Fix 3 critical bugs: message privacy (#11), Windows server start (#17), status bar label (#12)

[MelbourneDeveloper]

Fixes the three most critical open bugs, each via strict test-first TDD (a failing test was written and confirmed to fail because of the bug, then the minimal fix was applied).

#11 — Direct messages leak to all agents (privacy/security) 🔴

The status MCP tool called db.listAllMessages() and returned every message — including direct messages between other agents — to any caller, with no identity filtering.

Fix: status now resolves the caller's identity (agent_key arg or session) and returns only broadcasts (*) plus the caller's own sent/received messages. Anonymous callers see broadcasts only. Tagged [MSG-PRIVACY].

• packages/core/src/tools/status_tool.ts, packages/core/src/server.ts
• New test: test/status_message_privacy_test.ts; pre-existing tests that asserted the leak updated to assert correct privacy.

#17 — Windows local server fails to start; ENOENT swallowed 🔴

spawn() ran with no shell, so Node couldn't resolve the global npm .cmd shim on Windows, and the 'error' event was never handled — so the real ENOENT was swallowed and users only saw the misleading Local server did not start within 15000ms.

Fix: spawn via the shell on Windows (buildLocalSpawnConfig) so the .cmd shim resolves, and surface spawn failures promptly via a cancellable readiness race instead of the generic timeout.

• src/services/connectionManager.ts
• New test: test/pure/connectionManagerSpawn.test.ts

#12 — Status bar shows "TMC: Disconnected" while connected

The mode label equated a null connection target with "disconnected", but the auto-connect (restore-on-activation) path never calls setTarget, so the target stayed null while live.

Fix: a connected manager with no explicit target is, by construction, the default local server (cloud always sets a target via the picker), so the label is now derived from connection status in a pure, centralized selectModeLabel selector.

• src/state/selectors.ts, src/ui/statusBar.ts
• New test: test/pure/statusBarModeLabel.test.ts

Verification

• MCP server: npm run build, npm run lint, npm test → 363/363 pass
• Extension: compile, npm run lint, pure tests + coverage → 156/156 pass, 93.18% (threshold 80%)
• make lint clean across both packages
• No test was skipped, deleted, or had assertions removed.

Closes #11
Closes #12
Closes #17

🤖 Generated with Claude Code