@cat-factory/server 0.321.0 → 0.323.0

package/dist/modules/publicApi/openapiDocument.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapiDocument.generated.js","sourceRoot":"","sources":["../../../src/modules/publicApi/openapiDocument.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,0FAA0F;AAC1F,8FAA8F;AAC9F,8FAA8F;AAC9F,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,i/wvBAAi/wvB,CAAA"}
+{"version":3,"file":"openapiDocument.generated.js","sourceRoot":"","sources":["../../../src/modules/publicApi/openapiDocument.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,0FAA0F;AAC1F,8FAA8F;AAC9F,8FAA8F;AAC9F,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,8y9vBAA8y9vB,CAAA"}

package/dist/modules/publicApi/publicApiAdmission.d.ts

@@ -63,25 +63,42 @@ export declare const BINARY_CANDIDATE_PARK_SURFACE = "binary-candidates";
 export declare const PUBLIC_JOB_CANCEL_PATH = "POST /api/v1/jobs/:id/cancel";
 export declare const PUBLIC_TASK_STOP_PATH = "POST /api/v1/tasks/:taskId/stop";
 /**
- * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today.
+ * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today, each mapped to the
+ * `decisions[]` entry that answers it.
  *
- * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between the
- * two is the thing worth stating: admission decides what a `decide` key may set in motion, and
+ * Deliberately a SEPARATE table from {@link PARKING_INLINE_KINDS}, because the asymmetry between
+ * the two is the thing worth stating: admission decides what a `decide` key may set in motion, and
  * this decides what the refusal is allowed to PROMISE it can then answer.
  *
  * Keeping the answerable set EXPLICIT rather than implied is what stops the refusal below drifting
- * from what the surface really serves: landing a slice moves a member here and the message it
+ * from what the surface really serves: landing a slice adds a member here and the message it
  * builds updates itself, where a hand-written sentence would keep promising an answer path that
  * does not exist — which is exactly the defect this replaced.
  *
- * TWO members of {@link parkSurfacesOf} are absent, for opposite reasons. `human-review` is not a
- * slice waiting to be built: its answer is a person approving the pull request on the VCS host,
- * not an API call this surface could offer. {@link BINARY_CANDIDATE_PARK_SURFACE} is the other
- * way round, a real route not yet projected onto `/api/v1`. Either way a run parked there is
- * honestly reported as `parked: true` with nothing to answer and the refusal says as much. See
+ * A MAP rather than a set, because a park surface and the decision kind that answers it are not
+ * always spelled the same, and the refusal is read by somebody who then has to FIND the entry:
+ * the `pr-reviewer` step is answered by `kind: 'pr-review'`, and both brainstorm kinds are
+ * answered by the one `kind: 'brainstorm'`. Naming the surface in a message that points at
+ * `decisions[]` sent an integration looking for a kind that is never in it. The values are typed
+ * against {@link PublicDecisionKind}, so a kind that does not exist on the wire fails to compile
+ * and a decision kind renamed on that side breaks the build here rather than the message.
+ *
+ * THREE members of {@link parkSurfacesOf} are absent, for three different reasons:
+ *
+ *  - `human-review` is not a slice waiting to be built: its answer is a person approving the pull
+ *    request on the VCS host, not an API call this surface could offer.
+ *  - {@link BINARY_CANDIDATE_PARK_SURFACE} is the other way round, a real route not yet projected
+ *    onto `/api/v1`.
+ *  - `bug-fisher` (a curating kind, like `pr-reviewer` below, which IS here) parks so a person can
+ *    mark which of the bugs it found are worth fixing, and marking has no public route at all yet.
+ *
+ * Either way a run parked there is honestly reported as `parked: true` with the wait NAMED in
+ * `unanswerable` and nothing offered to answer it, and the refusal says as much. That report is
+ * built from THIS table too (`curationWait`), so what the start surface refuses and what the
+ * decision surface admits it cannot answer are one decision. See
  * `backend/docs/adr/0043-public-decision-surface.md`.
  */
-export declare const PUBLICLY_ANSWERABLE_PARK_SURFACES: Set<string>;
+export declare const PUBLICLY_ANSWERABLE_PARK_SURFACES: Map<string, "agent-decision" | "approval-gate" | "brainstorm" | "clarity-review" | "follow-ups" | "fork" | "human-test" | "input-gate" | "interview" | "judge" | "pr-review" | "requirements-review" | "visual-confirmation">;
 /** The pipeline shape admission reasons about: the step chain plus its parallel flag arrays. */
 export interface AdmissiblePipelineShape {
     agentKinds: string[];
@@ -135,14 +152,15 @@ export declare function admissionRegistries(source: {
 }): AdmissionRegistries;
 /**
  * Whether a pipeline can PARK the run on a human decision: an approval gate on an enabled step, one
- * of the {@link PARKING_INLINE_KINDS} review/brainstorm kinds, or a gate that waits on a person
- * with no deadline ({@link isHumanWaitGate}). Parking is not a defect: it is the clarification
- * loop. It just needs an answerer, which is what the `decide` scope asserts.
+ * of the {@link PARKING_INLINE_KINDS} review/brainstorm kinds, a gate that waits on a person with
+ * no deadline ({@link isHumanWaitGate}), or a step that curates ({@link isCurationGate}). Parking
+ * is not a defect: it is the clarification loop. It just needs an answerer, which is what the
+ * `decide` scope asserts.
  */
 export declare function canParkOnHuman(pipeline: AdmissiblePipelineShape, registries: AdmissionRegistries): boolean;
 /**
  * Every park surface an ENABLED step of `pipeline` can put the run on, in step order and deduped.
- * Five mechanisms, each a separate check because each parks for a different reason:
+ * Six mechanisms, each a separate check because each parks for a different reason:
  *
  *  1. an approval gate flag on the step ({@link APPROVAL_GATE_PARK_SURFACE});
  *  2. the step's own kind being an inline review/brainstorm ({@link PARKING_INLINE_KINDS});
@@ -150,19 +168,24 @@ export declare function canParkOnHuman(pipeline: AdmissiblePipelineShape, regist
  *     ({@link isHumanWaitGate});
  *  4. the step's own kind carrying the `interview-gate` TRAIT ({@link INTERVIEW_PARK_SURFACE});
  *  5. the step's OPTIONS configuring a binary-candidate comparison
- *     ({@link BINARY_CANDIDATE_PARK_SURFACE}).
+ *     ({@link BINARY_CANDIDATE_PARK_SURFACE});
+ *  6. the step's own kind carrying the `curation-gate` TRAIT ({@link isCurationGate}).
  *
  * This is the single enumeration {@link canParkOnHuman} derives its boolean from, so the predicate
  * and the explanation a caller is given can never disagree about what parks.
  *
- * Cases 4 and 5 each arrived after the earlier ones had shipped, which is the lesson the human-wait
- * gates already taught repeating itself: an enumeration written against the park mechanisms
- * somebody thought of misses the ones they did not, so ask what each entry is DERIVED from. Cases
- * 2, 3 and 4 derive from a declaration a deployment's own registrations flow through (a kind list,
- * a gate's registered `pollExhaustion`, a registered trait). Case 5 derives from the step's stored
- * configuration, which is the same property one level down: it is what a deployment AUTHORS rather
- * than what it registers, and it was invisible here until a shipped preset finally set it.
- * Whatever is added next should be derivable too.
+ * Cases 4, 5 and 6 each arrived after the earlier ones had shipped, which is the lesson the
+ * human-wait gates already taught repeating itself: an enumeration written against the park
+ * mechanisms somebody thought of misses the ones they did not, so ask what each entry is DERIVED
+ * from. Cases 2, 3, 4 and 6 derive from a declaration a deployment's own registrations flow
+ * through (a kind list, a gate's registered `pollExhaustion`, a registered trait). Case 5 derives
+ * from the step's stored configuration, which is the same property one level down: it is what a
+ * deployment AUTHORS rather than what it registers, and it was invisible here until a shipped
+ * preset finally set it. Whatever is added next should be derivable too.
+ *
+ * Case 6 is the one that had been missed LONGEST, and the shape of the miss is worth keeping: the
+ * two kinds that carry it park through machinery of their OWN rather than through anything shared,
+ * so there was no declaration to read until the trait was added to make one.
  *
  * TWO THINGS ARE DELIBERATELY NOT HERE, and they are absent for two different reasons:
  *
@@ -192,10 +215,17 @@ export declare function parkSurfacesOf(pipeline: AdmissiblePipelineShape, regist
  * got a run whose only exit is `POST /api/v1/jobs/:id/cancel` — the platform's degrade-loudly rule
  * inverted, since the refusal was confidently describing a capability it does not have.
  *
- * Both public start paths apply the parking rule now: `POST /jobs` always has, and
- * `POST /tasks/:taskId/start` adopted it with the API-stability commitment (the tracker's open
- * question, settled): a `write` key must not be able to set in motion a park it is by definition
- * not trusted to answer.
+ * Every public path that sets a run in motion applies the parking rule now: `POST /jobs` always
+ * has, `POST /tasks/:taskId/start` adopted it with the API-stability commitment (the tracker's
+ * open question, settled), and `POST /tasks/:taskId/retry` re-drives the run's STORED steps under
+ * the same rule. A `write` key must not be able to set in motion a park it is by definition not
+ * trusted to answer, and which of the three calls started it makes no difference to that.
+ *
+ * The park surfaces are listed verbatim (they are what a reader matches against the pipeline's own
+ * steps) while the answer promise names DECISION KINDS, out of
+ * {@link PUBLICLY_ANSWERABLE_PARK_SURFACES}. Three surfaces are spelled differently in the two
+ * places, so naming the surface in a sentence that points at `decisions[]` told an integration to
+ * look for a `pr-reviewer` entry that is never there.
  *
  * `cancelPath` is REQUIRED rather than defaulted, because which route frees an abandoned park is a
  * property of the START SURFACE and every surface answers differently: a headless job is cancelled

package/dist/modules/publicApi/publicApiAdmission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAdmission.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,iBAAiB,EAQvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,aAK/B,CAAA;AASF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAA;AAuBnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,6BAA6B,sBAAsB,CAAA;AA8BhE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iCAAiC,aAQ5C,CAAA;AAEF,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;IACjB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,SAAS,CAAC;QAAE,YAAY,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAA;CACjG;AASD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAIT;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,UAAU,EAAE,iBAAiB,CAAA;IAC7B,2GAA2G;IAC3G,KAAK,EAAE,YAAY,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,YAAY,EAAE,YAAY,CAAA;CAC3B,GAAG,mBAAmB,CAEtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,MAAM,EAAE,CAeV;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgBjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,EAC/B,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,GACpC,MAAM,EAAE,CAKV;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAIT"}
+{"version":3,"file":"publicApiAdmission.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,iBAAiB,EAUvB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,aAK/B,CAAA;AASF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAA;AAuBnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,6BAA6B,sBAAsB,CAAA;AAkDhE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,iCAAiC,+NAW5C,CAAA;AAEF,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;IACjB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,SAAS,CAAC;QAAE,YAAY,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,CAAA;CACjG;AASD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAIT;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,UAAU,EAAE,iBAAiB,CAAA;IAC7B,2GAA2G;IAC3G,KAAK,EAAE,YAAY,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,YAAY,EAAE,YAAY,CAAA;CAC3B,GAAG,mBAAmB,CAEtB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,MAAM,EAAE,CAwBV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA2BjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,EAC/B,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,GACpC,MAAM,EAAE,CAKV;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAIT"}

package/dist/modules/publicApi/publicApiAdmission.js

@@ -10,7 +10,7 @@
 // cross-runtime conformance suite.
 //
 // See backend/docs/adr/0047-headless-clarification-loop.md (D1).
-import { ARCHITECTURE_BRAINSTORM_AGENT_KIND, CLARITY_REVIEW_AGENT_KIND, hasTrait, INTERVIEW_GATE_TRAIT, isInlineModelStep, REQUIREMENTS_BRAINSTORM_AGENT_KIND, REQUIREMENTS_REVIEW_AGENT_KIND, } from '@cat-factory/agents';
+import { ARCHITECTURE_BRAINSTORM_AGENT_KIND, CLARITY_REVIEW_AGENT_KIND, CURATION_GATE_TRAIT, INTERVIEW_GATE_TRAIT, isInlineModelStep, PR_REVIEWER_KIND, REQUIREMENTS_BRAINSTORM_AGENT_KIND, REQUIREMENTS_REVIEW_AGENT_KIND, traitsFor, } from '@cat-factory/agents';
 /**
  * Inline agent kinds that PARK a run on a human/gate decision. This MUST list every
  * inline-and-parking kind: the two review gates AND the two brainstorm dialogues (all four set the
@@ -96,6 +96,25 @@ const INTERVIEW_PARK_SURFACE = 'interview';
  * Over-counting is the safe direction here, the same way the interview gate's is.
  */
 export const BINARY_CANDIDATE_PARK_SURFACE = 'binary-candidates';
+/**
+ * Whether a step's kind CURATES: its completion parks the run so a person can pick which of the
+ * things it found are worth acting on, read off the kind's registered `curation-gate` trait.
+ *
+ * A SIXTH mechanism, and the one that shows the enumeration's lesson has not run out. Every check
+ * above reads a park the engine raises through shared machinery (an approval flag, an inline
+ * review, a gate's `pollExhaustion`, an interview gate, a step option). A curation step raises its
+ * own: each kind's completion interceptor writes its own state shape (`step.prReview`,
+ * `step.bugFishing`) and parks from there, so there was no shared declaration to read and the park
+ * was invisible here. `pl_review` and `pl_bug_fishing` are single-step pipelines built out of
+ * exactly those kinds, so both reported NO park surface and a plain `write` key could start either
+ * and then hold a run whose every verb needs `decide`.
+ *
+ * Derived from a registration rather than a kind list, like the interview gate and for the same
+ * reason: a deployment that curates through its own registered kind is seen with no edit here.
+ */
+function isCurationGate(traits) {
+    return traits.has(CURATION_GATE_TRAIT);
+}
 /**
  * Whether a polling-GATE kind parks the run on a human, read off the gate's OWN registration.
  *
@@ -132,32 +151,52 @@ function isHumanWaitGate(kind, gates) {
 export const PUBLIC_JOB_CANCEL_PATH = 'POST /api/v1/jobs/:id/cancel';
 export const PUBLIC_TASK_STOP_PATH = 'POST /api/v1/tasks/:taskId/stop';
 /**
- * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today.
+ * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today, each mapped to the
+ * `decisions[]` entry that answers it.
  *
- * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between the
- * two is the thing worth stating: admission decides what a `decide` key may set in motion, and
+ * Deliberately a SEPARATE table from {@link PARKING_INLINE_KINDS}, because the asymmetry between
+ * the two is the thing worth stating: admission decides what a `decide` key may set in motion, and
  * this decides what the refusal is allowed to PROMISE it can then answer.
  *
  * Keeping the answerable set EXPLICIT rather than implied is what stops the refusal below drifting
- * from what the surface really serves: landing a slice moves a member here and the message it
+ * from what the surface really serves: landing a slice adds a member here and the message it
  * builds updates itself, where a hand-written sentence would keep promising an answer path that
  * does not exist — which is exactly the defect this replaced.
  *
- * TWO members of {@link parkSurfacesOf} are absent, for opposite reasons. `human-review` is not a
- * slice waiting to be built: its answer is a person approving the pull request on the VCS host,
- * not an API call this surface could offer. {@link BINARY_CANDIDATE_PARK_SURFACE} is the other
- * way round, a real route not yet projected onto `/api/v1`. Either way a run parked there is
- * honestly reported as `parked: true` with nothing to answer and the refusal says as much. See
+ * A MAP rather than a set, because a park surface and the decision kind that answers it are not
+ * always spelled the same, and the refusal is read by somebody who then has to FIND the entry:
+ * the `pr-reviewer` step is answered by `kind: 'pr-review'`, and both brainstorm kinds are
+ * answered by the one `kind: 'brainstorm'`. Naming the surface in a message that points at
+ * `decisions[]` sent an integration looking for a kind that is never in it. The values are typed
+ * against {@link PublicDecisionKind}, so a kind that does not exist on the wire fails to compile
+ * and a decision kind renamed on that side breaks the build here rather than the message.
+ *
+ * THREE members of {@link parkSurfacesOf} are absent, for three different reasons:
+ *
+ *  - `human-review` is not a slice waiting to be built: its answer is a person approving the pull
+ *    request on the VCS host, not an API call this surface could offer.
+ *  - {@link BINARY_CANDIDATE_PARK_SURFACE} is the other way round, a real route not yet projected
+ *    onto `/api/v1`.
+ *  - `bug-fisher` (a curating kind, like `pr-reviewer` below, which IS here) parks so a person can
+ *    mark which of the bugs it found are worth fixing, and marking has no public route at all yet.
+ *
+ * Either way a run parked there is honestly reported as `parked: true` with the wait NAMED in
+ * `unanswerable` and nothing offered to answer it, and the refusal says as much. That report is
+ * built from THIS table too (`curationWait`), so what the start surface refuses and what the
+ * decision surface admits it cannot answer are one decision. See
  * `backend/docs/adr/0043-public-decision-surface.md`.
  */
-export const PUBLICLY_ANSWERABLE_PARK_SURFACES = new Set([
-    REQUIREMENTS_REVIEW_AGENT_KIND,
-    CLARITY_REVIEW_AGENT_KIND,
-    REQUIREMENTS_BRAINSTORM_AGENT_KIND,
-    ARCHITECTURE_BRAINSTORM_AGENT_KIND,
-    INPUT_GATE_PARK_SURFACE,
-    APPROVAL_GATE_PARK_SURFACE,
-    INTERVIEW_PARK_SURFACE,
+export const PUBLICLY_ANSWERABLE_PARK_SURFACES = new Map([
+    [REQUIREMENTS_REVIEW_AGENT_KIND, 'requirements-review'],
+    [CLARITY_REVIEW_AGENT_KIND, 'clarity-review'],
+    [REQUIREMENTS_BRAINSTORM_AGENT_KIND, 'brainstorm'],
+    [ARCHITECTURE_BRAINSTORM_AGENT_KIND, 'brainstorm'],
+    [INPUT_GATE_PARK_SURFACE, 'input-gate'],
+    [APPROVAL_GATE_PARK_SURFACE, 'approval-gate'],
+    [INTERVIEW_PARK_SURFACE, 'interview'],
+    // The PR deep review's finding curation: `…/decisions/pr-review/resolve` (finish / fix / post),
+    // plus per-finding dismiss, challenge and resume.
+    [PR_REVIEWER_KIND, 'pr-review'],
 ]);
 /** The enabled steps of a pipeline, paired with their ORIGINAL index (gates are index-aligned). */
 function enabledSteps(pipeline) {
@@ -189,16 +228,17 @@ export function admissionRegistries(source) {
 }
 /**
  * Whether a pipeline can PARK the run on a human decision: an approval gate on an enabled step, one
- * of the {@link PARKING_INLINE_KINDS} review/brainstorm kinds, or a gate that waits on a person
- * with no deadline ({@link isHumanWaitGate}). Parking is not a defect: it is the clarification
- * loop. It just needs an answerer, which is what the `decide` scope asserts.
+ * of the {@link PARKING_INLINE_KINDS} review/brainstorm kinds, a gate that waits on a person with
+ * no deadline ({@link isHumanWaitGate}), or a step that curates ({@link isCurationGate}). Parking
+ * is not a defect: it is the clarification loop. It just needs an answerer, which is what the
+ * `decide` scope asserts.
  */
 export function canParkOnHuman(pipeline, registries) {
     return parkSurfacesOf(pipeline, registries).length > 0;
 }
 /**
  * Every park surface an ENABLED step of `pipeline` can put the run on, in step order and deduped.
- * Five mechanisms, each a separate check because each parks for a different reason:
+ * Six mechanisms, each a separate check because each parks for a different reason:
  *
  *  1. an approval gate flag on the step ({@link APPROVAL_GATE_PARK_SURFACE});
  *  2. the step's own kind being an inline review/brainstorm ({@link PARKING_INLINE_KINDS});
@@ -206,19 +246,24 @@ export function canParkOnHuman(pipeline, registries) {
  *     ({@link isHumanWaitGate});
  *  4. the step's own kind carrying the `interview-gate` TRAIT ({@link INTERVIEW_PARK_SURFACE});
  *  5. the step's OPTIONS configuring a binary-candidate comparison
- *     ({@link BINARY_CANDIDATE_PARK_SURFACE}).
+ *     ({@link BINARY_CANDIDATE_PARK_SURFACE});
+ *  6. the step's own kind carrying the `curation-gate` TRAIT ({@link isCurationGate}).
  *
  * This is the single enumeration {@link canParkOnHuman} derives its boolean from, so the predicate
  * and the explanation a caller is given can never disagree about what parks.
  *
- * Cases 4 and 5 each arrived after the earlier ones had shipped, which is the lesson the human-wait
- * gates already taught repeating itself: an enumeration written against the park mechanisms
- * somebody thought of misses the ones they did not, so ask what each entry is DERIVED from. Cases
- * 2, 3 and 4 derive from a declaration a deployment's own registrations flow through (a kind list,
- * a gate's registered `pollExhaustion`, a registered trait). Case 5 derives from the step's stored
- * configuration, which is the same property one level down: it is what a deployment AUTHORS rather
- * than what it registers, and it was invisible here until a shipped preset finally set it.
- * Whatever is added next should be derivable too.
+ * Cases 4, 5 and 6 each arrived after the earlier ones had shipped, which is the lesson the
+ * human-wait gates already taught repeating itself: an enumeration written against the park
+ * mechanisms somebody thought of misses the ones they did not, so ask what each entry is DERIVED
+ * from. Cases 2, 3, 4 and 6 derive from a declaration a deployment's own registrations flow
+ * through (a kind list, a gate's registered `pollExhaustion`, a registered trait). Case 5 derives
+ * from the step's stored configuration, which is the same property one level down: it is what a
+ * deployment AUTHORS rather than what it registers, and it was invisible here until a shipped
+ * preset finally set it. Whatever is added next should be derivable too.
+ *
+ * Case 6 is the one that had been missed LONGEST, and the shape of the miss is worth keeping: the
+ * two kinds that carry it park through machinery of their OWN rather than through anything shared,
+ * so there was no declaration to read until the trait was added to make one.
  *
  * TWO THINGS ARE DELIBERATELY NOT HERE, and they are absent for two different reasons:
  *
@@ -245,9 +290,19 @@ export function parkSurfacesOf(pipeline, registries) {
         if (PARKING_INLINE_KINDS.has(kind) || isHumanWaitGate(kind, registries.gates)) {
             surfaces.add(kind);
         }
-        if (hasTrait(kind, INTERVIEW_GATE_TRAIT, registries.agentKinds)) {
+        // Resolved ONCE per step: `traitsFor` unions the kind's standard traits, its registration's
+        // own and any assigned to it into a fresh Set on every call, and two trait questions asking it
+        // twice doubles that per step of every pipeline the discovery list projects.
+        const traits = traitsFor(kind, registries.agentKinds);
+        if (traits.has(INTERVIEW_GATE_TRAIT)) {
             surfaces.add(INTERVIEW_PARK_SURFACE);
         }
+        // Named by the KIND, the way the inline review/brainstorm kinds are, rather than by one shared
+        // label: what a caller has to be able to answer differs per curation kind (a PR review's
+        // findings have public verbs, an expedition's catch does not), so collapsing them would make
+        // the refusal promise an answer path for whichever one it did not mean.
+        if (isCurationGate(traits))
+            surfaces.add(kind);
         if (pipeline.stepOptions?.[i]?.binaryOutput?.comparison) {
             surfaces.add(BINARY_CANDIDATE_PARK_SURFACE);
         }
@@ -264,10 +319,17 @@ export function parkSurfacesOf(pipeline, registries) {
  * got a run whose only exit is `POST /api/v1/jobs/:id/cancel` — the platform's degrade-loudly rule
  * inverted, since the refusal was confidently describing a capability it does not have.
  *
- * Both public start paths apply the parking rule now: `POST /jobs` always has, and
- * `POST /tasks/:taskId/start` adopted it with the API-stability commitment (the tracker's open
- * question, settled): a `write` key must not be able to set in motion a park it is by definition
- * not trusted to answer.
+ * Every public path that sets a run in motion applies the parking rule now: `POST /jobs` always
+ * has, `POST /tasks/:taskId/start` adopted it with the API-stability commitment (the tracker's
+ * open question, settled), and `POST /tasks/:taskId/retry` re-drives the run's STORED steps under
+ * the same rule. A `write` key must not be able to set in motion a park it is by definition not
+ * trusted to answer, and which of the three calls started it makes no difference to that.
+ *
+ * The park surfaces are listed verbatim (they are what a reader matches against the pipeline's own
+ * steps) while the answer promise names DECISION KINDS, out of
+ * {@link PUBLICLY_ANSWERABLE_PARK_SURFACES}. Three surfaces are spelled differently in the two
+ * places, so naming the surface in a sentence that points at `decisions[]` told an integration to
+ * look for a `pr-reviewer` entry that is never there.
  *
  * `cancelPath` is REQUIRED rather than defaulted, because which route frees an abandoned park is a
  * property of the START SURFACE and every surface answers differently: a headless job is cancelled
@@ -279,7 +341,16 @@ export function parkSurfacesOf(pipeline, registries) {
  */
 export function parkingRefusalMessage(surfaces, options) {
     const { cancelPath } = options;
-    const answerable = surfaces.filter((s) => PUBLICLY_ANSWERABLE_PARK_SURFACES.has(s));
+    // The ANSWERABLE half is named by DECISION KIND, deduped, because the sentence points a caller
+    // at `decisions[]` and that is the field it will look the entry up by. The surfaces are still
+    // listed verbatim in the first sentence, which is where a reader matches the message against
+    // the pipeline's own step chain.
+    const answerable = [
+        ...new Set(surfaces.flatMap((s) => {
+            const kind = PUBLICLY_ANSWERABLE_PARK_SURFACES.get(s);
+            return kind ? [kind] : [];
+        })),
+    ];
     const unanswerable = surfaces.filter((s) => !PUBLICLY_ANSWERABLE_PARK_SURFACES.has(s));
     const parts = [`This pipeline can park on a human decision (${surfaces.join(', ')}).`];
     parts.push(answerable.length > 0

package/dist/modules/publicApi/publicApiAdmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAdmission.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0FAA0F;AAC1F,mCAAmC;AACnC,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,mCAAmC;AACnC,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAEL,kCAAkC,EAClC,yBAAyB,EACzB,QAAQ,EACR,oBAAoB,EACpB,iBAAiB,EACjB,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAG5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;CACnC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,eAAe,CAAA;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAA;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,sBAAsB,GAAG,WAAW,CAAA;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAA;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAmB;IACxD,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,OAAO,CAAA;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAS;IAC/D,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;IAClC,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;CACvB,CAAC,CAAA;AAqBF,mGAAmG;AACnG,SAAS,YAAY,CAAC,QAAiC;IACrD,OAAO,QAAQ,CAAC,UAAU;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/B,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,QAA2B;IAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvE,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAGnC;IACC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAiC,EACjC,UAA+B;IAE/B,OAAO,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAiC,EACjC,UAA+B;IAE/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;QACjE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,OAA+B;IACvF,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,CAAC,+CAA+C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,wDAAwD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACxH,CAAC,CAAC,yCAAyC,CAC9C,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,6CAA6C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,UAAU,GAAG,CACnK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,UAA+B,EAC/B,OAAqC;IAErC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACrD,6FAA6F;IAC7F,uEAAuE;IACvE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiC,EACjC,UAA+B;IAE/B,OAAO,CACL,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAC/F,CAAA;AACH,CAAC"}
+{"version":3,"file":"publicApiAdmission.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0FAA0F;AAC1F,mCAAmC;AACnC,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,mCAAmC;AACnC,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAEL,kCAAkC,EAClC,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,kCAAkC,EAClC,8BAA8B,EAC9B,SAAS,GACV,MAAM,qBAAqB,CAAA;AAK5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;CACnC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,eAAe,CAAA;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAA;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,sBAAsB,GAAG,WAAW,CAAA;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAA;AAEhE;;;;;;;;;;;;;;;GAeG;AACH,SAAS,cAAc,CAAC,MAA+B;IACrD,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAmB;IACxD,OAAO,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,OAAO,CAAA;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAA6B;IACnF,CAAC,8BAA8B,EAAE,qBAAqB,CAAC;IACvD,CAAC,yBAAyB,EAAE,gBAAgB,CAAC;IAC7C,CAAC,kCAAkC,EAAE,YAAY,CAAC;IAClD,CAAC,kCAAkC,EAAE,YAAY,CAAC;IAClD,CAAC,uBAAuB,EAAE,YAAY,CAAC;IACvC,CAAC,0BAA0B,EAAE,eAAe,CAAC;IAC7C,CAAC,sBAAsB,EAAE,WAAW,CAAC;IACrC,gGAAgG;IAChG,kDAAkD;IAClD,CAAC,gBAAgB,EAAE,WAAW,CAAC;CAChC,CAAC,CAAA;AAqBF,mGAAmG;AACnG,SAAS,YAAY,CAAC,QAAiC;IACrD,OAAO,QAAQ,CAAC,UAAU;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/B,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,QAA2B;IAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvE,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAGnC;IACC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAiC,EACjC,UAA+B;IAE/B,OAAO,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAiC,EACjC,UAA+B;IAE/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;QACjE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;QACD,4FAA4F;QAC5F,+FAA+F;QAC/F,6EAA6E;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;QACrD,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACtC,CAAC;QACD,+FAA+F;QAC/F,yFAAyF;QACzF,6FAA6F;QAC7F,wEAAwE;QACxE,IAAI,cAAc,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,OAA+B;IACvF,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,+FAA+F;IAC/F,8FAA8F;IAC9F,6FAA6F;IAC7F,iCAAiC;IACjC,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,GAAG,CACR,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACrD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3B,CAAC,CAAC,CACH;KACF,CAAA;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,CAAC,+CAA+C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,wDAAwD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACxH,CAAC,CAAC,yCAAyC,CAC9C,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,6CAA6C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,UAAU,GAAG,CACnK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,UAA+B,EAC/B,OAAqC;IAErC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACrD,6FAA6F;IAC7F,uEAAuE;IACvE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiC,EACjC,UAA+B;IAE/B,OAAO,CACL,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAC/F,CAAA;AACH,CAAC"}

package/dist/modules/sandbox/SandboxController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SandboxController.d.ts","sourceRoot":"","sources":["../../../src/modules/sandbox/SandboxController.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAU/C;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,CAkHhD"}
+{"version":3,"file":"SandboxController.d.ts","sourceRoot":"","sources":["../../../src/modules/sandbox/SandboxController.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAU/C;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,CAwHhD"}

package/dist/modules/sandbox/SandboxController.js

@@ -89,7 +89,10 @@ export function sandboxController() {
     // Run + grade every cell of the experiment, then return the full result grid.
     buildHonoRoute(app, launchSandboxExperimentContract, async (c) => {
         const sandbox = requireSandbox(c);
-        return c.json(await sandbox.runService.launch(param(c, 'workspaceId'), c.req.valid('param').experimentId), 200);
+        return c.json(
+        // The launcher, so every cell's model call draws on their credential tier too: an
+        // experiment has no run, so this is the only tier beyond the workspace it can carry.
+        await sandbox.runService.launch(param(c, 'workspaceId'), c.req.valid('param').experimentId, c.get('user')?.id), 200);
     });
     return app;
 }

package/dist/modules/sandbox/SandboxController.js.map

@@ -1 +1 @@
-{"version":3,"file":"SandboxController.js","sourceRoot":"","sources":["../../../src/modules/sandbox/SandboxController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,4BAA4B,EAC5B,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,gFAAgF;AAChF,SAAS,cAAc,CAAmB,CAAa;IACrD,OAAO,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAA;AACvF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAC9B,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAElE,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACxE,gFAAgF;QAChF,oFAAoF;QACpF,OAAO,CAAC,CAAC,IAAI,CACX;YACE,GAAG,QAAQ;YACX,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,GAAG,IAAI;gBACP,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;SACJ,EACD,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAA;QAChD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC7C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CACjD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,CACvD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CACjC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CAClC,EACD,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,EAC3F,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"SandboxController.js","sourceRoot":"","sources":["../../../src/modules/sandbox/SandboxController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,4BAA4B,EAC5B,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAExD,gFAAgF;AAChF,SAAS,cAAc,CAAmB,CAAa;IACrD,OAAO,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAA;AACvF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAC9B,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAElE,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACxE,gFAAgF;QAChF,oFAAoF;QACpF,OAAO,CAAC,CAAC,IAAI,CACX;YACE,GAAG,QAAQ;YACX,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,GAAG,IAAI;gBACP,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC;SACJ,EACD,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAA;QAChD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC7C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CACjD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,CACvD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CACjC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CAClC,EACD,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QACjC,OAAO,CAAC,CAAC,IAAI;QACX,kFAAkF;QAClF,qFAAqF;QACrF,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAC7B,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,EACjC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAClB,EACD,GAAG,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/persistence/rpc-allowlist.d.ts

@@ -13,7 +13,7 @@ import type { PersistenceMethodTable } from './rpc.js';
  *
  * Still EXCLUDED (added in later gate slices, with their own scope rules, or kept
  * mothership-internal):
- *   - `subscriptionActivationRepository.deleteByExecution` — the activation row is the local
+ *   - `subscriptionActivationRepository.deleteByScope`: the activation row is the local
  *     `node:sqlite` bucket (per the per-repo checklist), not the remote surface, so it is not
  *     exposed here.
  *   - Global sweeper methods (`listStale`, `deleteOlderThan`) and high-impact unscoped ops

package/dist/persistence/rpc-allowlist.js

@@ -27,7 +27,7 @@ import { VCS_PERSISTENCE_METHODS } from './rpc-allowlist-vcs.js';
  *
  * Still EXCLUDED (added in later gate slices, with their own scope rules, or kept
  * mothership-internal):
- *   - `subscriptionActivationRepository.deleteByExecution` — the activation row is the local
+ *   - `subscriptionActivationRepository.deleteByScope`: the activation row is the local
  *     `node:sqlite` bucket (per the per-repo checklist), not the remote surface, so it is not
  *     exposed here.
  *   - Global sweeper methods (`listStale`, `deleteOlderThan`) and high-impact unscoped ops

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/server",
-  "version": "0.321.0",
+  "version": "0.323.0",
   "description": "Runtime-neutral HTTP layer for the Agent Architecture Board: the Hono controllers, middleware (auth/authz/CORS/error), request helpers and the gateway seams shared by every deployment facade (Cloudflare Worker, Node service).",
   "repository": {
     "type": "git",
@@ -24,13 +24,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@cat-factory/agents": "0.163.0",
-    "@cat-factory/contracts": "0.352.0",
-    "@cat-factory/integrations": "0.172.16",
-    "@cat-factory/kernel": "0.345.0",
-    "@cat-factory/mcp-server": "0.49.3",
-    "@cat-factory/orchestration": "0.309.0",
-    "@cat-factory/spend": "0.21.5",
+    "@cat-factory/agents": "0.165.0",
+    "@cat-factory/contracts": "0.353.0",
+    "@cat-factory/integrations": "0.173.1",
+    "@cat-factory/kernel": "0.346.1",
+    "@cat-factory/mcp-server": "0.50.0",
+    "@cat-factory/orchestration": "0.311.0",
+    "@cat-factory/spend": "0.21.7",
     "@toad-contracts/core": "0.4.0",
     "@toad-contracts/hono": "0.3.2",
     "@toad-contracts/valibot": "0.5.0",