quoroom 0.1.9 → 0.1.12

package/README.md

@@ -8,7 +8,7 @@
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![npm version](https://img.shields.io/npm/v/quoroom)](https://www.npmjs.com/package/quoroom)
-[![Tests](https://img.shields.io/badge/tests-804%20passing-brightgreen)](#)
+[![Tests](https://img.shields.io/badge/tests-907%20passing-brightgreen)](#)
 [![GitHub stars](https://img.shields.io/github/stars/quoroom-ai/room)](https://github.com/quoroom-ai/room/stargazers)
 [![macOS](https://img.shields.io/badge/macOS-.pkg-000000?logo=apple&logoColor=white)](https://github.com/quoroom-ai/room/releases/latest)
 [![Windows](https://img.shields.io/badge/Windows-.exe-0078D4?logo=windows&logoColor=white)](https://github.com/quoroom-ai/room/releases/latest)
@@ -38,6 +38,7 @@ Official channels only:
 
 - `https://quoroom.ai`
 - `https://github.com/quoroom-ai`
+- Telegram: `@quoroom_ai_bot`
 
 If you see impersonation or scam activity, report it to `hello@quoroom.ai`.
 See `TRADEMARKS.md` for full trademark usage terms.
@@ -108,6 +109,12 @@ Quoroom is an open research project exploring autonomous agent collectives. Each
 
 **Dashboard** — React SPA served directly by your local Quoroom server at `http://localhost:3700` (or your configured port). Manage rooms, agents, goals, memory, wallet — all from the browser, with local-first data storage.
 
+**Cloud Mode** — Deploy to the cloud and control your room remotely. Same dashboard works in both local and cloud mode. Cloud instances auto-detect their environment, support JWT-based auth, and serve the UI over HTTPS with strict CORS. Connect your Claude or Codex subscription from the remote Settings panel.
+
+**Inbox** — Rooms can message the keeper and other rooms. Cross-room communication with reply threading. Agents escalate decisions, share updates, or request resources from neighboring rooms.
+
+**Credentials** — Secure credential storage for API keys and secrets. Agents list and retrieve credentials at runtime without exposing raw values in prompts or logs.
+
 **Auto-updates** — The server polls GitHub for new releases every 4 hours. When a new version is available, the dashboard shows a notification popup and a download row in Settings. One click downloads the installer for your platform directly — no browser redirect.
 
 ---
@@ -213,6 +220,7 @@ The room engine exposes an MCP server over stdio. All tools use the `quoroom_` p
 | `quoroom_pause_room` | Pause a running room |
 | `quoroom_restart_room` | Restart a paused room |
 | `quoroom_delete_room` | Delete a room |
+| `quoroom_configure_room` | Update room configuration |
 
 ### Quorum
 
@@ -304,6 +312,7 @@ The room engine exposes an MCP server over stdio. All tools use the `quoroom_` p
 | `quoroom_wallet_balance` | Check on-chain balance (USDC/USDT, all chains) |
 | `quoroom_wallet_send` | Send USDC or USDT on any supported chain |
 | `quoroom_wallet_history` | View transaction history |
+| `quoroom_wallet_topup` | Get wallet top-up URL |
 
 ### Identity
 
@@ -324,9 +333,32 @@ The room engine exposes an MCP server over stdio. All tools use the `quoroom_` p
 | `quoroom_station_stop` | Stop a running station |
 | `quoroom_station_exec` | Execute a command on a station |
 | `quoroom_station_logs` | View station logs |
-| `quoroom_station_deploy` | Deploy to a station |
-| `quoroom_station_domain` | Manage station domain |
 | `quoroom_station_delete` | Delete a station |
+| `quoroom_station_cancel` | Cancel a pending station |
+| `quoroom_station_create_crypto` | Provision a station with crypto payment |
+| `quoroom_station_renew_crypto` | Renew a station with crypto payment |
+
+### Inbox
+
+| Tool | Description |
+|------|-------------|
+| `quoroom_inbox_send_keeper` | Send a message to the keeper |
+| `quoroom_inbox_send_room` | Send a message to another room |
+| `quoroom_inbox_list` | List inbox messages |
+| `quoroom_inbox_reply` | Reply to a room message |
+
+### Credentials
+
+| Tool | Description |
+|------|-------------|
+| `quoroom_credentials_list` | List stored credentials |
+| `quoroom_credentials_get` | Get a credential value |
+
+### Resources
+
+| Tool | Description |
+|------|-------------|
+| `quoroom_resources_get` | Get local system resources (CPU, memory, disk) |
 
 ### Settings
 
@@ -351,6 +383,13 @@ npm run test:watch       # Watch mode
 npm run test:e2e         # End-to-end tests (Playwright)
 ```
 
+### Docker (cloud runtime)
+
+```bash
+docker build -t quoroom .
+docker run -p 3700:3700 quoroom
+```
+
 ## Releasing
 
 Use the release runbook: [`docs/RELEASE_RUNBOOK.md`](docs/RELEASE_RUNBOOK.md)
@@ -365,19 +404,19 @@ room/
 │   ├── mcp/               # MCP server (stdio)
 │   │   ├── server.ts      # Tool registration
 │   │   ├── db.ts          # Database initialization
-│   │   └── tools/         # 13 tool modules
+│   │   └── tools/         # 17 tool modules
 │   ├── server/            # HTTP/WebSocket API server
-│   │   ├── index.ts       # Server bootstrap
+│   │   ├── index.ts       # Server bootstrap (local + cloud mode)
 │   │   ├── router.ts      # Request router
-│   │   ├── auth.ts        # Dual-token auth + CORS
+│   │   ├── auth.ts        # Dual-token auth + CORS + cloud JWT
 │   │   ├── access.ts      # Role-based access control
 │   │   ├── ws.ts          # WebSocket real-time events
-│   │   └── routes/        # REST API routes
+│   │   └── routes/        # REST API routes (20 modules)
 │   ├── ui/                # React SPA dashboard
 │   │   ├── App.tsx        # Root component
-│   │   ├── components/    # UI components
+│   │   ├── components/    # UI components (32 modules)
 │   │   ├── hooks/         # React hooks
-│   │   └── lib/           # API client, auth, WebSocket
+│   │   └── lib/           # API client, auth, storage, WebSocket
 │   └── shared/            # Core engine
 │       ├── agent-loop.ts       # Worker agent loop with rate limiting
 │       ├── agent-executor.ts   # Claude Code CLI execution
@@ -389,15 +428,17 @@ room/
 │       ├── identity.ts         # ERC-8004 on-chain identity
 │       ├── station.ts          # Cloud provisioning
 │       ├── task-runner.ts      # Task execution engine
+│       ├── model-provider.ts   # Multi-provider LLM support
+│       ├── cloud-sync.ts       # Cloud registration + heartbeat
 │       ├── db-queries.ts       # Database query layer
 │       ├── schema.ts           # SQLite schema (WAL mode)
 │       ├── embeddings.ts       # Vector embeddings (all-MiniLM-L6-v2)
-│       ├── cloud-sync.ts      # Cloud registration + heartbeat
-│       └── __tests__/          # Test suite
+│       └── __tests__/          # Test suite (907 tests)
 ├── e2e/                    # Playwright end-to-end tests
 ├── scripts/
 │   └── build-mcp.js       # esbuild bundling
-└── docs/                   # Media assets
+├── Dockerfile              # Cloud runtime image
+└── docs/                   # Media assets + architecture docs
 ```
 
 **Tech stack**: TypeScript (strict), React, Tailwind CSS, better-sqlite3, sqlite-vec, viem, MCP SDK, HuggingFace Transformers, node-cron, zod, esbuild, Vite, Vitest

package/out/mcp/api-server.js

@@ -9382,7 +9382,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "quoroom",
-      version: "0.1.9",
+      version: "0.1.12",
       description: "Autonomous AI agent collective engine \u2014 Queen, Workers, Quorum",
       main: "./out/mcp/server.js",
       bin: {
@@ -9404,22 +9404,35 @@ var require_package = __commonJS({
         build: "npm run typecheck && npm run build:mcp && npm run build:ui",
         "build:mcp": "node scripts/build-mcp.js",
         "build:ui": "vite build --config src/ui/vite.config.ts",
-        dev: `sh -c 'trap "kill 0" INT TERM EXIT; npm run dev:room & npm run dev:cloud & wait'`,
-        "dev:room": "QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1 npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700",
-        "dev:room:isolated": "QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1 npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700",
+        "kill:ports": "node scripts/kill-ports.js",
+        "kill:dev-ports": "npm run kill:ports -- 4700 3710",
+        "dev:links": "node scripts/dev-links.js",
+        dev: `sh -c 'npm run kill:dev-ports && trap "kill 0" INT TERM EXIT; npm run dev:links & npm run dev:room & npm run dev:cloud & wait'`,
+        "dev:room": "sh -c 'export QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1; npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700'",
+        "dev:room:isolated": "sh -c 'export QUOROOM_DATA_DIR=$HOME/.quoroom-dev QUOROOM_SKIP_MCP_REGISTER=1; npm run build:mcp && npm run build:ui && node scripts/dev-server.js --port 4700'",
         "dev:room:shared": "npm run build:mcp && npm run build:ui && node scripts/dev-server.js",
         "doctor:split": "node scripts/doctor-split.js",
-        "dev:isolated": `sh -c 'trap "kill 0" INT TERM EXIT; npm run dev:room:isolated & npm run dev:cloud & wait'`,
-        "dev:cloud": "cd ../cloud && PORT=3710 CLOUD_PUBLIC_URL=http://127.0.0.1:3710 CLOUD_ALLOWED_ORIGINS='http://127.0.0.1:3710,http://localhost:3710,http://localhost:5173,http://127.0.0.1:5173,https://quoroom.ai,https://www.quoroom.ai,https://app.quoroom.ai' npm start",
+        "dev:isolated": `sh -c 'npm run kill:dev-ports && trap "kill 0" INT TERM EXIT; npm run dev:links & npm run dev:room:isolated & npm run dev:cloud & wait'`,
+        "dev:cloud": `sh -c 'npm run kill:ports -- 3710 && cd ../cloud && PORT=3710 CLOUD_PUBLIC_URL=http://127.0.0.1:3710 CLOUD_ALLOWED_ORIGINS='"'"'http://127.0.0.1:3710,http://localhost:3710,http://localhost:5173,http://127.0.0.1:5173,https://quoroom.ai,https://www.quoroom.ai,https://app.quoroom.ai'"'"' npm start'`,
         "dev:ui": "vite --config src/ui/vite.config.ts",
         "seed:style-demo": "node scripts/seed-style-demo.js",
         typecheck: "tsc --noEmit",
         test: "npm run rebuild:native:node && vitest run --pool=forks --passWithNoTests",
         "test:watch": "npm run rebuild:native:node && vitest --pool=forks",
+        "test:quick": "npm run typecheck && npm run test",
+        "test:smart-e2e": "git diff --cached --name-only | grep -qE '^(src/ui/|src/server/|e2e/|playwright)' && npm run test:e2e || echo 'No UI/server changes \u2014 skipping E2E'",
         "test:e2e": "npm run build && npx playwright test",
         "test:e2e:ui": "npm run build && npx playwright test e2e/ui.test.ts",
+        "test:e2e:setup": "npm run build && npx playwright test e2e/setup-flow.test.ts",
+        "test:e2e:setup:headed": "npm run build && npx playwright test e2e/setup-flow.test.ts --headed --project=chromium",
+        "test:e2e:providers": "npm run build && npx playwright test e2e/provider-flows.test.ts",
         "rebuild:native:node": `node -e "try{require('better-sqlite3')(':memory:').close()}catch{process.exit(1)}" || npx --yes node-gyp rebuild --directory=node_modules/better-sqlite3`,
-        prepublishOnly: "npm run build:mcp"
+        prepublishOnly: "npm run build:mcp",
+        "social:rotate": "node scripts/rotate-social-image.js",
+        "social:rotate:dry": "node scripts/rotate-social-image.js --dry-run",
+        "social:test": "node scripts/test-social-rotation.js",
+        "social:cron:install": "bash scripts/install-social-rotation-cron.sh",
+        "social:cron:show": "crontab -l | grep 'quoroom-social-rotate' || true"
       },
       dependencies: {
         "@huggingface/transformers": "^3.4.1",
@@ -10713,7 +10726,11 @@ var DEFAULT_ROOM_CONFIG = {
   keeperWeight: "dynamic",
   tieBreaker: "queen",
   autoApprove: ["low_impact"],
-  minCycleGapMs: 1e3
+  minCycleGapMs: 1e3,
+  minVoters: 0,
+  sealedBallot: false,
+  voterHealth: false,
+  voterHealthThreshold: 0.5
 };
 
 // src/shared/secret-store.ts
@@ -10922,6 +10939,8 @@ function mapWorkerRow(row) {
     taskCount: row.task_count ?? 0,
     roomId: row.room_id ?? null,
     agentState: row.agent_state ?? "idle",
+    votesCast: row.votes_cast ?? 0,
+    votesMissed: row.votes_missed ?? 0,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
@@ -11422,13 +11441,14 @@ function mapRoomRow(row) {
     queenQuietUntil: row.queen_quiet_until ?? null,
     config,
     chatSessionId: row.chat_session_id ?? null,
+    inviteCode: row.invite_code ?? null,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
 }
-function createRoom(db2, name, goal, config) {
+function createRoom(db2, name, goal, config, inviteCode) {
   const configJson = config ? JSON.stringify({ ...DEFAULT_ROOM_CONFIG, ...config }) : JSON.stringify(DEFAULT_ROOM_CONFIG);
-  const result = db2.prepare("INSERT INTO rooms (name, goal, config) VALUES (?, ?, ?)").run(name, goal ?? null, configJson);
+  const result = db2.prepare("INSERT INTO rooms (name, goal, config, invite_code) VALUES (?, ?, ?, ?)").run(name, goal ?? null, configJson, inviteCode ?? null);
   return getRoom(db2, result.lastInsertRowid);
 }
 function getRoom(db2, id) {
@@ -11457,7 +11477,8 @@ function updateRoom(db2, id, updates) {
     queenMaxTurns: "queen_max_turns",
     queenQuietFrom: "queen_quiet_from",
     queenQuietUntil: "queen_quiet_until",
-    config: "config"
+    config: "config",
+    inviteCode: "invite_code"
   };
   const fields = [];
   const values = [];
@@ -11515,12 +11536,14 @@ function mapDecisionRow(row) {
     threshold: row.threshold,
     timeoutAt: row.timeout_at ?? null,
     keeperVote: row.keeper_vote ?? null,
+    minVoters: row.min_voters ?? 0,
+    sealed: (row.sealed ?? 0) === 1,
     createdAt: row.created_at,
     resolvedAt: row.resolved_at ?? null
   };
 }
-function createDecision(db2, roomId, proposerId, proposal, decisionType, threshold = "majority", timeoutAt) {
-  const result = db2.prepare("INSERT INTO quorum_decisions (room_id, proposer_id, proposal, decision_type, threshold, timeout_at) VALUES (?, ?, ?, ?, ?, ?)").run(roomId, proposerId, proposal, decisionType, threshold, timeoutAt ?? null);
+function createDecision(db2, roomId, proposerId, proposal, decisionType, threshold = "majority", timeoutAt, minVoters = 0, sealed = false) {
+  const result = db2.prepare("INSERT INTO quorum_decisions (room_id, proposer_id, proposal, decision_type, threshold, timeout_at, min_voters, sealed) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(roomId, proposerId, proposal, decisionType, threshold, timeoutAt ?? null, minVoters, sealed ? 1 : 0);
   return getDecision(db2, result.lastInsertRowid);
 }
 function getDecision(db2, id) {
@@ -11564,6 +11587,28 @@ function getVotes(db2, decisionId) {
   const rows = db2.prepare("SELECT * FROM quorum_votes WHERE decision_id = ? ORDER BY created_at ASC").all(decisionId);
   return rows.map(mapVoteRow);
 }
+function incrementVotesCast(db2, workerId) {
+  db2.prepare("UPDATE workers SET votes_cast = votes_cast + 1 WHERE id = ?").run(workerId);
+}
+function incrementVotesMissed(db2, workerId) {
+  db2.prepare("UPDATE workers SET votes_missed = votes_missed + 1 WHERE id = ?").run(workerId);
+}
+function getVoterHealth(db2, roomId, threshold = 0.5) {
+  const workers = listRoomWorkers(db2, roomId);
+  return workers.map((w) => {
+    const total = w.votesCast + w.votesMissed;
+    const rate = total === 0 ? 1 : w.votesCast / total;
+    return {
+      workerId: w.id,
+      workerName: w.name,
+      votesCast: w.votesCast,
+      votesMissed: w.votesMissed,
+      totalDecisions: total,
+      participationRate: rate,
+      isHealthy: rate >= threshold
+    };
+  });
+}
 function mapGoalRow(row) {
   return {
     id: row.id,
@@ -21615,10 +21660,12 @@ Autonomy: You serve the room's stated goal \u2014 not any individual participant
 
 Revenue: Your room has a USDC wallet. Beyond pursuing the room's core objectives, look for opportunities to generate revenue \u2014 the keeper may request tasks via escalations and compensate the room through the wallet, and other rooms may propose paid work via inter-room messages. Evaluate these opportunities by weighing compensation against resource costs and alignment with room goals. Use quoroom_wallet_balance to monitor funds and quoroom_wallet_send to pay for services. Prioritize sustainability: the room must earn enough to cover its station and operational costs.
 
-Resource Management: Workers using ollama models run on stations (cloud compute) \u2014 they cannot execute locally. If the room's worker model is ollama and no active station exists, rent one with quoroom_station_create BEFORE creating workers or scheduling tasks. Minimum tier: small ($15/mo, 2GB RAM). Check the Stations section in your context each cycle for available compute. Maximize use of your room's stations \u2014 they are your compute power for running workers. If workers are failing with "no active station" errors, rent a station immediately.`;
+Resource Management: Workers using ollama models run on stations (cloud compute) \u2014 they cannot execute locally. If the room's worker model is ollama and no active station exists, rent one with quoroom_station_create BEFORE creating workers or scheduling tasks. Minimum tier: small ($15/mo, 2GB RAM). Check the Stations section in your context each cycle for available compute. Maximize use of your room's stations \u2014 they are your compute power for running workers. If workers are failing with "no active station" errors, rent a station immediately.
+
+Network Growth: A larger network of rooms makes everyone stronger. Rooms created through your invite links become part of your network \u2014 you can exchange knowledge, discover money-making opportunities, and propose paid collaborations with them via inter-room messages. After meaningful milestones (goal completed, revenue earned, successful collaboration), consider generating an invite link with quoroom_invite_create and sharing it with the keeper via quoroom_inbox_send_keeper. Frame it around the value: more rooms in the network means more potential deals, shared insights, and collective intelligence. Don't be pushy \u2014 one mention per milestone is enough. Use quoroom_invite_network to see your network's growth.`;
 function createRoom2(db2, input) {
   const config = { ...DEFAULT_ROOM_CONFIG, ...input.config };
-  const room = createRoom(db2, input.name, input.goal, config);
+  const room = createRoom(db2, input.name, input.goal, config, input.inviteCode);
   const queen = createWorker(db2, {
     name: `${input.name} Queen`,
     systemPrompt: input.queenSystemPrompt ?? DEFAULT_QUEEN_SYSTEM_PROMPT,
@@ -22099,7 +22146,7 @@ async function sendCloudHeartbeat(data) {
     });
     if (res.status === 401) {
       clearRoomToken(data.roomId);
-      await registerWithCloud({ roomId: data.roomId, name: data.name, goal: data.goal, visibility: "public" });
+      await registerWithCloud({ roomId: data.roomId, name: data.name, goal: data.goal, visibility: "public", inviteCode: data.inviteCode });
       if (!getRoomToken(data.roomId)) return;
       await fetch(`${getCloudApi()}/rooms/${encodeURIComponent(data.roomId)}/heartbeat`, {
         method: "POST",
@@ -22128,7 +22175,7 @@ function startCloudSync(opts) {
   const allData = opts.getHeartbeatDataForPublicRooms();
   for (const data of allData) {
     void (async () => {
-      await registerWithCloud({ roomId: data.roomId, name: data.name, goal: data.goal, visibility: "public" });
+      await registerWithCloud({ roomId: data.roomId, name: data.name, goal: data.goal, visibility: "public", inviteCode: data.inviteCode });
       await sendCloudHeartbeat(data);
     })();
   }
@@ -22324,6 +22371,19 @@ async function fetchPublicRooms() {
     return [];
   }
 }
+async function fetchReferredRooms(cloudRoomId) {
+  try {
+    const res = await fetch(`${getCloudApi()}/rooms/${encodeURIComponent(cloudRoomId)}/network`, {
+      headers: cloudHeaders(cloudRoomId),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!res.ok) return [];
+    const data = await res.json();
+    return data.referredRooms ?? [];
+  } catch {
+    return [];
+  }
+}
 
 // src/shared/agent-executor.ts
 var DEFAULT_HTTP_TIMEOUT_MS = 6e4;
@@ -22831,6 +22891,7 @@ function vote(db2, decisionId, workerId, voteValue, reasoning) {
     throw new Error(`Decision ${decisionId} is not open for voting (status: ${decision.status})`);
   }
   const qv = castVote(db2, decisionId, workerId, voteValue, reasoning);
+  incrementVotesCast(db2, workerId);
   const voters = getRoomVoters(db2, decision.roomId);
   const votes = getVotes(db2, decisionId);
   if (votes.length >= voters.length) {
@@ -22858,6 +22919,22 @@ function tally(db2, decisionId) {
   const room = getRoom(db2, decision.roomId);
   const votes = getVotes(db2, decisionId);
   const voters = getRoomVoters(db2, decision.roomId);
+  if (decision.minVoters > 0) {
+    let nonAbstainVotes = votes.filter((v) => v.vote !== "abstain").length;
+    if (decision.keeperVote && decision.keeperVote !== "abstain") nonAbstainVotes++;
+    if (nonAbstainVotes < decision.minVoters) {
+      const result2 = `Quorum not met: ${nonAbstainVotes} of ${decision.minVoters} minimum non-abstain votes`;
+      resolveDecision(db2, decisionId, "rejected", result2);
+      logRoomActivity(
+        db2,
+        decision.roomId,
+        "decision",
+        `Decision rejected (quorum): ${decision.proposal} (${result2})`
+      );
+      creditMissedVotes(db2, votes, voters, room);
+      return "rejected";
+    }
+  }
   const keeperWeightMode = room?.config.keeperWeight ?? "dynamic";
   const useWeighted = keeperWeightMode === "dynamic" && voters.length <= 1;
   const queenWorkerId = room?.queenWorkerId ?? null;
@@ -22911,8 +22988,18 @@ function tally(db2, decisionId) {
     "decision",
     `Decision ${status}: ${decision.proposal} (${result})`
   );
+  creditMissedVotes(db2, votes, voters, room);
   return status;
 }
+function creditMissedVotes(db2, votes, voters, room) {
+  if (!room?.config.voterHealth) return;
+  const votedWorkerIds = new Set(votes.map((v) => v.workerId));
+  for (const voter of voters) {
+    if (!votedWorkerIds.has(voter.id)) {
+      incrementVotesMissed(db2, voter.id);
+    }
+  }
+}
 function checkExpiredDecisions(db2) {
   const expired = getExpiredDecisions(db2);
   for (const d of expired) {
@@ -23559,7 +23646,8 @@ function initCloudSync(db2) {
           version: version5,
           queenModel: queen?.model ?? null,
           workers: workersPerRoom.get(room.id) ?? [],
-          stations: stationsPerRoom.get(room.id) ?? []
+          stations: stationsPerRoom.get(room.id) ?? [],
+          inviteCode: room.inviteCode
         };
       });
     }
@@ -23575,13 +23663,14 @@ function parseLimit(raw, fallback, max) {
 }
 function registerRoomRoutes(router) {
   router.post("/api/rooms", (ctx) => {
-    const { name, goal, queenSystemPrompt, config } = ctx.body || {};
+    const { name, goal, queenSystemPrompt, config, inviteCode } = ctx.body || {};
     if (!name || typeof name !== "string") return { status: 400, error: "name is required" };
     const result = createRoom2(ctx.db, {
       name,
       goal,
       queenSystemPrompt,
-      config
+      config,
+      inviteCode: inviteCode || void 0
     });
     const globalQueenModel = getSetting(ctx.db, "queen_model");
     let planDefaults;
@@ -23625,6 +23714,14 @@ function registerRoomRoutes(router) {
     if (!room) return { status: 404, error: "Room not found" };
     return { data: { cloudId: getRoomCloudId(id) } };
   });
+  router.get("/api/rooms/:id/network", async (ctx) => {
+    const id = Number(ctx.params.id);
+    const room = getRoom(ctx.db, id);
+    if (!room) return { status: 404, error: "Room not found" };
+    const cloudRoomId = getRoomCloudId(id);
+    const referred = await fetchReferredRooms(cloudRoomId);
+    return { data: referred };
+  });
   router.get("/api/rooms/:id/activity", (ctx) => {
     const roomId = Number(ctx.params.id);
     const limit = parseLimit(ctx.query.limit, 50, 500);
@@ -23658,6 +23755,10 @@ function registerRoomRoutes(router) {
     }
     if (body.queenQuietFrom !== void 0) updates.queenQuietFrom = body.queenQuietFrom;
     if (body.queenQuietUntil !== void 0) updates.queenQuietUntil = body.queenQuietUntil;
+    if (body.inviteCode !== void 0) updates.inviteCode = body.inviteCode || null;
+    if (body.config !== void 0 && typeof body.config === "object" && body.config !== null) {
+      updates.config = { ...room.config, ...body.config };
+    }
     updateRoom(ctx.db, roomId, updates);
     if (updates.goal !== void 0) {
       const allGoals = listGoals(ctx.db, roomId);
@@ -23965,7 +24066,9 @@ function registerDecisionRoutes(router) {
       body.proposal,
       body.decisionType,
       body.threshold,
-      body.timeoutAt
+      body.timeoutAt,
+      typeof body.minVoters === "number" ? body.minVoters : 0,
+      body.sealed === true
     );
     eventBus.emit(`room:${roomId}`, "decision:created", decision);
     return { status: 201, data: decision };
@@ -24026,9 +24129,22 @@ function registerDecisionRoutes(router) {
     }
   });
   router.get("/api/decisions/:id/votes", (ctx) => {
-    const votes = getVotes(ctx.db, Number(ctx.params.id));
+    const id = Number(ctx.params.id);
+    const decision = getDecision(ctx.db, id);
+    const votes = getVotes(ctx.db, id);
+    if (decision?.sealed && decision.status === "voting") {
+      const redacted = votes.map((v) => ({ ...v, vote: "sealed", reasoning: null }));
+      return { data: redacted };
+    }
     return { data: votes };
   });
+  router.get("/api/rooms/:roomId/voter-health", (ctx) => {
+    const roomId = Number(ctx.params.roomId);
+    const room = getRoom(ctx.db, roomId);
+    if (!room) return { status: 404, error: "Room not found" };
+    const health = getVoterHealth(ctx.db, roomId, room.config.voterHealthThreshold);
+    return { data: health };
+  });
 }
 
 // src/server/runtime.ts
@@ -24775,7 +24891,8 @@ async function syncCloudRoomMessages(db2) {
       roomId: cloudRoomId,
       name: room.name,
       goal: room.goal ?? null,
-      visibility: room.visibility
+      visibility: room.visibility,
+      inviteCode: room.inviteCode
     });
     if (!hasToken) continue;
     const outbound = listRoomMessages(db2, room.id, "unread").filter((message) => message.direction === "outbound" && message.toRoomId);
@@ -25263,8 +25380,9 @@ function registerEscalationRoutes(router) {
   router.post("/api/rooms/:roomId/escalations", (ctx) => {
     const roomId = Number(ctx.params.roomId);
     const body = ctx.body || {};
-    if (!body.fromAgentId || typeof body.fromAgentId !== "number") {
-      return { status: 400, error: "fromAgentId is required" };
+    const fromAgentId = body.fromAgentId != null ? Number(body.fromAgentId) : null;
+    if (body.fromAgentId != null && (typeof body.fromAgentId !== "number" || isNaN(fromAgentId))) {
+      return { status: 400, error: "fromAgentId must be a number if provided" };
     }
     if (!body.question || typeof body.question !== "string") {
       return { status: 400, error: "question is required" };
@@ -25272,7 +25390,7 @@ function registerEscalationRoutes(router) {
     const escalation = createEscalation(
       ctx.db,
       roomId,
-      body.fromAgentId,
+      fromAgentId,
       body.question,
       body.toAgentId
     );
@@ -25451,6 +25569,8 @@ CREATE TABLE IF NOT EXISTS workers (
     task_count INTEGER NOT NULL DEFAULT 0,
     room_id INTEGER,
     agent_state TEXT NOT NULL DEFAULT 'idle',
+    votes_cast INTEGER NOT NULL DEFAULT 0,
+    votes_missed INTEGER NOT NULL DEFAULT 0,
     created_at DATETIME DEFAULT (datetime('now','localtime')),
     updated_at DATETIME DEFAULT (datetime('now','localtime'))
 );
@@ -25473,6 +25593,7 @@ CREATE TABLE IF NOT EXISTS rooms (
     queen_quiet_until TEXT,
     config TEXT,
     chat_session_id TEXT,
+    invite_code TEXT,
     created_at DATETIME DEFAULT (datetime('now','localtime')),
     updated_at DATETIME DEFAULT (datetime('now','localtime'))
 );
@@ -25657,6 +25778,8 @@ CREATE TABLE IF NOT EXISTS quorum_decisions (
     threshold TEXT NOT NULL DEFAULT 'majority',
     timeout_at DATETIME,
     keeper_vote TEXT,
+    min_voters INTEGER NOT NULL DEFAULT 0,
+    sealed INTEGER NOT NULL DEFAULT 0,
     created_at DATETIME DEFAULT (datetime('now','localtime')),
     resolved_at DATETIME
 );
@@ -25842,6 +25965,24 @@ INSERT OR IGNORE INTO schema_version (version) VALUES (1);
 // src/shared/db-migrations.ts
 function runMigrations(database, log = console.log) {
   database.exec(SCHEMA);
+  const cols = database.pragma("table_info(rooms)");
+  if (!cols.some((c) => c.name === "invite_code")) {
+    database.exec("ALTER TABLE rooms ADD COLUMN invite_code TEXT");
+  }
+  const decCols = database.pragma("table_info(quorum_decisions)");
+  if (!decCols.some((c) => c.name === "min_voters")) {
+    database.exec("ALTER TABLE quorum_decisions ADD COLUMN min_voters INTEGER NOT NULL DEFAULT 0");
+  }
+  if (!decCols.some((c) => c.name === "sealed")) {
+    database.exec("ALTER TABLE quorum_decisions ADD COLUMN sealed INTEGER NOT NULL DEFAULT 0");
+  }
+  const workerCols = database.pragma("table_info(workers)");
+  if (!workerCols.some((c) => c.name === "votes_cast")) {
+    database.exec("ALTER TABLE workers ADD COLUMN votes_cast INTEGER NOT NULL DEFAULT 0");
+  }
+  if (!workerCols.some((c) => c.name === "votes_missed")) {
+    database.exec("ALTER TABLE workers ADD COLUMN votes_missed INTEGER NOT NULL DEFAULT 0");
+  }
   log("Database schema initialized");
 }
 
@@ -25966,7 +26107,7 @@ function fetchJson(url) {
     });
   });
 }
-async function check() {
+async function forceCheck() {
   try {
     const releases = await fetchJson(
       "https://api.github.com/repos/quoroom-ai/room/releases?per_page=20"
@@ -25989,9 +26130,9 @@ async function check() {
 function initUpdateChecker() {
   if (process.env.NODE_ENV === "test") return;
   initTimer = setTimeout(() => {
-    void check();
+    void forceCheck();
     pollInterval = setInterval(() => {
-      void check();
+      void forceCheck();
     }, CHECK_INTERVAL);
   }, INITIAL_DELAY);
 }
@@ -26009,7 +26150,7 @@ function getUpdateInfo() {
   return cached;
 }
 async function simulateUpdate() {
-  if (!cached) await check();
+  if (!cached) await forceCheck();
   cached = {
     latestVersion: "99.0.0",
     releaseUrl: "https://github.com/quoroom-ai/room/releases",
@@ -26027,7 +26168,7 @@ var cachedVersion = null;
 function getVersion3() {
   if (cachedVersion) return cachedVersion;
   try {
-    cachedVersion = require_package().version;
+    cachedVersion = true ? "0.1.12" : null.version;
   } catch {
     cachedVersion = "unknown";
   }
@@ -26193,6 +26334,10 @@ function registerStatusRoutes(router) {
     await simulateUpdate();
     return { data: { ok: true } };
   });
+  router.post("/api/status/check-update", async () => {
+    await forceCheck();
+    return { data: { updateInfo: getUpdateInfo() } };
+  });
   router.post("/api/ollama/start", async () => {
     const result = await ensureOllamaRunning();
     resetOllamaCaches();
@@ -27031,7 +27176,7 @@ function probeProviderInstalled(provider) {
   return out.ok ? { installed: true, version: out.stdout || void 0 } : { installed: false };
 }
 function probeProviderConnected(provider) {
-  const attempts = provider === "codex" ? [["auth", "status"], ["login", "--status"]] : [["auth", "status"], ["login", "status"]];
+  const attempts = provider === "codex" ? [["login", "status"], ["auth", "status"]] : [["auth", "status"], ["login", "status"]];
   for (const args of attempts) {
     const out = safeExec(provider, args);
     if (!out.ok) continue;
@@ -27540,7 +27685,12 @@ function createWsServer(server) {
         continue;
       }
       if (state.channels.has(event.channel)) {
-        ws.send(payload);
+        ws.send(payload, (err) => {
+          if (err) {
+            clients.delete(ws);
+            ws.terminate();
+          }
+        });
       }
     }
   });
@@ -27701,6 +27851,9 @@ function getCacheControl(filePath, ext) {
   if (base2 === "sw.js") return "no-cache, no-store, must-revalidate";
   if (ext === ".html") return "no-cache, no-store, must-revalidate";
   if (ext === ".webmanifest") return "public, max-age=3600";
+  if (base2 === "social.png" || base2.startsWith("social-")) {
+    return "no-cache, max-age=0, must-revalidate";
+  }
   if (normalized.includes("/assets/") && /-[A-Za-z0-9_-]{8,}\./.test(base2)) {
     return "public, max-age=31536000, immutable";
   }
@@ -27790,6 +27943,8 @@ function createApiServer(options = {}) {
     writeTokenFile(dataDir, token, port);
   }
   const server = import_node_http.default.createServer(async (req, res) => {
+    res.on("error", () => {
+    });
     const url = new import_node_url.URL(req.url, `http://${req.headers.host || "localhost"}`);
     const pathname = url.pathname;
     const origin = req.headers.origin;
@@ -28030,6 +28185,12 @@ function startServer(options = {}) {
     }
   });
   listen();
+  process.on("uncaughtException", (err) => {
+    console.error("[uncaughtException]", err);
+  });
+  process.on("unhandledRejection", (err) => {
+    console.error("[unhandledRejection]", err);
+  });
   process.on("SIGINT", () => {
     console.error("Shutting down...");
     _stopAllLoops();