@cat-factory/server 0.253.0 → 0.255.0

package/dist/modules/artifacts/HarnessArtifactController.js

@@ -3,8 +3,9 @@ import { bodyLimit } from 'hono/body-limit';
 import { bearerToken } from '../../auth/middleware.js';
 import { ContainerSessionService } from '../../containers/ContainerSessionService.js';
 import { logger } from '../../observability/logger.js';
-import { MAX_REQUEST_BYTES, MAX_UPLOAD_BYTES, exceedsRequestSizeLimit, normalizeImageContentType, } from './imageArtifacts.js';
-import { UnavailableError, UnauthorizedError } from '@cat-factory/kernel';
+import { MAX_REQUEST_BYTES, MAX_UPLOAD_BYTES, blobResponseHeaders, exceedsRequestSizeLimit, normalizeImageContentType, } from './imageArtifacts.js';
+import { NotFoundError, UnavailableError, UnauthorizedError } from '@cat-factory/kernel';
+import { reclaimArtifactOverflow, reserveArtifactSlot } from './artifactSetCap.js';
 /**
  * Cap on how many screenshots a single run may upload. A `tester-ui` run captures one shot per
  * distinct view, so a couple of dozen is generous; the ceiling stops a buggy or compromised
@@ -12,6 +13,24 @@ import { UnavailableError, UnauthorizedError } from '@cat-factory/kernel';
  * count is read back from the store per ingest (cheap, indexed by execution).
  */
 const MAX_SCREENSHOTS_PER_RUN = 100;
+/** One run's capture set, as {@link reserveArtifactSlot} / {@link reclaimArtifactOverflow} see it. */
+function runCap(store, workspaceId, executionId) {
+    return {
+        limit: MAX_SCREENSHOTS_PER_RUN,
+        count: () => store.countByExecution(workspaceId, executionId),
+        list: () => store.listByExecution(workspaceId, executionId),
+        remove: (id) => store.delete(workspaceId, id),
+    };
+}
+/** The one refusal both cap checks answer with, so the pre-check and the reconcile cannot differ. */
+function refuseFullRun(c, executionId) {
+    logger.warn('artifact ingest: per-run screenshot limit reached', {
+        scope: 'artifactIngest',
+        executionId,
+        limit: MAX_SCREENSHOTS_PER_RUN,
+    });
+    return c.json({ error: { code: 'too_many', message: 'Per-run screenshot limit reached' } }, 429);
+}
 /**
  * Resolve the stored content type for an uploaded screenshot. Screenshots are always PNGs, so a
  * typeless upload defaults to PNG; a declared type is gated through the shared image allow-list.
@@ -25,6 +44,41 @@ function resolveScreenshotContentType(declaredType) {
     }
     return normalizeImageContentType(trimmed);
 }
+/**
+ * Verify the container session token on a harness request and resolve the store its run may use.
+ *
+ * One helper for both directions of the seam (the tester's screenshot ingest and the reference
+ * download beside it), so the two can never end up disagreeing about what authenticates a
+ * container: the SAME short-lived, workspace- and execution-pinned token the agent already holds
+ * for the LLM proxy, and a store resolved from the token's workspace rather than from anything the
+ * request says.
+ */
+async function requireHarnessSession(c, scope) {
+    const container = c.get('container');
+    const resolveStore = container.resolveBinaryArtifactStore;
+    if (!resolveStore) {
+        throw new UnavailableError('Artifact storage not configured');
+    }
+    const secret = container.config.auth.sessionSecret;
+    if (!secret) {
+        logger.error('harness artifacts: session secret not configured', { scope });
+        throw new UnavailableError('Artifact ingest not configured');
+    }
+    const sessions = new ContainerSessionService({ secret });
+    const session = await sessions.verify(bearerToken(c));
+    if (!session) {
+        logger.warn('harness artifacts: invalid or expired session token', { scope });
+        throw new UnauthorizedError('Invalid or expired token');
+    }
+    // The store is the run's ACCOUNT's configured backend, resolved from the token's workspace
+    // (never the request), so a container only ever reaches its own account's storage. Null means the
+    // account configured no storage.
+    const store = await resolveStore(session.workspaceId);
+    if (!store) {
+        throw new UnavailableError('Artifact storage not configured');
+    }
+    return { session, store };
+}
 /**
  * The in-container screenshot ingest endpoint for the UI tester (`tester-ui`). It lives on
  * the harness path (mounted at `/`, reachable at `${proxyBaseUrl}/artifacts/ingest`) and is
@@ -44,49 +98,21 @@ export function harnessArtifactController() {
         maxSize: MAX_REQUEST_BYTES,
         onError: (c) => c.json({ error: { code: 'too_large', message: 'Artifact exceeds size limit' } }, 413),
     }), async (c) => {
-        const container = c.get('container');
-        const resolveStore = container.resolveBinaryArtifactStore;
-        if (!resolveStore) {
-            throw new UnavailableError('Artifact storage not configured');
-        }
-        const secret = container.config.auth.sessionSecret;
-        if (!secret) {
-            logger.error('artifact ingest: session secret not configured', { scope: 'artifactIngest' });
-            throw new UnavailableError('Artifact ingest not configured');
-        }
-        const sessions = new ContainerSessionService({ secret });
-        const session = await sessions.verify(bearerToken(c));
-        if (!session) {
-            logger.warn('artifact ingest: invalid or expired session token', {
-                scope: 'artifactIngest',
-            });
-            throw new UnauthorizedError('Invalid or expired token');
-        }
-        // The store is the run's ACCOUNT's configured backend, resolved from the token's
-        // workspace (never the request body) — so a container can only write to its own
-        // account's storage. Null ⇒ the account configured no storage.
-        const store = await resolveStore(session.workspaceId);
-        if (!store) {
-            throw new UnavailableError('Artifact storage not configured');
-        }
+        const { session, store } = await requireHarnessSession(c, 'artifactIngest');
         // Refuse a grossly oversized body from Content-Length before it is buffered into memory; the
         // exact per-file ceiling is still enforced after parsing below.
         if (exceedsRequestSizeLimit(c.req.header('content-length'))) {
             return c.json({ error: { code: 'too_large', message: 'Artifact exceeds size limit' } }, 413);
         }
         // Per-run upload ceiling (fast-path): a runaway/compromised container can't fill the store
-        // with unbounded screenshots scoped to its run. This pre-check rejects the steady-state case
+        // with unbounded screenshots scoped to its run. The shared cap rejects the steady-state case
         // cheaply via an indexed COUNT (no row materialise); concurrent ingests that race past it are
         // caught by the post-insert reconcile below, so the effective ceiling holds even without a
         // DB-level atomic counter.
-        const existingCount = await store.countByExecution(session.workspaceId, session.executionId);
-        if (existingCount >= MAX_SCREENSHOTS_PER_RUN) {
-            logger.warn('artifact ingest: per-run screenshot limit reached', {
-                scope: 'artifactIngest',
-                executionId: session.executionId,
-                count: existingCount,
-            });
-            return c.json({ error: { code: 'too_many', message: 'Per-run screenshot limit reached' } }, 429);
+        const cap = runCap(store, session.workspaceId, session.executionId);
+        const priorCount = await reserveArtifactSlot(cap);
+        if (priorCount === null) {
+            return refuseFullRun(c, session.executionId);
         }
         let form;
         try {
@@ -130,28 +156,46 @@ export function harnessArtifactController() {
             },
             blob: bytes,
         });
-        // Reconcile the cap against concurrent inserts: the pre-check is check-then-act, so a burst
-        // of parallel ingests can each pass it before any row lands. We only need to run this
-        // (which materialises the run's rows to find the overflow tail) when the insert COULD have
-        // crossed the cap — i.e. the pre-check count was already at the edge. Steady-state uploads
-        // far below the cap skip it entirely, so the common path is one COUNT + one insert.
-        if (existingCount + 1 >= MAX_SCREENSHOTS_PER_RUN) {
-            // listByExecution is oldest-first, so anything at index >= the cap is overflow; if THIS
-            // record is in that tail, roll it back (delete its row + bytes) and reject. The oldest
-            // `MAX_SCREENSHOTS_PER_RUN` always survive, so the store is bounded to exactly the cap per
-            // run without dropping legitimate earlier shots.
-            const after = await store.listByExecution(session.workspaceId, session.executionId);
-            if (after.length > MAX_SCREENSHOTS_PER_RUN) {
-                const overflow = new Set(after.slice(MAX_SCREENSHOTS_PER_RUN).map((r) => r.id));
-                if (overflow.has(record.id)) {
-                    await store.delete(session.workspaceId, record.id);
-                    logger.warn('artifact ingest: per-run screenshot limit reached (post-insert reconcile)', { scope: 'artifactIngest', executionId: session.executionId, count: after.length });
-                    return c.json({ error: { code: 'too_many', message: 'Per-run screenshot limit reached' } }, 429);
-                }
-            }
+        // Check-then-act, so a burst of parallel ingests can each pass the pre-check before any row
+        // lands; the reconcile rolls THIS record back when it is the one that overflowed, leaving the
+        // oldest `MAX_SCREENSHOTS_PER_RUN` untouched.
+        if (await reclaimArtifactOverflow(cap, priorCount, record.id)) {
+            return refuseFullRun(c, session.executionId);
         }
         return c.json({ artifactId: record.id }, 201);
     });
+    // Stream one REFERENCE design image back into a container: the other direction of the ingest
+    // seam above, and what turns the manifest in a capturing job's body into the files under
+    // `.cat-context/reference-screenshots/`. Same auth (the run's own container session token),
+    // same store resolution (from the token's workspace, never the request).
+    //
+    // Two things bound what this can serve. It is scoped to the token's WORKSPACE, so a container
+    // can never read another board's designs; and it serves only `kind:'reference'`, so this route
+    // cannot become a way for one run to read another run's captured SCREENSHOTS, which is the
+    // asymmetry that matters, since references are design material the run was handed on purpose
+    // while a screenshot is another run's output. Anything outside that is a 404 rather than a 403:
+    // a container has no business learning which artifact ids exist.
+    app.get('/v1/artifacts/reference/:id', async (c) => {
+        const { session, store } = await requireHarnessSession(c, 'artifactReference');
+        const id = c.req.param('id');
+        const got = await store.getBlobWithMetadata(session.workspaceId, id);
+        // Same two REASONS the public blob route separates, for the same reason: "not yours (or not a
+        // reference)" is something to stop asking for, where a metadata row that outlived its bytes is
+        // a storage fault. The harness reports either as a reference it could not fetch.
+        if (!got || got.record.kind !== 'reference') {
+            throw new NotFoundError('Artifact', id, { reason: 'artifact_not_found' });
+        }
+        if (!got.bytes) {
+            throw new NotFoundError('Artifact', id, { reason: 'artifact_blob_missing' });
+        }
+        // Same headers as the workspace-scoped serve path: the content type is clamped to the image
+        // allow-list and `nosniff` is sent, so bytes stored before a tightening can never be served
+        // as active content.
+        return new Response(got.bytes, {
+            status: 200,
+            headers: blobResponseHeaders(got.record.contentType),
+        });
+    });
     return app;
 }
 //# sourceMappingURL=HarnessArtifactController.js.map

package/dist/modules/artifacts/HarnessArtifactController.js.map

@@ -1 +1 @@
-{"version":3,"file":"HarnessArtifactController.js","sourceRoot":"","sources":["../../../src/modules/artifacts/HarnessArtifactController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAA;AAErF,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEzE;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,GAAG,CAAA;AAEnC;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,YAAgC;IACpE,MAAM,OAAO,GAAG,YAAY,EAAE,IAAI,EAAE,CAAA;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CACN,sBAAsB;IACtB,2FAA2F;IAC3F,0FAA0F;IAC1F,iGAAiG;IACjG,SAAS,CAAC;QACR,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC;KACxF,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,YAAY,GAAG,SAAS,CAAC,0BAA0B,CAAA;QACzD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;YAC3F,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAA;QAC9D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBAC/D,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAA;YACF,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,CAAC,CAAA;QACzD,CAAC;QAED,iFAAiF;QACjF,gFAAgF;QAChF,+DAA+D;QAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAA;QAC/D,CAAC;QAED,6FAA6F;QAC7F,gEAAgE;QAChE,IAAI,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QAED,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,2FAA2F;QAC3F,2BAA2B;QAC3B,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAC5F,IAAI,aAAa,IAAI,uBAAuB,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBAC/D,KAAK,EAAE,gBAAgB;gBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,aAAa;aACrB,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAC5E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,IAAI,IAAc,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACpF,CAAC;QACD,yFAAyF;QACzF,8FAA8F;QAC9F,2FAA2F;QAC3F,0CAA0C;QAC1C,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,4CAA4C;iBACtD;aACF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACtD,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,oFAAoF;QACpF,qFAAqF;QACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE;gBACJ,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBACpD,WAAW;aACZ;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;QACF,4FAA4F;QAC5F,sFAAsF;QACtF,2FAA2F;QAC3F,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,aAAa,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACjD,wFAAwF;YACxF,uFAAuF;YACvF,2FAA2F;YAC3F,iDAAiD;YACjD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;YACnF,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC/E,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;oBAClD,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CACnF,CAAA;oBACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAC5E,GAAG,CACJ,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;IAC/C,CAAC,CACF,CAAA;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"HarnessArtifactController.js","sourceRoot":"","sources":["../../../src/modules/artifacts/HarnessArtifactController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAA;AAErF,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAA;AACtD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAExF,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAElF;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,GAAG,CAAA;AAEnC,sGAAsG;AACtG,SAAS,MAAM,CAAC,KAA0B,EAAE,WAAmB,EAAE,WAAmB;IAClF,OAAO;QACL,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC7D,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC;QAC3D,MAAM,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;KACtD,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,aAAa,CAAmB,CAAa,EAAE,WAAmB;IACzE,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;QAC/D,KAAK,EAAE,gBAAgB;QACvB,WAAW;QACX,KAAK,EAAE,uBAAuB;KAC/B,CAAC,CAAA;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAClG,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,YAAgC;IACpE,MAAM,OAAO,GAAG,YAAY,EAAE,IAAI,EAAE,CAAA;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,qBAAqB,CAClC,CAAkB,EAClB,KAAa;IAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,YAAY,GAAG,SAAS,CAAC,0BAA0B,CAAA;IACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAA;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3E,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACxD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7E,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,CAAC,CAAA;IACzD,CAAC;IACD,2FAA2F;IAC3F,kGAAkG;IAClG,iCAAiC;IACjC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CACN,sBAAsB;IACtB,2FAA2F;IAC3F,0FAA0F;IAC1F,iGAAiG;IACjG,SAAS,CAAC;QACR,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC;KACxF,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;QAE3E,6FAA6F;QAC7F,gEAAgE;QAChE,IAAI,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QAED,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,2FAA2F;QAC3F,2BAA2B;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAA;QACjD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,IAAc,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACpF,CAAC;QACD,yFAAyF;QACzF,8FAA8F;QAC9F,2FAA2F;QAC3F,0CAA0C;QAC1C,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,4CAA4C;iBACtD;aACF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACtD,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,oFAAoF;QACpF,qFAAqF;QACrF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE;gBACJ,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBACpD,WAAW;aACZ;YACD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;QACF,4FAA4F;QAC5F,8FAA8F;QAC9F,8CAA8C;QAC9C,IAAI,MAAM,uBAAuB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9D,OAAO,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;IAC/C,CAAC,CACF,CAAA;IAED,6FAA6F;IAC7F,yFAAyF;IACzF,4FAA4F;IAC5F,yEAAyE;IACzE,EAAE;IACF,8FAA8F;IAC9F,+FAA+F;IAC/F,2FAA2F;IAC3F,6FAA6F;IAC7F,gGAAgG;IAChG,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAA;QAC9E,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACpE,8FAA8F;QAC9F,+FAA+F;QAC/F,iFAAiF;QACjF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAA;QAC9E,CAAC;QACD,4FAA4F;QAC5F,4FAA4F;QAC5F,qBAAqB;QACrB,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,KAA4B,EAAE;YACpD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/artifacts/artifactSetCap.d.ts

@@ -0,0 +1,31 @@
+/** One artifact set, as the cap needs to see it. */
+export interface ArtifactSetCap {
+    /** Maximum rows the set may hold. */
+    limit: number;
+    /** Indexed COUNT of the set: no rows materialised. */
+    count(): Promise<number>;
+    /** The set OLDEST-FIRST. Materialised only when an insert could have crossed the cap. */
+    list(): Promise<{
+        id: string;
+    }[]>;
+    /** Drop one row and its bytes. */
+    remove(id: string): Promise<void>;
+}
+/**
+ * The set's size before this insert when there is room for one more, or null when it is full.
+ *
+ * The returned count is what {@link reclaimArtifactOverflow} needs afterwards, so the common path
+ * costs exactly one COUNT: a caller far below the cap never materialises a row on either side.
+ */
+export declare function reserveArtifactSlot(cap: ArtifactSetCap): Promise<number | null>;
+/**
+ * Reconcile the cap after an insert: true when `recordId` landed in the overflow tail and was
+ * rolled back, so the caller must refuse.
+ *
+ * Only runs the materialising read when the insert COULD have crossed the cap — that is, when the
+ * pre-check already sat at the edge. The set is oldest-first, so everything at or past `limit` is
+ * overflow, and only a record of the CALLER'S OWN is rolled back: a concurrent uploader's row is
+ * that request's to reject, and dropping it here would refuse one caller by deleting another's.
+ */
+export declare function reclaimArtifactOverflow(cap: ArtifactSetCap, priorCount: number, recordId: string): Promise<boolean>;
+//# sourceMappingURL=artifactSetCap.d.ts.map

package/dist/modules/artifacts/artifactSetCap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactSetCap.d.ts","sourceRoot":"","sources":["../../../src/modules/artifacts/artifactSetCap.ts"],"names":[],"mappings":"AAgBA,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,yFAAyF;IACzF,IAAI,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAA;IACjC,kCAAkC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGrF;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/modules/artifacts/artifactSetCap.js

@@ -0,0 +1,47 @@
+// The standing row-count bound on an artifact SET (a run's captures, a block's uploaded reference
+// designs), shared by the two upload endpoints so the two cannot drift into different bounds — or
+// into one having none.
+//
+// A bound on the byte size of each upload is not a bound on the set: a caller within every
+// per-file ceiling can still add rows without end, and both sets are read UNPAGED. The run's
+// captures are folded together with the block's uploads by `GET /api/v1/runs/{runId}/artifacts`,
+// whose contract rests on both halves being bounded by construction — so a set with a byte cap and
+// no row cap is the half that quietly withdraws that guarantee.
+//
+// Enforcement is check-then-act plus a post-insert reconcile, because there is no atomic counter
+// under either runtime: the cheap indexed COUNT rejects the steady-state case before anything is
+// buffered, and the reconcile catches the burst that raced past it. Rolling back the OVERFLOW TAIL
+// (never the oldest rows) is what makes the cap safe for a human-facing upload: an uploader is
+// told their upload was refused, rather than silently losing a design they added last week.
+/**
+ * The set's size before this insert when there is room for one more, or null when it is full.
+ *
+ * The returned count is what {@link reclaimArtifactOverflow} needs afterwards, so the common path
+ * costs exactly one COUNT: a caller far below the cap never materialises a row on either side.
+ */
+export async function reserveArtifactSlot(cap) {
+    const existing = await cap.count();
+    return existing >= cap.limit ? null : existing;
+}
+/**
+ * Reconcile the cap after an insert: true when `recordId` landed in the overflow tail and was
+ * rolled back, so the caller must refuse.
+ *
+ * Only runs the materialising read when the insert COULD have crossed the cap — that is, when the
+ * pre-check already sat at the edge. The set is oldest-first, so everything at or past `limit` is
+ * overflow, and only a record of the CALLER'S OWN is rolled back: a concurrent uploader's row is
+ * that request's to reject, and dropping it here would refuse one caller by deleting another's.
+ */
+export async function reclaimArtifactOverflow(cap, priorCount, recordId) {
+    if (priorCount + 1 < cap.limit)
+        return false;
+    const after = await cap.list();
+    if (after.length <= cap.limit)
+        return false;
+    const overflow = new Set(after.slice(cap.limit).map((row) => row.id));
+    if (!overflow.has(recordId))
+        return false;
+    await cap.remove(recordId);
+    return true;
+}
+//# sourceMappingURL=artifactSetCap.js.map

package/dist/modules/artifacts/artifactSetCap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactSetCap.js","sourceRoot":"","sources":["../../../src/modules/artifacts/artifactSetCap.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,kGAAkG;AAClG,wBAAwB;AACxB,EAAE;AACF,2FAA2F;AAC3F,6FAA6F;AAC7F,iGAAiG;AACjG,mGAAmG;AACnG,gEAAgE;AAChE,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,+FAA+F;AAC/F,4FAA4F;AAc5F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB;IAC3D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;IAClC,OAAO,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,UAAkB,EAClB,QAAgB;IAEhB,IAAI,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAC5C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/modules/publicApi/PublicApiController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicApiController.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicApiController.ts"],"names":[],"mappings":"AAwCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQ3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAoS/C,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,CAWlD"}
+{"version":3,"file":"PublicApiController.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicApiController.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQ3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAiR/C,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,CAWlD"}

package/dist/modules/publicApi/PublicApiController.js

@@ -7,10 +7,11 @@ import { streamSSE } from 'hono/streaming';
 import { personalGateForBlock, personalGateForRun } from '../providers/personalCredentialGate.js';
 import { HEADLESS_ACTIONABLE_NOTIFICATION_TYPES, notificationActEffect, } from '../notifications/notificationActions.js';
 import { authorize } from './publicApiAuth.js';
+import { toPublicService, toPublicTask } from './boardProjection.js';
 import { createTaskWithAttachments, taskCreationDeps } from './taskCreation.js';
 import { resolveTaskTypeFieldsPatch } from './taskTypeFields.js';
-import { publicRunParkSurfaces, isHeadlessInlinePipeline, isInlineOnlyPipeline, parkingRefusalMessage, PUBLIC_JOB_CANCEL_PATH, PUBLIC_TASK_STOP_PATH, } from './publicApiAdmission.js';
-import { createParkAnnouncer, isParked } from './publicApiStream.js';
+import { admissionRegistries, publicRunParkSurfaces, isHeadlessInlinePipeline, isInlineOnlyPipeline, parkingRefusalMessage, PUBLIC_JOB_CANCEL_PATH, PUBLIC_TASK_STOP_PATH, } from './publicApiAdmission.js';
+import { createParkAnnouncer, isParked, reduceRunForStream } from './publicApiStream.js';
 import { viewRunIdentity } from './runIdentityVisibility.js';
 import { decodeCursor, decodeTimeCursor, encodeCursor, internalStatusesFor, jobSortKey, mapStatus, } from './publicApiPaging.js';
 // The PUBLIC external API (`/api/v1/*`). Unlike the SPA surface it is NOT behind the user-session
@@ -87,32 +88,6 @@ function toPublicJob(execution, readerIdentity) {
         error,
     };
 }
-/** Project a board task block onto the external task resource (no block/board internals). */
-function toPublicTask(block, serviceId) {
-    return {
-        taskId: block.id,
-        serviceId,
-        title: block.title,
-        description: block.description,
-        taskType: block.taskType ?? 'feature',
-        status: block.status,
-        progress: block.progress,
-        // The public name is `runId`, one vocabulary with `publicRun.runId` and `/runs/:runId/...`;
-        // `executionId` is the internal engine name for the same id.
-        runId: block.executionId,
-        pullRequestUrl: block.pullRequest?.url ?? null,
-    };
-}
-/** Project a service frame block onto the external service resource. */
-function toPublicService(frame) {
-    return {
-        serviceId: frame.id,
-        title: frame.title,
-        description: frame.description,
-        type: frame.type,
-        status: frame.status,
-    };
-}
 /**
  * Project a task's persisted run + its block onto the RICH external run resource: per-step
  * state/progress/subtasks, the failure kind+message, and the PR (url + branch). The run's
@@ -141,6 +116,12 @@ function toPublicRun(execution, block, readerIdentity) {
                     total: s.subtasks.total,
                 }
                 : null,
+            // The step's deliverable. An EMPTY output is projected as null, matching the way
+            // `toPublicJob` reads "produced something": a step that ran and wrote nothing and a step
+            // that has not run yet are the same fact to a caller reading for a result, and the step's
+            // own `state` is what distinguishes them.
+            output: (s.output ?? '') === '' ? null : (s.output ?? null),
+            data: s.custom ?? null,
         })),
         // Who the run was started for, as pinned at admission; null for a run the app, a schedule or
         // an identity-less key started, and withheld (flagged, not blanked) from a key that acts for
@@ -162,13 +143,13 @@ function toPublicRun(execution, block, readerIdentity) {
  * `pipelineId` for `start` — `public` (job-startable via `POST /jobs`) and `headlessStartable` (safe to
  * run with no interactive user). Archived pipelines are filtered out by the caller.
  */
-function toPublicPipeline(pipeline, registry) {
+function toPublicPipeline(pipeline, registries) {
     return {
         pipelineId: pipeline.id,
         name: pipeline.name,
         steps: pipeline.agentKinds.filter((_, i) => pipeline.enabled?.[i] !== false),
         public: pipeline.public === true,
-        headlessStartable: isHeadlessInlinePipeline(pipeline, registry),
+        headlessStartable: isHeadlessInlinePipeline(pipeline, registries),
     };
 }
 /**
@@ -220,7 +201,7 @@ async function rollbackInitiativeRun(c, workspaceId, blockId) {
  * moment later.
  */
 async function unanswerableParkRefusal(container, auth, pipeline, gateInput, cancelPath) {
-    const surfaces = publicRunParkSurfaces(pipeline, container.agentKindRegistry, {
+    const surfaces = publicRunParkSurfaces(pipeline, admissionRegistries(container), {
         inputGateBlocks: await container.executionService.inputGateWouldBlock(auth.workspaceId, gateInput),
     });
     if (surfaces.length === 0 || scopeSatisfies(auth.scope, 'decide'))
@@ -928,7 +909,9 @@ function registerTaskRunStreamRoute(app) {
                 const block = await container.boardService.getServiceTask(auth.workspaceId, taskId);
                 if (!execution || !block)
                     break;
-                const runView = toPublicRun(execution, block.block, auth.externalIdentity);
+                // Reduced for the wire: the frame carries the whole run, so an oversized step deliverable
+                // would be re-sent on every change for the rest of the run. See `reduceRunForStream`.
+                const runView = reduceRunForStream(toPublicRun(execution, block.block, auth.externalIdentity));
                 const data = JSON.stringify(runView);
                 if (data !== last) {
                     await stream.writeSSE({
@@ -976,7 +959,7 @@ function registerPipelineRoutes(app) {
         return c.json({
             pipelines: pipelines
                 .filter((p) => !p.archived)
-                .map((p) => toPublicPipeline(p, container.agentKindRegistry)),
+                .map((p) => toPublicPipeline(p, admissionRegistries(container))),
         }, 200);
     });
 }