@sema-agent/server 7.79.3 → 7.80.0

package/dist/http/routes/runs.js

@@ -25,19 +25,10 @@ import { mintCancelledResult } from "../../run-cancel-context.js";
 import { buildCrossSliceUsage, readResourceWindow } from "../../resource-window.js";
 import { headerStr, gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
 import { ActorAssertionWire } from "@sema-agent/settings-schema";
+import { assertNever } from "../route-ctx.js";
 import { mintAndDriveDurableRun } from "../durable-run-leg.js";
 import { RUN_NOT_FOUND_MESSAGE, runNotFoundMessage } from "../route-ctx.js";
 import { withPrincipal } from "../../observability/principal-context.js";
-export const RUN_ID_RE = /^\/v1\/runs\/([^/]+)(\/events)?$/;
-export const RUN_CANCEL_RE = /^\/v1\/runs\/([^/]+)\/cancel$/;
-export const RUN_STEER_RE = /^\/v1\/runs\/([^/]+)\/steer$/;
-export const RUN_DETACH_RE = /^\/v1\/runs\/([^/]+)\/detach$/;
-export const RUN_COMPACT_RE = /^\/v1\/runs\/([^/]+)\/compact$/;
-export const RUN_INTERRUPT_RE = /^\/v1\/runs\/([^/]+)\/interrupt$/;
-export const ELICIT_RESPOND_RE = /^\/v1\/elicitations\/([^/]+)\/respond$/;
-export const QUESTION_RESPOND_RE = /^\/v1\/questions\/([^/]+)\/respond$/;
-export const TOOL_APPROVAL_RESPOND_RE = /^\/v1\/tool-approvals\/([^/]+)\/respond$/;
-export const TASK_ASK_DECISION_RE = /^\/v1\/tasks\/([^/]+)\/asks\/([^/]+)\/decision$/;
 const ASK_PARKING_RETRY_AFTER_SEC = 2;
 const ASK_ACTOR_LABEL_MAX = 256;
 const AskDecisionActorSchema = ActorAssertionWire.strip();
@@ -73,13 +64,7 @@ export function projectDecisionActor(raw) {
     const parsed = AskDecisionActorSchema.safeParse(raw);
     return parsed.success ? parsed.data : undefined;
 }
-export const RUN_SUBAGENT_STEER_RE = /^\/v1\/runs\/([^/]+)\/subagents\/([^/]+)\/steer$/;
-export const RUN_SUBAGENT_RESUME_RE = /^\/v1\/runs\/([^/]+)\/subagents\/([^/]+)\/resume$/;
-export const RUN_SUBAGENT_OUTPUT_RE = /^\/v1\/runs\/([^/]+)\/subagents\/([^/]+)\/output$/;
-export const RUN_SUBAGENT_STREAM_RE = /^\/v1\/runs\/([^/]+)\/subagents\/([^/]+)\/stream$/;
-export const RUN_TASK_OUTPUT_RE = /^\/v1\/runs\/([^/]+)\/tasks\/([^/]+)\/output$/;
-export const RUN_TASK_STOP_RE = /^\/v1\/runs\/([^/]+)\/tasks\/([^/]+)\/stop$/;
-async function subagentReadGate(req, res, deps, runId) {
+async function subagentReadGate(req, res, deps, runId, search) {
     const principal = gatedPrincipal(req, deps.config);
     if (deps.config.requirePrincipal && principal === undefined) {
         sendPrincipalRefusal(res, req, deps.config);
@@ -91,7 +76,7 @@ async function subagentReadGate(req, res, deps, runId) {
         sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
         return null;
     }
-    const callerSession = new URL(req.url ?? "", "http://x").searchParams.get("session");
+    const callerSession = new URLSearchParams(search).get("session");
     if (!trusted && run.sessionId && callerSession !== run.sessionId) {
         sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
         return null;
@@ -149,23 +134,13 @@ async function streamRunEvents(req, res, deps, runStore, taskId, staleMs) {
         staleFrame: () => ({ event: "failed", data: { type: "failed", errorMessage: "run stalled (instance lost?)" } }),
     }, taskId, staleMs);
 }
-export async function handleRuns(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleRunsBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-export async function handleRunVerbs(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleRunVerbsBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleRunsBody(req, res, url, ctx, miss) {
+export async function handleRuns(req, res, match, ctx) {
     const { deps } = ctx;
     const { idemCache, inflightRuns, preemptableRuns, cancelledViaVerb, steerableRuns, wakeParkMints } = ctx.registry;
     const { readJson, rateLimited, quotaExceeded, leaseDenied, usageWindowDenied, runOwnerOk, runSessionAcceptOk } = ctx.helpers;
     const { prepareSpec } = ctx.legs;
     const source = ctx.req.source;
-    if (req.method === "POST" && url === "/v1/runs") {
+    if (match.decl.id === "runs-submit") {
         if (!deps.runStore) {
             sendError(res, 501, "capability.run_store_required", "async runs require a durable run store (DB_BACKEND=mysql|pg|local)");
             return;
@@ -189,13 +164,12 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         sendJson(res, resp.status, resp.body);
         return;
     }
-    const runMatch = req.method === "GET" ? RUN_ID_RE.exec(url) : null;
-    if (runMatch) {
+    if (match.decl.id === "run-detail" || match.decl.id === "run-events") {
         if (!deps.runStore) {
             sendError(res, 501, "capability.run_store_required", "async runs require a durable run store (DB_BACKEND=mysql|pg|local)");
             return;
         }
-        const taskId = runMatch[1];
+        const taskId = match.params.taskId;
         if (deps.config.requirePrincipal && !gatedPrincipal(req, deps.config)) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
@@ -207,9 +181,9 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         }
         if (!runOwnerOk(req, res, run.owner))
             return;
-        if (!runSessionAcceptOk(req, res, run, runMatch[2] ? "run.events" : "run.poll"))
+        if (!runSessionAcceptOk(req, res, run, match.decl.id === "run-events" ? "run.events" : "run.poll"))
             return;
-        if (runMatch[2]) {
+        if (match.decl.id === "run-events") {
             await streamRunEvents(req, res, deps, deps.runStore, taskId, deps.config.runStaleSec * 1000);
         }
         else {
@@ -272,8 +246,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         }
         return;
     }
-    const cancelMatch = req.method === "POST" ? RUN_CANCEL_RE.exec(url) : null;
-    if (cancelMatch) {
+    if (match.decl.id === "run-cancel") {
         if (!deps.runStore) {
             sendError(res, 501, "capability.run_store_required", "async runs require a durable run store (DB_BACKEND=mysql|pg|local)");
             return;
@@ -282,7 +255,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const taskId = cancelMatch[1];
+        const taskId = match.params.taskId;
         const run = await deps.runStore.getRun(taskId);
         if (!run) {
             sendError(res, 404, "not_found.run", runNotFoundMessage(taskId));
@@ -397,8 +370,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         }
         return;
     }
-    const steerMatch = req.method === "POST" ? RUN_STEER_RE.exec(url) : null;
-    if (steerMatch) {
+    if (match.decl.id === "run-steer") {
         if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
             return;
         if (!deps.runStore) {
@@ -410,7 +382,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const taskId = steerMatch[1];
+        const taskId = match.params.taskId;
         let body;
         try {
             body = ((await readJson(req)) ?? {});
@@ -676,8 +648,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         sendNotRunning(`run is ${run.status} — not accepting steers`);
         return;
     }
-    const interruptMatch = req.method === "POST" ? RUN_INTERRUPT_RE.exec(url) : null;
-    if (interruptMatch) {
+    if (match.decl.id === "run-interrupt") {
         if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
             return;
         if (!deps.runStore) {
@@ -689,7 +660,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const taskId = interruptMatch[1];
+        const taskId = match.params.taskId;
         let interruptRaw;
         try {
             interruptRaw = await readJson(req);
@@ -822,8 +793,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         sendJson(res, 202, { taskId, status: run.status, delivery: "queued-immediate", messageId: interruptMessageId, note: "interrupt accepted — the cut is best-effort: a task.turn_interrupted event on the run stream is the proof a turn was actually cut; with nothing in flight the text lands at the next turn boundary" });
         return;
     }
-    const compactMatch = req.method === "POST" ? RUN_COMPACT_RE.exec(url) : null;
-    if (compactMatch) {
+    if (match.decl.id === "run-compact") {
         if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
             return;
         if (!deps.runStore) {
@@ -835,7 +805,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const taskId = compactMatch[1];
+        const taskId = match.params.taskId;
         const run = await deps.runStore.getRun(taskId);
         if (!run) {
             sendError(res, 404, "not_found.run", RUN_NOT_FOUND_MESSAGE);
@@ -889,8 +859,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         sendJson(res, 202, { taskId, status: "running", delivery: "accepted", note: "compaction will run at the next turn boundary; a compacted{trigger:'manual'} event rides the run stream if anything is summarized" });
         return;
     }
-    const detachMatch = req.method === "POST" ? RUN_DETACH_RE.exec(url) : null;
-    if (detachMatch) {
+    if (match.decl.id === "run-detach") {
         if (rateLimited(req, res))
             return;
         if (!deps.runStore) {
@@ -902,7 +871,7 @@ async function handleRunsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const taskId = detachMatch[1];
+        const taskId = match.params.taskId;
         let body;
         try {
             body = ((await readJson(req)) ?? {});
@@ -940,24 +909,23 @@ async function handleRunsBody(req, res, url, ctx, miss) {
         sendJson(res, 202, { taskId, toolCallId: body.toolCallId, delivery: "requested", note: "if the tool call is running in a detach-capable env it settles early with 'moved to background; task_id=b*'; otherwise the request is a no-op (fail-safe)" });
         return;
     }
-    miss.fell = true;
+    return assertNever(match.decl.id);
 }
-async function handleRunVerbsBody(req, res, url, ctx, miss) {
+export async function handleRunVerbs(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson, rateLimited, quotaExceeded, ownerQuotaDenied, leaseDenied, ownerLeaseDenied, safeDecode, runSessionAcceptOk } = ctx.helpers;
-    const subOutputMatch = req.method === "GET" ? RUN_SUBAGENT_OUTPUT_RE.exec(url) : null;
-    if (subOutputMatch) {
+    if (match.decl.id === "run-subagent-output") {
         if (!deps.runStore || !deps.subagentTaskOutput) {
             sendError(res, 501, "capability.run_store_required", "subagent output reads require the run store");
             return;
         }
-        const runId = safeDecode(subOutputMatch[1]);
-        const target = safeDecode(subOutputMatch[2]);
+        const runId = safeDecode(match.params.runId);
+        const target = safeDecode(match.params.sub);
         if (runId === null || target === null) {
             sendError(res, 400, "request.path_malformed", "malformed subagent path (invalid percent-encoding)");
             return;
         }
-        const gated = await subagentReadGate(req, res, deps, runId);
+        const gated = await subagentReadGate(req, res, deps, runId, match.search);
         if (!gated)
             return;
         const { run } = gated;
@@ -971,19 +939,18 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         sendJson(res, 200, { taskId: runId, target, content: out.content, output: out.details });
         return;
     }
-    const subStreamMatch = req.method === "GET" ? RUN_SUBAGENT_STREAM_RE.exec(url) : null;
-    if (subStreamMatch) {
+    if (match.decl.id === "run-subagent-stream") {
         if (!deps.runStore || !deps.subagentTaskOutput) {
             sendError(res, 501, "capability.run_store_required", "subagent streams require the run store");
             return;
         }
-        const runId = safeDecode(subStreamMatch[1]);
-        const target = safeDecode(subStreamMatch[2]);
+        const runId = safeDecode(match.params.runId);
+        const target = safeDecode(match.params.sub);
         if (runId === null || target === null) {
             sendError(res, 400, "request.path_malformed", "malformed subagent path (invalid percent-encoding)");
             return;
         }
-        const gatedTail = await subagentReadGate(req, res, deps, runId);
+        const gatedTail = await subagentReadGate(req, res, deps, runId, match.search);
         if (!gatedTail)
             return;
         const { run } = gatedTail;
@@ -1034,26 +1001,25 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         }
         return;
     }
-    const taskVerbMatch = req.method === "GET" ? RUN_TASK_OUTPUT_RE.exec(url) : req.method === "POST" ? RUN_TASK_STOP_RE.exec(url) : null;
-    if (taskVerbMatch) {
-        const stopVerb = req.method === "POST";
+    if (match.decl.id === "run-task-output" || match.decl.id === "run-task-stop") {
+        const stopVerb = match.decl.id === "run-task-stop";
         if (!deps.runStore || !deps.taskHandleOutput || !deps.taskHandleStop) {
             sendError(res, 501, "capability.run_store_required", "task-handle verbs require the run store + task-registry seams");
             return;
         }
         if (stopVerb && rateLimited(req, res))
             return;
-        const runId = safeDecode(taskVerbMatch[1]);
-        const target = safeDecode(taskVerbMatch[2]);
+        const runId = safeDecode(match.params.runId);
+        const target = safeDecode(match.params.tid);
         if (runId === null || target === null) {
             sendError(res, 400, "request.path_malformed", "malformed task path (invalid percent-encoding)");
             return;
         }
-        const gatedB = await subagentReadGate(req, res, deps, runId);
+        const gatedB = await subagentReadGate(req, res, deps, runId, match.search);
         if (!gatedB)
             return;
         const { run } = gatedB;
-        const q = new URL(req.url ?? "", "http://x").searchParams;
+        const q = new URLSearchParams(match.search);
         const access = { owner: runId, scope: run.owner ?? "default", ...(run.sessionId ? { sessionId: run.sessionId } : {}) };
         if (q.get("filter") !== null) {
             sendError(res, 400, "request.param_unsupported", "filter is not accepted on the wire — fetch the output and filter client-side (note: the wire serves the clipped projection)");
@@ -1106,9 +1072,8 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         sendJson(res, 200, { taskId: runId, target, content: out.content, output: out.details, ...g14 });
         return;
     }
-    const subVerbMatch = req.method === "POST" ? (RUN_SUBAGENT_STEER_RE.exec(url) ?? RUN_SUBAGENT_RESUME_RE.exec(url)) : null;
-    if (subVerbMatch) {
-        const verb = url.endsWith("/resume") ? "resume" : "steer";
+    if (match.decl.id === "run-subagent-steer" || match.decl.id === "run-subagent-resume") {
+        const verb = match.decl.id === "run-subagent-resume" ? "resume" : "steer";
         if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
             return;
         if (!deps.runStore) {
@@ -1120,8 +1085,8 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const runId = safeDecode(subVerbMatch[1]);
-        const target = safeDecode(subVerbMatch[2]);
+        const runId = safeDecode(match.params.runId);
+        const target = safeDecode(match.params.sub);
         if (runId === null || target === null) {
             sendError(res, 400, "request.path_malformed", "malformed subagent path (invalid percent-encoding)");
             return;
@@ -1204,8 +1169,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
             : `run is ${run.status} — its sub-agents are no longer addressable`);
         return;
     }
-    const elicitMatch = req.method === "POST" ? ELICIT_RESPOND_RE.exec(url) : null;
-    if (elicitMatch) {
+    if (match.decl.id === "elicitation-respond") {
         if (rateLimited(req, res))
             return;
         if (!deps.elicitation) {
@@ -1217,7 +1181,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const id = elicitMatch[1];
+        const id = match.params.id;
         let body;
         try {
             body = await readJson(req);
@@ -1230,8 +1194,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         sendJson(res, status, respBody);
         return;
     }
-    const questionMatch = req.method === "POST" ? QUESTION_RESPOND_RE.exec(url) : null;
-    if (questionMatch) {
+    if (match.decl.id === "question-respond") {
         if (rateLimited(req, res))
             return;
         if (!deps.question) {
@@ -1243,7 +1206,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const id = questionMatch[1];
+        const id = match.params.id;
         let body;
         try {
             body = await readJson(req);
@@ -1256,8 +1219,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         sendJson(res, status, respBody);
         return;
     }
-    const approvalMatch = req.method === "POST" ? TOOL_APPROVAL_RESPOND_RE.exec(url) : null;
-    if (approvalMatch) {
+    if (match.decl.id === "tool-approval-respond") {
         if (rateLimited(req, res))
             return;
         if (!deps.toolApproval) {
@@ -1269,7 +1231,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
             sendPrincipalRefusal(res, req, deps.config);
             return;
         }
-        const id = approvalMatch[1];
+        const id = match.params.id;
         let body;
         try {
             body = await readJson(req);
@@ -1286,8 +1248,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         sendJson(res, status, respBody);
         return;
     }
-    const askDecisionMatch = req.method === "POST" ? TASK_ASK_DECISION_RE.exec(url) : null;
-    if (askDecisionMatch) {
+    if (match.decl.id === "task-ask-decision") {
         if (rateLimited(req, res))
             return;
         const gate = resolveStreamApprovalGate({
@@ -1321,8 +1282,8 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         }
         const body = parsedBody.data;
         const hasUpdatedInput = typeof rawBody === "object" && rawBody !== null && "updatedInput" in rawBody;
-        const taskId = askDecisionMatch[1];
-        const askId = askDecisionMatch[2];
+        const taskId = match.params.taskId;
+        const askId = match.params.askId;
         const askNotFound = () => sendError(res, 404, "not_found.ask", "no such approval ask under this task (never existed, belongs to another task, or is not yours)");
         const row0 = await askStore.getAsk(askId);
         if (!row0 || row0.taskId !== taskId) {
@@ -1531,7 +1492,7 @@ async function handleRunVerbsBody(req, res, url, ctx, miss) {
         });
         return;
     }
-    miss.fell = true;
+    return assertNever(match.decl.id);
 }
 export async function createDurableRun(req, res, ctx, prepared, idemKey) {
     const { deps } = ctx;
@@ -1571,4 +1532,26 @@ export async function createDurableRun(req, res, ctx, prepared, idemKey) {
     }), (r) => r.status === 202);
     return resp;
 }
+export const RUNS_ROUTES = [
+    { id: "runs-submit", path: "/v1/runs", billable: true, methods: ["POST"] },
+    { id: "run-steer", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/steer$/, label: "/v1/runs/:id/steer", methods: ["POST"] },
+    { id: "run-interrupt", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/interrupt$/, label: "/v1/runs/:id/interrupt", methods: ["POST"] },
+    { id: "run-detach", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/detach$/, label: "/v1/runs/:id/detach", methods: ["POST"] },
+    { id: "run-cancel", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/cancel$/, label: "/v1/runs/:id/cancel", methods: ["POST"] },
+    { id: "run-compact", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/compact$/, label: "/v1/runs/:id/compact", methods: ["POST"] },
+    { id: "run-events", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)\/events$/, label: "/v1/runs/:id/events", methods: ["GET"] },
+    { id: "run-detail", pattern: /^\/v1\/runs\/(?<taskId>[^/]+)$/, label: "/v1/runs/:id", methods: ["GET"] },
+];
+export const RUN_VERBS_ROUTES = [
+    { id: "run-subagent-output", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/output$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["GET"] },
+    { id: "run-subagent-stream", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/stream$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["GET"] },
+    { id: "run-subagent-steer", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/steer$/, label: "/v1/runs/:id/subagents/:sub/*", methods: ["POST"] },
+    { id: "run-subagent-resume", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/subagents\/(?<sub>[^/]+)\/resume$/, label: "/v1/runs/:id/subagents/:sub/*", billable: true, methods: ["POST"] },
+    { id: "run-task-output", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/tasks\/(?<tid>[^/]+)\/output$/, label: "/v1/runs/:id/tasks/:tid/*", methods: ["GET"] },
+    { id: "run-task-stop", pattern: /^\/v1\/runs\/(?<runId>[^/]+)\/tasks\/(?<tid>[^/]+)\/stop$/, label: "/v1/runs/:id/tasks/:tid/*", methods: ["POST"] },
+    { id: "elicitation-respond", pattern: /^\/v1\/elicitations\/(?<id>[^/]+)\/respond$/, label: "/v1/elicitations/:id/respond", methods: ["POST"] },
+    { id: "question-respond", pattern: /^\/v1\/questions\/(?<id>[^/]+)\/respond$/, label: "/v1/questions/:id/respond", methods: ["POST"] },
+    { id: "tool-approval-respond", pattern: /^\/v1\/tool-approvals\/(?<id>[^/]+)\/respond$/, label: "/v1/tool-approvals/:id/respond", methods: ["POST"] },
+    { id: "task-ask-decision", pattern: /^\/v1\/tasks\/(?<taskId>[^/]+)\/asks\/(?<askId>[^/]+)\/decision$/, label: "/v1/tasks/:id/asks/:askId/decision", methods: ["POST"] },
+];
 //# sourceMappingURL=runs.js.map

package/dist/http/routes/session-sync.d.ts

@@ -10,7 +10,7 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { type SessionRulesRecord, type FileHistoryExport } from "@sema-agent/core";
 import { type StagingHandle } from "../../session-sync-kernel.js";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 export type PendingStaging = {
     handle: StagingHandle;
     realSessionId: string;
@@ -45,5 +45,44 @@ export interface SessionSyncLocal {
     cleanupStaging(stagingId: string): void;
 }
 export declare function createSessionSyncLocal(): SessionSyncLocal;
-export declare function handleSessionSync(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。 */
+export declare function handleSessionSync(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SessionSyncRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SESSION_SYNC_ROUTES: readonly [{
+    readonly id: "session-sync-manifest";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-sync-entries";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-sync-plan";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/$verb";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-sync-import";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/import";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-sync-import-entries";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/import";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-sync-blob-put";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/blobs";
+    readonly methods: readonly ["PUT"];
+}, {
+    readonly id: "session-sync-history-blob";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/sync/history/blobs/:hash";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SessionSyncRouteId = RouteIdsOf<typeof SESSION_SYNC_ROUTES>;
 //# sourceMappingURL=session-sync.d.ts.map

package/dist/http/routes/session-sync.js

@@ -11,6 +11,7 @@ const SYNC_BLOB_MAX_BYTES = 64 * 1024 * 1024;
 const SYNC_NDJSON_LINE_MAX_BYTES = 8 * 1024 * 1024;
 const SYNC_IMPORT_BATCH = 500;
 import { SHA256_HEX_RE } from "../../digest-form.js";
+import { assertNever } from "../route-ctx.js";
 export function createSessionSyncLocal() {
     const pendingStagings = new Map();
     const importLeases = new Map();
@@ -27,18 +28,12 @@ export function createSessionSyncLocal() {
     };
     return { pendingStagings, importLeases, touchImportLease, cleanupStaging };
 }
-export async function handleSessionSync(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleSessionSyncBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleSessionSyncBody(req, res, url, ctx, miss) {
+export async function handleSessionSync(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson, readRawBody, safeDecode, sessionOwnerScopeForWrite, rateLimited } = ctx.helpers;
     const { pendingStagings, importLeases, touchImportLease, cleanupStaging } = ctx.local.sessionSync;
     {
-        const sm = /^\/v1\/sessions\/([^/]+)\/sync\/(manifest|entries|import|plan|blobs(?:\/([^/]+))?|history\/blobs\/([^/]+)|import\/([^/]+)\/entries)$/.exec(url);
-        if (sm) {
+        {
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!deps.backend || !ownerOf) {
                 sendError(res, 501, "capability.session_store_required", "session sync requires a durable session store");
@@ -49,7 +44,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendError(res, 401, "auth.unauthorized", "unauthorized");
                 return;
             }
-            const sessionId = safeDecode(sm[1]);
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null || !isUuidShape(sessionId)) {
                 sendError(res, 400, "request.id_invalid", "invalid session id (must be a canonical uuid)");
                 return;
@@ -74,7 +69,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return true;
             };
-            if (sm[2] === "manifest" && req.method === "GET") {
+            if (match.decl.id === "session-sync-manifest") {
                 if (!pullGateOk())
                     return;
                 const out = await exportSessionManifest(sessionId, deps.backend);
@@ -85,10 +80,10 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, { manifest: out.manifest });
                 return;
             }
-            if (sm[2] === "entries" && req.method === "GET") {
+            if (match.decl.id === "session-sync-entries") {
                 if (!pullGateOk())
                     return;
-                const afterSeqRaw = new URL(req.url ?? "", "http://x").searchParams.get("afterSeq");
+                const afterSeqRaw = new URLSearchParams(match.search).get("afterSeq");
                 let afterSeq;
                 if (afterSeqRaw !== null) {
                     const n = Number(afterSeqRaw);
@@ -127,10 +122,10 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return;
             }
-            if (sm[4] !== undefined && req.method === "GET") {
+            if (match.decl.id === "session-sync-history-blob") {
                 if (!pullGateOk())
                     return;
-                const hash = safeDecode(sm[4]);
+                const hash = safeDecode(match.params.hash);
                 if (hash === null) {
                     sendError(res, 400, "request.path_malformed", "invalid blob hash");
                     return;
@@ -159,12 +154,12 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 res.end(Buffer.from(bytes));
                 return;
             }
-            if (sm[3] !== undefined && req.method === "PUT") {
+            if (match.decl.id === "session-sync-blob-put") {
                 if (rateLimited(req, res))
                     return;
                 if (!pushGateOk())
                     return;
-                const hash = safeDecode(sm[3]);
+                const hash = safeDecode(match.params.hash);
                 if (hash === null || !SHA256_HEX_RE.test(hash)) {
                     sendError(res, 400, "request.id_invalid", "blob hash must be 64 lowercase-hex chars");
                     return;
@@ -191,7 +186,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 res.writeHead(204).end();
                 return;
             }
-            if (sm[2] === "import" && req.method === "POST") {
+            if (match.decl.id === "session-sync-import") {
                 if (!pushGateOk())
                     return;
                 if (deps.sessionMirrorRuling && !scope.fleetWide && scope.gateOwner !== null) {
@@ -353,8 +348,8 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, { stagingId, relation: relA.relation });
                 return;
             }
-            if (sm[5] !== undefined && req.method === "POST") {
-                const stagingId = safeDecode(sm[5]);
+            if (match.decl.id === "session-sync-import-entries") {
+                const stagingId = safeDecode(match.params.stagingId);
                 if (stagingId === null) {
                     sendError(res, 400, "request.id_invalid", "invalid staging id");
                     return;
@@ -507,7 +502,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return;
             }
-            if (sm[2] === "plan" && req.method === "POST") {
+            if (match.decl.id === "session-sync-plan") {
                 if (!pushGateOk())
                     return;
                 let body;
@@ -527,10 +522,17 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, relation);
                 return;
             }
-            sendError(res, 404, "not_found.route", "not found");
-            return;
+            return assertNever(match.decl.id);
         }
     }
-    miss.fell = true;
 }
+export const SESSION_SYNC_ROUTES = [
+    { id: "session-sync-manifest", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/manifest$/, label: "/v1/sessions/:id/sync/$verb", methods: ["GET"] },
+    { id: "session-sync-entries", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/entries$/, label: "/v1/sessions/:id/sync/$verb", methods: ["GET"] },
+    { id: "session-sync-plan", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/plan$/, label: "/v1/sessions/:id/sync/$verb", methods: ["POST"] },
+    { id: "session-sync-import", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/import$/, label: "/v1/sessions/:id/sync/import", methods: ["POST"] },
+    { id: "session-sync-import-entries", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/import\/(?<stagingId>[^/]+)\/entries$/, label: "/v1/sessions/:id/sync/import", methods: ["POST"] },
+    { id: "session-sync-blob-put", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/blobs\/(?<hash>[^/]+)$/, label: "/v1/sessions/:id/sync/blobs", methods: ["PUT"] },
+    { id: "session-sync-history-blob", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/history\/blobs\/(?<hash>[^/]+)$/, label: "/v1/sessions/:id/sync/history/blobs/:hash", methods: ["GET"] },
+];
 //# sourceMappingURL=session-sync.js.map

package/dist/http/routes/sessions-list.d.ts

@@ -5,6 +5,20 @@
  * owner-scope 与 trace 列表同一权威模型(system/traceToken=fleet-wide,principal=钉住本人)。本域零可变状态。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleSessionsList(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
+ *  的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。
+ *  跨域的东西(deps / 助手 / 单域状态)一律在首行解构出来,于是下面每一行都逐字不变。 */
+export declare function handleSessionsList(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SessionsListRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SESSIONS_LIST_ROUTES: readonly [{
+    readonly id: "sessions-list";
+    readonly path: "/v1/sessions";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "sendfile-links";
+    readonly path: "/v1/sendfile-links";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SessionsListRouteId = RouteIdsOf<typeof SESSIONS_LIST_ROUTES>;
 //# sourceMappingURL=sessions-list.d.ts.map