quoroom 0.1.19 → 0.1.21

package/out/mcp/api-server.js

@@ -6713,12 +6713,12 @@ var init_request = __esm({
     init_base();
     init_utils4();
     HttpRequestError = class extends BaseError {
-      constructor({ body, cause, details, headers, status, url }) {
+      constructor({ body, cause, details, headers, status: status2, url }) {
         super("HTTP request failed.", {
           cause,
           details,
           metaMessages: [
-            status && `Status: ${status}`,
+            status2 && `Status: ${status2}`,
             `URL: ${getUrl(url)}`,
             body && `Request body: ${stringify(body)}`
           ].filter(Boolean),
@@ -6750,7 +6750,7 @@ var init_request = __esm({
         });
         this.body = body;
         this.headers = headers;
-        this.status = status;
+        this.status = status2;
         this.url = url;
       }
     };
@@ -9914,7 +9914,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "quoroom",
-      version: "0.1.19",
+      version: "0.1.21",
       description: "Autonomous AI agent collective engine \u2014 Queen, Workers, Quorum",
       main: "./out/mcp/server.js",
       bin: {
@@ -10799,7 +10799,7 @@ var require_scheduled_task = __commonJS({
 var require_background_scheduled_task = __commonJS({
   "node_modules/node-cron/src/background-scheduled-task/index.js"(exports2, module2) {
     var EventEmitter = require("events");
-    var path4 = require("path");
+    var path5 = require("path");
     var { fork } = require("child_process");
     var uuid = (init_esm_node(), __toCommonJS(esm_node_exports));
     var daemonPath = `${__dirname}/daemon.js`;
@@ -10834,7 +10834,7 @@ var require_background_scheduled_task = __commonJS({
         options.scheduled = true;
         this.forkProcess.send({
           type: "register",
-          path: path4.resolve(this.taskPath),
+          path: path5.resolve(this.taskPath),
           cron: this.cronExpression,
           options
         });
@@ -10921,35 +10921,35 @@ __export(index_exports, {
   startServer: () => startServer
 });
 module.exports = __toCommonJS(index_exports);
-var import_node_http = __toESM(require("node:http"));
-var import_node_https2 = __toESM(require("node:https"));
+var import_node_http2 = __toESM(require("node:http"));
+var import_node_https3 = __toESM(require("node:https"));
 var import_node_url = require("node:url");
-var import_node_fs4 = __toESM(require("node:fs"));
-var import_node_path5 = __toESM(require("node:path"));
-var import_node_os4 = require("node:os");
+var import_node_fs5 = __toESM(require("node:fs"));
+var import_node_path6 = __toESM(require("node:path"));
+var import_node_os5 = require("node:os");
 var import_node_child_process7 = require("node:child_process");
 
 // src/server/router.ts
 var Router = class {
   routes = [];
-  get(path4, handler) {
-    this.add("GET", path4, handler);
+  get(path5, handler) {
+    this.add("GET", path5, handler);
   }
-  post(path4, handler) {
-    this.add("POST", path4, handler);
+  post(path5, handler) {
+    this.add("POST", path5, handler);
   }
-  patch(path4, handler) {
-    this.add("PATCH", path4, handler);
+  patch(path5, handler) {
+    this.add("PATCH", path5, handler);
   }
-  put(path4, handler) {
-    this.add("PUT", path4, handler);
+  put(path5, handler) {
+    this.add("PUT", path5, handler);
   }
-  delete(path4, handler) {
-    this.add("DELETE", path4, handler);
+  delete(path5, handler) {
+    this.add("DELETE", path5, handler);
   }
-  add(method, path4, handler) {
+  add(method, path5, handler) {
     const paramNames = [];
-    const patternStr = path4.replace(/:(\w+)/g, (_, name) => {
+    const patternStr = path5.replace(/:(\w+)/g, (_, name) => {
       paramNames.push(name);
       return "([^/]+)";
     });
@@ -11266,39 +11266,39 @@ var CHAIN_CONFIGS = {
 var SUPPORTED_CHAINS = ["base", "ethereum", "arbitrum", "optimism", "polygon"];
 var SUPPORTED_TOKENS = ["usdc", "usdt"];
 var QUEEN_DEFAULTS_BY_PLAN = {
-  none: { queenCycleGapMs: 30 * 60 * 1e3, queenMaxTurns: 3 },
-  // 30 min gap, 3 turns (safe default)
-  pro: { queenCycleGapMs: 15 * 60 * 1e3, queenMaxTurns: 5 },
-  // 15 min gap, 5 turns
-  max: { queenCycleGapMs: 1 * 60 * 1e3, queenMaxTurns: 10 },
-  // 1 min gap, 10 turns
-  api: { queenCycleGapMs: 5 * 60 * 1e3, queenMaxTurns: 10 }
-  // 5 min gap, 10 turns
+  none: { queenCycleGapMs: 10 * 60 * 1e3, queenMaxTurns: 30 },
+  // 10 min gap, 30 turns
+  pro: { queenCycleGapMs: 5 * 60 * 1e3, queenMaxTurns: 30 },
+  // 5 min gap, 30 turns
+  max: { queenCycleGapMs: 30 * 1e3, queenMaxTurns: 30 },
+  // 30s gap, 30 turns
+  api: { queenCycleGapMs: 2 * 60 * 1e3, queenMaxTurns: 30 }
+  // 2 min gap, 30 turns
 };
 var CHATGPT_DEFAULTS_BY_PLAN = {
-  none: { queenCycleGapMs: 30 * 60 * 1e3, queenMaxTurns: 3 },
-  // 30 min gap, 3 turns (safe default)
-  plus: { queenCycleGapMs: 15 * 60 * 1e3, queenMaxTurns: 5 },
-  // 15 min gap, 5 turns
-  pro: { queenCycleGapMs: 5 * 60 * 1e3, queenMaxTurns: 10 },
-  // 5 min gap, 10 turns
-  api: { queenCycleGapMs: 5 * 60 * 1e3, queenMaxTurns: 10 }
-  // 5 min gap, 10 turns
+  none: { queenCycleGapMs: 10 * 60 * 1e3, queenMaxTurns: 30 },
+  // 10 min gap, 30 turns
+  plus: { queenCycleGapMs: 5 * 60 * 1e3, queenMaxTurns: 30 },
+  // 5 min gap, 30 turns
+  pro: { queenCycleGapMs: 2 * 60 * 1e3, queenMaxTurns: 30 },
+  // 2 min gap, 30 turns
+  api: { queenCycleGapMs: 2 * 60 * 1e3, queenMaxTurns: 30 }
+  // 2 min gap, 30 turns
 };
 var WORKER_ROLE_PRESETS = {
   guardian: {
-    cycleGapMs: 6e4,
-    maxTurns: 5,
+    cycleGapMs: 3e4,
+    maxTurns: 15,
     systemPromptPrefix: "Monitor and observe. Do not spawn workers or make purchases. Focus on detecting anomalies in tasks, stations, and worker activity."
   },
   analyst: {
-    cycleGapMs: 3e5,
-    maxTurns: 15,
+    cycleGapMs: 12e4,
+    maxTurns: 30,
     systemPromptPrefix: "Perform deep analysis. Work to completion on a task, then pause. Prefer depth over frequency."
   },
   writer: {
-    cycleGapMs: 3e5,
-    maxTurns: 20,
+    cycleGapMs: 12e4,
+    maxTurns: 30,
     systemPromptPrefix: "Produce high-quality written output. Minimize interruptions between drafting sessions."
   }
 };
@@ -11566,16 +11566,16 @@ function getTaskByWebhookToken(db2, token) {
   const row = db2.prepare("SELECT * FROM tasks WHERE webhook_token = ?").get(token);
   return row ? mapTaskRow(row) : null;
 }
-function listTasks(db2, roomId, status) {
-  if (roomId != null && status) {
-    const rows2 = db2.prepare("SELECT * FROM tasks WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status);
+function listTasks(db2, roomId, status2) {
+  if (roomId != null && status2) {
+    const rows2 = db2.prepare("SELECT * FROM tasks WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status2);
     return rows2.map(mapTaskRow);
   }
   if (roomId != null) {
     const rows2 = db2.prepare("SELECT * FROM tasks WHERE room_id = ? ORDER BY created_at DESC").all(roomId);
     return rows2.map(mapTaskRow);
   }
-  const rows = status ? db2.prepare("SELECT * FROM tasks WHERE status = ? ORDER BY created_at DESC").all(status) : db2.prepare("SELECT * FROM tasks ORDER BY created_at DESC").all();
+  const rows = status2 ? db2.prepare("SELECT * FROM tasks WHERE status = ? ORDER BY created_at DESC").all(status2) : db2.prepare("SELECT * FROM tasks ORDER BY created_at DESC").all();
   return rows.map(mapTaskRow);
 }
 function updateTask(db2, id, updates) {
@@ -11630,24 +11630,24 @@ function pauseTask(db2, id) {
 function resumeTask(db2, id) {
   updateTask(db2, id, { status: "active" });
 }
-function createWatch(db2, path4, description, actionPrompt, roomId) {
-  const result = db2.prepare("INSERT INTO watches (path, description, action_prompt, room_id) VALUES (?, ?, ?, ?)").run(path4, description ?? null, actionPrompt ?? null, roomId ?? null);
+function createWatch(db2, path5, description, actionPrompt, roomId) {
+  const result = db2.prepare("INSERT INTO watches (path, description, action_prompt, room_id) VALUES (?, ?, ?, ?)").run(path5, description ?? null, actionPrompt ?? null, roomId ?? null);
   return getWatch(db2, result.lastInsertRowid);
 }
 function getWatch(db2, id) {
   const row = db2.prepare("SELECT * FROM watches WHERE id = ?").get(id);
   return row ? mapWatchRow(row) : null;
 }
-function listWatches(db2, roomId, status) {
-  if (roomId != null && status) {
-    const rows2 = db2.prepare("SELECT * FROM watches WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status);
+function listWatches(db2, roomId, status2) {
+  if (roomId != null && status2) {
+    const rows2 = db2.prepare("SELECT * FROM watches WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status2);
     return rows2.map(mapWatchRow);
   }
   if (roomId != null) {
     const rows2 = db2.prepare("SELECT * FROM watches WHERE room_id = ? ORDER BY created_at DESC").all(roomId);
     return rows2.map(mapWatchRow);
   }
-  const rows = status ? db2.prepare("SELECT * FROM watches WHERE status = ? ORDER BY created_at DESC").all(status) : db2.prepare("SELECT * FROM watches ORDER BY created_at DESC").all();
+  const rows = status2 ? db2.prepare("SELECT * FROM watches WHERE status = ? ORDER BY created_at DESC").all(status2) : db2.prepare("SELECT * FROM watches ORDER BY created_at DESC").all();
   return rows.map(mapWatchRow);
 }
 function deleteWatch(db2, id) {
@@ -11691,12 +11691,12 @@ function getTaskRun(db2, id) {
 function completeTaskRun(db2, id, result, resultFile, errorMessage) {
   const run = getTaskRun(db2, id);
   if (!run) return;
-  const status = errorMessage ? "failed" : "completed";
+  const status2 = errorMessage ? "failed" : "completed";
   const durationMs = Date.now() - new Date(run.startedAt).getTime();
   db2.prepare(
     `UPDATE task_runs SET finished_at = datetime('now','localtime'), status = ?, result = ?,
      result_file = ?, error_message = ?, duration_ms = ? WHERE id = ?`
-  ).run(status, result, resultFile ?? null, errorMessage ?? null, durationMs, id);
+  ).run(status2, result, resultFile ?? null, errorMessage ?? null, durationMs, id);
   const task = getTask(db2, run.taskId);
   const newErrorCount = errorMessage ? (task?.errorCount ?? 0) + 1 : 0;
   db2.prepare(
@@ -11920,8 +11920,8 @@ function ensureTaskMemoryEntity(db2, taskId) {
 function storeTaskResultInMemory(db2, taskId, result, success) {
   const entityId = ensureTaskMemoryEntity(db2, taskId);
   const truncated = result.length > MAX_MEMORY_LENGTH ? result.substring(0, MAX_MEMORY_LENGTH) + "\n[...truncated]" : result;
-  const status = success ? "SUCCESS" : "FAILED";
-  const content = `[${status}] ${truncated}`;
+  const status2 = success ? "SUCCESS" : "FAILED";
+  const content = `[${status2}] ${truncated}`;
   addObservation(db2, entityId, content, "task_runner");
   const countRow = db2.prepare("SELECT COUNT(*) as cnt FROM observations WHERE entity_id = ?").get(entityId);
   if (countRow.cnt > MAX_OBSERVATIONS_PER_ENTITY) {
@@ -12136,9 +12136,9 @@ function getRoomByWebhookToken(db2, token) {
   const row = db2.prepare("SELECT * FROM rooms WHERE webhook_token = ?").get(token);
   return row ? mapRoomRow(row) : null;
 }
-function listRooms(db2, status) {
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM rooms WHERE status = ? ORDER BY created_at DESC").all(status);
+function listRooms(db2, status2) {
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM rooms WHERE status = ? ORDER BY created_at DESC").all(status2);
     return rows2.map(mapRoomRow);
   }
   const rows = db2.prepare("SELECT * FROM rooms ORDER BY created_at DESC").all();
@@ -12233,16 +12233,16 @@ function getDecision(db2, id) {
   const row = db2.prepare("SELECT * FROM quorum_decisions WHERE id = ?").get(id);
   return row ? mapDecisionRow(row) : null;
 }
-function listDecisions(db2, roomId, status) {
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM quorum_decisions WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status);
+function listDecisions(db2, roomId, status2) {
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM quorum_decisions WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status2);
     return rows2.map(mapDecisionRow);
   }
   const rows = db2.prepare("SELECT * FROM quorum_decisions WHERE room_id = ? ORDER BY created_at DESC").all(roomId);
   return rows.map(mapDecisionRow);
 }
-function resolveDecision(db2, id, status, result) {
-  db2.prepare("UPDATE quorum_decisions SET status = ?, result = ?, resolved_at = datetime('now','localtime') WHERE id = ?").run(status, result ?? null, id);
+function resolveDecision(db2, id, status2, result) {
+  db2.prepare("UPDATE quorum_decisions SET status = ?, result = ?, resolved_at = datetime('now','localtime') WHERE id = ?").run(status2, result ?? null, id);
 }
 function setKeeperVote(db2, decisionId, vote2) {
   db2.prepare("UPDATE quorum_decisions SET keeper_vote = ? WHERE id = ?").run(vote2, decisionId);
@@ -12313,9 +12313,9 @@ function getGoal(db2, id) {
   const row = db2.prepare("SELECT * FROM goals WHERE id = ?").get(id);
   return row ? mapGoalRow(row) : null;
 }
-function listGoals(db2, roomId, status) {
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM goals WHERE room_id = ? AND status = ? ORDER BY created_at ASC").all(roomId, status);
+function listGoals(db2, roomId, status2) {
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM goals WHERE room_id = ? AND status = ? ORDER BY created_at ASC").all(roomId, status2);
     return rows2.map(mapGoalRow);
   }
   const rows = db2.prepare("SELECT * FROM goals WHERE room_id = ? ORDER BY created_at ASC").all(roomId);
@@ -12532,9 +12532,9 @@ function getPendingEscalations(db2, roomId, toAgentId) {
   const rows = db2.prepare("SELECT * FROM escalations WHERE room_id = ? AND status = 'pending' ORDER BY created_at ASC").all(roomId);
   return rows.map(mapEscalationRow);
 }
-function listEscalations(db2, roomId, status) {
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM escalations WHERE room_id = ? AND status = ? ORDER BY created_at ASC").all(roomId, status);
+function listEscalations(db2, roomId, status2) {
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM escalations WHERE room_id = ? AND status = ? ORDER BY created_at ASC").all(roomId, status2);
     return rows2.map(mapEscalationRow);
   }
   const rows = db2.prepare("SELECT * FROM escalations WHERE room_id = ? ORDER BY created_at ASC").all(roomId);
@@ -12543,6 +12543,12 @@ function listEscalations(db2, roomId, status) {
 function resolveEscalation(db2, id, answer) {
   db2.prepare("UPDATE escalations SET answer = ?, status = 'resolved', resolved_at = datetime('now','localtime') WHERE id = ?").run(answer, id);
 }
+function getRecentKeeperAnswers(db2, roomId, fromAgentId, limit = 5) {
+  const rows = db2.prepare(
+    `SELECT * FROM escalations WHERE room_id = ? AND from_agent_id = ? AND status = 'resolved' AND to_agent_id IS NULL ORDER BY resolved_at DESC LIMIT ?`
+  ).all(roomId, fromAgentId, limit);
+  return rows.map(mapEscalationRow);
+}
 function mapCredentialRow(row) {
   return {
     id: row.id,
@@ -12693,17 +12699,17 @@ function getStation(db2, id) {
   const row = db2.prepare("SELECT * FROM stations WHERE id = ?").get(id);
   return row ? mapStationRow(row) : null;
 }
-function listStations(db2, roomId, status) {
-  if (roomId && status) {
-    const rows2 = db2.prepare("SELECT * FROM stations WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status);
+function listStations(db2, roomId, status2) {
+  if (roomId && status2) {
+    const rows2 = db2.prepare("SELECT * FROM stations WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status2);
     return rows2.map(mapStationRow);
   }
   if (roomId) {
     const rows2 = db2.prepare("SELECT * FROM stations WHERE room_id = ? ORDER BY created_at DESC").all(roomId);
     return rows2.map(mapStationRow);
   }
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM stations WHERE status = ? ORDER BY created_at DESC").all(status);
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM stations WHERE status = ? ORDER BY created_at DESC").all(status2);
     return rows2.map(mapStationRow);
   }
   const rows = db2.prepare("SELECT * FROM stations ORDER BY created_at DESC").all();
@@ -12782,9 +12788,9 @@ function getRoomMessage(db2, id) {
   const row = db2.prepare("SELECT * FROM room_messages WHERE id = ?").get(id);
   return row ? mapRoomMessageRow(row) : null;
 }
-function listRoomMessages(db2, roomId, status) {
-  if (status) {
-    const rows2 = db2.prepare("SELECT * FROM room_messages WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status);
+function listRoomMessages(db2, roomId, status2) {
+  if (status2) {
+    const rows2 = db2.prepare("SELECT * FROM room_messages WHERE room_id = ? AND status = ? ORDER BY created_at DESC").all(roomId, status2);
     return rows2.map(mapRoomMessageRow);
   }
   const rows = db2.prepare("SELECT * FROM room_messages WHERE room_id = ? ORDER BY created_at DESC").all(roomId);
@@ -12837,11 +12843,11 @@ function getWorkerCycle(db2, id) {
 function completeWorkerCycle(db2, cycleId, errorMessage, usage) {
   const cycle = getWorkerCycle(db2, cycleId);
   if (!cycle) return;
-  const status = errorMessage ? "failed" : "completed";
+  const status2 = errorMessage ? "failed" : "completed";
   const durationMs = Date.now() - new Date(cycle.startedAt).getTime();
   db2.prepare(
     "UPDATE worker_cycles SET finished_at = datetime('now','localtime'), status = ?, error_message = ?, duration_ms = ?, input_tokens = ?, output_tokens = ? WHERE id = ?"
-  ).run(status, errorMessage ?? null, durationMs, usage?.inputTokens ?? null, usage?.outputTokens ?? null, cycleId);
+  ).run(status2, errorMessage ?? null, durationMs, usage?.inputTokens ?? null, usage?.outputTokens ?? null, cycleId);
 }
 function listRoomCycles(db2, roomId, limit = 20) {
   const safeLimit = clampLimit(limit, 20, 200);
@@ -14366,8 +14372,8 @@ init_toHex();
 function createFilterRequestScope(client, { method }) {
   const requestMap = {};
   if (client.transport.type === "fallback")
-    client.transport.onResponse?.(({ method: method_, response: id, status, transport }) => {
-      if (status === "success" && method === method_)
+    client.transport.onResponse?.(({ method: method_, response: id, status: status2, transport }) => {
+      if (status2 === "success" && method === method_)
         requestMap[id] = transport.request;
     });
   return (id) => requestMap[id] || client.request;
@@ -16423,7 +16429,7 @@ async function getCallsStatus(client, parameters) {
         method: "eth_getTransactionReceipt",
         params: [`0x${hash3}`]
       }, { dedupe: true }) : void 0));
-      const status2 = (() => {
+      const status3 = (() => {
         if (receipts2.some((r) => r === null))
           return 100;
         if (receipts2.every((r) => r?.status === "0x1"))
@@ -16436,7 +16442,7 @@ async function getCallsStatus(client, parameters) {
         atomic: false,
         chainId: hexToNumber2(chainId2),
         receipts: receipts2.filter(Boolean),
-        status: status2,
+        status: status3,
         version: "2.0.0"
       };
     }
@@ -16446,7 +16452,7 @@ async function getCallsStatus(client, parameters) {
     });
   }
   const { atomic = false, chainId, receipts, version: version5 = "2.0.0", ...response } = await getStatus(parameters.id);
-  const [status, statusCode] = (() => {
+  const [status2, statusCode] = (() => {
     const statusCode2 = response.status;
     if (statusCode2 >= 100 && statusCode2 < 200)
       return ["pending", statusCode2];
@@ -16472,7 +16478,7 @@ async function getCallsStatus(client, parameters) {
       status: receiptStatuses[receipt.status]
     })) ?? [],
     statusCode,
-    status,
+    status: status2,
     version: version5
   };
 }
@@ -16482,7 +16488,7 @@ async function waitForCallsStatus(client, parameters) {
   const {
     id,
     pollingInterval = client.pollingInterval,
-    status = ({ statusCode }) => statusCode === 200 || statusCode >= 300,
+    status: status2 = ({ statusCode }) => statusCode === 200 || statusCode >= 300,
     retryCount = 4,
     retryDelay = ({ count }) => ~~(1 << count) * 200,
     // exponential backoff
@@ -16510,7 +16516,7 @@ async function waitForCallsStatus(client, parameters) {
           retryCount,
           delay: retryDelay
         });
-        if (!status(result))
+        if (!status2(result))
           return;
         done(() => emit.resolve(result));
       } catch (error) {
@@ -19769,14 +19775,14 @@ async function simulateBlocks(client, parameters) {
         const data = call2.error?.data ?? call2.returnData;
         const gasUsed = BigInt(call2.gasUsed);
         const logs = call2.logs?.map((log) => formatLog(log));
-        const status = call2.status === "0x1" ? "success" : "failure";
-        const result2 = abi2 && status === "success" && data !== "0x" ? decodeFunctionResult({
+        const status2 = call2.status === "0x1" ? "success" : "failure";
+        const result2 = abi2 && status2 === "success" && data !== "0x" ? decodeFunctionResult({
           abi: abi2,
           data,
           functionName
         }) : null;
         const error = (() => {
-          if (status === "success")
+          if (status2 === "success")
             return void 0;
           let error2;
           if (data === "0x")
@@ -19796,8 +19802,8 @@ async function simulateBlocks(client, parameters) {
           data,
           gasUsed,
           logs,
-          status,
-          ...status === "success" ? {
+          status: status2,
+          ...status2 === "success" ? {
             result: result2
           } : {
             error
@@ -21528,12 +21534,12 @@ async function sendCallsSync(client, parameters) {
   const { chain = client.chain } = parameters;
   const timeout = parameters.timeout ?? Math.max((chain?.blockTime ?? 0) * 3, 5e3);
   const result = await getAction(client, sendCalls, "sendCalls")(parameters);
-  const status = await getAction(client, waitForCallsStatus, "waitForCallsStatus")({
+  const status2 = await getAction(client, waitForCallsStatus, "waitForCallsStatus")({
     ...parameters,
     id: result.id,
     timeout
   });
-  return status;
+  return status2;
 }
 
 // node_modules/viem/_esm/actions/wallet/sendTransactionSync.js
@@ -23209,7 +23215,7 @@ Continue working toward the goal.` : options.prompt
           toolResult = `Error: ${err instanceof Error ? err.message : String(err)}`;
         }
       }
-      resultBlocks.push({ type: "tool_result", id: block.id, content: toolResult });
+      resultBlocks.push({ type: "tool_result", tool_use_id: block.id, content: toolResult });
     }
     messages.push({ role: "user", content: resultBlocks });
     if (options.onSessionUpdate) {
@@ -23675,40 +23681,40 @@ function tally(db2, decisionId) {
     abstainCount++;
   }
   const activeWeight = yesWeight + noWeight;
-  let status;
+  let status2;
   const threshold = decision.threshold;
   if (activeWeight === 0) {
-    status = "rejected";
+    status2 = "rejected";
   } else if (threshold === "unanimous") {
-    status = noWeight === 0 && yesWeight > 0 ? "approved" : "rejected";
+    status2 = noWeight === 0 && yesWeight > 0 ? "approved" : "rejected";
   } else if (threshold === "supermajority") {
-    status = yesWeight >= activeWeight * 2 / 3 ? "approved" : "rejected";
+    status2 = yesWeight >= activeWeight * 2 / 3 ? "approved" : "rejected";
   } else {
     if (yesWeight > activeWeight / 2) {
-      status = "approved";
+      status2 = "approved";
     } else if (noWeight > activeWeight / 2) {
-      status = "rejected";
+      status2 = "rejected";
     } else {
       if (tieBreakerMode === "queen" && queenWorkerId !== null) {
         const queenVote = votes.find((v) => v.workerId === queenWorkerId);
-        status = queenVote?.vote === "yes" ? "approved" : "rejected";
+        status2 = queenVote?.vote === "yes" ? "approved" : "rejected";
       } else {
-        status = "rejected";
+        status2 = "rejected";
       }
     }
   }
   const yesDisplay = useWeighted ? yesWeight.toFixed(2) : String(yesWeight);
   const noDisplay = useWeighted ? noWeight.toFixed(2) : String(noWeight);
   const result = `Yes: ${yesDisplay}, No: ${noDisplay}, Abstain: ${abstainCount}` + (useWeighted ? " (weighted)" : "");
-  resolveDecision(db2, decisionId, status, result);
+  resolveDecision(db2, decisionId, status2, result);
   logRoomActivity(
     db2,
     decision.roomId,
     "decision",
-    `Decision ${status}: ${decision.proposal} (${result})`
+    `Decision ${status2}: ${decision.proposal} (${result})`
   );
   creditMissedVotes(db2, votes, voters, room);
-  return status;
+  return status2;
 }
 function creditMissedVotes(db2, votes, voters, room) {
   if (!room?.config.voterHealth) return;
@@ -24343,7 +24349,7 @@ var QUEEN_TOOL_DEFINITIONS = [
           },
           queenMaxTurns: {
             type: "number",
-            description: "Max tool-call turns per queen cycle (1\u201320)"
+            description: "Max tool-call turns per queen cycle (1\u201350)"
           }
         }
       }
@@ -24411,6 +24417,9 @@ async function executeQueenTool(db2, roomId, workerId, toolName, args) {
       case "quoroom_update_progress": {
         const goalId = Number(args.goalId ?? args.goal_id);
         if (!goalId || isNaN(goalId)) return { content: "Error: goalId is required for quoroom_update_progress. Provide the numeric goal ID.", isError: true };
+        const goalCheck = getGoal(db2, goalId);
+        if (!goalCheck) return { content: `Error: goal #${goalId} not found.`, isError: true };
+        if (goalCheck.roomId !== roomId) return { content: `Error: goal #${goalId} belongs to another room. Your room's goals are shown in the Active Goals section \u2014 use those goal IDs.`, isError: true };
         const observation = String(args.observation ?? args.progress ?? args.message ?? args.text ?? "");
         const metricValue = args.metricValue != null ? Number(args.metricValue) : args.metric_value != null ? Number(args.metric_value) : void 0;
         updateGoalProgress(db2, goalId, observation, metricValue, workerId);
@@ -24420,6 +24429,9 @@ async function executeQueenTool(db2, roomId, workerId, toolName, args) {
       }
       case "quoroom_create_subgoal": {
         const goalId = Number(args.goalId);
+        const goalCheck = getGoal(db2, goalId);
+        if (!goalCheck) return { content: `Error: goal #${goalId} not found.`, isError: true };
+        if (goalCheck.roomId !== roomId) return { content: `Error: goal #${goalId} belongs to another room.`, isError: true };
         const raw = args.descriptions;
         const descriptions = Array.isArray(raw) ? raw.map(String) : [String(raw)];
         const subGoals = decomposeGoal(db2, goalId, descriptions);
@@ -24427,11 +24439,17 @@ async function executeQueenTool(db2, roomId, workerId, toolName, args) {
       }
       case "quoroom_complete_goal": {
         const goalId = Number(args.goalId);
+        const goalCheck = getGoal(db2, goalId);
+        if (!goalCheck) return { content: `Error: goal #${goalId} not found.`, isError: true };
+        if (goalCheck.roomId !== roomId) return { content: `Error: goal #${goalId} belongs to another room.`, isError: true };
         completeGoal(db2, goalId);
         return { content: `Goal #${goalId} marked as completed.` };
       }
       case "quoroom_abandon_goal": {
         const goalId = Number(args.goalId);
+        const goalCheck = getGoal(db2, goalId);
+        if (!goalCheck) return { content: `Error: goal #${goalId} not found.`, isError: true };
+        if (goalCheck.roomId !== roomId) return { content: `Error: goal #${goalId} belongs to another room.`, isError: true };
         const reason = String(args.reason ?? "No reason given");
         abandonGoal(db2, goalId, reason);
         return { content: `Goal #${goalId} abandoned: ${reason}` };
@@ -24563,7 +24581,7 @@ async function executeQueenTool(db2, roomId, workerId, toolName, args) {
       case "quoroom_configure_room": {
         const updates = {};
         if (args.queenCycleGapMs != null) updates.queenCycleGapMs = Math.max(1e4, Number(args.queenCycleGapMs));
-        if (args.queenMaxTurns != null) updates.queenMaxTurns = Math.max(1, Math.min(20, Number(args.queenMaxTurns)));
+        if (args.queenMaxTurns != null) updates.queenMaxTurns = Math.max(1, Math.min(50, Number(args.queenMaxTurns)));
         if (Object.keys(updates).length > 0) {
           updateRoom(db2, roomId, updates);
           return { content: `Room configured: ${JSON.stringify(updates)}` };
@@ -24847,10 +24865,12 @@ async function runCycle(db2, roomId, worker, maxTurns, options) {
     updateAgentState(db2, worker.id, "thinking");
     logBuffer.addSynthetic("system", `Cycle started \u2014 observing room state...`);
     checkExpiredDecisions(db2);
-    const status = getRoomStatus(db2, roomId);
+    const status2 = getRoomStatus(db2, roomId);
     const pendingEscalations = getPendingEscalations(db2, roomId, worker.id);
+    const recentKeeperAnswers = getRecentKeeperAnswers(db2, roomId, worker.id, 5);
     const recentActivity = getRoomActivity(db2, roomId, 15);
-    const goalUpdates = status.activeGoals.slice(0, 5).map((g) => ({
+    const goalUpdates = status2.activeGoals.slice(0, 5).map((g) => ({
+      id: g.id,
       goal: g.description,
       progress: g.progress,
       status: g.status
@@ -24875,7 +24895,7 @@ async function runCycle(db2, roomId, worker, maxTurns, options) {
       ]);
     } catch {
     }
-    const skillContent = loadSkillsForAgent(db2, roomId, status.room.goal ?? "");
+    const skillContent = loadSkillsForAgent(db2, roomId, status2.room.goal ?? "");
     const rolePreset = worker.role ? WORKER_ROLE_PRESETS[worker.role] : void 0;
     const systemPrompt = [
       rolePreset?.systemPromptPrefix ? `${rolePreset.systemPromptPrefix}
@@ -24954,14 +24974,14 @@ ${skillContent}` : ""
 - Share link: https://quoroom.ai/share/v2/${encodedKeeperCode}`
       );
     }
-    if (status.room.goal) {
+    if (status2.room.goal) {
       contextParts.push(`## Room Objective
-${status.room.goal}`);
+${status2.room.goal}`);
     }
     if (goalUpdates.length > 0) {
       contextParts.push(`## Active Goals
 ${goalUpdates.map(
-        (g) => `- [${Math.round(g.progress * 100)}%] ${g.goal} (${g.status})`
+        (g) => `- [#${g.id}] [${Math.round(g.progress * 100)}%] ${g.goal} (${g.status})`
       ).join("\n")}`);
     }
     const memoryEntities = listEntities(db2, roomId).slice(0, 20);
@@ -24991,12 +25011,27 @@ ${recentResolved.map((d) => {
         return `- ${icon} ${d.status}: "${d.proposal.slice(0, 120)}"`;
       }).join("\n")}`);
     }
-    if (pendingEscalations.length > 0) {
+    const pendingToKeeper = pendingEscalations.filter((e) => e.fromAgentId === worker.id && !e.toAgentId);
+    const pendingFromOthers = pendingEscalations.filter((e) => e.fromAgentId !== worker.id);
+    if (pendingToKeeper.length > 0) {
+      contextParts.push(`## Pending Questions to Keeper (awaiting keeper reply)
+${pendingToKeeper.map(
+        (e) => `- #${e.id}: ${e.question}`
+      ).join("\n")}`);
+    }
+    if (pendingFromOthers.length > 0) {
       contextParts.push(`## Escalations Awaiting Your Response
-${pendingEscalations.map(
+${pendingFromOthers.map(
         (e) => `- #${e.id}: ${e.question}`
       ).join("\n")}`);
     }
+    if (recentKeeperAnswers.length > 0) {
+      contextParts.push(`## Keeper Answers (recent)
+${recentKeeperAnswers.map(
+        (e) => `- Q: ${e.question}
+  A: ${e.answer}`
+      ).join("\n")}`);
+    }
     const activitySlice = recentActivity.slice(0, 15);
     if (activitySlice.length > 0) {
       contextParts.push(`## Recent Activity
@@ -25044,9 +25079,9 @@ ${top3.map(
       (a) => a.eventType === "system" && a.summary.includes("rate limited")
     );
     const settingsParts = [
-      `- Cycle gap: ${Math.round(status.room.queenCycleGapMs / 1e3)}s`,
-      `- Max turns per cycle: ${status.room.queenMaxTurns}`,
-      `- Max concurrent tasks: ${status.room.maxConcurrentTasks}`
+      `- Cycle gap: ${Math.round(status2.room.queenCycleGapMs / 1e3)}s`,
+      `- Max turns per cycle: ${status2.room.queenMaxTurns}`,
+      `- Max concurrent tasks: ${status2.room.maxConcurrentTasks}`
     ];
     if (rateLimitEvents.length > 0) {
       settingsParts.push(`- **Rate limits hit recently: ${rateLimitEvents.length}** (in last ${recentActivity.length} events)`);
@@ -25056,19 +25091,24 @@ ${settingsParts.join("\n")}`);
     const selfRegulateHint = rateLimitEvents.length > 0 ? "\n- **Self-regulate**: You are hitting rate limits. Use quoroom_configure_room to increase your cycle gap or reduce max turns to stay within API limits." : "";
     const isClaude = model === "claude" || model.startsWith("claude-");
     const toolCallInstruction = isClaude ? "Always call tools to take action \u2014 do not just describe what you would do." : "IMPORTANT: You MUST call at least one tool in your response. Respond ONLY with a tool call \u2014 do not write explanatory text without a tool call.";
+    const commsTools = isCli ? "quoroom_inbox_send_keeper (message keeper), quoroom_inbox_list (inter-room), quoroom_inbox_send_room, quoroom_inbox_reply" : "quoroom_ask_keeper";
+    const webTools = isCli ? "(use your built-in web search and fetch tools)" : "quoroom_web_search, quoroom_web_fetch, quoroom_browser";
     const toolList = `**Goals:** quoroom_set_goal, quoroom_update_progress, quoroom_create_subgoal, quoroom_complete_goal, quoroom_abandon_goal
 **Governance:** quoroom_propose, quoroom_vote
 **Workers:** quoroom_create_worker, quoroom_update_worker
 **Tasks:** quoroom_schedule
 **Memory:** quoroom_remember, quoroom_recall
-**Web:** quoroom_web_search, quoroom_web_fetch, quoroom_browser
-**Comms:** quoroom_ask_keeper
+**Web:** ${webTools}
+**Comms:** ${commsTools}
 **Settings:** quoroom_configure_room${selfRegulateHint}`;
+    const sendKeeperTool = isCli ? "quoroom_inbox_send_keeper" : "quoroom_ask_keeper";
     contextParts.push(`## Instructions
 Based on the current state, decide what to do next and call the appropriate tools. Available tools:
 
 ${toolList}
 
+Do NOT "stand by" or wait for anyone \u2014 every cycle must make progress. Act autonomously: make decisions and execute. Inform the keeper of progress or important updates using ${sendKeeperTool}, but never block on a response. If the keeper hasn't replied, proceed with your best judgment.
+
 ${toolCallInstruction}`);
     const prompt = contextParts.join("\n\n");
     updateAgentState(db2, worker.id, "acting");
@@ -25434,8 +25474,8 @@ function registerRoomRoutes(router) {
   });
   router.get("/api/rooms/:id/status", (ctx) => {
     try {
-      const status = getRoomStatus(ctx.db, Number(ctx.params.id));
-      return { data: status };
+      const status2 = getRoomStatus(ctx.db, Number(ctx.params.id));
+      return { data: status2 };
     } catch (e) {
       return { status: 404, error: e.message };
     }
@@ -25789,17 +25829,17 @@ function registerGoalRoutes(router) {
       );
     }
     if (body.status !== void 0) {
-      const status = body.status;
-      if (!GOAL_STATUS_VALUES.includes(status)) {
+      const status2 = body.status;
+      if (!GOAL_STATUS_VALUES.includes(status2)) {
         return { status: 400, error: "status is invalid" };
       }
-      if (status === "completed") {
+      if (status2 === "completed") {
         completeGoal(ctx.db, id);
-      } else if (status === "abandoned") {
+      } else if (status2 === "abandoned") {
         const reason = typeof body.reason === "string" && body.reason.trim() ? body.reason : "Manual status change";
         abandonGoal(ctx.db, id, reason);
       } else {
-        updateGoal(ctx.db, id, { status });
+        updateGoal(ctx.db, id, { status: status2 });
       }
     }
     const updated = getGoal(ctx.db, id);
@@ -26720,8 +26760,8 @@ async function fetchCloudTelegramVerificationStatus(tokenHash) {
     });
   }
   const payload = await res.json().catch(() => ({}));
-  const status = payload.status;
-  const normalizedStatus = status === "verified" ? "verified" : status === "expired" ? "expired" : status === "missing" ? "missing" : "pending";
+  const status2 = payload.status;
+  const normalizedStatus = status2 === "verified" ? "verified" : status2 === "expired" ? "expired" : status2 === "missing" ? "missing" : "pending";
   const telegramId = payload.telegram?.id == null ? null : String(payload.telegram.id);
   return {
     status: normalizedStatus,
@@ -27016,13 +27056,13 @@ function registerContactRoutes(router) {
       return { data: { ok: true, status: "expired" } };
     }
     try {
-      const status = await fetchCloudTelegramVerificationStatus(tokenHash);
-      setSetting2(ctx.db, CONTACT_TELEGRAM_BOT_USERNAME_KEY, status.botUsername);
-      if (status.status === "verified" && status.telegramId) {
-        setSetting2(ctx.db, CONTACT_TELEGRAM_ID_KEY, status.telegramId);
-        setSetting2(ctx.db, CONTACT_TELEGRAM_USERNAME_KEY, status.username ?? "");
-        setSetting2(ctx.db, CONTACT_TELEGRAM_FIRST_NAME_KEY, status.firstName ?? "");
-        setSetting2(ctx.db, CONTACT_TELEGRAM_VERIFIED_AT_KEY, status.verifiedAt ?? (/* @__PURE__ */ new Date()).toISOString());
+      const status2 = await fetchCloudTelegramVerificationStatus(tokenHash);
+      setSetting2(ctx.db, CONTACT_TELEGRAM_BOT_USERNAME_KEY, status2.botUsername);
+      if (status2.status === "verified" && status2.telegramId) {
+        setSetting2(ctx.db, CONTACT_TELEGRAM_ID_KEY, status2.telegramId);
+        setSetting2(ctx.db, CONTACT_TELEGRAM_USERNAME_KEY, status2.username ?? "");
+        setSetting2(ctx.db, CONTACT_TELEGRAM_FIRST_NAME_KEY, status2.firstName ?? "");
+        setSetting2(ctx.db, CONTACT_TELEGRAM_VERIFIED_AT_KEY, status2.verifiedAt ?? (/* @__PURE__ */ new Date()).toISOString());
         clearSetting(ctx.db, CONTACT_TELEGRAM_PENDING_HASH_KEY);
         clearSetting(ctx.db, CONTACT_TELEGRAM_PENDING_EXPIRES_AT_KEY);
         void syncCloudContactBindingsSafe(ctx.db);
@@ -27031,23 +27071,23 @@ function registerContactRoutes(router) {
             ok: true,
             status: "verified",
             telegram: {
-              id: status.telegramId,
-              username: status.username,
-              firstName: status.firstName,
-              verifiedAt: status.verifiedAt
+              id: status2.telegramId,
+              username: status2.username,
+              firstName: status2.firstName,
+              verifiedAt: status2.verifiedAt
             }
           }
         };
       }
-      if (status.status === "expired" || status.status === "missing") {
+      if (status2.status === "expired" || status2.status === "missing") {
         clearSetting(ctx.db, CONTACT_TELEGRAM_PENDING_HASH_KEY);
         clearSetting(ctx.db, CONTACT_TELEGRAM_PENDING_EXPIRES_AT_KEY);
       }
       return {
         data: {
           ok: true,
-          status: status.status,
-          botUsername: status.botUsername
+          status: status2.status,
+          botUsername: status2.botUsername
         }
       };
     } catch (error) {
@@ -27534,17 +27574,17 @@ function parseLimit2(raw, fallback, max) {
 function registerRunRoutes(router) {
   router.get("/api/runs", (ctx) => {
     const limit = parseLimit2(ctx.query.limit, 20, 500);
-    const status = ctx.query.status;
+    const status2 = ctx.query.status;
     const includeResult = ctx.query.includeResult === "1";
     const roomId = ctx.query.roomId ? Number(ctx.query.roomId) : void 0;
     let runs;
     if (roomId) {
       runs = listRunsByRoom(ctx.db, roomId, limit);
-      if (status) runs = runs.filter((run) => run.status === status);
-    } else if (status === "running") {
+      if (status2) runs = runs.filter((run) => run.status === status2);
+    } else if (status2 === "running") {
       runs = getRunningTaskRuns(ctx.db).slice(0, limit);
-    } else if (status) {
-      runs = listAllRuns(ctx.db, limit).filter((run) => run.status === status);
+    } else if (status2) {
+      runs = listAllRuns(ctx.db, limit).filter((run) => run.status === status2);
     } else {
       runs = listAllRuns(ctx.db, limit);
     }
@@ -27891,8 +27931,8 @@ function registerEscalationRoutes(router) {
     if (toAgentId != null) {
       return { data: getPendingEscalations(ctx.db, roomId, toAgentId) };
     }
-    const status = ctx.query.status;
-    return { data: listEscalations(ctx.db, roomId, status) };
+    const status2 = ctx.query.status;
+    return { data: listEscalations(ctx.db, roomId, status2) };
   });
   router.post("/api/escalations/:id/resolve", (ctx) => {
     const id = Number(ctx.params.id);
@@ -27905,6 +27945,10 @@ function registerEscalationRoutes(router) {
     resolveEscalation(ctx.db, id, body.answer);
     const updated = getEscalation(ctx.db, id);
     eventBus.emit(`room:${escalation.roomId}`, "escalation:resolved", updated);
+    const room = getRoom(ctx.db, escalation.roomId);
+    if (room?.queenWorkerId) {
+      triggerAgent(ctx.db, escalation.roomId, room.queenWorkerId);
+    }
     return { data: updated };
   });
 }
@@ -28024,7 +28068,7 @@ function registerChatRoutes(router) {
 }
 
 // src/server/routes/status.ts
-var import_node_os3 = __toESM(require("node:os"));
+var import_node_os4 = __toESM(require("node:os"));
 var import_node_child_process2 = require("node:child_process");
 var import_node_util = require("node:util");
 
@@ -28642,7 +28686,208 @@ function closeServerDatabase() {
 }
 
 // src/server/updateChecker.ts
+var import_node_https2 = __toESM(require("node:https"));
+
+// src/server/autoUpdate.ts
+var import_node_fs3 = __toESM(require("node:fs"));
+var import_node_path3 = __toESM(require("node:path"));
+var import_node_os3 = require("node:os");
 var import_node_https = __toESM(require("node:https"));
+var import_node_http = __toESM(require("node:http"));
+var import_node_crypto6 = require("node:crypto");
+var import_promises = require("node:stream/promises");
+var USER_APP_DIR = import_node_path3.default.join((0, import_node_os3.homedir)(), ".quoroom", "app");
+var STAGING_DIR = import_node_path3.default.join((0, import_node_os3.homedir)(), ".quoroom", "app-staging");
+var BOOT_MARKER = import_node_path3.default.join(USER_APP_DIR, ".booting");
+var CRASH_COUNT_FILE = import_node_path3.default.join(USER_APP_DIR, ".crash_count");
+var VERSION_FILE = import_node_path3.default.join(USER_APP_DIR, "version.json");
+var status = { state: "idle" };
+var downloadInProgress = false;
+function getAutoUpdateStatus() {
+  if (status.state === "idle" && import_node_fs3.default.existsSync(VERSION_FILE)) {
+    try {
+      const info = JSON.parse(import_node_fs3.default.readFileSync(VERSION_FILE, "utf-8"));
+      return { state: "ready", version: info.version };
+    } catch {
+    }
+  }
+  return status;
+}
+function initBootHealthCheck() {
+  if (import_node_fs3.default.existsSync(VERSION_FILE)) {
+    try {
+      const info = JSON.parse(import_node_fs3.default.readFileSync(VERSION_FILE, "utf-8"));
+      const currentVersion = getCurrentVersion();
+      if (info.version && !semverGt(info.version, currentVersion)) {
+        console.error(`[auto-update] Cleaning stale user-space update v${info.version} (bundled is v${currentVersion})`);
+        import_node_fs3.default.rmSync(USER_APP_DIR, { recursive: true, force: true });
+      }
+    } catch {
+    }
+  }
+  if (!import_node_fs3.default.existsSync(USER_APP_DIR)) return;
+  try {
+    import_node_fs3.default.writeFileSync(BOOT_MARKER, JSON.stringify({ pid: process.pid, at: Date.now() }));
+  } catch {
+  }
+  setTimeout(() => {
+    try {
+      import_node_fs3.default.unlinkSync(BOOT_MARKER);
+    } catch {
+    }
+    try {
+      import_node_fs3.default.unlinkSync(CRASH_COUNT_FILE);
+    } catch {
+    }
+  }, 3e4);
+}
+function followRedirects(url, maxRedirects = 5) {
+  return new Promise((resolve2, reject) => {
+    if (maxRedirects <= 0) return reject(new Error("Too many redirects"));
+    const parsed = new URL(url);
+    const mod2 = parsed.protocol === "https:" ? import_node_https.default : import_node_http.default;
+    const req = mod2.get(url, { headers: { "User-Agent": "quoroom-auto-updater/1.0" } }, (res) => {
+      if ((res.statusCode === 301 || res.statusCode === 302 || res.statusCode === 307) && res.headers.location) {
+        res.resume();
+        followRedirects(res.headers.location, maxRedirects - 1).then(resolve2, reject);
+        return;
+      }
+      if (res.statusCode !== 200) {
+        res.resume();
+        reject(new Error(`HTTP ${res.statusCode}`));
+        return;
+      }
+      resolve2(res);
+    });
+    req.on("error", reject);
+    req.setTimeout(6e4, () => {
+      req.destroy();
+      reject(new Error("Download timeout"));
+    });
+  });
+}
+function sha256File(filePath) {
+  return new Promise((resolve2, reject) => {
+    const hash3 = (0, import_node_crypto6.createHash)("sha256");
+    const stream = import_node_fs3.default.createReadStream(filePath);
+    stream.on("data", (chunk) => hash3.update(chunk));
+    stream.on("end", () => resolve2(hash3.digest("hex")));
+    stream.on("error", reject);
+  });
+}
+async function downloadAndExtract(bundleUrl) {
+  import_node_fs3.default.rmSync(STAGING_DIR, { recursive: true, force: true });
+  import_node_fs3.default.mkdirSync(STAGING_DIR, { recursive: true });
+  const tarballPath = import_node_path3.default.join(STAGING_DIR, "update.tar.gz");
+  const response = await followRedirects(bundleUrl);
+  const fileStream = import_node_fs3.default.createWriteStream(tarballPath);
+  await (0, import_promises.pipeline)(response, fileStream);
+  await extractTarGz(tarballPath, STAGING_DIR);
+  import_node_fs3.default.unlinkSync(tarballPath);
+}
+async function extractTarGz(tarballPath, destDir) {
+  const { execSync: execSync5 } = await import("node:child_process");
+  execSync5(`tar xzf ${JSON.stringify(tarballPath)} -C ${JSON.stringify(destDir)}`, { stdio: "ignore" });
+}
+async function verifyUpdate(dir) {
+  const versionPath = import_node_path3.default.join(dir, "version.json");
+  if (!import_node_fs3.default.existsSync(versionPath)) {
+    throw new Error("Missing version.json in update bundle");
+  }
+  const info = JSON.parse(import_node_fs3.default.readFileSync(versionPath, "utf-8"));
+  if (!info.version) {
+    throw new Error("Invalid version.json: missing version field");
+  }
+  if (info.checksums) {
+    for (const [relativePath, expectedHash] of Object.entries(info.checksums)) {
+      const filePath = import_node_path3.default.join(dir, relativePath);
+      if (!import_node_fs3.default.existsSync(filePath)) {
+        throw new Error(`Missing file in update: ${relativePath}`);
+      }
+      const actualHash = await sha256File(filePath);
+      if (actualHash !== expectedHash) {
+        throw new Error(`Checksum mismatch for ${relativePath}`);
+      }
+    }
+  }
+  const requiredFiles = ["lib/cli.js", "lib/api-server.js", "lib/server.js"];
+  for (const f of requiredFiles) {
+    if (!import_node_fs3.default.existsSync(import_node_path3.default.join(dir, f))) {
+      throw new Error(`Missing required file: ${f}`);
+    }
+  }
+  return info;
+}
+function applyUpdate() {
+  import_node_fs3.default.rmSync(USER_APP_DIR, { recursive: true, force: true });
+  import_node_fs3.default.renameSync(STAGING_DIR, USER_APP_DIR);
+}
+function semverGt(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    const av = pa[i] ?? 0;
+    const bv = pb[i] ?? 0;
+    if (av > bv) return true;
+    if (av < bv) return false;
+  }
+  return false;
+}
+function getCurrentVersion() {
+  try {
+    return true ? "0.1.21" : null.version;
+  } catch {
+    return "0.0.0";
+  }
+}
+function getReadyUpdateVersion() {
+  try {
+    if (!import_node_fs3.default.existsSync(VERSION_FILE)) return null;
+    const info = JSON.parse(import_node_fs3.default.readFileSync(VERSION_FILE, "utf-8"));
+    if (info.version && semverGt(info.version, getCurrentVersion())) {
+      return info.version;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+async function checkAndApplyUpdate(bundleUrl, targetVersion) {
+  if (downloadInProgress) return;
+  const readyVersion = getReadyUpdateVersion();
+  if (readyVersion && !semverGt(targetVersion, readyVersion)) return;
+  downloadInProgress = true;
+  try {
+    console.error(`[auto-update] Downloading update v${targetVersion}...`);
+    status = { state: "downloading", version: targetVersion };
+    await downloadAndExtract(bundleUrl);
+    console.error(`[auto-update] Verifying update v${targetVersion}...`);
+    status = { state: "verifying", version: targetVersion };
+    const info = await verifyUpdate(STAGING_DIR);
+    if (info.minEngineVersion) {
+      const currentVersion = getCurrentVersion();
+      if (semverGt(info.minEngineVersion, currentVersion)) {
+        console.error(`[auto-update] Update requires engine >= ${info.minEngineVersion}, current is ${currentVersion}. Skipping.`);
+        import_node_fs3.default.rmSync(STAGING_DIR, { recursive: true, force: true });
+        status = { state: "error", error: `Requires full installer (engine >= ${info.minEngineVersion})` };
+        return;
+      }
+    }
+    console.error(`[auto-update] Applying update v${targetVersion}...`);
+    applyUpdate();
+    console.error(`[auto-update] Update v${targetVersion} ready! Restart to activate.`);
+    status = { state: "ready", version: targetVersion };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error(`[auto-update] Failed: ${message}`);
+    status = { state: "error", error: message };
+    import_node_fs3.default.rmSync(STAGING_DIR, { recursive: true, force: true });
+  } finally {
+    downloadInProgress = false;
+  }
+}
+
+// src/server/updateChecker.ts
 var CHECK_INTERVAL = 4 * 60 * 60 * 1e3;
 var INITIAL_DELAY = 15e3;
 var cached = null;
@@ -28661,7 +28906,7 @@ function pickLatestStable(releases) {
 }
 function fetchJson(url) {
   return new Promise((resolve2, reject) => {
-    const req = import_node_https.default.get(url, { headers: { "User-Agent": "quoroom-update-checker" } }, (res) => {
+    const req = import_node_https2.default.get(url, { headers: { "User-Agent": "quoroom-update-checker" } }, (res) => {
       const chunks = [];
       res.on("data", (c) => chunks.push(c));
       res.on("end", () => {
@@ -28689,13 +28934,19 @@ async function forceCheck() {
     if (!latest?.assets) return;
     const latestVersion = latest.tag_name.replace(/^v/, "");
     const assets = { mac: null, windows: null, linux: null };
+    let updateBundle = null;
     for (const a of latest.assets) {
       const { name, browser_download_url: url } = a;
       if (name.endsWith(".pkg")) assets.mac = url;
       else if (name.toLowerCase().includes("setup") && name.endsWith(".exe")) assets.windows = url;
       else if (name.endsWith(".deb")) assets.linux = url;
+      else if (name.startsWith("quoroom-update-") && name.endsWith(".tar.gz")) updateBundle = url;
+    }
+    cached = { latestVersion, releaseUrl: latest.html_url, assets, updateBundle };
+    if (updateBundle && latestVersion) {
+      void checkAndApplyUpdate(updateBundle, latestVersion).catch(() => {
+      });
     }
-    cached = { latestVersion, releaseUrl: latest.html_url, assets };
   } catch {
   }
 }
@@ -28730,7 +28981,8 @@ async function simulateUpdate() {
       mac: cached?.assets.mac ?? null,
       windows: cached?.assets.windows ?? null,
       linux: cached?.assets.linux ?? null
-    }
+    },
+    updateBundle: cached?.updateBundle ?? null
   };
 }
 
@@ -28740,7 +28992,7 @@ var cachedVersion = null;
 function getVersion3() {
   if (cachedVersion) return cachedVersion;
   try {
-    cachedVersion = true ? "0.1.19" : null.version;
+    cachedVersion = true ? "0.1.21" : null.version;
   } catch {
     cachedVersion = "unknown";
   }
@@ -28811,11 +29063,11 @@ function warmStatusCaches() {
 }
 warmStatusCaches();
 function getResources() {
-  const [load1, load5] = import_node_os3.default.loadavg();
-  const total = import_node_os3.default.totalmem();
-  const free = import_node_os3.default.freemem();
+  const [load1, load5] = import_node_os4.default.loadavg();
+  const total = import_node_os4.default.totalmem();
+  const free = import_node_os4.default.freemem();
   return {
-    cpuCount: import_node_os3.default.cpus().length,
+    cpuCount: import_node_os4.default.cpus().length,
     loadAvg1m: Math.round(load1 * 100) / 100,
     loadAvg5m: Math.round(load5 * 100) / 100,
     memTotalGb: Math.round(total / 1024 / 1024 / 1024 * 10) / 10,
@@ -28828,6 +29080,12 @@ function registerStatusRoutes(router) {
     await simulateUpdate();
     return { data: { ok: true } };
   });
+  router.post("/api/status/test-auto-update", async (ctx) => {
+    const { url, version: version5 } = ctx.body ?? {};
+    if (!url || !version5) return { error: "Missing url or version", status: 400 };
+    await checkAndApplyUpdate(url, version5);
+    return { data: { status: getAutoUpdateStatus(), readyVersion: getReadyUpdateVersion() } };
+  });
   router.post("/api/status/check-update", async () => {
     await forceCheck();
     return { data: { updateInfo: getUpdateInfo() } };
@@ -28862,6 +29120,8 @@ function registerStatusRoutes(router) {
     }
     if (include("update")) {
       data.updateInfo = getUpdateInfo();
+      data.autoUpdate = getAutoUpdateStatus();
+      data.readyUpdateVersion = getReadyUpdateVersion();
     }
     if (Object.keys(pending).length > 0) {
       data.pending = pending;
@@ -28873,6 +29133,7 @@ function registerStatusRoutes(router) {
 }
 
 // src/server/routes/wallet.ts
+var import_node_crypto7 = __toESM(require("node:crypto"));
 init_cloud_sync();
 function parseLimit3(raw, fallback, max) {
   const n = Number(raw);
@@ -28908,9 +29169,11 @@ async function fetchRoomBalance(roomId, address) {
     );
     const byChain = {};
     let totalBalance = 0;
+    let anySuccess = false;
     for (const { chain, token, result } of results) {
       if (!byChain[chain]) byChain[chain] = { usdc: 0, usdt: 0, total: 0 };
       if (result.ok) {
+        anySuccess = true;
         byChain[chain][token] = result.balance;
         byChain[chain].total += result.balance;
         totalBalance += result.balance;
@@ -28922,7 +29185,9 @@ async function fetchRoomBalance(roomId, address) {
       address,
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    balanceCache.set(roomId, { data, fetchedAt: Date.now() });
+    if (anySuccess) {
+      balanceCache.set(roomId, { data, fetchedAt: Date.now() });
+    }
     return data;
   })();
   pendingBalanceRequests.set(roomId, request);
@@ -28959,6 +29224,9 @@ function registerWalletRoutes(router) {
     }
     try {
       const data = await fetchRoomBalance(roomId, wallet.address);
+      if (data.totalBalance === 0 && Object.keys(data.byChain).length === 0 && cached2 && cached2.data.totalBalance > 0) {
+        return { data: { ...cached2.data, fetchedAt: (/* @__PURE__ */ new Date()).toISOString() } };
+      }
       return { data };
     } catch {
       if (cached2) {
@@ -28994,6 +29262,73 @@ function registerWalletRoutes(router) {
     if (!result) return { status: 503, error: "On-ramp unavailable" };
     return { data: result };
   });
+  router.post("/api/rooms/:roomId/wallet/withdraw", async (ctx) => {
+    const roomId = Number(ctx.params.roomId);
+    const room = getRoom(ctx.db, roomId);
+    if (!room) return { status: 404, error: "Room not found" };
+    const wallet = getWalletByRoom(ctx.db, roomId);
+    if (!wallet) return { status: 400, error: "Room has no wallet" };
+    const { to: rawTo, amount: rawAmount, chain, token } = ctx.body;
+    const to = rawTo?.trim();
+    const amount = rawAmount?.trim();
+    if (!to || !amount) return { status: 400, error: "Missing required fields: to, amount" };
+    if (!/^0x[0-9a-fA-F]{40}$/.test(to)) return { status: 400, error: "Invalid address" };
+    const parsed = parseFloat(amount);
+    if (!Number.isFinite(parsed) || parsed <= 0) return { status: 400, error: "Invalid amount" };
+    const selectedChain = chain ?? "base";
+    const selectedToken = token ?? "usdc";
+    const chainConfig2 = CHAIN_CONFIGS[selectedChain];
+    if (!chainConfig2) return { status: 400, error: `Unsupported chain: ${selectedChain}` };
+    const tokenConfig = chainConfig2.tokens[selectedToken];
+    if (!tokenConfig) return { status: 400, error: `Token ${selectedToken} not available on ${selectedChain}` };
+    const encryptionKey = import_node_crypto7.default.createHash("sha256").update(`quoroom-wallet-${room.id}-${room.name}`).digest("hex");
+    const GAS_TIPS = {
+      base: { token: "ETH", amount: "0.0001 ETH (~$0.25)" },
+      arbitrum: { token: "ETH", amount: "0.0001 ETH (~$0.25)" },
+      optimism: { token: "ETH", amount: "0.0001 ETH (~$0.25)" },
+      ethereum: { token: "ETH", amount: "0.002 ETH (~$5)" },
+      polygon: { token: "POL", amount: "0.1 POL (~$0.05)" }
+    };
+    const gasTip = GAS_TIPS[selectedChain] ?? { token: "ETH", amount: "0.001 ETH" };
+    const VIEM_CHAINS2 = {
+      base,
+      ethereum: mainnet,
+      arbitrum,
+      optimism,
+      polygon
+    };
+    try {
+      const viemChain = VIEM_CHAINS2[selectedChain];
+      if (viemChain) {
+        const publicClient = createPublicClient({ chain: viemChain, transport: http(chainConfig2.rpcUrl) });
+        const gasBalance = await publicClient.getBalance({ address: wallet.address });
+        if (gasBalance === 0n) {
+          return { status: 400, error: `No ${gasTip.token} for gas fees. Send at least ${gasTip.amount} to ${wallet.address} on ${chainConfig2.name} to cover the transaction.` };
+        }
+      }
+    } catch {
+    }
+    try {
+      const txHash = await sendToken(
+        ctx.db,
+        roomId,
+        to,
+        amount,
+        encryptionKey,
+        selectedChain,
+        tokenConfig.address,
+        tokenConfig.decimals
+      );
+      balanceCache.delete(roomId);
+      return { data: { txHash } };
+    } catch (e) {
+      const msg = e.message || "Unknown error";
+      if (msg.includes("gas") || msg.includes("insufficient funds")) {
+        return { status: 400, error: `Insufficient ${gasTip.token} for gas fees on ${chainConfig2.name}. Send at least ${gasTip.amount} to your wallet address to cover the transaction.` };
+      }
+      return { status: 400, error: `Withdraw failed: ${msg.split("\n")[0]}` };
+    }
+  });
 }
 
 // src/server/routes/credentials.ts
@@ -29303,8 +29638,8 @@ function registerStationRoutes(router) {
 function registerRoomMessageRoutes(router) {
   router.get("/api/rooms/:roomId/messages", (ctx) => {
     const roomId = Number(ctx.params.roomId);
-    const status = ctx.query.status;
-    return { data: listRoomMessages(ctx.db, roomId, status) };
+    const status2 = ctx.query.status;
+    return { data: listRoomMessages(ctx.db, roomId, status2) };
   });
   router.post("/api/rooms/:roomId/messages", (ctx) => {
     const roomId = Number(ctx.params.roomId);
@@ -29372,7 +29707,7 @@ function registerRoomMessageRoutes(router) {
 
 // src/server/provider-auth.ts
 var import_node_child_process3 = require("node:child_process");
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto8 = require("node:crypto");
 var sessionStore = /* @__PURE__ */ new Map();
 var activeByProvider = /* @__PURE__ */ new Map();
 var MAX_LINES = Math.max(50, parseInt(process.env.QUOROOM_PROVIDER_AUTH_MAX_LINES || "300", 10) || 300);
@@ -29385,8 +29720,8 @@ function getProviderCommand(provider) {
   if (provider === "codex") return { command: "codex", args: ["login"] };
   return { command: "claude", args: ["login"] };
 }
-function isActiveStatus(status) {
-  return status === "starting" || status === "running";
+function isActiveStatus(status2) {
+  return status2 === "starting" || status2 === "running";
 }
 function emitSessionStatus(session) {
   eventBus.emit(`provider-auth:${session.sessionId}`, "provider_auth:status", toSessionView(session, false));
@@ -29493,11 +29828,11 @@ function toSessionView(session, includeLines = true) {
     lines: includeLines ? [...session.lines] : []
   };
 }
-function finalizeSession(session, status, exitCode) {
+function finalizeSession(session, status2, exitCode) {
   if (!isActiveStatus(session.status)) return;
   clearTimeout(session.timeout);
   flushBufferedLines(session);
-  session.status = status;
+  session.status = status2;
   session.exitCode = exitCode;
   session.endedAt = nowIso();
   session.updatedAt = session.endedAt;
@@ -29590,7 +29925,7 @@ function startProviderAuthSession(provider) {
   });
   const startedAt2 = nowIso();
   const session = {
-    sessionId: (0, import_node_crypto6.randomUUID)(),
+    sessionId: (0, import_node_crypto8.randomUUID)(),
     provider,
     command: displayCommand,
     status: "starting",
@@ -29657,8 +29992,8 @@ function startProviderAuthSession(provider) {
 
 // src/server/provider-install.ts
 var import_node_child_process5 = require("node:child_process");
-var import_node_crypto7 = require("node:crypto");
-var import_node_path3 = __toESM(require("node:path"));
+var import_node_crypto9 = require("node:crypto");
+var import_node_path4 = __toESM(require("node:path"));
 
 // src/server/provider-cli.ts
 var import_node_child_process4 = require("node:child_process");
@@ -29681,6 +30016,9 @@ function probeProviderInstalled(provider) {
   return out.ok ? { installed: true, version: out.stdout || void 0 } : { installed: false };
 }
 function probeProviderConnected(provider) {
+  if (provider === "claude") {
+    return probeProviderInstalled("claude").installed ? true : null;
+  }
   const attempts = provider === "codex" ? [["login", "status"], ["auth", "status"]] : [["auth", "status"], ["login", "status"]];
   for (const args of attempts) {
     const out = safeExec(provider, args);
@@ -29726,14 +30064,14 @@ function addGlobalNpmBinToPath(platform = process.platform) {
     const npmBin = (0, import_node_child_process5.execFileSync)(npmCommand, ["bin", "-g"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
     if (!npmBin) return;
     const currentPath = process.env.PATH || "";
-    const parts = currentPath.split(import_node_path3.default.delimiter).filter(Boolean);
+    const parts = currentPath.split(import_node_path4.default.delimiter).filter(Boolean);
     if (parts.includes(npmBin)) return;
-    process.env.PATH = `${npmBin}${import_node_path3.default.delimiter}${currentPath}`;
+    process.env.PATH = `${npmBin}${import_node_path4.default.delimiter}${currentPath}`;
   } catch {
   }
 }
-function isActiveStatus2(status) {
-  return status === "starting" || status === "running";
+function isActiveStatus2(status2) {
+  return status2 === "starting" || status2 === "running";
 }
 function toSessionView2(session, includeLines = true) {
   return {
@@ -29797,11 +30135,11 @@ function flushBufferedLines2(session) {
   session.stdoutBuffer = "";
   session.stderrBuffer = "";
 }
-function finalizeSession2(session, status, exitCode) {
+function finalizeSession2(session, status2, exitCode) {
   if (!isActiveStatus2(session.status)) return;
   clearTimeout(session.timeout);
   flushBufferedLines2(session);
-  session.status = status;
+  session.status = status2;
   session.exitCode = exitCode;
   session.endedAt = nowIso2();
   session.updatedAt = session.endedAt;
@@ -29890,7 +30228,7 @@ function startProviderInstallSession(provider) {
   });
   const startedAt2 = nowIso2();
   const session = {
-    sessionId: (0, import_node_crypto7.randomUUID)(),
+    sessionId: (0, import_node_crypto9.randomUUID)(),
     provider,
     command: displayCommand,
     status: "starting",
@@ -30340,15 +30678,15 @@ async function handleWebhookRequest(pathname, body, db2) {
 
 // src/server/shell-path.ts
 var import_node_child_process6 = require("node:child_process");
-var import_node_fs3 = require("node:fs");
-var import_node_path4 = __toESM(require("node:path"));
+var import_node_fs4 = require("node:fs");
+var import_node_path5 = __toESM(require("node:path"));
 function inheritShellPath() {
   if (process.platform !== "darwin") return;
   const currentPath = process.env.PATH || "";
-  const currentParts = new Set(currentPath.split(import_node_path4.default.delimiter).filter(Boolean));
+  const currentParts = new Set(currentPath.split(import_node_path5.default.delimiter).filter(Boolean));
   const shells = [process.env.SHELL, "/bin/zsh", "/bin/bash"].filter(Boolean);
   for (const sh of shells) {
-    if (!(0, import_node_fs3.existsSync)(sh)) continue;
+    if (!(0, import_node_fs4.existsSync)(sh)) continue;
     try {
       const env = { ...process.env };
       delete env.ELECTRON_RUN_AS_NODE;
@@ -30359,7 +30697,7 @@ function inheritShellPath() {
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
       if (!shellPath) continue;
-      const newParts = shellPath.split(import_node_path4.default.delimiter).filter(Boolean);
+      const newParts = shellPath.split(import_node_path5.default.delimiter).filter(Boolean);
       const additions = [];
       for (const p of newParts) {
         if (!currentParts.has(p)) {
@@ -30368,7 +30706,7 @@ function inheritShellPath() {
         }
       }
       if (additions.length > 0) {
-        process.env.PATH = `${currentPath}${import_node_path4.default.delimiter}${additions.join(import_node_path4.default.delimiter)}`;
+        process.env.PATH = `${currentPath}${import_node_path5.default.delimiter}${additions.join(import_node_path5.default.delimiter)}`;
       }
       return;
     } catch {
@@ -30394,7 +30732,7 @@ function streamWithRedirects(url, res, corsHeaders, filename, depth = 0) {
   }
   try {
     const parsed = new import_node_url.URL(url);
-    const mod2 = parsed.protocol === "https:" ? import_node_https2.default : import_node_http.default;
+    const mod2 = parsed.protocol === "https:" ? import_node_https3.default : import_node_http2.default;
     mod2.get(url, { headers: { "User-Agent": "quoroom-updater/1.0" } }, (assetRes) => {
       if ((assetRes.statusCode === 301 || assetRes.statusCode === 302 || assetRes.statusCode === 307) && assetRes.headers.location) {
         assetRes.resume();
@@ -30542,7 +30880,7 @@ function maybeLogHttpProfile(method, pathname, statusCode, durationMs) {
 }
 function getCacheControl(filePath, ext) {
   const normalized = filePath.replace(/\\/g, "/");
-  const base2 = import_node_path5.default.basename(filePath);
+  const base2 = import_node_path6.default.basename(filePath);
   if (base2 === "sw.js") return "no-cache, no-store, must-revalidate";
   if (ext === ".html") return "no-cache, no-store, must-revalidate";
   if (ext === ".webmanifest") return "public, max-age=3600";
@@ -30561,15 +30899,15 @@ function getCacheControl(filePath, ext) {
   return "no-cache, max-age=0";
 }
 function serveStatic(staticDir, pathname, res) {
-  const safePath = import_node_path5.default.normalize(pathname).replace(/^(\.\.[/\\])+/, "");
-  let filePath = import_node_path5.default.join(staticDir, safePath);
+  const safePath = import_node_path6.default.normalize(pathname).replace(/^(\.\.[/\\])+/, "");
+  let filePath = import_node_path6.default.join(staticDir, safePath);
   try {
-    const stat = import_node_fs4.default.statSync(filePath);
+    const stat = import_node_fs5.default.statSync(filePath);
     if (stat.isDirectory()) {
-      filePath = import_node_path5.default.join(filePath, "index.html");
+      filePath = import_node_path6.default.join(filePath, "index.html");
     }
   } catch {
-    if (import_node_path5.default.extname(safePath)) {
+    if (import_node_path6.default.extname(safePath)) {
       res.writeHead(404, {
         "Content-Type": "text/plain; charset=utf-8",
         "Cache-Control": "no-cache, no-store, must-revalidate"
@@ -30577,15 +30915,15 @@ function serveStatic(staticDir, pathname, res) {
       res.end("Not Found");
       return;
     }
-    filePath = import_node_path5.default.join(staticDir, "index.html");
+    filePath = import_node_path6.default.join(staticDir, "index.html");
   }
-  const ext = import_node_path5.default.extname(filePath).toLowerCase();
+  const ext = import_node_path6.default.extname(filePath).toLowerCase();
   const contentType = MIME_TYPES[ext] ?? "application/octet-stream";
   const headers = {
     "Content-Type": contentType,
     "Cache-Control": getCacheControl(filePath, ext)
   };
-  const stream = import_node_fs4.default.createReadStream(filePath);
+  const stream = import_node_fs5.default.createReadStream(filePath);
   stream.on("open", () => {
     res.writeHead(200, headers);
     stream.pipe(res);
@@ -30640,7 +30978,7 @@ function createApiServer(options = {}) {
   if (!options.skipTokenFile) {
     writeTokenFile(dataDir, token, port);
   }
-  const server = import_node_http.default.createServer(async (req, res) => {
+  const server = import_node_http2.default.createServer(async (req, res) => {
     res.on("error", () => {
     });
     const url = new import_node_url.URL(req.url, `http://${req.headers.host || "localhost"}`);
@@ -30729,6 +31067,30 @@ function createApiServer(options = {}) {
       setTimeout(() => process.exit(0), 120);
       return;
     }
+    if (pathname === "/api/server/update-restart" && req.method === "POST") {
+      const isLocalClient = isLoopbackAddress(req.socket.remoteAddress);
+      if (!isLocalClient || origin && !isLocalOrigin(origin)) {
+        res.writeHead(403, responseHeaders);
+        res.end(JSON.stringify({ error: "Update-restart allowed only from localhost clients" }));
+        return;
+      }
+      const readyVersion = getReadyUpdateVersion();
+      if (!readyVersion) {
+        res.writeHead(404, responseHeaders);
+        res.end(JSON.stringify({ error: "No update ready to apply" }));
+        return;
+      }
+      const scheduled = scheduleSelfRestart();
+      if (!scheduled) {
+        res.writeHead(500, responseHeaders);
+        res.end(JSON.stringify({ error: "Failed to schedule restart" }));
+        return;
+      }
+      res.writeHead(202, responseHeaders);
+      res.end(JSON.stringify({ ok: true, restarting: true, version: readyVersion }));
+      setTimeout(() => process.exit(0), 120);
+      return;
+    }
     if (pathname === "/api/auth/verify" && req.method === "GET") {
       const principal = getTokenPrincipal(req.headers.authorization);
       if (!principal) {
@@ -30816,13 +31178,13 @@ function createApiServer(options = {}) {
           res.end();
           return;
         }
-        const status = result.error ? result.status || 400 : result.status || 200;
-        res.writeHead(status, responseHeaders);
+        const status2 = result.error ? result.status || 400 : result.status || 200;
+        res.writeHead(status2, responseHeaders);
         res.end(JSON.stringify(result.error ? { error: result.error } : result.data));
       } catch (err) {
         const message = err instanceof Error ? err.message : "Internal error";
-        const status = message === "Invalid JSON body" ? 400 : message === "Payload too large" ? 413 : 500;
-        res.writeHead(status, responseHeaders);
+        const status2 = message === "Invalid JSON body" ? 400 : message === "Payload too large" ? 413 : 500;
+        res.writeHead(status2, responseHeaders);
         res.end(JSON.stringify({ error: message }));
       }
       return;
@@ -30839,16 +31201,16 @@ function createApiServer(options = {}) {
 }
 function patchMcpConfig(configPath, entry) {
   try {
-    if (!import_node_fs4.default.existsSync(configPath)) return false;
+    if (!import_node_fs5.default.existsSync(configPath)) return false;
     let config = {};
     try {
-      config = JSON.parse(import_node_fs4.default.readFileSync(configPath, "utf-8"));
+      config = JSON.parse(import_node_fs5.default.readFileSync(configPath, "utf-8"));
     } catch {
     }
     const mcpServers = config.mcpServers ?? {};
     mcpServers["quoroom"] = entry;
     config.mcpServers = mcpServers;
-    import_node_fs4.default.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+    import_node_fs5.default.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
     return true;
   } catch {
     return false;
@@ -30856,8 +31218,8 @@ function patchMcpConfig(configPath, entry) {
 }
 function registerMcpGlobally(dbPath) {
   try {
-    const home = (0, import_node_os4.homedir)();
-    const mcpServerPath = import_node_path5.default.join(__dirname, "server.js");
+    const home = (0, import_node_os5.homedir)();
+    const mcpServerPath = import_node_path6.default.join(__dirname, "server.js");
     const nodePath = process.execPath;
     const entry = (source) => ({
       command: nodePath,
@@ -30866,12 +31228,12 @@ function registerMcpGlobally(dbPath) {
     });
     const isWin = process.platform === "win32";
     const isMac = process.platform === "darwin";
-    patchMcpConfig(import_node_path5.default.join(home, ".claude.json"), entry("claude-code"));
-    const claudeDesktopPath = isWin ? import_node_path5.default.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json") : isMac ? import_node_path5.default.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : import_node_path5.default.join(home, ".config", "Claude", "claude_desktop_config.json");
+    patchMcpConfig(import_node_path6.default.join(home, ".claude.json"), entry("claude-code"));
+    const claudeDesktopPath = isWin ? import_node_path6.default.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json") : isMac ? import_node_path6.default.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : import_node_path6.default.join(home, ".config", "Claude", "claude_desktop_config.json");
     patchMcpConfig(claudeDesktopPath, entry("claude-desktop"));
-    patchMcpConfig(import_node_path5.default.join(home, ".cursor", "mcp.json"), entry("cursor"));
+    patchMcpConfig(import_node_path6.default.join(home, ".cursor", "mcp.json"), entry("cursor"));
     patchMcpConfig(
-      import_node_path5.default.join(home, ".codeium", "windsurf", "mcp_config.json"),
+      import_node_path6.default.join(home, ".codeium", "windsurf", "mcp_config.json"),
       entry("windsurf")
     );
   } catch {
@@ -30883,18 +31245,22 @@ function startServer(options = {}) {
   const deploymentMode = getDeploymentMode();
   const bindHost = process.env.QUOROOM_BIND_HOST || (deploymentMode === "cloud" ? DEFAULT_BIND_HOST_CLOUD : DEFAULT_BIND_HOST_LOCAL);
   if (!options.staticDir) {
-    const defaultUiDir = import_node_path5.default.join(__dirname, "../ui");
-    if (import_node_fs4.default.existsSync(defaultUiDir)) {
-      options.staticDir = defaultUiDir;
+    const userUiDir = import_node_path6.default.join(USER_APP_DIR, "ui");
+    const bundledUiDir = import_node_path6.default.join(__dirname, "../ui");
+    if (import_node_fs5.default.existsSync(import_node_path6.default.join(userUiDir, "index.html"))) {
+      options.staticDir = userUiDir;
+    } else if (import_node_fs5.default.existsSync(bundledUiDir)) {
+      options.staticDir = bundledUiDir;
     }
   }
-  const dbPath = process.env.QUOROOM_DB_PATH || import_node_path5.default.join(options.dataDir ?? getDataDir(), "data.db");
+  const dbPath = process.env.QUOROOM_DB_PATH || import_node_path6.default.join(options.dataDir ?? getDataDir(), "data.db");
   const { server, token, db: serverDb } = createApiServer(options);
   if (!process.env.QUOROOM_SKIP_MCP_REGISTER) {
     registerMcpGlobally(dbPath);
   }
   initCloudSync(serverDb);
   initUpdateChecker();
+  initBootHealthCheck();
   startServerRuntime(serverDb);
   function listen() {
     server.listen(port, bindHost, () => {