fix: improve WhatsApp settings and isolate IM host authentication

plugin-src/host/harness-command-executor.mjs

@@ -1,3 +1,5 @@
+import { runHarnessHostOperation } from './harness-host-context.mjs';
+
 /**
  * Adapt the Host's Typert command gateway to the channel Harness client.
  * Programmatic production fixtures may omit the gateway and exercise other assembly paths.
@@ -20,7 +22,7 @@ export function createHarnessCommandExecutor(ctx, provided) {
       signal: options.signal,
     };
     try {
-      return await gateway.invoke(request);
+      return await runHarnessHostOperation(ctx, () => gateway.invoke(request));
     } catch (error) {
       // Newer Hosts require images; older Hosts reject that field before
       // invoking the command. Retry only that exact pre-dispatch failure so
@@ -32,10 +34,10 @@ export function createHarnessCommandExecutor(ctx, provided) {
         throw error;
       }
       options.signal?.throwIfAborted();
-      return gateway.invoke({
+      return runHarnessHostOperation(ctx, () => gateway.invoke({
         ...request,
         args: { agentId: sessionId, line },
-      });
+      }));
     }
   };
 }

plugin-src/host/harness-connection.mjs

@@ -1,4 +1,5 @@
 import { modernHarnessApi } from './modern-harness-api.mjs';
+import { runHarnessHostOperation } from './harness-host-context.mjs';
 
 function optionalService(ctx, name) {
   if (ctx && Object.hasOwn(ctx, name)) return ctx[name];
@@ -13,6 +14,7 @@ export function harnessConnection(ctx, config = {}) {
   const apiProxy = optionalService(ctx, 'apiProxy') ?? modernHarnessApi(ctx);
   return {
     apiProxy,
+    runHostOperation: (operation) => runHarnessHostOperation(ctx, operation),
     // Cordis child contexts share one root; different Hosts must not share
     // ownership of pending questions and approvals.
     interactionScope: ctx.root ?? ctx,

plugin-src/host/harness-host-context.mjs

@@ -0,0 +1,10 @@
+/** Run same-process IM operations without inheriting a browser's UDS identity. */
+export function runHarnessHostOperation(ctx, operation) {
+  // Cordis property access requires inject even for an optional service.
+  // ctx.get() supports dynamic lookup without making UDS a startup dependency.
+  const auth = typeof ctx?.get === 'function' ? ctx.get('udsAuth') : ctx?.udsAuth;
+  // Resolve on every call: auth can become ready or reload after IM starts.
+  return typeof auth?.runAsHost === 'function'
+    ? auth.runAsHost(operation)
+    : operation();
+}

plugin-src/host/modern-harness-api.mjs

@@ -5,7 +5,7 @@ import { hasActiveHarnessInteractionOwner } from '../../src/channels/shared/harn
 const modernApis = new WeakMap();
 
 function failureOf(error) {
-  const failure = error?.failure;
+  const failure = error?.failure ?? (error?.isDSHRemoteError === true ? error : null);
   if (failure && typeof failure === 'object'
     && typeof failure.code === 'string'
     && typeof failure.message === 'string') {