core-runtime 0.1.6__tar.gz → 2.6.0__tar.gz

{core_runtime-0.1.6 → core_runtime-2.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: core-runtime
-Version: 0.1.6
+Version: 2.6.0
 Summary: CORE: executable constitutional governance for AI-assisted software development.
 Home-page: https://github.com/DariuszNewecki/CORE
 License: MIT
@@ -8,7 +8,7 @@ Keywords: governance,audit,ci,constitutional,software-factory,code-quality,inten
 Author: Dariusz Newecki
 Author-email: d.newecki@gmail.com
 Requires-Python: >=3.12,<4.0
-Classifier: Development Status :: 3 - Alpha
+Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: Information Technology
 Classifier: License :: OSI Approved :: MIT License
@@ -62,10 +62,12 @@ Description-Content-Type: text/markdown
 > Designed for environments where AI action traceability is not optional.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v0.1.2-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.5.0-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 [![Autonomy](https://img.shields.io/badge/Autonomy-A3-blue)](https://github.com/DariuszNewecki/CORE/issues/106)
 
+*Versioning: SemVer with `2.x` denoting an API approaching stability (Beta on PyPI); see [ADR-088](.specs/decisions/ADR-088-pypi-version-alignment.md) for the policy.*
+
 ---
 
 ## The Problem
@@ -281,7 +283,7 @@ A4 — Self-Replication     🔮  Writes CORE.NG from its own understanding of i
 
 | Dependency  | Version      |
 |-------------|--------------|
-| Python      | ≥ 3.11       |
+| Python      | 3.12+        |
 | PostgreSQL  | ≥ 14         |
 | Qdrant      | latest       |
 | Docker      | for services |

{core_runtime-0.1.6 → core_runtime-2.6.0}/README.md

@@ -5,10 +5,12 @@
 > Designed for environments where AI action traceability is not optional.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/Release-v0.1.2-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Release](https://img.shields.io/badge/Release-v2.5.0-blue)](https://github.com/DariuszNewecki/CORE/releases)
 [![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
 [![Autonomy](https://img.shields.io/badge/Autonomy-A3-blue)](https://github.com/DariuszNewecki/CORE/issues/106)
 
+*Versioning: SemVer with `2.x` denoting an API approaching stability (Beta on PyPI); see [ADR-088](.specs/decisions/ADR-088-pypi-version-alignment.md) for the policy.*
+
 ---
 
 ## The Problem
@@ -224,7 +226,7 @@ A4 — Self-Replication     🔮  Writes CORE.NG from its own understanding of i
 
 | Dependency  | Version      |
 |-------------|--------------|
-| Python      | ≥ 3.11       |
+| Python      | 3.12+        |
 | PostgreSQL  | ≥ 14         |
 | Qdrant      | latest       |
 | Docker      | for services |

{core_runtime-0.1.6 → core_runtime-2.6.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.poetry]
 name = "core-runtime"
-version = "0.1.6"
+version = "2.6.0"
 description = "CORE: executable constitutional governance for AI-assisted software development."
 authors = ["Dariusz Newecki <d.newecki@gmail.com>"]
 license = "MIT"
@@ -24,7 +24,7 @@ keywords = [
     "llm",
 ]
 classifiers = [
-    "Development Status :: 3 - Alpha",
+    "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "Intended Audience :: Information Technology",
     "License :: OSI Approved :: MIT License",

core_runtime-2.6.0/src/api/__init__.py

@@ -0,0 +1,16 @@
+# src/api/__init__.py
+"""
+`api` — FastAPI routes and dependency providers.
+
+The public surface of ``api`` is the HTTP API governed by ADR-087, not
+Python imports. No symbols are re-exported from this package — consumers
+integrate via HTTP, not via ``from api import ...``.
+
+Future surface (additional `__all__` entries) is gated on ADR-shaped
+promotions per ADR-084 D4 (runtime fork shape) and F-48.4.
+"""
+
+from __future__ import annotations
+
+
+__all__: list[str] = []

core_runtime-2.6.0/src/api/main.py

@@ -0,0 +1,195 @@
+# src/api/main.py
+
+"""
+API Main Entry Point — composition root.
+
+FastAPI requires `lifespan` to be declared at app creation, so this file
+imports `core_lifespan` from Body to wire the startup/shutdown sequence.
+Composition roots wire layers together by design and are not layer bypasses.
+
+CONSTITUTIONAL STATUS:
+- Exempted from `architecture.api.no_body_bypass` via the composition-root
+  sanctuary in `.intent/enforcement/mappings/architecture/layer_separation.yaml`
+  (added 2026-04-19). Analogous to the bootstrap sanctuary granted under
+  `architecture.shared.no_layer_imports` for shared-layer composition files.
+- F-40.3 (#552): OpenAPI metadata (title, version, description, x-stability-
+  policy) declared here per ADR-087 D9. Version is read dynamically from
+  `core-runtime`'s installed package metadata; source-tree runs report
+  `0.0.0+source` to make the dev-mode origin visible in the spec.
+"""
+
+from __future__ import annotations
+
+from importlib.metadata import PackageNotFoundError
+from importlib.metadata import version as _pkg_version
+
+from fastapi import FastAPI
+
+from api.errors import register_exception_handlers
+from api.v1 import (
+    audit_routes,
+    census_routes,
+    coverage_routes,
+    daemon_routes,
+    development_routes,
+    fix_routes,
+    inspect_routes,
+    integration_routes,
+    integrity_routes,
+    knowledge_routes,
+    lint_routes,
+    proposals_routes,
+    quality_routes,
+    refactor_routes,
+    sync_routes,
+)
+from body.infrastructure.lifespan import core_lifespan
+from shared.logger import getLogger
+
+
+logger = getLogger(__name__)
+
+
+_ADR_087_URL = (
+    "https://github.com/DariuszNewecki/CORE/blob/main/.specs/decisions/"
+    "ADR-087-oem-api-versioning-and-stability-policy.md"
+)
+_OEM_API_PAPER_URL = (
+    "https://github.com/DariuszNewecki/CORE/blob/main/.specs/papers/CORE-OEM-API.md"
+)
+
+
+def _resolve_runtime_version() -> str:
+    """Read core-runtime's PyPI version; fall back to a dev marker in source-tree mode.
+
+    Per ADR-087 D9, OpenAPI ``info.version`` mirrors ``core-runtime``'s PyPI
+    version. When the API runs from a source tree (no wheel installed),
+    importlib.metadata can't find the distribution; emit a PEP-440
+    local-version marker so consumers reading the spec see source-mode
+    origin instead of a stale hardcoded number.
+    """
+    try:
+        return _pkg_version("core-runtime")
+    except PackageNotFoundError:
+        return "0.0.0+source"
+
+
+_OEM_API_DESCRIPTION = (
+    """
+The CORE OEM API surface — the stable, versioned interface that commercial
+sidecars (F-20 convergence dashboard, F-34 web dashboard, F-45 hosted
+findings dashboard) and third-party OEM integrators consume to embed
+CORE's constitutional governance layer.
+
+**Stability policy:** see [ADR-087]("""
+    + _ADR_087_URL
+    + """).
+**Route classification:** see [CORE-OEM-API paper]("""
+    + _OEM_API_PAPER_URL
+    + """).
+
+Routes marked `internal` (or absent from this spec) are CORE-operator
+concerns — daemon lifecycle, autonomy-loop triggers, CI gate dispatch.
+They are subject to change without notice and not part of this contract.
+"""
+)
+
+
+# ID: 2751f337-a513-4f6d-8f35-b9d7055faac0
+def create_app() -> FastAPI:
+    """Compose the FastAPI app for the daemon + OEM API surface.
+
+    The app serves both the public OEM API (routes annotated public per
+    F-40.1's classification) and CORE-internal routes (marked
+    ``include_in_schema=False`` per router; reachable but absent from
+    the published OpenAPI spec). The split lets `/v1/openapi.json` be
+    the authoritative source of the F-40 contract while the daemon
+    still exposes the operator surface a CORE deployment needs.
+    """
+    app = FastAPI(
+        title="CORE OEM API",
+        version=_resolve_runtime_version(),
+        description=_OEM_API_DESCRIPTION,
+        lifespan=core_lifespan,
+        openapi_tags=[
+            {
+                "name": "Audit",
+                "description": "Audit runs + remediation triggers (public).",
+            },
+            {
+                "name": "Census",
+                "description": "Convergence-metric snapshots + baselines (public).",
+            },
+            {
+                "name": "Inspect",
+                "description": "Read-only state introspection (public).",
+            },
+            {"name": "Proposals", "description": "Autonomous-proposal queue (public)."},
+            {"name": "Fix", "description": "Atomic-action dispatch (public)."},
+            {"name": "Actions", "description": "Atomic-action registry (public)."},
+            {"name": "Knowledge", "description": "Knowledge-graph query (public)."},
+            {
+                "name": "Coverage",
+                "description": "Coverage runs + reports (mixed public/internal).",
+            },
+            {
+                "name": "Refactor",
+                "description": "Refactor candidates + dispatch (mixed public/internal).",
+            },
+        ],
+    )
+    app.include_router(knowledge_routes.router, prefix="/v1", tags=["Knowledge"])
+    app.include_router(development_routes.router, prefix="/v1", tags=["Development"])
+    app.include_router(proposals_routes.router, prefix="/v1", tags=["Proposals"])
+    app.include_router(audit_routes.router, prefix="/v1", tags=["Audit"])
+    app.include_router(integration_routes.router, prefix="/v1", tags=["Integration"])
+    app.include_router(lint_routes.router, prefix="/v1", tags=["Lint"])
+    app.include_router(fix_routes.router, prefix="/v1", tags=["Fix"])
+    app.include_router(fix_routes.actions_router, prefix="/v1", tags=["Actions"])
+    app.include_router(quality_routes.router, prefix="/v1", tags=["quality"])
+    app.include_router(coverage_routes.router, prefix="/v1", tags=["Coverage"])
+    app.include_router(coverage_routes.tests_router, prefix="/v1", tags=["Coverage"])
+    app.include_router(refactor_routes.router, prefix="/v1", tags=["Refactor"])
+    app.include_router(inspect_routes.status_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(inspect_routes.decisions_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(inspect_routes.refusals_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(inspect_routes.analysis_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(inspect_routes.components_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(inspect_routes.search_router, prefix="/v1", tags=["Inspect"])
+    app.include_router(census_routes.router, prefix="/v1", tags=["Census"])
+    app.include_router(sync_routes.router, prefix="/v1", tags=["Sync"])
+    app.include_router(integrity_routes.router, prefix="/v1", tags=["Integrity"])
+    app.include_router(daemon_routes.router, prefix="/v1", tags=["Daemon"])
+    register_exception_handlers(app)
+
+    @app.get(
+        "/health",
+        tags=["Health"],
+        summary="Liveness probe",
+        description=(
+            "Returns 200 OK whenever the API process is responsive. "
+            "Public; unauthenticated; safe to poll at high frequency."
+        ),
+    )
+    # ID: 7e958d32-1b47-43a5-836b-f6df51d6b803
+    def health_check() -> dict[str, str]:
+        return {"status": "ok"}
+
+    # ADR-087 D9: inject x-stability-policy into the published OpenAPI spec.
+    # FastAPI's constructor doesn't accept arbitrary x-* extensions on the
+    # `info` object, so override `app.openapi` to post-process the generated
+    # schema once and cache it on first access (FastAPI's own pattern).
+    _default_openapi = app.openapi
+
+    # ID: 6f1d3a7e-8c2b-4a05-b9f4-2e6c1a5d8b07
+    def _openapi_with_stability_policy() -> dict:
+        schema = _default_openapi()
+        schema.setdefault("info", {})["x-stability-policy"] = _ADR_087_URL
+        return schema
+
+    app.openapi = _openapi_with_stability_policy  # type: ignore[method-assign]
+
+    return app
+
+
+app = create_app()

{core_runtime-0.1.6 → core_runtime-2.6.0}/src/api/v1/audit_routes.py

@@ -77,7 +77,17 @@ class CreateAuditRunRequest(BaseModel):
     source: str = "api"
 
 
-@router.post("/runs")
+@router.post(
+    "/runs",
+    summary="Start an audit run",
+    description=(
+        "Start a constitutional audit run against the repo. With `wait=false` "
+        "(default) returns 202 + a `run_id` to poll; the audit executes on a "
+        "background task. With `wait=true` blocks and returns the full result "
+        "(verdict + findings + stats) in-band (status 200). Audit duration is "
+        "~60s; clients invoking `wait=true` must set a long HTTP timeout."
+    ),
+)
 # ID: 26d3745c-b1a3-419f-a521-06691b8a2c75
 async def create_audit_run(
     request: Request,
@@ -132,7 +142,16 @@ async def create_audit_run(
     return {"run_id": str(run_id), "status": "pending"}
 
 
-@router.get("/runs/{run_id}")
+@router.get(
+    "/runs/{run_id}",
+    summary="Fetch a persisted audit run",
+    description=(
+        "Read back an audit run's persisted record by `run_id`: verdict + "
+        "counts + timestamps + status + findings list. Returns 404 if the run "
+        "doesn't exist. Findings are denormalized on `core.audit_runs.findings` "
+        "per ADR-054 amendment; pre-amendment rows return an empty list."
+    ),
+)
 # ID: 7c4903f0-e174-4e52-915d-54988fe40d22
 async def get_audit_run(
     run_id: UUID,
@@ -191,7 +210,18 @@ class CreateRemediationRequest(BaseModel):
     requested_by: str = "api"
 
 
-@router.post("/remediations")
+@router.post(
+    "/remediations",
+    summary="Dispatch autonomous remediation",
+    description=(
+        "Trigger autonomous remediation of findings from a prior audit run "
+        "(`audit_run_id`). `mode` selects aggressiveness — wire vocabulary "
+        "is `safe` | `medium` | `all`. `write=false` is the dry-run default "
+        "(ADR-014). Returns 202 + a `run_id` for the new remediation run; "
+        "use `GET /v1/audit/remediations/{run_id}` to read the result. 422 "
+        "if `mode` is outside the allowed vocabulary."
+    ),
+)
 # ID: 5c8d9e0f-1a2b-4c3d-4e5f-6a7b8c9d0e1f
 async def create_remediation_run(
     request: Request,
@@ -259,7 +289,15 @@ async def create_remediation_run(
     }
 
 
-@router.get("/remediations/{run_id}")
+@router.get(
+    "/remediations/{run_id}",
+    summary="Fetch a remediation run",
+    description=(
+        "Read back a remediation run's persisted record by `run_id`: mode, "
+        "write flag, status, timestamps, result, and error if any. Returns "
+        "404 if the run doesn't exist."
+    ),
+)
 # ID: 7e0f1a2b-3c4d-4e5f-6a7b-8c9d0e1f2a3b
 async def get_remediation_run(
     run_id: UUID,

{core_runtime-0.1.6 → core_runtime-2.6.0}/src/api/v1/census_routes.py

@@ -79,7 +79,16 @@ class CreateBaselineRequest(BaseModel):
     snapshot_file: str | None = None
 
 
-@router.post("/runs")
+@router.post(
+    "/runs",
+    summary="Dispatch a structural census",
+    description=(
+        "Trigger a CIM-0 structural census snapshot of the constitution and "
+        "codebase. Returns 202 + a `run_id` to poll. F-20 (Convergence "
+        "dashboard) ingests these snapshots over time to render the "
+        "finding-rate vs resolution-rate trajectory."
+    ),
+)
 # ID: 0e7a4f2b-6d1c-4f9a-aedb-90123ab456f7
 async def create_census_run(
     request: Request,
@@ -128,7 +137,15 @@ async def create_census_run(
     }
 
 
-@router.get("/runs/{run_id}")
+@router.get(
+    "/runs/{run_id}",
+    summary="Fetch a persisted census run",
+    description=(
+        "Read back a census run's persisted record by `run_id`: snapshot, "
+        "baseline_name, status, timestamps, result, error. Returns 404 if "
+        "the run doesn't exist."
+    ),
+)
 # ID: 2a9c6b4d-8f3e-4b1c-c0fd-b2345cd6789a
 async def get_census_run(
     run_id: UUID,
@@ -170,7 +187,16 @@ async def get_census_run(
     }
 
 
-@router.post("/baselines/{name}")
+@router.post(
+    "/baselines/{name}",
+    summary="Create a named census baseline",
+    description=(
+        "Promote a census snapshot to a named baseline. F-20 dashboards use "
+        "baselines as reference points for the convergence trajectory. "
+        "`snapshot_file` is optional; when omitted, the most recent snapshot "
+        "is used. Returns 422 if no usable snapshot exists."
+    ),
+)
 # ID: 3b0d7c5e-9a4f-4c2d-d10e-c3456de789ab
 async def create_census_baseline(
     request: Request,
@@ -188,7 +214,11 @@ async def create_census_baseline(
     return {"baseline": baseline}
 
 
-@router.get("/baselines")
+@router.get(
+    "/baselines",
+    summary="List census baselines",
+    description="Return all named baselines (newest first).",
+)
 # ID: 4c1e8d6f-0b5a-4d3e-e21f-d4567ef89abc
 async def list_census_baselines(request: Request) -> dict:
     """Return all named baselines (newest first)."""
@@ -196,7 +226,16 @@ async def list_census_baselines(request: Request) -> dict:
     return list_baselines(core_context)
 
 
-@router.get("/diff")
+@router.get(
+    "/diff",
+    summary="Compare current state to a baseline",
+    description=(
+        "Diff the current census state against a baseline. The optional "
+        "`baseline` query param selects which named baseline to compare "
+        "against; omit to use the default baseline if configured. Returns "
+        "the structured delta consumed by F-20 dashboards."
+    ),
+)
 # ID: 5d2f9e7a-1c6b-4e4f-f320-e5678f0abcde
 async def census_diff(
     request: Request,

{core_runtime-0.1.6 → core_runtime-2.6.0}/src/api/v1/coverage_routes.py

@@ -105,7 +105,16 @@ class InteractiveTestsRequest(BaseModel):
 # ---------- GET endpoints -------------------------------------------------
 
 
-@router.get("/check")
+@router.get(
+    "/check",
+    summary="Constitutional coverage compliance check",
+    description=(
+        "Run the constitutional coverage compliance check — pass/fail "
+        "verdict against the configured coverage targets. F-45 (hosted "
+        "findings) renders this alongside audit findings for the same "
+        "PR snapshot."
+    ),
+)
 # ID: 1a5b7c3d-4e6f-4a8b-9c0d-1e2f3a4b5c63
 async def coverage_check(request: Request) -> dict:
     """Run the constitutional coverage compliance check."""
@@ -113,7 +122,17 @@ async def coverage_check(request: Request) -> dict:
     return await get_coverage_check(core_context)
 
 
-@router.get("/report")
+@router.get(
+    "/report",
+    summary="Pytest coverage report",
+    description=(
+        "Return the pytest coverage report. `format=text` (default) "
+        "returns the term report in `stdout_tail`; `format=html` runs "
+        "pytest with the HTML reporter and returns the `htmlcov/` "
+        "directory path in `html_path`. `show_missing` toggles "
+        "per-module missing-lines reporting."
+    ),
+)
 # ID: 2b6c8d4e-5f7a-4b9c-0d1e-2f3a4b5c6d74
 async def coverage_report(
     request: Request,
@@ -132,7 +151,14 @@ async def coverage_report(
     return await get_coverage_report(core_context, show_missing=show_missing)
 
 
-@router.get("/targets")
+@router.get(
+    "/targets",
+    summary="Coverage targets",
+    description=(
+        "Return the constitutional coverage targets — module-level thresholds "
+        "the audit gate enforces. Sidecar configuration surface."
+    ),
+)
 # ID: 3c7d9e5f-6a8b-4c0d-1e2f-3a4b5c6d7e85
 async def coverage_targets(request: Request) -> dict:
     """Return the constitutional coverage targets."""
@@ -140,7 +166,16 @@ async def coverage_targets(request: Request) -> dict:
     return get_coverage_targets(core_context)
 
 
-@router.get("/gaps")
+@router.get(
+    "/gaps",
+    summary="Coverage gaps ranked by deficit",
+    description=(
+        "Return modules ranked by coverage deficit below `threshold` "
+        "(default 75.0, range 0-100). `limit` caps results (default 20, "
+        "max 200). F-34 dashboards use this as an actionable surface for "
+        "operators to triage test debt."
+    ),
+)
 # ID: 4d8e0f6a-7b9c-4d1e-2f3a-4b5c6d7e8f96
 async def coverage_gaps(
     request: Request,
@@ -152,7 +187,15 @@ async def coverage_gaps(
     return await get_coverage_gaps(core_context, threshold=threshold, limit=limit)
 
 
-@router.get("/history")
+@router.get(
+    "/history",
+    summary="Coverage history",
+    description=(
+        "Return recent coverage measurements (newest first). `limit` "
+        "defaults to 30, max 500. F-20-adjacent — surfaces coverage "
+        "trajectory alongside the convergence metric."
+    ),
+)
 # ID: 5e9f1a7b-8c0d-4e2f-3a4b-5c6d7e8f9a07
 async def coverage_history(
     request: Request,
@@ -163,7 +206,13 @@ async def coverage_history(
     return get_coverage_history(core_context, limit=limit)
 
 
-@router.get("/methods")
+@router.get(
+    "/methods",
+    # F-40.1: internal — legacy-vs-adaptive method comparison is
+    # CORE-internal autonomy concern; sidecars don't care. Excluded
+    # from /v1/openapi.json per ADR-087.
+    include_in_schema=False,
+)
 # ID: 6f0a2b8c-9d1e-4f3a-4b5c-6d7e8f9a0b18
 async def coverage_methods(request: Request) -> dict:
     """Return the legacy-vs-adaptive coverage method comparison."""
@@ -174,7 +223,13 @@ async def coverage_methods(request: Request) -> dict:
 # ---------- POST async generation ----------------------------------------
 
 
-@router.post("/generate")
+@router.post(
+    "/generate",
+    # F-40.1: internal — triggers adaptive test generation via the
+    # autonomy loop. Not a sidecar consumer surface. Excluded from
+    # /v1/openapi.json per ADR-087.
+    include_in_schema=False,
+)
 # ID: 7a1b3c9d-0e2f-4a4b-5c6d-7e8f9a0b1c29
 async def generate_coverage(
     request: Request,
@@ -229,7 +284,12 @@ async def generate_coverage(
     }
 
 
-@router.post("/generate:batch")
+@router.post(
+    "/generate:batch",
+    # F-40.1: internal — batch variant of /generate; same autonomy-loop
+    # concern. Excluded from /v1/openapi.json per ADR-087.
+    include_in_schema=False,
+)
 # ID: 9c3d5e1f-2a4b-4c6d-7e8f-9a0b1c2d3e4b
 async def generate_coverage_batch(
     request: Request,
@@ -292,7 +352,13 @@ async def generate_coverage_batch(
 # ---------- POST sync interactive ----------------------------------------
 
 
-@tests_router.post("/interactive")
+@tests_router.post(
+    "/interactive",
+    # F-40.1: internal — interactive test-shape dispatch is autonomy
+    # surface, not a sidecar concern. Excluded from /v1/openapi.json
+    # per ADR-087.
+    include_in_schema=False,
+)
 # ID: 1e5f7a3b-4c6d-4e8f-9a0b-1c2d3e4f5a6d
 async def interactive_tests(
     request: Request,
@@ -309,7 +375,15 @@ async def interactive_tests(
 # ---------- GET resource read --------------------------------------------
 
 
-@router.get("/runs/{run_id}")
+@router.get(
+    "/runs/{run_id}",
+    summary="Fetch a persisted coverage run",
+    description=(
+        "Read back a coverage run's persisted record by `run_id`: status, "
+        "timestamps, result payload, error. Returns 404 if no run exists "
+        "with that id."
+    ),
+)
 # ID: 2f6a8b4c-5d7e-4f9a-0b1c-2d3e4f5a6b7e
 async def get_coverage_run(
     run_id: UUID,

{core_runtime-0.1.6 → core_runtime-2.6.0}/src/api/v1/daemon_routes.py

@@ -35,7 +35,12 @@ from will.governance.daemon_runner import (
 logger = getLogger(__name__)
 
 
-router = APIRouter(prefix="/daemon")
+router = APIRouter(
+    prefix="/daemon",
+    # F-40.1: internal — daemon lifecycle is operator concern, not part
+    # of the OEM API contract. Excluded from /v1/openapi.json per ADR-087.
+    include_in_schema=False,
+)
 
 
 @router.get("/status")

{core_runtime-0.1.6 → core_runtime-2.6.0}/src/api/v1/development_routes.py

@@ -21,7 +21,12 @@ from shared.infrastructure.repositories.task_repository import TaskRepository
 from will.autonomy.autonomous_developer import develop_from_goal
 
 
-router = APIRouter()
+router = APIRouter(
+    # F-40.1: internal — autonomous-developer goal submission is a
+    # CORE-internal autonomy entry point, not part of the OEM API
+    # contract. Excluded from /v1/openapi.json per ADR-087.
+    include_in_schema=False,
+)
 
 
 # ID: 7b83814d-b747-4c17-b054-9e8f2b8b8325