feat(rooms): complete fenced coordination and native Stop recovery

[JackHunzicker]

Summary

Complete hosted-room coordination contracts on top of NousResearch#98307, retaining its durable store, scheduler and transports. This companion targets that feature branch rather than duplicating its inherited changes against main.

Changes

• Preserve historical identities; revision-fence membership, titles and roster-dependent sends, including attachment commitment.
• Bind runtime sessions and participant actions to exact room/thread/member/attempt coordinates, retaining author provenance.
• Add capability-gated canonical history, edits/deletion/reactions, shared read cursors, reply parents and responder policies.
• Preserve post-policy corrections to older messages across restart, and only advance delivery watermarks through actually emitted byte-bounded input.
• Negotiate RoomLink semantic replication features, reject unsupported writers before acknowledgement, and exclude local-only participant tools from peer execution surfaces.
• Fence approval, input, Stop and retry against exact task generations.
• Preserve native Stop uncertainty through room finalization, SQLite recovery and peer receipts. Absence of terminal acknowledgement is not cancellation proof.
• Preserve Windows file paths and bytes while rejecting linked canonical blobs, redirects and unbounded response reads.

Verification

Submitted commit 19aa9853869d249548dea18cb463773f3dcb0341, based on NousResearch#98307 head fab0ac73f070be481b1fe8f7637ee533ad7950ea:

• Canonical runner: 1,735 tests passed, zero failures, two existing skips across 115 files, retries disabled.
• Includes the native-room Stop acknowledgement regressions and the full prior hosted-room suite.
• Regression tests cover roster changes during Send, policy-switch mutations, mixed-peer replication and local-only tool exposure.
• All 33 contribution commits carry developer sign-offs; whitespace checks pass.

Run scripts/run_tests.sh -j 4 --file-retries 0 over tests/gateway/test_hosted_room*.py, tests/gateway/test_hosted_rooms*.py, tests/tui_gateway/test_hosted_room*.py, tests/tui_gateway/test_groups*.py and tests/gateway/test_api_server_native_stop_ack.py.

Dependencies and limits

• Companion to chore(bot-mode): compose Group Chat layers in a permanent integration draft NousResearch/hermes-agent#98307, not a replacement scheduler or parallel room ledger.
• Native Codex terminal evidence is produced by fix(codex): preserve native continuity and bounded control authority NousResearch/hermes-agent#105502. That producer must land with the included room-side acknowledgement consumer before claiming end-to-end native Stop behavior.
• This is a source contribution to the author of upstream integration draft #98307, not a separately released room backend. Preserve that author's staged source-PR integration rather than merging the entire draft as one monolith.
• Desktop companion #3 and Android Relay draft #559 depend on the accepted room contract. They are sibling clients; neither adds an execution host or a second scheduler. Resolve backend/native composition first, then perform matched client verification.
• No hosted check runs are published on this feature-author fork for this head. The canonical local test receipt above remains the qualification; no hosted-CI or release claim is made.
• Tests use deterministic runtime seams, real SQLite and local HTTP fixtures. Fresh live-vendor, native Claude participation, physical-device and production-deployment acceptance are not claimed.