@sema-agent/server 7.79.3 → 7.80.0

package/dist/http/routes/sessions-list.js

@@ -1,91 +1,90 @@
 import { isUuidV7, legacyUnownedAmnestyOpen } from "../../security.js";
 import { sendJson, sendError } from "../send.js";
 import { filterFingerprint } from "../cursor-fingerprint.js";
-export async function handleSessionsList(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleSessionsListBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleSessionsListBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export async function handleSessionsList(req, res, match, ctx) {
     const { deps } = ctx;
     const { isFleetWide, sessionOwnerScope } = ctx.helpers;
-    if (req.method === "GET" && url === "/v1/sessions") {
-        const { fleetWide, gateOwner } = sessionOwnerScope(req);
-        if (!fleetWide && gateOwner === null) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
-            return;
-        }
-        const lister = deps.sessionStorage?.listSessions?.bind(deps.sessionStorage) ?? deps.runStore?.listSessions?.bind(deps.runStore);
-        if (!lister) {
-            sendError(res, 501, "capability.session_store_required", "session list requires a durable session store (DB_BACKEND=mysql|pg|local)");
-            return;
-        }
-        const includeUnowned = !fleetWide && legacyUnownedAmnestyOpen(deps.config.requirePrincipal, gateOwner);
-        await handleSessionList(res, lister, new URL(req.url ?? "", "http://x").searchParams, gateOwner, includeUnowned);
-        return;
-    }
-    if (req.method === "GET" && url === "/v1/sendfile-links") {
-        const { fleetWide, gateOwner } = sessionOwnerScope(req);
-        if (!fleetWide && gateOwner === null) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
-            return;
-        }
-        if (!deps.sendFileLedger) {
-            sendError(res, 501, "capability.store_required", "sendfile ledger requires a store backend (DB_BACKEND=mysql|pg|local) and the SendUserFile issuer configured");
-            return;
-        }
-        const query = new URL(req.url ?? "", "http://x").searchParams;
-        const limitRaw = query.get("limit");
-        if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= 100)) {
-            sendError(res, 400, "request.query_invalid", "limit must be a decimal integer in 1..100");
-            return;
-        }
-        const limit = limitRaw === null ? 50 : Number(limitRaw);
-        const beforeRaw = query.get("before");
-        if (beforeRaw !== null && !isUuidV7(beforeRaw)) {
-            sendError(res, 400, "request.id_invalid", "before must be a uuidv7 link id (the `id`/`nextBefore` of a previous page)");
+    switch (match.decl.id) {
+        case "sessions-list": {
+            const { fleetWide, gateOwner } = sessionOwnerScope(req);
+            if (!fleetWide && gateOwner === null) {
+                sendError(res, 401, "auth.unauthorized", "unauthorized");
+                return;
+            }
+            const lister = deps.sessionStorage?.listSessions?.bind(deps.sessionStorage) ?? deps.runStore?.listSessions?.bind(deps.runStore);
+            if (!lister) {
+                sendError(res, 501, "capability.session_store_required", "session list requires a durable session store (DB_BACKEND=mysql|pg|local)");
+                return;
+            }
+            const includeUnowned = !fleetWide && legacyUnownedAmnestyOpen(deps.config.requirePrincipal, gateOwner);
+            await handleSessionList(res, lister, new URLSearchParams(match.search), gateOwner, includeUnowned);
             return;
         }
-        const before = beforeRaw ?? undefined;
-        let scope;
-        if (gateOwner !== null) {
-            scope = gateOwner;
-        }
-        else {
-            const scopeRaw = query.get("scope");
-            if (scopeRaw === null) {
-                scope = "_";
+        case "sendfile-links": {
+            const { fleetWide, gateOwner } = sessionOwnerScope(req);
+            if (!fleetWide && gateOwner === null) {
+                sendError(res, 401, "auth.unauthorized", "unauthorized");
+                return;
+            }
+            if (!deps.sendFileLedger) {
+                sendError(res, 501, "capability.store_required", "sendfile ledger requires a store backend (DB_BACKEND=mysql|pg|local) and the SendUserFile issuer configured");
+                return;
+            }
+            const query = new URLSearchParams(match.search);
+            const limitRaw = query.get("limit");
+            if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= 100)) {
+                sendError(res, 400, "request.query_invalid", "limit must be a decimal integer in 1..100");
+                return;
+            }
+            const limit = limitRaw === null ? 50 : Number(limitRaw);
+            const beforeRaw = query.get("before");
+            if (beforeRaw !== null && !isUuidV7(beforeRaw)) {
+                sendError(res, 400, "request.id_invalid", "before must be a uuidv7 link id (the `id`/`nextBefore` of a previous page)");
+                return;
+            }
+            const before = beforeRaw ?? undefined;
+            let scope;
+            if (gateOwner !== null) {
+                scope = gateOwner;
             }
             else {
-                const s = scopeRaw.trim();
-                if (s === "" || s.length > 190) {
-                    sendError(res, 400, "request.query_invalid", "scope must be a non-blank tenant principal of at most 190 characters (the sendfile_link.scope column width)");
-                    return;
+                const scopeRaw = query.get("scope");
+                if (scopeRaw === null) {
+                    scope = "_";
+                }
+                else {
+                    const s = scopeRaw.trim();
+                    if (s === "" || s.length > 190) {
+                        sendError(res, 400, "request.query_invalid", "scope must be a non-blank tenant principal of at most 190 characters (the sendfile_link.scope column width)");
+                        return;
+                    }
+                    scope = s;
                 }
-                scope = s;
             }
+            const rows = await deps.sendFileLedger.listByScope(scope, limit + 1, before);
+            const hasMore = rows.length > limit;
+            const page = hasMore ? rows.slice(0, limit) : rows;
+            sendJson(res, 200, {
+                links: page.map((r) => ({
+                    id: r.id,
+                    filename: r.filename,
+                    size: r.size,
+                    ttlSec: r.ttlSec,
+                    track: r.track,
+                    bucket: r.bucket,
+                    key: r.objectKey,
+                    createdAt: new Date(r.createdAt).toISOString(),
+                    ...(r.taskId !== undefined ? { taskId: r.taskId } : {}),
+                    ...(r.sessionId !== undefined ? { sessionId: r.sessionId } : {}),
+                })),
+                ...(hasMore ? { nextBefore: page[page.length - 1].id } : {}),
+            });
+            return;
         }
-        const rows = await deps.sendFileLedger.listByScope(scope, limit + 1, before);
-        const hasMore = rows.length > limit;
-        const page = hasMore ? rows.slice(0, limit) : rows;
-        sendJson(res, 200, {
-            links: page.map((r) => ({
-                id: r.id,
-                filename: r.filename,
-                size: r.size,
-                ttlSec: r.ttlSec,
-                track: r.track,
-                bucket: r.bucket,
-                key: r.objectKey,
-                createdAt: new Date(r.createdAt).toISOString(),
-                ...(r.taskId !== undefined ? { taskId: r.taskId } : {}),
-                ...(r.sessionId !== undefined ? { sessionId: r.sessionId } : {}),
-            })),
-            ...(hasMore ? { nextBefore: page[page.length - 1].id } : {}),
-        });
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
 function encodeSessionCursor(c, f) {
     return Buffer.from(JSON.stringify({ ...c, f })).toString("base64url");
@@ -123,4 +122,8 @@ async function handleSessionList(res, lister, query, forceOwner, includeUnowned
     const nextCursor = hasMore && last ? encodeSessionCursor({ lastActivityAt: last.lastActivityAt, sessionId: last.sessionId }, f) : undefined;
     sendJson(res, 200, { sessions: page, ...(nextCursor ? { nextCursor } : {}) });
 }
+export const SESSIONS_LIST_ROUTES = [
+    { id: "sessions-list", path: "/v1/sessions", methods: ["GET"] },
+    { id: "sendfile-links", path: "/v1/sendfile-links", methods: ["GET"] },
+];
 //# sourceMappingURL=sessions-list.js.map

package/dist/http/routes/sessions.d.ts

@@ -13,7 +13,7 @@
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { type SessionMemoryStatus } from "@sema-agent/core";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 /** 单域独占状态。每个 server 实例一份——模块级会把连接坑/缓存跨实例串味。 */
 export interface SessionsLocal {
     sseConnections: number;
@@ -46,5 +46,80 @@ export interface SessionsLocal {
     }>;
 }
 export declare function createSessionsLocal(): SessionsLocal;
-export declare function handleSessions(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(去缩进两格;sessions 另有一处见文件头说明)。
+ *  裸 `return;` 的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。 */
+export declare function handleSessions(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SessionsRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SESSIONS_ROUTES: readonly [{
+    readonly id: "session-init";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-settings";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-mcp";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-a2a";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-head";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-events";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-fork";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-policy-get";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-policy-put";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["PUT"];
+}, {
+    readonly id: "session-memory-erase";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/memory/erase";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-memory-status";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/memory-status";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-workspace";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/workspace";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-detail";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-delete";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id";
+    readonly methods: readonly ["DELETE"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SessionsRouteId = RouteIdsOf<typeof SESSIONS_ROUTES>;
 //# sourceMappingURL=sessions.d.ts.map

package/dist/http/routes/sessions.js

@@ -7,6 +7,7 @@ import { recordFailOpen } from "../../observability/fail-open.js";
 import { MAX_SETTINGS_OUTPUT_STYLE_CHARS, MAX_SETTINGS_PERMISSION_RULES, MAX_SETTINGS_ENV_VARS, MAX_SETTINGS_ENV_KEY_CHARS, MAX_SETTINGS_ENV_VALUE_CHARS } from "../../task-settings.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, runOwnerReadable, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 const MCP_STATUS_TTL_MS = 5_000;
 const MCP_MATERIALIZE_TIMEOUT_MS = 10_000;
 const A2A_STATUS_TTL_MS = 5_000;
@@ -61,26 +62,20 @@ async function readLastLegMcp(deps, sessionId, principal) {
     }
     return undefined;
 }
-export async function handleSessions(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleSessionsBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleSessionsBody(req, res, url, ctx, miss) {
+export async function handleSessions(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson, safeDecode, runOwnerOk, sessionOwnerScope, sessionOwnerScopeForWrite } = ctx.helpers;
     const sse = ctx.local.sessions;
     const { mcpStatusCache, a2aStatusCache } = ctx.local.sessions;
     {
-        const im = /^\/v1\/sessions\/([^/]+)\/init$/.exec(url);
-        if (im && req.method === "GET") {
+        if (match.decl.id === "session-init") {
             const principal = gatedPrincipal(req, deps.config);
             if (deps.config.requirePrincipal && !principal) {
                 sendPrincipalRefusal(res, req, deps.config);
                 return;
             }
             sendJson(res, 200, {
-                sessionId: im[1],
+                sessionId: match.params.sessionId,
                 model: { provider: deps.config.model.provider, modelId: deps.config.model.id },
                 ...(deps.config.autonomy ? { mode: deps.config.autonomy } : {}),
             });
@@ -88,8 +83,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const stm = /^\/v1\/sessions\/([^/]+)\/settings$/.exec(url);
-        if (stm && req.method === "GET") {
+        if (match.decl.id === "session-settings") {
             const principal = gatedPrincipal(req, deps.config);
             if (deps.config.requirePrincipal && !principal) {
                 sendPrincipalRefusal(res, req, deps.config);
@@ -109,14 +103,13 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const mm = /^\/v1\/sessions\/([^/]+)\/mcp$/.exec(url);
-        if (mm && req.method === "GET") {
+        if (match.decl.id === "session-mcp") {
             const principal = gatedPrincipal(req, deps.config);
             if (deps.config.requirePrincipal && !principal) {
                 sendPrincipalRefusal(res, req, deps.config);
                 return;
             }
-            const lastLegMcp = await lastLegMcpFor(deps, safeDecode(mm[1]), principal);
+            const lastLegMcp = await lastLegMcpFor(deps, safeDecode(match.params.sessionId), principal);
             const specs = mcpForScenario(deps.config.mcpServers, deps.config.defaultScenario);
             const cacheKey = `${deps.config.defaultScenario}::${principal ?? ""}`;
             if (!specs || specs.length === 0) {
@@ -160,8 +153,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const am = /^\/v1\/sessions\/([^/]+)\/a2a$/.exec(url);
-        if (am && req.method === "GET") {
+        if (match.decl.id === "session-a2a") {
             if (deps.config.requirePrincipal && !gatedPrincipal(req, deps.config)) {
                 sendPrincipalRefusal(res, req, deps.config);
                 return;
@@ -220,15 +212,14 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const hm = req.method === "GET" ? /^\/v1\/sessions\/([^/]+)\/head$/.exec(url) : null;
-        if (hm) {
+        if (match.decl.id === "session-head") {
             const getLeafId = deps.sessionStorage?.getLeafId?.bind(deps.sessionStorage);
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!getLeafId || !ownerOf) {
                 sendError(res, 501, "capability.session_store_required", "session head probe requires a durable session store (DB_BACKEND=mysql|pg|local)");
                 return;
             }
-            const headSession = decodeURIComponent(hm[1]);
+            const headSession = decodeURIComponent(match.params.sessionId);
             const getHead = deps.sessionStorage?.getHead?.bind(deps.sessionStorage);
             let owner;
             let leafId;
@@ -264,15 +255,14 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const em = req.method === "GET" ? /^\/v1\/sessions\/([^/]+)\/events$/.exec(url) : null;
-        if (em) {
+        if (match.decl.id === "session-events") {
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             const watch = deps.sessionWatch;
             if (!deps.sessionStorage?.getLeafId || !ownerOf || !watch) {
                 sendError(res, 501, "capability.session_store_required", "session events require a durable session store (DB_BACKEND=mysql|pg|local)");
                 return;
             }
-            const evSession = decodeURIComponent(em[1]);
+            const evSession = decodeURIComponent(match.params.sessionId);
             if (sse.sseConnections >= (deps.sessionEventsMaxConnections ?? 256)) {
                 res.setHeader("retry-after", "5");
                 sendError(res, 503, "state.sse_connection_cap", "session-events connection cap reached — fall back to /head polling");
@@ -333,7 +323,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                     cleanup();
                     return;
                 }
-                const q = new URL(req.url ?? url, "http://x").searchParams;
+                const q = new URLSearchParams(match.search);
                 const lastLeafId = q.get("lastLeafId");
                 let first = true;
                 let lastAccepted;
@@ -453,9 +443,8 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const em = req.method === "POST" ? /^\/v1\/sessions\/([^/]+)\/memory\/erase$/.exec(url) : null;
-        if (em) {
-            const sessionId = safeDecode(em[1]);
+        if (match.decl.id === "session-memory-erase") {
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null) {
                 sendError(res, 400, "request.path_malformed", "session id segment is not valid percent-encoding");
                 return;
@@ -513,9 +502,8 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const msm = req.method === "GET" ? /^\/v1\/sessions\/([^/]+)\/memory-status$/.exec(url) : null;
-        if (msm) {
-            const sessionId = safeDecode(msm[1]);
+        if (match.decl.id === "session-memory-status") {
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null) {
                 sendError(res, 400, "request.path_malformed", "session id segment is not valid percent-encoding");
                 return;
@@ -570,17 +558,20 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
             return;
         }
     }
-    if (deps.sessionAudit && req.method === "GET") {
-        const sm = /^\/v1\/sessions\/([^/]+)$/.exec(url);
-        if (sm) {
-            const audit = await deps.sessionAudit(sm[1]);
+    if (match.decl.id === "session-detail") {
+        {
+            if (!deps.sessionAudit) {
+                sendError(res, 404, "not_found.route", "not found");
+                return;
+            }
+            const audit = await deps.sessionAudit(match.params.sessionId);
             if (!audit) {
                 sendError(res, 404, "not_found.session", "session not found");
                 return;
             }
             if (!runOwnerOk(req, res, audit.owner))
                 return;
-            const q = new URL(req.url ?? url, "http://x").searchParams;
+            const q = new URLSearchParams(match.search);
             const qi = (k) => {
                 const v = q.get(k);
                 if (v === null)
@@ -619,8 +610,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const fm = req.method === "POST" ? /^\/v1\/sessions\/([^/]+)\/fork$/.exec(url) : null;
-        if (fm) {
+        if (match.decl.id === "session-fork") {
             const fork = deps.sessionStorage?.fork?.bind(deps.sessionStorage);
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!fork || !ownerOf) {
@@ -632,7 +622,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                 sendError(res, 401, "auth.unauthorized", "unauthorized");
                 return;
             }
-            const sourceId = safeDecode(fm[1]);
+            const sourceId = safeDecode(match.params.sessionId);
             if (sourceId === null || !isUuidV7(sourceId)) {
                 sendError(res, 400, "request.id_invalid", "invalid session id (must be a uuidv7)");
                 return;
@@ -657,8 +647,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const dm = req.method === "DELETE" ? /^\/v1\/sessions\/([^/]+)$/.exec(url) : null;
-        if (dm) {
+        if (match.decl.id === "session-delete") {
             const purge = deps.purgeSession;
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!purge || !ownerOf) {
@@ -670,7 +659,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                 sendError(res, 401, "auth.unauthorized", "unauthorized");
                 return;
             }
-            const sessionId = safeDecode(dm[1]);
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null || !isUuidV7(sessionId)) {
                 sendError(res, 400, "request.id_invalid", "invalid session id (must be a uuidv7)");
                 return;
@@ -699,8 +688,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const pm = req.method === "GET" || req.method === "PUT" ? /^\/v1\/sessions\/([^/]+)\/policy$/.exec(url) : null;
-        if (pm) {
+        if (match.decl.id === "session-policy-get" || match.decl.id === "session-policy-put") {
             const store = deps.sessionPolicyStore;
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!store || !ownerOf) {
@@ -712,7 +700,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                 sendError(res, 401, "auth.unauthorized", "unauthorized");
                 return;
             }
-            const sessionId = safeDecode(pm[1]);
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null || !isUuidV7(sessionId)) {
                 sendError(res, 400, "request.id_invalid", "invalid session id (must be a uuidv7)");
                 return;
@@ -732,7 +720,7 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
                 return;
             }
             const target = owner;
-            if (req.method === "GET") {
+            if (match.decl.id === "session-policy-get") {
                 sendJson(res, 200, { rules: (await store.getRules(sessionId, target)) ?? { rev: 0 } });
                 return;
             }
@@ -778,12 +766,27 @@ async function handleSessionsBody(req, res, url, ctx, miss) {
         }
     }
     {
-        const wm = req.method === "GET" ? /^\/v1\/sessions\/([^/]+)\/workspace(?:\/([^/]+)(?:\/(tree|file|archive))?)?$/.exec(url) : null;
-        if (wm) {
+        if (match.decl.id === "session-workspace") {
             sendError(res, 501, "capability.workspace_retired", "workspace browse is retired: the whole-tree snapshot epoch it projected was replaced by per-edited-file rewind history (which holds only files the agent edited, not the workspace). There is no whole-tree manifest to browse anymore.");
             return;
         }
     }
-    miss.fell = true;
+    return assertNever(match.decl.id);
 }
+export const SESSIONS_ROUTES = [
+    { id: "session-init", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/init$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-settings", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/settings$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-mcp", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/mcp$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-a2a", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/a2a$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-head", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/head$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-events", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/events$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-fork", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/fork$/, label: "/v1/sessions/:id/$verb", methods: ["POST"] },
+    { id: "session-policy-get", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/policy$/, label: "/v1/sessions/:id/$verb", methods: ["GET"] },
+    { id: "session-policy-put", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/policy$/, label: "/v1/sessions/:id/$verb", methods: ["PUT"] },
+    { id: "session-memory-erase", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/memory\/erase$/, label: "/v1/sessions/:id/memory/erase", methods: ["POST"] },
+    { id: "session-memory-status", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/memory-status$/, label: "/v1/sessions/:id/memory-status", methods: ["GET"] },
+    { id: "session-workspace", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/workspace(?:\/(?<key>[^/]+)(?:\/(?<sub>tree|file|archive))?)?$/, label: "/v1/sessions/:id/workspace", methods: ["GET"] },
+    { id: "session-detail", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)$/, label: "/v1/sessions/:id", methods: ["GET"] },
+    { id: "session-delete", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)$/, label: "/v1/sessions/:id", methods: ["DELETE"] },
+];
 //# sourceMappingURL=sessions.js.map

package/dist/http/routes/shared-memory.d.ts

@@ -26,6 +26,23 @@
  * 「库里没有这份文件」对他不是秘密,把它和「你不是成员」合并反而会让成员无法区分打错路径和权限问题。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleSharedMemory(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+export declare function handleSharedMemory(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SharedMemoryRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SHARED_MEMORY_ROUTES: readonly [{
+    readonly id: "shared-memory-stores";
+    readonly path: "/v1/shared-memory/stores";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "shared-memory-store-documents";
+    readonly pattern: RegExp;
+    readonly label: "/v1/shared-memory/stores/:store/documents";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "shared-memory-store-document";
+    readonly pattern: RegExp;
+    readonly label: "/v1/shared-memory/stores/:store/document";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SharedMemoryRouteId = RouteIdsOf<typeof SHARED_MEMORY_ROUTES>;
 //# sourceMappingURL=shared-memory.d.ts.map