ask-6ef2624788: own native workflow run lifecycles
Native workflow runs need a durable owner across pause, resume, and daemon restart. This adds the Rust lifecycle service and local RPC foundation: pinned source/arguments/tool ceilings, generation fences, supervised runner handles, scoped agent-tool launch configuration, and recorded child cancellation. A standalone local CLI starts an owner with an asking policy through the existing session creation gates. CLI, QuickJS runner, and activity executor integration follow separately.
Leo asked on 2026-11-02: “go do all those”.
Leo-ask: ask-6ef2624788
Design: teamleaderleo/leo-workspace#624, nightly train §§3.2–3.3.
Risk: durable lifecycle and cancellation paths; new records are versioned and launch proofs are never persisted. Existing code-mode and catalog gates remain the execution path. No signing or publishing credentials are held by workflow runs.
Validation: formatting and static diff checks passed. Focused fleet tests and independent review pending.
🤖 Generated with Codex
Agent session: agent session