Safer miniapp tools and a more reliable specialist runtime

Miniapps can now read named retention cohorts and the observations behind them, then trigger those reports through host-owned APIs. Packaged MCP tools also gain a complete activation path with preflight checks, signed contracts, OAuth validation, and specialist action results returned to the calling app.

Specialists and models

Specialist definitions move into a canonical catalog with a service and sync tool behind it. Publication now blocks specialists that cannot be routed, sharded model downloads reject incomplete files and can be cancelled, and an overloaded provider gets a cooldown plus a controlled half-open retry instead of repeated failing requests.

Editor and platform fixes

The code knowledge graph no longer looks unfinished when every path is intentionally excluded, and structural reads stop locking SQLite. Mobile Channel Details stays inside the viewport, package MCP discovery uses bounded futures, and Windows setup persists the build-cache configuration it needs. Webview console output also gets its own log file for easier diagnosis.