@zhin.js/host-http 1.1.13 → 1.1.15

package/src/console-rpc.ts

@@ -1,10 +1,11 @@
 import type { AuthScope } from './token-registry.js';
 import type { DatabaseHostConsole } from '@zhin.js/plugin-runtime';
 import {
+  CONFIG_PATCH_LIMITS,
   CONFIG_RPC,
-  ENDPOINT_RPC,
   type ConsoleConfigPatchRequest,
   type ConsoleConfigPatchResult,
+  type ConsoleConfigProjectPatchResult,
   type ConsoleConfigSource,
   type ConsoleConfigExplanation,
   type ConsoleEndpointSummary,
@@ -12,6 +13,13 @@ import {
 } from '@zhin.js/console-protocol';
 import { dispatchExtendedConsoleRpc, type ConsoleRpcExtendedCtx } from './console-rpc-extended/index.js';
 import { dispatchPluginConsoleRpc } from './console-plugin-rpc.js';
+import {
+  configurationSaveMessage,
+  dispatchHostResourceConsoleRpc,
+  invalidProjectPatchOperations,
+} from './console-rpc-handlers.js';
+
+export { isDemoHttpAllowed } from './console-rpc-handlers.js';
 
 /**
  * Console RPC 请求结构：未锚定 endpoint 的会话地址（结构对齐
@@ -28,26 +36,6 @@ export interface ConversationAddress {
   readonly threadId?: string;
 }
 
-/** Canonical Console wire fields → runtime conversation address. */
-function wireConversation(
-  channelType: string,
-  channelId: string,
-  parent: unknown,
-): ConversationAddress {
-  const kind: ConversationAddress['kind'] =
-    channelType === 'group' || channelType === 'channel' ? channelType : 'private';
-  const wire = parent && typeof parent === 'object'
-    ? parent as { readonly type?: unknown; readonly id?: unknown }
-    : undefined;
-  const parentKind = wire?.type === 'group' || wire?.type === 'channel' ? wire.type : undefined;
-  const parentId = typeof wire?.id === 'string' && wire.id ? wire.id : undefined;
-  return {
-    kind,
-    id: channelId,
-    ...(parentKind && parentId ? { parent: { kind: parentKind, id: parentId } } : {}),
-  };
-}
-
 export type RuntimeConsoleRpcMessage = {
   readonly type?: unknown;
   readonly requestId?: unknown;
@@ -192,17 +180,22 @@ export type RuntimeConsoleRpcContext = {
   replaceConfigSource?(
     source: string,
     expectedRevision: string,
-  ): Promise<{ readonly revision: string; readonly restartRequired: boolean }>;
+  ): Promise<{ readonly revision: string; readonly restartRequired: boolean } & import('@zhin.js/console-protocol').ConsoleConfigApplicationStatus>;
   /**
    * Full-scope write: set `document[pluginName] = data` and persist.
    * Returns whether a process restart is required.
    */
-  setConfigKey?(pluginName: string, data: unknown): Promise<{ restartRequired: boolean }>;
+  setConfigKey?(pluginName: string, data: unknown): Promise<{ restartRequired: boolean } & import('@zhin.js/console-protocol').ConsoleConfigApplicationStatus>;
   /**
    * Full-scope, path-allowlisted and revision-checked write (`config:patch`).
    * Scope and schema checks belong to the implementation; scope violations throw.
    */
   patchConfig?(request: ConsoleConfigPatchRequest): Promise<ConsoleConfigPatchResult>;
+  /** Full-scope, revision-checked project administration, distinct from page allowlists. */
+  patchProjectConfig?(request: Omit<ConsoleConfigPatchRequest, 'instanceKey'>): Promise<ConsoleConfigProjectPatchResult>;
+  /** Full-scope project read (`config:get-project`); masked unless `reveal`. */
+  readProjectConfig?(request: import('@zhin.js/console-protocol').ConsoleConfigProjectReadRequest): Promise<import('@zhin.js/console-protocol').ConsoleConfigProjectRead>;
+  applyConfig?(expectedRevision: string): Promise<import('@zhin.js/console-protocol').ConsoleConfigApplyResult>;
   /** Persist a declared child Plugin lifecycle state. Takes effect after restart. */
   setPluginEnabled?(
     instanceKey: string,
@@ -427,6 +420,22 @@ export async function dispatchRuntimeConsoleRpc(
       }
       return payloads;
     }
+    case CONFIG_RPC.APPLY: {
+      if (ctx.authScope !== 'full') { emit({ requestId, error: 'Full Console scope is required' }); return payloads; }
+      if (typeof message.expectedRevision !== 'string' || !/^[a-f0-9]{64}$/u.test(message.expectedRevision)) {
+        emit({ requestId, error: 'expectedRevision is required' }); return payloads;
+      }
+      if (!ctx.applyConfig) { emit({ requestId, error: 'Config application is not configured' }); return payloads; }
+      try {
+        const result = await ctx.applyConfig(message.expectedRevision);
+        emit({ requestId, data: result });
+      } catch {
+        // Source reads can fail before an operation is admitted. Do not echo a
+        // YAML parser's source excerpt or turn unavailable evidence into success.
+        emit({ requestId, error: 'Configuration application is unavailable; read the source and runtime status before retrying' });
+      }
+      return payloads;
+    }
     case CONFIG_RPC.REPLACE_SOURCE: {
       try {
         const source = message.source;
@@ -450,9 +459,7 @@ export async function dispatchRuntimeConsoleRpc(
           data: {
             success: true,
             ...result,
-            message: result.restartRequired
-              ? '配置已保存，需重启进程才能生效'
-              : '配置已保存',
+            message: configurationSaveMessage(result),
           },
         });
       } catch (error) {
@@ -463,9 +470,33 @@ export async function dispatchRuntimeConsoleRpc(
       }
       return payloads;
     }
+    case CONFIG_RPC.GET_PROJECT: {
+      if (ctx.authScope !== 'full') { emit({ requestId, error: 'Full scope required' }); return payloads; }
+      const { path, reveal } = message;
+      if (path !== undefined && (!Array.isArray(path) || path.length > CONFIG_PATCH_LIMITS.maxPathDepth
+        || path.some(segment => typeof segment !== 'string' || !segment || segment.length > CONFIG_PATCH_LIMITS.maxSegmentLength))) {
+        emit({ requestId, error: 'path 必须是非空字符串数组' });
+        return payloads;
+      }
+      if (reveal !== undefined && typeof reveal !== 'boolean') { emit({ requestId, error: 'reveal 必须是布尔值' }); return payloads; }
+      if (!ctx.readProjectConfig) { emit({ requestId, error: 'Config project read is not configured' }); return payloads; }
+      try {
+        emit({ requestId, data: await ctx.readProjectConfig({ path: (path ?? []) as string[], reveal: reveal === true }) });
+      } catch {
+        // Parser/IO messages can quote document source (and therefore secrets): never echo them.
+        emit({ requestId, error: 'Configuration read is unavailable; read the project file locally to diagnose it' });
+      }
+      return payloads;
+    }
+    case CONFIG_RPC.PATCH_PROJECT:
     case CONFIG_RPC.PATCH: {
       if (ctx.authScope !== 'full') { emit({ requestId, error: 'Full scope required' }); return payloads; }
+      const projectPatch = message.type === CONFIG_RPC.PATCH_PROJECT;
       const { instanceKey, expectedRevision, patches } = message;
+      if (projectPatch && instanceKey !== undefined) {
+        emit({ requestId, error: 'Project patches must not specify instanceKey' });
+        return payloads;
+      }
       if (instanceKey !== undefined && (typeof instanceKey !== 'string' || !instanceKey || instanceKey.length > 128)) {
         emit({ requestId, error: 'instanceKey 必须是插件实例名，或省略以使用 Host 白名单' });
         return payloads;
@@ -478,31 +509,41 @@ export async function dispatchRuntimeConsoleRpc(
         emit({ requestId, error: 'patches 必须是数组' });
         return payloads;
       }
-      if (!ctx.patchConfig) {
+      if (projectPatch) {
+        const invalid = invalidProjectPatchOperations(patches);
+        if (invalid) { emit({ requestId, error: invalid }); return payloads; }
+      }
+      const patch = projectPatch ? ctx.patchProjectConfig : ctx.patchConfig;
+      if (!patch) {
         emit({ requestId, error: 'Config patch is not configured' });
         return payloads;
       }
+      let result: Awaited<ReturnType<typeof patch>>;
       try {
-        const result = await ctx.patchConfig({
+        result = await patch.call(ctx, {
           ...(instanceKey === undefined ? {} : { instanceKey }),
           expectedRevision,
           patches,
         });
-        if (result.status === 'saved') {
+      } catch (error) {
+        emit({
+          requestId,
+          error: `Failed to patch config: ${error instanceof Error ? error.message : String(error)}`,
+        });
+        return payloads;
+      }
+      if (result.status === 'saved') {
+        // The write has committed: a notification failure must not turn the receipt into a rejection.
+        try {
           ctx.publishEvent?.('config:updated', {
             pluginName: instanceKey ?? null,
             keys: [...new Set(result.paths.map(path => path[0]))],
             paths: result.paths,
             revision: result.revision,
           });
-        }
-        emit({ requestId, data: result });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to patch config: ${error instanceof Error ? error.message : String(error)}`,
-        });
+        } catch { /* subscribers resynchronise from the next read */ }
       }
+      emit({ requestId, data: result });
       return payloads;
     }
     case CONFIG_RPC.SET: {
@@ -538,10 +579,9 @@ export async function dispatchRuntimeConsoleRpc(
           requestId,
           data: {
             success: true,
+            ...result,
             reloaded: false,
-            message: result.restartRequired
-              ? '配置已保存，需重启进程才能生效'
-              : '配置已保存',
+            message: configurationSaveMessage(result),
           },
         });
       } catch (error) {
@@ -552,465 +592,10 @@ export async function dispatchRuntimeConsoleRpc(
       }
       return payloads;
     }
-    case 'files:tree': {
-      try {
-        const tree = ctx.listProjectFiles ? await ctx.listProjectFiles() : [];
-        emit({ requestId, data: { tree } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to build file tree: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'files:read': {
-      try {
-        const filePath = String(message.filePath ?? '');
-        if (!filePath) {
-          emit({ requestId, error: 'filePath is required' });
-          return payloads;
-        }
-        if (!ctx.readProjectFile) {
-          emit({ requestId, error: 'File read is not configured' });
-          return payloads;
-        }
-        const file = await ctx.readProjectFile(filePath);
-        emit({ requestId, data: file });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'files:save': {
-      try {
-        const filePath = String(message.filePath ?? '');
-        const content = message.content;
-        if (!filePath) {
-          emit({ requestId, error: 'filePath is required' });
-          return payloads;
-        }
-        if (typeof content !== 'string') {
-          emit({ requestId, error: 'content field is required' });
-          return payloads;
-        }
-        if (!ctx.saveProjectFile) {
-          emit({ requestId, error: 'File write is not configured' });
-          return payloads;
-        }
-        await ctx.saveProjectFile(filePath, content);
-        emit({ requestId, data: { success: true, message: `文件已保存: ${filePath}` } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to save file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:list': {
-      try {
-        const files = ctx.listEnvFiles ? await ctx.listEnvFiles() : [];
-        emit({ requestId, data: { files } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to list env files: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:get': {
-      try {
-        const filename = String(message.filename ?? '');
-        if (!filename) {
-          emit({ requestId, error: 'filename is required' });
-          return payloads;
-        }
-        if (!ctx.readEnvFile) {
-          emit({ requestId, error: 'Env read is not configured' });
-          return payloads;
-        }
-        const content = await ctx.readEnvFile(filename);
-        emit({ requestId, data: { content } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to read env file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'env:save': {
-      try {
-        const filename = String(message.filename ?? '');
-        const content = message.content;
-        if (!filename) {
-          emit({ requestId, error: 'filename is required' });
-          return payloads;
-        }
-        if (typeof content !== 'string') {
-          emit({ requestId, error: 'content field is required' });
-          return payloads;
-        }
-        if (!ctx.writeEnvFile) {
-          emit({ requestId, error: 'Env write is not configured' });
-          return payloads;
-        }
-        await ctx.writeEnvFile(filename, content);
-        emit({ requestId, data: { success: true, message: `环境文件已保存: ${filename}` } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to save env file: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'schema:get': {
-      try {
-        const pluginName = typeof message.pluginName === 'string'
-          ? message.pluginName
-          : undefined;
-        const schema = ctx.getSchema ? await ctx.getSchema(pluginName) : null;
-        emit({ requestId, data: schema });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to get schema: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'schema:get-all': {
-      try {
-        const schemas = ctx.getAllSchemas ? await ctx.getAllSchemas() : {};
-        emit({ requestId, data: schemas });
-      } catch (error) {
-        emit({
-          requestId,
-          error: `Failed to get all schemas: ${error instanceof Error ? error.message : String(error)}`,
-        });
-      }
-      return payloads;
-    }
-    case 'db:info': {
-      if (ctx.database) {
-        emit({ requestId, data: ctx.database.info() });
-        return payloads;
-      }
-      if (ctx.dbInfo) {
-        try {
-          emit({ requestId, data: await ctx.dbInfo() });
-        } catch (error) {
-          emit({
-            requestId,
-            error: error instanceof Error ? error.message : String(error),
-          });
-        }
+    default: {
+      if (await dispatchHostResourceConsoleRpc(type, message, ctx, requestId, payloads)) {
         return payloads;
       }
-      emit({
-        requestId,
-        data: { dialect: null, connected: false, message: 'Database not configured on Plugin Runtime Host' },
-      });
-      return payloads;
-    }
-    case 'db:tables': {
-      try {
-        if (ctx.database) {
-          emit({ requestId, data: { tables: ctx.database.tables() } });
-          return payloads;
-        }
-        const tables = ctx.dbTables ? await ctx.dbTables() : [];
-        emit({ requestId, data: tables });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'db:select': {
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      const page = positiveInteger(message.page, 1);
-      const pageSize = Math.min(positiveInteger(message.pageSize, 50), 500);
-      const where = recordField(message.where);
-      if (!ctx.database) {
-        emit({ requestId, data: { rows: [], total: 0, page, pageSize } });
-        return payloads;
-      }
-      try {
-        emit({ requestId, data: await ctx.database.select(table, page, pageSize, where) });
-      } catch (error) {
-        emit({ requestId, error: `Failed to select: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:insert': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const row = recordField(message.row);
-      if (!table || !row) return errorReply(payloads, requestId, 'table and row are required');
-      try {
-        await ctx.database.insert(table, row);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to insert: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:update': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const row = recordField(message.row);
-      const where = recordField(message.where);
-      if (!table || !row || !where) {
-        return errorReply(payloads, requestId, 'table, row, and where are required');
-      }
-      try {
-        const affected = await ctx.database.update(table, row, where);
-        emit({ requestId, data: { success: true, affected } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to update: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:delete': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const where = recordField(message.where);
-      if (!table || !where) return errorReply(payloads, requestId, 'table and where are required');
-      try {
-        const deleted = await ctx.database.delete(table, where);
-        emit({ requestId, data: { success: true, deleted } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to delete: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:drop-table': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      try {
-        await ctx.database.dropTable(table);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to drop table: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:get': {
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      if (!ctx.database) {
-        emit({ requestId, data: { key, value: null } });
-        return payloads;
-      }
-      try {
-        emit({ requestId, data: { key, value: await ctx.database.kvGet(table, key) } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to get kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:set': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      try {
-        const ttl = typeof message.ttl === 'number' && Number.isFinite(message.ttl)
-          ? message.ttl
-          : undefined;
-        await ctx.database.kvSet(table, key, message.value, ttl);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to set kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:delete': {
-      if (!ctx.database) return errorReply(payloads, requestId, 'Database RPC is not available on Plugin Runtime Host');
-      const table = stringField(message, 'table');
-      const key = stringField(message, 'key');
-      if (!table || !key) return errorReply(payloads, requestId, 'table and key are required');
-      try {
-        await ctx.database.kvDelete(table, key);
-        emit({ requestId, data: { success: true } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to delete kv: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'db:kv:entries': {
-      const table = stringField(message, 'table');
-      if (!table) return errorReply(payloads, requestId, 'table is required');
-      if (!ctx.database) {
-        emit({ requestId, data: { entries: [] } });
-        return payloads;
-      }
-      try {
-        emit({ requestId, data: { entries: await ctx.database.kvEntries(table) } });
-      } catch (error) {
-        emit({ requestId, error: `Failed to get entries: ${errorMessage(error)}` });
-      }
-      return payloads;
-    }
-    case 'endpoint.list': {
-      try {
-        const endpoints = ctx.listEndpoints ? await ctx.listEndpoints() : [];
-        emit({ requestId, data: { endpoints } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'endpoint.info': {
-      try {
-        const data = recordField(message.data) ?? message;
-        const adapter = String(data.adapter ?? '');
-        const endpointKey = String(data.endpointKey ?? '');
-        if (!adapter || !endpointKey) {
-          emit({ requestId, error: 'adapter and endpointKey are required' });
-          return payloads;
-        }
-        if (!ctx.getEndpoint) {
-          emit({ requestId, error: 'Endpoint registry is not configured' });
-          return payloads;
-        }
-        const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-        if (!endpoint) {
-          emit({ requestId, error: 'endpoint not found' });
-          return payloads;
-        }
-        emit({ requestId, data: endpoint });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case ENDPOINT_RPC.TEST: {
-      const data = recordField(message.data) ?? message;
-      const adapter = stringField(data, 'adapter');
-      const endpointKey = stringField(data, 'endpointKey');
-      if (!adapter || !endpointKey) {
-        emit({ requestId, error: 'adapter and endpointKey are required' });
-        return payloads;
-      }
-      if (!ctx.getEndpoint) {
-        emit({ requestId, error: 'Endpoint registry is not configured' });
-        return payloads;
-      }
-      const startedAt = Date.now();
-      try {
-        const endpoint = await ctx.getEndpoint(adapter, endpointKey);
-        if (!endpoint) {
-          emit({ requestId, data: {
-            reachable: false,
-            connected: false,
-            phase: 'unconfigured',
-            latencyMs: Date.now() - startedAt,
-            message: 'Endpoint 未注册到当前 generation',
-          } });
-          return payloads;
-        }
-        emit({ requestId, data: {
-          reachable: endpoint.connected && endpoint.status === 'online',
-          connected: endpoint.connected,
-          status: endpoint.status,
-          admitted: endpoint.admitted,
-          transportState: endpoint.transportState,
-          phase: endpoint.phase ?? (endpoint.connected ? 'online' : 'pending'),
-          pendingLogin: endpoint.pendingLogin ?? false,
-          latencyMs: Date.now() - startedAt,
-          message: endpoint.connected
-            ? 'Endpoint 已连接'
-            : endpoint.pendingLogin
-              ? 'Endpoint 等待登录操作'
-              : 'Endpoint 当前离线',
-        } });
-      } catch (error) {
-        emit({ requestId, data: {
-          reachable: false,
-          connected: false,
-          phase: 'failed',
-          latencyMs: Date.now() - startedAt,
-          message: error instanceof Error ? error.message : String(error),
-        } });
-      }
-      return payloads;
-    }
-    case 'endpoint.send_message': {
-      try {
-        const data = recordField(message.data) ?? message;
-        const adapter = String(data.adapter ?? '');
-        const endpointKey = String(data.endpointKey ?? '');
-        const channelId = String(data.channelId ?? data.id ?? '');
-        const channelType = String(data.channelType ?? data.type ?? '');
-        const content = data.content;
-        if (!adapter || !endpointKey || !channelId || !channelType || content === undefined) {
-          emit({
-            requestId,
-            error: 'adapter, endpointKey, channelId, channelType, and content are required',
-          });
-          return payloads;
-        }
-        if (!ctx.sendEndpointMessage) {
-          emit({ requestId, error: 'Endpoint send is not configured' });
-          return payloads;
-        }
-        const result = await ctx.sendEndpointMessage({
-          adapter,
-          endpointKey,
-          conversation: wireConversation(channelType, channelId, data.parent),
-          content,
-        });
-        emit({ requestId, data: { messageId: result.messageId } });
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    case 'system:restart': {
-      try {
-        if (!ctx.requestRestart) {
-          emit({ requestId, error: 'Process restart is not configured' });
-          return payloads;
-        }
-        ctx.publishEvent?.('system:restarting', { timestamp: Date.now() });
-        emit({ requestId, data: { success: true, message: '正在重启...' } });
-        // Delay so the HTTP response can flush (parity with legacy host-api).
-        setTimeout(() => {
-          void Promise.resolve(ctx.requestRestart?.()).catch(() => {
-            /* restart is best-effort */
-          });
-        }, 500);
-      } catch (error) {
-        emit({
-          requestId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-      return payloads;
-    }
-    default:
       if (type.startsWith('db:')) {
         emit({
           requestId,
@@ -1020,65 +605,6 @@ export async function dispatchRuntimeConsoleRpc(
       }
       emit({ requestId, error: `Unknown RPC type: ${type || '<empty>'}` });
       return payloads;
+    }
   }
 }
-
-function stringField(message: RuntimeConsoleRpcMessage, key: string): string {
-  const value = message[key];
-  return typeof value === 'string' ? value.trim() : '';
-}
-
-function recordField(value: unknown): Record<string, unknown> | undefined {
-  return value && typeof value === 'object' && !Array.isArray(value)
-    ? value as Record<string, unknown>
-    : undefined;
-}
-
-function positiveInteger(value: unknown, fallback: number): number {
-  const parsed = Number(value ?? fallback);
-  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-
-function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-function errorReply(
-  payloads: RuntimeConsoleRpcReply[],
-  requestId: number | string | undefined,
-  error: string,
-): RuntimeConsoleRpcReply[] {
-  payloads.push({ requestId, error });
-  return payloads;
-}
-
-/** HTTP paths under apiBase that demo scope may call (ADR 0016). */
-export function isDemoHttpAllowed(method: string, pathname: string, apiBase: string): boolean {
-  const normalizedBase = apiBase.replace(/\/$/u, '') || '/api';
-  const m = method.toUpperCase();
-  // These handlers require an authenticated principal and verify its bound personal owner.
-  if ((m === 'GET' || m === 'PUT') && (pathname === `${normalizedBase}/agent/personal-models`
-    || pathname === `${normalizedBase}/agent/personal-session`)) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/agent/personal-sessions`) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/events`) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/events/history`) return true;
-  if (m === 'GET' && DEMO_INTROSPECTION_PATHS.has(pathname.slice(normalizedBase.length))) return true;
-  if (m === 'POST' && pathname === `${normalizedBase}/console/request`) return true;
-  // Read-only dashboard / plugin inspection routes (legacy host-api parity).
-  if (m === 'GET' && pathname === `${normalizedBase}/system/status`) return true;
-  if (m === 'GET' && pathname === `${normalizedBase}/stats`) return true;
-  if (m === 'GET' && (pathname === `${normalizedBase}/plugins`
-    || pathname.startsWith(`${normalizedBase}/plugins/`))) return true;
-  return false;
-}
-
-const DEMO_INTROSPECTION_PATHS: ReadonlySet<string> = new Set([
-  '/introspection/commands',
-  '/introspection/middlewares',
-  '/introspection/components',
-  '/introspection/endpoints',
-  '/introspection/bindings',
-  '/introspection/tools',
-  '/introspection/prompt-sections',
-  '/introspection/mcp',
-]);