frizz-server 0.15.17 → 0.15.18

package/dist/dev-child.js

@@ -654,7 +654,7 @@ var init_project_identity = __esm({
 
 // packages/server/src/project-root.ts
 import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
-import { closeSync as closeSync2, existsSync as existsSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync2, openSync as openSync2, readFileSync as readFileSync3, realpathSync as realpathSync2, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { closeSync as closeSync2, existsSync as existsSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync2, openSync as openSync2, readFileSync as readFileSync3, realpathSync as realpathSync2, renameSync as renameSync2, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname3, join as join4, parse, resolve as resolve3 } from "node:path";
 function projectIdPath(root) {
@@ -741,6 +741,17 @@ function isHomeDirectory(dir, home = homedir3()) {
     return false;
   }
 }
+function isWorldWritable(dir, platform3 = process.platform) {
+  if (platform3 === "win32") return false;
+  try {
+    return (statSync2(dir).mode & 2) !== 0;
+  } catch {
+    return false;
+  }
+}
+function refuseWorldWritableProject(dir) {
+  if (isWorldWritable(dir)) throw new Error(`A folder every account can write to cannot be a project: ${dir}`);
+}
 function existingProjectId(dir) {
   const fromFile = readProjectIdFile(dir);
   if (fromFile) return fromFile;
@@ -10669,7 +10680,7 @@ var init_types = __esm({
        * upgrade if you are experiencing issues.
        */
       merge(merging) {
-        const merged = new _ZodObject({
+        const merged2 = new _ZodObject({
           unknownKeys: merging._def.unknownKeys,
           catchall: merging._def.catchall,
           shape: () => ({
@@ -10678,7 +10689,7 @@ var init_types = __esm({
           }),
           typeName: ZodFirstPartyTypeKind.ZodObject
         });
-        return merged;
+        return merged2;
       }
       // merge<
       //   Incoming extends AnyZodObject,
@@ -11045,8 +11056,8 @@ var init_types = __esm({
           if (isAborted(parsedLeft) || isAborted(parsedRight)) {
             return INVALID;
           }
-          const merged = mergeValues(parsedLeft.value, parsedRight.value);
-          if (!merged.valid) {
+          const merged2 = mergeValues(parsedLeft.value, parsedRight.value);
+          if (!merged2.valid) {
             addIssueToContext(ctx, {
               code: ZodIssueCode.invalid_intersection_types
             });
@@ -11055,7 +11066,7 @@ var init_types = __esm({
           if (isDirty(parsedLeft) || isDirty(parsedRight)) {
             status.dirty();
           }
-          return { status: status.value, value: merged.data };
+          return { status: status.value, value: merged2.data };
         };
         if (ctx.common.async) {
           return Promise.all([
@@ -13874,16 +13885,22 @@ function askedQuestionFaults(q2) {
   return faults;
 }
 function secretAnswerText(path3) {
-  return `(secret ready at ${quotePath(path3)} \u2014 it can be read ONCE, within ${SECRET_TTL_MS / 6e4}m; never print it)`;
+  return `${SECRET_ANSWER_PREFIX}${quotePath(path3)} \u2014 it can be read ONCE, within ${SECRET_TTL_MS / 6e4}m; never print it)`;
 }
 function quotePath(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+function answerPicksText(chosen, text2) {
+  const note = text2?.trim() ?? "";
+  if (chosen.length === 0) return note;
+  if (chosen.length === 1 && !note) return chosen[0];
+  return [chosen.map((label) => `${ANSWER_PICK_PREFIX}${label}`).join("\n"), note].filter(Boolean).join("\n\n");
+}
 function questionAnswerMessage(answers, dismissed = []) {
   if (answers.length === 0) return questionsCancelledWakeMessage(dismissed.length);
   const rows = [];
   const push = (a, followUp) => {
-    const said = [a.chosen.join(", "), a.text].filter(Boolean).join(" \u2014 ");
+    const said = answerPicksText(a.chosen, a.text);
     rows.push(`${followUp ? `${ANSWER_FOLLOW_UP_MARKER} ` : ""}\u201C${a.question}\u201D \u2192 ${indentAnswerContinuation(said || "(no answer)")}`);
     for (const child of a.followUps ?? []) push(child, true);
   };
@@ -14058,6 +14075,25 @@ function parseAgentMessage(text2) {
   if (!body.trim() || !from) return void 0;
   return { from, body };
 }
+function decodeXmlAttribute(value) {
+  return value.replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function parseCrossSessionMessage(text2) {
+  let rest = text2.trim();
+  const preamble = CROSS_SESSION_PREAMBLE.exec(rest);
+  if (preamble) rest = rest.slice(preamble[0].length);
+  const m = CROSS_SESSION_WRAPPER.exec(rest);
+  if (!m) return void 0;
+  const after = rest.slice(m[0].length).trim();
+  if (after && !after.startsWith(CROSS_SESSION_GUIDANCE)) return void 0;
+  const attributes = /* @__PURE__ */ new Map();
+  for (const [, key, value] of m[1].matchAll(XML_ATTRIBUTE)) attributes.set(key, decodeXmlAttribute(value).trim());
+  const body = m[2].trim();
+  if (!body) return void 0;
+  const name = attributes.get("from-name") || void 0;
+  const socket = attributes.get("from") || void 0;
+  return { ...name ? { name } : {}, ...socket ? { socket } : {}, body };
+}
 function wakeItemTail(item) {
   return `${item.at ? ` at ${item.at}` : ""}${item.url ? `: ${item.url}` : ""}`;
 }
@@ -14127,7 +14163,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_ANSWER_PREFIX, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, ANSWER_PICK_PREFIX, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, CROSS_SESSION_PREAMBLE, CROSS_SESSION_WRAPPER, CROSS_SESSION_GUIDANCE, XML_ATTRIBUTE, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -14826,6 +14862,7 @@ var init_src = __esm({
        *  worker can prepare the command that reads it before the human has answered. */
       secretPath: external_exports.string().optional()
     }).strict();
+    SECRET_ANSWER_PREFIX = "(secret ready at ";
     SECRET_TTL_MS = 15 * 6e4;
     AskResult = external_exports.object({
       registered: external_exports.array(RegisteredQuestionView),
@@ -14886,6 +14923,7 @@ var init_src = __esm({
     ANSWER_CONTINUATION_INDENT = "  ";
     indentAnswerContinuation = (text2) => text2.replace(/\n/g, `
 ${ANSWER_CONTINUATION_INDENT}`);
+    ANSWER_PICK_PREFIX = "- [x] ";
     DISMISSED_ANSWER = "(dismissed \u2014 decide it yourself; do not re-ask)";
     MarkOwnDoneInput = external_exports.object({
       slug: ThreadSlug,
@@ -15745,6 +15783,10 @@ ${DISPATCH_TASK_BANNER}
     WAKE_DELIVERY_TOKEN_LINE = /(?:^|\n)[ \t]*<!-- frizz-wake:[A-Za-z0-9_-]+ -->[ \t]*(?=\n|$)/g;
     NOISE_PREFIXES = ["<task-notification>", "[SYSTEM NOTIFICATION", "<system-reminder>", "<frizz-", "[frizz]"];
     AGENT_MESSAGE_WRAPPER = /^<agent-message from="([^"]*)">\n?([\s\S]*?)\n?<\/agent-message>\s*$/;
+    CROSS_SESSION_PREAMBLE = /^Another Claude session sent a message(?: while you were working)?:\n/;
+    CROSS_SESSION_WRAPPER = /^<cross-session-message\b([^>]*)>\n?([\s\S]*?)\n?<\/cross-session-message>/;
+    CROSS_SESSION_GUIDANCE = "This came from another Claude session";
+    XML_ATTRIBUTE = /([a-z][a-z-]*)="([^"]*)"/g;
     GithubWakeItem = external_exports.object({
       label: external_exports.string(),
       // the activity's noun ("comment", "approval", "change request", …)
@@ -16235,6 +16277,20 @@ ${DISPATCH_TASK_BANNER}
       // pairing, and `projectTranscriptPeerNames` uses this id to ask it. Never a drawer key on its own —
       // that is `peerDispatchId`, which the same pass can also supply once this resolves.
       peerSenderTaskId: external_exports.string().optional(),
+      // ANOTHER TOP-LEVEL SESSION wrote this user turn — a thread messaging this one through Claude Code's
+      // cross-session channel (see parseCrossSessionMessage), most often the coordinator thread that spawned
+      // it. Not the human, and not a sub-agent either: the chat draws it as an expandable hairline naming
+      // the sending thread, with the body one click away. `displayText` carries the unwrapped body.
+      //
+      // `name` is the sender's Claude Code session name, the fallback label. `thread` is the Frizz thread
+      // behind it, filled in by the server from the sender's socket (session-peer.ts) — absent when the
+      // sender is not a Frizz thread or is gone without having been resolved, and then the line names the
+      // session without a link. `project` is the URL slug of the sender's project.
+      sessionPeer: external_exports.object({
+        name: external_exports.string().optional(),
+        socket: external_exports.string().optional(),
+        thread: external_exports.object({ project: external_exports.string().optional(), slug: external_exports.string(), title: external_exports.string() }).optional()
+      }).optional(),
       // FRIZZ REFUSED the ```awaiting fence this message ends in — it named something that is not running,
       // or named nothing at all, or used a retired line kind (see `isParkCorrection`). The fence is not a
       // park, so the chat draws nothing for it: an hourglass card with a park button asserts a wait that
@@ -16831,7 +16887,7 @@ function summarizeLinkedPrs(nodes) {
   if (!Array.isArray(nodes)) return void 0;
   let count = 0;
   let open;
-  let merged;
+  let merged2;
   for (const node of nodes) {
     const n = node;
     const number = typeof n?.number === "number" ? n.number : Number(n?.number);
@@ -16842,9 +16898,9 @@ function summarizeLinkedPrs(nodes) {
     const pr2 = { count: 0, number, url: typeof n?.url === "string" ? n.url : "", state };
     if (typeof n?.isDraft === "boolean") pr2.isDraft = n.isDraft;
     if (state === "OPEN") open ??= pr2;
-    else merged ??= pr2;
+    else merged2 ??= pr2;
   }
-  const primary = open ?? merged;
+  const primary = open ?? merged2;
   return primary ? { ...primary, count } : void 0;
 }
 function linkedPrQuery(numbers) {
@@ -17149,7 +17205,9 @@ function projectFromRegistryEntry(entry, home = homedir5()) {
   };
 }
 function resolveProject(cwd = process.cwd(), home = homedir5(), env = process.env) {
-  const identity = resolveProjectIdentity(resolveProjectDir(cwd), home);
+  const root = resolveProjectDir(cwd);
+  refuseWorldWritableProject(root);
+  const identity = resolveProjectIdentity(root, home);
   const dir = identity.root;
   const id2 = registerAndReconcile(dir, identity.id, home);
   const stateDir = projectStateDir(id2, home);
@@ -17229,7 +17287,7 @@ import {
   readFileSync as readFileSync5,
   renameSync as renameSync4,
   rmSync as rmSync4,
-  statSync as statSync2,
+  statSync as statSync3,
   writeFileSync as writeFileSync4
 } from "node:fs";
 import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute2, join as join7 } from "node:path";
@@ -17296,7 +17354,7 @@ function quarantine(path3, suffix) {
 }
 function pathAge(path3) {
   try {
-    return Date.now() - statSync2(path3).mtimeMs;
+    return Date.now() - statSync3(path3).mtimeMs;
   } catch {
     return void 0;
   }
@@ -17927,7 +17985,7 @@ import {
   openSync as openSync5,
   readdirSync as readdirSync2,
   rmSync as rmSync5,
-  statSync as statSync3,
+  statSync as statSync4,
   symlinkSync,
   writeFileSync as writeFileSync5,
   writeSync
@@ -17972,7 +18030,7 @@ function pruneRunLogs(dir, keep = RETAINED_RUNS, days = RETAINED_DAYS, now = Dat
   }
   const dated = entries2.map((name) => {
     try {
-      return { name, at: statSync3(join8(dir, name)).mtimeMs };
+      return { name, at: statSync4(join8(dir, name)).mtimeMs };
     } catch {
       return { name, at: 0 };
     }
@@ -18101,6 +18159,69 @@ var init_logging = __esm({
   }
 });
 
+// packages/server/src/access-codes.ts
+import { randomBytes, timingSafeEqual, createHmac } from "node:crypto";
+import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname6, join as join9 } from "node:path";
+function describeDevice(userAgent) {
+  const ua2 = userAgent ?? "";
+  if (!ua2.trim()) return "unknown device";
+  const os3 = /iPhone/i.test(ua2) ? "iPhone" : /iPad/i.test(ua2) ? "iPad" : /Android/i.test(ua2) ? "Android" : /Mac OS X|Macintosh/i.test(ua2) ? "macOS" : /Windows/i.test(ua2) ? "Windows" : /Linux/i.test(ua2) ? "Linux" : "unknown device";
+  const browser = /Edg\//i.test(ua2) ? "Edge" : /OPR\/|Opera/i.test(ua2) ? "Opera" : /Firefox\//i.test(ua2) ? "Firefox" : /Chrome\//i.test(ua2) ? "Chrome" : /Safari\//i.test(ua2) ? "Safari" : "";
+  return browser ? `${browser} on ${os3}` : os3;
+}
+function writeSessionKey(path3, key) {
+  mkdirSync7(dirname6(path3), { recursive: true });
+  writeFileSync6(path3, key, { mode: 384 });
+  try {
+    chmodSync(path3, 384);
+  } catch {
+  }
+}
+function rotateSessionKey(stateDir) {
+  const key = randomBytes(32);
+  writeSessionKey(join9(stateDir, SESSION_KEY_FILE), key);
+  return key;
+}
+function readSessionEpoch(stateDir) {
+  try {
+    const parsed = JSON.parse(readFileSync6(join9(stateDir, SESSION_EPOCH_FILE), "utf8"));
+    return Number.isInteger(parsed?.epoch) && parsed.epoch >= 0 ? parsed.epoch : 0;
+  } catch {
+    return 0;
+  }
+}
+function advanceSessionEpoch(stateDir, epoch = SESSION_EPOCH) {
+  const from = readSessionEpoch(stateDir);
+  if (from >= epoch) return { advanced: false, epoch: from };
+  const keyPath = join9(stateDir, SESSION_KEY_FILE);
+  const rotatedKey = existsSync4(keyPath);
+  if (rotatedKey) rotateSessionKey(stateDir);
+  mkdirSync7(stateDir, { recursive: true });
+  writeFileSync6(
+    join9(stateDir, SESSION_EPOCH_FILE),
+    JSON.stringify({ epoch, advancedAt: (/* @__PURE__ */ new Date()).toISOString() }),
+    { mode: 384 }
+  );
+  return { advanced: true, from, to: epoch, rotatedKey };
+}
+function sessionEpochLogLine(advance, signedOut) {
+  if (!advance.advanced || !advance.rotatedKey) return null;
+  const count = signedOut === null ? "an unknown number of" : String(signedOut);
+  return `session epoch ${advance.from} -> ${advance.to}: rotated the session key and signed out ${count} recorded remote device(s); every older remote session is refused`;
+}
+var DEFAULT_CODE_TTL_MS, DEFAULT_SESSION_TTL_MS, SESSION_EPOCH, SESSION_KEY_FILE, SESSION_EPOCH_FILE;
+var init_access_codes = __esm({
+  "packages/server/src/access-codes.ts"() {
+    "use strict";
+    DEFAULT_CODE_TTL_MS = 5 * 6e4;
+    DEFAULT_SESSION_TTL_MS = 30 * 24 * 60 * 6e4;
+    SESSION_EPOCH = 1;
+    SESSION_KEY_FILE = "session-key";
+    SESSION_EPOCH_FILE = "session-epoch";
+  }
+});
+
 // packages/server/src/local-origin.ts
 import { isIP } from "node:net";
 function publicAuthority(policy) {
@@ -18248,7 +18369,7 @@ var init_local_path = __esm({
 });
 
 // packages/server/src/local-image.ts
-import { createReadStream, realpathSync as realpathSync5, statSync as statSync4 } from "node:fs";
+import { createReadStream, realpathSync as realpathSync5, statSync as statSync5 } from "node:fs";
 import { extname, isAbsolute as isAbsolute3 } from "node:path";
 function resolveLocalImage(rawPath, range) {
   if (rawPath) rawPath = normalizeLocalPath(rawPath);
@@ -18263,7 +18384,7 @@ function resolveLocalImage(rawPath, range) {
   }
   let size;
   try {
-    const stat2 = statSync4(real);
+    const stat2 = statSync5(real);
     if (!stat2.isFile()) return { status: 404 };
     size = stat2.size;
   } catch {
@@ -18324,6 +18445,163 @@ var init_local_image = __esm({
   }
 });
 
+// packages/server/src/audit.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+import { createHash as createHash5 } from "node:crypto";
+import { appendFileSync as appendFileSync2, chmodSync as chmodSync2, mkdirSync as mkdirSync8 } from "node:fs";
+import { dirname as dirname7, join as join10 } from "node:path";
+function bounded(value) {
+  return typeof value === "string" && value.length > 0 ? value.slice(0, STAMP_FIELD_MAX) : void 0;
+}
+function decodeCallerStamp(value) {
+  if (!value) return void 0;
+  try {
+    const parsed = JSON.parse(Buffer.from(value, "base64url").toString("utf8"));
+    if (!parsed || typeof parsed !== "object" || !VIAS.includes(parsed.via)) return void 0;
+    const host = bounded(parsed.host);
+    const clientIp = bounded(parsed.clientIp);
+    return {
+      via: parsed.via,
+      remote: bounded(parsed.remote) ?? null,
+      ...host ? { host } : {},
+      ...clientIp ? { clientIp } : {},
+      session: bounded(parsed.session) ?? null
+    };
+  } catch {
+    return void 0;
+  }
+}
+function requestOriginFrom(input) {
+  const device = describeDevice(input.userAgent);
+  const stamp = decodeCallerStamp(input.caller);
+  if (stamp) return { ...stamp, device };
+  return { via: "direct", remote: input.socketRemote ?? null, session: null, device };
+}
+function withRequestOrigin(origin, fn2) {
+  return requestOrigin.run(origin, fn2);
+}
+function currentRequestOrigin() {
+  return requestOrigin.getStore() ?? { via: "internal" };
+}
+function textDigest(text2) {
+  return { chars: text2.length, sha256: createHash5("sha256").update(text2).digest("hex") };
+}
+function auditLogPathForStateDir(stateDir) {
+  return join10(dirname7(serverAddressPathForStateDir(stateDir)), "logs", "audit.jsonl");
+}
+function fileAuditLog(path3) {
+  let secured = false;
+  return {
+    append(record) {
+      mkdirSync8(dirname7(path3), { recursive: true, mode: 448 });
+      appendFileSync2(path3, `${JSON.stringify(record)}
+`, { mode: 384 });
+      if (!secured) {
+        try {
+          chmodSync2(path3, 384);
+        } catch {
+        }
+        secured = true;
+      }
+    }
+  };
+}
+function originSummary(origin) {
+  if (origin.via === "internal") return "internal";
+  const parts = [origin.via];
+  if (origin.host) parts.push(origin.host);
+  if (origin.remote) parts.push(`from ${origin.remote}`);
+  if (origin.clientIp) parts.push(`client ${origin.clientIp}`);
+  if (origin.session) parts.push(`session ${origin.session}`);
+  parts.push(`(${origin.device})`);
+  return parts.join(" ");
+}
+function auditSummary(record) {
+  const target = [record.project.dir ?? record.project.id, record.thread].filter(Boolean).join(" ");
+  const outcome = record.outcome === "ok" ? "ok" : `refused: ${record.error ?? "unknown error"}`;
+  return `${record.action} ${outcome}${target ? ` \u2014 ${target}` : ""} \u2014 via ${originSummary(record.origin)}`;
+}
+function recordAudit(log3, build) {
+  let record;
+  try {
+    const { action, outcome, error, project, thread, servedBy, detail: detail2 } = build();
+    record = {
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action,
+      outcome,
+      ...error !== void 0 ? { error } : {},
+      project,
+      ...thread !== void 0 ? { thread } : {},
+      origin: currentRequestOrigin(),
+      ...servedBy !== void 0 ? { servedBy } : {},
+      ...detail2 !== void 0 ? { detail: detail2 } : {}
+    };
+    log.info("audit", auditSummary(record));
+    log3?.append(record);
+  } catch (error) {
+    try {
+      const what = record ? `${record.action} (${record.outcome})` : "an action";
+      log.error("audit", `could not record ${what}: ${error instanceof Error ? error.message : String(error)}`);
+    } catch {
+    }
+  }
+}
+function merged(base, extra) {
+  return {
+    project: extra?.project ?? base.project,
+    thread: extra?.thread ?? base.thread,
+    detail: base.detail || extra?.detail ? { ...base.detail, ...extra?.detail } : void 0
+  };
+}
+async function audited(log3, action, base, run3, options = {}) {
+  let fields = {};
+  let unreadable;
+  try {
+    fields = typeof base === "function" ? base() : base;
+  } catch (error) {
+    unreadable = error;
+  }
+  const entry = (from) => ({
+    project: from.project ?? { id: null, dir: null },
+    ...from.thread ? { thread: from.thread } : {},
+    ...options.servedBy ? { servedBy: options.servedBy } : {},
+    ...from.detail || unreadable !== void 0 ? { detail: { ...unreadable !== void 0 ? { auditError: messageOf(unreadable) } : {}, ...from.detail } } : {}
+  });
+  let result;
+  try {
+    result = await run3();
+  } catch (error) {
+    recordAudit(log3, () => ({ action, outcome: "refused", error: messageOf(error), ...entry(fields) }));
+    throw error;
+  }
+  recordAudit(log3, () => {
+    let extra;
+    try {
+      extra = options.onResult?.(result);
+    } catch (error) {
+      extra = { detail: { auditError: messageOf(error) } };
+    }
+    return { action, outcome: "ok", ...entry(merged(fields, extra)) };
+  });
+  return result;
+}
+function messageOf(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+var CALLER_HEADER, VIAS, STAMP_FIELD_MAX, requestOrigin;
+var init_audit = __esm({
+  "packages/server/src/audit.ts"() {
+    "use strict";
+    init_access_codes();
+    init_frizz_paths();
+    init_logging();
+    CALLER_HEADER = "x-frizz-caller";
+    VIAS = ["public", "network", "loopback"];
+    STAMP_FIELD_MAX = 200;
+    requestOrigin = new AsyncLocalStorage();
+  }
+});
+
 // packages/server/src/bus.ts
 var Bus, Emitter;
 var init_bus = __esm({
@@ -21468,13 +21746,13 @@ var init_storage = __esm({
 
 // packages/server/src/secret-files.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { chmodSync as chmodSync2, closeSync as closeSync5, constants, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync8, openSync as openSync6, readdirSync as readdirSync3, rmdirSync, rmSync as rmSync6, writeFileSync as writeFileSync7, writeSync as writeSync2 } from "node:fs";
-import { dirname as dirname7, join as join11 } from "node:path";
+import { chmodSync as chmodSync3, closeSync as closeSync5, constants, existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync9, openSync as openSync6, readdirSync as readdirSync3, rmdirSync, rmSync as rmSync6, writeFileSync as writeFileSync7, writeSync as writeSync2 } from "node:fs";
+import { dirname as dirname8, join as join12 } from "node:path";
 function secretsRoot(stateDir) {
-  return join11(stateDir, "secrets");
+  return join12(stateDir, "secrets");
 }
 function secretFilePath(stateDir, slug, questionId) {
-  return join11(secretsRoot(stateDir), slug, questionId);
+  return join12(secretsRoot(stateDir), slug, questionId);
 }
 function stop(path3) {
   const entry = served.get(path3);
@@ -21482,7 +21760,7 @@ function stop(path3) {
   served.delete(path3);
   rmSync6(path3, { force: true });
   try {
-    rmdirSync(dirname7(path3));
+    rmdirSync(dirname8(path3));
   } catch {
   }
 }
@@ -21490,12 +21768,12 @@ function serveSecret(stateDir, slug, questionId, value, opts = {}) {
   const now = opts.now ?? Date.now;
   const expiresAt = now() + (opts.ttlMs ?? SECRET_TTL_MS);
   const root = secretsRoot(stateDir);
-  const dir = join11(root, slug);
+  const dir = join12(root, slug);
   const path3 = secretFilePath(stateDir, slug, questionId);
   stop(path3);
-  mkdirSync8(dir, { recursive: true, mode: 448 });
-  chmodSync2(root, 448);
-  chmodSync2(dir, 448);
+  mkdirSync9(dir, { recursive: true, mode: 448 });
+  chmodSync3(root, 448);
+  chmodSync3(dir, 448);
   if ((opts.platform ?? process.platform) === "win32") {
     writeFileSync7(path3, value, { mode: 384 });
     const timer2 = setInterval(() => {
@@ -21538,7 +21816,7 @@ function clearSecrets(stateDir) {
     return 0;
   }
   for (const thread of threads) {
-    const dir = join11(root, thread);
+    const dir = join12(root, thread);
     let entries2;
     try {
       if (!lstatSync(dir).isDirectory()) {
@@ -21550,7 +21828,7 @@ function clearSecrets(stateDir) {
       continue;
     }
     for (const entry of entries2) {
-      const path3 = join11(dir, entry);
+      const path3 = join12(dir, entry);
       if (served.has(path3)) continue;
       rmSync6(path3, { force: true });
       removed++;
@@ -21573,10 +21851,10 @@ var init_secret_files = __esm({
 });
 
 // packages/server/src/machine-config.ts
-import { closeSync as closeSync6, fsyncSync as fsyncSync5, mkdirSync as mkdirSync9, openSync as openSync7, readFileSync as readFileSync8, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname8, join as join12 } from "node:path";
+import { closeSync as closeSync6, fsyncSync as fsyncSync5, mkdirSync as mkdirSync10, openSync as openSync7, readFileSync as readFileSync8, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname9, join as join13 } from "node:path";
 function machineConfigPath(home) {
-  return join12(frizzPaths({ home }).data, "config.json");
+  return join13(frizzPaths({ home }).data, "config.json");
 }
 function readAll(home) {
   let raw2;
@@ -21589,7 +21867,7 @@ function readAll(home) {
 }
 function writeAll(home, all) {
   const path3 = machineConfigPath(home);
-  mkdirSync9(dirname8(path3), { recursive: true });
+  mkdirSync10(dirname9(path3), { recursive: true });
   const temp = `${path3}.${process.pid}.tmp`;
   let fd2;
   try {
@@ -21635,9 +21913,9 @@ var init_machine_config = __esm({
 
 // packages/server/src/settings.ts
 import { readFileSync as readFileSync9, rmSync as rmSync8 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 function legacyMachineSettingsPath(home) {
-  return join13(frizzPaths({ home }).data, "settings.json");
+  return join14(frizzPaths({ home }).data, "settings.json");
 }
 function pickMachine(settings) {
   return Object.fromEntries(MACHINE_KEYS.map((key) => [key, settings[key]]));
@@ -21820,15 +22098,15 @@ function redactUserInfoToken(raw2, options) {
   return `${parts.username}${parts.delimiter}${replacement(options, parts.password)}`;
 }
 function hasCurlCommandContext(source, offset) {
-  const bounded = source.slice(Math.max(0, offset - 1024), offset);
+  const bounded2 = source.slice(Math.max(0, offset - 1024), offset);
   const separator = Math.max(
-    bounded.lastIndexOf("\n"),
-    bounded.lastIndexOf("\r"),
-    bounded.lastIndexOf(";"),
-    bounded.lastIndexOf("&"),
-    bounded.lastIndexOf("|")
+    bounded2.lastIndexOf("\n"),
+    bounded2.lastIndexOf("\r"),
+    bounded2.lastIndexOf(";"),
+    bounded2.lastIndexOf("&"),
+    bounded2.lastIndexOf("|")
   );
-  const segment = bounded.slice(separator + 1);
+  const segment = bounded2.slice(separator + 1);
   return segment.split(/[ \t]+/u).some((token) => CURL_EXECUTABLE_RE.test(unquote(token)));
 }
 function redactCredentialSyntax(raw2, options = {}) {
@@ -21978,8 +22256,8 @@ var init_codex_error = __esm({
 });
 
 // packages/server/src/discover.ts
-import { readdirSync as readdirSync4, statSync as statSync5, openSync as openSync8, readSync, closeSync as closeSync7 } from "node:fs";
-import { dirname as dirname9, join as join14 } from "node:path";
+import { readdirSync as readdirSync4, statSync as statSync6, openSync as openSync8, readSync, closeSync as closeSync7 } from "node:fs";
+import { dirname as dirname10, join as join15 } from "node:path";
 function sentinelFor(sessionId) {
   return `threads/${sessionId}/`;
 }
@@ -22016,10 +22294,10 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
     if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
     const id2 = name.slice(0, -".jsonl".length);
     if (!id2 || id2 === sessionId || exclude?.has(id2)) continue;
-    const path3 = join14(logDir, name);
+    const path3 = join15(logDir, name);
     let mtime;
     try {
-      mtime = statSync5(path3).mtimeMs;
+      mtime = statSync6(path3).mtimeMs;
     } catch {
       continue;
     }
@@ -22034,7 +22312,7 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
 }
 function mtimeOfNonEmpty(path3) {
   try {
-    const st2 = statSync5(path3, { throwIfNoEntry: false });
+    const st2 = statSync6(path3, { throwIfNoEntry: false });
     return st2 && st2.size > 0 ? st2.mtimeMs : void 0;
   } catch {
     return void 0;
@@ -22044,7 +22322,7 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   const name = `${sessionId}.jsonl`;
   const better = (best2, dir) => {
     if (dir === logDir) return best2;
-    const at2 = mtimeOfNonEmpty(join14(dir, name));
+    const at2 = mtimeOfNonEmpty(join15(dir, name));
     if (at2 === void 0) return best2;
     return !best2 || at2 > best2.mtimeMs ? { dir, mtimeMs: at2 } : best2;
   };
@@ -22053,11 +22331,11 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   if (best) return best.dir;
   let entries2;
   try {
-    entries2 = readdirSync4(dirname9(logDir), { withFileTypes: true }).filter((e14) => e14.isDirectory()).map((e14) => e14.name);
+    entries2 = readdirSync4(dirname10(logDir), { withFileTypes: true }).filter((e14) => e14.isDirectory()).map((e14) => e14.name);
   } catch {
     return void 0;
   }
-  for (const entry of entries2) best = better(best, join14(dirname9(logDir), entry));
+  for (const entry of entries2) best = better(best, join15(dirname10(logDir), entry));
   if (!best) return void 0;
   memo3.add(best.dir);
   return best.dir;
@@ -22143,22 +22421,22 @@ var init_types2 = __esm({
 });
 
 // packages/server/src/session-files.ts
-import { chmodSync as chmodSync3, lstatSync as lstatSync2, mkdirSync as mkdirSync10, rmSync as rmSync9, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join15 } from "node:path";
+import { chmodSync as chmodSync4, lstatSync as lstatSync2, mkdirSync as mkdirSync11, rmSync as rmSync9, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join16 } from "node:path";
 function systemPromptPath(sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) throw new Error("invalid session id");
-  return join15(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
+  return join16(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
 }
 function mcpConfigPath(sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) throw new Error("invalid session id");
-  return join15(MCP_CONFIG_DIR, `${sessionId}.json`);
+  return join16(MCP_CONFIG_DIR, `${sessionId}.json`);
 }
 function writeMcpConfigFile(sessionId, mcpServers) {
   const path3 = mcpConfigPath(sessionId);
-  mkdirSync10(MCP_CONFIG_DIR, { recursive: true, mode: 448 });
-  chmodSync3(MCP_CONFIG_DIR, 448);
+  mkdirSync11(MCP_CONFIG_DIR, { recursive: true, mode: 448 });
+  chmodSync4(MCP_CONFIG_DIR, 448);
   writeFileSync9(path3, JSON.stringify({ mcpServers }), { mode: 384 });
-  chmodSync3(path3, 384);
+  chmodSync4(path3, 384);
   return path3;
 }
 function isDirectDirectory(path3) {
@@ -22179,7 +22457,7 @@ function pathAbsent(path3) {
 }
 function unlinkDirectChild(parent, filename) {
   if (!isDirectDirectory(parent)) return pathAbsent(parent);
-  const child = join15(parent, filename);
+  const child = join16(parent, filename);
   try {
     rmSync9(child, { force: true });
   } catch {
@@ -22189,12 +22467,12 @@ function unlinkDirectChild(parent, filename) {
 }
 function cleanupAdoptionSessionFiles(projectDir, sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) return false;
-  const frizzDir = join15(projectDir, ".frizz");
+  const frizzDir = join16(projectDir, ".frizz");
   let clean = true;
   if (isDirectDirectory(frizzDir)) {
-    const threads = join15(frizzDir, "threads");
+    const threads = join16(frizzDir, "threads");
     if (isDirectDirectory(threads)) {
-      const child = join15(threads, sessionId);
+      const child = join16(threads, sessionId);
       try {
         rmSync9(child, { recursive: true, force: true });
       } catch {
@@ -22448,10 +22726,10 @@ var init_adoption_recovery = __esm({
 });
 
 // packages/server/src/backend/codex-models.ts
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import { readFileSync as readFileSync10 } from "node:fs";
 function cachePath(codexHome) {
-  return join16(codexHome, "models_cache.json");
+  return join17(codexHome, "models_cache.json");
 }
 function toCodexModel(raw2) {
   if (!raw2 || typeof raw2 !== "object") return void 0;
@@ -23182,10 +23460,10 @@ var init_claude_agent_sdk_protocol = __esm({
 });
 
 // packages/server/src/backend/claude-broker-diagnostics.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync11, readFileSync as readFileSync11, renameSync as renameSync6, statSync as statSync6 } from "node:fs";
-import { join as join17 } from "node:path";
+import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync12, readFileSync as readFileSync11, renameSync as renameSync6, statSync as statSync7 } from "node:fs";
+import { join as join18 } from "node:path";
 function claudeBrokerDiagnosticLogPath(stateDir, sessionId) {
-  return join17(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
+  return join18(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
 }
 function readClaudeBrokerExit(stateDir, sessionId, generation) {
   if (!generation) return null;
@@ -23290,10 +23568,10 @@ var init_daemon_tree = __esm({
 });
 
 // packages/server/src/backend/ipc-path.ts
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function frizzIpcPath(name) {
   if (process.platform === "win32") return `\\\\.\\pipe\\${name}`;
-  return join18(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
+  return join19(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
 }
 var init_ipc_path = __esm({
   "packages/server/src/backend/ipc-path.ts"() {
@@ -23303,9 +23581,9 @@ var init_ipc_path = __esm({
 
 // packages/server/src/backend/claude-broker-host.ts
 import { spawn } from "node:child_process";
-import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
-import { accessSync, constants as fsConstants, mkdirSync as mkdirSync12, readFileSync as readFileSync12, readdirSync as readdirSync5, unlinkSync, writeFileSync as writeFileSync10 } from "node:fs";
-import { delimiter, dirname as dirname10, isAbsolute as isAbsolute4, join as join19 } from "node:path";
+import { createHash as createHash6, randomUUID as randomUUID8 } from "node:crypto";
+import { accessSync, constants as fsConstants, mkdirSync as mkdirSync13, readFileSync as readFileSync12, readdirSync as readdirSync5, unlinkSync, writeFileSync as writeFileSync10 } from "node:fs";
+import { delimiter, dirname as dirname11, isAbsolute as isAbsolute4, join as join20 } from "node:path";
 function windowsShimTarget(shimPath) {
   let body;
   try {
@@ -23315,7 +23593,7 @@ function windowsShimTarget(shimPath) {
   }
   const target = WINDOWS_SHIM_TARGET.exec(body)?.[1];
   if (!target) return void 0;
-  const full = join19(dirname10(shimPath), target);
+  const full = join20(dirname11(shimPath), target);
   try {
     accessSync(full, fsConstants.F_OK);
     return full;
@@ -23336,17 +23614,17 @@ function resolveClaudeExecutableAbsolute(bin, env = process.env) {
   for (const dir of searchPath(env).split(delimiter)) {
     if (!dir) continue;
     if (windows) {
-      const exe2 = join19(dir, `${candidate}.exe`);
+      const exe2 = join20(dir, `${candidate}.exe`);
       try {
         accessSync(exe2, fsConstants.F_OK);
         return exe2;
       } catch {
       }
-      const viaShim = windowsShimTarget(join19(dir, `${candidate}.cmd`));
+      const viaShim = windowsShimTarget(join20(dir, `${candidate}.cmd`));
       if (viaShim) return viaShim;
       continue;
     }
-    const full = join19(dir, candidate);
+    const full = join20(dir, candidate);
     try {
       accessSync(full, fsConstants.X_OK);
       return full;
@@ -23356,22 +23634,22 @@ function resolveClaudeExecutableAbsolute(bin, env = process.env) {
   throw new Error(`Claude session broker: could not resolve '${candidate}' to an absolute executable path on PATH (the SDK requires one)`);
 }
 function claudeBrokerSocketPath(stateDir, sessionId) {
-  const key = createHash5("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
+  const key = createHash6("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
   return frizzIpcPath(`frizz-claude-${key}`);
 }
 function claudeBrokerRecordPath(stateDir, sessionId) {
-  const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join19(stateDir, "claude-broker", `${key}.json`);
+  const key = createHash6("sha256").update(sessionId).digest("hex").slice(0, 16);
+  return join20(stateDir, "claude-broker", `${key}.json`);
 }
 function claudeBrokerRetirementPath(stateDir, sessionId) {
-  const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join19(stateDir, "claude-broker", `${key}.retired`);
+  const key = createHash6("sha256").update(sessionId).digest("hex").slice(0, 16);
+  return join20(stateDir, "claude-broker", `${key}.retired`);
 }
 function markBrokerRetired(stateDir, sessionId, reason, generation) {
   const mark = { at: (/* @__PURE__ */ new Date()).toISOString(), generation, reason };
   try {
     const path3 = claudeBrokerRetirementPath(stateDir, sessionId);
-    mkdirSync12(dirname10(path3), { recursive: true });
+    mkdirSync13(dirname11(path3), { recursive: true });
     writeFileSync10(path3, JSON.stringify(mark));
   } catch {
   }
@@ -23432,7 +23710,7 @@ function liveBrokerRecord(recordPath2) {
   return null;
 }
 function liveBrokerRecords(stateDir) {
-  const dir = join19(stateDir, "claude-broker");
+  const dir = join20(stateDir, "claude-broker");
   let names;
   try {
     names = readdirSync5(dir);
@@ -23442,7 +23720,7 @@ function liveBrokerRecords(stateDir) {
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const record = liveBrokerRecord(join19(dir, name));
+    const record = liveBrokerRecord(join20(dir, name));
     if (record) out.push(record);
   }
   return out;
@@ -23450,7 +23728,7 @@ function liveBrokerRecords(stateDir) {
 function forkBroker(options) {
   const socketPath = claudeBrokerSocketPath(options.stateDir, options.sessionId);
   const recordPath2 = claudeBrokerRecordPath(options.stateDir, options.sessionId);
-  mkdirSync12(dirname10(recordPath2), { recursive: true });
+  mkdirSync13(dirname11(recordPath2), { recursive: true });
   const generation = randomUUID8();
   const config = {
     socketPath,
@@ -24060,7 +24338,7 @@ var init_delivery_ledger = __esm({
 });
 
 // packages/server/src/codex-subagents.ts
-import { closeSync as closeSync8, openSync as openSync9, readSync as readSync2, statSync as statSync7 } from "node:fs";
+import { closeSync as closeSync8, openSync as openSync9, readSync as readSync2, statSync as statSync8 } from "node:fs";
 function createCodexSubAgentTracker(deps) {
   const findRollouts = deps.findRollouts ?? ((ids) => findRolloutsByIds(ids, deps.codexHome));
   const readAppended = deps.readAppended ?? defaultReadAppended;
@@ -24252,7 +24530,7 @@ function agentLabel(path3) {
 function defaultReadAppended(path3, offset) {
   let size;
   try {
-    size = statSync7(path3).size;
+    size = statSync8(path3).size;
   } catch {
     return void 0;
   }
@@ -24393,16 +24671,16 @@ var init_completion_relay = __esm({
 });
 
 // packages/server/src/tail-cache.ts
-import { createHash as createHash6 } from "node:crypto";
-import { closeSync as closeSync9, openSync as openSync10, readFileSync as readFileSync13, readSync as readSync3, statSync as statSync8 } from "node:fs";
-import { join as join20 } from "node:path";
+import { createHash as createHash7 } from "node:crypto";
+import { closeSync as closeSync9, openSync as openSync10, readFileSync as readFileSync13, readSync as readSync3, statSync as statSync9 } from "node:fs";
+import { join as join21 } from "node:path";
 function foldSchemaDigest(dir = import.meta.dirname) {
   if (foldSchemaMemo) return foldSchemaMemo;
-  const hash = createHash6("sha256").update("frizz-tail-state-v1\0");
+  const hash = createHash7("sha256").update("frizz-tail-state-v1\0");
   let read = 0;
   for (const name of FOLD_SOURCES) {
     try {
-      hash.update(name).update("\0").update(readFileSync13(join20(dir, name)));
+      hash.update(name).update("\0").update(readFileSync13(join21(dir, name)));
       read++;
     } catch {
       hash.update(name).update("\0missing\0");
@@ -24432,7 +24710,7 @@ function measureFence(path3, offset) {
   if (!Number.isSafeInteger(offset) || offset <= 0) return null;
   let fd2;
   try {
-    const stat2 = statSync8(path3);
+    const stat2 = statSync9(path3);
     if (stat2.size < offset) return null;
     fd2 = openSync10(path3, "r");
     const window = Math.min(SAMPLE_BYTES, offset);
@@ -24441,7 +24719,7 @@ function measureFence(path3, offset) {
     const tail = Buffer.allocUnsafe(window);
     const tailRead = readSync3(fd2, tail, 0, window, offset - window);
     if (headRead !== window || tailRead !== window) return null;
-    const contentDigest = createHash6("sha256").update(String(offset)).update("\0").update(head).update("\0").update(tail).digest("hex").slice(0, 32);
+    const contentDigest = createHash7("sha256").update(String(offset)).update("\0").update(head).update("\0").update(tail).digest("hex").slice(0, 32);
     return {
       offset,
       size: stat2.size,
@@ -24605,11 +24883,11 @@ var init_tail_cache = __esm({
 });
 
 // packages/server/src/tailer.ts
-import { statSync as statSync9, openSync as openSync11, readSync as readSync4, closeSync as closeSync10, readdirSync as readdirSync6, realpathSync as realpathSync6, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readFileSync as readFileSync14, existsSync as existsSync7 } from "node:fs";
+import { statSync as statSync10, openSync as openSync11, readSync as readSync4, closeSync as closeSync10, readdirSync as readdirSync6, realpathSync as realpathSync6, mkdirSync as mkdirSync14, writeFileSync as writeFileSync11, readFileSync as readFileSync14, existsSync as existsSync7 } from "node:fs";
 import { execFile as execFile2 } from "node:child_process";
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 import { promisify as promisify2 } from "node:util";
-import { basename as basename4, join as join21, win32 } from "node:path";
+import { basename as basename4, join as join22, win32 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 function pendingCallDeadline(tail) {
   const resolved2 = /* @__PURE__ */ new Set();
@@ -25136,7 +25414,7 @@ function launchTaskId(text2) {
 function readDescendantSidecars(sessionDir, mtimeMs) {
   let names;
   try {
-    names = readdirSync6(join21(sessionDir, "subagents"));
+    names = readdirSync6(join22(sessionDir, "subagents"));
   } catch {
     return [];
   }
@@ -25147,7 +25425,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
     if (!agentId) continue;
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync14(join21(sessionDir, "subagents", name), "utf8"));
+      parsed = JSON.parse(readFileSync14(join22(sessionDir, "subagents", name), "utf8"));
     } catch {
       continue;
     }
@@ -25161,7 +25439,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
       agentType: text2(meta.agentType),
       parentAgentId: text2(meta.parentAgentId),
       spawnDepth: typeof meta.spawnDepth === "number" && Number.isFinite(meta.spawnDepth) ? meta.spawnDepth : void 0,
-      spawnedAtMs: mtimeMs(join21(sessionDir, "subagents", name))
+      spawnedAtMs: mtimeMs(join22(sessionDir, "subagents", name))
     });
   }
   return out;
@@ -25287,7 +25565,7 @@ function trackCompletions(state, rec) {
     const monitorTimedOut = isMonitorTimeoutEvent(block);
     const terminal = status === "completed" || status === "failed" || status === "killed" ? status : status === "stopped" || monitorTimedOut ? "killed" : void 0;
     if (!terminal) continue;
-    const fingerprint = createHash7("sha1").update(block).digest("hex").slice(0, 16);
+    const fingerprint = createHash8("sha1").update(block).digest("hex").slice(0, 16);
     const repeatOf = /* @__PURE__ */ new Set();
     for (const id2 of blockTaskIds(block)) {
       if (state.foldedTerminals?.get(id2) === fingerprint) repeatOf.add(id2);
@@ -25650,13 +25928,13 @@ function isPermMarker(v) {
 }
 function defaultMtimeMs(path3) {
   try {
-    return statSync9(path3).mtimeMs;
+    return statSync10(path3).mtimeMs;
   } catch {
     return void 0;
   }
 }
 function defaultLogDir(project) {
-  return join21(homedir7(), ".claude", "projects", project.cwdSlug);
+  return join22(homedir7(), ".claude", "projects", project.cwdSlug);
 }
 function defaultReadPermMarker(project) {
   if (!project.stateDir) return () => void 0;
@@ -25788,7 +26066,7 @@ function createTailer(deps) {
     return paneDead(row.slug);
   }
   const defaultBackend = {
-    transcriptPath: (sessionId) => join21(logDir, `${sessionId}.jsonl`),
+    transcriptPath: (sessionId) => join22(logDir, `${sessionId}.jsonl`),
     foldLine: (state, line) => {
       const rec = parseLine(line);
       if (rec) applyRecord(state, rec);
@@ -25830,7 +26108,7 @@ function createTailer(deps) {
   function blockedUntil(path3, m) {
     let size;
     try {
-      size = statSync9(path3).size;
+      size = statSync10(path3).size;
     } catch {
       return void 0;
     }
@@ -25956,7 +26234,7 @@ ${ask}`;
     return state.path.replace(/\.jsonl$/, "");
   }
   function descendantSidecars(state) {
-    const at2 = mtimeMs(join21(sessionDirOf(state), "subagents"));
+    const at2 = mtimeMs(join22(sessionDirOf(state), "subagents"));
     const cached2 = descendantIndex.get(state.slug);
     if (cached2 && cached2.at === at2) return cached2.all;
     const all = readDescendantSidecars(sessionDirOf(state), mtimeMs);
@@ -25970,7 +26248,7 @@ ${ask}`;
     return descendantIndex.get(state.slug)?.byToolUse.get(id2);
   }
   function descendantTranscript(state, meta) {
-    return join21(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
+    return join22(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
   }
   function subAgentDescendantTasks(slug, id2) {
     const state = states.get(slug);
@@ -26318,10 +26596,10 @@ ${ask}`;
       if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
       const id2 = name.slice(0, -".jsonl".length);
       if (!id2 || registered.has(id2)) continue;
-      const path3 = join21(logDir, name);
+      const path3 = join22(logDir, name);
       let mtime;
       try {
-        mtime = statSync9(path3).mtimeMs;
+        mtime = statSync10(path3).mtimeMs;
       } catch {
         continue;
       }
@@ -26369,6 +26647,18 @@ ${ask}`;
     if (state.lastActivityAt !== prevActivity || state.lastAssistant !== prevAssistant || state.model !== prevModel || state.effort !== prevEffort || state.permissionMode !== prevPermissionMode) dirty = true;
     return dirty;
   }
+  const crossSessionOnLine = deps.onCrossSessionMessage ? (line) => {
+    if (!line.includes("cross-session-message")) return;
+    let rec;
+    try {
+      rec = JSON.parse(line);
+    } catch {
+      return;
+    }
+    if (rec.type !== "queue-operation" || rec.operation !== "enqueue" || typeof rec.content !== "string") return;
+    const peer = parseCrossSessionMessage(rec.content);
+    if (peer) deps.onCrossSessionMessage(peer);
+  } : void 0;
   function chainOnLine(a, b) {
     if (!a) return b;
     if (!b) return a;
@@ -26474,7 +26764,7 @@ ${ask}`;
     if (entry.path !== state.path) {
       let derivedSize = 0;
       try {
-        derivedSize = statSync9(state.path).size;
+        derivedSize = statSync10(state.path).size;
       } catch {
         derivedSize = 0;
       }
@@ -26531,7 +26821,7 @@ ${ask}`;
   function consume(state, backend, onLine) {
     let size;
     try {
-      size = statSync9(state.path).size;
+      size = statSync10(state.path).size;
     } catch {
       return;
     }
@@ -26589,8 +26879,8 @@ ${ask}`;
       `thread ${row.slug} (session ${row.session_id}): no transcript ${DISCOVERY_GRACE_MS / 1e3}s after dispatch \u2014 likely a boot failure. ${detail2.slice(0, 4e3)}`
     );
     try {
-      mkdirSync13(stallLogDir, { recursive: true });
-      writeFileSync11(join21(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
+      mkdirSync14(stallLogDir, { recursive: true });
+      writeFileSync11(join22(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
 captured_at: ${new Date(now()).toISOString()}
 
 ${detail2}
@@ -26600,10 +26890,10 @@ ${detail2}
   }
   function relocatedTranscript(state) {
     const name = `${state.nativeSessionId}.jsonl`;
-    const home = join21(logDir, name);
+    const home = join22(logDir, name);
     const homeAt = home === state.path ? void 0 : mtimeOfNonEmpty(home);
     const dir = discoverTranscriptDir(logDir, state.nativeSessionId);
-    const sibling = dir ? join21(dir, name) : void 0;
+    const sibling = dir ? join22(dir, name) : void 0;
     const siblingAt = sibling && sibling !== state.path ? mtimeOfNonEmpty(sibling) : void 0;
     if (homeAt === void 0) return siblingAt === void 0 ? void 0 : sibling;
     if (siblingAt === void 0) return home;
@@ -26638,7 +26928,7 @@ ${detail2}
     }
     let size = 0;
     try {
-      size = statSync9(state.path).size;
+      size = statSync10(state.path).size;
     } catch {
       size = 0;
     }
@@ -26655,7 +26945,7 @@ ${detail2}
     state.nextDiscoverMs = nowMs + DISCOVER_RETRY_MS;
     const strandedDir = discoverTranscriptDir(logDir, row.session_id);
     if (strandedDir) {
-      state.path = join21(strandedDir, `${row.session_id}.jsonl`);
+      state.path = join22(strandedDir, `${row.session_id}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -26679,7 +26969,7 @@ ${detail2}
         committed = false;
       }
       if (!committed) return false;
-      state.path = join21(logDir, `${found}.jsonl`);
+      state.path = join22(logDir, `${found}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -26739,7 +27029,7 @@ ${detail2}
         continue;
       }
       if (!state) {
-        const path3 = backend.transcriptPath(nativeId) ?? join21(logDir, `${nativeId}.jsonl`);
+        const path3 = backend.transcriptPath(nativeId) ?? join22(logDir, `${nativeId}.jsonl`);
         state = newTailState(row.slug, row.session_id, path3, false, nativeId, runtimeGeneration);
         state.dismissedOps = deps.storage.retiredOps(row.slug, row.session_id);
         hydrateFromCache(state, row, nativeId);
@@ -26815,7 +27105,7 @@ ${detail2}
       const rowLedger = row.delivery_ledger ?? null;
       const ledgerDrifted = rowLedger !== (state.deliveryLedgerSeen ?? null);
       const ledger = ledgerFold(row, nowMs, state);
-      consume(state, backend, chainOnLine(ledger.onLine, codexSubAgentOnLine(row, state)));
+      consume(state, backend, chainOnLine(chainOnLine(ledger.onLine, codexSubAgentOnLine(row, state)), crossSessionOnLine));
       state.codexSubAgents?.poll(nowMs);
       const ledgerResult = ledger.finish();
       state.deliveryLedgerSeen = ledgerResult.changed ? ledgerResult.value : rowLedger;
@@ -27207,14 +27497,14 @@ var init_tailer = __esm({
 });
 
 // packages/server/src/backend/codex.ts
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 import { homedir as homedir8 } from "node:os";
-import { readdirSync as readdirSync7, statSync as statSync10, readFileSync as readFileSync15, openSync as openSync12, readSync as readSync5, closeSync as closeSync11 } from "node:fs";
+import { readdirSync as readdirSync7, statSync as statSync11, readFileSync as readFileSync15, openSync as openSync12, readSync as readSync5, closeSync as closeSync11 } from "node:fs";
 function defaultCodexHome() {
-  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join22(homedir8(), ".codex");
+  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join23(homedir8(), ".codex");
 }
 function sessionsDir(codexHome) {
-  return join22(codexHome, "sessions");
+  return join23(codexHome, "sessions");
 }
 function codexSandbox(mode) {
   switch (mode) {
@@ -27660,17 +27950,17 @@ function collectRollouts(dir, out, budget) {
   const files = entries2.filter((e14) => e14.isFile() && e14.name.startsWith("rollout-") && e14.name.endsWith(".jsonl")).sort(descByName);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    collectRollouts(join22(dir, d.name), out, budget);
+    collectRollouts(join23(dir, d.name), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
     let mtimeMs;
     try {
-      mtimeMs = statSync10(join22(dir, f.name)).mtimeMs;
+      mtimeMs = statSync11(join23(dir, f.name)).mtimeMs;
     } catch {
       continue;
     }
-    out.push({ path: join22(dir, f.name), mtimeMs });
+    out.push({ path: join23(dir, f.name), mtimeMs });
     budget.n--;
   }
 }
@@ -27714,8 +28004,8 @@ function readCodexThreadNames(codexHome = defaultCodexHome()) {
   const out = /* @__PURE__ */ new Map();
   let raw2;
   try {
-    const path3 = join22(codexHome, "session_index.jsonl");
-    if (statSync10(path3).size > SESSION_INDEX_MAX_BYTES) return out;
+    const path3 = join23(codexHome, "session_index.jsonl");
+    if (statSync11(path3).size > SESSION_INDEX_MAX_BYTES) return out;
     raw2 = readFileSync15(path3, "utf8");
   } catch {
     return out;
@@ -27918,19 +28208,19 @@ function searchPath2(env) {
 function vendoredNativeBeside(launcherJs, arch, access) {
   const triple = WINDOWS_TRIPLE[arch];
   if (!triple) return void 0;
-  const { dirname: dirname29, join: join54 } = win322;
-  const pkgRoot = dirname29(dirname29(launcherJs));
+  const { dirname: dirname31, join: join56 } = win322;
+  const pkgRoot = dirname31(dirname31(launcherJs));
   const platformPkg = `codex-win32-${arch}`;
   const vendorRoots = [
-    join54(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
+    join56(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
     // nested under the package
-    join54(dirname29(pkgRoot), platformPkg, "vendor"),
+    join56(dirname31(pkgRoot), platformPkg, "vendor"),
     // hoisted beside it: <prefix>\node_modules\@openai\<pkg>
-    join54(pkgRoot, "vendor")
+    join56(pkgRoot, "vendor")
     // the pre-platform-package layout, binaries inside @openai/codex itself
   ];
   for (const root of vendorRoots) {
-    const exe2 = join54(root, triple, "bin", "codex.exe");
+    const exe2 = join56(root, triple, "bin", "codex.exe");
     if (access(exe2, "exists")) return exe2;
   }
   return void 0;
@@ -30254,7 +30544,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net2 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes2, createHash: createHash18 } = __require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash19 } = __require("crypto");
     var { Duplex, Readable: Readable3 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -30922,7 +31212,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash18("sha1").update(key + GUID).digest("base64");
+        const digest = createHash19("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -31291,7 +31581,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash18 } = __require("crypto");
+    var { createHash: createHash19 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -31598,7 +31888,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash18("sha1").update(key + GUID).digest("base64");
+        const digest = createHash19("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -31761,19 +32051,19 @@ var init_codex_mcp = __esm({
 import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
-import { createHash as createHash8, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync14, readFileSync as readFileSync17, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join23 } from "node:path";
+import { createHash as createHash9, randomUUID as randomUUID9 } from "node:crypto";
+import { existsSync as existsSync8, mkdirSync as mkdirSync15, readFileSync as readFileSync17, unlinkSync as unlinkSync2, writeFileSync as writeFileSync12 } from "node:fs";
+import { join as join24 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 function nativeDir(stateDir) {
-  return join23(stateDir, "codex-app-server-native");
+  return join24(stateDir, "codex-app-server-native");
 }
 function nativeRecordPath(stateDir, projectId) {
-  return join23(nativeDir(stateDir), `${projectId}.json`);
+  return join24(nativeDir(stateDir), `${projectId}.json`);
 }
 function nativeListenSocketPath(stateDir, projectId) {
-  const key = createHash8("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
+  const key = createHash9("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
   return frizzIpcPath(`frizz-codex-native-${key}`);
 }
 function pidAlive2(pid) {
@@ -31943,7 +32233,7 @@ function attach(record, timeoutMs) {
 }
 async function startListener(options) {
   const { stateDir, projectId } = options;
-  mkdirSync14(nativeDir(stateDir), { recursive: true });
+  mkdirSync15(nativeDir(stateDir), { recursive: true });
   const socketPath = nativeListenSocketPath(stateDir, projectId);
   if (existsSync8(socketPath) && !await socketAccepting(socketPath)) {
     try {
@@ -32041,19 +32331,19 @@ var init_codex_app_server_native = __esm({
 // packages/server/src/backend/codex-app-server-host.ts
 import { spawn as spawn3 } from "node:child_process";
 import { createConnection } from "node:net";
-import { createHash as createHash9, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync15, readFileSync as readFileSync18, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join24 } from "node:path";
+import { createHash as createHash10, randomUUID as randomUUID10 } from "node:crypto";
+import { existsSync as existsSync9, mkdirSync as mkdirSync16, readFileSync as readFileSync18, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join25 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 function daemonDir(stateDir) {
-  return join24(stateDir, "codex-app-server");
+  return join25(stateDir, "codex-app-server");
 }
 function recordPath(stateDir, projectId) {
-  return join24(daemonDir(stateDir), `${projectId}.json`);
+  return join25(daemonDir(stateDir), `${projectId}.json`);
 }
 function codexAppServerSocketPath(stateDir, projectId) {
-  const key = createHash9("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
+  const key = createHash10("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
   return frizzIpcPath(`frizz-codex-${key}`);
 }
 function pidAlive3(pid) {
@@ -32133,7 +32423,7 @@ async function stopCodexAppServerDaemon(stateDir, projectId, timeoutMs = 1e4) {
 }
 function forkDaemon(options) {
   const { stateDir, projectId } = options;
-  mkdirSync15(daemonDir(stateDir), { recursive: true });
+  mkdirSync16(daemonDir(stateDir), { recursive: true });
   const record = recordPath(stateDir, projectId);
   try {
     unlinkSync3(record);
@@ -32348,15 +32638,15 @@ var init_codex_app_server_host = __esm({
 });
 
 // packages/server/src/backend/claude-quota.ts
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 import { homedir as homedir9, platform } from "node:os";
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 function claudeConfigDir() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join25(homedir9(), ".claude");
+  return override && override.trim() ? override : join26(homedir9(), ".claude");
 }
 function tokenFromCredentialsJson(raw2) {
   let doc;
@@ -32385,7 +32675,7 @@ async function readKeychainToken() {
 }
 async function readAccessToken(configDir) {
   try {
-    const fromFile = tokenFromCredentialsJson(await readFile(join25(configDir, ".credentials.json"), "utf8"));
+    const fromFile = tokenFromCredentialsJson(await readFile(join26(configDir, ".credentials.json"), "utf8"));
     if (fromFile) return fromFile;
   } catch {
   }
@@ -32457,10 +32747,10 @@ function retryAtFrom(res, now) {
   return now + Math.min(backoff, RATE_LIMIT_MAX_BACKOFF_MS);
 }
 function cachePaths(cacheDir, configDir) {
-  const profile = createHash10("sha256").update(configDir).digest("hex").slice(0, 12);
+  const profile = createHash11("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
-    data: join25(cacheDir, `claude-${profile}.json`),
-    lock: join25(cacheDir, `claude-${profile}.lock`)
+    data: join26(cacheDir, `claude-${profile}.json`),
+    lock: join26(cacheDir, `claude-${profile}.lock`)
   };
 }
 async function readShared(path3) {
@@ -32672,7 +32962,7 @@ function refreshSharedInBackground(paths, claudeBin, deps, now) {
 async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join26(frizzRoots().cache, "quota-cache");
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
   } catch {
@@ -32686,7 +32976,7 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join26(frizzRoots().cache, "quota-cache");
   const paths = cachePaths(cacheDir, configDir);
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
@@ -32793,19 +33083,19 @@ var init_claude_quota = __esm({
 });
 
 // packages/server/src/backend/auth-status.ts
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 import { homedir as homedir10, platform as platform2 } from "node:os";
-import { readFileSync as readFileSync19, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync19, statSync as statSync12 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join26(homedir10(), ".claude");
+  return override && override.trim() ? override : join27(homedir10(), ".claude");
 }
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync19(join26(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync19(join27(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -32838,7 +33128,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync19(join26(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync19(join27(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -32858,7 +33148,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
 function readCodexAccountId(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return void 0;
   try {
-    const doc = JSON.parse(readFileSync19(join26(codexHome, "auth.json"), "utf8"));
+    const doc = JSON.parse(readFileSync19(join27(codexHome, "auth.json"), "utf8"));
     if (!doc || typeof doc !== "object") return void 0;
     const tokens = doc.tokens;
     if (!tokens || typeof tokens !== "object") return void 0;
@@ -32917,12 +33207,12 @@ function asEmail(value) {
 }
 function claudeAccountFile() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? join26(override, ".claude.json") : join26(homedir10(), ".claude.json");
+  return override && override.trim() ? join27(override, ".claude.json") : join27(homedir10(), ".claude.json");
 }
 function readClaudeAccountEmail(path3 = claudeAccountFile()) {
   let stat2;
   try {
-    stat2 = statSync11(path3);
+    stat2 = statSync12(path3);
   } catch {
     return void 0;
   }
@@ -32941,7 +33231,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync19(join26(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync19(join27(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -33066,7 +33356,7 @@ var init_codex_execution_health = __esm({
 });
 
 // packages/server/src/backend/codex-app-server.ts
-import { createHash as createHash11, randomUUID as randomUUID11 } from "node:crypto";
+import { createHash as createHash12, randomUUID as randomUUID11 } from "node:crypto";
 import { existsSync as existsSync10 } from "node:fs";
 import { StringDecoder as StringDecoder3 } from "node:string_decoder";
 function selectCodexHostKind(flagValue, platform3, hasSpawn) {
@@ -33085,21 +33375,21 @@ function compareCodexVersions(a, b) {
   for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i] < y[i] ? -1 : 1;
   return 0;
 }
-function codexVersionVerdict(received, audited = CODEX_APP_SERVER_SUPPORTED_VERSION) {
+function codexVersionVerdict(received, audited2 = CODEX_APP_SERVER_SUPPORTED_VERSION) {
   if (!received) {
-    return { kind: "refused", message: `Codex app-server did not report a parseable frizz/<version> user agent; expected ${audited}` };
+    return { kind: "refused", message: `Codex app-server did not report a parseable frizz/<version> user agent; expected ${audited2}` };
   }
-  const cmp = compareCodexVersions(received, audited);
+  const cmp = compareCodexVersions(received, audited2);
   if (cmp === 0) return { kind: "audited" };
   if (cmp < 0) {
     return {
       kind: "refused",
-      message: `Codex app-server ${received} is older than the audited protocol ${audited}. Upgrade codex (\`npm i -g @openai/codex\`) \u2014 frizz sends parameters this build may not accept.`
+      message: `Codex app-server ${received} is older than the audited protocol ${audited2}. Upgrade codex (\`npm i -g @openai/codex\`) \u2014 frizz sends parameters this build may not accept.`
     };
   }
   return {
     kind: "ahead",
-    message: `Codex app-server ${received} is NEWER than frizz's audited protocol ${audited} \u2014 running anyway (the protocol is additive and unknown fields are ignored). If Codex threads misbehave, re-audit and re-pin. Run \`npm test -- codex-protocol-conformance\` to check frizz's params against this binary's own schema.`
+    message: `Codex app-server ${received} is NEWER than frizz's audited protocol ${audited2} \u2014 running anyway (the protocol is additive and unknown fields are ignored). If Codex threads misbehave, re-audit and re-pin. Run \`npm test -- codex-protocol-conformance\` to check frizz's params against this binary's own schema.`
   };
 }
 function isCodexSandboxMode(value) {
@@ -33414,7 +33704,7 @@ function canonicalJson2(value) {
   return JSON.stringify(normalize2(value));
 }
 function logicalRequestId(method, parts) {
-  const digest = createHash11("sha256").update(JSON.stringify([method, ...parts])).digest("hex");
+  const digest = createHash12("sha256").update(JSON.stringify([method, ...parts])).digest("hex");
   return `codex-${digest}`;
 }
 function requestFingerprint(value) {
@@ -33424,7 +33714,7 @@ function requestFingerprint(value) {
     delete record.startedAtMs;
     delete record.autoResolutionMs;
   }
-  return createHash11("sha256").update(canonicalJson2(normalized)).digest("hex");
+  return createHash12("sha256").update(canonicalJson2(normalized)).digest("hex");
 }
 function decision(id2, semantic, label) {
   return { id: id2, semantic, label };
@@ -36339,11 +36629,11 @@ var init_codex_app_server = __esm({
 });
 
 // packages/server/src/backend/codex-quota.ts
-import { join as join27 } from "node:path";
-import { readdirSync as readdirSync8, statSync as statSync12, openSync as openSync13, readSync as readSync6, fstatSync, closeSync as closeSync12 } from "node:fs";
+import { join as join28 } from "node:path";
+import { readdirSync as readdirSync8, statSync as statSync13, openSync as openSync13, readSync as readSync6, fstatSync, closeSync as closeSync12 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
 function sessionsDir2(codexHome) {
-  return join27(codexHome, "sessions");
+  return join28(codexHome, "sessions");
 }
 function newestRollouts(dir, out, budget) {
   if (budget.n <= 0) return;
@@ -36357,11 +36647,11 @@ function newestRollouts(dir, out, budget) {
   const files = entries2.filter((e14) => e14.isFile() && e14.name.startsWith("rollout-") && e14.name.endsWith(".jsonl")).map((e14) => e14.name).sort(descByName2);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    newestRollouts(join27(dir, d), out, budget);
+    newestRollouts(join28(dir, d), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
-    out.push(join27(dir, f));
+    out.push(join28(dir, f));
     budget.n--;
   }
 }
@@ -36433,7 +36723,7 @@ function readCodexQuotaFromRollouts(codexHome = defaultCodexHome()) {
     newestRollouts(sessionsDir2(codexHome), rollouts, { n: 8 });
     const byMtime = rollouts.map((path3) => {
       try {
-        return { path: path3, mtimeMs: statSync12(path3).mtimeMs };
+        return { path: path3, mtimeMs: statSync13(path3).mtimeMs };
       } catch {
         return void 0;
       }
@@ -36634,9 +36924,9 @@ var init_quota = __esm({
 
 // packages/server/src/local-file.ts
 import { spawn as spawn5 } from "node:child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync20, realpathSync as realpathSync7, statSync as statSync13 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync20, realpathSync as realpathSync7, statSync as statSync14 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import { dirname as dirname11, isAbsolute as isAbsolute5, join as join28, resolve as resolve5, sep as sep2 } from "node:path";
+import { dirname as dirname12, isAbsolute as isAbsolute5, join as join29, resolve as resolve5, sep as sep2 } from "node:path";
 function isUnder(real, root) {
   let rootReal;
   try {
@@ -36648,12 +36938,12 @@ function isUnder(real, root) {
     return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
   }
   try {
-    const trusted2 = statSync13(rootReal, { bigint: true });
+    const trusted2 = statSync14(rootReal, { bigint: true });
     if (!trusted2.isDirectory() || trusted2.ino === 0n) return false;
     for (let ancestor = real; ; ) {
-      const actual = statSync13(ancestor, { bigint: true });
+      const actual = statSync14(ancestor, { bigint: true });
       if (actual.dev === trusted2.dev && actual.ino === trusted2.ino) return true;
-      const parent = dirname11(ancestor);
+      const parent = dirname12(ancestor);
       if (parent === ancestor) return false;
       ancestor = parent;
     }
@@ -36672,7 +36962,7 @@ function resolveLocalFile(rawPath, roots) {
   }
   if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
   try {
-    if (!statSync13(real).isFile()) throw new Error("Local path is not a regular file");
+    if (!statSync14(real).isFile()) throw new Error("Local path is not a regular file");
   } catch (error) {
     if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
     throw new Error("Local file was not found");
@@ -36682,7 +36972,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join28(home, trimmed.slice(2)) : isAbsolute5(trimmed) ? trimmed : resolve5(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join29(home, trimmed.slice(2)) : isAbsolute5(trimmed) ? trimmed : resolve5(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -36740,7 +37030,7 @@ function localFileOpenCommand(path3, selected, options = {}) {
     const exists = options.exists ?? existsSync11;
     const localAppData = env.LOCALAPPDATA;
     if (localAppData) {
-      const exe2 = join28(localAppData, ...editor.exe);
+      const exe2 = join29(localAppData, ...editor.exe);
       if (exists(exe2)) return { command: exe2, args: [path3] };
     }
     if (/["%\r\n]/u.test(path3)) throw new Error(`cannot hand ${path3} to the ${editor.shim} shim through cmd.exe`);
@@ -37006,7 +37296,7 @@ var init_claude_model_upgrade = __esm({
 // packages/server/src/frizz.ts
 import { execFile as execFile6 } from "node:child_process";
 import { lstatSync as lstatSync3, realpathSync as realpathSync8 } from "node:fs";
-import { basename as basename5, dirname as dirname12, join as join29, resolve as resolve6 } from "node:path";
+import { basename as basename5, dirname as dirname13, join as join30, resolve as resolve6 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
@@ -37015,11 +37305,11 @@ function frizzScriptsDir() {
 function directFrizzRoot(projectDir) {
   try {
     const projectRoot = realpathSync8(projectDir);
-    const path3 = join29(projectRoot, ".frizz");
+    const path3 = join30(projectRoot, ".frizz");
     const stat2 = lstatSync3(path3);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
     const real = realpathSync8(path3);
-    return dirname12(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
+    return dirname13(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
   } catch {
     return null;
   }
@@ -37029,7 +37319,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join29(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join30(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -37054,7 +37344,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join29(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join30(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -37190,7 +37480,7 @@ var init_awaiting = __esm({
 // packages/server/src/backend/project-mcp-servers.ts
 import { readFileSync as readFileSync21 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function readJsonObject(path3) {
   try {
     const parsed = JSON.parse(readFileSync21(path3, "utf8"));
@@ -37286,15 +37576,15 @@ function projectMcpServers(cwd, options = {}) {
   const env = options.env ?? process.env;
   const home = options.home ?? homedir12();
   const configOverride = options.claudeConfigDir ?? (env.CLAUDE_CONFIG_DIR?.trim() ? env.CLAUDE_CONFIG_DIR.trim() : void 0);
-  const accountFile = configOverride ? join30(configOverride, ".claude.json") : join30(home, ".claude.json");
-  const userSettingsFile = join30(configOverride ?? join30(home, ".claude"), "settings.json");
+  const accountFile = configOverride ? join31(configOverride, ".claude.json") : join31(home, ".claude.json");
+  const userSettingsFile = join31(configOverride ?? join31(home, ".claude"), "settings.json");
   const account = readJsonObject(accountFile);
   const out = userScopeRemoteServers(account, cwd, env);
-  const declared = objectField(readJsonObject(join30(cwd, ".mcp.json")), "mcpServers");
+  const declared = objectField(readJsonObject(join31(cwd, ".mcp.json")), "mcpServers");
   if (!declared) return out;
   const approval = collectApproval([
-    readJsonObject(join30(cwd, ".claude", "settings.json")),
-    readJsonObject(join30(cwd, ".claude", "settings.local.json")),
+    readJsonObject(join31(cwd, ".claude", "settings.json")),
+    readJsonObject(join31(cwd, ".claude", "settings.local.json")),
     readJsonObject(userSettingsFile),
     objectField(objectField(account, "projects"), cwd)
   ]);
@@ -37319,17 +37609,17 @@ var init_project_mcp_servers = __esm({
 
 // packages/server/src/worker-plugin-dir.ts
 import { existsSync as existsSync12 } from "node:fs";
-import { dirname as dirname13, join as join31 } from "node:path";
+import { dirname as dirname14, join as join32 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync12(join31(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync12(join32(override, ".claude-plugin", "plugin.json")))
     return override;
-  let current = dirname13(fileURLToPath3(moduleUrl));
+  let current = dirname14(fileURLToPath3(moduleUrl));
   for (; ; ) {
-    const candidate = join31(current, "cc-worker");
-    if (existsSync12(join31(candidate, ".claude-plugin", "plugin.json"))) return candidate;
-    const parent = dirname13(current);
+    const candidate = join32(current, "cc-worker");
+    if (existsSync12(join32(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const parent = dirname14(current);
     if (parent === current) return void 0;
     current = parent;
   }
@@ -38463,11 +38753,11 @@ checks. Depth scales with blast radius and yields to the project's conventions.`
 });
 
 // packages/server/src/backend/acp-agents.ts
-import { accessSync as accessSync3, constants as constants2, statSync as statSync14 } from "node:fs";
-import { delimiter as delimiter2, isAbsolute as isAbsolute7, join as join32 } from "node:path";
+import { accessSync as accessSync3, constants as constants2, statSync as statSync15 } from "node:fs";
+import { delimiter as delimiter2, isAbsolute as isAbsolute7, join as join33 } from "node:path";
 function isExecutableFile(path3) {
   try {
-    if (!statSync14(path3).isFile()) return false;
+    if (!statSync15(path3).isFile()) return false;
     if (process.platform !== "win32") accessSync3(path3, constants2.X_OK);
     return true;
   } catch {
@@ -38480,9 +38770,9 @@ function findOnPath(command, env = process.env) {
   const exts = process.platform === "win32" ? ["", ...(env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";")] : [""];
   for (const dir of dirs) {
     for (const ext of exts) {
-      const candidate = join32(dir, command + ext.toLowerCase());
+      const candidate = join33(dir, command + ext.toLowerCase());
       if (isExecutableFile(candidate)) return candidate;
-      if (ext && isExecutableFile(join32(dir, command + ext))) return join32(dir, command + ext);
+      if (ext && isExecutableFile(join33(dir, command + ext))) return join33(dir, command + ext);
     }
   }
   return void 0;
@@ -39499,9 +39789,9 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync13, constants as constants3, existsSync as existsSync13, fstatSync as fstatSync2, lstatSync as lstatSync4, openSync as openSync14, readFileSync as readFileSync22, realpathSync as realpathSync9, statSync as statSync15, writeFileSync as writeFileSync13, mkdirSync as mkdirSync16, rmSync as rmSync10 } from "node:fs";
-import { basename as basename6, join as join33, dirname as dirname14 } from "node:path";
-import { createHash as createHash12, randomUUID as randomUUID13 } from "node:crypto";
+import { closeSync as closeSync13, constants as constants3, existsSync as existsSync13, fstatSync as fstatSync2, lstatSync as lstatSync4, openSync as openSync14, readFileSync as readFileSync22, realpathSync as realpathSync9, statSync as statSync16, writeFileSync as writeFileSync13, mkdirSync as mkdirSync17, rmSync as rmSync10 } from "node:fs";
+import { basename as basename6, join as join34, dirname as dirname15 } from "node:path";
+import { createHash as createHash13, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
   let allWords = firstLine2.split(/\s+/).filter(Boolean);
@@ -39519,7 +39809,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync13(join33(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync13(join34(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -39536,16 +39826,16 @@ function resolveLegacyThreadFile(projectDir, value) {
   if (!parsed.success) return null;
   try {
     const projectRoot = realpathSync9(projectDir);
-    const frizzPath = join33(projectRoot, ".frizz");
+    const frizzPath = join34(projectRoot, ".frizz");
     const frizzStat = lstatSync4(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
     const realFrizz = realpathSync9(frizzPath);
-    if (dirname14(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path3 = join33(realFrizz, `${parsed.data}.md`);
+    if (dirname15(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
+    const path3 = join34(realFrizz, `${parsed.data}.md`);
     const before = lstatSync4(path3);
     if (!before.isFile() || before.isSymbolicLink()) return null;
     const realPath = realpathSync9(path3);
-    if (dirname14(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
+    if (dirname15(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
     let contents;
     let openedBefore;
     let openedAfter;
@@ -39570,7 +39860,7 @@ function resolveLegacyThreadFile(projectDir, value) {
       size: after.size,
       mtimeMs: after.mtimeMs,
       ctimeMs: after.ctimeMs,
-      digest: createHash12("sha256").update(contents).digest("hex")
+      digest: createHash13("sha256").update(contents).digest("hex")
     };
   } catch {
     return null;
@@ -39585,9 +39875,9 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path3 = join33(parent, name);
+  const path3 = join34(parent, name);
   try {
-    mkdirSync16(path3);
+    mkdirSync17(path3);
   } catch (error) {
     const code = error && typeof error === "object" && "code" in error ? String(error.code) : "";
     if (code !== "EEXIST") throw error;
@@ -39595,7 +39885,7 @@ function ensureSafeDirectDirectory(parent, name) {
   const stat2 = lstatSync4(path3);
   if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw new Error("unsafe project directory");
   const real = realpathSync9(path3);
-  if (dirname14(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
+  if (dirname15(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
   return real;
 }
 function scratchDirRelPath(sessionId) {
@@ -39615,8 +39905,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join33(plugin, "skills", "gh", "scripts");
-  return existsSync13(join33(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join34(plugin, "skills", "gh", "scripts");
+  return existsSync13(join34(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -39628,7 +39918,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join33(dirname14(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join34(dirname15(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -39654,7 +39944,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join33(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join34(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -39670,10 +39960,10 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work (${children2}). Nothing in this directory is read automatically; if you want a note back after a compaction, mcp__frizz__goal with post_compaction: true re-sends a prompt of your choosing.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path3 = join33(projectDir, "FRIZZ.md");
+  const path3 = join34(projectDir, "FRIZZ.md");
   let body;
   try {
-    const st2 = statSync15(path3);
+    const st2 = statSync16(path3);
     if (!st2.isFile() || st2.size > FRIZZ_MD_MAX_BYTES) return "";
     body = readFileSync22(path3, "utf8").trim();
   } catch {
@@ -39705,7 +39995,7 @@ function effectivePermissionMode(kind, mode) {
 }
 function systemPromptFlags(sessionId, system) {
   if (!system) return [];
-  mkdirSync16(SYSTEM_PROMPT_DIR, { recursive: true });
+  mkdirSync17(SYSTEM_PROMPT_DIR, { recursive: true });
   const path3 = systemPromptPath(sessionId);
   writeFileSync13(path3, system);
   return ["--append-system-prompt-file", path3];
@@ -39714,7 +40004,7 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join33(pluginDir, "bin", FRIZZ_MCP.script);
+  const scriptPath = join34(pluginDir, "bin", FRIZZ_MCP.script);
   if (!existsSync13(scriptPath)) return void 0;
   return {
     scriptPath,
@@ -39796,7 +40086,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join33(deps.project.dir, ".frizz");
+  const frizzDir = join34(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path3 of new Set(built.prewrite.map((file) => file.path))) {
@@ -39809,7 +40099,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync10(join33(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync10(join34(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -40302,7 +40592,7 @@ import {
   watch as fsWatch
 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
-import { dirname as dirname15, join as join34 } from "node:path";
+import { dirname as dirname16, join as join35 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -40351,7 +40641,7 @@ function registeredLegacyFileIsTerminal(projectDir, slug) {
   return status === "done" || status === "dismissed";
 }
 function isBoardRelevantFrizzPath(roots, path3) {
-  return path3.endsWith(".md") && roots.has(dirname15(path3));
+  return path3.endsWith(".md") && roots.has(dirname16(path3));
 }
 function futureSnooze(row, nowMs) {
   const parsed = SnoozeUntil.safeParse(row.snoozed_until);
@@ -41211,7 +41501,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const dir = join34(project.dir, ".frizz");
+      const dir = join35(project.dir, ".frizz");
       const roots = /* @__PURE__ */ new Set([dir]);
       try {
         roots.add(realpathSync10(dir));
@@ -41226,7 +41516,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
           }
           if (events.some((event) => isBoardRelevantFrizzPath(roots, event.path))) scheduleRebuild();
         },
-        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join34(dir, name)) }
+        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join35(dir, name)) }
       );
       if (stopped) {
         await next.unsubscribe();
@@ -41332,6 +41622,100 @@ var init_board = __esm({
   }
 });
 
+// packages/server/src/session-peer.ts
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync23, renameSync as renameSync8, writeFileSync as writeFileSync14 } from "node:fs";
+import { homedir as homedir15 } from "node:os";
+import { dirname as dirname17, join as join36 } from "node:path";
+function claudeSessionDirs(env = process.env, home = homedir15()) {
+  const dirs = [join36(home, ".claude", "sessions")];
+  const override = env.CLAUDE_CONFIG_DIR?.trim();
+  if (override) dirs.unshift(join36(override, "sessions"));
+  return [...new Set(dirs)];
+}
+function sessionIdForPeerSocket(peer, dirs) {
+  const socket = peer.socket?.replace(/^uds:/, "");
+  const pid = socket ? SOCKET_PID.exec(socket)?.[1] : void 0;
+  if (!socket || !pid) return void 0;
+  for (const dir of dirs) {
+    let entry;
+    try {
+      entry = JSON.parse(readFileSync23(join36(dir, `${pid}.json`), "utf8"));
+    } catch {
+      continue;
+    }
+    if (entry.messagingSocketPath !== socket) continue;
+    if (peer.name && typeof entry.name === "string" && entry.name !== peer.name) continue;
+    if (typeof entry.sessionId === "string" && entry.sessionId) return entry.sessionId;
+  }
+  return void 0;
+}
+function createSessionPeerResolver(deps) {
+  const sessionDirs = deps.sessionDirs ?? (() => claudeSessionDirs());
+  let remembered;
+  const load = () => {
+    if (remembered) return remembered;
+    remembered = {};
+    if (deps.memoryFile) {
+      try {
+        const parsed = JSON.parse(readFileSync23(deps.memoryFile, "utf8"));
+        if (parsed && typeof parsed === "object") {
+          for (const [k10, v] of Object.entries(parsed)) if (typeof v === "string") remembered[k10] = v;
+        }
+      } catch {
+      }
+    }
+    return remembered;
+  };
+  const remember = (key, sessionId) => {
+    const all = load();
+    if (all[key] === sessionId) return;
+    all[key] = sessionId;
+    if (!deps.memoryFile) return;
+    try {
+      mkdirSync18(dirname17(deps.memoryFile), { recursive: true });
+      const tmp = `${deps.memoryFile}.${process.pid}.tmp`;
+      writeFileSync14(tmp, JSON.stringify(all));
+      renameSync8(tmp, deps.memoryFile);
+    } catch {
+    }
+  };
+  return (peer, receiverProjectId) => {
+    if (!peer.socket) return void 0;
+    const key = `${peer.socket}
+${peer.name ?? ""}`;
+    const live = sessionIdForPeerSocket(peer, sessionDirs());
+    if (live) remember(key, live);
+    const sessionId = live ?? load()[key];
+    const found = sessionId ? deps.findThread(sessionId) : void 0;
+    if (!found) return void 0;
+    const { projectId, project, ...thread } = found;
+    return projectId === receiverProjectId || !project ? thread : { ...thread, project };
+  };
+}
+function projectTranscriptSessionPeers(messages, resolve13) {
+  const cache2 = /* @__PURE__ */ new Map();
+  let changed = false;
+  const out = messages.map((message) => {
+    const peer = message.sessionPeer;
+    if (!peer?.socket) return message;
+    const key = `${peer.socket}
+${peer.name ?? ""}`;
+    if (!cache2.has(key)) cache2.set(key, resolve13(peer));
+    const thread = cache2.get(key);
+    if (!thread) return message;
+    changed = true;
+    return { ...message, sessionPeer: { ...peer, thread } };
+  });
+  return changed ? out : messages;
+}
+var SOCKET_PID;
+var init_session_peer = __esm({
+  "packages/server/src/session-peer.ts"() {
+    "use strict";
+    SOCKET_PID = /[\\/](\d+)\.sock$/;
+  }
+});
+
 // packages/server/src/wake-store.ts
 function isQuietWindowExempt(hintKey) {
   return WAKE_QUIET_EXEMPT_HINT_PREFIXES.some((prefix) => hintKey.startsWith(prefix));
@@ -42209,7 +42593,7 @@ var init_pr_watch_noise = __esm({
 // packages/server/src/scheduler.ts
 import { execFile as execFile8 } from "node:child_process";
 import { promisify as promisify7 } from "node:util";
-import { createHash as createHash13, randomUUID as randomUUID14 } from "node:crypto";
+import { createHash as createHash14, randomUUID as randomUUID14 } from "node:crypto";
 function failureSignature(rollup) {
   const ids = [];
   for (const c of Array.isArray(rollup) ? rollup : []) {
@@ -42219,7 +42603,7 @@ function failureSignature(rollup) {
     ids.push(`${label}@${c.detailsUrl ?? c.targetUrl ?? c.completedAt ?? ""}`);
   }
   if (ids.length === 0) return "";
-  return createHash13("sha1").update(ids.sort().join("\n")).digest("hex").slice(0, 12);
+  return createHash14("sha1").update(ids.sort().join("\n")).digest("hex").slice(0, 12);
 }
 function ghPrViewArgs(ref) {
   return ["pr", "view", String(ref.number), "--repo", `${ref.owner}/${ref.repo}`, "--json", "state,mergedAt,statusCheckRollup,headRefOid,mergeable,reviewDecision"];
@@ -42307,7 +42691,7 @@ function githubWatchStatus(pr2, polledAt) {
   };
 }
 function wakeDeliveryId(slug, sessionId, fenceId) {
-  return createHash13("sha256").update(slug).update("\0").update(sessionId).update("\0").update(fenceId).digest("hex");
+  return createHash14("sha256").update(slug).update("\0").update(sessionId).update("\0").update(fenceId).digest("hex");
 }
 function limitFenceId(fault) {
   return `${LIMIT_FENCE_PREFIX}${fault.at}`;
@@ -42322,7 +42706,7 @@ function isReportFenceId(fenceId) {
   return fenceId.startsWith(`${REPORT_FENCE_PREFIX}:`);
 }
 function snoozeFenceId(until, prompt) {
-  const digest = createHash13("sha256").update(prompt).digest("hex").slice(0, 16);
+  const digest = createHash14("sha256").update(prompt).digest("hex").slice(0, 16);
   return `${SNOOZE_FENCE_PREFIX}:${until}:${digest}`;
 }
 function isSnoozeFenceId(fenceId) {
@@ -42453,7 +42837,7 @@ function isOwnWatchExpiredFenceId(fenceId) {
   return fenceId.startsWith(`${OWN_WATCH_EXPIRED_FENCE_PREFIX}:`);
 }
 function questionAnswerFenceId(ids) {
-  return `${QUESTION_ANSWER_FENCE_PREFIX}:${createHash13("sha256").update([...ids].sort().join(",")).digest("hex").slice(0, 16)}`;
+  return `${QUESTION_ANSWER_FENCE_PREFIX}:${createHash14("sha256").update([...ids].sort().join(",")).digest("hex").slice(0, 16)}`;
 }
 function isQuestionAnswerFenceId(fenceId) {
   return fenceId.startsWith(`${QUESTION_ANSWER_FENCE_PREFIX}:`);
@@ -43440,8 +43824,8 @@ ${clock}`;
         // replaces it re-derives that clause from a cursor the superseded report never got to advance.
         ...(() => {
           const all = [...held?.changes ?? [], ...changes];
-          const merged = [...new Set(all)];
-          return merged.length ? { changes: merged } : {};
+          const merged2 = [...new Set(all)];
+          return merged2.length ? { changes: merged2 } : {};
         })()
       };
       const review = carried.items.length > 0 ? formatGithubWakeSteer({ ref: key, items: carried.items, omitted: carried.omitted }) : void 0;
@@ -44343,7 +44727,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join35 } from "node:path";
+import { join as join37 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -44434,7 +44818,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join35(opts.logDir, `${sessionId}.jsonl`);
+      return join37(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -44459,10 +44843,10 @@ var init_claude = __esm({
 });
 
 // packages/server/src/backend/acp-transcript.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync15, mkdirSync as mkdirSync17, readFileSync as readFileSync23 } from "node:fs";
-import { dirname as dirname16, join as join36 } from "node:path";
+import { appendFileSync as appendFileSync4, existsSync as existsSync15, mkdirSync as mkdirSync19, readFileSync as readFileSync24 } from "node:fs";
+import { dirname as dirname18, join as join38 } from "node:path";
 function acpTranscriptPath(stateDir, sessionId) {
-  return join36(stateDir, ACP_TRANSCRIPT_DIR, `${sessionId}.jsonl`);
+  return join38(stateDir, ACP_TRANSCRIPT_DIR, `${sessionId}.jsonl`);
 }
 function parseAcpRecord(line) {
   if (!line.trim()) return void 0;
@@ -44663,11 +45047,11 @@ var init_acp_transcript = __esm({
     AcpTranscriptWriter = class {
       constructor(path3) {
         this.path = path3;
-        mkdirSync17(dirname16(path3), { recursive: true });
-        if (!existsSync15(path3)) appendFileSync3(path3, "");
+        mkdirSync19(dirname18(path3), { recursive: true });
+        if (!existsSync15(path3)) appendFileSync4(path3, "");
       }
       append(record) {
-        appendFileSync3(this.path, JSON.stringify(record) + "\n");
+        appendFileSync4(this.path, JSON.stringify(record) + "\n");
       }
     };
     TOOL_TEXT_MAX = 12e3;
@@ -45050,19 +45434,19 @@ var init_acp_rpc = __esm({
 // packages/server/src/backend/acp-host.ts
 import { spawn as spawn7 } from "node:child_process";
 import { createConnection as createConnection2 } from "node:net";
-import { createHash as createHash14, randomUUID as randomUUID15 } from "node:crypto";
-import { existsSync as existsSync16, mkdirSync as mkdirSync18, readFileSync as readFileSync24, readdirSync as readdirSync9, unlinkSync as unlinkSync4 } from "node:fs";
-import { join as join37 } from "node:path";
+import { createHash as createHash15, randomUUID as randomUUID15 } from "node:crypto";
+import { existsSync as existsSync16, mkdirSync as mkdirSync20, readFileSync as readFileSync25, readdirSync as readdirSync9, unlinkSync as unlinkSync4 } from "node:fs";
+import { join as join39 } from "node:path";
 import { PassThrough as PassThrough3, Writable as Writable3 } from "node:stream";
 import { StringDecoder as StringDecoder5 } from "node:string_decoder";
 function daemonDir2(stateDir) {
-  return join37(stateDir, "acp-daemon");
+  return join39(stateDir, "acp-daemon");
 }
 function acpDaemonRecordPath(stateDir, sessionId) {
-  return join37(daemonDir2(stateDir), `${sessionId}.json`);
+  return join39(daemonDir2(stateDir), `${sessionId}.json`);
 }
 function acpDaemonSocketPath(stateDir, sessionId) {
-  const key = createHash14("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
+  const key = createHash15("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
   return frizzIpcPath(`frizz-acp-${key}`);
 }
 function pidAlive4(pid) {
@@ -45075,7 +45459,7 @@ function pidAlive4(pid) {
 }
 function readAcpDaemonRecord(stateDir, sessionId) {
   try {
-    const value = JSON.parse(readFileSync24(acpDaemonRecordPath(stateDir, sessionId), "utf8"));
+    const value = JSON.parse(readFileSync25(acpDaemonRecordPath(stateDir, sessionId), "utf8"));
     if (typeof value.daemonPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       threadSlug: typeof value.threadSlug === "string" ? value.threadSlug : "",
@@ -45121,7 +45505,7 @@ async function stopAcpDaemon(stateDir, sessionId, timeoutMs = 1e4) {
 }
 function forkDaemon2(options) {
   const { stateDir, sessionId } = options;
-  mkdirSync18(daemonDir2(stateDir), { recursive: true });
+  mkdirSync20(daemonDir2(stateDir), { recursive: true });
   const record = acpDaemonRecordPath(stateDir, sessionId);
   try {
     unlinkSync4(record);
@@ -72151,27 +72535,27 @@ var init_claude_models = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
-import { appendFileSync as appendFileSync5, mkdirSync as mkdirSync20, renameSync as renameSync9, statSync as statSync17 } from "node:fs";
-import { join as join39 } from "node:path";
+import { appendFileSync as appendFileSync6, mkdirSync as mkdirSync22, renameSync as renameSync10, statSync as statSync18 } from "node:fs";
+import { join as join41 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join39(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join41(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join39(stateDir, "codex-app-server");
+  const dir = join41(stateDir, "codex-app-server");
   const path3 = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
     if (event.event === "stderr") return;
     try {
       if (!ensured) {
-        mkdirSync20(dir, { recursive: true });
+        mkdirSync22(dir, { recursive: true });
         ensured = true;
       }
       try {
-        if (statSync17(path3).size > MAX_BYTES2) renameSync9(path3, `${path3}.1`);
+        if (statSync18(path3).size > MAX_BYTES2) renameSync10(path3, `${path3}.1`);
       } catch {
       }
-      appendFileSync5(path3, `${JSON.stringify({ at: now().toISOString(), ...event })}
+      appendFileSync6(path3, `${JSON.stringify({ at: now().toISOString(), ...event })}
 `);
     } catch {
     }
@@ -72189,7 +72573,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile9 } from "node:child_process";
 import { readdirSync as readdirSync11, unlinkSync as unlinkSync6 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join40 } from "node:path";
+import { join as join42 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -72206,7 +72590,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync11)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join40(options.dir, name)).filter((path3) => !keep.has(path3));
+    candidates = (deps.readdir ?? readdirSync11)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join42(options.dir, name)).filter((path3) => !keep.has(path3));
   } catch {
     return;
   }
@@ -72256,8 +72640,8 @@ var init_stale_socket_sweep = __esm({
 
 // packages/server/src/orphan-reaper.ts
 import { execFile as execFile10 } from "node:child_process";
-import { readFileSync as readFileSync26 } from "node:fs";
-import { dirname as dirname18 } from "node:path";
+import { readFileSync as readFileSync27 } from "node:fs";
+import { dirname as dirname20 } from "node:path";
 import { promisify as promisify8 } from "node:util";
 function firstTokenBasename(command) {
   const first = command.trimStart().split(/\s+/, 1)[0] ?? "";
@@ -72486,7 +72870,7 @@ async function sweepOrphansOnce(deps = {}) {
 }
 function sweepStaleBrokerSockets() {
   try {
-    sweepStaleSockets({ dir: dirname18(claudeBrokerSocketPath("", "")), prefix: CLAUDE_BROKER_SOCKET_PREFIX });
+    sweepStaleSockets({ dir: dirname20(claudeBrokerSocketPath("", "")), prefix: CLAUDE_BROKER_SOCKET_PREFIX });
   } catch {
   }
 }
@@ -72563,7 +72947,7 @@ var init_orphan_reaper = __esm({
     defaultExec = async (file, args) => (await execFileAsync6(file, args, { encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 1e4 })).stdout;
     defaultReadEnv = (pid) => {
       try {
-        return readFileSync26(`/proc/${pid}/environ`, "utf8");
+        return readFileSync27(`/proc/${pid}/environ`, "utf8");
       } catch {
         return null;
       }
@@ -72583,9 +72967,9 @@ var init_orphan_reaper = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join41 } from "node:path";
+import { join as join43 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
-import { homedir as homedir15 } from "node:os";
+import { homedir as homedir16 } from "node:os";
 function reconcileSessions(storage) {
   for (const row of storage.allSessions()) {
     if (isHeadlessRow(row)) continue;
@@ -72733,9 +73117,9 @@ async function createContext(opts = {}) {
   }
 }
 function createContextUnchecked(opts, resources) {
-  const home = opts.home ?? homedir15();
+  const home = opts.home ?? homedir16();
   const project = opts.project ?? resolveProject();
-  const storage = createStorage(opts.database ?? join41(project.stateDir, "ui.db"), project.id);
+  const storage = createStorage(opts.database ?? join43(project.stateDir, "ui.db"), project.id);
   resources.storage = storage;
   clearSecrets(project.stateDir);
   const bus = new Bus();
@@ -72950,10 +73334,30 @@ function createContextUnchecked(opts, resources) {
   }
   void claudeBroker?.warmUp();
   opts.startup?.afterPhase?.("Claude broker bridge");
+  const sessionPeerResolver = createSessionPeerResolver({
+    findThread: (sessionId) => {
+      const open = [{ project, storage }, ...(opts.activeTenants?.() ?? []).filter((t) => t.project.id !== project.id)];
+      for (const tenant of open) {
+        const rows = tenant.storage?.allSessions() ?? [];
+        const row = rows.find((r) => r.session_id === sessionId || r.agent_session_id === sessionId || r.transcript_id === sessionId);
+        if (!row) continue;
+        const shown = resolveSessionTitle(row, void 0);
+        return {
+          projectId: tenant.project.id,
+          project: findById(tenant.project.id, home)?.slug,
+          slug: row.slug,
+          title: shown.aiTitle || shown.title || row.slug
+        };
+      }
+      return void 0;
+    },
+    memoryFile: join43(frizzRoots().state, "session-peers.json")
+  });
   const tailer = createTailer({
     project,
     storage,
     bus,
+    onCrossSessionMessage: (peer) => void sessionPeerResolver(peer, project.id),
     backendFor,
     codexModels: () => readCodexModels(void 0, opts.codexVersion),
     onChange: () => board.refresh(),
@@ -73138,8 +73542,12 @@ ${wakeDeliveryToken(deliveryId)}`;
     getDispatchPreferences: (codexModels) => getDispatchPreferences(storage, getSettings(storage, home), home, codexModels),
     setDispatchPreference: (update, codexModels) => setDispatchPreference(storage, getSettings(storage, home), home, update, codexModels),
     activeTenants: opts.activeTenants,
+    sessionPeerThread: (peer) => sessionPeerResolver(peer, project.id),
     teardownProject: opts.teardownProject,
     launchProjectId: opts.launchProjectId,
+    // Derived from the state dir, never from `homedir()`, so a sandboxed server audits into its own
+    // sandbox (the reason serverAddressPathForStateDir exists).
+    audit: fileAuditLog(auditLogPathForStateDir(project.stateDir)),
     claudeBin: opts.claudeBin,
     codexBin: opts.codexBin,
     codexVersion: opts.codexVersion
@@ -73151,6 +73559,8 @@ var init_context = __esm({
     "use strict";
     init_src();
     init_bus();
+    init_frizz_paths();
+    init_project_registry();
     init_project();
     init_storage();
     init_secret_files();
@@ -73159,6 +73569,8 @@ var init_context = __esm({
     init_quota();
     init_claude_quota();
     init_board();
+    init_session_peer();
+    init_audit();
     init_tailer();
     init_dispatch();
     init_scheduler();
@@ -75849,8 +76261,8 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync18, readFileSync as readFileSync27, writeFileSync as writeFileSync14 } from "node:fs";
-import { basename as basename7, dirname as dirname19, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync18, readFileSync as readFileSync28, writeFileSync as writeFileSync15 } from "node:fs";
+import { basename as basename7, dirname as dirname21, resolve as resolve9 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
   return `"${v.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -75862,10 +76274,10 @@ function deriveTitle(body, slug) {
 function repairThreadFile(frizzDir, file) {
   const root = resolve9(frizzDir);
   const abs = resolve9(root, file);
-  if (dirname19(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
+  if (dirname21(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
   if (!existsSync18(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
-  const content = readFileSync27(abs, "utf8");
+  const content = readFileSync28(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
     throw new RepairError(`${basename7(abs)} already opens with a "---" block \u2014 repair only heals a MISSING frontmatter block`);
@@ -75880,7 +76292,7 @@ function repairThreadFile(frizzDir, file) {
     "---",
     ""
   ].join("\n");
-  writeFileSync14(abs, frontmatter + content);
+  writeFileSync15(abs, frontmatter + content);
   return { slug };
 }
 var RepairError, REPAIR_STATUS_TEXT;
@@ -76093,7 +76505,7 @@ var init_repo_files = __esm({
 });
 
 // cc-worker/hooks/bash-background.mjs
-import { readFileSync as readFileSync28, realpathSync as realpathSync12 } from "node:fs";
+import { readFileSync as readFileSync29, realpathSync as realpathSync12 } from "node:fs";
 import { basename as basename8 } from "node:path";
 import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 function emit(obj) {
@@ -76248,7 +76660,7 @@ var init_bash_background = __esm({
     if (isDirectHookExecution(process.argv[1], import.meta.url)) {
       try {
         const env = process.argv.includes("--frizz-thread") ? { ...process.env, FRIZZ_THREAD: process.env.FRIZZ_THREAD || "codex-worker" } : process.env;
-        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync28(0, "utf8")), env));
+        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync29(0, "utf8")), env));
       } catch {
         emit({});
       }
@@ -76257,11 +76669,11 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync15, existsSync as existsSync19, fstatSync as fstatSync3, mkdirSync as mkdirSync21, openSync as openSync16, readdirSync as readdirSync12, readFileSync as readFileSync29, readSync as readSync8, renameSync as renameSync10, statSync as statSync18, unlinkSync as unlinkSync7, writeFileSync as writeFileSync15 } from "node:fs";
-import { createHash as createHash15 } from "node:crypto";
+import { closeSync as closeSync15, existsSync as existsSync19, fstatSync as fstatSync3, mkdirSync as mkdirSync23, openSync as openSync16, readdirSync as readdirSync12, readFileSync as readFileSync30, readSync as readSync8, renameSync as renameSync11, statSync as statSync19, unlinkSync as unlinkSync7, writeFileSync as writeFileSync16 } from "node:fs";
+import { createHash as createHash16 } from "node:crypto";
 import { StringDecoder as StringDecoder6 } from "node:string_decoder";
-import { join as join42 } from "node:path";
-import { homedir as homedir16 } from "node:os";
+import { join as join44 } from "node:path";
+import { homedir as homedir17 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
   if (n >= 1e3) return `${Math.round(n / 1e3)}k`;
@@ -76317,7 +76729,12 @@ function userDisplayText(text2, first) {
   projected = stripWakeTrailer(projected);
   return projected === text2 ? void 0 : projected;
 }
+function sessionPeerOf(session) {
+  return { ...session.name ? { name: session.name } : {}, ...session.socket ? { socket: session.socket } : {} };
+}
 function userProjection(text2, first) {
+  const session = parseCrossSessionMessage(text2);
+  if (session) return { displayText: session.body, sessionPeer: sessionPeerOf(session) };
   const peer = parseAgentMessage(text2);
   if (peer) return { displayText: peer.body, peerFrom: peer.from };
   const displayText2 = userDisplayText(text2, first);
@@ -76478,6 +76895,15 @@ function createTranscriptFold(identityPrefix = "claude") {
   function findQueued(key) {
     return queuedPending.find((e14) => e14.key === key && e14.message.queued) ?? queuedPending.find((e14) => e14.key === key);
   }
+  function findCrossSessionQueued(text2) {
+    const sent = parseCrossSessionMessage(text2);
+    if (!sent) return void 0;
+    const same = (e14) => {
+      const queued = e14.message.sessionPeer ? parseCrossSessionMessage(e14.key) : void 0;
+      return !!queued && queued.body === sent.body && queued.name === sent.name && queued.socket === sent.socket;
+    };
+    return queuedPending.find((e14) => e14.message.queued && same(e14)) ?? queuedPending.find(same);
+  }
   function dropQueued(entry) {
     const i = queuedPending.indexOf(entry);
     if (i !== -1) queuedPending.splice(i, 1);
@@ -76573,9 +76999,9 @@ function createTranscriptFold(identityPrefix = "claude") {
         const str2 = (v) => typeof v === "string" ? v.trim() : "";
         const senderTaskId = str2(peerOrigin.senderTaskId);
         const dispatchId = senderTaskId ? childDispatchIds.get(senderTaskId) : void 0;
-        const entry = prompt.trim() ? findQueued(prompt) : void 0;
+        const entry = prompt.trim() ? findQueued(prompt) ?? findCrossSessionQueued(prompt) : void 0;
         if (entry) {
-          resolveQueued(prompt);
+          resolveQueued(entry.key);
           if (dispatchId && entry.message.peerFrom) entry.message.peerDispatchId = dispatchId;
           const described = dispatchId ? dispatchLabels.get(dispatchId) : void 0;
           if (entry.message.peerFrom) {
@@ -76584,6 +77010,9 @@ function createTranscriptFold(identityPrefix = "claude") {
             if (senderTaskId) entry.message.peerSenderTaskId = senderTaskId;
           }
           lastAssistantId = null;
+        } else if (prompt.trim() && parseCrossSessionMessage(prompt)) {
+          out.push({ sourceId, role: "user", text: prompt, ...userProjection(prompt, out.length === 0), tools: [], parts: [], at: thisTs });
+          lastAssistantId = null;
         } else {
           const parsed = prompt.trim() ? parseAgentMessage(prompt) : void 0;
           const describedHere = dispatchId ? dispatchLabels.get(dispatchId) : void 0;
@@ -76619,7 +77048,16 @@ function createTranscriptFold(identityPrefix = "claude") {
         const metaText = userText(rec);
         if (metaText) {
           const key = findQueued(metaText) ? metaText : peerSessionQueuedKey(metaText, unresolvedQueuedKeys());
-          const pending = key === void 0 ? void 0 : findQueued(key);
+          const pending = (key === void 0 ? void 0 : findQueued(key)) ?? findCrossSessionQueued(metaText);
+          if (rec.isSidechain !== true && parseCrossSessionMessage(metaText)) {
+            if (pending) {
+              resolveQueued(pending.key);
+            } else {
+              out.push({ sourceId, role: "user", text: metaText, ...userProjection(metaText, out.length === 0), tools: [], parts: [], at: rec.timestamp });
+            }
+            lastAssistantId = null;
+            return;
+          }
           if (pending) {
             resolveQueuedThrough(pending);
             dropQueued(pending);
@@ -76868,14 +77306,14 @@ function pruneScreenshotCache() {
     if (entries2.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries2.map((n) => {
       try {
-        return { n, m: statSync18(join42(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync19(join44(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync7(join42(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync7(join44(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -76904,17 +77342,17 @@ function persistDataUrlImage(dataUrl, idKey) {
 function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
-  const name = createHash15("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path3 = join42(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const name = createHash16("sha256").update(idKey).digest("hex").slice(0, 32);
+  const path3 = join44(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
     if (existsSync19(path3)) return path3;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
-    mkdirSync21(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join42(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
-    writeFileSync15(tmp, buf);
-    renameSync10(tmp, path3);
+    mkdirSync23(SCREENSHOT_CACHE_DIR, { recursive: true });
+    const tmp = join44(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    writeFileSync16(tmp, buf);
+    renameSync11(tmp, path3);
     pruneScreenshotCache();
     return path3;
   } catch {
@@ -76926,17 +77364,17 @@ function persistSentFile(srcPath, idKey) {
   if (!ATTACHMENT_IMAGE_EXTENSIONS.includes(ext)) return void 0;
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
-    const name = createHash15("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join42(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    const name = createHash16("sha256").update(idKey).digest("hex").slice(0, 32);
+    const dest = join44(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
     if (existsSync19(dest)) return dest;
-    const size = statSync18(srcPath).size;
+    const size = statSync19(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
-    const buf = readFileSync29(srcPath);
+    const buf = readFileSync30(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
-    mkdirSync21(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join42(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
-    writeFileSync15(tmp, buf);
-    renameSync10(tmp, dest);
+    mkdirSync23(SCREENSHOT_CACHE_DIR, { recursive: true });
+    const tmp = join44(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    writeFileSync16(tmp, buf);
+    renameSync11(tmp, dest);
     pruneScreenshotCache();
     return dest;
   } catch {
@@ -77372,7 +77810,7 @@ function readTranscript(project, sessionId) {
 }
 function verifyIncrementalParse(path3, identityPrefix, incremental) {
   try {
-    const fresh = parseTranscript(readFileSync29(path3, "utf8"), identityPrefix);
+    const fresh = parseTranscript(readFileSync30(path3, "utf8"), identityPrefix);
     const a = JSON.stringify(incremental);
     const b = JSON.stringify(fresh);
     if (a !== b) {
@@ -77392,16 +77830,16 @@ function verifyIncrementalParse(path3, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join42(homedir16(), ".claude", "projects", project.cwdSlug);
+  return join44(homedir17(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path3 = join42(logDirOf(project), `${sessionId}.jsonl`);
+  const path3 = join44(logDirOf(project), `${sessionId}.jsonl`);
   try {
-    if (statSync18(path3).size > 0) return path3;
+    if (statSync19(path3).size > 0) return path3;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join42(stranded, `${sessionId}.jsonl`) : path3;
+  return stranded ? join44(stranded, `${sessionId}.jsonl`) : path3;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -77711,7 +78149,7 @@ function countBoundedStart(messages) {
   let boundary = -1;
   for (let i = tail - 1; i >= 0; i--) {
     const m = messages[i];
-    if (m.role === "user" && !m.wake && !m.queued && !m.agentInstruction) {
+    if (m.role === "user" && !m.wake && !m.queued && !m.agentInstruction && !m.sessionPeer) {
       boundary = i;
       break;
     }
@@ -77740,7 +78178,7 @@ function latestTranscriptWindow(messages) {
     );
     if (tools.length === 0) continue;
     pinned.push({
-      sourceId: `pinned-bg:${createHash15("sha256").update(message.sourceId).digest("base64url").slice(0, 24)}`,
+      sourceId: `pinned-bg:${createHash16("sha256").update(message.sourceId).digest("base64url").slice(0, 24)}`,
       pinnedFromSourceId: message.sourceId,
       role: "assistant",
       text: "",
@@ -78536,7 +78974,7 @@ function fixedSnapshot(source) {
     };
     let allBytes;
     const fileKey = `${before.dev}:${before.ino}:${Math.trunc(before.birthtimeMs)}`;
-    const transcriptKey = createHash15("sha256").update(`${source.slug}\0${source.sessionId}\0${source.nativeId}\0${source.backend}\0${source.runtimeGeneration}\0${fileKey}`).digest("base64url").slice(0, 32);
+    const transcriptKey = createHash16("sha256").update(`${source.slug}\0${source.sessionId}\0${source.nativeId}\0${source.backend}\0${source.runtimeGeneration}\0${fileKey}`).digest("base64url").slice(0, 32);
     let rawText;
     return {
       ...source,
@@ -78569,7 +79007,7 @@ function projectSnapshot(snapshot) {
   return retireStaleQueuedBubbles([...entry.fold.allMessages()]);
 }
 function digestPrefix(bytes, length = bytes.length) {
-  return createHash15("sha256").update(bytes.subarray(0, length)).digest("base64url");
+  return createHash16("sha256").update(bytes.subarray(0, length)).digest("base64url");
 }
 function fullDigest(snapshot) {
   const key = `${snapshot.fileKey}\0${snapshot.size}`;
@@ -78579,7 +79017,7 @@ function fullDigest(snapshot) {
     fullDigestCache.set(key, hit);
     return hit;
   }
-  const hash = createHash15("sha256");
+  const hash = createHash16("sha256");
   for (let at2 = 0; at2 < snapshot.size; ) {
     const buf = snapshot.readRange(at2, Math.min(TRANSCRIPT_DECODE_WINDOW, snapshot.size - at2));
     if (buf.length === 0) break;
@@ -78633,7 +79071,7 @@ function pageProjectedTranscript(messages, anchor, limits = {}) {
   let boundary = 0;
   for (let i = anchor - 1; i >= 0; i--) {
     const m = messages[i];
-    if (m.role === "user" && !m.wake && !m.queued && !m.agentInstruction) {
+    if (m.role === "user" && !m.wake && !m.queued && !m.agentInstruction && !m.sessionPeer) {
       boundary = i;
       break;
     }
@@ -78662,7 +79100,7 @@ function emptyTranscriptPage(source) {
     beforeCursor: null,
     hasEarlier: false,
     reachedTurnBoundary: true,
-    transcriptKey: createHash15("sha256").update(keySeed).digest("base64url").slice(0, 32),
+    transcriptKey: createHash16("sha256").update(keySeed).digest("base64url").slice(0, 32),
     editedFiles: []
   };
 }
@@ -78741,7 +79179,7 @@ function readEarlierThreadTranscriptPage(project, storage, slug, cursor, backend
 }
 function readCodexTranscriptFile(absPath, nativeId = absPath) {
   try {
-    return parseCodexTranscript(readFileSync29(absPath, "utf8"), `codex:${nativeId}`);
+    return parseCodexTranscript(readFileSync30(absPath, "utf8"), `codex:${nativeId}`);
   } catch {
     return [];
   }
@@ -78802,14 +79240,15 @@ function projectTranscriptPeerNames(messages, lookup) {
   });
   return changed ? out : messages;
 }
-function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup) {
+function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup, sessionPeerLookup) {
   const named = peerLookup ? projectTranscriptPeerNames(page.messages, peerLookup) : page.messages;
-  return { ...page, messages: projectTranscriptAgentLifecycles(named, lookup) };
+  const sent = sessionPeerLookup ? projectTranscriptSessionPeers(named, sessionPeerLookup) : named;
+  return { ...page, messages: projectTranscriptAgentLifecycles(sent, lookup) };
 }
 function readTranscriptFile(absPath) {
   try {
-    const pathKey = createHash15("sha256").update(absPath).digest("base64url").slice(0, 16);
-    return parseTranscript(readFileSync29(absPath, "utf8"), `claude-file:${pathKey}`);
+    const pathKey = createHash16("sha256").update(absPath).digest("base64url").slice(0, 16);
+    return parseTranscript(readFileSync30(absPath, "utf8"), `claude-file:${pathKey}`);
   } catch {
     return [];
   }
@@ -78819,6 +79258,7 @@ var init_transcript = __esm({
   "packages/server/src/transcript.ts"() {
     "use strict";
     init_src();
+    init_session_peer();
     init_types2();
     init_delivery_ledger();
     init_edited_files();
@@ -79380,10 +79820,10 @@ var init_background_shell_output = __esm({
 
 // packages/server/src/frizz-md.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync20, writeFileSync as writeFileSync16 } from "node:fs";
-import { join as join43 } from "node:path";
+import { existsSync as existsSync20, writeFileSync as writeFileSync17 } from "node:fs";
+import { join as join45 } from "node:path";
 function frizzMdPath(projectDir) {
-  return join43(projectDir, "FRIZZ.md");
+  return join45(projectDir, "FRIZZ.md");
 }
 function git2(args, cwd) {
   try {
@@ -79408,7 +79848,7 @@ function frizzMdStatus(projectDir, storage) {
 function createFrizzMd(projectDir, answers) {
   const path3 = frizzMdPath(projectDir);
   try {
-    writeFileSync16(path3, composeFrizzMd(answers, defaultBranch(projectDir)), { encoding: "utf8", flag: "wx" });
+    writeFileSync17(path3, composeFrizzMd(answers, defaultBranch(projectDir)), { encoding: "utf8", flag: "wx" });
   } catch (error) {
     if (error.code === "EEXIST") throw new Error("This project already has a FRIZZ.md.");
     throw error;
@@ -79428,12 +79868,12 @@ var init_frizz_md2 = __esm({
 });
 
 // packages/server/src/image-header.ts
-import { closeSync as closeSync17, openSync as openSync18, readSync as readSync10, statSync as statSync19 } from "node:fs";
+import { closeSync as closeSync17, openSync as openSync18, readSync as readSync10, statSync as statSync20 } from "node:fs";
 import { extname as extname2 } from "node:path";
 function readHead3(path3, budget) {
   let fd2;
   try {
-    const size = statSync19(path3).size;
+    const size = statSync20(path3).size;
     if (size === 0) return void 0;
     const buffer = Buffer.alloc(Math.min(size, budget));
     fd2 = openSync18(path3, "r");
@@ -79811,12 +80251,12 @@ function run(argv) {
 });
 
 // packages/server/src/router.ts
-import { readFileSync as readFileSync30, statSync as statSync20 } from "node:fs";
-import { join as join44, resolve as resolve10 } from "node:path";
+import { readFileSync as readFileSync31, statSync as statSync21 } from "node:fs";
+import { join as join46, resolve as resolve10 } from "node:path";
 import { randomUUID as randomUUID17 } from "node:crypto";
-import { basename as basename9, dirname as dirname20 } from "node:path";
-import { existsSync as existsSync21, mkdirSync as mkdirSync22, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
-import { homedir as homedir17 } from "node:os";
+import { basename as basename9, dirname as dirname22 } from "node:path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync24, rmSync as rmSync12, writeFileSync as writeFileSync18 } from "node:fs";
+import { homedir as homedir18 } from "node:os";
 function validateGithubDispatchProfile(input, codexModels) {
   if (input.backend === "acp") return;
   if (input.effort === void 0) throw new Error(`Unsupported ${input.backend} model/effort pair: ${input.model} / (no effort)`);
@@ -79986,20 +80426,21 @@ function projectCard(entry, stale) {
     iconIsCustom: entry.iconSource === "custom" ? true : void 0
   };
 }
-function addProjectAtPath(input, home = homedir17()) {
+function addProjectAtPath(input, home = homedir18()) {
   const typed = input.trim();
   if (!typed) throw new Error("Enter a folder path.");
-  const expanded = typed === "~" || typed.startsWith("~/") ? join44(home, typed.slice(1)) : typed;
+  const expanded = typed === "~" || typed.startsWith("~/") ? join46(home, typed.slice(1)) : typed;
   const absolute = resolve10(expanded);
   let stats;
   try {
-    stats = statSync20(absolute);
+    stats = statSync21(absolute);
   } catch {
     throw new Error(`No folder at ${absolute}`);
   }
   if (!stats.isDirectory()) throw new Error(`That is a file, not a folder: ${absolute}`);
   const root = chosenProjectRoot(absolute, home);
   if (isHomeDirectory(root, home)) throw new Error("The home folder cannot be a project \u2014 choose a folder inside it.");
+  refuseWorldWritableProject(root);
   const id2 = ensureProjectIdFile(root, home, existingProjectId(root));
   const remoteOwner = resolveProjectLabel(root)?.split("/")[0];
   let registered = registerProject({ dir: root, id: id2, remoteOwner }, home);
@@ -80009,6 +80450,9 @@ function addProjectAtPath(input, home = homedir17()) {
   if (!registered.entry) throw new Error("Could not register that folder.");
   return projectCard(registered.entry, false);
 }
+function addedProject(card) {
+  return { project: { id: card.id, dir: card.path } };
+}
 function storeProjectIcon(id2, name, bytes) {
   const extension2 = name.toLowerCase().match(/\.([a-z0-9]+)$/u)?.[1];
   if (!extension2 || !PROJECT_ICON_EXTENSIONS.includes(extension2)) {
@@ -80018,8 +80462,8 @@ function storeProjectIcon(id2, name, bytes) {
   if (!entry) throw new Error("No such project.");
   if (bytes.length === 0) throw new Error("That file is empty.");
   const path3 = customIconPath(id2, `.${extension2}`);
-  mkdirSync22(dirname20(path3), { recursive: true });
-  writeFileSync17(path3, bytes);
+  mkdirSync24(dirname22(path3), { recursive: true });
+  writeFileSync18(path3, bytes);
   if (!imageDimensions(path3)) {
     rmSync12(path3, { force: true });
     throw new Error("That file does not look like an image Frizz can draw.");
@@ -80040,7 +80484,7 @@ function iconPicker(id2) {
 function setProjectIconFromFile(id2, file) {
   let bytes;
   try {
-    bytes = readFileSync30(file);
+    bytes = readFileSync31(file);
   } catch {
     throw new Error("That file could not be read.");
   }
@@ -80049,7 +80493,7 @@ function setProjectIconFromFile(id2, file) {
 }
 function mergeSubAgentSteers(messages, steers) {
   if (!steers.length) return messages;
-  const merged = [...messages];
+  const merged2 = [...messages];
   for (const steer of steers) {
     const at2 = new Date(steer.sent_at).toISOString();
     const duplicate = messages.some((message2) => {
@@ -80066,15 +80510,17 @@ function mergeSubAgentSteers(messages, steers) {
       parts: [{ kind: "text", text: steer.message }],
       at: at2
     };
-    const next = merged.findIndex((candidate) => candidate.at !== void 0 && Date.parse(candidate.at) > steer.sent_at);
-    if (next === -1) merged.push(message);
-    else merged.splice(next, 0, message);
+    const next = merged2.findIndex((candidate) => candidate.at !== void 0 && Date.parse(candidate.at) > steer.sent_at);
+    if (next === -1) merged2.push(message);
+    else merged2.splice(next, 0, message);
   }
-  return merged;
+  return merged2;
 }
 function createRouter(ctx) {
-  const frizzDir = join44(ctx.project.dir, ".frizz");
+  const frizzDir = join46(ctx.project.dir, ".frizz");
   const openRoots = openableFileRoots(ctx.project);
+  const thisProject = { id: ctx.project.id, dir: ctx.project.dir };
+  const audit = (action, base, run3, onResult) => audited(ctx.audit, action, base, run3, { onResult, servedBy: ctx.project.id });
   function isAutoTitledSession(slug) {
     return ctx.storage.getSession(slug)?.title_auto === 1;
   }
@@ -80167,6 +80613,16 @@ function createRouter(ctx) {
       return void 0;
     }
   }
+  function answerDigest(slug, answer) {
+    const q2 = ctx.storage.getThreadQuestion(answer.questionId);
+    if (q2?.thread_slug === slug && parseQuestionSpec(q2.spec)?.secret) return { questionId: answer.questionId, secret: true };
+    return {
+      questionId: answer.questionId,
+      ...answer.chosen.length > 0 ? { chosen: textDigest(answer.chosen.join("\n")) } : {},
+      ...answer.text ? { text: textDigest(answer.text) } : {},
+      ...answer.followUps?.length ? { followUps: answer.followUps.length } : {}
+    };
+  }
   function parseStoredAnswer(raw2) {
     if (!raw2) return void 0;
     try {
@@ -80416,7 +80872,7 @@ function createRouter(ctx) {
       output: TranscriptPage,
       handler: async ({ input }) => {
         const page = readLatestThreadTranscriptPage(ctx.project, ctx.storage, input.slug, ctx.backendFor);
-        return retireOpsInPage(input.slug, projectTranscriptPageAgentLifecycles(page, (id2) => ctx.tailer.subAgent(input.slug, id2), (taskId) => ctx.tailer.subAgentByTaskId?.(input.slug, taskId)));
+        return retireOpsInPage(input.slug, projectTranscriptPageAgentLifecycles(page, (id2) => ctx.tailer.subAgent(input.slug, id2), (taskId) => ctx.tailer.subAgentByTaskId?.(input.slug, taskId), ctx.sessionPeerThread));
       }
     }),
     // One bounded backward step through the canonical projected transcript. The cursor excludes the
@@ -80426,7 +80882,7 @@ function createRouter(ctx) {
       output: TranscriptPage,
       handler: async ({ input }) => {
         const page = readEarlierThreadTranscriptPage(ctx.project, ctx.storage, input.slug, input.cursor, ctx.backendFor);
-        return retireOpsInPage(input.slug, projectTranscriptPageAgentLifecycles(page, (id2) => ctx.tailer.subAgent(input.slug, id2), (taskId) => ctx.tailer.subAgentByTaskId?.(input.slug, taskId)));
+        return retireOpsInPage(input.slug, projectTranscriptPageAgentLifecycles(page, (id2) => ctx.tailer.subAgent(input.slug, id2), (taskId) => ctx.tailer.subAgentByTaskId?.(input.slug, taskId), ctx.sessionPeerThread));
       }
     }),
     // The thread's ANSWERED registered questions, each with its answer, so the transcript can keep the
@@ -80471,29 +80927,40 @@ function createRouter(ctx) {
     interactionResolve: mutation({
       input: ResolveInteractionInput,
       output: ResolveInteractionResult,
-      handler: async ({ input }) => {
-        const scope = interactionScope(input.slug, input.sessionId);
-        const delivery2 = ctx.interactions.providerDelivery(scope, input.interactionId);
-        let result;
-        if (delivery2) {
-          if (!ctx.codexAppServer || !ctx.codexAppServer.ownsInteraction(scope, input.interactionId)) {
-            throw new Error("provider-backed interaction is unavailable until its provider bridge reconnects");
-          }
-          const providerResult = await ctx.codexAppServer.resolveInteraction(scope, input);
-          if (!providerResult) throw new Error("provider-backed interaction lost its durable delivery owner");
-          result = {
-            effect: providerResult.effect === "already-sent" ? "already-queued" : providerResult.effect,
-            interaction: providerResult.interaction
+      handler: ({ input }) => audit(
+        "interactionResolve",
+        {
+          project: thisProject,
+          thread: input.slug,
+          // The decision the operator picked and how many values rode with it — never the values, which
+          // can be a secret the interaction asked for.
+          detail: { interactionId: input.interactionId, decisionId: input.decisionId, values: Object.keys(input.values ?? {}).length }
+        },
+        async () => {
+          const scope = interactionScope(input.slug, input.sessionId);
+          const delivery2 = ctx.interactions.providerDelivery(scope, input.interactionId);
+          let result;
+          if (delivery2) {
+            if (!ctx.codexAppServer || !ctx.codexAppServer.ownsInteraction(scope, input.interactionId)) {
+              throw new Error("provider-backed interaction is unavailable until its provider bridge reconnects");
+            }
+            const providerResult = await ctx.codexAppServer.resolveInteraction(scope, input);
+            if (!providerResult) throw new Error("provider-backed interaction lost its durable delivery owner");
+            result = {
+              effect: providerResult.effect === "already-sent" ? "already-queued" : providerResult.effect,
+              interaction: providerResult.interaction
+            };
+          } else {
+            result = ctx.interactions.resolve(scope, input);
+          }
+          const latest = ctx.interactions.get(scope, result.interaction.id) ?? result.interaction;
+          return {
+            effect: latest.lifecycle === "resolved" && (result.effect === "queued" || result.effect === "already-queued") ? "resolved" : result.effect,
+            interaction: interactionForRead(scope, latest)
           };
-        } else {
-          result = ctx.interactions.resolve(scope, input);
-        }
-        const latest = ctx.interactions.get(scope, result.interaction.id) ?? result.interaction;
-        return {
-          effect: latest.lifecycle === "resolved" && (result.effect === "queued" || result.effect === "already-queued") ? "resolved" : result.effect,
-          interaction: interactionForRead(scope, latest)
-        };
-      }
+        },
+        (result) => ({ detail: { effect: result.effect } })
+      )
     }),
     interactionCancel: mutation({
       input: CancelInteractionInput,
@@ -80562,32 +81029,36 @@ function createRouter(ctx) {
     subAgentSteer: mutation({
       input: external_exports.object({ slug: ThreadSlug, id: external_exports.string(), message: external_exports.string().min(1), deliveryId: external_exports.string().min(1).max(200).optional() }).strict(),
       output: external_exports.object({ delivered: external_exports.boolean() }),
-      handler: async ({ input }) => {
-        const target = subAgentSteerable(input.slug, input.id);
-        if (target.sessionId === null) {
-          throw new Error(target.note ?? "This sub-agent is no longer running, so it can't be steered");
+      handler: ({ input }) => audit(
+        "subAgentSteer",
+        { project: thisProject, thread: input.slug, detail: { subAgent: input.id, message: textDigest(input.message) } },
+        async () => {
+          const target = subAgentSteerable(input.slug, input.id);
+          if (target.sessionId === null) {
+            throw new Error(target.note ?? "This sub-agent is no longer running, so it can't be steered");
+          }
+          const bridge = ctx.claudeBroker;
+          if (!bridge) throw new Error("Claude session broker is unavailable; cannot steer this sub-agent");
+          const deliveryId = input.deliveryId ?? randomUUID17();
+          const sentAtMs = Date.now();
+          await bridge.steerSubAgent({
+            threadSlug: input.slug,
+            sessionId: target.sessionId,
+            subAgentId: input.id,
+            text: input.message,
+            deliveryId
+          });
+          ctx.storage.recordSubAgentSteer({
+            slug: input.slug,
+            subAgentId: input.id,
+            deliveryId,
+            message: input.message,
+            sentAtMs
+          });
+          ctx.board.refresh();
+          return { delivered: true };
         }
-        const bridge = ctx.claudeBroker;
-        if (!bridge) throw new Error("Claude session broker is unavailable; cannot steer this sub-agent");
-        const deliveryId = input.deliveryId ?? randomUUID17();
-        const sentAtMs = Date.now();
-        await bridge.steerSubAgent({
-          threadSlug: input.slug,
-          sessionId: target.sessionId,
-          subAgentId: input.id,
-          text: input.message,
-          deliveryId
-        });
-        ctx.storage.recordSubAgentSteer({
-          slug: input.slug,
-          subAgentId: input.id,
-          deliveryId,
-          message: input.message,
-          sentAtMs
-        });
-        ctx.board.refresh();
-        return { delivered: true };
-      }
+      )
     }),
     subAgentStop: mutation({
       input: external_exports.object({ slug: ThreadSlug, id: external_exports.string() }).strict(),
@@ -80736,18 +81207,40 @@ function createRouter(ctx) {
       // Omitted ⇒ the dispatcher defaults to "claude", so an old client (no backend field) is
       // byte-identical. The resume path needs NO analog — resume reads the backend from the row's
       // `backend` column (backendFor(row.backend)), which dispatch already stamped for a codex thread.
-      handler: ({ input }) => ctx.dispatcher.dispatch(input, { backend: input.backend })
+      handler: ({ input }) => audit(
+        "dispatch",
+        {
+          project: thisProject,
+          detail: { prompt: textDigest(input.prompt), backend: input.backend ?? "claude", model: input.model ?? null, effort: input.effort ?? null }
+        },
+        () => ctx.dispatcher.dispatch(input, { backend: input.backend }),
+        (result) => ({ thread: result.slug, detail: { sessionId: result.sessionId } })
+      )
     }),
     // Cold-adopt a pre-existing thread (no session row): spawn a fresh worker on its file.
     adoptThread: mutation({
       input: AdoptThreadInput,
       output: AdoptThreadResult,
-      handler: ({ input }) => ctx.dispatcher.adopt(input.slug, input.message)
+      handler: ({ input }) => audit(
+        "adoptThread",
+        { project: thisProject, thread: input.slug, detail: input.message ? { message: textDigest(input.message) } : void 0 },
+        () => ctx.dispatcher.adopt(input.slug, input.message),
+        (result) => ({ detail: { sessionId: result.sessionId } })
+      )
     }),
     followUp: mutation({
       input: FollowUpInput,
       // Wrapped so a delivery that throws keeps the operator's words — see keepFailedFollowUp.
-      handler: ({ input }) => keepFailedFollowUp(input, async (openWriteAhead) => {
+      handler: ({ input }) => audit("followUp", {
+        project: thisProject,
+        thread: input.slug,
+        detail: {
+          sessionId: input.sessionId,
+          message: textDigest(input.message),
+          ...input.freshProcess ? { freshProcess: true } : {},
+          ...input.interrupt ? { interrupt: true } : {}
+        }
+      }, () => keepFailedFollowUp(input, async (openWriteAhead) => {
         await promoteExternalSession(input.slug, input.sessionId);
         const row = currentOwnedSession(input.slug, input.sessionId);
         if (hasPendingPermissionChange(row)) {
@@ -80905,7 +81398,7 @@ ${gapNote}` : input.message;
           appendDelivery(ctx.storage, input.slug, { id: input.deliveryId, text: input.message });
         }
         ctx.board.refresh();
-      })
+      }))
     }),
     // The × on a FAILED send's bubble, and the second half of its Edit (the client has already put the
     // words back into the prompt box). The only way a failed entry leaves the ledger by hand — nothing
@@ -81696,27 +82189,32 @@ Say which way you went and why in your write-up, so the human can course-correct
     answerQuestions: mutation({
       input: AnswerQuestionsInput,
       output: AnswerQuestionsResult,
-      handler: async ({ input }) => {
-        const now = Date.now();
-        const answered = [];
-        for (const answer of input.answers) {
-          const q2 = ctx.storage.getThreadQuestion(answer.questionId);
-          if (!q2 || q2.thread_slug !== input.slug || q2.state !== "open") continue;
-          let stored = answer;
-          if (parseQuestionSpec(q2.spec)?.secret) {
-            const value = answer.text?.trim() ?? "";
-            if (!value) continue;
-            const path3 = serveSecret(ctx.project.stateDir, input.slug, q2.id, value);
-            stored = { questionId: answer.questionId, question: answer.question, chosen: [], text: secretAnswerText(path3) };
+      handler: ({ input }) => audit(
+        "answerQuestions",
+        () => ({ project: thisProject, thread: input.slug, detail: { answers: input.answers.map((answer) => answerDigest(input.slug, answer)) } }),
+        async () => {
+          const now = Date.now();
+          const answered = [];
+          for (const answer of input.answers) {
+            const q2 = ctx.storage.getThreadQuestion(answer.questionId);
+            if (!q2 || q2.thread_slug !== input.slug || q2.state !== "open") continue;
+            let stored = answer;
+            if (parseQuestionSpec(q2.spec)?.secret) {
+              const value = answer.text?.trim() ?? "";
+              if (!value) continue;
+              const path3 = serveSecret(ctx.project.stateDir, input.slug, q2.id, value);
+              stored = { questionId: answer.questionId, question: answer.question, chosen: [], text: secretAnswerText(path3) };
+            }
+            if (ctx.storage.answerThreadQuestion(answer.questionId, JSON.stringify(stored), now)) answered.push(answer.questionId);
           }
-          if (ctx.storage.answerThreadQuestion(answer.questionId, JSON.stringify(stored), now)) answered.push(answer.questionId);
-        }
-        if (answered.length > 0) {
-          ctx.board.refresh();
-          ctx.scheduler.kick();
-        }
-        return { answered, open: openQuestionViews(input.slug) };
-      }
+          if (answered.length > 0) {
+            ctx.board.refresh();
+            ctx.scheduler.kick();
+          }
+          return { answered, open: openQuestionViews(input.slug) };
+        },
+        (result) => ({ detail: { answered: result.answered } })
+      )
     }),
     dismissQuestions: mutation({
       input: DismissQuestionsInput,
@@ -82232,16 +82730,22 @@ Say which way you went and why in your write-up, so the human can course-correct
         /** Live worker daemons this actually killed — 0 unless `deleteData`. Reported, not guessed at. */
         stoppedWorkers: external_exports.number().int().nonnegative()
       }),
-      handler: async ({ input }) => {
-        const entry = findById(input.id);
-        if (!entry) return { removed: false, deletedData: false, stoppedWorkers: 0 };
-        if (ctx.launchProjectId === entry.id) {
-          throw new Error("Frizz is serving from this project, so it cannot be deleted. Restart Frizz from another folder first.");
-        }
-        const deleteData = input.deleteData === true;
-        const { stoppedWorkers } = await ctx.teardownProject?.(entry.id, { stopWorkers: deleteData, deleteState: deleteData }) ?? { closed: false, stoppedWorkers: 0 };
-        return { removed: forgetProject(entry.id), deletedData: deleteData, stoppedWorkers };
-      }
+      handler: async ({ input }) => audit(
+        "projectRemove",
+        // Read BEFORE the removal, which forgets the very entry that names the folder.
+        () => ({ project: { id: input.id, dir: findById(input.id)?.path ?? null }, detail: { deleteData: input.deleteData === true } }),
+        async () => {
+          const entry = findById(input.id);
+          if (!entry) return { removed: false, deletedData: false, stoppedWorkers: 0 };
+          if (ctx.launchProjectId === entry.id) {
+            throw new Error("Frizz is serving from this project, so it cannot be deleted. Restart Frizz from another folder first.");
+          }
+          const deleteData = input.deleteData === true;
+          const { stoppedWorkers } = await ctx.teardownProject?.(entry.id, { stopWorkers: deleteData, deleteState: deleteData }) ?? { closed: false, stoppedWorkers: 0 };
+          return { removed: forgetProject(entry.id), deletedData: deleteData, stoppedWorkers };
+        },
+        (result) => ({ detail: result })
+      )
     }),
     /**
      * Give a project an icon of the operator's choosing.
@@ -82365,7 +82869,13 @@ Say which way you went and why in your write-up, so the human can course-correct
         const picked = await pickDirectory();
         if (picked.kind !== "unavailable") warmDirectoryPicker();
         if (picked.kind !== "picked") return picked;
-        return { kind: "picked", project: addProjectAtPath(picked.path) };
+        const project = await audit(
+          "projectPick",
+          { project: { id: null, dir: picked.path }, detail: { path: picked.path } },
+          () => addProjectAtPath(picked.path),
+          addedProject
+        );
+        return { kind: "picked", project };
       }
     }),
     /**
@@ -82388,7 +82898,7 @@ Say which way you went and why in your write-up, so the human can course-correct
     projectAdd: mutation({
       input: external_exports.object({ path: external_exports.string().min(1) }),
       output: ProjectCard,
-      handler: async ({ input }) => addProjectAtPath(input.path)
+      handler: async ({ input }) => audit("projectAdd", { project: { id: null, dir: input.path }, detail: { path: input.path } }, () => addProjectAtPath(input.path), addedProject)
     }),
     /**
      * Find which project owns a thread slug.
@@ -82533,7 +83043,12 @@ Say which way you went and why in your write-up, so the human can course-correct
             const hydrated = it2.kind === "issue" ? await hydrateIssue(repo, it2.number) : await hydratePr(repo, it2.number);
             const prompt = renderGithubPrompt(template, repo, hydrated, slug, it2.kind);
             const request = githubDispatcherRequest(input, { prompt, title, slug });
-            const res = await ctx.dispatcher.dispatch(request.payload, request.options);
+            const res = await audit(
+              "githubDispatch",
+              { project: thisProject, detail: { repo, kind: it2.kind, number: it2.number, prompt: textDigest(prompt) } },
+              () => ctx.dispatcher.dispatch(request.payload, request.options),
+              (result) => ({ thread: result.slug, detail: { sessionId: result.sessionId } })
+            );
             dispatched.push({ number: it2.number, kind: it2.kind, slug: res.slug });
           } catch (e14) {
             failed.push({ number: it2.number, kind: it2.kind, error: e14.message.slice(0, 120) });
@@ -82574,6 +83089,7 @@ var init_router5 = __esm({
     init_claude_models();
     init_claude_model_upgrade();
     init_logging();
+    init_audit();
     init_codex();
     init_quota();
     init_auth_status();
@@ -82656,9 +83172,9 @@ var init_compression = __esm({
 });
 
 // packages/server/src/project-icon.ts
-import { readFileSync as readFileSync31, readdirSync as readdirSync13, realpathSync as realpathSync13, statSync as statSync21 } from "node:fs";
-import { homedir as homedir18 } from "node:os";
-import { basename as basename10, dirname as dirname21, extname as extname3, join as join45, relative as relative2, sep as sep4 } from "node:path";
+import { readFileSync as readFileSync32, readdirSync as readdirSync13, realpathSync as realpathSync13, statSync as statSync22 } from "node:fs";
+import { homedir as homedir19 } from "node:os";
+import { basename as basename10, dirname as dirname23, extname as extname3, join as join47, relative as relative2, sep as sep4 } from "node:path";
 function normalizeStem(stem) {
   const sized = stem.toLowerCase().replace(/[@-]\d+(\.\d+)?x(\d+)?$/u, "").replace(/[-_]\d{2,4}$/u, "");
   const normalized = sized.replace(VARIANT_SUFFIX, "");
@@ -82676,7 +83192,7 @@ function sizeScore(dimensions) {
   return Math.max(0, Math.min(40, Math.round(Math.log2(edge / 24) * 8)));
 }
 function under(root, relativeDirectory) {
-  return relativeDirectory ? join45(root, relativeDirectory) : root;
+  return relativeDirectory ? join47(root, relativeDirectory) : root;
 }
 function listFiles(directory) {
   try {
@@ -82698,19 +83214,19 @@ function iconDirectories(root) {
   for (const asset of ASSET_DIRECTORIES) directories.push(under(root, asset));
   for (const host of HOST_DIRECTORIES) {
     if (!children2.has(host)) continue;
-    for (const asset of ASSET_DIRECTORIES) directories.push(under(join45(root, host), asset));
+    for (const asset of ASSET_DIRECTORIES) directories.push(under(join47(root, host), asset));
   }
   for (const extra of EXTRA_DIRECTORIES) directories.push(under(root, extra));
   for (const container of WORKSPACE_CONTAINERS) {
     if (!children2.has(container)) continue;
     let members;
     try {
-      members = readdirSync13(join45(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+      members = readdirSync13(join47(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
     } catch {
       continue;
     }
     for (const member of members) {
-      for (const asset of ASSET_DIRECTORIES) directories.push(under(join45(root, container, member), asset));
+      for (const asset of ASSET_DIRECTORIES) directories.push(under(join47(root, container, member), asset));
     }
   }
   return [...new Set(directories)];
@@ -82718,13 +83234,13 @@ function iconDirectories(root) {
 function manifestIcons(manifestPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync31(manifestPath, "utf8"));
+    parsed = JSON.parse(readFileSync32(manifestPath, "utf8"));
   } catch {
     return [];
   }
   if (!Array.isArray(parsed?.icons)) return [];
-  const directory = dirname21(manifestPath);
-  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join45(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
+  const directory = dirname23(manifestPath);
+  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join47(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
 }
 function projectIconCandidates(root) {
   const projectStem = normalizeStem(basename10(root)).normalized;
@@ -82743,10 +83259,10 @@ function projectIconCandidates(root) {
     for (const name of listFiles(directory)) {
       const extension2 = extname3(name).toLowerCase();
       if (MANIFEST_NAMES.includes(name.toLowerCase())) {
-        for (const icon of manifestIcons(join45(directory, name))) {
+        for (const icon of manifestIcons(join47(directory, name))) {
           if (MEASURABLE_IMAGE_EXTENSIONS.has(extname3(icon).toLowerCase())) {
             fromManifest.add(icon);
-            files.push({ path: icon, directory: dirname21(icon) });
+            files.push({ path: icon, directory: dirname23(icon) });
           }
         }
         continue;
@@ -82754,7 +83270,7 @@ function projectIconCandidates(root) {
       if (!MEASURABLE_IMAGE_EXTENSIONS.has(extension2)) continue;
       const stem = name.slice(0, name.length - extension2.length);
       if (normalizeStem(stem).normalized === "favicon") iconHomes.add(directory);
-      files.push({ path: join45(directory, name), directory });
+      files.push({ path: join47(directory, name), directory });
       if (files.length >= MAX_CANDIDATES) break;
     }
   }
@@ -82796,7 +83312,7 @@ function iconMediaType(path3) {
 }
 function resolveProjectIconResponse(id2, options = {}) {
   if (!id2) return { status: 400 };
-  const home = options.home ?? homedir18();
+  const home = options.home ?? homedir19();
   const entry = readRegistry(home).projects.find((project) => project.id === id2);
   if (!entry) return { status: 404 };
   const path3 = resolveProjectIcon(id2, (root) => detectProjectIcon(root)?.path, { home });
@@ -82806,7 +83322,7 @@ function resolveProjectIconResponse(id2, options = {}) {
   let real;
   try {
     real = realpathSync13(path3);
-    if (!statSync21(real).isFile()) return { status: 404 };
+    if (!statSync22(real).isFile()) return { status: 404 };
   } catch {
     return { status: 404 };
   }
@@ -82819,7 +83335,7 @@ function resolveProjectIconResponse(id2, options = {}) {
   });
   if (!roots.some((root) => real === root || real.startsWith(root + sep4))) return { status: 404 };
   try {
-    return { status: 200, contentType, body: readFileSync31(real) };
+    return { status: 200, contentType, body: readFileSync32(real) };
   } catch {
     return { status: 404 };
   }
@@ -82931,8 +83447,8 @@ var init_project_icon = __esm({
 });
 
 // packages/server/src/local-visualization.ts
-import { readdirSync as readdirSync14, readFileSync as readFileSync32, realpathSync as realpathSync14, statSync as statSync22 } from "node:fs";
-import { join as join46, sep as sep5 } from "node:path";
+import { readdirSync as readdirSync14, readFileSync as readFileSync33, realpathSync as realpathSync14, statSync as statSync23 } from "node:fs";
+import { join as join48, sep as sep5 } from "node:path";
 function children(path3, pattern) {
   try {
     return readdirSync14(path3, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
@@ -82944,7 +83460,7 @@ function isUnder2(path3, root) {
   return path3 === root || path3.startsWith(root.endsWith(sep5) ? root : root + sep5);
 }
 function resolveFragment(projectDir, sessionId, file) {
-  const base = join46(projectDir, ".codex", "visualizations");
+  const base = join48(projectDir, ".codex", "visualizations");
   let projectReal;
   let baseReal;
   try {
@@ -82955,15 +83471,15 @@ function resolveFragment(projectDir, sessionId, file) {
   }
   if (!isUnder2(baseReal, projectReal)) return null;
   for (const year of children(base, YEAR_PART)) {
-    const yearDir = join46(base, year);
+    const yearDir = join48(base, year);
     for (const month of children(yearDir, DATE_PART)) {
-      const monthDir = join46(yearDir, month);
+      const monthDir = join48(yearDir, month);
       for (const day of children(monthDir, DATE_PART)) {
-        const sessionRoot = join46(baseReal, year, month, day, sessionId);
-        const candidate = join46(monthDir, day, sessionId, file);
+        const sessionRoot = join48(baseReal, year, month, day, sessionId);
+        const candidate = join48(monthDir, day, sessionId, file);
         try {
           const real = realpathSync14(candidate);
-          if (isUnder2(real, sessionRoot) && statSync22(real).isFile()) return real;
+          if (isUnder2(real, sessionRoot) && statSync23(real).isFile()) return real;
         } catch {
         }
       }
@@ -83048,9 +83564,9 @@ function resolveLocalVisualization(projectDir, sessionId, file) {
   if (!path3) return { status: 404 };
   let fragment;
   try {
-    const size = statSync22(path3).size;
+    const size = statSync23(path3).size;
     if (size > MAX_FRAGMENT_BYTES) return { status: 413 };
-    fragment = readFileSync32(path3, "utf8");
+    fragment = readFileSync33(path3, "utf8");
   } catch {
     return { status: 404 };
   }
@@ -83092,9 +83608,9 @@ var init_local_visualization = __esm({
 });
 
 // packages/server/src/app.ts
-import { mkdirSync as mkdirSync23, writeFileSync as writeFileSync18 } from "node:fs";
+import { mkdirSync as mkdirSync25, writeFileSync as writeFileSync19 } from "node:fs";
 import { Readable } from "node:stream";
-import { join as join47 } from "node:path";
+import { join as join49 } from "node:path";
 import { randomUUID as randomUUID18 } from "node:crypto";
 function createApp(ctx, options = {}) {
   const app = new Hono2();
@@ -83129,6 +83645,17 @@ function createApp(ctx, options = {}) {
     c.header("x-frizz-boot", ctx.bootId);
     await next();
   });
+  app.use(
+    `${frizzRoute("/rpc")}/*`,
+    (c, next) => withRequestOrigin(
+      requestOriginFrom({
+        caller: c.req.header(CALLER_HEADER),
+        userAgent: c.req.header("user-agent"),
+        socketRemote: c.env?.remoteAddress
+      }),
+      next
+    )
+  );
   app.use(`${frizzRoute("/rpc")}/*`, async (c, next) => {
     await next();
     const encoding = negotiateEncoding(c.req.header("accept-encoding"));
@@ -83201,11 +83728,11 @@ function createApp(ctx, options = {}) {
     if (typeof body.data !== "string" || body.data.length > ATTACHMENT_MAX_BASE64_CHARS) return c.json({ error: "bad payload" }, 400);
     const ext = `.${attachmentExtension(name)}`;
     const buf = Buffer.from(body.data, "base64");
-    const dir = join47(ctx.project.stateDir, "attachments");
-    mkdirSync23(dir, { recursive: true });
+    const dir = join49(ctx.project.stateDir, "attachments");
+    mkdirSync25(dir, { recursive: true });
     const base = name.replace(/\.[^.]+$/, "").replace(/[^a-zA-Z0-9_-]+/g, "-").slice(0, 40) || "file";
-    const path3 = join47(dir, `${Date.now()}-${randomUUID18().slice(0, 8)}-${base}${ext}`);
-    writeFileSync18(path3, buf);
+    const path3 = join49(dir, `${Date.now()}-${randomUUID18().slice(0, 8)}-${base}${ext}`);
+    writeFileSync19(path3, buf);
     return c.json({ path: path3 });
   });
   app.get(
@@ -83257,21 +83784,23 @@ var init_app = __esm({
     init_local_image();
     init_project_icon();
     init_local_visualization();
+    init_audit();
     init_local_image();
     init_local_visualization();
   }
 });
 
 // packages/server/src/app-socket.ts
-import { createHash as createHash16 } from "node:crypto";
+import { createHash as createHash17 } from "node:crypto";
 function isWsPath(url) {
   return (url ?? "").split("?")[0] === WS_PATH;
 }
-function makeTranscriptReader(project, storage, backendFor, lifecycleFor, peerNameFor, ownerGone) {
+function makeTranscriptReader(project, storage, backendFor, lifecycleFor, peerNameFor, ownerGone, sessionPeerThread) {
   return (slug) => {
     const page = readLatestThreadTranscriptPage(project, storage, slug, backendFor, { editedFiles: false });
     const named = peerNameFor ? projectTranscriptPeerNames(page.messages, (taskId) => peerNameFor(slug, taskId)) : page.messages;
-    const projected = lifecycleFor ? projectTranscriptAgentLifecycles(named, (id2) => lifecycleFor(slug, id2)) : named;
+    const sent = sessionPeerThread ? projectTranscriptSessionPeers(named, sessionPeerThread) : named;
+    const projected = lifecycleFor ? projectTranscriptAgentLifecycles(sent, (id2) => lifecycleFor(slug, id2)) : sent;
     const messages = projectRetiredBackgroundOps(projected, retiredOpsFor(storage, slug), ownerGone?.(slug) ?? false);
     return {
       messages,
@@ -83467,7 +83996,7 @@ function createAppSocketServer(deps) {
     sendEncoded(ws, frame, false);
   }
   function frameSignature(frame) {
-    return createHash16("sha256").update(frame.text).digest("base64url");
+    return createHash17("sha256").update(frame.text).digest("base64url");
   }
   const globalReadTimes = [];
   const originReadTimes = /* @__PURE__ */ new Map();
@@ -84024,6 +84553,7 @@ var init_app_socket = __esm({
   "packages/server/src/app-socket.ts"() {
     "use strict";
     init_wrapper();
+    init_session_peer();
     init_src();
     init_transcript();
     init_local_origin();
@@ -84124,11 +84654,11 @@ var init_app_socket = __esm({
 });
 
 // packages/server/src/local-file-watch.ts
-import { statSync as statSync23, watch } from "node:fs";
-import { basename as basename11, dirname as dirname22 } from "node:path";
+import { statSync as statSync24, watch } from "node:fs";
+import { basename as basename11, dirname as dirname24 } from "node:path";
 function stampOf(path3) {
   try {
-    const s = statSync23(path3, { bigint: true });
+    const s = statSync24(path3, { bigint: true });
     return `${s.ino}:${s.size}:${s.mtimeNs}`;
   } catch {
     return "gone";
@@ -84148,7 +84678,7 @@ function watchLocalFile(path3, onChange) {
   let entry = entries.get(path3);
   if (!entry) {
     const name = basename11(path3);
-    const watcher2 = watch(dirname22(path3), { persistent: false }, (_event, changed) => {
+    const watcher2 = watch(dirname24(path3), { persistent: false }, (_event, changed) => {
       if (changed !== null && changed !== void 0 && changed.toString() !== name) return;
       const current = entries.get(path3);
       if (!current) return;
@@ -84184,10 +84714,10 @@ var init_local_file_watch = __esm({
 });
 
 // packages/server/src/boot-progress.ts
-import { mkdirSync as mkdirSync24, readFileSync as readFileSync33, renameSync as renameSync11, rmSync as rmSync13, writeFileSync as writeFileSync19 } from "node:fs";
-import { basename as basename12, dirname as dirname23, join as join48 } from "node:path";
+import { mkdirSync as mkdirSync26, readFileSync as readFileSync34, renameSync as renameSync12, rmSync as rmSync13, writeFileSync as writeFileSync20 } from "node:fs";
+import { basename as basename12, dirname as dirname25, join as join50 } from "node:path";
 function bootProgressPath(stateDir) {
-  return join48(stateDir, BOOT_PROGRESS_NAME);
+  return join50(stateDir, BOOT_PROGRESS_NAME);
 }
 function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   if (!stateDir) {
@@ -84207,11 +84737,11 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
     lastAt = now;
     step++;
     try {
-      mkdirSync24(dirname23(path3), { recursive: true, mode: 448 });
-      const temp = join48(dirname23(path3), `.${basename12(path3)}.${process.pid}.tmp`);
-      writeFileSync19(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
+      mkdirSync26(dirname25(path3), { recursive: true, mode: 448 });
+      const temp = join50(dirname25(path3), `.${basename12(path3)}.${process.pid}.tmp`);
+      writeFileSync20(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
 `, "utf8");
-      renameSync11(temp, path3);
+      renameSync12(temp, path3);
     } catch {
     }
   };
@@ -84234,13 +84764,13 @@ var init_boot_progress = __esm({
 });
 
 // packages/server/src/runtime-lease.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync25, readdirSync as readdirSync15, readFileSync as readFileSync34, unlinkSync as unlinkSync8, writeFileSync as writeFileSync20 } from "node:fs";
-import { dirname as dirname24, join as join49 } from "node:path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync27, readdirSync as readdirSync15, readFileSync as readFileSync35, unlinkSync as unlinkSync8, writeFileSync as writeFileSync21 } from "node:fs";
+import { dirname as dirname26, join as join51 } from "node:path";
 function runtimeVersionDir(bin) {
-  let dir = dirname24(bin);
+  let dir = dirname26(bin);
   for (let step = 0; step < MAX_ASCENT; step++) {
-    if (existsSync22(join49(dir, PROVISIONED_MARKER))) return dir;
-    const parent = dirname24(dir);
+    if (existsSync22(join51(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname26(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
@@ -84258,11 +84788,11 @@ function leaseRuntime(bin, role) {
   const versionDir = runtimeVersionDir(bin);
   if (!versionDir) return () => {
   };
-  const path3 = join49(versionDir, LEASES_DIR, `${process.pid}.json`);
+  const path3 = join51(versionDir, LEASES_DIR, `${process.pid}.json`);
   try {
-    mkdirSync25(dirname24(path3), { recursive: true });
+    mkdirSync27(dirname26(path3), { recursive: true });
     const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
-    writeFileSync20(path3, JSON.stringify(lease));
+    writeFileSync21(path3, JSON.stringify(lease));
   } catch {
     return () => {
     };
@@ -84275,7 +84805,7 @@ function leaseRuntime(bin, role) {
   };
 }
 function liveRuntimeLeases(versionDir) {
-  const dir = join49(versionDir, LEASES_DIR);
+  const dir = join51(versionDir, LEASES_DIR);
   let names;
   try {
     names = readdirSync15(dir);
@@ -84285,10 +84815,10 @@ function liveRuntimeLeases(versionDir) {
   const live = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const path3 = join49(dir, name);
+    const path3 = join51(dir, name);
     let lease;
     try {
-      lease = JSON.parse(readFileSync34(path3, "utf8"));
+      lease = JSON.parse(readFileSync35(path3, "utf8"));
     } catch {
       continue;
     }
@@ -84315,29 +84845,29 @@ var init_runtime_lease = __esm({
 });
 
 // packages/server/src/runtimes.ts
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import {
-  chmodSync as chmodSync4,
+  chmodSync as chmodSync5,
   closeSync as closeSync18,
   existsSync as existsSync23,
-  mkdirSync as mkdirSync26,
+  mkdirSync as mkdirSync28,
   openSync as openSync19,
-  readFileSync as readFileSync35,
+  readFileSync as readFileSync36,
   readdirSync as readdirSync16,
-  renameSync as renameSync12,
+  renameSync as renameSync13,
   rmSync as rmSync14,
-  statSync as statSync24,
-  writeFileSync as writeFileSync21,
+  statSync as statSync25,
+  writeFileSync as writeFileSync22,
   writeSync as writeSync3
 } from "node:fs";
-import { dirname as dirname25, isAbsolute as isAbsolute10, join as join50, normalize, relative as relative3, sep as sep6 } from "node:path";
+import { dirname as dirname27, isAbsolute as isAbsolute10, join as join52, normalize, relative as relative3, sep as sep6 } from "node:path";
 import { Readable as Readable2, Transform, Writable as Writable4 } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGunzip } from "node:zlib";
 function runtimesRoot(env = process.env) {
   const override = env[RUNTIMES_DIR_ENV];
   if (override && isAbsolute10(override)) return override;
-  return join50(frizzRoots().cache, "runtimes");
+  return join52(frizzRoots().cache, "runtimes");
 }
 function isMusl() {
   if (process.platform !== "linux") return false;
@@ -84354,15 +84884,15 @@ function runtimeCoordinates(backend, platform3 = process.platform, arch = proces
   return { pkg: "@openai/codex", packageVersion: `${CODEX_VERSION}-${platform3}-${arch}`, label: CODEX_VERSION, binary: `codex${exe2}` };
 }
 function provisionedBinary(backend, root, label) {
-  const dir = join50(root, backend, label);
+  const dir = join52(root, backend, label);
   let marker;
   try {
-    marker = JSON.parse(readFileSync35(join50(dir, MARKER), "utf8"));
+    marker = JSON.parse(readFileSync36(join52(dir, MARKER), "utf8"));
   } catch {
     return void 0;
   }
   if (typeof marker.binary !== "string" || marker.label !== label) return void 0;
-  const bin = join50(dir, marker.binary);
+  const bin = join52(dir, marker.binary);
   return existsSync23(bin) ? bin : void 0;
 }
 function octal(buffer, offset, length) {
@@ -84377,17 +84907,17 @@ function safeEntryPath(dest, name) {
   if (parts.length < 2) return void 0;
   const rel = normalize(parts.slice(1).join(sep6));
   if (isAbsolute10(rel) || rel === ".." || rel.startsWith(`..${sep6}`)) return void 0;
-  const full = join50(dest, rel);
+  const full = join52(dest, rel);
   const back = relative3(dest, full);
   if (back.startsWith("..") || isAbsolute10(back)) return void 0;
   return full;
 }
 function locateBinary(dir, backend, binary) {
   if (backend === "claude") {
-    const direct = join50(dir, binary);
+    const direct = join52(dir, binary);
     return existsSync23(direct) ? direct : void 0;
   }
-  const vendor = join50(dir, "vendor");
+  const vendor = join52(dir, "vendor");
   let triples;
   try {
     triples = readdirSync16(vendor);
@@ -84395,7 +84925,7 @@ function locateBinary(dir, backend, binary) {
     return void 0;
   }
   for (const triple of triples) {
-    const candidate = join50(vendor, triple, "bin", binary);
+    const candidate = join52(vendor, triple, "bin", binary);
     if (existsSync23(candidate)) return candidate;
   }
   return void 0;
@@ -84411,12 +84941,12 @@ async function provisionRuntime(backend, options) {
   const registry = options.registry ?? REGISTRY;
   const progress = options.onProgress ?? (() => {
   });
-  const backendDir = join50(root, backend);
-  const finalDir = join50(backendDir, coordinates.label);
-  const partial = join50(backendDir, `.partial-${coordinates.label}-${process.pid}`);
-  mkdirSync26(backendDir, { recursive: true });
+  const backendDir = join52(root, backend);
+  const finalDir = join52(backendDir, coordinates.label);
+  const partial = join52(backendDir, `.partial-${coordinates.label}-${process.pid}`);
+  mkdirSync28(backendDir, { recursive: true });
   rmSync14(partial, { recursive: true, force: true });
-  mkdirSync26(partial);
+  mkdirSync28(partial);
   try {
     const manifestUrl = `${registry}/${coordinates.pkg.replace("/", "%2F")}/${coordinates.packageVersion}`;
     progress(`resolving ${coordinates.pkg}@${coordinates.packageVersion}`);
@@ -84429,7 +84959,7 @@ async function provisionRuntime(backend, options) {
     const response = await fetchImpl(tarball);
     if (!response.ok || !response.body) throw new Error(`tarball download answered ${response.status}`);
     const total = Number(response.headers.get("content-length") ?? 0);
-    const hash = createHash17("sha512");
+    const hash = createHash18("sha512");
     let seen = 0;
     let lastReport = 0;
     const hasher = new Transform({
@@ -84450,7 +84980,7 @@ async function provisionRuntime(backend, options) {
     if (digest !== integrity) throw new Error(`integrity mismatch for ${tarball}: expected ${integrity}, got ${digest}`);
     const bin = locateBinary(partial, backend, coordinates.binary);
     if (!bin) throw new Error(`${coordinates.pkg}@${coordinates.packageVersion} unpacked without a ${coordinates.binary} binary`);
-    if (process.platform !== "win32") chmodSync4(bin, 493);
+    if (process.platform !== "win32") chmodSync5(bin, 493);
     const marker = {
       backend,
       label: coordinates.label,
@@ -84460,9 +84990,9 @@ async function provisionRuntime(backend, options) {
       binary: relative3(partial, bin),
       at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    writeFileSync21(join50(partial, MARKER), `${JSON.stringify(marker, null, 2)}
+    writeFileSync22(join52(partial, MARKER), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
-    const rename2 = options.rename ?? renameSync12;
+    const rename2 = options.rename ?? renameSync13;
     try {
       for (let attempt = 1; ; attempt++) {
         try {
@@ -84480,7 +85010,7 @@ async function provisionRuntime(backend, options) {
       return { bin: theirs, label: coordinates.label, fetched: false };
     }
     progress("ready");
-    return { bin: join50(finalDir, marker.binary), label: coordinates.label, fetched: true };
+    return { bin: join52(finalDir, marker.binary), label: coordinates.label, fetched: true };
   } catch (err) {
     rmSync14(partial, { recursive: true, force: true });
     throw err;
@@ -84488,7 +85018,7 @@ async function provisionRuntime(backend, options) {
 }
 function sweepRuntimes(backend, root, keepLabel, now = Date.now(), deps = {}) {
   const rm2 = deps.rm ?? defaultSweepRm;
-  const backendDir = join50(root, backend);
+  const backendDir = join52(root, backend);
   let entries2;
   try {
     entries2 = readdirSync16(backendDir);
@@ -84498,10 +85028,10 @@ function sweepRuntimes(backend, root, keepLabel, now = Date.now(), deps = {}) {
   const sweep = { removed: [], kept: [] };
   for (const entry of entries2) {
     if (entry === keepLabel) continue;
-    const full = join50(backendDir, entry);
+    const full = join52(backendDir, entry);
     if (entry.startsWith(".partial-")) {
       try {
-        if (now - statSync24(full).mtimeMs < 24 * 60 * 60 * 1e3) continue;
+        if (now - statSync25(full).mtimeMs < 24 * 60 * 60 * 1e3) continue;
       } catch {
         continue;
       }
@@ -84681,7 +85211,7 @@ var init_runtimes = __esm({
             return;
           case "5": {
             const dir = safeEntryPath(this.dest, name);
-            if (dir) mkdirSync26(dir, { recursive: true });
+            if (dir) mkdirSync28(dir, { recursive: true });
             return;
           }
           case "0":
@@ -84689,7 +85219,7 @@ var init_runtimes = __esm({
           case "7": {
             const file = safeEntryPath(this.dest, name);
             if (!file) return;
-            mkdirSync26(dirname25(file), { recursive: true });
+            mkdirSync28(dirname27(file), { recursive: true });
             this.fd = openSync19(file, "w", octal(header, 100, 8) & 511 || 420);
             this.written.push(file);
             return;
@@ -84757,6 +85287,7 @@ function createTenantMap(options) {
           log.info("tenants", `project ${project.name} (${project.id}) moved from ${already.project.dir} to ${project.dir}; reopening it there`);
           await deactivate(project.id);
         }
+        refuseWorldWritableProject(project.dir);
         const ctx = await options.createContext({ ...options.contextOptions, project });
         open.set(project.id, { project, ctx, app: options.createApp?.(ctx) });
         await options.startProducers?.(ctx);
@@ -84764,11 +85295,12 @@ function createTenantMap(options) {
       } catch (error) {
         report(project, error);
         return void 0;
-      } finally {
-        opening.delete(project.id);
       }
     })();
     opening.set(project.id, attempt);
+    void attempt.then(() => {
+      if (opening.get(project.id) === attempt) opening.delete(project.id);
+    });
     return attempt;
   }
   async function deactivate(projectId) {
@@ -84816,6 +85348,7 @@ var init_tenants = __esm({
     "use strict";
     init_context();
     init_logging();
+    init_project_root();
   }
 });
 
@@ -85269,18 +85802,18 @@ var init_legacy_project_db = __esm({
 });
 
 // packages/server/src/frizz-db.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync27, readdirSync as readdirSync17, renameSync as renameSync13, statSync as statSync25 } from "node:fs";
-import { basename as basename13, dirname as dirname26, join as join51 } from "node:path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync29, readdirSync as readdirSync17, renameSync as renameSync14, statSync as statSync26 } from "node:fs";
+import { basename as basename13, dirname as dirname28, join as join53 } from "node:path";
 function frizzDatabaseLocation(options) {
   if (options.stateDir !== void 0) {
-    const projectsDir = dirname26(options.stateDir);
+    const projectsDir = dirname28(options.stateDir);
     if (basename13(projectsDir) === "projects") {
-      return { path: options.path ?? join51(dirname26(projectsDir), "ui.db"), projectsDir };
+      return { path: options.path ?? join53(dirname28(projectsDir), "ui.db"), projectsDir };
     }
-    return { path: options.path ?? join51(options.stateDir, "ui.db"), projectsDir: void 0 };
+    return { path: options.path ?? join53(options.stateDir, "ui.db"), projectsDir: void 0 };
   }
   const data = options.home ? frizzPaths({ home: options.home }).data : frizzRoots().data;
-  return { path: options.path ?? join51(data, "ui.db"), projectsDir: join51(data, "projects") };
+  return { path: options.path ?? join53(data, "ui.db"), projectsDir: join53(data, "projects") };
 }
 function ensureFrizzSchema(db2) {
   db2.exec(`
@@ -85299,7 +85832,7 @@ function ensureFrizzSchema(db2) {
 }
 function openFrizzDatabase(options = {}) {
   const { path: path3, projectsDir } = frizzDatabaseLocation(options);
-  mkdirSync27(dirname26(path3), { recursive: true });
+  mkdirSync29(dirname28(path3), { recursive: true });
   const db2 = new sqlite_default(path3);
   db2.pragma("busy_timeout = 5000");
   db2.pragma("journal_mode = WAL");
@@ -85311,10 +85844,10 @@ function openFrizzDatabase(options = {}) {
     );
     for (const projectId of retiredLegacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const dir = join51(projectsDir, projectId);
+      const dir = join53(projectsDir, projectId);
       try {
-        renameSync13(join51(dir, "ui.db.imported"), join51(dir, "ui.db"));
-        db2.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join51(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
+        renameSync14(join53(dir, "ui.db.imported"), join53(dir, "ui.db"));
+        db2.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join53(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
         alreadyImported.add(projectId);
         log.info("frizz-db", `${projectId}: restored ui.db.imported to ui.db and recorded it as imported`);
       } catch (error) {
@@ -85324,7 +85857,7 @@ function openFrizzDatabase(options = {}) {
     }
     for (const projectId of legacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const legacyPath = join51(projectsDir, projectId, "ui.db");
+      const legacyPath = join53(projectsDir, projectId, "ui.db");
       try {
         const rows = importLegacyProject(db2, projectId, legacyPath);
         imported.push({ projectId, rows });
@@ -85357,7 +85890,7 @@ function projectIdsWithFile(projectsDir, file) {
   if (!existsSync24(projectsDir)) return [];
   return readdirSync17(projectsDir).filter((name) => {
     try {
-      return statSync25(join51(projectsDir, name, file)).isFile();
+      return statSync26(join53(projectsDir, name, file)).isFile();
     } catch {
       return false;
     }
@@ -85367,7 +85900,7 @@ function legacyProjectIds(projectsDir) {
   return projectIdsWithFile(projectsDir, "ui.db");
 }
 function retiredLegacyProjectIds(projectsDir) {
-  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id2) => !existsSync24(join51(projectsDir, id2, "ui.db")));
+  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id2) => !existsSync24(join53(projectsDir, id2, "ui.db")));
 }
 function tableColumns(db2, schema, table) {
   return db2.prepare(`PRAGMA ${schema}.table_info(${table})`).all().map((c) => c.name);
@@ -85522,8 +86055,8 @@ var init_tenant_prime = __esm({
 
 // packages/server/src/project-teardown.ts
 import { rmSync as rmSync15 } from "node:fs";
-import { homedir as homedir19 } from "node:os";
-import { dirname as dirname27, resolve as resolve11 } from "node:path";
+import { homedir as homedir20 } from "node:os";
+import { dirname as dirname29, resolve as resolve11 } from "node:path";
 async function stopProjectWorkers(ctx) {
   let stopped = 0;
   for (const row of ctx.storage.allSessions()) {
@@ -85538,12 +86071,12 @@ async function stopProjectWorkers(ctx) {
   }
   return stopped;
 }
-function deleteProjectState(projectId, home = homedir19()) {
+function deleteProjectState(projectId, home = homedir20()) {
   const target = projectStateDir(projectId, home);
   if (!/^[\w.-]+$/u.test(projectId) || projectId === "." || projectId === "..") {
     throw new Error(`Refusing to delete state for a malformed project id: ${projectId}`);
   }
-  if (dirname27(resolve11(target)) !== resolve11(dirname27(projectStateDir("x", home)))) {
+  if (dirname29(resolve11(target)) !== resolve11(dirname29(projectStateDir("x", home)))) {
     throw new Error(`Refusing to delete ${target} \u2014 it is not a project state directory`);
   }
   rmSync15(target, { recursive: true, force: true });
@@ -85572,11 +86105,11 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync36, existsSync as existsSync25, statSync as statSync26 } from "node:fs";
-import { dirname as dirname28, join as join52, resolve as resolve12, extname as extname4, posix as posix2, sep as sep7 } from "node:path";
+import { readFileSync as readFileSync37, existsSync as existsSync25, statSync as statSync27 } from "node:fs";
+import { dirname as dirname30, join as join54, resolve as resolve12, extname as extname4, posix as posix2, sep as sep7 } from "node:path";
 function readServerAddressHolder(path3) {
   try {
-    const value = JSON.parse(readFileSync36(path3, "utf8"));
+    const value = JSON.parse(readFileSync37(path3, "utf8"));
     if (typeof value?.pid !== "number") return void 0;
     return { pid: value.pid, port: typeof value.port === "number" ? value.port : -1 };
   } catch {
@@ -85623,7 +86156,10 @@ async function pipeToApp(app, req, res, port2, controller) {
       // @ts-expect-error duplex is required by node's fetch when streaming a request body
       duplex: "half",
       signal: controller.signal
-    })
+    }),
+    // The peer this server actually accepted, for a request the launcher's proxy did not stamp — the
+    // only place it is known once the request becomes a Web Request (app.ts, the audit attribution).
+    { remoteAddress: req.socket?.remoteAddress }
   );
   res.writeHead(response.status, Object.fromEntries(response.headers.entries()));
   if (response.body) {
@@ -85701,12 +86237,12 @@ function staticIsFresh(req, etag, mtimeMs) {
 }
 function serveStatic(distDir, req, res) {
   const rel = posix2.normalize((req.url ?? "/").split("?")[0].replace(/\\/g, "/")).replace(/^(\.\.[/\\])+/, "");
-  let file = join52(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir + sep7)) file = join52(distDir, "index.html");
-  if (!existsSync25(file)) file = join52(distDir, "index.html");
+  let file = join54(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir + sep7)) file = join54(distDir, "index.html");
+  if (!existsSync25(file)) file = join54(distDir, "index.html");
   try {
-    const stats = statSync26(file);
-    const cacheControl = file.startsWith(join52(distDir, "assets") + sep7) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
+    const stats = statSync27(file);
+    const cacheControl = file.startsWith(join54(distDir, "assets") + sep7) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
     const etag = `"${stats.size.toString(16)}-${Math.trunc(stats.mtimeMs).toString(16)}"`;
     const headers = {
       "content-type": MIME[extname4(file)] ?? "application/octet-stream",
@@ -85722,7 +86258,7 @@ function serveStatic(distDir, req, res) {
       res.end();
       return;
     }
-    let body = readFileSync36(file);
+    let body = readFileSync37(file);
     const accept = req.headers["accept-encoding"];
     const encoding = negotiateEncoding(Array.isArray(accept) ? accept.join(",") : accept);
     if (encoding && shouldCompress(new Headers({ "content-type": headers["content-type"] }), body.byteLength)) {
@@ -85761,7 +86297,7 @@ async function startServer(opts = {}) {
       `${candidate.name} is already being served by another Frizz (pid ${other}). Stop that one first \u2014 two servers on one board would fire its timers and recurring prompts twice.`
     );
   };
-  const activeTenants = () => tenants.active().map(({ project: open, ctx: openCtx }) => ({ project: open, board: openCtx.board }));
+  const activeTenants = () => tenants.active().map(({ project: open, ctx: openCtx }) => ({ project: open, board: openCtx.board, storage: openCtx.storage }));
   const teardownProject = async (projectId, options) => {
     if (projectId === project.id) return { closed: false, stoppedWorkers: 0 };
     const open = tenants.get(projectId);
@@ -85841,7 +86377,8 @@ async function startServer(opts = {}) {
       (slug, taskId) => c.tailer.subAgentByTaskId?.(slug, taskId),
       // The /ws producer is the one the live UI actually renders, so a dead owner has to reach it
       // too — projecting only the RPC is the exact half-fix the × already had to correct once.
-      (slug) => c.tailer.ownerGone?.(slug) ?? false
+      (slug) => c.tailer.ownerGone?.(slug) ?? false,
+      c.sessionPeerThread
     ),
     // A reader's live watch on the file it shows. Gated as the read is (one set of openable roots for
     // both readers, plus the Markdown reader's canonical-extension check) and watched by CANONICAL
@@ -85979,7 +86516,7 @@ async function startServer(opts = {}) {
       if (statusPath && statusIdentity) runtime.removeStatus(statusPath, statusIdentity);
       if (statusPath && statusIdentity) {
         try {
-          runtime.removeStatus(serverAddressPathForStateDir(dirname28(statusPath)), statusIdentity);
+          runtime.removeStatus(serverAddressPathForStateDir(dirname30(statusPath)), statusIdentity);
         } catch {
         }
       }
@@ -86111,7 +86648,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve12(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve12(opts.webDistDir) : join52(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve12(opts.webDistDir) : join54(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -86189,7 +86726,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync36(join52(webRoot, "index.html"), "utf8");
+            const html = readFileSync37(join54(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -86395,7 +86932,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join52(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join54(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -86418,64 +86955,17 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
+init_access_codes();
 import { existsSync as existsSync26 } from "node:fs";
-import { join as join53 } from "node:path";
-
-// packages/server/src/access-codes.ts
-import { randomBytes, timingSafeEqual, createHmac } from "node:crypto";
-import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname6, join as join9 } from "node:path";
-var DEFAULT_CODE_TTL_MS = 5 * 6e4;
-var DEFAULT_SESSION_TTL_MS = 30 * 24 * 60 * 6e4;
-var SESSION_EPOCH = 1;
-var SESSION_KEY_FILE = "session-key";
-var SESSION_EPOCH_FILE = "session-epoch";
-function writeSessionKey(path3, key) {
-  mkdirSync7(dirname6(path3), { recursive: true });
-  writeFileSync6(path3, key, { mode: 384 });
-  try {
-    chmodSync(path3, 384);
-  } catch {
-  }
-}
-function rotateSessionKey(stateDir) {
-  const key = randomBytes(32);
-  writeSessionKey(join9(stateDir, SESSION_KEY_FILE), key);
-  return key;
-}
-function readSessionEpoch(stateDir) {
-  try {
-    const parsed = JSON.parse(readFileSync6(join9(stateDir, SESSION_EPOCH_FILE), "utf8"));
-    return Number.isInteger(parsed?.epoch) && parsed.epoch >= 0 ? parsed.epoch : 0;
-  } catch {
-    return 0;
-  }
-}
-function advanceSessionEpoch(stateDir, epoch = SESSION_EPOCH) {
-  const from = readSessionEpoch(stateDir);
-  if (from >= epoch) return { advanced: false, epoch: from };
-  const keyPath = join9(stateDir, SESSION_KEY_FILE);
-  const rotatedKey = existsSync4(keyPath);
-  if (rotatedKey) rotateSessionKey(stateDir);
-  mkdirSync7(stateDir, { recursive: true });
-  writeFileSync6(
-    join9(stateDir, SESSION_EPOCH_FILE),
-    JSON.stringify({ epoch, advancedAt: (/* @__PURE__ */ new Date()).toISOString() }),
-    { mode: 384 }
-  );
-  return { advanced: true, from, to: epoch, rotatedKey };
-}
-function sessionEpochLogLine(advance, signedOut) {
-  if (!advance.advanced || !advance.rotatedKey) return null;
-  const count = signedOut === null ? "an unknown number of" : String(signedOut);
-  return `session epoch ${advance.from} -> ${advance.to}: rotated the session key and signed out ${count} recorded remote device(s); every older remote session is refused`;
-}
+import { join as join55 } from "node:path";
 
 // packages/server/src/session-epoch-child.ts
+init_access_codes();
 import { readFileSync as readFileSync7 } from "node:fs";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 
 // packages/server/src/restart-supervisor.ts
+init_access_codes();
 init_local_origin();
 init_local_image();
 
@@ -86684,6 +87174,7 @@ var RECOVERY_SCRIPT = `
 `.trim();
 
 // packages/server/src/restart-supervisor.ts
+init_audit();
 init_src();
 var SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
 var SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
@@ -86719,7 +87210,7 @@ async function signOutOlderSessionEpoch(options) {
 }
 function supervisorPort(stateDir, supervisorPid) {
   try {
-    const status = JSON.parse(readFileSync7(join10(stateDir, "dev-supervisor.lock"), "utf8"));
+    const status = JSON.parse(readFileSync7(join11(stateDir, "dev-supervisor.lock"), "utf8"));
     if (status.pid !== supervisorPid) return void 0;
     return Number.isInteger(status.port) && status.port > 0 && status.port <= 65535 ? status.port : void 0;
   } catch {
@@ -86784,7 +87275,7 @@ try {
     ];
     if (!existsSync26(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync26(join53(directory, requiredFile)))
+      if (!directory || !existsSync26(join55(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }