@sema-agent/server 7.79.3 → 7.80.1

package/dist/http/routes/capabilities.js

@@ -7,6 +7,7 @@ import { DEVICE_PROTOCOL_VERSION, DEVICE_WS_PATH } from "../../device-ws-protoco
 import { a2aInjectionHonored } from "../../task-a2a.js";
 import { mcpInjectionHonored } from "../../task-mcp.js";
 import { sendJson, sendError } from "../send.js";
+import { assertNever } from "../route-ctx.js";
 import { resolveStreamApprovalGate } from "../../tool-approval.js";
 import { projectMemoryEngineCapability } from "../../memory-posture.js";
 import { projectWriteProtectionCapability } from "../../write-protection.js";
@@ -29,181 +30,184 @@ function retentionAdvertisement(config) {
         return null;
     return { mode: sweep.mode, maxAgeDays: policy.maxAgeDays };
 }
-export async function handleCapabilities(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleCapabilitiesBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleCapabilitiesBody(req, res, url, ctx, miss) {
+export async function handleCapabilities(req, res, match, ctx) {
     const { deps } = ctx;
-    if (req.method === "GET" && url.startsWith("/v1/capabilities/scenarios/")) {
-        const name = url.slice("/v1/capabilities/scenarios/".length).split("?")[0];
-        const detail = deps.scenarioDetails?.[name];
-        if (!detail) {
-            sendError(res, 404, "scenario_not_found", "scenario not found");
+    switch (match.decl.id) {
+        case "capability-scenario": {
+            const name = match.params.name;
+            const detail = deps.scenarioDetails?.[name];
+            if (!detail) {
+                sendError(res, 404, "scenario_not_found", "scenario not found");
+                return;
+            }
+            sendJson(res, 200, detail);
             return;
         }
-        sendJson(res, 200, detail);
-        return;
-    }
-    if (req.method === "GET" && url === "/v1/capabilities") {
-        const workflowsEngineCan = deps.workflowsCapable ?? Boolean(deps.workflowRunStore);
-        const workflowsDenial = selfOrchestrationDenial({ selfOrchestrationEnabled: deps.config.selfOrchestrationEnabled, requirePrincipal: deps.config.requirePrincipal }, centerEntitlementSourceWired(deps.config));
-        const requestedModeRaw = new URL(req.url ?? "", "http://x").searchParams.get("permissionMode");
-        const requestedMode = requestedModeRaw === null ? undefined : coercePermissionModeStrict(requestedModeRaw);
-        if (requestedModeRaw !== null && requestedMode === undefined) {
-            sendError(res, 400, "request.field_invalid", 'permissionMode must be one of "default" | "acceptEdits" | "plan" | "bypassPermissions" | "auto"');
+        case "capabilities": {
+            const workflowsEngineCan = deps.workflowsCapable ?? Boolean(deps.workflowRunStore);
+            const workflowsDenial = selfOrchestrationDenial({ selfOrchestrationEnabled: deps.config.selfOrchestrationEnabled, requirePrincipal: deps.config.requirePrincipal }, centerEntitlementSourceWired(deps.config));
+            const requestedModeRaw = new URLSearchParams(match.search).get("permissionMode");
+            const requestedMode = requestedModeRaw === null ? undefined : coercePermissionModeStrict(requestedModeRaw);
+            if (requestedModeRaw !== null && requestedMode === undefined) {
+                sendError(res, 400, "request.field_invalid", 'permissionMode must be one of "default" | "acceptEdits" | "plan" | "bypassPermissions" | "auto"');
+                return;
+            }
+            const entitlementSource = centerEntitlementSourceWired(deps.config);
+            const { fault: autoModeFault, ...autoMode } = await judgeAutoModeArming(deps.autoModeFace, { requestedMode, principal: gatedPrincipal(req, deps.config), entitlementSource, localDeny: deps.config.permissionsDisableAutoMode });
+            if (autoModeFault !== undefined)
+                deps.logger?.warn("auto_mode_face_resolver_fault", { fault: autoModeFault });
+            sendJson(res, 200, {
+                ...deps.capabilities,
+                asyncRuns: Boolean(deps.runStore),
+                artifacts: Boolean(deps.runStore),
+                approvals: Boolean(deps.checkpointStore),
+                sessions: Boolean(deps.sessionAudit),
+                deviceExecutor: deps.deviceHub
+                    ? { enabled: true, protocolVersion: DEVICE_PROTOCOL_VERSION, maxInflightPerDevice: deps.config.remoteExec?.provider === "device" ? (deps.config.remoteExec.maxInflightPerDevice ?? 4) : 4, wsPath: DEVICE_WS_PATH }
+                    : false,
+                sessionEvents: Boolean(deps.sessionWatch && deps.sessionStorage?.getLeafId && deps.sessionStorage?.ownerOf),
+                fleet: deps.fleetBus
+                    ? { stream: true, sessionScope: true, observe: true, resume: "snapshot", bgNotifyFailClosed: true, steerPriority: "advisory", hookFailureNotice: true }
+                    : false,
+                workspace: false,
+                leader: Boolean(deps.leaderEndpoint),
+                images: Boolean(deps.imageIndex),
+                memory: false,
+                memoryWrite: false,
+                memoryEngine: projectMemoryEngineCapability(deps.memoryPosture),
+                sql: projectSqlEngineCapability(deps.sqlEngineFacts?.()),
+                sessionBackgroundable: Boolean(deps.runStore),
+                runMemoryCaptureOptOut: Boolean(deps.runStore),
+                sharedMemory: Boolean(deps.sharedMemoryStore && deps.orgMemoryDirectory),
+                adoption: Boolean(deps.backend?.adoptionLog) && deps.config.operatorPrincipals.length > 0,
+                memoryBundle: Boolean(deps.memoryBundleExport && deps.memoryBundleImport) && deps.config.operatorPrincipals.length > 0,
+                memoryCompliance: Boolean(deps.memoryCompliance) && deps.config.operatorPrincipals.length > 0,
+                memoryOrigin: Boolean(deps.memoryOriginFace) && deps.config.operatorPrincipals.length > 0,
+                memoryConsolidationDriver: Boolean(deps.memoryConsolidation) && deps.config.operatorPrincipals.length > 0,
+                memoryOptOutGrant: Boolean(deps.memoryOptOutGrant) && deps.config.operatorPrincipals.length > 0,
+                outcomeLedger: Boolean(deps.outcomeSink?.summary) && (deps.config.requirePrincipal !== true || deps.config.operatorPrincipals.length > 0),
+                permissionRules: Boolean(deps.ruleConsent) && gatedPrincipal(req, deps.config) !== undefined,
+                permissionRulesRevoke: Boolean(deps.ruleConsent),
+                respondFreeFormRules: true,
+                respondBatchRuleOffers: true,
+                oneShot: true,
+                policy: true,
+                usage: Boolean(deps.costQuota),
+                permissionModeWrite: false,
+                modelSelection: true,
+                effortSelection: true,
+                toolOutput: true,
+                messageIdentity: true,
+                forwardSubagentEvents: true,
+                scratchpadDir: true,
+                subagentSteer: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
+                subagentResume: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
+                taskSettings: { permissions: true, permissionMode: true, model: true, outputStyle: true, env: cwdHonored(deps.config) || deviceCwdHonored(deps.config), hooks: deps.config.requirePrincipal !== true },
+                modeShellGateTranslation: true,
+                permissionModeAuto: {
+                    accepted: true,
+                    classifierSeat: deps.autoModeFace?.seatMounted === true,
+                    entitlementSource,
+                    intentArming: deps.autoModeFace?.engineArmsOnIntent === true,
+                    ...autoMode,
+                },
+                readFace: deps.config.readFace ?? null,
+                writeProtection: projectWriteProtectionCapability(deps.writeProtection),
+                appendSystemPrompt: true,
+                compactionModel: true,
+                subagentOutput: Boolean(deps.subagentTaskOutput) && Boolean(deps.runStore),
+                subagentStream: Boolean(deps.subagentTaskOutput) && Boolean(deps.runStore),
+                taskHandles: Boolean(deps.taskHandleOutput) && Boolean(deps.taskHandleStop) && Boolean(deps.runStore),
+                taskAgents: deps.config.requirePrincipal !== true,
+                retainBackgroundProcesses: deps.config.requirePrincipal !== true,
+                interactiveTools: true,
+                projectContext: cwdHonored(deps.config),
+                callerCwd: cwdHonored(deps.config) || deviceCwdHonored(deps.config),
+                mcpInjection: mcpInjectionHonored(deps.config),
+                a2a: true,
+                a2aInjection: a2aInjectionHonored(deps.config),
+                a2aServe: deps.config.a2aServe !== undefined,
+                modelUsage: Boolean(deps.runStore && deps.modelUsage),
+                sessionInit: true,
+                mcp: true,
+                mcpElicitation: Boolean(deps.elicitation),
+                askUserQuestion: Boolean(deps.question),
+                toolApproval: Boolean(deps.toolApproval),
+                streamApproval: resolveStreamApprovalGate({
+                    toolApprovalEnabled: Boolean(deps.toolApproval),
+                    streamApprovalEnabled: deps.config.streamApproval?.enabled === true,
+                    backend: deps.backend,
+                    parkFacility: deps.checkpointStore !== undefined,
+                }).active,
+                approvalDecisionNote: true,
+                sideQuery: true,
+                agentRoster: Boolean(deps.backgroundAgentStore),
+                retention: retentionAdvertisement(deps.config),
+                sessionList: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
+                sessionSearch: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
+                sessionFork: Boolean(deps.sessionStorage?.fork),
+                sessionDelete: Boolean(deps.purgeSession),
+                resumeAt: Boolean(deps.resumeAnchorStore && deps.sessionStorage?.getLeafId),
+                promptSuggestions: true,
+                sessionPolicy: Boolean(deps.sessionPolicyStore),
+                rewindFiles: Boolean(deps.fileHistoryStore),
+                restoreFiles: Boolean(deps.fileHistoryStore),
+                rewindFilesTo: Boolean(deps.fileHistoryStore && deps.resumeAnchorStore && deps.sessionStorage?.getLeafId),
+                scheduler: Boolean(deps.config.schedulerEnabled && deps.config.requirePrincipal !== true && deps.config.remoteExec?.provider === "host"),
+                sessionSync: Boolean(deps.backend && deps.sessionStorage?.exportEntries && deps.sessionStorage?.beginImportStaging && deps.fileHistoryStore),
+                sendUserFile: Boolean(deps.sendUserFile && deps.config.sendUserFile?.publicEndpoint),
+                s3PublicEndpoint: deps.config.sendUserFile?.publicEndpoint ?? null,
+                sendUserFileLedger: Boolean(deps.sendFileLedger),
+                workflows: workflowsEngineCan && workflowsDenial === null,
+                workflowsList: Boolean(deps.workflowRunStore),
+                workflowsGate: { engineCan: workflowsEngineCan, denial: workflowsDenial },
+                workflowModels: (() => {
+                    const allow = deps.workflowModelAllowlist
+                        ?? workflowModelAllowlistFor({
+                            selfOrchestrationModels: deps.config.selfOrchestrationModels ?? [],
+                            requirePrincipal: deps.config.requirePrincipal,
+                            models: deps.config.models ?? {},
+                        })
+                        ?? [];
+                    const bare = deps.config.models ?? {};
+                    const live = expandTiers(bare, deps.config.tiers ?? {}) ?? bare;
+                    return allow.filter((n) => Object.hasOwn(live, n));
+                })(),
+                manualCompact: Boolean(deps.runStore),
+                configCatalog: deps.config.configCatalogEnabled === true && deps.config.operatorPrincipals.length > 0,
+            });
             return;
         }
-        const entitlementSource = centerEntitlementSourceWired(deps.config);
-        const { fault: autoModeFault, ...autoMode } = await judgeAutoModeArming(deps.autoModeFace, { requestedMode, principal: gatedPrincipal(req, deps.config), entitlementSource, localDeny: deps.config.permissionsDisableAutoMode });
-        if (autoModeFault !== undefined)
-            deps.logger?.warn("auto_mode_face_resolver_fault", { fault: autoModeFault });
-        sendJson(res, 200, {
-            ...deps.capabilities,
-            asyncRuns: Boolean(deps.runStore),
-            artifacts: Boolean(deps.runStore),
-            approvals: Boolean(deps.checkpointStore),
-            sessions: Boolean(deps.sessionAudit),
-            deviceExecutor: deps.deviceHub
-                ? { enabled: true, protocolVersion: DEVICE_PROTOCOL_VERSION, maxInflightPerDevice: deps.config.remoteExec?.provider === "device" ? (deps.config.remoteExec.maxInflightPerDevice ?? 4) : 4, wsPath: DEVICE_WS_PATH }
-                : false,
-            sessionEvents: Boolean(deps.sessionWatch && deps.sessionStorage?.getLeafId && deps.sessionStorage?.ownerOf),
-            fleet: deps.fleetBus
-                ? { stream: true, sessionScope: true, observe: true, resume: "snapshot", bgNotifyFailClosed: true, steerPriority: "advisory", hookFailureNotice: true }
-                : false,
-            workspace: false,
-            leader: Boolean(deps.leaderEndpoint),
-            images: Boolean(deps.imageIndex),
-            memory: false,
-            memoryWrite: false,
-            memoryEngine: projectMemoryEngineCapability(deps.memoryPosture),
-            sql: projectSqlEngineCapability(deps.sqlEngineFacts?.()),
-            sessionBackgroundable: Boolean(deps.runStore),
-            runMemoryCaptureOptOut: Boolean(deps.runStore),
-            sharedMemory: Boolean(deps.sharedMemoryStore && deps.orgMemoryDirectory),
-            adoption: Boolean(deps.backend?.adoptionLog) && deps.config.operatorPrincipals.length > 0,
-            memoryBundle: Boolean(deps.memoryBundleExport && deps.memoryBundleImport) && deps.config.operatorPrincipals.length > 0,
-            memoryCompliance: Boolean(deps.memoryCompliance) && deps.config.operatorPrincipals.length > 0,
-            memoryOrigin: Boolean(deps.memoryOriginFace) && deps.config.operatorPrincipals.length > 0,
-            memoryConsolidationDriver: Boolean(deps.memoryConsolidation) && deps.config.operatorPrincipals.length > 0,
-            memoryOptOutGrant: Boolean(deps.memoryOptOutGrant) && deps.config.operatorPrincipals.length > 0,
-            outcomeLedger: Boolean(deps.outcomeSink?.summary) && (deps.config.requirePrincipal !== true || deps.config.operatorPrincipals.length > 0),
-            permissionRules: Boolean(deps.ruleConsent) && gatedPrincipal(req, deps.config) !== undefined,
-            permissionRulesRevoke: Boolean(deps.ruleConsent),
-            respondFreeFormRules: true,
-            respondBatchRuleOffers: true,
-            oneShot: true,
-            policy: true,
-            usage: Boolean(deps.costQuota),
-            permissionModeWrite: false,
-            modelSelection: true,
-            effortSelection: true,
-            toolOutput: true,
-            messageIdentity: true,
-            forwardSubagentEvents: true,
-            scratchpadDir: true,
-            subagentSteer: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
-            subagentResume: Boolean(deps.subagentSteerRegistry) && Boolean(deps.runStore),
-            taskSettings: { permissions: true, permissionMode: true, model: true, outputStyle: true, env: cwdHonored(deps.config) || deviceCwdHonored(deps.config), hooks: deps.config.requirePrincipal !== true },
-            modeShellGateTranslation: true,
-            permissionModeAuto: {
-                accepted: true,
-                classifierSeat: deps.autoModeFace?.seatMounted === true,
-                entitlementSource,
-                intentArming: deps.autoModeFace?.engineArmsOnIntent === true,
-                ...autoMode,
-            },
-            readFace: deps.config.readFace ?? null,
-            writeProtection: projectWriteProtectionCapability(deps.writeProtection),
-            appendSystemPrompt: true,
-            compactionModel: true,
-            subagentOutput: Boolean(deps.subagentTaskOutput) && Boolean(deps.runStore),
-            subagentStream: Boolean(deps.subagentTaskOutput) && Boolean(deps.runStore),
-            taskHandles: Boolean(deps.taskHandleOutput) && Boolean(deps.taskHandleStop) && Boolean(deps.runStore),
-            taskAgents: deps.config.requirePrincipal !== true,
-            retainBackgroundProcesses: deps.config.requirePrincipal !== true,
-            interactiveTools: true,
-            projectContext: cwdHonored(deps.config),
-            callerCwd: cwdHonored(deps.config) || deviceCwdHonored(deps.config),
-            mcpInjection: mcpInjectionHonored(deps.config),
-            a2a: true,
-            a2aInjection: a2aInjectionHonored(deps.config),
-            a2aServe: deps.config.a2aServe !== undefined,
-            modelUsage: Boolean(deps.runStore && deps.modelUsage),
-            sessionInit: true,
-            mcp: true,
-            mcpElicitation: Boolean(deps.elicitation),
-            askUserQuestion: Boolean(deps.question),
-            toolApproval: Boolean(deps.toolApproval),
-            streamApproval: resolveStreamApprovalGate({
-                toolApprovalEnabled: Boolean(deps.toolApproval),
-                streamApprovalEnabled: deps.config.streamApproval?.enabled === true,
-                backend: deps.backend,
-                parkFacility: deps.checkpointStore !== undefined,
-            }).active,
-            approvalDecisionNote: true,
-            sideQuery: true,
-            agentRoster: Boolean(deps.backgroundAgentStore),
-            retention: retentionAdvertisement(deps.config),
-            sessionList: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
-            sessionSearch: Boolean(deps.sessionStorage?.listSessions ?? deps.runStore?.listSessions),
-            sessionFork: Boolean(deps.sessionStorage?.fork),
-            sessionDelete: Boolean(deps.purgeSession),
-            resumeAt: Boolean(deps.resumeAnchorStore && deps.sessionStorage?.getLeafId),
-            promptSuggestions: true,
-            sessionPolicy: Boolean(deps.sessionPolicyStore),
-            rewindFiles: Boolean(deps.fileHistoryStore),
-            restoreFiles: Boolean(deps.fileHistoryStore),
-            rewindFilesTo: Boolean(deps.fileHistoryStore && deps.resumeAnchorStore && deps.sessionStorage?.getLeafId),
-            scheduler: Boolean(deps.config.schedulerEnabled && deps.config.requirePrincipal !== true && deps.config.remoteExec?.provider === "host"),
-            sessionSync: Boolean(deps.backend && deps.sessionStorage?.exportEntries && deps.sessionStorage?.beginImportStaging && deps.fileHistoryStore),
-            sendUserFile: Boolean(deps.sendUserFile && deps.config.sendUserFile?.publicEndpoint),
-            s3PublicEndpoint: deps.config.sendUserFile?.publicEndpoint ?? null,
-            sendUserFileLedger: Boolean(deps.sendFileLedger),
-            workflows: workflowsEngineCan && workflowsDenial === null,
-            workflowsList: Boolean(deps.workflowRunStore),
-            workflowsGate: { engineCan: workflowsEngineCan, denial: workflowsDenial },
-            workflowModels: (() => {
-                const allow = deps.workflowModelAllowlist
-                    ?? workflowModelAllowlistFor({
-                        selfOrchestrationModels: deps.config.selfOrchestrationModels ?? [],
-                        requirePrincipal: deps.config.requirePrincipal,
-                        models: deps.config.models ?? {},
-                    })
-                    ?? [];
-                const bare = deps.config.models ?? {};
-                const live = expandTiers(bare, deps.config.tiers ?? {}) ?? bare;
-                return allow.filter((n) => Object.hasOwn(live, n));
-            })(),
-            manualCompact: Boolean(deps.runStore),
-            configCatalog: deps.config.configCatalogEnabled === true && deps.config.operatorPrincipals.length > 0,
-        });
-        return;
-    }
-    if (req.method === "GET" && url === "/v1/models") {
-        const atCatalog = expandTiers(deps.config.models, deps.config.tiers ?? {}) ?? deps.config.models;
-        const atAllowlist = deps.config.atModelAllowlist ?? [];
-        const models = Object.entries(deps.config.models)
-            .filter(([name]) => name !== "default")
-            .map(([name, m]) => ({
-            name,
-            id: m.id,
-            provider: m.provider,
-            reasoning: m.reasoning,
-            vision: Array.isArray(m.input) ? m.input.includes("image") : false,
-            ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
-            ...(m.maxTokens ? { maxOutputTokens: m.maxTokens } : {}),
-            ...((levels) => (levels !== undefined ? { supportedEffortLevels: [...levels] } : {}))(reasoningEffortLevelsOf(m)),
-            ...(m.compat !== undefined ? { compat: m.compat } : {}),
-            ...(atAllowlist.length > 0 ? { atMentionable: isModelAllowlisted(name, atCatalog, atAllowlist) } : {}),
-            routePairing: routePairingOf(deps, name, m),
-        }));
-        const nonAlias = Object.entries(deps.config.models).filter(([n]) => n !== "default");
-        const defaultName = (nonAlias.find(([, m]) => m === deps.config.model) ?? nonAlias.find(([, m]) => m.id === deps.config.model.id))?.[0];
-        sendJson(res, 200, { models, default: deps.config.model.id, defaultModel: { id: deps.config.model.id, ...(defaultName ? { name: defaultName } : {}) } });
-        return;
+        case "models": {
+            const atCatalog = expandTiers(deps.config.models, deps.config.tiers ?? {}) ?? deps.config.models;
+            const atAllowlist = deps.config.atModelAllowlist ?? [];
+            const models = Object.entries(deps.config.models)
+                .filter(([name]) => name !== "default")
+                .map(([name, m]) => ({
+                name,
+                id: m.id,
+                provider: m.provider,
+                reasoning: m.reasoning,
+                vision: Array.isArray(m.input) ? m.input.includes("image") : false,
+                ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
+                ...(m.maxTokens ? { maxOutputTokens: m.maxTokens } : {}),
+                ...((levels) => (levels !== undefined ? { supportedEffortLevels: [...levels] } : {}))(reasoningEffortLevelsOf(m)),
+                ...(m.compat !== undefined ? { compat: m.compat } : {}),
+                ...(atAllowlist.length > 0 ? { atMentionable: isModelAllowlisted(name, atCatalog, atAllowlist) } : {}),
+                routePairing: routePairingOf(deps, name, m),
+            }));
+            const nonAlias = Object.entries(deps.config.models).filter(([n]) => n !== "default");
+            const defaultName = (nonAlias.find(([, m]) => m === deps.config.model) ?? nonAlias.find(([, m]) => m.id === deps.config.model.id))?.[0];
+            sendJson(res, 200, { models, default: deps.config.model.id, defaultModel: { id: deps.config.model.id, ...(defaultName ? { name: defaultName } : {}) } });
+            return;
+        }
+        default:
+            return assertNever(match.decl.id);
     }
-    miss.fell = true;
 }
+export const CAPABILITIES_ROUTES = [
+    { id: "models", path: "/v1/models", methods: ["GET"] },
+    { id: "capabilities", path: "/v1/capabilities", methods: ["GET"] },
+    { id: "capability-scenario", pattern: /^\/v1\/capabilities\/scenarios\/(?<name>.*)$/, label: "/v1/capabilities/scenarios/:name", methods: ["GET"] },
+];
 //# sourceMappingURL=capabilities.js.map

package/dist/http/routes/config-catalog.d.ts

@@ -22,7 +22,14 @@
  * 本文件不再碰值 —— 一处裁剪,机器钉 = test/config-catalog.test.ts 的响应体 canary 扫描格。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 export declare const CONFIG_CATALOG_PATH = "/v1/config/catalog";
-export declare function handleConfigCatalog(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleConfigCatalog(req: IncomingMessage, res: ServerResponse, match: RouteMatch<ConfigCatalogRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const CONFIG_CATALOG_ROUTES: readonly [{
+    readonly id: "config-catalog";
+    readonly path: "/v1/config/catalog";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type ConfigCatalogRouteId = RouteIdsOf<typeof CONFIG_CATALOG_ROUTES>;
 //# sourceMappingURL=config-catalog.d.ts.map

package/dist/http/routes/config-catalog.js

@@ -1,42 +1,39 @@
 import { DOMAINS } from "@sema-agent/settings-schema";
 import { sendJson, sendError } from "../send.js";
 import { gatedPrincipal, explicitOperatorOk, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 import { configKnobTable } from "../../config.js";
 import { buildConfigCatalog } from "../../config-catalog.js";
 export const CONFIG_CATALOG_PATH = "/v1/config/catalog";
 const OPERATOR_ONLY_MESSAGE = "the config catalog is operator-only: the caller principal is not in OPERATOR_PRINCIPALS (an empty list means NO one is an operator — configure it to enable this endpoint)";
-export async function handleConfigCatalog(req, res, url, ctx) {
-    const miss = { fell: false };
-    handleConfigCatalogBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-function handleConfigCatalogBody(req, res, url, ctx, miss) {
+export async function handleConfigCatalog(req, res, match, ctx) {
     const { deps } = ctx;
-    const path = url.split("?")[0] ?? url;
-    if (req.method !== "GET" || path !== CONFIG_CATALOG_PATH) {
-        miss.fell = true;
-        return;
-    }
-    if (deps.config.configCatalogEnabled !== true) {
-        miss.fell = true;
-        return;
-    }
-    const principal = gatedPrincipal(req, deps.config);
-    if (deps.config.requirePrincipal && !principal) {
-        sendPrincipalRefusal(res, req, deps.config);
-        return;
-    }
-    if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
-        sendError(res, 403, "auth.operator_only", OPERATOR_ONLY_MESSAGE);
-        return;
+    switch (match.decl.id) {
+        case "config-catalog": {
+            const principal = gatedPrincipal(req, deps.config);
+            if (deps.config.requirePrincipal && !principal) {
+                sendPrincipalRefusal(res, req, deps.config);
+                return;
+            }
+            if (!explicitOperatorOk(principal, deps.config.operatorPrincipals)) {
+                sendError(res, 403, "auth.operator_only", OPERATOR_ONLY_MESSAGE);
+                return;
+            }
+            res.setHeader("Cache-Control", "no-store");
+            sendJson(res, 200, buildConfigCatalog({
+                config: deps.config,
+                env: process.env,
+                knobs: configKnobTable(),
+                centerDomains: DOMAINS,
+                centerManagedKeys: deps.configCenterManagedKeys?.(),
+            }));
+            return;
+        }
+        default:
+            return assertNever(match.decl.id);
     }
-    res.setHeader("Cache-Control", "no-store");
-    sendJson(res, 200, buildConfigCatalog({
-        config: deps.config,
-        env: process.env,
-        knobs: configKnobTable(),
-        centerDomains: DOMAINS,
-        centerManagedKeys: deps.configCenterManagedKeys?.(),
-    }));
 }
+export const CONFIG_CATALOG_ROUTES = [
+    { id: "config-catalog", path: CONFIG_CATALOG_PATH, methods: ["GET"] },
+];
 //# sourceMappingURL=config-catalog.js.map

package/dist/http/routes/devices.d.ts

@@ -53,12 +53,34 @@
  * 编译器执行,两道门同时成立;device-store.ts「禁手抄」条的本义是禁**脱离闭集**的字面量)。
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 import { type DeviceOwner } from "../../device-store.js";
 /**
  * 调用方 device 域的**唯一铸造点**(文件头注)。undefined = 判不出域(无 principal,或无 tenant
  * claim)——消费点必须走 explicit operator 或响亮 403,禁静默空视图。
  */
 export declare function deviceOwnerDomainOf(req: IncomingMessage, config: RouteCtx["deps"]["config"]): DeviceOwner | undefined;
-export declare function handleDevices(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleDevices(req: IncomingMessage, res: ServerResponse, match: RouteMatch<DevicesRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const DEVICES_ROUTES: readonly [{
+    readonly id: "devices-list";
+    readonly path: "/v1/devices";
+    readonly credentialGated: readonly ["GET"];
+    readonly methods: readonly ["GET"];
+}, {
+    readonly id: "device-session-rebind";
+    readonly pattern: RegExp;
+    readonly label: "/v1/devices/sessions/:id/rebind";
+    readonly methods: readonly ["POST"];
+}, {
+    readonly id: "device-session";
+    readonly pattern: RegExp;
+    readonly label: "/v1/devices/sessions/:id";
+    readonly credentialGated: readonly ["GET"];
+    readonly methods: readonly ["GET"];
+}, {
+    readonly prefix: "/v1/devices/";
+    readonly credentialGated: readonly ["POST"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type DevicesRouteId = RouteIdsOf<typeof DEVICES_ROUTES>;
 //# sourceMappingURL=devices.d.ts.map

package/dist/http/routes/devices.js

@@ -1,5 +1,6 @@
 import { sendError, sendJson } from "../send.js";
 import { explicitOperatorOk, gatedPrincipal, sendPrincipalRefusal } from "../principal-gate.js";
+import { assertNever } from "../route-ctx.js";
 import { ssoVerifiedScope } from "../../security.js";
 import { assertDeviceIdShape, assertRootSessionIdShape, sameDeviceOwner, } from "../../device-store.js";
 const DEVICE_NOT_FOUND_MESSAGE = "device not found";
@@ -39,25 +40,17 @@ function deviceListRow(row, online) {
 function boundDeviceOf(row) {
     return { deviceId: row.deviceId, rev: row.rev, boundAt: new Date(row.boundAtMs).toISOString() };
 }
-export async function handleDevices(req, res, url, ctx) {
-    const miss = { fell: false };
-    await handleDevicesBody(req, res, url, ctx, miss);
-    return !miss.fell;
-}
-async function handleDevicesBody(req, res, url, ctx, miss) {
+export async function handleDevices(req, res, match, ctx) {
+    switch (match.decl.id) {
+        case "devices-list":
+        case "device-session":
+        case "device-session-rebind":
+            break;
+        default:
+            return assertNever(match.decl.id);
+    }
     const { deps } = ctx;
     const { readJson, safeDecode } = ctx.helpers;
-    if (url !== "/v1/devices" && !url.startsWith("/v1/devices/")) {
-        miss.fell = true;
-        return;
-    }
-    const listHit = req.method === "GET" && url === "/v1/devices";
-    const readM = req.method === "GET" ? /^\/v1\/devices\/sessions\/([^/]+)$/.exec(url) : null;
-    const rebindM = req.method === "POST" ? /^\/v1\/devices\/sessions\/([^/]+)\/rebind$/.exec(url) : null;
-    if (!listHit && !readM && !rebindM) {
-        miss.fell = true;
-        return;
-    }
     const principal = gatedPrincipal(req, deps.config);
     if (deps.config.requirePrincipal && principal === undefined) {
         sendPrincipalRefusal(res, req, deps.config);
@@ -71,7 +64,7 @@ async function handleDevicesBody(req, res, url, ctx, miss) {
     }
     const operator = explicitOperatorOk(principal, deps.config.operatorPrincipals);
     const domain = deviceOwnerDomainOf(req, deps.config);
-    if (listHit) {
+    if (match.decl.id === "devices-list") {
         if (!operator && domain === undefined) {
             sendError(res, 403, "auth.forbidden", NO_DEVICE_DOMAIN_MESSAGE);
             return;
@@ -81,8 +74,7 @@ async function handleDevicesBody(req, res, url, ctx, miss) {
         sendJson(res, 200, { devices: rows.filter((r) => r.status !== "revoked").map((r) => deviceListRow(r, online)) });
         return;
     }
-    const seg = (readM ?? rebindM)[1];
-    const decoded = safeDecode(seg);
+    const decoded = safeDecode(match.params.rootSessionId);
     if (decoded === null) {
         sendError(res, 400, "request.path_malformed", "session id segment is not valid percent-encoding");
         return;
@@ -92,7 +84,7 @@ async function handleDevicesBody(req, res, url, ctx, miss) {
         return;
     }
     const rootSessionId = decoded;
-    if (readM) {
+    if (match.decl.id === "device-session") {
         if (!operator && domain === undefined) {
             sendError(res, 403, "auth.forbidden", NO_DEVICE_DOMAIN_MESSAGE);
             return;
@@ -170,4 +162,10 @@ async function handleDevicesBody(req, res, url, ctx, miss) {
         }
     }
 }
+export const DEVICES_ROUTES = [
+    { id: "devices-list", path: "/v1/devices", credentialGated: ["GET"], methods: ["GET"] },
+    { id: "device-session-rebind", pattern: /^\/v1\/devices\/sessions\/(?<rootSessionId>[^/]+)\/rebind$/, label: "/v1/devices/sessions/:id/rebind", methods: ["POST"] },
+    { id: "device-session", pattern: /^\/v1\/devices\/sessions\/(?<rootSessionId>[^/]+)$/, label: "/v1/devices/sessions/:id", credentialGated: ["GET"], methods: ["GET"] },
+    { prefix: "/v1/devices/", credentialGated: ["POST"] },
+];
 //# sourceMappingURL=devices.js.map

package/dist/http/routes/diagnostics.d.ts

@@ -13,7 +13,7 @@ import { type PostureKnobReading, type PostureSource } from "../../posture-sourc
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { WiringManifest } from "@sema-agent/core";
 import { type StreamApprovalGate, type StreamApprovalGateInput } from "../../tool-approval.js";
-import type { RouteCtx } from "../route-ctx.js";
+import type { RouteCtx, RouteMatch, RouteIdsOf } from "../route-ctx.js";
 /** 流内审批门的读数形:上场即 `"active"`,否则是那五个合取项里**第一个**不满足的原因词
  *  (与 `resolveStreamApprovalGate` 同一闭集,新增 reason 在此处编译红)。 */
 export type StreamApprovalGateReading = "active" | Extract<StreamApprovalGate, {
@@ -112,5 +112,12 @@ export declare function zeroCredentialLoopbackDenied(remoteAddress: string | und
     authToken?: string;
     authTokens?: Record<string, string>;
 }): boolean;
-export declare function handleDiagnostics(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+export declare function handleDiagnostics(req: IncomingMessage, res: ServerResponse, match: RouteMatch<DiagnosticsRouteId>, ctx: RouteCtx): Promise<void>;
+export declare const DIAGNOSTICS_ROUTES: readonly [{
+    readonly id: "diagnostics-wiring";
+    readonly path: "/v1/diagnostics/wiring";
+    readonly methods: readonly ["GET"];
+}];
+/** 本域可分派行的 `id` 闭集 —— handler 的 `switch` 按它判穷尽(漏一口 = 编译红)。 */
+export type DiagnosticsRouteId = RouteIdsOf<typeof DIAGNOSTICS_ROUTES>;
 //# sourceMappingURL=diagnostics.d.ts.map