<!-- event: create author: "yoi ticket" at: 2026-07-01T14:41:48Z -->

## 作成

LocalTicketBackend によって作成されました。

---

<!-- event: plan author: hare at: 2026-07-01T14:43:04Z -->

## Plan

Workspace Backend config file schema を定義する Ticket として詳細化した。

決定:
- 新規 Backend 設定項目は CLI flag として増やさない。
- config file は固定 path `<workspace_root>/.yoi/workspace-backend.local.toml` から読む。
- config file は workspace-local だが `.local` 名にして git 管理外にする。
- config は server/listen/static assets/data path override/limits/remote runtime source などの方針だけを持つ。
- data 本体、workspace identity、Ticket/Objective、Runtime fs-store、transcript、secret 値は config file に入れない。


---

<!-- event: intake_summary author: hare at: 2026-07-01T15:32:38Z -->

## Intake summary

Marked ready by `yoi ticket state`.

---

<!-- event: state_changed author: "yoi ticket" at: 2026-07-01T15:32:38Z from: planning to: ready reason: cli_state field: state -->

## State changed

Marked ready by `yoi ticket state`.


---

<!-- event: state_changed author: "yoi ticket" at: 2026-07-01T15:32:38Z from: ready to: queued reason: queued field: state -->

## State changed

Ticket を `yoi ticket` が queued にしました。


---

<!-- event: state_changed author: "yoi ticket" at: 2026-07-01T15:32:39Z from: queued to: inprogress reason: cli_state field: state -->

## State changed

State changed to `inprogress`.


---

<!-- event: implementation_report author: hare at: 2026-07-01T15:48:09Z -->

## Implementation report

Implemented Workspace Backend config file schema and resolver.

Changes:
- Added `workspace_server::config` with `WorkspaceBackendConfigFile` serde TOML schema.
- Fixed config path: `<workspace_root>/.yoi/workspace-backend.local.toml`.
- Config file absence resolves to defaults.
- Unknown TOML fields are rejected via `deny_unknown_fields`.
- Relative paths resolve from workspace root; absolute paths are preserved.
- Added resolved config boundary for `ServerConfig`, listen address, and database path.
- Added data root derivation for `workspace.db` and `embedded-runtime`.
- Added remote runtime config schema with `token_ref`, while failing closed until secret ref resolution exists; raw token values are not in schema.
- Updated `yoi-workspace-server serve` to load config before applying existing legacy dev CLI overrides.
- Added focused tests for defaults, unknown fields, path resolution, data root derivation, secret value rejection, and token_ref fail-closed behavior.

Validation:
- `cargo test -p yoi-workspace-server`
- `cargo check -p yoi`
- `cargo fmt --check`
- `git diff --check`
- `nix build .#yoi --no-link`


---

<!-- event: state_changed author: "yoi ticket" at: 2026-07-01T15:48:17Z from: inprogress to: done reason: cli_state field: state -->

## State changed

State changed to `done`.


---

<!-- event: state_changed author: hare at: 2026-07-01T15:48:28Z from: done to: closed reason: closed field: state -->

## State changed

Ticket を closed にしました。


---

<!-- event: close author: hare at: 2026-07-01T15:48:28Z status: closed -->

## 完了

Implemented Workspace Backend config file schema and resolver.

Delivered:
- `WorkspaceBackendConfigFile` TOML schema with `server`, `data`, `limits`, and `runtimes.remote` sections.
- Fixed workspace-local config path `.yoi/workspace-backend.local.toml`.
- Defaults when config file is absent.
- Unknown-field rejection.
- Workspace-root relative path resolution and absolute path preservation.
- Resolved config boundary for `ServerConfig`, listen address, and database path.
- Data root derivation for `workspace.db` and `embedded-runtime`.
- Secret value exclusion from schema; `token_ref` fails closed until secret ref resolution is implemented.
- `yoi-workspace-server serve` loads config and applies only existing legacy dev CLI overrides.
- Focused tests for defaults, unknown fields, path handling, data overrides, and secret field behavior.

Validation:
- `cargo test -p yoi-workspace-server`
- `cargo check -p yoi`
- `cargo fmt --check`
- `git diff --check`
- `nix build .#yoi --no-link`


---

<!-- event: implementation_report author: hare at: 2026-07-01T16:38:31Z -->

## Implementation report

Moved the Workspace Backend default config template into runtime resources and wired init-time copying.

Changes:
- Added `resources/workspace-backend.default.toml` as the packaged template source.
- Embedded the template with `include_str!` from `workspace-server::config`.
- Added `.yoi/workspace-backend.default.toml` as the workspace-local copied template path.
- `yoi-workspace-server serve` now ensures the default template exists after workspace identity initialization and before reading `.local` config.
- Copying uses create-new semantics and does not overwrite an existing workspace-local default template.
- Removed the previously untracked `.yoi/workspace-backend.default.toml` workspace copy from the repository root.

Validation:
- `cargo fmt --check`
- `cargo test -p yoi-workspace-server`
- `cargo check -p yoi`
- TOML parse check with Deno
- `git diff --check`
- `nix build .#yoi --no-link`


---
