privateboard 0.1.29 → 0.1.32

package/dist/boot.js

@@ -856,6 +856,38 @@ CREATE INDEX idx_user_long_memory_active
   }
 });
 
+// src/storage/migrations/049_voice_credentials.sql
+var voice_credentials_default;
+var init_voice_credentials = __esm({
+  "src/storage/migrations/049_voice_credentials.sql"() {
+    voice_credentials_default = "-- 049_voice_credentials.sql\n--\n-- Multi-instance VOICE TTS provider credentials \xB7 mirrors the LLM\n-- credential model that landed in 046. The same TTS provider can\n-- now be added more than once (e.g. two MiniMax accounts, or\n-- personal + team ElevenLabs) with distinct user-supplied labels.\n-- Legacy `provider_keys` was keyed by `provider` (one row per\n-- provider), which doesn't support this. The new table is keyed by\n-- an opaque `id`.\n--\n-- `prefs.active_voice_credential_id` is the single pointer that\n-- decides which TTS provider is \"active\" right now. Switching is\n-- a one-write change to this id; the credential rows themselves\n-- stay on file so the user can flip back without re-pasting.\n--\n-- Skill keys (brave, tavily) remain in `provider_keys` \u2014 they have\n-- no use case for multiple credentials per provider and their\n-- routes work fine as-is. After this migration, `provider_keys`\n-- holds ONLY skill rows.\n\nCREATE TABLE IF NOT EXISTS voice_credentials (\n  id          TEXT PRIMARY KEY,\n  provider    TEXT NOT NULL,\n  label       TEXT NOT NULL,\n  key_blob    BLOB NOT NULL,\n  created_at  INTEGER NOT NULL,\n  updated_at  INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS voice_credentials_provider_idx\n  ON voice_credentials(provider);\n\nALTER TABLE prefs ADD COLUMN active_voice_credential_id TEXT;\n\n-- One-shot migration \xB7 move every configured voice row from\n-- provider_keys into voice_credentials. Generated id uses a\n-- 16-char hex randomblob slice for collision resistance; labels\n-- default to the provider's display name (UI surfaces them under\n-- that label until the user renames). Empty key_blobs are skipped\n-- (legacy \"ever-configured\" rows that have since been emptied).\nINSERT INTO voice_credentials (id, provider, label, key_blob, created_at, updated_at)\nSELECT\n  lower(hex(randomblob(8))) AS id,\n  provider,\n  CASE provider\n    WHEN 'minimax'    THEN 'MiniMax'\n    WHEN 'elevenlabs' THEN 'ElevenLabs'\n    ELSE provider\n  END AS label,\n  key_blob,\n  created_at,\n  updated_at\nFROM provider_keys\nWHERE provider IN ('minimax','elevenlabs')\n  AND length(key_blob) > 0;\n\n-- Seed prefs.active_voice_credential_id with the highest-priority\n-- migrated credential. Priority mirrors the existing fallback chain\n-- in src/voice/tts.ts:165-179 (MiniMax > ElevenLabs).\nUPDATE prefs\n   SET active_voice_credential_id = (\n     SELECT id FROM voice_credentials\n      ORDER BY CASE provider\n                 WHEN 'minimax'    THEN 1\n                 WHEN 'elevenlabs' THEN 2\n               END,\n               created_at ASC\n      LIMIT 1\n   )\n WHERE id = 1\n   AND active_voice_credential_id IS NULL;\n\n-- Finally \xB7 remove the migrated voice rows from provider_keys so\n-- that table is purely skill keys (brave + tavily) from here on.\n-- Cleared by name; an explicit IN() list matches what we inserted\n-- above. After this migration, `getKey(\"minimax\")` and\n-- `getKey(\"elevenlabs\")` always return null; callers must read\n-- the active voice credential instead.\nDELETE FROM provider_keys\n WHERE provider IN ('minimax','elevenlabs');\n";
+  }
+});
+
+// src/storage/migrations/050_agent_provider_buckets.sql
+var agent_provider_buckets_default;
+var init_agent_provider_buckets = __esm({
+  "src/storage/migrations/050_agent_provider_buckets.sql"() {
+    agent_provider_buckets_default = "-- 050_agent_provider_buckets.sql\n--\n-- SIM-swap memory for per-agent model + voice picks \xB7 keyed by\n-- provider. Today every `agents` row stores a single `model_v` and a\n-- single `voice_json`; switching the active LLM credential's provider\n-- runs `reconcileAgentModels({forcePrimary:true})` which overwrites\n-- both fields with random picks from the new carrier's pool \xB7 the\n-- user's manual per-director picks under the prior provider are lost.\n--\n-- This migration adds two TEXT columns that hold a JSON map keyed by\n-- provider (LLM carrier for `model_by_provider_json`, voice provider\n-- for `voice_by_provider_json`). The reconcile pass now:\n--   1. Phase 1 \xB7 snapshots the current `model_v` / `voice_json` into\n--      `bucket[priorProvider]` BEFORE overwriting.\n--   2. Phase 2 \xB7 reads `bucket[newProvider]` and restores from it if\n--      present (reachability-checked for models). Falls back to the\n--      existing random-fast-pool pick when the bucket is empty / stale.\n--\n-- Effect \xB7 switching provider feels like a SIM swap. Every per-agent\n-- config that existed on a provider is preserved and restored on the\n-- next visit to that provider.\n--\n-- Purely additive \xB7 both columns start NULL on every existing row.\n-- No data migration step; buckets seed organically as the user picks\n-- models / switches providers post-deploy. The migration runner's\n-- \"already-applied\" guard at db.ts handles ALTER retries idempotently\n-- if a rebase ever reorders this past a column it adds elsewhere.\n\nALTER TABLE agents ADD COLUMN model_by_provider_json TEXT;\nALTER TABLE agents ADD COLUMN voice_by_provider_json TEXT;\n";
+  }
+});
+
+// src/storage/migrations/051_search_credentials.sql
+var search_credentials_default;
+var init_search_credentials = __esm({
+  "src/storage/migrations/051_search_credentials.sql"() {
+    search_credentials_default = "-- 051_search_credentials.sql\n--\n-- Multi-instance SEARCH provider credentials \xB7 final mirror of the\n-- pattern that migrations 044-046 introduced for LLM and migration 049\n-- introduced for Voice TTS. The same web-search provider (Brave or\n-- Tavily) can now appear multiple times with distinct user-supplied\n-- labels (personal + team account, for example), with exactly one\n-- \"active\" credential pointed to by `prefs.active_search_credential_id`.\n--\n-- After this migration runs, `provider_keys` is EMPTY \xB7 every\n-- credential the user holds (LLM / voice / search) lives in its own\n-- typed table with `(id, provider, label, key_blob)` columns. The\n-- legacy `provider_keys` table itself stays in the schema for now \xB7\n-- it's structurally tiny and dropping it would require coordinated\n-- removal of the `getKey` / `setKey` helpers in `keys.ts`, which is\n-- noise unrelated to this feature.\n--\n-- Unlike the LLM and voice flips, switching active search provider\n-- has NO per-agent reshuffle \xB7 agents don't carry per-search-provider\n-- state, so the active swap is purely a routing decision that the\n-- next web-search call honours automatically. No `reconcile-*`\n-- helper is needed.\n\nCREATE TABLE IF NOT EXISTS search_credentials (\n  id          TEXT PRIMARY KEY,\n  provider    TEXT NOT NULL,                -- 'brave' | 'tavily'\n  label       TEXT NOT NULL,\n  key_blob    BLOB NOT NULL,\n  created_at  INTEGER NOT NULL,\n  updated_at  INTEGER NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS search_credentials_provider_idx\n  ON search_credentials(provider);\n\nALTER TABLE prefs ADD COLUMN active_search_credential_id TEXT;\n\n-- One-shot migration \xB7 move every configured brave/tavily row from\n-- provider_keys into search_credentials. Labels default to the\n-- provider's display name; the seed-active step below picks brave\n-- when both exist (matches the historical `webSearchProvider` default\n-- of \"brave\" set in migration 029).\nINSERT INTO search_credentials (id, provider, label, key_blob, created_at, updated_at)\nSELECT\n  lower(hex(randomblob(8))) AS id,\n  provider,\n  CASE provider\n    WHEN 'brave'  THEN 'Brave Search'\n    WHEN 'tavily' THEN 'Tavily Search'\n    ELSE provider\n  END AS label,\n  key_blob,\n  created_at,\n  updated_at\nFROM provider_keys\nWHERE provider IN ('brave','tavily')\n  AND length(key_blob) > 0;\n\n-- Seed prefs.active_search_credential_id with the highest-priority\n-- migrated credential. Priority mirrors the historical default in\n-- migration 029 (brave first, tavily as alternate). If the user had\n-- previously expressed a `web_search_provider = 'tavily'` preference,\n-- that's preserved here by sorting on that pref first.\nUPDATE prefs\n   SET active_search_credential_id = (\n     SELECT id FROM search_credentials\n      ORDER BY CASE provider\n                 WHEN (SELECT COALESCE(web_search_provider, 'brave') FROM prefs WHERE id = 1) THEN 0\n                 WHEN 'brave'  THEN 1\n                 WHEN 'tavily' THEN 2\n               END,\n               created_at ASC\n      LIMIT 1\n   )\n WHERE id = 1\n   AND active_search_credential_id IS NULL;\n\n-- Finally \xB7 remove the migrated search rows from provider_keys so\n-- the legacy table is fully drained (all four credentialed providers\n-- \xB7 openai/anthropic/google/xai for LLM, minimax/elevenlabs for voice,\n-- brave/tavily for search \xB7 now live in their typed tables). After\n-- this migration, `getKey(\"brave\")` and `getKey(\"tavily\")` always\n-- return null \xB7 callers must read the active search credential via\n-- `getActiveSearchKeyPlaintext()` instead.\nDELETE FROM provider_keys\n WHERE provider IN ('brave','tavily');\n";
+  }
+});
+
+// src/storage/migrations/052_room_name_auto.sql
+var room_name_auto_default;
+var init_room_name_auto = __esm({
+  "src/storage/migrations/052_room_name_auto.sql"() {
+    room_name_auto_default = "-- 052_room_name_auto.sql\n-- Track whether a room's `name` was auto-derived from the opening\n-- question's first 60 chars (default \xB7 1) or explicitly set by the\n-- client at creation (0). The orchestrator's round-1-complete hook\n-- runs an LLM topic-phrase summariser and writes a short title back\n-- ONLY when name_auto = 1 (SQL-side guard via UPDATE WHERE), so any\n-- future rename UI can flip the flag to 0 without racing the auto\n-- pipeline.\n\nALTER TABLE rooms ADD COLUMN name_auto INTEGER NOT NULL DEFAULT 1;\n";
+  }
+});
+
 // src/storage/db.ts
 var db_exports = {};
 __export(db_exports, {
@@ -978,6 +1010,10 @@ var init_db = __esm({
     init_llm_credentials();
     init_drop_topic_recs();
     init_user_long_memory();
+    init_voice_credentials();
+    init_agent_provider_buckets();
+    init_search_credentials();
+    init_room_name_auto();
     MIGRATIONS = [
       { name: "001_init.sql", sql: init_default },
       { name: "002_default_opus.sql", sql: default_opus_default },
@@ -1026,7 +1062,11 @@ var init_db = __esm({
       { name: "045_active_llm_provider_pref.sql", sql: active_llm_provider_pref_default },
       { name: "046_llm_credentials.sql", sql: llm_credentials_default },
       { name: "047_drop_topic_recs.sql", sql: drop_topic_recs_default },
-      { name: "048_user_long_memory.sql", sql: user_long_memory_default }
+      { name: "048_user_long_memory.sql", sql: user_long_memory_default },
+      { name: "049_voice_credentials.sql", sql: voice_credentials_default },
+      { name: "050_agent_provider_buckets.sql", sql: agent_provider_buckets_default },
+      { name: "051_search_credentials.sql", sql: search_credentials_default },
+      { name: "052_room_name_auto.sql", sql: room_name_auto_default }
     ];
     _db = null;
   }
@@ -1177,7 +1217,9 @@ var VALID_CARRIER_PREFS = /* @__PURE__ */ new Set([
   "anthropic",
   "openai",
   "google",
-  "xai"
+  "xai",
+  "moonshot",
+  "zhipu"
 ]);
 function parseCarrierPref(raw) {
   if (!raw) return null;
@@ -1400,6 +1442,54 @@ function parseBuildLog(raw) {
     ...totalTokens !== void 0 ? { totalTokens } : {}
   };
 }
+function parseModelByProvider(raw) {
+  if (!raw) return {};
+  try {
+    const obj = JSON.parse(raw);
+    if (!obj || typeof obj !== "object") return {};
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+      if (VALID_CARRIER_PREFS.has(k) && typeof v === "string" && v.trim().length > 0) {
+        out[k] = v.trim();
+      }
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+function parseVoiceByProvider(raw) {
+  if (!raw) return {};
+  try {
+    const obj = JSON.parse(raw);
+    if (!obj || typeof obj !== "object") return {};
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+      if (k !== "minimax" && k !== "elevenlabs") continue;
+      const profile = parseVoice(JSON.stringify(v));
+      if (profile) out[k] = profile;
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+function serializeModelByProvider(b) {
+  if (!b || Object.keys(b).length === 0) return null;
+  return JSON.stringify(b);
+}
+function serializeVoiceByProvider(b) {
+  if (!b || Object.keys(b).length === 0) return null;
+  const out = {};
+  for (const [k, v] of Object.entries(b)) {
+    if (!v) continue;
+    const json = serializeVoice(v);
+    if (!json) continue;
+    out[k] = JSON.parse(json);
+  }
+  if (Object.keys(out).length === 0) return null;
+  return JSON.stringify(out);
+}
 function serializeVoice(v) {
   if (!v) return null;
   const provider = VALID_VOICE_PROVIDERS.has(v.provider) ? v.provider : null;
@@ -1447,7 +1537,7 @@ function mapRow(row) {
     updatedAt: row.updated_at
   };
 }
-var SELECT_COLS = "id, name, handle, role_tag, role_kind, bio, cover_quote, instruction, model_v, carrier_pref, avatar_path, ability_json, is_pinned, is_seed, web_search_enabled, voice_json, persona_spec_json, created_at, updated_at";
+var SELECT_COLS = "id, name, handle, role_tag, role_kind, bio, cover_quote, instruction, model_v, carrier_pref, avatar_path, ability_json, is_pinned, is_seed, web_search_enabled, voice_json, persona_spec_json, model_by_provider_json, voice_by_provider_json, created_at, updated_at";
 function listAgents() {
   const rows = getDb().prepare(
     `SELECT ${SELECT_COLS} FROM agents
@@ -1756,6 +1846,47 @@ function updateAgent(id, patch) {
   if (r.changes === 0) return null;
   return getAgent(id);
 }
+function getModelBucket(id) {
+  const row = getDb().prepare("SELECT model_by_provider_json FROM agents WHERE id = ?").get(id);
+  if (!row) return {};
+  return parseModelByProvider(row.model_by_provider_json);
+}
+function getVoiceBucket(id) {
+  const row = getDb().prepare("SELECT voice_by_provider_json FROM agents WHERE id = ?").get(id);
+  if (!row) return {};
+  return parseVoiceByProvider(row.voice_by_provider_json);
+}
+function writeModelBucketEntry(id, carrier, modelV) {
+  if (!modelV) return;
+  const bucket = getModelBucket(id);
+  if (bucket[carrier] === modelV) return;
+  bucket[carrier] = modelV;
+  const serialized = serializeModelByProvider(bucket);
+  getDb().prepare("UPDATE agents SET model_by_provider_json = ?, updated_at = ? WHERE id = ?").run(serialized, Date.now(), id);
+}
+function writeVoiceBucketEntry(id, provider, voice) {
+  const normalized = parseVoice(serializeVoice(voice));
+  if (!normalized || normalized.provider !== "minimax" && normalized.provider !== "elevenlabs") return;
+  if (normalized.provider !== provider) return;
+  const bucket = getVoiceBucket(id);
+  bucket[provider] = normalized;
+  const serialized = serializeVoiceByProvider(bucket);
+  getDb().prepare("UPDATE agents SET voice_by_provider_json = ?, updated_at = ? WHERE id = ?").run(serialized, Date.now(), id);
+}
+function deleteModelBucketEntry(id, carrier) {
+  const bucket = getModelBucket(id);
+  if (!(carrier in bucket)) return;
+  delete bucket[carrier];
+  const serialized = serializeModelByProvider(bucket);
+  getDb().prepare("UPDATE agents SET model_by_provider_json = ?, updated_at = ? WHERE id = ?").run(serialized, Date.now(), id);
+}
+function deleteVoiceBucketEntry(id, provider) {
+  const bucket = getVoiceBucket(id);
+  if (!(provider in bucket)) return;
+  delete bucket[provider];
+  const serialized = serializeVoiceByProvider(bucket);
+  getDb().prepare("UPDATE agents SET voice_by_provider_json = ?, updated_at = ? WHERE id = ?").run(serialized, Date.now(), id);
+}
 
 // src/seed/run.ts
 init_db();
@@ -2474,7 +2605,7 @@ function runSeed() {
 // src/server.ts
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
-import { Hono as Hono13 } from "hono";
+import { Hono as Hono15 } from "hono";
 import { existsSync as existsSync2 } from "fs";
 
 // src/routes/agents.ts
@@ -2649,10 +2780,11 @@ var MODELS = {
     deck: "V4 Flash \xB7 fast \xB7 1M ctx",
     viaUniversalOnly: true
   },
-  // ── Zhipu (Z.AI) · GLM family · OR + B.AI only ──
-  // OpenRouter catalog convention: `z-ai/glm-X.Y`. B.AI uses
-  // hyphenated lowercase: `glm-5-1`. No direct @ai-sdk client ·
-  // viaUniversalOnly skips the direct path.
+  // ── Zhipu (Z.AI) · GLM family · direct + OR + B.AI ──
+  // Direct route uses Zhipu's OpenAI-compatible chat-completions API
+  // at https://open.bigmodel.cn/api/paas/v4/ (see adapter.ts
+  // case "zhipu"). OpenRouter catalog convention: `z-ai/glm-X.Y`.
+  // B.AI uses dotted lowercase: `glm-5.1`.
   "glm-5-1": {
     v: "glm-5-1",
     provider: "zhipu",
@@ -2661,16 +2793,16 @@ var MODELS = {
     baiId: "glm-5.1",
     displayName: "GLM 5.1",
     contextBudget: 2e5,
-    deck: "Zhipu flagship \xB7 200k ctx",
-    viaUniversalOnly: true
+    deck: "Zhipu flagship \xB7 200k ctx"
   },
-  // ── Moonshot · Kimi family · OR + B.AI ──
+  // ── Moonshot · Kimi family · direct + OR + B.AI ──
+  // Direct route uses Moonshot's OpenAI-compatible chat-completions
+  // API at https://api.moonshot.cn/v1 (see adapter.ts case "moonshot").
   // OpenRouter catalog convention: `moonshotai/kimi-k2.6` (the leading
   // `k` is part of the slug — `moonshotai/kimi-2.6` 404s). B.AI's
   // siliconflow distributor still ships the older `kimi-k2.5` channel
   // (per 2026-05-17 catalog snapshot), so the B.AI route serves K2.5
-  // until B.AI picks up the newer build. No direct @ai-sdk client ·
-  // viaUniversalOnly skips the direct path.
+  // until B.AI picks up the newer build.
   "kimi-k2-6": {
     v: "kimi-k2-6",
     provider: "moonshot",
@@ -2679,8 +2811,7 @@ var MODELS = {
     baiId: "kimi-k2.5",
     displayName: "Kimi K2.6",
     contextBudget: 256e3,
-    deck: "Moonshot \xB7 long-context",
-    viaUniversalOnly: true
+    deck: "Moonshot \xB7 long-context"
   },
   // ── MiniMax · M-series · OR + B.AI ──
   // No direct @ai-sdk client · viaUniversalOnly skips the direct path.
@@ -2777,7 +2908,11 @@ var PROFILE_SYSTEM = [
   "Constraints:",
   "\xB7 DO NOT use generic personality words. Every entry names a person / case / concept / position.",
   "\xB7 If the user description maps to a real domain (VC, product, security, biotech, monetary policy, etc.), prefer NAMED references from that domain.",
-  "\xB7 Avoid recreating the canonical six (Socrates, First Principles, Long Horizon, etc.) \u2014 pick a distinct angle."
+  "\xB7 Avoid recreating the canonical six (Socrates, First Principles, Long Horizon, etc.) \u2014 pick a distinct angle.",
+  "",
+  "## CRITICAL \xB7 output format",
+  "",
+  "Your ENTIRE response is the JSON object inside ONE ```json fenced block. NO prose before. NO prose after. NO chain-of-thought, NO 'Here is...', NO 'I'll create...'. Use the EXACT field names from the schema above (`intellectualLineage`, `loadBearingConcepts`, `referentSet`, `failureModes`, `contrarianTakes` \u2014 camelCase, not snake_case, not abbreviated). If you cannot produce strong content for a field, emit an empty array `[]` for that field \u2014 DO NOT omit it, DO NOT substitute a different field name, DO NOT explain in prose why it's empty."
 ].join("\n");
 var HOUSE_STYLE = [
   "## Boardroom directors \xB7 house style",
@@ -2898,7 +3033,7 @@ function buildAgentProfileMessages(opts) {
   }
   userBody.push(
     "",
-    "Now produce the profile JSON object as specified."
+    "Now produce the profile JSON object as specified \u2014 ```json fenced block, exact camelCase field names, no prose before or after."
   );
   return [
     { role: "system", content: PROFILE_SYSTEM },
@@ -3039,29 +3174,98 @@ function parseAgentSpec(raw) {
     ability
   };
 }
+function pickArrayField(parsed, aliases) {
+  for (const k of aliases) {
+    const v = parsed[k];
+    if (Array.isArray(v)) return v;
+  }
+  return [];
+}
+function pickObjectField(parsed, aliases) {
+  for (const k of aliases) {
+    const v = parsed[k];
+    if (v && typeof v === "object" && !Array.isArray(v)) return v;
+  }
+  return {};
+}
+function coerceConceptEntry(c) {
+  if (typeof c === "string") {
+    const s = c.trim();
+    const m = /^(.+?)\s*[·:\-—]\s*(.+)$/.exec(s);
+    if (m) return { name: clamp(m[1].trim(), 80), gloss: clamp(m[2].trim(), 200) };
+    return { name: clamp(s, 80), gloss: "" };
+  }
+  if (!c || typeof c !== "object") return { name: "", gloss: "" };
+  const o = c;
+  const name = [o.name, o.concept, o.title, o.handle, o.term].find(
+    (x) => typeof x === "string" && x.trim().length > 0
+  );
+  const gloss = [o.gloss, o.description, o.desc, o.detail, o.explanation, o.summary].find(
+    (x) => typeof x === "string" && x.trim().length > 0
+  );
+  return {
+    name: name ? clamp(name.trim(), 80) : "",
+    gloss: gloss ? clamp(gloss.trim(), 200) : ""
+  };
+}
+function coerceReferentEntry(r) {
+  if (typeof r === "string") {
+    const s = r.trim();
+    const m = /^(.+?)\s*[·:\-—]\s*(.+)$/.exec(s);
+    if (m) return { ref: clamp(m[1].trim(), 80), why: clamp(m[2].trim(), 200) };
+    return { ref: clamp(s, 80), why: "" };
+  }
+  if (!r || typeof r !== "object") return { ref: "", why: "" };
+  const o = r;
+  const ref = [o.ref, o.name, o.reference, o.anchor, o.title, o.case].find(
+    (x) => typeof x === "string" && x.trim().length > 0
+  );
+  const why = [o.why, o.reason, o.relevance, o.gloss, o.description, o.note].find(
+    (x) => typeof x === "string" && x.trim().length > 0
+  );
+  return {
+    ref: ref ? clamp(ref.trim(), 80) : "",
+    why: why ? clamp(why.trim(), 200) : ""
+  };
+}
 function parseAgentProfile(raw) {
   const parsed = extractJson(raw);
   if (!parsed) return null;
-  const lineage = parsed.intellectualLineage && typeof parsed.intellectualLineage === "object" ? parsed.intellectualLineage : {};
-  const influencedByRaw = Array.isArray(lineage.influencedBy) ? lineage.influencedBy : [];
-  const opposedToRaw = Array.isArray(lineage.opposedTo) ? lineage.opposedTo : [];
+  const lineage = pickObjectField(parsed, ["intellectualLineage", "intellectual_lineage", "lineage"]);
+  const influencedByRaw = pickArrayField(lineage, ["influencedBy", "influenced_by", "influences", "influenced"]);
+  const opposedToRaw = pickArrayField(lineage, ["opposedTo", "opposed_to", "opposes", "against"]);
   const influencedBy = influencedByRaw.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => clamp(s.trim(), 200)).slice(0, 5);
   const opposedTo = opposedToRaw.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => clamp(s.trim(), 200)).slice(0, 4);
-  const conceptsRaw = Array.isArray(parsed.loadBearingConcepts) ? parsed.loadBearingConcepts : [];
-  const loadBearingConcepts = conceptsRaw.filter((c) => !!c && typeof c === "object").map((c) => ({
-    name: typeof c.name === "string" ? clamp(c.name.trim(), 80) : "",
-    gloss: typeof c.gloss === "string" ? clamp(c.gloss.trim(), 200) : ""
-  })).filter((c) => c.name.length > 0).slice(0, 6);
-  const referentsRaw = Array.isArray(parsed.referentSet) ? parsed.referentSet : [];
-  const referentSet = referentsRaw.filter((r) => !!r && typeof r === "object").map((r) => ({
-    ref: typeof r.ref === "string" ? clamp(r.ref.trim(), 80) : "",
-    why: typeof r.why === "string" ? clamp(r.why.trim(), 200) : ""
-  })).filter((r) => r.ref.length > 0).slice(0, 6);
-  const failureModesRaw = Array.isArray(parsed.failureModes) ? parsed.failureModes : [];
+  const conceptsRaw = pickArrayField(parsed, [
+    "loadBearingConcepts",
+    "load_bearing_concepts",
+    "concepts",
+    "frames",
+    "mentalTools",
+    "mental_tools"
+  ]);
+  const loadBearingConcepts = conceptsRaw.map(coerceConceptEntry).filter((c) => c.name.length > 0).slice(0, 6);
+  const referentsRaw = pickArrayField(parsed, [
+    "referentSet",
+    "referent_set",
+    "referents",
+    "anchors",
+    "references",
+    "citations"
+  ]);
+  const referentSet = referentsRaw.map(coerceReferentEntry).filter((r) => r.ref.length > 0).slice(0, 6);
+  const failureModesRaw = pickArrayField(parsed, ["failureModes", "failure_modes", "blindSpots", "blind_spots"]);
   const failureModes = failureModesRaw.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => clamp(s.trim(), 220)).slice(0, 4);
-  const contrarianTakesRaw = Array.isArray(parsed.contrarianTakes) ? parsed.contrarianTakes : [];
+  const contrarianTakesRaw = pickArrayField(parsed, [
+    "contrarianTakes",
+    "contrarian_takes",
+    "contrarianViews",
+    "contrarian_views",
+    "takes"
+  ]);
   const contrarianTakes = contrarianTakesRaw.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => clamp(s.trim(), 220)).slice(0, 4);
-  if (loadBearingConcepts.length === 0 && referentSet.length === 0) return null;
+  const anyPopulated = loadBearingConcepts.length > 0 || referentSet.length > 0 || influencedBy.length > 0 || opposedTo.length > 0 || failureModes.length > 0 || contrarianTakes.length > 0;
+  if (!anyPopulated) return null;
   return {
     intellectualLineage: { influencedBy, opposedTo },
     loadBearingConcepts,
@@ -3551,8 +3755,7 @@ import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
 import { APICallError, streamText } from "ai";
 
 // src/storage/credentials.ts
-import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto";
-import { userInfo } from "os";
+import { randomBytes as randomBytes2 } from "crypto";
 
 // src/ai/providers.ts
 var MULTI_MODEL_LLM_PROVIDERS = [
@@ -3563,7 +3766,9 @@ var SINGLE_MODEL_LLM_PROVIDERS = [
   "anthropic",
   "openai",
   "google",
-  "xai"
+  "xai",
+  "moonshot",
+  "zhipu"
 ];
 var ALL_LLM_PROVIDERS = [
   ...MULTI_MODEL_LLM_PROVIDERS,
@@ -3575,7 +3780,9 @@ var LLM_PROVIDER_PRIORITY = [
   "anthropic",
   "openai",
   "google",
-  "xai"
+  "xai",
+  "moonshot",
+  "zhipu"
 ];
 function isMultiModelProvider(p) {
   return p === "openrouter" || p === "bai";
@@ -3586,6 +3793,10 @@ function isLlmProvider(p) {
 
 // src/storage/credentials.ts
 init_db();
+
+// src/storage/credential-crypto.ts
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto";
+import { userInfo } from "os";
 var SALT = "boardroom.v1.salt";
 var ALGO = "aes-256-gcm";
 var _key = null;
@@ -3595,14 +3806,14 @@ function deriveKey() {
   _key = scryptSync(username, SALT, 32);
   return _key;
 }
-function encrypt(plain) {
+function encryptCredential(plain) {
   const iv = randomBytes(12);
   const cipher = createCipheriv(ALGO, deriveKey(), iv);
   const ct = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
   const tag = cipher.getAuthTag();
   return Buffer.concat([iv, tag, ct]);
 }
-function decrypt(blob) {
+function decryptCredential(blob) {
   const iv = blob.subarray(0, 12);
   const tag = blob.subarray(12, 28);
   const ct = blob.subarray(28);
@@ -3610,7 +3821,7 @@ function decrypt(blob) {
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(ct), decipher.final()]).toString("utf8");
 }
-function maskKey(plain) {
+function maskCredential(plain) {
   const trimmed = plain.trim();
   if (!trimmed) return "";
   const n = trimmed.length;
@@ -3618,11 +3829,13 @@ function maskKey(plain) {
   if (n <= 12) return `${trimmed.slice(0, 2)}${"\u2022".repeat(n - 4)}${trimmed.slice(-2)}`;
   return `${trimmed.slice(0, 4)}${"\u2022".repeat(n - 8)}${trimmed.slice(-4)}`;
 }
+
+// src/storage/credentials.ts
 function rowToMeta(row) {
   if (!isLlmProvider(row.provider)) return null;
   let preview = "";
   try {
-    preview = maskKey(decrypt(row.key_blob));
+    preview = maskCredential(decryptCredential(row.key_blob));
   } catch {
     preview = "";
   }
@@ -3648,7 +3861,7 @@ function getLlmCredentialKey(id) {
   const row = getDb().prepare("SELECT key_blob FROM llm_credentials WHERE id = ?").get(id);
   if (!row) return null;
   try {
-    return decrypt(row.key_blob);
+    return decryptCredential(row.key_blob);
   } catch {
     return null;
   }
@@ -3679,6 +3892,15 @@ function providerDisplayName(provider) {
       return "Gemini";
     case "xai":
       return "Grok";
+    // Brand-name labels for the two newest direct providers · "Kimi"
+    // (model brand) over "Moonshot" (company), "GLM" (model family)
+    // over "Zhipu" (company) · same convention as "Claude"/anthropic
+    // and "ChatGPT"/openai · the user-facing UI prefers the product
+    // name over the corporate slug.
+    case "moonshot":
+      return "Kimi";
+    case "zhipu":
+      return "GLM";
   }
 }
 function createLlmCredential(provider, label, plain) {
@@ -3686,8 +3908,8 @@ function createLlmCredential(provider, label, plain) {
   if (!trimmed) return null;
   if (!ALL_LLM_PROVIDERS.includes(provider)) return null;
   const resolvedLabel = resolveFreeLabel(provider, label);
-  const id = randomBytes(8).toString("hex");
-  const blob = encrypt(trimmed);
+  const id = randomBytes2(8).toString("hex");
+  const blob = encryptCredential(trimmed);
   const now = Date.now();
   getDb().prepare(
     `INSERT INTO llm_credentials (id, provider, label, key_blob, created_at, updated_at)
@@ -3721,6 +3943,8 @@ function mapRow3(row) {
     minimaxRegion: normalizeMinimaxRegion(row.minimax_region),
     activeLlmProvider: raw && isLlmProvider(raw) ? raw : null,
     activeLlmCredentialId: row.active_llm_credential_id,
+    activeVoiceCredentialId: row.active_voice_credential_id,
+    activeSearchCredentialId: row.active_search_credential_id,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
@@ -3732,6 +3956,8 @@ function getPrefs() {
               COALESCE(minimax_region, 'cn') AS minimax_region,
               active_llm_provider,
               active_llm_credential_id,
+              active_voice_credential_id,
+              active_search_credential_id,
               created_at, updated_at FROM prefs WHERE id = 1`
   ).get();
   if (!row) {
@@ -3774,6 +4000,14 @@ function updatePrefs(patch) {
     fields.push("active_llm_credential_id = ?");
     values.push(patch.activeLlmCredentialId);
   }
+  if (patch.activeVoiceCredentialId !== void 0) {
+    fields.push("active_voice_credential_id = ?");
+    values.push(patch.activeVoiceCredentialId);
+  }
+  if (patch.activeSearchCredentialId !== void 0) {
+    fields.push("active_search_credential_id = ?");
+    values.push(patch.activeSearchCredentialId);
+  }
   if (fields.length === 0) return getPrefs();
   fields.push("updated_at = ?");
   values.push(Date.now());
@@ -3983,6 +4217,30 @@ function directResolved(meta, apiKey) {
         carrier: "xai"
       };
     }
+    case "moonshot": {
+      const compat = createOpenAICompatible({
+        name: "moonshot",
+        apiKey,
+        baseURL: "https://api.moonshot.cn/v1",
+        fetch: makeLoggedFetch("moonshot")
+      });
+      return {
+        model: compat.chatModel(meta.directApiId),
+        carrier: "moonshot"
+      };
+    }
+    case "zhipu": {
+      const compat = createOpenAICompatible({
+        name: "zhipu",
+        apiKey,
+        baseURL: "https://open.bigmodel.cn/api/paas/v4/",
+        fetch: makeLoggedFetch("zhipu")
+      });
+      return {
+        model: compat.chatModel(meta.directApiId),
+        carrier: "zhipu"
+      };
+    }
     default:
       throw new NoKeyError(meta.provider);
   }
@@ -4185,6 +4443,7 @@ async function callLLM(req) {
 async function callLLMWithUsage(req) {
   let buf = "";
   let usage = null;
+  let finishReason = null;
   for await (const chunk of callLLMStream(req)) {
     if (chunk.type === "text") buf += chunk.delta;
     else if (chunk.type === "error") throw new Error(chunk.message);
@@ -4194,15 +4453,118 @@ async function callLLMWithUsage(req) {
         completionTokens: chunk.completionTokens,
         totalTokens: chunk.totalTokens
       };
+    } else if (chunk.type === "done") {
+      if (typeof chunk.finishReason === "string" && chunk.finishReason.length > 0) {
+        finishReason = chunk.finishReason;
+      }
     }
   }
-  return { text: buf, usage };
+  return { text: buf, usage, finishReason };
 }
 
 // src/storage/keys.ts
 init_db();
-import { createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2, randomBytes as randomBytes2, scryptSync as scryptSync2 } from "crypto";
+import { createCipheriv as createCipheriv2, createDecipheriv as createDecipheriv2, randomBytes as randomBytes4, scryptSync as scryptSync2 } from "crypto";
 import { userInfo as userInfo2 } from "os";
+
+// src/storage/search-credentials.ts
+import { randomBytes as randomBytes3 } from "crypto";
+init_db();
+var ALL_SEARCH_PROVIDERS = ["brave", "tavily"];
+function isSearchProvider(p) {
+  return ALL_SEARCH_PROVIDERS.includes(p);
+}
+var SEARCH_PROVIDER_PRIORITY = ["brave", "tavily"];
+function rowToMeta2(row) {
+  if (!isSearchProvider(row.provider)) return null;
+  let preview = "";
+  try {
+    preview = maskCredential(decryptCredential(row.key_blob));
+  } catch {
+    preview = "";
+  }
+  return {
+    id: row.id,
+    provider: row.provider,
+    label: row.label,
+    preview,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function listSearchCredentials() {
+  const rows = getDb().prepare("SELECT id, provider, label, key_blob, created_at, updated_at FROM search_credentials ORDER BY created_at ASC").all();
+  return rows.map(rowToMeta2).filter((m) => m !== null);
+}
+function getSearchCredentialMeta(id) {
+  const row = getDb().prepare("SELECT id, provider, label, key_blob, created_at, updated_at FROM search_credentials WHERE id = ?").get(id);
+  if (!row) return null;
+  return rowToMeta2(row);
+}
+function getSearchCredentialKey(id) {
+  const row = getDb().prepare("SELECT key_blob FROM search_credentials WHERE id = ?").get(id);
+  if (!row) return null;
+  try {
+    return decryptCredential(row.key_blob);
+  } catch {
+    return null;
+  }
+}
+function providerDisplayName2(provider) {
+  switch (provider) {
+    case "brave":
+      return "Brave Search";
+    case "tavily":
+      return "Tavily Search";
+  }
+}
+function resolveFreeLabel2(provider, suggested) {
+  const base = suggested && suggested.trim() || providerDisplayName2(provider);
+  const existing = new Set(
+    getDb().prepare("SELECT label FROM search_credentials").all().map((r) => r.label)
+  );
+  if (!existing.has(base)) return base;
+  for (let n = 2; n < 1e3; n++) {
+    const candidate = `${base} ${n}`;
+    if (!existing.has(candidate)) return candidate;
+  }
+  return `${base} ${Date.now()}`;
+}
+function createSearchCredential(provider, label, plain) {
+  const trimmed = plain.trim();
+  if (!trimmed) return null;
+  if (!isSearchProvider(provider)) return null;
+  const resolvedLabel = resolveFreeLabel2(provider, label);
+  const id = randomBytes3(8).toString("hex");
+  const blob = encryptCredential(trimmed);
+  const now = Date.now();
+  getDb().prepare(
+    `INSERT INTO search_credentials (id, provider, label, key_blob, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)`
+  ).run(id, provider, resolvedLabel, blob, now, now);
+  return getSearchCredentialMeta(id);
+}
+function deleteSearchCredential(id) {
+  const meta = getSearchCredentialMeta(id);
+  if (!meta) return null;
+  getDb().prepare("DELETE FROM search_credentials WHERE id = ?").run(id);
+  return meta.provider;
+}
+function resolveActiveSearchCredential() {
+  const prefs = getPrefs();
+  if (!prefs.activeSearchCredentialId) return null;
+  return getSearchCredentialMeta(prefs.activeSearchCredentialId);
+}
+function getActiveSearchProvider() {
+  return resolveActiveSearchCredential()?.provider ?? null;
+}
+function getActiveSearchKeyPlaintext() {
+  const active = resolveActiveSearchCredential();
+  if (!active) return null;
+  return getSearchCredentialKey(active.id);
+}
+
+// src/storage/keys.ts
 var SALT2 = "boardroom.v1.salt";
 var ALGO2 = "aes-256-gcm";
 var _key2 = null;
@@ -4212,14 +4574,14 @@ function deriveKey2() {
   _key2 = scryptSync2(username, SALT2, 32);
   return _key2;
 }
-function encrypt2(plain) {
-  const iv = randomBytes2(12);
+function encrypt(plain) {
+  const iv = randomBytes4(12);
   const cipher = createCipheriv2(ALGO2, deriveKey2(), iv);
   const ct = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
   const tag = cipher.getAuthTag();
   return Buffer.concat([iv, tag, ct]);
 }
-function decrypt2(blob) {
+function decrypt(blob) {
   const iv = blob.subarray(0, 12);
   const tag = blob.subarray(12, 28);
   const ct = blob.subarray(28);
@@ -4227,36 +4589,16 @@ function decrypt2(blob) {
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(ct), decipher.final()]).toString("utf8");
 }
-function hasBraveKey() {
-  const k = getKey("brave");
-  return typeof k === "string" && k.length > 0;
-}
-function hasTavilyKey() {
-  const k = getKey("tavily");
-  return typeof k === "string" && k.length > 0;
-}
 function hasWebSearchKey() {
-  return hasBraveKey() || hasTavilyKey();
-}
-function resolveWebSearchBackend(preference) {
-  const b = hasBraveKey();
-  const t = hasTavilyKey();
-  if (!b && !t) return null;
-  if (b && !t) return "brave";
-  if (!b && t) return "tavily";
-  if (preference === "tavily" && t) return "tavily";
-  if (preference === "brave" && b) return "brave";
-  return b ? "brave" : "tavily";
+  return getActiveSearchProvider() !== null;
 }
 function getActiveWebSearchCredentials() {
-  const prefRaw = getPrefs().webSearchProvider;
-  const preference = prefRaw === "tavily" ? "tavily" : "brave";
-  const backend = resolveWebSearchBackend(preference);
+  const backend = getActiveSearchProvider();
   if (!backend) return null;
-  const apiKey = getKey(backend);
+  const apiKey = getActiveSearchKeyPlaintext();
   return apiKey ? { backend, apiKey } : null;
 }
-function maskKey2(plain) {
+function maskKey(plain) {
   const trimmed = plain.trim();
   if (!trimmed) return "";
   const n = trimmed.length;
@@ -4273,7 +4615,7 @@ function listKeyMeta() {
     let preview = null;
     if (r.key_blob.length > 0) {
       try {
-        preview = maskKey2(decrypt2(r.key_blob));
+        preview = maskKey(decrypt(r.key_blob));
       } catch {
         preview = null;
       }
@@ -4291,7 +4633,7 @@ function getKey(provider) {
   const row = getDb().prepare("SELECT key_blob FROM provider_keys WHERE provider = ?").get(provider);
   if (!row) return null;
   try {
-    return decrypt2(row.key_blob);
+    return decrypt(row.key_blob);
   } catch {
     return null;
   }
@@ -4302,7 +4644,7 @@ function setKey(provider, plain) {
     deleteKey(provider);
     return;
   }
-  const blob = encrypt2(trimmed);
+  const blob = encrypt(trimmed);
   const now = Date.now();
   getDb().prepare(
     `INSERT INTO provider_keys (provider, key_blob, created_at, updated_at)
@@ -4320,8 +4662,10 @@ var PRIMARY_BY_CARRIER = {
   bai: "haiku-4-5",
   anthropic: "haiku-4-5",
   openai: "gpt-5-4-mini",
-  google: "gemini-3-1-flash"
+  google: "gemini-3-1-flash",
   // xai · no primary (no LLM modelV in registry as of 2026-05-17).
+  moonshot: "kimi-k2-6",
+  zhipu: "glm-5-1"
 };
 function reachableModelVs() {
   const out = /* @__PURE__ */ new Set();
@@ -4346,6 +4690,7 @@ function reconcileAgentModels(opts = {}) {
   const carrier = activeCarrier();
   const primary = carrier ? PRIMARY_BY_CARRIER[carrier] ?? null : null;
   const forcePrimary = opts.forcePrimary === true;
+  const priorCarrier = opts.priorCarrier ?? null;
   const switched = [];
   const cleared = [];
   for (const agent of listAllAgents()) {
@@ -4353,12 +4698,29 @@ function reconcileAgentModels(opts = {}) {
     if (agent.carrierPref) {
       updateAgent(agent.id, { carrierPref: null });
     }
+    if (priorCarrier && v && priorCarrier !== carrier) {
+      writeModelBucketEntry(agent.id, priorCarrier, v);
+    }
     if (!forcePrimary && v && reachable.has(v)) continue;
     if (primary && carrier) {
+      const bucket = getModelBucket(agent.id);
+      const memorised = bucket[carrier];
       const isChair = agent.roleKind === "moderator";
-      const target = isChair ? primary : pickRandomFastModel(carrier) ?? primary;
-      if (v === target) continue;
+      let target;
+      if (memorised && reachable.has(memorised)) {
+        target = memorised;
+      } else {
+        if (memorised) deleteModelBucketEntry(agent.id, carrier);
+        target = isChair ? primary : pickRandomFastModel(carrier) ?? primary;
+      }
+      if (v === target) {
+        if (bucket[carrier] !== target) {
+          writeModelBucketEntry(agent.id, carrier, target);
+        }
+        continue;
+      }
       updateAgent(agent.id, { modelV: target });
+      writeModelBucketEntry(agent.id, carrier, target);
       switched.push(agent.id);
     } else {
       if (v === "") continue;
@@ -4489,8 +4851,15 @@ var FAST_POOL_BY_CARRIER = {
   ],
   anthropic: ["opus-4-6-fast", "haiku-4-5"],
   openai: ["gpt-5-4-mini"],
-  google: ["gemini-3-flash", "gemini-3-1-flash"]
+  google: ["gemini-3-flash", "gemini-3-1-flash"],
   // xai · no fast pool (no LLM modelV in registry).
+  // Moonshot / Zhipu · single-entry pools because the registry only
+  // carries one LLM modelV per provider today. Every director on this
+  // carrier ends up on the same model (no brand variety), which is fine
+  // for these single-model providers · adding more Kimi / GLM rows
+  // to the registry would naturally extend the pool.
+  moonshot: ["kimi-k2-6"],
+  zhipu: ["glm-5-1"]
 };
 function pickRandomFastModel(carrier) {
   if (!carrier) return null;
@@ -5152,6 +5521,10 @@ function flagshipCandidates() {
   return out;
 }
 async function callPhaseLLM(state, modelV, messages, opts) {
+  const r = await callPhaseLLMVerbose(state, modelV, messages, opts);
+  return r ? r.text : null;
+}
+async function callPhaseLLMVerbose(state, modelV, messages, opts) {
   if (!isModelV(modelV)) return null;
   const t = signalWithTimeout(state.controller.signal, LLM_CALL_TIMEOUT_MS);
   try {
@@ -5169,7 +5542,7 @@ async function callPhaseLLM(state, modelV, messages, opts) {
         return null;
       }
     }
-    return r.text;
+    return { text: r.text, finishReason: r.finishReason };
   } catch (e) {
     process.stderr.write(`[persona-builder] ${modelV} failed: ${e instanceof Error ? e.message : String(e)}
 `);
@@ -5347,7 +5720,9 @@ async function runPipeline(state) {
     if (!profileV1) {
       const status = checkAbortOrCap();
       if (status === "aborted") return finalizeAbort(state);
-      return fail("Phase 1 (persona spec) failed \xB7 no flagship model produced a parseable profile.");
+      const candidatesTried = flagshipCandidates();
+      const hint = candidatesTried.length === 0 ? "no flagship model is reachable with your current API key \xB7 open Preferences \u25B8 API Key and add a provider that exposes Claude / GPT / Gemini / Kimi / GLM" : `${candidatesTried.length === 1 ? "the only reachable model" : "all reachable flagship models"} (${candidatesTried.join(", ")}) returned an unparseable profile \u2014 try again, or switch to a stronger model via Preferences \u25B8 API Key`;
+      return fail(`Phase 1 (persona spec) failed \xB7 ${hint}.`);
     }
     partial.profileV1 = profileV1;
     partial.spec = toCore(profileV1);
@@ -5499,17 +5874,58 @@ function finalizeFromCheck(state, status) {
 }
 async function runProfilePass(state, label, webContext) {
   const messages = buildAgentProfileMessages({ description: state.description, webContext: webContext ?? null });
-  for (const modelV of flagshipCandidates()) {
+  const candidates = flagshipCandidates();
+  if (candidates.length === 0) {
+    process.stderr.write(`[persona-builder/${label}] no reachable models for the active credential \xB7 cannot build profile
+`);
+    return null;
+  }
+  const PROFILE_ATTEMPTS_PER_MODEL = 2;
+  const PROFILE_MAX_TOKENS_BASE = 4096;
+  const PROFILE_MAX_TOKENS_ESCALATED = 6500;
+  for (const modelV of candidates) {
     if (state.controller.signal.aborted) return null;
-    const raw = await callPhaseLLM(state, modelV, messages, { temperature: 0.6, maxTokens: 2400 });
-    if (!raw) continue;
-    const parsed = parseAgentProfile(raw);
-    if (parsed) return parsed;
-    process.stderr.write(`[persona-builder/${label}] ${modelV} returned unparseable profile
+    let truncatedLastAttempt = false;
+    for (let attempt = 1; attempt <= PROFILE_ATTEMPTS_PER_MODEL; attempt++) {
+      if (state.controller.signal.aborted) return null;
+      const temperature = attempt === 1 ? 0.6 : 0.8;
+      const maxTokens = truncatedLastAttempt ? PROFILE_MAX_TOKENS_ESCALATED : PROFILE_MAX_TOKENS_BASE;
+      const result = await callPhaseLLMVerbose(state, modelV, messages, { temperature, maxTokens });
+      if (!result || !result.text) {
+        process.stderr.write(`[persona-builder/${label}] ${modelV} attempt ${attempt}/${PROFILE_ATTEMPTS_PER_MODEL} returned no text
 `);
+        truncatedLastAttempt = false;
+        continue;
+      }
+      const raw = result.text;
+      const parsed = parseAgentProfile(raw);
+      if (parsed) return parsed;
+      const truncated = result.finishReason === "length" || looksTruncated(raw);
+      truncatedLastAttempt = truncated;
+      const head = raw.slice(0, 200).replace(/\s+/g, " ");
+      const tail = raw.length > 200 ? raw.slice(-160).replace(/\s+/g, " ") : "";
+      process.stderr.write(
+        `[persona-builder/${label}] ${modelV} attempt ${attempt}/${PROFILE_ATTEMPTS_PER_MODEL} returned unparseable profile \xB7 len=${raw.length} finish=${result.finishReason ?? "n/a"} maxTokens=${maxTokens}${truncated ? " TRUNCATED" : ""} \xB7 head: ${head}${tail ? ` \u2026 tail: ${tail}` : ""}
+`
+      );
+    }
   }
   return null;
 }
+function looksTruncated(raw) {
+  if (!raw) return false;
+  const fenceMatch = /```(?:json)?\s*([\s\S]*)$/i.exec(raw);
+  const body = fenceMatch ? fenceMatch[1] : raw;
+  if (!body) return false;
+  const start = body.indexOf("{");
+  if (start === -1) return false;
+  let depth = 0;
+  for (let i = start; i < body.length; i++) {
+    if (body[i] === "{") depth++;
+    else if (body[i] === "}") depth--;
+  }
+  return depth > 0;
+}
 async function runReActLoop(state, profileV1, reportProgress) {
   const creds = getActiveWebSearchCredentials();
   if (!creds) {
@@ -6155,12 +6571,12 @@ async function generateCelebritySeed(opts) {
 init_db();
 
 // src/utils/id.ts
-import { randomBytes as randomBytes3 } from "crypto";
+import { randomBytes as randomBytes5 } from "crypto";
 var ALPHABET = "0123456789abcdefghjkmnpqrstvwxyz";
 var ALPHABET_LEN = ALPHABET.length;
 var MASK = (1 << 5) - 1;
 function newId(len = 12) {
-  const bytes = randomBytes3(len);
+  const bytes = randomBytes5(len);
   let out = "";
   for (let i = 0; i < len; i++) {
     out += ALPHABET[bytes[i] & MASK];
@@ -8109,7 +8525,14 @@ function agentsRouter() {
             modelV,
             messages: profileMessages,
             temperature: 0.6,
-            maxTokens: 1600,
+            // Bumped from 1600 → 4096 · the profile JSON plus any
+            // chain-of-thought / reasoning preamble on Kimi / GLM /
+            // DeepSeek-R lines easily overran the smaller ceiling on
+            // OpenRouter routes, which surface truncation as
+            // "unparseable JSON" (the closing `}` is missing). Quick
+            // mode is single-shot — no retry — so the ceiling has to
+            // be generous up front.
+            maxTokens: 4096,
             signal
           });
           const parsed = parseAgentProfile(raw);
@@ -8117,6 +8540,8 @@ function agentsRouter() {
             profile = parsed;
             break;
           }
+          process.stderr.write(`[agent-spec/profile] ${modelV} returned unparseable profile \xB7 len=${raw.length} head: ${raw.slice(0, 200).replace(/\s+/g, " ")}
+`);
         } catch (e) {
           process.stderr.write(`[agent-spec/profile] ${modelV} failed: ${e instanceof Error ? e.message : String(e)}
 `);
@@ -8490,7 +8915,7 @@ function agentsRouter() {
         patch.carrierPref = null;
       } else if (typeof b.carrierPref === "string") {
         const v = b.carrierPref.trim();
-        const allowed = /* @__PURE__ */ new Set(["openrouter", "bai", "anthropic", "openai", "google", "xai"]);
+        const allowed = /* @__PURE__ */ new Set(["openrouter", "bai", "anthropic", "openai", "google", "xai", "moonshot", "zhipu"]);
         if (!allowed.has(v)) {
           return c.json({ error: `unknown carrier: ${v}` }, 400);
         }
@@ -8542,6 +8967,42 @@ function agentsRouter() {
       patch.isPinned = b.isPinned;
     }
     const updated = updateAgent(id, patch);
+    if (updated) {
+      if (patch.modelV !== void 0) {
+        const carrier = activeCarrier();
+        if (carrier) {
+          try {
+            writeModelBucketEntry(id, carrier, patch.modelV);
+          } catch (e) {
+            process.stderr.write(
+              `[agents.patch] model bucket write failed for ${id}: ${e instanceof Error ? e.message : String(e)}
+`
+            );
+          }
+        }
+      }
+      if ("voice" in patch) {
+        if (patch.voice && updated.voice && (updated.voice.provider === "minimax" || updated.voice.provider === "elevenlabs")) {
+          try {
+            writeVoiceBucketEntry(id, updated.voice.provider, updated.voice);
+          } catch (e) {
+            process.stderr.write(
+              `[agents.patch] voice bucket write failed for ${id}: ${e instanceof Error ? e.message : String(e)}
+`
+            );
+          }
+        } else if (!patch.voice && existing.voice && (existing.voice.provider === "minimax" || existing.voice.provider === "elevenlabs")) {
+          try {
+            deleteVoiceBucketEntry(id, existing.voice.provider);
+          } catch (e) {
+            process.stderr.write(
+              `[agents.patch] voice bucket delete failed for ${id}: ${e instanceof Error ? e.message : String(e)}
+`
+            );
+          }
+        }
+      }
+    }
     return c.json(updated);
   });
   r.delete("/:id", (c) => {
@@ -13700,7 +14161,7 @@ function cleanupOrphanedStreams(opts = {}) {
 
 // src/storage/rooms.ts
 init_db();
-var ROOM_COLS = "id, number, name, subject, mode, intensity, delivery_mode, vote_trigger, status, brief_style, awaiting_continue, awaiting_clarify, created_at, paused_at, adjourned_at, incognito, parent_room_id, parent_brief_id";
+var ROOM_COLS = "id, number, name, subject, mode, intensity, delivery_mode, vote_trigger, status, brief_style, awaiting_continue, awaiting_clarify, created_at, paused_at, adjourned_at, incognito, parent_room_id, parent_brief_id, name_auto";
 function mapRow8(row) {
   return {
     id: row.id,
@@ -13720,7 +14181,8 @@ function mapRow8(row) {
     adjournedAt: row.adjourned_at,
     incognito: row.incognito === 1,
     parentRoomId: row.parent_room_id,
-    parentBriefId: row.parent_brief_id
+    parentBriefId: row.parent_brief_id,
+    nameAuto: row.name_auto === 1
   };
 }
 function mapMember(row) {
@@ -13784,7 +14246,7 @@ function createRoom(input) {
   const briefStyle = input.briefStyle ?? "auto";
   const deliveryMode = input.deliveryMode === "voice" ? "voice" : "text";
   const insertRoom = db.prepare(
-    "INSERT INTO rooms (id, number, name, subject, mode, intensity, delivery_mode, brief_style, status, created_at, parent_room_id, parent_brief_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'live', ?, ?, ?)"
+    "INSERT INTO rooms (id, number, name, subject, mode, intensity, delivery_mode, brief_style, status, created_at, parent_room_id, parent_brief_id, name_auto) VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'live', ?, ?, ?, ?)"
   );
   const insertMember = db.prepare(
     "INSERT INTO room_members (room_id, agent_id, position, joined_at) VALUES (?, ?, ?, ?)"
@@ -13792,8 +14254,9 @@ function createRoom(input) {
   const chair = getChairAgent();
   const parentRoomId = input.parentRoomId && input.parentRoomId.trim() ? input.parentRoomId.trim() : null;
   const parentBriefId = input.parentBriefId && input.parentBriefId.trim() ? input.parentBriefId.trim() : null;
+  const nameAuto = input.nameAuto === false ? 0 : 1;
   const tx = db.transaction(() => {
-    insertRoom.run(id, number, input.name, input.subject, mode, intensity, deliveryMode, briefStyle, now, parentRoomId, parentBriefId);
+    insertRoom.run(id, number, input.name, input.subject, mode, intensity, deliveryMode, briefStyle, now, parentRoomId, parentBriefId, nameAuto);
     if (chair) insertMember.run(id, chair.id, -1, now);
     input.agentIds.forEach((agentId, idx) => {
       if (chair && agentId === chair.id) return;
@@ -13820,6 +14283,12 @@ function setRoomStatus(roomId, status, ts = {}) {
   vals.push(roomId);
   getDb().prepare(`UPDATE rooms SET ${sets.join(", ")} WHERE id = ?`).run(...vals);
 }
+function setRoomNameFromAuto(roomId, name) {
+  const trimmed = name.trim();
+  if (!trimmed) return false;
+  const r = getDb().prepare("UPDATE rooms SET name = ? WHERE id = ? AND name_auto = 1").run(trimmed, roomId);
+  return r.changes > 0;
+}
 function addRoomMember(roomId, agentId) {
   const db = getDb();
   const existing = db.prepare("SELECT agent_id, position, joined_at, removed_at FROM room_members WHERE room_id = ? AND agent_id = ?").get(roomId, agentId);
@@ -14339,6 +14808,103 @@ import { Buffer as Buffer2 } from "buffer";
 init_db();
 import { createHash } from "crypto";
 
+// src/storage/voice-credentials.ts
+import { randomBytes as randomBytes6 } from "crypto";
+init_db();
+var ALL_VOICE_PROVIDERS = ["minimax", "elevenlabs"];
+function isVoiceProvider(p) {
+  return ALL_VOICE_PROVIDERS.includes(p);
+}
+var VOICE_PROVIDER_PRIORITY = ["minimax", "elevenlabs"];
+function rowToMeta3(row) {
+  if (!isVoiceProvider(row.provider)) return null;
+  let preview = "";
+  try {
+    preview = maskCredential(decryptCredential(row.key_blob));
+  } catch {
+    preview = "";
+  }
+  return {
+    id: row.id,
+    provider: row.provider,
+    label: row.label,
+    preview,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function listVoiceCredentials() {
+  const rows = getDb().prepare("SELECT id, provider, label, key_blob, created_at, updated_at FROM voice_credentials ORDER BY created_at ASC").all();
+  return rows.map(rowToMeta3).filter((m) => m !== null);
+}
+function getVoiceCredentialMeta(id) {
+  const row = getDb().prepare("SELECT id, provider, label, key_blob, created_at, updated_at FROM voice_credentials WHERE id = ?").get(id);
+  if (!row) return null;
+  return rowToMeta3(row);
+}
+function getVoiceCredentialKey(id) {
+  const row = getDb().prepare("SELECT key_blob FROM voice_credentials WHERE id = ?").get(id);
+  if (!row) return null;
+  try {
+    return decryptCredential(row.key_blob);
+  } catch {
+    return null;
+  }
+}
+function providerDisplayName3(provider) {
+  switch (provider) {
+    case "minimax":
+      return "MiniMax";
+    case "elevenlabs":
+      return "ElevenLabs";
+  }
+}
+function resolveFreeLabel3(provider, suggested) {
+  const base = suggested && suggested.trim() || providerDisplayName3(provider);
+  const existing = new Set(
+    getDb().prepare("SELECT label FROM voice_credentials").all().map((r) => r.label)
+  );
+  if (!existing.has(base)) return base;
+  for (let n = 2; n < 1e3; n++) {
+    const candidate = `${base} ${n}`;
+    if (!existing.has(candidate)) return candidate;
+  }
+  return `${base} ${Date.now()}`;
+}
+function createVoiceCredential(provider, label, plain) {
+  const trimmed = plain.trim();
+  if (!trimmed) return null;
+  if (!isVoiceProvider(provider)) return null;
+  const resolvedLabel = resolveFreeLabel3(provider, label);
+  const id = randomBytes6(8).toString("hex");
+  const blob = encryptCredential(trimmed);
+  const now = Date.now();
+  getDb().prepare(
+    `INSERT INTO voice_credentials (id, provider, label, key_blob, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)`
+  ).run(id, provider, resolvedLabel, blob, now, now);
+  return getVoiceCredentialMeta(id);
+}
+function deleteVoiceCredential(id) {
+  const meta = getVoiceCredentialMeta(id);
+  if (!meta) return null;
+  getDb().prepare("DELETE FROM voice_credentials WHERE id = ?").run(id);
+  return meta.provider;
+}
+function resolveActiveVoiceCredential() {
+  const prefs = getPrefs();
+  if (!prefs.activeVoiceCredentialId) return null;
+  return getVoiceCredentialMeta(prefs.activeVoiceCredentialId);
+}
+function getActiveVoiceProvider() {
+  return resolveActiveVoiceCredential()?.provider ?? null;
+}
+function getActiveVoiceKeyPlaintext() {
+  const active = resolveActiveVoiceCredential();
+  if (!active) return null;
+  return getVoiceCredentialKey(active.id);
+}
+
 // src/voice/registry.ts
 function minimaxBaseUrl() {
   const region = getPrefs().minimaxRegion;
@@ -14383,10 +14949,12 @@ function listConfiguredVoices() {
   const out = [];
   const openaiReady = !!getKey("openai");
   if (openaiReady) out.push(...OPENAI_VOICES.map((v) => ({ ...v, configured: true })));
-  const minimaxReady = !!getKey("minimax");
-  if (minimaxReady) out.push(...MINIMAX_SYSTEM_VOICES.map((v) => ({ ...v, configured: true })));
-  const elevenReady = !!getKey("elevenlabs");
-  if (elevenReady) out.push(...ELEVENLABS_DEFAULT_VOICES.map((v) => ({ ...v, configured: true })));
+  const activeProvider = getActiveVoiceProvider();
+  if (activeProvider === "minimax") {
+    out.push(...MINIMAX_SYSTEM_VOICES.map((v) => ({ ...v, configured: true })));
+  } else if (activeProvider === "elevenlabs") {
+    out.push(...ELEVENLABS_DEFAULT_VOICES.map((v) => ({ ...v, configured: true })));
+  }
   out.push({
     provider: "browser",
     model: "speechSynthesis",
@@ -14397,14 +14965,21 @@ function listConfiguredVoices() {
   return out;
 }
 async function listAvailableVoices() {
+  const activeProvider = getActiveVoiceProvider();
   let voices = listConfiguredVoices();
-  const mmKey = getKey("minimax");
-  if (mmKey) {
-    try {
+  if (!activeProvider) {
+    return { voices, provider: null, configured: false };
+  }
+  const activeKey = getActiveVoiceKeyPlaintext();
+  if (!activeKey) {
+    return { voices, provider: activeProvider, configured: false };
+  }
+  if (activeProvider === "minimax") {
+    try {
       const res = await fetch(`${minimaxBaseUrl()}/v1/get_voice`, {
         method: "POST",
         headers: {
-          "authorization": `Bearer ${mmKey}`,
+          "authorization": `Bearer ${activeKey}`,
           "content-type": "application/json"
         },
         body: JSON.stringify({ voice_type: "all" })
@@ -14433,9 +15008,9 @@ async function listAvailableVoices() {
       }
     } catch {
     }
+    return { voices, provider: "minimax", configured: true };
   }
-  const elKey = getKey("elevenlabs");
-  if (elKey) {
+  if (activeProvider === "elevenlabs") {
     const personal = [];
     const shared = [];
     await Promise.all([
@@ -14443,7 +15018,7 @@ async function listAvailableVoices() {
         try {
           const res = await fetch(
             "https://api.elevenlabs.io/v1/voices?show_legacy=true&include_total_count=true",
-            { headers: { "xi-api-key": elKey } }
+            { headers: { "xi-api-key": activeKey } }
           );
           if (!res.ok) {
             const errText = await res.text();
@@ -14471,7 +15046,7 @@ async function listAvailableVoices() {
         try {
           const res = await fetch(
             "https://api.elevenlabs.io/v1/shared-voices?page_size=100",
-            { headers: { "xi-api-key": elKey } }
+            { headers: { "xi-api-key": activeKey } }
           );
           if (!res.ok) {
             const errText = await res.text();
@@ -14524,8 +15099,9 @@ async function listAvailableVoices() {
       }));
       voices = [...nonEl, ...personalMapped, ...sharedMapped];
     }
+    return { voices, provider: "elevenlabs", configured: true };
   }
-  return voices;
+  return { voices, provider: activeProvider, configured: true };
 }
 function elevenLabsSharedVoiceRows(raw) {
   if (!Array.isArray(raw)) return [];
@@ -14574,6 +15150,10 @@ function defaultVoiceForProvider(provider) {
 }
 
 // src/voice/tts.ts
+function activeVoiceKeyFor(wanted) {
+  if (getActiveVoiceProvider() !== wanted) return null;
+  return getActiveVoiceKeyPlaintext();
+}
 function minimaxBaseUrl2() {
   const region = getPrefs().minimaxRegion;
   return region === "intl" ? "https://api.minimax.io" : "https://api.minimaxi.com";
@@ -14638,9 +15218,26 @@ function cleanForSpeech(md) {
   return out.trim();
 }
 function voiceProfileForAgent(agent) {
-  if (agent.voice) return agent.voice;
+  const activeProvider = getActiveVoiceProvider();
+  if (agent.voice && agent.voice.provider === activeProvider) {
+    return agent.voice;
+  }
+  if (agent.voice && activeProvider) {
+    const fresh = defaultVoiceForProvider(activeProvider);
+    if (fresh) {
+      return {
+        provider: fresh.provider,
+        model: fresh.model,
+        voiceId: fresh.voiceId,
+        speed: agent.voice.speed ?? 1,
+        pitch: agent.voice.pitch ?? 0,
+        volume: agent.voice.volume ?? 1,
+        ...agent.voice.emotion ? { emotion: agent.voice.emotion } : {}
+      };
+    }
+  }
   const fallback = defaultVoiceForProvider(
-    getKey("minimax") ? "minimax" : getKey("elevenlabs") ? "elevenlabs" : getKey("openai") ? "openai" : "browser"
+    activeProvider ?? (getKey("openai") ? "openai" : "browser")
   );
   return {
     provider: fallback?.provider ?? "browser",
@@ -14663,15 +15260,16 @@ async function synthesizeSpeech(text, profile, signal) {
   };
 }
 async function* synthesizeSpeechStream(text, profile, signal) {
-  if (profile.provider === "elevenlabs" && getKey("elevenlabs")) {
+  if (profile.provider === "elevenlabs" && activeVoiceKeyFor("elevenlabs")) {
     yield* synthesizeElevenLabsStream(text, profile, signal);
     return;
   }
-  if (profile.provider !== "minimax" || !getKey("minimax")) {
+  const minimaxKey = activeVoiceKeyFor("minimax");
+  if (profile.provider !== "minimax" || !minimaxKey) {
     yield await synthesizeSpeech(text, profile, signal);
     return;
   }
-  const key = getKey("minimax");
+  const key = minimaxKey;
   const model = profile.model || "speech-2.8-hd";
   const res = await fetch(`${minimaxBaseUrl2()}/v1/t2a_v2`, {
     method: "POST",
@@ -14787,7 +15385,7 @@ async function* synthesizeSpeechStream(text, profile, signal) {
   }
 }
 async function synthesizeMiniMax(text, profile, signal) {
-  const key = getKey("minimax");
+  const key = activeVoiceKeyFor("minimax");
   if (!key) {
     return { provider: "browser", model: "speechSynthesis", voiceId: "system-default", text };
   }
@@ -14897,7 +15495,7 @@ async function synthesizeOpenAI(text, profile, signal) {
   };
 }
 async function synthesizeElevenLabs(text, profile, signal) {
-  const key = getKey("elevenlabs");
+  const key = activeVoiceKeyFor("elevenlabs");
   if (!key) {
     return { provider: "browser", model: "speechSynthesis", voiceId: "system-default", text };
   }
@@ -14942,7 +15540,7 @@ async function synthesizeElevenLabs(text, profile, signal) {
   };
 }
 async function* synthesizeElevenLabsStream(text, profile, signal) {
-  const key = getKey("elevenlabs");
+  const key = activeVoiceKeyFor("elevenlabs");
   if (!key) {
     yield await synthesizeSpeech(text, profile, signal);
     return;
@@ -16906,6 +17504,7 @@ function credentialsRouter() {
     } else {
       return c.json({ error: "id must be a string or null" }, 400);
     }
+    const priorCarrier = activeCarrier();
     if (nextId) {
       const meta = getLlmCredentialMeta(nextId);
       if (!meta) return c.json({ error: "credential not found" }, 404);
@@ -16916,7 +17515,7 @@ function credentialsRouter() {
       updatePrefs({ activeLlmCredentialId: null });
     }
     try {
-      reconcileAgentModels({ forcePrimary: true });
+      reconcileAgentModels({ forcePrimary: true, priorCarrier });
     } catch (e) {
       process.stderr.write(`[credentials.active] reconcile failed: ${e instanceof Error ? e.message : String(e)}
 `);
@@ -16948,7 +17547,7 @@ function credentialsRouter() {
       const flagship = PRIMARY_BY_CARRIER[provider];
       if (flagship) updatePrefs({ defaultModelV: flagship });
       try {
-        reconcileAgentModels({ forcePrimary: true });
+        reconcileAgentModels({ forcePrimary: true, priorCarrier: null });
       } catch (e) {
         process.stderr.write(`[credentials.post] reconcile failed: ${e instanceof Error ? e.message : String(e)}
 `);
@@ -16963,6 +17562,7 @@ function credentialsRouter() {
     if (!meta) return c.json({ error: "credential not found" }, 404);
     const prefs = getPrefs();
     const wasActive = prefs.activeLlmCredentialId === id;
+    const priorCarrier = wasActive ? activeCarrier() : null;
     const removedProvider = deleteLlmCredential(id);
     if (wasActive) {
       const nextId = pickNextActiveId(removedProvider);
@@ -16978,7 +17578,7 @@ function credentialsRouter() {
       }
     }
     try {
-      reconcileAgentModels(wasActive ? { forcePrimary: true } : void 0);
+      reconcileAgentModels(wasActive ? { forcePrimary: true, priorCarrier } : void 0);
     } catch (e) {
       process.stderr.write(`[credentials.delete] reconcile failed: ${e instanceof Error ? e.message : String(e)}
 `);
@@ -17004,39 +17604,6 @@ var PROVIDERS = /* @__PURE__ */ new Set([
 function isProvider(s) {
   return PROVIDERS.has(s);
 }
-function autoAssignVoicesOnFirstKey(provider) {
-  if (provider !== "minimax" && provider !== "elevenlabs") return;
-  const pool = listConfiguredVoices().filter((v) => v.provider === provider);
-  if (pool.length === 0) return;
-  const agents = listAllAgents();
-  if (agents.length === 0) return;
-  const shuffled = [...pool];
-  for (let i = shuffled.length - 1; i > 0; i--) {
-    const j = Math.floor(Math.random() * (i + 1));
-    [shuffled[i], shuffled[j]] = [shuffled[j], shuffled[i]];
-  }
-  for (let i = 0; i < agents.length; i++) {
-    const v = shuffled[i % shuffled.length];
-    const prev = agents[i].voice;
-    const profile = {
-      provider: v.provider,
-      model: v.model,
-      voiceId: v.voiceId,
-      ...prev?.speed !== void 0 ? { speed: prev.speed } : {},
-      ...prev?.pitch !== void 0 ? { pitch: prev.pitch } : {},
-      ...prev?.volume !== void 0 ? { volume: prev.volume } : {},
-      ...prev?.emotion !== void 0 ? { emotion: prev.emotion } : {}
-    };
-    try {
-      updateAgent(agents[i].id, { voice: profile });
-    } catch (e) {
-      process.stderr.write(
-        `[keys.put] auto-assign voice failed for ${agents[i].id}: ${e instanceof Error ? e.message : String(e)}
-`
-      );
-    }
-  }
-}
 function keysRouter() {
   const r = new Hono5();
   r.get("/", (c) => {
@@ -17062,6 +17629,12 @@ function keysRouter() {
     if (isLlmProvider(provider)) {
       return c.json({ error: "LLM providers use POST /api/credentials" }, 410);
     }
+    if (provider === "minimax" || provider === "elevenlabs") {
+      return c.json({ error: "voice providers use POST /api/voice-credentials" }, 410);
+    }
+    if (provider === "brave" || provider === "tavily") {
+      return c.json({ error: "search providers use POST /api/search-credentials" }, 410);
+    }
     let body;
     try {
       body = await c.req.json();
@@ -17070,16 +17643,7 @@ function keysRouter() {
     }
     const key = body?.key;
     if (typeof key !== "string") return c.json({ error: "body must contain { key: string }" }, 400);
-    const hadAnyVoiceKeyBefore = !!getKey("minimax") || !!getKey("elevenlabs");
     setKey(provider, key);
-    if ((provider === "minimax" || provider === "elevenlabs") && key.trim().length > 0 && !hadAnyVoiceKeyBefore) {
-      try {
-        autoAssignVoicesOnFirstKey(provider);
-      } catch (e) {
-        process.stderr.write(`[keys.put] voice auto-assign failed: ${e instanceof Error ? e.message : String(e)}
-`);
-      }
-    }
     const fresh = listKeyMeta().find((m) => m.provider === provider);
     return c.json(
       fresh ?? { provider, configured: key.trim().length > 0, updatedAt: Date.now(), preview: null }
@@ -17091,6 +17655,12 @@ function keysRouter() {
     if (isLlmProvider(provider)) {
       return c.json({ error: "LLM providers use DELETE /api/credentials/:id" }, 410);
     }
+    if (provider === "minimax" || provider === "elevenlabs") {
+      return c.json({ error: "voice providers use DELETE /api/voice-credentials/:id" }, 410);
+    }
+    if (provider === "brave" || provider === "tavily") {
+      return c.json({ error: "search providers use DELETE /api/search-credentials/:id" }, 410);
+    }
     deleteKey(provider);
     return c.json({ provider, configured: false, updatedAt: null, preview: null });
   });
@@ -21895,6 +22465,7 @@ async function streamChairMessage(args) {
   const metaKind = meta?.kind;
   const isRoundEndVoice = voiceMode && metaKind === "round-end";
   let pingDone = false;
+  let tailDone = false;
   let voiceBuf = "";
   const voiceProfile = voiceMode ? voiceProfileForAgent(chair) : null;
   let voiceSeq = 0;
@@ -21956,20 +22527,31 @@ async function streamChairMessage(args) {
         });
         if (voiceChunker) {
           if (isRoundEndVoice) {
-            voiceBuf += chunk.delta;
-            if (!pingDone) {
-              const idx = voiceBuf.search(/POINTS\s*:/i);
-              if (idx >= 0) {
-                pingDone = true;
-                const after = voiceBuf.slice(voiceBuf.search(/POINTS\s*:/i));
-                voiceBuf = after.replace(/POINTS\s*:/i, "");
+            if (tailDone) {
+            } else {
+              voiceBuf += chunk.delta;
+              if (!pingDone) {
+                const idx = voiceBuf.search(/POINTS\s*:/i);
+                if (idx >= 0) {
+                  pingDone = true;
+                  const after = voiceBuf.slice(voiceBuf.search(/POINTS\s*:/i));
+                  voiceBuf = after.replace(/POINTS\s*:/i, "");
+                }
               }
-            }
-            if (pingDone && voiceBuf) {
-              const cleaned = voiceBuf.replace(/(^|\n)\s*[-*]\s*/g, ". ");
-              voiceBuf = "";
-              for (const spoken of voiceChunker.push(cleaned)) {
-                await emitChairVoice(spoken);
+              if (pingDone && voiceBuf) {
+                const tailIdx = voiceBuf.search(/MODE[-\s]?SHIFT\s*:/i);
+                if (tailIdx >= 0) {
+                  tailDone = true;
+                  const beforeTail = voiceBuf.slice(0, tailIdx);
+                  voiceBuf = beforeTail;
+                }
+                if (voiceBuf) {
+                  const cleaned = voiceBuf.replace(/(^|\n)\s*[-*]\s*/g, ". ").replace(/\bBECAUSE\s*:\s*/gi, "");
+                  voiceBuf = "";
+                  for (const spoken of voiceChunker.push(cleaned)) {
+                    await emitChairVoice(spoken);
+                  }
+                }
               }
             }
           } else {
@@ -23110,6 +23692,129 @@ async function pickDirectors(opts) {
   };
 }
 
+// src/orchestrator/roomTitle.ts
+var MAX_TITLE_CHARS = 32;
+var REJECT_PHRASES = /* @__PURE__ */ new Set([
+  "untitled",
+  "untitled room",
+  "discussion",
+  "chat",
+  "conversation",
+  "topic",
+  "summary",
+  "\u672A\u547D\u540D",
+  "\u8BA8\u8BBA",
+  "\u5BF9\u8BDD",
+  "\u804A\u5929"
+]);
+async function generateRoomTitle(roomId) {
+  const room = getRoom(roomId);
+  if (!room) return { kind: "skipped", reason: "no-room" };
+  if (!room.nameAuto) return { kind: "skipped", reason: "user-named" };
+  const subject = room.subject.trim();
+  if (!subject) return { kind: "skipped", reason: "no-subject" };
+  const fallbackName = room.subject.slice(0, 60);
+  if (room.name !== fallbackName) {
+    return { kind: "skipped", reason: "already-renamed", detail: room.name.slice(0, 60) };
+  }
+  const modelV = utilityModelFor();
+  if (!modelV) return { kind: "skipped", reason: "no-model" };
+  const prompt = `You are titling a conversation for a sidebar entry, the way ChatGPT does it. Read the user's opening question and write the title that another reader would expect to see for THIS conversation \u2014 specific enough to distinguish it from any neighbouring entry in the same domain.
+
+How to write a representative title:
+1. Identify the CORE SUBJECT or TASK (the noun, the deliverable, the decision being made).
+2. Strip throat-clearing, polite framing, self-introduction, and product names that are not the subject itself.
+3. Keep one distinguishing modifier when the bare noun would be ambiguous ("\u4EA7\u54C1\u5BA3\u4F20\u89C6\u9891\u811A\u672C" beats "\u89C6\u9891\u811A\u672C"; "LoRA vs \u5168\u91CF\u5FAE\u8C03" beats "LoRA").
+4. Use the SAME language as the opening question.
+
+Length:
+- Chinese / Japanese: 5-10 characters.
+- English / Spanish / other Latin scripts: 3-6 words.
+- \u226424 characters total.
+
+Format:
+- Output ONLY the title \u2014 no quotes, no brackets, no trailing punctuation, no labels like "Topic:" / "\u4E3B\u9898\uFF1A", no explanation.
+- Never output fillers like "Untitled", "Discussion", "Chat", "Conversation", "\u8BA8\u8BBA", "\u5BF9\u8BDD", "\u804A\u5929".
+
+Examples:
+
+Input: privateboard.ai \u662F\u6211\u7684\u521B\u4E1A\u4EA7\u54C1\uFF0C\u6211\u73B0\u5728\u60F3\u526A\u8F91\u4E00\u4E2A\u89C6\u9891\u653E\u5230\u5B98\u7F51\u548C x.com \u4E0A\u9762\u5BA3\u4F20\u4ECB\u7ECD\u4EA7\u54C1\u3002\u4F60\u5E2E\u6211\u5199\u4E00\u4E2A\u811A\u672C\u3002
+Output: \u4EA7\u54C1\u5BA3\u4F20\u89C6\u9891\u811A\u672C
+
+Input: \u6211\u4EEC\u516C\u53F8\u5728\u8003\u8651\u8981\u4E0D\u8981\u4ECE Postgres \u8FC1\u79FB\u5230 ClickHouse \u5904\u7406\u5206\u6790\u67E5\u8BE2\uFF0C\u80FD\u5E2E\u6211\u5217\u51FA\u6743\u8861\u4E48
+Output: Postgres \u8F6C ClickHouse \u6743\u8861
+
+Input: \u6211\u60F3\u8BA8\u8BBA\u4E00\u4E0B LoRA \u5FAE\u8C03\u76F8\u6BD4\u5168\u91CF\u5FAE\u8C03\u6709\u4EC0\u4E48\u4F18\u7F3A\u70B9\uFF0C\u7279\u522B\u662F\u5728\u5C0F\u6A21\u578B\u4E0A
+Output: LoRA vs \u5168\u91CF\u5FAE\u8C03
+
+Input: Can you help me debug this Python regex that's failing on Unicode strings with combining marks?
+Output: Python regex Unicode bug
+
+Input: I want to redesign our onboarding email sequence \u2014 currently 5 emails over 2 weeks, low click-through.
+Output: Onboarding email redesign
+
+--- User's opening question ---
+${subject}
+
+--- Title ---
+`;
+  let raw = "";
+  try {
+    raw = await callLLM({
+      modelV,
+      carrier: null,
+      messages: [{ role: "user", content: prompt }],
+      // Low but not zero · 0.2 was deterministic-ish but kept locking
+      // onto a generic first-noun pick. 0.4 lets the model trade off
+      // alternatives without wandering into creative territory.
+      temperature: 0.4,
+      // 40 was tight enough that a model thinking briefly before
+      // answering would get cut off mid-title; 80 fits the title plus
+      // a small margin without inviting paragraphs.
+      maxTokens: 80
+    });
+  } catch (e) {
+    const detail = e instanceof Error ? e.message : String(e);
+    process.stderr.write(`[room-title] LLM call failed for ${roomId}: ${detail}
+`);
+    return { kind: "skipped", reason: "llm-error", detail };
+  }
+  if (!raw.trim()) {
+    return { kind: "skipped", reason: "empty-output", detail: `model=${modelV}` };
+  }
+  const phrase = sanitiseTitle(raw);
+  if (!phrase) {
+    return { kind: "skipped", reason: "rejected-generic", detail: raw.trim().slice(0, 80) };
+  }
+  const updated = setRoomNameFromAuto(roomId, phrase);
+  if (!updated) return { kind: "skipped", reason: "race-after-rename" };
+  roomBus.emit(roomId, {
+    type: "config-event",
+    kind: "settings-changed",
+    payload: { changes: { name: { from: room.name, to: phrase } } },
+    createdAt: Date.now()
+  });
+  return { kind: "ok", before: room.name, after: phrase };
+}
+function sanitiseTitle(raw) {
+  let s = raw.trim();
+  if (!s) return null;
+  const firstLine = s.split(/\r?\n/).map((l) => l.trim()).find((l) => l.length > 0);
+  if (firstLine) s = firstLine;
+  s = s.replace(/^\s*output\s*[:：]\s*/i, "");
+  s = s.replace(/^\s*(topic|title|主题|主題|标题|標題|タイトル)\s*[:：]\s*/i, "");
+  s = s.replace(/^[\s"'`「『《【〈“‘]+/, "").replace(/[\s"'`」』》】〉”’]+$/, "");
+  s = s.replace(/[\s.。!！?？,，;；:：]+$/, "");
+  s = s.replace(/\s+/g, " ").trim();
+  if (!s) return null;
+  if (REJECT_PHRASES.has(s.toLowerCase())) return null;
+  const cps = Array.from(s);
+  if (cps.length > MAX_TITLE_CHARS) {
+    s = cps.slice(0, MAX_TITLE_CHARS).join("");
+  }
+  return s;
+}
+
 // src/routes/rooms.ts
 async function runAutoPickAndSeat(roomId, subject) {
   const candidates = listAgents().filter((a) => a.roleKind === "director");
@@ -23229,7 +23934,10 @@ function roomsRouter() {
         );
       }
     }
-    const name = typeof b.name === "string" && b.name.trim() ? b.name.trim().slice(0, 80) : subject.slice(0, 60);
+    const rawName = typeof b.name === "string" ? b.name.trim() : "";
+    const hasExplicitName = rawName.length > 0;
+    const name = hasExplicitName ? rawName.slice(0, 80) : subject.slice(0, 60);
+    const nameAuto = !hasExplicitName;
     const ALLOWED_MODES = /* @__PURE__ */ new Set(["brainstorm", "constructive", "research", "debate", "critique"]);
     const ALLOWED_INTENSITY = /* @__PURE__ */ new Set(["calm", "sharp", "terse", "brutal"]);
     const normalizeIntensityValue = (v) => v === "brutal" ? "terse" : v;
@@ -23252,7 +23960,8 @@ function roomsRouter() {
       deliveryMode,
       agentIds,
       parentRoomId,
-      parentBriefId
+      parentBriefId,
+      nameAuto
     });
     insertConfigEvent({
       roomId: room.id,
@@ -23278,6 +23987,25 @@ function roomsRouter() {
       createdAt: opening.createdAt
     });
     roomBus.emit(room.id, { type: "message-final", messageId: opening.id });
+    generateRoomTitle(room.id).then((result) => {
+      if (result.kind === "ok") {
+        process.stderr.write(
+          `[room-title] room=${room.id} renamed "${result.before.slice(0, 40)}" \u2192 "${result.after}"
+`
+        );
+      } else {
+        const tail = result.detail ? ` \xB7 detail=${result.detail.slice(0, 100)}` : "";
+        process.stderr.write(
+          `[room-title] room=${room.id} skipped \xB7 reason=${result.reason}${tail}
+`
+        );
+      }
+    }).catch((e) => {
+      process.stderr.write(
+        `[room-title] room=${room.id} threw: ${e instanceof Error ? e.message : String(e)}
+`
+      );
+    });
     setAwaitingClarify(room.id, true);
     if (mode === "research" && !hasWebSearchKey()) {
       const langGuess = /[一-鿿]/.test(subject) ? "zh" : "en";
@@ -24120,10 +24848,122 @@ function buildRoomExportMarkdown(opts) {
   return [...headerLines, ...transcriptLines, ...briefsLines].join("\n") + "\n";
 }
 
-// src/routes/search.ts
+// src/routes/search-credentials.ts
 import { Hono as Hono10 } from "hono";
-function searchRouter() {
+function payloadFor2(meta, activeId) {
+  return {
+    id: meta.id,
+    provider: meta.provider,
+    label: meta.label,
+    preview: meta.preview,
+    createdAt: meta.createdAt,
+    updatedAt: meta.updatedAt,
+    isActive: meta.id === activeId
+  };
+}
+function pickNextActiveSearchId(removedProvider) {
+  const all = listSearchCredentials();
+  if (all.length === 0) return null;
+  if (removedProvider) {
+    const sameProvider = all.filter((c) => c.provider === removedProvider);
+    if (sameProvider.length > 0) {
+      sameProvider.sort((a, b) => a.createdAt - b.createdAt);
+      return sameProvider[0].id;
+    }
+  }
+  const sorted = all.slice().sort((a, b) => {
+    const ai = SEARCH_PROVIDER_PRIORITY.indexOf(a.provider);
+    const bi = SEARCH_PROVIDER_PRIORITY.indexOf(b.provider);
+    if (ai !== bi) return ai - bi;
+    return a.createdAt - b.createdAt;
+  });
+  return sorted[0]?.id ?? null;
+}
+function searchCredentialsRouter() {
   const r = new Hono10();
+  r.get("/", (c) => {
+    const activeId = getPrefs().activeSearchCredentialId;
+    const items = listSearchCredentials().map((m) => payloadFor2(m, activeId));
+    return c.json({
+      credentials: items,
+      activeId
+    });
+  });
+  r.put("/active", async (c) => {
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json({ error: "invalid JSON body" }, 400);
+    }
+    const rawId = body?.id;
+    let nextId;
+    if (rawId === null || rawId === void 0) {
+      nextId = null;
+    } else if (typeof rawId === "string") {
+      nextId = rawId;
+    } else {
+      return c.json({ error: "id must be a string or null" }, 400);
+    }
+    if (nextId) {
+      const meta = getSearchCredentialMeta(nextId);
+      if (!meta) return c.json({ error: "credential not found" }, 404);
+      updatePrefs({ activeSearchCredentialId: nextId });
+    } else {
+      updatePrefs({ activeSearchCredentialId: null });
+    }
+    return c.json({ activeId: nextId });
+  });
+  r.post("/", async (c) => {
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json({ error: "invalid JSON body" }, 400);
+    }
+    const provider = body?.provider;
+    const labelRaw = body?.label;
+    const key = body?.key;
+    if (typeof provider !== "string" || !isSearchProvider(provider)) {
+      return c.json({ error: "provider must be 'brave' or 'tavily'" }, 400);
+    }
+    if (typeof key !== "string" || key.trim().length === 0) {
+      return c.json({ error: "key must be a non-empty string" }, 400);
+    }
+    const label = typeof labelRaw === "string" ? labelRaw : null;
+    const meta = createSearchCredential(provider, label, key);
+    if (!meta) return c.json({ error: "failed to create credential" }, 500);
+    const hadActive = !!getPrefs().activeSearchCredentialId;
+    if (!hadActive) {
+      updatePrefs({ activeSearchCredentialId: meta.id });
+    }
+    const activeId = getPrefs().activeSearchCredentialId;
+    return c.json(payloadFor2(meta, activeId), 201);
+  });
+  r.delete("/:id", (c) => {
+    const id = c.req.param("id");
+    const meta = getSearchCredentialMeta(id);
+    if (!meta) return c.json({ error: "credential not found" }, 404);
+    const prefs = getPrefs();
+    const wasActive = prefs.activeSearchCredentialId === id;
+    const removedProvider = deleteSearchCredential(id);
+    if (wasActive) {
+      const nextId = pickNextActiveSearchId(removedProvider);
+      updatePrefs({ activeSearchCredentialId: nextId });
+    }
+    return c.json({
+      id,
+      deleted: true,
+      activeId: getPrefs().activeSearchCredentialId
+    });
+  });
+  return r;
+}
+
+// src/routes/search.ts
+import { Hono as Hono11 } from "hono";
+function searchRouter() {
+  const r = new Hono11();
   r.get("/", (c) => {
     const q = (c.req.query("q") || "").trim();
     if (q.length < 1) {
@@ -24162,7 +25002,7 @@ function searchRouter() {
 }
 
 // src/routes/usage.ts
-import { Hono as Hono11 } from "hono";
+import { Hono as Hono12 } from "hono";
 function modelDisplay(modelV) {
   if (isModelV(modelV)) {
     const m = MODELS[modelV];
@@ -24171,7 +25011,7 @@ function modelDisplay(modelV) {
   return { displayName: modelV, provider: "unknown" };
 }
 function usageRouter() {
-  const r = new Hono11();
+  const r = new Hono12();
   r.get("/summary", (c) => {
     const s = getUsageSummary();
     return c.json({
@@ -24220,8 +25060,293 @@ function usageRouter() {
   return r;
 }
 
+// src/routes/voice-credentials.ts
+import { Hono as Hono13 } from "hono";
+
+// src/storage/reconcile-voices.ts
+var MINIMAX_SEED_VOICES = [
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "male-qn-qingse" },
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "female-shaonv" },
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "female-yujie" },
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "male-qn-jingying" },
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "female-chengshu" },
+  { provider: "minimax", model: "speech-2.8-hd", voiceId: "female-tianmei" }
+];
+var ELEVENLABS_SEED_VOICES = [
+  { provider: "elevenlabs", model: "eleven_multilingual_v2", voiceId: "21m00Tcm4TlvDq8ikWAM" },
+  { provider: "elevenlabs", model: "eleven_multilingual_v2", voiceId: "JBFqnCBsd6RMkjVDRZzb" }
+];
+function shuffle(arr) {
+  for (let i = arr.length - 1; i > 0; i--) {
+    const j = Math.floor(Math.random() * (i + 1));
+    [arr[i], arr[j]] = [arr[j], arr[i]];
+  }
+  return arr;
+}
+function snapshotPrior(agent, priorProvider, targetProvider) {
+  if (!priorProvider) return;
+  if (priorProvider === targetProvider) return;
+  if (!agent.voice) return;
+  if (agent.voice.provider !== priorProvider) return;
+  try {
+    writeVoiceBucketEntry(agent.id, priorProvider, agent.voice);
+  } catch (e) {
+    process.stderr.write(
+      `[reconcile-voices] snapshot failed for ${agent.id}: ${e instanceof Error ? e.message : String(e)}
+`
+    );
+  }
+}
+function reconcileAgentVoices(opts) {
+  const targetProvider = getActiveVoiceProvider();
+  const priorProvider = opts.priorProvider ?? null;
+  const agents = listAllAgents();
+  if (agents.length === 0) {
+    return { changed: 0, cleared: 0, reason: opts.reason, toProvider: targetProvider };
+  }
+  if (!targetProvider) {
+    let cleared = 0;
+    for (const a of agents) {
+      snapshotPrior(a, priorProvider, null);
+      if (a.voice) {
+        try {
+          updateAgent(a.id, { voice: null });
+          cleared++;
+        } catch (e) {
+          process.stderr.write(
+            `[reconcile-voices] clear failed for ${a.id}: ${e instanceof Error ? e.message : String(e)}
+`
+          );
+        }
+      }
+    }
+    process.stderr.write(`[reconcile-voices] reason=${opts.reason} toProvider=null cleared=${cleared}
+`);
+    return { changed: 0, cleared, reason: opts.reason, toProvider: null };
+  }
+  const pool = targetProvider === "minimax" ? MINIMAX_SEED_VOICES : targetProvider === "elevenlabs" ? ELEVENLABS_SEED_VOICES : [];
+  if (pool.length === 0) {
+    process.stderr.write(`[reconcile-voices] reason=${opts.reason} toProvider=${targetProvider} no-pool \xB7 skipped
+`);
+    return { changed: 0, cleared: 0, reason: opts.reason, toProvider: targetProvider };
+  }
+  const shuffled = shuffle([...pool]);
+  let changed = 0;
+  const targetVp = targetProvider;
+  for (let i = 0; i < agents.length; i++) {
+    const a = agents[i];
+    snapshotPrior(a, priorProvider, targetVp);
+    const bucket = getVoiceBucket(a.id);
+    const memorised = bucket[targetVp];
+    const prev = a.voice;
+    let profile;
+    if (memorised) {
+      profile = {
+        provider: memorised.provider,
+        model: memorised.model,
+        voiceId: memorised.voiceId,
+        ...prev?.speed !== void 0 ? { speed: prev.speed } : memorised.speed !== void 0 ? { speed: memorised.speed } : {},
+        ...prev?.pitch !== void 0 ? { pitch: prev.pitch } : memorised.pitch !== void 0 ? { pitch: memorised.pitch } : {},
+        ...prev?.volume !== void 0 ? { volume: prev.volume } : memorised.volume !== void 0 ? { volume: memorised.volume } : {},
+        ...prev?.emotion !== void 0 ? { emotion: prev.emotion } : memorised.emotion !== void 0 ? { emotion: memorised.emotion } : {},
+        ...memorised.modifyPitch !== void 0 ? { modifyPitch: memorised.modifyPitch } : {},
+        ...memorised.modifyIntensity !== void 0 ? { modifyIntensity: memorised.modifyIntensity } : {},
+        ...memorised.modifyTimbre !== void 0 ? { modifyTimbre: memorised.modifyTimbre } : {},
+        ...memorised.instructions !== void 0 ? { instructions: memorised.instructions } : {}
+      };
+    } else {
+      if (opts.reason === "first-key" && a.voice && a.voice.provider === targetVp) {
+        if (!bucket[targetVp]) {
+          try {
+            writeVoiceBucketEntry(a.id, targetVp, a.voice);
+          } catch (e) {
+            process.stderr.write(
+              `[reconcile-voices] seed failed for ${a.id}: ${e instanceof Error ? e.message : String(e)}
+`
+            );
+          }
+        }
+        continue;
+      }
+      const pick = shuffled[i % shuffled.length];
+      profile = {
+        provider: pick.provider,
+        model: pick.model,
+        voiceId: pick.voiceId,
+        ...prev?.speed !== void 0 ? { speed: prev.speed } : {},
+        ...prev?.pitch !== void 0 ? { pitch: prev.pitch } : {},
+        ...prev?.volume !== void 0 ? { volume: prev.volume } : {},
+        ...prev?.emotion !== void 0 ? { emotion: prev.emotion } : {}
+      };
+    }
+    try {
+      updateAgent(a.id, { voice: profile });
+      writeVoiceBucketEntry(a.id, targetVp, profile);
+      changed++;
+    } catch (e) {
+      process.stderr.write(
+        `[reconcile-voices] update failed for ${a.id}: ${e instanceof Error ? e.message : String(e)}
+`
+      );
+    }
+  }
+  process.stderr.write(
+    `[reconcile-voices] reason=${opts.reason} toProvider=${targetProvider} changed=${changed}
+`
+  );
+  return { changed, cleared: 0, reason: opts.reason, toProvider: targetProvider };
+}
+
+// src/routes/voice-credentials.ts
+function payloadFor3(meta, activeId) {
+  return {
+    id: meta.id,
+    provider: meta.provider,
+    label: meta.label,
+    preview: meta.preview,
+    createdAt: meta.createdAt,
+    updatedAt: meta.updatedAt,
+    isActive: meta.id === activeId
+  };
+}
+function pickNextActiveVoiceId(removedProvider) {
+  const all = listVoiceCredentials();
+  if (all.length === 0) return null;
+  if (removedProvider) {
+    const sameProvider = all.filter((c) => c.provider === removedProvider);
+    if (sameProvider.length > 0) {
+      sameProvider.sort((a, b) => a.createdAt - b.createdAt);
+      return sameProvider[0].id;
+    }
+  }
+  const sorted = all.slice().sort((a, b) => {
+    const ai = VOICE_PROVIDER_PRIORITY.indexOf(a.provider);
+    const bi = VOICE_PROVIDER_PRIORITY.indexOf(b.provider);
+    if (ai !== bi) return ai - bi;
+    return a.createdAt - b.createdAt;
+  });
+  return sorted[0]?.id ?? null;
+}
+function voiceCredentialsRouter() {
+  const r = new Hono13();
+  r.get("/", (c) => {
+    const activeId = getPrefs().activeVoiceCredentialId;
+    const items = listVoiceCredentials().map((m) => payloadFor3(m, activeId));
+    return c.json({
+      credentials: items,
+      activeId
+    });
+  });
+  r.put("/active", async (c) => {
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json({ error: "invalid JSON body" }, 400);
+    }
+    const rawId = body?.id;
+    let nextId;
+    if (rawId === null || rawId === void 0) {
+      nextId = null;
+    } else if (typeof rawId === "string") {
+      nextId = rawId;
+    } else {
+      return c.json({ error: "id must be a string or null" }, 400);
+    }
+    const prefs = getPrefs();
+    const priorActiveId = prefs.activeVoiceCredentialId;
+    const priorProvider = priorActiveId ? getVoiceCredentialMeta(priorActiveId)?.provider ?? null : null;
+    let nextProvider = null;
+    if (nextId) {
+      const meta = getVoiceCredentialMeta(nextId);
+      if (!meta) return c.json({ error: "credential not found" }, 404);
+      nextProvider = meta.provider;
+      updatePrefs({ activeVoiceCredentialId: nextId });
+    } else {
+      updatePrefs({ activeVoiceCredentialId: null });
+    }
+    if (priorProvider !== nextProvider) {
+      try {
+        reconcileAgentVoices({ reason: "provider-switch", priorProvider });
+      } catch (e) {
+        process.stderr.write(
+          `[voice-credentials.active] reconcile failed: ${e instanceof Error ? e.message : String(e)}
+`
+        );
+      }
+    }
+    return c.json({ activeId: nextId });
+  });
+  r.post("/", async (c) => {
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json({ error: "invalid JSON body" }, 400);
+    }
+    const provider = body?.provider;
+    const labelRaw = body?.label;
+    const key = body?.key;
+    if (typeof provider !== "string" || !isVoiceProvider(provider)) {
+      return c.json({ error: "provider must be 'minimax' or 'elevenlabs'" }, 400);
+    }
+    if (typeof key !== "string" || key.trim().length === 0) {
+      return c.json({ error: "key must be a non-empty string" }, 400);
+    }
+    const label = typeof labelRaw === "string" ? labelRaw : null;
+    const meta = createVoiceCredential(provider, label, key);
+    if (!meta) return c.json({ error: "failed to create credential" }, 500);
+    const hadActive = !!getPrefs().activeVoiceCredentialId;
+    if (!hadActive) {
+      updatePrefs({ activeVoiceCredentialId: meta.id });
+      try {
+        reconcileAgentVoices({ reason: "first-key", priorProvider: null });
+      } catch (e) {
+        process.stderr.write(
+          `[voice-credentials.post] reconcile failed: ${e instanceof Error ? e.message : String(e)}
+`
+        );
+      }
+    }
+    const activeId = getPrefs().activeVoiceCredentialId;
+    return c.json(payloadFor3(meta, activeId), 201);
+  });
+  r.delete("/:id", (c) => {
+    const id = c.req.param("id");
+    const meta = getVoiceCredentialMeta(id);
+    if (!meta) return c.json({ error: "credential not found" }, 404);
+    const prefs = getPrefs();
+    const wasActive = prefs.activeVoiceCredentialId === id;
+    const removedProvider = deleteVoiceCredential(id);
+    let reshuffled = false;
+    if (wasActive) {
+      const nextId = pickNextActiveVoiceId(removedProvider);
+      updatePrefs({ activeVoiceCredentialId: nextId });
+      const nextProvider = nextId ? getVoiceCredentialMeta(nextId)?.provider ?? null : null;
+      if (nextProvider !== removedProvider) {
+        try {
+          reconcileAgentVoices({ reason: "provider-switch", priorProvider: removedProvider });
+          reshuffled = true;
+        } catch (e) {
+          process.stderr.write(
+            `[voice-credentials.delete] reconcile failed: ${e instanceof Error ? e.message : String(e)}
+`
+          );
+        }
+      }
+    }
+    return c.json({
+      id,
+      deleted: true,
+      activeId: getPrefs().activeVoiceCredentialId,
+      reshuffled
+    });
+  });
+  return r;
+}
+
 // src/routes/voices.ts
-import { Hono as Hono12 } from "hono";
+import { Hono as Hono14 } from "hono";
 function ttsErrorMessage(e, providerLabel) {
   if (!(e instanceof Error)) return String(e);
   const cause = e.cause;
@@ -24266,8 +25391,15 @@ function ttsCacheSet(key, val) {
   }
 }
 function voicesRouter() {
-  const r = new Hono12();
-  r.get("/", async (c) => c.json({ voices: await listAvailableVoices() }));
+  const r = new Hono14();
+  r.get("/", async (c) => {
+    const catalog = await listAvailableVoices();
+    return c.json({
+      voices: catalog.voices,
+      provider: catalog.provider,
+      configured: catalog.configured
+    });
+  });
   r.get("/message/:id/audio", (c) => {
     const messageId = c.req.param("id");
     const row = getUsableMessageVoice(messageId);
@@ -24407,7 +25539,7 @@ function voicesRouter() {
 init_paths();
 
 // src/version.ts
-var VERSION = "0.1.29";
+var VERSION = "0.1.32";
 
 // src/utils/render-picker-catalog.ts
 function renderPickerCatalog() {
@@ -24419,7 +25551,7 @@ function renderPickerCatalog() {
 
 // src/server.ts
 function createApp() {
-  const app = new Hono13();
+  const app = new Hono15();
   const dir = publicDir();
   if (!existsSync2(dir)) {
     throw new Error(
@@ -24467,7 +25599,9 @@ Build the package or check that public/ is bundled alongside dist/.`
   app.route("/api/avatar", avatarRouter());
   app.route("/api/usage", usageRouter());
   app.route("/api/voices", voicesRouter());
+  app.route("/api/voice-credentials", voiceCredentialsRouter());
   app.route("/api/search", searchRouter());
+  app.route("/api/search-credentials", searchCredentialsRouter());
   app.use(
     "/*",
     serveStatic({
@@ -24488,6 +25622,10 @@ async function startServer(opts) {
     url: `http://${host}:${opts.port}`,
     close: () => new Promise((resolve2, reject) => {
       server.close((err2) => err2 ? reject(err2) : resolve2());
+      const maybeForceClose = server.closeAllConnections;
+      if (typeof maybeForceClose === "function") {
+        maybeForceClose.call(server);
+      }
     })
   };
 }