Release v4.6.4 — first-run experience + reliability

[nullxnothing]

Patch release rolling up the first-run experience (#216), reliability fixes (#217), and the packaged bridge shim (#214) since v4.6.3.

Added

• Guided first-run experience (feat: first-run experience - guided wizard ending at the approval gate #216). A fresh install walks a five-step wizard — workspace, connect Claude, one-click demo project, an approval-gate primer with a mock write card, then a first mission where a scripted ARIA turn runs read chips silently and raises a real approval card the user decides on. Fresh profile to first decision measured at ~3:31. Chain-safe by construction: mission turns are devnet-pinned at the IPC boundary, pinned reads answer from local wallet inventory with no RPC, and sensitive tools are refused before any card can appear. First-session empty states added across console, wallet, activity, swarm, and memory.

Fixed

• Stale agent model IDs refreshed on upgrade (fix: refresh stale model ids on upgrade + surface rejected API keys #217). Migrations V59/V60 remap only the two retired dated IDs to the current aliases; a still-valid deliberate pick is untouched. All model IDs now derive from one shared constant.
• Rejected/disabled API keys now surface a clear warning (fix: refresh stale model ids on upgrade + surface rejected API keys #217). A disabled-org or invalid ANTHROPIC_API_KEY inherited from the shell used to silently degrade ARIA to a tool-less CLI; auth rejections now raise a transcript banner naming the failing credential and the fix. Rate-limit and network errors keep their original message; key values are never logged.

Developer tooling

• npm-packaged agent bridge (feat: npm-packaged MCP bridge shim + registry receipt spike #214). daemon-bridge-mcp is now a publishable package (bin wrapper, Node 22 guard, setup docs for Claude Code and Cursor), so external agents can wire up the bridge without cloning the repo.

Release contents

• package.json → 4.6.4
• CHANGELOG.md 4.6.4 entry
• Whatsnew.md first-run experience section

Verification

• Each change verified on its own PR: suite 1073 passing at feat: first-run experience - guided wizard ending at the approval gate #216 merge (from 1027); typecheck, build, lint:styles green; fresh-profile E2E driven over CDP including an adversarial mainnet-forced run (pinned readout shown, card clean, zero console errors).