Refactor: Engine type + Orchestrator adoption; request-time label catalog

[martsokha]

Summary

Rewires the runtime's per-document pipelines on top of upstream elide::Orchestrator, introduces an Engine type as the single entry point for both long-lived state (registry + codecs) and per-request verbs (analyze / anonymize_with), and switches the label catalog to a request-time builtins-by-name + custom-inline shape.

Engine type + Orchestrator adoption

• Rename EngineHandle → Engine. Same fields (RegistryHandle + Arc<FormatRegistry>), cheaply cloneable. New verbs:
  • Engine::analyze(&mut UntypedDocumentHandle, &AnalyzerParams) -> Report — builds an Orchestrator, runs detection, returns the editable report.
  • Engine::anonymize_with(handle, spec, &[Policy], ModalityKind, &[(Uuid, RuleAction)], Report) -> () — same construction with policies + body-modality reviewer overrides layered on, runs the redaction phase.
• Move analyzer/ + anonymizer/ under engine/ as pub(crate). Per-modality compile_* returns just Analyzer<M>; the (now modality-free) Scope is built once via engine/scope.rs::compile_scope and attached to the orchestrator with with_scope.
• runs/pipeline.rs collapses ~325 → ~225 LOC — outer per-modality switch deleted. analyze_document is one engine.analyze call followed by per-M extraction of report.entities::<M>() to pin the body modality for persistence. apply_document rebuilds the report with Report::new().insert_body::<M>(entities), extracts overrides from records, calls engine.anonymize_with, re-types the handle, re-encodes the bytes.
• Container parts (PDF embedded images, archive members) are detected by the orchestrator but discarded at the DocBody persistence boundary today. Follow-up: evolve DocBody to retain parts.

Upstream elide bump

70e6e8bf → 0ca39cf3. Critical changes absorbed:

• Report::new() + Report::insert_body::<M>(entities) + insert_part::<P>(id, entities) now public — two-phase cross-process round-trip is supported.
• Orchestrator::analyze / anonymize_with take &mut UntypedDocumentHandle (was generic <M>) — orchestrator dispatches modality internally.
• Scope is modality-free now; one scope per orchestrator via with_scope, bundles the label catalog.
• Methods renamed: analyze_document → analyze, apply → anonymize_with, anonymize_document → anonymize.
• with_modality(analyzer, anonymizer, scope) → with_modality(analyzer, anonymizer) (scope is global).

Label catalog (request-time builtins + custom)

• nvisy-core::plan::LabelCatalogParams { builtins: Vec<String>, custom: Vec<LabelSchema> } (new plan/label.rs). AnalyzerParams.label_catalog switches from Vec<LabelSchema> to this type. Defaults empty.
• nvisy-server::AnalyzerOverrides.label_catalog collapses from CollectionOverride<LabelSchema, LabelSelector> to ScalarOverride<LabelCatalogParams> — the catalog is now plain data, replaced wholesale per request (no collection patches).
• engine::build_catalog resolves builtins against a process-cached LabelCatalog::with_builtins() (OnceLock); unknown names log tracing::warn! and are skipped. custom schemas insert after.
• Nvisy.example.toml: shows the new [analyzer.label_catalog] block with builtins = [...] and optional [[custom]].

Style sweep

• Hoist inlined fully-qualified paths to use statements across the engine + server. tracing::* macros + rustdoc reference-link targets stay inline per project convention.
• Collapse three manual impl Default blocks (AnalyzerOverrides, RecognizerOverrides, EnricherOverrides) to #[derive(Default)] — ScalarOverride::default() / CollectionOverride::default() already produce the right Inherit.
• Schema-naming fix: #[schemars(rename = "{T}Override")] on ScalarOverride<T> and #[schemars(rename = "{T}CollectionOverride")] on CollectionOverride<T, S> so OpenAPI gets DeduplicationParamsOverride / ScopeParamsOverride / etc. instead of ScalarOverride, ScalarOverride2, ScalarOverride3, ...

Commits

1. f515aca5 — refactor(engine): introduce Engine type; adopt elide::Orchestrator
2. 371c6a9b — feat(plan,engine,server): builtin+custom label catalog; hoist inlined paths
3. e5050d49 — chore(server): name override schemas by their inner type

Test plan

• cargo build --workspace
• cargo clippy --workspace --all-targets -- -D warnings
• cargo test --workspace
• RUSTDOCFLAGS="-D warnings" cargo doc --workspace --no-deps
• cargo deny check all

Follow-ups

• Evolve DocBody to retain container parts (HashMap<PartId, _>) so PDF-embedded-image OCR + archive-member redactions survive the analyze → review → apply round-trip.

🤖 Generated with Claude Code