@oscharko-dev/keiko-server 0.2.7 → 0.2.9

package/dist/store/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/store/schema.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,cAAc,IAAI,CAAC;AAqNhC,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAepD"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/store/schema.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,cAAc,IAAI,CAAC;AA2RhC,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAepD"}

package/dist/store/schema.js

@@ -1,7 +1,7 @@
 // ADR-0013 D5 — Schema v1 + migration runner via PRAGMA user_version. Forward-only, idempotent,
 // transactional. Each migration is a `.sql` string of one or more CREATE/ALTER statements; the
 // runner applies migrations whose 1-based index > current user_version.
-export const SCHEMA_VERSION = 5;
+export const SCHEMA_VERSION = 8;
 const V1_SQL = `
 CREATE TABLE projects (
   path TEXT NOT NULL PRIMARY KEY,
@@ -184,12 +184,79 @@ CREATE INDEX idx_relationship_audit_relationship
   ON relationship_audit_entries(workspace_id, relationship_id, occurred_at)
   WHERE relationship_id IS NOT NULL;
 `;
+// V6 — persist the redacted, browser-safe grounded answer projection on assistant messages.
+// This stores citation metadata and context summaries only, not retrieved excerpt contents.
+const V6_SQL = `
+ALTER TABLE chat_messages ADD COLUMN grounded_answer_json TEXT;
+`;
+// V7 (issue #445, epic #443) — durable managed task-workspace instances. STRICT mode. One row per
+// provisioned/activated task workspace; the partial unique index on (repository_id, task_id) enforces
+// the idempotency invariant at the DB layer as a second barrier alongside the deterministic id
+// derivation (AC3). All columns are content-free per the #444 contract (ids/hashes, enums, ISO
+// timestamps, branch/path names); `lock_json`, `drift_markers_json`, and `recovery_hints_json` carry
+// the nested WorkspaceLock / drift-marker / recovery-hint shapes the contract validator gates.
+const V7_SQL = `
+CREATE TABLE task_workspace_instances (
+  workspace_id           TEXT NOT NULL PRIMARY KEY,
+  schema_version         TEXT NOT NULL,
+  task_id                TEXT NOT NULL,
+  repository_id          TEXT NOT NULL,
+  repository_root        TEXT NOT NULL,
+  base_branch            TEXT NOT NULL,
+  task_branch            TEXT NOT NULL,
+  managed_worktree_path  TEXT NOT NULL,
+  gitdir_identity        TEXT NOT NULL,
+  lifecycle_state        TEXT NOT NULL,
+  health                 TEXT NOT NULL,
+  lock_json              TEXT,
+  created_at             TEXT NOT NULL,
+  updated_at             TEXT NOT NULL,
+  last_verified_at       TEXT,
+  last_verified_head     TEXT,
+  drift_markers_json     TEXT NOT NULL,
+  recovery_hints_json    TEXT NOT NULL,
+  audit_correlation_id   TEXT NOT NULL,
+  CHECK (
+    schema_version IN ('1')
+    AND lifecycle_state IN (
+      'provisioning','active','paused','handoff-ready','archived','merged',
+      'abandoned','recovery-required','failed','cleanup-pending'
+    )
+    AND health IN ('healthy','degraded','drifted','locked-out','missing','unknown')
+  )
+) STRICT;
+
+CREATE UNIQUE INDEX uniq_task_workspace_repo_task
+  ON task_workspace_instances(repository_id, task_id);
+CREATE INDEX idx_task_workspace_repository
+  ON task_workspace_instances(repository_id, updated_at);
+`;
+// V8 (issue #446, epic #443) — singleton active task-workspace pointer. Studio binds exactly ONE
+// active task workspace at a time; this table holds at most one row (id pinned to the constant
+// 'active', enforced by CHECK). The WorkspaceBinding surfaces consume is DERIVED from the referenced
+// instance (binding.ts), never stored, so the active root has no second copy to drift. Content-free:
+// an opaque workspace id + an opaque actor id + ISO timestamps only. ON DELETE CASCADE clears the
+// pointer when the referenced instance is removed (the lifecycle service also clears it defensively).
+const V8_SQL = `
+CREATE TABLE task_workspace_active_pointer (
+  id            TEXT NOT NULL PRIMARY KEY DEFAULT 'active',
+  workspace_id  TEXT NOT NULL,
+  set_by        TEXT NOT NULL,
+  set_at        TEXT NOT NULL,
+  updated_at    TEXT NOT NULL,
+  CHECK (id = 'active'),
+  FOREIGN KEY (workspace_id) REFERENCES task_workspace_instances(workspace_id) ON DELETE CASCADE
+) STRICT;
+`;
 const MIGRATIONS = [
     { version: 1, sql: V1_SQL },
     { version: 2, sql: V2_SQL },
     { version: 3, sql: V3_SQL },
     { version: 4, sql: V4_SQL },
     { version: 5, sql: V5_SQL },
+    { version: 6, sql: V6_SQL },
+    { version: 7, sql: V7_SQL },
+    { version: 8, sql: V8_SQL },
 ];
 function currentUserVersion(db) {
     const row = db.prepare("PRAGMA user_version").get();

package/dist/store/types.d.ts

@@ -1,5 +1,5 @@
-import type { Project, Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatRole, WorkflowStatus, ChatMessage, CreateChatOptions, UpdateProjectPatch, UpdateChatPatch, NewChatMessage, UpdateChatMessagePatch } from "@oscharko-dev/keiko-contracts/bff-wire";
-export type { Project, Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatRole, WorkflowStatus, ChatMessage, CreateChatOptions, UpdateProjectPatch, UpdateChatPatch, NewChatMessage, UpdateChatMessagePatch, };
+import type { Project, Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatRole, WorkflowStatus, ChatMessage, CreateChatOptions, GroundedAnswer, UpdateProjectPatch, UpdateChatPatch, NewChatMessage, UpdateChatMessagePatch } from "@oscharko-dev/keiko-contracts/bff-wire";
+export type { Project, Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatRole, WorkflowStatus, ChatMessage, CreateChatOptions, GroundedAnswer, UpdateProjectPatch, UpdateChatPatch, NewChatMessage, UpdateChatMessagePatch, };
 export interface UiStore {
     readonly listProjects: () => readonly Project[];
     readonly createProject: (path: string, name?: string) => Project;
@@ -15,6 +15,7 @@ export interface UiStore {
     readonly createMessage: (msg: NewChatMessage) => ChatMessage;
     readonly createMessages: (messages: readonly NewChatMessage[]) => readonly ChatMessage[];
     readonly updateMessage: (id: string, patch: UpdateChatMessagePatch) => ChatMessage;
+    readonly attachGroundedAnswer: (id: string, answer: GroundedAnswer) => ChatMessage;
     readonly close: () => void;
 }
 export interface UpdateChatOptions {

package/dist/store/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,EACvB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,CAAC;AAEF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,SAAS,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IAC7E,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/C,QAAQ,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC;IAC7E,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,iBAAiB,KACrB,IAAI,CAAC;IACV,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC/F,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAE1C,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,WAAW,EAAE,CAAC;IAClF,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,WAAW,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,SAAS,WAAW,EAAE,CAAC;IACzF,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,KAAK,WAAW,CAAC;IAEnF,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AAID,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,EACvB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,CAAC;AAEF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,SAAS,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IAC7E,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/C,QAAQ,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC;IAC7E,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,iBAAiB,KACrB,IAAI,CAAC;IACV,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC/F,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAE1C,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,WAAW,EAAE,CAAC;IAClF,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,WAAW,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,SAAS,WAAW,EAAE,CAAC;IACzF,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,KAAK,WAAW,CAAC;IACnF,QAAQ,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,KAAK,WAAW,CAAC;IAEnF,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AAID,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD"}

package/dist/task-workspace/active-store.d.ts

@@ -0,0 +1,21 @@
+import type { DatabaseSync } from "node:sqlite";
+export interface ActiveWorkspacePointer {
+    readonly workspaceId: string;
+    readonly setBy: string;
+    readonly setAt: string;
+    readonly updatedAt: string;
+}
+export interface ActiveWorkspacePointerStore {
+    /** The current active pointer, or undefined in unbound mode (no row). */
+    readonly get: () => ActiveWorkspacePointer | undefined;
+    /** Upsert the singleton row (id pinned to 'active'); returns the persisted pointer. */
+    readonly set: (input: {
+        readonly workspaceId: string;
+        readonly setBy: string;
+        readonly atIso: string;
+    }) => ActiveWorkspacePointer;
+    /** Delete the singleton row → unbound mode. Idempotent. */
+    readonly clear: () => void;
+}
+export declare function buildActiveWorkspacePointerStoreOverDatabase(db: DatabaseSync): ActiveWorkspacePointerStore;
+//# sourceMappingURL=active-store.d.ts.map

package/dist/task-workspace/active-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-store.d.ts","sourceRoot":"","sources":["../../src/task-workspace/active-store.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,2BAA2B;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,sBAAsB,GAAG,SAAS,CAAC;IACvD,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,KAAK,sBAAsB,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAsCD,wBAAgB,4CAA4C,CAC1D,EAAE,EAAE,YAAY,GACf,2BAA2B,CAgB7B"}

package/dist/task-workspace/active-store.js

@@ -0,0 +1,55 @@
+// Durable singleton active task-workspace pointer (Issue #446, Epic #443).
+//
+// Studio binds exactly ONE active task workspace at a time. The pointer is the durable source of truth
+// for "which workspace is active"; the WorkspaceBinding surfaces consume is DERIVED from the referenced
+// WorkspaceInstance (see binding.ts), never stored here — so there is no second copy of the root to
+// drift. The table is pinned to a single row (id = 'active', CHECK-enforced) over the SAME node:sqlite
+// handle as the UI store and the #445 instance store (schema.ts §V8), so the V8 sibling row shares the
+// single-writer transaction model.
+//
+// The pointer is content-free: an opaque workspace id + an opaque actor id + ISO timestamps. No root,
+// no branch, no path is persisted here. "Clear active" deletes the row → unbound mode.
+const SQL_GET = `SELECT workspace_id, set_by, set_at, updated_at FROM task_workspace_active_pointer WHERE id = 'active'`;
+const SQL_CLEAR = `DELETE FROM task_workspace_active_pointer WHERE id = 'active'`;
+// `set_at` records when the CURRENT workspace became active, `updated_at` the last touch. On conflict
+// the CASE keeps the original `set_at` when the SAME workspace is re-set (an idempotent re-activation
+// preserves its "became active" time) and resets it when switching to a DIFFERENT workspace.
+const SQL_SET = `
+INSERT INTO task_workspace_active_pointer (id, workspace_id, set_by, set_at, updated_at)
+VALUES ('active', ?, ?, ?, ?)
+ON CONFLICT(id) DO UPDATE SET
+  set_at = CASE
+    WHEN task_workspace_active_pointer.workspace_id = excluded.workspace_id
+    THEN task_workspace_active_pointer.set_at
+    ELSE excluded.set_at
+  END,
+  workspace_id = excluded.workspace_id,
+  set_by = excluded.set_by,
+  updated_at = excluded.updated_at
+RETURNING workspace_id, set_by, set_at, updated_at
+`;
+function rowToPointer(row) {
+    return {
+        workspaceId: row.workspace_id,
+        setBy: row.set_by,
+        setAt: row.set_at,
+        updatedAt: row.updated_at,
+    };
+}
+export function buildActiveWorkspacePointerStoreOverDatabase(db) {
+    return {
+        get: () => {
+            const row = db.prepare(SQL_GET).get();
+            return row === undefined ? undefined : rowToPointer(row);
+        },
+        set: (input) => {
+            const row = db
+                .prepare(SQL_SET)
+                .get(input.workspaceId, input.setBy, input.atIso, input.atIso);
+            return rowToPointer(row);
+        },
+        clear: () => {
+            db.prepare(SQL_CLEAR).run();
+        },
+    };
+}

package/dist/task-workspace/authorization.d.ts

@@ -0,0 +1,7 @@
+import type { WorkspaceInfo } from "@oscharko-dev/keiko-workspace";
+import type { UiHandlerDeps } from "../deps.js";
+type ManagedRootDeps = Pick<UiHandlerDeps, "managedTaskWorkspaceRoot" | "store" | "workspaceProvisioning">;
+export declare function resolveManagedTaskWorkspaceRoot(deps: Pick<ManagedRootDeps, "managedTaskWorkspaceRoot" | "workspaceProvisioning">, root: string): WorkspaceInfo | undefined;
+export declare function resolveRegisteredOrManagedWorkspaceRoot(deps: ManagedRootDeps, root: string): WorkspaceInfo | undefined;
+export {};
+//# sourceMappingURL=authorization.d.ts.map

package/dist/task-workspace/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/task-workspace/authorization.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,KAAK,eAAe,GAAG,IAAI,CACzB,aAAa,EACb,0BAA0B,GAAG,OAAO,GAAG,uBAAuB,CAC/D,CAAC;AAmBF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,0BAA0B,GAAG,uBAAuB,CAAC,EACjF,IAAI,EAAE,MAAM,GACX,aAAa,GAAG,SAAS,CAiB3B;AAED,wBAAgB,uCAAuC,CACrD,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,MAAM,GACX,aAAa,GAAG,SAAS,CAK3B"}

package/dist/task-workspace/authorization.js

@@ -0,0 +1,54 @@
+// Authorization helpers for task-bound execution roots (Epic #443).
+//
+// Legacy BFF routes authorize `projectId` / `workspaceRoot` against the UI project store. A bound task
+// workspace intentionally points those surfaces at a managed worktree instead, so the route boundary
+// must accept that root only when it can be re-proven from the persisted WorkspaceInstance and the
+// Keiko-owned managed root. This does not grant arbitrary filesystem authority: the leaf id, persisted
+// path, derived managed path, realpath containment, and on-disk presence must all agree.
+import { basename } from "node:path";
+import { isManagedTargetContained, managedTargetExists } from "./managed-root.js";
+import { deriveManagedWorktreePath } from "./naming.js";
+function workspaceInfo(root) {
+    return {
+        root,
+        name: undefined,
+        version: undefined,
+        testFramework: "unknown",
+        sourceDirs: [],
+        testDirs: [],
+        languages: [],
+        ignoreLines: [],
+    };
+}
+function pathLeaf(path) {
+    return basename(path.replace(/[/\\]+$/u, ""));
+}
+export function resolveManagedTaskWorkspaceRoot(deps, root) {
+    const managedRoot = deps.managedTaskWorkspaceRoot;
+    const provisioning = deps.workspaceProvisioning;
+    if (managedRoot === undefined || provisioning === undefined || root.length === 0) {
+        return undefined;
+    }
+    const instance = provisioning.getInstance(pathLeaf(root));
+    if (instance === undefined)
+        return undefined;
+    const expected = deriveManagedWorktreePath({
+        managedRoot,
+        repositoryId: instance.repositoryId,
+        workspaceId: instance.workspaceId,
+    });
+    if (root !== expected || instance.managedWorktreePath !== expected)
+        return undefined;
+    if (!isManagedTargetContained(managedRoot, instance.managedWorktreePath))
+        return undefined;
+    if (!managedTargetExists(instance.managedWorktreePath))
+        return undefined;
+    return workspaceInfo(instance.managedWorktreePath);
+}
+export function resolveRegisteredOrManagedWorkspaceRoot(deps, root) {
+    for (const project of deps.store.listProjects()) {
+        if (project.path === root)
+            return workspaceInfo(project.path);
+    }
+    return resolveManagedTaskWorkspaceRoot(deps, root);
+}

package/dist/task-workspace/binding.d.ts

@@ -0,0 +1,3 @@
+import { type WorkspaceBinding, type WorkspaceInstance } from "@oscharko-dev/keiko-contracts";
+export declare function buildBinding(instance: WorkspaceInstance): WorkspaceBinding;
+//# sourceMappingURL=binding.d.ts.map

package/dist/task-workspace/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/task-workspace/binding.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AAEvC,wBAAgB,YAAY,CAAC,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,CAU1E"}

package/dist/task-workspace/binding.js

@@ -0,0 +1,22 @@
+// Derive the authoritative active-workspace binding from a persisted instance (Issue #446, Epic #443).
+//
+// The #444 contract makes the WorkspaceBinding the single source of truth surfaces consume, with the
+// invariant gitDeliveryRoot === activeRoot === editorProjectRoot enforced by validateWorkspaceBinding.
+// #445 first computed this binding privately inside provisioning; #446 promotes it to a shared helper
+// so BOTH the provisioning/activation path AND the #446 lifecycle/active-pointer path derive the same
+// binding from a stored instance — there is exactly one derivation, never a recomputed second one.
+//
+// The active root is the managed worktree path: every bound surface (editor/runtime/git-delivery/
+// terminal/files/...) operates on the task's isolated worktree, never the bare repository root.
+import { TASK_WORKSPACE_SCHEMA_VERSION, TASK_WORKSPACE_SURFACES, } from "@oscharko-dev/keiko-contracts";
+export function buildBinding(instance) {
+    return {
+        schemaVersion: TASK_WORKSPACE_SCHEMA_VERSION,
+        workspaceId: instance.workspaceId,
+        taskId: instance.taskId,
+        activeRoot: instance.managedWorktreePath,
+        boundSurfaces: TASK_WORKSPACE_SURFACES,
+        gitDeliveryRoot: instance.managedWorktreePath,
+        editorProjectRoot: instance.managedWorktreePath,
+    };
+}

package/dist/task-workspace/cleanup.d.ts

@@ -0,0 +1,4 @@
+import type { WorkspaceCleanupService, WorkspaceCleanupServiceDeps } from "./types.js";
+export declare function safelyRemoveManagedPath(managedRoot: string, target: string): void;
+export declare function createWorkspaceCleanupService(deps: WorkspaceCleanupServiceDeps): WorkspaceCleanupService;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/task-workspace/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/task-workspace/cleanup.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAGV,uBAAuB,EACvB,2BAA2B,EAI5B,MAAM,YAAY,CAAC;AAiCpB,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAcjF;AAgeD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,2BAA2B,GAChC,uBAAuB,CAgBzB"}