feat: consolidate database management work

Add catalog-owned logical relationships and runtime snapshots, extend the database-management UI and validation coverage, and document the updated operational workflow.

Keep active sensitive-generation status in a tooltip and indicator, and update the layout E2E to follow the history action in its new database-scoped location.

backend/src/workspaces/runtime-config-lease.ts

@@ -243,7 +243,12 @@ function readSnapshotWorkspace(snapshotPath: string): {
   }
 }
 
-function runtimePaths(dataRoot: string, workspaceId: string, workspaceRevision?: string): RuntimePaths {
+function runtimePaths(
+  dataRoot: string,
+  workspaceId: string,
+  workspaceRevision?: string,
+  effectiveRelationshipsPath?: string,
+): RuntimePaths {
   if (!isAbsolute(dataRoot)) throw new Error("registry workspace runtime requires an absolute data root");
   const root = join(dataRoot, "sessions", workspaceId);
   return {
@@ -254,6 +259,9 @@ function runtimePaths(dataRoot: string, workspaceId: string, workspaceRevision?:
     ...(workspaceRevision === undefined
       ? {}
       : { annotations_root: join(dataRoot, "sessions", workspaceId, "revisions", workspaceRevision, "artifacts") }),
+    ...(effectiveRelationshipsPath === undefined
+      ? {}
+      : { effective_relationships: effectiveRelationshipsPath }),
   };
 }
 
@@ -301,6 +309,7 @@ function renderWorkspaceRuntimeFromWorkspace(options: {
   dataRoot: string;
   secretRoots: readonly string[];
   semanticRuntime: SemanticRuntimeConfig;
+  effectiveRelationshipsPath?: string;
   workspaceSecretStore?: WorkspaceSecretStore;
 }): RenderedWorkspaceRuntime {
   const secretLease = options.workspaceSecretStore === undefined
@@ -325,7 +334,12 @@ function renderWorkspaceRuntimeFromWorkspace(options: {
       workspaceId: options.workspaceId,
       workspaceRevision: options.workspaceRevision,
       revisionContentRoot: options.revisionContentRoot,
-      runtimePaths: runtimePaths(options.dataRoot, options.workspaceId, options.workspaceRevision),
+      runtimePaths: runtimePaths(
+        options.dataRoot,
+        options.workspaceId,
+        options.workspaceRevision,
+        options.effectiveRelationshipsPath,
+      ),
       installationOverlay: overlay,
       bindings,
       bindingDigest: stableBindingDigest(bindings),
@@ -334,7 +348,12 @@ function renderWorkspaceRuntimeFromWorkspace(options: {
       renderedConfig: renderRuntimeConfig(
         options.workspace,
         bindings,
-        runtimePaths(options.dataRoot, options.workspaceId, options.workspaceRevision),
+        runtimePaths(
+          options.dataRoot,
+          options.workspaceId,
+          options.workspaceRevision,
+          options.effectiveRelationshipsPath,
+        ),
         context,
         overlay,
         options.semanticRuntime,
@@ -353,6 +372,7 @@ export function renderWorkspaceRuntimeFromSnapshotPath(options: {
   dataRoot: string;
   secretRoots: readonly string[];
   semanticRuntime: SemanticRuntimeConfig;
+  effectiveRelationshipsPath?: string;
   workspaceSecretStore?: WorkspaceSecretStore;
 }): RenderedWorkspaceRuntime {
   const snapshot = readSnapshotWorkspace(options.snapshotPath);
@@ -366,6 +386,7 @@ export function renderWorkspaceRuntimeFromSnapshotPath(options: {
     dataRoot: options.dataRoot,
     secretRoots: options.secretRoots,
     semanticRuntime: options.semanticRuntime,
+    effectiveRelationshipsPath: options.effectiveRelationshipsPath,
     workspaceSecretStore: options.workspaceSecretStore,
   });
 }