@sema-agent/server 7.79.3 → 7.80.0

package/dist/http/routes/notify-wake.js

@@ -2,136 +2,138 @@ import { taskNotificationInboxEntry } from "../../orchestration/workflow-complet
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
 import { sendResumeOutcome } from "../route-ctx.js";
-export const SESSION_WAKE_RE = /^\/v1\/sessions\/[^/]+\/wake$/;
-export async function handleNotifyWake(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleNotifyWakeBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleNotifyWakeBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export async function handleNotifyWake(req, res, match, ctx) {
     const { deps } = ctx;
     const { steerableRuns } = ctx.registry;
     const { readJson, rateLimited, quotaExceeded, leaseDenied } = ctx.helpers;
     const { resumeWake } = ctx.legs;
-    if (req.method === "POST" && /^\/v1\/sessions\/[^/]+\/notify$/.test(url)) {
-        if (rateLimited(req, res) || quotaExceeded(req, res))
-            return;
-        const principal = gatedPrincipal(req, deps.config);
-        if (deps.config.requirePrincipal && principal === undefined) {
-            sendPrincipalRefusal(res, req, deps.config);
-            return;
-        }
-        const notifySession = decodeURIComponent(url.split("/")[3]);
-        let nb;
-        try {
-            nb = (await readJson(req));
-        }
-        catch {
-            sendError(res, 400, "request.body_shape", "body must be JSON: { task_id, status, summary, result?, seq?, source? }");
-            return;
-        }
-        if (typeof nb.task_id !== "string" || nb.task_id.trim().length === 0 || nb.task_id.length > 190) {
-            sendError(res, 400, "request.field_invalid", "task_id must be a non-empty string of at most 190 characters");
-            return;
-        }
-        const NOTIFY_STATUSES = ["completed", "failed", "killed", "cancelled", "event"];
-        const _notifyExhaustive = true;
-        void _notifyExhaustive;
-        if (typeof nb.status !== "string" || !NOTIFY_STATUSES.includes(nb.status)) {
-            sendError(res, 400, "request.field_invalid", `status must be one of ${NOTIFY_STATUSES.join("/")}`);
-            return;
-        }
-        if (typeof nb.summary !== "string" || nb.summary.trim().length === 0) {
-            sendError(res, 400, "request.field_invalid", "summary must be a non-empty string");
-            return;
-        }
-        if (nb.result !== undefined && typeof nb.result !== "string") {
-            sendError(res, 400, "request.field_invalid", "result must be a string when present");
-            return;
-        }
-        if (nb.seq !== undefined && (typeof nb.seq !== "number" || !Number.isInteger(nb.seq) || nb.seq < 1)) {
-            sendError(res, 400, "request.field_invalid", "seq must be a positive integer when present");
-            return;
-        }
-        if (nb.source !== undefined && (typeof nb.source !== "string" || nb.source.length > 190)) {
-            sendError(res, 400, "request.field_invalid", "source must be a string of at most 190 characters when present");
-            return;
-        }
-        if (!deps.sessionStorage?.ownerOf) {
-            sendError(res, 501, "capability.session_ownership_required", "external notify requires the session-ownership face (sessionStorage.ownerOf)");
-            return;
-        }
-        const notifyOwner = await deps.sessionStorage.ownerOf(notifySession);
-        if (notifyOwner === undefined) {
-            sendError(res, 404, "not_found.session", "session not found");
-            return;
-        }
-        const notifyOperator = explicitOperatorOk(principal, deps.config.operatorPrincipals);
-        if (!notifyOperator && notifyOwner !== null && notifyOwner !== principal) {
-            sendError(res, 404, "not_found.session", "session not found");
-            return;
-        }
-        const payload = {
-            task_id: nb.task_id,
-            status: nb.status,
-            summary: nb.summary,
-            ...(nb.result !== undefined ? { result: nb.result } : {}),
-            ...(nb.seq !== undefined ? { seq: nb.seq } : {}),
-            ...(nb.source !== undefined ? { source: nb.source } : {}),
-        };
-        const liveTaskId = await deps.runStore?.getActiveTaskId?.(notifySession).catch(() => undefined);
-        const liveStream = liveTaskId !== undefined && liveTaskId !== null ? steerableRuns.get(liveTaskId) : undefined;
-        if (liveStream) {
+    switch (match.decl.id) {
+        case "session-notify": {
+            if (rateLimited(req, res) || quotaExceeded(req, res))
+                return;
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && principal === undefined) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            const notifySession = decodeURIComponent(match.params.sessionId);
+            let nb;
             try {
-                await liveStream.notify(payload, { priority: "next" });
-                sendJson(res, 200, { sessionId: notifySession, delivery: "live" });
+                nb = (await readJson(req));
+            }
+            catch {
+                sendError(res, 400, "request.body_shape", "body must be JSON: { task_id, status, summary, result?, seq?, source? }");
                 return;
             }
-            catch (e) {
-                const code = e.code;
-                if (typeof code === "string" && code.startsWith("notify.")) {
-                    sendError(res, 400, code, e instanceof Error ? e.message : "invalid notification");
+            if (typeof nb.task_id !== "string" || nb.task_id.trim().length === 0 || nb.task_id.length > 190) {
+                sendError(res, 400, "request.field_invalid", "task_id must be a non-empty string of at most 190 characters");
+                return;
+            }
+            const NOTIFY_STATUSES = ["completed", "failed", "killed", "cancelled", "event"];
+            const _notifyExhaustive = true;
+            void _notifyExhaustive;
+            if (typeof nb.status !== "string" || !NOTIFY_STATUSES.includes(nb.status)) {
+                sendError(res, 400, "request.field_invalid", `status must be one of ${NOTIFY_STATUSES.join("/")}`);
+                return;
+            }
+            if (typeof nb.summary !== "string" || nb.summary.trim().length === 0) {
+                sendError(res, 400, "request.field_invalid", "summary must be a non-empty string");
+                return;
+            }
+            if (nb.result !== undefined && typeof nb.result !== "string") {
+                sendError(res, 400, "request.field_invalid", "result must be a string when present");
+                return;
+            }
+            if (nb.seq !== undefined && (typeof nb.seq !== "number" || !Number.isInteger(nb.seq) || nb.seq < 1)) {
+                sendError(res, 400, "request.field_invalid", "seq must be a positive integer when present");
+                return;
+            }
+            if (nb.source !== undefined && (typeof nb.source !== "string" || nb.source.length > 190)) {
+                sendError(res, 400, "request.field_invalid", "source must be a string of at most 190 characters when present");
+                return;
+            }
+            if (!deps.sessionStorage?.ownerOf) {
+                sendError(res, 501, "capability.session_ownership_required", "external notify requires the session-ownership face (sessionStorage.ownerOf)");
+                return;
+            }
+            const notifyOwner = await deps.sessionStorage.ownerOf(notifySession);
+            if (notifyOwner === undefined) {
+                sendError(res, 404, "not_found.session", "session not found");
+                return;
+            }
+            const notifyOperator = explicitOperatorOk(principal, deps.config.operatorPrincipals);
+            if (!notifyOperator && notifyOwner !== null && notifyOwner !== principal) {
+                sendError(res, 404, "not_found.session", "session not found");
+                return;
+            }
+            const payload = {
+                task_id: nb.task_id,
+                status: nb.status,
+                summary: nb.summary,
+                ...(nb.result !== undefined ? { result: nb.result } : {}),
+                ...(nb.seq !== undefined ? { seq: nb.seq } : {}),
+                ...(nb.source !== undefined ? { source: nb.source } : {}),
+            };
+            const liveTaskId = await deps.runStore?.getActiveTaskId?.(notifySession).catch(() => undefined);
+            const liveStream = liveTaskId !== undefined && liveTaskId !== null ? steerableRuns.get(liveTaskId) : undefined;
+            if (liveStream) {
+                try {
+                    await liveStream.notify(payload, { priority: "next" });
+                    sendJson(res, 200, { sessionId: notifySession, delivery: "live" });
                     return;
                 }
+                catch (e) {
+                    const code = e.code;
+                    if (typeof code === "string" && code.startsWith("notify.")) {
+                        sendError(res, 400, code, e instanceof Error ? e.message : "invalid notification");
+                        return;
+                    }
+                }
             }
-        }
-        if (!deps.workflowCompletionInbox) {
-            sendError(res, 501, "capability.workflow_store_required", "external notify park requires the workflow completion inbox (WORKFLOW_RUN_STORE)");
-            return;
-        }
-        await deps.workflowCompletionInbox.enqueue(taskNotificationInboxEntry(notifySession, notifyOwner ?? principal ?? null, { task_id: payload.task_id, task_type: "external", status: payload.status, summary: payload.summary, ...(payload.result !== undefined ? { result: payload.result } : {}), ...(payload.seq !== undefined ? { seq: payload.seq } : {}), ...(payload.source !== undefined ? { source: payload.source } : {}) }, Date.now()));
-        sendJson(res, 202, { sessionId: notifySession, delivery: "parked", note: "no live stream — parked in the session inbox; drained as a task_notification on the next stream open" });
-        return;
-    }
-    if (req.method === "POST" && SESSION_WAKE_RE.test(url)) {
-        if (!deps.checkpointStore) {
-            sendError(res, 501, "capability.checkpoint_store_required", "wake requires the checkpoint store");
-            return;
-        }
-        if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
-            return;
-        const principal = gatedPrincipal(req, deps.config);
-        if (deps.config.requirePrincipal && principal === undefined) {
-            sendPrincipalRefusal(res, req, deps.config);
-            return;
-        }
-        const wakeSession = decodeURIComponent(url.split("/")[3]);
-        let wakeBody;
-        try {
-            wakeBody = (await readJson(req));
-        }
-        catch {
-            sendError(res, 400, "request.body_shape", "body must be JSON: { message?: string }");
+            if (!deps.workflowCompletionInbox) {
+                sendError(res, 501, "capability.workflow_store_required", "external notify park requires the workflow completion inbox (WORKFLOW_RUN_STORE)");
+                return;
+            }
+            await deps.workflowCompletionInbox.enqueue(taskNotificationInboxEntry(notifySession, notifyOwner ?? principal ?? null, { task_id: payload.task_id, task_type: "external", status: payload.status, summary: payload.summary, ...(payload.result !== undefined ? { result: payload.result } : {}), ...(payload.seq !== undefined ? { seq: payload.seq } : {}), ...(payload.source !== undefined ? { source: payload.source } : {}) }, Date.now()));
+            sendJson(res, 202, { sessionId: notifySession, delivery: "parked", note: "no live stream — parked in the session inbox; drained as a task_notification on the next stream open" });
             return;
         }
-        if (wakeBody.message !== undefined && (typeof wakeBody.message !== "string" || wakeBody.message.length === 0)) {
-            sendError(res, 400, "request.field_invalid", "message must be a non-empty string when present");
+        case "session-wake": {
+            if (!deps.checkpointStore) {
+                sendError(res, 501, "capability.checkpoint_store_required", "wake requires the checkpoint store");
+                return;
+            }
+            if (rateLimited(req, res) || quotaExceeded(req, res) || (await leaseDenied(req, res)))
+                return;
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && principal === undefined) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            const wakeSession = decodeURIComponent(match.params.sessionId);
+            let wakeBody;
+            try {
+                wakeBody = (await readJson(req));
+            }
+            catch {
+                sendError(res, 400, "request.body_shape", "body must be JSON: { message?: string }");
+                return;
+            }
+            if (wakeBody.message !== undefined && (typeof wakeBody.message !== "string" || wakeBody.message.length === 0)) {
+                sendError(res, 400, "request.field_invalid", "message must be a non-empty string when present");
+                return;
+            }
+            const out = await resumeWake(wakeSession, wakeBody.message, principal, req, true);
+            sendResumeOutcome(res, out, deps.logger);
             return;
         }
-        const out = await resumeWake(wakeSession, wakeBody.message, principal, req, true);
-        sendResumeOutcome(res, out, deps.logger);
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
+export const NOTIFY_WAKE_ROUTES = [
+    { id: "session-wake", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/wake$/, label: "/v1/sessions/:id/$verb", billable: true, methods: ["POST"] },
+    { id: "session-notify", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/notify$/, label: "/v1/sessions/:id/$verb", methods: ["POST"] },
+];
 //# sourceMappingURL=notify-wake.js.map

package/dist/http/routes/observability.d.ts

@@ -5,6 +5,20 @@
  * 与 quotaExceeded 门同键、只读不消费)。本域零可变状态。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleObservability(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
+ *  的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。
+ *  跨域的东西(deps / 助手 / 单域状态)一律在首行解构出来,于是下面每一行都逐字不变。 */
+export declare function handleObservability(req: IncomingMessage, res: ServerResponse, match: RouteMatch<ObservabilityRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const OBSERVABILITY_ROUTES: readonly [{
+    readonly id: "outcomes";
+    readonly path: "/v1/outcomes";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "usage";
+    readonly path: "/v1/usage";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type ObservabilityRouteId = RouteIdsOf<typeof OBSERVABILITY_ROUTES>;
 //# sourceMappingURL=observability.d.ts.map

package/dist/http/routes/observability.js

@@ -1,63 +1,66 @@
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, isOperator, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
-export async function handleObservability(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleObservabilityBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleObservabilityBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export async function handleObservability(req, res, match, ctx) {
     const { deps } = ctx;
-    if (url === "/v1/outcomes" && req.method === "GET") {
-        if (deps.config.requirePrincipal) {
-            const principal = gatedPrincipal(req, deps.config);
-            if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
-                sendError(res, 403, "auth.operator_only", "outcomes view is operator-only on a multi-tenant worker");
+    switch (match.decl.id) {
+        case "outcomes": {
+            if (deps.config.requirePrincipal) {
+                const principal = gatedPrincipal(req, deps.config);
+                if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
+                    sendError(res, 403, "auth.operator_only", "outcomes view is operator-only on a multi-tenant worker");
+                    return;
+                }
+            }
+            if (!deps.outcomeSink?.summary) {
+                sendError(res, 501, "capability.outcome_ledger_required", "no queryable outcome ledger on this worker (File sink — read the JSONL dataset directly)");
                 return;
             }
-        }
-        if (!deps.outcomeSink?.summary) {
-            sendError(res, 501, "capability.outcome_ledger_required", "no queryable outcome ledger on this worker (File sink — read the JSONL dataset directly)");
-            return;
-        }
-        const q = new URL(req.url ?? "/", "http://localhost").searchParams;
-        const sig = q.get("signature") ?? undefined;
-        try {
-            const rows = await deps.outcomeSink.summary({ ...(sig ? { taskSignature: sig } : {}), includeAborted: q.get("includeAborted") === "true" });
-            sendJson(res, 200, { outcomes: rows });
-        }
-        catch (err) {
-            deps.logger?.warn?.("outcomes_summary_failed", { err: String(err) });
-            sendError(res, 500, "internal.error", "outcome summary failed");
-        }
-        return;
-    }
-    if (url === "/v1/usage" && req.method === "GET") {
-        const principal = gatedPrincipal(req, deps.config);
-        if (!principal) {
-            sendPrincipalRefusal(res, req, deps.config);
+            const q = new URLSearchParams(match.search);
+            const sig = q.get("signature") ?? undefined;
+            try {
+                const rows = await deps.outcomeSink.summary({ ...(sig ? { taskSignature: sig } : {}), includeAborted: q.get("includeAborted") === "true" });
+                sendJson(res, 200, { outcomes: rows });
+            }
+            catch (err) {
+                deps.logger?.warn?.("outcomes_summary_failed", { err: String(err) });
+                sendError(res, 500, "internal.error", "outcome summary failed");
+            }
             return;
         }
-        const windowSec = deps.config.costQuotaWindowSec;
-        if (!deps.costQuota) {
-            sendJson(res, 200, { enabled: false, windowSec, maxTaskCostUsd: deps.config.maxTaskCostUsd, maxTaskTokens: deps.config.maxTaskTokens });
+        case "usage": {
+            const principal = gatedPrincipal(req, deps.config);
+            if (!principal) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            const windowSec = deps.config.costQuotaWindowSec;
+            if (!deps.costQuota) {
+                sendJson(res, 200, { enabled: false, windowSec, maxTaskCostUsd: deps.config.maxTaskCostUsd, maxTaskTokens: deps.config.maxTaskTokens });
+                return;
+            }
+            const d = deps.costQuota.check(principal);
+            sendJson(res, 200, {
+                enabled: true,
+                windowSec,
+                usedMicroUsd: d.usedMicroUsd,
+                usedUsd: d.usedMicroUsd / 1_000_000,
+                limitMicroUsd: d.limitMicroUsd,
+                limitUsd: d.limitMicroUsd / 1_000_000,
+                remainingMicroUsd: Math.max(0, d.limitMicroUsd - d.usedMicroUsd),
+                overLimit: !d.allowed,
+                retryAfterSec: d.retryAfterSec,
+                maxTaskCostUsd: deps.config.maxTaskCostUsd,
+                maxTaskTokens: deps.config.maxTaskTokens,
+            });
             return;
         }
-        const d = deps.costQuota.check(principal);
-        sendJson(res, 200, {
-            enabled: true,
-            windowSec,
-            usedMicroUsd: d.usedMicroUsd,
-            usedUsd: d.usedMicroUsd / 1_000_000,
-            limitMicroUsd: d.limitMicroUsd,
-            limitUsd: d.limitMicroUsd / 1_000_000,
-            remainingMicroUsd: Math.max(0, d.limitMicroUsd - d.usedMicroUsd),
-            overLimit: !d.allowed,
-            retryAfterSec: d.retryAfterSec,
-            maxTaskCostUsd: deps.config.maxTaskCostUsd,
-            maxTaskTokens: deps.config.maxTaskTokens,
-        });
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
+export const OBSERVABILITY_ROUTES = [
+    { id: "outcomes", path: "/v1/outcomes", methods: ["GET"] },
+    { id: "usage", path: "/v1/usage", methods: ["GET"] },
+];
 //# sourceMappingURL=observability.js.map

package/dist/http/routes/retention-ops.d.ts

@@ -31,6 +31,23 @@
  * 分层:本模块不值 import `server.ts`(那条边闭合运行时装载环),只 `import type`。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleRetention(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+export declare function handleRetention(req: IncomingMessage, res: ServerResponse, match: RouteMatch<RetentionRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const RETENTION_ROUTES: readonly [{
+    readonly id: "retention-audit";
+    readonly path: "/v1/ops/retention/audit";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "retention-hold-place";
+    readonly pattern: RegExp;
+    readonly label: "/v1/ops/retention/holds/:domain";
+    readonly methods: readonly ["PUT"];
+}, {
+    readonly id: "retention-hold-release";
+    readonly pattern: RegExp;
+    readonly label: "/v1/ops/retention/holds/:domain";
+    readonly methods: readonly ["DELETE"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type RetentionRouteId = RouteIdsOf<typeof RETENTION_ROUTES>;
 //# sourceMappingURL=retention-ops.d.ts.map

package/dist/http/routes/retention-ops.js

@@ -1,7 +1,7 @@
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 import { RETENTION_AUDIT_DEFAULT_LIMIT, RETENTION_AUDIT_MAX_LIMIT } from "../../plugins/retention-lane-store-sql.js";
-const HOLD_RE = /^\/v1\/ops\/retention\/holds\/([^/]*)$/;
 const AUDIT_PATH = "/v1/ops/retention/audit";
 const DOMAIN_MAX_CHARS = 190;
 const NOTE_MAX_CHARS = 4000;
@@ -24,20 +24,8 @@ function decodeCursor(raw) {
         return { ok: false, why: "cursor payload lacks a non-negative integer `id`" };
     return { ok: true, id };
 }
-export async function handleRetention(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleRetentionBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleRetentionBody(req, res, url, ctx, miss) {
+export async function handleRetention(req, res, match, ctx) {
     const { deps } = ctx;
-    const path = url.split("?")[0] ?? url;
-    const holdMatch = req.method === "PUT" || req.method === "DELETE" ? HOLD_RE.exec(path) : null;
-    const isAudit = req.method === "GET" && path === AUDIT_PATH;
-    if (!holdMatch && !isAudit) {
-        miss.fell = true;
-        return;
-    }
     const principal = gatedPrincipal(req, deps.config);
     if (deps.config.requirePrincipal && !principal) {
         sendPrincipalRefusal(res, req, deps.config);
@@ -52,13 +40,19 @@ async function handleRetentionBody(req, res, url, ctx, miss) {
         sendError(res, 501, "capability.retention_store_required", "managed retention requires a SQL store backend (DB_BACKEND=mysql|pg) — the local/file backend declares retention:'none' and holds nothing to govern");
         return;
     }
-    if (holdMatch) {
-        await handleHold(req, res, ctx, store, holdMatch[1] ?? "", principal);
-        return;
+    switch (match.decl.id) {
+        case "retention-hold-place":
+        case "retention-hold-release":
+            await handleHold(req, res, ctx, store, match.params.domain ?? "", principal, match.decl.id === "retention-hold-place");
+            return;
+        case "retention-audit":
+            await handleAuditRead(res, store, match.search);
+            return;
+        default:
+            return assertNever(match.decl.id);
     }
-    await handleAuditRead(req, res, store);
 }
-async function handleHold(req, res, ctx, store, rawDomain, principal) {
+async function handleHold(req, res, ctx, store, rawDomain, principal, held) {
     const domain = ctx.helpers.safeDecode(rawDomain);
     if (domain === null) {
         sendError(res, 400, "request.id_invalid", "invalid retention domain segment");
@@ -70,7 +64,6 @@ async function handleHold(req, res, ctx, store, rawDomain, principal) {
         });
         return;
     }
-    const held = req.method === "PUT";
     let note;
     if (held) {
         let raw;
@@ -123,8 +116,8 @@ async function handleHold(req, res, ctx, store, rawDomain, principal) {
     });
     sendJson(res, 200, held ? { domain, held: true, placedBy, placedAtMs: nowMs } : { domain, held: false });
 }
-async function handleAuditRead(req, res, store) {
-    const q = new URL(req.url ?? "", "http://x").searchParams;
+async function handleAuditRead(res, store, search) {
+    const q = new URLSearchParams(search);
     const limitRaw = q.get("limit");
     if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= RETENTION_AUDIT_MAX_LIMIT)) {
         sendError(res, 400, "request.query_invalid", `limit must be a decimal integer in 1..${RETENTION_AUDIT_MAX_LIMIT}`);
@@ -155,4 +148,9 @@ async function handleAuditRead(req, res, store) {
         ...(hasMore && last !== undefined ? { nextBefore: encodeCursor({ id: last.id }) } : {}),
     });
 }
+export const RETENTION_ROUTES = [
+    { id: "retention-audit", path: AUDIT_PATH, methods: ["GET"] },
+    { id: "retention-hold-place", pattern: /^\/v1\/ops\/retention\/holds\/(?<domain>[^/]*)$/, label: "/v1/ops/retention/holds/:domain", methods: ["PUT"] },
+    { id: "retention-hold-release", pattern: /^\/v1\/ops\/retention\/holds\/(?<domain>[^/]*)$/, label: "/v1/ops/retention/holds/:domain", methods: ["DELETE"] },
+];
 //# sourceMappingURL=retention-ops.js.map

package/dist/http/routes/rules.d.ts

@@ -26,7 +26,7 @@
  * 日志,不上 wire。同族先例 = run/trace 属主门与 `POST /v1/tasks/:id/asks/:askId/decision` 的 404 姿势。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 export declare const RULES_CC_IMPORT_PREPARE_PATH = "/v1/rules/cc-import/prepare";
 export declare const RULES_CC_IMPORT_REDEEM_PATH = "/v1/rules/cc-import/redeem";
 /** [ref] A7:File 规则直通票口两条(与 cc-import 两口并列,票语义分家见 `rules-consent.ts` 的 A7 段)。 */
@@ -34,5 +34,39 @@ export declare const RULES_LOCAL_IMPORT_PREPARE_PATH = "/v1/rules/local-import/p
 export declare const RULES_LOCAL_IMPORT_REDEEM_PATH = "/v1/rules/local-import/redeem";
 /** 撤销面两口共用的字面路径(GET 列举 / DELETE 撤销)。 */
 export declare const RULES_PATH = "/v1/rules";
-export declare function handleRules(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleRules(req: IncomingMessage, res: ServerResponse, match: RouteMatch<RulesRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const RULES_ROUTES: readonly [{
+    readonly id: "rules-cc-import-prepare";
+    readonly path: "/v1/rules/cc-import/prepare";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "rules-cc-import-redeem";
+    readonly path: "/v1/rules/cc-import/redeem";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "rules-local-import-prepare";
+    readonly path: "/v1/rules/local-import/prepare";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "rules-local-import-redeem";
+    readonly path: "/v1/rules/local-import/redeem";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "rules-list";
+    readonly path: "/v1/rules";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "rules-revoke";
+    readonly path: "/v1/rules";
+    readonly credentialGated: readonly ["DELETE"];
+    readonly methods: readonly ["DELETE"];
+}, {
+    readonly prefix: "/v1/rules/cc-import/";
+    readonly credentialGated: readonly ["POST"];
+}, {
+    readonly prefix: "/v1/rules/local-import/";
+    readonly credentialGated: readonly ["POST"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type RulesRouteId = RouteIdsOf<typeof RULES_ROUTES>;
 //# sourceMappingURL=rules.d.ts.map