frizz-server 0.15.16 → 0.15.17

package/dist/dev-child.js

@@ -760,10 +760,10 @@ function discoverProjectRoot(cwd = process.cwd(), home = homedir3()) {
   } catch {
     return resolve3(cwd);
   }
-  const stop = resolve3(home);
+  const stop2 = resolve3(home);
   const filesystemRoot = parse(dir).root;
   for (let at2 = dir; ; at2 = dirname3(at2)) {
-    if (at2 === stop || at2 === filesystemRoot) break;
+    if (at2 === stop2 || at2 === filesystemRoot) break;
     if (existsSync2(projectIdPath(at2))) return at2;
     if (hasAny(at2, REPO_MARKERS)) return at2;
     if (hasAny(at2, PROJECT_MARKERS)) return at2;
@@ -13731,9 +13731,10 @@ function signoffNudgeText(needsInput) {
     "  `mcp__frizz__timer`; `mcp__frizz__activity` reads back everything you have running, with its id.",
     "- `` ```awaiting `` with `steps:` \u2014 the human must PERFORM something you cannot: sign in, approve,",
     "  merge, press a button you may not. List each step as a `- ` line under `steps:`, written to be",
-    "  followed cold; frizz reads them verbatim. Steps name the HUMAN as the wait, so the fence needs no",
-    "  other name and no `for:`, and the thread goes into their queue. Their Done comes back to you as",
-    "  their reply; anything else they need to say comes as a message of their own.",
+    "  followed cold: a real Markdown link to every page and file it names, every command in a code span,",
+    "  every value the act needs written in. Frizz reads them verbatim. Steps name the HUMAN as the wait,",
+    "  so the fence needs no other name and no `for:`, and the thread goes into their queue. Their Done",
+    "  comes back to you as their reply; anything else they need to say comes as a message of their own.",
     "- `` ```awaiting `` with `questions:` \u2014 a question you registered at an EARLIER rest is still open and",
     "  you still need its answer. Name every such question (`questions: [qst_\u2026]`) and withdraw the rest with",
     "  `mcp__frizz__unask`: a fence that leaves an open question out is refused. A named card is drawn at",
@@ -13854,6 +13855,8 @@ function askedQuestionFaults(q2) {
   const faults = [];
   const walk = (node, path3) => {
     const options = node.options ?? [];
+    if (node.secret && options.length > 0) faults.push(`${path3}: a secret request takes no options \u2014 it is one masked box`);
+    if (node.secret && path3 !== "question") faults.push(`${path3}: a secret request cannot be a follow-up \u2014 register it on its own`);
     if (node.kind === "multi" && options.length === 0) faults.push(`${path3}: \`kind: "multi"\` needs options \u2014 a question with none is free text`);
     if (options.filter((o) => o.recommended).length > 1) faults.push(`${path3}: only ONE option may be \`recommended\` \u2014 a recommendation on two of three choices says nothing`);
     for (const [i, option] of options.entries()) {
@@ -13870,6 +13873,12 @@ function askedQuestionFaults(q2) {
   }
   return faults;
 }
+function secretAnswerText(path3) {
+  return `(secret ready at ${quotePath(path3)} \u2014 it can be read ONCE, within ${SECRET_TTL_MS / 6e4}m; never print it)`;
+}
+function quotePath(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
 function questionAnswerMessage(answers, dismissed = []) {
   if (answers.length === 0) return questionsCancelledWakeMessage(dismissed.length);
   const rows = [];
@@ -14118,7 +14127,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -14794,6 +14803,7 @@ var init_src = __esm({
       header: external_exports.string().trim().max(24).optional(),
       kind: AskQuestionKind,
       danger: external_exports.boolean().optional(),
+      secret: external_exports.boolean().optional(),
       // UNBOUNDED, deliberately. This carried `.max(8)` from launch until 2026-09-03, when the maintainer
       // asked for the cap to go ("allow arbitrary numbers of options"): a `multi` over a long list — which
       // gates to run, which of twenty findings to act on — is a real shape, and the card numbers past 9
@@ -14811,8 +14821,12 @@ var init_src = __esm({
        *  an id alone cannot be correlated back to what was asked. */
       id: external_exports.string(),
       spec: AskedQuestionSchema,
-      askedAt: external_exports.string()
+      askedAt: external_exports.string(),
+      /** A `secret` question only: the path its value will be served at. Known at registration, so the
+       *  worker can prepare the command that reads it before the human has answered. */
+      secretPath: external_exports.string().optional()
     }).strict();
+    SECRET_TTL_MS = 15 * 6e4;
     AskResult = external_exports.object({
       registered: external_exports.array(RegisteredQuestionView),
       /** Everything still open on this thread afterwards, so a worker never needs a second call. */
@@ -18087,6 +18101,229 @@ var init_logging = __esm({
   }
 });
 
+// packages/server/src/local-origin.ts
+import { isIP } from "node:net";
+function publicAuthority(policy) {
+  const raw2 = policy?.publicOrigin;
+  if (!raw2) return null;
+  let url;
+  try {
+    url = new URL(raw2);
+  } catch {
+    return null;
+  }
+  if (url.origin !== raw2) return null;
+  return {
+    hostname: normalizedHostname(url.hostname),
+    port: explicitPort(url),
+    authority: url.host.toLowerCase(),
+    scheme: url.protocol === "https:" ? "https" : "http"
+  };
+}
+function acceptsHostname(hostname, policy) {
+  if (LOCAL_HOSTNAMES.has(hostname)) return true;
+  if (!policy?.exposed) return false;
+  if (isIP(hostname) !== 0) return true;
+  return (policy.allowedHosts ?? []).some((allowed) => allowed === "*" || allowed.toLowerCase() === hostname);
+}
+function oneHeader(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function normalizedHostname(hostname) {
+  const lower = hostname.toLowerCase();
+  return lower.startsWith("[") && lower.endsWith("]") ? lower.slice(1, -1) : lower;
+}
+function explicitPort(url) {
+  if (url.port) return Number(url.port);
+  return url.protocol === "https:" ? 443 : 80;
+}
+function validExpectedPort(port2) {
+  return Number.isInteger(port2) && port2 >= 1 && port2 <= 65535;
+}
+function parseLocalHttpOrigin(value, expectedPort, policy) {
+  const raw2 = oneHeader(value);
+  if (!raw2 || !validExpectedPort(expectedPort) || raw2 !== raw2.trim()) return null;
+  const declared = publicAuthority(policy);
+  if (declared && raw2 === policy?.publicOrigin) return declared;
+  let url;
+  try {
+    url = new URL(raw2);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" || url.origin !== raw2) return null;
+  const hostname = normalizedHostname(url.hostname);
+  if (!acceptsHostname(hostname, policy) || explicitPort(url) !== expectedPort) return null;
+  return { hostname, port: expectedPort, authority: url.host, scheme: "http" };
+}
+function parseLocalHost(value, expectedPort, policy) {
+  const raw2 = oneHeader(value);
+  if (!raw2 || !validExpectedPort(expectedPort) || raw2 !== raw2.trim() || raw2.includes(",")) return null;
+  let url;
+  try {
+    url = new URL(`http://${raw2}`);
+  } catch {
+    return null;
+  }
+  if (url.username || url.password || url.pathname !== "/" || url.search || url.hash) return null;
+  if (url.host.toLowerCase() !== raw2.toLowerCase()) return null;
+  const hostname = normalizedHostname(url.hostname);
+  const declared = publicAuthority(policy);
+  if (declared && hostname === declared.hostname) {
+    return url.port === "" || Number(url.port) === declared.port ? declared : null;
+  }
+  if (!acceptsHostname(hostname, policy) || explicitPort(url) !== expectedPort) return null;
+  return { hostname, port: expectedPort, authority: url.host.toLowerCase(), scheme: "http" };
+}
+function hasForwardedAuthority(headers) {
+  return FORWARDED_HEADERS.some((name) => headers[name] !== void 0);
+}
+function forwardedAuthorityAllowed(headers, host, policy) {
+  if (!hasForwardedAuthority(headers)) return true;
+  const declared = publicAuthority(policy);
+  return !!declared && declared.hostname === host.hostname;
+}
+function isTrustedLocalHttpRequest(headers, expectedPort, allowMissingOrigin = false, policy) {
+  const host = parseLocalHost(headers.host, expectedPort, policy);
+  if (!host) return false;
+  if (!forwardedAuthorityAllowed(headers, host, policy)) return false;
+  if (headers.origin === void 0) return allowMissingOrigin;
+  const origin = parseLocalHttpOrigin(headers.origin, expectedPort, policy);
+  return !!origin && host.hostname === origin.hostname && host.port === origin.port;
+}
+function allowedLocalCorsOrigin(origin, expectedPort, policy) {
+  return parseLocalHttpOrigin(origin, expectedPort, policy) ? origin : void 0;
+}
+function isTrustedLocalWebSocketRequest(req, expectedPort = req.socket.localPort, policy) {
+  if (!validExpectedPort(expectedPort)) return false;
+  const headers = req.headers;
+  const host = parseLocalHost(headers.host, expectedPort, policy);
+  if (!host || !forwardedAuthorityAllowed(headers, host, policy)) return false;
+  const origin = parseLocalHttpOrigin(headers.origin, expectedPort, policy);
+  return !!origin && host.hostname === origin.hostname && host.port === origin.port;
+}
+function rejectWebSocketUpgrade(socket, status = 403, reason = "Forbidden") {
+  const body = `${reason}
+`;
+  const response = [
+    `HTTP/1.1 ${status} ${reason}`,
+    "Connection: close",
+    "Content-Type: text/plain; charset=utf-8",
+    `Content-Length: ${Buffer.byteLength(body)}`,
+    "",
+    body
+  ].join("\r\n");
+  try {
+    socket.end(response);
+  } catch {
+    try {
+      socket.destroy();
+    } catch {
+    }
+  }
+}
+var LOCAL_HOSTNAMES, FORWARDED_HEADERS;
+var init_local_origin = __esm({
+  "packages/server/src/local-origin.ts"() {
+    "use strict";
+    LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+    FORWARDED_HEADERS = [
+      "forwarded",
+      "x-forwarded-for",
+      "x-forwarded-host",
+      "x-forwarded-port",
+      "x-forwarded-proto"
+    ];
+  }
+});
+
+// packages/server/src/local-path.ts
+function normalizeLocalPath(path3, platform3 = process.platform) {
+  return platform3 === "win32" ? path3.replace(/^\/([a-zA-Z]:[\\/])/, "$1") : path3;
+}
+var init_local_path = __esm({
+  "packages/server/src/local-path.ts"() {
+    "use strict";
+  }
+});
+
+// packages/server/src/local-image.ts
+import { createReadStream, realpathSync as realpathSync5, statSync as statSync4 } from "node:fs";
+import { extname, isAbsolute as isAbsolute3 } from "node:path";
+function resolveLocalImage(rawPath, range) {
+  if (rawPath) rawPath = normalizeLocalPath(rawPath);
+  if (!rawPath || !isAbsolute3(rawPath)) return { status: 400 };
+  const contentType = CONTENT_TYPE[extname(rawPath).toLowerCase()];
+  if (!contentType) return { status: 400 };
+  let real;
+  try {
+    real = realpathSync5(rawPath);
+  } catch {
+    return { status: 404 };
+  }
+  let size;
+  try {
+    const stat2 = statSync4(real);
+    if (!stat2.isFile()) return { status: 404 };
+    size = stat2.size;
+  } catch {
+    return { status: 404 };
+  }
+  const span = range ? byteRange(range, size) : null;
+  if (span === "unsatisfiable") return { status: 416, size };
+  if (span) return { status: 206, contentType, file: real, size, start: span.start, end: span.end };
+  return { status: 200, contentType, file: real, size, start: 0, end: size - 1 };
+}
+function byteRange(header, size) {
+  const match2 = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+  if (!match2) return null;
+  const [, first, last] = match2;
+  if (first === "" && last === "") return null;
+  if (first === "") {
+    const suffix = Number(last);
+    if (suffix === 0 || size === 0) return "unsatisfiable";
+    return { start: Math.max(size - suffix, 0), end: size - 1 };
+  }
+  const start = Number(first);
+  if (last !== "" && Number(last) < start) return null;
+  if (start >= size) return "unsatisfiable";
+  return { start, end: last === "" ? size - 1 : Math.min(Number(last), size - 1) };
+}
+function localImageHeaders(result) {
+  return {
+    "content-type": result.contentType,
+    "content-length": String(result.end - result.start + 1),
+    "accept-ranges": "bytes",
+    "cache-control": "private, max-age=60",
+    ...result.status === 206 ? { "content-range": `bytes ${result.start}-${result.end}/${result.size}` } : {}
+  };
+}
+function localImageStream(result) {
+  if (result.end < result.start) return null;
+  return createReadStream(result.file, { start: result.start, end: result.end });
+}
+var IMAGE_CONTENT_TYPE, VIDEO_CONTENT_TYPE, CONTENT_TYPE;
+var init_local_image = __esm({
+  "packages/server/src/local-image.ts"() {
+    "use strict";
+    init_local_path();
+    IMAGE_CONTENT_TYPE = {
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".jpeg": "image/jpeg",
+      ".gif": "image/gif",
+      ".webp": "image/webp"
+    };
+    VIDEO_CONTENT_TYPE = {
+      ".mp4": "video/mp4",
+      ".m4v": "video/mp4",
+      ".webm": "video/webm",
+      ".mov": "video/quicktime"
+    };
+    CONTENT_TYPE = { ...IMAGE_CONTENT_TYPE, ...VIDEO_CONTENT_TYPE };
+  }
+});
+
 // packages/server/src/bus.ts
 var Bus, Emitter;
 var init_bus = __esm({
@@ -21229,16 +21466,122 @@ var init_storage = __esm({
   }
 });
 
+// packages/server/src/secret-files.ts
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { chmodSync as chmodSync2, closeSync as closeSync5, constants, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync8, openSync as openSync6, readdirSync as readdirSync3, rmdirSync, rmSync as rmSync6, writeFileSync as writeFileSync7, writeSync as writeSync2 } from "node:fs";
+import { dirname as dirname7, join as join11 } from "node:path";
+function secretsRoot(stateDir) {
+  return join11(stateDir, "secrets");
+}
+function secretFilePath(stateDir, slug, questionId) {
+  return join11(secretsRoot(stateDir), slug, questionId);
+}
+function stop(path3) {
+  const entry = served.get(path3);
+  if (entry) clearInterval(entry.timer);
+  served.delete(path3);
+  rmSync6(path3, { force: true });
+  try {
+    rmdirSync(dirname7(path3));
+  } catch {
+  }
+}
+function serveSecret(stateDir, slug, questionId, value, opts = {}) {
+  const now = opts.now ?? Date.now;
+  const expiresAt = now() + (opts.ttlMs ?? SECRET_TTL_MS);
+  const root = secretsRoot(stateDir);
+  const dir = join11(root, slug);
+  const path3 = secretFilePath(stateDir, slug, questionId);
+  stop(path3);
+  mkdirSync8(dir, { recursive: true, mode: 448 });
+  chmodSync2(root, 448);
+  chmodSync2(dir, 448);
+  if ((opts.platform ?? process.platform) === "win32") {
+    writeFileSync7(path3, value, { mode: 384 });
+    const timer2 = setInterval(() => {
+      if (now() >= expiresAt || !existsSync5(path3)) stop(path3);
+    }, 1e3);
+    timer2.unref();
+    served.set(path3, { timer: timer2 });
+    return path3;
+  }
+  execFileSync4("mkfifo", ["-m", "600", path3]);
+  const bytes = Buffer.from(value, "utf8");
+  const timer = setInterval(() => {
+    if (now() >= expiresAt || !existsSync5(path3)) return stop(path3);
+    let fd2;
+    try {
+      fd2 = openSync6(path3, constants.O_WRONLY | constants.O_NONBLOCK);
+    } catch {
+      return;
+    }
+    let delivered = false;
+    try {
+      delivered = writeSync2(fd2, bytes) === bytes.length;
+    } catch {
+    } finally {
+      closeSync5(fd2);
+    }
+    if (delivered) stop(path3);
+  }, POLL_MS2);
+  timer.unref();
+  served.set(path3, { timer });
+  return path3;
+}
+function clearSecrets(stateDir) {
+  const root = secretsRoot(stateDir);
+  let removed = 0;
+  let threads;
+  try {
+    threads = readdirSync3(root);
+  } catch {
+    return 0;
+  }
+  for (const thread of threads) {
+    const dir = join11(root, thread);
+    let entries2;
+    try {
+      if (!lstatSync(dir).isDirectory()) {
+        rmSync6(dir, { force: true });
+        continue;
+      }
+      entries2 = readdirSync3(dir);
+    } catch {
+      continue;
+    }
+    for (const entry of entries2) {
+      const path3 = join11(dir, entry);
+      if (served.has(path3)) continue;
+      rmSync6(path3, { force: true });
+      removed++;
+    }
+    try {
+      if (readdirSync3(dir).length === 0) rmSync6(dir, { recursive: true, force: true });
+    } catch {
+    }
+  }
+  return removed;
+}
+var POLL_MS2, served;
+var init_secret_files = __esm({
+  "packages/server/src/secret-files.ts"() {
+    "use strict";
+    init_src();
+    POLL_MS2 = 100;
+    served = /* @__PURE__ */ new Map();
+  }
+});
+
 // packages/server/src/machine-config.ts
-import { closeSync as closeSync5, fsyncSync as fsyncSync5, mkdirSync as mkdirSync7, openSync as openSync6, readFileSync as readFileSync6, renameSync as renameSync5, rmSync as rmSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname6, join as join9 } from "node:path";
+import { closeSync as closeSync6, fsyncSync as fsyncSync5, mkdirSync as mkdirSync9, openSync as openSync7, readFileSync as readFileSync8, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname8, join as join12 } from "node:path";
 function machineConfigPath(home) {
-  return join9(frizzPaths({ home }).data, "config.json");
+  return join12(frizzPaths({ home }).data, "config.json");
 }
 function readAll(home) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync6(machineConfigPath(home), "utf8"));
+    raw2 = JSON.parse(readFileSync8(machineConfigPath(home), "utf8"));
   } catch {
     return {};
   }
@@ -21246,24 +21589,24 @@ function readAll(home) {
 }
 function writeAll(home, all) {
   const path3 = machineConfigPath(home);
-  mkdirSync7(dirname6(path3), { recursive: true });
+  mkdirSync9(dirname8(path3), { recursive: true });
   const temp = `${path3}.${process.pid}.tmp`;
   let fd2;
   try {
-    fd2 = openSync6(temp, "w", 384);
-    writeFileSync6(fd2, `${JSON.stringify(all, null, 2)}
+    fd2 = openSync7(temp, "w", 384);
+    writeFileSync8(fd2, `${JSON.stringify(all, null, 2)}
 `, "utf8");
     fsyncSync5(fd2);
-    closeSync5(fd2);
+    closeSync6(fd2);
     fd2 = void 0;
     renameSync5(temp, path3);
   } catch {
     if (fd2 !== void 0) try {
-      closeSync5(fd2);
+      closeSync6(fd2);
     } catch {
     }
     try {
-      rmSync6(temp, { force: true });
+      rmSync7(temp, { force: true });
     } catch {
     }
   }
@@ -21291,10 +21634,10 @@ var init_machine_config = __esm({
 });
 
 // packages/server/src/settings.ts
-import { readFileSync as readFileSync7, rmSync as rmSync7 } from "node:fs";
-import { join as join10 } from "node:path";
+import { readFileSync as readFileSync9, rmSync as rmSync8 } from "node:fs";
+import { join as join13 } from "node:path";
 function legacyMachineSettingsPath(home) {
-  return join10(frizzPaths({ home }).data, "settings.json");
+  return join13(frizzPaths({ home }).data, "settings.json");
 }
 function pickMachine(settings) {
   return Object.fromEntries(MACHINE_KEYS.map((key) => [key, settings[key]]));
@@ -21304,7 +21647,7 @@ function readMachineSettings(home) {
   if (stored) return pickPresent(stored);
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync7(legacyMachineSettingsPath(home), "utf8"));
+    raw2 = JSON.parse(readFileSync9(legacyMachineSettingsPath(home), "utf8"));
   } catch {
     return {};
   }
@@ -21335,7 +21678,7 @@ function resetSettings(storage, home) {
   storage.deleteSetting(SETTINGS_KEY);
   deleteMachineConfig(home, SETTINGS_KEY);
   try {
-    rmSync7(legacyMachineSettingsPath(home), { force: true });
+    rmSync8(legacyMachineSettingsPath(home), { force: true });
   } catch {
   }
   return defaultSettings();
@@ -21635,15 +21978,15 @@ var init_codex_error = __esm({
 });
 
 // packages/server/src/discover.ts
-import { readdirSync as readdirSync3, statSync as statSync4, openSync as openSync7, readSync, closeSync as closeSync6 } from "node:fs";
-import { dirname as dirname7, join as join11 } from "node:path";
+import { readdirSync as readdirSync4, statSync as statSync5, openSync as openSync8, readSync, closeSync as closeSync7 } from "node:fs";
+import { dirname as dirname9, join as join14 } from "node:path";
 function sentinelFor(sessionId) {
   return `threads/${sessionId}/`;
 }
 function readHead(path3) {
   let fd2;
   try {
-    fd2 = openSync7(path3, "r");
+    fd2 = openSync8(path3, "r");
     const buf = Buffer.allocUnsafe(HEAD_BYTES);
     const n = readSync(fd2, buf, 0, HEAD_BYTES, 0);
     return buf.toString("utf8", 0, n);
@@ -21652,7 +21995,7 @@ function readHead(path3) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync6(fd2);
+        closeSync7(fd2);
       } catch {
       }
     }
@@ -21664,7 +22007,7 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
   const sentinel = sentinelFor(sessionId);
   let names;
   try {
-    names = readdirSync3(logDir);
+    names = readdirSync4(logDir);
   } catch {
     return void 0;
   }
@@ -21673,10 +22016,10 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
     if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
     const id2 = name.slice(0, -".jsonl".length);
     if (!id2 || id2 === sessionId || exclude?.has(id2)) continue;
-    const path3 = join11(logDir, name);
+    const path3 = join14(logDir, name);
     let mtime;
     try {
-      mtime = statSync4(path3).mtimeMs;
+      mtime = statSync5(path3).mtimeMs;
     } catch {
       continue;
     }
@@ -21691,7 +22034,7 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
 }
 function mtimeOfNonEmpty(path3) {
   try {
-    const st2 = statSync4(path3, { throwIfNoEntry: false });
+    const st2 = statSync5(path3, { throwIfNoEntry: false });
     return st2 && st2.size > 0 ? st2.mtimeMs : void 0;
   } catch {
     return void 0;
@@ -21701,7 +22044,7 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   const name = `${sessionId}.jsonl`;
   const better = (best2, dir) => {
     if (dir === logDir) return best2;
-    const at2 = mtimeOfNonEmpty(join11(dir, name));
+    const at2 = mtimeOfNonEmpty(join14(dir, name));
     if (at2 === void 0) return best2;
     return !best2 || at2 > best2.mtimeMs ? { dir, mtimeMs: at2 } : best2;
   };
@@ -21710,11 +22053,11 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   if (best) return best.dir;
   let entries2;
   try {
-    entries2 = readdirSync3(dirname7(logDir), { withFileTypes: true }).filter((e14) => e14.isDirectory()).map((e14) => e14.name);
+    entries2 = readdirSync4(dirname9(logDir), { withFileTypes: true }).filter((e14) => e14.isDirectory()).map((e14) => e14.name);
   } catch {
     return void 0;
   }
-  for (const entry of entries2) best = better(best, join11(dirname7(logDir), entry));
+  for (const entry of entries2) best = better(best, join14(dirname9(logDir), entry));
   if (!best) return void 0;
   memo3.add(best.dir);
   return best.dir;
@@ -21800,27 +22143,27 @@ var init_types2 = __esm({
 });
 
 // packages/server/src/session-files.ts
-import { chmodSync, lstatSync, mkdirSync as mkdirSync8, rmSync as rmSync8, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join12 } from "node:path";
+import { chmodSync as chmodSync3, lstatSync as lstatSync2, mkdirSync as mkdirSync10, rmSync as rmSync9, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join15 } from "node:path";
 function systemPromptPath(sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) throw new Error("invalid session id");
-  return join12(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
+  return join15(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
 }
 function mcpConfigPath(sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) throw new Error("invalid session id");
-  return join12(MCP_CONFIG_DIR, `${sessionId}.json`);
+  return join15(MCP_CONFIG_DIR, `${sessionId}.json`);
 }
 function writeMcpConfigFile(sessionId, mcpServers) {
   const path3 = mcpConfigPath(sessionId);
-  mkdirSync8(MCP_CONFIG_DIR, { recursive: true, mode: 448 });
-  chmodSync(MCP_CONFIG_DIR, 448);
-  writeFileSync7(path3, JSON.stringify({ mcpServers }), { mode: 384 });
-  chmodSync(path3, 384);
+  mkdirSync10(MCP_CONFIG_DIR, { recursive: true, mode: 448 });
+  chmodSync3(MCP_CONFIG_DIR, 448);
+  writeFileSync9(path3, JSON.stringify({ mcpServers }), { mode: 384 });
+  chmodSync3(path3, 384);
   return path3;
 }
 function isDirectDirectory(path3) {
   try {
-    const stat2 = lstatSync(path3);
+    const stat2 = lstatSync2(path3);
     return stat2.isDirectory() && !stat2.isSymbolicLink();
   } catch {
     return false;
@@ -21828,7 +22171,7 @@ function isDirectDirectory(path3) {
 }
 function pathAbsent(path3) {
   try {
-    lstatSync(path3);
+    lstatSync2(path3);
     return false;
   } catch (error) {
     return error.code === "ENOENT";
@@ -21836,9 +22179,9 @@ function pathAbsent(path3) {
 }
 function unlinkDirectChild(parent, filename) {
   if (!isDirectDirectory(parent)) return pathAbsent(parent);
-  const child = join12(parent, filename);
+  const child = join15(parent, filename);
   try {
-    rmSync8(child, { force: true });
+    rmSync9(child, { force: true });
   } catch {
     return false;
   }
@@ -21846,14 +22189,14 @@ function unlinkDirectChild(parent, filename) {
 }
 function cleanupAdoptionSessionFiles(projectDir, sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) return false;
-  const frizzDir = join12(projectDir, ".frizz");
+  const frizzDir = join15(projectDir, ".frizz");
   let clean = true;
   if (isDirectDirectory(frizzDir)) {
-    const threads = join12(frizzDir, "threads");
+    const threads = join15(frizzDir, "threads");
     if (isDirectDirectory(threads)) {
-      const child = join12(threads, sessionId);
+      const child = join15(threads, sessionId);
       try {
-        rmSync8(child, { recursive: true, force: true });
+        rmSync9(child, { recursive: true, force: true });
       } catch {
         clean = false;
       }
@@ -22105,10 +22448,10 @@ var init_adoption_recovery = __esm({
 });
 
 // packages/server/src/backend/codex-models.ts
-import { join as join13 } from "node:path";
-import { readFileSync as readFileSync8 } from "node:fs";
+import { join as join16 } from "node:path";
+import { readFileSync as readFileSync10 } from "node:fs";
 function cachePath(codexHome) {
-  return join13(codexHome, "models_cache.json");
+  return join16(codexHome, "models_cache.json");
 }
 function toCodexModel(raw2) {
   if (!raw2 || typeof raw2 !== "object") return void 0;
@@ -22162,7 +22505,7 @@ function readCodexModels(codexHome = defaultCodexHome(), expectedClientVersion,
   if (hit && nowMs - hit.at < TTL_MS) return hit.models;
   let models;
   try {
-    const raw2 = readFileSync8(path3, "utf8");
+    const raw2 = readFileSync10(path3, "utf8");
     models = parseCodexModelsCache(raw2, expectedClientVersion, trusted.get(key));
     let writer;
     try {
@@ -22839,10 +23182,10 @@ var init_claude_agent_sdk_protocol = __esm({
 });
 
 // packages/server/src/backend/claude-broker-diagnostics.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync9, readFileSync as readFileSync9, renameSync as renameSync6, statSync as statSync5 } from "node:fs";
-import { join as join14 } from "node:path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync11, readFileSync as readFileSync11, renameSync as renameSync6, statSync as statSync6 } from "node:fs";
+import { join as join17 } from "node:path";
 function claudeBrokerDiagnosticLogPath(stateDir, sessionId) {
-  return join14(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
+  return join17(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
 }
 function readClaudeBrokerExit(stateDir, sessionId, generation) {
   if (!generation) return null;
@@ -22850,7 +23193,7 @@ function readClaudeBrokerExit(stateDir, sessionId, generation) {
   for (const path3 of [`${claudeBrokerDiagnosticLogPath(stateDir, sessionId)}.1`, claudeBrokerDiagnosticLogPath(stateDir, sessionId)]) {
     let text2;
     try {
-      text2 = readFileSync9(path3, "utf8");
+      text2 = readFileSync11(path3, "utf8");
     } catch {
       continue;
     }
@@ -22903,11 +23246,11 @@ var init_claude_broker_diagnostics = __esm({
 });
 
 // packages/server/src/detached-daemons.ts
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { fileURLToPath } from "node:url";
 function resolveDetachedDaemonEntry(moduleUrl, basename14) {
   const candidates = [`./${basename14}.js`, `./${basename14}.ts`].map((rel) => fileURLToPath(new URL(rel, moduleUrl)));
-  const found = candidates.find((path3) => existsSync4(path3));
+  const found = candidates.find((path3) => existsSync6(path3));
   if (!found) throw new Error(`frizz is missing the ${basename14} entry \u2014 looked for ${candidates.join(" and ")}`);
   return found;
 }
@@ -22947,10 +23290,10 @@ var init_daemon_tree = __esm({
 });
 
 // packages/server/src/backend/ipc-path.ts
-import { join as join15 } from "node:path";
+import { join as join18 } from "node:path";
 function frizzIpcPath(name) {
   if (process.platform === "win32") return `\\\\.\\pipe\\${name}`;
-  return join15(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
+  return join18(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
 }
 var init_ipc_path = __esm({
   "packages/server/src/backend/ipc-path.ts"() {
@@ -22961,18 +23304,18 @@ var init_ipc_path = __esm({
 // packages/server/src/backend/claude-broker-host.ts
 import { spawn } from "node:child_process";
 import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
-import { accessSync, constants as fsConstants, mkdirSync as mkdirSync10, readFileSync as readFileSync10, readdirSync as readdirSync4, unlinkSync, writeFileSync as writeFileSync8 } from "node:fs";
-import { delimiter, dirname as dirname8, isAbsolute as isAbsolute3, join as join16 } from "node:path";
+import { accessSync, constants as fsConstants, mkdirSync as mkdirSync12, readFileSync as readFileSync12, readdirSync as readdirSync5, unlinkSync, writeFileSync as writeFileSync10 } from "node:fs";
+import { delimiter, dirname as dirname10, isAbsolute as isAbsolute4, join as join19 } from "node:path";
 function windowsShimTarget(shimPath) {
   let body;
   try {
-    body = readFileSync10(shimPath, "utf8");
+    body = readFileSync12(shimPath, "utf8");
   } catch {
     return void 0;
   }
   const target = WINDOWS_SHIM_TARGET.exec(body)?.[1];
   if (!target) return void 0;
-  const full = join16(dirname8(shimPath), target);
+  const full = join19(dirname10(shimPath), target);
   try {
     accessSync(full, fsConstants.F_OK);
     return full;
@@ -22988,22 +23331,22 @@ function searchPath(env) {
 }
 function resolveClaudeExecutableAbsolute(bin, env = process.env) {
   const candidate = bin && bin.length > 0 ? bin : "claude";
-  if (isAbsolute3(candidate)) return candidate;
+  if (isAbsolute4(candidate)) return candidate;
   const windows = process.platform === "win32";
   for (const dir of searchPath(env).split(delimiter)) {
     if (!dir) continue;
     if (windows) {
-      const exe2 = join16(dir, `${candidate}.exe`);
+      const exe2 = join19(dir, `${candidate}.exe`);
       try {
         accessSync(exe2, fsConstants.F_OK);
         return exe2;
       } catch {
       }
-      const viaShim = windowsShimTarget(join16(dir, `${candidate}.cmd`));
+      const viaShim = windowsShimTarget(join19(dir, `${candidate}.cmd`));
       if (viaShim) return viaShim;
       continue;
     }
-    const full = join16(dir, candidate);
+    const full = join19(dir, candidate);
     try {
       accessSync(full, fsConstants.X_OK);
       return full;
@@ -23018,18 +23361,18 @@ function claudeBrokerSocketPath(stateDir, sessionId) {
 }
 function claudeBrokerRecordPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join16(stateDir, "claude-broker", `${key}.json`);
+  return join19(stateDir, "claude-broker", `${key}.json`);
 }
 function claudeBrokerRetirementPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join16(stateDir, "claude-broker", `${key}.retired`);
+  return join19(stateDir, "claude-broker", `${key}.retired`);
 }
 function markBrokerRetired(stateDir, sessionId, reason, generation) {
   const mark = { at: (/* @__PURE__ */ new Date()).toISOString(), generation, reason };
   try {
     const path3 = claudeBrokerRetirementPath(stateDir, sessionId);
-    mkdirSync10(dirname8(path3), { recursive: true });
-    writeFileSync8(path3, JSON.stringify(mark));
+    mkdirSync12(dirname10(path3), { recursive: true });
+    writeFileSync10(path3, JSON.stringify(mark));
   } catch {
   }
 }
@@ -23037,7 +23380,7 @@ function takeBrokerRetirement(stateDir, sessionId) {
   const path3 = claudeBrokerRetirementPath(stateDir, sessionId);
   let mark = null;
   try {
-    const parsed = JSON.parse(readFileSync10(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync12(path3, "utf8"));
     if (typeof parsed?.at === "string" && typeof parsed.generation === "string" && typeof parsed.reason === "string") {
       mark = { at: parsed.at, generation: parsed.generation, reason: parsed.reason };
     }
@@ -23059,7 +23402,7 @@ function pidAlive(pid) {
 }
 function readBrokerRecord(recordPath2) {
   try {
-    return JSON.parse(readFileSync10(recordPath2, "utf8"));
+    return JSON.parse(readFileSync12(recordPath2, "utf8"));
   } catch {
     return null;
   }
@@ -23072,7 +23415,7 @@ function lastKnownBrokerDaemon(stateDir, sessionId) {
 }
 function rememberBrokerIdentity(recordPath2, record) {
   try {
-    writeFileSync8(brokerLastKnownPath(recordPath2), JSON.stringify(record));
+    writeFileSync10(brokerLastKnownPath(recordPath2), JSON.stringify(record));
   } catch {
   }
 }
@@ -23089,17 +23432,17 @@ function liveBrokerRecord(recordPath2) {
   return null;
 }
 function liveBrokerRecords(stateDir) {
-  const dir = join16(stateDir, "claude-broker");
+  const dir = join19(stateDir, "claude-broker");
   let names;
   try {
-    names = readdirSync4(dir);
+    names = readdirSync5(dir);
   } catch {
     return [];
   }
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const record = liveBrokerRecord(join16(dir, name));
+    const record = liveBrokerRecord(join19(dir, name));
     if (record) out.push(record);
   }
   return out;
@@ -23107,7 +23450,7 @@ function liveBrokerRecords(stateDir) {
 function forkBroker(options) {
   const socketPath = claudeBrokerSocketPath(options.stateDir, options.sessionId);
   const recordPath2 = claudeBrokerRecordPath(options.stateDir, options.sessionId);
-  mkdirSync10(dirname8(recordPath2), { recursive: true });
+  mkdirSync12(dirname10(recordPath2), { recursive: true });
   const generation = randomUUID8();
   const config = {
     socketPath,
@@ -23717,7 +24060,7 @@ var init_delivery_ledger = __esm({
 });
 
 // packages/server/src/codex-subagents.ts
-import { closeSync as closeSync7, openSync as openSync8, readSync as readSync2, statSync as statSync6 } from "node:fs";
+import { closeSync as closeSync8, openSync as openSync9, readSync as readSync2, statSync as statSync7 } from "node:fs";
 function createCodexSubAgentTracker(deps) {
   const findRollouts = deps.findRollouts ?? ((ids) => findRolloutsByIds(ids, deps.codexHome));
   const readAppended = deps.readAppended ?? defaultReadAppended;
@@ -23909,7 +24252,7 @@ function agentLabel(path3) {
 function defaultReadAppended(path3, offset) {
   let size;
   try {
-    size = statSync6(path3).size;
+    size = statSync7(path3).size;
   } catch {
     return void 0;
   }
@@ -23917,7 +24260,7 @@ function defaultReadAppended(path3, offset) {
   const from = restarted ? 0 : offset;
   if (size <= from) return { text: "", offset: from, restarted };
   try {
-    const fd2 = openSync8(path3, "r");
+    const fd2 = openSync9(path3, "r");
     try {
       const want = Math.min(ROLLOUT_READ_WINDOW, size - from);
       const buf = Buffer.allocUnsafe(want);
@@ -23926,7 +24269,7 @@ function defaultReadAppended(path3, offset) {
       const end = read < size - from && lastNl >= 0 ? lastNl + 1 : read;
       return { text: buf.toString("utf8", 0, end), offset: from + end, restarted };
     } finally {
-      closeSync7(fd2);
+      closeSync8(fd2);
     }
   } catch {
     return void 0;
@@ -24051,15 +24394,15 @@ var init_completion_relay = __esm({
 
 // packages/server/src/tail-cache.ts
 import { createHash as createHash6 } from "node:crypto";
-import { closeSync as closeSync8, openSync as openSync9, readFileSync as readFileSync11, readSync as readSync3, statSync as statSync7 } from "node:fs";
-import { join as join17 } from "node:path";
+import { closeSync as closeSync9, openSync as openSync10, readFileSync as readFileSync13, readSync as readSync3, statSync as statSync8 } from "node:fs";
+import { join as join20 } from "node:path";
 function foldSchemaDigest(dir = import.meta.dirname) {
   if (foldSchemaMemo) return foldSchemaMemo;
   const hash = createHash6("sha256").update("frizz-tail-state-v1\0");
   let read = 0;
   for (const name of FOLD_SOURCES) {
     try {
-      hash.update(name).update("\0").update(readFileSync11(join17(dir, name)));
+      hash.update(name).update("\0").update(readFileSync13(join20(dir, name)));
       read++;
     } catch {
       hash.update(name).update("\0missing\0");
@@ -24089,9 +24432,9 @@ function measureFence(path3, offset) {
   if (!Number.isSafeInteger(offset) || offset <= 0) return null;
   let fd2;
   try {
-    const stat2 = statSync7(path3);
+    const stat2 = statSync8(path3);
     if (stat2.size < offset) return null;
-    fd2 = openSync9(path3, "r");
+    fd2 = openSync10(path3, "r");
     const window = Math.min(SAMPLE_BYTES, offset);
     const head = Buffer.allocUnsafe(window);
     const headRead = readSync3(fd2, head, 0, window, 0);
@@ -24111,7 +24454,7 @@ function measureFence(path3, offset) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync8(fd2);
+        closeSync9(fd2);
       } catch {
       }
     }
@@ -24262,11 +24605,11 @@ var init_tail_cache = __esm({
 });
 
 // packages/server/src/tailer.ts
-import { statSync as statSync8, openSync as openSync10, readSync as readSync4, closeSync as closeSync9, readdirSync as readdirSync5, realpathSync as realpathSync5, mkdirSync as mkdirSync11, writeFileSync as writeFileSync9, readFileSync as readFileSync12, existsSync as existsSync5 } from "node:fs";
+import { statSync as statSync9, openSync as openSync11, readSync as readSync4, closeSync as closeSync10, readdirSync as readdirSync6, realpathSync as realpathSync6, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readFileSync as readFileSync14, existsSync as existsSync7 } from "node:fs";
 import { execFile as execFile2 } from "node:child_process";
 import { createHash as createHash7 } from "node:crypto";
 import { promisify as promisify2 } from "node:util";
-import { basename as basename4, join as join18, win32 } from "node:path";
+import { basename as basename4, join as join21, win32 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 function pendingCallDeadline(tail) {
   const resolved2 = /* @__PURE__ */ new Set();
@@ -24313,7 +24656,7 @@ function readTranscriptTail(path3, size, window) {
   const length = Math.min(size, window);
   let fd2;
   try {
-    fd2 = openSync10(path3, "r");
+    fd2 = openSync11(path3, "r");
     const buffer = Buffer.alloc(length);
     const read = readSync4(fd2, buffer, 0, length, size - length);
     const text2 = buffer.toString("utf8", 0, read);
@@ -24323,7 +24666,7 @@ function readTranscriptTail(path3, size, window) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync9(fd2);
+        closeSync10(fd2);
       } catch {
       }
     }
@@ -24337,7 +24680,7 @@ async function probeShellsAlive(shells, opts = {}) {
   const verdicts = /* @__PURE__ */ new Map();
   if (platform3 === "win32") {
     const present = outputFiles.filter((file) => {
-      if (existsSync5(file)) return true;
+      if (existsSync7(file)) return true;
       verdicts.set(file, void 0);
       return false;
     });
@@ -24355,12 +24698,12 @@ async function probeShellsAlive(shells, opts = {}) {
   }
   const live = [];
   for (const file of outputFiles) {
-    if (!existsSync5(file)) {
+    if (!existsSync7(file)) {
       verdicts.set(file, void 0);
       continue;
     }
     try {
-      live.push({ requested: file, real: realpathSync5(file) });
+      live.push({ requested: file, real: realpathSync6(file) });
     } catch {
       verdicts.set(file, void 0);
     }
@@ -24793,7 +25136,7 @@ function launchTaskId(text2) {
 function readDescendantSidecars(sessionDir, mtimeMs) {
   let names;
   try {
-    names = readdirSync5(join18(sessionDir, "subagents"));
+    names = readdirSync6(join21(sessionDir, "subagents"));
   } catch {
     return [];
   }
@@ -24804,7 +25147,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
     if (!agentId) continue;
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync12(join18(sessionDir, "subagents", name), "utf8"));
+      parsed = JSON.parse(readFileSync14(join21(sessionDir, "subagents", name), "utf8"));
     } catch {
       continue;
     }
@@ -24818,7 +25161,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
       agentType: text2(meta.agentType),
       parentAgentId: text2(meta.parentAgentId),
       spawnDepth: typeof meta.spawnDepth === "number" && Number.isFinite(meta.spawnDepth) ? meta.spawnDepth : void 0,
-      spawnedAtMs: mtimeMs(join18(sessionDir, "subagents", name))
+      spawnedAtMs: mtimeMs(join21(sessionDir, "subagents", name))
     });
   }
   return out;
@@ -25307,19 +25650,19 @@ function isPermMarker(v) {
 }
 function defaultMtimeMs(path3) {
   try {
-    return statSync8(path3).mtimeMs;
+    return statSync9(path3).mtimeMs;
   } catch {
     return void 0;
   }
 }
 function defaultLogDir(project) {
-  return join18(homedir7(), ".claude", "projects", project.cwdSlug);
+  return join21(homedir7(), ".claude", "projects", project.cwdSlug);
 }
 function defaultReadPermMarker(project) {
   if (!project.stateDir) return () => void 0;
   return (slug) => {
     try {
-      const parsed = JSON.parse(readFileSync12(permMarkerPath(project, slug), "utf8"));
+      const parsed = JSON.parse(readFileSync14(permMarkerPath(project, slug), "utf8"));
       return isPermMarker(parsed) ? parsed : void 0;
     } catch {
       return void 0;
@@ -25337,7 +25680,7 @@ function defaultBrokerDaemonAlive(project, now) {
     try {
       const path3 = claudeBrokerRecordPath(project.stateDir, sessionId);
       const record = readBrokerRecord(path3);
-      if (!record) alive = existsSync5(path3);
+      if (!record) alive = existsSync7(path3);
       else if (typeof record.daemonPid !== "number") alive = true;
       else {
         try {
@@ -25445,7 +25788,7 @@ function createTailer(deps) {
     return paneDead(row.slug);
   }
   const defaultBackend = {
-    transcriptPath: (sessionId) => join18(logDir, `${sessionId}.jsonl`),
+    transcriptPath: (sessionId) => join21(logDir, `${sessionId}.jsonl`),
     foldLine: (state, line) => {
       const rec = parseLine(line);
       if (rec) applyRecord(state, rec);
@@ -25487,7 +25830,7 @@ function createTailer(deps) {
   function blockedUntil(path3, m) {
     let size;
     try {
-      size = statSync8(path3).size;
+      size = statSync9(path3).size;
     } catch {
       return void 0;
     }
@@ -25613,7 +25956,7 @@ ${ask}`;
     return state.path.replace(/\.jsonl$/, "");
   }
   function descendantSidecars(state) {
-    const at2 = mtimeMs(join18(sessionDirOf(state), "subagents"));
+    const at2 = mtimeMs(join21(sessionDirOf(state), "subagents"));
     const cached2 = descendantIndex.get(state.slug);
     if (cached2 && cached2.at === at2) return cached2.all;
     const all = readDescendantSidecars(sessionDirOf(state), mtimeMs);
@@ -25627,7 +25970,7 @@ ${ask}`;
     return descendantIndex.get(state.slug)?.byToolUse.get(id2);
   }
   function descendantTranscript(state, meta) {
-    return join18(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
+    return join21(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
   }
   function subAgentDescendantTasks(slug, id2) {
     const state = states.get(slug);
@@ -25947,7 +26290,7 @@ ${ask}`;
     if (!deps.project.dir) return [];
     const cwds = /* @__PURE__ */ new Set([deps.project.dir]);
     try {
-      cwds.add(realpathSync5(deps.project.dir));
+      cwds.add(realpathSync6(deps.project.dir));
     } catch {
     }
     try {
@@ -25965,7 +26308,7 @@ ${ask}`;
   function scanForeign(nowMs) {
     let names;
     try {
-      names = readdirSync5(logDir);
+      names = readdirSync6(logDir);
     } catch {
       return [];
     }
@@ -25975,10 +26318,10 @@ ${ask}`;
       if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
       const id2 = name.slice(0, -".jsonl".length);
       if (!id2 || registered.has(id2)) continue;
-      const path3 = join18(logDir, name);
+      const path3 = join21(logDir, name);
       let mtime;
       try {
-        mtime = statSync8(path3).mtimeMs;
+        mtime = statSync9(path3).mtimeMs;
       } catch {
         continue;
       }
@@ -26131,7 +26474,7 @@ ${ask}`;
     if (entry.path !== state.path) {
       let derivedSize = 0;
       try {
-        derivedSize = statSync8(state.path).size;
+        derivedSize = statSync9(state.path).size;
       } catch {
         derivedSize = 0;
       }
@@ -26188,7 +26531,7 @@ ${ask}`;
   function consume(state, backend, onLine) {
     let size;
     try {
-      size = statSync8(state.path).size;
+      size = statSync9(state.path).size;
     } catch {
       return;
     }
@@ -26199,7 +26542,7 @@ ${ask}`;
     if (size <= state.offset) return;
     let carry = state.partial ? Buffer.from(state.partial, "utf8") : EMPTY_BUFFER;
     try {
-      const fd2 = openSync10(state.path, "r");
+      const fd2 = openSync11(state.path, "r");
       try {
         const buf = Buffer.allocUnsafe(Math.min(TRANSCRIPT_READ_WINDOW, size - state.offset));
         while (state.offset < size) {
@@ -26219,7 +26562,7 @@ ${ask}`;
           carry = start < view.length ? Buffer.from(view.subarray(start)) : EMPTY_BUFFER;
         }
       } finally {
-        closeSync9(fd2);
+        closeSync10(fd2);
       }
     } catch {
       state.partial = carry.toString("utf8");
@@ -26246,8 +26589,8 @@ ${ask}`;
       `thread ${row.slug} (session ${row.session_id}): no transcript ${DISCOVERY_GRACE_MS / 1e3}s after dispatch \u2014 likely a boot failure. ${detail2.slice(0, 4e3)}`
     );
     try {
-      mkdirSync11(stallLogDir, { recursive: true });
-      writeFileSync9(join18(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
+      mkdirSync13(stallLogDir, { recursive: true });
+      writeFileSync11(join21(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
 captured_at: ${new Date(now()).toISOString()}
 
 ${detail2}
@@ -26257,10 +26600,10 @@ ${detail2}
   }
   function relocatedTranscript(state) {
     const name = `${state.nativeSessionId}.jsonl`;
-    const home = join18(logDir, name);
+    const home = join21(logDir, name);
     const homeAt = home === state.path ? void 0 : mtimeOfNonEmpty(home);
     const dir = discoverTranscriptDir(logDir, state.nativeSessionId);
-    const sibling = dir ? join18(dir, name) : void 0;
+    const sibling = dir ? join21(dir, name) : void 0;
     const siblingAt = sibling && sibling !== state.path ? mtimeOfNonEmpty(sibling) : void 0;
     if (homeAt === void 0) return siblingAt === void 0 ? void 0 : sibling;
     if (siblingAt === void 0) return home;
@@ -26268,7 +26611,7 @@ ${detail2}
   }
   function resolveTranscript(state, row, nowMs) {
     if (state.offset > 0) {
-      if (existsSync5(state.path)) {
+      if (existsSync7(state.path)) {
         state.discoverMisses = 0;
         state.nextDiscoverMs = 0;
         return true;
@@ -26295,7 +26638,7 @@ ${detail2}
     }
     let size = 0;
     try {
-      size = statSync8(state.path).size;
+      size = statSync9(state.path).size;
     } catch {
       size = 0;
     }
@@ -26312,7 +26655,7 @@ ${detail2}
     state.nextDiscoverMs = nowMs + DISCOVER_RETRY_MS;
     const strandedDir = discoverTranscriptDir(logDir, row.session_id);
     if (strandedDir) {
-      state.path = join18(strandedDir, `${row.session_id}.jsonl`);
+      state.path = join21(strandedDir, `${row.session_id}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -26336,7 +26679,7 @@ ${detail2}
         committed = false;
       }
       if (!committed) return false;
-      state.path = join18(logDir, `${found}.jsonl`);
+      state.path = join21(logDir, `${found}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -26396,7 +26739,7 @@ ${detail2}
         continue;
       }
       if (!state) {
-        const path3 = backend.transcriptPath(nativeId) ?? join18(logDir, `${nativeId}.jsonl`);
+        const path3 = backend.transcriptPath(nativeId) ?? join21(logDir, `${nativeId}.jsonl`);
         state = newTailState(row.slug, row.session_id, path3, false, nativeId, runtimeGeneration);
         state.dismissedOps = deps.storage.retiredOps(row.slug, row.session_id);
         hydrateFromCache(state, row, nativeId);
@@ -26631,12 +26974,12 @@ ${detail2}
       const elapsed = monotonicNow() - started;
       lastTickMs = elapsed;
       lastTickEndedAtMs = now();
-      if (elapsed > POLL_MS2) {
+      if (elapsed > POLL_MS3) {
         overBudgetTicks++;
         if (overBudgetTicks === 1 || overBudgetTicks % 30 === 0) {
           log.warn(
             "tailer",
-            `tick took ${Math.round(elapsed)}ms (poll ${POLL_MS2}ms, ${states.size} sessions) \u2014 the event loop is blocked for that long, so RPCs and board pushes are delayed (occurrence ${overBudgetTicks})`
+            `tick took ${Math.round(elapsed)}ms (poll ${POLL_MS3}ms, ${states.size} sessions) \u2014 the event loop is blocked for that long, so RPCs and board pushes are delayed (occurrence ${overBudgetTicks})`
           );
         }
       }
@@ -26650,7 +26993,7 @@ ${detail2}
     }
   }
   function scheduleTick() {
-    const delay2 = primeIncomplete ? 1 : Math.min(MAX_POLL_MS, Math.max(POLL_MS2, Math.round(lastTickMs)));
+    const delay2 = primeIncomplete ? 1 : Math.min(MAX_POLL_MS, Math.max(POLL_MS3, Math.round(lastTickMs)));
     timer = setTimeout(() => {
       timer = null;
       try {
@@ -26754,7 +27097,7 @@ function landsAfterRead(eventAt, lastReadAt) {
   if (!Number.isFinite(e14) || !Number.isFinite(r)) return true;
   return e14 > r;
 }
-var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS2, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, BASH_TIMEOUT_CEILING_MS, PENDING_CALL_TAIL_BYTES, SHELL_PROBE_TTL_MS, SHELL_PROBE_GRACE_MS, execFileAsync, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, LIVE_TOOLS_MAX, RESUME_REPLAY_SLACK_MS, FIRST_USER_TEXT_MAX, ASSISTANT_LINE_MAX, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, FENCE_BODY_MAX, LOCAL_COMMAND_RECEIPT, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, FOLDED_TERMINALS_MAX, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
+var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS3, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, BASH_TIMEOUT_CEILING_MS, PENDING_CALL_TAIL_BYTES, SHELL_PROBE_TTL_MS, SHELL_PROBE_GRACE_MS, execFileAsync, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, LIVE_TOOLS_MAX, RESUME_REPLAY_SLACK_MS, FIRST_USER_TEXT_MAX, ASSISTANT_LINE_MAX, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, FENCE_BODY_MAX, LOCAL_COMMAND_RECEIPT, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, FOLDED_TERMINALS_MAX, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
 var init_tailer = __esm({
   "packages/server/src/tailer.ts"() {
     "use strict";
@@ -26780,7 +27123,7 @@ var init_tailer = __esm({
     init_credential_redaction();
     IDLE_BACKSTOP_MS = 5e3;
     RUNTIME_CHASE_MAX = 20;
-    POLL_MS2 = 1e3;
+    POLL_MS3 = 1e3;
     MAX_PRIME_ROWS_PER_TICK = 25;
     PRIME_BUDGET_MS = 200;
     TRANSCRIPT_READ_WINDOW = 16 * 1024 * 1024;
@@ -26864,14 +27207,14 @@ var init_tailer = __esm({
 });
 
 // packages/server/src/backend/codex.ts
-import { join as join19 } from "node:path";
+import { join as join22 } from "node:path";
 import { homedir as homedir8 } from "node:os";
-import { readdirSync as readdirSync6, statSync as statSync9, readFileSync as readFileSync13, openSync as openSync11, readSync as readSync5, closeSync as closeSync10 } from "node:fs";
+import { readdirSync as readdirSync7, statSync as statSync10, readFileSync as readFileSync15, openSync as openSync12, readSync as readSync5, closeSync as closeSync11 } from "node:fs";
 function defaultCodexHome() {
-  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join19(homedir8(), ".codex");
+  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join22(homedir8(), ".codex");
 }
 function sessionsDir(codexHome) {
-  return join19(codexHome, "sessions");
+  return join22(codexHome, "sessions");
 }
 function codexSandbox(mode) {
   switch (mode) {
@@ -27317,23 +27660,23 @@ function collectRollouts(dir, out, budget) {
   const files = entries2.filter((e14) => e14.isFile() && e14.name.startsWith("rollout-") && e14.name.endsWith(".jsonl")).sort(descByName);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    collectRollouts(join19(dir, d.name), out, budget);
+    collectRollouts(join22(dir, d.name), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
     let mtimeMs;
     try {
-      mtimeMs = statSync9(join19(dir, f.name)).mtimeMs;
+      mtimeMs = statSync10(join22(dir, f.name)).mtimeMs;
     } catch {
       continue;
     }
-    out.push({ path: join19(dir, f.name), mtimeMs });
+    out.push({ path: join22(dir, f.name), mtimeMs });
     budget.n--;
   }
 }
 function safeReaddir(dir) {
   try {
-    return readdirSync6(dir, { withFileTypes: true });
+    return readdirSync7(dir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -27371,9 +27714,9 @@ function readCodexThreadNames(codexHome = defaultCodexHome()) {
   const out = /* @__PURE__ */ new Map();
   let raw2;
   try {
-    const path3 = join19(codexHome, "session_index.jsonl");
-    if (statSync9(path3).size > SESSION_INDEX_MAX_BYTES) return out;
-    raw2 = readFileSync13(path3, "utf8");
+    const path3 = join22(codexHome, "session_index.jsonl");
+    if (statSync10(path3).size > SESSION_INDEX_MAX_BYTES) return out;
+    raw2 = readFileSync15(path3, "utf8");
   } catch {
     return out;
   }
@@ -27413,7 +27756,7 @@ function rolloutIdOf(path3) {
 function readSessionMeta(path3) {
   let fd2;
   try {
-    fd2 = openSync11(path3, "r");
+    fd2 = openSync12(path3, "r");
     const buf = Buffer.allocUnsafe(FOREIGN_ROLLOUT_HEAD_BYTES);
     const n = readSync5(fd2, buf, 0, FOREIGN_ROLLOUT_HEAD_BYTES, 0);
     const line = buf.toString("utf8", 0, n).split("\n", 1)[0];
@@ -27430,7 +27773,7 @@ function readSessionMeta(path3) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync10(fd2);
+        closeSync11(fd2);
       } catch {
       }
     }
@@ -27549,7 +27892,7 @@ var init_codex = __esm({
 });
 
 // packages/server/src/backend/codex-executable.ts
-import { accessSync as accessSync2, constants as fsConstants2, readFileSync as readFileSync14 } from "node:fs";
+import { accessSync as accessSync2, constants as fsConstants2, readFileSync as readFileSync16 } from "node:fs";
 import { posix, win32 as win322 } from "node:path";
 function defaultAccess(path3, mode) {
   try {
@@ -27561,7 +27904,7 @@ function defaultAccess(path3, mode) {
 }
 function defaultReadFile(path3) {
   try {
-    return readFileSync14(path3, "utf8");
+    return readFileSync16(path3, "utf8");
   } catch {
     return void 0;
   }
@@ -27575,19 +27918,19 @@ function searchPath2(env) {
 function vendoredNativeBeside(launcherJs, arch, access) {
   const triple = WINDOWS_TRIPLE[arch];
   if (!triple) return void 0;
-  const { dirname: dirname27, join: join51 } = win322;
-  const pkgRoot = dirname27(dirname27(launcherJs));
+  const { dirname: dirname29, join: join54 } = win322;
+  const pkgRoot = dirname29(dirname29(launcherJs));
   const platformPkg = `codex-win32-${arch}`;
   const vendorRoots = [
-    join51(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
+    join54(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
     // nested under the package
-    join51(dirname27(pkgRoot), platformPkg, "vendor"),
+    join54(dirname29(pkgRoot), platformPkg, "vendor"),
     // hoisted beside it: <prefix>\node_modules\@openai\<pkg>
-    join51(pkgRoot, "vendor")
+    join54(pkgRoot, "vendor")
     // the pre-platform-package layout, binaries inside @openai/codex itself
   ];
   for (const root of vendorRoots) {
-    const exe2 = join51(root, triple, "bin", "codex.exe");
+    const exe2 = join54(root, triple, "bin", "codex.exe");
     if (access(exe2, "exists")) return exe2;
   }
   return void 0;
@@ -29911,7 +30254,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash18 } = __require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash18 } = __require("crypto");
     var { Duplex, Readable: Readable3 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -30449,7 +30792,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes(16).toString("base64");
+      const key = randomBytes2(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -31419,15 +31762,15 @@ import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash8, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync12, readFileSync as readFileSync15, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync14, readFileSync as readFileSync17, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join23 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 function nativeDir(stateDir) {
-  return join20(stateDir, "codex-app-server-native");
+  return join23(stateDir, "codex-app-server-native");
 }
 function nativeRecordPath(stateDir, projectId) {
-  return join20(nativeDir(stateDir), `${projectId}.json`);
+  return join23(nativeDir(stateDir), `${projectId}.json`);
 }
 function nativeListenSocketPath(stateDir, projectId) {
   const key = createHash8("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -31443,7 +31786,7 @@ function pidAlive2(pid) {
 }
 function readNativeRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync15(nativeRecordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync17(nativeRecordPath(stateDir, projectId), "utf8"));
     if (typeof value.listenerPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -31460,7 +31803,7 @@ function readNativeRecord(stateDir, projectId) {
 function liveNativeRecord(stateDir, projectId) {
   const record = readNativeRecord(stateDir, projectId);
   if (!record) return null;
-  if (pidAlive2(record.listenerPid) && existsSync6(record.socketPath)) return record;
+  if (pidAlive2(record.listenerPid) && existsSync8(record.socketPath)) return record;
   try {
     unlinkSync2(nativeRecordPath(stateDir, projectId));
   } catch {
@@ -31600,9 +31943,9 @@ function attach(record, timeoutMs) {
 }
 async function startListener(options) {
   const { stateDir, projectId } = options;
-  mkdirSync12(nativeDir(stateDir), { recursive: true });
+  mkdirSync14(nativeDir(stateDir), { recursive: true });
   const socketPath = nativeListenSocketPath(stateDir, projectId);
-  if (existsSync6(socketPath) && !await socketAccepting(socketPath)) {
+  if (existsSync8(socketPath) && !await socketAccepting(socketPath)) {
     try {
       unlinkSync2(socketPath);
     } catch {
@@ -31627,10 +31970,10 @@ async function startListener(options) {
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     ...options.authAccountId ? { authAccountId: options.authAccountId } : {}
   };
-  writeFileSync10(nativeRecordPath(stateDir, projectId), JSON.stringify(record));
+  writeFileSync12(nativeRecordPath(stateDir, projectId), JSON.stringify(record));
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
   for (; ; ) {
-    if (existsSync6(socketPath) && await socketAccepting(socketPath)) return record;
+    if (existsSync8(socketPath) && await socketAccepting(socketPath)) return record;
     if (!pidAlive2(record.listenerPid)) throw new Error("codex app-server listener exited before it became ready");
     if (Date.now() > deadline) throw new Error("codex app-server listener did not become ready");
     await new Promise((resolve13) => setTimeout(resolve13, 50));
@@ -31699,15 +32042,15 @@ var init_codex_app_server_native = __esm({
 import { spawn as spawn3 } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash9, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync13, readFileSync as readFileSync16, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync15, readFileSync as readFileSync18, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join24 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 function daemonDir(stateDir) {
-  return join21(stateDir, "codex-app-server");
+  return join24(stateDir, "codex-app-server");
 }
 function recordPath(stateDir, projectId) {
-  return join21(daemonDir(stateDir), `${projectId}.json`);
+  return join24(daemonDir(stateDir), `${projectId}.json`);
 }
 function codexAppServerSocketPath(stateDir, projectId) {
   const key = createHash9("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -31723,7 +32066,7 @@ function pidAlive3(pid) {
 }
 function readDaemonRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync16(recordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync18(recordPath(stateDir, projectId), "utf8"));
     if (typeof value.daemonPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -31740,7 +32083,7 @@ function readDaemonRecord(stateDir, projectId) {
 }
 function readDaemonExitBreadcrumb(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync16(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
+    const value = JSON.parse(readFileSync18(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
     if (typeof value.generation !== "string" || typeof value.reason !== "string") return null;
     return {
       generation: value.generation,
@@ -31790,7 +32133,7 @@ async function stopCodexAppServerDaemon(stateDir, projectId, timeoutMs = 1e4) {
 }
 function forkDaemon(options) {
   const { stateDir, projectId } = options;
-  mkdirSync13(daemonDir(stateDir), { recursive: true });
+  mkdirSync15(daemonDir(stateDir), { recursive: true });
   const record = recordPath(stateDir, projectId);
   try {
     unlinkSync3(record);
@@ -31985,7 +32328,7 @@ var init_codex_app_server_host = __esm({
       }
       if (process.platform !== "win32") {
         const stale = codexAppServerSocketPath(options.stateDir, options.projectId);
-        if (existsSync7(stale) && !liveDaemonRecord(options.stateDir, options.projectId)) {
+        if (existsSync9(stale) && !liveDaemonRecord(options.stateDir, options.projectId)) {
           try {
             unlinkSync3(stale);
           } catch {
@@ -32005,7 +32348,7 @@ var init_codex_app_server_host = __esm({
 });
 
 // packages/server/src/backend/claude-quota.ts
-import { join as join22 } from "node:path";
+import { join as join25 } from "node:path";
 import { homedir as homedir9, platform } from "node:os";
 import { createHash as createHash10 } from "node:crypto";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -32013,7 +32356,7 @@ import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 function claudeConfigDir() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join22(homedir9(), ".claude");
+  return override && override.trim() ? override : join25(homedir9(), ".claude");
 }
 function tokenFromCredentialsJson(raw2) {
   let doc;
@@ -32042,7 +32385,7 @@ async function readKeychainToken() {
 }
 async function readAccessToken(configDir) {
   try {
-    const fromFile = tokenFromCredentialsJson(await readFile(join22(configDir, ".credentials.json"), "utf8"));
+    const fromFile = tokenFromCredentialsJson(await readFile(join25(configDir, ".credentials.json"), "utf8"));
     if (fromFile) return fromFile;
   } catch {
   }
@@ -32116,8 +32459,8 @@ function retryAtFrom(res, now) {
 function cachePaths(cacheDir, configDir) {
   const profile = createHash10("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
-    data: join22(cacheDir, `claude-${profile}.json`),
-    lock: join22(cacheDir, `claude-${profile}.lock`)
+    data: join25(cacheDir, `claude-${profile}.json`),
+    lock: join25(cacheDir, `claude-${profile}.lock`)
   };
 }
 async function readShared(path3) {
@@ -32329,7 +32672,7 @@ function refreshSharedInBackground(paths, claudeBin, deps, now) {
 async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join22(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
   } catch {
@@ -32343,7 +32686,7 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join22(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
   const paths = cachePaths(cacheDir, configDir);
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
@@ -32450,19 +32793,19 @@ var init_claude_quota = __esm({
 });
 
 // packages/server/src/backend/auth-status.ts
-import { join as join23 } from "node:path";
+import { join as join26 } from "node:path";
 import { homedir as homedir10, platform as platform2 } from "node:os";
-import { readFileSync as readFileSync17, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync19, statSync as statSync11 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join23(homedir10(), ".claude");
+  return override && override.trim() ? override : join26(homedir10(), ".claude");
 }
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync17(join23(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync19(join26(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -32495,7 +32838,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync17(join23(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync19(join26(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -32515,7 +32858,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
 function readCodexAccountId(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return void 0;
   try {
-    const doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
+    const doc = JSON.parse(readFileSync19(join26(codexHome, "auth.json"), "utf8"));
     if (!doc || typeof doc !== "object") return void 0;
     const tokens = doc.tokens;
     if (!tokens || typeof tokens !== "object") return void 0;
@@ -32574,12 +32917,12 @@ function asEmail(value) {
 }
 function claudeAccountFile() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? join23(override, ".claude.json") : join23(homedir10(), ".claude.json");
+  return override && override.trim() ? join26(override, ".claude.json") : join26(homedir10(), ".claude.json");
 }
 function readClaudeAccountEmail(path3 = claudeAccountFile()) {
   let stat2;
   try {
-    stat2 = statSync10(path3);
+    stat2 = statSync11(path3);
   } catch {
     return void 0;
   }
@@ -32587,7 +32930,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
   if (memo3 && memo3.path === path3 && memo3.mtimeMs === stat2.mtimeMs && memo3.size === stat2.size) return memo3.email;
   let email;
   try {
-    const doc = JSON.parse(readFileSync17(path3, "utf8"));
+    const doc = JSON.parse(readFileSync19(path3, "utf8"));
     email = asEmail(doc?.oauthAccount?.emailAddress);
   } catch {
     email = void 0;
@@ -32598,7 +32941,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync19(join26(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -32724,7 +33067,7 @@ var init_codex_execution_health = __esm({
 
 // packages/server/src/backend/codex-app-server.ts
 import { createHash as createHash11, randomUUID as randomUUID11 } from "node:crypto";
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync10 } from "node:fs";
 import { StringDecoder as StringDecoder3 } from "node:string_decoder";
 function selectCodexHostKind(flagValue, platform3, hasSpawn) {
   if (hasSpawn) return "direct";
@@ -35174,7 +35517,7 @@ var init_codex_app_server = __esm({
        * external rollout may legitimately live somewhere else.
        */
       resumeCwdOverride(row) {
-        if (existsSync8(row.cwd)) return {};
+        if (existsSync10(row.cwd)) return {};
         return { cwd: this.options.projectDir };
       }
       recordResumedCwd(row, override) {
@@ -35996,17 +36339,17 @@ var init_codex_app_server = __esm({
 });
 
 // packages/server/src/backend/codex-quota.ts
-import { join as join24 } from "node:path";
-import { readdirSync as readdirSync7, statSync as statSync11, openSync as openSync12, readSync as readSync6, fstatSync, closeSync as closeSync11 } from "node:fs";
+import { join as join27 } from "node:path";
+import { readdirSync as readdirSync8, statSync as statSync12, openSync as openSync13, readSync as readSync6, fstatSync, closeSync as closeSync12 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
 function sessionsDir2(codexHome) {
-  return join24(codexHome, "sessions");
+  return join27(codexHome, "sessions");
 }
 function newestRollouts(dir, out, budget) {
   if (budget.n <= 0) return;
   let entries2;
   try {
-    entries2 = readdirSync7(dir, { withFileTypes: true });
+    entries2 = readdirSync8(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -36014,18 +36357,18 @@ function newestRollouts(dir, out, budget) {
   const files = entries2.filter((e14) => e14.isFile() && e14.name.startsWith("rollout-") && e14.name.endsWith(".jsonl")).map((e14) => e14.name).sort(descByName2);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    newestRollouts(join24(dir, d), out, budget);
+    newestRollouts(join27(dir, d), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
-    out.push(join24(dir, f));
+    out.push(join27(dir, f));
     budget.n--;
   }
 }
 function readTail(path3) {
   let fd2;
   try {
-    fd2 = openSync12(path3, "r");
+    fd2 = openSync13(path3, "r");
     const size = fstatSync(fd2).size;
     const start = Math.max(0, size - TAIL_BYTES);
     const len = size - start;
@@ -36042,7 +36385,7 @@ function readTail(path3) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync11(fd2);
+        closeSync12(fd2);
       } catch {
       }
     }
@@ -36090,7 +36433,7 @@ function readCodexQuotaFromRollouts(codexHome = defaultCodexHome()) {
     newestRollouts(sessionsDir2(codexHome), rollouts, { n: 8 });
     const byMtime = rollouts.map((path3) => {
       try {
-        return { path: path3, mtimeMs: statSync11(path3).mtimeMs };
+        return { path: path3, mtimeMs: statSync12(path3).mtimeMs };
       } catch {
         return void 0;
       }
@@ -36289,25 +36632,15 @@ var init_quota = __esm({
   }
 });
 
-// packages/server/src/local-path.ts
-function normalizeLocalPath(path3, platform3 = process.platform) {
-  return platform3 === "win32" ? path3.replace(/^\/([a-zA-Z]:[\\/])/, "$1") : path3;
-}
-var init_local_path = __esm({
-  "packages/server/src/local-path.ts"() {
-    "use strict";
-  }
-});
-
 // packages/server/src/local-file.ts
 import { spawn as spawn5 } from "node:child_process";
-import { existsSync as existsSync9, readFileSync as readFileSync18, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync20, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import { dirname as dirname9, isAbsolute as isAbsolute4, join as join25, resolve as resolve5, sep as sep2 } from "node:path";
+import { dirname as dirname11, isAbsolute as isAbsolute5, join as join28, resolve as resolve5, sep as sep2 } from "node:path";
 function isUnder(real, root) {
   let rootReal;
   try {
-    rootReal = realpathSync6(root);
+    rootReal = realpathSync7(root);
   } catch {
     return false;
   }
@@ -36315,12 +36648,12 @@ function isUnder(real, root) {
     return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
   }
   try {
-    const trusted2 = statSync12(rootReal, { bigint: true });
+    const trusted2 = statSync13(rootReal, { bigint: true });
     if (!trusted2.isDirectory() || trusted2.ino === 0n) return false;
     for (let ancestor = real; ; ) {
-      const actual = statSync12(ancestor, { bigint: true });
+      const actual = statSync13(ancestor, { bigint: true });
       if (actual.dev === trusted2.dev && actual.ino === trusted2.ino) return true;
-      const parent = dirname9(ancestor);
+      const parent = dirname11(ancestor);
       if (parent === ancestor) return false;
       ancestor = parent;
     }
@@ -36330,16 +36663,16 @@ function isUnder(real, root) {
 }
 function resolveLocalFile(rawPath, roots) {
   rawPath = normalizeLocalPath(rawPath);
-  if (!isAbsolute4(rawPath)) throw new Error("Local path must be absolute");
+  if (!isAbsolute5(rawPath)) throw new Error("Local path must be absolute");
   let real;
   try {
-    real = realpathSync6(rawPath);
+    real = realpathSync7(rawPath);
   } catch {
     throw new Error("Local file was not found");
   }
   if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
   try {
-    if (!statSync12(real).isFile()) throw new Error("Local path is not a regular file");
+    if (!statSync13(real).isFile()) throw new Error("Local path is not a regular file");
   } catch (error) {
     if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
     throw new Error("Local file was not found");
@@ -36349,7 +36682,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join25(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve5(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join28(home, trimmed.slice(2)) : isAbsolute5(trimmed) ? trimmed : resolve5(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -36358,7 +36691,7 @@ function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
 }
 function readLocalTextFile(rawPath, roots) {
   const path3 = resolveLocalFile(rawPath, roots);
-  const bytes = readFileSync18(path3);
+  const bytes = readFileSync20(path3);
   if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
   if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
   const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
@@ -36369,7 +36702,7 @@ function readLocalMarkdown(rawPath, roots) {
   if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
   const path3 = resolveLocalFile(rawPath, roots);
   if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
-  const bytes = readFileSync18(path3);
+  const bytes = readFileSync20(path3);
   if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
   const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
   const lastBreak = head.lastIndexOf(10);
@@ -36404,10 +36737,10 @@ function localFileOpenCommand(path3, selected, options = {}) {
     if (selected === "finder") return { command: "explorer.exe", args: [`/select,${path3}`] };
     const editor = WINDOWS_EDITOR_EXE[selected];
     const env = options.env ?? process.env;
-    const exists = options.exists ?? existsSync9;
+    const exists = options.exists ?? existsSync11;
     const localAppData = env.LOCALAPPDATA;
     if (localAppData) {
-      const exe2 = join25(localAppData, ...editor.exe);
+      const exe2 = join28(localAppData, ...editor.exe);
       if (exists(exe2)) return { command: exe2, args: [path3] };
     }
     if (/["%\r\n]/u.test(path3)) throw new Error(`cannot hand ${path3} to the ${editor.shim} shim through cmd.exe`);
@@ -36445,7 +36778,7 @@ var init_local_file = __esm({
 });
 
 // packages/server/src/thread-links.ts
-import { isAbsolute as isAbsolute5 } from "node:path";
+import { isAbsolute as isAbsolute6 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function threadLinkView(row) {
   return { id: row.id, kind: row.kind, label: row.label, target: row.target };
@@ -36461,7 +36794,7 @@ function resolveThreadLink(target, projectDir, roots) {
     const url = new URL(target);
     if (url.search || url.hash) throw new Error("File links must not contain a query or fragment");
     path3 = fileURLToPath2(url);
-  } else if (!isAbsolute5(target) && /^[a-z][a-z\d+.-]*:/i.test(target)) {
+  } else if (!isAbsolute6(target) && /^[a-z][a-z\d+.-]*:/i.test(target)) {
     throw new Error("Register an HTTP(S) URL or a local file");
   }
   const resolved2 = resolveOpenableFile(path3, projectDir, roots);
@@ -36672,8 +37005,8 @@ var init_claude_model_upgrade = __esm({
 
 // packages/server/src/frizz.ts
 import { execFile as execFile6 } from "node:child_process";
-import { lstatSync as lstatSync2, realpathSync as realpathSync7 } from "node:fs";
-import { basename as basename5, dirname as dirname10, join as join26, resolve as resolve6 } from "node:path";
+import { lstatSync as lstatSync3, realpathSync as realpathSync8 } from "node:fs";
+import { basename as basename5, dirname as dirname12, join as join29, resolve as resolve6 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
@@ -36681,12 +37014,12 @@ function frizzScriptsDir() {
 }
 function directFrizzRoot(projectDir) {
   try {
-    const projectRoot = realpathSync7(projectDir);
-    const path3 = join26(projectRoot, ".frizz");
-    const stat2 = lstatSync2(path3);
+    const projectRoot = realpathSync8(projectDir);
+    const path3 = join29(projectRoot, ".frizz");
+    const stat2 = lstatSync3(path3);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
-    const real = realpathSync7(path3);
-    return dirname10(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
+    const real = realpathSync8(path3);
+    return dirname12(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
   } catch {
     return null;
   }
@@ -36696,7 +37029,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join26(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join29(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -36721,7 +37054,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join26(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join29(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -36855,12 +37188,12 @@ var init_awaiting = __esm({
 });
 
 // packages/server/src/backend/project-mcp-servers.ts
-import { readFileSync as readFileSync19 } from "node:fs";
+import { readFileSync as readFileSync21 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join27 } from "node:path";
+import { join as join30 } from "node:path";
 function readJsonObject(path3) {
   try {
-    const parsed = JSON.parse(readFileSync19(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync21(path3, "utf8"));
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -36953,15 +37286,15 @@ function projectMcpServers(cwd, options = {}) {
   const env = options.env ?? process.env;
   const home = options.home ?? homedir12();
   const configOverride = options.claudeConfigDir ?? (env.CLAUDE_CONFIG_DIR?.trim() ? env.CLAUDE_CONFIG_DIR.trim() : void 0);
-  const accountFile = configOverride ? join27(configOverride, ".claude.json") : join27(home, ".claude.json");
-  const userSettingsFile = join27(configOverride ?? join27(home, ".claude"), "settings.json");
+  const accountFile = configOverride ? join30(configOverride, ".claude.json") : join30(home, ".claude.json");
+  const userSettingsFile = join30(configOverride ?? join30(home, ".claude"), "settings.json");
   const account = readJsonObject(accountFile);
   const out = userScopeRemoteServers(account, cwd, env);
-  const declared = objectField(readJsonObject(join27(cwd, ".mcp.json")), "mcpServers");
+  const declared = objectField(readJsonObject(join30(cwd, ".mcp.json")), "mcpServers");
   if (!declared) return out;
   const approval = collectApproval([
-    readJsonObject(join27(cwd, ".claude", "settings.json")),
-    readJsonObject(join27(cwd, ".claude", "settings.local.json")),
+    readJsonObject(join30(cwd, ".claude", "settings.json")),
+    readJsonObject(join30(cwd, ".claude", "settings.local.json")),
     readJsonObject(userSettingsFile),
     objectField(objectField(account, "projects"), cwd)
   ]);
@@ -36985,18 +37318,18 @@ var init_project_mcp_servers = __esm({
 });
 
 // packages/server/src/worker-plugin-dir.ts
-import { existsSync as existsSync10 } from "node:fs";
-import { dirname as dirname11, join as join28 } from "node:path";
+import { existsSync as existsSync12 } from "node:fs";
+import { dirname as dirname13, join as join31 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync10(join28(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync12(join31(override, ".claude-plugin", "plugin.json")))
     return override;
-  let current = dirname11(fileURLToPath3(moduleUrl));
+  let current = dirname13(fileURLToPath3(moduleUrl));
   for (; ; ) {
-    const candidate = join28(current, "cc-worker");
-    if (existsSync10(join28(candidate, ".claude-plugin", "plugin.json"))) return candidate;
-    const parent = dirname11(current);
+    const candidate = join31(current, "cc-worker");
+    if (existsSync12(join31(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const parent = dirname13(current);
     if (parent === current) return void 0;
     current = parent;
   }
@@ -37144,9 +37477,9 @@ reasoning around the ask, never a copy of it (see Questions for the human).
 **AT EVERY LATER REST, SAY WHERE EACH OLD QUESTION STANDS.** A question still open from an EARLIER rest
 is not your new rest's sign-off, and frizz does NOT redraw its card under your new handoff \u2014 it stays
 where you asked it. So a later rest either NAMES each one you still need under \`questions:\` in an
-\` \`\`\`awaiting \` fence \u2014 its card is then drawn at this rest, under your fence \u2014 or WITHDRAWS it with
-\`unask\`. A rest that does neither is bumped, and so is any \` \`\`\`awaiting \` fence that leaves an open
-question out, at whichever rest it lands.
+\` \`\`\`awaiting \` fence \u2014 its card is then drawn at this rest, under your fence's prose \u2014 or WITHDRAWS
+it with \`unask\`. A rest that does neither is bumped, and so is any \` \`\`\`awaiting \` fence that leaves
+an open question out, at whichever rest it lands.
 
 Use at most ONE fenced signal block, at the very END (a question's PLACEMENT marker is not a signal
 block \u2014 see Questions for the human). The fence language is the state; the body is the card the human
@@ -37267,7 +37600,7 @@ exactly ONE of them.
   title: Sign in to npm so the release can publish
   steps:
     - Run \`npm login --auth-type=web\` in a terminal on this machine.
-    - Approve the browser prompt with the maintainer account.
+    - Approve the browser prompt with the maintainer account; if no prompt opens, sign in at [npmjs.com/login](https://www.npmjs.com/login) and run the command again.
   ---
   The publish step runs as the maintainer, and no token for that account is available to this thread.
   \`\`\`
@@ -37352,12 +37685,34 @@ exactly ONE of them.
     \`Done\`, the same as anything they type; anything else they need to tell you \u2014 a step that failed,
     the account they used \u2014 comes as a message of their own. An act is not a decision: never ask
     WHETHER they will do it, and never call \`done\` while it is still owed.
+    **EVERY STEP IS CLICKABLE AND COMPLETE \u2014 A STEP THAT MAKES THE HUMAN GO LOOKING IS A BROKEN STEP.**
+    The steps are the most actionable thing you hand over, so write each one to be DONE, not
+    researched: every page it names is a real Markdown link to that exact page (the settings screen,
+    the audit log, the PR, the release run \u2014 never "in the dashboard" or "on GitHub"); every file is a
+    real link; every command is a code span ready to paste; and every value the act needs \u2014 the account,
+    the date range, the token or secret name, the exact button \u2014 is written into the step. Steps render
+    as Markdown, so links click. Bad: \`Open the Cloudflare dashboard and check the audit log for the
+    upload.\` Good: \`Open the [Frizz account audit log](https://dash.cloudflare.com/<account-id>/audit-log),
+    filter to 2026-10-05 18:00\u201319:00 UTC, and note the actor and IP on the frizz-relay upload.\`
+    Fill in every id you hold; when you cannot know a URL, link the nearest page you can and say what to
+    click there. A step is cut at 500 characters, so keep each link inside that.
+    (Maintainer 2026-10-08, after a security handoff listed seven to-dos with no link in any of them:
+    *"Anytime you stop with a to-do block for the user, it needs to include clickable links. It needs to
+    be as actionable as possible."*)
+    **A VALUE ONLY THE HUMAN HOLDS IS NOT A STEP** \u2014 a 2FA code, a token, a password a command needs.
+    Ask for it with \`mcp__frizz__secret\`: the human pastes it into a masked card, from any device, and
+    it is served from memory through a private pipe whose path the tool returns. The path reads ONCE:
+    use it inside the command (\`--otp "$(cat '<path>')"\`) and never print it. It is a registered
+    question: name it under \`questions:\` at later rests.
   - \`questions:\` \u2014 your registered questions you are STILL waiting on, by id: \`questions: [qst_ab12cd34]\`.
     A fence beside open questions names EVERY one of them \u2014 withdraw any you no longer need with
     \`mcp__frizz__unask\` first \u2014 or frizz refuses the park and lists what it left out. Each named card is
     drawn at THIS rest, under your fence; to set it inside your prose instead, add its placement marker
-    (see Questions for the human). Like \`steps:\`, questions name the human as the wait: no other name
-    and no \`for:\` needed, and the thread stays in their queue.
+    (see Questions for the human). A fence that names questions draws NO awaiting card of its own: the
+    question cards are the rest's ending, its prose under \`---\` reads as plain handoff text, and the
+    work it also names is listed beside the human's prompt box (a fence with \`steps:\` keeps its card).
+    Like \`steps:\`, questions name the human as the wait: no other name and no \`for:\` needed, and the
+    thread stays in their queue.
   - **REGISTERING IS NOT PARKING, AND PARKING IS NOT REGISTERING.** Your shells, sub-agents, timers
     and PR watchers are watched AUTOMATICALLY, fence or no fence \u2014 frizz wakes you when one finishes,
     every time. The fence only declares that you have STOPPED, names which of them you stopped for,
@@ -38108,26 +38463,26 @@ checks. Depth scales with blast radius and yields to the project's conventions.`
 });
 
 // packages/server/src/backend/acp-agents.ts
-import { accessSync as accessSync3, constants, statSync as statSync13 } from "node:fs";
-import { delimiter as delimiter2, isAbsolute as isAbsolute6, join as join29 } from "node:path";
+import { accessSync as accessSync3, constants as constants2, statSync as statSync14 } from "node:fs";
+import { delimiter as delimiter2, isAbsolute as isAbsolute7, join as join32 } from "node:path";
 function isExecutableFile(path3) {
   try {
-    if (!statSync13(path3).isFile()) return false;
-    if (process.platform !== "win32") accessSync3(path3, constants.X_OK);
+    if (!statSync14(path3).isFile()) return false;
+    if (process.platform !== "win32") accessSync3(path3, constants2.X_OK);
     return true;
   } catch {
     return false;
   }
 }
 function findOnPath(command, env = process.env) {
-  if (isAbsolute6(command)) return isExecutableFile(command) ? command : void 0;
+  if (isAbsolute7(command)) return isExecutableFile(command) ? command : void 0;
   const dirs = (env.PATH ?? env.Path ?? "").split(delimiter2).filter(Boolean);
   const exts = process.platform === "win32" ? ["", ...(env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";")] : [""];
   for (const dir of dirs) {
     for (const ext of exts) {
-      const candidate = join29(dir, command + ext.toLowerCase());
+      const candidate = join32(dir, command + ext.toLowerCase());
       if (isExecutableFile(candidate)) return candidate;
-      if (ext && isExecutableFile(join29(dir, command + ext))) return join29(dir, command + ext);
+      if (ext && isExecutableFile(join32(dir, command + ext))) return join32(dir, command + ext);
     }
   }
   return void 0;
@@ -39144,8 +39499,8 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync12, constants as constants2, existsSync as existsSync11, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync20, realpathSync as realpathSync8, statSync as statSync14, writeFileSync as writeFileSync11, mkdirSync as mkdirSync14, rmSync as rmSync9 } from "node:fs";
-import { basename as basename6, join as join30, dirname as dirname12 } from "node:path";
+import { closeSync as closeSync13, constants as constants3, existsSync as existsSync13, fstatSync as fstatSync2, lstatSync as lstatSync4, openSync as openSync14, readFileSync as readFileSync22, realpathSync as realpathSync9, statSync as statSync15, writeFileSync as writeFileSync13, mkdirSync as mkdirSync16, rmSync as rmSync10 } from "node:fs";
+import { basename as basename6, join as join33, dirname as dirname14 } from "node:path";
 import { createHash as createHash12, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -39164,7 +39519,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync11(join30(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync13(join33(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -39180,29 +39535,29 @@ function resolveLegacyThreadFile(projectDir, value) {
   const parsed = ThreadSlug.safeParse(value);
   if (!parsed.success) return null;
   try {
-    const projectRoot = realpathSync8(projectDir);
-    const frizzPath = join30(projectRoot, ".frizz");
-    const frizzStat = lstatSync3(frizzPath);
+    const projectRoot = realpathSync9(projectDir);
+    const frizzPath = join33(projectRoot, ".frizz");
+    const frizzStat = lstatSync4(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
-    const realFrizz = realpathSync8(frizzPath);
-    if (dirname12(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path3 = join30(realFrizz, `${parsed.data}.md`);
-    const before = lstatSync3(path3);
+    const realFrizz = realpathSync9(frizzPath);
+    if (dirname14(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
+    const path3 = join33(realFrizz, `${parsed.data}.md`);
+    const before = lstatSync4(path3);
     if (!before.isFile() || before.isSymbolicLink()) return null;
-    const realPath = realpathSync8(path3);
-    if (dirname12(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
+    const realPath = realpathSync9(path3);
+    if (dirname14(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
     let contents;
     let openedBefore;
     let openedAfter;
-    const fd2 = openSync13(path3, constants2.O_RDONLY | constants2.O_NOFOLLOW);
+    const fd2 = openSync14(path3, constants3.O_RDONLY | constants3.O_NOFOLLOW);
     try {
       openedBefore = fstatSync2(fd2);
-      contents = readFileSync20(fd2);
+      contents = readFileSync22(fd2);
       openedAfter = fstatSync2(fd2);
     } finally {
-      closeSync12(fd2);
+      closeSync13(fd2);
     }
-    const after = lstatSync3(path3);
+    const after = lstatSync4(path3);
     if (before.dev !== openedBefore.dev || before.ino !== openedBefore.ino || openedBefore.dev !== openedAfter.dev || openedBefore.ino !== openedAfter.ino || openedBefore.size !== openedAfter.size || openedBefore.mtimeMs !== openedAfter.mtimeMs || openedBefore.ctimeMs !== openedAfter.ctimeMs || after.dev !== openedAfter.dev || after.ino !== openedAfter.ino || after.size !== openedAfter.size || after.mtimeMs !== openedAfter.mtimeMs || after.ctimeMs !== openedAfter.ctimeMs || !openedAfter.isFile() || !after.isFile() || after.isSymbolicLink()) {
       return null;
     }
@@ -39230,17 +39585,17 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path3 = join30(parent, name);
+  const path3 = join33(parent, name);
   try {
-    mkdirSync14(path3);
+    mkdirSync16(path3);
   } catch (error) {
     const code = error && typeof error === "object" && "code" in error ? String(error.code) : "";
     if (code !== "EEXIST") throw error;
   }
-  const stat2 = lstatSync3(path3);
+  const stat2 = lstatSync4(path3);
   if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw new Error("unsafe project directory");
-  const real = realpathSync8(path3);
-  if (dirname12(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
+  const real = realpathSync9(path3);
+  if (dirname14(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
   return real;
 }
 function scratchDirRelPath(sessionId) {
@@ -39248,7 +39603,7 @@ function scratchDirRelPath(sessionId) {
 }
 function writeScratchDir(projectDir, sessionId) {
   if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/.test(sessionId)) throw new Error("invalid session id");
-  const projectRoot = realpathSync8(projectDir);
+  const projectRoot = realpathSync9(projectDir);
   const frizzDir = ensureSafeDirectDirectory(projectRoot, ".frizz");
   const threadsDir = ensureSafeDirectDirectory(frizzDir, "threads");
   ensureSafeDirectDirectory(threadsDir, sessionId);
@@ -39260,8 +39615,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join30(plugin, "skills", "gh", "scripts");
-  return existsSync11(join30(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join33(plugin, "skills", "gh", "scripts");
+  return existsSync13(join33(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -39273,7 +39628,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join30(dirname12(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join33(dirname14(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -39299,7 +39654,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join30(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join33(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -39315,12 +39670,12 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work (${children2}). Nothing in this directory is read automatically; if you want a note back after a compaction, mcp__frizz__goal with post_compaction: true re-sends a prompt of your choosing.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path3 = join30(projectDir, "FRIZZ.md");
+  const path3 = join33(projectDir, "FRIZZ.md");
   let body;
   try {
-    const st2 = statSync14(path3);
+    const st2 = statSync15(path3);
     if (!st2.isFile() || st2.size > FRIZZ_MD_MAX_BYTES) return "";
-    body = readFileSync20(path3, "utf8").trim();
+    body = readFileSync22(path3, "utf8").trim();
   } catch {
     return "";
   }
@@ -39350,17 +39705,17 @@ function effectivePermissionMode(kind, mode) {
 }
 function systemPromptFlags(sessionId, system) {
   if (!system) return [];
-  mkdirSync14(SYSTEM_PROMPT_DIR, { recursive: true });
+  mkdirSync16(SYSTEM_PROMPT_DIR, { recursive: true });
   const path3 = systemPromptPath(sessionId);
-  writeFileSync11(path3, system);
+  writeFileSync13(path3, system);
   return ["--append-system-prompt-file", path3];
 }
 function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env, slug) {
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join30(pluginDir, "bin", FRIZZ_MCP.script);
-  if (!existsSync11(scriptPath)) return void 0;
+  const scriptPath = join33(pluginDir, "bin", FRIZZ_MCP.script);
+  if (!existsSync13(scriptPath)) return void 0;
   return {
     scriptPath,
     stateDir,
@@ -39441,12 +39796,12 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join30(deps.project.dir, ".frizz");
+  const frizzDir = join33(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path3 of new Set(built.prewrite.map((file) => file.path))) {
       try {
-        rmSync9(path3, { force: true });
+        rmSync10(path3, { force: true });
       } catch {
       }
     }
@@ -39454,7 +39809,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync9(join30(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync10(join33(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -39943,11 +40298,11 @@ var init_dispatch = __esm({
 
 // packages/server/src/board.ts
 import {
-  realpathSync as realpathSync9,
+  realpathSync as realpathSync10,
   watch as fsWatch
 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
-import { dirname as dirname13, join as join31 } from "node:path";
+import { dirname as dirname15, join as join34 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -39996,7 +40351,7 @@ function registeredLegacyFileIsTerminal(projectDir, slug) {
   return status === "done" || status === "dismissed";
 }
 function isBoardRelevantFrizzPath(roots, path3) {
-  return path3.endsWith(".md") && roots.has(dirname13(path3));
+  return path3.endsWith(".md") && roots.has(dirname15(path3));
 }
 function futureSnooze(row, nowMs) {
   const parsed = SnoozeUntil.safeParse(row.snoozed_until);
@@ -40856,10 +41211,10 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const dir = join31(project.dir, ".frizz");
+      const dir = join34(project.dir, ".frizz");
       const roots = /* @__PURE__ */ new Set([dir]);
       try {
-        roots.add(realpathSync9(dir));
+        roots.add(realpathSync10(dir));
       } catch {
       }
       const next = await subscribe(
@@ -40871,7 +41226,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
           }
           if (events.some((event) => isBoardRelevantFrizzPath(roots, event.path))) scheduleRebuild();
         },
-        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join31(dir, name)) }
+        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join34(dir, name)) }
       );
       if (stopped) {
         await next.unsubscribe();
@@ -43988,7 +44343,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join32 } from "node:path";
+import { join as join35 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -44007,7 +44362,7 @@ function parseClaudeLine(line) {
   const at2 = typeof rec.timestamp === "string" ? rec.timestamp : void 0;
   const out = [];
   if (rec.type === "assistant") {
-    const stop = typeof rec.message?.stop_reason === "string" ? rec.message.stop_reason : void 0;
+    const stop2 = typeof rec.message?.stop_reason === "string" ? rec.message.stop_reason : void 0;
     const content = rec.message?.content;
     let lastText;
     if (Array.isArray(content)) {
@@ -44016,13 +44371,13 @@ function parseClaudeLine(line) {
         const b = block;
         if (b.type === "text" && typeof b.text === "string") {
           lastText = b.text;
-          out.push({ kind: "assistant-text", at: at2, text: b.text, final: stop === "end_turn" });
+          out.push({ kind: "assistant-text", at: at2, text: b.text, final: stop2 === "end_turn" });
         } else if (b.type === "tool_use") {
           out.push({ kind: "tool-call", at: at2, id: typeof b.id === "string" ? b.id : "", name: typeof b.name === "string" ? b.name : "", input: b.input });
         }
       }
     }
-    if (stop === "end_turn") out.push({ kind: "turn-end", at: at2, finalText: lastText });
+    if (stop2 === "end_turn") out.push({ kind: "turn-end", at: at2, finalText: lastText });
     return out;
   }
   if (rec.type === "user" && rec.isMeta !== true) {
@@ -44079,7 +44434,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join32(opts.logDir, `${sessionId}.jsonl`);
+      return join35(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -44104,10 +44459,10 @@ var init_claude = __esm({
 });
 
 // packages/server/src/backend/acp-transcript.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync13, mkdirSync as mkdirSync15, readFileSync as readFileSync21 } from "node:fs";
-import { dirname as dirname14, join as join33 } from "node:path";
+import { appendFileSync as appendFileSync3, existsSync as existsSync15, mkdirSync as mkdirSync17, readFileSync as readFileSync23 } from "node:fs";
+import { dirname as dirname16, join as join36 } from "node:path";
 function acpTranscriptPath(stateDir, sessionId) {
-  return join33(stateDir, ACP_TRANSCRIPT_DIR, `${sessionId}.jsonl`);
+  return join36(stateDir, ACP_TRANSCRIPT_DIR, `${sessionId}.jsonl`);
 }
 function parseAcpRecord(line) {
   if (!line.trim()) return void 0;
@@ -44308,8 +44663,8 @@ var init_acp_transcript = __esm({
     AcpTranscriptWriter = class {
       constructor(path3) {
         this.path = path3;
-        mkdirSync15(dirname14(path3), { recursive: true });
-        if (!existsSync13(path3)) appendFileSync3(path3, "");
+        mkdirSync17(dirname16(path3), { recursive: true });
+        if (!existsSync15(path3)) appendFileSync3(path3, "");
       }
       append(record) {
         appendFileSync3(this.path, JSON.stringify(record) + "\n");
@@ -44696,15 +45051,15 @@ var init_acp_rpc = __esm({
 import { spawn as spawn7 } from "node:child_process";
 import { createConnection as createConnection2 } from "node:net";
 import { createHash as createHash14, randomUUID as randomUUID15 } from "node:crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync16, readFileSync as readFileSync22, readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
-import { join as join34 } from "node:path";
+import { existsSync as existsSync16, mkdirSync as mkdirSync18, readFileSync as readFileSync24, readdirSync as readdirSync9, unlinkSync as unlinkSync4 } from "node:fs";
+import { join as join37 } from "node:path";
 import { PassThrough as PassThrough3, Writable as Writable3 } from "node:stream";
 import { StringDecoder as StringDecoder5 } from "node:string_decoder";
 function daemonDir2(stateDir) {
-  return join34(stateDir, "acp-daemon");
+  return join37(stateDir, "acp-daemon");
 }
 function acpDaemonRecordPath(stateDir, sessionId) {
-  return join34(daemonDir2(stateDir), `${sessionId}.json`);
+  return join37(daemonDir2(stateDir), `${sessionId}.json`);
 }
 function acpDaemonSocketPath(stateDir, sessionId) {
   const key = createHash14("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
@@ -44720,7 +45075,7 @@ function pidAlive4(pid) {
 }
 function readAcpDaemonRecord(stateDir, sessionId) {
   try {
-    const value = JSON.parse(readFileSync22(acpDaemonRecordPath(stateDir, sessionId), "utf8"));
+    const value = JSON.parse(readFileSync24(acpDaemonRecordPath(stateDir, sessionId), "utf8"));
     if (typeof value.daemonPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       threadSlug: typeof value.threadSlug === "string" ? value.threadSlug : "",
@@ -44766,7 +45121,7 @@ async function stopAcpDaemon(stateDir, sessionId, timeoutMs = 1e4) {
 }
 function forkDaemon2(options) {
   const { stateDir, sessionId } = options;
-  mkdirSync16(daemonDir2(stateDir), { recursive: true });
+  mkdirSync18(daemonDir2(stateDir), { recursive: true });
   const record = acpDaemonRecordPath(stateDir, sessionId);
   try {
     unlinkSync4(record);
@@ -44962,7 +45317,7 @@ var init_acp_host = __esm({
       }
       if (process.platform !== "win32") {
         const stale = acpDaemonSocketPath(stateDir, sessionId);
-        if (existsSync14(stale) && !liveAcpDaemonRecord(stateDir, sessionId)) {
+        if (existsSync16(stale) && !liveAcpDaemonRecord(stateDir, sessionId)) {
           try {
             unlinkSync4(stale);
           } catch {
@@ -71654,7 +72009,7 @@ var init_claude_context_window = __esm({
 });
 
 // packages/server/src/backend/claude-agent-sdk.ts
-import { delimiter as delimiter3, isAbsolute as isAbsolute8 } from "node:path";
+import { delimiter as delimiter3, isAbsolute as isAbsolute9 } from "node:path";
 function sanitizeProviderChildEnvironment(environment) {
   const sanitized = { ...environment };
   for (const key of Object.keys(sanitized)) {
@@ -71796,24 +72151,24 @@ var init_claude_models = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
-import { appendFileSync as appendFileSync5, mkdirSync as mkdirSync18, renameSync as renameSync9, statSync as statSync16 } from "node:fs";
-import { join as join36 } from "node:path";
+import { appendFileSync as appendFileSync5, mkdirSync as mkdirSync20, renameSync as renameSync9, statSync as statSync17 } from "node:fs";
+import { join as join39 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join36(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join39(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join36(stateDir, "codex-app-server");
+  const dir = join39(stateDir, "codex-app-server");
   const path3 = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
     if (event.event === "stderr") return;
     try {
       if (!ensured) {
-        mkdirSync18(dir, { recursive: true });
+        mkdirSync20(dir, { recursive: true });
         ensured = true;
       }
       try {
-        if (statSync16(path3).size > MAX_BYTES2) renameSync9(path3, `${path3}.1`);
+        if (statSync17(path3).size > MAX_BYTES2) renameSync9(path3, `${path3}.1`);
       } catch {
       }
       appendFileSync5(path3, `${JSON.stringify({ at: now().toISOString(), ...event })}
@@ -71832,9 +72187,9 @@ var init_codex_app_server_diagnostics = __esm({
 
 // packages/server/src/backend/stale-socket-sweep.ts
 import { execFile as execFile9 } from "node:child_process";
-import { readdirSync as readdirSync10, unlinkSync as unlinkSync6 } from "node:fs";
+import { readdirSync as readdirSync11, unlinkSync as unlinkSync6 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join37 } from "node:path";
+import { join as join40 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -71851,7 +72206,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync10)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join37(options.dir, name)).filter((path3) => !keep.has(path3));
+    candidates = (deps.readdir ?? readdirSync11)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join40(options.dir, name)).filter((path3) => !keep.has(path3));
   } catch {
     return;
   }
@@ -71901,8 +72256,8 @@ var init_stale_socket_sweep = __esm({
 
 // packages/server/src/orphan-reaper.ts
 import { execFile as execFile10 } from "node:child_process";
-import { readFileSync as readFileSync24 } from "node:fs";
-import { dirname as dirname16 } from "node:path";
+import { readFileSync as readFileSync26 } from "node:fs";
+import { dirname as dirname18 } from "node:path";
 import { promisify as promisify8 } from "node:util";
 function firstTokenBasename(command) {
   const first = command.trimStart().split(/\s+/, 1)[0] ?? "";
@@ -72131,7 +72486,7 @@ async function sweepOrphansOnce(deps = {}) {
 }
 function sweepStaleBrokerSockets() {
   try {
-    sweepStaleSockets({ dir: dirname16(claudeBrokerSocketPath("", "")), prefix: CLAUDE_BROKER_SOCKET_PREFIX });
+    sweepStaleSockets({ dir: dirname18(claudeBrokerSocketPath("", "")), prefix: CLAUDE_BROKER_SOCKET_PREFIX });
   } catch {
   }
 }
@@ -72208,7 +72563,7 @@ var init_orphan_reaper = __esm({
     defaultExec = async (file, args) => (await execFileAsync6(file, args, { encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 1e4 })).stdout;
     defaultReadEnv = (pid) => {
       try {
-        return readFileSync24(`/proc/${pid}/environ`, "utf8");
+        return readFileSync26(`/proc/${pid}/environ`, "utf8");
       } catch {
         return null;
       }
@@ -72228,7 +72583,7 @@ var init_orphan_reaper = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join38 } from "node:path";
+import { join as join41 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { homedir as homedir15 } from "node:os";
 function reconcileSessions(storage) {
@@ -72380,8 +72735,9 @@ async function createContext(opts = {}) {
 function createContextUnchecked(opts, resources) {
   const home = opts.home ?? homedir15();
   const project = opts.project ?? resolveProject();
-  const storage = createStorage(opts.database ?? join38(project.stateDir, "ui.db"), project.id);
+  const storage = createStorage(opts.database ?? join41(project.stateDir, "ui.db"), project.id);
   resources.storage = storage;
+  clearSecrets(project.stateDir);
   const bus = new Bus();
   const transcriptChange = new Emitter();
   const bootId = randomUUID16();
@@ -72797,6 +73153,7 @@ var init_context = __esm({
     init_bus();
     init_project();
     init_storage();
+    init_secret_files();
     init_settings();
     init_dispatch_preferences();
     init_quota();
@@ -75492,8 +75849,8 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync16, readFileSync as readFileSync25, writeFileSync as writeFileSync12 } from "node:fs";
-import { basename as basename7, dirname as dirname17, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync18, readFileSync as readFileSync27, writeFileSync as writeFileSync14 } from "node:fs";
+import { basename as basename7, dirname as dirname19, resolve as resolve9 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
   return `"${v.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -75505,10 +75862,10 @@ function deriveTitle(body, slug) {
 function repairThreadFile(frizzDir, file) {
   const root = resolve9(frizzDir);
   const abs = resolve9(root, file);
-  if (dirname17(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
+  if (dirname19(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
-  if (!existsSync16(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
-  const content = readFileSync25(abs, "utf8");
+  if (!existsSync18(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
+  const content = readFileSync27(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
     throw new RepairError(`${basename7(abs)} already opens with a "---" block \u2014 repair only heals a MISSING frontmatter block`);
@@ -75523,7 +75880,7 @@ function repairThreadFile(frizzDir, file) {
     "---",
     ""
   ].join("\n");
-  writeFileSync12(abs, frontmatter + content);
+  writeFileSync14(abs, frontmatter + content);
   return { slug };
 }
 var RepairError, REPAIR_STATUS_TEXT;
@@ -75665,10 +76022,10 @@ var init_edited_files = __esm({
 });
 
 // packages/server/src/repo-files.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync5 } from "node:child_process";
 import path2 from "node:path";
 function git(args, cwd) {
-  return execFileSync4("git", args, {
+  return execFileSync5("git", args, {
     cwd,
     encoding: "utf8",
     env: { ...process.env, LC_ALL: "C" },
@@ -75709,7 +76066,7 @@ function probeIgnored(projectDir, inside) {
     return /* @__PURE__ */ new Set();
   }
   try {
-    const out = execFileSync4("git", ["check-ignore", "-z", "--stdin"], {
+    const out = execFileSync5("git", ["check-ignore", "-z", "--stdin"], {
       cwd: projectDir,
       encoding: "utf8",
       env: { ...process.env, LC_ALL: "C" },
@@ -75736,7 +76093,7 @@ var init_repo_files = __esm({
 });
 
 // cc-worker/hooks/bash-background.mjs
-import { readFileSync as readFileSync26, realpathSync as realpathSync11 } from "node:fs";
+import { readFileSync as readFileSync28, realpathSync as realpathSync12 } from "node:fs";
 import { basename as basename8 } from "node:path";
 import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 function emit(obj) {
@@ -75874,7 +76231,7 @@ function evaluateBashBackgroundHook(input, env = process.env) {
     }
   };
 }
-function isDirectHookExecution(argv1, moduleUrl, realpath = realpathSync11) {
+function isDirectHookExecution(argv1, moduleUrl, realpath = realpathSync12) {
   if (typeof argv1 !== "string" || basename8(argv1) !== "bash-background.mjs") return false;
   if (pathToFileURL(argv1).href === moduleUrl) return true;
   try {
@@ -75891,7 +76248,7 @@ var init_bash_background = __esm({
     if (isDirectHookExecution(process.argv[1], import.meta.url)) {
       try {
         const env = process.argv.includes("--frizz-thread") ? { ...process.env, FRIZZ_THREAD: process.env.FRIZZ_THREAD || "codex-worker" } : process.env;
-        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync26(0, "utf8")), env));
+        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync28(0, "utf8")), env));
       } catch {
         emit({});
       }
@@ -75900,10 +76257,10 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync14, existsSync as existsSync17, fstatSync as fstatSync3, mkdirSync as mkdirSync19, openSync as openSync15, readdirSync as readdirSync11, readFileSync as readFileSync27, readSync as readSync8, renameSync as renameSync10, statSync as statSync17, unlinkSync as unlinkSync7, writeFileSync as writeFileSync13 } from "node:fs";
+import { closeSync as closeSync15, existsSync as existsSync19, fstatSync as fstatSync3, mkdirSync as mkdirSync21, openSync as openSync16, readdirSync as readdirSync12, readFileSync as readFileSync29, readSync as readSync8, renameSync as renameSync10, statSync as statSync18, unlinkSync as unlinkSync7, writeFileSync as writeFileSync15 } from "node:fs";
 import { createHash as createHash15 } from "node:crypto";
 import { StringDecoder as StringDecoder6 } from "node:string_decoder";
-import { join as join39 } from "node:path";
+import { join as join42 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
@@ -76507,18 +76864,18 @@ function looksLikeImage(buf, ext) {
 }
 function pruneScreenshotCache() {
   try {
-    const entries2 = readdirSync11(SCREENSHOT_CACHE_DIR).filter((n) => !n.startsWith("."));
+    const entries2 = readdirSync12(SCREENSHOT_CACHE_DIR).filter((n) => !n.startsWith("."));
     if (entries2.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries2.map((n) => {
       try {
-        return { n, m: statSync17(join39(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync18(join42(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync7(join39(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync7(join42(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -76548,15 +76905,15 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash15("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path3 = join39(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path3 = join42(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
-    if (existsSync17(path3)) return path3;
+    if (existsSync19(path3)) return path3;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
-    mkdirSync19(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join39(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
-    writeFileSync13(tmp, buf);
+    mkdirSync21(SCREENSHOT_CACHE_DIR, { recursive: true });
+    const tmp = join42(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    writeFileSync15(tmp, buf);
     renameSync10(tmp, path3);
     pruneScreenshotCache();
     return path3;
@@ -76570,15 +76927,15 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash15("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join39(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
-    if (existsSync17(dest)) return dest;
-    const size = statSync17(srcPath).size;
+    const dest = join42(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    if (existsSync19(dest)) return dest;
+    const size = statSync18(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
-    const buf = readFileSync27(srcPath);
+    const buf = readFileSync29(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
-    mkdirSync19(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join39(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
-    writeFileSync13(tmp, buf);
+    mkdirSync21(SCREENSHOT_CACHE_DIR, { recursive: true });
+    const tmp = join42(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    writeFileSync15(tmp, buf);
     renameSync10(tmp, dest);
     pruneScreenshotCache();
     return dest;
@@ -76996,7 +77353,7 @@ function readTranscript(project, sessionId) {
   const identityPrefix = `claude:${sessionId}`;
   let fd2;
   try {
-    fd2 = openSync15(path3, "r");
+    fd2 = openSync16(path3, "r");
     const st2 = fstatSync3(fd2);
     const size = st2.size;
     const fileId = `${st2.dev}:${st2.ino}:${Math.trunc(st2.birthtimeMs)}`;
@@ -77010,12 +77367,12 @@ function readTranscript(project, sessionId) {
   } catch {
     return [];
   } finally {
-    if (fd2 !== void 0) closeSync14(fd2);
+    if (fd2 !== void 0) closeSync15(fd2);
   }
 }
 function verifyIncrementalParse(path3, identityPrefix, incremental) {
   try {
-    const fresh = parseTranscript(readFileSync27(path3, "utf8"), identityPrefix);
+    const fresh = parseTranscript(readFileSync29(path3, "utf8"), identityPrefix);
     const a = JSON.stringify(incremental);
     const b = JSON.stringify(fresh);
     if (a !== b) {
@@ -77035,16 +77392,16 @@ function verifyIncrementalParse(path3, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join39(homedir16(), ".claude", "projects", project.cwdSlug);
+  return join42(homedir16(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path3 = join39(logDirOf(project), `${sessionId}.jsonl`);
+  const path3 = join42(logDirOf(project), `${sessionId}.jsonl`);
   try {
-    if (statSync17(path3).size > 0) return path3;
+    if (statSync18(path3).size > 0) return path3;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join39(stranded, `${sessionId}.jsonl`) : path3;
+  return stranded ? join42(stranded, `${sessionId}.jsonl`) : path3;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -78112,7 +78469,7 @@ function sourceForThread(project, storage, slug, backendFor) {
   }
   if (!FOREIGN_SESSION_ID_RE.test(slug)) return void 0;
   const claudePath = resolveTranscriptPath(project, slug);
-  if (existsSync17(claudePath)) {
+  if (existsSync19(claudePath)) {
     return { slug, sessionId: slug, nativeId: slug, backend: "claude", runtimeGeneration: 0, path: claudePath };
   }
   const rollout = (backendFor?.("codex") ?? defaultCodexBackend()).transcriptPath(slug);
@@ -78148,7 +78505,7 @@ function discoveredClaudeSource(project, storage, slug, expectedNativeId) {
 function fixedSnapshot(source) {
   let fd2;
   try {
-    fd2 = openSync15(source.path, "r");
+    fd2 = openSync16(source.path, "r");
     const before = fstatSync3(fd2);
     if (!Number.isSafeInteger(before.size) || before.size < 0) throw new Error("transcript is too large to page safely");
     const after = fstatSync3(fd2);
@@ -78158,7 +78515,7 @@ function fixedSnapshot(source) {
     const size = before.size;
     const path3 = source.path;
     const readRange = (from, length) => {
-      const rfd = openSync15(path3, "r");
+      const rfd = openSync16(path3, "r");
       try {
         const st2 = fstatSync3(rfd);
         if (st2.dev !== before.dev || st2.ino !== before.ino || st2.size < size) {
@@ -78174,7 +78531,7 @@ function fixedSnapshot(source) {
         }
         return filled === want ? buf : buf.subarray(0, filled);
       } finally {
-        closeSync14(rfd);
+        closeSync15(rfd);
       }
     };
     let allBytes;
@@ -78200,7 +78557,7 @@ function fixedSnapshot(source) {
     if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") return void 0;
     throw error;
   } finally {
-    if (fd2 !== void 0) closeSync14(fd2);
+    if (fd2 !== void 0) closeSync15(fd2);
   }
 }
 function projectSnapshot(snapshot) {
@@ -78384,7 +78741,7 @@ function readEarlierThreadTranscriptPage(project, storage, slug, cursor, backend
 }
 function readCodexTranscriptFile(absPath, nativeId = absPath) {
   try {
-    return parseCodexTranscript(readFileSync27(absPath, "utf8"), `codex:${nativeId}`);
+    return parseCodexTranscript(readFileSync29(absPath, "utf8"), `codex:${nativeId}`);
   } catch {
     return [];
   }
@@ -78452,7 +78809,7 @@ function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup) {
 function readTranscriptFile(absPath) {
   try {
     const pathKey = createHash15("sha256").update(absPath).digest("base64url").slice(0, 16);
-    return parseTranscript(readFileSync27(absPath, "utf8"), `claude-file:${pathKey}`);
+    return parseTranscript(readFileSync29(absPath, "utf8"), `claude-file:${pathKey}`);
   } catch {
     return [];
   }
@@ -78916,11 +79273,11 @@ var init_external_terminal = __esm({
 });
 
 // packages/server/src/background-shell-output.ts
-import { closeSync as closeSync15, fstatSync as fstatSync4, openSync as openSync16, readSync as readSync9 } from "node:fs";
+import { closeSync as closeSync16, fstatSync as fstatSync4, openSync as openSync17, readSync as readSync9 } from "node:fs";
 function readBackgroundShellOutput(path3, maxBytes = OUTPUT_TAIL_BYTES) {
   let fd2;
   try {
-    fd2 = openSync16(path3, "r");
+    fd2 = openSync17(path3, "r");
     const size = fstatSync4(fd2).size;
     const length = Math.min(size, maxBytes);
     const offset = Math.max(0, size - length);
@@ -78936,7 +79293,7 @@ function readBackgroundShellOutput(path3, maxBytes = OUTPUT_TAIL_BYTES) {
   } catch {
     return { output: "", truncated: false };
   } finally {
-    if (fd2 !== void 0) closeSync15(fd2);
+    if (fd2 !== void 0) closeSync16(fd2);
   }
 }
 function readHead2(fd2, length) {
@@ -78953,7 +79310,7 @@ function readHead2(fd2, length) {
 function backgroundShellLineCount(path3) {
   let fd2;
   try {
-    fd2 = openSync16(path3, "r");
+    fd2 = openSync17(path3, "r");
     const stat2 = fstatSync4(fd2);
     const size = stat2.size;
     let state = scans.get(path3);
@@ -79004,7 +79361,7 @@ function backgroundShellLineCount(path3) {
   } catch {
     return void 0;
   } finally {
-    if (fd2 !== void 0) closeSync15(fd2);
+    if (fd2 !== void 0) closeSync16(fd2);
   }
 }
 var OUTPUT_TAIL_BYTES, SCAN_CHUNK_BYTES, SCAN_CEILING_BYTES, SCAN_CACHE_LIMIT, FINGERPRINT_BYTES, ANSI_ESCAPE_RE, scans;
@@ -79022,15 +79379,15 @@ var init_background_shell_output = __esm({
 });
 
 // packages/server/src/frizz-md.ts
-import { execFileSync as execFileSync5 } from "node:child_process";
-import { existsSync as existsSync18, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join40 } from "node:path";
+import { execFileSync as execFileSync6 } from "node:child_process";
+import { existsSync as existsSync20, writeFileSync as writeFileSync16 } from "node:fs";
+import { join as join43 } from "node:path";
 function frizzMdPath(projectDir) {
-  return join40(projectDir, "FRIZZ.md");
+  return join43(projectDir, "FRIZZ.md");
 }
 function git2(args, cwd) {
   try {
-    return execFileSync5("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3 }).trim() || null;
+    return execFileSync6("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3 }).trim() || null;
   } catch {
     return null;
   }
@@ -79043,7 +79400,7 @@ function defaultBranch(projectDir) {
 }
 function frizzMdStatus(projectDir, storage) {
   return {
-    exists: existsSync18(frizzMdPath(projectDir)),
+    exists: existsSync20(frizzMdPath(projectDir)),
     skipped: storage.getSetting(SKIP_SETTING) !== void 0,
     defaultBranch: defaultBranch(projectDir)
   };
@@ -79051,7 +79408,7 @@ function frizzMdStatus(projectDir, storage) {
 function createFrizzMd(projectDir, answers) {
   const path3 = frizzMdPath(projectDir);
   try {
-    writeFileSync14(path3, composeFrizzMd(answers, defaultBranch(projectDir)), { encoding: "utf8", flag: "wx" });
+    writeFileSync16(path3, composeFrizzMd(answers, defaultBranch(projectDir)), { encoding: "utf8", flag: "wx" });
   } catch (error) {
     if (error.code === "EEXIST") throw new Error("This project already has a FRIZZ.md.");
     throw error;
@@ -79071,15 +79428,15 @@ var init_frizz_md2 = __esm({
 });
 
 // packages/server/src/image-header.ts
-import { closeSync as closeSync16, openSync as openSync17, readSync as readSync10, statSync as statSync18 } from "node:fs";
-import { extname } from "node:path";
+import { closeSync as closeSync17, openSync as openSync18, readSync as readSync10, statSync as statSync19 } from "node:fs";
+import { extname as extname2 } from "node:path";
 function readHead3(path3, budget) {
   let fd2;
   try {
-    const size = statSync18(path3).size;
+    const size = statSync19(path3).size;
     if (size === 0) return void 0;
     const buffer = Buffer.alloc(Math.min(size, budget));
-    fd2 = openSync17(path3, "r");
+    fd2 = openSync18(path3, "r");
     const read = readSync10(fd2, buffer, 0, buffer.length, 0);
     return read === buffer.length ? buffer : buffer.subarray(0, read);
   } catch {
@@ -79087,7 +79444,7 @@ function readHead3(path3, budget) {
   } finally {
     if (fd2 !== void 0) {
       try {
-        closeSync16(fd2);
+        closeSync17(fd2);
       } catch {
       }
     }
@@ -79180,7 +79537,7 @@ function svg(head) {
   return void 0;
 }
 function svgDeclaresColour(path3) {
-  if (extname(path3).toLowerCase() !== ".svg") return void 0;
+  if (extname2(path3).toLowerCase() !== ".svg") return void 0;
   const head = readHead3(path3, 512 * 1024);
   if (!head) return void 0;
   const source = head.toString("utf8");
@@ -79192,7 +79549,7 @@ function svgDeclaresColour(path3) {
   return false;
 }
 function imageDimensions(path3) {
-  const extension2 = extname(path3).toLowerCase();
+  const extension2 = extname2(path3).toLowerCase();
   const budget = extension2 === ".jpg" || extension2 === ".jpeg" ? JPEG_SCAN_BYTES : HEAD_BYTES2;
   const head = readHead3(path3, budget);
   if (!head) return void 0;
@@ -79454,11 +79811,11 @@ function run(argv) {
 });
 
 // packages/server/src/router.ts
-import { readFileSync as readFileSync28, statSync as statSync19 } from "node:fs";
-import { join as join41, resolve as resolve10 } from "node:path";
+import { readFileSync as readFileSync30, statSync as statSync20 } from "node:fs";
+import { join as join44, resolve as resolve10 } from "node:path";
 import { randomUUID as randomUUID17 } from "node:crypto";
-import { basename as basename9, dirname as dirname18 } from "node:path";
-import { existsSync as existsSync19, mkdirSync as mkdirSync20, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
+import { basename as basename9, dirname as dirname20 } from "node:path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync22, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 function validateGithubDispatchProfile(input, codexModels) {
   if (input.backend === "acp") return;
@@ -79632,11 +79989,11 @@ function projectCard(entry, stale) {
 function addProjectAtPath(input, home = homedir17()) {
   const typed = input.trim();
   if (!typed) throw new Error("Enter a folder path.");
-  const expanded = typed === "~" || typed.startsWith("~/") ? join41(home, typed.slice(1)) : typed;
+  const expanded = typed === "~" || typed.startsWith("~/") ? join44(home, typed.slice(1)) : typed;
   const absolute = resolve10(expanded);
   let stats;
   try {
-    stats = statSync19(absolute);
+    stats = statSync20(absolute);
   } catch {
     throw new Error(`No folder at ${absolute}`);
   }
@@ -79661,15 +80018,15 @@ function storeProjectIcon(id2, name, bytes) {
   if (!entry) throw new Error("No such project.");
   if (bytes.length === 0) throw new Error("That file is empty.");
   const path3 = customIconPath(id2, `.${extension2}`);
-  mkdirSync20(dirname18(path3), { recursive: true });
-  writeFileSync15(path3, bytes);
+  mkdirSync22(dirname20(path3), { recursive: true });
+  writeFileSync17(path3, bytes);
   if (!imageDimensions(path3)) {
-    rmSync11(path3, { force: true });
+    rmSync12(path3, { force: true });
     throw new Error("That file does not look like an image Frizz can draw.");
   }
   for (const stale of PROJECT_ICON_EXTENSIONS) {
     const other = customIconPath(id2, `.${stale}`);
-    if (other !== path3) rmSync11(other, { force: true });
+    if (other !== path3) rmSync12(other, { force: true });
   }
   const updated = setProjectIcon(id2, path3);
   if (!updated) throw new Error("No such project.");
@@ -79683,7 +80040,7 @@ function iconPicker(id2) {
 function setProjectIconFromFile(id2, file) {
   let bytes;
   try {
-    bytes = readFileSync28(file);
+    bytes = readFileSync30(file);
   } catch {
     throw new Error("That file could not be read.");
   }
@@ -79716,7 +80073,7 @@ function mergeSubAgentSteers(messages, steers) {
   return merged;
 }
 function createRouter(ctx) {
-  const frizzDir = join41(ctx.project.dir, ".frizz");
+  const frizzDir = join44(ctx.project.dir, ".frizz");
   const openRoots = openableFileRoots(ctx.project);
   function isAutoTitledSession(slug) {
     return ctx.storage.getSession(slug)?.title_auto === 1;
@@ -79824,15 +80181,24 @@ function createRouter(ctx) {
     for (const q2 of ctx.storage.listThreadQuestions(slug, { openOnly: true })) {
       const spec = parseQuestionSpec(q2.spec);
       if (!spec) continue;
-      out.push({ id: q2.id, spec, askedAt: new Date(q2.asked_at).toISOString() });
+      out.push(questionView(slug, q2.id, spec, q2.asked_at));
     }
     return out;
   }
+  function questionView(slug, id2, spec, askedAtMs) {
+    return {
+      id: id2,
+      spec,
+      askedAt: new Date(askedAtMs).toISOString(),
+      ...spec.secret ? { secretPath: secretFilePath(ctx.project.stateDir, slug, id2) } : {}
+    };
+  }
   function cancelQuestionsForAutonomy(slug) {
     const now = Date.now();
     let cancelled = 0;
     for (const q2 of ctx.storage.listThreadQuestions(slug, { openOnly: true })) {
-      if (parseQuestionSpec(q2.spec)?.danger) continue;
+      const spec = parseQuestionSpec(q2.spec);
+      if (spec?.danger || spec?.secret) continue;
       if (ctx.storage.dismissThreadQuestion(q2.id, now)) cancelled++;
     }
     return cancelled;
@@ -80170,14 +80536,14 @@ function createRouter(ctx) {
           ctx.storage.listSubAgentSteers(input.slug, input.id)
         );
         const steer = subAgentSteerable(input.slug, input.id);
-        const stop = subAgentStoppable(input.slug, input.id);
+        const stop2 = subAgentStoppable(input.slug, input.id);
         return {
           messages,
           state: info.state,
           steerable: steer.sessionId !== null,
           steerNote: steer.sessionId === null ? steer.note : null,
-          stoppable: stop.sessionId !== null,
-          stopNote: stop.sessionId === null ? stop.note : null
+          stoppable: stop2.sessionId !== null,
+          stopNote: stop2.sessionId === null ? stop2.note : null
         };
       }
     }),
@@ -80255,13 +80621,13 @@ function createRouter(ctx) {
         const info = ctx.tailer.backgroundShell?.(input.slug, input.id);
         if (!info) return { command: null, output: "", truncated: false, state: "gone", stoppable: false, stopNote: null };
         const content = info.outputFile ? readBackgroundShellOutput(info.outputFile) : { output: "", truncated: false };
-        const stop = subAgentStoppable(input.slug, input.id);
+        const stop2 = subAgentStoppable(input.slug, input.id);
         return {
           command: info.command ?? null,
           ...content,
           state: info.state,
-          stoppable: stop.sessionId !== null,
-          stopNote: stop.sessionId === null ? stop.note : null
+          stoppable: stop2.sessionId !== null,
+          stopNote: stop2.sessionId === null ? stop2.note : null
         };
       }
     }),
@@ -81295,7 +81661,7 @@ ${gapNote}` : input.message;
           throw new Error("Reopen this thread before asking a question on it");
         }
         const goal = autonomousGoal(row);
-        if (goal) {
+        if (goal && !input.questions.every((q2) => q2.secret)) {
           throw new Error(
             `This thread is running autonomously \u2014 decide it yourself and proceed. Its standing instruction is:
 
@@ -81311,7 +81677,7 @@ Say which way you went and why in your write-up, so the human can course-correct
           const id2 = `qst_${randomUUID17().replace(/-/g, "").slice(0, 12)}`;
           ctx.storage.clearThreadDone(input.slug);
           ctx.storage.askThreadQuestion({ id: id2, slug: input.slug, spec: JSON.stringify(spec), askedAtMs: now });
-          return { id: id2, spec, askedAt: new Date(now).toISOString() };
+          return questionView(input.slug, id2, spec, now);
         });
         ctx.board.refresh();
         return { registered, open: openQuestionViews(input.slug) };
@@ -81336,7 +81702,14 @@ Say which way you went and why in your write-up, so the human can course-correct
         for (const answer of input.answers) {
           const q2 = ctx.storage.getThreadQuestion(answer.questionId);
           if (!q2 || q2.thread_slug !== input.slug || q2.state !== "open") continue;
-          if (ctx.storage.answerThreadQuestion(answer.questionId, JSON.stringify(answer), now)) answered.push(answer.questionId);
+          let stored = answer;
+          if (parseQuestionSpec(q2.spec)?.secret) {
+            const value = answer.text?.trim() ?? "";
+            if (!value) continue;
+            const path3 = serveSecret(ctx.project.stateDir, input.slug, q2.id, value);
+            stored = { questionId: answer.questionId, question: answer.question, chosen: [], text: secretAnswerText(path3) };
+          }
+          if (ctx.storage.answerThreadQuestion(answer.questionId, JSON.stringify(stored), now)) answered.push(answer.questionId);
         }
         if (answered.length > 0) {
           ctx.board.refresh();
@@ -81930,11 +82303,11 @@ Say which way you went and why in your write-up, so the human can course-correct
       output: ProjectCard,
       handler: async ({ input }) => {
         for (const extension2 of PROJECT_ICON_EXTENSIONS) {
-          rmSync11(customIconPath(input.id, `.${extension2}`), { force: true });
+          rmSync12(customIconPath(input.id, `.${extension2}`), { force: true });
         }
         const updated = clearProjectIcon(input.id);
         if (!updated) throw new Error("No such project.");
-        return projectCard(updated, !existsSync19(updated.path));
+        return projectCard(updated, !existsSync21(updated.path));
       }
     }),
     /**
@@ -81975,7 +82348,7 @@ Say which way you went and why in your write-up, so the human can course-correct
         }
         const updated = renameProject(entry.id, { name: name === basename9(path3) ? null : name, slug: name });
         if (!updated) throw new Error("No such project.");
-        return projectCard(updated, !existsSync19(updated.path));
+        return projectCard(updated, !existsSync21(updated.path));
       }
     }),
     /**
@@ -82179,6 +82552,7 @@ var init_router5 = __esm({
     init_server();
     init_src();
     init_context();
+    init_secret_files();
     init_acp_agents();
     init_storage();
     init_usage_limit();
@@ -82235,144 +82609,8 @@ var init_router5 = __esm({
   }
 });
 
-// packages/server/src/local-origin.ts
-import { isIP } from "node:net";
-function publicAuthority(policy) {
-  const raw2 = policy?.publicOrigin;
-  if (!raw2) return null;
-  let url;
-  try {
-    url = new URL(raw2);
-  } catch {
-    return null;
-  }
-  if (url.origin !== raw2) return null;
-  return {
-    hostname: normalizedHostname(url.hostname),
-    port: explicitPort(url),
-    authority: url.host.toLowerCase(),
-    scheme: url.protocol === "https:" ? "https" : "http"
-  };
-}
-function acceptsHostname(hostname, policy) {
-  if (LOCAL_HOSTNAMES.has(hostname)) return true;
-  if (!policy?.exposed) return false;
-  if (isIP(hostname) !== 0) return true;
-  return (policy.allowedHosts ?? []).some((allowed) => allowed === "*" || allowed.toLowerCase() === hostname);
-}
-function oneHeader(value) {
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function normalizedHostname(hostname) {
-  const lower = hostname.toLowerCase();
-  return lower.startsWith("[") && lower.endsWith("]") ? lower.slice(1, -1) : lower;
-}
-function explicitPort(url) {
-  if (url.port) return Number(url.port);
-  return url.protocol === "https:" ? 443 : 80;
-}
-function validExpectedPort(port2) {
-  return Number.isInteger(port2) && port2 >= 1 && port2 <= 65535;
-}
-function parseLocalHttpOrigin(value, expectedPort, policy) {
-  const raw2 = oneHeader(value);
-  if (!raw2 || !validExpectedPort(expectedPort) || raw2 !== raw2.trim()) return null;
-  const declared = publicAuthority(policy);
-  if (declared && raw2 === policy?.publicOrigin) return declared;
-  let url;
-  try {
-    url = new URL(raw2);
-  } catch {
-    return null;
-  }
-  if (url.protocol !== "http:" || url.origin !== raw2) return null;
-  const hostname = normalizedHostname(url.hostname);
-  if (!acceptsHostname(hostname, policy) || explicitPort(url) !== expectedPort) return null;
-  return { hostname, port: expectedPort, authority: url.host, scheme: "http" };
-}
-function parseLocalHost(value, expectedPort, policy) {
-  const raw2 = oneHeader(value);
-  if (!raw2 || !validExpectedPort(expectedPort) || raw2 !== raw2.trim() || raw2.includes(",")) return null;
-  let url;
-  try {
-    url = new URL(`http://${raw2}`);
-  } catch {
-    return null;
-  }
-  if (url.username || url.password || url.pathname !== "/" || url.search || url.hash) return null;
-  if (url.host.toLowerCase() !== raw2.toLowerCase()) return null;
-  const hostname = normalizedHostname(url.hostname);
-  const declared = publicAuthority(policy);
-  if (declared && hostname === declared.hostname) {
-    return url.port === "" || Number(url.port) === declared.port ? declared : null;
-  }
-  if (!acceptsHostname(hostname, policy) || explicitPort(url) !== expectedPort) return null;
-  return { hostname, port: expectedPort, authority: url.host.toLowerCase(), scheme: "http" };
-}
-function hasForwardedAuthority(headers) {
-  return FORWARDED_HEADERS.some((name) => headers[name] !== void 0);
-}
-function forwardedAuthorityAllowed(headers, host, policy) {
-  if (!hasForwardedAuthority(headers)) return true;
-  const declared = publicAuthority(policy);
-  return !!declared && declared.hostname === host.hostname;
-}
-function isTrustedLocalHttpRequest(headers, expectedPort, allowMissingOrigin = false, policy) {
-  const host = parseLocalHost(headers.host, expectedPort, policy);
-  if (!host) return false;
-  if (!forwardedAuthorityAllowed(headers, host, policy)) return false;
-  if (headers.origin === void 0) return allowMissingOrigin;
-  const origin = parseLocalHttpOrigin(headers.origin, expectedPort, policy);
-  return !!origin && host.hostname === origin.hostname && host.port === origin.port;
-}
-function allowedLocalCorsOrigin(origin, expectedPort, policy) {
-  return parseLocalHttpOrigin(origin, expectedPort, policy) ? origin : void 0;
-}
-function isTrustedLocalWebSocketRequest(req, expectedPort = req.socket.localPort, policy) {
-  if (!validExpectedPort(expectedPort)) return false;
-  const headers = req.headers;
-  const host = parseLocalHost(headers.host, expectedPort, policy);
-  if (!host || !forwardedAuthorityAllowed(headers, host, policy)) return false;
-  const origin = parseLocalHttpOrigin(headers.origin, expectedPort, policy);
-  return !!origin && host.hostname === origin.hostname && host.port === origin.port;
-}
-function rejectWebSocketUpgrade(socket, status = 403, reason = "Forbidden") {
-  const body = `${reason}
-`;
-  const response = [
-    `HTTP/1.1 ${status} ${reason}`,
-    "Connection: close",
-    "Content-Type: text/plain; charset=utf-8",
-    `Content-Length: ${Buffer.byteLength(body)}`,
-    "",
-    body
-  ].join("\r\n");
-  try {
-    socket.end(response);
-  } catch {
-    try {
-      socket.destroy();
-    } catch {
-    }
-  }
-}
-var LOCAL_HOSTNAMES, FORWARDED_HEADERS;
-var init_local_origin = __esm({
-  "packages/server/src/local-origin.ts"() {
-    "use strict";
-    LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
-    FORWARDED_HEADERS = [
-      "forwarded",
-      "x-forwarded-for",
-      "x-forwarded-host",
-      "x-forwarded-port",
-      "x-forwarded-proto"
-    ];
-  }
-});
-
 // packages/server/src/compression.ts
-import { brotliCompressSync, gzipSync, constants as constants4 } from "node:zlib";
+import { brotliCompressSync, gzipSync, constants as constants5 } from "node:zlib";
 function negotiateEncoding(acceptEncoding) {
   if (!acceptEncoding) return null;
   const offers = /* @__PURE__ */ new Map();
@@ -82395,9 +82633,9 @@ function negotiateEncoding(acceptEncoding) {
 function compress(body, encoding) {
   const out = encoding === "br" ? brotliCompressSync(body, {
     params: {
-      [constants4.BROTLI_PARAM_QUALITY]: 4,
+      [constants5.BROTLI_PARAM_QUALITY]: 4,
       // Telling brotli the input size lets it size its window instead of guessing.
-      [constants4.BROTLI_PARAM_SIZE_HINT]: body.byteLength
+      [constants5.BROTLI_PARAM_SIZE_HINT]: body.byteLength
     }
   }) : gzipSync(body, { level: 6 });
   return Uint8Array.from(out);
@@ -82417,87 +82655,10 @@ var init_compression = __esm({
   }
 });
 
-// packages/server/src/local-image.ts
-import { createReadStream, realpathSync as realpathSync12, statSync as statSync20 } from "node:fs";
-import { extname as extname2, isAbsolute as isAbsolute9 } from "node:path";
-function resolveLocalImage(rawPath, range) {
-  if (rawPath) rawPath = normalizeLocalPath(rawPath);
-  if (!rawPath || !isAbsolute9(rawPath)) return { status: 400 };
-  const contentType = CONTENT_TYPE[extname2(rawPath).toLowerCase()];
-  if (!contentType) return { status: 400 };
-  let real;
-  try {
-    real = realpathSync12(rawPath);
-  } catch {
-    return { status: 404 };
-  }
-  let size;
-  try {
-    const stat2 = statSync20(real);
-    if (!stat2.isFile()) return { status: 404 };
-    size = stat2.size;
-  } catch {
-    return { status: 404 };
-  }
-  const span = range ? byteRange(range, size) : null;
-  if (span === "unsatisfiable") return { status: 416, size };
-  if (span) return { status: 206, contentType, file: real, size, start: span.start, end: span.end };
-  return { status: 200, contentType, file: real, size, start: 0, end: size - 1 };
-}
-function byteRange(header, size) {
-  const match2 = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
-  if (!match2) return null;
-  const [, first, last] = match2;
-  if (first === "" && last === "") return null;
-  if (first === "") {
-    const suffix = Number(last);
-    if (suffix === 0 || size === 0) return "unsatisfiable";
-    return { start: Math.max(size - suffix, 0), end: size - 1 };
-  }
-  const start = Number(first);
-  if (last !== "" && Number(last) < start) return null;
-  if (start >= size) return "unsatisfiable";
-  return { start, end: last === "" ? size - 1 : Math.min(Number(last), size - 1) };
-}
-function localImageHeaders(result) {
-  return {
-    "content-type": result.contentType,
-    "content-length": String(result.end - result.start + 1),
-    "accept-ranges": "bytes",
-    "cache-control": "private, max-age=60",
-    ...result.status === 206 ? { "content-range": `bytes ${result.start}-${result.end}/${result.size}` } : {}
-  };
-}
-function localImageStream(result) {
-  if (result.end < result.start) return null;
-  return createReadStream(result.file, { start: result.start, end: result.end });
-}
-var IMAGE_CONTENT_TYPE, VIDEO_CONTENT_TYPE, CONTENT_TYPE;
-var init_local_image = __esm({
-  "packages/server/src/local-image.ts"() {
-    "use strict";
-    init_local_path();
-    IMAGE_CONTENT_TYPE = {
-      ".png": "image/png",
-      ".jpg": "image/jpeg",
-      ".jpeg": "image/jpeg",
-      ".gif": "image/gif",
-      ".webp": "image/webp"
-    };
-    VIDEO_CONTENT_TYPE = {
-      ".mp4": "video/mp4",
-      ".m4v": "video/mp4",
-      ".webm": "video/webm",
-      ".mov": "video/quicktime"
-    };
-    CONTENT_TYPE = { ...IMAGE_CONTENT_TYPE, ...VIDEO_CONTENT_TYPE };
-  }
-});
-
 // packages/server/src/project-icon.ts
-import { readFileSync as readFileSync29, readdirSync as readdirSync12, realpathSync as realpathSync13, statSync as statSync21 } from "node:fs";
+import { readFileSync as readFileSync31, readdirSync as readdirSync13, realpathSync as realpathSync13, statSync as statSync21 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
-import { basename as basename10, dirname as dirname19, extname as extname3, join as join42, relative as relative2, sep as sep4 } from "node:path";
+import { basename as basename10, dirname as dirname21, extname as extname3, join as join45, relative as relative2, sep as sep4 } from "node:path";
 function normalizeStem(stem) {
   const sized = stem.toLowerCase().replace(/[@-]\d+(\.\d+)?x(\d+)?$/u, "").replace(/[-_]\d{2,4}$/u, "");
   const normalized = sized.replace(VARIANT_SUFFIX, "");
@@ -82515,11 +82676,11 @@ function sizeScore(dimensions) {
   return Math.max(0, Math.min(40, Math.round(Math.log2(edge / 24) * 8)));
 }
 function under(root, relativeDirectory) {
-  return relativeDirectory ? join42(root, relativeDirectory) : root;
+  return relativeDirectory ? join45(root, relativeDirectory) : root;
 }
 function listFiles(directory) {
   try {
-    return readdirSync12(directory, { withFileTypes: true }).filter((entry) => entry.isFile() || entry.isSymbolicLink()).map((entry) => entry.name);
+    return readdirSync13(directory, { withFileTypes: true }).filter((entry) => entry.isFile() || entry.isSymbolicLink()).map((entry) => entry.name);
   } catch {
     return [];
   }
@@ -82528,7 +82689,7 @@ function iconDirectories(root) {
   let children2;
   try {
     children2 = new Set(
-      readdirSync12(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
+      readdirSync13(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name)
     );
   } catch {
     return [root];
@@ -82537,19 +82698,19 @@ function iconDirectories(root) {
   for (const asset of ASSET_DIRECTORIES) directories.push(under(root, asset));
   for (const host of HOST_DIRECTORIES) {
     if (!children2.has(host)) continue;
-    for (const asset of ASSET_DIRECTORIES) directories.push(under(join42(root, host), asset));
+    for (const asset of ASSET_DIRECTORIES) directories.push(under(join45(root, host), asset));
   }
   for (const extra of EXTRA_DIRECTORIES) directories.push(under(root, extra));
   for (const container of WORKSPACE_CONTAINERS) {
     if (!children2.has(container)) continue;
     let members;
     try {
-      members = readdirSync12(join42(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+      members = readdirSync13(join45(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
     } catch {
       continue;
     }
     for (const member of members) {
-      for (const asset of ASSET_DIRECTORIES) directories.push(under(join42(root, container, member), asset));
+      for (const asset of ASSET_DIRECTORIES) directories.push(under(join45(root, container, member), asset));
     }
   }
   return [...new Set(directories)];
@@ -82557,13 +82718,13 @@ function iconDirectories(root) {
 function manifestIcons(manifestPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync29(manifestPath, "utf8"));
+    parsed = JSON.parse(readFileSync31(manifestPath, "utf8"));
   } catch {
     return [];
   }
   if (!Array.isArray(parsed?.icons)) return [];
-  const directory = dirname19(manifestPath);
-  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join42(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
+  const directory = dirname21(manifestPath);
+  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join45(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
 }
 function projectIconCandidates(root) {
   const projectStem = normalizeStem(basename10(root)).normalized;
@@ -82582,10 +82743,10 @@ function projectIconCandidates(root) {
     for (const name of listFiles(directory)) {
       const extension2 = extname3(name).toLowerCase();
       if (MANIFEST_NAMES.includes(name.toLowerCase())) {
-        for (const icon of manifestIcons(join42(directory, name))) {
+        for (const icon of manifestIcons(join45(directory, name))) {
           if (MEASURABLE_IMAGE_EXTENSIONS.has(extname3(icon).toLowerCase())) {
             fromManifest.add(icon);
-            files.push({ path: icon, directory: dirname19(icon) });
+            files.push({ path: icon, directory: dirname21(icon) });
           }
         }
         continue;
@@ -82593,7 +82754,7 @@ function projectIconCandidates(root) {
       if (!MEASURABLE_IMAGE_EXTENSIONS.has(extension2)) continue;
       const stem = name.slice(0, name.length - extension2.length);
       if (normalizeStem(stem).normalized === "favicon") iconHomes.add(directory);
-      files.push({ path: join42(directory, name), directory });
+      files.push({ path: join45(directory, name), directory });
       if (files.length >= MAX_CANDIDATES) break;
     }
   }
@@ -82658,7 +82819,7 @@ function resolveProjectIconResponse(id2, options = {}) {
   });
   if (!roots.some((root) => real === root || real.startsWith(root + sep4))) return { status: 404 };
   try {
-    return { status: 200, contentType, body: readFileSync29(real) };
+    return { status: 200, contentType, body: readFileSync31(real) };
   } catch {
     return { status: 404 };
   }
@@ -82770,11 +82931,11 @@ var init_project_icon = __esm({
 });
 
 // packages/server/src/local-visualization.ts
-import { readdirSync as readdirSync13, readFileSync as readFileSync30, realpathSync as realpathSync14, statSync as statSync22 } from "node:fs";
-import { join as join43, sep as sep5 } from "node:path";
+import { readdirSync as readdirSync14, readFileSync as readFileSync32, realpathSync as realpathSync14, statSync as statSync22 } from "node:fs";
+import { join as join46, sep as sep5 } from "node:path";
 function children(path3, pattern) {
   try {
-    return readdirSync13(path3, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
+    return readdirSync14(path3, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
   } catch {
     return [];
   }
@@ -82783,7 +82944,7 @@ function isUnder2(path3, root) {
   return path3 === root || path3.startsWith(root.endsWith(sep5) ? root : root + sep5);
 }
 function resolveFragment(projectDir, sessionId, file) {
-  const base = join43(projectDir, ".codex", "visualizations");
+  const base = join46(projectDir, ".codex", "visualizations");
   let projectReal;
   let baseReal;
   try {
@@ -82794,12 +82955,12 @@ function resolveFragment(projectDir, sessionId, file) {
   }
   if (!isUnder2(baseReal, projectReal)) return null;
   for (const year of children(base, YEAR_PART)) {
-    const yearDir = join43(base, year);
+    const yearDir = join46(base, year);
     for (const month of children(yearDir, DATE_PART)) {
-      const monthDir = join43(yearDir, month);
+      const monthDir = join46(yearDir, month);
       for (const day of children(monthDir, DATE_PART)) {
-        const sessionRoot = join43(baseReal, year, month, day, sessionId);
-        const candidate = join43(monthDir, day, sessionId, file);
+        const sessionRoot = join46(baseReal, year, month, day, sessionId);
+        const candidate = join46(monthDir, day, sessionId, file);
         try {
           const real = realpathSync14(candidate);
           if (isUnder2(real, sessionRoot) && statSync22(real).isFile()) return real;
@@ -82889,7 +83050,7 @@ function resolveLocalVisualization(projectDir, sessionId, file) {
   try {
     const size = statSync22(path3).size;
     if (size > MAX_FRAGMENT_BYTES) return { status: 413 };
-    fragment = readFileSync30(path3, "utf8");
+    fragment = readFileSync32(path3, "utf8");
   } catch {
     return { status: 404 };
   }
@@ -82931,9 +83092,9 @@ var init_local_visualization = __esm({
 });
 
 // packages/server/src/app.ts
-import { mkdirSync as mkdirSync21, writeFileSync as writeFileSync16 } from "node:fs";
+import { mkdirSync as mkdirSync23, writeFileSync as writeFileSync18 } from "node:fs";
 import { Readable } from "node:stream";
-import { join as join44 } from "node:path";
+import { join as join47 } from "node:path";
 import { randomUUID as randomUUID18 } from "node:crypto";
 function createApp(ctx, options = {}) {
   const app = new Hono2();
@@ -82994,8 +83155,8 @@ function createApp(ctx, options = {}) {
     const supplied = c.req.header("x-frizz-launch-token");
     if (!options.controlToken || !supplied || supplied !== options.controlToken) return c.text("Forbidden", 403);
     if (!options.requestOwnerStop) return c.text("Owner control unavailable", 503);
-    const stop = setTimeout(options.requestOwnerStop, 25);
-    stop.unref();
+    const stop2 = setTimeout(options.requestOwnerStop, 25);
+    stop2.unref();
     return c.json({ accepted: true }, 202);
   });
   app.get(frizzRoute("/local-image"), (c) => {
@@ -83040,11 +83201,11 @@ function createApp(ctx, options = {}) {
     if (typeof body.data !== "string" || body.data.length > ATTACHMENT_MAX_BASE64_CHARS) return c.json({ error: "bad payload" }, 400);
     const ext = `.${attachmentExtension(name)}`;
     const buf = Buffer.from(body.data, "base64");
-    const dir = join44(ctx.project.stateDir, "attachments");
-    mkdirSync21(dir, { recursive: true });
+    const dir = join47(ctx.project.stateDir, "attachments");
+    mkdirSync23(dir, { recursive: true });
     const base = name.replace(/\.[^.]+$/, "").replace(/[^a-zA-Z0-9_-]+/g, "-").slice(0, 40) || "file";
-    const path3 = join44(dir, `${Date.now()}-${randomUUID18().slice(0, 8)}-${base}${ext}`);
-    writeFileSync16(path3, buf);
+    const path3 = join47(dir, `${Date.now()}-${randomUUID18().slice(0, 8)}-${base}${ext}`);
+    writeFileSync18(path3, buf);
     return c.json({ path: path3 });
   });
   app.get(
@@ -83964,7 +84125,7 @@ var init_app_socket = __esm({
 
 // packages/server/src/local-file-watch.ts
 import { statSync as statSync23, watch } from "node:fs";
-import { basename as basename11, dirname as dirname20 } from "node:path";
+import { basename as basename11, dirname as dirname22 } from "node:path";
 function stampOf(path3) {
   try {
     const s = statSync23(path3, { bigint: true });
@@ -83987,7 +84148,7 @@ function watchLocalFile(path3, onChange) {
   let entry = entries.get(path3);
   if (!entry) {
     const name = basename11(path3);
-    const watcher2 = watch(dirname20(path3), { persistent: false }, (_event, changed) => {
+    const watcher2 = watch(dirname22(path3), { persistent: false }, (_event, changed) => {
       if (changed !== null && changed !== void 0 && changed.toString() !== name) return;
       const current = entries.get(path3);
       if (!current) return;
@@ -84023,10 +84184,10 @@ var init_local_file_watch = __esm({
 });
 
 // packages/server/src/boot-progress.ts
-import { mkdirSync as mkdirSync22, readFileSync as readFileSync31, renameSync as renameSync11, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
-import { basename as basename12, dirname as dirname21, join as join45 } from "node:path";
+import { mkdirSync as mkdirSync24, readFileSync as readFileSync33, renameSync as renameSync11, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
+import { basename as basename12, dirname as dirname23, join as join48 } from "node:path";
 function bootProgressPath(stateDir) {
-  return join45(stateDir, BOOT_PROGRESS_NAME);
+  return join48(stateDir, BOOT_PROGRESS_NAME);
 }
 function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   if (!stateDir) {
@@ -84046,9 +84207,9 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
     lastAt = now;
     step++;
     try {
-      mkdirSync22(dirname21(path3), { recursive: true, mode: 448 });
-      const temp = join45(dirname21(path3), `.${basename12(path3)}.${process.pid}.tmp`);
-      writeFileSync17(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
+      mkdirSync24(dirname23(path3), { recursive: true, mode: 448 });
+      const temp = join48(dirname23(path3), `.${basename12(path3)}.${process.pid}.tmp`);
+      writeFileSync19(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
 `, "utf8");
       renameSync11(temp, path3);
     } catch {
@@ -84057,7 +84218,7 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   return Object.assign(write, {
     done: () => {
       try {
-        rmSync12(path3, { force: true });
+        rmSync13(path3, { force: true });
       } catch {
       }
     }
@@ -84073,13 +84234,13 @@ var init_boot_progress = __esm({
 });
 
 // packages/server/src/runtime-lease.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync23, readdirSync as readdirSync14, readFileSync as readFileSync32, unlinkSync as unlinkSync8, writeFileSync as writeFileSync18 } from "node:fs";
-import { dirname as dirname22, join as join46 } from "node:path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync25, readdirSync as readdirSync15, readFileSync as readFileSync34, unlinkSync as unlinkSync8, writeFileSync as writeFileSync20 } from "node:fs";
+import { dirname as dirname24, join as join49 } from "node:path";
 function runtimeVersionDir(bin) {
-  let dir = dirname22(bin);
+  let dir = dirname24(bin);
   for (let step = 0; step < MAX_ASCENT; step++) {
-    if (existsSync20(join46(dir, PROVISIONED_MARKER))) return dir;
-    const parent = dirname22(dir);
+    if (existsSync22(join49(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname24(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
@@ -84097,11 +84258,11 @@ function leaseRuntime(bin, role) {
   const versionDir = runtimeVersionDir(bin);
   if (!versionDir) return () => {
   };
-  const path3 = join46(versionDir, LEASES_DIR, `${process.pid}.json`);
+  const path3 = join49(versionDir, LEASES_DIR, `${process.pid}.json`);
   try {
-    mkdirSync23(dirname22(path3), { recursive: true });
+    mkdirSync25(dirname24(path3), { recursive: true });
     const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
-    writeFileSync18(path3, JSON.stringify(lease));
+    writeFileSync20(path3, JSON.stringify(lease));
   } catch {
     return () => {
     };
@@ -84114,20 +84275,20 @@ function leaseRuntime(bin, role) {
   };
 }
 function liveRuntimeLeases(versionDir) {
-  const dir = join46(versionDir, LEASES_DIR);
+  const dir = join49(versionDir, LEASES_DIR);
   let names;
   try {
-    names = readdirSync14(dir);
+    names = readdirSync15(dir);
   } catch {
     return [];
   }
   const live = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const path3 = join46(dir, name);
+    const path3 = join49(dir, name);
     let lease;
     try {
-      lease = JSON.parse(readFileSync32(path3, "utf8"));
+      lease = JSON.parse(readFileSync34(path3, "utf8"));
     } catch {
       continue;
     }
@@ -84156,27 +84317,27 @@ var init_runtime_lease = __esm({
 // packages/server/src/runtimes.ts
 import { createHash as createHash17 } from "node:crypto";
 import {
-  chmodSync as chmodSync2,
-  closeSync as closeSync17,
-  existsSync as existsSync21,
-  mkdirSync as mkdirSync24,
-  openSync as openSync18,
-  readFileSync as readFileSync33,
-  readdirSync as readdirSync15,
+  chmodSync as chmodSync4,
+  closeSync as closeSync18,
+  existsSync as existsSync23,
+  mkdirSync as mkdirSync26,
+  openSync as openSync19,
+  readFileSync as readFileSync35,
+  readdirSync as readdirSync16,
   renameSync as renameSync12,
-  rmSync as rmSync13,
+  rmSync as rmSync14,
   statSync as statSync24,
-  writeFileSync as writeFileSync19,
-  writeSync as writeSync2
+  writeFileSync as writeFileSync21,
+  writeSync as writeSync3
 } from "node:fs";
-import { dirname as dirname23, isAbsolute as isAbsolute10, join as join47, normalize, relative as relative3, sep as sep6 } from "node:path";
+import { dirname as dirname25, isAbsolute as isAbsolute10, join as join50, normalize, relative as relative3, sep as sep6 } from "node:path";
 import { Readable as Readable2, Transform, Writable as Writable4 } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGunzip } from "node:zlib";
 function runtimesRoot(env = process.env) {
   const override = env[RUNTIMES_DIR_ENV];
   if (override && isAbsolute10(override)) return override;
-  return join47(frizzRoots().cache, "runtimes");
+  return join50(frizzRoots().cache, "runtimes");
 }
 function isMusl() {
   if (process.platform !== "linux") return false;
@@ -84193,16 +84354,16 @@ function runtimeCoordinates(backend, platform3 = process.platform, arch = proces
   return { pkg: "@openai/codex", packageVersion: `${CODEX_VERSION}-${platform3}-${arch}`, label: CODEX_VERSION, binary: `codex${exe2}` };
 }
 function provisionedBinary(backend, root, label) {
-  const dir = join47(root, backend, label);
+  const dir = join50(root, backend, label);
   let marker;
   try {
-    marker = JSON.parse(readFileSync33(join47(dir, MARKER), "utf8"));
+    marker = JSON.parse(readFileSync35(join50(dir, MARKER), "utf8"));
   } catch {
     return void 0;
   }
   if (typeof marker.binary !== "string" || marker.label !== label) return void 0;
-  const bin = join47(dir, marker.binary);
-  return existsSync21(bin) ? bin : void 0;
+  const bin = join50(dir, marker.binary);
+  return existsSync23(bin) ? bin : void 0;
 }
 function octal(buffer, offset, length) {
   const text2 = buffer.toString("latin1", offset, offset + length).replace(/\0.*$/su, "").trim();
@@ -84216,26 +84377,26 @@ function safeEntryPath(dest, name) {
   if (parts.length < 2) return void 0;
   const rel = normalize(parts.slice(1).join(sep6));
   if (isAbsolute10(rel) || rel === ".." || rel.startsWith(`..${sep6}`)) return void 0;
-  const full = join47(dest, rel);
+  const full = join50(dest, rel);
   const back = relative3(dest, full);
   if (back.startsWith("..") || isAbsolute10(back)) return void 0;
   return full;
 }
 function locateBinary(dir, backend, binary) {
   if (backend === "claude") {
-    const direct = join47(dir, binary);
-    return existsSync21(direct) ? direct : void 0;
+    const direct = join50(dir, binary);
+    return existsSync23(direct) ? direct : void 0;
   }
-  const vendor = join47(dir, "vendor");
+  const vendor = join50(dir, "vendor");
   let triples;
   try {
-    triples = readdirSync15(vendor);
+    triples = readdirSync16(vendor);
   } catch {
     return void 0;
   }
   for (const triple of triples) {
-    const candidate = join47(vendor, triple, "bin", binary);
-    if (existsSync21(candidate)) return candidate;
+    const candidate = join50(vendor, triple, "bin", binary);
+    if (existsSync23(candidate)) return candidate;
   }
   return void 0;
 }
@@ -84250,12 +84411,12 @@ async function provisionRuntime(backend, options) {
   const registry = options.registry ?? REGISTRY;
   const progress = options.onProgress ?? (() => {
   });
-  const backendDir = join47(root, backend);
-  const finalDir = join47(backendDir, coordinates.label);
-  const partial = join47(backendDir, `.partial-${coordinates.label}-${process.pid}`);
-  mkdirSync24(backendDir, { recursive: true });
-  rmSync13(partial, { recursive: true, force: true });
-  mkdirSync24(partial);
+  const backendDir = join50(root, backend);
+  const finalDir = join50(backendDir, coordinates.label);
+  const partial = join50(backendDir, `.partial-${coordinates.label}-${process.pid}`);
+  mkdirSync26(backendDir, { recursive: true });
+  rmSync14(partial, { recursive: true, force: true });
+  mkdirSync26(partial);
   try {
     const manifestUrl = `${registry}/${coordinates.pkg.replace("/", "%2F")}/${coordinates.packageVersion}`;
     progress(`resolving ${coordinates.pkg}@${coordinates.packageVersion}`);
@@ -84289,7 +84450,7 @@ async function provisionRuntime(backend, options) {
     if (digest !== integrity) throw new Error(`integrity mismatch for ${tarball}: expected ${integrity}, got ${digest}`);
     const bin = locateBinary(partial, backend, coordinates.binary);
     if (!bin) throw new Error(`${coordinates.pkg}@${coordinates.packageVersion} unpacked without a ${coordinates.binary} binary`);
-    if (process.platform !== "win32") chmodSync2(bin, 493);
+    if (process.platform !== "win32") chmodSync4(bin, 493);
     const marker = {
       backend,
       label: coordinates.label,
@@ -84299,7 +84460,7 @@ async function provisionRuntime(backend, options) {
       binary: relative3(partial, bin),
       at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    writeFileSync19(join47(partial, MARKER), `${JSON.stringify(marker, null, 2)}
+    writeFileSync21(join50(partial, MARKER), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
     const rename2 = options.rename ?? renameSync12;
     try {
@@ -84308,36 +84469,36 @@ async function provisionRuntime(backend, options) {
           rename2(partial, finalDir);
           break;
         } catch (err) {
-          if (attempt >= RENAME_ATTEMPTS || !TRANSIENT_HANDLE_CODES.has(errorCode4(err) ?? "") || existsSync21(finalDir)) throw err;
+          if (attempt >= RENAME_ATTEMPTS || !TRANSIENT_HANDLE_CODES.has(errorCode4(err) ?? "") || existsSync23(finalDir)) throw err;
           await new Promise((resolve13) => setTimeout(resolve13, options.retryDelayMs ?? RENAME_RETRY_DELAY_MS));
         }
       }
     } catch (err) {
       const theirs = provisionedBinary(backend, root, coordinates.label);
       if (!theirs) throw err;
-      rmSync13(partial, { recursive: true, force: true });
+      rmSync14(partial, { recursive: true, force: true });
       return { bin: theirs, label: coordinates.label, fetched: false };
     }
     progress("ready");
-    return { bin: join47(finalDir, marker.binary), label: coordinates.label, fetched: true };
+    return { bin: join50(finalDir, marker.binary), label: coordinates.label, fetched: true };
   } catch (err) {
-    rmSync13(partial, { recursive: true, force: true });
+    rmSync14(partial, { recursive: true, force: true });
     throw err;
   }
 }
 function sweepRuntimes(backend, root, keepLabel, now = Date.now(), deps = {}) {
   const rm2 = deps.rm ?? defaultSweepRm;
-  const backendDir = join47(root, backend);
+  const backendDir = join50(root, backend);
   let entries2;
   try {
-    entries2 = readdirSync15(backendDir);
+    entries2 = readdirSync16(backendDir);
   } catch {
     return { removed: [], kept: [] };
   }
   const sweep = { removed: [], kept: [] };
   for (const entry of entries2) {
     if (entry === keepLabel) continue;
-    const full = join47(backendDir, entry);
+    const full = join50(backendDir, entry);
     if (entry.startsWith(".partial-")) {
       try {
         if (now - statSync24(full).mtimeMs < 24 * 60 * 60 * 1e3) continue;
@@ -84463,7 +84624,7 @@ var init_runtimes = __esm({
         }
       }
       _final(callback) {
-        if (this.fd !== void 0) closeSync17(this.fd);
+        if (this.fd !== void 0) closeSync18(this.fd);
         this.fd = void 0;
         callback(this.remaining > 0 ? new Error("tarball ended inside a file entry") : null);
       }
@@ -84520,7 +84681,7 @@ var init_runtimes = __esm({
             return;
           case "5": {
             const dir = safeEntryPath(this.dest, name);
-            if (dir) mkdirSync24(dir, { recursive: true });
+            if (dir) mkdirSync26(dir, { recursive: true });
             return;
           }
           case "0":
@@ -84528,8 +84689,8 @@ var init_runtimes = __esm({
           case "7": {
             const file = safeEntryPath(this.dest, name);
             if (!file) return;
-            mkdirSync24(dirname23(file), { recursive: true });
-            this.fd = openSync18(file, "w", octal(header, 100, 8) & 511 || 420);
+            mkdirSync26(dirname25(file), { recursive: true });
+            this.fd = openSync19(file, "w", octal(header, 100, 8) & 511 || 420);
             this.written.push(file);
             return;
           }
@@ -84538,13 +84699,13 @@ var init_runtimes = __esm({
         }
       }
       sink(bytes) {
-        if (this.fd !== void 0) writeSync2(this.fd, bytes);
+        if (this.fd !== void 0) writeSync3(this.fd, bytes);
         else if (this.nameBuffer) this.nameBuffer.push(Buffer.from(bytes));
         else if (this.paxBuffer) this.paxBuffer.push(Buffer.from(bytes));
       }
       finishEntry() {
         if (this.fd !== void 0) {
-          closeSync17(this.fd);
+          closeSync18(this.fd);
           this.fd = void 0;
         }
         if (this.nameBuffer) {
@@ -84572,7 +84733,7 @@ var init_runtimes = __esm({
     RENAME_RETRY_DELAY_MS = 200;
     TRANSIENT_HANDLE_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
     errorCode4 = (err) => err?.code;
-    defaultSweepRm = (path3) => rmSync13(path3, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
+    defaultSweepRm = (path3) => rmSync14(path3, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
   }
 });
 
@@ -85108,18 +85269,18 @@ var init_legacy_project_db = __esm({
 });
 
 // packages/server/src/frizz-db.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync25, readdirSync as readdirSync16, renameSync as renameSync13, statSync as statSync25 } from "node:fs";
-import { basename as basename13, dirname as dirname24, join as join48 } from "node:path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync27, readdirSync as readdirSync17, renameSync as renameSync13, statSync as statSync25 } from "node:fs";
+import { basename as basename13, dirname as dirname26, join as join51 } from "node:path";
 function frizzDatabaseLocation(options) {
   if (options.stateDir !== void 0) {
-    const projectsDir = dirname24(options.stateDir);
+    const projectsDir = dirname26(options.stateDir);
     if (basename13(projectsDir) === "projects") {
-      return { path: options.path ?? join48(dirname24(projectsDir), "ui.db"), projectsDir };
+      return { path: options.path ?? join51(dirname26(projectsDir), "ui.db"), projectsDir };
     }
-    return { path: options.path ?? join48(options.stateDir, "ui.db"), projectsDir: void 0 };
+    return { path: options.path ?? join51(options.stateDir, "ui.db"), projectsDir: void 0 };
   }
   const data = options.home ? frizzPaths({ home: options.home }).data : frizzRoots().data;
-  return { path: options.path ?? join48(data, "ui.db"), projectsDir: join48(data, "projects") };
+  return { path: options.path ?? join51(data, "ui.db"), projectsDir: join51(data, "projects") };
 }
 function ensureFrizzSchema(db2) {
   db2.exec(`
@@ -85138,7 +85299,7 @@ function ensureFrizzSchema(db2) {
 }
 function openFrizzDatabase(options = {}) {
   const { path: path3, projectsDir } = frizzDatabaseLocation(options);
-  mkdirSync25(dirname24(path3), { recursive: true });
+  mkdirSync27(dirname26(path3), { recursive: true });
   const db2 = new sqlite_default(path3);
   db2.pragma("busy_timeout = 5000");
   db2.pragma("journal_mode = WAL");
@@ -85150,10 +85311,10 @@ function openFrizzDatabase(options = {}) {
     );
     for (const projectId of retiredLegacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const dir = join48(projectsDir, projectId);
+      const dir = join51(projectsDir, projectId);
       try {
-        renameSync13(join48(dir, "ui.db.imported"), join48(dir, "ui.db"));
-        db2.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join48(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
+        renameSync13(join51(dir, "ui.db.imported"), join51(dir, "ui.db"));
+        db2.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join51(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
         alreadyImported.add(projectId);
         log.info("frizz-db", `${projectId}: restored ui.db.imported to ui.db and recorded it as imported`);
       } catch (error) {
@@ -85163,7 +85324,7 @@ function openFrizzDatabase(options = {}) {
     }
     for (const projectId of legacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const legacyPath = join48(projectsDir, projectId, "ui.db");
+      const legacyPath = join51(projectsDir, projectId, "ui.db");
       try {
         const rows = importLegacyProject(db2, projectId, legacyPath);
         imported.push({ projectId, rows });
@@ -85193,10 +85354,10 @@ function openFrizzDatabase(options = {}) {
   };
 }
 function projectIdsWithFile(projectsDir, file) {
-  if (!existsSync22(projectsDir)) return [];
-  return readdirSync16(projectsDir).filter((name) => {
+  if (!existsSync24(projectsDir)) return [];
+  return readdirSync17(projectsDir).filter((name) => {
     try {
-      return statSync25(join48(projectsDir, name, file)).isFile();
+      return statSync25(join51(projectsDir, name, file)).isFile();
     } catch {
       return false;
     }
@@ -85206,7 +85367,7 @@ function legacyProjectIds(projectsDir) {
   return projectIdsWithFile(projectsDir, "ui.db");
 }
 function retiredLegacyProjectIds(projectsDir) {
-  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id2) => !existsSync22(join48(projectsDir, id2, "ui.db")));
+  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id2) => !existsSync24(join51(projectsDir, id2, "ui.db")));
 }
 function tableColumns(db2, schema, table) {
   return db2.prepare(`PRAGMA ${schema}.table_info(${table})`).all().map((c) => c.name);
@@ -85360,9 +85521,9 @@ var init_tenant_prime = __esm({
 });
 
 // packages/server/src/project-teardown.ts
-import { rmSync as rmSync14 } from "node:fs";
+import { rmSync as rmSync15 } from "node:fs";
 import { homedir as homedir19 } from "node:os";
-import { dirname as dirname25, resolve as resolve11 } from "node:path";
+import { dirname as dirname27, resolve as resolve11 } from "node:path";
 async function stopProjectWorkers(ctx) {
   let stopped = 0;
   for (const row of ctx.storage.allSessions()) {
@@ -85382,10 +85543,10 @@ function deleteProjectState(projectId, home = homedir19()) {
   if (!/^[\w.-]+$/u.test(projectId) || projectId === "." || projectId === "..") {
     throw new Error(`Refusing to delete state for a malformed project id: ${projectId}`);
   }
-  if (dirname25(resolve11(target)) !== resolve11(dirname25(projectStateDir("x", home)))) {
+  if (dirname27(resolve11(target)) !== resolve11(dirname27(projectStateDir("x", home)))) {
     throw new Error(`Refusing to delete ${target} \u2014 it is not a project state directory`);
   }
-  rmSync14(target, { recursive: true, force: true });
+  rmSync15(target, { recursive: true, force: true });
 }
 var init_project_teardown = __esm({
   "packages/server/src/project-teardown.ts"() {
@@ -85411,11 +85572,11 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync34, existsSync as existsSync23, statSync as statSync26 } from "node:fs";
-import { dirname as dirname26, join as join49, resolve as resolve12, extname as extname4, posix as posix2, sep as sep7 } from "node:path";
+import { readFileSync as readFileSync36, existsSync as existsSync25, statSync as statSync26 } from "node:fs";
+import { dirname as dirname28, join as join52, resolve as resolve12, extname as extname4, posix as posix2, sep as sep7 } from "node:path";
 function readServerAddressHolder(path3) {
   try {
-    const value = JSON.parse(readFileSync34(path3, "utf8"));
+    const value = JSON.parse(readFileSync36(path3, "utf8"));
     if (typeof value?.pid !== "number") return void 0;
     return { pid: value.pid, port: typeof value.port === "number" ? value.port : -1 };
   } catch {
@@ -85540,12 +85701,12 @@ function staticIsFresh(req, etag, mtimeMs) {
 }
 function serveStatic(distDir, req, res) {
   const rel = posix2.normalize((req.url ?? "/").split("?")[0].replace(/\\/g, "/")).replace(/^(\.\.[/\\])+/, "");
-  let file = join49(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir + sep7)) file = join49(distDir, "index.html");
-  if (!existsSync23(file)) file = join49(distDir, "index.html");
+  let file = join52(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir + sep7)) file = join52(distDir, "index.html");
+  if (!existsSync25(file)) file = join52(distDir, "index.html");
   try {
     const stats = statSync26(file);
-    const cacheControl = file.startsWith(join49(distDir, "assets") + sep7) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
+    const cacheControl = file.startsWith(join52(distDir, "assets") + sep7) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
     const etag = `"${stats.size.toString(16)}-${Math.trunc(stats.mtimeMs).toString(16)}"`;
     const headers = {
       "content-type": MIME[extname4(file)] ?? "application/octet-stream",
@@ -85561,7 +85722,7 @@ function serveStatic(distDir, req, res) {
       res.end();
       return;
     }
-    let body = readFileSync34(file);
+    let body = readFileSync36(file);
     const accept = req.headers["accept-encoding"];
     const encoding = negotiateEncoding(Array.isArray(accept) ? accept.join(",") : accept);
     if (encoding && shouldCompress(new Headers({ "content-type": headers["content-type"] }), body.byteLength)) {
@@ -85818,7 +85979,7 @@ async function startServer(opts = {}) {
       if (statusPath && statusIdentity) runtime.removeStatus(statusPath, statusIdentity);
       if (statusPath && statusIdentity) {
         try {
-          runtime.removeStatus(serverAddressPathForStateDir(dirname26(statusPath)), statusIdentity);
+          runtime.removeStatus(serverAddressPathForStateDir(dirname28(statusPath)), statusIdentity);
         } catch {
         }
       }
@@ -85950,7 +86111,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve12(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve12(opts.webDistDir) : join49(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve12(opts.webDistDir) : join52(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -86028,7 +86189,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync34(join49(webRoot, "index.html"), "utf8");
+            const html = readFileSync36(join52(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -86040,7 +86201,7 @@ async function startServer(opts = {}) {
         });
         return;
       }
-      if (existsSync23(distDir)) {
+      if (existsSync25(distDir)) {
         serveStatic(distDir, req, res);
         return;
       }
@@ -86234,7 +86395,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join49(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join52(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -86257,8 +86418,316 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
-import { existsSync as existsSync24 } from "node:fs";
-import { join as join50 } from "node:path";
+import { existsSync as existsSync26 } from "node:fs";
+import { join as join53 } from "node:path";
+
+// packages/server/src/access-codes.ts
+import { randomBytes, timingSafeEqual, createHmac } from "node:crypto";
+import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname6, join as join9 } from "node:path";
+var DEFAULT_CODE_TTL_MS = 5 * 6e4;
+var DEFAULT_SESSION_TTL_MS = 30 * 24 * 60 * 6e4;
+var SESSION_EPOCH = 1;
+var SESSION_KEY_FILE = "session-key";
+var SESSION_EPOCH_FILE = "session-epoch";
+function writeSessionKey(path3, key) {
+  mkdirSync7(dirname6(path3), { recursive: true });
+  writeFileSync6(path3, key, { mode: 384 });
+  try {
+    chmodSync(path3, 384);
+  } catch {
+  }
+}
+function rotateSessionKey(stateDir) {
+  const key = randomBytes(32);
+  writeSessionKey(join9(stateDir, SESSION_KEY_FILE), key);
+  return key;
+}
+function readSessionEpoch(stateDir) {
+  try {
+    const parsed = JSON.parse(readFileSync6(join9(stateDir, SESSION_EPOCH_FILE), "utf8"));
+    return Number.isInteger(parsed?.epoch) && parsed.epoch >= 0 ? parsed.epoch : 0;
+  } catch {
+    return 0;
+  }
+}
+function advanceSessionEpoch(stateDir, epoch = SESSION_EPOCH) {
+  const from = readSessionEpoch(stateDir);
+  if (from >= epoch) return { advanced: false, epoch: from };
+  const keyPath = join9(stateDir, SESSION_KEY_FILE);
+  const rotatedKey = existsSync4(keyPath);
+  if (rotatedKey) rotateSessionKey(stateDir);
+  mkdirSync7(stateDir, { recursive: true });
+  writeFileSync6(
+    join9(stateDir, SESSION_EPOCH_FILE),
+    JSON.stringify({ epoch, advancedAt: (/* @__PURE__ */ new Date()).toISOString() }),
+    { mode: 384 }
+  );
+  return { advanced: true, from, to: epoch, rotatedKey };
+}
+function sessionEpochLogLine(advance, signedOut) {
+  if (!advance.advanced || !advance.rotatedKey) return null;
+  const count = signedOut === null ? "an unknown number of" : String(signedOut);
+  return `session epoch ${advance.from} -> ${advance.to}: rotated the session key and signed out ${count} recorded remote device(s); every older remote session is refused`;
+}
+
+// packages/server/src/session-epoch-child.ts
+import { readFileSync as readFileSync7 } from "node:fs";
+import { join as join10 } from "node:path";
+
+// packages/server/src/restart-supervisor.ts
+init_local_origin();
+init_local_image();
+
+// packages/server/src/supervisor-pages.ts
+var BASE_STYLE = `
+*,*::before,*::after{box-sizing:border-box}
+:root{
+  color-scheme:dark;
+  --bg:#0d0e10;--panel:#131519;--panel-2:#181b20;
+  --border:#26282d;--border-strong:#33363c;--control-border:#26282d;--control-strong:#33363c;
+  --fg:#e6e7e9;--muted:#8b8f96;--accent:#e8b923;--danger:#fca5a5;
+  --focus-border:color-mix(in srgb,var(--accent) 55%,transparent);--focus-ring:color-mix(in srgb,var(--accent) 22%,transparent);
+  --sans:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
+  --mono:ui-monospace,"JetBrains Mono","SF Mono","Cascadia Mono",Menlo,Consolas,monospace;
+  --ease:cubic-bezier(0,0,.2,1);
+}
+:root[data-theme=light]{
+  color-scheme:light;
+  --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
+  --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
+  --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
+  --focus-border:#416896;--focus-ring:#416896;
+}
+@media(prefers-color-scheme:light){
+  :root:not([data-theme]){
+    color-scheme:light;
+    --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
+    --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
+    --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
+    --focus-border:#416896;--focus-ring:#416896;
+  }
+}
+html,body{background:var(--bg)}
+body{
+  margin:0;min-height:100vh;min-height:100dvh;
+  display:flex;align-items:center;justify-content:center;padding:24px;
+  color:var(--fg);font-family:var(--sans);font-size:12.5px;line-height:1.55;
+  -webkit-font-smoothing:antialiased;
+}
+main{width:100%;max-width:28rem;padding:18px;border:1px solid var(--border-strong);border-radius:12px;background:var(--panel-2)}
+h1{margin:0;display:flex;align-items:baseline;gap:7px;font-size:14px;font-weight:600;letter-spacing:-.01em;line-height:1.4}
+p{margin:0;text-wrap:pretty}
+.detail{margin-top:7px;color:color-mix(in srgb,var(--fg) 88%,transparent)}
+.note{margin-top:12px;padding-top:11px;border-top:1px solid var(--border);color:var(--muted);font-size:11.5px;line-height:1.6}
+code{font-family:var(--mono);font-size:.92em;padding:.1em .35em;border-radius:4px;background:var(--panel);border:1px solid var(--border);white-space:nowrap}
+[hidden]{display:none!important}
+`.trim();
+var RECOVERY_STYLE = `
+.actions{margin-top:14px;display:flex;flex-wrap:wrap;gap:8px}
+/* ErrorBoundary's ACTION_CLASS, one size up for a page that is alone in a viewport. */
+.btn{
+  appearance:none;display:inline-flex;align-items:center;
+  border:1px solid var(--control-border);border-radius:6px;background:transparent;
+  padding:5px 10px;font:inherit;font-size:11.5px;color:color-mix(in srgb,var(--fg) 90%,transparent);
+  cursor:pointer;text-decoration:none;
+  transition:background-color 120ms var(--ease),border-color 120ms var(--ease),color 120ms var(--ease);
+}
+.btn:hover{background:var(--panel);border-color:var(--control-strong);color:var(--fg)}
+.btn:focus-visible{outline:none;border-color:var(--focus-border);box-shadow:0 0 0 2px var(--focus-ring)}
+.btn:disabled{opacity:.5;pointer-events:none}
+/* min-height holds the slot open while it is LIVE, so a changing status line never nudges the card;
+   :empty collapses it when there is nothing live to say, so a halted card has no trailing gutter. */
+.probe{margin-top:12px;font-family:var(--mono);font-size:11px;line-height:1.5;color:var(--muted);min-height:1.5em}
+.probe:empty{margin-top:0;min-height:0}
+/* RestartFailureNotice's block, at this altitude: a supervisor \`message\` is raw build output, and it
+   reads as what it is \u2014 a terminal excerpt \u2014 only inside a scrolling mono box. */
+.log{
+  margin-top:10px;max-height:16rem;overflow:auto;white-space:pre-wrap;overflow-wrap:break-word;
+  border:1px solid var(--border);border-radius:6px;background:var(--panel);padding:8px 10px;
+  font-family:var(--mono);font-size:11px;line-height:1.6;color:color-mix(in srgb,var(--fg) 70%,transparent);
+}
+
+/* THE LIVE DOT, and it is the app's own \`.frizz-live-dot\` \u2014 same 6px, same 28%/14% halo, same 1.25s
+   cadence \u2014 because it means the same thing here that it means there: work is in flight.
+
+   Alignment is an INK problem. A baseline-aligned flex item with no text of its own contributes its
+   BORDER-BOX BOTTOM as the baseline, so the dot's ink centre lands 3px above it while the cap band's
+   centre sits 0.5cap above it. \`cap\` is the resolved font's own cap height, so the correction holds
+   at any size, with nothing to re-measure when the type scale moves. The em spelling is the fallback for a browser without the unit (.35em ~= 0.5 x a
+   0.7em cap) and is overwritten wherever \`cap\` parses. */
+.dot{
+  width:6px;height:6px;flex:0 0 auto;border-radius:9999px;background:var(--accent);
+  box-shadow:0 0 0 1px color-mix(in srgb,var(--accent) 28%,transparent);
+  animation:frizz-live-pulse 1.25s ease-in-out infinite;
+  transform:translateY(calc(3px - .35em));
+  transform:translateY(calc(3px - .5cap));
+}
+.dot[data-state=idle]{animation:none;background:var(--muted);box-shadow:none}
+.dot[data-state=bad]{animation:none;background:var(--danger);box-shadow:0 0 0 1px color-mix(in srgb,var(--danger) 28%,transparent)}
+@keyframes frizz-live-pulse{50%{opacity:.62;box-shadow:0 0 0 2px color-mix(in srgb,var(--accent) 14%,transparent)}}
+@media (prefers-reduced-motion:reduce){
+  .dot{animation:none;background:transparent;border:2px solid var(--accent);box-shadow:none}
+  .dot[data-state=idle]{border-color:var(--muted)}
+  .dot[data-state=bad]{border-color:var(--danger);background:transparent}
+}
+
+/* The app's \`.shimmer-text\`: a highlight sweeping muted text is how this product says "working", and
+   the probe line is the only thing on the page that is. */
+.probe[data-live=yes]{
+  color:transparent;
+  background:linear-gradient(90deg,var(--muted) 0%,var(--muted) 35%,var(--fg) 50%,var(--muted) 65%,var(--muted) 100%) 0 0/200% 100%;
+  -webkit-background-clip:text;background-clip:text;
+  animation:frizz-shimmer 2.2s linear infinite;
+}
+@keyframes frizz-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
+@media (prefers-reduced-motion:reduce){
+  .probe[data-live=yes]{animation:none;background:none;color:var(--muted)}
+}
+`.trim();
+var RECOVERY_SCRIPT = `
+(function(){
+  var target=document.body.dataset.target||"/"
+  var heading=document.getElementById("heading")
+  var detail=document.getElementById("detail")
+  var probe=document.getElementById("probe")
+  var log=document.getElementById("log")
+  var dot=document.getElementById("dot")
+  var restart=document.getElementById("restart")
+  var BUDGET=120000,MIN=600,MAX=4000,GROWTH=1.4
+  var delay=MIN,deadline=Date.now()+BUDGET,timer=0,stopped=false,busy=false,told=""
+
+  function say(text,live){probe.textContent=text;probe.setAttribute("data-live",live?"yes":"no")}
+  function halt(text,bad){stopped=true;clearTimeout(timer);dot.setAttribute("data-state",bad?"bad":"idle");say(text,false)}
+  function showLog(message){if(message){log.textContent=message;log.hidden=false}else{log.hidden=true}}
+  function resume(){stopped=false;busy=false;delay=MIN;deadline=Date.now()+BUDGET;dot.removeAttribute("data-state");clearTimeout(timer);timer=setTimeout(tick,0)}
+
+  // 503 is this proxy's own "no child". Every other answer \u2014 200, 404, even a 500 from the app \u2014 means
+  // something is listening again, and the reader's own URL is the right thing to ask.
+  function alive(){
+    return fetch(target,{method:"HEAD",cache:"no-store",credentials:"same-origin"})
+      .then(function(r){return r.status!==503}).catch(function(){return false})
+  }
+  function readStatus(){
+    return fetch("/_frizz/control/status",{cache:"no-store",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.ok?r.json():null})
+      .then(function(b){return b&&b.protocol===1?b:null}).catch(function(){return null})
+  }
+
+  // An unreachable launcher leaves the server-rendered copy alone: it is already right for the case
+  // that rendered it, and guessing over it would be worse than saying nothing.
+  function narrate(status){
+    if(!status||status.state===told)return
+    told=status.state
+    if(status.state==="failed"){
+      heading.textContent="Frizz did not restart"
+      // Not a second copy of the note below it \u2014 a lead-in to the log, which is the next thing down.
+      detail.textContent="The launcher could not bring the application server back, and reported this:"
+      showLog(status.message||"The launcher gave no reason.")
+      halt("",true)
+      return
+    }
+    showLog("")
+    if(status.state==="restarting"){
+      heading.textContent="Frizz is restarting"
+      detail.textContent="The application server is coming back up."
+    }
+  }
+
+  function tick(){
+    if(stopped||busy)return
+    // A hidden tab neither polls nor spends its budget; visibilitychange starts the loop again.
+    if(document.hidden)return
+    alive().then(function(up){
+      if(up){say("Frizz is back. Reloading.",true);location.replace(target);return}
+      return readStatus().then(function(status){
+        narrate(status)
+        if(stopped)return
+        if(Date.now()>deadline){halt("No answer after 2m. This page stopped checking.",false);return}
+        delay=Math.min(MAX,delay*GROWTH)
+        say("Waiting for Frizz",true)
+        timer=setTimeout(tick,delay)
+      })
+    })
+  }
+
+  document.addEventListener("visibilitychange",function(){
+    if(document.hidden||stopped||busy)return
+    resume()
+  })
+
+  restart.addEventListener("click",function(){
+    if(busy)return
+    busy=true;stopped=false;told="";clearTimeout(timer)
+    restart.disabled=true;restart.textContent="Restarting"
+    dot.removeAttribute("data-state");showLog("");say("Restarting Frizz",true)
+    fetch("/_frizz/control/restart",{method:"POST",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.json().catch(function(){return null}).then(function(b){return{ok:r.ok,status:r.status,body:b}})})
+      .catch(function(){return{ok:false,status:0,body:null}})
+      .then(function(r){
+        restart.disabled=false;restart.textContent="Restart Frizz";busy=false
+        if(!r.ok){
+          heading.textContent="Frizz did not restart"
+          detail.textContent="The launcher could not bring the application server back, and reported this:"
+          showLog((r.body&&r.body.message)||("The launcher refused the restart ("+(r.status||"no response")+")."))
+          halt("",true)
+          return
+        }
+        // Accepted. The probe, not this response, decides whether the child is actually back.
+        resume()
+      })
+  })
+
+  say("Waiting for Frizz",true)
+  tick()
+})()
+`.trim();
+
+// packages/server/src/restart-supervisor.ts
+init_src();
+var SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
+var SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
+var SUPERVISOR_UPDATE_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/update-restart`;
+var SUPERVISOR_STATUS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/status`;
+var SUPERVISOR_ACCESS_CODE_PATH = `${SUPERVISOR_CONTROL_PREFIX}/access-code`;
+var SUPERVISOR_SESSIONS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sessions`;
+var SUPERVISOR_SIGN_OUT_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sign-out`;
+var LOCAL_IMAGE_PATH = new RegExp(`^${FRIZZ_ROUTE_PREFIX}(?:/[^/]+)?/local-image$`);
+
+// packages/server/src/session-epoch-child.ts
+async function signOutOlderSessionEpoch(options) {
+  const advance = advanceSessionEpoch(options.stateDir, options.epoch ?? SESSION_EPOCH);
+  if (!advance.advanced || !advance.rotatedKey) return { advance, signedOut: 0 };
+  const port2 = supervisorPort(options.stateDir, options.supervisorPid);
+  if (port2 === void 0) return { advance, signedOut: null };
+  try {
+    const response = await (options.fetcher ?? fetch)(`http://127.0.0.1:${port2}${SUPERVISOR_SESSIONS_PATH}`, {
+      method: "POST",
+      // Node's fetch sends no Origin, and the control plane wants one on a POST: name the loopback
+      // authority, as `frizz --sign-out` does.
+      headers: { origin: `http://127.0.0.1:${port2}`, "content-type": "application/json" },
+      body: JSON.stringify({ all: true }),
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (response.status === 409) return { advance, signedOut: 0 };
+    if (!response.ok) return { advance, signedOut: null };
+    const body = await response.json().catch(() => void 0);
+    return { advance, signedOut: typeof body?.signedOut === "number" ? body.signedOut : null };
+  } catch {
+    return { advance, signedOut: null };
+  }
+}
+function supervisorPort(stateDir, supervisorPid) {
+  try {
+    const status = JSON.parse(readFileSync7(join10(stateDir, "dev-supervisor.lock"), "utf8"));
+    if (status.pid !== supervisorPid) return void 0;
+    return Number.isInteger(status.port) && status.port > 0 && status.port <= 65535 ? status.port : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// packages/server/src/dev-child.ts
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -86313,9 +86782,9 @@ try {
       ["FRIZZ_SCRIPTS_DIR", process.env.FRIZZ_SCRIPTS_DIR, "index.mjs"],
       ["FRIZZ_WORKER_PLUGIN_DIR", process.env.FRIZZ_WORKER_PLUGIN_DIR, ".claude-plugin/plugin.json"]
     ];
-    if (!existsSync24(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
+    if (!existsSync26(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync24(join50(directory, requiredFile)))
+      if (!directory || !existsSync26(join53(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }
@@ -86335,8 +86804,14 @@ try {
     port: server.port,
     bootId: server.ctx.bootId
   });
+  if (process.connected) {
+    void signOutOlderSessionEpoch({ stateDir: target.stateDir, supervisorPid: process.ppid }).then(({ advance, signedOut }) => {
+      const line = sessionEpochLogLine(advance, signedOut);
+      if (line) log.warn("dev-child", `${line} (a launcher older than this release refuses the rest from its next start)`);
+    }).catch((error) => log.warn("dev-child", `session epoch: ${error instanceof Error ? error.message : error}`));
+  }
   let shuttingDown = false;
-  const stop = async () => {
+  const stop2 = async () => {
     if (shuttingDown) return;
     shuttingDown = true;
     const force = setTimeout(() => process.exit(1), 15e3);
@@ -86359,9 +86834,9 @@ try {
       process.exit(1);
     }
   };
-  shutdown = stop;
-  process.on("SIGINT", () => void stop());
-  process.on("SIGTERM", () => void stop());
+  shutdown = stop2;
+  process.on("SIGINT", () => void stop2());
+  process.on("SIGTERM", () => void stop2());
 } catch (err) {
   log.error("dev-child", `failed to start: ${err instanceof Error ? err.stack ?? err.message : err}`);
   process.exit(1);