Function ValidateScopeBinding

internal/task/validate.go:1093–1124

ValidateScopeBinding enforces the canonical scope/workspace invariant shared by task-domain records.

(scope Scope, workspaceBinding string, path string, workspaceField string)

// ValidateScopeBinding enforces the canonical scope/workspace invariant shared by task-domain records.
func ValidateScopeBinding(scope Scope, workspaceBinding string, path string, workspaceField string) error {
	scopePath := nestedPath(path, "scope")
	if err := scope.Validate(scopePath); err != nil {
		return err
	}

	workspacePath := nestedPath(path, workspaceField)
	switch scope.Normalize() {
	case ScopeGlobal:
		if strings.TrimSpace(workspaceBinding) != "" {
			return fmt.Errorf(
				"%w: %s must be empty when %s is %q",
				ErrInvalidScopeBinding,
				workspacePath,
				scopePath,
				ScopeGlobal,
			)
		}
	case ScopeWorkspace:
		if strings.TrimSpace(workspaceBinding) == "" {
			return fmt.Errorf(
				"%w: %s is required when %s is %q",
				ErrInvalidScopeBinding,
				workspacePath,
				scopePath,
				ScopeWorkspace,
			)
		}
	}

	return nil
}

// ValidateImmutableTaskFields reports whether an update attempted to change immutable task fields.
func ValidateImmutableTaskFields(current Task, next Task) error {