@sema-agent/server 7.79.3 → 7.80.1

package/dist/http/route-table.js

@@ -1,195 +1,88 @@
-import { handleCapabilities } from "./routes/capabilities.js";
-import { handleObservability } from "./routes/observability.js";
-import { handleDiagnostics } from "./routes/diagnostics.js";
-import { handleAdoption } from "./routes/adoption.js";
-import { handleRetention } from "./routes/retention-ops.js";
-import { handleAdminDrain } from "./routes/admin-drain.js";
-import { handleDevices } from "./routes/devices.js";
-import { handleAdminConfigRefresh } from "./routes/admin-config-refresh.js";
-import { handleConfigCatalog } from "./routes/config-catalog.js";
-import { handleMemoryOptOut } from "./routes/admin-memory-optout.js";
-import { handleMemoryPolicy } from "./routes/memory-policy.js";
-import { handleMemoryBundle } from "./routes/memory-bundle.js";
-import { handleMemoryCompliance } from "./routes/memory-compliance.js";
-import { handleMemoryOrigin } from "./routes/memory-origin.js";
-import { handleMemoryConsolidation } from "./routes/memory-consolidation.js";
-import { handleSharedMemory } from "./routes/shared-memory.js";
-import { handleRules } from "./routes/rules.js";
-import { handleSessionsList } from "./routes/sessions-list.js";
-import { handleAgentRoster } from "./routes/agents-roster.js";
-import { handleSessions } from "./routes/sessions.js";
-import { handleSessionSync } from "./routes/session-sync.js";
-import { handleAttachments } from "./routes/attachments.js";
-import { handleFleet } from "./routes/fleet.js";
-import { handleA2aServe, handleA2a } from "./routes/a2a-serve.js";
-import { handleTraceUsage } from "./routes/trace-usage.js";
-import { handleWorkflows, handleWorkflowAgentSteer } from "./routes/workflows.js";
-import { handleNotifyWake, SESSION_WAKE_RE } from "./routes/notify-wake.js";
-import { handleApprovalsAssistant, ASSISTANT_RESUME_RE, ASSISTANT_PLAN_REVIEW_RE } from "./routes/approvals-assistant.js";
-import { handleRuns, handleRunVerbs, RUN_SUBAGENT_RESUME_RE } from "./routes/runs.js";
-import { handleRunMemoryCapture } from "./routes/run-memory-capture.js";
-import { handleSideQuery } from "./routes/side-query.js";
-import { handleTasks } from "./routes/tasks.js";
-import { handleLeader } from "./routes/leader.js";
-import { handleImages } from "./routes/images.js";
+import { handleCapabilities, CAPABILITIES_ROUTES } from "./routes/capabilities.js";
+import { handleObservability, OBSERVABILITY_ROUTES } from "./routes/observability.js";
+import { handleDiagnostics, DIAGNOSTICS_ROUTES } from "./routes/diagnostics.js";
+import { handleAdoption, ADOPTION_ROUTES } from "./routes/adoption.js";
+import { handleRetention, RETENTION_ROUTES } from "./routes/retention-ops.js";
+import { handleAdminDrain, ADMIN_DRAIN_ROUTES } from "./routes/admin-drain.js";
+import { handleDevices, DEVICES_ROUTES } from "./routes/devices.js";
+import { handleAdminConfigRefresh, ADMIN_CONFIG_REFRESH_ROUTES } from "./routes/admin-config-refresh.js";
+import { handleConfigCatalog, CONFIG_CATALOG_ROUTES } from "./routes/config-catalog.js";
+import { handleMemoryOptOut, MEMORY_OPTOUT_ROUTES } from "./routes/admin-memory-optout.js";
+import { handleMemoryPolicy, MEMORY_POLICY_ROUTES } from "./routes/memory-policy.js";
+import { handleMemoryBundle, MEMORY_BUNDLE_ROUTES } from "./routes/memory-bundle.js";
+import { handleMemoryCompliance, MEMORY_COMPLIANCE_ROUTES } from "./routes/memory-compliance.js";
+import { handleMemoryOrigin, MEMORY_ORIGIN_ROUTES } from "./routes/memory-origin.js";
+import { handleMemoryConsolidation, MEMORY_CONSOLIDATION_ROUTES } from "./routes/memory-consolidation.js";
+import { handleSharedMemory, SHARED_MEMORY_ROUTES } from "./routes/shared-memory.js";
+import { handleRules, RULES_ROUTES } from "./routes/rules.js";
+import { handleSessionsList, SESSIONS_LIST_ROUTES } from "./routes/sessions-list.js";
+import { handleAgentRoster, AGENT_ROSTER_ROUTES } from "./routes/agents-roster.js";
+import { handleSessions, SESSIONS_ROUTES } from "./routes/sessions.js";
+import { handleSessionSync, SESSION_SYNC_ROUTES } from "./routes/session-sync.js";
+import { handleAttachments, ATTACHMENTS_ROUTES } from "./routes/attachments.js";
+import { handleFleet, FLEET_ROUTES } from "./routes/fleet.js";
+import { handleA2aServe, handleA2a, A2A_SERVE_ROUTES, A2A_RPC_ROUTES } from "./routes/a2a-serve.js";
+import { handleTraceUsage, TRACE_USAGE_ROUTES } from "./routes/trace-usage.js";
+import { handleWorkflows, handleWorkflowAgentSteer, WORKFLOWS_ROUTES, WORKFLOW_AGENT_STEER_ROUTES } from "./routes/workflows.js";
+import { handleNotifyWake, NOTIFY_WAKE_ROUTES } from "./routes/notify-wake.js";
+import { handleApprovalsAssistant, APPROVALS_ASSISTANT_ROUTES } from "./routes/approvals-assistant.js";
+import { handleRuns, handleRunVerbs, RUNS_ROUTES, RUN_VERBS_ROUTES } from "./routes/runs.js";
+import { handleRunMemoryCapture, RUN_MEMORY_CAPTURE_ROUTES } from "./routes/run-memory-capture.js";
+import { handleSideQuery, SIDE_QUERY_ROUTES } from "./routes/side-query.js";
+import { handleTasks, TASKS_ROUTES } from "./routes/tasks.js";
+import { handleLeader, LEADER_ROUTES } from "./routes/leader.js";
+import { handleImages, IMAGES_ROUTES } from "./routes/images.js";
+function row(spec) {
+    return spec;
+}
 export const ROUTES = [
-    { handler: handleTraceUsage, position: "pre-credential", label: "trace-usage" },
-    { handler: handleWorkflows, position: "pre-credential", label: "workflows" },
-    { handler: handleFleet, position: "pre-credential", label: "fleet" },
-    { handler: handleA2aServe, position: "pre-credential", label: "a2a-serve" },
-    { handler: handleCapabilities, position: "post-credential", label: "capabilities" },
-    { handler: handleSideQuery, position: "post-credential", label: "side-query" },
-    { handler: handleTasks, position: "post-credential", label: "tasks" },
-    { handler: handleRuns, position: "post-credential", label: "runs" },
-    { handler: handleA2a, position: "post-credential", label: "a2a" },
-    { handler: handleWorkflowAgentSteer, position: "post-credential", label: "workflow-agent-steer" },
-    { handler: handleRunVerbs, position: "post-credential", label: "run-verbs" },
-    { handler: handleRunMemoryCapture, position: "post-credential", label: "run-memory-capture" },
-    { handler: handleLeader, position: "post-credential", label: "leader" },
-    { handler: handleImages, position: "post-credential", label: "images" },
-    { handler: handleApprovalsAssistant, position: "post-credential", label: "approvals-assistant" },
-    { handler: handleObservability, position: "post-credential", label: "observability" },
-    { handler: handleDiagnostics, position: "post-credential", label: "diagnostics" },
-    { handler: handleAdoption, position: "post-credential", label: "adoption" },
-    { handler: handleRetention, position: "post-credential", label: "retention" },
-    { handler: handleAdminDrain, position: "post-credential", label: "admin-drain" },
-    { handler: handleDevices, position: "post-credential", label: "devices" },
-    { handler: handleAdminConfigRefresh, position: "post-credential", label: "admin-config-refresh" },
-    { handler: handleConfigCatalog, position: "post-credential", label: "config-catalog" },
-    { handler: handleMemoryOptOut, position: "post-credential", label: "memory-opt-out" },
-    { handler: handleMemoryPolicy, position: "post-credential", label: "memory-policy" },
-    { handler: handleMemoryBundle, position: "post-credential", label: "memory-bundle" },
-    { handler: handleMemoryCompliance, position: "post-credential", label: "memory-compliance" },
-    { handler: handleMemoryOrigin, position: "post-credential", label: "memory-origin" },
-    { handler: handleMemoryConsolidation, position: "post-credential", label: "memory-consolidation", enabled: (deps) => Boolean(deps.memoryConsolidation) },
-    { handler: handleRules, position: "post-credential", label: "rules" },
-    { handler: handleSharedMemory, position: "post-credential", label: "shared-memory", enabled: (deps) => Boolean(deps.sharedMemoryStore) && Boolean(deps.orgMemoryDirectory) },
-    { handler: handleSessionsList, position: "post-credential", label: "sessions-list" },
-    { handler: handleAgentRoster, position: "post-credential", label: "agent-roster" },
-    { handler: handleSessions, position: "post-credential", label: "sessions" },
-    { handler: handleSessionSync, position: "post-credential", label: "session-sync" },
-    { handler: handleAttachments, position: "post-credential", label: "attachments" },
-    { handler: handleNotifyWake, position: "post-credential", label: "notify-wake" },
+    row({ handler: handleTraceUsage, decls: TRACE_USAGE_ROUTES, position: "pre-credential", label: "trace-usage" }),
+    row({ handler: handleWorkflows, decls: WORKFLOWS_ROUTES, position: "pre-credential", label: "workflows" }),
+    row({ handler: handleFleet, decls: FLEET_ROUTES, position: "pre-credential", label: "fleet" }),
+    row({ handler: handleA2aServe, decls: A2A_SERVE_ROUTES, position: "pre-credential", label: "a2a-serve" }),
+    row({ handler: handleCapabilities, decls: CAPABILITIES_ROUTES, position: "post-credential", label: "capabilities" }),
+    row({ handler: handleSideQuery, decls: SIDE_QUERY_ROUTES, position: "post-credential", label: "side-query" }),
+    row({ handler: handleTasks, decls: TASKS_ROUTES, position: "post-credential", label: "tasks" }),
+    row({ handler: handleRuns, decls: RUNS_ROUTES, position: "post-credential", label: "runs" }),
+    row({ handler: handleA2a, decls: A2A_RPC_ROUTES, position: "post-credential", label: "a2a" }),
+    row({ handler: handleWorkflowAgentSteer, decls: WORKFLOW_AGENT_STEER_ROUTES, position: "post-credential", label: "workflow-agent-steer" }),
+    row({ handler: handleRunVerbs, decls: RUN_VERBS_ROUTES, position: "post-credential", label: "run-verbs" }),
+    row({ handler: handleRunMemoryCapture, decls: RUN_MEMORY_CAPTURE_ROUTES, position: "post-credential", label: "run-memory-capture" }),
+    row({ handler: handleLeader, decls: LEADER_ROUTES, position: "post-credential", label: "leader", enabled: (deps) => Boolean(deps.leaderEndpoint) }),
+    row({ handler: handleImages, decls: IMAGES_ROUTES, position: "post-credential", label: "images" }),
+    row({ handler: handleApprovalsAssistant, decls: APPROVALS_ASSISTANT_ROUTES, position: "post-credential", label: "approvals-assistant", enabled: (deps) => Boolean(deps.checkpointStore) }),
+    row({ handler: handleObservability, decls: OBSERVABILITY_ROUTES, position: "post-credential", label: "observability" }),
+    row({ handler: handleDiagnostics, decls: DIAGNOSTICS_ROUTES, position: "post-credential", label: "diagnostics", enabled: (deps) => Boolean(deps.staticWiring) }),
+    row({ handler: handleAdoption, decls: ADOPTION_ROUTES, position: "post-credential", label: "adoption" }),
+    row({ handler: handleRetention, decls: RETENTION_ROUTES, position: "post-credential", label: "retention" }),
+    row({ handler: handleAdminDrain, decls: ADMIN_DRAIN_ROUTES, position: "post-credential", label: "admin-drain" }),
+    row({ handler: handleDevices, decls: DEVICES_ROUTES, position: "post-credential", label: "devices" }),
+    row({ handler: handleAdminConfigRefresh, decls: ADMIN_CONFIG_REFRESH_ROUTES, position: "post-credential", label: "admin-config-refresh" }),
+    row({ handler: handleConfigCatalog, decls: CONFIG_CATALOG_ROUTES, position: "post-credential", label: "config-catalog", enabled: (deps) => deps.config.configCatalogEnabled === true }),
+    row({ handler: handleMemoryOptOut, decls: MEMORY_OPTOUT_ROUTES, position: "post-credential", label: "memory-opt-out" }),
+    row({ handler: handleMemoryPolicy, decls: MEMORY_POLICY_ROUTES, position: "post-credential", label: "memory-policy" }),
+    row({ handler: handleMemoryBundle, decls: MEMORY_BUNDLE_ROUTES, position: "post-credential", label: "memory-bundle" }),
+    row({ handler: handleMemoryCompliance, decls: MEMORY_COMPLIANCE_ROUTES, position: "post-credential", label: "memory-compliance" }),
+    row({ handler: handleMemoryOrigin, decls: MEMORY_ORIGIN_ROUTES, position: "post-credential", label: "memory-origin" }),
+    row({ handler: handleMemoryConsolidation, decls: MEMORY_CONSOLIDATION_ROUTES, position: "post-credential", label: "memory-consolidation", enabled: (deps) => Boolean(deps.memoryConsolidation) }),
+    row({ handler: handleRules, decls: RULES_ROUTES, position: "post-credential", label: "rules" }),
+    row({ handler: handleSharedMemory, decls: SHARED_MEMORY_ROUTES, position: "post-credential", label: "shared-memory", enabled: (deps) => Boolean(deps.sharedMemoryStore) && Boolean(deps.orgMemoryDirectory) }),
+    row({ handler: handleSessionsList, decls: SESSIONS_LIST_ROUTES, position: "post-credential", label: "sessions-list" }),
+    row({ handler: handleAgentRoster, decls: AGENT_ROSTER_ROUTES, position: "post-credential", label: "agent-roster" }),
+    row({ handler: handleSessions, decls: SESSIONS_ROUTES, position: "post-credential", label: "sessions" }),
+    row({ handler: handleSessionSync, decls: SESSION_SYNC_ROUTES, position: "post-credential", label: "session-sync" }),
+    row({ handler: handleAttachments, decls: ATTACHMENTS_ROUTES, position: "post-credential", label: "attachments" }),
+    row({ handler: handleNotifyWake, decls: NOTIFY_WAKE_ROUTES, position: "post-credential", label: "notify-wake" }),
 ];
 export const PRE_CREDENTIAL_ROUTES = ROUTES.filter((r) => r.position === "pre-credential");
 export const POST_CREDENTIAL_ROUTES = ROUTES.filter((r) => r.position === "post-credential");
-export const ROUTE_DECLARATIONS = [
-    { path: "/health" },
-    { path: "/metrics" },
-    { path: "/metrics/summary" },
-    { path: "/metrics/plan-cache" },
-    { path: "/v1/models" },
-    { path: "/v1/tasks", billable: true },
-    { path: "/v1/tasks/stream", billable: true },
-    { path: "/v1/tasks/source-summary" },
-    { path: "/v1/runs", billable: true },
-    { path: "/v1/sessions" },
-    { path: "/v1/approvals" },
-    { path: "/v1/approvals/stream" },
-    { path: "/v1/assistant/inbox" },
-    { path: "/v1/assistant/tasks" },
-    { path: "/v1/usage" },
-    { path: "/v1/policy" },
-    { path: "/v1/capabilities" },
-    { path: "/v1/images" },
-    { path: "/v1/images/bakes" },
-    { path: "/v1/images/bakes/claim" },
-    { path: "/v1/images/select" },
-    { path: "/v1/images/register" },
-    { path: "/v1/workflows" },
-    { path: "/v1/attachments" },
-    { path: "/v1/leader", billable: true },
-    { path: "/v1/outcomes" },
-    { path: "/v1/side-query", billable: true },
-    { path: "/v1/devices", credentialGated: ["GET"] },
-    { path: "/v1/fleet/stream" },
-    { path: "/v1/memory/export", credentialGated: ["POST"] },
-    { path: "/v1/sendfile-links" },
-    { path: "/v1/memory/import", credentialGated: ["POST"] },
-    { path: "/v1/memory/erase", credentialGated: ["POST"] },
-    { path: "/v1/memory/origin/external", credentialGated: ["GET"] },
-    { path: "/v1/memory/origin/clearances", credentialGated: ["GET"] },
-    { path: "/v1/shared-memory/stores" },
-    { path: "/v1/diagnostics/wiring" },
-    { path: "/v1/adoption", credentialGated: ["POST"] },
-    { path: "/v1/admin/drain" },
-    { path: "/v1/admin/config/refresh" },
-    { path: "/v1/config/catalog" },
-    { path: "/v1/admin/memory-optout", credentialGated: ["GET", "PUT"] },
-    { path: "/v1/admin/memory/consolidation/run", billable: true },
-    { path: "/v1/admin/memory/consolidation" },
-    { path: "/v1/rules/cc-import/prepare" },
-    { path: "/v1/rules/cc-import/redeem" },
-    { path: "/v1/rules/local-import/prepare" },
-    { path: "/v1/rules/local-import/redeem" },
-    { path: "/v1/rules", credentialGated: ["DELETE"] },
-    { path: "/.well-known/agent-card.json" },
-    { path: "/v1/a2a", billable: true, methodDispatched: true },
-    { path: "/v1/agents/roster" },
-    { path: "/v1/ops/retention/audit" },
-    { pattern: /^\/v1\/runs\/[^/]+\/steer$/, label: "/v1/runs/:id/steer" },
-    { pattern: /^\/v1\/runs\/[^/]+\/memory\/capture-optout$/, label: "/v1/runs/:id/memory/capture-optout" },
-    { pattern: /^\/v1\/runs\/[^/]+\/interrupt$/, label: "/v1/runs/:id/interrupt" },
-    { pattern: /^\/v1\/runs\/[^/]+\/detach$/, label: "/v1/runs/:id/detach" },
-    { pattern: /^\/v1\/runs\/[^/]+\/cancel$/, label: "/v1/runs/:id/cancel" },
-    { pattern: /^\/v1\/runs\/[^/]+\/compact$/, label: "/v1/runs/:id/compact" },
-    { pattern: /^\/v1\/runs\/[^/]+\/events$/, label: "/v1/runs/:id/events" },
-    { pattern: RUN_SUBAGENT_RESUME_RE, label: "/v1/runs/:id/subagents/:sub/*", billable: true },
-    { pattern: /^\/v1\/runs\/[^/]+\/subagents\/[^/]+\/(steer|resume|output|stream)$/, label: "/v1/runs/:id/subagents/:sub/*" },
-    { pattern: /^\/v1\/runs\/[^/]+\/tasks\/[^/]+\/(output|stop)$/, label: "/v1/runs/:id/tasks/:tid/*" },
-    { pattern: /^\/v1\/runs\/[^/]+$/, label: "/v1/runs/:id" },
-    { pattern: /^\/v1\/images\/bakes\/[^/]+\/events$/, label: "/v1/images/bakes/:id/events" },
-    { pattern: /^\/v1\/images\/bakes\/[^/]+\/cancel$/, label: "/v1/images/bakes/:id/cancel" },
-    { pattern: /^\/v1\/images\/bakes\/[^/]+\/claim$/, label: "/v1/images/bakes/:id/claim" },
-    { pattern: /^\/v1\/images\/bakes\/[^/]+\/ingest$/, label: "/v1/images/bakes/:id/ingest" },
-    { pattern: /^\/v1\/images\/bakes\/[^/]+$/, label: "/v1/images/bakes/:id" },
-    { pattern: /^\/v1\/images\/digests\/[^/]+$/, label: "/v1/images/digests/:digest" },
-    { pattern: /^\/v1\/images\/[^/]+$/, label: "/v1/images/:profile" },
-    { pattern: /^\/v1\/approvals\/[^/]+\/decide$/, label: "/v1/approvals/:id/decide" },
-    { pattern: /^\/v1\/approvals\/[^/]+\/exemptions(\/[^/]+)?$/, label: "/v1/approvals/:id/exemptions" },
-    { pattern: SESSION_WAKE_RE, label: "/v1/sessions/:id/$verb", billable: true },
-    { pattern: /^\/v1\/sessions\/[^/]+\/(wake|fork|init|notify|events|head|mcp|a2a|policy|settings)$/, label: "/v1/sessions/:id/$verb" },
-    { pattern: /^\/v1\/admin\/memory-optout\/[^/]+$/, label: "/v1/admin/memory-optout/:principal" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/memory\/erase$/, label: "/v1/sessions/:id/memory/erase" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/memory-status$/, label: "/v1/sessions/:id/memory-status" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/(manifest|entries|plan)$/, label: "/v1/sessions/:id/sync/$verb" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/import(\/[^/]+\/entries)?$/, label: "/v1/sessions/:id/sync/import" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/blobs(\/[^/]+)?$/, label: "/v1/sessions/:id/sync/blobs" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/sync\/history\/blobs\/[^/]+$/, label: "/v1/sessions/:id/sync/history/blobs/:hash" },
-    { pattern: /^\/v1\/sessions\/[^/]+\/workspace(\/[^/]+(\/(tree|file|archive))?)?$/, label: "/v1/sessions/:id/workspace" },
-    { pattern: /^\/v1\/sessions\/[^/]+$/, label: "/v1/sessions/:id" },
-    { pattern: /^\/v1\/assistant\/tasks\/[^/]+\/preempt$/, label: "/v1/assistant/tasks/:id/preempt" },
-    { pattern: ASSISTANT_RESUME_RE, label: "/v1/assistant/tasks/:id/resume", billable: true },
-    { pattern: ASSISTANT_PLAN_REVIEW_RE, label: "/v1/assistant/tasks/:id/plan_review", billable: true },
-    { pattern: /^\/v1\/elicitations\/[^/]+\/respond$/, label: "/v1/elicitations/:id/respond" },
-    { pattern: /^\/v1\/questions\/[^/]+\/respond$/, label: "/v1/questions/:id/respond" },
-    { pattern: /^\/v1\/tool-approvals\/[^/]+\/respond$/, label: "/v1/tool-approvals/:id/respond" },
-    { pattern: /^\/v1\/workflows\/[^/]+\/agents\/[^/]+\/steer$/, label: "/v1/workflows/:id/agents/:aid/steer" },
-    { pattern: /^\/v1\/workflows\/[^/]+\/(stream|journal)$/, label: "/v1/workflows/:id/$sub" },
-    { pattern: /^\/v1\/workflows\/[^/]+$/, label: "/v1/workflows/:id" },
-    { pattern: /^\/v1\/tasks\/[^/]+\/asks\/[^/]+\/decision$/, label: "/v1/tasks/:id/asks/:askId/decision" },
-    { pattern: /^\/v1\/tasks\/[^/]+\/tool-results\/[^/]+$/, label: "/v1/tasks/:id/tool-results/:ref" },
-    { pattern: /^\/v1\/tasks\/[^/]+\/(turns|stream|artifacts)$/, label: "/v1/tasks/:id/$sub" },
-    { pattern: /^\/v1\/leader\/[^/]+$/, label: "/v1/leader/:id" },
-    { pattern: /^\/v1\/devices\/sessions\/[^/]+\/rebind$/, label: "/v1/devices/sessions/:id/rebind" },
-    { pattern: /^\/v1\/devices\/sessions\/[^/]+$/, label: "/v1/devices/sessions/:id", credentialGated: ["GET"] },
-    { pattern: /^\/v1\/attachments\/[^/]+$/, label: "/v1/attachments/:id" },
-    { pattern: /^\/v1\/capabilities\/scenarios\/[^/]+$/, label: "/v1/capabilities/scenarios/:name" },
-    { pattern: /^\/v1\/adoption\/[^/]+$/, label: "/v1/adoption/:id" },
-    { pattern: /^\/v1\/ops\/retention\/holds\/[^/]*$/, label: "/v1/ops/retention/holds/:domain" },
-    { pattern: /^\/v1\/memory\/sync\/[^/]+$/, label: "/v1/memory/sync/:scope" },
-    { pattern: /^\/v1\/memory\/entries\/[^/]+\/provenance$/, label: "/v1/memory/entries/:entryId/provenance", credentialGated: ["GET"] },
-    { pattern: /^\/v1\/memory\/origin\/entries\/[^/]+\/clear$/, label: "/v1/memory/origin/entries/:entryId/clear" },
-    { pattern: /^\/v1\/usage\/(summary|series|breakdown)$/, label: "/v1/usage/$sub" },
-    { pattern: /^\/v1\/shared-memory\/stores\/[^/]+\/documents$/, label: "/v1/shared-memory/stores/:store/documents" },
-    { pattern: /^\/v1\/shared-memory\/stores\/[^/]+\/document$/, label: "/v1/shared-memory/stores/:store/document" },
-    { prefix: "/v1/approvals", billable: true },
-    { prefix: "/v1/rules/cc-import/", credentialGated: ["POST"] },
-    { prefix: "/v1/rules/local-import/", credentialGated: ["POST"] },
-    { prefix: "/v1/memory/origin/entries/", credentialGated: ["POST"] },
-    { prefix: "/v1/devices/", credentialGated: ["POST"] },
-    { prefix: "/v1/admin/memory-optout/", credentialGated: ["PUT", "DELETE"] },
+const PIPELINE_ROUTES = [
+    { id: "health", path: "/health", methods: ["GET"] },
+    { id: "metrics", path: "/metrics", methods: ["GET"] },
+    { id: "metrics-summary", path: "/metrics/summary", methods: ["GET"] },
+    { id: "metrics-plan-cache", path: "/metrics/plan-cache", methods: ["GET"] },
 ];
+export const ROUTE_DECLARATIONS = [...PIPELINE_ROUTES, ...ROUTES.flatMap((r) => r.decls)];
 function declMatches(d, url) {
     if ("path" in d)
         return url === d.path;
@@ -197,6 +90,14 @@ function declMatches(d, url) {
         return url.startsWith(d.prefix);
     return d.pattern.test(url);
 }
+const isDispatchDecl = (d) => !("prefix" in d);
+export function matchDecl(d, url) {
+    if ("path" in d)
+        return url === d.path ? NO_PARAMS : null;
+    const m = d.pattern.exec(url);
+    return m === null ? null : (m.groups ?? NO_PARAMS);
+}
+const NO_PARAMS = Object.freeze({});
 const LABEL_BY_PATH = new Map(ROUTE_DECLARATIONS.flatMap((d) => ("path" in d ? [[d.path, d.path]] : [])));
 const SHAPED_LABEL_DECLS = ROUTE_DECLARATIONS.filter((d) => !("path" in d) && typeof d.label === "string");
 const BILLABLE_DECLS = ROUTE_DECLARATIONS.filter((d) => d.billable === true);
@@ -232,4 +133,27 @@ export function isCredentialGatedRewrite(method, url) {
 export function isMethodDispatchedSubmitPath(url) {
     return METHOD_DISPATCHED_DECLS.some((d) => declMatches(d, url));
 }
+export function lookupRoute(decls, url, method) {
+    let hit = null;
+    let params = NO_PARAMS;
+    const allow = [];
+    for (const pass of PATH_FIRST) {
+        for (const d of decls) {
+            if (!isDispatchDecl(d) || ("path" in d) !== pass)
+                continue;
+            const p = matchDecl(d, url);
+            if (p === null)
+                continue;
+            for (const m of d.methods)
+                if (!allow.includes(m))
+                    allow.push(m);
+            if (hit === null && d.methods.includes(method)) {
+                hit = d;
+                params = p;
+            }
+        }
+    }
+    return { decl: hit, params, allow };
+}
+const PATH_FIRST = [true, false];
 //# sourceMappingURL=route-table.js.map

package/dist/http/routes/a2a-serve.d.ts

@@ -2,7 +2,7 @@ import type { IncomingMessage, ServerResponse } from "node:http";
 import { type A2ATaskState } from "@sema-agent/core";
 import type { A2aServeConfig } from "../../config-types.js";
 import { type RunRecord } from "../../plugins/store-contracts.js";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 /** 本实现说的 A2A 协议版本 —— 卡的 `protocolVersion` 与每条 RPC 响应的 `a2a-version` 头同源(单点)。 */
 export declare const A2A_PROTOCOL_VERSION = "1.0";
 /** 版本头名。**读**请求侧的它只是诊断材料(开集容忍:认识与否都照常答),**写**响应侧的它是我们自报
@@ -34,7 +34,7 @@ export declare function buildAgentCard(serve: A2aServeConfig): A2aAgentCard;
  * 「域名词干 ⊆ 某个 capability 位名」。两个名字都取成 `capabilities.a2aServe` 的**子串**
  * (`a2aServe` / `a2a`),于是两条都被那道门如实认出来 —— 而不是去放宽那道门的判据。
  */
-export declare function handleA2aServe(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleA2aServe(req: IncomingMessage, res: ServerResponse, match: RouteMatch<A2aServeRouteId>, ctx: RouteCtx): Promise<void>;
 /**
  * 🔴 **反枚举不变式([ref])在本模块的执行点**:`tasks/get` 的「这条 task 不存在」与「这条 task 不是
  * 你的」必须**逐字节**同形 —— 同一个 code、同一条 message、同一个(缺席的)data。两臂共用**这一个**
@@ -68,8 +68,23 @@ export declare function a2aStateForRun(run: Pick<RunRecord, "status" | "errorCod
  * 命名(`handleA2a`,与 `handleA2aServe` 同族):见域入口①的命名注 —— 两个名字都取成
  * `capabilities.a2aServe` 的子串,好让 `route-shape-roster` 层E 如实认出它们。
  */
-export declare function handleA2a(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleA2a(req: IncomingMessage, res: ServerResponse, match: RouteMatch<A2aRpcRouteId>, ctx: RouteCtx): Promise<void>;
 /** 九词闭集的对外可见锚(测试用它证明我们只发闭集词;也让「加一个自造词」在这里就被看见)。 */
 export declare const A2A_SERVE_TASK_STATES: readonly A2ATaskState[];
+export declare const A2A_SERVE_ROUTES: readonly [{
+    readonly id: "a2a-agent-card";
+    readonly path: "/.well-known/agent-card.json";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type A2aServeRouteId = RouteIdsOf<typeof A2A_SERVE_ROUTES>;
+export declare const A2A_RPC_ROUTES: readonly [{
+    readonly id: "a2a-rpc";
+    readonly path: "/v1/a2a";
+    readonly billable: true;
+    readonly methodDispatched: true;
+    readonly methods: readonly ["POST"];
+}];
+export type A2aRpcRouteId = RouteIdsOf<typeof A2A_RPC_ROUTES>;
 export {};
 //# sourceMappingURL=a2a-serve.d.ts.map

package/dist/http/routes/a2a-serve.js

@@ -7,6 +7,7 @@ import { HttpError } from "../../security.js";
 import { scopedIdempotencyKey } from "../idempotency.js";
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 import { createDurableRun } from "./runs.js";
 export const A2A_PROTOCOL_VERSION = "1.0";
 export const A2A_VERSION_HEADER = "a2a-version";
@@ -20,24 +21,22 @@ export function buildAgentCard(serve) {
         skills: serve.skills.map((s) => ({ id: s.id, name: s.name ?? s.id, ...(s.description !== undefined ? { description: s.description } : {}) })),
     };
 }
-export async function handleA2aServe(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleA2aServeBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleA2aServeBody(req, res, url, ctx, miss) {
+export async function handleA2aServe(req, res, match, ctx) {
     const { deps } = ctx;
-    if (req.method === "GET" && url === "/.well-known/agent-card.json") {
-        const serve = deps.config.a2aServe;
-        if (!serve) {
-            sendError(res, 404, "not_found.route", "not found");
+    switch (match.decl.id) {
+        case "a2a-agent-card": {
+            const serve = deps.config.a2aServe;
+            if (!serve) {
+                sendError(res, 404, "not_found.route", "not found");
+                return;
+            }
+            res.setHeader(A2A_VERSION_HEADER, A2A_PROTOCOL_VERSION);
+            sendJson(res, 200, buildAgentCard(serve));
             return;
         }
-        res.setHeader(A2A_VERSION_HEADER, A2A_PROTOCOL_VERSION);
-        sendJson(res, 200, buildAgentCard(serve));
-        return;
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
 const JSONRPC_PARSE_ERROR = -32700;
 const JSONRPC_INVALID_REQUEST = -32600;
@@ -324,16 +323,13 @@ const A2A_METHODS = {
     "message/send": handleMessageSend,
     "tasks/get": handleTasksGet,
 };
-export async function handleA2a(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleA2aRpcBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleA2aRpcBody(req, res, url, ctx, miss) {
+export async function handleA2a(req, res, match, ctx) {
     const { deps } = ctx;
-    if (!(req.method === "POST" && url === "/v1/a2a")) {
-        miss.fell = true;
-        return;
+    switch (match.decl.id) {
+        case "a2a-rpc":
+            break;
+        default:
+            return assertNever(match.decl.id);
     }
     const serve = deps.config.a2aServe;
     if (!serve) {
@@ -409,4 +405,10 @@ function sendRpc(res, body) {
     sendJson(res, 200, body);
 }
 export const A2A_SERVE_TASK_STATES = A2A_TASK_STATES;
+export const A2A_SERVE_ROUTES = [
+    { id: "a2a-agent-card", path: "/.well-known/agent-card.json", methods: ["GET"] },
+];
+export const A2A_RPC_ROUTES = [
+    { id: "a2a-rpc", path: "/v1/a2a", billable: true, methodDispatched: true, methods: ["POST"] },
+];
 //# sourceMappingURL=a2a-serve.js.map

package/dist/http/routes/admin-config-refresh.d.ts

@@ -14,7 +14,14 @@
  * 回执会让运维以为配置已经拉过了,那比拒绝糟得多。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 export declare const ADMIN_CONFIG_REFRESH_PATH = "/v1/admin/config/refresh";
-export declare function handleAdminConfigRefresh(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleAdminConfigRefresh(req: IncomingMessage, res: ServerResponse, match: RouteMatch<AdminConfigRefreshRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const ADMIN_CONFIG_REFRESH_ROUTES: readonly [{
+    readonly id: "admin-config-refresh";
+    readonly path: "/v1/admin/config/refresh";
+    readonly methods: readonly ["POST"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type AdminConfigRefreshRouteId = RouteIdsOf<typeof ADMIN_CONFIG_REFRESH_ROUTES>;
 //# sourceMappingURL=admin-config-refresh.d.ts.map

package/dist/http/routes/admin-config-refresh.js

@@ -1,39 +1,40 @@
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 export const ADMIN_CONFIG_REFRESH_PATH = "/v1/admin/config/refresh";
 const OPERATOR_ONLY_MESSAGE = "config refresh is operator-only: the caller principal is not in OPERATOR_PRINCIPALS (an empty list means NO one is an operator — configure it to enable this endpoint)";
-export async function handleAdminConfigRefresh(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleAdminConfigRefreshBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleAdminConfigRefreshBody(req, res, url, ctx, miss) {
+export async function handleAdminConfigRefresh(req, res, match, ctx) {
     const { deps } = ctx;
-    const path = url.split("?")[0] ?? url;
-    if (req.method !== "POST" || path !== ADMIN_CONFIG_REFRESH_PATH) {
-        miss.fell = true;
-        return;
-    }
-    const principal = gatedPrincipal(req, deps.config);
-    if (deps.config.requirePrincipal && !principal) {
-        sendPrincipalRefusal(res, req, deps.config);
-        return;
-    }
-    if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
-        sendError(res, 403, "auth.operator_only", OPERATOR_ONLY_MESSAGE);
-        return;
-    }
-    const trigger = deps.configRefreshNow;
-    const outcome = trigger ? await trigger() : "not-wired";
-    if (outcome === "failed") {
-        sendError(res, 502, "internal.config_refresh_failed", "the config refresh tick failed (source unreachable / unreadable / apply error) — the live config is unchanged; see the worker's sema_registry_refresh_failed log line for the cause");
-        return;
-    }
-    if (outcome === "not-wired") {
-        sendError(res, 409, "config.refresh_unavailable", "this deployment has no config pipeline to refresh — set CONFIG_CENTER (remote control plane) or CONFIG_PROVIDER=local (config.d on disk); an env-only worker has nothing to pull");
-        return;
+    switch (match.decl.id) {
+        case "admin-config-refresh": {
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && !principal) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
+                sendError(res, 403, "auth.operator_only", OPERATOR_ONLY_MESSAGE);
+                return;
+            }
+            const trigger = deps.configRefreshNow;
+            const outcome = trigger ? await trigger() : "not-wired";
+            if (outcome === "failed") {
+                sendError(res, 502, "internal.config_refresh_failed", "the config refresh tick failed (source unreachable / unreadable / apply error) — the live config is unchanged; see the worker's sema_registry_refresh_failed log line for the cause");
+                return;
+            }
+            if (outcome === "not-wired") {
+                sendError(res, 409, "config.refresh_unavailable", "this deployment has no config pipeline to refresh — set CONFIG_CENTER (remote control plane) or CONFIG_PROVIDER=local (config.d on disk); an env-only worker has nothing to pull");
+                return;
+            }
+            const gen = deps.configApplyState?.();
+            sendJson(res, 200, { triggered: true, targetVersion: gen?.configTargetVersion ?? 0, appliedVersion: gen?.configAppliedVersion ?? 0 });
+            return;
+        }
+        default:
+            return assertNever(match.decl.id);
     }
-    const gen = deps.configApplyState?.();
-    sendJson(res, 200, { triggered: true, targetVersion: gen?.configTargetVersion ?? 0, appliedVersion: gen?.configAppliedVersion ?? 0 });
 }
+export const ADMIN_CONFIG_REFRESH_ROUTES = [
+    { id: "admin-config-refresh", path: ADMIN_CONFIG_REFRESH_PATH, methods: ["POST"] },
+];
 //# sourceMappingURL=admin-config-refresh.js.map

package/dist/http/routes/admin-drain.d.ts

@@ -31,9 +31,16 @@
  * 有用的因由说不出来,取舍要属主拍。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 export declare const ADMIN_DRAIN_PATH = "/v1/admin/drain";
 /** 上限与 approvals 的 reason 族同量级(消费面同为人读短句;非同一常量——两面语义无关,独立演化)。 */
 export declare const MAX_DRAIN_REASON_CHARS = 256;
-export declare function handleAdminDrain(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleAdminDrain(req: IncomingMessage, res: ServerResponse, match: RouteMatch<AdminDrainRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const ADMIN_DRAIN_ROUTES: readonly [{
+    readonly id: "admin-drain";
+    readonly path: "/v1/admin/drain";
+    readonly methods: readonly ["POST"];
+}];
+type AdminDrainRouteId = RouteIdsOf<typeof ADMIN_DRAIN_ROUTES>;
+export {};
 //# sourceMappingURL=admin-drain.d.ts.map