measurement: name the kinds by protocol and action, add the http_request kind and QUIC settings

backend/shared/MoShiro.Measurement/Core/AdaptiveRate.cs

@@ -65,6 +65,9 @@ public sealed record AdaptiveRateOptions
 
     public double RttFloorMs { get; init; } = 5;
 
+    /// <summary>用 RTT p99 的置信区间限制降频。样本稀少的任务（每分钟几次）估不出区间，关掉后平稳频率只由丢包上界决定。</summary>
+    public bool RttGuard { get; init; } = true;
+
     /// <summary>先验：时间 → 这个时刻丢包的历史概率（0 到 1）；null 表示没有历史。</summary>
     public Func<long, double?>? Prior { get; init; }
 
@@ -285,7 +288,7 @@ public sealed class AdaptiveRate
             UpdateGuard(nowUs);
             double hz = next switch
             {
-                ProbeState.Quiet => Quantize(Math.Max(QuietHz(QuietWindowSeconds(nowUs)), double.IsNaN(_guardHz) ? _options.MaxHz : _guardHz)),
+                ProbeState.Quiet => Quantize(Math.Max(QuietHz(QuietWindowSeconds(nowUs)), !_options.RttGuard ? _options.MinHz : double.IsNaN(_guardHz) ? _options.MaxHz : _guardHz)),
                 ProbeState.Watch or ProbeState.Active => _options.MaxHz,
                 _ => Math.Max(_options.MinHz / 4, 1.0 / _options.DeadMaxIntervalSeconds),
             };

backend/shared/MoShiro.Measurement/Core/Contracts.cs

@@ -190,6 +190,8 @@ public sealed class BlockSpec
 
     public bool Bool(string name) => Params.GetBool(name);
 
+    public string Text(string name) => Params.GetString(name);
+
     /// <summary>参数或端口变化时调和器重启这个积木（不含流编号：Agent 的流编号每次重建都会重新分配）。</summary>
     public string ConfigSignature => KindId + "|" + Port + "|" +
         string.Join(',', Params.Values.OrderBy(p => p.Key, StringComparer.Ordinal).Select(p => p.Key + "=" + p.Value.GetRawText()));
@@ -237,6 +239,12 @@ public sealed class BlockEnv
     /// <summary>拨号方：对端（Agent，或目标任务的目标地址）。</summary>
     public IPAddress? PeerAddress { get; init; }
 
+    /// <summary>单个 Agent 任务的目标原文（http 是 URL，其余是主机[:端口]）；线路任务为 null。</summary>
+    public string? Target { get; init; }
+
+    /// <summary>单个 Agent 任务：解析出来的地址能不能连（本地 <c>allowed_target_cidrs</c>）；null 表示不限制。</summary>
+    public Func<IPAddress, bool>? AllowAddress { get; init; }
+
     /// <summary>拨号方：对端 TLS 证书的 SPKI 指纹；null 表示不校验证书（目标任务，目标是任意地址）。</summary>
     public byte[]? PeerSpkiSha256 { get; init; }
 
@@ -246,7 +254,7 @@ public sealed class BlockEnv
     /// <summary>拨号方：列块出口。</summary>
     public IFragmentSink? Fragments { get; init; }
 
-    /// <summary>本地硬上限：批量传输（tcp_bulk）发送端的码率（Mbit/s）。批量传输会尽可能占满链路，这是防止把小机器打满的保险。</summary>
+    /// <summary>本地硬上限：批量传输（tcp_transfer）发送端的码率（Mbit/s）。批量传输会尽可能占满链路，这是防止把小机器打满的保险。</summary>
     public double MaxBulkMbps { get; init; } = 100;
 
     /// <summary>本地硬上限：单向数据流接收缓冲的包速率上界。</summary>
@@ -267,6 +275,8 @@ public sealed class BlockEnv
             Counters = Counters,
             TcpListen = TcpListen,
             PeerAddress = PeerAddress,
+            Target = Target,
+            AllowAddress = AllowAddress,
             PeerSpkiSha256 = PeerSpkiSha256,
             KnockKey = KnockKey,
             Fragments = Fragments,