@huynle/hub 0.8.3 → 0.8.4

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## 0.8.4
+
+A fix release. A question or permission a session is waiting on no longer disappears from the console while
+OpenCode still waits (after the session briefly left a machine's list, or after a reconnect): the hub keeps a bounded
+card for it and puts it back, and the machine re-announces what is pending after every reconnect. "Needs you" and the
+hub now agree; a terminal Herdr reports blocked with nothing pending on the hub shows as "waiting in terminal".
+No migration is needed; machines need the 0.8.4 plugin for the reconnect part.
+
+### Fixes
+- **The hub drops a question or permission whose ID is longer than any card keeps** (200 characters), so no such
+  entry is stored or alerted.
+- **A pending question or permission no longer vanishes from the console while OpenCode still waits**
+  (production 2026-11-05: a session's question card disappeared, `show` said "Nothing waiting", the session still ran
+  in the question tool). The hub kept blockers only on a session's status board, built from live events: a board
+  recreated after the session left a sessions frame for a moment started empty, and a reconnecting spoke (laptop
+  sleep, network change, a restarted OpenCode process or hub) lost every pending question with the old connection and
+  never announced it again. Now the hub puts pending questions and permissions back on recreated boards (and on
+  boards created after the question was asked), the form stays answerable, and the spoke re-announces what is pending
+  after each reconnect: what it saw asked, plus what OpenCode lists for its active sessions (pending forms and
+  permission requests from the process's own server), closing those OpenCode no longer has. A re-announced question
+  or permission is not notified twice. Tests: `test/central-registry-blockers.test.ts`, `test/e2e-lost-question.test.ts`,
+  the spoke's reconnect tests and the browser suite `web/e2e/question-survives.ts`.
+  - What the hub keeps of a pending question or permission is the bounded card (at most 20 fields, the text limits,
+    10 resources; at most 64 kB, over which descriptions and then fields are left out; IDs over 200 characters are
+    refused), at most 200 per user for each kind. A permission card's summary is now bounded too (it joined every
+    resource). Another user can no longer close a pending question or permission by its ID, nor push it out with a
+    flood of its own.
+  - The spoke re-sends what it remembers right after reconnecting, then asks OpenCode (at most 50 sessions, the ones
+    with something remembered first, 5 s at most). Closes it infers from OpenCode's lists carry `unlisted: true`: the
+    hub drops only that process's hold on the question.
+  - Mixed versions: the hub announces the new `pendingReplay` feature. To an older hub (no such feature, and no
+    dedupe of re-sent permissions) the spoke re-sends only questions, so permissions it told that hub already are
+    lost on a reconnect as before rather than notified twice; a question lost from a frame drop is still lost on an
+    older hub. An older spoke on a new hub behaves as before (lost on reconnect).
+- **"Needs you" only when there is something to answer.** A session that only Herdr calls blocked (its agent waits
+  for input, the hub has no question or permission for it) is no longer under Needs you or counted there: its row
+  shows "waiting in terminal" and it counts as working.
+
 ## 0.8.3
 
 A voice and security release. A new developer setting records voice conversations (the Concierge and any voice

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "description": "Hub: a harness-agnostic central hub your AI agent harnesses connect to (OpenCode first). Follow, steer and stop sessions from your phone or browser, with notifications, optional hands-free Voice and a self-hostable server.",
   "license": "MIT",
   "author": "Huy Le",

package/packages/claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-claude-code",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The Claude Code hooks spoke: per-user daemon, hook bridge, plugin dir, `hub claude` wrapper and daemon-backed MCP server (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/cli/dist/hub-cli.js

@@ -7,7 +7,7 @@ import { createInterface } from "readline";
 // packages/cli/package.json
 var package_default = {
   name: "@huynle/hub-cli",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "The hub CLI (`hub` / `hubctl`) for agents and scripts (internal; bundled into @huynle/hub, not published on its own).",
   license: "MIT",
@@ -8815,7 +8815,7 @@ import { arch as osArch, platform as osPlatform } from "node:os";
 // packages/node/package.json
 var package_default2 = {
   name: "@huynle/hub-node",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "`hub node`: the per-machine daemon that prepares, collects and cleans up launch workspaces (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -9907,7 +9907,7 @@ import path13 from "node:path";
 // packages/runtime-openshell/package.json
 var package_default3 = {
   name: "@huynle/hub-runtime-openshell",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "The `openshell` runtime of `hub node`: launches in NVIDIA OpenShell sandboxes, driven through the openshell CLI (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -13591,7 +13591,7 @@ import path22 from "node:path";
 // packages/claude-code/package.json
 var package_default4 = {
   name: "@huynle/hub-claude-code",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "The Claude Code hooks spoke: per-user daemon, hook bridge, plugin dir, `hub claude` wrapper and daemon-backed MCP server (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -13880,7 +13880,7 @@ import path25 from "node:path";
 // packages/preset/package.json
 var package_default5 = {
   name: "@huynle/hub-preset",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "The preset spoke: drives a harness without a spoke of its own through a terminal pane (tmux), described by a data-only preset; official presets in presets/ (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -14405,7 +14405,7 @@ import { openSync as openSync5, closeSync as closeSync5, readFileSync as readFil
 // packages/codex/package.json
 var package_default6 = {
   name: "@huynle/hub-codex",
-  version: "0.8.3",
+  version: "0.8.4",
   private: true,
   description: "The Codex app-server spoke: attaches to Codex's app-server (its own over stdio, and the shared daemon's socket when present), and the `hub codex` wrapper (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-cli",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The hub CLI (`hub` / `hubctl`) for agents and scripts (internal; bundled into @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-codex",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The Codex app-server spoke: attaches to Codex's app-server (its own over stdio, and the shared daemon's socket when present), and the `hub codex` wrapper (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-node",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "`hub node`: the per-machine daemon that prepares, collects and cleans up launch workspaces (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/preset/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-preset",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The preset spoke: drives a harness without a spoke of its own through a terminal pane (tmux), described by a data-only preset; official presets in presets/ (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-protocol",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "Hub ↔ spoke wire protocol (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/protocol/src/index.ts

@@ -482,10 +482,15 @@ export const SPOKE_FEATURES: readonly SpokeFeature[] = [...OPTIONAL_SPOKE_FEATUR
  * "nodes": it accepts a node hello (role "node", see node.ts) and sends node ops; a node backs off from a hub
  * without it. "launches": it launches sessions (it sends launch creates to spokes that announce "launch").
  */
-export const KNOWN_HUB_FEATURES = ["harness", "messaging", "nodes", "launches"] as const
+/**
+ * "pendingReplay": the hub takes a re-announced permission.asked / form.created (after a spoke reconnects) without
+ * notifying again, and honours `unlisted: true` on form.cancelled / permission.replied (only that process stops
+ * holding it). Spokes re-send permissions the hub was told already only to a hub that announces it.
+ */
+export const KNOWN_HUB_FEATURES = ["harness", "messaging", "nodes", "launches", "pendingReplay"] as const
 export type HubFeature = (typeof KNOWN_HUB_FEATURES)[number]
 /** What this hub announces ("launches": the /api/agent/launches routes). */
-export const HUB_FEATURES: readonly HubFeature[] = ["harness", "messaging", "nodes", "launches"]
+export const HUB_FEATURES: readonly HubFeature[] = ["harness", "messaging", "nodes", "launches", "pendingReplay"]
 
 /** A spoke's harness, version and evidence level; a hello without `harness` is an OpenCode native spoke. */
 export function helloHarness(hello: Hello): { readonly harness: string; readonly harnessVersion: string; readonly evidence: EvidenceLevel | "unknown" } {

package/packages/runtime-openshell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-runtime-openshell",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The `openshell` runtime of `hub node`: launches in NVIDIA OpenShell sandboxes, driven through the openshell CLI (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/runtime-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-runtime-sdk",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "The Runtime interface `hub node` runtimes implement (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-sdk",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "Typed client for the hub's /api/agent (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/spoke-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-spoke-sdk",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "private": true,
   "description": "Harness-neutral spoke building blocks: hub connection, enrollment, tokens, idempotent deliver, prompt references, HarnessSpoke (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/src/central/registry.ts

@@ -12,7 +12,7 @@
 // holds the connection; remote state is never re-exported.
 import path from "node:path"
 import { HARNESS_OPENCODE, helloHarness, spokeFeatures, type EvidenceLevel, type ForwardedEvent, type Hello, type HerdrWorkspace, type ProcessKind, type SessionInfo, type RevertCommitted, type SessionRevertInfo, type SpokeFeature, type SpokeMode, type TerminalInfo, type Terminals } from "../protocol"
-import { StatusBoard, errorTypeLabel, permissionRequest, providerFailureNeedsUser, providerRetryNeedsUser, type Blocker, type BlockerRecommendation, type PermissionRequest, type SessionStatus } from "../status"
+import { BLOCKER_ID_MAX, StatusBoard, askBlocker, errorTypeLabel, permissionRequest, providerFailureNeedsUser, providerRetryNeedsUser, type Blocker, type BlockerRecommendation, type PermissionRequest, type SessionStatus } from "../status"
 import { sanitizeLabel } from "./agent/envelope"
 import { DoneWatch } from "./done"
 import { SentenceStream } from "./say-stream"
@@ -187,6 +187,17 @@ interface PendingPermission {
   readonly tenant?: string
   readonly request?: PermissionRequest
   recommendation?: BlockerRecommendation
+  /** Its blocker (bounded, askBlocker), to put back on a status board that lost it (see restoreBlockers). */
+  readonly blocker?: Blocker
+}
+
+/** A pending form and the processes that forwarded it. */
+interface PendingForm {
+  connIDs: string[]
+  readonly sessionID: string
+  readonly tenant?: string
+  /** Its blocker (bounded, askBlocker), to put back on a status board that lost it (see restoreBlockers). */
+  readonly blocker?: Blocker
 }
 
 /** Characters of a recommendation's author and reason on a blocker. */
@@ -399,6 +410,8 @@ interface WorkerSpeech {
 
 /** How many spoken texts, utterances and early deliveries are remembered for dedupe and matching. */
 const MEMORY = 1000
+/** Pending permissions, and pending forms, kept per tenant (oldest dropped). */
+export const PENDING_PER_TENANT = 200
 
 /** Adds to a bounded insertion-ordered map, dropping the oldest entry when full. */
 function remember<K, V>(map: Map<K, V>, key: K, value: V, limit = MEMORY): void {
@@ -406,6 +419,12 @@ function remember<K, V>(map: Map<K, V>, key: K, value: V, limit = MEMORY): void
   if (map.size > limit) map.delete(map.keys().next().value!)
 }
 
+/** Adds an ID to a bounded set of IDs (oldest dropped). */
+function rememberID(set: Set<string>, id: string, limit = 1000): void {
+  set.add(id)
+  if (set.size > limit) set.delete(set.values().next().value!)
+}
+
 const eventSessionID = (event: ForwardedEvent): string | undefined => {
   const data = event.data as Record<string, any>
   const id = event.type === "form.created" ? data.form?.sessionID : data.sessionID
@@ -440,9 +459,11 @@ export class Registry {
   private readonly humanTurnListeners = new Set<(sessionID: string, tenant?: string) => void>()
   private readonly sessionDeletedListeners = new Set<(sessionID: string, tenant: string) => void>()
   /** Pending form ID → its session and every connection that forwarded it, first first (like permissions). */
-  private readonly forms = new Map<string, { connIDs: string[]; sessionID: string }>()
-  /** Form IDs already alerted (forms may be forwarded by several processes). */
+  private readonly forms = new Map<string, PendingForm>()
+  /** Form IDs already alerted (forms may be forwarded by several processes, and re-announced after a reconnect). */
   private readonly alertedForms = new Set<string>()
+  /** Permission IDs already alerted (a reconnecting spoke re-announces what is still pending). */
+  private readonly alertedPermissions = new Set<string>()
   /** Sessions whose current run raised a providerError notification (once per run; cleared when a run starts). */
   private readonly providerAlerted = new Set<string>()
   /** Sessions in conversation mode → the connection last told so (re-sent when another one takes over). */
@@ -719,6 +740,8 @@ export class Registry {
       const owner = this.sessionTenant(id)
       if (owner !== undefined && owner !== tenant) return
     }
+    // A question or permission whose ID no card can carry is never kept (no card, no answer; unbounded memory).
+    if (oversizedBlockerID(event.type, data)) return
     if (sessionID) conn.activity.set(sessionID, this.tick())
     if (sessionID && event.type.startsWith("session.execution.")) {
       if (event.type === "session.execution.interrupted" && data.inferred === true) remember(this.inferredEnds, sessionID, this.now())
@@ -733,34 +756,46 @@ export class Registry {
     if (event.type === "permission.asked" && typeof data.id === "string" && sessionID) {
       const known = this.permissions.get(data.id)
       if (known) {
-        // The same request forwarded by another process: one more place to answer it.
+        // The same request forwarded by another process (or re-announced): one more place to answer it, and its
+        // blocker back on a status board that lost it.
         if (!known.connIDs.includes(connID)) known.connIDs.push(connID)
+        this.observeBoards(event, tenant)
         return
       }
       const request = permissionRequest(data)
-      this.permissions.set(data.id, { connIDs: [connID], sessionID, tenant, ...(request ? { request } : {}) })
-      this.alert("permission", sessionID, { requestID: data.id })
+      const blocker = askBlocker(event)
+      this.permissions.set(data.id, { connIDs: [connID], sessionID, tenant, ...(request ? { request } : {}), ...(blocker ? { blocker } : {}) })
+      this.capPending(this.permissions, tenant, (id) => this.dropPermission(id))
+      if (!this.alertedPermissions.has(data.id) && this.alert("permission", sessionID, { requestID: data.id })) rememberID(this.alertedPermissions, data.id)
     }
     if (event.type === "form.created" && sessionID) {
       const formID = (data.form as Record<string, unknown> | undefined)?.id
       if (typeof formID === "string") {
         const known = this.forms.get(formID)
         if (known && !known.connIDs.includes(connID)) known.connIDs.push(connID)
-        else if (!known) remember(this.forms, formID, { connIDs: [connID], sessionID })
-      }
-      if (typeof formID === "string" && !this.alertedForms.has(formID)) {
-        this.alertedForms.add(formID)
-        if (this.alertedForms.size > 1000) this.alertedForms.delete(this.alertedForms.values().next().value!)
-        this.alert("question", sessionID)
+        else if (!known) {
+          const blocker = askBlocker(event)
+          this.forms.set(formID, { connIDs: [connID], sessionID, tenant, ...(blocker ? { blocker } : {}) })
+          this.capPending(this.forms, tenant, (id) => this.dropForm(id))
+        }
       }
+      if (typeof formID === "string" && !this.alertedForms.has(formID) && this.alert("question", sessionID)) rememberID(this.alertedForms, formID)
     }
     let closedPermission: [string, PendingPermission] | undefined
-    if (event.type === "permission.replied" && typeof data.requestID === "string") {
-      const origin = this.permissions.get(data.requestID)
-      if (origin && this.permissions.delete(data.requestID)) closedPermission = [data.requestID, origin]
-    }
-    if ((event.type === "form.replied" || event.type === "form.cancelled") && typeof data.id === "string") {
-      this.forms.delete(data.id)
+    const permissionClose = event.type === "permission.replied" && typeof data.requestID === "string"
+    const formClose = (event.type === "form.replied" || event.type === "form.cancelled") && typeof data.id === "string"
+    if (permissionClose || formClose) {
+      const id = (permissionClose ? data.requestID : data.id) as string
+      const map: Map<string, PendingPermission | PendingForm> = permissionClose ? this.permissions : this.forms
+      const origin = map.get(id)
+      // Only the tenant that asked closes it (IDs are not secret enough to let another tenant end it).
+      const own = origin !== undefined && (origin.tenant === undefined || origin.tenant === tenant)
+      if (own && data.unlisted === true) {
+        // A spoke found it no longer listed by its own harness: only that process stops holding it.
+        origin.connIDs = origin.connIDs.filter((c) => c !== connID)
+        if (origin.connIDs.length) return
+      }
+      if (own && map.delete(id) && permissionClose) closedPermission = [id, origin as PendingPermission]
     }
 
     if (sessionID) this.trackRun(event.type, sessionID)
@@ -1951,6 +1986,33 @@ export class Registry {
       if (next.length === pending.length) break
       pending = next
     }
+    this.restoreBlockers()
+  }
+
+  /** Keeps at most PENDING_PER_TENANT entries of the tenant in a pending map: the oldest are dropped (with their blocker). */
+  private capPending(map: Map<string, PendingPermission | PendingForm>, tenant: string, drop: (id: string) => void): void {
+    const own = [...map].filter(([, origin]) => (origin.tenant ?? this.sessionTenant(origin.sessionID)) === tenant)
+    for (const [id] of own.slice(0, Math.max(0, own.length - PENDING_PER_TENANT))) drop(id)
+  }
+
+  /**
+   * Puts pending permissions and forms back on the status boards that lost them: a board recreated after its
+   * session left the reported sessions for a moment, or one created after the question was asked (events reach
+   * only existing boards). OpenCode still waits for them; only a reply, a cancel or their processes going away
+   * end them (production 2026-11-05: a question card vanished while the session still waited).
+   */
+  private restoreBlockers(): void {
+    const restored = new Set<string>()
+    const restore = ({ sessionID, tenant, blocker }: PendingPermission | PendingForm) => {
+      if (!blocker) return
+      const rootID = this.rootOf(sessionID)
+      const board = rootID === undefined ? undefined : this.boards.get(rootID)
+      if (!rootID || !board || (tenant !== undefined && this.sessionTenant(rootID) !== tenant)) return
+      if (board.restoreBlocker(sessionID, blocker)) restored.add(rootID)
+    }
+    for (const origin of this.permissions.values()) restore(origin)
+    for (const origin of this.forms.values()) restore(origin)
+    for (const rootID of restored) this.emit({ type: "status", sessionID: rootID, sessions: this.live(this.boards.get(rootID)!.snapshot().sessions) })
   }
 
   // ---------- cluster (design §9) ----------
@@ -1978,7 +2040,7 @@ export class Registry {
     const add = (tenant: string | undefined) => tenant !== undefined && tenants.add(tenant)
     for (const rootID of this.boards.keys()) add(this.sessionTenant(rootID))
     for (const origin of this.permissions.values()) add(origin.tenant ?? this.sessionTenant(origin.sessionID))
-    for (const origin of this.forms.values()) add(this.sessionTenant(origin.sessionID))
+    for (const origin of this.forms.values()) add(origin.tenant ?? this.sessionTenant(origin.sessionID))
     for (const entry of this.presence.values()) add(this.sessionTenant(entry.sessionID))
     for (const sessionID of this.active.keys()) add(this.sessionTenant(sessionID))
     return [...tenants]
@@ -2113,11 +2175,12 @@ export class Registry {
    * Raises a notification for the root of `sessionID`'s tree. Only hand-offs, questions and permissions reach a
    * session some device shows (spoken replies check that themselves: the watching device speaks them).
    */
-  private alert(kind: NotificationKind, sessionID: string, fields: { text?: string; requestID?: string; subject?: string; key?: string; unlessPref?: NotificationKind } = {}): void {
+  /** True when it was raised (or skipped because a device shows the session); false for a session on no board. */
+  private alert(kind: NotificationKind, sessionID: string, fields: { text?: string; requestID?: string; subject?: string; key?: string; unlessPref?: NotificationKind } = {}): boolean {
     const entry = [...this.boards].find(([, board]) => board.get(sessionID))
-    if (!entry) return
+    if (!entry) return false
     const [rootID, board] = entry
-    if (!ALWAYS_ALERT.has(kind) && this.watched(rootID)) return
+    if (!ALWAYS_ALERT.has(kind) && this.watched(rootID)) return true
     const alert: Alert = {
       kind,
       sessionID: rootID,
@@ -2130,6 +2193,7 @@ export class Registry {
     }
     const owner = this.sessionTenant(rootID)
     for (const listener of this.alertListeners) listener(owner ? { ...alert, owner } : alert)
+    return true
   }
 
   private emit(message: RegistryMessage): void {
@@ -2137,3 +2201,10 @@ export class Registry {
     for (const listener of this.listeners) listener(message, tenant)
   }
 }
+
+/** A permission.asked / form.created (or their closes) with an ID longer than any card keeps. */
+function oversizedBlockerID(type: string, data: Record<string, unknown>): boolean {
+  const ids =
+    type === "permission.asked" ? [data.id] : type === "form.created" ? [(data.form as Record<string, unknown> | undefined)?.id] : []
+  return ids.some((id) => typeof id === "string" && id.length > BLOCKER_ID_MAX)
+}

package/src/index.ts

@@ -162,6 +162,33 @@ async function activity(kind: "service" | "standalone", directories: readonly st
   return { active: Object.keys(active ?? {}), jobs }
 }
 
+/**
+ * What OpenCode waits for in each session on this process's own server: its pending forms (session.form.list) and
+ * permission requests (session.permission.list). A session that cannot be read is left out; nothing when the
+ * server cannot be reached.
+ */
+async function pending(kind: "service" | "standalone", sessionIDs: readonly string[]) {
+  const client = await ownClient(kind).catch(() => undefined)
+  if (!client) return []
+  const out: Array<{ sessionID: string; forms: unknown[]; permissions: unknown[] }> = []
+  // One budget for the whole listing (the spoke gives up after 5 s too): a hung server stops being asked.
+  const signal = AbortSignal.timeout(PENDING_LIST_TIMEOUT_MS)
+  for (const sessionID of sessionIDs) {
+    if (signal.aborted) break
+    try {
+      const [forms, permissions] = await Promise.all([client.session.form.list({ sessionID }, { signal }), client.permission.list({ sessionID }, { signal })])
+      const list = (v: unknown) => unwrap<unknown[]>(v, Array.isArray)
+      out.push({ sessionID, forms: Array.isArray(list(forms)) ? list(forms) : [], permissions: Array.isArray(list(permissions)) ? list(permissions) : [] })
+    } catch {
+      // a session this server does not have (any more)
+    }
+  }
+  return out
+}
+
+/** How long one listing of pending forms and permissions may take on the own server. */
+const PENDING_LIST_TIMEOUT_MS = 5000
+
 /** Plugin API results may arrive bare or wrapped as { location, data }. */
 function unwrap<T>(value: unknown, isBare: (v: any) => boolean): T {
   const v = value as any
@@ -253,6 +280,7 @@ function hostFrom(ctx: Context, locations: () => PermissionLocation[], kind: "se
     },
     ...(canList(kind) ? { listRecent: (options?: { days: number; max: number; include: readonly string[]; signal?: AbortSignal }) => listRecent(kind, () => locations().map((l) => l.directory), options) } : {}),
     activity: (directories) => activity(kind, directories),
+    pending: (sessionIDs) => pending(kind, sessionIDs),
     // Fork and revert: over the own server's API (the plugin API has neither); only where it can be reached.
     ...(canList(kind)
       ? {