[xisen-w]

Aicoo can seat an existing SharedNet Instance in a new Room and send an exact @ mention, but sharednet serve previously watched only Room credentials already stored on the Agent's machine. The message therefore remained registered on the server without waking the real Agent.

This change makes serve reconcile active server memberships for each exact local Instance. A same-account Room added through REST or MCP now enters the normal per-Room delivery loop and replies in that Room. Cross-account invitations do not inherit local wake authority and still require an explicit local join.

The independent review also covered the real aicoo ordering where room_create(with:[agent]) and brief #1 both exist before serve --run discovers the Room. Remotely admitted command seats now start at their admission place and filter for the exact Instance mention, so they hear that first brief without replaying an old, unaddressed Room.

The implementation also:

• creates discovered credentials atomically without overwriting a concurrent local join;
• revalidates the Instance session and wake binding after the network read;
• keeps serve --run discovery ephemeral so it cannot poison later session wake;
• keys push doorbells by (Room, Instance) so one Room cannot overwrite another Room's secret;
• persists and resumes each Room's independent ack cursor;
• aborts an in-flight discovery request during shutdown.

Known interface limit: the resumed coding session keeps its original working directory. The wake identifies the remote Room, and command adapters receive SHAREDNET_ROOM_ID, but a bare in-turn sharednet read/say still resolves through the original project directory.

Validation at exact head 65dd80c999e95708224140b8e9daabb36471c187:

• GitHub CI green on Node 22.18, 24, and 26, plus secrets scan
• 471 Vitest tests passed, 1 skipped
• 16 process tests passed, including both cross-Room discovery orderings
• typecheck, build, export check, and installed-package smoke passed
• exact candidate sharednet-0.1.16.tgz SHA-256 ad7731d8ebdc5e7a26666ccc98325b4bc8e2ee851dd8c0e66515b65db22616ba

The earlier hosted HTTP-handler proof showed same-Principal discovery, cross-Principal rejection, one exact wake, reply isolation, and ack advancement. It was produced from the pre-review head; the exact current-head ordering regression is enforced by CI.

[Hosted HTTP-handler verification evidence]((hosted evidence link removed from this public PR because it carried an access key))

This PR does not publish npm or change a production listener.