Qm

QM is a multiplayer agent harness for companies, used in Slack and on the web and deployed in the organization's own cloud with its own models and keys. Each employee gets an isolated personal workspace, and people also work with the agent together in channels, group messages, and projects. Every person and every room has its own scoped memory, files, keychain view, permissions, crons, web apps, and durable sandbox.

Every turn runs through a headless core that handles the API, identity, policy, and scheduling, and hands the agent loop to an interchangeable harness: Pi, OpenCode, Codex, or Claude Code. Postgres holds sessions, memory, and the work queue. The agent has a small fixed tool surface, including an execute tool that runs commands in the scope's sandbox, a durable computer where installed tools stay installed. Harness, session store, sandbox, and memory each sit behind an interface, and memory can route to external providers by scope.

Like a local coding agent, QM acts as the person it works for, with their credentials and permissions, and audits everything it does. An organization picks a security posture (Strict, where every tool call waits for approval, Auto, or Dangerous) that narrower scopes can only tighten, plus a sharing posture that keeps resources isolated by default. Optional content screening classifies external content and can quarantine flagged items. Org-specific configuration, tools, skills, and sandbox images live in a deployment directory that the qm CLI validates and deploys to Fly or AWS.