feat(api): enumerate analysis runs via loopback collection GET

[seonghobae]

Why

GAP-003A / issue #166 still has no operator-visible collection read. Operators cannot enumerate accepted, running, cancelled, or terminal runs without guessing run ids. docs/API_CONTRACT.md now documents GET /v1/analysis-runs.

Live slices that this PR does not duplicate:

• feat(analysis): bind validation runs to scientific acceptance evidence #356 analysis_engine scientific-acceptance library
• feat(api): carry scientific acceptance only on terminal results #358 tepp_api terminal-wire DTO
• feat(api): serve scientific acceptance only on loopback status GET #359 GET loopback status by id
• feat(api): record scientific acceptance via loopback lifecycle POST #360 POST running/terminal lifecycle (stacked on feat(api): serve scientific acceptance only on loopback status GET #359)
• feat(api): cancel accepted and running analysis runs on loopback #361 cancel HTTP (this PR stacks on that head dba3db0e0a43acae929263a06ff3364802f565f3)
• feat(api): drive scientific acceptance via loopback CLI #362 loopback CLI (ADR 0030)
• feat(analysis): bind TDT/CHRONOS composition to an analysis-run profile #364 GAP-007 TDT/CHRONOS analysis-run profile
• feat(persistence): persist idempotent analysis runs #287 GAP-003B persistence/Compose
• feat(network): replace union-find stand-in with Leiden consensus #351 Leiden

What

Seventh GAP-003A slice stacked on #361 over protected main 1bc02f580cf48e1d39da239f0e818453437c31c3:

• GET /v1/analysis-runs on AnalysisRunLiveService
• metric-free collection rows: run_id, run_state, idempotency_key
• accepted, running, cancelled, succeeded, and failed rows list; succeeded rows still omit the artifact
• tepp.scientific_acceptance.v1 never appears on the list
• bounded cursor pagination via tepp-page-cursor / tepp-page-limit (query strings stay fail-closed)
• consumer isolation; unknown cursor, GET-by-id, nonempty GET bodies fail closed
• ADR 0031 (0026–0030 live on other GAP-003A PRs)

Not an ADR 0014 scientific claim. Not persistence. Not GET-by-id. Not lifecycle POST. Not cancel HTTP. Not loopback CLI.

Verification

• cargo clippy -p tepp_api --all-targets -- -D warnings
• cargo test -p tepp_api --all-targets
• RUSTDOCFLAGS='-D warnings' cargo doc -p tepp_api --no-deps
• python3 scripts/validate_documentation.py
• python3 scripts/check_docstrings.py
• crates/tepp_api/tests/analysis_run_collection_http_contract.rs
• doctoring: docs/research/analysis-run-collection-http.md

Exact-head Checks on this SHA are required before merge. Two independent current-head APPROVEs are required. Author cannot self-approve. Merge #361 before this stacked PR, or retarget onto protected main after #361 lands. No force-push.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Hour-20 exact-head review request.

Current head 6a5d9777e2cf76c48726ae0243da872993d8881d. Devin/CodeRabbit/author COMMENTED is not independent APPROVE. OpenCode DISMISSED/REQUEST_CHANGES on predecessor heads does not transfer. Ruleset 18156473 needs two independent APPROVE reviews on this exact SHA.

GAP-003A collection GET draft stacked on #361. ADR 0031. Collection bodies stay metric-free. Do not duplicate GET /v1/analysis-runs.

Do not self-approve. Do not --admin merge. Checks/reviews are not a reason to weaken fail-closed gates.

[seonghobae]

Hour-21 exact-head review request.

Current head 6a5d9777e2cf76c48726ae0243da872993d8881d.
Devin/CodeRabbit/author COMMENTED is not independent APPROVE. Copilot review requests are not APPROVE. Ruleset 18156473 needs two independent approvals. Do not self-approve. Do not merge without two independent APPROVE reviews on this exact head.

@opencode-agent review