{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[5350388a] Add pool-scoped voting: /vote?pool=<parent> picks pairs from children.\n\n- /vote now accepts an optional `pool` param (parent item path). When\n  provided without left/right, it picks the first unvoted pair from the\n  pool's children. When provided alongside left/right, it constrains\n  \"next pair\" navigation to siblings within the pool.\n- \"vote on children\" button appears on item pages with ≥2 children,\n  linking to /vote?pool=<item>.\n- Pool is threaded through VoteComparePost → success JS so in-page\n  morph after voting keeps the pool context for next-pair navigation.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\nSide A — unified diff (full patch):\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 5faa642451d69555cb391974beb0ad22c9355c8c..b79efdb4d52bd445a67f38cbfd61d3507d2b3014 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -193,6 +193,7 @@ async fn dispatch_ui_action(\n             ratio_right,\n             explanation,\n             next,\n+            pool,\n             form_action,\n         } => {\n             if form_action != \"/ui\" {\n@@ -239,6 +240,9 @@ async fn dispatch_ui_action(\n                         .into_response();\n                 }\n             };\n+            let pool_id = pool.as_deref().and_then(|p| {\n+                crate::path_types::ItemId::parse(p.trim()).map(|i| i.normalized_storage())\n+            });\n             let mut rl = ratio_left.trim().parse::<i32>().unwrap_or(0).max(0);\n             let mut rr = ratio_right.trim().parse::<i32>().unwrap_or(0).max(0);\n             if rl == 0 && rr == 0 {\n@@ -294,6 +298,7 @@ async fn dispatch_ui_action(\n                         &thread_tag,\n                         &left_id,\n                         &right_id,\n+                        pool_id.as_ref(),\n                         pid.as_str(),\n                         post_index,\n                     )\ndiff --git a/server/src/html/garden/pin.rs b/server/src/html/garden/pin.rs\nindex 5865cfdbc06aeb6555c97380e25591fae6b3d125..1820d7fe7ee167ecbf5ad5124f23b2ab92ffb01f 100644\n--- a/server/src/html/garden/pin.rs\n+++ b/server/src/html/garden/pin.rs\n@@ -79,7 +79,7 @@ pub(super) fn ont_pin_vote_controls(\n                         }\n                     }\n                 } @else {\n-                    a class=\"ont-vote-compare-btn\" href=(vote_compare_href(nav, pi, &current, None)) title=\"Compare and vote\" {\n+                    a class=\"ont-vote-compare-btn\" href=(vote_compare_href(nav, pi, &current, None, None)) title=\"Compare and vote\" {\n                         span class=\"ont-vote-glyph\" aria-hidden=\"true\" { \"⚖\" }\n                         span { \"vote\" }\n                     }\n@@ -121,7 +121,7 @@ pub(super) fn child_row_pin_or_vote(\n                         if nv == 1 { \"\" } else { \"s\" },\n                     );\n                     @let aria = format!(\"Vote; {} pairwise {}\", nv, if nv == 1 { \"vote\" } else { \"votes\" });\n-                    a class=\"ont-garden-vote-ico\" href=(vote_compare_href(nav, pi, row_item, None)) title=(tip) aria-label=(aria) {\n+                    a class=\"ont-garden-vote-ico\" href=(vote_compare_href(nav, pi, row_item, None, None)) title=(tip) aria-label=(aria) {\n                         span class=\"ont-garden-vote-glyph\" aria-hidden=\"true\" { \"⚖\" }\n                         span class=\"ont-garden-vote-count\" { (format!(\"{}\", nv)) }\n                     }\ndiff --git a/server/src/html/garden/render.rs b/server/src/html/garden/render.rs\nindex 5c3986ca36902f6c9019a4b5590f0b3b9d2cb4ff..bd8cbce059ee789de6e8dc9b6f69f54beee2f994 100644\n--- a/server/src/html/garden/render.rs\n+++ b/server/src/html/garden/render.rs\n@@ -29,6 +29,7 @@ use super::{\n     item::{child_depth_from_uri, item_code_label, item_display_path, item_href},\n     item_page::{build_item_page_view_model, sibling_nav_markup},\n     pin::{child_row_pin_or_vote, ont_pin_vote_controls, pinned_item_from_jar},\n+    vote::vote_pool_href,\n };\n \n pub(super) async fn render_scope_view(\n@@ -186,12 +187,21 @@ pub(super) async fn render_scope_view(\n             }\n \n             section class=\"ont-tab-panel ont-tab-panel-children\" {\n+                @let total_children = model.child_rankings.component_rankings\n+                    .iter().map(|c| c.ranked.len()).sum::<usize>()\n+                    + model.child_rankings.unranked_items.len();\n                 h3 {\n                     \"ranked child groups\"\n                     @if model.child_depth > 1 {\n                         \" \"\n                         span class=\"muted\" { (format!(\"(depth {})\", model.child_depth)) }\n                     }\n+                    @if total_children >= 2 {\n+                        \" \"\n+                        a class=\"ont-vote-children-btn\" href=(vote_pool_href(&nav, &model.item)) {\n+                            \"vote on children\"\n+                        }\n+                    }\n                 }\n                 @if model.child_rankings.component_rankings.is_empty() {\n                     p class=\"muted\" { \"no voted pairs yet in this scope\" }\ndiff --git a/server/src/html/garden/tests.rs b/server/src/html/garden/tests.rs\nindex 6900a6795bcde866a176722149d6378e5127b4c3..c2036fca7752aef63d260e36cfe9649f63b5c550 100644\n--- a/server/src/html/garden/tests.rs\n+++ b/server/src/html/garden/tests.rs\n@@ -105,7 +105,7 @@ fn suggest_next_vote_pair_prefers_unvoted_sibling_pair() {\n     let content = content_for_garden_view(&reduced, &ScopeId::Public);\n     let a = ItemId::parse(\"~/topic/a\").unwrap().normalized_storage();\n     let b = ItemId::parse(\"~/topic/b\").unwrap().normalized_storage();\n-    let next = suggest_next_vote_pair(content, &a, &b).expect(\"next sibling pair\");\n+    let next = suggest_next_vote_pair(content, &a, &b, None).expect(\"next sibling pair\");\n     assert_ne!(\n         canonical_edge_items(&next.0, &next.1),\n         canonical_edge_items(&a, &b)\ndiff --git a/server/src/html/garden/vote.rs b/server/src/html/garden/vote.rs\nindex 1d7fc8aa7436bfa9c1186dfd940a8d751ab7e088..2682cfcbd2f834b56459a02831aa225cffe67c58 100644\n--- a/server/src/html/garden/vote.rs\n+++ b/server/src/html/garden/vote.rs\n@@ -211,14 +211,15 @@ pub(crate) async fn vote_compare_post_success_js(\n     _thread_tag: &str,\n     left: &ItemId,\n     right: &ItemId,\n+    pool: Option<&ItemId>,\n     _post_id: &str,\n     _post_idx: Option<usize>,\n ) -> String {\n     let reduced = state.reduced.read().await;\n     let content = content_for_garden_view(&reduced, &nav.scope());\n     let edge_history = vote_edge_history_markup(content, left, right);\n-    let next_pair = suggest_next_vote_pair(content, left, right);\n-    let nav_markup = vote_compare_nav_markup(nav, next_pair.as_ref());\n+    let next_pair = suggest_next_vote_pair(content, left, right, pool);\n+    let nav_markup = vote_compare_nav_markup(nav, next_pair.as_ref(), pool);\n     drop(reduced);\n     JsBuilder::new()\n         .morph_inner_selector(\"#vote-edge-history-region\", edge_history)\n@@ -231,27 +232,39 @@ pub(super) fn vote_compare_href(\n     left: &ItemId,\n     right: &ItemId,\n     thread_override: Option<&str>,\n+    pool: Option<&ItemId>,\n ) -> String {\n     let left_q = urlencoding::encode(left.as_str());\n     let right_q = urlencoding::encode(right.as_str());\n-    let base = format!(\n+    let mut base = format!(\n         \"{}/vote?left={}&right={}\",\n         nav.room_path_prefix_for_vote_compare(),\n         left_q,\n         right_q\n     );\n     if let Some(t) = thread_override.filter(|s| !s.is_empty()) {\n-        format!(\"{}&thread={}\", base, urlencoding::encode(t))\n-    } else {\n-        base\n+        base = format!(\"{}&thread={}\", base, urlencoding::encode(t));\n+    }\n+    if let Some(p) = pool {\n+        base = format!(\"{}&pool={}\", base, urlencoding::encode(p.as_str()));\n     }\n+    base\n+}\n+\n+pub(super) fn vote_pool_href(nav: &ThreadNav, pool_item_str: &str) -> String {\n+    format!(\n+        \"{}/vote?pool={}\",\n+        nav.room_path_prefix_for_vote_compare(),\n+        urlencoding::encode(pool_item_str)\n+    )\n }\n \n fn vote_compare_nav_markup(\n     nav: &ThreadNav,\n     next_pair: Option<&(ItemId, ItemId)>,\n+    pool: Option<&ItemId>,\n ) -> maud::Markup {\n-    let next_pair_href = next_pair.map(|(nl, nr)| vote_compare_href(nav, nl, nr, None));\n+    let next_pair_href = next_pair.map(|(nl, nr)| vote_compare_href(nav, nl, nr, None, pool));\n     html! {\n         div class=\"vote-compare-nav\" {\n             @if let Some(href) = &next_pair_href {\n@@ -267,8 +280,15 @@ pub(super) fn suggest_next_vote_pair(\n     content: &ContentState,\n     current_left: &ItemId,\n     current_right: &ItemId,\n+    pool_parent: Option<&ItemId>,\n ) -> Option<(ItemId, ItemId)> {\n-    let pool: Vec<ItemId> = if current_left.parent().as_ref().map(|p| p.as_str())\n+    let pool: Vec<ItemId> = if let Some(parent) = pool_parent {\n+        content\n+            .item_children\n+            .get(parent)\n+            .map(|s| s.iter().cloned().collect())\n+            .unwrap_or_default()\n+    } else if current_left.parent().as_ref().map(|p| p.as_str())\n         == current_right.parent().as_ref().map(|p| p.as_str())\n     {\n         current_left\n@@ -322,10 +342,14 @@ pub(super) fn vote_compare_item_card(\n }\n #[derive(Debug, Deserialize)]\n pub struct VoteCompareQuery {\n-    pub left: String,\n-    pub right: String,\n+    #[serde(default)]\n+    pub left: Option<String>,\n+    #[serde(default)]\n+    pub right: Option<String>,\n     #[serde(default)]\n     pub thread: Option<String>,\n+    #[serde(default)]\n+    pub pool: Option<String>,\n }\n \n /// Public pairwise vote UI — `/vote?left=&right=&thread=`.\n@@ -376,17 +400,53 @@ async fn vote_compare_inner(\n     jar: CookieJar,\n     uri: Uri,\n ) -> axum::response::Response {\n-    let left = match ItemId::parse(q.left.trim()) {\n-        Some(i) => i.normalized_storage(),\n-        None => return (StatusCode::NOT_FOUND, \"bad left item\").into_response(),\n+    let pool_id: Option<ItemId> = match q.pool.as_deref() {\n+        Some(p) => match ItemId::parse(p.trim()) {\n+            Some(i) => Some(i.normalized_storage()),\n+            None => return (StatusCode::BAD_REQUEST, \"bad pool item\").into_response(),\n+        },\n+        None => None,\n     };\n-    let right = match ItemId::parse(q.right.trim()) {\n-        Some(i) => i.normalized_storage(),\n-        None => return (StatusCode::NOT_FOUND, \"bad right item\").into_response(),\n+\n+    let (left, right) = match (q.left.as_deref(), q.right.as_deref()) {\n+        (Some(l), Some(r)) => {\n+            let left = match ItemId::parse(l.trim()) {\n+                Some(i) => i.normalized_storage(),\n+                None => return (StatusCode::NOT_FOUND, \"bad left item\").into_response(),\n+            };\n+            let right = match ItemId::parse(r.trim()) {\n+                Some(i) => i.normalized_storage(),\n+                None => return (StatusCode::NOT_FOUND, \"bad right item\").into_response(),\n+            };\n+            if left == right {\n+                return (StatusCode::BAD_REQUEST, \"items must differ\").into_response();\n+            }\n+            (left, right)\n+        }\n+        (None, None) => {\n+            let Some(pool) = pool_id.as_ref() else {\n+                return (StatusCode::BAD_REQUEST, \"provide left+right or pool\").into_response();\n+            };\n+            let reduced = state.reduced.read().await;\n+            let content = content_for_garden_view(&reduced, &nav.scope());\n+            let children: Vec<ItemId> = content\n+                .item_children\n+                .get(pool)\n+                .map(|s| s.iter().cloned().collect())\n+                .unwrap_or_default();\n+            if children.len() < 2 {\n+                drop(reduced);\n+                return (StatusCode::BAD_REQUEST, \"pool has fewer than 2 children to compare\").into_response();\n+            }\n+            let pair = suggest_next_pair_in_pool(&content.ranking_group, &children, None);\n+            drop(reduced);\n+            match pair {\n+                Some(p) => p,\n+                None => return (StatusCode::BAD_REQUEST, \"no pairs available in pool\").into_response(),\n+            }\n+        }\n+        _ => return (StatusCode::BAD_REQUEST, \"provide both left and right, or just pool\").into_response(),\n     };\n-    if left == right {\n-        return (StatusCode::BAD_REQUEST, \"items must differ\").into_response();\n-    }\n \n     let reduced = state.reduced.read().await;\n     let content = content_for_garden_view(&reduced, &nav.scope());\n@@ -409,7 +469,7 @@ async fn vote_compare_inner(\n     let left_body = content.item_bodies.get(&left).cloned();\n     let right_body = content.item_bodies.get(&right).cloned();\n     let item_bodies_for_cards = content.item_bodies.clone();\n-    let next_pair = suggest_next_vote_pair(content, &left, &right);\n+    let next_pair = suggest_next_vote_pair(content, &left, &right, pool_id.as_ref());\n     drop(reduced);\n \n     let title = format!(\n@@ -432,6 +492,7 @@ async fn vote_compare_inner(\n         \"ratio_right\": {\"$form\": \"ratio_right\"},\n         \"explanation\": {\"$form\": \"explanation\"},\n         \"next\": next_path,\n+        \"pool\": pool_id.as_ref().map(|p| p.as_str()),\n         \"form_action\": \"/ui\",\n     }))\n     .expect(\"vote compare rpc json\");\n@@ -456,7 +517,7 @@ async fn vote_compare_inner(\n                 Some(&item_bodies_for_cards),\n             ))\n         }\n-        (vote_compare_nav_markup(&nav, next_pair.as_ref()))\n+        (vote_compare_nav_markup(&nav, next_pair.as_ref(), pool_id.as_ref()))\n         div id=\"vote-edge-history-region\" {\n             (edge_history)\n         }\ndiff --git a/server/src/html/ui_action.rs b/server/src/html/ui_action.rs\nindex dd5294202569454acf9f41b458718700bbf96f39..2589a2cc00bb7b18cd19ebcbb938083122d6921d 100644\n--- a/server/src/html/ui_action.rs\n+++ b/server/src/html/ui_action.rs\n@@ -50,6 +50,9 @@ pub enum HtmlUiAction {\n         explanation: String,\n         /// Same-origin path after successful post (JS redirect).\n         next: String,\n+        /// Pool parent item path, if the vote was initiated from a pool URL.\n+        #[serde(default)]\n+        pool: Option<String>,\n         #[serde(default = \"default_ui_form_action\")]\n         form_action: String,\n     },\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[9acdf18a] feat: add RoomList RPC command and CLI room list subcommand\n\nReturns all rooms the authenticated principal has a grant in.\nIncludes integration tests proving per-user isolation: users only\nsee rooms they have been explicitly granted, not all rooms in the system.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\nSide B — unified diff (full patch):\ndiff --git a/bb.edn b/bb.edn\nindex f7c53eb2d5def514a8f2c480ac420416205db14e..8dc6a5be7321de198cbb5939842a33b8c5d52625 100644\n--- a/bb.edn\n+++ b/bb.edn\n@@ -47,16 +47,18 @@\n                                            \"RUST_LOG\"      \"info\"})})))}\n \n   test\n-  {:doc \"Full test suite: integration + auth + grants + invites\"\n+  {:doc \"Full test suite: integration + auth + grants + invites + room-list\"\n    :requires ([test.integration :as integration]\n               [test.auth :as auth]\n               [test.grants :as grants]\n-              [test.invites :as invites])\n+              [test.invites :as invites]\n+              [test.room-list :as room-list])\n    :task (do\n            (integration/integration)\n            (auth/auth-test)\n            (grants/grants-test)\n-           (invites/invites-test))}\n+           (invites/invites-test)\n+           (room-list/room-list-test))}\n \n   walkthrough-fixture\n   {:doc \"Run local server + mock OAuth + seeded walkthrough data for manual browser demos\"\ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex 69492cb5417a0a19c38f8cacbeadd103bd905b6f..b008cf377bb360aaae666d2dfd4b5e13dedb204a 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -219,6 +219,12 @@ enum RoomCmd {\n         #[arg(long)]\n         json: bool,\n     },\n+    /// List rooms the authenticated user has access to\n+    List {\n+        /// Output as JSON for agent parsing\n+        #[arg(long)]\n+        json: bool,\n+    },\n }\n \n #[derive(Subcommand, Debug)]\n@@ -1319,6 +1325,38 @@ async fn main() -> Result<()> {\n                     _ => return Err(anyhow!(\"unexpected RPC result\")),\n                 }\n             }\n+            RoomCmd::List { json } => {\n+                let client = http_client()?;\n+                let bearer = effective_bearer().ok_or_else(|| {\n+                    anyhow!(\n+                        \"no bearer token: run `slugsocial identity start --rig <rig> --model <model>` \\\n+                         then `slugsocial identity poll <session>`, or set SLUG_BEARER_TOKEN / ~/.config/slugsocial/token\"\n+                    )\n+                })?;\n+                let batch = send_rpc(\n+                    &client,\n+                    base,\n+                    Some(&bearer),\n+                    vec![RpcCommand::RoomList],\n+                )\n+                .await?;\n+                match rpc_line_ok(&batch.results[0])? {\n+                    RpcResult::RoomList(resp) => {\n+                        if json {\n+                            println!(\"{}\", serde_json::to_string_pretty(&resp)?);\n+                        } else {\n+                            if resp.rooms.is_empty() {\n+                                println!(\"no rooms\");\n+                            } else {\n+                                for room in &resp.rooms {\n+                                    println!(\"{room}\");\n+                                }\n+                            }\n+                        }\n+                    }\n+                    _ => return Err(anyhow!(\"unexpected RPC result\")),\n+                }\n+            }\n         },\n \n         Command::Healthz { json } => {\ndiff --git a/server/src/api/rpc.rs b/server/src/api/rpc.rs\nindex ed4800e7cbdeaf04e72192c191e71354e603c1fe..f1ee6d35b95a1a28490823e907b8f4dc5c091b94 100644\n--- a/server/src/api/rpc.rs\n+++ b/server/src/api/rpc.rs\n@@ -1345,6 +1345,25 @@ pub async fn handle_rpc_batch(\n                     }\n                 }\n             }\n+            RpcCommand::RoomList => {\n+                let principal = {\n+                    let reduced = state.reduced.read().await;\n+                    verify_bearer_principal(&headers, &*reduced)\n+                };\n+                match principal {\n+                    Err((_, m)) => line_err(m, None),\n+                    Ok(principal) => {\n+                        let reduced = state.reduced.read().await;\n+                        let rooms: Vec<String> = reduced\n+                            .grants\n+                            .iter()\n+                            .filter(|(_, members)| members.contains_key(&principal))\n+                            .map(|(room, _)| room.clone())\n+                            .collect();\n+                        line_ok(RpcResult::RoomList(RoomListResponse { rooms }))\n+                    }\n+                }\n+            }\n             RpcCommand::RoomRevoke {\n                 room,\n                 username,\ndiff --git a/test/room_list.clj b/test/room_list.clj\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..a089a722ac8d5f822f47d5511a46f671d61d46cf\n--- /dev/null\n+++ b/test/room_list.clj\n@@ -0,0 +1,158 @@\n+(ns test.room-list\n+  \"Room list integration test: list rooms user has access to via POST /api/v0/rpc.\n+\n+  Covers:\n+  - user with no rooms -> empty list\n+  - user with one room -> list contains that room\n+  - user with multiple rooms -> list contains all rooms\"\n+  (:require [babashka.fs :as fs]\n+            [cheshire.core :as json]\n+            [clojure.set :as set]\n+            [test.common :as common]\n+            [test.oauth :as oauth]))\n+\n+(def ^:private counts (atom {:pass 0 :fail 0}))\n+\n+(defn- assert! [pred msg]\n+  (common/test-assert! counts pred msg))\n+\n+(defn- bearer [token] {\"Authorization\" (str \"Bearer \" token)})\n+\n+(defn- rpc-batch! [base-url token cmds]\n+  (let [resp (oauth/http-post-json (str base-url \"/api/v0/rpc\") cmds :headers (bearer token))]\n+    {:status (:status resp)\n+     :parsed (json/parse-string (:body resp) false)}))\n+\n+(defn- rpc-line-ok? [parsed]\n+  (true? (get-in parsed [\"results\" 0 \"ok\"])))\n+\n+(defn- register-user! [base-url session-agent username]\n+  (oauth/complete-registration! base-url\n+                                :agent session-agent\n+                                :username username\n+                                :assert! (fn [pred msg] (assert! pred msg))))\n+\n+(defn room-list-test [& _args]\n+  (println \"\\n━━━ room list integration check ━━━\\n\")\n+  (reset! counts {:pass 0 :fail 0})\n+\n+  (println \"building server binary…\")\n+  (common/letlocals\n+   (bind build (common/run-cargo-build-release! [\"slugsocial-server\"]))\n+   (assert! (zero? (:exit build)) \"cargo build succeeds\")\n+   (bind server-bin \"target/release/slugsocial-server\")\n+\n+   (bind tmp-dir (str (fs/create-temp-dir {:prefix \"slug-room-list-\"})))\n+   (bind slug-port (common/pick-port))\n+   (bind google-port (common/pick-port))\n+   (bind base-url (str \"http://127.0.0.1:\" slug-port))\n+   (bind google-url (str \"http://127.0.0.1:\" google-port))\n+\n+   (bind !server (atom nil))\n+   (bind !google (atom nil))\n+\n+   (bind server-env (common/slug-server-env tmp-dir base-url google-url slug-port))\n+   (try\n+     (println (str \"starting mock google on :\" google-port))\n+     (reset! !google (oauth/start-mock-google google-port\n+                                              :google-users [\"google-user-alice\"\n+                                                             \"google-user-bob\"\n+                                                             \"google-user-carol\"]))\n+\n+     (println (str \"starting server on :\" slug-port))\n+     (reset! !server (common/start-server server-bin server-env))\n+     (assert! (common/wait-for-server base-url 10000) \"server responds to /healthz\")\n+\n+     (println \"\\nregistering alice, bob, carol…\")\n+     (let [alice-token (register-user! base-url\n+                                       \"00000000-0000-0000-0000-000000000001:test:local/dev\"\n+                                       \"alice\")\n+           bob-token   (register-user! base-url\n+                                       \"00000000-0000-0000-0000-000000000002:test:local/dev\"\n+                                       \"bob\")\n+           carol-token (register-user! base-url\n+                                       \"00000000-0000-0000-0000-000000000003:test:local/dev\"\n+                                       \"carol\")\n+\n+           ;; Alice creates two private rooms\n+           _ (println \"\\nalice creates two rooms…\")\n+           room-id-1 (-> (rpc-batch! base-url alice-token [{\"RoomCreate\" {\"slug\" \"alice-room-one\"}}])\n+                         (get-in [:parsed \"results\" 0 \"result\" \"RoomCreated\" \"room_id\"]))\n+           _ (assert! (some? room-id-1) \"alice room-one created\")\n+           room-id-2 (-> (rpc-batch! base-url alice-token [{\"RoomCreate\" {\"slug\" \"alice-room-two\"}}])\n+                         (get-in [:parsed \"results\" 0 \"result\" \"RoomCreated\" \"room_id\"]))\n+           _ (assert! (some? room-id-2) \"alice room-two created\")\n+\n+           ;; Carol creates her own room\n+           _ (println \"carol creates her own room…\")\n+           carol-room (-> (rpc-batch! base-url carol-token [{\"RoomCreate\" {\"slug\" \"carol-room\"}}])\n+                          (get-in [:parsed \"results\" 0 \"result\" \"RoomCreated\" \"room_id\"]))\n+           _ (assert! (some? carol-room) \"carol room created\")]\n+\n+       ;; --- isolation: alice only sees her rooms, not carol's ---\n+       (println \"\\nalice sees her 2 rooms but not carol's…\")\n+       (let [rooms (-> (rpc-batch! base-url alice-token [\"RoomList\"])\n+                       (get-in [:parsed \"results\" 0 \"result\" \"RoomList\" \"rooms\"])\n+                       set)]\n+         (assert! (= #{room-id-1 room-id-2} rooms)\n+                  \"alice sees exactly her 2 rooms\")\n+         (assert! (not (contains? rooms carol-room))\n+                  \"alice does NOT see carol's room\"))\n+\n+       ;; --- isolation: carol only sees her room, not alice's ---\n+       (println \"carol sees only her room…\")\n+       (let [rooms (-> (rpc-batch! base-url carol-token [\"RoomList\"])\n+                       (get-in [:parsed \"results\" 0 \"result\" \"RoomList\" \"rooms\"])\n+                       set)]\n+         (assert! (= #{carol-room} rooms)\n+                  \"carol sees exactly her own room\")\n+         (assert! (not (contains? rooms room-id-1))\n+                  \"carol does NOT see alice's room-one\")\n+         (assert! (not (contains? rooms room-id-2))\n+                  \"carol does NOT see alice's room-two\"))\n+\n+       ;; --- bob sees nothing yet: alice has 3 rooms total but bob is in none ---\n+       (println \"bob (no grants) sees no rooms despite 3 existing…\")\n+       (let [rooms (-> (rpc-batch! base-url bob-token [\"RoomList\"])\n+                       (get-in [:parsed \"results\" 0 \"result\" \"RoomList\" \"rooms\"]))]\n+         (assert! (zero? (count rooms))\n+                  \"bob sees 0 rooms even though 3 exist in the system\"))\n+\n+       ;; --- partial grant: alice grants bob room-one only ---\n+       (println \"\\nalice grants bob view on room-one only…\")\n+       (assert! (rpc-line-ok? (:parsed (rpc-batch! base-url alice-token\n+                                                   [{\"RoomGrant\" {\"room\" room-id-1\n+                                                                  \"username\" \"bob\"\n+                                                                  \"capabilities\" [\"view\"]}}])))\n+                \"grant ok\")\n+\n+       ;; bob sees room-one but NOT room-two or carol's room\n+       (println \"bob sees room-one but not room-two or carol's room…\")\n+       (let [rooms (-> (rpc-batch! base-url bob-token [\"RoomList\"])\n+                       (get-in [:parsed \"results\" 0 \"result\" \"RoomList\" \"rooms\"])\n+                       set)]\n+         (assert! (= #{room-id-1} rooms)\n+                  \"bob sees exactly room-one\")\n+         (assert! (not (contains? rooms room-id-2))\n+                  \"bob does NOT see alice's room-two (not granted)\")\n+         (assert! (not (contains? rooms carol-room))\n+                  \"bob does NOT see carol's room (not granted)\"))\n+\n+       ;; alice's view is unchanged\n+       (println \"alice's view unchanged after granting bob…\")\n+       (let [rooms (-> (rpc-batch! base-url alice-token [\"RoomList\"])\n+                       (get-in [:parsed \"results\" 0 \"result\" \"RoomList\" \"rooms\"])\n+                       set)]\n+         (assert! (= #{room-id-1 room-id-2} rooms)\n+                  \"alice still sees exactly her 2 rooms after granting bob\")))\n+\n+     (finally\n+       (when-some [s @!server] (common/kill-server s))\n+       (when-some [g @!google] ((:stop-fn g)))\n+       (fs/delete-tree tmp-dir)))\n+\n+   (bind {pass :pass fail :fail} @counts)\n+   (if (zero? fail)\n+     (println (str \"\\n\" common/ansi-green \"━━━ \" pass \" room list checks passed ━━━\" common/ansi-reset \"\\n\"))\n+     (do (println (str \"\\n\" common/ansi-red \"━━━ \" fail \" room list checks FAILED ━━━\" common/ansi-reset \"\\n\"))\n+         (System/exit 1)))))\ndiff --git a/test/runner.clj b/test/runner.clj\nindex b5c5f1f839d51487e4dee00952c2339b586b7a97..365372a7d11ab7968aa981f9b246543e25decfea 100644\n--- a/test/runner.clj\n+++ b/test/runner.clj\n@@ -4,13 +4,15 @@\n             [test.auth :as auth]\n             [test.grants :as grants]\n             [test.invites :as invites]\n+            [test.room-list :as room-list]\n             [test.browser-sse :as browser-sse]))\n \n (defn run-core! []\n   (integration/integration)\n   (auth/auth-test)\n   (grants/grants-test)\n-  (invites/invites-test))\n+  (invites/invites-test)\n+  (room-list/room-list-test))\n \n (defn -main [& args]\n   (if (= [\"browser-sse\"] (vec args))\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex bb8586f1734f77d95598a9294bdb0de2d55bf715..341fff7be7f9b28abc79c738d84804f743ce5657 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -260,6 +260,11 @@ pub struct RoomAuditResponse {\n     pub grants: Vec<RoomAuditEntry>,\n }\n \n+#[derive(Debug, Serialize, Deserialize)]\n+pub struct RoomListResponse {\n+    pub rooms: Vec<String>,\n+}\n+\n #[derive(Debug, Serialize, Deserialize)]\n #[serde(transparent)]\n pub struct RpcBatch(pub Vec<RpcCommand>);\n@@ -342,6 +347,8 @@ pub enum RpcCommand {\n     RoomAudit {\n         room: String,\n     },\n+    /// List rooms the authenticated principal has access to.\n+    RoomList,\n     GetGlobalRank {\n         room: String,\n         #[serde(default)]\n@@ -419,6 +426,7 @@ pub enum RpcResult {\n         max_uses: usize,\n     },\n     RoomAudit(RoomAuditResponse),\n+    RoomList(RoomListResponse),\n     GrantOk {},\n     GlobalRank(GlobalRankResponse),\n     Pair(PairResponse),\n","role":"user"}],"model":"~anthropic/claude-sonnet-latest"}