feat: align hosted workspace paths across CLI and Desktop

[Saga4]

Summary

• add durable hosted-workspace attachment records with stable mount identity
• use one coordinator for loc and Desktop attach, refresh, list, and relocate workflows
• relocate only into an absent destination under an exclusive lock and commit with compare-and-swap
• persist identity-bound cleanup obligations so crashes recover without deleting dirty or unowned paths
• validate exact pending payloads and publication receipts before exposing a new root
• advance SQLite state to schema 29 with migration and repository coverage
• document the portable workspace lifecycle and explicitly keep detach unavailable

User experience

A hosted workspace now keeps the same logical attachment identity while its machine-specific root can move. CLI and Desktop call the same coordinator, so a workspace attached or relocated in either surface is reflected consistently in the other.

Validation

• full locality-store suite: passed
• hosted sandbox and workspace archive suites: passed
• loc-cli parser/coordinator tests: passed
• Desktop Rust IPC tests and cargo check -p locality-desktop: passed
• Desktop Vitest: 126 tests passed
• Desktop production build: passed
• formatting and git diff --check: passed

Remaining live validation

No hosted-service credential flow or installed Windows/Linux/macOS application smoke test has been run yet. Those are runtime acceptance gates, not database migrations or backend deployment requirements.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
locality	Ready	Preview	Aug 3, 2026 8:43am