refactor(runtime-host): make the Host the authority for the model catalog

apps/desktop/renderer-architecture.json

@@ -4361,7 +4361,7 @@
           "./subagent-preset-presentation.js": 1,
           "@astryxdesign/core": 1,
           "@maka/core/llm-connections": 2,
-          "@maka/core/model-thinking": 2,
+          "@maka/core/model-thinking": 1,
           "@maka/core/settings": 1,
           "@maka/core/subagent-settings": 1,
           "@maka/ui": 1,

apps/desktop/src/main/__tests__/model-catalog-choices.test.ts

@@ -19,15 +19,19 @@
 
 import { strict as assert } from 'node:assert';
 import { describe, it } from 'node:test';
-import type { IdentifiedLlmConnection } from '@maka/core/llm-connections';
+import type {
+  IdentifiedLlmConnection,
+  ProjectedLlmConnection,
+} from '@maka/core/llm-connections';
+import { resolveConnectionModelCatalog } from '@maka/core/model-catalog';
 import { buildChatModelChoices } from '@maka/core/chat-model-choice';
 import { pickNewChatModel } from '../../renderer/shell-chat-model-selection.js';
 
 function connection(
   overrides: Partial<IdentifiedLlmConnection> &
     Pick<IdentifiedLlmConnection, 'slug' | 'providerType'>,
-): IdentifiedLlmConnection {
-  return {
+): ProjectedLlmConnection {
+  const stored: IdentifiedLlmConnection = {
     connectionId: `connection-${overrides.slug}`,
     name: overrides.slug,
     defaultModel: '',
@@ -37,6 +41,9 @@ function connection(
     updatedAt: 1,
     ...overrides,
   };
+  // The Host resolves the catalog and projects it; tests build connections the
+  // same way so they exercise what a client actually receives.
+  return { ...stored, catalogEntries: resolveConnectionModelCatalog(stored) };
 }
 
 describe('model catalog picker helpers', () => {

apps/desktop/src/main/__tests__/provider-add-submission.test.ts

@@ -26,7 +26,7 @@ import {
   type AddProviderField,
 } from '../../renderer/settings/provider-add-submission.js';
 import {
-  PROVIDER_DEFAULTS,
+  PROVIDER_REGISTRY,
   providerSupportsModelDiscovery,
   type CreateConnectionInput,
   type IdentifiedLlmConnection,
@@ -89,8 +89,8 @@ test('no provider type demands a model id at creation', () => {
   // Stated across the catalog rather than for the two relays alone: the rule
   // that came back would be a per-provider `if`, and asserting only where it
   // used to live would let it reappear next door.
-  for (const providerType of Object.keys(PROVIDER_DEFAULTS) as ProviderType[]) {
-    const defaults = PROVIDER_DEFAULTS[providerType];
+  for (const providerType of Object.keys(PROVIDER_REGISTRY) as ProviderType[]) {
+    const defaults = PROVIDER_REGISTRY[providerType];
     if (defaults.status === 'phase3-experimental') continue;
     const issue = validateAddProviderDraft(
       draft({
@@ -160,7 +160,7 @@ test('a successful catalog fetch reports no error', async () => {
 });
 
 test('a provider without discovery is not asked, and reports no error', async () => {
-  const withoutDiscovery = (Object.keys(PROVIDER_DEFAULTS) as ProviderType[]).find(
+  const withoutDiscovery = (Object.keys(PROVIDER_REGISTRY) as ProviderType[]).find(
     (providerType) => !providerSupportsModelDiscovery(providerType),
   );
   assert.ok(withoutDiscovery, 'expected at least one provider with no discovery endpoint');

apps/desktop/src/main/__tests__/provider-endpoint-presentation.test.ts

@@ -19,7 +19,7 @@
 
 import assert from 'node:assert/strict';
 import test from 'node:test';
-import { PROVIDER_DEFAULTS } from '@maka/core/llm-connections';
+import { PROVIDER_REGISTRY } from '@maka/core/llm-connections';
 import {
   endpointCarriesCredentials,
   providerEndpointPresentation,
@@ -34,12 +34,12 @@ test('fixed Alibaba access paths expose their distinct effective endpoints read-
   const tokenPlanChina = providerEndpointPresentation({ providerType: 'alibaba-token-plan-cn' });
 
   assert.deepEqual(api, {
-    value: PROVIDER_DEFAULTS.alibaba.baseUrl,
+    value: PROVIDER_REGISTRY.alibaba.baseUrl,
     editable: false,
     emptyState: 'missing',
   });
   assert.deepEqual(tokenPlanChina, {
-    value: PROVIDER_DEFAULTS['alibaba-token-plan-cn'].baseUrl,
+    value: PROVIDER_REGISTRY['alibaba-token-plan-cn'].baseUrl,
     editable: false,
     emptyState: 'missing',
   });
@@ -118,7 +118,7 @@ test('custom relays and local runtimes retain endpoint editing', () => {
   assert.deepEqual(
     providerEndpointPresentation({ providerType: 'ollama' }),
     {
-      value: PROVIDER_DEFAULTS.ollama.baseUrl,
+      value: PROVIDER_REGISTRY.ollama.baseUrl,
       editable: true,
       emptyState: 'missing',
     },
@@ -140,7 +140,7 @@ test('derived and OAuth endpoints remain visible but read-only', () => {
   assert.deepEqual(
     providerEndpointPresentation({ providerType: 'openai-codex' }),
     {
-      value: PROVIDER_DEFAULTS['openai-codex'].baseUrl,
+      value: PROVIDER_REGISTRY['openai-codex'].baseUrl,
       editable: false,
       emptyState: 'managed',
     },
@@ -161,7 +161,7 @@ test('providers with model-level endpoint overrides say so when showing the defa
   assert.deepEqual(
     providerEndpointPresentation({ providerType: 'zenmux' }),
     {
-      value: PROVIDER_DEFAULTS.zenmux.baseUrl,
+      value: PROVIDER_REGISTRY.zenmux.baseUrl,
       editable: false,
       emptyState: 'missing',
       modelOverrides: true,
@@ -170,7 +170,7 @@ test('providers with model-level endpoint overrides say so when showing the defa
   assert.deepEqual(
     providerEndpointPresentation({ providerType: 'cohere' }),
     {
-      value: PROVIDER_DEFAULTS.cohere.baseUrl,
+      value: PROVIDER_REGISTRY.cohere.baseUrl,
       editable: false,
       emptyState: 'missing',
       modelOverrides: true,

apps/desktop/src/main/__tests__/runtime-host-account-connection.test.ts

@@ -19,7 +19,11 @@
 
 import assert from 'node:assert/strict';
 import { describe, it } from 'node:test';
-import type { ConnectionCatalogSnapshot, ConnectionTarget } from '@maka/core/runtime-policy';
+import type { ConnectionTarget } from '@maka/core/runtime-policy';
+import type {
+  RuntimeHostConnectionCatalogEntry as ConnectionCatalogEntry,
+  RuntimeHostConnectionCatalogSnapshot as ConnectionCatalogSnapshot,
+} from '@maka/runtime-host/client';
 import {
   synchronizeRuntimeHostAccountConnection,
   type RuntimeHostAccountConnectionClient,
@@ -42,6 +46,7 @@ function catalogWithoutDefault(): ConnectionCatalogSnapshot {
         providerType: 'openai-codex',
         enabled: true,
         enabledModelIds: ['gpt-5-codex', 'gpt-5-codex-mini'],
+        catalogEntries: [],
         models: [{ id: 'gpt-5-codex' }, { id: 'gpt-5-codex-mini' }],
         modelSource: 'fallback',
         modelsFetchedAt: 0,

apps/desktop/src/main/__tests__/runtime-host-config-ipc-main.test.ts

@@ -21,10 +21,12 @@ import assert from 'node:assert/strict';
 import test from 'node:test';
 import type { AppSettings } from '@maka/core/settings';
 import type {
-  ConnectionCatalogSnapshot,
   CredentialLocator,
 } from '@maka/core/runtime-policy';
-import { gatherRuntimeHostConfig } from '../runtime-host-config-ipc-main.js';
+import type {
+  RuntimeHostConnectionCatalogEntry as ConnectionCatalogEntry,
+  RuntimeHostConnectionCatalogSnapshot as ConnectionCatalogSnapshot,
+} from '@maka/runtime-host/client';import { gatherRuntimeHostConfig } from '../runtime-host-config-ipc-main.js';
 
 const CATALOG: ConnectionCatalogSnapshot = {
   revision: 1,
@@ -41,6 +43,7 @@ const CATALOG: ConnectionCatalogSnapshot = {
       providerType: 'deepseek',
       enabled: true,
       enabledModelIds: ['deepseek-v4-pro'],
+      catalogEntries: [],
       models: [{ id: 'deepseek-v4-pro' }],
     },
   ],

apps/desktop/src/main/__tests__/runtime-host-connections-ipc-main.test.ts

@@ -20,7 +20,10 @@
 import assert from 'node:assert/strict';
 import test from 'node:test';
 import { OPENCODE_FREE_DEFAULT_ENABLED_MODELS } from '@maka/core/llm-connections';
-import type { ConnectionCatalogSnapshot } from '@maka/core/runtime-policy';
+import type {
+  RuntimeHostConnectionCatalogEntry as ConnectionCatalogEntry,
+  RuntimeHostConnectionCatalogSnapshot as ConnectionCatalogSnapshot,
+} from '@maka/runtime-host/client';
 import {
   projectHostConnections,
   projectHostConnectionTest,
@@ -75,6 +78,7 @@ test('retries connection delete after a stale revision instead of failing perman
             providerType: 'openai-compatible',
             baseUrl: 'https://openrouter.ai/api/v1',
             enabled: true,
+            catalogEntries: [],
             enabledModelIds: ['model-1'],
             models: [{ id: 'model-1' }],
           },
@@ -285,6 +289,7 @@ test('preserves the provider default inventory beside the recommended model', as
                   providerType: 'opencode-free',
                   enabled: true,
                   enabledModelIds: createdModels,
+                  catalogEntries: [],
                   models: [],
                 },
               ],
@@ -328,6 +333,8 @@ test('projects the Host default target without inventing a second Connection aut
       defaultModel: 'model-1',
       enabledModelIds: ['model-1', 'model-2'],
       models: [{ id: 'model-1' }, { id: 'model-2' }],
+      // Carried through from the Host projection, not rebuilt here.
+      catalogEntries: [],
       createdAt: 0,
       updatedAt: 4,
     },
@@ -395,6 +402,7 @@ function catalog(): ConnectionCatalogSnapshot {
         baseUrl: 'https://openrouter.ai/api/v1',
         enabled: true,
         enabledModelIds: ['model-1', 'model-2'],
+        catalogEntries: [],
         models: [{ id: 'model-1' }, { id: 'model-2' }],
       },
     ],

apps/desktop/src/main/__tests__/runtime-host-github-copilot-ipc-main.test.ts

@@ -21,11 +21,12 @@ import assert from 'node:assert/strict';
 import test from 'node:test';
 import type { IpcMainInvokeEvent } from 'electron';
 import type {
-  ConnectionCatalogEntry,
-  ConnectionCatalogSnapshot,
   CredentialStatus,
 } from '@maka/core/runtime-policy';
-import {
+import type {
+  RuntimeHostConnectionCatalogEntry as ConnectionCatalogEntry,
+  RuntimeHostConnectionCatalogSnapshot as ConnectionCatalogSnapshot,
+} from '@maka/runtime-host/client';import {
   registerRuntimeHostGitHubCopilotIpc,
   type RuntimeHostGitHubCopilotIpcDeps,
 } from '../runtime-host-github-copilot-ipc-main.js';
@@ -57,6 +58,7 @@ test('imports a local GitHub credential through the shared Host account path', a
         ...draft,
         connectionId: CONNECTION_ID,
         revision: 1,
+        catalogEntries: [],
         models: [],
       };
       catalog = {

apps/desktop/src/main/__tests__/runtime-host-oauth-ipc-main.test.ts

@@ -20,8 +20,11 @@
 import assert from 'node:assert/strict';
 import test from 'node:test';
 import type { IpcMainInvokeEvent } from 'electron';
-import { PROVIDER_DEFAULTS } from '@maka/core/llm-connections';
-import type { ConnectionCatalogSnapshot } from '@maka/core/runtime-policy';
+import { PROVIDER_REGISTRY } from '@maka/core/llm-connections';
+import type {
+  RuntimeHostConnectionCatalogEntry as ConnectionCatalogEntry,
+  RuntimeHostConnectionCatalogSnapshot as ConnectionCatalogSnapshot,
+} from '@maka/runtime-host/client';
 import {
   RUNTIME_HOST_OAUTH_IPC_CHANNELS,
   registerRuntimeHostOAuthIpc,
@@ -54,7 +57,7 @@ test('adapts every Host OAuth provider through one Desktop flow', async () => {
   const presentation = new RuntimeHostOAuthPresentation(async (url) => {
     opened.push(url);
   });
-  const modelId = PROVIDER_DEFAULTS[provider].fallbackModels[0];
+  const modelId = PROVIDER_REGISTRY[provider].fallbackModels[0];
   assert.ok(modelId);
   let phase: 'awaiting_authorization' | 'authenticated' | 'cancelled' =
     'awaiting_authorization';
@@ -71,7 +74,8 @@ test('adapts every Host OAuth provider through one Desktop flow', async () => {
         name: 'OpenAI Codex',
         providerType: provider,
         enabled: true,
-        enabledModelIds: [...PROVIDER_DEFAULTS[provider].fallbackModels],
+        enabledModelIds: [...PROVIDER_REGISTRY[provider].fallbackModels],
+        catalogEntries: [],
         models: [],
       },
     ],
@@ -215,7 +219,8 @@ test('provider-scoped OAuth IPC rejects a Connection ID owned by another provide
     name: 'xAI Grok',
     providerType: 'xai-oauth' as const,
     enabled: true,
-    enabledModelIds: [...PROVIDER_DEFAULTS['xai-oauth'].fallbackModels],
+    enabledModelIds: [...PROVIDER_REGISTRY['xai-oauth'].fallbackModels],
+    catalogEntries: [],
     models: [],
   };
   let starts = 0;
@@ -334,7 +339,8 @@ test('a second OAuth start cannot replace or cancel a pending active attempt', a
       name: 'OpenAI Codex 2',
       providerType: provider,
       enabled: true,
-      enabledModelIds: [...PROVIDER_DEFAULTS[provider].fallbackModels],
+      enabledModelIds: [...PROVIDER_REGISTRY[provider].fallbackModels],
+      catalogEntries: [],
       models: [],
     },
     {
@@ -344,7 +350,8 @@ test('a second OAuth start cannot replace or cancel a pending active attempt', a
       name: 'OpenAI Codex 3',
       providerType: provider,
       enabled: true,
-      enabledModelIds: [...PROVIDER_DEFAULTS[provider].fallbackModels],
+      enabledModelIds: [...PROVIDER_REGISTRY[provider].fallbackModels],
+      catalogEntries: [],
       models: [],
     },
   ];
@@ -355,7 +362,8 @@ test('a second OAuth start cannot replace or cancel a pending active attempt', a
     name: 'xAI Grok',
     providerType: 'xai-oauth' as const,
     enabled: true,
-    enabledModelIds: [...PROVIDER_DEFAULTS['xai-oauth'].fallbackModels],
+    enabledModelIds: [...PROVIDER_REGISTRY['xai-oauth'].fallbackModels],
+    catalogEntries: [],
     models: [],
   };
   const presentation = new RuntimeHostOAuthPresentation(async () => undefined);
@@ -526,7 +534,7 @@ test('completion rejects a terminal projection that changes Connection identity'
 
 test('keeps a committed OAuth login successful when model discovery fails without replacing the existing default', async () => {
   const provider = 'openai-codex' as const;
-  const modelId = PROVIDER_DEFAULTS[provider].fallbackModels[0];
+  const modelId = PROVIDER_REGISTRY[provider].fallbackModels[0];
   assert.ok(modelId);
   const existing = {
     connectionId: '00000000-0000-4000-8000-000000000002',
@@ -535,7 +543,8 @@ test('keeps a committed OAuth login successful when model discovery fails withou
     name: 'OpenAI Codex',
     providerType: provider,
     enabled: true,
-    enabledModelIds: [...PROVIDER_DEFAULTS[provider].fallbackModels],
+    enabledModelIds: [...PROVIDER_REGISTRY[provider].fallbackModels],
+    catalogEntries: [],
     models: [],
   };
   const created = {

apps/desktop/src/main/__tests__/session-health-recovery-flow.test.ts

@@ -23,7 +23,7 @@ import { parseHTML } from 'linkedom';
 import { act, createElement, Fragment, useCallback, useRef } from 'react';
 import { createRoot, type Root } from 'react-dom/client';
 import type { ChatModelChoice } from '@maka/core/chat-model-choice';
-import type { IdentifiedLlmConnection } from '@maka/core/llm-connections';
+import type { ProjectedLlmConnection } from '@maka/core/llm-connections';
 import type { SessionSummary } from '@maka/core/session';
 import {
   Composer,
@@ -48,7 +48,7 @@ const originalGlobals = {
     .IS_REACT_ACT_ENVIRONMENT,
 };
 
-const CONNECTION: IdentifiedLlmConnection = {
+const CONNECTION: ProjectedLlmConnection = {
   connectionId: 'connection-openrouter',
   slug: 'openrouter',
   providerType: 'openrouter',
@@ -58,6 +58,7 @@ const CONNECTION: IdentifiedLlmConnection = {
   enabledModelIds: ['openai/gpt-5'],
   createdAt: 1,
   updatedAt: 1,
+  catalogEntries: [],
 };
 const CHOICE: ChatModelChoice = {
   connectionId: CONNECTION.connectionId,

apps/desktop/src/main/connections-ipc-validation.ts

@@ -23,7 +23,7 @@ import {
   type UpdateConnectionInput,
 } from '@maka/core/llm-connections';
 import { normalizeOptionalRequestBodyOverlay, normalizeRequestHeaders } from '@maka/core/runtime-policy';
-import { PROVIDER_DEFAULTS } from '@maka/core/llm-connections';
+import { PROVIDER_REGISTRY } from '@maka/core/llm-connections';
 import { normalizeRelayModelProfiles } from '@maka/core/model-thinking';
 
 const IPC_CONNECTION_SLUG_MAX_LENGTH = 64;
@@ -64,7 +64,7 @@ export function normalizeCreateConnectionInputForIpc(value: unknown): CreateConn
     typeof input.name !== 'string' ||
     input.name.length === 0 ||
     typeof input.providerType !== 'string' ||
-    !(input.providerType in PROVIDER_DEFAULTS)
+    !(input.providerType in PROVIDER_REGISTRY)
   ) {
     throw new Error('Invalid Connection input');
   }
@@ -110,8 +110,8 @@ export function normalizeConnectionPatchSecretsForIpc(value: unknown): UpdateCon
 }
 
 export function normalizeConnectionBaseUrlForIpc<T extends CreateConnectionInput>(input: T): T {
-  if (PROVIDER_DEFAULTS[input.providerType].authKind === 'oauth_token') {
-    return { ...input, baseUrl: PROVIDER_DEFAULTS[input.providerType].baseUrl };
+  if (PROVIDER_REGISTRY[input.providerType].authKind === 'oauth_token') {
+    return { ...input, baseUrl: PROVIDER_REGISTRY[input.providerType].baseUrl };
   }
   if (input.baseUrl === undefined) return input;
   return {
@@ -124,7 +124,7 @@ export function normalizeConnectionBaseUrlValueForIpc(
   providerType: CreateConnectionInput['providerType'],
   value: string,
 ): string {
-  const defaults = PROVIDER_DEFAULTS[providerType];
+  const defaults = PROVIDER_REGISTRY[providerType];
   if (defaults.authKind === 'oauth_token') return defaults.baseUrl;
   const result = normalizeConnectionBaseUrl(value);
   if (!result.ok) throw new Error(result.error);