Module execute 

Product launcher execution and auth policy for POST /v1/palette/execute.

Dispatch itself (SomaApplication::execute_action) does not know about Palette surface exposure — that policy is ToolSpec.palette overlay data, which only the surface layers interpret. This module is the Palette surface’s enforcement point: an id that isn’t (or is no longer) palette-exposed is rejected here as launcher_not_found, before it ever reaches the application layer.

Enums

ExecuteOutcome

Functions

execute_launcher

Resolve and dispatch a Palette launcher execute request. Thin by design: verify the id is still a palette-exposed action, set destructive confirmation from the request, and delegate to SomaApplication::execute_action for everything else (scope, admin, destructive, and capability enforcement all live there).