fix(rest, runtime): cite the folded-type and plural-spelling commits, and the H0 double refuses unsupported where shapes

Claude-Session: https://claude.ai/code/session_local_1d2a197c-c20e-4e90-9be8-413d4d432289
Co-authored-by: Claude <noreply@anthropic.com>

Author: hotlong

packages/rest/src/meta-item-read-gate.ts

@@ -166,8 +166,9 @@ export function metaCallerOrganizationId(caller: unknown): string | undefined {
 
 /**
  * [#9454 · #20408] The organization a `/meta` READ of `type` carries:
- * `organizationIdForMetaRead` over the FOLDED segment (#10340 — the raw plural
- * would miss the registry's override flag) and the caller's vetted
+ * `organizationIdForMetaRead` over the FOLDED segment (folded-type commit
+ * 26f3588fb, whose card no longer resolves: the raw plural would miss the
+ * registry's override flag) and the caller's vetted
  * organization ({@link metaCallerOrganizationId}). An organization reaches the
  * read only for a type the registry declares `allowOrgOverride`, so a
  * non-overridable type never resurrects a pre-#6190 phantom org row.
@@ -1956,8 +1957,9 @@ export async function translateMetaList(
 /**
  * [#20408] Translate ONE metadata document for the request's locale — the item
  * twin of {@link translateMetaList}. `metaType` is the canonical singular (the
- * caller folds its URL segment once, #6349: the translatable set is
- * singular-only, so an unfolded plural would skip the whole localization).
+ * caller folds its URL segment once — plural-spelling commit 2443bb4c4e, whose
+ * card no longer resolves: the translatable set is singular-only, so an
+ * unfolded plural would skip the whole localization).
  *
  * Takes the DOCUMENT, never the `getMetaItem` envelope (#5563): nav and field
  * labels live on the document. A missing bundle is not a bail-out (the

packages/rest/src/rest-server.ts

@@ -5785,8 +5785,9 @@ export class RestServer {
                         // and same registry gate as every other read door here.
                         const listCtx = await this.resolveExecCtx(environmentId, req)
                             .catch(rethrowAuthzStoreUnavailable);
-                        // [#10340] FOLDED, not raw — see the PUT door's org-scope
-                        // comment for the measurement. [#20408] Asked of
+                        // [folded-type commit 26f3588fb] (the original card no
+                        // longer resolves) FOLDED, not raw — see the PUT door's
+                        // org-scope comment for the measurement. [#20408] Asked of
                         // `metaReadOrganizationId`, the one answer the runtime
                         // dispatcher's list asks too.
                         const listOrganizationId = metaReadGate.metaReadOrganizationId(req.params.type, listCtx);
@@ -6357,8 +6358,9 @@ export class RestServer {
                         // ⚠️ NOT a new seam: memoised per request, and this
                         // handler resolves the same context again further down.
                         // [#20338] `readCtx` is resolved above the draft switches.
-                        // [#10340] FOLDED, not raw — see the PUT door's org-scope
-                        // comment for the measurement. [#20408] Asked of
+                        // [folded-type commit 26f3588fb] (the original card no
+                        // longer resolves) FOLDED, not raw — see the PUT door's
+                        // org-scope comment for the measurement. [#20408] Asked of
                         // `metaReadOrganizationId`, the one answer the runtime
                         // dispatcher's item read asks too.
                         const readOrganizationId = metaReadGate.metaReadOrganizationId(req.params.type, readCtx);

packages/runtime/src/domains/meta-read-org-scope-parity.test.ts

@@ -145,8 +145,20 @@ function makeQl() {
             { id: 'ps_shared', name: 'shared_access', system_permissions: ['manage_metadata', 'studio.access'] },
         ],
     };
+    /**
+     * Equality plus `$in` — the two shapes the shared resolver issues — and a
+     * loud refusal of every other shape, so a combinator this double does not
+     * implement can never read as a field that happened not to match.
+     */
     const matches = (row: any, where: any): boolean => Object.entries(where ?? {}).every(([field, cond]) => {
-        if (cond !== null && typeof cond === 'object' && Array.isArray((cond as any).$in)) return (cond as any).$in.includes(row[field]);
+        if (field.startsWith('$')) throw new Error(`fixture where-matcher: unsupported combinator '${field}'`);
+        if (cond !== null && typeof cond === 'object') {
+            const ops = Object.keys(cond as object);
+            if (ops.length !== 1 || ops[0] !== '$in' || !Array.isArray((cond as any).$in)) {
+                throw new Error(`fixture where-matcher: unsupported operator shape on '${field}'`);
+            }
+            return (cond as any).$in.includes(row[field]);
+        }
         return row[field] === cond;
     });
     return {