Fix agent runner host migration and runtime guards

Migrates legacy runner blocks into plugin runner configs, preserves run-scoped history boundaries, enforces operation/file authorization, and sanitizes inline attachment persistence. Also fixes plugin runner form dirty handling and adds regression coverage.

src/langbot/pkg/pipeline/pipelinemgr.py

@@ -276,8 +276,10 @@ class RuntimePipeline:
 
         # Get runner name from pipeline config
         runner_name = None
-        if query.pipeline_config and 'ai' in query.pipeline_config and 'runner' in query.pipeline_config['ai']:
-            runner_name = query.pipeline_config['ai']['runner'].get('runner')
+        if query.pipeline_config:
+            from ..agent.runner.config_migration import ConfigMigration
+
+            runner_name = ConfigMigration.resolve_runner_id(query.pipeline_config)
 
         # Record query start and store message_id
         message_id = ''

src/langbot/pkg/pipeline/process/handlers/chat.py

@@ -88,7 +88,12 @@ class ChatMessageHandler(handler.MessageHandler):
                 # Mark start time for telemetry
                 start_ts = time.time()
 
-                if await self.ap.agent_run_orchestrator.try_claim_steering_from_query(query):
+                try_claim_steering = getattr(
+                    self.ap.agent_run_orchestrator,
+                    'try_claim_steering_from_query',
+                    None,
+                )
+                if try_claim_steering and await try_claim_steering(query):
                     yield entities.StageProcessResult(result_type=entities.ResultType.INTERRUPT, new_query=query)
                     return