Add persistent task workspace alpha

Start the first workspace milestone toward the task-oriented product without changing the existing one-shot vm_run/pyro run contract.

Add a disk-backed task registry in the manager, auto-started task workspaces rooted at /workspace, repeated non-cleaning exec, and persisted command journals exposed through task create/exec/status/logs/delete across the CLI, Python SDK, and MCP server.

Update the public contract, docs, examples, and version/catalog metadata for 2.1.0, and cover the new surface with manager, CLI, SDK, and MCP tests. Validation: UV_CACHE_DIR=.uv-cache make check and UV_CACHE_DIR=.uv-cache make dist-check.

docs/public-contract.md

@@ -19,6 +19,11 @@ Top-level commands:
 - `pyro env prune`
 - `pyro mcp serve`
 - `pyro run`
+- `pyro task create`
+- `pyro task exec`
+- `pyro task status`
+- `pyro task logs`
+- `pyro task delete`
 - `pyro doctor`
 - `pyro demo`
 - `pyro demo ollama`
@@ -40,6 +45,9 @@ Behavioral guarantees:
 - `pyro run` fails if guest boot or guest exec is unavailable unless `--allow-host-compat` is set.
 - `pyro run`, `pyro env list`, `pyro env pull`, `pyro env inspect`, `pyro env prune`, and `pyro doctor` are human-readable by default and return structured JSON with `--json`.
 - `pyro demo ollama` prints log lines plus a final summary line.
+- `pyro task create` auto-starts a persistent workspace.
+- `pyro task exec` runs in the persistent `/workspace` for that task and does not auto-clean.
+- `pyro task logs` returns persisted command history for that task until `pyro task delete`.
 
 ## Python SDK Contract
 
@@ -56,11 +64,16 @@ Supported public entrypoints:
 - `Pyro.inspect_environment(environment)`
 - `Pyro.prune_environments()`
 - `Pyro.create_vm(...)`
+- `Pyro.create_task(...)`
 - `Pyro.start_vm(vm_id)`
 - `Pyro.exec_vm(vm_id, *, command, timeout_seconds=30)`
+- `Pyro.exec_task(task_id, *, command, timeout_seconds=30)`
 - `Pyro.stop_vm(vm_id)`
 - `Pyro.delete_vm(vm_id)`
+- `Pyro.delete_task(task_id)`
 - `Pyro.status_vm(vm_id)`
+- `Pyro.status_task(task_id)`
+- `Pyro.logs_task(task_id)`
 - `Pyro.network_info_vm(vm_id)`
 - `Pyro.reap_expired()`
 - `Pyro.run_in_vm(...)`
@@ -73,11 +86,16 @@ Stable public method names:
 - `inspect_environment(environment)`
 - `prune_environments()`
 - `create_vm(...)`
+- `create_task(...)`
 - `start_vm(vm_id)`
 - `exec_vm(vm_id, *, command, timeout_seconds=30)`
+- `exec_task(task_id, *, command, timeout_seconds=30)`
 - `stop_vm(vm_id)`
 - `delete_vm(vm_id)`
+- `delete_task(task_id)`
 - `status_vm(vm_id)`
+- `status_task(task_id)`
+- `logs_task(task_id)`
 - `network_info_vm(vm_id)`
 - `reap_expired()`
 - `run_in_vm(...)`
@@ -85,8 +103,11 @@ Stable public method names:
 Behavioral defaults:
 
 - `Pyro.create_vm(...)` and `Pyro.run_in_vm(...)` default to `vcpu_count=1` and `mem_mib=1024`.
+- `Pyro.create_task(...)` defaults to `vcpu_count=1` and `mem_mib=1024`.
 - `allow_host_compat` defaults to `False` on `create_vm(...)` and `run_in_vm(...)`.
+- `allow_host_compat` defaults to `False` on `create_task(...)`.
 - `Pyro.exec_vm(...)` runs one command and auto-cleans that VM after the exec completes.
+- `Pyro.exec_task(...)` runs one command in the persistent task workspace and leaves the task alive.
 
 ## MCP Contract
 
@@ -106,11 +127,22 @@ Advanced lifecycle tools:
 - `vm_network_info`
 - `vm_reap_expired`
 
+Task workspace tools:
+
+- `task_create`
+- `task_exec`
+- `task_status`
+- `task_logs`
+- `task_delete`
+
 Behavioral defaults:
 
 - `vm_run` and `vm_create` default to `vcpu_count=1` and `mem_mib=1024`.
+- `task_create` defaults to `vcpu_count=1` and `mem_mib=1024`.
 - `vm_run` and `vm_create` expose `allow_host_compat`, which defaults to `false`.
+- `task_create` exposes `allow_host_compat`, which defaults to `false`.
 - `vm_exec` runs one command and auto-cleans that VM after the exec completes.
+- `task_exec` runs one command in a persistent `/workspace` and leaves the task alive.
 
 ## Versioning Rule