quoxcli 0.3.1 → 0.5.0

package/lib/quoxon/slotOutbox.js

@@ -0,0 +1,113 @@
+/**
+ * SLOT-OUTBOX: a /say or @slot message that could not be sent because QuoxCORE did not answer (fetch failed,
+ * ECONNREFUSED, socket error, timeout, 5xx) is kept on disk and sent when it answers again, never lost.
+ * Local only (~/.quox/slot-outbox.json, mode 0600, per OS user; each entry also carries the profile it was typed in,
+ * and a window only ever sends its own profile's entries, so a message never changes org).
+ *
+ * Never for a 4xx (auth, permission, no such slot): that is the user's to fix, so the text stays in the prompt.
+ *
+ * ONE-SEND RULE (the slot-say endpoint has no idempotency key, so the client must be conservative):
+ *   1. An entry is flipped to `sending` and persisted BEFORE the request goes out.
+ *   2. Success removes it (it is never sent again).
+ *   3. A clean failure (the server did not answer) puts it back to `queued`.
+ *   4. An entry still `sending` when the file is next read by a process that is not flushing is `unsure`: the window
+ *      died mid-request, so the message may have been delivered. `unsure` entries are never auto-sent; /outbox shows
+ *      them and `/outbox send` (explicit) is the only thing that will try them.
+ *   Residual risk, stated: a timeout where the server did receive the message but the reply was lost can duplicate it
+ *   once on flush. Duplicate over lost is the chosen side for a message the owner typed and saw fail.
+ */
+import { readFileSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { randomBytes } from 'node:crypto';
+
+export const OUTBOX_CAP = 50;
+export const defaultOutboxPath = (home = homedir()) => join(home, '.quox', 'slot-outbox.json');
+
+/** A send result worth queueing: no HTTP status (fetch failed, refused, socket, timeout) or a 5xx. Never a 4xx, ambiguity, or a licence refusal. */
+export function isConnectivityFailure(r) {
+  if (!r || r.ok || r.ambiguous || r.unlicensed) return false;
+  if (r.status == null) return true;
+  return Number(r.status) >= 500;
+}
+
+export function slotOutbox(path = defaultOutboxPath(), { now = () => Date.now() } = {}) {
+  const read = () => {
+    try { const d = JSON.parse(readFileSync(path, 'utf8')); return Array.isArray(d?.items) ? d : { items: [] }; }
+    catch { return { items: [] }; }
+  };
+  const write = (d) => {
+    try {
+      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+      const tmp = `${path}.${process.pid}.tmp`;
+      writeFileSync(tmp, JSON.stringify(d), { mode: 0o600 });
+      renameSync(tmp, path);
+      return true;
+    } catch { return false; }
+  };
+  let flushing = false; // this process is mid-flush: its own `sending` entry is live, not crashed
+  const settle = (d) => { // a `sending` entry nobody in this process is sending is a crashed send; persist that verdict
+    if (flushing) return d;
+    let changed = false;
+    for (const it of d.items) if (it.status === 'sending') { it.status = 'unsure'; changed = true; }
+    if (changed) write(d);
+    return d;
+  };
+  const mine = (it, profile) => profile == null || it.profile == null || it.profile === profile;
+  return {
+    /** Entries in send order (oldest first), optionally only this profile's. */
+    list: ({ profile = null } = {}) => settle(read()).items.filter(i => mine(i, profile)),
+    /** -> { ok:true, item, count } | { ok:false, full:true, count }. The cap is on entries not yet sent. */
+    enqueue({ slot, text, profile = null }) {
+      const d = settle(read());
+      if (d.items.length >= OUTBOX_CAP) return { ok: false, full: true, count: d.items.length };
+      const item = { id: `ob_${now().toString(36)}_${randomBytes(3).toString('hex')}`, slot, text: String(text), profile, created_at: new Date(now()).toISOString(), status: 'queued', tries: 0 };
+      d.items.push(item);
+      if (!write(d)) return { ok: false, unsaved: true, count: d.items.length };
+      return { ok: true, item, count: d.items.filter(i => mine(i, profile)).length };
+    },
+    /** Remove the Nth entry (1-based, as /outbox lists this profile's). -> the dropped item, or null. */
+    drop(n, { profile = null } = {}) {
+      const d = settle(read());
+      const visible = d.items.filter(i => mine(i, profile));
+      const it = visible[Number(n) - 1];
+      if (!it) return null;
+      d.items = d.items.filter(i => i.id !== it.id);
+      write(d);
+      return it;
+    },
+    /**
+     * Send what is queued, in order, once. send(item) -> { ok:true } | { ok:false, retryable }. A retryable failure stops
+     * the flush (the server is still down; order is kept). A non-retryable one marks that entry `failed` and moves on.
+     * `includeUnsure` (explicit /outbox send only) also tries entries that may already have been delivered.
+     * -> { sent:[items], failed:[items {error}], pending:n, busy? }.
+     */
+    async flush(send, { profile = null, includeUnsure = false } = {}) {
+      if (flushing) return { sent: [], failed: [], pending: 0, busy: true };
+      flushing = true;
+      const sent = []; const failed = [];
+      try {
+        const ids = settle(read()).items.filter(i => mine(i, profile) && (i.status === 'queued' || (includeUnsure && i.status === 'unsure'))).map(i => i.id);
+        for (const id of ids) {
+          const d = read();
+          const it = d.items.find(i => i.id === id);
+          if (!it || !(it.status === 'queued' || it.status === 'unsure')) continue; // dropped or sent meanwhile
+          it.status = 'sending'; it.tries = (it.tries || 0) + 1; write(d); // persisted BEFORE the request
+          let r;
+          try { r = await send(it); } catch (e) { r = { ok: false, retryable: true, error: e?.message }; }
+          const after = read();
+          const cur = after.items.find(i => i.id === id);
+          if (r?.ok) { after.items = after.items.filter(i => i.id !== id); write(after); sent.push(it); continue; }
+          if (cur) { cur.status = r?.retryable === false ? 'failed' : 'queued'; if (r?.error) cur.error = String(r.error); write(after); }
+          if (r?.retryable === false) { failed.push({ ...it, error: r.error || 'refused' }); continue; }
+          break; // still not answering: keep the rest, in order, for the next recovery
+        }
+      } finally { flushing = false; }
+      return { sent, failed, pending: settle(read()).items.filter(i => mine(i, profile) && i.status === 'queued').length };
+    },
+  };
+}
+
+export const queuedLine = (slot, count) => `⏸ queued for ${slot}: will send when QuoxCORE answers (${count} queued) · /outbox`;
+export const sentLine = (slot) => `✔ sent queued message to ${slot}`;
+export const fullLine = (cap = OUTBOX_CAP) => `Outbox is full (${cap} queued). Not queued: your text is back in the prompt. /outbox shows them, /outbox drop N removes one, /outbox send retries now.`;

package/lib/quoxon/suggestCommand.js

@@ -8,7 +8,7 @@
 import { findCommandEntry } from './commands.js';
 
 // Commands that need the human's own typing: never offered, never run from a model suggestion.
-export const HUMAN_TYPED = new Set(['approve', 'yestoall', 'deny', 'authorise', 'authorize', 'authenticate', 'override', 'restart', 'quit', 'exit', 'login']);
+export const HUMAN_TYPED = new Set(['approve', 'yestoall', 'deny', 'authorise', 'authorize', 'authenticate', 'override', 'verify-email', 'restart', 'quit', 'exit', 'login']);
 // Pure views, no effect: may run without asking when explicit, and only with no arguments.
 export const READ_ONLY_VIEWS = new Set(['approvals', 'mind', 'which', 'context', 'rooms', 'active', 'slots']);
 
@@ -33,14 +33,45 @@ export function vetSuggestion(raw) {
  */
 export function namedCommand(text) {
   const src = String(text || '');
+  const closing = closingProposal(src);
+  if (closing !== undefined) return closing; // the answer's own closing question names THE command: that one or nothing
   const seen = new Set();
   for (const m of src.matchAll(/`(\/[a-z][^`\n]{0,118})`/gi)) {
     if (mentionsAPath(src, m.index, m[0].length, m[1])) continue; // `/health` the endpoint is not /health the command
     seen.add(m[1].trim().replace(/\s+/g, ' '));
   }
   if (seen.size !== 1) return null;
-  const v = vetSuggestion([...seen][0]);
-  return v.ok ? v : null;
+  return offerable([...seen][0]);
+}
+
+// Commands that SEND or WRITE something: a mention is never an offer (the model must call terminal_suggest_command).
+export const WRITE_COMMANDS = new Set(['broadcast', 'roar', 'say', 'page', 'ack', 'reply', 'r', 'ask', 'aside', 'afk', 'back', 'observe', 'awaken', 'poke', 'wake', 'nudge', 'ping', 'slap', 'feedback', 'gripe', 'gripe!', 'note', 'dragon', 'wish', 'challenge', 'huh']);
+
+// vetted AND safe to offer from a mention: not a write/send, and no required <arg> left unfilled.
+function offerable(line) {
+  const v = vetSuggestion(line);
+  if (!v.ok) return null;
+  if (WRITE_COMMANDS.has(v.id) || WRITE_COMMANDS.has(line.slice(1).split(/\s+/)[0].toLowerCase())) return null;
+  const entry = findCommandEntry(line.slice(1).split(/\s+/)[0]);
+  const bare = line.trim().split(/\s+/).length === 1;
+  if (bare && /</.test(String(entry?.usage || ''))) return null; // "/ack <broadcast id>" needs its argument
+  return v;
+}
+
+// "Do you want me to run X?" / "Shall I run X?" -> undefined (no such question) | the offer for X | null.
+// X as a slash command is offered when safe; X as a `quox <verb>` CLI line is offered only as the matching read-only slash view.
+function closingProposal(src) {
+  const m = /(?:do you want me to|want me to|would you like me to|shall i|should i|can i)\s+(?:run|try|use|show you)\s+`?([^?`\n]{1,120}?)`?\s*(?:and\b[^?\n]*)?\?\s*$/i.exec(src.trim());
+  if (!m) return undefined;
+  const x = m[1].trim();
+  if (x.startsWith('/')) return offerable(x.replace(/\s+/g, ' '));
+  const cli = /^!?quox\s+([a-z][\w-]*)\s*$/i.exec(x);
+  if (cli) {
+    const slash = '/' + cli[1].toLowerCase();
+    const v = offerable(slash);
+    return v && v.readOnly ? v : null;
+  }
+  return null;
 }
 
 // A URL path, not a command (owner live 05:26: "the `/health` endpoint is erroring" offered "Run /health?").

package/lib/quoxon/term.js

@@ -48,8 +48,19 @@ export function inkStdout(out, { tap = null } = {}) {
     if (cb) out.write('', cb); // nothing to send: still a barrier behind the earlier writes
     return true;
   } : null;
-  return new Proxy(out, {
+  // Resize: Ink repaints its last committed tree at the new width the moment 'resize' fires, which wraps every 78-wide rule for a
+  // beat (owner 2026-10-27: top rule and model label wrapped after 79 -> 58). Listeners for 'resize' run RESIZE_SETTLE_MS late, so
+  // the app (which flags its own listener `resizeFirst`) commits the new column count first and Ink paints the right width once.
+  const lateOf = new WeakMap();
+  const lateListener = (fn) => {
+    if (fn.resizeFirst) return fn;
+    if (!lateOf.has(fn)) lateOf.set(fn, (...a) => { const t = setTimeout(() => fn(...a), RESIZE_SETTLE_MS); t.unref?.(); });
+    return lateOf.get(fn);
+  };
+  const proxy = new Proxy(out, {
     get(target, prop) {
+      if ((prop === 'on' || prop === 'addListener' || prop === 'once') && typeof target[prop] === 'function') return (ev, fn, ...r) => { target[prop](ev, ev === 'resize' && typeof fn === 'function' ? lateListener(fn) : fn, ...r); return proxy; };
+      if ((prop === 'off' || prop === 'removeListener') && typeof target[prop] === 'function') return (ev, fn, ...r) => { target[prop](ev, ev === 'resize' && typeof fn === 'function' ? lateListener(fn) : fn, ...r); return proxy; };
       if (prop === 'write' && write) return write;
       if (prop === 'rows') return Infinity;
       if (prop === 'termRows') return target.rows;
@@ -61,7 +72,20 @@ export function inkStdout(out, { tap = null } = {}) {
     },
     set(target, prop, value) { return Reflect.set(target, prop, value, target); }
   });
+  return proxy;
+}
+const RESIZE_SETTLE_MS = 40;
+
+/**
+ * The width to print history at, read from the terminal NOW. The `cols` state lags a resize (the listener attaches after mount,
+ * and the commit is async), and a <Static> item printed at the stale width is wider than the new terminal, so the terminal
+ * breaks it mid-word. Never wider than the state either (a pinned `columns` prop wins when it is narrower).
+ */
+export function liveCols(stdout, stateCols) {
+  const n = Number(stdout?.columns);
+  return Number.isFinite(n) && n > 0 ? Math.min(stateCols, Math.max(MIN_STATIC_COLS, n - 1)) : stateCols;
 }
+const MIN_STATIC_COLS = 20;
 
 /** Real terminal height, or null when unknown (not a TTY, tests). */
 export function termRows(stdout) {

package/lib/quoxon/toolCards.js

@@ -0,0 +1,30 @@
+/**
+ * HITL-INBOX-BAR (owner 2026-10-26: "more programmatic output, so nice and clear"): when a tool's result is a list, the
+ * facts are drawn as a table from the tool result, above whatever the model then says. Keyed by tool name; the server
+ * puts a bounded `card` on tool.finished (services/collector/lib/conversationToolEvents.js RESULT_CARDS). To add a
+ * list answer: add a renderer here and the matching projection there.
+ */
+import { ageOf, fromOf } from './inboxView.js';
+
+const clip = (s, n) => { const t = String(s ?? '').replace(/\s+/g, ' ').trim(); return t.length > n ? `${t.slice(0, Math.max(0, n - 1))}…` : t; };
+const pad = (s, n) => { const t = clip(s, n); return t + ' '.repeat(Math.max(0, n - [...t].length)); };
+
+const RENDERERS = {
+  /** inbox_pending rows -> `#  when  kind  priority  title  state` */
+  inbox_pending(card, { cols, now }) {
+    const rows = card.rows || [];
+    const tw = Math.max(16, Math.min(60, cols - 46));
+    const out = [{ head: true, text: `${pad('#', 3)}${pad('when', 6)}${pad('kind', 10)}${pad('prio', 8)}${pad('title', tw)} state` }];
+    rows.forEach((r, i) => out.push({ text: `${pad(i + 1, 3)}${pad(ageOf(r.created_at, now), 6)}${pad(r.kind || fromOf(r), 10)}${pad(r.priority || '', 8)}${pad(r.title || 'untitled', tw)} ${r.status || ''}` }));
+    if (Number.isInteger(card.total) && card.total > rows.length) out.push({ head: true, text: `showing ${rows.length} of ${card.total} · /inbox` });
+    return out;
+  },
+};
+
+/** -> [{ text, head? }] for a settled tool block that carries a card; [] otherwise. Never throws. */
+export function toolCardLines(b, cols = 100, now = Date.now()) {
+  const fn = b && b.card && Array.isArray(b.card.rows) && RENDERERS[b.tool];
+  if (!fn) return [];
+  try { return fn(b.card, { cols, now }); } catch { return []; }
+}
+export const cardTools = () => Object.keys(RENDERERS);

package/lib/quoxon/transcript.js

@@ -11,6 +11,7 @@ import { stripMarks } from './palette.js';
 import { textGate } from './events.js';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+import { redactSecrets } from './secretShape.js';
 
 export const MAX_FIELD = 4000;
 export const SILENT_GAP_MS = 10000;
@@ -33,7 +34,7 @@ const SCRUBS = [
 export function scrub(s) {
   let out = String(s);
   for (const [re, rep] of SCRUBS) out = out.replace(re, rep);
-  return out;
+  return redactSecrets(out); // SECRET-GUARD: bank/PIN/card shapes, after the key patterns
 }
 
 /** Strings are scrubbed and truncated; non-strings become a scrubbed JSON string (never a raw object). */

package/lib/quoxon/welcome.js

@@ -6,7 +6,7 @@ import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 
-export const DOCS_URL = 'https://cli.quox.ai/docs/start/'; // #1100: CLI docs "Start here" (cli.quox.ai/docs/ itself has no index page)
+export const DOCS_URL = 'https://quox.ai/cli/'; // #1100: CLI docs start page (cli.quox.ai retired 2026-10-26, moved to quox.ai/cli)
 export const TERMS_URL = 'https://quox.ai/terms';
 export const PRIVACY_URL = 'https://quox.ai/privacy';
 export const LICENCE = 'Quox Community Source Licence 1.0 (source-available)';

package/lib/quoxon/whatsnew.js

@@ -109,7 +109,7 @@ export function listWhatsNew(arg = '', entries = ENTRIES) {
 // Startup preference: quoxon.whatsNewStartup = 'on' | 'off' (default on). Both live in the synced profile settings.
 export const startupEnabled = (settings) => String(settings?.whatsNewStartup || 'on').toLowerCase() !== 'off';
 
-const activeCommands = (registry) => registry.filter(e => e.kind === 'command' && e.status === 'active');
+const activeCommands = (registry) => registry.filter(e => e.kind === 'command' && e.status === 'active' && !e.dyn);
 
 /**
  * Commands the user has not been shown, newest first (registry is oldest first, so reversed). With no record yet

package/lib/quoxon/whatsnew.jsonl

@@ -87,3 +87,84 @@
 {"id":"footer-tool-count","date":"2026-10-19T12:00:00Z","since":"0.3.1","title":"Turn footer counts tools properly","text":"The line under an answer now reads 1 tool or 3 tools. Some builds printed [object Object]1 tools after a turn that used a tool."}
 {"id":"cancelled-reads-cancelled","date":"2026-10-19T14:00:00Z","since":"0.3.1","title":"Cancelled reads cancelled","text":"A stopped objective in the activity list now says cancelled (a neutral circle), not failed. Expired and rejected say their own word too, and an empty question no longer draws a stray rule above the composer."}
 {"id":"one-rule-above-composer","date":"2026-10-19T15:00:00Z","since":"0.3.1","title":"One rule above the composer","text":"Under an approval card the composer no longer draws a blank line and a second rule: the card's closing rule is the only one."}
+{"id":"install-claude-code-codex","date":"2026-10-19T19:30:00Z","since":"0.3.1","title":"Install Claude Code and Codex from Quox","text":"Quox works best with both Claude and OpenAI models. If this server has no Claude Code or Codex, Quox offers to install it the moment you need it (a y/N card), or run quox provider install claude-code. It is the vendor's own npm package, downloaded to your server.","shell":"quox provider install claude-code","sha":"e802e90ce"}
+{"id":"polish8-card-lists","date":"2026-10-19T19:40:00Z","since":"0.3.1","title":"Approval cards keep list lines, ask loosening takes --recommend","text":"A walk card now shows a file list one item per line under WHY, and text with HTML escapes shows as plain characters. A session can add its advice to a test-edit approval with --recommend y or n.","shell":"quox ask loosening --help"}
+{"id":"polish8-exec-entities","date":"2026-10-19T20:00:00Z","since":"0.3.1","title":"Approval cards show commands as typed","text":"An approval for a command no longer shows HTML escapes like > in the command, reason or request lines.","shell":"quox ask loosening --help"}
+{"id":"restart-min-gap","date":"2026-10-19T20:10:00Z","since":"0.3.1","title":"At most one auto-restart offer every 15 minutes","text":"The window no longer offers a restart within 15 minutes of starting; the newest settled build is offered once after that, and /restart still works any time.","try":"/restart"}
+{"id":"named-offer-one-readonly","date":"2026-10-19T20:20:00Z","since":"0.3.1","title":"Only one complete read-only command is offered from an answer","text":"When an answer merely mentions a command, the window no longer offers a write like /broadcast or one missing its required text; it offers nothing unless there is exactly one safe command."}
+{"id":"fun-commands-try-these","date":"2026-10-19T20:30:00Z","since":"0.3.1","title":"Ask Quox for fun commands and get a real list","text":"Ask for fun or cool commands, or what Quox can do, and the answer is a hand-picked set (the dragon verbs, /challenge, /spawn, /crystallize and more), each with a one-line reason to try it. /help ends with a short Try these block.","try":"/help"}
+{"id":"q-shortcut","date":"2026-10-19T20:30:00Z","since":"0.3.1","title":"A short q command for quox","text":"Run quox shortcut add to make q start quox. It never replaces a q you already have, and quox shortcut remove undoes it.","shell":"quox shortcut add --help"}
+{"id":"note-notesq","date":"2026-10-19T20:30:00Z","title":"/note saves a NotesQ note","text":"/note <text> now creates a NotesQ note and /notes lists them. The developer observer note moved to /devnote (// text still works).","try":"/note buy milk","since":"0.3.0"}
+{"id":"findings-reconcile","date":"2026-10-19T21:15:00Z","since":"0.3.1","title":"Fixed security findings stop raising alarms","text":"quox engagement reconcile checks each open finding against its linked issue and fix commit. A finding whose fix is on main or in the running build now reads \"fix deployed, awaiting verification\" in /sitrep instead of an alarm. It is closed only when the issue is closed AND the fix is deployed, a critical never closes on its own, and quox engagement reconciliations shows the audit trail.","shell":"quox engagement reconcile --dry-run"}
+{"id":"walk-recheck","date":"2026-10-19T22:40:00Z","since":"0.3.1","title":"The walkthrough ends by re-checking the server","text":"After your last answer the approvals walkthrough fetches the list fresh and ends with \"Nothing else is currently waiting for you.\", or tells you how many new ones arrived, or that it could not re-check. No need to run /approvals again.","try":"/walkthrough"}
+{"id":"slash-plugins","date":"2026-10-19T23:55:00Z","since":"0.3.1","title":"/plugins lists your installed extensions","text":"/plugins (also /extensions, /addons, /apps) shows the plugins your org has installed with their state and version, and a mistyped slash command now suggests the nearest real one.","try":"/plugins"}
+{"id":"qpe-rows","date":"2026-10-19T23:59:00Z","since":"0.3.1","title":"The proof engine rows are coloured, lined up and three deep","text":"The QPE rows now read as three rows on one grid: the score coloured by health with its sparkline, 24 h change and release-proven jobs; what got fixed and broke, the last run and who ran it, the next run; coverage coloured by ratio with the weakest area named. Narrow windows drop whole items rather than cutting words. Status rows can now send coloured cells (quox rows contract).","try":"/qpe rows 3"}
+{"id":"qpe-content","date":"2026-10-20T03:30:00Z","since":"0.3.1","title":"A fourth QPE line: your cli.quox.ai content","text":"The proof engine lines now add, not just respread: the newest broken case by name, what the newest release is waiting on, the next run (and why today's was deferred), and a fourth line for cli.quox.ai content: pages backed by proof, guides, things to try, journeys and command pages. One call draws all four. /qpe 4 (or unset) shows them all.","try":"/qpe 4"}
+{"id":"slash-todo","date":"2026-10-20T10:00:00Z","since":"0.3.1","title":"/todo adds Action Tracker items, /todos moves them","text":"/todo <text> adds an item and confirms with its id. /todos lists every item by column as td1 (to do), do1 (doing), dn1 (done); then /todo move do2 done, /todo td3 doing. From a shell: quox actions add \"<text>\" [--due tomorrow], quox actions move <id> done, quox actions list (every page).","try":"/todos"}
+{"id":"approve-says-who","date":"2026-10-23T12:00:00Z","since":"0.3.1","title":"Approving or denying says who, what and where","text":"After you answer a card, the confirmation now reads: You approved VULCAN-SEC to run a shell command on web01. Denials use the same shape. Anything the card did not say is left out.","try":"/approvals"}
+{"id":"bar-approvals","date":"2026-10-23T12:00:00Z","since":"0.3.1","title":"The line above the input says what is waiting","text":"The divider above the input box now always shows your approvals: ✔ nothing waiting, ⏸ 5 approvals waiting, or approvals ? when the inbox cannot be read or you are signed out (never a false zero). On narrow windows the model name goes first, the approvals note stays whole.","try":"/approvals"}
+{"id":"done-cmd","date":"2026-10-23T14:00:00Z","since":"0.3.1","title":"/done marks Action Tracker items done","text":"Type /done td1,td2 (ids from /todos) to mark several items done at once; /todo move td1,td2 done takes lists too.","try":"/done"}
+{"id":"server-chip","date":"2026-10-23T20:00:00Z","since":"0.3.1","title":"The status line names the server you are on","text":"If the machine Quox runs on is a registered server, the status line now shows it, for example server dev01 (fleet), and the remote instance when your profile talks to another one.","shell":"quox fleet hosts"}
+{"id":"evidence-bundle","date":"2026-10-23T19:10:00Z","since":"0.3.1","title":"/evidence exports this conversation as a signed bundle","text":"/evidence writes every envelope, WARD receipt and VOLT run of this conversation to ~/quox-evidence/ as a signed zip and prints how to check it offline (quox evidence verify <file>). /proof now lists the envelope ids of the conversation, newest first. /ward, /envelope, /envelopes, /aee and /volt point at the same evidence.","try":"/evidence"}
+{"id":"server-go","date":"2026-10-23T21:00:00Z","since":"0.3.1","title":"Open a Quox window on any dev server","text":"quox server list shows your registered dev servers and which are reachable; quox server go <name> opens Quox on one. The status line now shows the server purpose (for example main dev). /server lists them in the app.","try":"/server"}
+{"id":"dragon-companion","date":"2026-10-23T21:00:00Z","since":"0.3.1","title":"Dragon companions: your attached agent's dragon greets you","text":"Dragon companions: your attached agent's dragon greets you. /dragon companion on|greeting|off.","try":"/dragon companion status"}
+{"id":"stop-cmd","date":"2026-10-23T21:00:00Z","since":"0.3.1","title":"/stop and /cancel stop the running turn","text":"Type /stop (or /cancel) to stop the current turn, same as Esc. /clear now cancels a running turn too, and a stopped turn no longer leaves the status line animating.","try":"/stop"}
+{"id":"approvals-ux","date":"2026-10-23T22:00:00Z","since":"0.3.1","title":"Approvals: readable rows, full content, walkthrough covers them","text":"/approvals rows now show what each approval says (the start of an X post), /approvals N shows the full content, a bare y after a list asks which one instead of going to chat, and /walkthrough walks plain approvals as cards.","try":"/walkthrough"}
+{"id": "dragon-transient", "date": "2026-10-23T23:00:00Z", "since": "0.3.1", "title": "The dragon comes and goes", "text": "The dragon companion no longer stays on screen. It appears when you attach, at key moments (a new approval, a failed turn, a long task finishing) and when you type /dragon, then leaves after a few seconds or on your next keypress.", "try": "/dragon"}
+{"id": "resume-attach-coherent", "date": "2026-10-24T01:00:00Z", "since": "0.3.1", "title": "Resume keeps the right agent", "text": "Resuming a conversation now attaches you to the agent it was with, so the footer and your next turn agree. After a restart, if the saved attachment and conversation differ, you get one warning and a fresh conversation. Resumed titles never show painted screen characters.", "try": "/resume"}
+{"id": "dragon-smooth", "date": "2026-10-24T03:30:00Z", "since": "0.3.1", "title": "Companion dragons animate smoothly, and bigger", "text": "Lucid, Hyperion and Seer now play through frames drawn off the main thread, so they move as smoothly as the Quox dragon and no longer stutter the screen. They are larger, stay for 10 seconds (a keypress in the first 2 seconds will not send them away), every typed /attach greets, and /dragon companion calls the dragon too.", "try": "/dragon"}
+{"id": "say-last-target", "date": "2026-10-24T19:00:00Z", "since": "0.3.1", "title": "/say remembers who you were talking to", "text": "If the first word of a /say is not a slot (a URL, a path, plain text), Quox offers to send the whole message to the slot you last said something to. A URL is never taken as a slot name.", "try": "/say"}
+{"id": "full-envelope-ids", "date": "2026-10-25T08:00:00Z", "since": "0.3.1", "title": "/proof and tool lines show the whole envelope id", "text": "Envelope ids, WARD seqs and bundle paths now wrap instead of being cut off, even in a narrow window. /proof puts the full id on its own line to copy, with the quox aee get and quox evidence verify commands, and the model can quote the id too.", "try": "/proof"}
+{"id": "contacts-from-chat", "date": "2026-10-25T09:00:00Z", "since": "0.3.1", "title": "Add and list contacts by just asking", "text": "Ask Quox to add Sam Lee to your contacts with a number and it does, through the same approval rules as the CLI; ask to list your contacts and it pages through all of them. /contact new now builds a valid quox contacts add command (--mobile and --tel become --phone, multi-word names are quoted) and refuses flags the command does not have. quox contacts list pages with --offset.", "try": "/contact new"}
+{"id": "contacts-send-at", "date": "2026-10-25T09:00:00Z", "since": "0.3.1", "title": "Schedule an SMS for a time, and see why a send failed", "text": "quox contacts send now takes --at (10am, 14:30 or a full ISO time, read in Europe/London unless you pass --tz) and the server delivers it then, even if you close the terminal. The answer states the exact time, and quox contacts scheduled list or cancel manages the queue. A failed send now says why in plain words.", "shell": "quox contacts send <contact> --channel sms --at 10am \"hello\""}
+{"id": "attach-agent-first", "date": "2026-10-25T12:00:00Z", "since": "0.3.1", "title": "/attach seer now picks the agent first", "text": "When a name is both an agent and a slot, /attach <name> attaches the agent and tells you the slot exists. Use /attach slot:<name> for the slot or /attach agent:<name> to be explicit. A name that is only a slot still attaches the slot.", "try": "/attach slot:seer"}
+{"id": "dragons-sentinel-drago", "date": "2026-10-25T19:00:00Z", "since": "0.3.1", "title": "Two new dragons: Sentinel (Warden) and Drago", "text": "Two new dragons: Sentinel (Warden) and Drago. Attach Warden or the security lead and they greet you, wait with you at approvals and show when something needs attention. Sentinel shows its shield icon on smaller terminals.", "try": "/attach sentinel"}
+{"id": "dragons-cipher", "date": "2026-10-25T21:00:00Z", "since": "0.3.1", "title": "New dragon: Cipher", "text": "New dragon: Cipher, the network operations dragon. Attach cipher and it greets you, listens while you work, waits with you at approvals and shows when something needs attention.", "try": "/attach cipher"}
+{"id": "objective-offer", "date": "2026-10-25T22:00:00Z", "since": "0.3.1", "title": "Ask for something your agent cannot do, get an objective", "text": "Ask an attached agent for a multi-step job it has no tools for and Quox now offers (y or n) to make it an objective that runs until done. You approve the plan, then each step.", "try": "/attach seer"}
+{"id": "dragon-jobs", "date": "2026-10-25T23:00:00Z", "since": "0.3.1", "title": "Dragons now report real state", "text": "Each companion dragon has one job and says it from a live read: Sentinel the WARD state of your last answer, Cipher route health, Seer the plan, Hyperion the fleet, Drago open security findings, Lucid recovery. If a read fails it says it could not check.", "try": "/attach cipher"}
+{"id": "dragon-summons", "date": "2026-10-25T23:30:00Z", "since": "0.3.1", "title": "Dragons turn up when your work finishes", "text": "With the dragon companion on, a finished or failed objective or loop calls Seer for a few seconds with the real result, even with no agent attached. Never while you are typing, and each dragon waits a minute before it can be called again.", "try": "/dragon companion status"}
+{"id": "loop-card", "date": "2026-10-26T00:00:00Z", "since": "0.3.1", "title": "Watch a loop as it runs", "text": "A loop you start from chat now shows a live card that updates in place: turns, receipts witnessed, and the last lines of its output. Milestones and errors land as chat lines under it, and a finished loop prints its proof command.", "try": "/loop list"}
+{"id": "loop-offer", "date": "2026-10-26T01:00:00Z", "since": "0.3.1", "title": "Ask for a loop and Quox offers one", "text": "Say \"keep checking until it is green\" or \"run it as a loop\" and Quox offers to create a loop with a tool list worked out from your goal (read-only unless the goal writes a file or runs a command). You see exactly which tools it may use and approve it before it starts. A fixed cadence like \"every 15 minutes\" is offered as a schedule instead.", "try": "/loop list"}
+{"id": "dragon-fit", "date": "2026-10-26T01:00:00Z", "since": "0.3.1", "title": "Dragons fit your window, or tell you why not", "text": "/dragon fire and /dragon-fly now size to your real window and say how many rows they need when it is too small. /detach brings the Q dragon back to greet you when dragons are on.", "try": "/dragon-fly"}
+{"id":"restart-waits-server","date":"2026-10-26T02:10:00Z","title":"Auto restart waits for Quox to come back","text":"When a new version lands while the Quox server is restarting, the window now waits for the server before it restarts, and picks its slot back up once the server answers.","try":"/restart","since":"0.3.1"}
+{"id":"keep-going-plain-words","date":"2026-10-26T04:00:00Z","title":"Ask for a watch in plain words","text":"Say \"keep an eye on quox.ai for the next 10 minutes\" or \"watch the build until it is green\" and Quox offers to keep going for you, no need to say loop. One key to start it, one to just answer once.","try":"/watch quox.ai for downtime","since":"0.3.1"}
+{"id": "objective-offer-reports-back", "date": "2026-10-26T05:30:00Z", "title": "Objectives report back in the chat", "text": "Say a long multi-step ask to an advisory agent and Quox offers to run it as an objective. The plan routes each step to an agent that holds the tool, a fallback like \"if something goes wrong, save the draft\" is honoured, and when it ends the chat tells you what happened and where things are.", "try": "/attach seer", "since": "0.3.1"}
+{"id": "loop-card-polish", "date": "2026-10-26T13:00:00Z", "since": "0.3.1", "title": "The loop card keeps its own count", "text": "The card now counts the loop's own turns (turn 2 of 5, not the message count), shows the whole runway, fills a receipts bar as each one is witnessed, and says a milestone once. With an empty composer, press Down to reach its keys. A finished loop calls its dragon.", "try": "/loop list"}
+{"id": "org-picker", "date": "2026-10-26T16:30:00Z", "since": "0.3.1", "title": "Switch org in one keystroke", "text": "Type /org for a list of your orgs, arrow to one and press Enter: this window moves there at once and the status bar follows. Press d instead to also make it your default. /org hampshire switches straight away when only one org matches, and quox org switch with no argument gives a numbered list.", "try": "/org"}
+{"id":"quoxcli-0-4-0","date":"2026-10-26T18:00:00Z","since":"0.4.0","title":"quoxon extensions, an inbox bar, history and mouse editing","text":"Add and manage extensions with quox ext add, quox ext remove and quox ext list, or /ext in the window. /inbox and a notification bar show what is waiting. Up and Ctrl+R search your history. /mouse turns on optional mouse editing. Plan approval cards now list their steps, and live loop cards no longer freeze the window.","try":"/ext","shell":"quox ext list"}
+{"id": "dragons-vulcan-quoxperticus", "date": "2026-10-27T09:00:00Z", "since": "0.3.1", "title": "Two new dragons: Vulcan and Quoxperticus", "text": "Two new dragons: Vulcan, the forge dragon, and Quoxperticus, the fleet conductor. Attach either agent and the dragon greets you, listens while you work, waits with you at approvals and shows when something needs attention.", "try": "/attach vulcan"}
+{"id": "quoxon-2026-10-27-honest-window", "date": "2026-10-27T12:30:00Z", "since": "0.4.0", "title": "A calmer, more honest window", "text": "When your model hits a usage limit, the window offers a working one (y/N). Auto-restart waits at least 30 minutes between restarts and only when you are idle; inside that time a new version shows a quiet line and Enter restarts. The status bar no longer says nothing is waiting while items are open or a source can't be read. /say and /observe reach your slots in your other orgs (name@org picks one). /approvals opens faster, and a refused loop shows why instead of fake progress.", "try": "/approvals"}
+{"id": "quoxon-2026-10-27-delete-confirm", "date": "2026-10-27T16:30:00Z", "since": "0.4.0", "title": "Deletes need the name typed", "text": "An approval that deletes something (delete_*, remove_*, purge_*, destroy_*, drop_*, wipe_*) now leads with DELETES and the object, and a single y no longer approves it: y asks you to type the name, Esc or n goes back, n on the card still denies. Bulk approve (/yestoall, /approve all) skips deletes and tells you how many are left to confirm one by one.", "try": "/approvals"}
+{"id": "quoxon-2026-10-28-approval-burst", "date": "2026-10-28T00:30:00Z", "since": "0.4.0", "title": "A burst of approvals is one card", "text": "When one agent asks to run the same tool several times within 5 minutes (say nine wire_alerts), you get ONE card: 'VIGIL wants to run wire_alerts on 9 items'. y approves all, n denies all, p walks them one by one, Tab puts it away. Deletes and risky asks are never in the batch; they keep their own card and confirm. The inbox arrival line collapses the same way.", "try": "/approvals"}
+{"id": "quoxon-2026-10-28-burst-across-polls", "date": "2026-10-28T04:00:00Z", "since": "0.4.0", "title": "Pack installs on many hosts are one card", "text": "DevSuite pack installs filed a few seconds apart for different hosts used to arrive as one card each. They now merge into ONE card (y approves all, n denies all, p picks), and the card says who asked in plain words ('DevSuite (skill-pack sync)') instead of an internal key. Restart, deploy and other disruptive asks still never batch.", "try": "/approvals"}
+{"id": "quoxon-2026-10-28-afk-quiet-cards", "date": "2026-10-28T06:45:00Z", "since": "0.4.0", "title": "Away means quiet", "text": "After /afk or /sleep, new approvals no longer open a card or arm y/n (a stray key cannot answer one). They are only counted: \"⏸ N approvals waiting · /back to review\". /back, or any message you type, opens them as before. Nothing is ever answered for you."}
+{"id": "quoxon-2026-10-28-agent-profile-offer", "date": "2026-10-28T15:00:00Z", "since": "0.4.0", "title": "Opened as an agent? Quox offers your own login", "text": "Starting quox on an agent profile while you have a signed-in human profile now asks once (y/N) to restart as you. Typing \"attach to hitl slot\" offers /slot hitl instead of going to the model."}
+{"id": "quoxon-2026-10-28-secret-paste-guard", "date": "2026-10-28T17:00:00Z", "since": "0.4.0", "title": "Pasted credentials are caught", "text": "A message that looks like bank details, a PIN, a password, a card number or an API key now asks \"Don't send it?\" (y keeps it out, n sends anyway). Nothing is sent or saved on y, and history and transcripts store [REDACTED:kind] in place of the value either way."}
+{"id": "quoxon-2026-10-28-do-not-disturb", "date": "2026-10-28T18:00:00Z", "since": "0.4.0", "title": "Sleep means sleep: /donotdisturb and /morningreport", "text": "/donotdisturb (or /dnd, optionally until 07:30) collects everything quietly: no notices, approval cards, bells or dragon. The status line shows \"🌙 do not disturb · N waiting · /morningreport\". /morningreport groups what came in (incidents first, repeats as ×N) and offers to turn it off. /afk and /sleep imply it, saying you are going to sleep offers it, and a restarted window restores it."}
+{"id": "quoxon-2026-10-29-provider-test-json", "date": "2026-10-29T12:00:00Z", "since": "0.4.0", "title": "quox provider test --json says why", "text": "quox provider test --json now prints every provider's result (ok, error, reason code) and a summary, instead of nothing, and still exits 1 when one fails."}
+{"id": "quoxon-2026-10-29-connect-server-install", "date": "2026-10-29T13:00:00Z", "since": "0.4.0", "title": "quox connect and quox server install", "text": "quox connect links this machine to a Quox server. quox server install sets up a new server on this machine: checks, download, start, owner account and a one-time sign-in link. Try quox server install --dry-run first. The sign-in link is not printed into piped or --json output unless you pass --print-login-link.", "shell": "quox server install --dry-run", "sha": "34a547724"}
+{"id": "quoxon-2026-10-29-morningreport-fallback", "date": "2026-10-29T14:00:00Z", "since": "0.4.0", "title": "/morningreport shows the digest when nothing was held", "text": "With do not disturb off, /morningreport now says nothing was held and shows the same While you were away digest as /away, so you no longer need a second command.", "sha": "c4f2a3c90"}
+{"id": "quoxon-2026-10-29-never-answered-offer", "date": "2026-10-29T15:00:00Z", "since": "0.4.0", "title": "A server that never answered now offers to connect elsewhere", "text": "If this machine has never reached the server a profile points at, Quox now asks whether to connect to a different one instead of waiting on a restart that is not happening. Say y, type the address, and it checks the server, shows its certificate and signs you in."}
+{"id": "quoxon-2026-10-29-approval-outcome", "date": "2026-10-29T16:00:00Z", "since": "0.4.0", "title": "You now see whether an approved action worked", "text": "After you approve a request from another session, Quox follows up with one line saying whether it finished or failed and why. The failed-to-execute notice now carries the approval id, so quox inbox show <id> opens it."}
+{"id": "quoxon-2026-10-29-deck-lazy-offer", "date": "2026-10-29T17:00:00Z", "since": "0.4.0", "title": "/deck now offers to install what it needs", "text": "If quoxdeck is missing, or its audio headers (libasound2-dev) are, /deck on asks once whether to install them, shows the exact commands, and runs them with your own sudo prompt. Say n and it prints the commands to run later."}
+{"id":"quoxon-2026-10-29-connect-no-terminal","date":"2026-10-29T08:50:36Z","since":"0.4.0","title":"quox connect can run with no terminal","text":"quox connect now takes --email, --password-stdin and --fingerprint <sha256>, so a script or chat can connect and sign in with no prompts. quox server status shows the certificate fingerprint to compare, a certificate Quox does not trust now says so in plain words with the fix, and the same email on a different server no longer trips the same-user warning."}
+{"id":"quoxcli-2026-10-29-tls-trust-hint","date":"2026-10-29T09:26:52Z","since":"0.4.0","title":"A certificate Quox does not trust now says so on login","text":"If a server uses a certificate this machine does not trust yet, quox login now says so in plain words and prints the exact quox connect command to trust it (it shows the fingerprint and asks y/N; --trust-cert or --fingerprint for no terminal), instead of just \"fetch failed\"."}
+{"id":"quoxon-2026-10-29-gripe-queue","date":"2026-10-29T09:46:49Z","since":"0.4.0","title":"/gripe no longer loses a gripe when Quox is slow","text":"If /gripe! times out or the server errors, the gripe is saved on your machine and filed when Quox answers again, without making a duplicate issue if the first try had actually gone through. /gripes shows what is waiting and what was filed."}
+{"id":"quoxon-2026-10-29-gripe-paste-lines","date":"2026-10-29T10:10:00Z","since":"0.4.0","title":"/gripe keeps the lines of what you paste","text":"A multi-line paste into /gripe now reaches the issue with its lines intact instead of one run-on line, and the confirm says how many more lines will be filed."}
+{"id":"quoxon-2026-10-29-advice-independent","date":"2026-10-29T11:00:00Z","since":"0.4.0","title":"Test-edit approvals no longer echo the asker as advice","text":"On a test-edit approval card, ADVICE now cites the diff when it is known, or says there is no independent view, instead of repeating the asker's own recommendation; the starred recommended-by line stays."}
+{"id":"quoxon-2026-10-29-resume-no-duplicate","date":"2026-10-29T12:00:00Z","since":"0.4.0","title":"quox claude --resume no longer starts a second copy","text":"Resuming a named session now finds its tmux session whatever the capitals and attaches to it, and refuses with the pid and the attach command when that conversation is already running anywhere. --force starts a second copy on purpose."}
+{"id": "quoxon-2026-10-29-sleep-one-step", "date": "2026-10-29T09:00:00Z", "since": "0.4.0", "title": "/sleep is one step", "text": "/sleep (or /afk going to bed) sets you asleep with do not disturb on in one command. A bare /dnd now only ever turns it on; /dnd off ends it. Plain /afk offers do not disturb with one y/N."}
+{"id": "quoxon-2026-10-29-roster-sessions", "date": "2026-10-29T17:30:00Z", "since": "0.4.0", "title": "/roster shows attached agents and duplicate sessions", "text": "/roster now lists the live agent attaches in your org and every claude --resume process on this box, grouped by name. A conversation running more than once is flagged with each pid. The same attach list is quox agent attaches."}
+{"id": "quoxon-2026-10-29-announce-everything", "date": "2026-10-29T20:00:00Z", "since": "0.4.0", "title": "Quox announces what it does", "text": "Memory saves, approvals, slot messages, connect and vault create now print one Quox line saying what happened, success or failure, and the chat transcript shows the same line for what a turn did (a saved memory, an approval, a delegation). Silent under --json and --quiet.", "shell": "quox memory create --type fact --content hello"}
+{"id": "quoxon-2026-10-29-walkthrough-command", "date": "2026-10-29T22:30:00Z", "since": "0.4.0", "title": "The walkthrough shows the command", "text": "Each approval card in the walkthrough now shows the exact command in full, never cut off, and the host it runs on. When the reason was guessed from the command rather than stated by the asker, it is labelled so.", "try": "/walkthrough"}
+{"id": "quoxon-2026-10-29-chat-quox-lines", "date": "2026-10-29T22:31:00Z", "since": "0.4.0", "title": "quox chat prints what Quox did", "text": "quox chat, streaming or --no-stream, now prints one Quox line on stderr for what a turn did (a saved memory, an approval, a delegation). Silent under --json and --quiet.", "shell": "quox chat --no-stream \"remember that the proof tag is QA-1036\""}
+{"id": "quoxon-2026-10-30-inbox-unread-quiet-noreply", "date": "2026-10-30T07:00:00Z", "since": "0.4.0", "title": "Undo a read, quieter no-reply, honest timeouts", "text": "/inbox unread N puts an item back as unread. The no reply from a slot notice is dim and skipped when that slot spoke in the last 10 minutes. An approved action whose result timed out is titled no result in time (it may still have run) instead of FAILED.", "try": "/inbox unread 1"}
+{"id": "quoxon-2026-10-30-reattach-deploy-line", "date": "2026-10-30T08:00:00Z", "since": "0.4.0", "title": "A slot reattach during a deploy says so", "text": "When QuoxCORE is being redeployed, a slow slot reattach now says it is restarting and reconnecting, instead of suggesting a stale URL or QUOX_COLLECTOR_URL. A URL that never answered still gets the full diagnostic.", "try": "/slot"}
+{"id":"quoxon-2026-10-30-inbox-unread-cli","date":"2026-10-30T08:27:43Z","since":"0.4.0","title":"Mark unread from a shell, read items whole","text":"quox inbox unread <id> undoes a mark-as-read from a shell, and /inbox unread all flips back every read item. /inbox N now shows the full body of every item (it missed the stored body before), the sender and subject for mail, and the actions that apply.","try":"/inbox 1","shell":"quox inbox unread <id>"}
+{"id":"quoxon-2026-10-30-presence-owner-level","date":"2026-10-30T08:56:21Z","since":"0.4.0","title":"Good morning waits for you; /back agrees across windows","text":"LUCID no longer says good morning at 08:00 while you are asleep or away: it waits until you are back. If another window already marked you present, /back reports that same away span instead of its own.","try":"/back"}
+{"id":"quoxon-2026-10-30-tui-mail","date":"2026-10-30T09:30:00Z","since":"0.4.0","title":"Read your email in the terminal: /mail","text":"/mail lists your newest triaged email (sender, subject, age, zone) and /mail N opens one with its body excerpt and why it was triaged that way. Read only: nothing is sent, moved or deleted. With no mailbox connected it names the connect command. /inbox now points at /mail.","try":"/mail"}
+{"id":"quoxon-2026-10-30-dnd-survives-restart","date":"2026-10-30T10:40:24Z","since":"0.4.0","title":"Do not disturb now survives restarts","text":"Do not disturb is saved on the server for you, not just in one window, so an auto-restart no longer drops it, even when the server is slow to answer at that moment: the window keeps retrying until it can read it.","try":"/dnd"}
+{"id":"quoxon-2026-10-30-reply-address","date":"2026-10-30T11:00:00Z","since":"0.4.0","title":"Messages from slot holders now show their reply address","text":"A message from a session that holds a slot no longer says (no reply address): the TUI looks up the slot the sender holds, so Tab or /r replies to it. It says so only when the sender truly holds no slot."}
+{"id":"quoxon-2026-10-30-approval-row-background","date":"2026-10-30T12:00:00Z","since":"0.4.0","title":"Approval rows flag background work","text":"/approvals rows now say when a command runs in the background, including screen, tmux and docker detached runs."}
+{"id":"quoxon-2026-10-30-confirm-target-once","date":"2026-10-30T22:00:00Z","since":"0.4.0","title":"Approval confirmations name the hosts once","text":"The line after you approve a multi-host command no longer repeats the host list twice."}
+{"id":"quoxon-2026-10-30-away-retry","date":"2026-10-30T22:10:00Z","since":"0.4.0","title":"While you were away retries a slow source","text":"If a source times out right after sign-in, the digest asks it once more before it says it cannot see it."}

package/lib/quoxon/windowOrg.js

@@ -97,7 +97,17 @@ export function createWindowOrg({ auth, baseClient, now = () => Date.now() }) {
  */
 export function createWindowClient({ config, auth, createClient }) {
   const windowOrg = createWindowOrg({ auth, baseClient: createClient(config, auth) });
-  return { client: createClient(config, windowOrg.auth), auth: windowOrg.auth, windowOrg };
+  // A client on the SAME user's token for another org, without moving this window (cached; each has its own overlay).
+  const scoped = new Map();
+  const clientForOrg = async (orgId) => {
+    if (scoped.has(orgId)) return scoped.get(orgId);
+    let cl;
+    if (orgId === (() => { try { return auth.getOrgId(); } catch { return null; } })()) cl = createClient(config, auth);
+    else { const sub = createWindowOrg({ auth, baseClient: createClient(config, auth) }); await sub.switchTo(orgId); cl = createClient(config, sub.auth); }
+    scoped.set(orgId, cl);
+    return cl;
+  };
+  return { client: createClient(config, windowOrg.auth), auth: windowOrg.auth, windowOrg, clientForOrg };
 }
 
 /**

package/lib/server/devServers.js

@@ -0,0 +1,137 @@
+// DEVFLEET: the dev-server list behind `quox server list|go|mark` and the TUI /server picker.
+// A dev server is a Bastion host (`quox fleet hosts`) that has a local entry in dev-servers.json
+// (purpose, and optionally project, repo, workdir, ci, user, jump). Bastion supplies address + state;
+// the entry supplies what the server is FOR. Pure functions here; the file read/write is the only IO.
+import { readFileSync, writeFileSync, mkdirSync, renameSync } from 'node:fs';
+import { homedir, hostname } from 'node:os';
+import { join, dirname } from 'node:path';
+import { matchServer, localIps } from '../quoxon/serverChip.js';
+import { resolveEndpoint } from '../api/endpoints.js';
+
+const FIELDS = ['purpose', 'project', 'repo', 'workdir', 'ci', 'user', 'jump', 'lastDeploy'];
+const SAFE = /^[A-Za-z0-9._@:\/~+-]+$/;
+
+export function registryPath(env = process.env) {
+  return join(env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'quox', 'dev-servers.json');
+}
+
+/** -> { servers: { [name]: entry } }; a missing file is empty, a corrupt one throws (never clobbered). */
+export function readRegistry(path = registryPath()) {
+  let raw;
+  try { raw = readFileSync(path, 'utf8'); } catch (e) { if (e.code === 'ENOENT') return { servers: {} }; throw e; }
+  const j = JSON.parse(raw);
+  return { servers: j && typeof j.servers === 'object' && j.servers ? j.servers : {}, defaults: j && typeof j.defaults === 'object' && j.defaults ? j.defaults : {} };
+}
+
+/** Additive upsert of one server's entry; unspecified fields are kept. Atomic write. */
+export function markServer(name, fields, path = registryPath()) {
+  if (!name || !SAFE.test(name)) throw new Error(`invalid server name: ${name}`);
+  const reg = readRegistry(path);
+  const next = { ...(reg.servers[name] || {}) };
+  for (const k of FIELDS) if (fields[k] != null && fields[k] !== '') next[k] = String(fields[k]);
+  reg.servers[name] = next;
+  mkdirSync(dirname(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(reg, null, 2) + '\n', { mode: 0o600 });
+  renameSync(tmp, path);
+  return next;
+}
+
+function writeCache(reg, path) {
+  mkdirSync(dirname(path), { recursive: true });
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(reg, null, 2) + '\n', { mode: 0o600 });
+  renameSync(tmp, path);
+}
+
+const pickFields = (e) => Object.fromEntries(FIELDS.filter(k => e && e[k] != null && e[k] !== '').map(k => [k, String(e[k])]));
+
+/**
+ * The registry lives SERVER-SIDE (org-scoped, collector); the local file is an offline cache only.
+ * -> { servers, source: 'server' | 'cache', migrated }. A good server read refreshes the cache. If the server
+ * has no entries and the cache has some, they are uploaded once (migration). Unreachable or a non-registry
+ * answer -> the cache (a corrupt cache throws, never clobbered).
+ */
+export async function loadRegistry({ client, path = registryPath() } = {}) {
+  let remote = null;
+  let defaults = {}; // local-only preferences (e.g. defaults.jump, the ssh ProxyJump alias): never uploaded, kept across cache refreshes
+  try { defaults = readRegistry(path).defaults; } catch { /* corrupt cache: no local defaults */ }
+  try {
+    const ep = resolveEndpoint('devServerRegistry.list');
+    const d = await client.get(ep.path, { service: ep.service, retries: 0, timeout: 5000 });
+    if (d && typeof d.servers === 'object' && d.servers && !Array.isArray(d.servers)) remote = d.servers;
+  } catch { /* offline: fall back to the cache */ }
+  if (!remote) return { servers: readRegistry(path).servers, defaults, source: 'cache', migrated: 0 };
+  let migrated = 0;
+  let intact = true;
+  if (!Object.keys(remote).length) {
+    let local = {};
+    try { local = readRegistry(path).servers; } catch { /* unreadable cache: nothing to migrate */ }
+    for (const [name, e] of Object.entries(local)) {
+      try {
+        const ep = resolveEndpoint('devServerRegistry.put', { name });
+        await client.put(ep.path, { service: ep.service, body: pickFields(e) });
+        remote[name] = pickFields(e); migrated++;
+      } catch { intact = false; break; /* the cache keeps what did not upload; the next read retries */ }
+    }
+    // A failed upload must never be followed by a cache overwrite: the cache is then the only copy.
+    if (!intact) return { servers: { ...local, ...remote }, defaults, source: 'cache', migrated };
+  }
+  try { writeCache({ servers: remote, defaults }, path); } catch { /* cache is best effort */ }
+  return { servers: remote, defaults, source: 'server', migrated };
+}
+
+/** Upsert one entry on the server (additive), then refresh the cache. Offline -> throws, nothing written. */
+export async function saveServer({ client, name, fields, path = registryPath() }) {
+  if (!name || !SAFE.test(name)) throw new Error(`invalid server name: ${name}`);
+  const ep = resolveEndpoint('devServerRegistry.put', { name });
+  let r;
+  try { r = await client.put(ep.path, { service: ep.service, body: pickFields(fields) }); }
+  catch (e) { throw new Error(`could not save to the Quox server (${e?.message || 'failed'}); nothing was recorded`); }
+  let entry = r && r.entry && typeof r.entry === 'object' ? pickFields(r.entry) : null;
+  if (!entry) { try { entry = markServer(name, fields, path); } catch { entry = pickFields(fields); } }
+  else { try { const reg = readRegistry(path); reg.servers[name] = entry; writeCache(reg, path); } catch { /* cache is best effort */ } }
+  return entry;
+}
+
+/** Bastion host list + registry -> rows for each registered server. `here` = { hostname, ips }. */
+export function buildRows(hosts, registry, here = {}) {
+  const list = Array.isArray(hosts) ? hosts : [];
+  const me = matchServer(list, here);
+  return Object.entries(registry?.servers || {}).map(([name, e]) => {
+    const h = list.find(x => x && x.id === name) || null;
+    return {
+      name, purpose: e.purpose || null, project: e.project || null, repo: e.repo || null, workdir: e.workdir || null,
+      ci: e.ci || null, lastDeploy: e.lastDeploy || null,
+      ip: h?.ip || null,
+      registered: Boolean(h),
+      reachable: h ? (h.status?.state ?? h.state) === 'active' : false,
+      current: Boolean(me && me.name === name),
+      user: e.user || null, jump: e.jump || null, defaultJump: registry?.defaults?.jump || null
+    };
+  });
+}
+
+const shq = (s) => `'${String(s).replace(/'/g, `'\\''`)}'`;
+
+/**
+ * What `go` will run. -> { error } | { local: true, cmd, args, cwd, text } | { cmd:'ssh', args, text }.
+ * Remote: the user's own ssh config/keys via the jump host alias; nothing is copied anywhere.
+ */
+export function planGo(row) {
+  if (!row) return { error: 'unknown server' };
+  if (!row.registered) return { error: `${row.name} is not in the Bastion host registry (quox fleet hosts), so go cannot reach it` };
+  if (!row.reachable) return { error: `${row.name} is not reachable according to the Bastion registry; try: quox fleet ping ${row.name}` };
+  if (row.current) {
+    const cwd = row.workdir || process.cwd();
+    return { local: true, cmd: 'quox', args: [], cwd, text: `cd ${cwd} && quox   (this is ${row.name}; local)` };
+  }
+  if (!row.ip) return { error: `${row.name} has no address in the Bastion registry` };
+  const target = `${row.user || 'control'}@${row.ip}`;
+  const remote = `${row.workdir ? `cd ${shq(row.workdir)} && ` : ''}exec quox`;
+  const jump = row.jump || row.defaultJump || null; // a per-server --jump, else the registry's defaults.jump, else a direct ssh
+  const args = ['-t', ...(jump ? ['-o', `ProxyJump=${jump}`] : []), target, remote];
+  return { cmd: 'ssh', args, text: `ssh ${args.slice(0, 4).join(' ')} ${shq(remote)}` };
+}
+
+export const hereIdentity = () => ({ hostname: hostname(), ips: localIps() });