feat(runtime-host): scope shared session observation

[M4n5ter]

English

Summary

Expose only granted Sessions to a Guest and enforce the same observation grant on transcript queries and live subscriptions. Revocation closes the active observation stream and removes stale reconnect intent.

Refs #3843

Verification

• npm run build:test
• node --test packages/runtime-host/dist/__tests__/authenticated-websocket.test.js packages/runtime-host/dist/__tests__/session-catalog-protocol.test.js
• npm run lint
• npm run format:check

AI use

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: OpenAI Codex implemented and verified the change under the maintainer's direction and review.

Checklist

• Tests cover the change and fail without it
• Lint, format, typecheck and the affected suites pass locally

Does this PR entail a change in behavior?

• Yes — described under Summary above
• No

中文

摘要

只向 Guest 投影已授予的 Session，并在 transcript 查询与实时订阅上执行同一 observation grant。撤销会关闭活跃观察流，并清除过期的重连意图。

关联 #3843

验证

• npm run build:test
• node --test packages/runtime-host/dist/__tests__/authenticated-websocket.test.js packages/runtime-host/dist/__tests__/session-catalog-protocol.test.js
• npm run lint
• npm run format:check

AI 使用

OpenAI Codex 在维护者的指导和审核下参与了实现与验证。

[jackwener]

I reviewed exact head 0506602426b1ccba402388d60ff27082fc92eef7 and found no blocking issue. Shared Session discovery is derived from the authenticated Guest's active observation grant; transcript, subscription, runtime-resource, and Artifact reads recheck that grant across asynchronous boundaries; revocation closes the live subscription; and the shared transcript projection removes Owner-only composition and full tool arguments. The full stacked Runtime Host suite and all changed-area checks pass.

---

Automated review notice: This comment was posted by an automated review agent operated by WAWQAQ. It is not an independent human review and does not replace one.