feat(agents): pull-wake runner health check, principal rename, and lifecycle hardening

.changeset/desktop-local-fetch.md

@@ -0,0 +1,6 @@
+---
+'@electric-ax/agents-desktop': patch
+'@electric-ax/agents-server-ui': patch
+---
+
+Route local desktop mutating agents-server requests through the Electron main process so CORS preflights cannot stall behind renderer connection limits.

.changeset/harden-pull-wake-runner.md

@@ -0,0 +1,7 @@
+---
+'@electric-ax/agents-runtime': patch
+'@electric-ax/agents-server': patch
+'@electric-ax/agents': patch
+---
+
+Harden pull-wake runner lifecycle with a state machine, heartbeat-driven stream resets, and exponential reconnect backoff (1s-30s). Add granular `status` field to `PullWakeRunnerHealth` (`stopped | starting | connecting | streaming | reconnecting | stopping`). The `onError` callback is now reporting-only (`(Error) => void`) - it can no longer control runner lifecycle. `stop()` rethrows `drainWakes` errors so callers observe wake handler failures. Event-driven heartbeat throttling avoids stale diagnostics between fixed-interval heartbeats. Durable Streams clients now append stream and `__ds` subscription control paths to the configured backend URL prefix without inferring a `/v1/stream` layout, so pull-wake subscriptions work behind arbitrary DS backend prefixes. Remove the stale `StreamClient.getConsumerState()` helper for the old Durable Streams `/consumers` endpoint.

.changeset/local-desktop-principal.md

@@ -0,0 +1,6 @@
+---
+'@electric-ax/agents-desktop': patch
+'@electric-ax/agents-server-ui': patch
+---
+
+Default unauthenticated local desktop sessions to the `system:dev-local` principal and resolve optimistic send principals at mutation time so pending messages do not render as `unknown`.

.changeset/pull-wake-health-diagnostics.md

@@ -0,0 +1,9 @@
+---
+'@electric-ax/agents-server': patch
+'@electric-ax/agents-runtime': patch
+'@electric-ax/agents-desktop': patch
+'@electric-ax/agents': patch
+'electric-ax': patch
+---
+
+Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.

.changeset/pull-wake-session-startup-ui.md

@@ -0,0 +1,5 @@
+---
+'@electric-ax/agents-server-ui': patch
+---
+
+Send new-session initial messages through the spawn request so pull-wake sessions can start without waiting for the UI to preload the entity stream.