Function container_route_allowed 

pub fn container_route_allowed(path: &str) -> bool

The routes a container agent may call. Everything else is refused, notably host shell/pty creation, file streaming, editor and attachment paths, pane and agent opening, UI automation, cron, and the /ws and /agentmux/service RPC surfaces. Matched on the raw path, exactly as the router matches it.