@sema-agent/server 7.79.3 → 7.80.0

package/dist/http/routes/diagnostics.js

@@ -3,6 +3,7 @@ import { buildReadFaceWiring } from "../../read-face-posture.js";
 import { resolveStreamApprovalGate } from "../../tool-approval.js";
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, isLoopbackAddress, verifiedIdentitySource } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 export function buildServerWiringGates(input) {
     const gate = resolveStreamApprovalGate({
         toolApprovalEnabled: input.toolApprovalEnabled,
@@ -78,56 +79,53 @@ export function zeroCredentialLoopbackDenied(remoteAddress, config) {
         return false;
     return !isLoopbackAddress(remoteAddress);
 }
-export async function handleDiagnostics(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleDiagnosticsBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleDiagnosticsBody(req, res, url, ctx, miss) {
+export async function handleDiagnostics(req, res, match, ctx) {
     const { deps } = ctx;
-    if (req.method === "GET" && url === "/v1/diagnostics/wiring") {
-        if (deps.config.operatorPrincipals.length > 0 || deps.config.requirePrincipal) {
-            const principal = gatedPrincipal(req, deps.config);
-            if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
-                sendError(res, 403, "auth.operator_only", "wiring diagnostics are operator-only on a multi-tenant worker");
-                return;
+    switch (match.decl.id) {
+        case "diagnostics-wiring": {
+            if (deps.config.operatorPrincipals.length > 0 || deps.config.requirePrincipal) {
+                const principal = gatedPrincipal(req, deps.config);
+                if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
+                    sendError(res, 403, "auth.operator_only", "wiring diagnostics are operator-only on a multi-tenant worker");
+                    return;
+                }
+                if (!isLoopbackAddress(req.socket.remoteAddress) && verifiedIdentitySource(req, deps.config) === undefined) {
+                    sendError(res, 403, "auth.loopback_only", "wiring diagnostics on a zero-credential deployment are readable from loopback only — configure SERVICE_AUTH_TOKEN to read remotely");
+                    return;
+                }
             }
-            if (!isLoopbackAddress(req.socket.remoteAddress) && verifiedIdentitySource(req, deps.config) === undefined) {
+            else if (zeroCredentialLoopbackDenied(req.socket.remoteAddress, deps.config)) {
                 sendError(res, 403, "auth.loopback_only", "wiring diagnostics on a zero-credential deployment are readable from loopback only — configure SERVICE_AUTH_TOKEN to read remotely");
                 return;
             }
-        }
-        else if (zeroCredentialLoopbackDenied(req.socket.remoteAddress, deps.config)) {
-            sendError(res, 403, "auth.loopback_only", "wiring diagnostics on a zero-credential deployment are readable from loopback only — configure SERVICE_AUTH_TOKEN to read remotely");
-            return;
-        }
-        if (!deps.staticWiring) {
-            miss.fell = true;
+            sendJson(res, 200, {
+                static: deps.staticWiring,
+                memoryPosture: deps.memoryPosture ?? null,
+                sqlEngine: deps.sqlEngineFacts?.() ?? null,
+                writeProtection: deps.writeProtection ?? null,
+                readFace: buildReadFaceWiring(deps.config),
+                configApply: deps.configApplyState?.() ?? null,
+                mcpRevocations: deps.mcpRevocationState?.() ?? null,
+                serverGates: buildServerWiringGates({
+                    toolApprovalEnabled: deps.toolApproval !== undefined,
+                    streamApprovalEnabled: deps.config.streamApproval?.enabled === true,
+                    backend: deps.backend,
+                    checkpointStore: deps.checkpointStore,
+                    durableApproval: deps.config.durableApproval === true,
+                    durableApprovalSource: deps.config.durableApprovalSource,
+                    streamAskWindowMs: deps.config.streamApproval?.windowMs ?? 0,
+                    streamAskWindowMsSource: deps.config.streamAskWindowMsSource,
+                    sessionAutoTitle: deps.config.sessionAutoTitle === true,
+                    sessionAutoTitleSource: deps.config.sessionAutoTitleSource,
+                }),
+            });
             return;
         }
-        sendJson(res, 200, {
-            static: deps.staticWiring,
-            memoryPosture: deps.memoryPosture ?? null,
-            sqlEngine: deps.sqlEngineFacts?.() ?? null,
-            writeProtection: deps.writeProtection ?? null,
-            readFace: buildReadFaceWiring(deps.config),
-            configApply: deps.configApplyState?.() ?? null,
-            mcpRevocations: deps.mcpRevocationState?.() ?? null,
-            serverGates: buildServerWiringGates({
-                toolApprovalEnabled: deps.toolApproval !== undefined,
-                streamApprovalEnabled: deps.config.streamApproval?.enabled === true,
-                backend: deps.backend,
-                checkpointStore: deps.checkpointStore,
-                durableApproval: deps.config.durableApproval === true,
-                durableApprovalSource: deps.config.durableApprovalSource,
-                streamAskWindowMs: deps.config.streamApproval?.windowMs ?? 0,
-                streamAskWindowMsSource: deps.config.streamAskWindowMsSource,
-                sessionAutoTitle: deps.config.sessionAutoTitle === true,
-                sessionAutoTitleSource: deps.config.sessionAutoTitleSource,
-            }),
-        });
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
+export const DIAGNOSTICS_ROUTES = [
+    { id: "diagnostics-wiring", path: "/v1/diagnostics/wiring", methods: ["GET"] },
+];
 //# sourceMappingURL=diagnostics.js.map

package/dist/http/routes/fleet.d.ts

@@ -5,6 +5,15 @@
  * (按 principal 自门,与 workflow 只读路由同列)。本域零可变状态。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleFleet(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
+ *  = 「本域已应答」;走到函数尾才是「没匹配上」。跨域的东西一律在首行解构出来。 */
+export declare function handleFleet(req: IncomingMessage, res: ServerResponse, match: RouteMatch<FleetRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const FLEET_ROUTES: readonly [{
+    readonly id: "fleet-stream";
+    readonly path: "/v1/fleet/stream";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type FleetRouteId = RouteIdsOf<typeof FLEET_ROUTES>;
 //# sourceMappingURL=fleet.d.ts.map

package/dist/http/routes/fleet.js

@@ -3,33 +3,31 @@ import { FLEET_SNAPSHOT_TERMINAL_MAX_ROWS, isTerminalWorkflowRowStatus, recentTe
 import { taskNotificationFoldKey } from "../../orchestration/workflow-completion-inbox.js";
 import { sendJson, sendError, sseHeaders } from "../send.js";
 import { gatedPrincipal, sendPrincipalRefusal } from "../principal-gate.js";
-export async function handleFleet(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleFleetBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleFleetBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export async function handleFleet(req, res, match, ctx) {
     const { deps } = ctx;
     const { sessionOwnerScope } = ctx.helpers;
-    void url;
-    if (req.method === "GET" && new URL(req.url ?? "", "http://x").pathname === "/v1/fleet/stream") {
-        if (!deps.fleetBus) {
-            sendError(res, 501, "capability.self_orchestration_required", "fleet stream requires self-orchestration / fleet wiring");
-            return;
-        }
-        const { fleetWide } = sessionOwnerScope(req);
-        const principal = gatedPrincipal(req, deps.config);
-        if (deps.config.requirePrincipal && !principal && !fleetWide) {
-            sendPrincipalRefusal(res, req, deps.config);
+    switch (match.decl.id) {
+        case "fleet-stream": {
+            if (!deps.fleetBus) {
+                sendError(res, 501, "capability.self_orchestration_required", "fleet stream requires self-orchestration / fleet wiring");
+                return;
+            }
+            const { fleetWide } = sessionOwnerScope(req);
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && !principal && !fleetWide) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            const fleetParams = new URLSearchParams(match.search);
+            const callerSession = fleetParams.get("session");
+            const observeOnly = fleetParams.get("observe") === "1";
+            await streamFleet(req, res, deps.fleetBus, fleetWide ? null : (principal ?? "default"), callerSession || null, observeOnly ? undefined : deps.workflowCompletionInbox, { store: deps.workflowRunStore, scope: fleetWide ? null : (principal ?? "default"), pullScope: principal ?? "default", ready: deps.fleetRecoveryDone });
             return;
         }
-        const fleetParams = new URL(req.url ?? "", "http://x").searchParams;
-        const callerSession = fleetParams.get("session");
-        const observeOnly = fleetParams.get("observe") === "1";
-        await streamFleet(req, res, deps.fleetBus, fleetWide ? null : (principal ?? "default"), callerSession || null, observeOnly ? undefined : deps.workflowCompletionInbox, { store: deps.workflowRunStore, scope: fleetWide ? null : (principal ?? "default"), pullScope: principal ?? "default", ready: deps.fleetRecoveryDone });
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
 function streamFleet(req, res, bus, callerScope, callerSession = null, completionInbox, terminal) {
     return new Promise((resolve) => {
@@ -239,4 +237,7 @@ function streamFleet(req, res, bus, callerScope, callerSession = null, completio
         })().catch(() => shutdown());
     });
 }
+export const FLEET_ROUTES = [
+    { id: "fleet-stream", path: "/v1/fleet/stream", methods: ["GET"] },
+];
 //# sourceMappingURL=fleet.js.map

package/dist/http/routes/images.d.ts

@@ -13,7 +13,7 @@ import type { IncomingMessage, ServerResponse } from "node:http";
 import { RateLimiter } from "../../observability/rate-limit.js";
 import type { BakeState, BakeErrorCode } from "../../plugins/store-contracts.js";
 import type { FlatServiceDeps } from "../server.js";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 /** 单域独占状态(lens1 §C2 的 12 条之一)。每个 server 实例一份——模块级会把限速状态跨实例串味
  *  (一个进程里建几十个 server 的测试会互相污染)。 */
 export interface ImagesLocal {
@@ -26,12 +26,66 @@ export declare function coarseStatusForState(state: BakeState): "running" | "don
 /** build.sh's structured exit code → the center band-composer UI's terminal `errorCode` (§P2.14 #2). null for an
  *  uncategorized failure (then `error` free-text + `exitCode` drive the UI). 10=dup-tag, 124=timeout, 507=disk. */
 export declare function errorCodeForExit(exitCode: number | null | undefined, cancelled: boolean): BakeErrorCode;
-export declare const IMAGE_DIGEST_RE: RegExp;
-export declare const IMAGE_PROFILE_RE: RegExp;
-export declare const BAKE_ID_RE: RegExp;
-export declare const BAKE_EVENTS_RE: RegExp;
-export declare const BAKE_CANCEL_RE: RegExp;
-export declare const BAKE_CLAIM_RE: RegExp;
-export declare const BAKE_INGEST_RE: RegExp;
-export declare function handleImages(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
+ *  的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。
+ *  跨域的东西(deps / 助手 / 单域状态 / 每请求量)一律在首行解构出来,于是下面每一行都逐字不变。 */
+export declare function handleImages(req: IncomingMessage, res: ServerResponse, match: RouteMatch<ImagesRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const IMAGES_ROUTES: readonly [{
+    readonly id: "images-index";
+    readonly path: "/v1/images";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "image-bake-submit";
+    readonly path: "/v1/images/bakes";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-bake-claim-next";
+    readonly path: "/v1/images/bakes/claim";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-select";
+    readonly path: "/v1/images/select";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-register";
+    readonly path: "/v1/images/register";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-bake-events";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/bakes/:id/events";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "image-bake-cancel";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/bakes/:id/cancel";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-bake-claim";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/bakes/:id/claim";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-bake-ingest";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/bakes/:id/ingest";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "image-bake-detail";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/bakes/:id";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "image-by-digest";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/digests/:digest";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "image-by-profile";
+    readonly pattern: RegExp;
+    readonly label: "/v1/images/:profile";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type ImagesRouteId = RouteIdsOf<typeof IMAGES_ROUTES>;
 //# sourceMappingURL=images.d.ts.map

package/dist/http/routes/images.js

@@ -7,6 +7,7 @@ import { streamSseLog } from "../sse-log.js";
 import { sendJson, sendError } from "../send.js";
 import { headerStr, safeEqual, gatedPrincipal, explicitOperatorOk } from "../principal-gate.js";
 import { scopedIdempotencyKey } from "../idempotency.js";
+import { assertNever } from "../route-ctx.js";
 export function createImagesLocal(deps) {
     return { bakeSubmitLimiter: new RateLimiter(deps.config.imageBakes?.submitRateMax ?? 0, (deps.config.imageBakes?.submitRateWindowSec ?? 60) * 1000) };
 }
@@ -38,24 +39,12 @@ export function errorCodeForExit(exitCode, cancelled) {
 }
 const RUNNER_ERROR_CODES = new Set(["band-conflict", "duplicate", "disk", "timeout", "cancelled"]);
 const SANDBOX_BASE_PROFILE = "sandbox-base";
-export const IMAGE_DIGEST_RE = /^\/v1\/images\/digests\/([^/]+)$/;
-export const IMAGE_PROFILE_RE = /^\/v1\/images\/([^/]+)$/;
-export const BAKE_ID_RE = /^\/v1\/images\/bakes\/([^/]+)$/;
-export const BAKE_EVENTS_RE = /^\/v1\/images\/bakes\/([^/]+)\/events$/;
-export const BAKE_CANCEL_RE = /^\/v1\/images\/bakes\/([^/]+)\/cancel$/;
-export const BAKE_CLAIM_RE = /^\/v1\/images\/bakes\/([^/]+)\/claim$/;
-export const BAKE_INGEST_RE = /^\/v1\/images\/bakes\/([^/]+)\/ingest$/;
-export async function handleImages(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleImagesBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleImagesBody(req, res, url, ctx, miss) {
+export async function handleImages(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson } = ctx.helpers;
     const { source } = ctx.req;
     const { bakeSubmitLimiter } = ctx.local.images;
-    if (deps.imageBakes && url.startsWith("/v1/images/bakes")) {
+    if (deps.imageBakes && isBakeRouteId(match.decl.id)) {
         const bakes = deps.imageBakes;
         const idx = deps.imageIndex;
         const principal = gatedPrincipal(req, deps.config);
@@ -63,7 +52,7 @@ async function handleImagesBody(req, res, url, ctx, miss) {
         const isExplicitOperator = explicitOperatorOk(principal, operators);
         const cfg = deps.config.imageBakes;
         const isRunner = source !== undefined && source !== null && source === cfg.runnerPrincipal;
-        if (req.method === "POST" && url === "/v1/images/bakes") {
+        if (match.decl.id === "image-bake-submit") {
             if (!isExplicitOperator) {
                 sendError(res, 403, "auth.operator_only", "operator only");
                 return;
@@ -134,13 +123,12 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 202, bakeAcceptedBody(bake));
             return;
         }
-        const evMatch = req.method === "GET" ? BAKE_EVENTS_RE.exec(url) : null;
-        if (evMatch) {
+        if (match.decl.id === "image-bake-events") {
             if (!isExplicitOperator) {
                 sendError(res, 403, "auth.operator_only", "operator only");
                 return;
             }
-            const bakeId = decodeURIComponent(evMatch[1]);
+            const bakeId = decodeURIComponent(match.params.bakeId);
             const bake = await bakes.getBake(bakeId);
             if (!bake) {
                 sendError(res, 404, "not_found.bake", "bake not found");
@@ -149,13 +137,12 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             await streamBakeEvents(req, res, bakes, bakeId, cfg.staleMs);
             return;
         }
-        const cancelMatch = req.method === "POST" ? BAKE_CANCEL_RE.exec(url) : null;
-        if (cancelMatch) {
+        if (match.decl.id === "image-bake-cancel") {
             if (!isExplicitOperator) {
                 sendError(res, 403, "auth.operator_only", "operator only");
                 return;
             }
-            const bakeId = decodeURIComponent(cancelMatch[1]);
+            const bakeId = decodeURIComponent(match.params.bakeId);
             const bake = await bakes.getBake(bakeId);
             if (!bake) {
                 sendError(res, 404, "not_found.bake", "bake not found");
@@ -165,7 +152,7 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 202, { bakeId, cancelRequested: true, note: flagged ? "cancel requested — the runner kills the build at the next heartbeat" : "bake already terminal — cancel is a no-op" });
             return;
         }
-        if (req.method === "POST" && url === "/v1/images/bakes/claim") {
+        if (match.decl.id === "image-bake-claim-next") {
             if (!isRunner) {
                 sendError(res, 403, "auth.bake_runner_only", "bake-runner only");
                 return;
@@ -186,13 +173,12 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, claimResponse(claimed));
             return;
         }
-        const claimMatch = req.method === "POST" ? BAKE_CLAIM_RE.exec(url) : null;
-        if (claimMatch) {
+        if (match.decl.id === "image-bake-claim") {
             if (!isRunner) {
                 sendError(res, 403, "auth.bake_runner_only", "bake-runner only");
                 return;
             }
-            const bakeId = decodeURIComponent(claimMatch[1]);
+            const bakeId = decodeURIComponent(match.params.bakeId);
             const body = (await readJson(req));
             const runnerId = typeof body.runnerId === "string" && body.runnerId.length > 0 ? body.runnerId : (principal ?? source ?? cfg.runnerPrincipal);
             const claimed = await bakes.claimBake(bakeId, runnerId, cfg.leaseMs);
@@ -203,13 +189,12 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, claimResponse(claimed));
             return;
         }
-        const ingestMatch = req.method === "POST" ? BAKE_INGEST_RE.exec(url) : null;
-        if (ingestMatch) {
+        if (match.decl.id === "image-bake-ingest") {
             if (!isRunner) {
                 sendError(res, 403, "auth.bake_runner_only", "bake-runner only");
                 return;
             }
-            const bakeId = decodeURIComponent(ingestMatch[1]);
+            const bakeId = decodeURIComponent(match.params.bakeId);
             const bake = await bakes.getBake(bakeId);
             if (!bake) {
                 sendError(res, 404, "not_found.bake", "bake not found");
@@ -248,13 +233,12 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, result.status, { ...result.body, cancelRequested: after?.cancelRequested ?? false, leaseValid: true });
             return;
         }
-        const idMatch = req.method === "GET" ? BAKE_ID_RE.exec(url) : null;
-        if (idMatch) {
+        if (match.decl.id === "image-bake-detail") {
             if (!isExplicitOperator) {
                 sendError(res, 403, "auth.operator_only", "operator only");
                 return;
             }
-            const bakeId = decodeURIComponent(idMatch[1]);
+            const bakeId = decodeURIComponent(match.params.bakeId);
             const bake = await bakes.getBake(bakeId);
             if (!bake) {
                 sendError(res, 404, "not_found.bake", "bake not found");
@@ -263,16 +247,15 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, { bake: bakeView(bake) });
             return;
         }
-        sendError(res, 404, "not_found.route", "not found");
-        return;
+        return assertNever(match.decl.id);
     }
-    if (deps.imageIndex && url.startsWith("/v1/images")) {
+    if (deps.imageIndex && isIndexRouteId(match.decl.id)) {
         const idx = deps.imageIndex;
         const principal = gatedPrincipal(req, deps.config);
         const operator = explicitOperatorOk(principal, deps.config.operatorPrincipals);
         const viewer = { operator, tenantId: principal ?? null };
-        const q = new URL(req.url ?? "", "http://x").searchParams;
-        if (req.method === "GET" && url === "/v1/images") {
+        const q = new URLSearchParams(match.search);
+        if (match.decl.id === "images-index") {
             const limRaw = q.get("limit");
             const { entries, nextCursor } = await idx.list({
                 ...viewer,
@@ -286,7 +269,7 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, { images: entries, nextCursor });
             return;
         }
-        if (req.method === "POST" && url === "/v1/images/select") {
+        if (match.decl.id === "image-select") {
             const body = (await readJson(req));
             const profile = typeof body.profile === "string" ? body.profile : "";
             if (!profile) {
@@ -318,7 +301,7 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             });
             return;
         }
-        if (req.method === "POST" && url === "/v1/images/register") {
+        if (match.decl.id === "image-register") {
             if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
                 sendError(res, 403, "auth.operator_only", "operator only");
                 return;
@@ -351,9 +334,8 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, { id });
             return;
         }
-        const digMatch = req.method === "GET" ? IMAGE_DIGEST_RE.exec(url) : null;
-        if (digMatch) {
-            const entry = await idx.getByDigest(decodeURIComponent(digMatch[1]));
+        if (match.decl.id === "image-by-digest") {
+            const entry = await idx.getByDigest(decodeURIComponent(match.params.digest));
             if (!entry || (!viewer.operator && entry.visibility === "tenant" && entry.tenantId !== viewer.tenantId)) {
                 sendError(res, 404, "not_found.image", "not found");
                 return;
@@ -361,9 +343,8 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, { image: entry });
             return;
         }
-        const profMatch = req.method === "GET" ? IMAGE_PROFILE_RE.exec(url) : null;
-        if (profMatch) {
-            const entry = await idx.latestPublished(decodeURIComponent(profMatch[1]), viewer);
+        if (match.decl.id === "image-by-profile") {
+            const entry = await idx.latestPublished(decodeURIComponent(match.params.profile), viewer);
             if (!entry) {
                 sendError(res, 404, "not_found.image", "not found");
                 return;
@@ -371,13 +352,25 @@ async function handleImagesBody(req, res, url, ctx, miss) {
             sendJson(res, 200, { image: entry });
             return;
         }
+        return assertNever(match.decl.id);
     }
-    else if (url === "/v1/images" || url.startsWith("/v1/images/")) {
+    {
         sendError(res, 501, "capability.image_index_required", "the sandbox-image-pool requires a SQL store backend (DB_BACKEND=mysql|pg) — the local backend wires no image index");
         return;
     }
-    miss.fell = true;
 }
+const BAKE_ROUTE_IDS = [
+    "image-bake-submit",
+    "image-bake-claim-next",
+    "image-bake-events",
+    "image-bake-cancel",
+    "image-bake-claim",
+    "image-bake-ingest",
+    "image-bake-detail",
+];
+const BAKE_ROUTE_ID_SET = new Set(BAKE_ROUTE_IDS);
+const isBakeRouteId = (id) => BAKE_ROUTE_ID_SET.has(id);
+const isIndexRouteId = (id) => !BAKE_ROUTE_ID_SET.has(id);
 async function streamBakeEvents(req, res, bakes, bakeId, staleMs) {
     await streamSseLog(req, res, {
         statusOf: async (id) => {
@@ -576,4 +569,18 @@ async function ingestBakeLine(bakes, idx, bake, line, registry) {
     }
     return { status: 200, body: { accepted: true, terminal: affectedRows >= 1, indexId } };
 }
+export const IMAGES_ROUTES = [
+    { id: "images-index", path: "/v1/images", methods: ["GET"] },
+    { id: "image-bake-submit", path: "/v1/images/bakes", methods: ["POST"] },
+    { id: "image-bake-claim-next", path: "/v1/images/bakes/claim", methods: ["POST"] },
+    { id: "image-select", path: "/v1/images/select", methods: ["POST"] },
+    { id: "image-register", path: "/v1/images/register", methods: ["POST"] },
+    { id: "image-bake-events", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/events$/, label: "/v1/images/bakes/:id/events", methods: ["GET"] },
+    { id: "image-bake-cancel", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/cancel$/, label: "/v1/images/bakes/:id/cancel", methods: ["POST"] },
+    { id: "image-bake-claim", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/claim$/, label: "/v1/images/bakes/:id/claim", methods: ["POST"] },
+    { id: "image-bake-ingest", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)\/ingest$/, label: "/v1/images/bakes/:id/ingest", methods: ["POST"] },
+    { id: "image-bake-detail", pattern: /^\/v1\/images\/bakes\/(?<bakeId>[^/]+)$/, label: "/v1/images/bakes/:id", methods: ["GET"] },
+    { id: "image-by-digest", pattern: /^\/v1\/images\/digests\/(?<digest>[^/]+)$/, label: "/v1/images/digests/:digest", methods: ["GET"] },
+    { id: "image-by-profile", pattern: /^\/v1\/images\/(?<profile>[^/]+)$/, label: "/v1/images/:profile", methods: ["GET"] },
+];
 //# sourceMappingURL=images.js.map

package/dist/http/routes/leader.d.ts

@@ -6,6 +6,24 @@
  * 任何持服务令牌者能提交/读任意租户的 leader run),owner 用 crypto 验证过的 `gatedPrincipal`。本域零可变状态。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleLeader(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。
+ *  注意本域的落空语义:`deps.leaderEndpoint` 在但 URL 不匹配、或 endpoint 返回 undefined,都要**继续**
+ *  往下走(原文的 if 块不 return),故只有真的应答过才算已处理——由末尾的 `miss.fell` 如实表达。 */
+/** 本域两条路径的**单一属主**(下面的声明行与那只接缝的回拼都引它,不再各写一遍字面量)。 */
+export declare const LEADER_SUBMIT_PATH = "/v1/leader";
+export declare function handleLeader(req: IncomingMessage, res: ServerResponse, match: RouteMatch<LeaderRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const LEADER_ROUTES: readonly [{
+    readonly id: "leader-submit";
+    readonly path: "/v1/leader";
+    readonly billable: true;
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "leader-detail";
+    readonly pattern: RegExp;
+    readonly label: "/v1/leader/:id";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type LeaderRouteId = RouteIdsOf<typeof LEADER_ROUTES>;
 //# sourceMappingURL=leader.d.ts.map

package/dist/http/routes/leader.js

@@ -1,48 +1,51 @@
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, headerStr, sendPrincipalRefusal } from "../principal-gate.js";
-export async function handleLeader(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleLeaderBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleLeaderBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export const LEADER_SUBMIT_PATH = "/v1/leader";
+export async function handleLeader(req, res, match, ctx) {
+    switch (match.decl.id) {
+        case "leader-submit":
+        case "leader-detail":
+            break;
+        default:
+            return assertNever(match.decl.id);
+    }
     const { deps } = ctx;
     const { readJson, rateLimited, quotaExceeded, leaseDenied, usageWindowDenied } = ctx.helpers;
-    if (deps.leaderEndpoint) {
-        const isLeaderPost = req.method === "POST" && url === "/v1/leader";
-        const isLeaderGet = req.method === "GET" && /^\/v1\/leader\/[^/]+$/.test(url);
-        if (isLeaderPost || isLeaderGet) {
-            if (deps.config.requirePrincipal && !gatedPrincipal(req, deps.config)) {
-                sendPrincipalRefusal(res, req, deps.config);
-                return;
-            }
-            const requester = gatedPrincipal(req, deps.config) ?? null;
-            if (isLeaderPost) {
-                if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)) || (await usageWindowDenied(req, res)))
-                    return;
-                let body;
-                try {
-                    body = await readJson(req);
-                }
-                catch {
-                    sendError(res, 400, "request.invalid_json", "invalid JSON body");
-                    return;
-                }
-                const r = await deps.leaderEndpoint.handle("POST", url, body, requester, headerStr(req.headers["idempotency-key"]) ?? null);
-                if (r) {
-                    sendJson(res, r.status, r.body);
-                    return;
-                }
-            }
-            else {
-                const r = await deps.leaderEndpoint.handle("GET", url, undefined, requester);
-                if (r) {
-                    sendJson(res, r.status, r.body);
-                    return;
-                }
-            }
+    const endpoint = deps.leaderEndpoint;
+    if (deps.config.requirePrincipal && !gatedPrincipal(req, deps.config)) {
+        sendPrincipalRefusal(res, req, deps.config);
+        return;
+    }
+    const requester = gatedPrincipal(req, deps.config) ?? null;
+    if (match.decl.id === "leader-submit") {
+        if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)) || (await usageWindowDenied(req, res)))
+            return;
+        let body;
+        try {
+            body = await readJson(req);
+        }
+        catch {
+            sendError(res, 400, "request.invalid_json", "invalid JSON body");
+            return;
+        }
+        const r = await endpoint.handle("POST", LEADER_SUBMIT_PATH, body, requester, headerStr(req.headers["idempotency-key"]) ?? null);
+        if (r) {
+            sendJson(res, r.status, r.body);
+            return;
+        }
+    }
+    else {
+        const r = await endpoint.handle("GET", `${LEADER_SUBMIT_PATH}/${match.params.id}`, undefined, requester);
+        if (r) {
+            sendJson(res, r.status, r.body);
+            return;
         }
     }
-    miss.fell = true;
+    throw new Error(`leader endpoint did not claim its own declared route: ${match.decl.id}`);
 }
+export const LEADER_ROUTES = [
+    { id: "leader-submit", path: LEADER_SUBMIT_PATH, billable: true, methods: ["POST"] },
+    { id: "leader-detail", pattern: /^\/v1\/leader\/(?<id>[^/]+)$/, label: "/v1/leader/:id", methods: ["GET"] },
+];
 //# sourceMappingURL=leader.js.map