),那是一条一直都在的门。
- *
- * 🔴 **server 侧禁裁列表 / 禁截描述**:渲染归引擎(单一属主)。本函数只判「这一条技能的形能不能用」。
- */
-export declare function validateUserSkills(skills: unknown): string | null;
+/** The TRUSTED end-user principal for an owner-gated / per-tenant request. On a direct-door worker the
+ *  trusted-header path is OFF (x-agent-principal is client-self-asserted), so identity comes from the crypto-VERIFIED
+ *  principal JWT (`x-approval-principal-token`, principal-only proof — no cnf.bnd action binding); otherwise the
+ *  BFF-minted trusted header. undefined when absent/invalid (fail-closed → callers map to 401 / scope "__none__").
+ *  🔴 Use this for ANY endpoint that reads or gates PER-TENANT data — NOT `principalFrom` directly, which trusts
+ *  the self-asserted header on a direct door (/v1/usage + the trace owner-gate
+ *  had drifted to a bare principalFrom, unlike the leader/images/approvals identity paths). One source of truth
+ *  so a future per-tenant endpoint can't re-introduce the bypass. The action-BOUND decide/answer paths keep their
+ *  own verifyDirectDoorProof (cnf.bnd) — this is the identity-only twin. */
 /**
  * Managed-Agents-style HTTP/SSE service surface.
  *   GET  /health
@@ -791,73 +768,12 @@ export declare function createHttpServer(rawDeps: ServiceDeps): http.Server & {
     /** [ref]:live 回决腿的 PARKED 赎回席(装配层把它接进协调器的晚绑座,见 {@link redeemParkedAsk})。 */
     redeemParkedAsk: ParkedAskRedeem;
 };
-/** POST endpoints that trigger BILLABLE work — the fail-closed auth guard must cover ALL of them (council: the
- *  guard's inline list had drifted from the handlers and missed `/v1/approvals/:id/decide`, which resumes a run
- *  via resumeCheckpoint/store.decide → paid tokens). Keep this in sync when adding a billable POST route. */
+/** SSE: replay durable events after Last-Event-ID, then tail until the run is terminal (or stale). */
 /**
- * 「这条 url **是**计费提交面,但它到底提不提交由**请求体里的方法**决定」—— 目前只有 A2A 的
- * JSON-RPC 端点(单 URL 承载 `message/send` 写 + `tasks/get` 读,因为 agent card 只能公告一个 `url`)。
- *
- * 用途:两道**可用性** 503(drain / model-roster-pending)按 url 一刀切会把 `tasks/get` 这条纯读一起
- * 关掉,而单副本部署恰好在重启/依赖降级窗口里最需要取回已完成的结果(codex 轮2 R2-3,验真后修)。
- * 本谓词让 `handle()` 对这条 url **跳过**那两道,改由域模块在 `message/send` 分支里施加同样的两道
- * (`routes/a2a-serve.ts` 的 `submitUnavailable`,文案逐字同源)。
- *
- * 🔴 **只豁免那两道,不豁免安全轴**:`isBillableSubmitPath` 本身**不变**(它仍答 true),所以
- *  ① 无 service token 的部署上那道 fail-closed 503 照旧罩着这条 url —— 它判的是「这台机能不能收写」,
- *    与方法无关,而且门必须在解析请求体**之前**;
- *  ② billable 申明门钉的仍是那只纯谓词(表里 `/v1/a2a` 依旧 billable=true)。
- * 新成员进本表 = 承诺「该域在自己的方法分支里补齐那两道」,漏补就是一条静默旁路;所以本表只该有
- * 「单 URL 多方法」这一种成员,加一条要连同它的域内补门一起过评审。
- */
-export declare function isMethodDispatchedSubmitPath(url: string): boolean;
-/** 「这台部署配了任何一把 service 凭证吗」—— fail-closed 写门族的真值源。**单一属主**:`handle()` 的
- *  凭证门、[ref] 的 parked 赎回席、以及 [ref] 的 consolidation 阀门启动期告警读同一句(手抄迟早
- *  只改一处,而这条判据决定的是「无凭证部署上写口开不开」)。导出仅为最后一个消费点(main.ts)。 */
-export declare function hasServiceAuth(config: ServiceConfig): boolean;
-export declare function isBillableSubmitPath(url: string): boolean;
-/**
- * [ref]([ref] 件5)—— **改写门**:不烧模型、但在**没有任何 service credential** 的部署形下必须与
- * billable / bake 两族一样 fail-closed 的写门。谓词与 `isBillableSubmitPath` **刻意分开**:这几扇门
- * `billable=false`(零模型工作),塞进那张名单会让它们连带吃 drain 与 model-roster-pending 两道 503 ——
- * 而收编与规则读写在排空期/roster 未落时做完全无害。
- *
- * 判据(两个合取项,缺一不进本表)= 「授权的唯一输入是 principal 头」∧「动作是**持久改写**」:
- *  · `POST /v1/adoption` —— operator-only 的一次性部署级动作,把一个 principal 名下**每一行**重写到另一个
- *    身份;授权判据 `explicitOperatorOk(gatedPrincipal(...))`。
- *  · `POST /v1/rules/cc-import/*` —— principal lane 的**持久 allow 规则**铸造口;一条持久 allow 规则对后续
- *    同命令的 classify 档 ask 常驻消音(core [ref] 之后仍然如此,只是不再消 mandated 的那些)。
- *  · `DELETE /v1/rules` —— 同一个规则店的**撤销**口。方向相反(收紧)但同样是持久改写,而且它多一条
- *    operator 超范围域(`?principal=` / body 的 `principal` 让 operator 收回**任一**租户的规则)⇒ 自造一个
- *    列在 `OPERATOR_PRINCIPALS` 里的头,就能把每一位租户的规则一次清空。
- * 无 service token 的部署上 `verifiedPrincipal` 走的是「BFF/gated:头已由上游验过」那一支,而这一形恰恰
- * 是**没有**那个上游 —— 于是自造一个头就能收编别人、替任意租户种下常驻放行、或替他们全删。bake 门当年
- * 补的就是同一句话,`isDestructiveSessionWrite` 从逐条路由白名单改成族判定也是同一句话(那次的措辞逐字是
- * 「a forged principal header alone could **tighten/DoS** a session's tools」——撤销口落的正是 DoS 那一半)。
- *
- * 🔴 **方法感知**(codex 交叉复审 R2-[high],验真后修):撤销走的是 `DELETE`,而本门最初只挂在 `POST` 的
- * 合取里 —— 于是一个自称「持久改写」的谓词把爆炸半径最大的那条动词漏在门外,正是 `isDestructiveSessionWrite`
- * 当年被抓到的同一形。签名因此收方法,与那只谓词逐字同形。
- * 🔴 读面**原则上**不进本表:`GET /v1/adoption/:id` 与 `GET /v1/rules` 各有自己的**属主门**兜底,本门只拦写。
- *
- * 🔴 **第二个合取项的加宽**(codex 交叉复审 [high],[ref] 提货批,验真后修)——判据现在是
- * 「持久改写 **或** 授权唯一输入是 principal 头的**跨租户治理读**」。加宽是为了收进 [ref] v2-c 的两口:
- *  · `POST /v1/memory/import` —— 直接落在**原**判据上,而且是本仓最深的那一种持久改写:它把别处铸的
- *    条目 / 挑战 / 污染标记 / 托管链落进本部署的记忆平面。自造一个在册 operator 头 ⇒ 一份**不当调用方自制的
- *    治理史**成为本店的账;而记忆是模型**每次挂载都读**的面,比种一条常驻 allow 规则更深(那条只影响
- *    ask 会不会问,这条影响模型相信什么)。
- *  · `POST /v1/memory/export` —— 是**读**,按原措辞本不该进。但被点名豁免的那两条读各有属主门兜底,
- *    而本条**没有**:它的授权判据就是 `explicitOperatorOk`,过了就是**全库**——一次调用取走每个 scope 的
- *    条目正文 + 托管链 + 跨会话污染标记 + lineage。把一次全租户记忆外泄留在门外、只为守住「本门只拦写」
- *    这句措辞,是把措辞看得比它要保护的东西更重。加宽后的判据仍然是**闭**的(不是「写门以外都进」):
- *    它要求「授权的唯一输入是那个头」∧「一次调用的爆炸半径跨租户」,`GET /v1/rules` 那种属主门读不满足。
- * 行为面钉:`test/rewrite-door-service-token-gate.test.ts`(六扇门各一正一反 + 逃生口格 + 读面负控)。
+ * The differences a concrete log (task_run | image_bake) feeds the ONE resumable SSE reader (P2.8). Everything
+ * the reader does — Last-Event-ID/`?from=` resume, the 416 retention boundary, the per-poll concurrent
+ * status+events read, the terminal re-fetch (the terminal event lands in the gap before the status flips), the
+ * stale fallback, the 15-min cap, the 15s idle heartbeat — is provider-agnostic and lives in `streamSseLog`.
+ * 🔴 The task_run provider MUST keep the existing wire bytes EXACTLY (center's relay + 730+ tests depend on it).
  */
-export declare function isCredentialGatedRewrite(method: string, url: string): boolean;
-/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`).
- *  [[ref]] 字面量**先于**模式:此前模式先查,五条精确路由被形状桶吞掉(`/v1/approvals/stream`
- *  落 ":id"、`/v1/images/{bakes,select,register}` 落 ":profile"、`/v1/images/bakes/claim` 落
- *  "bakes/:id")——长连接 stream 的 duration 混进 :id 桶正是 fleet/stream 案的同族错桶病。
- *  精确匹配恒比形状匹配更对,序修零反例(billable-route-declaration 门逐样本钉)。 */
-export declare function routeLabel(_method: string, url: string): string;
 //# sourceMappingURL=server.d.ts.map