fix(runtime-host): bind continuation inspection to root lease

Author: zhiiw

packages/runtime-host/src/server/execution-composition.ts

@@ -990,7 +990,7 @@ export async function createExecutionRuntimeHostComposition(
           if (header.toolProfile !== 'managed-coding-v1') return undefined;
           const runtime = requireGitoxideManagedMutationRuntime(gitoxideManagedMutationRuntime);
           return inspectGitoxideManagedContinuationBoundary({
-            storageRoot: context.owner.capability.canonicalPath,
+            storageRootLease: context.owner.lease,
             sourceRoot: header.cwd,
             sessionId,
             invocationOwnerToken: runtime.invocationOwnerToken,

packages/runtime-host/src/server/gitoxide-managed-mutation-session.ts

@@ -88,7 +88,7 @@ export interface GitoxideManagedMutationSession {
  * a continuation boundary.
  */
 export async function inspectGitoxideManagedContinuationBoundary(input: {
-  readonly storageRoot: string;
+  readonly storageRootLease: StorageRootLease<'interactive', 'write'>;
   readonly sourceRoot: string;
   readonly sessionId: string;
   readonly invocationOwnerToken: object;
@@ -98,7 +98,7 @@ export async function inspectGitoxideManagedContinuationBoundary(input: {
 }): Promise<ManagedWorkspaceContinuationBoundaryV1 | undefined> {
   input.abortSignal?.throwIfAborted();
   const [storageRoot, sourceRoot, helper] = await Promise.all([
-    realpath(input.storageRoot),
+    runWithStorageRootLease(input.storageRootLease, 'interactive', 'write', async (root) => root),
     realpath(input.sourceRoot),
     verifyGitoxideHelperArtifactForInvocationInternal(
       input.invocationOwnerToken,