Skip to content

isAgentIngressRoute

isAgentIngressRoute(method, parts): boolean

Defined in: src/server.ts:4513

Method+path allowlist for the restricted agent-ingress listener: EXACTLY the agent→server control-plane routes the spawn directives instruct the agent to call. parts is url.pathname.split(”/“).filter(Boolean), e.g. [“api”,“sessions”,"",“hooks”]. The session id segment is an unguessable per-session UUID the agent only knows for its own session, so it is the de-facto per-session capability; the listener exposes no enumeration route. NOTE: /queue/approve is deliberately EXCLUDED — it is the human/autopilot gate, not an agent action.

string

string[]

boolean