Sigroom Functionality Inventory

Product Surfaces

Identity, Workspaces, And Membership

• WebAuthn registration and login, session lookup, logout, profile summary, OAuth account linking/unlinking, and production auth gates.
• Workspace create/list/detail flows with role-aware membership and platform-admin checks.
• Workspace invites with create, list, incoming invite, accept, decline, and revoke flows.
• Profile aggregation for visible workspaces, devices, and harnesses.
• Workspace-scoped downloads exposed both globally and under workspace routes.

Rooms And HACP Collaboration

• Rooms can be listed, created, loaded by ID, updated with policy, archived, and scoped to workspace policy.
• Room participants can be invited, accepted, bound to harness instances, removed, and issued room-scoped capabilities.
• HACP events are accepted through signed envelopes, stored in the room event log, and returned with server receipts.
• Gateway sessions support join/routing behavior, active subject tracking, run frames, and metrics.
• HACP observability exposes room timelines, while HACP inference and agent-run routes support guidance, autonomy grants, run creation, and run control actions.

Projects, IDE, And Runtime Access

• Projects support list, create, detail, defaults, default approval, current AGENTS.md/materialized files, progress updates, decisions, and handoff records.
• Repository features cover credentials, host allowlists, URL validation, repository import, project repository binding, task listing, and task patching.
• Project IDE routes cover GitHub install URLs, repository lookup, GitHub binding, Codespaces launch, Docker/fake/disabled IDE session creation, current session lookup, session deletion, pull-request listing, PR review, and PR merge.
• File-scope routes cover scope policies, preview, activation, command profiles, deactivation, authoring view, audit, and project test run detail.
• Project vulnerability scans can be created, listed, loaded, and populated with results.
• Harness-task routes merge project tasks and loop workitems into a single runnable queue for HACP/GeneSYS, including project-task conversion into loop workitems.

Artifacts, Review, And Patch Apply

• Artifacts can be uploaded for room events, listed at workspace scope, loaded by ID, downloaded as content, and rendered through preview routes.
• Artifact scanning records worker jobs and fail-closed metadata for suspicious or unscanned content.
• Review routes expose room review queues, review decisions, and patch-apply operations.
• Patch apply records preserve decision linkage, state transitions, and audit metadata.
• Download routes provide global and workspace-scoped release/download access by filename.

Trust, Security, And Operations

• Release trust supports admin manifest upload, denylist management, manifest lookup, workspace manifest listing, manifest downloads, and workspace denylist writes.
• Release downloads support both the narrow HACP harness package and the full GeneSYS offline installer bundle through API-served object storage.
• Enrollment supports challenges, proof submission, challenge lookup, approve/deny decisions, harness listing, certificate issuance, runtime evidence, and release-trust checks.
• Revocation supports workspace and admin revocation creation/listing plus admin session drain.
• Audit supports workspace and admin audit views, and admin security exposes a consolidated dashboard.
• Package security exposes public summary/finding/package/version/latest-scan views plus admin scans, incidents, acknowledge/resolve, exception, block, and false-positive decisions.
• Health, readiness, metrics, CORS, object storage, database clients, Prisma-backed stores, and test-time memory/noop stores are wired at server construction.

Worker Scope