feat(api): consolidate project-history stored-request GET and CLI

CHANGELOG.d/project-history-cli.md

@@ -0,0 +1,2 @@
+- `tepp_api` loopback `tepp-project-history query` mints a typed LineageWeave `POST /v1/project-histories` onto spawned `tepp-loopback` TCP (ADR 0061). Metric-free `temporal_association_only` JSON only. `tepp.scientific_acceptance.v1` never appears. Does not infer causality. Naruon is refused. Not temporal-context CLI, not export CLI, not persistence.
+- Fail closed on HTTP field injection, duplicate or transfer-encoded framing, non-2xx stdout, and stdin/response payloads above the existing project-history wire limits.

CHANGELOG.d/project-history-stored-request-cli.md

@@ -0,0 +1 @@
+- `tepp-project-history-request get` mints LineageWeave stored-request GET onto spawned `tepp-loopback` TCP (ADR 0088). Metric-free; stored projection `inference_status` remains `temporal_association_only`. Does not infer causality. Naruon refused. `NaruonLiveService` stays POST-only. Does not re-open cancel lineages. Not GAP-010 Figma/export, not persistence.

CHANGELOG.d/project-history-stored-request-get.md

@@ -0,0 +1 @@
+- `GET /v1/project-histories/{idempotency_key}/request` returns the accepted LineageWeave create request on `tepp-loopback` (ADR 0087). Metric-free; stored projection `inference_status` remains `temporal_association_only`. Does not infer causality. Naruon refused. `NaruonLiveService` stays POST-only. Does not re-open cancel lineages. Not GAP-010 Figma/export, not persistence.

DOCUMENTATION.md

@@ -13,6 +13,8 @@ TEPP's approved PRD v0.4 and implementation plan are the primary product baselin
 | naruon modular consumer contract | [`docs/connectors/naruon-artifact-consumer.md`](docs/connectors/naruon-artifact-consumer.md) |
 | Project-history collection GET doctoring | [`docs/research/project-history-collection-http.md`](docs/research/project-history-collection-http.md) |
 | Project-history GET-by-id doctoring | [`docs/research/project-history-retrieval-http.md`](docs/research/project-history-retrieval-http.md) |
+| Project-history stored-request GET doctoring | [`docs/research/project-history-stored-request-get.md`](docs/research/project-history-stored-request-get.md) |
+| Project-history stored-request CLI doctoring | [`docs/research/project-history-stored-request-cli.md`](docs/research/project-history-stored-request-cli.md) |
 | contextual-orchestrator interpretation port | [`docs/connectors/contextual-orchestrator-interpretation-port.md`](docs/connectors/contextual-orchestrator-interpretation-port.md) |
 | Orchestrator live HTTP doctoring | [`docs/research/orchestrator-live-http.md`](docs/research/orchestrator-live-http.md) |
 | UML/runtime/scientific flows | [`docs/UML.md`](docs/UML.md) |

crates/tepp_api/Cargo.toml

@@ -29,5 +29,17 @@ path = "src/bin/tepp_loopback.rs"
 test = false
 bench = false
 
+[[bin]]
+name = "tepp-project-history-request"
+path = "src/bin/tepp_project_history_request.rs"
+test = false
+bench = false
+
+[[bin]]
+name = "tepp-project-history"
+path = "src/bin/tepp_project_history.rs"
+test = false
+bench = false
+
 [lints]
 workspace = true

crates/tepp_api/src/analysis_run_live.rs

@@ -25,7 +25,8 @@ use crate::{
     is_project_history_collection_path, page_project_history_collection_items,
     parse_project_history_collection_page_cursor, parse_project_history_collection_page_limit,
     project_history_projection, project_history_retrieval_path_id,
-    refuse_metrics_on_project_history_retrieval_payload, requests_are_idempotent_matches,
+    project_history_stored_request_path_id, refuse_metrics_on_project_history_retrieval_payload,
+    refuse_metrics_on_project_history_stored_request_payload, requests_are_idempotent_matches,
 };
 
 const MAX_LIVE_REQUEST_BODY_BYTES: usize = DEFAULT_PROJECT_HISTORY_BYTE_LIMIT;
@@ -153,6 +154,12 @@ impl AnalysisRunLiveService {
             if is_project_history_collection_path(path) {
                 return self.list_project_histories(&headers, body);
             }
+            if matches!(
+                project_history_stored_request_path_id(path),
+                Ok(_) | Err(ApiError::LimitExceeded)
+            ) {
+                return self.get_project_history_stored_request(path, &headers, body);
+            }
             if matches!(
                 project_history_retrieval_path_id(path),
                 Ok(_) | Err(ApiError::LimitExceeded)
@@ -321,6 +328,40 @@ impl AnalysisRunLiveService {
         Ok(json_response(200, "OK", response_body))
     }
 
+    fn get_project_history_stored_request(
+        &self,
+        path: &str,
+        headers: &HashMap<String, String>,
+        body: &str,
+    ) -> Result<NaruonLiveResponse, ApiError> {
+        if !body.is_empty() {
+            return Err(ApiError::InvalidWirePayload);
+        }
+        refuse_metrics_on_project_history_stored_request_payload(body)?;
+        let consumer = require_headers(headers, self.bound_addr, false)?;
+        if consumer != LINEAGEWEAVE_CONSUMER_CODE {
+            return Err(ApiError::InvalidWirePayload);
+        }
+        if headers.contains_key("tepp-page-limit") || headers.contains_key("tepp-page-cursor") {
+            return Err(ApiError::InvalidWirePayload);
+        }
+        let tenant_workspace_id = header_value(headers, PROJECT_HISTORY_RETRIEVAL_TENANT_HEADER)?;
+        crate::project_history::validate_project_history_registry_identity(tenant_workspace_id)?;
+        let idempotency_key = project_history_stored_request_path_id(path)?;
+        let replay_key =
+            consumer_tenant_idempotency_key(consumer, tenant_workspace_id, &idempotency_key);
+        let (stored_request, projection) = self
+            .accepted_project_histories
+            .get(&replay_key)
+            .ok_or(ApiError::InvalidWirePayload)?;
+        if projection.inference_status != "temporal_association_only" {
+            return Err(ApiError::InvalidWirePayload);
+        }
+        let response_body = stored_request.to_json()?;
+        refuse_metrics_on_project_history_stored_request_payload(&response_body)?;
+        Ok(json_response(200, "OK", response_body))
+    }
+
     fn response_from_error(&mut self, error: ApiError) -> NaruonLiveResponse {
         let request_id = format!("analysis-run-live-{}", self.next_request_serial);
         self.next_request_serial += 1;
@@ -1237,6 +1278,51 @@ mod tests {
         assert!(!collection.body.contains("evidence_text"));
     }
 
+    #[test]
+    fn project_history_stored_request_get_returns_create_request_and_fails_closed() {
+        let mut service = AnalysisRunLiveService::new();
+        let first = sample_project_history("idem-a", "project-a");
+        assert_eq!(
+            service
+                .handle_http_request(&project_history_post(&first))
+                .status_code,
+            200
+        );
+        let got = service.handle_http_request(&format!(
+            "GET {PROJECT_HISTORY_PATH}/idem-a/request HTTP/1.1\r\nHost: 127.0.0.1\r\ncontent-type: application/json\r\ntepp-consumer: {LINEAGEWEAVE_CONSUMER_CODE}\r\ntepp-contract-version: 1\r\ntepp-tenant-workspace-id: history-tenant\r\ncontent-length: 0\r\n\r\n"
+        ));
+        assert_eq!(got.status_code, 200, "{}", got.body);
+        let stored = ProjectHistoryRequest::from_json(&got.body).expect("stored");
+        assert_eq!(stored, first);
+        assert!(!got.body.contains("rmse"));
+        assert!(!got.body.contains("tepp.scientific_acceptance.v1"));
+        assert!(!got.body.contains("causal_score"));
+        assert_eq!(
+            service
+                .handle_http_request(&format!(
+                    "GET {PROJECT_HISTORY_PATH}/idem-a/request HTTP/1.1\r\nHost: 127.0.0.1\r\ncontent-type: application/json\r\ntepp-consumer: {NARUON_CONSUMER_CODE}\r\ntepp-contract-version: 1\r\ntepp-tenant-workspace-id: history-tenant\r\ncontent-length: 0\r\n\r\n"
+                ))
+                .status_code,
+            400
+        );
+        assert_eq!(
+            service
+                .handle_http_request(&format!(
+                    "GET {PROJECT_HISTORY_PATH}/idem-a/cancel HTTP/1.1\r\nHost: 127.0.0.1\r\ncontent-type: application/json\r\ntepp-consumer: {LINEAGEWEAVE_CONSUMER_CODE}\r\ntepp-contract-version: 1\r\ntepp-tenant-workspace-id: history-tenant\r\ncontent-length: 0\r\n\r\n"
+                ))
+                .status_code,
+            400
+        );
+        assert_eq!(
+            service
+                .handle_http_request(&format!(
+                    "GET {PROJECT_HISTORY_PATH}/missing/request HTTP/1.1\r\nHost: 127.0.0.1\r\ncontent-type: application/json\r\ntepp-consumer: {LINEAGEWEAVE_CONSUMER_CODE}\r\ntepp-contract-version: 1\r\ntepp-tenant-workspace-id: history-tenant\r\ncontent-length: 0\r\n\r\n"
+                ))
+                .status_code,
+            400
+        );
+    }
+
     struct ScriptedRead {
         reader: Cursor<Vec<u8>>,
         first_error: Option<std::io::ErrorKind>,

crates/tepp_api/src/bin/tepp_project_history.rs

@@ -0,0 +1,36 @@
+//! Operator CLI for loopback `LineageWeave` project-history POST.
+
+use std::io::{self, IsTerminal};
+use std::process::ExitCode;
+
+use tepp_api::{
+    ApiError, ProjectHistoryCliInvocation, execute_project_history_cli,
+    read_project_history_cli_stdin, render_project_history_cli_stdout,
+};
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("{error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> Result<(), ApiError> {
+    let args: Vec<String> = std::env::args().skip(1).collect();
+    match args.first().map(String::as_str) {
+        Some("query") => run_query(&args),
+        _ => Err(ApiError::InvalidWirePayload),
+    }
+}
+
+fn run_query(args: &[String]) -> Result<(), ApiError> {
+    let body = read_project_history_cli_stdin(io::stdin().is_terminal(), io::stdin())?;
+    let invocation = ProjectHistoryCliInvocation::from_args(args, body)?;
+    let response = execute_project_history_cli(&invocation)?;
+    let stdout = render_project_history_cli_stdout(&invocation, &response)?;
+    println!("{stdout}");
+    Ok(())
+}

crates/tepp_api/src/bin/tepp_project_history_request.rs

@@ -0,0 +1,35 @@
+//! Operator CLI for loopback `LineageWeave` project-history stored-request GET.
+
+use std::io::{self, IsTerminal};
+use std::process::ExitCode;
+
+use tepp_api::{
+    ApiError, ProjectHistoryStoredRequestCliInvocation, execute_project_history_stored_request_cli,
+    read_project_history_stored_request_cli_stdin,
+    render_project_history_stored_request_cli_stdout,
+};
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("tepp-project-history-request: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> Result<(), ApiError> {
+    let args: Vec<String> = std::env::args().skip(1).collect();
+    let body =
+        read_project_history_stored_request_cli_stdin(io::stdin().is_terminal(), io::stdin())?;
+    let invocation = ProjectHistoryStoredRequestCliInvocation::from_args(&args, body)?;
+    let response = execute_project_history_stored_request_cli(&invocation)?;
+    let stdout = render_project_history_stored_request_cli_stdout(&invocation, &response)?;
+    println!("{stdout}");
+    if (200..300).contains(&response.status_code) {
+        Ok(())
+    } else {
+        Err(ApiError::InvalidWirePayload)
+    }
+}

crates/tepp_api/src/lib.rs

@@ -9,7 +9,9 @@
 //! may also request a cutoff-safe project-history projection from explicit
 //! source evidence. Naruon owns the current purpose-bound export adapter.
 //! Loopback listeners prove the HTTP boundary without claiming production TLS,
-//! causality, or completed psychometric model results.
+//! causality, or completed psychometric model results. The published
+//! `tepp-project-history` CLI mints typed LineageWeave project-history POST
+//! exchanges onto spawned `tepp-loopback` TCP.
 
 mod analysis_result;
 mod analysis_run;
@@ -28,8 +30,11 @@ mod naruon_http;
 mod naruon_live;
 mod orchestration;
 mod project_history;
+mod project_history_cli;
 mod project_history_collection_http;
 mod project_history_retrieval_http;
+mod project_history_stored_request_cli;
+mod project_history_stored_request_http;
 mod project_journey;
 mod provider_payload;
 mod temporal_context;
@@ -232,6 +237,24 @@ pub use project_history::ProjectHistoryProjection;
 pub use project_history::ProjectHistoryRequest;
 /// Build a cutoff-safe project-history projection.
 pub use project_history::project_history_projection;
+/// Loopback project-history query CLI invocation.
+pub use project_history_cli::ProjectHistoryCliInvocation;
+/// Loopback project-history query CLI verb.
+pub use project_history_cli::ProjectHistoryCliVerb;
+/// Compose HTTP/1.1 project-history POST from a query CLI invocation.
+pub use project_history_cli::compose_project_history_cli_http;
+/// Dispatch a project-history query CLI invocation against an in-process listener.
+pub use project_history_cli::dispatch_project_history_cli;
+/// Execute a project-history query CLI invocation over loopback TCP.
+pub use project_history_cli::execute_project_history_cli;
+/// Render a typed project-history POST exchange as loopback HTTP/1.1.
+pub use project_history_cli::loopback_http1_from_project_history_exchange;
+/// Read bounded stdin for the project-history query CLI.
+pub use project_history_cli::read_project_history_cli_stdin;
+/// Refuse scientific metric or causal keys on project-history query CLI JSON.
+pub use project_history_cli::refuse_metrics_on_project_history_cli_payload;
+/// Render metric-free project-history query CLI stdout.
+pub use project_history_cli::render_project_history_cli_stdout;
 /// Maximum opaque cursor length on project-history collection GET.
 pub use project_history_collection_http::PROJECT_HISTORY_COLLECTION_CURSOR_MAX_LEN;
 /// Default page size for project-history collection GET.
@@ -266,6 +289,30 @@ pub use project_history_retrieval_http::lineageweave_project_history_retrieval_e
 pub use project_history_retrieval_http::project_history_retrieval_path_id;
 /// Refuse scientific-metric and causal-score keys on retrieval JSON.
 pub use project_history_retrieval_http::refuse_metrics_on_project_history_retrieval_payload;
+/// Validated loopback CLI invocation for project-history stored-request GET.
+pub use project_history_stored_request_cli::ProjectHistoryStoredRequestCliInvocation;
+/// Loopback CLI verb for project-history stored-request GET.
+pub use project_history_stored_request_cli::ProjectHistoryStoredRequestCliVerb;
+/// Compose HTTP/1.1 from a stored-request CLI invocation.
+pub use project_history_stored_request_cli::compose_project_history_stored_request_cli_http;
+/// Dispatch a stored-request CLI invocation against an in-process listener.
+pub use project_history_stored_request_cli::dispatch_project_history_stored_request_cli;
+/// Execute a stored-request CLI invocation over loopback TCP.
+pub use project_history_stored_request_cli::execute_project_history_stored_request_cli;
+/// Render `tepp-loopback` HTTP/1.1 from a stored-request exchange.
+pub use project_history_stored_request_cli::loopback_http1_from_project_history_stored_request_exchange;
+/// Read leftover stdin for stored-request GET; empty is admitted.
+pub use project_history_stored_request_cli::read_project_history_stored_request_cli_stdin;
+/// Filter stored-request CLI stdout so scientific-acceptance never prints.
+pub use project_history_stored_request_cli::render_project_history_stored_request_cli_stdout;
+/// Whether a path is the project-history stored-request extra-segment.
+pub use project_history_stored_request_http::is_project_history_stored_request_path;
+/// `LineageWeave` GET exchange for one stored project-history create request.
+pub use project_history_stored_request_http::lineageweave_project_history_stored_request_exchange;
+/// Extract the opaque idempotency key from a stored-request GET path.
+pub use project_history_stored_request_http::project_history_stored_request_path_id;
+/// Refuse scientific-metric and causal-score keys on stored-request JSON.
+pub use project_history_stored_request_http::refuse_metrics_on_project_history_stored_request_payload;
 /// Maximum posterior Project Journey artifact size.
 pub use project_journey::DEFAULT_PROJECT_JOURNEY_BYTE_LIMIT;
 /// Exact posterior Project Journey schema identity.