- Improved Secure Link session cleanup so stale, completed, and failed streams are released consistently. - Improved legacy alias migration and reconciliation behavior for proxy hosts using Secure Links. - Hardened tunnel lifecycle handling during daemon reconnects and Gateway-driven updates.