@sema-agent/server 7.79.3 → 7.80.1

package/dist/http/routes/session-sync.js

@@ -11,6 +11,7 @@ const SYNC_BLOB_MAX_BYTES = 64 * 1024 * 1024;
 const SYNC_NDJSON_LINE_MAX_BYTES = 8 * 1024 * 1024;
 const SYNC_IMPORT_BATCH = 500;
 import { SHA256_HEX_RE } from "../../digest-form.js";
+import { assertNever } from "../route-ctx.js";
 export function createSessionSyncLocal() {
     const pendingStagings = new Map();
     const importLeases = new Map();
@@ -27,18 +28,12 @@ export function createSessionSyncLocal() {
     };
     return { pendingStagings, importLeases, touchImportLease, cleanupStaging };
 }
-export async function handleSessionSync(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleSessionSyncBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleSessionSyncBody(req, res, url, ctx, miss) {
+export async function handleSessionSync(req, res, match, ctx) {
     const { deps } = ctx;
     const { readJson, readRawBody, safeDecode, sessionOwnerScopeForWrite, rateLimited } = ctx.helpers;
     const { pendingStagings, importLeases, touchImportLease, cleanupStaging } = ctx.local.sessionSync;
     {
-        const sm = /^\/v1\/sessions\/([^/]+)\/sync\/(manifest|entries|import|plan|blobs(?:\/([^/]+))?|history\/blobs\/([^/]+)|import\/([^/]+)\/entries)$/.exec(url);
-        if (sm) {
+        {
             const ownerOf = deps.sessionStorage?.ownerOf?.bind(deps.sessionStorage);
             if (!deps.backend || !ownerOf) {
                 sendError(res, 501, "capability.session_store_required", "session sync requires a durable session store");
@@ -49,7 +44,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendError(res, 401, "auth.unauthorized", "unauthorized");
                 return;
             }
-            const sessionId = safeDecode(sm[1]);
+            const sessionId = safeDecode(match.params.sessionId);
             if (sessionId === null || !isUuidShape(sessionId)) {
                 sendError(res, 400, "request.id_invalid", "invalid session id (must be a canonical uuid)");
                 return;
@@ -74,7 +69,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return true;
             };
-            if (sm[2] === "manifest" && req.method === "GET") {
+            if (match.decl.id === "session-sync-manifest") {
                 if (!pullGateOk())
                     return;
                 const out = await exportSessionManifest(sessionId, deps.backend);
@@ -85,10 +80,10 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, { manifest: out.manifest });
                 return;
             }
-            if (sm[2] === "entries" && req.method === "GET") {
+            if (match.decl.id === "session-sync-entries") {
                 if (!pullGateOk())
                     return;
-                const afterSeqRaw = new URL(req.url ?? "", "http://x").searchParams.get("afterSeq");
+                const afterSeqRaw = new URLSearchParams(match.search).get("afterSeq");
                 let afterSeq;
                 if (afterSeqRaw !== null) {
                     const n = Number(afterSeqRaw);
@@ -127,10 +122,10 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return;
             }
-            if (sm[4] !== undefined && req.method === "GET") {
+            if (match.decl.id === "session-sync-history-blob") {
                 if (!pullGateOk())
                     return;
-                const hash = safeDecode(sm[4]);
+                const hash = safeDecode(match.params.hash);
                 if (hash === null) {
                     sendError(res, 400, "request.path_malformed", "invalid blob hash");
                     return;
@@ -159,12 +154,12 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 res.end(Buffer.from(bytes));
                 return;
             }
-            if (sm[3] !== undefined && req.method === "PUT") {
+            if (match.decl.id === "session-sync-blob-put") {
                 if (rateLimited(req, res))
                     return;
                 if (!pushGateOk())
                     return;
-                const hash = safeDecode(sm[3]);
+                const hash = safeDecode(match.params.hash);
                 if (hash === null || !SHA256_HEX_RE.test(hash)) {
                     sendError(res, 400, "request.id_invalid", "blob hash must be 64 lowercase-hex chars");
                     return;
@@ -191,7 +186,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 res.writeHead(204).end();
                 return;
             }
-            if (sm[2] === "import" && req.method === "POST") {
+            if (match.decl.id === "session-sync-import") {
                 if (!pushGateOk())
                     return;
                 if (deps.sessionMirrorRuling && !scope.fleetWide && scope.gateOwner !== null) {
@@ -353,8 +348,8 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, { stagingId, relation: relA.relation });
                 return;
             }
-            if (sm[5] !== undefined && req.method === "POST") {
-                const stagingId = safeDecode(sm[5]);
+            if (match.decl.id === "session-sync-import-entries") {
+                const stagingId = safeDecode(match.params.stagingId);
                 if (stagingId === null) {
                     sendError(res, 400, "request.id_invalid", "invalid staging id");
                     return;
@@ -462,7 +457,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 if (pending.resolution !== undefined && overwriteWipeIncapable(deps.sessionPolicyStore)) {
                     await pending.handle.abort().catch(() => undefined);
                     cleanupStaging(stagingId);
-                    sendError(res, 501, "capability.policy_purge_required", "overwrite-dst cannot proceed: this deployment's session-policy store has no deleteBySession purge seam, so the destination's stale policy rows cannot be wiped and the import would land a MIXED state (the source's conversation plus the destination's leftover policy rows, which keep gating). Upgrade the policy store (every in-tree store carries deleteBySession since core 1.423), or re-run without resolution overwrite-dst");
+                    sendError(res, 501, "capability.policy_purge_required", "overwrite-dst cannot proceed: this deployment's session-policy store has no deleteBySession purge verb, so the destination's stale policy rows cannot be wiped and the import would land a MIXED state (the source's conversation plus the destination's leftover policy rows, which keep gating). Upgrade the policy store (every in-tree store carries deleteBySession since core 1.423), or re-run without resolution overwrite-dst");
                     return;
                 }
                 try {
@@ -507,7 +502,7 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 }
                 return;
             }
-            if (sm[2] === "plan" && req.method === "POST") {
+            if (match.decl.id === "session-sync-plan") {
                 if (!pushGateOk())
                     return;
                 let body;
@@ -527,10 +522,17 @@ async function handleSessionSyncBody(req, res, url, ctx, miss) {
                 sendJson(res, 200, relation);
                 return;
             }
-            sendError(res, 404, "not_found.route", "not found");
-            return;
+            return assertNever(match.decl.id);
         }
     }
-    miss.fell = true;
 }
+export const SESSION_SYNC_ROUTES = [
+    { id: "session-sync-manifest", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/manifest$/, label: "/v1/sessions/:id/sync/$verb", methods: ["GET"] },
+    { id: "session-sync-entries", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/entries$/, label: "/v1/sessions/:id/sync/$verb", methods: ["GET"] },
+    { id: "session-sync-plan", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/plan$/, label: "/v1/sessions/:id/sync/$verb", methods: ["POST"] },
+    { id: "session-sync-import", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/import$/, label: "/v1/sessions/:id/sync/import", methods: ["POST"] },
+    { id: "session-sync-import-entries", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/import\/(?<stagingId>[^/]+)\/entries$/, label: "/v1/sessions/:id/sync/import", methods: ["POST"] },
+    { id: "session-sync-blob-put", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/blobs\/(?<hash>[^/]+)$/, label: "/v1/sessions/:id/sync/blobs", methods: ["PUT"] },
+    { id: "session-sync-history-blob", pattern: /^\/v1\/sessions\/(?<sessionId>[^/]+)\/sync\/history\/blobs\/(?<hash>[^/]+)$/, label: "/v1/sessions/:id/sync/history/blobs/:hash", methods: ["GET"] },
+];
 //# sourceMappingURL=session-sync.js.map

package/dist/http/routes/sessions-list.d.ts

@@ -5,6 +5,20 @@
  * owner-scope 与 trace 列表同一权威模型(system/traceToken=fleet-wide,principal=钉住本人)。本域零可变状态。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
-export declare function handleSessionsList(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
+ *  的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。
+ *  跨域的东西(deps / 助手 / 单域状态)一律在首行解构出来,于是下面每一行都逐字不变。 */
+export declare function handleSessionsList(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SessionsListRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SESSIONS_LIST_ROUTES: readonly [{
+    readonly id: "sessions-list";
+    readonly path: "/v1/sessions";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "sendfile-links";
+    readonly path: "/v1/sendfile-links";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SessionsListRouteId = RouteIdsOf<typeof SESSIONS_LIST_ROUTES>;
 //# sourceMappingURL=sessions-list.d.ts.map

package/dist/http/routes/sessions-list.js

@@ -1,91 +1,90 @@
 import { isUuidV7, legacyUnownedAmnestyOpen } from "../../security.js";
 import { sendJson, sendError } from "../send.js";
 import { filterFingerprint } from "../cursor-fingerprint.js";
-export async function handleSessionsList(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleSessionsListBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleSessionsListBody(req, res, url, ctx, miss) {
+import { assertNever } from "../route-ctx.js";
+export async function handleSessionsList(req, res, match, ctx) {
     const { deps } = ctx;
     const { isFleetWide, sessionOwnerScope } = ctx.helpers;
-    if (req.method === "GET" && url === "/v1/sessions") {
-        const { fleetWide, gateOwner } = sessionOwnerScope(req);
-        if (!fleetWide && gateOwner === null) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
-            return;
-        }
-        const lister = deps.sessionStorage?.listSessions?.bind(deps.sessionStorage) ?? deps.runStore?.listSessions?.bind(deps.runStore);
-        if (!lister) {
-            sendError(res, 501, "capability.session_store_required", "session list requires a durable session store (DB_BACKEND=mysql|pg|local)");
-            return;
-        }
-        const includeUnowned = !fleetWide && legacyUnownedAmnestyOpen(deps.config.requirePrincipal, gateOwner);
-        await handleSessionList(res, lister, new URL(req.url ?? "", "http://x").searchParams, gateOwner, includeUnowned);
-        return;
-    }
-    if (req.method === "GET" && url === "/v1/sendfile-links") {
-        const { fleetWide, gateOwner } = sessionOwnerScope(req);
-        if (!fleetWide && gateOwner === null) {
-            sendError(res, 401, "auth.unauthorized", "unauthorized");
-            return;
-        }
-        if (!deps.sendFileLedger) {
-            sendError(res, 501, "capability.store_required", "sendfile ledger requires a store backend (DB_BACKEND=mysql|pg|local) and the SendUserFile issuer configured");
-            return;
-        }
-        const query = new URL(req.url ?? "", "http://x").searchParams;
-        const limitRaw = query.get("limit");
-        if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= 100)) {
-            sendError(res, 400, "request.query_invalid", "limit must be a decimal integer in 1..100");
-            return;
-        }
-        const limit = limitRaw === null ? 50 : Number(limitRaw);
-        const beforeRaw = query.get("before");
-        if (beforeRaw !== null && !isUuidV7(beforeRaw)) {
-            sendError(res, 400, "request.id_invalid", "before must be a uuidv7 link id (the `id`/`nextBefore` of a previous page)");
+    switch (match.decl.id) {
+        case "sessions-list": {
+            const { fleetWide, gateOwner } = sessionOwnerScope(req);
+            if (!fleetWide && gateOwner === null) {
+                sendError(res, 401, "auth.unauthorized", "unauthorized");
+                return;
+            }
+            const lister = deps.sessionStorage?.listSessions?.bind(deps.sessionStorage) ?? deps.runStore?.listSessions?.bind(deps.runStore);
+            if (!lister) {
+                sendError(res, 501, "capability.session_store_required", "session list requires a durable session store (DB_BACKEND=mysql|pg|local)");
+                return;
+            }
+            const includeUnowned = !fleetWide && legacyUnownedAmnestyOpen(deps.config.requirePrincipal, gateOwner);
+            await handleSessionList(res, lister, new URLSearchParams(match.search), gateOwner, includeUnowned);
             return;
         }
-        const before = beforeRaw ?? undefined;
-        let scope;
-        if (gateOwner !== null) {
-            scope = gateOwner;
-        }
-        else {
-            const scopeRaw = query.get("scope");
-            if (scopeRaw === null) {
-                scope = "_";
+        case "sendfile-links": {
+            const { fleetWide, gateOwner } = sessionOwnerScope(req);
+            if (!fleetWide && gateOwner === null) {
+                sendError(res, 401, "auth.unauthorized", "unauthorized");
+                return;
+            }
+            if (!deps.sendFileLedger) {
+                sendError(res, 501, "capability.store_required", "sendfile ledger requires a store backend (DB_BACKEND=mysql|pg|local) and the SendUserFile issuer configured");
+                return;
+            }
+            const query = new URLSearchParams(match.search);
+            const limitRaw = query.get("limit");
+            if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= 100)) {
+                sendError(res, 400, "request.query_invalid", "limit must be a decimal integer in 1..100");
+                return;
+            }
+            const limit = limitRaw === null ? 50 : Number(limitRaw);
+            const beforeRaw = query.get("before");
+            if (beforeRaw !== null && !isUuidV7(beforeRaw)) {
+                sendError(res, 400, "request.id_invalid", "before must be a uuidv7 link id (the `id`/`nextBefore` of a previous page)");
+                return;
+            }
+            const before = beforeRaw ?? undefined;
+            let scope;
+            if (gateOwner !== null) {
+                scope = gateOwner;
             }
             else {
-                const s = scopeRaw.trim();
-                if (s === "" || s.length > 190) {
-                    sendError(res, 400, "request.query_invalid", "scope must be a non-blank tenant principal of at most 190 characters (the sendfile_link.scope column width)");
-                    return;
+                const scopeRaw = query.get("scope");
+                if (scopeRaw === null) {
+                    scope = "_";
+                }
+                else {
+                    const s = scopeRaw.trim();
+                    if (s === "" || s.length > 190) {
+                        sendError(res, 400, "request.query_invalid", "scope must be a non-blank tenant principal of at most 190 characters (the sendfile_link.scope column width)");
+                        return;
+                    }
+                    scope = s;
                 }
-                scope = s;
             }
+            const rows = await deps.sendFileLedger.listByScope(scope, limit + 1, before);
+            const hasMore = rows.length > limit;
+            const page = hasMore ? rows.slice(0, limit) : rows;
+            sendJson(res, 200, {
+                links: page.map((r) => ({
+                    id: r.id,
+                    filename: r.filename,
+                    size: r.size,
+                    ttlSec: r.ttlSec,
+                    track: r.track,
+                    bucket: r.bucket,
+                    key: r.objectKey,
+                    createdAt: new Date(r.createdAt).toISOString(),
+                    ...(r.taskId !== undefined ? { taskId: r.taskId } : {}),
+                    ...(r.sessionId !== undefined ? { sessionId: r.sessionId } : {}),
+                })),
+                ...(hasMore ? { nextBefore: page[page.length - 1].id } : {}),
+            });
+            return;
         }
-        const rows = await deps.sendFileLedger.listByScope(scope, limit + 1, before);
-        const hasMore = rows.length > limit;
-        const page = hasMore ? rows.slice(0, limit) : rows;
-        sendJson(res, 200, {
-            links: page.map((r) => ({
-                id: r.id,
-                filename: r.filename,
-                size: r.size,
-                ttlSec: r.ttlSec,
-                track: r.track,
-                bucket: r.bucket,
-                key: r.objectKey,
-                createdAt: new Date(r.createdAt).toISOString(),
-                ...(r.taskId !== undefined ? { taskId: r.taskId } : {}),
-                ...(r.sessionId !== undefined ? { sessionId: r.sessionId } : {}),
-            })),
-            ...(hasMore ? { nextBefore: page[page.length - 1].id } : {}),
-        });
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
 function encodeSessionCursor(c, f) {
     return Buffer.from(JSON.stringify({ ...c, f })).toString("base64url");
@@ -123,4 +122,8 @@ async function handleSessionList(res, lister, query, forceOwner, includeUnowned
     const nextCursor = hasMore && last ? encodeSessionCursor({ lastActivityAt: last.lastActivityAt, sessionId: last.sessionId }, f) : undefined;
     sendJson(res, 200, { sessions: page, ...(nextCursor ? { nextCursor } : {}) });
 }
+export const SESSIONS_LIST_ROUTES = [
+    { id: "sessions-list", path: "/v1/sessions", methods: ["GET"] },
+    { id: "sendfile-links", path: "/v1/sendfile-links", methods: ["GET"] },
+];
 //# sourceMappingURL=sessions-list.js.map

package/dist/http/routes/sessions.d.ts

@@ -13,7 +13,7 @@
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { type SessionMemoryStatus } from "@sema-agent/core";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 /** 单域独占状态。每个 server 实例一份——模块级会把连接坑/缓存跨实例串味。 */
 export interface SessionsLocal {
     sseConnections: number;
@@ -46,5 +46,80 @@ export interface SessionsLocal {
     }>;
 }
 export declare function createSessionsLocal(): SessionsLocal;
-export declare function handleSessions(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(去缩进两格;sessions 另有一处见文件头说明)。
+ *  裸 `return;` 的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。 */
+export declare function handleSessions(req: IncomingMessage, res: ServerResponse, match: RouteMatch<SessionsRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const SESSIONS_ROUTES: readonly [{
+    readonly id: "session-init";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-settings";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-mcp";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-a2a";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-head";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-events";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-fork";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-policy-get";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-policy-put";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/$verb";
+    readonly methods: readonly ["PUT"];
+}, {
+    readonly id: "session-memory-erase";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/memory/erase";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "session-memory-status";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/memory-status";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-workspace";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id/workspace";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-detail";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id";
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "session-delete";
+    readonly pattern: RegExp;
+    readonly label: "/v1/sessions/:id";
+    readonly methods: readonly ["DELETE"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type SessionsRouteId = RouteIdsOf<typeof SESSIONS_ROUTES>;
 //# sourceMappingURL=sessions.d.ts.map