Add workspace review summaries

Add workspace summary across the CLI, SDK, and MCP, and include it in the workspace-core profile so chat hosts can review one concise view of the current session.

Persist lightweight review events for syncs, file edits, patch applies, exports, service lifecycle, and snapshot activity, then synthesize them with command history, current services, snapshot state, and current diff data since the last reset.

Update the walkthroughs, use-case docs, public contract, changelog, and roadmap for 4.3.0, and make dist-check invoke the CLI module directly so local package reinstall quirks do not break the packaging gate.

Validation: uv lock; ./.venv/bin/pytest --no-cov tests/test_vm_manager.py tests/test_cli.py tests/test_api.py tests/test_server.py tests/test_public_contract.py tests/test_workspace_use_case_smokes.py; UV_OFFLINE=1 UV_CACHE_DIR=.uv-cache make check; UV_OFFLINE=1 UV_CACHE_DIR=.uv-cache make dist-check; real guest-backed workspace create -> patch apply -> workspace summary --json -> delete smoke.

tests/test_api.py

@@ -455,6 +455,7 @@ def test_pyro_workspace_methods_delegate_to_manager(tmp_path: Path) -> None:
     services = pyro.list_services(workspace_id)
     service_status = pyro.status_service(workspace_id, "app")
     service_logs = pyro.logs_service(workspace_id, "app", all=True)
+    summary = pyro.summarize_workspace(workspace_id)
     reset = pyro.reset_workspace(workspace_id, snapshot="checkpoint")
     deleted_snapshot = pyro.delete_snapshot(workspace_id, "checkpoint")
     status = pyro.status_workspace(workspace_id)
@@ -491,6 +492,9 @@ def test_pyro_workspace_methods_delegate_to_manager(tmp_path: Path) -> None:
     assert service_status["state"] == "running"
     assert service_logs["stderr"].count("[REDACTED]") >= 1
     assert service_logs["tail_lines"] is None
+    assert summary["workspace_id"] == workspace_id
+    assert summary["commands"]["total"] >= 1
+    assert summary["changes"]["available"] is True
     assert reset["workspace_reset"]["snapshot_name"] == "checkpoint"
     assert reset["secrets"] == created["secrets"]
     assert deleted_snapshot["deleted"] is True
@@ -1054,6 +1058,14 @@ def test_pyro_create_server_workspace_status_shell_and_service_delegate() -> Non
             calls.append(("logs_workspace", {"workspace_id": workspace_id}))
             return {"workspace_id": workspace_id, "count": 0, "entries": []}
 
+        def summarize_workspace(self, workspace_id: str) -> dict[str, Any]:
+            calls.append(("summarize_workspace", {"workspace_id": workspace_id}))
+            return {
+                "workspace_id": workspace_id,
+                "state": "started",
+                "changes": {"available": True, "changed": False, "summary": None, "entries": []},
+            }
+
         def open_shell(
             self,
             workspace_id: str,
@@ -1185,6 +1197,9 @@ def test_pyro_create_server_workspace_status_shell_and_service_delegate() -> Non
         status = _extract_structured(
             await server.call_tool("workspace_status", {"workspace_id": "workspace-123"})
         )
+        summary = _extract_structured(
+            await server.call_tool("workspace_summary", {"workspace_id": "workspace-123"})
+        )
         logs = _extract_structured(
             await server.call_tool("workspace_logs", {"workspace_id": "workspace-123"})
         )
@@ -1286,6 +1301,7 @@ def test_pyro_create_server_workspace_status_shell_and_service_delegate() -> Non
         )
         return (
             status,
+            summary,
             logs,
             opened,
             read,
@@ -1300,13 +1316,15 @@ def test_pyro_create_server_workspace_status_shell_and_service_delegate() -> Non
 
     results = asyncio.run(_run())
     assert results[0]["state"] == "started"
-    assert results[1]["count"] == 0
-    assert results[2]["shell_id"] == "shell-1"
-    assert results[6]["closed"] is True
-    assert results[7]["state"] == "running"
-    assert results[10]["state"] == "running"
+    assert results[1]["workspace_id"] == "workspace-123"
+    assert results[2]["count"] == 0
+    assert results[3]["shell_id"] == "shell-1"
+    assert results[7]["closed"] is True
+    assert results[8]["state"] == "running"
+    assert results[11]["state"] == "running"
     assert calls == [
         ("status_workspace", {"workspace_id": "workspace-123"}),
+        ("summarize_workspace", {"workspace_id": "workspace-123"}),
         ("logs_workspace", {"workspace_id": "workspace-123"}),
         (
             "open_shell",