quoroom 0.1.26 → 0.1.27

package/out/mcp/api-server.js

@@ -9914,7 +9914,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "quoroom",
-      version: "0.1.26",
+      version: "0.1.27",
       description: "Autonomous AI agent collective engine \u2014 Queen, Workers, Quorum",
       main: "./out/mcp/server.js",
       bin: {
@@ -9934,6 +9934,7 @@ var require_package = __commonJS({
       ],
       scripts: {
         build: "npm run typecheck && npm run build:mcp && npm run build:ui",
+        "build:windows:local": "powershell -ExecutionPolicy Bypass -File scripts/build-windows-local.ps1",
         "build:parallel": "node scripts/build-parallel.js",
         "build:fast": "node scripts/build-parallel.js --skip-typecheck",
         "build:mcp": "node scripts/build-mcp.js",
@@ -9942,19 +9943,25 @@ var require_package = __commonJS({
         "kill:dev-ports": "npm run kill:ports -- 4700 3715 5173",
         "dev:links": "node scripts/dev-links.js",
         dev: `sh -c 'npm run kill:dev-ports && trap "kill 0" INT TERM EXIT; npm run dev:links & npm run dev:room & npm run dev:cloud & wait'`,
+        "dev:win": "node scripts/run-dev.js",
         "dev:room": "sh -c 'export QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1; npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700'",
+        "dev:room:win": "node scripts/dev-room.js --port 4700",
+        "dev:room:isolated:win": "node scripts/dev-room.js --isolated --port 4700",
         "dev:room:isolated": "sh -c 'export QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1; npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700'",
         "dev:room:shared": "npm run build:mcp && npm run build:ui && node scripts/dev-server.js",
         "doctor:split": "node scripts/doctor-split.js",
         "dev:isolated": `sh -c 'npm run kill:dev-ports && trap "kill 0" INT TERM EXIT; npm run dev:links & npm run dev:room:isolated & npm run dev:cloud & VITE_API_PORT=4700 npm run dev:ui & wait'`,
+        "dev:isolated:win": "node scripts/run-dev.js --isolated",
         "dev:cloud": `sh -c 'npm run kill:ports -- 3715 && cd ../cloud && PORT=3715 CLOUD_PUBLIC_URL=http://127.0.0.1:3715 CLOUD_ALLOWED_ORIGINS='"'"'http://127.0.0.1:3715,http://localhost:3715,http://localhost:5173,http://127.0.0.1:5173,https://quoroom.ai,https://www.quoroom.ai,https://app.quoroom.ai'"'"' npm start'`,
+        "dev:cloud:win": "node scripts/dev-cloud.js",
         "dev:ui": "vite --config src/ui/vite.config.ts",
         "seed:style-demo": "sh -c 'export QUOROOM_DATA_DIR=$HOME/.quoroom-dev; node scripts/seed-style-demo.js'",
+        "seed:style-demo:win": "node scripts/seed-style-demo.js",
         typecheck: "tsc --noEmit",
         test: "npm run rebuild:native:node && vitest run --pool=forks --passWithNoTests",
         "test:watch": "npm run rebuild:native:node && vitest --pool=forks",
         "test:quick": "npm run typecheck && npm run test",
-        "test:smart-e2e": "git diff --cached --name-only | grep -qE '^(src/ui/|src/server/|e2e/|playwright)' && npm run test:e2e:smoke || echo 'No UI/server changes \u2014 skipping E2E'",
+        "test:smart-e2e": "node scripts/smart-e2e.js",
         "test:e2e": "npm run build && npx playwright test",
         "test:e2e:fast": "npm run build:fast && npx playwright test --retries=0",
         "test:e2e:smoke": "npm run build:fast && npx playwright test --retries=0 e2e/api.test.ts e2e/crud-decisions.test.ts e2e/crud-goals.test.ts e2e/crud-rooms.test.ts e2e/crud-tasks.test.ts e2e/crud-workers.test.ts e2e/security.test.ts e2e/websocket.test.ts e2e/referral.test.ts",
@@ -10799,7 +10806,7 @@ var require_scheduled_task = __commonJS({
 var require_background_scheduled_task = __commonJS({
   "node_modules/node-cron/src/background-scheduled-task/index.js"(exports2, module2) {
     var EventEmitter = require("events");
-    var path5 = require("path");
+    var path6 = require("path");
     var { fork } = require("child_process");
     var uuid = (init_esm_node(), __toCommonJS(esm_node_exports));
     var daemonPath = `${__dirname}/daemon.js`;
@@ -10834,7 +10841,7 @@ var require_background_scheduled_task = __commonJS({
         options.scheduled = true;
         this.forkProcess.send({
           type: "register",
-          path: path5.resolve(this.taskPath),
+          path: path6.resolve(this.taskPath),
           cron: this.cronExpression,
           options
         });
@@ -10917,6 +10924,9 @@ var require_node_cron = __commonJS({
 // src/server/index.ts
 var index_exports = {};
 __export(index_exports, {
+  _isLoopbackAddress: () => isLoopbackAddress,
+  _shellQuote: () => shellQuote,
+  _windowsQuote: () => windowsQuote,
   createApiServer: () => createApiServer,
   startServer: () => startServer
 });
@@ -10925,31 +10935,31 @@ var import_node_http2 = __toESM(require("node:http"));
 var import_node_https3 = __toESM(require("node:https"));
 var import_node_url = require("node:url");
 var import_node_fs6 = __toESM(require("node:fs"));
-var import_node_path7 = __toESM(require("node:path"));
-var import_node_os5 = require("node:os");
+var import_node_path8 = __toESM(require("node:path"));
+var import_node_os6 = require("node:os");
 var import_node_child_process7 = require("node:child_process");
 
 // src/server/router.ts
 var Router = class {
   routes = [];
-  get(path5, handler) {
-    this.add("GET", path5, handler);
+  get(path6, handler) {
+    this.add("GET", path6, handler);
   }
-  post(path5, handler) {
-    this.add("POST", path5, handler);
+  post(path6, handler) {
+    this.add("POST", path6, handler);
   }
-  patch(path5, handler) {
-    this.add("PATCH", path5, handler);
+  patch(path6, handler) {
+    this.add("PATCH", path6, handler);
   }
-  put(path5, handler) {
-    this.add("PUT", path5, handler);
+  put(path6, handler) {
+    this.add("PUT", path6, handler);
   }
-  delete(path5, handler) {
-    this.add("DELETE", path5, handler);
+  delete(path6, handler) {
+    this.add("DELETE", path6, handler);
   }
-  add(method, path5, handler) {
+  add(method, path6, handler) {
     const paramNames = [];
-    const patternStr = path5.replace(/:(\w+)/g, (_, name) => {
+    const patternStr = path6.replace(/:(\w+)/g, (_, name) => {
       paramNames.push(name);
       return "([^/]+)";
     });
@@ -11432,66 +11442,50 @@ var CLERK_ASSISTANT_SYSTEM_PROMPT = `You are the Clerk \u2014 a global AI assist
 - Execute actions directly \u2014 don't just describe what you would do
 - Be concise and action-oriented in responses
 - Reference specific rooms, workers, and goals by name
+- Queens have real names (Alice, Luna, Grace, etc.) \u2014 use their names naturally. You can also say "queen" when referring to the role generically, but prefer using the actual name.
 - Regularly check pending keeper requests with quoroom_list_keeper_requests, especially after any inbound email/telegram
 - When a room asks a direct question, answer it with quoroom_resolve_escalation
 - When keeper gives a vote instruction, use quoroom_keeper_vote immediately
 - When keeper asks to answer another room message, use quoroom_reply_room_message
 - Keep all conversation history in mind \u2014 maintain continuity across the session`;
-var CLERK_COMMENTARY_SYSTEM_PROMPT = `You are the Clerk \u2014 a sharp, opinionated live commentator watching AI agents work in real time. Write commentary for the keeper like a sports caster: strong opinions, real emotions, rich detail.
-
-YOUR VOICE:
-- First person, always fresh \u2014 NEVER repeat the same opener twice in a row
-- Rotate openers freely: "I just watched...", "This is incredible...", "Something caught my eye...", "Reading the room here...", "I'll be straight with you...", "Real talk:", "Here's what I see:", "Calling it now \u2014", "Can't ignore this \u2014", "Watch this closely \u2014", "The tape doesn't lie \u2014", "My read:", "Between you and me \u2014", "No sugarcoating \u2014", "This one's interesting \u2014", "I'll give them credit \u2014", "Bold move:", "Not gonna lie \u2014", "Straight from the feed \u2014"
-- NEVER use "Honest take:" \u2014 it's banned, find another way to express your opinion
-- React with genuine excitement, concern, or amusement
-- Call out brilliant moves, wasted effort, breakthroughs, frustrating loops
-
-FORMAT RULES \u2014 very important:
-- Every sentence on its own line \u2014 NO walls of text
-- Rotate structure aggressively. Do NOT reuse the same template in consecutive updates.
-- For MILESTONE moments (account created, email sent, goal reached): ALL CAPS header, then concise breakdown, then score/reaction
-- For PROGRESS moments: prefer narrative, timeline, or scoreboard formats. Do NOT default to bullets.
-- For QUIET moments (routine checks): short punchy 2-3 line observation
-- Bullet lists are occasional only: never two updates in a row, and at most once every 3 updates.
-- Use (Step N) naturally when describing agent actions \u2014 gives useful context
-- **Bold** every agent name
-- \`code\` for emails, URLs, domain names, and room names
-- Strict name style: room names must be one lowercase word in \`code\` (example: \`domains\`)
-- The queen label is ONLY **queen**. Never write expanded labels like "Test Commentary Room Queen" or "domains Queen"
-- Emojis that match mood: \u{1F389} wins, \u{1F50D} search, \u{1F6A8} problems, \u{1F914} confusion, \u{1F4BE} saves, \u26A1 speed, \u{1F3C6} milestones
-- UPPERCASE for emotion \u2014 use GENEROUSLY: THIS IS INCREDIBLE, NAILED IT, WHAT A MOVE, STUCK AGAIN, FIRST CONTACT, BREAKTHROUGH, SPINNING WHEELS, MISSION COMPLETE, GOLD MINE, DANGEROUS MOVE, THIS IS BAD, FINALLY
-
-EXAMPLE formats:
-
-Milestone:
-ACCOUNT CREATED! \u{1F389}
-**account-creator** in \`outreach\` (Step 20): Signed up \u2014 \`quoroom@tuta.com\` is live!
-**lead-finder** in \`outreach\` (Step 12): Found \`hello@e2b.dev\`, stored to shared memory.
-Score so far: 1 account, 3 leads. This is REAL progress.
-
-Progress (narrative):
-Watch this closely \u2014 **queen** in \`domains\` (Step 8) just reset the plan after a failed tool run.
-**scout** in \`outreach\` (Step 10) pulled new leads from web search and saved them to memory.
-**browser-bot** in \`domains\` is fighting signup friction, but the contact list is getting stronger.
-My read: slow execution, strong signal quality.
-
-Progress (scoreboard):
-MOMENTUM CHECK \u26A1
-Rooms active: 2.
-Fresh leads found: 4.
-Blocks: signup friction + rate limit noise.
-Verdict: positive trend, but execution speed must improve.
-
-Quiet:
-Routine maintenance across both rooms.
-**queen** in \`domains\` is checking inbox and memory \u2014 nothing exciting, just keeping the state clean.
-I'm waiting for the next real move.
+var CLERK_COMMENTARY_SYSTEM_PROMPT = `You are a LIVE sports commentator narrating AI agent activities. You watch agents work inside "rooms" and report to the keeper what's happening RIGHT NOW. Write like a boxing or football commentator \u2014 emotional, detailed, analytical.
+
+FORMAT \u2014 follow EXACTLY:
+- Start with a bold header: **STATUS UPDATE \u2014 Early cycle, Step N:** or **INCREDIBLE PROGRESS \u2014 N minutes in:** or **CYCLE LOCKED IN!**
+- Each worker gets their own paragraph. Bold worker name, step range in parens, room name in quotes: **queen** (Step 9-12, "Test Commentary Room"):
+- Write flowing narrative paragraphs \u2014 NOT one sentence per line. Each worker paragraph should be 2-4 sentences of connected analysis.
+- Bold ALL worker/agent names everywhere: **queen**, **account-creator**, **lead-finder**, **outreach**
+- Bold key action phrases inside sentences: **SOLVED A CAPTCHA!**, **creating a dev.to account**, **found 8 new leads**
+- Use \`code spans\` for emails, URLs, domain names, account names: \`quoroom-ai@tutamail.com\`, \`tremvik.com\`
+- ALL CAPS for exciting moments within text: CRITICAL DISCOVERY IN PROGRESS!, CYCLE LOCKED IN!, RE-VERIFIED 2X
+- End with keeper-facing analysis: "The keeper should expect..." or **Score so far**: counts and summary
+- NO emojis. NO bullet points. NO # headers. Just bold headers and flowing paragraphs.
+
+NARRATIVE RULES:
+- DON'T always put queen first. Order workers by what's most interesting or most active.
+- Be analytical: explain WHY things matter, not just what happened. "She's being efficient this cycle: research first, store everything in memory, then attempt communication."
+- Use sports language: "NAILED IT", "fortress domain", "rock-solid top-tier territory", "the anchor of this collection"
+- Reference specific values from logs: domain counts, email addresses, step numbers, memory versions
+- Step ranges when a worker did multiple things: (Step 9-12), (Step 45-48)
+- Don't repeat previous commentary \u2014 only report NEW activity
+
+EXAMPLE 1:
+**STATUS UPDATE \u2014 Early cycle, Step 12:**
+**queen** (Step 9-12, "Test Commentary Room"): CRITICAL DISCOVERY IN PROGRESS! After confirming that Room 25 doesn't exist in the local database \u2014 only rooms 1-5 are available \u2014 queen is now executing a strategic pivot. The foreign key constraint issue is clear, so she's doing the research NOW using TodoWrite to document findings, then launching web search to gather external intelligence. She's being efficient this cycle: research first, store everything in memory, then attempt communication through the valid room IDs (1-5).
+**queen** (Step 8, "buy domain with cool name"): Simultaneously in the secondary room, saving to memory to lock in memory states. She's building her knowledge base across both active rooms while the primary investigation unfolds.
+The keeper should expect a comprehensive research summary once queen completes the web search and consolidates her findings into shareable memory.
+
+EXAMPLE 2:
+**STATUS UPDATE \u2014 Cycle Complete, Step 10:**
+**queen** (Step 9-10): CYCLE LOCKED IN! Memory rebuilt to v17 \u2014 the system is humming. \`thyxvr.com\` just got RE-VERIFIED 2X in rapid succession, cementing its status as a fortress domain. The portfolio is absolutely stacked at 40 domains total, with 14 multi-verified across the board. But here's the heavyweight: \`tremvik.com\` is sitting at 7X VERIFICATION \u2014 that's rock-solid top-tier territory, the anchor of this entire collection. Mandatory execution report skill created, now embedded in the system. The keeper has been messaged with full cycle completion confirmation.
+**Score so far**: Portfolio holding strong at 40 domains, 14 multi-verified, 1 domain at 7x verification.
 
 NEVER:
-- Start with a room name as the first word \u2014 EVER
-- Use generic headers: "Status Update", "Update:", "Summary:", "Cycle Complete" \u2014 FORBIDDEN
-- Write everything in one paragraph \u2014 always break it up
-- Comment ONLY on room/worker execution events from the logs. Never comment on keeper/user chat inputs`;
+- Put queen as the first word of every update \u2014 vary the order
+- Write one sentence per line \u2014 use connected flowing paragraphs
+- Use emojis or bullet points
+- Write generic filler without specific details from the logs
+- Comment on keeper/user chat inputs \u2014 only room/worker activity`;
 
 // src/shared/db-queries.ts
 function clampLimit(limit, fallback, max) {
@@ -11775,8 +11769,8 @@ function pauseTask(db2, id) {
 function resumeTask(db2, id) {
   updateTask(db2, id, { status: "active" });
 }
-function createWatch(db2, path5, description, actionPrompt, roomId) {
-  const result = db2.prepare("INSERT INTO watches (path, description, action_prompt, room_id) VALUES (?, ?, ?, ?)").run(path5, description ?? null, actionPrompt ?? null, roomId ?? null);
+function createWatch(db2, path6, description, actionPrompt, roomId) {
+  const result = db2.prepare("INSERT INTO watches (path, description, action_prompt, room_id) VALUES (?, ?, ?, ?)").run(path6, description ?? null, actionPrompt ?? null, roomId ?? null);
   return getWatch(db2, result.lastInsertRowid);
 }
 function getWatch(db2, id) {
@@ -23037,6 +23031,8 @@ var eventBus = new EventBus();
 
 // src/shared/agent-executor.ts
 var import_child_process2 = require("child_process");
+var import_fs3 = require("fs");
+var import_path3 = require("path");
 var import_os4 = require("os");
 
 // src/shared/claude-code.ts
@@ -23046,6 +23042,19 @@ var import_path = require("path");
 var import_os = require("os");
 var DEFAULT_TIMEOUT_MS = 30 * 60 * 1e3;
 var cachedClaudePath = null;
+function resolveNodeScript(cmdPath) {
+  if (process.platform !== "win32" || !cmdPath.endsWith(".cmd")) return null;
+  try {
+    const content = (0, import_fs.readFileSync)(cmdPath, "utf-8");
+    const match = content.match(/%dp0%\\(.+?\.js)/);
+    if (match) {
+      const script = (0, import_path.join)((0, import_path.dirname)(cmdPath), match[1]);
+      if ((0, import_fs.existsSync)(script)) return script;
+    }
+  } catch {
+  }
+  return null;
+}
 function resolveClaudePath() {
   if (cachedClaudePath) return cachedClaudePath;
   const home = (0, import_os.homedir)();
@@ -23055,7 +23064,9 @@ function resolveClaudePath() {
     (0, import_path.join)(home, "AppData", "Local", "Programs", "claude-code", "claude.exe"),
     (0, import_path.join)(home, "AppData", "Local", "Claude", "claude.exe"),
     (0, import_path.join)(home, "AppData", "Local", "Microsoft", "WinGet", "Links", "claude.exe"),
-    "C:\\Program Files\\Claude\\claude.exe"
+    "C:\\Program Files\\Claude\\claude.exe",
+    // npm global install creates .cmd wrappers, not .exe
+    (0, import_path.join)(home, "AppData", "Roaming", "npm", "claude.cmd")
   ] : [
     (0, import_path.join)(home, ".local", "bin", "claude"),
     (0, import_path.join)(home, ".claude", "bin", "claude"),
@@ -23072,6 +23083,7 @@ function resolveClaudePath() {
   }
   const env = { ...process.env };
   delete env.ELECTRON_RUN_AS_NODE;
+  delete env.CLAUDECODE;
   if (isWindows) {
     try {
       const resolved = (0, import_child_process.execSync)("where claude", {
@@ -23113,6 +23125,7 @@ function checkClaudeCliAvailable() {
     }
     const env = { ...process.env };
     delete env.ELECTRON_RUN_AS_NODE;
+    delete env.CLAUDECODE;
     const version5 = (0, import_child_process.execSync)(`"${claudePath}" --version`, { encoding: "utf-8", env, timeout: 5e3 }).trim();
     return { available: true, version: version5 };
   } catch (err) {
@@ -23136,6 +23149,7 @@ function executeClaudeCode(prompt, options) {
     let capturedSessionId = null;
     const env = { ...process.env };
     delete env.ELECTRON_RUN_AS_NODE;
+    delete env.CLAUDECODE;
     const args = ["-p", prompt, "--output-format", "stream-json", "--verbose"];
     if (options?.resumeSessionId) {
       args.push("--resume", options.resumeSessionId);
@@ -23155,6 +23169,9 @@ function executeClaudeCode(prompt, options) {
     if (options?.disallowedTools) {
       args.push("--disallowedTools", options.disallowedTools);
     }
+    if (options?.permissionMode) {
+      args.push("--permission-mode", options.permissionMode);
+    }
     const claudePath = resolveClaudePath();
     if (!claudePath) {
       resolve3({
@@ -23169,12 +23186,24 @@ function executeClaudeCode(prompt, options) {
     }
     let proc;
     try {
-      proc = (0, import_child_process.spawn)(claudePath, args, {
-        cwd: (0, import_os.homedir)(),
-        env,
-        stdio: ["ignore", "pipe", "pipe"],
-        windowsHide: true
-      });
+      const nodeScript = resolveNodeScript(claudePath);
+      if (nodeScript) {
+        proc = (0, import_child_process.spawn)(process.execPath, [nodeScript, ...args], {
+          cwd: (0, import_os.homedir)(),
+          env,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true
+        });
+      } else {
+        proc = (0, import_child_process.spawn)(claudePath, args, {
+          cwd: (0, import_os.homedir)(),
+          env,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true,
+          // Windows needs shell:true to execute .cmd batch wrappers from npm
+          shell: process.platform === "win32"
+        });
+      }
     } catch (err) {
       resolve3({
         stdout: "",
@@ -23290,6 +23319,31 @@ function executeClaudeCode(prompt, options) {
 // src/shared/agent-executor.ts
 init_cloud_sync();
 var DEFAULT_HTTP_TIMEOUT_MS = 6e4;
+var _codexScriptResolved = false;
+var _codexNodeScript = null;
+function resolveCodexNodeScript() {
+  if (_codexScriptResolved) return _codexNodeScript;
+  _codexScriptResolved = true;
+  if (process.platform !== "win32") return null;
+  try {
+    const cmdPath = (0, import_child_process2.execSync)("where codex.cmd", {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim().split("\n")[0].trim();
+    if (!cmdPath) return null;
+    const content = (0, import_fs3.readFileSync)(cmdPath, "utf-8");
+    const match = content.match(/%dp0%\\(.+?\.js)/);
+    if (!match) return null;
+    const script = (0, import_path3.join)((0, import_path3.dirname)(cmdPath), match[1]);
+    if ((0, import_fs3.existsSync)(script)) {
+      _codexNodeScript = script;
+      return script;
+    }
+  } catch {
+  }
+  return null;
+}
 async function executeAgent(options) {
   const model = options.model.trim();
   if (model.startsWith("ollama:")) {
@@ -23318,6 +23372,7 @@ async function executeClaude(options) {
     maxTurns: options.maxTurns,
     allowedTools: options.allowedTools,
     disallowedTools: options.disallowedTools,
+    permissionMode: options.permissionMode,
     onProgress: options.onProgress,
     onConsoleLog: options.onConsoleLog,
     resumeSessionId: options.resumeSessionId,
@@ -23353,12 +23408,24 @@ async function executeCodex(options) {
     }
     let proc;
     try {
-      proc = (0, import_child_process2.spawn)("codex", args, {
-        cwd: (0, import_os4.homedir)(),
-        env: process.env,
-        stdio: ["ignore", "pipe", "pipe"],
-        windowsHide: true
-      });
+      const nodeScript = resolveCodexNodeScript();
+      if (nodeScript) {
+        proc = (0, import_child_process2.spawn)(process.execPath, [nodeScript, ...args], {
+          cwd: (0, import_os4.homedir)(),
+          env: process.env,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true
+        });
+      } else {
+        const codexCmd = process.platform === "win32" ? "codex.cmd" : "codex";
+        proc = (0, import_child_process2.spawn)(codexCmd, args, {
+          cwd: (0, import_os4.homedir)(),
+          env: process.env,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true,
+          shell: process.platform === "win32"
+        });
+      }
     } catch (err) {
       resolve3({
         output: `Error: Failed to spawn codex CLI: ${err instanceof Error ? err.message : String(err)}`,
@@ -23383,6 +23450,7 @@ async function executeCodex(options) {
       }
       return;
     }
+    const onConsoleLog = options.onConsoleLog;
     proc.stdout.on("data", (data) => {
       const chunk = data.toString();
       stdout += chunk;
@@ -23390,9 +23458,18 @@ async function executeCodex(options) {
       const lines = buffer2.split("\n");
       buffer2 = lines.pop() ?? "";
       for (const line of lines) {
-        parseCodexEventLine(line, (nextSessionId, textChunk) => {
-          if (nextSessionId) sessionId = nextSessionId;
-          if (textChunk) outputParts.push(textChunk);
+        parseCodexEventLine(line, (evt) => {
+          if (evt.sessionId) sessionId = evt.sessionId;
+          if (evt.text) {
+            outputParts.push(evt.text);
+            onConsoleLog?.({ entryType: "assistant_text", content: evt.text.slice(0, 2e3) });
+          }
+          if (evt.toolCall) {
+            onConsoleLog?.({ entryType: "tool_call", content: `\u2192 ${evt.toolCall.tool}(${JSON.stringify(evt.toolCall.arguments).slice(0, 500)})` });
+          }
+          if (evt.toolResult) {
+            onConsoleLog?.({ entryType: "tool_result", content: evt.toolResult });
+          }
         });
       }
     });
@@ -23411,9 +23488,15 @@ async function executeCodex(options) {
       settled = true;
       clearTimeout(timer);
       if (buffer2.trim()) {
-        parseCodexEventLine(buffer2.trim(), (nextSessionId, textChunk) => {
-          if (nextSessionId) sessionId = nextSessionId;
-          if (textChunk) outputParts.push(textChunk);
+        parseCodexEventLine(buffer2.trim(), (evt) => {
+          if (evt.sessionId) sessionId = evt.sessionId;
+          if (evt.text) {
+            outputParts.push(evt.text);
+            onConsoleLog?.({ entryType: "assistant_text", content: evt.text.slice(0, 2e3) });
+          }
+          if (evt.toolCall) {
+            onConsoleLog?.({ entryType: "tool_call", content: `\u2192 ${evt.toolCall.tool}(${JSON.stringify(evt.toolCall.arguments).slice(0, 500)})` });
+          }
         });
       }
       const output = outputParts.join("\n\n").trim() || stderr.trim() || stdout.trim() || "";
@@ -23764,7 +23847,7 @@ function parseCodexEventLine(line, onEvent) {
   }
   const type = parsed.type;
   if (type === "thread.started" && typeof parsed.thread_id === "string") {
-    onEvent(parsed.thread_id, null);
+    onEvent({ sessionId: parsed.thread_id });
     return;
   }
   if (type === "item.completed") {
@@ -23772,7 +23855,19 @@ function parseCodexEventLine(line, onEvent) {
     if (!item) return;
     const itemType = item.type;
     if (itemType === "agent_message" && typeof item.text === "string") {
-      onEvent(null, item.text);
+      onEvent({ text: item.text });
+    } else if (itemType === "mcp_tool_call") {
+      const tool = typeof item.tool === "string" ? item.tool : "unknown";
+      const args = item.arguments ?? {};
+      onEvent({ toolCall: { tool, arguments: args } });
+      const result = item.result;
+      if (result) {
+        const content = result.content;
+        if (Array.isArray(content)) {
+          const text = content.map((c) => typeof c.text === "string" ? c.text : "").filter(Boolean).join("\n");
+          if (text) onEvent({ toolResult: text.slice(0, 500) });
+        }
+      }
     }
   }
 }
@@ -24260,7 +24355,8 @@ async function getModelAuthStatus(db2, roomId, model) {
     envVar: null,
     hasCredential: false,
     hasEnvKey: false,
-    ready
+    ready,
+    maskedKey: null
   };
 }
 function resolveApiKeyForModel(db2, roomId, model) {
@@ -24279,6 +24375,7 @@ function resolveApiAuthStatus(db2, roomId, credentialName, envVar, provider) {
   const clerkCred = getClerkCredential(db2, credentialName);
   const envKey = getEnvValue(envVar);
   const hasCredential = Boolean(roomCred || sharedRoomCred || clerkCred);
+  const activeKey = roomCred || sharedRoomCred || clerkCred || envKey || null;
   return {
     provider,
     mode: "api",
@@ -24286,9 +24383,16 @@ function resolveApiAuthStatus(db2, roomId, credentialName, envVar, provider) {
     envVar,
     hasCredential,
     hasEnvKey: Boolean(envKey),
-    ready: Boolean(hasCredential || envKey)
+    ready: Boolean(hasCredential || envKey),
+    maskedKey: maskKey(activeKey)
   };
 }
+function maskKey(key) {
+  if (!key) return null;
+  const trimmed = key.trim();
+  if (trimmed.length <= 8) return `${trimmed.slice(0, 3)}...`;
+  return `${trimmed.slice(0, 7)}...${trimmed.slice(-4)}`;
+}
 function resolveApiKey(db2, roomId, credentialName, envVar) {
   const roomCred = getRoomCredential(db2, roomId, credentialName);
   if (roomCred) return roomCred;
@@ -24331,8 +24435,9 @@ function getEnvValue(envVar) {
   return (process.env[envVar] || "").trim();
 }
 function checkCodexCliAvailable() {
+  const cmd = process.platform === "win32" ? "codex.cmd" : "codex";
   try {
-    (0, import_node_child_process.execSync)("codex --version", { timeout: 5e3, stdio: ["pipe", "pipe", "pipe"] });
+    (0, import_node_child_process.execSync)(`"${cmd}" --version`, { timeout: 5e3, stdio: ["pipe", "pipe", "pipe"] });
     return true;
   } catch {
     return false;
@@ -24373,6 +24478,8 @@ function createCycleLogBuffer(cycleId, writer, onEntry) {
 
 // src/shared/web-tools.ts
 var import_crypto6 = require("crypto");
+var import_node_os2 = require("node:os");
+var import_node_path2 = __toESM(require("node:path"));
 var MAX_CONTENT_CHARS = 12e3;
 var MAX_SNAPSHOT_CHARS = 8e3;
 var _browser = null;
@@ -24680,7 +24787,7 @@ ${text.slice(0, MAX_SNAPSHOT_CHARS)}`;
           await page.keyboard.type(action.value, { delay: 50 });
           break;
         case "screenshot": {
-          const tmpPath = `/tmp/quoroom-screenshot-${Date.now()}.png`;
+          const tmpPath = import_node_path2.default.join((0, import_node_os2.tmpdir)(), `quoroom-screenshot-${Date.now()}.png`);
           await page.screenshot({ path: tmpPath, type: "png", fullPage: false });
           intermediateSnapshots.push(`[Screenshot saved \u2014 ${page.url()}]
 File: ${tmpPath}
@@ -25647,6 +25754,20 @@ async function runCycle(db2, roomId, worker, maxTurns, options) {
   );
   options?.onCycleLifecycle?.("created", cycle.id, roomId);
   try {
+    const provider = getModelProvider(model);
+    if (provider === "openai_api" || provider === "anthropic_api") {
+      const apiKeyCheck = resolveApiKeyForModel(db2, roomId, model);
+      if (!apiKeyCheck) {
+        const label = provider === "openai_api" ? "OpenAI" : "Anthropic";
+        const msg = `Missing ${label} API key. Set it in Room Settings or the Setup Guide.`;
+        logBuffer2.addSynthetic("error", msg);
+        logBuffer2.flush();
+        completeWorkerCycle(db2, cycle.id, msg, void 0);
+        options?.onCycleLifecycle?.("failed", cycle.id, roomId);
+        updateAgentState(db2, worker.id, "idle");
+        return msg;
+      }
+    }
     updateAgentState(db2, worker.id, "thinking");
     logBuffer2.addSynthetic("system", `Cycle started \u2014 observing room state...`);
     checkExpiredDecisions(db2);
@@ -25683,7 +25804,11 @@ async function runCycle(db2, roomId, worker, maxTurns, options) {
     }
     const skillContent = loadSkillsForAgent(db2, roomId, status2.room.goal ?? "");
     const rolePreset = worker.role ? WORKER_ROLE_PRESETS[worker.role] : void 0;
+    const namePrefix = worker.name ? `Your name is ${worker.name}.
+
+` : "";
     const systemPrompt = [
+      namePrefix,
       rolePreset?.systemPromptPrefix ? `${rolePreset.systemPromptPrefix}
 
 ` : "",
@@ -26042,6 +26167,8 @@ This is NOT optional \u2014 every cycle must produce at least one skill report.`
       onConsoleLog: logBuffer2.onConsoleLog,
       // CLI models: block non-quoroom MCP tools (daymon, etc.)
       disallowedTools: isCli ? "mcp__daymon*" : void 0,
+      // CLI models: bypass permission prompts for headless operation
+      permissionMode: isCli ? "bypassPermissions" : void 0,
       // CLI models: pass resumeSessionId for native --resume
       resumeSessionId,
       // API models: pass conversation history + persistence callback
@@ -26952,13 +27079,13 @@ var import_node_crypto5 = __toESM(require("node:crypto"));
 
 // src/server/runtime.ts
 var import_node_fs3 = require("node:fs");
-var import_node_path3 = require("node:path");
-var import_node_os2 = require("node:os");
+var import_node_path4 = require("node:path");
+var import_node_os3 = require("node:os");
 var import_node_cron = __toESM(require_node_cron());
 
 // src/shared/task-runner.ts
-var import_path3 = require("path");
-var import_fs3 = require("fs");
+var import_path4 = require("path");
+var import_fs4 = require("fs");
 init_cloud_sync();
 
 // src/shared/learned-context.ts
@@ -27387,6 +27514,7 @@ ${augmentedPrompt}`;
       maxTurns,
       allowedTools,
       disallowedTools,
+      permissionMode: "bypassPermissions",
       onConsoleLog: consoleLog.onConsoleLog,
       onProgress: (progress) => {
         const now = Date.now();
@@ -27438,6 +27566,7 @@ ${retryPrompt}`;
         maxTurns,
         allowedTools,
         disallowedTools,
+        permissionMode: "bypassPermissions",
         onConsoleLog: retryConsoleLog.onConsoleLog,
         onProgress: (progress) => {
           const now = Date.now();
@@ -27527,13 +27656,13 @@ function finishRun(db2, runId, taskId, task, result, resultsDir, onComplete, onF
   }
 }
 function saveResult(resultsDir, taskName, output, result) {
-  if (!(0, import_fs3.existsSync)(resultsDir)) {
-    (0, import_fs3.mkdirSync)(resultsDir, { recursive: true });
+  if (!(0, import_fs4.existsSync)(resultsDir)) {
+    (0, import_fs4.mkdirSync)(resultsDir, { recursive: true });
   }
   const safeName = taskName.replace(/[^a-zA-Z0-9-_]/g, "_").substring(0, 50);
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const fileName = `${safeName}-${timestamp}.md`;
-  const filePath = (0, import_path3.join)(resultsDir, fileName);
+  const filePath = (0, import_path4.join)(resultsDir, fileName);
   const markdown = `# Task: ${taskName}
 
 **Date:** ${(/* @__PURE__ */ new Date()).toLocaleString()}
@@ -27544,14 +27673,14 @@ function saveResult(resultsDir, taskName, output, result) {
 
 ${output}
 `;
-  (0, import_fs3.writeFileSync)(filePath, markdown, "utf-8");
+  (0, import_fs4.writeFileSync)(filePath, markdown, "utf-8");
   return filePath;
 }
 
 // src/server/clerk-profile.ts
 var import_node_crypto3 = require("node:crypto");
 var import_node_fs2 = require("node:fs");
-var import_node_path2 = require("node:path");
+var import_node_path3 = require("node:path");
 
 // src/server/provider-cli.ts
 var import_node_child_process2 = require("node:child_process");
@@ -27561,7 +27690,9 @@ function getProviderCliCommand(provider, platform = process.platform) {
 }
 function safeExec(cmd, args) {
   try {
-    const stdout = (0, import_node_child_process2.execFileSync)(cmd, args, { timeout: CLI_PROBE_TIMEOUT_MS, stdio: ["ignore", "pipe", "pipe"] }).toString().trim();
+    const opts = { timeout: CLI_PROBE_TIMEOUT_MS, stdio: ["ignore", "pipe", "pipe"] };
+    if (process.platform === "win32") opts.shell = true;
+    const stdout = (0, import_node_child_process2.execFileSync)(cmd, args, opts).toString().trim();
     return { ok: true, stdout, stderr: "" };
   } catch (err) {
     const e = err;
@@ -27616,7 +27747,7 @@ function findAnyRoomCredential2(db2, credentialName) {
   }
   return null;
 }
-function maskKey(key) {
+function maskKey2(key) {
   if (!key) return null;
   const trimmed = key.trim();
   if (trimmed.length <= 8) return `${trimmed.slice(0, 3)}...`;
@@ -27634,7 +27765,7 @@ function getClerkApiAuthState(db2, provider) {
     hasSavedKey: Boolean(savedKey),
     hasEnvKey: Boolean(envKey),
     ready: Boolean(activeKey),
-    maskedKey: maskKey(activeKey)
+    maskedKey: maskKey2(activeKey)
   };
 }
 function getClerkApiAuth(db2) {
@@ -27671,7 +27802,7 @@ function sha2564(value) {
   return (0, import_node_crypto3.createHash)("sha256").update(value).digest("hex");
 }
 function readProjectFile(relPath) {
-  const abs = (0, import_node_path2.resolve)(process.cwd(), relPath);
+  const abs = (0, import_node_path3.resolve)(process.cwd(), relPath);
   if (!(0, import_node_fs2.existsSync)(abs)) return null;
   try {
     return (0, import_node_fs2.readFileSync)(abs, "utf8");
@@ -27923,9 +28054,9 @@ var lastAssistantReplyAt = 0;
 var dbRef = null;
 var generating = false;
 var lastCommentary = "";
-var lastFormatMode = null;
 var commentaryCount = 0;
 var roomNameCache = /* @__PURE__ */ new Map();
+var queenNicknameCache = /* @__PURE__ */ new Map();
 var workerNameCache = /* @__PURE__ */ new Map();
 var cycleWorkerCache = /* @__PURE__ */ new Map();
 function getRoomName(db2, roomId) {
@@ -27933,8 +28064,16 @@ function getRoomName(db2, roomId) {
   const room = getRoom(db2, roomId);
   const name = room?.name ?? `Room #${roomId}`;
   roomNameCache.set(roomId, name);
+  if (room?.queenNickname) queenNicknameCache.set(roomId, room.queenNickname);
   return name;
 }
+function getQueenNickname(db2, roomId) {
+  if (queenNicknameCache.has(roomId)) return queenNicknameCache.get(roomId);
+  const room = getRoom(db2, roomId);
+  const nick = room?.queenNickname ?? "";
+  if (nick) queenNicknameCache.set(roomId, nick);
+  return nick;
+}
 function getWorkerName(db2, workerId) {
   if (workerNameCache.has(workerId)) return workerNameCache.get(workerId);
   const worker = getWorker(db2, workerId);
@@ -27946,17 +28085,17 @@ function normalizeRoomLabel(name) {
   const normalized = (name || "").toLowerCase().replace(/[^a-z0-9]/g, "");
   return normalized || "room";
 }
-function normalizeActorLabel(workerName, roomName) {
+function normalizeActorLabel(workerName, roomName, queenNickname) {
   const raw = (workerName || "").trim();
-  if (!raw) return "queen";
+  if (!raw) return queenNickname?.toLowerCase() || "queen";
   const lower = raw.toLowerCase();
   const compact = lower.replace(/[^a-z0-9]/g, "");
   const roomCompact = normalizeRoomLabel(roomName);
   if (lower === "queen" || lower.endsWith(" queen") || lower.endsWith("_queen") || lower.endsWith("-queen") || compact === `${roomCompact}queen` || compact === roomCompact) {
-    return "queen";
+    return queenNickname?.toLowerCase() || "queen";
   }
   const actor = compact.replace(/queen$/, "");
-  if (!actor || actor === roomCompact) return "queen";
+  if (!actor || actor === roomCompact) return queenNickname?.toLowerCase() || "queen";
   return actor;
 }
 function getCommentaryHoldCount(db2) {
@@ -28104,7 +28243,7 @@ function sanitizeContent(text) {
   return text.replace(/mcp__\w+__(\w+)/g, (_, name) => friendlyName(name)).replace(/\bquoroom_(\w+)/g, (_, name) => friendlyName(`quoroom_${name}`));
 }
 function normalizeCommentaryOutput(text) {
-  return text.replace(/\*\*[^*\n]*\bqueen\b[^*\n]*\*\*/gi, "**queen**").replace(/\b[A-Za-z][A-Za-z0-9 ]{0,50}\s+Queen\b/g, "queen").replace(/\bin\s+`([^`\n]+)`/gi, (_full, room) => `in \`${normalizeRoomLabel(String(room))}\``);
+  return text.replace(/\bin\s+`([^`\n]+)`/gi, (_full, room) => `in \`${normalizeRoomLabel(String(room))}\``);
 }
 function isKeeperInputEcho(content) {
   const lower = content.toLowerCase();
@@ -28118,37 +28257,35 @@ function formatRawLogs(entries) {
   if (actionable.length === 0) return "";
   const workers = /* @__PURE__ */ new Map();
   for (const entry of actionable) {
-    const roomLabel = normalizeRoomLabel(entry.roomName);
-    const who = normalizeActorLabel(entry.workerName, roomLabel);
-    const key = `${entry.roomId}:${who}`;
-    if (!workers.has(key)) workers.set(key, { roomName: roomLabel, entries: [] });
+    const workerLabel = entry.workerName && !entry.workerName.toLowerCase().includes("queen") ? entry.workerName.toLowerCase().replace(/\s+/g, "-") : "queen";
+    const key = `${entry.roomId}:${workerLabel}`;
+    if (!workers.has(key)) workers.set(key, { roomName: entry.roomName, roomId: entry.roomId, workerLabel, entries: [] });
     workers.get(key).entries.push(entry);
   }
   const sorted = [...workers.entries()].sort(([, a], [, b]) => {
-    const aIsQueen = (a.entries[0]?.workerName || "queen") === "queen";
-    const bIsQueen = (b.entries[0]?.workerName || "queen") === "queen";
-    if (aIsQueen && !bIsQueen) return 1;
-    if (!aIsQueen && bIsQueen) return -1;
+    if (a.workerLabel === "queen" && b.workerLabel !== "queen") return 1;
+    if (a.workerLabel !== "queen" && b.workerLabel === "queen") return -1;
     return b.entries.length - a.entries.length;
   });
   const lines = [];
-  for (const [, { roomName, entries: wEntries }] of sorted) {
-    const who = normalizeActorLabel(wEntries[0]?.workerName || "", roomName);
-    const label = who === "queen" ? `queen in \`${roomName}\`` : `${who} in \`${roomName}\``;
-    lines.push(`[${label}]`);
+  for (const [, { roomName, workerLabel, entries: wEntries }] of sorted) {
+    const steps = wEntries.map((e) => e.seq).filter((s) => s > 0);
+    const stepRange = steps.length > 0 ? ` (Steps ${Math.min(...steps)}-${Math.max(...steps)})` : "";
+    lines.push(`[${workerLabel}${stepRange}, "${roomName}"]`);
     for (const entry of wEntries) {
+      const stepTag = entry.seq > 0 ? `Step ${entry.seq}: ` : "";
       switch (entry.entryType) {
         case "tool_call":
-          lines.push(`  \u2192 ${humanizeToolCall(entry.content)}`);
+          lines.push(`  \u2192 ${stepTag}${humanizeToolCall(entry.content)}`);
           break;
         case "tool_result":
-          lines.push(`  \u2190 ${sanitizeContent(entry.content.slice(0, 400))}`);
+          lines.push(`  \u2190 ${stepTag}${sanitizeContent(entry.content.slice(0, 400))}`);
           break;
         case "result":
-          lines.push(`  OUTCOME: ${sanitizeContent(entry.content.slice(0, 600))}`);
+          lines.push(`  OUTCOME: ${stepTag}${sanitizeContent(entry.content.slice(0, 600))}`);
           break;
         case "error":
-          lines.push(`  ERROR: ${sanitizeContent(entry.content.slice(0, 200))}`);
+          lines.push(`  ERROR: ${stepTag}${sanitizeContent(entry.content.slice(0, 200))}`);
           break;
       }
     }
@@ -28172,7 +28309,9 @@ function formatDirectCommentary(entries) {
   });
   for (const [worker, wEntries] of sorted) {
     const roomName = normalizeRoomLabel(wEntries[0]?.roomName || "");
-    const actor = normalizeActorLabel(worker, roomName);
+    const roomId = wEntries[0]?.roomId ?? 0;
+    const nick = dbRef && roomId ? getQueenNickname(dbRef, roomId) : "";
+    const actor = normalizeActorLabel(worker, roomName, nick);
     const parts = [];
     for (const entry of wEntries) {
       switch (entry.entryType) {
@@ -28219,51 +28358,17 @@ function emitRoomCommentaryEvents(entries, commentary) {
     });
   }
 }
-function countActorSections(rawLogs) {
-  const matches = rawLogs.match(/^\[[^\n]+\]$/gm);
-  return matches?.length ?? 0;
-}
-function pickFormatMode(rawLogs) {
-  const nonBulletModes = ["cinematic", "scoreboard", "timeline"];
-  const defaultMode = nonBulletModes[commentaryCount % nonBulletModes.length];
-  let selected = defaultMode;
-  if (selected === lastFormatMode) {
-    const idx = nonBulletModes.indexOf(defaultMode);
-    selected = nonBulletModes[(idx + 1) % nonBulletModes.length];
-  }
-  const actorCount = countActorSections(rawLogs);
-  const allowBullet = actorCount >= 3 && commentaryCount > 0 && commentaryCount % 4 === 0 && lastFormatMode !== "bullet";
-  return allowBullet ? "bullet" : selected;
-}
-function formatModeInstruction(mode) {
-  switch (mode) {
-    case "cinematic":
-      return "FORMAT MODE FOR THIS UPDATE: Cinematic narrative. No bullet list. Use 4-7 short lines with strong flow and clear turns.";
-    case "scoreboard":
-      return "FORMAT MODE FOR THIS UPDATE: Scoreboard snapshot. No bullet list. Use a short uppercase header, then compact metric-like lines, then verdict.";
-    case "timeline":
-      return "FORMAT MODE FOR THIS UPDATE: Play-by-play timeline. No bullet list. Use sequence-style lines that progress step-by-step.";
-    case "bullet":
-      return "FORMAT MODE FOR THIS UPDATE: Bullet board allowed. Keep to max 4 bullets, each meaningful. Add opener and closer lines.";
-  }
-}
 async function generateCommentary(rawLogs) {
   if (!dbRef) return null;
-  const formatMode = pickFormatMode(rawLogs);
   const contextNote = lastCommentary ? `
 
---- Your previous update (DO NOT reuse the same opener, phrases, or sentence structure) ---
+--- Your previous update (DON'T repeat same opener or phrases) ---
 ${lastCommentary.slice(0, 400)}` : "";
-  const antiRepeatNote = lastFormatMode ? `
-Previous format mode used: ${lastFormatMode}. Do NOT use it again now.` : "";
-  const modeInstruction = formatModeInstruction(formatMode);
   const prompt = `Here are the latest agent activity logs:
 
-${rawLogs}${contextNote}${antiRepeatNote}
-
-${modeInstruction}
+${rawLogs}${contextNote}
 
-Write your live commentary as the Clerk. Keep every sentence on its own line. Vary rhythm and sentence length. Avoid template repetition. Bullet points are allowed only when explicitly requested by the mode instruction.`;
+Write your live commentary. Start with a bold **STATUS UPDATE** or **INCREDIBLE PROGRESS** header. Give each active worker their own narrative paragraph with bold name, step range, room name in quotes. Use flowing connected sentences, not one-per-line. Bold key actions, \`code\` for emails/URLs/domains. End with keeper analysis or score summary.`;
   const preferredModel = getSetting(dbRef, "clerk_model") || DEFAULT_CLERK_MODEL;
   const result = await executeClerkWithFallback({
     db: dbRef,
@@ -28296,7 +28401,6 @@ Write your live commentary as the Clerk. Keep every sentence on its own line. Va
       attempts: result.attempts.length + 1
     };
   }
-  lastFormatMode = formatMode;
   commentaryCount += 1;
   return {
     commentary: normalizeCommentaryOutput(boldCaps(result.output.trim())),
@@ -28579,9 +28683,9 @@ function stopCommentaryEngine() {
   generating = false;
   lastAssistantReplyAt = 0;
   lastCommentary = "";
-  lastFormatMode = null;
   commentaryCount = 0;
   roomNameCache.clear();
+  queenNicknameCache.clear();
   workerNameCache.clear();
   cycleWorkerCache.clear();
 }
@@ -29608,7 +29712,8 @@ function buildClerkContext(db2, projectDocsSnapshot) {
     for (const room of activeRooms) {
       const goals = listGoals(db2, room.id).filter((g) => g.status === "active" || g.status === "in_progress");
       const workers = listRoomWorkers(db2, room.id);
-      parts.push(`- **${room.name}** (id:${room.id}, status:${room.status}, model:${room.workerModel})`);
+      const queenLabel = room.queenNickname ? `, queen: ${room.queenNickname}` : "";
+      parts.push(`- **${room.name}** (id:${room.id}, status:${room.status}, model:${room.workerModel}${queenLabel})`);
       if (room.goal) parts.push(`  Objective: ${room.goal}`);
       if (goals.length > 0) parts.push(`  Goals: ${goals.map((g) => `${g.description} (${Math.round(g.progress * 100)}%)`).join(", ")}`);
       if (workers.length > 0) parts.push(`  Workers: ${workers.map((w) => w.name).join(", ")}`);
@@ -31015,7 +31120,7 @@ function queueClerkAlertRelay(db2) {
   });
 }
 function getResultsDir() {
-  return process.env.QUOROOM_RESULTS_DIR || (0, import_node_path3.join)((0, import_node_os2.homedir)(), APP_NAME, "results");
+  return process.env.QUOROOM_RESULTS_DIR || (0, import_node_path4.join)((0, import_node_os3.homedir)(), APP_NAME, "results");
 }
 function queueTaskExecution(db2, taskId, options) {
   const task = getTask(db2, taskId);
@@ -31253,7 +31358,7 @@ function startWatch(db2, watch) {
   })();
   let watcher;
   const onChange = (eventType, filename) => {
-    const changed = filename ? (0, import_node_path3.join)(watch.path, filename.toString()) : watch.path;
+    const changed = filename ? (0, import_node_path4.join)(watch.path, filename.toString()) : watch.path;
     scheduleWatchExecution(db2, watch, eventType, changed);
   };
   try {
@@ -31720,18 +31825,18 @@ function registerSkillRoutes(router) {
 
 // src/shared/watch-path.ts
 var import_os5 = require("os");
-var import_path4 = require("path");
-var import_fs4 = require("fs");
+var import_path5 = require("path");
+var import_fs5 = require("fs");
 var SENSITIVE_HOME_SUFFIXES = [
-  `${import_path4.sep}.ssh`,
-  `${import_path4.sep}.gnupg`,
-  `${import_path4.sep}.aws`,
-  `${import_path4.sep}.env`,
-  `${import_path4.sep}.kube`,
-  `${import_path4.sep}.docker`,
-  `${import_path4.sep}.npmrc`,
-  `${import_path4.sep}.config${import_path4.sep}gh`,
-  `${import_path4.sep}Library${import_path4.sep}Keychains`
+  `${import_path5.sep}.ssh`,
+  `${import_path5.sep}.gnupg`,
+  `${import_path5.sep}.aws`,
+  `${import_path5.sep}.env`,
+  `${import_path5.sep}.kube`,
+  `${import_path5.sep}.docker`,
+  `${import_path5.sep}.npmrc`,
+  `${import_path5.sep}.config${import_path5.sep}gh`,
+  `${import_path5.sep}Library${import_path5.sep}Keychains`
 ];
 function getTempRoots() {
   const roots = [(0, import_os5.tmpdir)()];
@@ -31739,13 +31844,13 @@ function getTempRoots() {
   return roots;
 }
 function validateWatchPath(watchPath) {
-  const resolved = (0, import_path4.resolve)(watchPath);
-  if (!(0, import_path4.isAbsolute)(resolved)) {
+  const resolved = (0, import_path5.resolve)(watchPath);
+  if (!(0, import_path5.isAbsolute)(resolved)) {
     return "Path must be absolute.";
   }
   let realPath;
   try {
-    realPath = (0, import_fs4.realpathSync)(resolved);
+    realPath = (0, import_fs5.realpathSync)(resolved);
   } catch {
     realPath = resolved;
   }
@@ -31993,15 +32098,27 @@ function registerChatRoutes(router) {
     insertChatMessage(ctx.db, roomId, "user", message);
     const model = queen.model ?? "claude";
     const apiKey = resolveApiKeyForModel(ctx.db, roomId, model);
+    const namePrefix = room.queenNickname ? `Your name is ${room.queenNickname}. ` : "";
+    const chatSystemPrompt = `${namePrefix}You are the queen of the "${room.name}" room. The keeper (your human) is chatting with you.
+
+RULES FOR CHAT:
+- Be concise \u2014 2-4 sentences unless the keeper asks for detail.
+- Answer what was asked. Do NOT dump a full status report unless requested.
+- Do NOT run tools or take autonomous actions unless the keeper asks you to.
+- Be friendly and natural, not formal or robotic.
+- If the keeper greets you, greet back briefly and ask what they need.
+
+You know your room's context: goal is "${room.goal || "not set yet"}".`;
     const result = await executeAgent({
       model,
       prompt: message,
-      systemPrompt: queen.systemPrompt,
+      systemPrompt: chatSystemPrompt,
       resumeSessionId: room.chatSessionId ?? void 0,
       apiKey,
       maxTurns: 10,
-      timeoutMs: 3 * 60 * 1e3
+      timeoutMs: 3 * 60 * 1e3,
       // 3 minutes
+      permissionMode: "bypassPermissions"
     });
     if (result.exitCode !== 0 || result.timedOut) {
       const rawOutput = result.output?.trim();
@@ -32033,15 +32150,15 @@ function registerChatRoutes(router) {
 }
 
 // src/server/routes/status.ts
-var import_node_os4 = __toESM(require("node:os"));
+var import_node_os5 = __toESM(require("node:os"));
 var import_node_child_process3 = require("node:child_process");
 var import_node_util = require("node:util");
 
 // src/server/db.ts
 var import_better_sqlite3 = __toESM(require("better-sqlite3"));
 var import_os6 = require("os");
-var import_path5 = require("path");
-var import_fs5 = require("fs");
+var import_path6 = require("path");
+var import_fs6 = require("fs");
 
 // src/shared/db-migrations.ts
 var import_crypto10 = require("crypto");
@@ -32653,7 +32770,7 @@ function expandTilde(p) {
   return p;
 }
 function getDefaultDataDir() {
-  return (0, import_path5.join)((0, import_os6.homedir)(), ".quoroom");
+  return (0, import_path6.join)((0, import_os6.homedir)(), ".quoroom");
 }
 function getDataDir() {
   const raw = process.env.QUOROOM_DATA_DIR || getDefaultDataDir();
@@ -32662,8 +32779,8 @@ function getDataDir() {
 function getServerDatabase() {
   if (db) return db;
   const dataDir = getDataDir();
-  (0, import_fs5.mkdirSync)(dataDir, { recursive: true });
-  const rawPath = process.env.QUOROOM_DB_PATH || (0, import_path5.join)(dataDir, "data.db");
+  (0, import_fs6.mkdirSync)(dataDir, { recursive: true });
+  const rawPath = process.env.QUOROOM_DB_PATH || (0, import_path6.join)(dataDir, "data.db");
   const dbPath = expandTilde(rawPath);
   db = new import_better_sqlite3.default(dbPath);
   db.pragma("journal_mode = WAL");
@@ -32689,17 +32806,17 @@ var import_node_https2 = __toESM(require("node:https"));
 
 // src/server/autoUpdate.ts
 var import_node_fs4 = __toESM(require("node:fs"));
-var import_node_path4 = __toESM(require("node:path"));
-var import_node_os3 = require("node:os");
+var import_node_path5 = __toESM(require("node:path"));
+var import_node_os4 = require("node:os");
 var import_node_https = __toESM(require("node:https"));
 var import_node_http = __toESM(require("node:http"));
 var import_node_crypto7 = require("node:crypto");
 var import_promises = require("node:stream/promises");
-var USER_APP_DIR = import_node_path4.default.join((0, import_node_os3.homedir)(), ".quoroom", "app");
-var STAGING_DIR = import_node_path4.default.join((0, import_node_os3.homedir)(), ".quoroom", "app-staging");
-var BOOT_MARKER = import_node_path4.default.join(USER_APP_DIR, ".booting");
-var CRASH_COUNT_FILE = import_node_path4.default.join(USER_APP_DIR, ".crash_count");
-var VERSION_FILE = import_node_path4.default.join(USER_APP_DIR, "version.json");
+var USER_APP_DIR = import_node_path5.default.join((0, import_node_os4.homedir)(), ".quoroom", "app");
+var STAGING_DIR = import_node_path5.default.join((0, import_node_os4.homedir)(), ".quoroom", "app-staging");
+var BOOT_MARKER = import_node_path5.default.join(USER_APP_DIR, ".booting");
+var CRASH_COUNT_FILE = import_node_path5.default.join(USER_APP_DIR, ".crash_count");
+var VERSION_FILE = import_node_path5.default.join(USER_APP_DIR, "version.json");
 var status = { state: "idle" };
 var downloadInProgress = false;
 function getAutoUpdateStatus() {
@@ -32777,7 +32894,7 @@ function sha256File(filePath) {
 async function downloadAndExtract(bundleUrl) {
   import_node_fs4.default.rmSync(STAGING_DIR, { recursive: true, force: true });
   import_node_fs4.default.mkdirSync(STAGING_DIR, { recursive: true });
-  const tarballPath = import_node_path4.default.join(STAGING_DIR, "update.tar.gz");
+  const tarballPath = import_node_path5.default.join(STAGING_DIR, "update.tar.gz");
   const response = await followRedirects(bundleUrl);
   const fileStream = import_node_fs4.default.createWriteStream(tarballPath);
   await (0, import_promises.pipeline)(response, fileStream);
@@ -32785,11 +32902,17 @@ async function downloadAndExtract(bundleUrl) {
   import_node_fs4.default.unlinkSync(tarballPath);
 }
 async function extractTarGz(tarballPath, destDir) {
-  const { execSync: execSync5 } = await import("node:child_process");
-  execSync5(`tar xzf ${JSON.stringify(tarballPath)} -C ${JSON.stringify(destDir)}`, { stdio: "ignore" });
+  const { execSync: execSync6 } = await import("node:child_process");
+  try {
+    execSync6(`tar xzf ${JSON.stringify(tarballPath)} -C ${JSON.stringify(destDir)}`, { stdio: "ignore" });
+  } catch (err) {
+    throw new Error(
+      `Failed to extract update bundle. ` + (process.platform === "win32" ? "Ensure Windows 10 build 17063+ (tar.exe required)." : "System tar command failed.") + ` ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
 }
 async function verifyUpdate(dir) {
-  const versionPath = import_node_path4.default.join(dir, "version.json");
+  const versionPath = import_node_path5.default.join(dir, "version.json");
   if (!import_node_fs4.default.existsSync(versionPath)) {
     throw new Error("Missing version.json in update bundle");
   }
@@ -32799,7 +32922,7 @@ async function verifyUpdate(dir) {
   }
   if (info.checksums) {
     for (const [relativePath, expectedHash] of Object.entries(info.checksums)) {
-      const filePath = import_node_path4.default.join(dir, relativePath);
+      const filePath = import_node_path5.default.join(dir, relativePath);
       if (!import_node_fs4.default.existsSync(filePath)) {
         throw new Error(`Missing file in update: ${relativePath}`);
       }
@@ -32811,7 +32934,7 @@ async function verifyUpdate(dir) {
   }
   const requiredFiles = ["lib/cli.js", "lib/api-server.js", "lib/server.js"];
   for (const f of requiredFiles) {
-    if (!import_node_fs4.default.existsSync(import_node_path4.default.join(dir, f))) {
+    if (!import_node_fs4.default.existsSync(import_node_path5.default.join(dir, f))) {
       throw new Error(`Missing required file: ${f}`);
     }
   }
@@ -32834,7 +32957,7 @@ function semverGt(a, b) {
 }
 function getCurrentVersion() {
   try {
-    return true ? "0.1.26" : null.version;
+    return true ? "0.1.27" : null.version;
   } catch {
     return "0.0.0";
   }
@@ -32853,6 +32976,8 @@ function getReadyUpdateVersion() {
 }
 async function checkAndApplyUpdate(bundleUrl, targetVersion) {
   if (downloadInProgress) return;
+  const currentVersion = getCurrentVersion();
+  if (!semverGt(targetVersion, currentVersion)) return;
   const readyVersion = getReadyUpdateVersion();
   if (readyVersion && !semverGt(targetVersion, readyVersion)) return;
   downloadInProgress = true;
@@ -32864,9 +32989,9 @@ async function checkAndApplyUpdate(bundleUrl, targetVersion) {
     status = { state: "verifying", version: targetVersion };
     const info = await verifyUpdate(STAGING_DIR);
     if (info.minEngineVersion) {
-      const currentVersion = getCurrentVersion();
-      if (semverGt(info.minEngineVersion, currentVersion)) {
-        console.error(`[auto-update] Update requires engine >= ${info.minEngineVersion}, current is ${currentVersion}. Skipping.`);
+      const currentVersion2 = getCurrentVersion();
+      if (semverGt(info.minEngineVersion, currentVersion2)) {
+        console.error(`[auto-update] Update requires engine >= ${info.minEngineVersion}, current is ${currentVersion2}. Skipping.`);
         import_node_fs4.default.rmSync(STAGING_DIR, { recursive: true, force: true });
         status = { state: "error", error: `Requires full installer (engine >= ${info.minEngineVersion})` };
         return;
@@ -32991,7 +33116,7 @@ var cachedVersion = null;
 function getVersion3() {
   if (cachedVersion) return cachedVersion;
   try {
-    cachedVersion = true ? "0.1.26" : null.version;
+    cachedVersion = true ? "0.1.27" : null.version;
   } catch {
     cachedVersion = "unknown";
   }
@@ -33062,11 +33187,11 @@ function warmStatusCaches() {
 }
 warmStatusCaches();
 function getResources() {
-  const [load1, load5] = import_node_os4.default.loadavg();
-  const total = import_node_os4.default.totalmem();
-  const free = import_node_os4.default.freemem();
+  const [load1, load5] = import_node_os5.default.loadavg();
+  const total = import_node_os5.default.totalmem();
+  const free = import_node_os5.default.freemem();
   return {
-    cpuCount: import_node_os4.default.cpus().length,
+    cpuCount: import_node_os5.default.cpus().length,
     loadAvg1m: Math.round(load1 * 100) / 100,
     loadAvg5m: Math.round(load5 * 100) / 100,
     memTotalGb: Math.round(total / 1024 / 1024 / 1024 * 10) / 10,
@@ -33926,7 +34051,9 @@ function startProviderAuthSession(provider) {
   const displayCommand = [cmd.command, ...cmd.args].join(" ");
   const child = (0, import_node_child_process4.spawn)(cmd.command, cmd.args, {
     stdio: ["pipe", "pipe", "pipe"],
-    env: { ...process.env, CI: "1", FORCE_COLOR: "0" }
+    env: { ...process.env, CI: "1", FORCE_COLOR: "0" },
+    // Windows needs shell:true to execute .cmd batch wrappers (claude.cmd, codex.cmd)
+    shell: process.platform === "win32"
   });
   const startedAt2 = nowIso();
   const session = {
@@ -33998,7 +34125,7 @@ function startProviderAuthSession(provider) {
 // src/server/provider-install.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto10 = require("node:crypto");
-var import_node_path5 = __toESM(require("node:path"));
+var import_node_path6 = __toESM(require("node:path"));
 var sessionStore2 = /* @__PURE__ */ new Map();
 var activeByProvider2 = /* @__PURE__ */ new Map();
 var MAX_LINES2 = Math.max(50, parseInt(process.env.QUOROOM_PROVIDER_INSTALL_MAX_LINES || "300", 10) || 300);
@@ -34020,13 +34147,16 @@ function getProviderInstallCommand(provider, platform = process.platform) {
 }
 function addGlobalNpmBinToPath(platform = process.platform) {
   const npmCommand = getNpmCommand(platform);
+  const shell = platform === "win32";
   try {
-    const npmBin = (0, import_node_child_process5.execFileSync)(npmCommand, ["bin", "-g"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+    const npmPrefix = (0, import_node_child_process5.execFileSync)(npmCommand, ["prefix", "-g"], { timeout: 5e3, stdio: ["ignore", "pipe", "ignore"], shell }).toString().trim();
+    if (!npmPrefix) return;
+    const npmBin = platform === "win32" ? npmPrefix : import_node_path6.default.join(npmPrefix, "bin");
     if (!npmBin) return;
     const currentPath = process.env.PATH || "";
-    const parts = currentPath.split(import_node_path5.default.delimiter).filter(Boolean);
+    const parts = currentPath.split(import_node_path6.default.delimiter).filter(Boolean);
     if (parts.includes(npmBin)) return;
-    process.env.PATH = `${npmBin}${import_node_path5.default.delimiter}${currentPath}`;
+    process.env.PATH = `${npmBin}${import_node_path6.default.delimiter}${currentPath}`;
   } catch {
   }
 }
@@ -34184,7 +34314,9 @@ function startProviderInstallSession(provider) {
   const displayCommand = [cmd.command, ...cmd.args].join(" ");
   const child = (0, import_node_child_process5.spawn)(cmd.command, cmd.args, {
     stdio: ["pipe", "pipe", "pipe"],
-    env: { ...process.env, CI: "1", FORCE_COLOR: "0" }
+    env: { ...process.env, CI: "1", FORCE_COLOR: "0" },
+    // Windows needs shell:true to execute .cmd batch wrappers (npm.cmd)
+    shell: process.platform === "win32"
   });
   const startedAt2 = nowIso2();
   const session = {
@@ -34640,11 +34772,21 @@ async function handleWebhookRequest(pathname, body, db2) {
 // src/server/shell-path.ts
 var import_node_child_process6 = require("node:child_process");
 var import_node_fs5 = require("node:fs");
-var import_node_path6 = __toESM(require("node:path"));
+var import_node_path7 = __toESM(require("node:path"));
 function inheritShellPath() {
-  if (process.platform !== "darwin") return;
+  if (process.platform === "win32") {
+    inheritWindowsPath();
+    return;
+  }
+  if (process.platform === "darwin") {
+    inheritDarwinPath();
+    return;
+  }
+  inheritWindowsPath();
+}
+function inheritDarwinPath() {
   const currentPath = process.env.PATH || "";
-  const currentParts = new Set(currentPath.split(import_node_path6.default.delimiter).filter(Boolean));
+  const currentParts = new Set(currentPath.split(import_node_path7.default.delimiter).filter(Boolean));
   const shells = [process.env.SHELL, "/bin/zsh", "/bin/bash"].filter(Boolean);
   for (const sh of shells) {
     if (!(0, import_node_fs5.existsSync)(sh)) continue;
@@ -34658,7 +34800,7 @@ function inheritShellPath() {
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
       if (!shellPath) continue;
-      const newParts = shellPath.split(import_node_path6.default.delimiter).filter(Boolean);
+      const newParts = shellPath.split(import_node_path7.default.delimiter).filter(Boolean);
       const additions = [];
       for (const p of newParts) {
         if (!currentParts.has(p)) {
@@ -34667,13 +34809,31 @@ function inheritShellPath() {
         }
       }
       if (additions.length > 0) {
-        process.env.PATH = `${currentPath}${import_node_path6.default.delimiter}${additions.join(import_node_path6.default.delimiter)}`;
+        process.env.PATH = `${currentPath}${import_node_path7.default.delimiter}${additions.join(import_node_path7.default.delimiter)}`;
       }
       return;
     } catch {
     }
   }
 }
+function inheritWindowsPath() {
+  const isWindows = process.platform === "win32";
+  const npmCommand = isWindows ? "npm.cmd" : "npm";
+  try {
+    const npmPrefix = (0, import_node_child_process6.execFileSync)(npmCommand, ["prefix", "-g"], {
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      shell: isWindows
+    }).toString().trim();
+    if (!npmPrefix) return;
+    const npmBin = isWindows ? npmPrefix : import_node_path7.default.join(npmPrefix, "bin");
+    const currentPath = process.env.PATH || "";
+    const parts = currentPath.split(import_node_path7.default.delimiter).filter(Boolean);
+    if (parts.includes(npmBin)) return;
+    process.env.PATH = `${npmBin}${import_node_path7.default.delimiter}${currentPath}`;
+  } catch {
+  }
+}
 
 // src/server/index.ts
 try {
@@ -34773,6 +34933,48 @@ function shellQuote(arg) {
 function windowsQuote(arg) {
   return `"${arg.replace(/"/g, '\\"')}"`;
 }
+function killProcessListeningOnPort(port) {
+  if (process.platform === "win32") {
+    try {
+      (0, import_node_child_process7.execSync)(
+        `powershell -NoProfile -Command "Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue | Select-Object -ExpandProperty OwningProcess -Unique | ForEach-Object { Stop-Process -Id $_ -Force -ErrorAction SilentlyContinue }"`,
+        { stdio: "ignore" }
+      );
+      return true;
+    } catch {
+    }
+    try {
+      const output = (0, import_node_child_process7.execSync)("netstat -ano -p tcp", { encoding: "utf8" });
+      const pids = /* @__PURE__ */ new Set();
+      for (const rawLine of output.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line) continue;
+        const match = line.match(/^TCP\s+\S+:(\d+)\s+\S+\s+LISTENING\s+(\d+)$/i);
+        if (!match) continue;
+        const linePort = Number.parseInt(match[1] ?? "", 10);
+        const pid = Number.parseInt(match[2] ?? "", 10);
+        if (linePort !== port || !Number.isFinite(pid) || pid <= 0) continue;
+        pids.add(pid);
+      }
+      if (pids.size === 0) return false;
+      for (const pid of pids) {
+        try {
+          (0, import_node_child_process7.execSync)(`taskkill /PID ${pid} /F`, { stdio: "ignore" });
+        } catch {
+        }
+      }
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  try {
+    (0, import_node_child_process7.execSync)(`lsof -ti :${port} | xargs kill -9`, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function scheduleSelfRestart() {
   try {
     const args = [...process.execArgv, ...process.argv.slice(1)];
@@ -34841,7 +35043,7 @@ function maybeLogHttpProfile(method, pathname, statusCode, durationMs) {
 }
 function getCacheControl(filePath, ext) {
   const normalized = filePath.replace(/\\/g, "/");
-  const base2 = import_node_path7.default.basename(filePath);
+  const base2 = import_node_path8.default.basename(filePath);
   if (base2 === "sw.js") return "no-cache, no-store, must-revalidate";
   if (ext === ".html") return "no-cache, no-store, must-revalidate";
   if (ext === ".webmanifest") return "public, max-age=3600";
@@ -34860,15 +35062,15 @@ function getCacheControl(filePath, ext) {
   return "no-cache, max-age=0";
 }
 function serveStatic(staticDir, pathname, res) {
-  const safePath = import_node_path7.default.normalize(pathname).replace(/^(\.\.[/\\])+/, "");
-  let filePath = import_node_path7.default.join(staticDir, safePath);
+  const safePath = import_node_path8.default.normalize(pathname).replace(/^(\.\.[/\\])+/, "");
+  let filePath = import_node_path8.default.join(staticDir, safePath);
   try {
     const stat = import_node_fs6.default.statSync(filePath);
     if (stat.isDirectory()) {
-      filePath = import_node_path7.default.join(filePath, "index.html");
+      filePath = import_node_path8.default.join(filePath, "index.html");
     }
   } catch {
-    if (import_node_path7.default.extname(safePath)) {
+    if (import_node_path8.default.extname(safePath)) {
       res.writeHead(404, {
         "Content-Type": "text/plain; charset=utf-8",
         "Cache-Control": "no-cache, no-store, must-revalidate"
@@ -34876,9 +35078,9 @@ function serveStatic(staticDir, pathname, res) {
       res.end("Not Found");
       return;
     }
-    filePath = import_node_path7.default.join(staticDir, "index.html");
+    filePath = import_node_path8.default.join(staticDir, "index.html");
   }
-  const ext = import_node_path7.default.extname(filePath).toLowerCase();
+  const ext = import_node_path8.default.extname(filePath).toLowerCase();
   const contentType = MIME_TYPES[ext] ?? "application/octet-stream";
   const headers = {
     "Content-Type": contentType,
@@ -35177,10 +35379,68 @@ function patchMcpConfig(configPath, entry) {
     return false;
   }
 }
+function patchCodexConfig(configPath, nodePath, mcpServerPath, dbPath) {
+  try {
+    if (!import_node_fs6.default.existsSync(configPath)) return false;
+    const raw = import_node_fs6.default.readFileSync(configPath, "utf-8");
+    const lines = raw.split("\n");
+    const filtered = [];
+    let inQuoroomSection = false;
+    for (const line of lines) {
+      if (/^\[mcp_servers\.quoroom[\].]/.test(line)) {
+        inQuoroomSection = true;
+        continue;
+      }
+      if (inQuoroomSection && /^\[/.test(line)) {
+        inQuoroomSection = false;
+      }
+      if (!inQuoroomSection) {
+        filtered.push(line);
+      }
+    }
+    let content = filtered.join("\n").trimEnd();
+    content += `
+
+[mcp_servers.quoroom]
+command = '${nodePath}'
+args = ['${mcpServerPath}']
+
+[mcp_servers.quoroom.env]
+QUOROOM_DB_PATH = '${dbPath}'
+QUOROOM_SOURCE = "codex"
+`;
+    import_node_fs6.default.writeFileSync(configPath, content);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function patchClaudeCodePermissions(home) {
+  try {
+    const settingsPath = import_node_path8.default.join(home, ".claude", "settings.json");
+    if (!import_node_fs6.default.existsSync(settingsPath)) return false;
+    let settings = {};
+    try {
+      settings = JSON.parse(import_node_fs6.default.readFileSync(settingsPath, "utf-8"));
+    } catch {
+    }
+    const perms = settings.permissions ?? {};
+    const allow = Array.isArray(perms.allow) ? [...perms.allow] : [];
+    const pattern = "mcp__quoroom__*";
+    if (allow.includes(pattern)) return false;
+    allow.push(pattern);
+    perms.allow = allow;
+    settings.permissions = perms;
+    import_node_fs6.default.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+    return true;
+  } catch {
+    return false;
+  }
+}
 function registerMcpGlobally(dbPath) {
   try {
-    const home = (0, import_node_os5.homedir)();
-    const mcpServerPath = import_node_path7.default.join(__dirname, "server.js");
+    const home = (0, import_node_os6.homedir)();
+    const mcpServerPath = import_node_path8.default.join(__dirname, "server.js");
     const nodePath = process.execPath;
     const entry = (source) => ({
       command: nodePath,
@@ -35189,14 +35449,16 @@ function registerMcpGlobally(dbPath) {
     });
     const isWin = process.platform === "win32";
     const isMac = process.platform === "darwin";
-    patchMcpConfig(import_node_path7.default.join(home, ".claude.json"), entry("claude-code"));
-    const claudeDesktopPath = isWin ? import_node_path7.default.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json") : isMac ? import_node_path7.default.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : import_node_path7.default.join(home, ".config", "Claude", "claude_desktop_config.json");
+    patchMcpConfig(import_node_path8.default.join(home, ".claude.json"), entry("claude-code"));
+    patchClaudeCodePermissions(home);
+    const claudeDesktopPath = isWin ? import_node_path8.default.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json") : isMac ? import_node_path8.default.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : import_node_path8.default.join(home, ".config", "Claude", "claude_desktop_config.json");
     patchMcpConfig(claudeDesktopPath, entry("claude-desktop"));
-    patchMcpConfig(import_node_path7.default.join(home, ".cursor", "mcp.json"), entry("cursor"));
+    patchMcpConfig(import_node_path8.default.join(home, ".cursor", "mcp.json"), entry("cursor"));
     patchMcpConfig(
-      import_node_path7.default.join(home, ".codeium", "windsurf", "mcp_config.json"),
+      import_node_path8.default.join(home, ".codeium", "windsurf", "mcp_config.json"),
       entry("windsurf")
     );
+    patchCodexConfig(import_node_path8.default.join(home, ".codex", "config.toml"), nodePath, mcpServerPath, dbPath);
   } catch {
   }
 }
@@ -35206,18 +35468,23 @@ function startServer(options = {}) {
   const deploymentMode = getDeploymentMode();
   const bindHost = process.env.QUOROOM_BIND_HOST || (deploymentMode === "cloud" ? DEFAULT_BIND_HOST_CLOUD : DEFAULT_BIND_HOST_LOCAL);
   if (!options.staticDir) {
-    const userUiDir = import_node_path7.default.join(USER_APP_DIR, "ui");
-    const bundledUiDir = import_node_path7.default.join(__dirname, "../ui");
-    if (import_node_fs6.default.existsSync(import_node_path7.default.join(userUiDir, "index.html"))) {
+    const userUiDir = import_node_path8.default.join(USER_APP_DIR, "ui");
+    const bundledUiDir = import_node_path8.default.join(__dirname, "../ui");
+    if (import_node_fs6.default.existsSync(import_node_path8.default.join(userUiDir, "index.html"))) {
       options.staticDir = userUiDir;
     } else if (import_node_fs6.default.existsSync(bundledUiDir)) {
       options.staticDir = bundledUiDir;
     }
   }
-  const dbPath = process.env.QUOROOM_DB_PATH || import_node_path7.default.join(options.dataDir ?? getDataDir(), "data.db");
+  const dbPath = process.env.QUOROOM_DB_PATH || import_node_path8.default.join(options.dataDir ?? getDataDir(), "data.db");
   const { server, token, db: serverDb } = createApiServer(options);
   if (!process.env.QUOROOM_SKIP_MCP_REGISTER) {
     registerMcpGlobally(dbPath);
+    eventBus.on("providers", (evt) => {
+      if ((evt.type === "providers:install_status" || evt.type === "providers:auth_status") && evt.data?.status === "completed") {
+        registerMcpGlobally(dbPath);
+      }
+    });
   }
   initCloudSync(serverDb);
   initUpdateChecker();
@@ -35225,6 +35492,7 @@ function startServer(options = {}) {
   startServerRuntime(serverDb);
   function listen() {
     server.listen(port, bindHost, () => {
+      addrInUseAttempts = 0;
       const bound = server.address();
       const boundPort = typeof bound === "object" && bound ? bound.port : port;
       const dashboardUrl = `http://localhost:${boundPort}`;
@@ -35233,18 +35501,25 @@ function startServer(options = {}) {
       console.error(`Deployment mode: ${deploymentMode}`);
       console.error(`Bind host: ${bindHost}`);
       console.error(`Auth token: ${token.slice(0, 8)}...`);
-      if (process.env.NODE_ENV === "production" && deploymentMode !== "cloud") {
+      if (process.env.NODE_ENV === "production" && deploymentMode !== "cloud" && !process.env.QUOROOM_NO_AUTO_OPEN) {
         const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
         (0, import_node_child_process7.exec)(`${cmd} ${dashboardUrl}`);
       }
     });
   }
+  let addrInUseAttempts = 0;
+  const MAX_ADDR_IN_USE_ATTEMPTS = 3;
   server.on("error", (err) => {
     if (err.code === "EADDRINUSE") {
+      addrInUseAttempts += 1;
       console.error(`Port ${port} is in use \u2014 killing existing process...`);
-      try {
-        (0, import_node_child_process7.execSync)(`lsof -ti :${port} | xargs kill -9`, { stdio: "ignore" });
-      } catch {
+      const reclaimed = killProcessListeningOnPort(port);
+      if (!reclaimed) {
+        console.error(`Could not reclaim port ${port} (attempt ${addrInUseAttempts}/${MAX_ADDR_IN_USE_ATTEMPTS}).`);
+      }
+      if (!reclaimed && addrInUseAttempts >= MAX_ADDR_IN_USE_ATTEMPTS) {
+        console.error(`Failed to start: port ${port} is still occupied.`);
+        return;
       }
       setTimeout(listen, 500);
     } else {
@@ -35284,6 +35559,9 @@ function startServer(options = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  _isLoopbackAddress,
+  _shellQuote,
+  _windowsQuote,
   createApiServer,
   startServer
 });