fix(lsp): retain admitted diagnostic snapshots for pull

crates/tracedecay-application/src/lsp_runtime/feedback_source.rs

@@ -14,7 +14,7 @@ use tracedecay_domain::feedback::{
     FeedbackContentIdentityV1, FeedbackDiagnosticProducerV1, FeedbackFindingLifecycleV1,
     FeedbackFindingV1,
 };
-use tracedecay_domain::{ContentDigest, UtcMicros};
+use tracedecay_domain::{ContentDigest, ManifestDigest, UtcMicros};
 use tracedecay_lsp::{
     AdmittedRoot, CanonicalContextProjectionAuthority, CanonicalDiagnosticRefreshRequest,
     ContextCoverage, ContextExpansionEnvelope, ContextExpansionOutcome, ContextExpansionRequest,
@@ -505,6 +505,21 @@ impl FeedbackCycleRuntimePort for ConcreteFeedbackLspSource {
 }
 
 impl ManagedDiagnosticSnapshotPort for ConcreteFeedbackLspSource {
+    fn current_authority(
+        &self,
+        request: CanonicalDiagnosticRefreshRequest,
+    ) -> LspRuntimeFuture<Result<ManifestDigest, LspRuntimeFailure>> {
+        let source = self.clone();
+        Box::pin(async move {
+            let scope = source
+                .scope
+                .resolve(request.root.clone(), Some(request.document_uri.clone()))
+                .await?;
+            crate::lsp_support::validate_managed_diagnostic_scope(&request, &scope)?;
+            crate::lsp_support::managed_diagnostic_authority_digest(&scope)
+        })
+    }
+
     fn snapshot(
         &self,
         request: CanonicalDiagnosticRefreshRequest,

crates/tracedecay-application/src/lsp_support/factory.rs

@@ -13,8 +13,9 @@ use tracedecay_lsp::{
     ContextProjectionChange, ContextProjectionOutcome, ContextProjectionPort,
     ContextProjectionRegistration, ContextProjectionRequest, DaemonLspProviderBundle,
     DaemonLspRuntimeSession, DiagnosticRefreshAdmission, DiagnosticSnapshotAdapter,
-    DiagnosticSnapshotOutcome, DiagnosticSnapshotPort, FeedbackCycleAdapter, FeedbackCyclePort,
-    FeedbackCycleRequest, FeedbackCycleResponse, FeedbackCycleRuntimePort, GatewayCapabilities,
+    DiagnosticSnapshotOutcome, DiagnosticSnapshotPort, DiagnosticSnapshotValidation,
+    FeedbackCycleAdapter, FeedbackCyclePort, FeedbackCycleRequest, FeedbackCycleResponse,
+    FeedbackCycleRuntimePort, GatewayCapabilities, GenerationDiagnostics,
     LspAnalyzerCancellationAuthority, LspRequestId, LspRuntimeFailure, LspRuntimeFuture,
     LspSemanticDocumentSnapshot, NativeIntegrationStatusPort, OverlaySnapshot,
     SemanticProviderOutcome, SemanticProviderPort, SemanticRequest, SemanticResponse,
@@ -486,6 +487,32 @@ impl DiagnosticSnapshotPort for FederatedDiagnostics {
         )
     }
 
+    fn validate_document_snapshot(
+        &self,
+        root: &AdmittedRoot,
+        document_uri: &str,
+        overlay: Option<&OverlaySnapshot>,
+        snapshot: &GenerationDiagnostics,
+    ) -> DiagnosticSnapshotValidation {
+        self.roots.get(root.uri()).map_or(
+            DiagnosticSnapshotValidation::Failed {
+                failure_class: "root-not-authorized".to_owned(),
+            },
+            |port| port.validate_document_snapshot(root, document_uri, overlay, snapshot),
+        )
+    }
+
+    fn retire_document_refresh(
+        &self,
+        root: &AdmittedRoot,
+        document_uri: &str,
+        operation_id: &str,
+    ) -> bool {
+        self.roots
+            .get(root.uri())
+            .is_some_and(|port| port.retire_document_refresh(root, document_uri, operation_id))
+    }
+
     fn supports_workspace_diagnostics(&self) -> bool {
         !self.roots.is_empty()
             && self