[adamtheturtle]

The Flask VWS and VWQ applications imported validators, matching, response helpers and API operations from private core modules. Expose the operations they use through the typed mock_vws.server_api module and migrate both applications to those public imports. The target-manager application already uses public core modules.

The interface re-exports the existing implementations, preserving their behavior and exception identities. Give the two validator base exceptions distinct public names, QueryValidatorError and ServicesValidatorError. Document the complete import surface, adapter responsibilities, serialization support, revision compatibility and dependency ownership. Flask remains installed while its server is bundled; Werkzeug remains necessary for core multipart parsing.

Fixes #3740. The reusable contract-suite packaging and server extraction remain separate issues.

Validation:

• Existing Flask, query, Model Target, recognition-report and VuMark tests: 823 passed, 348 real-backend cases skipped.
• All 33 exports import without loading Flask. An import audit found no private core imports in any of the three Flask applications.
• Pre-commit and pre-push hooks passed, including partition checks and all type checkers. Pylint passed for the changed Python modules.
• Documentation HTML and spelling builds passed. The built wheel passed check-wheel-contents.
• git diff --check passed.

Based on current main. Its files are disjoint from open PRs #3769, #3770 and #3783. Hosted CI, including live-service and deployed Docker checks, is pending.