@akira-tl/forgerelay 0.8.2 → 0.8.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.8.2",
+  "version": "0.8.4",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -47,7 +47,7 @@
     "release:publish": "node scripts/release/publish.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/workspace-tasks.test.ts && tsx src/workspace-task-reminders.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",

package/scripts/debug/accept.mjs

@@ -48,6 +48,10 @@ mkdirSync(acceptanceRoot, { recursive: true });
 setupGitProject(checkoutWorkspace);
 setupGitProject(lifecycleDeleteWorkspace);
 writeFileSync(join(lifecycleDeleteWorkspace, "keep.txt"), "keep checkout files\n");
+writeFileSync(
+  join(lifecycleDeleteWorkspace, "AGENTS.md"),
+  "INSPECTION_ACCEPTANCE_BOOTSTRAP_SECRET\n",
+);
 setupCodeIntelligenceAcceptanceProject({
   root: checkoutWorkspace,
   fakeLanguageServer,
@@ -265,6 +269,7 @@ try {
       "hooks.lifecycle",
       "capability-guides.read",
       "code.intelligence",
+      "workspace.tasks",
       "batch.execute",
       ...(process.platform === "linux" ? ["artifact.native-download"] : []),
       "ui.mcp-app",
@@ -276,12 +281,116 @@ try {
     "hooks.check",
     "review.changes",
     "code.intelligence",
+    "workspace.tasks",
     "batch.execute",
     ...(process.platform === "linux" ? ["artifact.download"] : []),
   ]);
   assert.equal(capabilityCatalog[0].available, true);
   assert.equal(capabilityCatalog[0].guide.name, "lifecycle-hooks");
 
+  const checkoutTaskStatePath = join(stateDir, "workspaces", workspaceId, "tasks.json");
+  assert.ok(existsSync(checkoutTaskStatePath));
+  const checkoutTaskList = callTool(oauth.accessToken, sessionId, 130, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "list.create", name: "7677 release tasks" },
+  });
+  assert.equal(checkoutTaskList.isError, undefined);
+  const checkoutListId = checkoutTaskList.structuredContent.result.lists[0].id;
+  const checkoutTask = callTool(oauth.accessToken, sessionId, 131, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "task.create",
+      listId: checkoutListId,
+      subject: "Verify v0.8.3 Task persistence",
+      content: "created through real MCP",
+      status: "in_progress",
+    },
+  });
+  assert.equal(checkoutTask.isError, undefined);
+  const checkoutTaskId = checkoutTask.structuredContent.result.lists[0].tasks[0].id;
+  const taskFingerprintBeforeExternal = checkoutTask.structuredContent.result.fingerprint;
+  const externalTaskState = JSON.parse(readFileSync(checkoutTaskStatePath, "utf8"));
+  externalTaskState.lists[0].tasks[0].content = "reloaded external task edit";
+  writeFileSync(checkoutTaskStatePath, `${JSON.stringify(externalTaskState, null, 2)}\n`);
+  const reloadedCheckoutTasks = callTool(oauth.accessToken, sessionId, 132, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "get",
+      level: "detail",
+      listId: checkoutListId,
+      taskId: checkoutTaskId,
+    },
+  });
+  assert.equal(reloadedCheckoutTasks.isError, undefined);
+  assert.equal(reloadedCheckoutTasks.structuredContent.result.task.id, checkoutTaskId);
+  assert.equal(reloadedCheckoutTasks.structuredContent.result.task.content, "reloaded external task edit");
+  assert.notEqual(reloadedCheckoutTasks.structuredContent.result.fingerprint, taskFingerprintBeforeExternal);
+
+  const checkoutTaskSummary = callTool(oauth.accessToken, sessionId, 150, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "get" },
+  });
+  const summaryProjection = checkoutTaskSummary.structuredContent.result;
+  assert.equal(summaryProjection.level, "summary");
+  assert.equal(summaryProjection.lists[0].id, checkoutListId);
+  assert.equal(summaryProjection.lists[0].taskCount, 1);
+  assert.equal(summaryProjection.lists[0].unfinishedTaskCount, 1);
+  assert.equal(JSON.stringify(summaryProjection).includes(checkoutTaskId), false);
+  assert.equal(JSON.stringify(summaryProjection).includes("reloaded external task edit"), false);
+
+  const checkoutTaskHeaders = callTool(oauth.accessToken, sessionId, 151, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "get", level: "headers", listId: checkoutListId },
+  });
+  const headersProjection = checkoutTaskHeaders.structuredContent.result;
+  assert.equal(headersProjection.level, "headers");
+  assert.equal(headersProjection.lists.length, 1);
+  assert.equal(headersProjection.lists[0].tasks[0].id, checkoutTaskId);
+  assert.equal(headersProjection.lists[0].tasks[0].subject, "Verify v0.8.3 Task persistence");
+  assert.equal("content" in headersProjection.lists[0].tasks[0], false);
+
+  const checkoutTaskDetail = callTool(oauth.accessToken, sessionId, 152, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "get",
+      level: "detail",
+      listId: checkoutListId,
+      taskId: checkoutTaskId,
+    },
+  });
+  const detailProjection = checkoutTaskDetail.structuredContent.result;
+  assert.equal(detailProjection.level, "detail");
+  assert.equal(detailProjection.task.id, checkoutTaskId);
+  assert.equal(detailProjection.task.content, "reloaded external task edit");
+  pass("workspace.tasks progressive disclosure", "summary -> headers -> one Task detail through real MCP");
+
+  for (let index = 0; index < 29; index += 1) {
+    const semanticWork = callTool(oauth.accessToken, sessionId, 160 + index, "read", {
+      workspaceId,
+      path: "README.md",
+    });
+    assert.doesNotMatch(toolText(semanticWork), /Reminder: this Workspace has unfinished active Tasks/);
+  }
+  const reminderWork = callTool(oauth.accessToken, sessionId, 189, "read", {
+    workspaceId,
+    path: "README.md",
+  });
+  assert.match(toolText(reminderWork), /Reminder: this Workspace has unfinished active Tasks/);
+  assert.equal(toolText(reminderWork).includes("reloaded external task edit"), false);
+  pass("workspace.tasks reminder", "default 30 semantic work calls emitted one body-free reminder");
+
   const repeatedOpen = callTool(oauth.accessToken, sessionId, 84, "open_workspace", {
     path: checkoutWorkspace,
     newWorkspace: true,
@@ -312,6 +421,13 @@ try {
   assert.equal(closedWorkspace.isError, undefined);
   assert.equal(closedWorkspace.structuredContent.workspaceId, workspaceId);
   assert.equal(closedWorkspace.structuredContent.action, "close");
+  const closedCheckoutTasks = callTool(oauth.accessToken, sessionId, 133, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "get" },
+  });
+  assert.equal(closedCheckoutTasks.isError, true);
 
   const closedInventory = callTool(oauth.accessToken, sessionId, 87, "open_workspace", {
     action: "list",
@@ -336,12 +452,101 @@ try {
     resumedOriginal.structuredContent.contextFingerprint,
     opened.structuredContent.contextFingerprint,
   );
+  const resumedCheckoutTasks = callTool(oauth.accessToken, sessionId, 134, "capability", {
+    workspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "get",
+      level: "detail",
+      listId: checkoutListId,
+      taskId: checkoutTaskId,
+    },
+  });
+  assert.equal(resumedCheckoutTasks.isError, undefined);
+  assert.equal(resumedCheckoutTasks.structuredContent.result.task.id, checkoutTaskId);
+  assert.equal(resumedCheckoutTasks.structuredContent.result.task.content, "reloaded external task edit");
+  assert.equal(resumedOriginal.structuredContent.contextFingerprint, opened.structuredContent.contextFingerprint);
 
   const deleteOpened = callTool(oauth.accessToken, sessionId, 91, "open_workspace", {
     path: lifecycleDeleteWorkspace,
     context: "none",
   }, { "openai/session": "acceptance-workspace-delete" });
   const deleteWorkspaceId = deleteOpened.structuredContent.workspaceId;
+  const deleteTaskStatePath = join(stateDir, "workspaces", deleteWorkspaceId, "tasks.json");
+  const deleteTaskList = callTool(oauth.accessToken, sessionId, 135, "capability", {
+    workspaceId: deleteWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "list.create", name: "delete with workspace" },
+  });
+  assert.equal(deleteTaskList.isError, undefined);
+  const deleteTaskListId = deleteTaskList.structuredContent.result.lists[0].id;
+  const inspectionTask = callTool(oauth.accessToken, sessionId, 190, "capability", {
+    workspaceId: deleteWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "task.create",
+      listId: deleteTaskListId,
+      subject: "Inspect safely",
+      content: "INSPECTION_ACCEPTANCE_TASK_BODY_SECRET",
+      status: "in_progress",
+    },
+  });
+  assert.equal(inspectionTask.isError, undefined);
+  assert.ok(existsSync(deleteTaskStatePath));
+
+  const inspectionBefore = callTool(oauth.accessToken, sessionId, 191, "open_workspace", {
+    action: "list",
+    workspaceId: deleteWorkspaceId,
+  }, workspaceConversationMeta);
+  const inspectionBeforeEntry = inspectionBefore.structuredContent.workspaces[0];
+  assert.equal(inspectionBeforeEntry.current, false);
+  const inspectedWorkspace = callTool(oauth.accessToken, sessionId, 192, "open_workspace", {
+    action: "inspect",
+    workspaceId: deleteWorkspaceId,
+  }, workspaceConversationMeta);
+  assert.equal(inspectedWorkspace.structuredContent.action, "inspect");
+  const inspectionProjection = inspectedWorkspace.structuredContent.inspection;
+  assert.equal(inspectionProjection.workspaceId, deleteWorkspaceId);
+  assert.equal(inspectionProjection.kind, "workspace");
+  assert.equal(inspectionProjection.location, "local");
+  assert.equal(inspectionProjection.root, lifecycleDeleteWorkspace);
+  assert.equal(inspectionProjection.taskSummary.level, "summary");
+  assert.equal(inspectionProjection.taskSummary.lists[0].taskCount, 1);
+  assert.equal(inspectionProjection.taskSummary.lists[0].unfinishedTaskCount, 1);
+  const inspectionJson = JSON.stringify(inspectedWorkspace);
+  for (const forbidden of [
+    "INSPECTION_ACCEPTANCE_BOOTSTRAP_SECRET",
+    "INSPECTION_ACCEPTANCE_TASK_BODY_SECRET",
+    "\"fingerprint\"",
+    "\"agentsFiles\"",
+    "\"availableAgentsFiles\"",
+    "\"capabilityGuides\"",
+    "\"skillDiagnostics\"",
+    "\"agentProviders\"",
+    "\"contextFingerprint\"",
+    "\"capabilityFingerprint\"",
+    "\"memberContext\"",
+  ]) {
+    assert.equal(inspectionJson.includes(forbidden), false, `Workspace inspect leaked ${forbidden}`);
+  }
+  const inspectionAfter = callTool(oauth.accessToken, sessionId, 193, "open_workspace", {
+    action: "list",
+    workspaceId: deleteWorkspaceId,
+  }, workspaceConversationMeta);
+  assert.equal(inspectionAfter.structuredContent.workspaces[0].lastUsedAt, inspectionBeforeEntry.lastUsedAt);
+  assert.equal(inspectionAfter.structuredContent.workspaces[0].current, false);
+  const callerAfterInspection = callTool(oauth.accessToken, sessionId, 194, "open_workspace", {
+    workspaceId,
+    context: "auto",
+  }, workspaceConversationMeta);
+  assert.equal(callerAfterInspection.structuredContent.workspaceId, workspaceId);
+  assert.equal(callerAfterInspection.structuredContent.agentsFiles, undefined);
+  assert.equal(callerAfterInspection.structuredContent.capabilityGuides, undefined);
+  pass("Workspace inspection", "cross-Workspace metadata + Task summary stayed read-only and bootstrap-free");
+
   const deleteClosed = callTool(oauth.accessToken, sessionId, 92, "close_workspace", {
     workspaceId: deleteWorkspaceId,
   });
@@ -353,12 +558,17 @@ try {
   assert.equal(deletedWorkspace.isError, undefined);
   assert.equal(deletedWorkspace.structuredContent.workspaceId, deleteWorkspaceId);
   assert.equal(deletedWorkspace.structuredContent.action, "delete");
+  assert.equal(existsSync(deleteTaskStatePath), false);
   assert.equal(readFileSync(join(lifecycleDeleteWorkspace, "keep.txt"), "utf8"), "keep checkout files\n");
   const deletedInventory = callTool(oauth.accessToken, sessionId, 94, "open_workspace", {
     action: "list",
     workspaceId: deleteWorkspaceId,
   });
   assert.equal(deletedInventory.structuredContent.workspaces.length, 0);
+  pass(
+    "workspace tasks",
+    `${workspaceId} create -> external reload -> close/reopen; explicit delete removed ${deleteWorkspaceId} Task state`,
+  );
 
   pass(
     "workspace lifecycle + inventory",
@@ -440,6 +650,7 @@ try {
     "host-integration",
     "shell-processes",
     "code-intelligence",
+    "workspace-tasks",
     "batch-execution",
   ]);
   const hooksGuide = callTool(oauth.accessToken, sessionId, 78, "read", {
@@ -650,6 +861,18 @@ try {
   });
   assert.equal(closedWorktreeInventory.structuredContent.workspaces.length, 1);
   assert.equal(closedWorktreeInventory.structuredContent.workspaces[0].state, "closed");
+  const closedWorktreeInspection = callTool(oauth.accessToken, sessionId, 195, "open_workspace", {
+    action: "inspect",
+    workspaceId: worktreeWorkspaceId,
+  });
+  const closedWorktreeProjection = closedWorktreeInspection.structuredContent.inspection;
+  assert.equal(closedWorktreeProjection.kind, "workspace");
+  assert.equal(closedWorktreeProjection.mode, "worktree");
+  assert.equal(closedWorktreeProjection.managed, true);
+  assert.equal(closedWorktreeProjection.state, "closed");
+  assert.equal(closedWorktreeProjection.rootValid, false);
+  assert.equal(existsSync(managedWorktreePath), false);
+  assert.equal(JSON.stringify(closedWorktreeInspection).includes("\"fingerprint\""), false);
 
   const reopenedWorktree = callTool(oauth.accessToken, sessionId, 111, "open_workspace", {
     workspaceId: worktreeWorkspaceId,
@@ -697,6 +920,33 @@ try {
     context: "none",
   });
   const compositeWorkspaceId = compositeOpened.structuredContent.workspaceId;
+  assert.deepEqual(
+    compositeOpened.structuredContent.capabilityCatalog.map((entry) => entry.name),
+    ["workspace.tasks"],
+  );
+  const compositeTaskStatePath = join(stateDir, "workspaces", compositeWorkspaceId, "tasks.json");
+  assert.ok(existsSync(compositeTaskStatePath));
+  const compositeTaskList = callTool(oauth.accessToken, sessionId, 136, "capability", {
+    workspaceId: compositeWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "list.create", name: "Composite release tasks" },
+  });
+  assert.equal(compositeTaskList.isError, undefined);
+  const compositeTaskListId = compositeTaskList.structuredContent.result.lists[0].id;
+  const compositeTask = callTool(oauth.accessToken, sessionId, 137, "capability", {
+    workspaceId: compositeWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "task.create",
+      listId: compositeTaskListId,
+      subject: "Preserve Composite Task state",
+      content: "Composite-owned state",
+    },
+  });
+  assert.equal(compositeTask.isError, undefined);
+  const compositeTaskId = compositeTask.structuredContent.result.lists[0].tasks[0].id;
   callTool(oauth.accessToken, sessionId, 117, "open_workspace", {
     action: "member",
     workspaceId: compositeWorkspaceId,
@@ -707,6 +957,14 @@ try {
       workspaceId,
     },
   });
+  const memberScopedCompositeTasks = callTool(oauth.accessToken, sessionId, 138, "capability", {
+    workspaceId: compositeWorkspaceId,
+    member: "code",
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "get" },
+  });
+  assert.equal(memberScopedCompositeTasks.isError, true);
   const closedComposite = callTool(oauth.accessToken, sessionId, 118, "close_workspace", {
     workspaceId: compositeWorkspaceId,
   });
@@ -727,6 +985,27 @@ try {
     path: "composite-sentinel.txt",
   });
   assert.equal(closedCompositeRead.isError, true);
+  const closedCompositeTasks = callTool(oauth.accessToken, sessionId, 139, "capability", {
+    workspaceId: compositeWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: { operation: "get" },
+  });
+  assert.equal(closedCompositeTasks.isError, true);
+  const closedCompositeInspection = callTool(oauth.accessToken, sessionId, 196, "open_workspace", {
+    action: "inspect",
+    workspaceId: compositeWorkspaceId,
+  });
+  const closedCompositeProjection = closedCompositeInspection.structuredContent.inspection;
+  assert.equal(closedCompositeProjection.kind, "composite");
+  assert.equal(closedCompositeProjection.state, "closed");
+  assert.equal(closedCompositeProjection.members[0].workspaceId, workspaceId);
+  assert.equal(closedCompositeProjection.members[0].known, true);
+  assert.equal(closedCompositeProjection.taskSummary.lists[0].taskCount, 1);
+  assert.equal(
+    JSON.stringify(closedCompositeInspection).includes("Composite-owned state"),
+    false,
+  );
 
   const reopenedComposite = callTool(oauth.accessToken, sessionId, 121, "open_workspace", {
     workspaceId: compositeWorkspaceId,
@@ -735,6 +1014,20 @@ try {
   assert.equal(reopenedComposite.structuredContent.workspaceId, compositeWorkspaceId);
   assert.equal(reopenedComposite.structuredContent.status, "active");
   assert.equal(reopenedComposite.structuredContent.members[0].workspaceId, workspaceId);
+  const reopenedCompositeTasks = callTool(oauth.accessToken, sessionId, 140, "capability", {
+    workspaceId: compositeWorkspaceId,
+    name: "workspace.tasks",
+    action: "run",
+    arguments: {
+      operation: "get",
+      level: "detail",
+      listId: compositeTaskListId,
+      taskId: compositeTaskId,
+    },
+  });
+  assert.equal(reopenedCompositeTasks.isError, undefined);
+  assert.equal(reopenedCompositeTasks.structuredContent.result.task.id, compositeTaskId);
+  assert.equal(reopenedCompositeTasks.structuredContent.result.task.content, "Composite-owned state");
   const reopenedCompositeRead = callTool(oauth.accessToken, sessionId, 122, "read", {
     workspaceId: compositeWorkspaceId,
     member: "code",
@@ -748,6 +1041,7 @@ try {
   });
   assert.equal(deletedComposite.structuredContent.action, "delete");
   assert.equal(deletedComposite.structuredContent.dissolved, true);
+  assert.equal(existsSync(compositeTaskStatePath), false);
   const memberAfterCompositeDelete = callTool(oauth.accessToken, sessionId, 124, "read", {
     workspaceId,
     path: "composite-sentinel.txt",
@@ -759,6 +1053,10 @@ try {
     workspaceId: compositeWorkspaceId,
   });
   assert.equal(deletedCompositeInventory.structuredContent.compositeWorkspaces.length, 0);
+  pass(
+    "Composite workspace tasks",
+    `${compositeWorkspaceId} self-owned Task state -> close/reopen -> delete cleanup; member-scoped Task access rejected`,
+  );
   pass(
     "Composite lifecycle",
     `${compositeWorkspaceId} close -> closed/non-routable -> same-id reopen -> delete; member Workspace preserved`,