@hellolynk-ai/trae-work-mcp 0.4.99 → 0.4.101

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "trae-work",
   "packageName": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.99",
+  "version": "0.4.101",
   "workbench": {
     "path": "runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -22,8 +22,8 @@
     },
     {
       "path": "integrations/trae-work/package.json",
-      "bytes": 495,
-      "sha256": "b6b956acae6bf9a5a7b083abe3db0f30fe3c0b8bb8a87b1f0dcd60b96daf2e47"
+      "bytes": 496,
+      "sha256": "2eb6935f4e8faf49d6010c810eac516b5887f8aee4d534a486d486cac60235b2"
     },
     {
       "path": "integrations/trae-work/runtime/neutral-host-bootstrap.mjs",
@@ -102,8 +102,8 @@
     },
     {
       "path": "package.json",
-      "bytes": 1850,
-      "sha256": "df726ac3a07194808411214350b92fec7dce8849add612e754fefcdab7e9145e"
+      "bytes": 1851,
+      "sha256": "9d932e4a6de05ea4db57fa083e3c5bc8cc27c170376393fdb05ea8d40fad33a0"
     },
     {
       "path": "README.md",
@@ -117,8 +117,8 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-core.mjs",
-      "bytes": 34320,
-      "sha256": "af7c9cb7a996fdb194c51dbcc745c48b616ff1686d79a1451104690d882df1b8"
+      "bytes": 36628,
+      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-profile.mjs",
@@ -157,8 +157,8 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 39386,
-      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
+      "bytes": 40982,
+      "sha256": "4a4f073c3a5398d0d51be5a28c1b86b06e6f3b0b613e833928d8437c030cf65f"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-runtime-safety.cjs",
@@ -187,8 +187,8 @@
     },
     {
       "path": "runtime/core/hellolynk-client-core.mjs",
-      "bytes": 34320,
-      "sha256": "af7c9cb7a996fdb194c51dbcc745c48b616ff1686d79a1451104690d882df1b8"
+      "bytes": 36628,
+      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
     },
     {
       "path": "runtime/core/hellolynk-client-profile.mjs",
@@ -372,8 +372,8 @@
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-assembly.mjs",
-      "bytes": 47797,
-      "sha256": "98b2b669183cda15272b182d5c04d3ae77511b8b657cd3179cbf2fa5d5f27920"
+      "bytes": 47470,
+      "sha256": "5a09b332a869c3863ac92c798a1a5df5901607987a2427a20b06154e41e17cb8"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-installation-store.mjs",
@@ -387,8 +387,8 @@
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-process.mjs",
-      "bytes": 229535,
-      "sha256": "634279c96b8b4e83bcbcc92c5184f4ec7c31713a097f45af3f5650f8151fb78b"
+      "bytes": 234159,
+      "sha256": "0a66fca2b862fde9269722f026fc67e9d1c79435f0d410809aee669be9f9f497"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -402,8 +402,8 @@
     },
     {
       "path": "runtime/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 39386,
-      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
+      "bytes": 40982,
+      "sha256": "4a4f073c3a5398d0d51be5a28c1b86b06e6f3b0b613e833928d8437c030cf65f"
     },
     {
       "path": "runtime/core/hellolynk-relay-client-cli.mjs",
@@ -448,12 +448,12 @@
     {
       "path": "runtime/neutral-host-release-manifest.json",
       "bytes": 15630,
-      "sha256": "9b2028f180d5a2321d5f4ba064aa4f4ca900ad1aca2b1f6d03822581c7fd128d"
+      "sha256": "8561015215e14fe8f8b5f1a18ecccefa717cdff05c40f8eee8d21af328bc3174"
     },
     {
       "path": "runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "e38381666ce18d2465347137f963a042e0c41e98cb5e08c18bffaf3baab9c456"
+      "sha256": "e68717f720a3f92c3af036dc99556ff188c6b3249f65c55bbbef675d92235176"
     },
     {
       "path": "runtime/platform/windows/configure-agent.ps1",

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "7126581cd440a00000cf4a022482f506fd5e5171adfdcc6812a65a15caab3f00"
+  "manifestSha256": "bec00be31829b1e18fe19ef76fd7b5650ce85c0f9f2c2d45ddf5203559b65037"
 }

package/integrations/trae-work/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.99",
+  "version": "0.4.101",
   "private": true,
   "type": "module",
   "description": "TRAE Work one-click bridge for local HelloLynk Messaging.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.99",
+  "version": "0.4.101",
   "description": "HelloLynk Messaging for TRAE Work: open conversations and let your AI message other people's AI assistants.",
   "homepage": "https://hellolynk.com",
   "repository": {

package/runtime/bootstrap/core/hellolynk-client-core.mjs

@@ -1,9 +1,11 @@
+import { createHash } from "node:crypto";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 const DEFAULT_TIMEOUT_MS = 10_000;
 const MAX_JSON_RESPONSE_BYTES = 256 * 1024;
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]"]);
 const DEVICE_RUNTIME_TTL_MS = 20 * 60 * 1000;
 const DEVICE_RUNTIME_RECOVERY_WINDOW_MS = 120_000;
+const DEVICE_CREDENTIAL_RECHECK_MS = 60 * 60_000;
 const DEVICE_RUNTIME_SCOPES = Object.freeze([
   "relay.text.receive",
   "relay.text.send",
@@ -567,6 +569,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   const issue = options.issue || issueDeviceRuntimeSession;
   const now = options.now || (() => Date.now());
   const sessionStore = options.sessionStore || null;
+  const credentialRejections = sessionStore?.credentialRejections;
   const sessionKey = options.sessionKey == null ? null : String(options.sessionKey);
   if (sessionStore && (
     !sessionKey ||
@@ -580,6 +583,8 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     5 * 60 * 1000,
   );
   let current = null;
+  let rejectedCredential = null;
+  let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
     const expectedValues = [
@@ -652,22 +657,67 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     return proof;
   };
 
+  const issueSession = async (input, previousSession) => {
+    const request = { ...input, previousSession };
+    if (options.loadDeviceCredential) request.deviceCredential = await options.loadDeviceCredential();
+    const fingerprint = request.deviceCredential && request.baseUrl
+      ? createHash("sha256").update(JSON.stringify([
+        normalizeHelloLynkBaseUrl(request.baseUrl, { allowLoopbackHttp: request.allowLoopbackHttp === true }),
+        request.deviceCredential,
+      ])).digest("hex")
+      : null;
+    // The production caller holds the existing session lock, including across
+    // Host processes. An authority denial may drain the current Host.
+    if (fingerprint) {
+      const isCoolingDown = (rejection) => {
+        if (rejection?.fingerprint !== fingerprint) return false;
+        const age = now() - rejection.rejectedAtMs;
+        return age >= 0 && age < DEVICE_CREDENTIAL_RECHECK_MS;
+      };
+      // A generic denial may clear after a server-side repair, without a new
+      // credential. The lock permits one recheck once the cooldown ends.
+      if (isCoolingDown(rejectedCredential)
+        || isCoolingDown(await credentialRejections?.load(sessionKey).catch(() => null))) {
+        throw new HelloLynkClientError("device_credential_invalid", { httpStatus: 401 });
+      }
+    }
+    let session;
+    try {
+      session = reusable(await issue(request), input);
+    } catch (error) {
+      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
+        rejectedCredential = { fingerprint, rejectedAtMs: now() };
+        // Preserve the authority denial even if local storage is unavailable.
+        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      }
+      throw error;
+    }
+    if (session && fingerprint) {
+      rejectedCredential = null;
+      await credentialRejections?.remove(sessionKey).catch(() => {});
+    }
+    return session;
+  };
+
   return {
     async get(input) {
       if (!sessionStore) {
-        if (
-          current && current.expiresAtMs - now() > minimumRemainingMs
-          && routeMatches(current, input)
-          && scopesMatch(current, input)
-          && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
-          && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
-        ) return current;
-        const reusableCurrent = reusable(current, input);
-        if (reusableCurrent) return reusableCurrent;
-        const previousSession = recoveryProof(current, input);
-        current = reusable(await issue({ ...input, previousSession }), input);
-        if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
-        return current;
+        const result = localIssueTail.then(async () => {
+          if (
+            current && current.expiresAtMs - now() > minimumRemainingMs
+            && routeMatches(current, input)
+            && scopesMatch(current, input)
+            && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
+            && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
+          ) return current;
+          const reusableCurrent = reusable(current, input);
+          if (reusableCurrent) return reusableCurrent;
+          current = await issueSession(input, recoveryProof(current, input));
+          if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
+          return current;
+        });
+        localIssueTail = result.catch(() => {});
+        return result;
       }
       const inMemory = reusable(current, input);
       if (inMemory) return inMemory;
@@ -678,7 +728,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
           current = persisted;
           return current;
         }
-        const issued = reusable(await issue({ ...input, previousSession: persisted }), input);
+        const issued = await issueSession(input, persisted);
         if (!issued) throw new HelloLynkClientError("invalid_runtime_session_handle");
         await sessionStore.save(sessionKey, issued);
         current = issued;

package/runtime/bootstrap/core/hellolynk-platform-credential-store.mjs

@@ -297,6 +297,36 @@ export async function secureWindowsClientReleaseTree(clientRoot, releaseId, opti
   });
 }
 
+// Accessed under the same cross-process lock as the corresponding session.
+function createCredentialRejectionStore(root) {
+  const fileFor = (profile) => join(root, `runtime-session-rejection-${assertCredentialProfileId(profile)}.json`);
+  const isRejection = (value) => typeof value?.fingerprint === "string" && /^[a-f0-9]{64}$/.test(value.fingerprint)
+    && Number.isSafeInteger(value.rejectedAtMs) && value.rejectedAtMs >= 0;
+  return {
+    async load(profile) {
+      let value;
+      try { value = JSON.parse(await readFile(fileFor(profile), "utf8")); }
+      catch (error) { if (error?.code === "ENOENT" || error instanceof SyntaxError) return null; throw error; }
+      return isRejection(value) ? value : null;
+    },
+    async save(profile, rejection) {
+      if (!isRejection(rejection)) throw new HelloLynkCredentialStoreError("invalid_credential_rejection");
+      const { fingerprint, rejectedAtMs } = rejection;
+      const file = fileFor(profile);
+      const temporary = `${file}.${randomBytes(12).toString("hex")}.tmp`;
+      try {
+        await writeFile(temporary, `${JSON.stringify({ fingerprint, rejectedAtMs })}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, file);
+      } finally {
+        await rm(temporary, { force: true }).catch(() => {});
+      }
+    },
+    async remove(profile) {
+      await rm(fileFor(profile), { force: true });
+    },
+  };
+}
+
 export function createPlatformCredentialStore(options = {}) {
   const platform = options.platform || process.platform;
   const run = options.runHelper || runCredentialHelper;
@@ -370,6 +400,7 @@ export function createPlatformCredentialStore(options = {}) {
         await invoke("Remove", assertCredentialProfileId(profile), "");
       },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(runtimeStoreRoot),
         async save(profile, session) {
           const body = JSON.stringify({ schemaVersion: 1, ...assertRuntimeSession(session) });
           await invoke("StoreRuntimeSession", assertCredentialProfileId(profile), body);
@@ -504,6 +535,7 @@ export function createPlatformCredentialStore(options = {}) {
       },
       async remove(profile) { await entry(root, "device", profile, "remove"); },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(root),
         async save(profile, session) { await entry(root, "session", profile, "save", assertRuntimeSession(session)); },
         async load(profile) {
           const value = await entry(root, "session", profile, "load");

package/runtime/core/hellolynk-client-core.mjs

@@ -1,9 +1,11 @@
+import { createHash } from "node:crypto";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 const DEFAULT_TIMEOUT_MS = 10_000;
 const MAX_JSON_RESPONSE_BYTES = 256 * 1024;
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]"]);
 const DEVICE_RUNTIME_TTL_MS = 20 * 60 * 1000;
 const DEVICE_RUNTIME_RECOVERY_WINDOW_MS = 120_000;
+const DEVICE_CREDENTIAL_RECHECK_MS = 60 * 60_000;
 const DEVICE_RUNTIME_SCOPES = Object.freeze([
   "relay.text.receive",
   "relay.text.send",
@@ -567,6 +569,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   const issue = options.issue || issueDeviceRuntimeSession;
   const now = options.now || (() => Date.now());
   const sessionStore = options.sessionStore || null;
+  const credentialRejections = sessionStore?.credentialRejections;
   const sessionKey = options.sessionKey == null ? null : String(options.sessionKey);
   if (sessionStore && (
     !sessionKey ||
@@ -580,6 +583,8 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     5 * 60 * 1000,
   );
   let current = null;
+  let rejectedCredential = null;
+  let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
     const expectedValues = [
@@ -652,22 +657,67 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     return proof;
   };
 
+  const issueSession = async (input, previousSession) => {
+    const request = { ...input, previousSession };
+    if (options.loadDeviceCredential) request.deviceCredential = await options.loadDeviceCredential();
+    const fingerprint = request.deviceCredential && request.baseUrl
+      ? createHash("sha256").update(JSON.stringify([
+        normalizeHelloLynkBaseUrl(request.baseUrl, { allowLoopbackHttp: request.allowLoopbackHttp === true }),
+        request.deviceCredential,
+      ])).digest("hex")
+      : null;
+    // The production caller holds the existing session lock, including across
+    // Host processes. An authority denial may drain the current Host.
+    if (fingerprint) {
+      const isCoolingDown = (rejection) => {
+        if (rejection?.fingerprint !== fingerprint) return false;
+        const age = now() - rejection.rejectedAtMs;
+        return age >= 0 && age < DEVICE_CREDENTIAL_RECHECK_MS;
+      };
+      // A generic denial may clear after a server-side repair, without a new
+      // credential. The lock permits one recheck once the cooldown ends.
+      if (isCoolingDown(rejectedCredential)
+        || isCoolingDown(await credentialRejections?.load(sessionKey).catch(() => null))) {
+        throw new HelloLynkClientError("device_credential_invalid", { httpStatus: 401 });
+      }
+    }
+    let session;
+    try {
+      session = reusable(await issue(request), input);
+    } catch (error) {
+      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
+        rejectedCredential = { fingerprint, rejectedAtMs: now() };
+        // Preserve the authority denial even if local storage is unavailable.
+        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      }
+      throw error;
+    }
+    if (session && fingerprint) {
+      rejectedCredential = null;
+      await credentialRejections?.remove(sessionKey).catch(() => {});
+    }
+    return session;
+  };
+
   return {
     async get(input) {
       if (!sessionStore) {
-        if (
-          current && current.expiresAtMs - now() > minimumRemainingMs
-          && routeMatches(current, input)
-          && scopesMatch(current, input)
-          && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
-          && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
-        ) return current;
-        const reusableCurrent = reusable(current, input);
-        if (reusableCurrent) return reusableCurrent;
-        const previousSession = recoveryProof(current, input);
-        current = reusable(await issue({ ...input, previousSession }), input);
-        if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
-        return current;
+        const result = localIssueTail.then(async () => {
+          if (
+            current && current.expiresAtMs - now() > minimumRemainingMs
+            && routeMatches(current, input)
+            && scopesMatch(current, input)
+            && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
+            && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
+          ) return current;
+          const reusableCurrent = reusable(current, input);
+          if (reusableCurrent) return reusableCurrent;
+          current = await issueSession(input, recoveryProof(current, input));
+          if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
+          return current;
+        });
+        localIssueTail = result.catch(() => {});
+        return result;
       }
       const inMemory = reusable(current, input);
       if (inMemory) return inMemory;
@@ -678,7 +728,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
           current = persisted;
           return current;
         }
-        const issued = reusable(await issue({ ...input, previousSession: persisted }), input);
+        const issued = await issueSession(input, persisted);
         if (!issued) throw new HelloLynkClientError("invalid_runtime_session_handle");
         await sessionStore.save(sessionKey, issued);
         current = issued;

package/runtime/core/hellolynk-neutral-host-assembly.mjs

@@ -7,7 +7,6 @@ import path from "node:path";
 
 import {
   createDeviceRuntimeSessionManager,
-  issueDeviceRuntimeSession,
   normalizeHelloLynkBaseUrl,
 } from "./hellolynk-client-core.mjs";
 import { readClientProfile } from "./hellolynk-client-profile.mjs";
@@ -243,31 +242,19 @@ export async function startHelloLynkNeutralHostAssembly(options = {}, dependenci
     const manager = (dependencies.createRuntimeSessionManager || createDeviceRuntimeSessionManager)({
       sessionStore: credentialStore.runtimeSessions,
       sessionKey,
-      issue: async ({ previousSession } = {}) => {
-        let deviceCredential = await credentialStore.load(profile.profileId);
-        try {
-          return await (dependencies.issueRuntimeSession || issueDeviceRuntimeSession)({
-            baseUrl: profile.baseUrl,
-            allowLoopbackHttp: profile.allowLoopbackHttp,
-            deviceCredential,
-            expectedPrincipalId: profile.principalId,
-            expectedAgentId: profile.agentId,
-            expectedDelegateId: profile.delegateId,
-            expectedHostId: profile.hostId,
-            expectedAuthorizationVersion: profile.authorizationVersion,
-            previousSession,
-            fetchImpl: dependencies.fetchImpl,
-          });
-        } finally { deviceCredential = null; }
-      },
+      loadDeviceCredential: () => credentialStore.load(profile.profileId),
+      issue: dependencies.issueRuntimeSession,
     });
     const sessionProvider = Object.freeze({
       get: () => manager.get({
+        baseUrl: profile.baseUrl,
+        allowLoopbackHttp: profile.allowLoopbackHttp,
         expectedPrincipalId: profile.principalId,
         expectedAgentId: profile.agentId,
         expectedDelegateId: profile.delegateId,
         expectedHostId: profile.hostId,
         expectedAuthorizationVersion: profile.authorizationVersion,
+        fetchImpl: dependencies.fetchImpl,
       }),
       clear: (error) => manager.clear(error),
       status: () => manager.status(),
@@ -347,6 +334,9 @@ export async function startHelloLynkNeutralHostAssembly(options = {}, dependenci
       authorizationVersion: profile.authorizationVersion,
       identityKeyId: e2ee.identityKeyId,
       runtimeHeaders: () => runtimeHeaders(sessionProvider),
+      // Drops only this instance's cached runtime session, and only for a stale
+      // session, so the Host can verify it once more with the device credential.
+      clearRuntimeSession: (error) => sessionProvider.clear(error),
       e2ee,
       contactE2ee,
     }));

package/runtime/core/hellolynk-neutral-host-process.mjs

@@ -1,6 +1,7 @@
 import { nativeConversationId, nativeConversationQuery, nativeDirectoryResult, queryLocalNativeConversations } from "./hellolynk-native-conversations.mjs";
 import { DIRECT_TEXT_E2EE_MAX_TTL_MS } from "./hellolynk-direct-text-e2ee.mjs";
 import { runModelInbox } from "./hellolynk-model-inbox.mjs";
+import { shouldInvalidateDeviceRuntimeSession } from "./hellolynk-client-core.mjs";
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import http from "node:http";
@@ -34,7 +35,7 @@ export const HELLOLYNK_NEUTRAL_HOST_PROCESS_CONTRACT = "hellolynk-neutral-host-p
 export const HELLOLYNK_NEUTRAL_HOST_DISCOVERY_CONTRACT = "hellolynk-neutral-host-discovery-v1";
 // Raised with every release batch, together with the six client versions. A Host reports it
 // in its health; the higher release stays and the lower one makes room.
-export const HELLOLYNK_HOST_RELEASE_ORDINAL = 16;
+export const HELLOLYNK_HOST_RELEASE_ORDINAL = 18;
 
 const INSTALLATION_LOCK_CONTRACT = "hellolynk-neutral-host-installation-lock-v2";
 const INSTALLATION_LOCK_MAX_BYTES = 4 * 1024;
@@ -97,9 +98,16 @@ const PREKEY_REFILL_RETRY_MIN_MS = 1_000;
 const PREKEY_REFILL_RETRY_MAX_MS = 60_000;
 const RELAY_RETRY_MIN_MS = 1_000;
 const RELAY_RETRY_MAX_MS = 60_000;
-const RELAY_AUTHORITY_DENIAL_CODES = new Set([
+// Revocation of this Host or its transport credential fences the whole Host.
+const HOST_AUTHORITY_DENIAL_CODES = new Set([
   "host_transport_host_revoked", "host_transport_credential_revoked", "host_transport_credential_inactive",
+]);
+// A refusal of one instance's own device credential or delegate stops only that
+// instance. The Host and its other instances keep receiving and sending. The
+// server reports these when issuing or using that instance's runtime session.
+const ENDPOINT_AUTHORITY_DENIAL_CODES = new Set([
   "device_credential_invalid", "device_credential_revoked", "delegate_revoked", "delegate_inactive",
+  "device_credential_identity_inactive", "device_credential_inactive", "runtime_identity_inactive",
 ]);
 const MESSAGE_LOCAL_CAPACITY_CODES = new Set(["local_message_store_too_large"]);
 const CONTACT_REQUEST_LOCAL_CAPACITY_CODES = new Set([
@@ -247,6 +255,9 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
   let receiverState = null;
   const relayAbortController = new AbortController();
   const relayProvisionedEndpoints = new Set();
+  // Refused instances and their refusal code. Only a later successful registration
+  // (the next relay connection or session rotation) readmits one.
+  const rejectedEndpoints = new Map();
   const relayState = { status: "connecting", failureCount: 0, nextAttemptAtMs: 0, errorCode: null };
   const rejectedInboundTimes = new WeakSet();
   let lastRejectedInbound = null;
@@ -600,6 +611,20 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
             lastRejectedInbound = { errorCode: error.code };
             continue;
           }
+          // The frame's own instance was refused (for example at ACK). Stop only that
+          // instance and skip the frame; the relay expires or redelivers it.
+          const refused = ENDPOINT_AUTHORITY_DENIAL_CODES.has(error?.code)
+            && endpoints.get(String(item.data?.recipientDelegateId || ""));
+          if (refused) {
+            rejectedEndpoints.set(refused.delegateId, error.code);
+            relayState.errorCode = error.code;
+            lastRejectedInbound = { errorCode: error.code };
+            continue;
+          }
+          // A stale runtime session (such as a revocation landing between persist and
+          // ACK) is not a local failure. Reconnect: registration verifies that instance
+          // again and isolates it if refused. The durable record stays; the relay redelivers.
+          if (shouldInvalidateDeviceRuntimeSession(error)) throw error;
           if (!isInboundLocalCapacityError(error)) {
             inboundFailed = true;
             throw error;
@@ -612,7 +637,7 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
     } catch (error) {
       if (lifecycle !== "running") return;
       // Preserve fail-closed persistence/ACK and other malformed-inbound errors.
-      if (inboundFailed || RELAY_AUTHORITY_DENIAL_CODES.has(error?.code)) throw error;
+      if (inboundFailed || HOST_AUTHORITY_DENIAL_CODES.has(error?.code)) throw error;
       await stream?.close?.().catch(() => {});
       stream = null;
       scheduleRelayRetry(error);
@@ -638,31 +663,63 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
     const task = (async () => {
       let connected = null;
       try {
-        const registrations = await Promise.allSettled([...endpoints.values()].map(async (endpoint) => {
-          if (endpoint.e2ee?.preKeyInventoryStatus?.status === "deferred"
-            && !relayProvisionedEndpoints.has(endpoint.delegateId)) {
-            try {
-              await endpoint.e2ee.ensurePreKeyInventory({ signal });
-            } catch (error) {
-              if (error?.code !== "e2ee_local_prekey_capacity_exceeded") throw error;
-              const state = preKeyRefillState(endpoint.delegateId);
-              state.failureCount = 1;
-              state.nextAttemptAtMs = Math.max(nowMs(clock) + PREKEY_REFILL_RETRY_MIN_MS, retryAtTimestamp(error.retryAt) || 0);
-              state.errorCode = error.code;
+        const attempted = [...endpoints.values()];
+        const registrations = await Promise.allSettled(attempted.map(async (endpoint) => {
+          const register = async () => {
+            if (endpoint.e2ee?.preKeyInventoryStatus?.status === "deferred"
+              && !relayProvisionedEndpoints.has(endpoint.delegateId)) {
+              try {
+                await endpoint.e2ee.ensurePreKeyInventory({ signal });
+              } catch (error) {
+                if (error?.code !== "e2ee_local_prekey_capacity_exceeded") throw error;
+                const state = preKeyRefillState(endpoint.delegateId);
+                state.failureCount = 1;
+                state.nextAttemptAtMs = Math.max(nowMs(clock) + PREKEY_REFILL_RETRY_MIN_MS, retryAtTimestamp(error.retryAt) || 0);
+                state.errorCode = error.code;
+              }
+              relayProvisionedEndpoints.add(endpoint.delegateId);
             }
-            relayProvisionedEndpoints.add(endpoint.delegateId);
+            if (signal.aborted || lifecycle !== "running") return;
+            await options.transport.registerEndpoint({
+              delegateId: endpoint.delegateId, identityKeyId: endpoint.identityKeyId,
+              runtimeHeaders: endpoint.runtimeHeaders, signal,
+            });
+          };
+          try {
+            await register();
+          } catch (error) {
+            // Revoking an instance also drops its runtime session, so its cached session
+            // fails first. Clear only that stale cache and verify once more: a device
+            // refusal then isolates the instance; any other failure keeps the usual path.
+            const cleared = !shouldInvalidateDeviceRuntimeSession(error) || signal.aborted || lifecycle !== "running"
+              || typeof endpoint.clearRuntimeSession !== "function" ? false
+              : await Promise.resolve().then(() => endpoint.clearRuntimeSession(error)).catch(() => false);
+            if (cleared !== true) throw error;
+            await register();
           }
-          if (signal.aborted || lifecycle !== "running") return;
-          await options.transport.registerEndpoint({
-            delegateId: endpoint.delegateId, identityKeyId: endpoint.identityKeyId,
-            runtimeHeaders: endpoint.runtimeHeaders, signal,
-          });
         }));
         if (signal.aborted || lifecycle !== "running") return;
-        const failed = registrations.find((result) => result.status === "rejected"
-          && RELAY_AUTHORITY_DENIAL_CODES.has(result.reason?.code))
-          || registrations.find((result) => result.status === "rejected");
+        const hostDenial = registrations.find((result) => result.status === "rejected"
+          && HOST_AUTHORITY_DENIAL_CODES.has(result.reason?.code));
+        if (hostDenial) throw hostDenial.reason;
+        // A refused instance stays out of the relay while the others connect. Each
+        // later connection, including session rotation, registers it again.
+        registrations.forEach((result, index) => {
+          if (result.status === "fulfilled") rejectedEndpoints.delete(attempted[index].delegateId);
+          else if (ENDPOINT_AUTHORITY_DENIAL_CODES.has(result.reason?.code)) {
+            rejectedEndpoints.set(attempted[index].delegateId, result.reason.code);
+          }
+        });
+        // A refused instance whose re-verification fails for another reason (such as
+        // its dropped runtime session) stays refused and does not hold back the others.
+        const failed = registrations.find((result, index) => result.status === "rejected"
+          && !rejectedEndpoints.has(attempted[index].delegateId));
         if (failed) throw failed.reason;
+        // With every instance refused there is nothing to receive: keep the Host and
+        // retry with the usual backoff. The session manager bounds cloud rechecks.
+        if (rejectedEndpoints.size === endpoints.size) {
+          throw registrations.find((result) => result.status === "rejected").reason;
+        }
         connected = await openRelayStream(signal);
         if (!connected?.events || typeof connected.events[Symbol.asyncIterator] !== "function") {
           throw failure("neutral_host_transport_stream_invalid");
@@ -672,14 +729,15 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
           return;
         }
         stream = connected;
-        Object.assign(relayState, { status: "ready", failureCount: 0, nextAttemptAtMs: 0, errorCode: null });
+        Object.assign(relayState, { status: "ready", failureCount: 0, nextAttemptAtMs: 0,
+          errorCode: rejectedEndpoints.values().next().value ?? null });
         startReceiveTask();
       } catch (error) {
         await connected?.close?.().catch(() => {});
         if (signal.aborted || lifecycle !== "running") return;
         // An explicit revocation of this Host still fences local access. A
         // timeout/expired cloud session alone is not a local revocation.
-        if (RELAY_AUTHORITY_DENIAL_CODES.has(error?.code)) {
+        if (HOST_AUTHORITY_DENIAL_CODES.has(error?.code)) {
           // Failure is exposed as host.status/failureCode to the release entry.
           void beginDrain(error.code).catch(() => {});
           return;
@@ -733,6 +791,14 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
     }
     const endpoint = endpoints.get(safeId(event.recipientDelegateId, "neutral_host_inbound_delegate_invalid"));
     if (!endpoint) throw failure("neutral_host_inbound_endpoint_unknown");
+    if (rejectedEndpoints.has(endpoint.delegateId)) {
+      // A refused instance receives nothing, also not from its Host's siblings.
+      // Relay frames are skipped unacknowledged; a local sender sees the failure.
+      const refused = failure(item.localDelivery === true
+        ? "neutral_host_same_host_recipient_unavailable" : rejectedEndpoints.get(endpoint.delegateId));
+      rejectedInboundTimes.add(refused);
+      throw refused;
+    }
     const isContactRequest = item.event === "contact_request";
     if (!isContactRequest && item.event !== "message") throw failure("neutral_host_inbound_kind_invalid");
     const decryptor = isContactRequest ? endpoint.contactE2ee : endpoint.e2ee;
@@ -1015,7 +1081,14 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
     return inboundResumeTask;
   }
 
+  // A refused instance does not send, including over local routes that skip the relay.
+  function assertEndpointAccepted(delegateId) {
+    const code = rejectedEndpoints.get(delegateId);
+    if (code) throw hostApplicationFailure(code);
+  }
+
   async function sendOutboundOnce({ endpoint, delegateId, clientMessageId, input }) {
+    assertEndpointAccepted(endpoint.delegateId);
     try {
       const result = await endpoint.outbound.send(input);
       if (result?.message?.lastErrorCode === "reply_target_deleted" || result?.relay?.status === "reply_target_deleted") {
@@ -1529,6 +1602,7 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
   async function queryPeerNativeDirectory(delegateId, authorization, request) {
     const sender = endpoints.get(delegateId);
     if (!sender?.outbound?.sendDirectory) throw hostApplicationFailure("native_directory_unavailable");
+    assertEndpointAccepted(delegateId);
     const friend = request.kind === "friend_target_request";
     const unavailable = friend ? null : nativeDirectoryResult({ conversations: [], coverage: "unavailable",
       available: false, exactTargetSupported: false, reason: "native_directory_unavailable" });
@@ -2274,6 +2348,7 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
       || current.senderDelegateId !== context.delegateId) {
       throw hostApplicationFailure("host_app_record_not_found");
     }
+    assertEndpointAccepted(context.delegateId);
     if (!MANUAL_RETRYABLE_STATUSES.has(current.status) || current.lastErrorCode === "reply_target_deleted") {
       throw hostApplicationFailure("host_app_state_conflict");
     }
@@ -3120,7 +3195,8 @@ export async function startHelloLynkNeutralHostProcess(options = {}) {
     return {
       status: inboundPaused
         ? "paused"
-        : preKeyInventory.status === "ready" && relayState.status === "ready" && !lastRejectedInbound ? "ready" : "degraded",
+        : preKeyInventory.status === "ready" && relayState.status === "ready" && !lastRejectedInbound
+          && rejectedEndpoints.size === 0 ? "ready" : "degraded",
       ...(lastRejectedInbound ? { lastRejectedInbound } : {}),
       preKeyInventory,
       relay: {

package/runtime/core/hellolynk-platform-credential-store.mjs

@@ -297,6 +297,36 @@ export async function secureWindowsClientReleaseTree(clientRoot, releaseId, opti
   });
 }
 
+// Accessed under the same cross-process lock as the corresponding session.
+function createCredentialRejectionStore(root) {
+  const fileFor = (profile) => join(root, `runtime-session-rejection-${assertCredentialProfileId(profile)}.json`);
+  const isRejection = (value) => typeof value?.fingerprint === "string" && /^[a-f0-9]{64}$/.test(value.fingerprint)
+    && Number.isSafeInteger(value.rejectedAtMs) && value.rejectedAtMs >= 0;
+  return {
+    async load(profile) {
+      let value;
+      try { value = JSON.parse(await readFile(fileFor(profile), "utf8")); }
+      catch (error) { if (error?.code === "ENOENT" || error instanceof SyntaxError) return null; throw error; }
+      return isRejection(value) ? value : null;
+    },
+    async save(profile, rejection) {
+      if (!isRejection(rejection)) throw new HelloLynkCredentialStoreError("invalid_credential_rejection");
+      const { fingerprint, rejectedAtMs } = rejection;
+      const file = fileFor(profile);
+      const temporary = `${file}.${randomBytes(12).toString("hex")}.tmp`;
+      try {
+        await writeFile(temporary, `${JSON.stringify({ fingerprint, rejectedAtMs })}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, file);
+      } finally {
+        await rm(temporary, { force: true }).catch(() => {});
+      }
+    },
+    async remove(profile) {
+      await rm(fileFor(profile), { force: true });
+    },
+  };
+}
+
 export function createPlatformCredentialStore(options = {}) {
   const platform = options.platform || process.platform;
   const run = options.runHelper || runCredentialHelper;
@@ -370,6 +400,7 @@ export function createPlatformCredentialStore(options = {}) {
         await invoke("Remove", assertCredentialProfileId(profile), "");
       },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(runtimeStoreRoot),
         async save(profile, session) {
           const body = JSON.stringify({ schemaVersion: 1, ...assertRuntimeSession(session) });
           await invoke("StoreRuntimeSession", assertCredentialProfileId(profile), body);
@@ -504,6 +535,7 @@ export function createPlatformCredentialStore(options = {}) {
       },
       async remove(profile) { await entry(root, "device", profile, "remove"); },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(root),
         async save(profile, session) { await entry(root, "session", profile, "save", assertRuntimeSession(session)); },
         async load(profile) {
           const value = await entry(root, "session", profile, "load");

package/runtime/neutral-host-release-manifest.json

@@ -4,7 +4,7 @@
   "files": [
     {
       "path": "release/integrations/trae-work/package.json",
-      "sha256": "b6b956acae6bf9a5a7b083abe3db0f30fe3c0b8bb8a87b1f0dcd60b96daf2e47"
+      "sha256": "2eb6935f4e8faf49d6010c810eac516b5887f8aee4d534a486d486cac60235b2"
     },
     {
       "path": "connect-activate.mjs",
@@ -36,7 +36,7 @@
     },
     {
       "path": "core/hellolynk-client-core.mjs",
-      "sha256": "af7c9cb7a996fdb194c51dbcc745c48b616ff1686d79a1451104690d882df1b8"
+      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
     },
     {
       "path": "core/hellolynk-client-profile.mjs",
@@ -188,7 +188,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-assembly.mjs",
-      "sha256": "98b2b669183cda15272b182d5c04d3ae77511b8b657cd3179cbf2fa5d5f27920"
+      "sha256": "5a09b332a869c3863ac92c798a1a5df5901607987a2427a20b06154e41e17cb8"
     },
     {
       "path": "core/hellolynk-neutral-host-installation-store.mjs",
@@ -200,7 +200,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-process.mjs",
-      "sha256": "634279c96b8b4e83bcbcc92c5184f4ec7c31713a097f45af3f5650f8151fb78b"
+      "sha256": "0a66fca2b862fde9269722f026fc67e9d1c79435f0d410809aee669be9f9f497"
     },
     {
       "path": "core/hellolynk-neutral-host-store-adapters.mjs",
@@ -212,7 +212,7 @@
     },
     {
       "path": "core/hellolynk-platform-credential-store.mjs",
-      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
+      "sha256": "4a4f073c3a5398d0d51be5a28c1b86b06e6f3b0b613e833928d8437c030cf65f"
     },
     {
       "path": "core/hellolynk-relay-client-cli.mjs",
@@ -328,7 +328,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-client-core.mjs",
-      "sha256": "af7c9cb7a996fdb194c51dbcc745c48b616ff1686d79a1451104690d882df1b8"
+      "sha256": "5d2190c2354ede169b2053864674c7ae5b80985970dc13609d6818c5a6d16940"
     },
     {
       "path": "bootstrap/core/hellolynk-client-profile.mjs",
@@ -352,7 +352,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
+      "sha256": "4a4f073c3a5398d0d51be5a28c1b86b06e6f3b0b613e833928d8437c030cf65f"
     },
     {
       "path": "bootstrap/core/hellolynk-runtime-safety.cjs",

package/runtime/neutral-host-release-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-neutral-host-release-pin-v1",
-  "manifestSha256": "9b2028f180d5a2321d5f4ba064aa4f4ca900ad1aca2b1f6d03822581c7fd128d"
+  "manifestSha256": "8561015215e14fe8f8b5f1a18ecccefa717cdff05c40f8eee8d21af328bc3174"
 }