@corenel/harness 0.5.0 → 0.6.0

package/dist/sidecar/server.d.ts

@@ -1,4 +1,4 @@
-import type { AgentTool, AgentEvent, PermissionDecision, SidecarRoots, DaemonRunActivity, DaemonRegistration, SidecarProcs, SidecarSessions, RoomOpenRequest, RoomSummary } from '@corenel/protocol';
+import type { AgentTool, AgentEvent, PermissionDecision, SidecarRoots, DaemonRunActivity, DaemonRegistration, AgentPause, HostSummary, SidecarProcs, SidecarSessions, RoomOpenRequest, RoomSummary, RoomFinding, RoomFindingEdit } from '@corenel/protocol';
 import { type SidecarChannel, type SidecarMsg, type SidecarInfo, type SidecarRunner, type SidecarHostSync, type SidecarAcp } from '@corenel/protocol';
 /** The payload of a `permission-ask` message, minus its `t` discriminant — derived
  * from the wire protocol so this stays in lockstep with it automatically. */
@@ -88,13 +88,83 @@ export interface SidecarRooms {
         messages: unknown[];
         turnCosts: number[];
     } | null>;
-    answer(roomId: string, participantId: string, text: string): Promise<RoomSummary>;
+    /** `addressed` is who this human turn hands the floor to, resolved to an
+     * id. Omitted is an ordinary rotation turn. */
+    answer(roomId: string, participantId: string, text: string, addressed?: string): Promise<RoomSummary>;
     /** Drive a room whose floor is an AGENT's -- a dropped machine's park, or
      * anything a restart found mid-flight. See `room-resume` in sidecar.ts for
      * why nothing else can move such a room. */
     resume(roomId: string): Promise<RoomSummary>;
+    /** A human's words in a room whose floor is someone else's. Appends to the
+     * transcript and moves nothing -- see `room-interject` in sidecar.ts. */
+    interject(roomId: string, participantId: string, text: string): Promise<RoomSummary>;
+    /** End the room on a person's word, whatever the rotation is doing.
+     * Idempotent: an already-closed room answers with the close it already has. */
+    close(roomId: string, participantId: string, reason: string): Promise<RoomSummary>;
+    /** The room's living findings document. Empty for a room that has recorded
+     * nothing; throws only when the document exists and could not be read. */
+    findings(roomId: string): Promise<RoomFinding[]>;
+    /** Record, revise or withdraw ONE finding on a person's word, returning the
+     * document as it then stands. Throws for a refused edit (a closed room, a
+     * participant who is not a human member, an edit the rules reject) -- the
+     * caller renders the reason. */
+    editFinding(roomId: string, participantId: string, edit: RoomFindingEdit): Promise<RoomFinding[]>;
     subscribe(cb: (room: RoomSummary) => void): () => void;
 }
+/** The daemon's pause overrides, behind the `agent-pause-*` messages.
+ *
+ * Declared HERE (harness-side), not imported from `@corenel/sidecar`, for the
+ * same dependency-direction reason as `SidecarAttendanceRegistry` /
+ * `SidecarRunHub` / `SidecarRooms` above: `packages/sidecar` depends on
+ * `packages/harness`, never the reverse. The daemon's concrete
+ * `AgentPauseStore` (packages/sidecar/src/runner/pauseStore.ts) has strictly
+ * more members and is structurally assignable.
+ *
+ * `set` returns the COMPLETE set afterwards so a client never reconciles a
+ * delta, and `refresh` is what re-derives the daemon's registrations, so a
+ * paused agent's row updates on every connected client rather than only on the
+ * one that asked. */
+export interface SidecarPauses {
+    list(): AgentPause[];
+    set(owner: string, agent: string, paused: boolean): Promise<AgentPause[]>;
+    /** Re-derive and republish what this daemon will fire. */
+    refresh(): void;
+}
+/** The daemon's synced-host directories, behind the `hosts-*` messages.
+ *
+ * Declared HERE (harness-side) for the same dependency-direction reason as
+ * `SidecarPauses` above: `packages/sidecar` depends on `packages/harness`,
+ * never the reverse, so the harness knows the SHAPE and nothing about the
+ * manifest file or the filesystem underneath it.
+ *
+ * `forget` is the only destructive verb in this interface, and its refusal arm
+ * is load-bearing: a connected directory must be refused HERE, on the daemon,
+ * because a client can send any `dirName` it likes regardless of what its UI
+ * offered. `list` reports `connected` from the same live set, so the two can
+ * never disagree.
+ *
+ * `attach` is how that live set is kept: the harness calls it once per
+ * connection, as soon as this daemon has resolved which directory the
+ * connection belongs to, and calls the returned function when the channel
+ * closes. One implementation instance is shared by every per-connection
+ * `SidecarServer` (exactly like `rooms`/`runs`); two instances would each see
+ * half the connections and each would happily delete the other half's trees. */
+export interface SidecarHosts {
+    /** Every manifest entry, with `self` left false -- the harness stamps it from
+     * the identity THIS connection authenticated with. */
+    list(): Promise<HostSummary[]>;
+    /** Remove one synced tree AND its manifest entry together. `ok: false` is a
+     * considered refusal (unknown name, a client connected as it, a removal that
+     * failed), never a thrown error. */
+    forget(dirName: string): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /** Note that a connection is attached as `dirName`; returns its detach. */
+    attach(dirName: string): () => void;
+}
 export interface SidecarServerOptions {
     channel: SidecarChannel;
     /** The pairing token a connecting host must present. */
@@ -163,6 +233,35 @@ export interface SidecarServerOptions {
      * `@corenel/sidecar` here -- the harness stays ignorant of the manifest and the
      * filesystem; only the shape from `@corenel/protocol` is known. */
     hostSync?: SidecarHostSync;
+    /** The daemon's pause overrides, behind `agent-pause-*`. Absent means this
+     * daemon holds none: it advertises no 'agent-pause' feature and answers every
+     * pause message with a refusal that says so, rather than accepting a pause it
+     * would never honour. */
+    pauses?: SidecarPauses;
+    /** The daemon's synced-host directories, behind `hosts-*`. Absent means this
+     * daemon exposes no host administration: it advertises no 'hosts-admin'
+     * feature and answers every hosts message with a refusal that says so,
+     * rather than silently reporting an empty estate. */
+    hosts?: SidecarHosts;
+    /**
+     * The synced directory name this daemon routes THIS client's host sync into,
+     * echoed back in the `welcome` so the client can tell which registrations are
+     * its own (see `welcome.dirName` in sidecar.ts).
+     *
+     * Awaited before the welcome is sent -- unlike `onClient`, which is
+     * deliberately fire-and-forget and must never delay the handshake. The wait is
+     * bounded, and every failure mode (a throw, a rejection, a null, a timeout)
+     * ends the same way: the welcome goes out with no `dirName`, which an older
+     * client already handles because an older daemon never sent one.
+     *
+     * It resolves the name from the AUTHENTICATED `clientId` this connection
+     * presented. It must never accept a name the client asked for -- that would
+     * reintroduce the client-chosen destination `host-sync-put` exists to refuse.
+     */
+    clientDirName?: (identity: {
+        clientId: string;
+        name: string;
+    }) => Promise<string | null>;
 }
 export declare class SidecarServer {
     private readonly ch;
@@ -183,10 +282,20 @@ export declare class SidecarServer {
      * connection carries no identity to attribute files to" (an older client).
      * Either way, host-sync must be rejected; see `requireHostSyncIdentity`. */
     private clientId?;
+    /** The friendly label from the same `hello`, kept beside `clientId` so the
+     * dirName resolver is handed the identity the manifest keys on. */
+    private clientName?;
     /** Detach function for this connection's attendance attachment, set on a
      * successful `hello` when `opts.attendance` is wired. Called once, on channel
      * close, so a dead connection stops receiving/counting toward asks. */
     private attendedDetach?;
+    /** The synced directory THIS connection belongs to, once resolved -- the same
+     * value echoed in `welcome.dirName`. Retained so `hosts-list` can stamp
+     * `self` and `hosts-forget` can refuse the caller's own tree from the
+     * daemon's own knowledge rather than from anything the client claimed. */
+    private dirName?;
+    /** Detach for this connection's entry in the shared hosts live set. */
+    private hostsDetach?;
     /** Detach callbacks for runs this connection is watching, so a dropped socket
      * stops the hub fanning out into a dead channel. */
     private readonly runDetachers;
@@ -200,6 +309,10 @@ export declare class SidecarServer {
     constructor(opts: SidecarServerOptions);
     private onMessage;
     private onHello;
+    /** Resolve the connection's synced directory name, or null for every failure
+     * mode there is (throw, rejection, non-string, timeout). */
+    private resolveDirName;
+    private sendWelcome;
     /** Proxy a host HTTP request server-side. Restricted to LOOPBACK targets — the
      * sidecar must never be usable as an SSRF pivot to internal/metadata hosts. The
      * response streams back (http-res -> http-chunk* -> http-end). */
@@ -280,11 +393,32 @@ export declare class SidecarServer {
     private requireHostSyncIdentity;
     private onRootsBrowse;
     private onRootsAdd;
+    /** Every synced host directory, with `self` stamped from THIS connection's
+     * own resolved directory -- never from anything the client sent. */
+    private onHostsList;
+    private stampSelf;
+    /**
+     * Delete one synced tree and its manifest entry.
+     *
+     * THE REFUSALS ARE THE FEATURE. A client's UI is not a guard -- this message
+     * carries a `dirName` the client chose, so both rules that make the operation
+     * safe are enforced here: the caller's OWN directory is refused outright, and
+     * the port refuses any directory a client is attached as. The first is
+     * checked here rather than left to the second because it is answerable from
+     * this connection's own identity and yields the more useful sentence.
+     */
+    private onHostsForget;
+    private onAgentPauseList;
+    private onAgentPauseSet;
     private onRoomOpen;
     private onRoomList;
     private onRoomRead;
     private onRoomResume;
     private onRoomAnswer;
+    private onRoomInterject;
+    private onRoomClose;
+    private onRoomFindings;
+    private onRoomFindingEdit;
     private onHostSyncPut;
     private onHostSyncDelete;
     /** A ToolContext whose capabilities proxy back to the host (persist-nothing).

package/dist/sidecar/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAC/H,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACzE,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAC1D,MAAM,mBAAmB,CAAC;AAE3B;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;QAClG;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;KAClD,GAAG,MAAM,IAAI,CAAC;IACf;sCACkC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACxD;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClF;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAqCD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAkDtC,OAAO,CAAC,SAAS;IAkKjB,OAAO,CAAC,OAAO;IAyFf;;sEAEkE;YACpD,SAAS;IA0BvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAkGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAqCtB;;;;;;;;;uCASmC;YACrB,UAAU;YAwBV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IA+DnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;YAeV,UAAU;YAiBV,UAAU;YAkBV,UAAU;YAqBV,YAAY;YAeZ,YAAY;YAeZ,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAKrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../sidecar/server.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAEmC,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EACxJ,YAAY,EAAE,eAAe,EAAe,eAAe,EAAE,WAAW,EACxE,WAAW,EAAE,eAAe,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,UAAU,EAAoC,KAAK,WAAW,EACxF,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAC1D,MAAM,mBAAmB,CAAC;AAE3B;6EAC6E;AAC7E,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;IAAE,CAAC,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAEpF;;;;;;qFAMqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,MAAM,CAAC,MAAM,EAAE;QACb,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;QAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;QAClG;;2EAEmE;QACnE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;QAChD,aAAa,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;KAClD,GAAG,MAAM,IAAI,CAAC;IACf;sCACkC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACxD;AAED;;;;;kFAKkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QAC5B,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,GAAG;QAAE,MAAM,EAAE;YAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnJ;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACzG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACtG;mDAC+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtG;;gDAE4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C;6EACyE;IACzE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrF;mFAC+E;IAC/E,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF;8EAC0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD;;;oCAGgC;IAChC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;qBAYqB;AACrB,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,UAAU,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,0DAA0D;IAC1D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;gFAkBgF;AAChF,MAAM,WAAW,YAAY;IAC3B;0DACsD;IACtD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B;;wCAEoC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB;gFAC4E;IAC5E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;4FACwF;IACxF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;iFAC6E;IAC7E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;+CAG2C;IAC3C,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC;;kEAE8D;IAC9D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;kDAE8C;IAC9C,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;4EAGwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;2EAIuE;IACvE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;wEAEoE;IACpE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;4BAUwB;IACxB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;uEAImE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;6BAGyB;IACzB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1F;AA2CD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D;;0DAEsD;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC;;;;;;gFAM4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;uEACmE;IACnE,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B;;2EAEuE;IACvE,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC;;;8EAG0E;IAC1E,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC;wDACoD;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;IAEtD;;;;iEAI6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE,oBAAoB;IAsDtC,OAAO,CAAC,SAAS;IAsMjB,OAAO,CAAC,OAAO;IA2Ef;gEAC4D;YAC9C,cAAc;IAc5B,OAAO,CAAC,WAAW;IA8DnB;;sEAEkE;YACpD,SAAS;IA0BvB;;;;gEAI4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,OAAO,CAAC,eAAe;YAMT,SAAS;IAkGvB,OAAO,CAAC,YAAY;IASpB;;wBAEoB;IACpB,OAAO,CAAC,YAAY;IAMpB;;mDAE+C;IAC/C,OAAO,CAAC,gBAAgB;YAoBV,WAAW;IA6BzB;4EACwE;IACxE,OAAO,CAAC,YAAY;IAoBpB,mEAAmE;IACnE,OAAO,CAAC,YAAY;YASN,QAAQ;IAqCtB;;;;;;;;;uCASmC;YACrB,UAAU;YAwBV,YAAY;YAcZ,WAAW;IAczB;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IA+CnB;;;;;;;;;OASG;YACW,YAAY;IAa1B;+EAC2E;YAC7D,eAAe;IAW7B;;;;iBAIa;YACC,YAAY;YAcZ,KAAK;IA+DnB;;;;;4EAKwE;IACxE,OAAO,CAAC,uBAAuB;YAQjB,aAAa;YAYb,UAAU;IAexB;wEACoE;YACtD,WAAW;IAYzB,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;YACW,aAAa;IA4B3B,OAAO,CAAC,gBAAgB;YAeV,eAAe;YA2Bf,UAAU;YAiBV,UAAU;YAkBV,UAAU;YAqBV,YAAY;YAeZ,YAAY;YAeZ,eAAe;YAef,WAAW;YAaX,cAAc;YAed,iBAAiB;YAejB,aAAa;YAkBb,gBAAgB;IAkB9B;;;;oEAIgE;IAChE,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAKrB;IAEF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAKjB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAOvB;IAEF;mFAC+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAcpB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC2D;IAEnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CACuE;CAC5F"}

package/dist/sidecar/server.js

@@ -1,4 +1,9 @@
 import { SIDECAR_PROTOCOL, errMessage, isLoopbackHost, } from '@corenel/protocol';
+/** How long the welcome waits on `clientDirName` before going out without it. A
+ * manifest write is a few milliseconds; anything near this is a wedged disk, and
+ * a client left with no handshake at all is worse than one that has to fall back
+ * to deducing its own directory. */
+const DIR_NAME_TIMEOUT_MS = 3000;
 /** True for anything with a callable `.then` -- covers native Promises and any
  * other thenable a caller's `onClient` might return, without assuming it's a
  * real Promise instance (the declared type is `() => void`; an async function
@@ -91,6 +96,14 @@ export class SidecarServer {
             writable: true,
             value: void 0
         });
+        /** The friendly label from the same `hello`, kept beside `clientId` so the
+         * dirName resolver is handed the identity the manifest keys on. */
+        Object.defineProperty(this, "clientName", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         /** Detach function for this connection's attendance attachment, set on a
          * successful `hello` when `opts.attendance` is wired. Called once, on channel
          * close, so a dead connection stops receiving/counting toward asks. */
@@ -100,6 +113,23 @@ export class SidecarServer {
             writable: true,
             value: void 0
         });
+        /** The synced directory THIS connection belongs to, once resolved -- the same
+         * value echoed in `welcome.dirName`. Retained so `hosts-list` can stamp
+         * `self` and `hosts-forget` can refuse the caller's own tree from the
+         * daemon's own knowledge rather than from anything the client claimed. */
+        Object.defineProperty(this, "dirName", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        /** Detach for this connection's entry in the shared hosts live set. */
+        Object.defineProperty(this, "hostsDetach", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         /** Detach callbacks for runs this connection is watching, so a dropped socket
          * stops the hub fanning out into a dead channel. */
         Object.defineProperty(this, "runDetachers", {
@@ -247,6 +277,10 @@ export class SidecarServer {
         this.ch.onClose?.(() => {
             this.attendedDetach?.();
             this.attendedDetach = undefined;
+            // Leave the live set, or this directory reads as connected for ever and
+            // could never be reclaimed -- the refusal would outlive the connection.
+            this.hostsDetach?.();
+            this.hostsDetach = undefined;
             // A dropped connection must stop receiving run events, or the hub keeps
             // fanning out into a dead channel for the rest of the run.
             for (const detach of this.runDetachers)
@@ -452,6 +486,40 @@ export class SidecarServer {
             case 'host-sync-delete':
                 void this.onHostSyncDelete(m);
                 return;
+            case 'agent-pause-list':
+                // `ok: false`, not an empty list: telling an unauthenticated caller
+                // "this daemon is holding no pauses" is a claim it has not earned, the
+                // same reasoning as room-list below.
+                if (!this.authed) {
+                    this.ch.send({ t: 'agent-pause-list-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                this.onAgentPauseList(m);
+                return;
+            case 'agent-pause-set':
+                if (!this.authed) {
+                    this.ch.send({ t: 'agent-pause-set-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onAgentPauseSet(m);
+                return;
+            case 'hosts-list':
+                // `ok: false`, not an empty estate: telling an unauthenticated caller
+                // "this daemon holds no synced hosts" is a claim it has not earned --
+                // the same reasoning as agent-pause-list above.
+                if (!this.authed) {
+                    this.ch.send({ t: 'hosts-list-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onHostsList(m);
+                return;
+            case 'hosts-forget':
+                if (!this.authed) {
+                    this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onHostsForget(m);
+                return;
             case 'room-open':
                 if (!this.authed) {
                     this.ch.send({ t: 'room-open-result', id: m.id, ok: false, problems: ['not authenticated'] });
@@ -492,6 +560,34 @@ export class SidecarServer {
                 }
                 void this.onRoomResume(m);
                 return;
+            case 'room-interject':
+                if (!this.authed) {
+                    this.ch.send({ t: 'room-interject-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onRoomInterject(m);
+                return;
+            case 'room-findings':
+                if (!this.authed) {
+                    this.ch.send({ t: 'room-findings-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onRoomFindings(m);
+                return;
+            case 'room-finding-edit':
+                if (!this.authed) {
+                    this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onRoomFindingEdit(m);
+                return;
+            case 'room-close':
+                if (!this.authed) {
+                    this.ch.send({ t: 'room-close-result', id: m.id, ok: false, error: 'not authenticated' });
+                    return;
+                }
+                void this.onRoomClose(m);
+                return;
             default:
                 // welcome / denied / invoke-result / host-call / event / run-accepted /
                 // run-done / permission-ask / permission-resolved are host-side.
@@ -523,6 +619,7 @@ export class SidecarServer {
             const name = typeof m.clientName === 'string' && m.clientName
                 ? m.clientName.slice(0, MAX_IDENTITY_FIELD_LEN)
                 : clientId;
+            this.clientName = name;
             // Best-effort, fire-and-forget: a throwing/rejecting `onClient` must never
             // deny/break an otherwise valid, authenticated handshake -- identity
             // recording is informational, not part of the auth decision. Covers BOTH
@@ -552,6 +649,52 @@ export class SidecarServer {
             });
         }
         this.opts.log?.(`paired — ${this.tools.size} ${this.tools.size === 1 ? 'tool' : 'tools'} advertised (host dir: ${this.hostStateDir})`);
+        /* THE ONE THING THAT WAITS. The welcome carries the synced directory name
+         * this daemon resolved for this connection, and the client has no other way
+         * to learn it -- it could previously only deduce it, and got null whenever
+         * no workspace was open or two hosts held the same workspace id, leaving a
+         * management surface unable to say which registrations were its own.
+         *
+         * Bounded, and every failure ends the same way as an older daemon: no
+         * `dirName` on the welcome. A handshake that never arrives would be a far
+         * worse trade than a client that falls back to deducing. */
+        const identity = this.clientId === undefined
+            ? undefined
+            : { clientId: this.clientId, name: this.clientName ?? this.clientId };
+        if (this.opts.clientDirName && identity) {
+            void this.resolveDirName(this.opts.clientDirName, identity).then((dirName) => {
+                this.sendWelcome(dirName);
+            });
+            return;
+        }
+        this.sendWelcome(null);
+    }
+    /** Resolve the connection's synced directory name, or null for every failure
+     * mode there is (throw, rejection, non-string, timeout). */
+    async resolveDirName(resolve, identity) {
+        try {
+            const timed = new Promise((res) => setTimeout(() => res(null), DIR_NAME_TIMEOUT_MS));
+            const got = await Promise.race([Promise.resolve(resolve(identity)), timed]);
+            return typeof got === 'string' && got ? got : null;
+        }
+        catch (err) {
+            this.opts.log?.(`clientDirName failed: ${errMessage(err)}`);
+            return null;
+        }
+    }
+    sendWelcome(dirName) {
+        /* Remembered BEFORE the welcome goes out, because `self` and the
+         * forget-your-own-tree refusal are both answered from it. A daemon too old
+         * to resolve one, or a client with no identity, leaves it undefined -- and
+         * then every entry reads `self: false` and nothing is refused on that
+         * ground, which is correct: this connection genuinely has no directory. */
+        if (dirName) {
+            this.dirName = dirName;
+            // Only a resolved directory can be attached: an unidentified connection
+            // is not "connected as" anything, and marking it would pin a tree it
+            // has no claim to.
+            this.hostsDetach = this.opts.hosts?.attach(dirName);
+        }
         const tools = [...this.tools.values()].map(({ run: _run, ...decl }) => decl);
         // Advertise the loopback HTTP proxy so the host can route local-LLM calls
         // through us (server-side fetch, no browser CORS) instead of failing, and
@@ -583,8 +726,21 @@ export class SidecarServer {
             // operator declared somewhere a checkout may be written, so a client only
             // offers "start from a repository" where it would actually work.
             ...(this.opts.sessions?.canClone ? ['session-clone'] : []),
+            // Whether this daemon HOLDS pauses. Advertised only with a real store
+            // behind it, so a client offers "Pause" only where pausing would actually
+            // stop the agent -- the alternative is a button that reports success on a
+            // daemon that keeps firing.
+            ...(this.opts.pauses ? ['agent-pause'] : []),
+            // Whether this daemon can report and reclaim its synced host directories.
+            // Advertised only with a real manifest behind it, so a client never
+            // offers a destructive control to a daemon that would refuse it.
+            ...(this.opts.hosts ? ['hosts-admin'] : []),
         ];
-        this.ch.send({ t: 'welcome', tools, features, ...(this.opts.info ? { info: this.opts.info } : {}) });
+        this.ch.send({
+            t: 'welcome', tools, features,
+            ...(this.opts.info ? { info: this.opts.info } : {}),
+            ...(dirName ? { dirName } : {}),
+        });
     }
     /** Proxy a host HTTP request server-side. Restricted to LOOPBACK targets — the
      * sidecar must never be usable as an SSRF pivot to internal/metadata hosts. The
@@ -1159,6 +1315,103 @@ export class SidecarServer {
             this.ch.send({ t: 'roots-add-result', id: m.id, ok: false, error: errMessage(e) });
         }
     }
+    /** Every synced host directory, with `self` stamped from THIS connection's
+     * own resolved directory -- never from anything the client sent. */
+    async onHostsList(m) {
+        if (!this.opts.hosts) {
+            this.ch.send({ t: 'hosts-list-result', id: m.id, ok: false, error: 'this daemon does not administer synced hosts' });
+            return;
+        }
+        try {
+            this.ch.send({ t: 'hosts-list-result', id: m.id, ok: true, hosts: this.stampSelf(await this.opts.hosts.list()) });
+        }
+        catch (err) {
+            this.ch.send({ t: 'hosts-list-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    stampSelf(hosts) {
+        return hosts.map((h) => ({ ...h, self: this.dirName !== undefined && h.dirName === this.dirName }));
+    }
+    /**
+     * Delete one synced tree and its manifest entry.
+     *
+     * THE REFUSALS ARE THE FEATURE. A client's UI is not a guard -- this message
+     * carries a `dirName` the client chose, so both rules that make the operation
+     * safe are enforced here: the caller's OWN directory is refused outright, and
+     * the port refuses any directory a client is attached as. The first is
+     * checked here rather than left to the second because it is answerable from
+     * this connection's own identity and yields the more useful sentence.
+     */
+    async onHostsForget(m) {
+        if (!this.opts.hosts) {
+            this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: false, error: 'this daemon does not administer synced hosts' });
+            return;
+        }
+        if (typeof m.dirName !== 'string' || !m.dirName) {
+            this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: false, error: 'dirName must be a non-empty string' });
+            return;
+        }
+        if (this.dirName !== undefined && m.dirName === this.dirName) {
+            this.ch.send({
+                t: 'hosts-forget-result', id: m.id, ok: false,
+                error: 'That is this connection’s own synced directory. Disconnect this client first, then remove it from another one.',
+            });
+            return;
+        }
+        try {
+            const outcome = await this.opts.hosts.forget(m.dirName);
+            if (!outcome.ok) {
+                this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: false, error: outcome.reason });
+                return;
+            }
+            this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: true, hosts: this.stampSelf(await this.opts.hosts.list()) });
+        }
+        catch (err) {
+            this.ch.send({ t: 'hosts-forget-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    onAgentPauseList(m) {
+        if (!this.opts.pauses) {
+            // An honest empty answer for a daemon without the capability: it is
+            // holding no pauses, which is true. The feature gate is what tells a
+            // client whether it may OFFER the control.
+            this.ch.send({ t: 'agent-pause-list-result', id: m.id, ok: true, pauses: [] });
+            return;
+        }
+        try {
+            this.ch.send({ t: 'agent-pause-list-result', id: m.id, ok: true, pauses: this.opts.pauses.list() });
+        }
+        catch (err) {
+            this.ch.send({ t: 'agent-pause-list-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    async onAgentPauseSet(m) {
+        if (!this.opts.pauses) {
+            // NOT an empty success. Accepting a pause this daemon cannot hold would
+            // leave the operator believing an agent had been stopped while it kept
+            // firing on the hour -- the exact failure the feature exists to end.
+            this.ch.send({ t: 'agent-pause-set-result', id: m.id, ok: false, error: 'this daemon does not hold agent pauses' });
+            return;
+        }
+        // Runtime-validate: the message arrived via `JSON.parse(...) as SidecarMsg`,
+        // so the declared types guarantee nothing. Both fields become part of a
+        // persisted key.
+        if (typeof m.owner !== 'string' || typeof m.agent !== 'string' || !m.agent) {
+            this.ch.send({ t: 'agent-pause-set-result', id: m.id, ok: false, error: 'owner must be a string and agent a non-empty string' });
+            return;
+        }
+        try {
+            const pauses = await this.opts.pauses.set(m.owner, m.agent, m.paused === true);
+            // Republish before replying: the caller's own row and every other
+            // connected client's must change together, or a second browser keeps
+            // offering "Pause" on an agent already paused.
+            this.opts.pauses.refresh();
+            this.ch.send({ t: 'agent-pause-set-result', id: m.id, ok: true, pauses });
+        }
+        catch (err) {
+            this.ch.send({ t: 'agent-pause-set-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
     async onRoomOpen(m) {
         if (!this.opts.rooms) {
             this.ch.send({ t: 'room-open-result', id: m.id, ok: false, problems: ['this sidecar does not host rooms'] });
@@ -1236,7 +1489,7 @@ export class SidecarServer {
             return;
         }
         try {
-            const room = await this.opts.rooms.answer(m.roomId, m.participantId, m.text);
+            const room = await this.opts.rooms.answer(m.roomId, m.participantId, m.text, m.addressed);
             this.ch.send({ t: 'room-answer-result', id: m.id, ok: true, room });
         }
         catch (err) {
@@ -1245,6 +1498,64 @@ export class SidecarServer {
             this.ch.send({ t: 'room-answer-result', id: m.id, ok: false, error: errMessage(err) });
         }
     }
+    async onRoomInterject(m) {
+        if (!this.opts.rooms) {
+            this.ch.send({ t: 'room-interject-result', id: m.id, ok: false, error: 'this sidecar does not host rooms' });
+            return;
+        }
+        try {
+            const room = await this.opts.rooms.interject(m.roomId, m.participantId, m.text);
+            this.ch.send({ t: 'room-interject-result', id: m.id, ok: true, room });
+        }
+        catch (err) {
+            // A room failure must never kill the connection; the client gets a
+            // refusal it can render instead of a socket that went quiet.
+            this.ch.send({ t: 'room-interject-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    async onRoomClose(m) {
+        if (!this.opts.rooms) {
+            this.ch.send({ t: 'room-close-result', id: m.id, ok: false, error: 'this sidecar does not host rooms' });
+            return;
+        }
+        try {
+            const room = await this.opts.rooms.close(m.roomId, m.participantId, m.reason);
+            this.ch.send({ t: 'room-close-result', id: m.id, ok: true, room });
+        }
+        catch (err) {
+            this.ch.send({ t: 'room-close-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    async onRoomFindings(m) {
+        if (!this.opts.rooms) {
+            // A daemon without the capability hosts no rooms, so it holds no
+            // findings -- an honest empty document, the same answer `room-list`
+            // gives. The catch below is the different thing: a real read that failed.
+            this.ch.send({ t: 'room-findings-result', id: m.id, ok: true, findings: [] });
+            return;
+        }
+        try {
+            this.ch.send({ t: 'room-findings-result', id: m.id, ok: true, findings: await this.opts.rooms.findings(m.roomId) });
+        }
+        catch (err) {
+            this.ch.send({ t: 'room-findings-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
+    async onRoomFindingEdit(m) {
+        if (!this.opts.rooms) {
+            this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: false, error: 'this sidecar does not host rooms' });
+            return;
+        }
+        try {
+            const findings = await this.opts.rooms.editFinding(m.roomId, m.participantId, m.edit);
+            this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: true, findings });
+        }
+        catch (err) {
+            // A refused edit must never kill the connection; the person gets the
+            // reason their edit did not land.
+            this.ch.send({ t: 'room-finding-edit-result', id: m.id, ok: false, error: errMessage(err) });
+        }
+    }
     async onHostSyncPut(m) {
         const identity = this.requireHostSyncIdentity();
         if ('error' in identity) {