fix(evidence): lock GC and preflight search ownership

2026-07-12 06:07:30 +02:00
parent d21aac9151
commit efcb0deb31
7 changed files with 55 additions and 6 deletions
@@ -76,6 +76,26 @@ def active_searcher(cfg, delegate, *, workspace_id: str | None = None):
    return ActiveEvidenceSearcher(CorpusStore(corpus_root), delegate, workspace_id)


+def validate_corpus_workspace(cfg, workspace_id: str) -> None:
+    """Fail before downstream retrieval setup when configured corpus ownership differs."""
+    corpus = CorpusStore(cfg.paths.artifacts.parent / "corpus")
+    with corpus.writer_lock():
+        manifest = corpus.active_manifest()
+        if manifest is None:
+            return
+        persisted = manifest.metadata.get("workspace_id")
+        if not isinstance(persisted, str) or re.fullmatch(
+            r"[a-z][a-z0-9_-]{0,63}", persisted
+        ) is None:
+            raise CorpusWorkspaceMismatchError(
+                "corpus workspace ownership is missing or invalid; use a new corpus root or rebuild"
+            )
+        if persisted != workspace_id:
+            raise CorpusWorkspaceMismatchError(
+                "corpus belongs to a different workspace; use a new corpus root or rebuild"
+            )
+
+
 def resolve_evidence_file(
    store: CorpusStore, evidence_id: str, *, materialized_root=None,
 ) -> str: