maka-agent 0.2.0-dev.22.20260905 → 0.2.0-dev.23.20260906

package/node_modules/@maka/runtime/dist/bots/wechat-bridge.js

@@ -19,7 +19,7 @@
 import { generalizedErrorMessage } from '@maka/core/redaction';
 import { randomBytes, randomUUID } from 'node:crypto';
 import { createRequire } from 'node:module';
-import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
+import { BaseBotAdapter, botDiagnosticMessage, botReadinessFromSettings } from './base-adapter.js';
 import { proxiedFetch } from './proxied-fetch.js';
 const DEFAULT_WECHAT_BRIDGE_URL = 'http://127.0.0.1:18400';
 const WECHAT_BRIDGE_TIMEOUT_MS = 5_000;
@@ -90,7 +90,9 @@ export class WechatBridge extends BaseBotAdapter {
             : await testWechatBridge(this.settings);
         if (!probe.ok) {
             this.running = false;
-            this.reason = probe.error;
+            this.reason = probe.errorCode ?? 'connection_failed';
+            if (probe.error)
+                this.recordFailure(probe.error, this.reason);
             this.readiness = botReadinessFromSettings(this.settings);
             this.emitStatusChange();
             return;
@@ -109,7 +111,7 @@ export class WechatBridge extends BaseBotAdapter {
         // marked degraded instead of crashing the main process.
         const fail = (err) => {
             this.running = false;
-            this.reason = err instanceof Error ? err.message : 'stream-failed';
+            this.recordFailure(err, 'stream-failed');
             this.readiness = 'degraded';
             this.emitStatusChange();
         };
@@ -145,8 +147,7 @@ export class WechatBridge extends BaseBotAdapter {
             const status = typeof response.status === 'string' ? response.status : '';
             if (status === 'failed') {
                 this.readiness = 'degraded';
-                this.reason =
-                    typeof response.diagnostic === 'string' ? response.diagnostic : 'wechat-send-failed';
+                this.recordFailure(response.diagnostic ?? 'wechat-send-failed', 'send-failed');
                 this.emitStatusChange();
                 return null;
             }
@@ -159,7 +160,7 @@ export class WechatBridge extends BaseBotAdapter {
         }
         catch (error) {
             this.readiness = 'degraded';
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.emitStatusChange();
             return null;
         }
@@ -205,7 +206,7 @@ export class WechatBridge extends BaseBotAdapter {
                     return;
                 this.readiness =
                     this.readiness === 'operational' ? 'degraded' : botReadinessFromSettings(this.settings);
-                this.reason = generalizedErrorMessage(error);
+                this.recordFailure(error);
                 this.emitStatusChange();
                 await sleep(3_000);
             }
@@ -230,7 +231,7 @@ export class WechatBridge extends BaseBotAdapter {
                     continue;
                 if (errcode !== 0) {
                     this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-                    this.reason = stringField(response.errmsg) ?? `ilink-${errcode}`;
+                    this.recordFailure(stringField(response.errmsg) ?? `ilink-${errcode}`, 'stream-failed');
                     this.emitStatusChange();
                     await sleep(5_000);
                     continue;
@@ -259,7 +260,7 @@ export class WechatBridge extends BaseBotAdapter {
                     return;
                 consecutiveErrors += 1;
                 this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-                this.reason = generalizedErrorMessage(error);
+                this.recordFailure(error);
                 this.emitStatusChange();
                 await sleep(consecutiveErrors >= 3 ? 30_000 : 2_000);
                 if (consecutiveErrors >= 3)
@@ -298,7 +299,7 @@ export async function getWechatBridgeQrCode(channel) {
         return {
             ok: false,
             error: 'WeChat bridge URL must be http://127.0.0.1 or http://localhost',
-            hint: '微信扫码登录只允许访问本机 wechat-bridge，不能指向远端 URL。',
+            hintCode: 'wechat_bridge_remote_url',
         };
     }
     let lastError;
@@ -316,7 +317,7 @@ export async function getWechatBridgeQrCode(channel) {
     return {
         ok: false,
         error: generalizedErrorMessage(lastError),
-        hint: '先启动本机 wechat-bridge，并确认它暴露了 iLink 兼容的 /api/weixin/qrcode 或 /qrcode 接口。',
+        hintCode: 'wechat_bridge_unreachable',
     };
 }
 export function mapWechatBridgeMessage(raw) {
@@ -425,8 +426,7 @@ export async function testWechatBridge(channel) {
     if (!baseUrl) {
         return {
             ok: false,
-            error: 'WeChat bridge URL must be http://127.0.0.1 or http://localhost',
-            hint: '微信本地桥接只允许访问本机 wechat-bridge，不能指向远端 URL。',
+            errorCode: 'wechat_bridge_url_invalid',
         };
     }
     try {
@@ -455,8 +455,8 @@ export async function testWechatBridge(channel) {
     catch (error) {
         return {
             ok: false,
-            error: generalizedErrorMessage(error),
-            hint: '先在本机启动 wechat-bridge，并确认 WeChat 已登录；发送能力需要 wxp_act_ 激活码。',
+            errorCode: 'connection_failed',
+            error: botDiagnosticMessage(channel, error),
         };
     }
 }
@@ -486,8 +486,7 @@ export async function testWechatIlinkCredentials(channel) {
     if (!baseUrl || !token) {
         return {
             ok: false,
-            error: 'WeChat iLink credentials are incomplete',
-            hint: '请先完成微信扫码登录，保存 iLink bot token 与 base URL。',
+            errorCode: 'wechat_ilink_credentials_incomplete',
         };
     }
     return {
@@ -498,11 +497,10 @@ export async function testWechatIlinkCredentials(channel) {
             displayName: channel.botUserId ? `iLink ${channel.botUserId}` : 'WeChat iLink',
         },
         capabilities: { auth: true, send: true },
-        hint: '扫码登录凭据已保存；运行态会通过 iLink 长轮询接收消息。',
     };
 }
 function isWechatIlinkChannel(channel) {
-    return Boolean(channel.token.trim() && normalizeWechatIlinkBaseUrl(channel.webhookUrl));
+    return Boolean(normalizeWechatIlinkBaseUrl(channel.webhookUrl));
 }
 async function wechatIlinkPost(baseUrl, path, body, token, signal) {
     const response = await proxiedFetch(`${baseUrl}${path}`, {

package/node_modules/@maka/runtime/dist/bots/wecom-bridge.js

@@ -17,7 +17,6 @@
  * under the License.
  */
 import { WSClient } from '@wecom/aibot-node-sdk';
-import { generalizedErrorMessage } from '@maka/core/redaction';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
 const AUTH_TIMEOUT_MS = 15_000;
 /** Detach bridge callbacks before disconnect can synchronously emit. */
@@ -73,7 +72,7 @@ export class WeComBotBridge extends BaseBotAdapter {
         const botId = this.settings.appId?.trim() ?? '';
         const secret = this.settings.appSecret?.trim() ?? '';
         if (!botId || !secret) {
-            this.reason = 'no-credentials';
+            this.reason = 'wecom_credentials_missing';
             this.readiness = 'scaffolded';
             this.emitStatusChange();
             return;
@@ -122,7 +121,7 @@ export class WeComBotBridge extends BaseBotAdapter {
             if (this.explicitlyStopped || this.client !== client)
                 return;
             this.running = false;
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             this.client = null;
@@ -157,7 +156,7 @@ export class WeComBotBridge extends BaseBotAdapter {
         }
         catch (error) {
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'credentials_valid';
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error, 'send-failed');
             this.emitStatusChange();
             return null;
         }
@@ -197,7 +196,7 @@ export class WeComBotBridge extends BaseBotAdapter {
             if (this.client !== client || this.explicitlyStopped)
                 return;
             this.running = false;
-            this.reason = reason || 'disconnected';
+            this.recordFailure(reason || 'disconnected', 'disconnected');
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'configured';
             this.emitStatusChange();
         });
@@ -210,7 +209,7 @@ export class WeComBotBridge extends BaseBotAdapter {
         client.on('error', (error) => {
             if (this.client !== client || this.explicitlyStopped)
                 return;
-            this.reason = generalizedErrorMessage(error);
+            this.recordFailure(error);
             this.readiness = this.readiness === 'operational' ? 'degraded' : 'configured';
             this.emitStatusChange();
         });

package/node_modules/@maka/runtime/dist/bots/ws-bridge-base.js

@@ -103,7 +103,7 @@ export class WsBridgeBase extends BaseBotAdapter {
             ws = this.createWebSocket(url);
         }
         catch (error) {
-            this.reason = error instanceof Error ? error.message : String(error);
+            this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
             this.scheduleReconnect();
@@ -147,9 +147,9 @@ export class WsBridgeBase extends BaseBotAdapter {
         const decision = this.decideClose(code, this.explicitlyStopped);
         if (decision.kind === 'stopped')
             return;
+        this.recordFailure(reason, `${this.closeReasonPrefix}-closed-${code}`);
         if (decision.kind === 'fatal') {
             this.readiness = 'configured';
-            this.reason = `${this.closeReasonPrefix}-closed-${code}`;
             this.resetSession();
             this.emitStatusChange();
             return;
@@ -158,7 +158,6 @@ export class WsBridgeBase extends BaseBotAdapter {
             this.resetSession();
         }
         this.readiness = 'degraded';
-        this.reason = reason || `${this.closeReasonPrefix}-closed-${code}`;
         this.emitStatusChange();
         this.scheduleReconnect();
     }

package/node_modules/@maka/runtime/dist/session-trace-projection.js

@@ -18,7 +18,8 @@
  */
 import { dedupeModelCallAttempts, groupModelCallAttempts, } from '@maka/core/model-call-attempt';
 import { TERMINAL_RUNTIME_EVENT_STATUSES } from '@maka/core/runtime-event';
-import { SESSION_TRACE_SCHEMA_VERSION, traceTurnIdentityKey, } from '@maka/core/session-trace';
+import { SESSION_TRACE_SCHEMA_VERSION, MODEL_ATTEMPT_SHAPE, traceTurnIdentityKey, } from '@maka/core/session-trace';
+import { pickShape } from '@maka/core/record-schema';
 export function projectSessionTrace(input) {
     const events = input.runtimeEvents.filter((event) => !event.partial);
     // An aborted attempt and its later settlement are appended under one
@@ -189,35 +190,7 @@ function projectModelCallSteps(attempts) {
     return steps;
 }
 function toTraceAttempt(attempt) {
-    return {
-        attemptId: attempt.attemptId,
-        attempt: attempt.attempt,
-        status: attempt.status,
-        startedAt: attempt.startedAt,
-        completedAt: attempt.completedAt,
-        latencyMs: attempt.latencyMs,
-        ...(attempt.timeToFirstTokenMs !== undefined
-            ? { timeToFirstTokenMs: attempt.timeToFirstTokenMs }
-            : {}),
-        ...(attempt.finishReason !== undefined ? { finishReason: attempt.finishReason } : {}),
-        ...(attempt.errorClass !== undefined ? { errorClass: attempt.errorClass } : {}),
-        ...(attempt.httpStatus !== undefined ? { httpStatus: attempt.httpStatus } : {}),
-        ...(attempt.providerCode !== undefined ? { providerCode: attempt.providerCode } : {}),
-        ...(attempt.providerRequestId !== undefined
-            ? { providerRequestId: attempt.providerRequestId }
-            : {}),
-        ...(attempt.retryable !== undefined ? { retryable: attempt.retryable } : {}),
-        ...(attempt.inputTokens !== undefined ? { inputTokens: attempt.inputTokens } : {}),
-        ...(attempt.outputTokens !== undefined ? { outputTokens: attempt.outputTokens } : {}),
-        ...(attempt.cacheReadInputTokens !== undefined
-            ? { cacheReadInputTokens: attempt.cacheReadInputTokens }
-            : {}),
-        ...(attempt.reasoningTokens !== undefined ? { reasoningTokens: attempt.reasoningTokens } : {}),
-        ...(attempt.contextWindow !== undefined ? { contextWindow: attempt.contextWindow } : {}),
-        ...(attempt.costUsd !== undefined ? { costUsd: attempt.costUsd } : {}),
-        costBasis: attempt.costBasis,
-        usageBasis: attempt.usageBasis,
-    };
+    return pickShape(attempt, MODEL_ATTEMPT_SHAPE);
 }
 /** Prefix the runtime gives a written history-compaction boundary. */
 const HISTORY_COMPACT_EVENT_PREFIX = 'history-compact:';

package/node_modules/@maka/runtime-host/dist/candidate-entry.js

@@ -74,7 +74,10 @@ export async function runExecutionCandidateEntry(argv, entrypointUrl, hooks = {}
         await launchOwnerGuard?.dispose();
         process.exit(2);
     }
-    launchOwnerGuard?.bind(() => result.host.close());
+    // A launcher that disappears without releasing this Host (Desktop quit,
+    // launcher crash) is an intentional retirement of an owned ephemeral Host,
+    // not a crash — closing with the retirement reason keeps the exit truthful.
+    launchOwnerGuard?.bind(() => result.host.close({ reason: 'retirement' }));
     const stopWatch = hooks.onWon?.(result.host);
     try {
         await runRuntimeHostProcessLifecycle(result.host);

package/node_modules/@maka/runtime-host/dist/client/index.js

@@ -21,7 +21,7 @@ export { decodeRuntimeHostWebRtcStunPolicy, resolveRuntimeHostWebRtcStunUrls, }
 export { openRuntimeHostManagedStdioBridge } from './managed-stdio-bridge.js';
 export { connectRuntimeHost, connectExistingRuntimeHost, connectRemoteRuntimeHost, RuntimeHostOperationError, RuntimeHostRequestInterruptedError, } from './connection.js';
 export { prepareConnectedRuntimeHostRetirement, } from './host-retirement.js';
-export { forceTerminateObservedRegisteredRuntimeHost, forceTerminateRegisteredRuntimeHost, } from './registered-host-termination.js';
+export { forceTerminateObservedRegisteredRuntimeHost, } from './registered-host-termination.js';
 export { LOCAL_RUNTIME_HOST_PROFILE, RUNTIME_HOST_ACCESS_CREDENTIAL_MAX_BYTES, createClientRuntimeHostCredentialStore, createClientRuntimeHostProfileCatalog, createFileRuntimeHostProfileCatalog, createRuntimeHostCapabilityProviderCredentialStore, createRuntimeHostProfileCredentialStore, connectRuntimeHostProfile, sameEnvironmentRuntimeHostDeployment, connectRemoteRuntimeHostProfile, decodeEnvironmentRuntimeHostProfile, decodePersistedRuntimeHostProfile, decodeRemoteRuntimeHostProfile, migrateRuntimeHostProfileOperatorCommand, remoteRuntimeHostUnavailableError, runtimeHostProfileAccess, runtimeHostProfileTargetFingerprint, sameRemoteRuntimeHostProfileTarget, sameResolvedRuntimeHostProfileTarget, subscribeClientRuntimeHostProfileCatalogChanges, RuntimeHostProfileConnectionError, } from './host-profile.js';
 export { createRuntimeHostReconnectingConnection, isRuntimeHostReconnectingConnection, } from './reconnecting-connection.js';
 export { RuntimeHostSshOperatorActivationError, activateRuntimeHostSshOperator, runtimeHostSshOperatorRemoteCommand, } from './ssh-operator-activation.js';

package/node_modules/@maka/runtime-host/dist/client/peer-client.js

@@ -126,6 +126,9 @@ class RuntimeHostPeerClientImpl {
         if (this.#routeResolver === resolver)
             return () => undefined;
         this.#routeResolver = resolver;
+        for (const peerId of this.#endpoint?.connectivitySnapshot.connectedPeerIds ?? []) {
+            this.#notifyPeerConnected(peerId);
+        }
         for (const peerId of this.#routeListeners.keys()) {
             this.#subscribeResolver(peerId);
             this.#notifyRouteChange(peerId);
@@ -511,6 +514,8 @@ class RuntimeHostPeerClientImpl {
                 for (const peerId of new Set([...previousPeers, ...nextPeers])) {
                     if (previousPeers.has(peerId) !== nextPeers.has(peerId))
                         this.#notifyRouteChange(peerId);
+                    if (!previousPeers.has(peerId) && nextPeers.has(peerId))
+                        this.#notifyPeerConnected(peerId);
                 }
             }
         }
@@ -522,6 +527,14 @@ class RuntimeHostPeerClientImpl {
             this.#finishConsumer('mesh', this.#terminalError);
         }
     }
+    #notifyPeerConnected(peerId) {
+        try {
+            this.#routeResolver?.peerConnected?.(peerId);
+        }
+        catch {
+            // Mesh recovery must not interrupt the transport's connectivity watcher.
+        }
+    }
     async #drainInbound(endpoint) {
         try {
             while (true) {

package/node_modules/@maka/runtime-host/dist/client/registered-host-termination.js

@@ -16,16 +16,10 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { terminateProcessTree } from '@maka/runtime/process-tree-terminator';
 import { prepareStorageRootControlDirectory, resolveStorageRoot, } from '@maka/storage/root-authority';
 import { readHostRegistration } from '../control/registration.js';
 import { readRuntimeHostProcessIdentity, } from './process-identity.js';
 const TERMINATION_SETTLE_MS = 2_000;
-const defaultDependencies = {
-    terminateProcess: terminateProcessTree,
-    isProcessAlive,
-    settleMs: TERMINATION_SETTLE_MS,
-};
 const defaultObservedDependencies = {
     isProcessAlive,
     readProcessIdentity: readRuntimeHostProcessIdentity,
@@ -38,53 +32,6 @@ const defaultObservedDependencies = {
  * the expected State Root. Callers must reserve this for explicit recovery
  * and keep their authorization current until the signal is sent.
  */
-export function forceTerminateRegisteredRuntimeHost(identity, stillOwnsProcess) {
-    return forceTerminateRegisteredRuntimeHostWithDependencies(identity, stillOwnsProcess, defaultDependencies);
-}
-export async function forceTerminateRegisteredRuntimeHostWithDependencies(identity, stillOwnsProcess, dependencies) {
-    if (!stillOwnsProcess())
-        return false;
-    const capability = await resolveStorageRoot({ path: identity.rootPath, kind: 'interactive' });
-    if (capability.rootId !== identity.rootId)
-        return false;
-    const { controlDirectory } = await prepareStorageRootControlDirectory(capability);
-    const registered = await readHostRegistration(controlDirectory);
-    if (!registered)
-        return true;
-    if (!matchesIdentity(registered, identity))
-        return false;
-    if (!dependencies.isProcessAlive(identity.pid))
-        return true;
-    let signalTarget = registered;
-    const signaled = await dependencies.terminateProcess({
-        pid: identity.pid,
-        signal: 'SIGKILL',
-        hasExited: () => !dependencies.isProcessAlive(identity.pid),
-        beforeSignal: async () => {
-            // This runs after asynchronous process-tree discovery and immediately
-            // before the OS signal, so neither a successor nor a reused PID can
-            // inherit stale intent.
-            signalTarget = await readHostRegistration(controlDirectory);
-            return matchesIdentity(signalTarget, identity) && stillOwnsProcess();
-        },
-        fallback: () => {
-            try {
-                process.kill(identity.pid, 'SIGKILL');
-                return true;
-            }
-            catch {
-                return false;
-            }
-        },
-    });
-    if (!signalTarget)
-        return true;
-    if (!matchesIdentity(signalTarget, identity))
-        return false;
-    if (!signaled && dependencies.isProcessAlive(identity.pid))
-        return false;
-    return waitForExit(identity.pid, dependencies);
-}
 /**
  * Stops an ephemeral Host that Desktop did not launch in this process. Unlike
  * the owned-process path above, its authority is limited to the exact root PID
@@ -129,12 +76,6 @@ function matchesObservedRegistration(current, observed) {
         current.lifecycleMode === observed.lifecycleMode &&
         current.createdAt === observed.createdAt);
 }
-function matchesIdentity(registration, identity) {
-    return (registration?.rootId === identity.rootId &&
-        registration.hostEpoch === identity.hostEpoch &&
-        registration.pid === identity.pid &&
-        registration.lifecycleMode === 'ephemeral');
-}
 async function waitForExit(pid, dependencies) {
     const deadline = Date.now() + dependencies.settleMs;
     while (dependencies.isProcessAlive(pid)) {

package/node_modules/@maka/runtime-host/dist/peer-mesh/node.js

@@ -616,6 +616,16 @@ class PeerMeshNodeImpl {
             transitRelayPeerIds: Object.freeze(transitRelayPeerIds),
         });
     }
+    peerConnected(peerId) {
+        if (this.#lifetime.signal.aborted)
+            return;
+        const localPeerId = this.#peer.identity().peerId;
+        if (peerId !== localPeerId &&
+            this.#store
+                .read()
+                .meshes.some((state) => isActiveMembership(state, localPeerId) && state.roster.roster.members.includes(peerId)))
+            this.#triggerReconciliation();
+    }
     async prepareRoutes(peerId, signal) {
         this.#assertOpen();
         signal.throwIfAborted();
@@ -821,13 +831,22 @@ class PeerMeshNodeImpl {
         const gossipCursor = this.#gossipCursor;
         this.#gossipCursor = (this.#gossipCursor + 1) % PEER_MESH_MAX_MEMBERS;
         const now = this.#now();
+        const targetFor = (peerId) => {
+            const signed = latestReachability(stored.reachability, peerId, now, true);
+            if (signed)
+                return dialTarget(signed);
+            // A fresh Session Share can reconnect an existing member after all of
+            // its stored routes expired. Reuse that authenticated connection to
+            // exchange signed evidence; the connection itself grants no membership.
+            return this.#peer.isConnected(peerId)
+                ? { peerId, routeHints: [], coordinationRelays: [] }
+                : undefined;
+        };
         for (const [index, state] of memberships.entries()) {
             const meshId = state.roster.roster.meshId;
             const desiredMembership = state.role === 'replica' ? state.desiredMembership : 'active';
-            const authority = state.role === 'replica'
-                ? currentAuthorityTarget(state, stored.reachability, now)
-                : undefined;
-            if (authority && authority.lease.peerId !== excludedPeerId) {
+            const authority = state.role === 'replica' ? targetFor(state.roster.roster.authorityPeerId) : undefined;
+            if (authority && authority.peerId !== excludedPeerId) {
                 pending.push({
                     kind: 'membership',
                     meshId,
@@ -843,7 +862,7 @@ class PeerMeshNodeImpl {
                 peerId !== excludedPeerId &&
                 (state.role === 'authority' || peerId !== state.roster.roster.authorityPeerId))
                 .flatMap((peerId) => {
-                const target = peerTarget(peerId, stored.reachability, now);
+                const target = targetFor(peerId);
                 return target ? [target] : [];
             });
             if (rotatingTargets.length === 0)
@@ -902,7 +921,7 @@ class PeerMeshNodeImpl {
     }
     async #notifyLeave(meshId, target, roster, signal) {
         const stream = await this.#peer.connectMeshControl({
-            ...dialTarget(target),
+            ...target,
             directDeadlineMs: CONNECT_DEADLINE_MS,
         }, signal);
         try {
@@ -918,16 +937,15 @@ class PeerMeshNodeImpl {
     }
     async #syncPeer(meshId, target, signal) {
         const localPeerId = this.#peer.identity().peerId;
-        const targetPeerId = target.lease.peerId;
+        const targetPeerId = target.peerId;
         for (let page = 0; page <= PEER_MESH_MAX_MEMBERS; page += 1) {
             if (!isActiveMeshMember(this.#store.read().meshes, meshId, localPeerId, targetPeerId))
                 return;
             const discovered = this.resolveRoutes(targetPeerId);
-            const targetRoutes = dialTarget(target);
             const stream = await this.#peer.connectMeshControl({
                 peerId: targetPeerId,
-                routeHints: mergeAddresses(discovered?.routeHints ?? [], targetRoutes.routeHints),
-                coordinationRelays: mergeAddresses(discovered?.coordinationRelays ?? [], targetRoutes.coordinationRelays),
+                routeHints: mergeAddresses(discovered?.routeHints ?? [], target.routeHints),
+                coordinationRelays: mergeAddresses(discovered?.coordinationRelays ?? [], target.coordinationRelays),
                 transitRelayPeerIds: discovered?.transitRelayPeerIds,
                 directDeadlineMs: CONNECT_DEADLINE_MS,
             }, signal);
@@ -1700,9 +1718,6 @@ function peerMeshStatus(state, identity, endpointKind, reachability, advertiseme
         })),
     });
 }
-function currentAuthorityTarget(state, reachability, now) {
-    return latestReachability(reachability, state.roster.roster.authorityPeerId, now, true);
-}
 function rosterAnnouncementTargets(memberPeerIds, reachability, localPeerId, now) {
     const members = new Set(memberPeerIds);
     return Object.freeze(reachability.filter((signed) => signed.lease.peerId !== localPeerId &&
@@ -1937,9 +1952,6 @@ function hasReachabilityRoutes(signed) {
 function usableHistoricalReachability(signed, now) {
     return signed.lease.expiresAt > now - PEER_REACHABILITY_RECOVERY_HORIZON_MS;
 }
-function peerTarget(peerId, reachability, now) {
-    return latestReachability(reachability, peerId, now, true);
-}
 function dialTarget(reachability) {
     return Object.freeze({
         peerId: reachability.lease.peerId,

package/node_modules/@maka/runtime-host/dist/protocol/external-session.js

@@ -46,6 +46,10 @@ const IMPORT_ERRORS = [
     'not_found',
     'operation_conflict',
     'commit_outcome_unknown',
+    // Distinct, stable reasons the import page renders as specific banners, so the
+    // shell classifies by code rather than by the redacted error message.
+    'model_unavailable',
+    'source_unreadable',
 ];
 export const EXTERNAL_SESSION_OPERATION_SPECS = {
     'external-session.source.query': defineOperation({

package/node_modules/@maka/runtime-host/dist/protocol/host-status.js

@@ -81,6 +81,7 @@ function decodeHostDiagnosticsResult(value) {
         'activeOperations',
         'activeResidencies',
         ...(valueRecord.peerEndpoint === undefined ? [] : ['peerEndpoint']),
+        'upgradeBlockingActivity',
         'compositionModules',
         'residencies',
         'protocolVersion',
@@ -104,6 +105,7 @@ function decodeHostDiagnosticsResult(value) {
     }
     return {
         ...decodeHostStatusFields(record),
+        upgradeBlockingActivity: requireUpgradeBlockingActivity(record.upgradeBlockingActivity),
         compositionModules: record.compositionModules.map((moduleId) => requireString(moduleId, 'Runtime Host composition module id', 64)),
         residencies: record.residencies.map((value) => {
             const residency = requireExactRecord(value, 'Runtime Host residency', ['label', 'count']);
@@ -123,6 +125,12 @@ function decodeHostDiagnosticsResult(value) {
         logs: record.logs.map((entry) => requireUtf8String(entry, 'Runtime Host diagnostic log entry', HOST_DIAGNOSTIC_LOG_MAX_ENTRY_BYTES)),
     };
 }
+function requireUpgradeBlockingActivity(value) {
+    if (typeof value !== 'boolean') {
+        throw invalidProtocolFrame('Invalid Runtime Host upgrade blocking activity');
+    }
+    return value;
+}
 export function decodeHostActivitySnapshot(value) {
     const record = requireExactRecord(value, 'Runtime Host activity', [
         'connections',

package/node_modules/@maka/runtime-host/dist/protocol/index.js

@@ -62,7 +62,19 @@ export const RUNTIME_HOST_REGISTRATION_SCHEMA_VERSION = 1;
 export const RUNTIME_HOST_PROTOCOL_VERSION = 0;
 // Increment when the same protocol version no longer guarantees safe Client-Host
 // interoperability. Mismatches are rejected before domain commands are admitted.
-export const RUNTIME_HOST_COMPATIBILITY_EPOCH = 117;
+export const RUNTIME_HOST_COMPATIBILITY_EPOCH = 121;
+// 121: Host diagnostics report `upgradeBlockingActivity`, the Host's
+// authoritative activity answer for maintenance probes, computed by the same
+// authority that gates `host.upgrade.prepare`. Older Clients reject the
+// unknown key when decoding diagnostics, so the pair must refuse each other
+// at the handshake.
+// 120: WorkHub admits named resume proposals with an explicit resumesActionId
+// and returns a transient resume outcome. Older peers cannot decode this action.
+// 119: Session Guest principals expose optional display names and an owner-only
+// rename command. Older peers reject named principal projections.
+// 118: External-session import publishes distinct `model_unavailable` and
+// `source_unreadable` error codes so the shell classifies failures by code
+// instead of the redacted message. Older peers cannot decode the new codes.
 // 117: WorkHub exposes only one correction linkage per bounded candidate and
 // no longer returns the Host's complete active-link set.
 // 116: User deletion rejects workflow-owned Artifacts with operation_conflict.

package/node_modules/@maka/runtime-host/dist/protocol/operations.js

@@ -114,6 +114,7 @@ export const REMOTE_OWNER_OPERATION_GRANTS = Object.freeze([
     'collaboration.grant.revoke',
     'collaboration.invitation.prepare',
     'collaboration.principal.revoke',
+    'collaboration.principal.rename',
     'collaboration.turn-request.decide',
     'collaboration.turn-request.query',
     'connection.catalog.create',

package/node_modules/@maka/runtime-host/dist/protocol/session-collaboration.js

@@ -54,6 +54,24 @@ export const SESSION_COLLABORATION_OPERATION_SPECS = {
         decodeInput: decodeCollaborationGrantRevokeInput,
         decodeOutput: decodeCollaborationGrantRevokeResult,
     }),
+    'collaboration.principal.rename': defineOperation({
+        mode: 'command',
+        availability: 'ready',
+        errors: COLLABORATION_ERRORS,
+        decodeInput(value) {
+            const record = requireExactRecord(value, 'Guest alias', ['principalId', 'displayName']);
+            return {
+                principalId: decodePrincipalId(record.principalId),
+                displayName: decodeCollaborationDisplayName(record.displayName),
+            };
+        },
+        decodeOutput(value) {
+            const record = requireExactRecord(value, 'Guest alias result', ['renamed']);
+            if (typeof record.renamed !== 'boolean')
+                throw invalidProtocolFrame('Invalid Guest alias result');
+            return { renamed: record.renamed };
+        },
+    }),
     'collaboration.principal.revoke': defineOperation({
         mode: 'command',
         availability: 'ready',
@@ -179,19 +197,28 @@ function decodeCollaborationAccessQueryResult(value) {
     };
 }
 function decodeSessionGuestPrincipal(value) {
-    const record = requireShapedRecord(value, 'Session Guest principal', ['principalId', 'status', 'createdAt'], ['expiresAt']);
+    const record = requireShapedRecord(value, 'Session Guest principal', ['principalId', 'status', 'createdAt'], ['expiresAt', 'displayName']);
     if (record.status !== 'pending' && record.status !== 'active') {
         throw invalidProtocolFrame('Invalid Session Guest principal status');
     }
     return {
         principalId: decodePrincipalId(record.principalId),
         status: record.status,
+        ...(record.displayName === undefined
+            ? {}
+            : { displayName: decodeCollaborationDisplayName(record.displayName) }),
         createdAt: decodeIsoTimestamp(record.createdAt, 'createdAt'),
         ...(record.expiresAt === undefined
             ? {}
             : { expiresAt: decodeIsoTimestamp(record.expiresAt, 'expiresAt') }),
     };
 }
+export function decodeCollaborationDisplayName(value) {
+    const name = requireUtf8String(value, 'Guest alias', 256).trim();
+    if (!name)
+        throw invalidProtocolFrame('Guest alias must not be blank');
+    return name;
+}
 function decodeCollaborationGrantRevokeInput(value) {
     const record = requireExactRecord(value, 'collaboration grant revoke input', ['grantId']);
     return { grantId: requireId(record.grantId, 'grantId') };