@zhin.js/host-http 1.1.13 → 1.1.15

package/lib/console-rpc.js

@@ -1,20 +1,8 @@
-import { CONFIG_RPC, ENDPOINT_RPC, assertDemoConsoleRpcAllowed, } from '@zhin.js/console-protocol';
+import { CONFIG_PATCH_LIMITS, CONFIG_RPC, assertDemoConsoleRpcAllowed, } from '@zhin.js/console-protocol';
 import { dispatchExtendedConsoleRpc } from './console-rpc-extended/index.js';
 import { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
-/** Canonical Console wire fields → runtime conversation address. */
-function wireConversation(channelType, channelId, parent) {
-    const kind = channelType === 'group' || channelType === 'channel' ? channelType : 'private';
-    const wire = parent && typeof parent === 'object'
-        ? parent
-        : undefined;
-    const parentKind = wire?.type === 'group' || wire?.type === 'channel' ? wire.type : undefined;
-    const parentId = typeof wire?.id === 'string' && wire.id ? wire.id : undefined;
-    return {
-        kind,
-        id: channelId,
-        ...(parentKind && parentId ? { parent: { kind: parentKind, id: parentId } } : {}),
-    };
-}
+import { configurationSaveMessage, dispatchHostResourceConsoleRpc, invalidProjectPatchOperations, } from './console-rpc-handlers.js';
+export { isDemoHttpAllowed } from './console-rpc-handlers.js';
 export function pickRpcReply(message, payloads) {
     const requestId = message.requestId;
     return ((requestId != null ? payloads.find((payload) => payload.requestId === requestId) : undefined)
@@ -175,6 +163,30 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
+        case CONFIG_RPC.APPLY: {
+            if (ctx.authScope !== 'full') {
+                emit({ requestId, error: 'Full Console scope is required' });
+                return payloads;
+            }
+            if (typeof message.expectedRevision !== 'string' || !/^[a-f0-9]{64}$/u.test(message.expectedRevision)) {
+                emit({ requestId, error: 'expectedRevision is required' });
+                return payloads;
+            }
+            if (!ctx.applyConfig) {
+                emit({ requestId, error: 'Config application is not configured' });
+                return payloads;
+            }
+            try {
+                const result = await ctx.applyConfig(message.expectedRevision);
+                emit({ requestId, data: result });
+            }
+            catch {
+                // Source reads can fail before an operation is admitted. Do not echo a
+                // YAML parser's source excerpt or turn unavailable evidence into success.
+                emit({ requestId, error: 'Configuration application is unavailable; read the source and runtime status before retrying' });
+            }
+            return payloads;
+        }
         case CONFIG_RPC.REPLACE_SOURCE: {
             try {
                 const source = message.source;
@@ -198,9 +210,7 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                     data: {
                         success: true,
                         ...result,
-                        message: result.restartRequired
-                            ? '配置已保存，需重启进程才能生效'
-                            : '配置已保存',
+                        message: configurationSaveMessage(result),
                     },
                 });
             }
@@ -212,12 +222,46 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
+        case CONFIG_RPC.GET_PROJECT: {
+            if (ctx.authScope !== 'full') {
+                emit({ requestId, error: 'Full scope required' });
+                return payloads;
+            }
+            const { path, reveal } = message;
+            if (path !== undefined && (!Array.isArray(path) || path.length > CONFIG_PATCH_LIMITS.maxPathDepth
+                || path.some(segment => typeof segment !== 'string' || !segment || segment.length > CONFIG_PATCH_LIMITS.maxSegmentLength))) {
+                emit({ requestId, error: 'path 必须是非空字符串数组' });
+                return payloads;
+            }
+            if (reveal !== undefined && typeof reveal !== 'boolean') {
+                emit({ requestId, error: 'reveal 必须是布尔值' });
+                return payloads;
+            }
+            if (!ctx.readProjectConfig) {
+                emit({ requestId, error: 'Config project read is not configured' });
+                return payloads;
+            }
+            try {
+                emit({ requestId, data: await ctx.readProjectConfig({ path: (path ?? []), reveal: reveal === true }) });
+            }
+            catch {
+                // Parser/IO messages can quote document source (and therefore secrets): never echo them.
+                emit({ requestId, error: 'Configuration read is unavailable; read the project file locally to diagnose it' });
+            }
+            return payloads;
+        }
+        case CONFIG_RPC.PATCH_PROJECT:
         case CONFIG_RPC.PATCH: {
             if (ctx.authScope !== 'full') {
                 emit({ requestId, error: 'Full scope required' });
                 return payloads;
             }
+            const projectPatch = message.type === CONFIG_RPC.PATCH_PROJECT;
             const { instanceKey, expectedRevision, patches } = message;
+            if (projectPatch && instanceKey !== undefined) {
+                emit({ requestId, error: 'Project patches must not specify instanceKey' });
+                return payloads;
+            }
             if (instanceKey !== undefined && (typeof instanceKey !== 'string' || !instanceKey || instanceKey.length > 128)) {
                 emit({ requestId, error: 'instanceKey 必须是插件实例名，或省略以使用 Host 白名单' });
                 return payloads;
@@ -230,17 +274,36 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                 emit({ requestId, error: 'patches 必须是数组' });
                 return payloads;
             }
-            if (!ctx.patchConfig) {
+            if (projectPatch) {
+                const invalid = invalidProjectPatchOperations(patches);
+                if (invalid) {
+                    emit({ requestId, error: invalid });
+                    return payloads;
+                }
+            }
+            const patch = projectPatch ? ctx.patchProjectConfig : ctx.patchConfig;
+            if (!patch) {
                 emit({ requestId, error: 'Config patch is not configured' });
                 return payloads;
             }
+            let result;
             try {
-                const result = await ctx.patchConfig({
+                result = await patch.call(ctx, {
                     ...(instanceKey === undefined ? {} : { instanceKey }),
                     expectedRevision,
                     patches,
                 });
-                if (result.status === 'saved') {
+            }
+            catch (error) {
+                emit({
+                    requestId,
+                    error: `Failed to patch config: ${error instanceof Error ? error.message : String(error)}`,
+                });
+                return payloads;
+            }
+            if (result.status === 'saved') {
+                // The write has committed: a notification failure must not turn the receipt into a rejection.
+                try {
                     ctx.publishEvent?.('config:updated', {
                         pluginName: instanceKey ?? null,
                         keys: [...new Set(result.paths.map(path => path[0]))],
@@ -248,14 +311,9 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                         revision: result.revision,
                     });
                 }
-                emit({ requestId, data: result });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to patch config: ${error instanceof Error ? error.message : String(error)}`,
-                });
+                catch { /* subscribers resynchronise from the next read */ }
             }
+            emit({ requestId, data: result });
             return payloads;
         }
         case CONFIG_RPC.SET: {
@@ -291,10 +349,9 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
                     requestId,
                     data: {
                         success: true,
+                        ...result,
                         reloaded: false,
-                        message: result.restartRequired
-                            ? '配置已保存，需重启进程才能生效'
-                            : '配置已保存',
+                        message: configurationSaveMessage(result),
                     },
                 });
             }
@@ -306,503 +363,10 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             return payloads;
         }
-        case 'files:tree': {
-            try {
-                const tree = ctx.listProjectFiles ? await ctx.listProjectFiles() : [];
-                emit({ requestId, data: { tree } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to build file tree: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'files:read': {
-            try {
-                const filePath = String(message.filePath ?? '');
-                if (!filePath) {
-                    emit({ requestId, error: 'filePath is required' });
-                    return payloads;
-                }
-                if (!ctx.readProjectFile) {
-                    emit({ requestId, error: 'File read is not configured' });
-                    return payloads;
-                }
-                const file = await ctx.readProjectFile(filePath);
-                emit({ requestId, data: file });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'files:save': {
-            try {
-                const filePath = String(message.filePath ?? '');
-                const content = message.content;
-                if (!filePath) {
-                    emit({ requestId, error: 'filePath is required' });
-                    return payloads;
-                }
-                if (typeof content !== 'string') {
-                    emit({ requestId, error: 'content field is required' });
-                    return payloads;
-                }
-                if (!ctx.saveProjectFile) {
-                    emit({ requestId, error: 'File write is not configured' });
-                    return payloads;
-                }
-                await ctx.saveProjectFile(filePath, content);
-                emit({ requestId, data: { success: true, message: `文件已保存: ${filePath}` } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to save file: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'env:list': {
-            try {
-                const files = ctx.listEnvFiles ? await ctx.listEnvFiles() : [];
-                emit({ requestId, data: { files } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to list env files: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'env:get': {
-            try {
-                const filename = String(message.filename ?? '');
-                if (!filename) {
-                    emit({ requestId, error: 'filename is required' });
-                    return payloads;
-                }
-                if (!ctx.readEnvFile) {
-                    emit({ requestId, error: 'Env read is not configured' });
-                    return payloads;
-                }
-                const content = await ctx.readEnvFile(filename);
-                emit({ requestId, data: { content } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to read env file: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'env:save': {
-            try {
-                const filename = String(message.filename ?? '');
-                const content = message.content;
-                if (!filename) {
-                    emit({ requestId, error: 'filename is required' });
-                    return payloads;
-                }
-                if (typeof content !== 'string') {
-                    emit({ requestId, error: 'content field is required' });
-                    return payloads;
-                }
-                if (!ctx.writeEnvFile) {
-                    emit({ requestId, error: 'Env write is not configured' });
-                    return payloads;
-                }
-                await ctx.writeEnvFile(filename, content);
-                emit({ requestId, data: { success: true, message: `环境文件已保存: ${filename}` } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to save env file: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'schema:get': {
-            try {
-                const pluginName = typeof message.pluginName === 'string'
-                    ? message.pluginName
-                    : undefined;
-                const schema = ctx.getSchema ? await ctx.getSchema(pluginName) : null;
-                emit({ requestId, data: schema });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to get schema: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'schema:get-all': {
-            try {
-                const schemas = ctx.getAllSchemas ? await ctx.getAllSchemas() : {};
-                emit({ requestId, data: schemas });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: `Failed to get all schemas: ${error instanceof Error ? error.message : String(error)}`,
-                });
-            }
-            return payloads;
-        }
-        case 'db:info': {
-            if (ctx.database) {
-                emit({ requestId, data: ctx.database.info() });
-                return payloads;
-            }
-            if (ctx.dbInfo) {
-                try {
-                    emit({ requestId, data: await ctx.dbInfo() });
-                }
-                catch (error) {
-                    emit({
-                        requestId,
-                        error: error instanceof Error ? error.message : String(error),
-                    });
-                }
-                return payloads;
-            }
-            emit({
-                requestId,
-                data: { dialect: null, connected: false, message: 'Database not configured on Plugin Runtime Host' },
-            });
-            return payloads;
-        }
-        case 'db:tables': {
-            try {
-                if (ctx.database) {
-                    emit({ requestId, data: { tables: ctx.database.tables() } });
-                    return payloads;
-                }
-                const tables = ctx.dbTables ? await ctx.dbTables() : [];
-                emit({ requestId, data: tables });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-            return payloads;
-        }
-        case 'db:select': {
-            const table = stringField(message, 'table');
-            if (!table)
-                return errorReply(payloads, requestId, 'table is required');
-            const page = positiveInteger(message.page, 1);
-            const pageSize = Math.min(positiveInteger(message.pageSize, 50), 500);
-            const where = recordField(message.where);
-            if (!ctx.database) {
-                emit({ requestId, data: { rows: [], total: 0, page, pageSize } });
-                return payloads;
-            }
-            try {
-                emit({ requestId, data: await ctx.database.select(table, page, pageSize, where) });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to select: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:insert': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            const row = recordField(message.row);
-            if (!table || !row)
-                return errorReply(payloads, requestId, 'table and row are required');
-            try {
-                await ctx.database.insert(table, row);
-                emit({ requestId, data: { success: true } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to insert: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:update': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            const row = recordField(message.row);
-            const where = recordField(message.where);
-            if (!table || !row || !where) {
-                return errorReply(payloads, requestId, 'table, row, and where are required');
-            }
-            try {
-                const affected = await ctx.database.update(table, row, where);
-                emit({ requestId, data: { success: true, affected } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to update: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:delete': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            const where = recordField(message.where);
-            if (!table || !where)
-                return errorReply(payloads, requestId, 'table and where are required');
-            try {
-                const deleted = await ctx.database.delete(table, where);
-                emit({ requestId, data: { success: true, deleted } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to delete: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:drop-table': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            if (!table)
-                return errorReply(payloads, requestId, 'table is required');
-            try {
-                await ctx.database.dropTable(table);
-                emit({ requestId, data: { success: true } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to drop table: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:kv:get': {
-            const table = stringField(message, 'table');
-            const key = stringField(message, 'key');
-            if (!table || !key)
-                return errorReply(payloads, requestId, 'table and key are required');
-            if (!ctx.database) {
-                emit({ requestId, data: { key, value: null } });
-                return payloads;
-            }
-            try {
-                emit({ requestId, data: { key, value: await ctx.database.kvGet(table, key) } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to get kv: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:kv:set': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            const key = stringField(message, 'key');
-            if (!table || !key)
-                return errorReply(payloads, requestId, 'table and key are required');
-            try {
-                const ttl = typeof message.ttl === 'number' && Number.isFinite(message.ttl)
-                    ? message.ttl
-                    : undefined;
-                await ctx.database.kvSet(table, key, message.value, ttl);
-                emit({ requestId, data: { success: true } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to set kv: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:kv:delete': {
-            if (!ctx.database)
-                return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-            const table = stringField(message, 'table');
-            const key = stringField(message, 'key');
-            if (!table || !key)
-                return errorReply(payloads, requestId, 'table and key are required');
-            try {
-                await ctx.database.kvDelete(table, key);
-                emit({ requestId, data: { success: true } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to delete kv: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'db:kv:entries': {
-            const table = stringField(message, 'table');
-            if (!table)
-                return errorReply(payloads, requestId, 'table is required');
-            if (!ctx.database) {
-                emit({ requestId, data: { entries: [] } });
-                return payloads;
-            }
-            try {
-                emit({ requestId, data: { entries: await ctx.database.kvEntries(table) } });
-            }
-            catch (error) {
-                emit({ requestId, error: `Failed to get entries: ${errorMessage(error)}` });
-            }
-            return payloads;
-        }
-        case 'endpoint.list': {
-            try {
-                const endpoints = ctx.listEndpoints ? await ctx.listEndpoints() : [];
-                emit({ requestId, data: { endpoints } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-            return payloads;
-        }
-        case 'endpoint.info': {
-            try {
-                const data = recordField(message.data) ?? message;
-                const adapter = String(data.adapter ?? '');
-                const endpointKey = String(data.endpointKey ?? '');
-                if (!adapter || !endpointKey) {
-                    emit({ requestId, error: 'adapter and endpointKey are required' });
-                    return payloads;
-                }
-                if (!ctx.getEndpoint) {
-                    emit({ requestId, error: 'Endpoint registry is not configured' });
-                    return payloads;
-                }
-                const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-                if (!endpoint) {
-                    emit({ requestId, error: 'endpoint not found' });
-                    return payloads;
-                }
-                emit({ requestId, data: endpoint });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-            return payloads;
-        }
-        case ENDPOINT_RPC.TEST: {
-            const data = recordField(message.data) ?? message;
-            const adapter = stringField(data, 'adapter');
-            const endpointKey = stringField(data, 'endpointKey');
-            if (!adapter || !endpointKey) {
-                emit({ requestId, error: 'adapter and endpointKey are required' });
+        default: {
+            if (await dispatchHostResourceConsoleRpc(type, message, ctx, requestId, payloads)) {
                 return payloads;
             }
-            if (!ctx.getEndpoint) {
-                emit({ requestId, error: 'Endpoint registry is not configured' });
-                return payloads;
-            }
-            const startedAt = Date.now();
-            try {
-                const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-                if (!endpoint) {
-                    emit({ requestId, data: {
-                            reachable: false,
-                            connected: false,
-                            phase: 'unconfigured',
-                            latencyMs: Date.now() - startedAt,
-                            message: 'Endpoint 未注册到当前 generation',
-                        } });
-                    return payloads;
-                }
-                emit({ requestId, data: {
-                        reachable: endpoint.connected && endpoint.status === 'online',
-                        connected: endpoint.connected,
-                        status: endpoint.status,
-                        admitted: endpoint.admitted,
-                        transportState: endpoint.transportState,
-                        phase: endpoint.phase ?? (endpoint.connected ? 'online' : 'pending'),
-                        pendingLogin: endpoint.pendingLogin ?? false,
-                        latencyMs: Date.now() - startedAt,
-                        message: endpoint.connected
-                            ? 'Endpoint 已连接'
-                            : endpoint.pendingLogin
-                                ? 'Endpoint 等待登录操作'
-                                : 'Endpoint 当前离线',
-                    } });
-            }
-            catch (error) {
-                emit({ requestId, data: {
-                        reachable: false,
-                        connected: false,
-                        phase: 'failed',
-                        latencyMs: Date.now() - startedAt,
-                        message: error instanceof Error ? error.message : String(error),
-                    } });
-            }
-            return payloads;
-        }
-        case 'endpoint.send_message': {
-            try {
-                const data = recordField(message.data) ?? message;
-                const adapter = String(data.adapter ?? '');
-                const endpointKey = String(data.endpointKey ?? '');
-                const channelId = String(data.channelId ?? data.id ?? '');
-                const channelType = String(data.channelType ?? data.type ?? '');
-                const content = data.content;
-                if (!adapter || !endpointKey || !channelId || !channelType || content === undefined) {
-                    emit({
-                        requestId,
-                        error: 'adapter, endpointKey, channelId, channelType, and content are required',
-                    });
-                    return payloads;
-                }
-                if (!ctx.sendEndpointMessage) {
-                    emit({ requestId, error: 'Endpoint send is not configured' });
-                    return payloads;
-                }
-                const result = await ctx.sendEndpointMessage({
-                    adapter,
-                    endpointKey,
-                    conversation: wireConversation(channelType, channelId, data.parent),
-                    content,
-                });
-                emit({ requestId, data: { messageId: result.messageId } });
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-            return payloads;
-        }
-        case 'system:restart': {
-            try {
-                if (!ctx.requestRestart) {
-                    emit({ requestId, error: 'Process restart is not configured' });
-                    return payloads;
-                }
-                ctx.publishEvent?.('system:restarting', { timestamp: Date.now() });
-                emit({ requestId, data: { success: true, message: '正在重启...' } });
-                // Delay so the HTTP response can flush (parity with legacy host-api).
-                setTimeout(() => {
-                    void Promise.resolve(ctx.requestRestart?.()).catch(() => {
-                        /* restart is best-effort */
-                    });
-                }, 500);
-            }
-            catch (error) {
-                emit({
-                    requestId,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-            }
-            return payloads;
-        }
-        default:
             if (type.startsWith('db:')) {
                 emit({
                     requestId,
@@ -812,63 +376,6 @@ export async function dispatchRuntimeConsoleRpc(message, ctx) {
             }
             emit({ requestId, error: `Unknown RPC type: ${type || '<empty>'}` });
             return payloads;
+        }
     }
 }
-function stringField(message, key) {
-    const value = message[key];
-    return typeof value === 'string' ? value.trim() : '';
-}
-function recordField(value) {
-    return value && typeof value === 'object' && !Array.isArray(value)
-        ? value
-        : undefined;
-}
-function positiveInteger(value, fallback) {
-    const parsed = Number(value ?? fallback);
-    return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-function errorReply(payloads, requestId, error) {
-    payloads.push({ requestId, error });
-    return payloads;
-}
-/** HTTP paths under apiBase that demo scope may call (ADR 0016). */
-export function isDemoHttpAllowed(method, pathname, apiBase) {
-    const normalizedBase = apiBase.replace(/\/$/u, '') || '/api';
-    const m = method.toUpperCase();
-    // These handlers require an authenticated principal and verify its bound personal owner.
-    if ((m === 'GET' || m === 'PUT') && (pathname === `${normalizedBase}/agent/personal-models`
-        || pathname === `${normalizedBase}/agent/personal-session`))
-        return true;
-    if (m === 'GET' && pathname === `${normalizedBase}/agent/personal-sessions`)
-        return true;
-    if (m === 'GET' && pathname === `${normalizedBase}/events`)
-        return true;
-    if (m === 'GET' && pathname === `${normalizedBase}/events/history`)
-        return true;
-    if (m === 'GET' && DEMO_INTROSPECTION_PATHS.has(pathname.slice(normalizedBase.length)))
-        return true;
-    if (m === 'POST' && pathname === `${normalizedBase}/console/request`)
-        return true;
-    // Read-only dashboard / plugin inspection routes (legacy host-api parity).
-    if (m === 'GET' && pathname === `${normalizedBase}/system/status`)
-        return true;
-    if (m === 'GET' && pathname === `${normalizedBase}/stats`)
-        return true;
-    if (m === 'GET' && (pathname === `${normalizedBase}/plugins`
-        || pathname.startsWith(`${normalizedBase}/plugins/`)))
-        return true;
-    return false;
-}
-const DEMO_INTROSPECTION_PATHS = new Set([
-    '/introspection/commands',
-    '/introspection/middlewares',
-    '/introspection/components',
-    '/introspection/endpoints',
-    '/introspection/bindings',
-    '/introspection/tools',
-    '/introspection/prompt-sections',
-    '/introspection/mcp',
-]);