feat(runtime-host): own Deep Research state

[M4n5ter]

English

Summary

• move Deep Research ledger ownership into the Runtime Host behind a lease-authenticated writer
• expose one bounded, read-only deep-research.query Client operation
• compose the exact Deep Research model tool surface for labelled Sessions
• bind research artifacts, cleanup, and query projection to the owning Session

Runtime contract

The Runtime Host now opens the canonical Deep Research Store and serves model mutations through a Session-scoped coordinator. The coordinator owns the durable ledger, constrains Artifact access to the same Session and the deep_research source, and publishes a bounded Client projection that remains stable across Client reconnects and Host restarts.

Deep Research mode uses an explicit tool allowlist. It does not inherit arbitrary deep_research_* tools, and the Host prompt only advertises ExploreAgent when that tool is actually present in the projected surface. Branch and revision operations fail closed until an exact research-ledger copy boundary exists.

Session removal purges the research ledger through the same authority lifecycle. The wire result uses its final JSON-encoded size as the budget and deterministically trims only optional projection fields.

Validation

• full repository build
• full repository typecheck
• Runtime Host suite: 637 passed, 0 failed
• Core and Runtime suites: 0 failed
• Desktop Deep Research tool-surface regression
• two-Client UDS query and Host restart recovery regression
• escaping-heavy canonical ledger and wire-budget regression
• Storage purge regression
• Biome checks
• git diff --check

中文

概要

• 将 Deep Research ledger 所有权迁入 Runtime Host，并置于 lease-authenticated writer 之后
• 提供一个有界、只读的 deep-research.query Client 操作
• 为带有对应标签的 Session 组合精确的 Deep Research 模型工具面
• 将研究 Artifact、清理流程和查询投影绑定到所属 Session

运行时契约

Runtime Host 现在会打开 canonical Deep Research Store，并通过 Session-scoped coordinator 执行模型侧 mutation。该 coordinator 负责 durable ledger，将 Artifact 访问限制在同一 Session 与 deep_research source 内，并发布有界的 Client 投影；Client 重连或 Host 重启后，投影仍保持一致。

Deep Research 模式使用显式工具 allowlist，不会自动继承任意 deep_research_* 工具。只有最终投影工具面中确实存在 ExploreAgent 时，Host prompt 才会声明该能力。在具备精确 research-ledger copy boundary 之前，branch 与 revision 操作会 fail closed。

删除 Session 时会通过同一 authority lifecycle 清理研究 ledger。Wire result 以最终 JSON 编码大小作为预算，并且只会确定性裁剪可选投影字段。

验证

• 完整仓库构建
• 完整仓库 typecheck
• Runtime Host 测试：637 passed，0 failed
• Core 与 Runtime 测试：0 failed
• Desktop Deep Research 工具面回归测试
• 双 Client UDS 查询与 Host 重启恢复回归测试
• 转义密集 canonical ledger 与 wire budget 回归测试
• Storage purge 回归测试
• Biome 检查
• git diff --check