df76e7f2fb
The repo-map turnId tag and the L3 retriever filter used 'repomap:$repoRoot' with no delimiter, so a retriever for /repo also matched /repo2 entries (startsWith). Add a trailing ':' to the tag (no-stateKey branch) and the retriever filter so the repoRoot boundary is explicit. Test: /repo retrieval no longer leaks /repo2 entries, still matches its own with/without a stateKey suffix.