@sema-agent/server 7.79.1 → 7.79.3

package/dist/http/dispatch.js

@@ -2,221 +2,13 @@ import { createHash } from "node:crypto";
 import { setSsoPrincipal, ssoVerifiedPrincipal, setSsoScope, isDestructiveSessionWrite, PRINCIPAL_TOKEN_HEADER, APPROVAL_MAC_HEADER, APPROVAL_MAC_KID_HEADER } from "../security.js";
 import { publicStoreProbeError } from "../store-live-probe.js";
 import { looksLikeJwt } from "@sema-agent/settings-schema/api/auth-bridge";
-import { handleCapabilities } from "./routes/capabilities.js";
-import { handleObservability } from "./routes/observability.js";
-import { handleDiagnostics } from "./routes/diagnostics.js";
-import { handleAdoption } from "./routes/adoption.js";
-import { handleRetention } from "./routes/retention-ops.js";
-import { handleAdminDrain } from "./routes/admin-drain.js";
-import { handleDevices } from "./routes/devices.js";
-import { handleAdminConfigRefresh } from "./routes/admin-config-refresh.js";
-import { handleConfigCatalog } from "./routes/config-catalog.js";
-import { handleMemoryOptOut } from "./routes/admin-memory-optout.js";
-import { handleMemoryPolicy } from "./routes/memory-policy.js";
-import { handleMemoryBundle } from "./routes/memory-bundle.js";
-import { handleMemoryCompliance } from "./routes/memory-compliance.js";
-import { handleMemoryOrigin } from "./routes/memory-origin.js";
-import { handleMemoryConsolidation } from "./routes/memory-consolidation.js";
-import { handleSharedMemory } from "./routes/shared-memory.js";
-import { handleRules } from "./routes/rules.js";
-import { handleSessionsList } from "./routes/sessions-list.js";
-import { handleAgentRoster } from "./routes/agents-roster.js";
-import { handleSessions } from "./routes/sessions.js";
-import { handleSessionSync } from "./routes/session-sync.js";
-import { handleAttachments } from "./routes/attachments.js";
-import { handleFleet } from "./routes/fleet.js";
-import { handleA2aServe, handleA2a } from "./routes/a2a-serve.js";
-import { handleTraceUsage } from "./routes/trace-usage.js";
-import { handleWorkflows, handleWorkflowAgentSteer } from "./routes/workflows.js";
-import { handleNotifyWake, SESSION_WAKE_RE } from "./routes/notify-wake.js";
-import { handleApprovalsAssistant, ASSISTANT_RESUME_RE, ASSISTANT_PLAN_REVIEW_RE } from "./routes/approvals-assistant.js";
-import { handleRuns, handleRunVerbs, RUN_SUBAGENT_RESUME_RE } from "./routes/runs.js";
-import { handleRunMemoryCapture } from "./routes/run-memory-capture.js";
-import { handleSideQuery } from "./routes/side-query.js";
-import { handleTasks } from "./routes/tasks.js";
-import { handleLeader } from "./routes/leader.js";
-import { handleImages } from "./routes/images.js";
+import { PRE_CREDENTIAL_ROUTES, POST_CREDENTIAL_ROUTES, routeLabel, isBillableSubmitPath, isCredentialGatedRewrite, isMethodDispatchedSubmitPath } from "./route-table.js";
 import { sendJson, sendError, isSseResponse } from "./send.js";
 import { authorized, systemFor } from "./principal-gate.js";
 const PROCESS_STARTED_AT_MS = Date.now() - Math.round(process.uptime() * 1000);
-const ROUTE_DOMAINS = [
-    handleTraceUsage,
-    handleWorkflows,
-    handleFleet,
-    handleA2aServe,
-    handleCapabilities,
-    handleSideQuery,
-    handleTasks,
-    handleRuns,
-    handleA2a,
-    handleWorkflowAgentSteer,
-    handleRunVerbs,
-    handleRunMemoryCapture,
-    handleLeader,
-    handleImages,
-    handleApprovalsAssistant,
-    handleObservability,
-    handleDiagnostics,
-    handleAdoption,
-    handleRetention,
-    handleAdminDrain,
-    handleDevices,
-    handleAdminConfigRefresh,
-    handleConfigCatalog,
-    handleMemoryOptOut,
-    handleMemoryPolicy,
-    handleMemoryBundle,
-    handleMemoryCompliance,
-    handleMemoryOrigin,
-    handleMemoryConsolidation,
-    handleRules,
-    handleSharedMemory,
-    handleSessionsList,
-    handleAgentRoster,
-    handleSessions,
-    handleSessionSync,
-    handleAttachments,
-    handleNotifyWake,
-];
-void ROUTE_DOMAINS;
-export function isMethodDispatchedSubmitPath(url) {
-    return url === "/v1/a2a";
-}
 export function hasServiceAuth(config) {
     return Boolean(config.authToken) || Object.keys(config.authTokens ?? {}).length > 0;
 }
-export function isBillableSubmitPath(url) {
-    return (url === "/v1/side-query" ||
-        url === "/v1/tasks" ||
-        url === "/v1/tasks/stream" ||
-        url === "/v1/runs" ||
-        url === "/v1/leader" ||
-        url === "/v1/a2a" ||
-        url === "/v1/admin/memory/consolidation/run" ||
-        ASSISTANT_RESUME_RE.test(url) ||
-        ASSISTANT_PLAN_REVIEW_RE.test(url) ||
-        RUN_SUBAGENT_RESUME_RE.test(url) ||
-        SESSION_WAKE_RE.test(url) ||
-        url.startsWith("/v1/approvals"));
-}
-export function isCredentialGatedRewrite(method, url) {
-    const m = method.toUpperCase();
-    if (m === "POST") {
-        return (url === "/v1/adoption" ||
-            url.startsWith("/v1/rules/cc-import/") ||
-            url.startsWith("/v1/rules/local-import/") ||
-            url === "/v1/memory/import" ||
-            url === "/v1/memory/export" ||
-            url === "/v1/memory/erase" ||
-            url.startsWith("/v1/memory/origin/entries/") ||
-            url.startsWith("/v1/devices/"));
-    }
-    if (m === "PUT")
-        return url === "/v1/admin/memory-optout" || url.startsWith("/v1/admin/memory-optout/");
-    if (m === "DELETE")
-        return url === "/v1/rules" || url.startsWith("/v1/admin/memory-optout/");
-    if (m === "GET") {
-        return (/^\/v1\/memory\/entries\/[^/]+\/provenance$/.test(url) ||
-            url === "/v1/memory/origin/external" ||
-            url === "/v1/memory/origin/clearances" ||
-            url === "/v1/admin/memory-optout" ||
-            url === "/v1/devices" ||
-            /^\/v1\/devices\/sessions\/[^/]+$/.test(url));
-    }
-    return false;
-}
-const ROUTE_LABEL_PATTERNS = [
-    [/^\/v1\/runs\/[^/]+\/steer$/, "/v1/runs/:id/steer"],
-    [/^\/v1\/runs\/[^/]+\/memory\/capture-optout$/, "/v1/runs/:id/memory/capture-optout"],
-    [/^\/v1\/runs\/[^/]+\/interrupt$/, "/v1/runs/:id/interrupt"],
-    [/^\/v1\/runs\/[^/]+\/detach$/, "/v1/runs/:id/detach"],
-    [/^\/v1\/runs\/[^/]+\/cancel$/, "/v1/runs/:id/cancel"],
-    [/^\/v1\/runs\/[^/]+\/compact$/, "/v1/runs/:id/compact"],
-    [/^\/v1\/runs\/[^/]+\/events$/, "/v1/runs/:id/events"],
-    [/^\/v1\/runs\/[^/]+\/subagents\/[^/]+\/(steer|resume|output|stream)$/, "/v1/runs/:id/subagents/:sub/*"],
-    [/^\/v1\/runs\/[^/]+\/tasks\/[^/]+\/(output|stop)$/, "/v1/runs/:id/tasks/:tid/*"],
-    [/^\/v1\/runs\/[^/]+$/, "/v1/runs/:id"],
-    [/^\/v1\/images\/bakes\/[^/]+\/events$/, "/v1/images/bakes/:id/events"],
-    [/^\/v1\/images\/bakes\/[^/]+\/cancel$/, "/v1/images/bakes/:id/cancel"],
-    [/^\/v1\/images\/bakes\/[^/]+\/claim$/, "/v1/images/bakes/:id/claim"],
-    [/^\/v1\/images\/bakes\/[^/]+\/ingest$/, "/v1/images/bakes/:id/ingest"],
-    [/^\/v1\/images\/bakes\/[^/]+$/, "/v1/images/bakes/:id"],
-    [/^\/v1\/images\/digests\/[^/]+$/, "/v1/images/digests/:digest"],
-    [/^\/v1\/images\/[^/]+$/, "/v1/images/:profile"],
-    [/^\/v1\/approvals\/[^/]+\/decide$/, "/v1/approvals/:id/decide"],
-    [/^\/v1\/approvals\/[^/]+\/exemptions(\/[^/]+)?$/, "/v1/approvals/:id/exemptions"],
-    [/^\/v1\/sessions\/[^/]+\/(wake|fork|init|notify|events|head|mcp|a2a|policy|settings)$/, "/v1/sessions/:id/$verb"],
-    [/^\/v1\/admin\/memory-optout\/[^/]+$/, "/v1/admin/memory-optout/:principal"],
-    [/^\/v1\/sessions\/[^/]+\/memory\/erase$/, "/v1/sessions/:id/memory/erase"],
-    [/^\/v1\/sessions\/[^/]+\/memory-status$/, "/v1/sessions/:id/memory-status"],
-    [/^\/v1\/sessions\/[^/]+\/sync\/(manifest|entries|plan)$/, "/v1/sessions/:id/sync/$verb"],
-    [/^\/v1\/sessions\/[^/]+\/sync\/import(\/[^/]+\/entries)?$/, "/v1/sessions/:id/sync/import"],
-    [/^\/v1\/sessions\/[^/]+\/sync\/blobs(\/[^/]+)?$/, "/v1/sessions/:id/sync/blobs"],
-    [/^\/v1\/sessions\/[^/]+\/sync\/history\/blobs\/[^/]+$/, "/v1/sessions/:id/sync/history/blobs/:hash"],
-    [/^\/v1\/sessions\/[^/]+\/workspace(\/[^/]+(\/(tree|file|archive))?)?$/, "/v1/sessions/:id/workspace"],
-    [/^\/v1\/sessions\/[^/]+$/, "/v1/sessions/:id"],
-    [/^\/v1\/assistant\/tasks\/[^/]+\/preempt$/, "/v1/assistant/tasks/:id/preempt"],
-    [/^\/v1\/assistant\/tasks\/[^/]+\/resume$/, "/v1/assistant/tasks/:id/resume"],
-    [/^\/v1\/assistant\/tasks\/[^/]+\/plan_review$/, "/v1/assistant/tasks/:id/plan_review"],
-    [/^\/v1\/elicitations\/[^/]+\/respond$/, "/v1/elicitations/:id/respond"],
-    [/^\/v1\/questions\/[^/]+\/respond$/, "/v1/questions/:id/respond"],
-    [/^\/v1\/tool-approvals\/[^/]+\/respond$/, "/v1/tool-approvals/:id/respond"],
-    [/^\/v1\/workflows\/[^/]+\/agents\/[^/]+\/steer$/, "/v1/workflows/:id/agents/:aid/steer"],
-    [/^\/v1\/workflows\/[^/]+\/(stream|journal)$/, "/v1/workflows/:id/$sub"],
-    [/^\/v1\/workflows\/[^/]+$/, "/v1/workflows/:id"],
-    [/^\/v1\/tasks\/[^/]+\/asks\/[^/]+\/decision$/, "/v1/tasks/:id/asks/:askId/decision"],
-    [/^\/v1\/tasks\/[^/]+\/tool-results\/[^/]+$/, "/v1/tasks/:id/tool-results/:ref"],
-    [/^\/v1\/tasks\/[^/]+\/(turns|stream|artifacts)$/, "/v1/tasks/:id/$sub"],
-    [/^\/v1\/leader\/[^/]+$/, "/v1/leader/:id"],
-    [/^\/v1\/devices\/sessions\/[^/]+\/rebind$/, "/v1/devices/sessions/:id/rebind"],
-    [/^\/v1\/devices\/sessions\/[^/]+$/, "/v1/devices/sessions/:id"],
-    [/^\/v1\/attachments\/[^/]+$/, "/v1/attachments/:id"],
-    [/^\/v1\/capabilities\/scenarios\/[^/]+$/, "/v1/capabilities/scenarios/:name"],
-    [/^\/v1\/adoption\/[^/]+$/, "/v1/adoption/:id"],
-    [/^\/v1\/ops\/retention\/holds\/[^/]*$/, "/v1/ops/retention/holds/:domain"],
-    [/^\/v1\/memory\/sync\/[^/]+$/, "/v1/memory/sync/:scope"],
-    [/^\/v1\/memory\/entries\/[^/]+\/provenance$/, "/v1/memory/entries/:entryId/provenance"],
-    [/^\/v1\/memory\/origin\/entries\/[^/]+\/clear$/, "/v1/memory/origin/entries/:entryId/clear"],
-    [/^\/v1\/usage\/(summary|series|breakdown)$/, "/v1/usage/$sub"],
-    [/^\/v1\/shared-memory\/stores\/[^/]+\/documents$/, "/v1/shared-memory/stores/:store/documents"],
-    [/^\/v1\/shared-memory\/stores\/[^/]+\/document$/, "/v1/shared-memory/stores/:store/document"],
-];
-const ROUTE_LABEL_LITERALS = new Set([
-    "/health", "/metrics", "/metrics/summary", "/metrics/plan-cache",
-    "/v1/models", "/v1/tasks", "/v1/tasks/stream", "/v1/tasks/source-summary",
-    "/v1/runs", "/v1/sessions", "/v1/approvals", "/v1/approvals/stream",
-    "/v1/assistant/inbox", "/v1/assistant/tasks", "/v1/usage", "/v1/policy", "/v1/capabilities",
-    "/v1/images", "/v1/images/bakes", "/v1/images/bakes/claim", "/v1/images/select", "/v1/images/register",
-    "/v1/workflows", "/v1/attachments", "/v1/leader", "/v1/outcomes", "/v1/side-query",
-    "/v1/devices",
-    "/v1/fleet/stream",
-    "/v1/memory/export", "/v1/sendfile-links",
-    "/v1/memory/import",
-    "/v1/memory/erase",
-    "/v1/memory/origin/external", "/v1/memory/origin/clearances",
-    "/v1/shared-memory/stores",
-    "/v1/diagnostics/wiring",
-    "/v1/adoption",
-    "/v1/admin/drain",
-    "/v1/admin/config/refresh",
-    "/v1/config/catalog",
-    "/v1/admin/memory-optout",
-    "/v1/admin/memory/consolidation/run", "/v1/admin/memory/consolidation",
-    "/v1/rules/cc-import/prepare", "/v1/rules/cc-import/redeem",
-    "/v1/rules/local-import/prepare", "/v1/rules/local-import/redeem",
-    "/v1/rules",
-    "/.well-known/agent-card.json", "/v1/a2a",
-    "/v1/agents/roster",
-    "/v1/ops/retention/audit",
-]);
-export function routeLabel(_method, url) {
-    if (ROUTE_LABEL_LITERALS.has(url))
-        return url;
-    for (const [re, label] of ROUTE_LABEL_PATTERNS)
-        if (re.test(url))
-            return label;
-    return "other";
-}
 function cors(res, req, origins, principalHeader) {
     if (!origins || origins.length === 0)
         return;
@@ -250,6 +42,15 @@ export function createDispatch(ctx) {
         };
         deps.drainState.lastAttachEndedAt = () => lastAttachEndedAt;
     }
+    async function dispatchSegment(rows, req, res, url, ctx) {
+        for (const row of rows) {
+            if (row.enabled !== undefined && !row.enabled(deps))
+                continue;
+            if (await row.handler(req, res, url, ctx))
+                return true;
+        }
+        return false;
+    }
     async function handle(req, res) {
         const startedAt = Date.now();
         const method = req.method ?? "GET";
@@ -379,13 +180,7 @@ export function createDispatch(ctx) {
                 }
             }
         }
-        if (await handleTraceUsage(req, res, url, ctx))
-            return;
-        if (await handleWorkflows(req, res, url, ctx))
-            return;
-        if (await handleFleet(req, res, url, ctx))
-            return;
-        if (await handleA2aServe(req, res, url, ctx))
+        if (await dispatchSegment(PRE_CREDENTIAL_ROUTES, req, res, url, ctx))
             return;
         let source = null;
         const anyServiceAuth = hasServiceAuth(deps.config);
@@ -426,71 +221,7 @@ export function createDispatch(ctx) {
             sendError(res, 503, "auth.service_token_required", "this worker requires a service auth token (set SERVICE_AUTH_TOKEN) before accepting destructive session writes (policy / sync-import / fork / delete)");
             return;
         }
-        if (await handleCapabilities(req, res, url, ctx))
-            return;
-        if (await handleSideQuery(req, res, url, ctx))
-            return;
-        if (await handleTasks(req, res, url, ctx))
-            return;
-        if (await handleRuns(req, res, url, ctx))
-            return;
-        if (await handleA2a(req, res, url, ctx))
-            return;
-        if (await handleWorkflowAgentSteer(req, res, url, ctx))
-            return;
-        if (await handleRunVerbs(req, res, url, ctx))
-            return;
-        if (await handleRunMemoryCapture(req, res, url, ctx))
-            return;
-        if (await handleLeader(req, res, url, ctx))
-            return;
-        if (await handleImages(req, res, url, ctx))
-            return;
-        if (await handleApprovalsAssistant(req, res, url, ctx))
-            return;
-        if (await handleObservability(req, res, url, ctx))
-            return;
-        if (await handleDiagnostics(req, res, url, ctx))
-            return;
-        if (await handleAdoption(req, res, url, ctx))
-            return;
-        if (await handleRetention(req, res, url, ctx))
-            return;
-        if (await handleAdminDrain(req, res, url, ctx))
-            return;
-        if (await handleDevices(req, res, url, ctx))
-            return;
-        if (await handleAdminConfigRefresh(req, res, url, ctx))
-            return;
-        if (await handleConfigCatalog(req, res, url, ctx))
-            return;
-        if (await handleMemoryOptOut(req, res, url, ctx))
-            return;
-        if (await handleMemoryPolicy(req, res, url, ctx))
-            return;
-        if (await handleMemoryBundle(req, res, url, ctx))
-            return;
-        if (await handleMemoryCompliance(req, res, url, ctx))
-            return;
-        if (await handleMemoryOrigin(req, res, url, ctx))
-            return;
-        if (deps.memoryConsolidation && (await handleMemoryConsolidation(req, res, url, ctx)))
-            return;
-        if (await handleRules(req, res, url, ctx))
-            return;
-        if (deps.sharedMemoryStore && deps.orgMemoryDirectory && (await handleSharedMemory(req, res, url, ctx)))
-            return;
-        if (await handleSessionsList(req, res, url, ctx))
-            return;
-        if (await handleAgentRoster(req, res, url, ctx))
-            return;
-        if (await handleSessions(req, res, url, ctx))
-            return;
-        if (await handleSessionSync(req, res, url, ctx))
-            return;
-        if (await handleAttachments(req, res, url, ctx))
-            return;
-        if (await handleNotifyWake(req, res, url, ctx))
+        if (await dispatchSegment(POST_CREDENTIAL_ROUTES, req, res, url, ctx))
             return;
         sendError(res, 404, "not_found.route", "not found");
     }

package/dist/http/route-table.d.ts

@@ -0,0 +1,113 @@
+/**
+ * **路由声明表**(S-146,[ref] 波 2 第二刀)—— 「这是什么路由」这件事在本仓的**唯一属主**。
+ *
+ * ## 病(S-146 债行原文的读数)
+ * 同一件事此前有五份写法、两道扫源码文本的对账门,而那两道门已经**反向塑形了源码**:表里必须写
+ * 字面量不许引常量(否则门的正则抓不到)、注释里不许出现某两个字符(否则门的非贪婪捕获提前收尾)。
+ *  ① 分派序 = `handle()` 里 37 只 `if (await handleX(...)) return;`,鉴权/排空/破坏性写三道门按**行号**
+ *    插在链中间(4 只 handler 落在凭据门前);
+ *  ② `ROUTE_DOMAINS` = 同一条链的域名册,靠一道从 `handle()` 源码文本抽序的门与 ① 对拍(表曾漏员又乱序);
+ *  ③ `ROUTE_LABEL_PATTERNS` / `ROUTE_LABEL_LITERALS` = metrics/日志的标签名册;
+ *  ④ `isBillableSubmitPath` / `isMethodDispatchedSubmitPath` = 三道 503 计费门的 url 名单;
+ *  ⑤ `isCredentialGatedRewrite` = 无凭据部署上的改写门 url×方法 名单。
+ * 五份各自漂过:wake 不在 ④ 里(三道门对一条烧模型的腿全不生效)、`handleDiagnostics` 从不在 ② 里、
+ * `/v1/fleet/stream` 整条对 ③ 隐形。
+ *
+ * ## 形(规则少了几条)
+ * **一行 = 一条路由事实**,两张表:
+ *  · `ROUTES` —— **行序 = 分派序**,`position` 说它在全局服务凭据门的哪一侧。门不再「按行号插在链中间」,
+ *    而是在 `pre` 段与 `post` 段之间**恒定一处**执行 ⇒ ① 与 ② 合一(名册就是分派序本身,两者再不可能漂),
+ *    那道「从 handle() 源码抽序对拍」的门随之删掉 —— 不是放松,是它守的事变成了结构上不可违反。
+ *    ⚠️ 刻意**不引入 matcher**:handler 自己判 url 这一点一个字不动(改它等于重写 34 个域模块的判路)。
+ *  · `ROUTE_DECLARATIONS` —— ③④⑤ 合成一张;一行声明它的匹配式与它**真有**的性质
+ *    (`billable` / `credentialGated` / `methodDispatched`),没有该性质就不写那一列(零默认值)。
+ *
+ * 判据两条,逐字:
+ *  · **标签取首命中**(优先序):精确行先于形状行([[ref]] 的结论,这里是结构性的而不是靠行序),
+ *    形状行按声明序;没有任何行给标签 ⇒ `"other"`。
+ *  · **门取并集**(宁紧):一条 url 只要**有一行**声明了某性质,它就有该性质 —— 这正是旧谓词那几个
+ *    `||` 的逐字同义,也是「前缀行比标签行宽」这件事的正解(`/v1/devices/` 下将来长出的任何写动词
+ *    天然在改写门内,不必等谁想起来补一行标签)。
+ *
+ * 新增一条路由 = 新建 `routes/x.ts` + 本表加一行(+ `test/route-order-freeze.test.ts` 的冻结表加一行,
+ * 那是 position 的外部对拍源)。`position` 与匹配式都是必填 —— 忘了就是**编译红**,不是静默 404。
+ *
+ * 🔴 **旧禁令已解除**:标签表此前必须「写字面量不引常量」、注释里不许出现某两个字符 —— 那是两道
+ * 扫源码文本的门反向塑形源码的产物(它们的捕获正则抓不到常量、非贪婪捕获会被那对字符提前截断)。
+ * 两道门都改成读本表之后,这条禁令没有了对象,随它的 11 处行注一并删;要引常量就引(`routes/*.ts`
+ * 的 `*_PATH` 常量本来就是那些路径的单一属主)。
+ *
+ * 🔴 本文件是**叶模块**:只 import `routes/*.ts` 的 handler 与几只单源正则、以及类型。组合根与流水线
+ * (`server.ts` / `dispatch.ts`)一律反过来 import 它,值边单向,`test/module-cycle-gate.test.ts` 看守。
+ */
+import type { FlatServiceDeps } from "./server.js";
+import type { RouteHandler } from "./route-ctx.js";
+/** 一只域 handler 相对**全局服务凭据门**的位置。门前 = 未鉴权可达(每一只都要单独论证),门后 = 先过凭据。 */
+export type RoutePosition = "pre-credential" | "post-credential";
+export interface RouteRow {
+    /** 域入口(`routes/*.ts` 的 `handleX`)。签名一致性是编译期钉:入口漂了形 = 编译红,不是运行时静默 404。 */
+    readonly handler: RouteHandler;
+    /** 必填 —— 新增路由必须**显式**决定它在凭据门的哪一侧。 */
+    readonly position: RoutePosition;
+    /** 域名(kebab;= `routes/` 下的模块名)。评审把本表当「域全集」读时它是那份清单的名字列,
+     *  `test/route-shape-roster.test.ts` 层E 的能力位词干也取自这里 —— 域的身份是声明出来的,
+     *  不是从函数名反推的。函数真名与它的一致性由 `route-order-freeze` 自检格钉住。 */
+    readonly label: string;
+    /** **挂载条件**(只有真有条件的行才写):缺席 = 恒挂载。域头的合取式就是挂载条件 —— 阀门没开 ⇒
+     *  请求落到分派器尾的全局 404(**诚实缺席,不是 501**;判据全文在各域模块头注)。 */
+    readonly enabled?: (deps: FlatServiceDeps) => boolean;
+}
+export declare const ROUTES: readonly RouteRow[];
+/** 两段(`dispatch.ts` 的分派循环各跑一段)。段内序 = 本表行序;
+ *  「门前行不许出现在门后行之后」由 `test/route-order-freeze.test.ts` 钉住。 */
+export declare const PRE_CREDENTIAL_ROUTES: readonly RouteRow[];
+export declare const POST_CREDENTIAL_ROUTES: readonly RouteRow[];
+/** 改写门是**方法感知**的(它的撤销动词是 DELETE)。闭集 —— 加第五个动词是编译红。 */
+export type RouteMethod = "GET" | "POST" | "PUT" | "DELETE";
+interface RouteDeclFacts {
+    /** 「这条 url **烧模型**」—— drain / model-roster-pending / 无 service-token 三道 503 的共同判别。
+     *  没有这一列 = 不烧模型(零默认值:要它为真必须显式写出来,漏写的方向是**少收一笔账单**而不是
+     *  少一道门 —— 反了才是灾难,所以三道门读的是 true 这一侧)。 */
+    readonly billable?: true;
+    /** 「本条 url 在**没有任何 service credential** 的部署形下,这几个方法必须 fail-closed」。
+     *  判据(两个合取项)= 「授权的唯一输入是 principal 头」∧「持久改写,或爆炸半径跨租户的治理读」;
+     *  逐口论证在各 `routes/*.ts` 的头注里,本表只记结论。 */
+    readonly credentialGated?: readonly RouteMethod[];
+    /** 「这条 url **是**计费提交面,但它到底提不提交由**请求体里的方法**决定」—— 单 URL 多方法的
+     *  JSON-RPC 端点。两道**可用性** 503(drain / roster-pending)按 url 一刀切会把同端点上的纯读一起
+     *  关掉,所以分派器对本行**跳过**那两道,改由域模块在写分支里施加同样的两道(文案逐字同源)。
+     *  🔴 只豁免那两道,**不豁免安全轴**:`billable` 本身仍为 true,无 service token 那道 fail-closed
+     *  503 照旧罩着(它判的是「这台机能不能收写」,与方法无关,且必须在解析请求体之前)。 */
+    readonly methodDispatched?: true;
+}
+/**
+ * 一行的匹配式三选一(闭集;`path` 行的标签**就是** path 自身,所以它没有 label 列 —— 少一处手抄)。
+ * `prefix` 与 `pattern` 行的 label 可缺席:那是**纯门行**(比标签行宽,只供门的并集判据),
+ * 缺席 ⇒ 本行不铸任何标签。
+ */
+export type RouteDecl = (RouteDeclFacts & {
+    readonly path: string;
+}) | (RouteDeclFacts & {
+    readonly prefix: string;
+    readonly label?: string;
+}) | (RouteDeclFacts & {
+    readonly pattern: RegExp;
+    readonly label?: string;
+});
+/** 🔴 由 `test/route-shape-roster.test.ts` 棘轮看守:门机器枚举 `src/http/**` 的全部路由模式并断言每条
+ *  都映射到非 "other"——新路由不补本表该门当场红(census 抓获本表曾漂掉 56 条模式:session-sync/workspace/
+ *  workflows/subagents/attachments/images/leader 等整族全折 "other",metrics 不可分桶)。 */
+export declare const ROUTE_DECLARATIONS: readonly RouteDecl[];
+/** Stable, low-cardinality route label for metrics/logs (ids collapsed to `:id`). */
+export declare function routeLabel(_method: string, url: string): string;
+/** POST endpoints that trigger BILLABLE work — the fail-closed auth guard must cover ALL of them. */
+export declare function isBillableSubmitPath(url: string): boolean;
+/** [ref]([ref] 件5)—— **改写门**:不烧模型、但在没有任何 service credential 的部署形下必须
+ *  与 billable / bake 两族一样 fail-closed 的写门。与 `isBillableSubmitPath` **刻意分开**:这几扇门
+ *  `billable=false`(零模型工作),塞进那张名单会让它们连带吃 drain 与 roster-pending 两道 503 ——
+ *  而收编与规则读写在排空期/roster 未落时做完全无害。 */
+export declare function isCredentialGatedRewrite(method: string, url: string): boolean;
+/** 见 `RouteDeclFacts.methodDispatched` 的头注(单 URL 多方法端点)。 */
+export declare function isMethodDispatchedSubmitPath(url: string): boolean;
+export {};
+//# sourceMappingURL=route-table.d.ts.map