fix(#14646): re-measure the moved census control, and drop the runtime test's cross-package source dep

The dogfood census pins per-file control counts exactly; the comment added to
realtime-service-plugin.ts moved `RealtimeService` 10 -> 11 because the pattern
matches inside `IRealtimeService`. Re-measured in the ledger rather than
reworded in the file.

The runtime pin's import of the real InMemoryRealtimeAdapter made
@objectstack/runtime type-resolve @objectstack/service-realtime through dist.
Measured against origin/main: this package's typecheck script already named
tsconfig.test.json, so the program was already counted and the registry's
re-baseline limb does not apply; the mandated `paths` remedy then billed 13
TS6059 from another package's file graph into this package's ledger, against a
rootDir tsconfig.test.json states it will not widen. Edge removed instead. The
claim about the shipped occupant stays pinned against the real class in
service-realtime's own suite.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ARYe3yQTQCUFm5qPYNgKaJ

Author: claude

packages/qa/dogfood/test/authz-probe-blind-spot.census.ts

@@ -450,7 +450,18 @@ export const PROBE_FILE_CENSUS: readonly ProbeFileReading[] = [
     reachable: 0,
     blindSpot: 0,
     populationRule: 'HTTP route mounts in this file',
-    controls: { RealtimeService: 10, 'async init(': 1 },
+    // ⚠️ `RealtimeService` read 10 until #14646 added a comment to that file
+    // recording why its occupant names no discovery channel route. The pattern
+    // is a bare `/RealtimeService/g`, so it matches inside `IRealtimeService`
+    // and PROSE about the symbol moves the symbol's count exactly as code
+    // does — the mirror image of a retirement whose count goes UP because the
+    // codebase started documenting an absence. Re-measured here rather than
+    // reworded there: this control's job is to prove the file is still present
+    // and readable (the non-zero assertion), and shrinking a comment to hold a
+    // counter still is how the documentation gets worse to keep a number.
+    // Nothing else in the row moves — the file still mounts no HTTP route, so
+    // population / reachable / blindSpot / keys stay 0.
+    controls: { RealtimeService: 11, 'async init(': 1 },
     // The designed-silence decision is the #2992 realtime-transport tripwire record.
     note: 'Tripwire only. Zero keys is the designed reading: no end-user realtime transport is wired.',
   },

packages/runtime/package.json

@@ -68,7 +68,6 @@
     "@objectstack/service-job": "workspace:*",
     "@objectstack/service-messaging": "workspace:*",
     "@objectstack/service-package": "workspace:*",
-    "@objectstack/service-realtime": "workspace:*",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10"
   },

packages/runtime/src/discovery-realtime-channel.pin.test.ts

@@ -27,14 +27,40 @@ import { describe, it, expect } from 'vitest';
 import { HttpDispatcher } from './http-dispatcher.js';
 import { isSubscribableChannel } from '@objectstack/spec/api';
 import type { IRealtimeService } from '@objectstack/spec/contracts';
-// The occupant a stock boot really registers (`RealtimeServicePlugin.init`).
-// Imported rather than re-described: the fact under test is that the SHIPPED
-// implementation names no channel route, and a hand-written stand-in could
-// only re-state this file's own assumption about it.
-import { InMemoryRealtimeAdapter } from '@objectstack/service-realtime';
 
 const PREFIX = '/api/v1';
 
+/**
+ * The shape a stock boot registers: an in-process pub/sub bus that names no
+ * channel route.
+ *
+ * ⭐ Deliberately a stand-in rather than an import of the real
+ * `InMemoryRealtimeAdapter`, and the reason is structural rather than
+ * stylistic. Reaching for the real class made `@objectstack/runtime`
+ * type-resolve `@objectstack/service-realtime` through its `dist/*.d.ts`, and
+ * three of this repo's own ratchets refuse that from three directions:
+ * `check:type-source-resolution` reds on the dist-resolved type import; its
+ * registry is SHRINK-ONLY and its re-baseline limb is open only to a change
+ * that ONBOARDED the program (this package's `typecheck` script already named
+ * `tsconfig.test.json`, so it did not); and the mandated `paths` remedy pulls
+ * that package's file graph into a program whose `rootDir` is `./src`, which
+ * `tsconfig.test.json` states it will not widen — 13 `TS6059` billed to a
+ * ledger `service-realtime` cannot see, the same shape PR #12570 measured.
+ *
+ * Nothing is lost by declaring it here, because the claim about the SHIPPED
+ * occupant is not this file's to make: it is pinned against the real class, in
+ * the package that owns it, by
+ * `packages/services/service-realtime/src/no-channel-route.pin.test.ts`. That
+ * pin plus these compose to the stock-boot reading — this file pins that the
+ * PRODUCER derives its answer from whatever the occupant names, and that one
+ * pins what the shipped occupant names.
+ */
+const inProcessBus: IRealtimeService = {
+    publish: async () => {},
+    subscribe: async () => 'sub_1',
+    unsubscribe: async () => {},
+};
+
 /** A dispatcher whose kernel resolves exactly the one slot under test. */
 function dispatcherWithRealtime(realtime: unknown): HttpDispatcher {
     const kernel = {
@@ -52,16 +78,13 @@ function dispatcherWithRealtime(realtime: unknown): HttpDispatcher {
  * case has to be composed here.
  */
 const mountedChannel: IRealtimeService = {
-    publish: async () => {},
-    subscribe: async () => 'sub_1',
-    unsubscribe: async () => {},
+    ...inProcessBus,
     getChannelRoute: () => `${PREFIX}/realtime`,
 };
 
 describe('[#14646] discovery and the one definition of a subscribable channel (dispatcher producer)', () => {
-    it('does NOT advertise the shipped in-process bus as a channel', async () => {
-        const info = await dispatcherWithRealtime(new InMemoryRealtimeAdapter())
-            .getDiscoveryInfo(PREFIX);
+    it('does NOT advertise an in-process realtime bus as a channel', async () => {
+        const info = await dispatcherWithRealtime(inProcessBus).getDiscoveryInfo(PREFIX);
         const realtime = info.services.realtime;
 
         // The retraction the ruling asks for: `enabled` no longer says "the
@@ -108,7 +131,7 @@ describe('[#14646] discovery and the one definition of a subscribable channel (d
         // to be two constants that happened to agree; now both are
         // `isSubscribableChannel` over the same entry, so no composition can
         // make them disagree — including one this file did not think of.
-        for (const occupant of [new InMemoryRealtimeAdapter(), mountedChannel, null]) {
+        for (const occupant of [inProcessBus, mountedChannel, null]) {
             const info = await dispatcherWithRealtime(occupant).getDiscoveryInfo(PREFIX);
             const verdict = isSubscribableChannel(info.services.realtime);
             expect(info.services.realtime.enabled, 'services.realtime.enabled').toBe(verdict);

packages/runtime/vitest.config.ts

@@ -143,15 +143,6 @@ export default defineConfig({
         find: '@objectstack/service-package',
         replacement: path.resolve(__dirname, '../services/service-package/src/index.ts'),
       },
-      // Dev-only: discovery-realtime-channel.pin.test.ts drives the REAL
-      // occupant `RealtimeServicePlugin` registers, so "the shipped realtime
-      // service names no channel route" (#14646) is proven against the actual
-      // adapter rather than against a stand-in written from this file's own
-      // assumption about it.
-      {
-        find: '@objectstack/service-realtime',
-        replacement: path.resolve(__dirname, '../services/service-realtime/src/index.ts'),
-      },
     ],
   },
   test: {