fail only the disconnected sidecar's in-flight requests

unregisterSidecar rejected every entry in the pending map, not just the ones
belonging to the sidecar that went away. Restarting any single sidecar failed
in-flight work on every other: `pm2 restart officer-music` could kill a running
agent turn with `Sidecar "music" disconnected` — a message pointing at a process
that had nothing to do with it. Pending entries now carry their owning sidecar
id and the rejection loop skips the rest.

Also deletes src/servers/api/anthropic-proxy.ts. It had no importers; PM2's
officer-anthropic-proxy runs src/servers/sidecar/claude/index.ts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/servers/api/anthropic-proxy.ts

@@ -1,92 +0,0 @@
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-
-const PROXY_PORT = Number(process.env.ANTHROPIC_PROXY_PORT ?? '5051');
-const ANTHROPIC_API_BASE = 'https://api.anthropic.com';
-const CREDENTIALS_PATH = join(homedir(), '.claude', '.credentials.json');
-
-// Generate a random proxy secret at startup — shared with Claude Code spawns
-// Prefix must match a real Anthropic API key format (sk-ant-api03-*) so Claude Code accepts it
-export const proxySecret = `sk-ant-api03-${crypto.randomUUID()}`;
-
-type CredentialsFile = {
-  claudeAiOauth?: {
-    accessToken?: string;
-  };
-};
-
-async function readOAuthToken(): Promise<string | null> {
-  try {
-    const file = Bun.file(CREDENTIALS_PATH);
-    if (!(await file.exists())) return null;
-    const data = (await file.json()) as CredentialsFile;
-    return data.claudeAiOauth?.accessToken?.trim() || null;
-  } catch {
-    return null;
-  }
-}
-
-export function startAnthropicProxy() {
-  Bun.serve({
-    port: PROXY_PORT,
-    hostname: '127.0.0.1',
-    idleTimeout: 0,
-
-    async fetch(req) {
-      const url = new URL(req.url);
-
-      // Validate proxy secret
-      const incomingKey = req.headers.get('x-api-key');
-      if (incomingKey !== proxySecret) {
-        return new Response(JSON.stringify({ error: 'Unauthorized' }), {
-          status: 401,
-          headers: { 'Content-Type': 'application/json' },
-        });
-      }
-
-      // Read fresh OAuth token
-      const token = await readOAuthToken();
-      if (!token) {
-        return new Response(JSON.stringify({ error: 'No OAuth token available' }), {
-          status: 502,
-          headers: { 'Content-Type': 'application/json' },
-        });
-      }
-
-      // Build upstream URL
-      const upstream = `${ANTHROPIC_API_BASE}${url.pathname}${url.search}`;
-
-      // Clone headers, replace proxy secret with real OAuth token
-      const headers = new Headers(req.headers);
-      headers.set('x-api-key', token);
-      headers.delete('host');
-
-      // Read request body fully before forwarding — avoids stream-in-stream issues
-      const body = req.body ? await req.arrayBuffer() : null;
-
-      // Forward request
-      const upstreamRes = await fetch(upstream, {
-        method: req.method,
-        headers,
-        body,
-      });
-
-      // Build clean response headers
-      const resHeaders = new Headers();
-      for (const [key, value] of upstreamRes.headers) {
-        const lower = key.toLowerCase();
-        // Skip hop-by-hop and encoding headers that may have been consumed by fetch
-        if (lower === 'content-encoding' || lower === 'content-length' || lower === 'transfer-encoding') continue;
-        resHeaders.set(key, value);
-      }
-
-      return new Response(upstreamRes.body, {
-        status: upstreamRes.status,
-        statusText: upstreamRes.statusText,
-        headers: resHeaders,
-      });
-    },
-  });
-
-  console.log(`[anthropic-proxy] listening on 127.0.0.1:${PROXY_PORT}`);
-}