frizz-server 0.15.23 → 0.15.25

package/dist/dev-child.js

@@ -14227,7 +14227,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, LEGACY_PR_WATCH_ARMED_TRAILER, LEGACY_ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, COMMAND_WATCH_EVERY_MIN_MS, COMMAND_WATCH_EVERY_MAX_MS, COMMAND_WATCH_FOR_MAX_MS, COMMAND_WATCH_MAX_ARMED, COMMAND_WATCH_COMMAND_MAX, COMMAND_WATCH_OUTPUT_MAX_BYTES, COMMAND_WATCH_RUN_TIMEOUT_MS, CommandWatchRun, CommandWatchState, CommandWatchView, AddOwnCommandWatchInput, AddOwnCommandWatchResult, DropOwnCommandWatchInput, DropOwnCommandWatchResult, ListOwnCommandWatchesInput, OwnCommandWatchesResult, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_ANSWER_PREFIX, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, ANSWER_PICK_PREFIX, DISMISSED_ANSWER, ANSWERS_NOTE_HEADER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, SteerThreadInput, SteerThreadResult, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, MERGED_WAKE_LEAD, MERGED_WAKE_HEADING, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, CROSS_SESSION_PREAMBLE, CROSS_SESSION_WRAPPER, CROSS_SESSION_GUIDANCE, XML_ATTRIBUTE, THREAD_MESSAGE_OPEN, THREAD_MESSAGE_CLOSE, THREAD_MESSAGE_GUIDANCE, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, CODEX_MODELS_FALLBACK, AcpAgent, ACP_MODEL_PREFIX, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_SCALAR_KINDS, AWAITING_STEPS_MAX, AWAITING_STEP_VALUE_MAX, AWAITING_QUESTIONS_MAX, AWAITING_TITLE_MAX, AWAITING_STATUSES, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, ISSUE_WATCH_SPENT_TRAILER, ISSUE_WATCH_ARMED_TRAILER, LEGACY_PR_WATCH_ARMED_TRAILER, LEGACY_ISSUE_WATCH_ARMED_TRAILER, INTERRUPT_ENDED_LEAD, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, PARK_CORRECTION_NEEDS_INPUT_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, CommandWatchRun, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, COMMAND_WATCH_EVERY_MIN_MS, COMMAND_WATCH_EVERY_MAX_MS, COMMAND_WATCH_FOR_MAX_MS, COMMAND_WATCH_MAX_ARMED, COMMAND_WATCH_COMMAND_MAX, COMMAND_WATCH_OUTPUT_MAX_BYTES, COMMAND_WATCH_RUN_TIMEOUT_MS, CommandWatchState, CommandWatchView, AddOwnCommandWatchInput, AddOwnCommandWatchResult, DropOwnCommandWatchInput, DropOwnCommandWatchResult, ListOwnCommandWatchesInput, OwnCommandWatchesResult, QUESTION_FENCE_RETIRED_AT, NEEDS_INPUT_REQUIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_ANSWER_PREFIX, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, ANSWER_CONTINUATION_INDENT, indentAnswerContinuation, ANSWER_PICK_PREFIX, DISMISSED_ANSWER, ANSWERS_NOTE_HEADER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, SteerThreadInput, SteerThreadResult, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, MERGED_WAKE_LEAD, MERGED_WAKE_HEADING, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, CROSS_SESSION_PREAMBLE, CROSS_SESSION_WRAPPER, CROSS_SESSION_GUIDANCE, XML_ATTRIBUTE, THREAD_MESSAGE_OPEN, THREAD_MESSAGE_CLOSE, THREAD_MESSAGE_GUIDANCE, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -14675,7 +14675,7 @@ var init_src = __esm({
     PARK_CORRECTION_RETIRED_LEAD = "\u26D4 Your ```awaiting fence uses ";
     PARK_CORRECTION_QUESTION_LEAD = "\u26A0\uFE0F Your ```awaiting fence landed while ";
     PARK_CORRECTION_NEEDS_INPUT_LEAD = "\u26A0\uFE0F Your ```awaiting fence gives no ";
-    ThreadWatchKind = external_exports.enum(["shell", "github", "timer"]);
+    ThreadWatchKind = external_exports.enum(["shell", "github", "timer", "command"]);
     GithubChecksState = external_exports.enum(["none", "running", "passing", "failing"]);
     GithubMergeState = external_exports.enum(["mergeable", "blocked", "conflicting", "unknown"]);
     GithubWatchStatus = external_exports.object({
@@ -14729,6 +14729,12 @@ var init_src = __esm({
       /** When frizz last heard from GitHub, for the same reason `GithubWatchStatus.polledAt` carries it. */
       polledAt: external_exports.string()
     }).strict();
+    CommandWatchRun = external_exports.object({
+      at: external_exports.string(),
+      outcome: external_exports.enum(["exit", "timeout", "signal", "error"]),
+      exitCode: external_exports.number().int().nullable(),
+      output: external_exports.string()
+    }).strict();
     ThreadWatchView = external_exports.object({
       id: external_exports.string(),
       kind: ThreadWatchKind,
@@ -14750,7 +14756,19 @@ var init_src = __esm({
        *  worker's prompt is the row's NAME (a `tmr_…` id names nothing to a human) and the fire instant is
        *  its status. Unlike `github` there is no polled half to be absent: a timer that exists is fully
        *  known, so a timer row always carries this. */
-      timer: external_exports.object({ fireAt: external_exports.string(), prompt: external_exports.string() }).strict().optional()
+      timer: external_exports.object({ fireAt: external_exports.string(), prompt: external_exports.string() }).strict().optional(),
+      /** `command` rows only: the armed command watch's registration and its last check — what the worker's
+       *  own read-back carries (CommandWatchView), minus the id and state the row already has. The command is
+       *  the row's NAME and the cadence its status. Until 2026-10-13 a command watch had no row at all, so a
+       *  thread parked on nothing else drew a card that said only "Waiting for an external update." */
+      command: external_exports.object({
+        command: external_exports.string(),
+        /** The cadence in the house duration grammar (`2m`, `1h 30m`). */
+        every: external_exports.string(),
+        expiresAt: external_exports.string(),
+        runs: external_exports.number().int().nonnegative(),
+        lastRun: CommandWatchRun.optional()
+      }).strict().optional()
     }).strict();
     PR_WATCH_FOR_MAX_MS = 365 * 24 * 60 * 60 * 1e3;
     PR_WATCH_DEFAULT_FOR_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -14889,12 +14907,6 @@ var init_src = __esm({
     COMMAND_WATCH_COMMAND_MAX = 4e3;
     COMMAND_WATCH_OUTPUT_MAX_BYTES = 4096;
     COMMAND_WATCH_RUN_TIMEOUT_MS = 2 * 6e4;
-    CommandWatchRun = external_exports.object({
-      at: external_exports.string(),
-      outcome: external_exports.enum(["exit", "timeout", "signal", "error"]),
-      exitCode: external_exports.number().int().nullable(),
-      output: external_exports.string()
-    }).strict();
     CommandWatchState = external_exports.enum(["armed", "dropped", "passed", "expired", "cancelled"]);
     CommandWatchView = external_exports.object({
       id: external_exports.string(),
@@ -23434,7 +23446,8 @@ function createClaudeRuntimeIngest(deps) {
     live2.set(item.sessionId, {
       turn: signal ?? prior?.turn,
       at: now,
-      events: (prior?.events ?? 0) + 1
+      events: (prior?.events ?? 0) + 1,
+      messageId: signal === void 0 ? prior?.messageId : signal === "running" && item.event.kind === "assistant" ? item.event.messageId : void 0
     });
     deps.receipts?.publish({ type: "claude.runtime.event", slug: item.slug, sessionId: item.sessionId, kind: item.event.kind });
     if (item.event.kind === "task") {
@@ -23499,9 +23512,10 @@ function createClaudeRuntimeIngest(deps) {
     }
   };
 }
-function resolveRuntimeTurn(folded, backstopped, runtime, ageMs = 0) {
+function resolveRuntimeTurn(folded, backstopped, runtime, ageMs = 0, caughtUp = false) {
   if (!runtime) return folded;
   if (runtime === "running" && folded === "idle") {
+    if (caughtUp) return "idle";
     return ageMs > RUNNING_OVERRIDE_MAX_AGE_MS ? "idle" : "in-flight";
   }
   if (runtime === "settled" && backstopped) return "idle";
@@ -26158,6 +26172,7 @@ function applyRecord(state, rec) {
     state.interrupted = void 0;
     state.localCommandDone = void 0;
     if (typeof rec.timestamp === "string") state.lastAssistantAt = rec.timestamp;
+    state.lastAssistantUuid = typeof rec.uuid === "string" ? rec.uuid : void 0;
     state.lastStopReason = typeof rec.message?.stop_reason === "string" ? rec.message.stop_reason : void 0;
     const observedModel = typeof rec.message?.model === "string" ? rec.message.model.trim() : "";
     if (observedModel && observedModel !== "<synthetic>") {
@@ -26435,7 +26450,8 @@ function createTailer(deps) {
     if (!deps.runtimeLiveness || !isBrokerClaudeRow(row)) return detailed.turn;
     const live2 = deps.runtimeLiveness(row.session_id);
     const ageMs = live2 ? Math.max(0, nowMs - live2.at) : 0;
-    return resolveRuntimeTurn(detailed.turn, detailed.backstopped, live2?.turn, ageMs);
+    const caughtUp = live2?.messageId !== void 0 && live2.messageId === state.lastAssistantUuid;
+    return resolveRuntimeTurn(detailed.turn, detailed.backstopped, live2?.turn, ageMs, caughtUp);
   }
   function chaseRuntime(row, state, foldAdvanced) {
     if (!deps.runtimeLiveness || !isBrokerClaudeRow(row)) return false;
@@ -35554,7 +35570,7 @@ var init_codex_app_server = __esm({
             approvalsReviewer: "user",
             ...this.resumeSandboxOverride(binding),
             ...cwdOverride,
-            ...holdsExec ? {} : this.threadConfig(threadSlug, sessionId)
+            ...holdsExec ? {} : this.resumeRebuild(threadSlug, sessionId)
           });
           const response = ThreadResponse.parse(rawResponse);
           if (response.thread.id !== binding.codex_thread_id || response.thread.ephemeral) {
@@ -35595,7 +35611,7 @@ var init_codex_app_server = __esm({
        * with it, no thread is released to be rebuilt, and each keeps whatever its last load gave it.
        */
       syncsThreadConfig() {
-        return !this.unsubscribeRefused && process.env.FRIZZ_PLUGIN_SYNC_OFF !== "1" && (this.options.frizzMcp !== void 0 || this.options.workerConfig !== void 0);
+        return !this.unsubscribeRefused && process.env.FRIZZ_PLUGIN_SYNC_OFF !== "1" && (this.options.frizzMcp !== void 0 || this.options.workerConfig !== void 0 || this.options.workerBaseInstructions !== void 0);
       }
       // Adopt a rollout this bridge did NOT create — a legacy Codex thread from before the app-server
       // cutover, dispatched as its own `codex` process (its `agent_session_id` is the on-disk rollout id).
@@ -35630,7 +35646,9 @@ var init_codex_app_server = __esm({
             // Adoption is the first time frizz owns this rollout, so it is also the first chance to give
             // the thread a frizz MCP mount that knows its slug, and its hooks. The rollout belonged to a
             // process of its own, so this app-server is loading it cold and the bag is what it is built from.
-            ...this.threadConfig(input.threadSlug, input.sessionId)
+            // And its contract: a pre-app-server thread carried it only in its FIRST PROMPT, so its rollout's
+            // saved base instructions are Codex's default, and a compaction took the contract with it.
+            ...this.resumeRebuild(input.threadSlug, input.sessionId)
           });
           const response = ThreadResponse.parse(rawResponse);
           if (response.thread.id !== input.codexThreadId || response.thread.ephemeral) {
@@ -36485,7 +36503,7 @@ var init_codex_app_server = __esm({
               // commands and ended every one of them instead (measured 2026-10-11 on codex 0.161.0: a
               // `sleep` alive after the old server left was gone after the new server's warm-up). Without
               // the bag the same resume only rejoins.
-              ...execThreads.includes(row.codex_thread_id) ? {} : this.threadConfig(row.thread_slug, row.frizz_session_id)
+              ...execThreads.includes(row.codex_thread_id) ? {} : this.resumeRebuild(row.thread_slug, row.frizz_session_id)
             });
             const response = ThreadResponse.parse(rawResponse);
             if (response.thread.id !== row.codex_thread_id || response.thread.ephemeral) throw new Error("resume ownership mismatch");
@@ -36682,6 +36700,31 @@ var init_codex_app_server = __esm({
         };
         return Object.keys(config).length ? { config } : {};
       }
+      /**
+       * Everything a `thread/resume` that may rebuild the thread sends of this server's own: the bag, and
+       * the worker contract as `baseInstructions`. Both or neither, because they obey the same rule.
+       *
+       * The contract has to ride every such resume. Codex picks a resumed thread's base instructions from
+       * the request first, then from `model_instructions_file` / `instructions` in any config.toml layer,
+       * and only then from the rollout's saved `session_meta` (codex 0.161.0 `config/mod.rs:4003-4011`,
+       * `session/mod.rs:722-756`). Sending none handed a worker whose operator set either key that file in
+       * place of the Frizz contract, after every restart and for the rest of its life — measured against a
+       * fake model (`instructions` read the file's text on the first turn after the resume and after a
+       * compaction), and fixed by this (the same run reads the contract).
+       *
+       * And it has to stay off the resumes the bag stays off. Codex counts ANY `baseInstructions` on a
+       * resume of a loaded thread as an override (`thread_processor.rs:218`, no comparison with what the
+       * thread already has), and an override on a loaded, idle thread nobody subscribes to tears it down
+       * and rebuilds it (`resume_running_thread`, `:4350-4380`) — the very rebuild that ends a background
+       * command. Measured on 0.161.0 with `_live_codex_config_sync.mts`: a restart-reconcile rejoin that
+       * carried `baseInstructions` and no bag ended the thread's `sleep`, which survives the same rejoin
+       * carrying neither. So a rejoin of a thread holding one carries neither; it is loaded already, with
+       * its instructions, and the rebuild before its next turn (startTurn) brings the contract in.
+       */
+      resumeRebuild(threadSlug, sessionId) {
+        const baseInstructions = this.options.workerBaseInstructions?.(threadSlug, sessionId);
+        return { ...this.threadConfig(threadSlug, sessionId), ...baseInstructions ? { baseInstructions } : {} };
+      }
       /** An idle thread on this connection that still runs on a previous server's config and can be
        *  rebuilt now — see threadConfig. */
       threadConfigIsBehind(binding) {
@@ -39060,9 +39103,10 @@ exactly ONE of them.
     followed COLD by someone who has read nothing else; frizz reads them verbatim. Steps NAME THE HUMAN
     as the wait, so the fence needs no other name and no \`for:\` (add one only if you want to be woken
     to re-check), and it always puts the thread in their queue \u2014 \`status:\` may be left out. Their
-    card, headed **Awaiting human**, shows the steps over one **Done** button, and its click comes
-    back to you as their reply, \`Done\`, the same as anything they type; anything else they need to
-    tell you \u2014 a step that failed, the account they used \u2014 comes as a message of their own. An act is not a decision: never ask
+    card, headed **Awaiting human**, shows the steps over one checkbox, **I have completed this**;
+    ticked and sent, it comes back to you as their reply, \`Done\`, the same as anything they type,
+    with any note they typed under it; anything else they need to tell you \u2014 a step that failed, the
+    account they used \u2014 comes as that note or a message of their own. An act is not a decision: never ask
     WHETHER they will do it, and never sign off \`done\` while it is still owed.
     **THE FIRST TEST OF EVERY STEP: COULD YOU DO IT YOURSELF? THEN IT IS NOT A STEP \u2014 DO IT.** This
     outranks every rule below. Steps are what is LEFT after you have done all you can: a command you
@@ -41141,6 +41185,15 @@ function composePrompt(sessionId, prompt, kind = "claude") {
 
 ${DISPATCH_TASK_BANNER_MARKER}${prompt}`;
 }
+function claudeWorkerSystemPrompt(sessionId, projectDir) {
+  return [loadWorkerPrompt("claude"), scratchpadOrientation(sessionId, "claude"), frizzConfigBlock(projectDir)].filter(Boolean).join("\n\n");
+}
+function codexWorkerBaseInstructions(sessionId, projectDir) {
+  return [loadWorkerPrompt("codex"), scratchpadOrientation(sessionId, "codex"), frizzConfigBlock(projectDir)].filter(Boolean).join("\n\n");
+}
+function acpWorkerContract(sessionId, projectDir) {
+  return [loadWorkerPrompt("acp"), scratchpadOrientation(sessionId, "acp"), frizzConfigBlock(projectDir)].filter(Boolean).join("\n\n");
+}
 function scratchpadOrientation(sessionId, kind = "claude") {
   const children2 = kind === "codex" ? "native sub-agents share it, so give each its own file" : "name it in a sub-agent's prompt when you want its notes back, and give each child its own file";
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work (${children2}). Nothing in this directory is read automatically; if you want a note back after a compaction, \`frizzctl goal start --post-compaction\` re-sends a prompt of your choosing.`;
@@ -41305,6 +41358,7 @@ function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
   const frizzDir = join36(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
+  const inFlightSlugs = /* @__PURE__ */ new Set();
   function cleanupPrewrites(built) {
     for (const path3 of new Set(built.prewrite.map((file) => file.path))) {
       try {
@@ -41334,181 +41388,181 @@ function createDispatcher(deps) {
       }
       const title = input.title?.trim() || fallbackTitle(input.prompt);
       const base = input.slug ?? slugify(title);
-      const slug = resolveSlug(frizzDir, base, (s) => deps.storage.getSession(s) !== void 0);
-      const registryTitle = title;
-      const sessionId = randomUUID13();
-      const permissionMode = workerDispatchPermission(kind, settings);
-      const model = input.model ?? settings.model;
-      const effort = input.effort ?? settings.effort;
-      const scratchRel = writeScratchDir(deps.project.dir, sessionId);
-      const prompt = composePrompt(sessionId, input.prompt, kind);
-      if (kind === "codex") {
-        const bridge = deps.codexAppServer;
-        if (!bridge) {
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error("Codex app-server is unavailable; cannot start this thread. Check that `codex` is installed and its app-server protocol matches the pinned revision (re-pin if you upgraded codex).");
-        }
-        const extraSystemPrompt = [scratchpadOrientation(sessionId, kind), frizzConfigBlock(deps.project.dir)].filter(Boolean).join("\n\n");
-        try {
-          const spawned = await bridge.spawnDispatch({
-            threadSlug: slug,
-            sessionId,
-            cwd: deps.project.dir,
-            prompt,
-            model,
-            effort,
-            sandbox: codexSandbox(permissionMode),
-            baseInstructions: [loadWorkerPrompt("codex"), extraSystemPrompt].filter(Boolean).join("\n\n"),
-            developerInstructions: CODEX_FIRST_OUTPUT_TITLE_DEVELOPER_INSTRUCTIONS
-            // No `config` here: the hooks and the reasoning summary are the bridge's to send
-            // (codexWorkerThreadConfig), with this start and with every resume after it.
-          });
-          deps.storage.upsertSession({
-            slug,
-            session_id: sessionId,
-            thread_name: threadIdentityName(slug),
-            spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
-            last_read_at: null,
-            unread: 0,
-            exited: 0,
-            archived: 0,
-            rested_at: null,
-            title_auto: input.title?.trim() ? 0 : 1,
-            title_locked: 0,
-            // a caller's hard-coded title is not a human's — the worker may rename it
-            title: registryTitle,
-            state: "open",
-            meta: null,
-            seen_at: null,
-            transcript_id: null,
-            model: model ?? null,
-            effort: effort ?? null,
-            permission_mode: permissionMode
-          });
-          deps.storage.setBackend(slug, "codex");
-          deps.storage.setAgentSession(slug, spawned.binding.codexSessionId);
-          deps.storage.setCodexRuntime(slug, "app-server");
-          deps.storage.setWorkerSurface(slug, "cli");
-          void deps.board.rebuild().catch(() => {
-          });
-          return { slug, sessionId };
-        } catch (err) {
+      const slug = resolveSlug(frizzDir, base, (s) => inFlightSlugs.has(s) || deps.storage.getSession(s) !== void 0);
+      inFlightSlugs.add(slug);
+      try {
+        const registryTitle = title;
+        const sessionId = randomUUID13();
+        const permissionMode = workerDispatchPermission(kind, settings);
+        const model = input.model ?? settings.model;
+        const effort = input.effort ?? settings.effort;
+        const scratchRel = writeScratchDir(deps.project.dir, sessionId);
+        const prompt = composePrompt(sessionId, input.prompt, kind);
+        if (kind === "codex") {
+          const bridge = deps.codexAppServer;
+          if (!bridge) {
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error("Codex app-server is unavailable; cannot start this thread. Check that `codex` is installed and its app-server protocol matches the pinned revision (re-pin if you upgraded codex).");
+          }
           try {
-            bridge.releaseSession(slug, sessionId, "session-deleted");
-          } catch {
+            const spawned = await bridge.spawnDispatch({
+              threadSlug: slug,
+              sessionId,
+              cwd: deps.project.dir,
+              prompt,
+              model,
+              effort,
+              sandbox: codexSandbox(permissionMode),
+              baseInstructions: codexWorkerBaseInstructions(sessionId, deps.project.dir),
+              developerInstructions: CODEX_FIRST_OUTPUT_TITLE_DEVELOPER_INSTRUCTIONS
+              // No `config` here: the hooks and the reasoning summary are the bridge's to send
+              // (codexWorkerThreadConfig), with this start and with every resume after it.
+            });
+            deps.storage.upsertSession({
+              slug,
+              session_id: sessionId,
+              thread_name: threadIdentityName(slug),
+              spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
+              last_read_at: null,
+              unread: 0,
+              exited: 0,
+              archived: 0,
+              rested_at: null,
+              title_auto: input.title?.trim() ? 0 : 1,
+              title_locked: 0,
+              // a caller's hard-coded title is not a human's — the worker may rename it
+              title: registryTitle,
+              state: "open",
+              meta: null,
+              seen_at: null,
+              transcript_id: null,
+              model: model ?? null,
+              effort: effort ?? null,
+              permission_mode: permissionMode
+            });
+            deps.storage.setBackend(slug, "codex");
+            deps.storage.setAgentSession(slug, spawned.binding.codexSessionId);
+            deps.storage.setCodexRuntime(slug, "app-server");
+            deps.storage.setWorkerSurface(slug, "cli");
+            void deps.board.rebuild().catch(() => {
+            });
+            return { slug, sessionId };
+          } catch (err) {
+            try {
+              bridge.releaseSession(slug, sessionId, "session-deleted");
+            } catch {
+            }
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error(`Codex app-server could not start this thread: ${err.message}. Check that \`codex\` is installed and its app-server protocol matches the pinned revision (re-pin if you upgraded codex).`);
           }
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error(`Codex app-server could not start this thread: ${err.message}. Check that \`codex\` is installed and its app-server protocol matches the pinned revision (re-pin if you upgraded codex).`);
-        }
-      }
-      if (kind === "acp") {
-        const bridge = deps.acpBridge;
-        const agentId = acpAgentIdFromModel(model);
-        if (!bridge || !agentId) {
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error(!bridge ? "The ACP bridge is unavailable; cannot start this thread." : `An ACP dispatch needs an agent: pick one in the composer (model \`acp:<agent>\`), got ${JSON.stringify(model ?? null)}.`);
         }
-        const firstPrompt = [loadWorkerPrompt("acp"), scratchpadOrientation(sessionId, kind), frizzConfigBlock(deps.project.dir), prompt].filter(Boolean).join("\n\n");
-        try {
-          const spawned = await bridge.spawnDispatch({ threadSlug: slug, sessionId, cwd: deps.project.dir, agentId, modelId: acpModelIdFromModel(model), prompt: firstPrompt, userText: input.prompt });
-          deps.storage.upsertSession({
-            slug,
-            session_id: sessionId,
-            thread_name: threadIdentityName(slug),
-            spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
-            last_read_at: null,
-            unread: 0,
-            exited: 0,
-            archived: 0,
-            rested_at: null,
-            title_auto: input.title?.trim() ? 0 : 1,
-            title_locked: 0,
-            title: registryTitle,
-            state: "open",
-            meta: null,
-            seen_at: null,
-            transcript_id: null,
-            model: model ?? null,
-            effort: null,
-            permission_mode: permissionMode
-          });
-          deps.storage.setBackend(slug, "acp");
-          deps.storage.setAgentSession(slug, spawned.acpSessionId);
-          deps.storage.setAcpAgent(slug, agentId);
-          deps.storage.setWorkerSurface(slug, "cli");
-          void deps.board.rebuild().catch(() => {
-          });
-          return { slug, sessionId };
-        } catch (err) {
+        if (kind === "acp") {
+          const bridge = deps.acpBridge;
+          const agentId = acpAgentIdFromModel(model);
+          if (!bridge || !agentId) {
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error(!bridge ? "The ACP bridge is unavailable; cannot start this thread." : `An ACP dispatch needs an agent: pick one in the composer (model \`acp:<agent>\`), got ${JSON.stringify(model ?? null)}.`);
+          }
+          const firstPrompt = [acpWorkerContract(sessionId, deps.project.dir), prompt].filter(Boolean).join("\n\n");
           try {
-            bridge.releaseSession(slug, sessionId, "session-deleted");
-          } catch {
+            const spawned = await bridge.spawnDispatch({ threadSlug: slug, sessionId, cwd: deps.project.dir, agentId, modelId: acpModelIdFromModel(model), prompt: firstPrompt, userText: input.prompt });
+            deps.storage.upsertSession({
+              slug,
+              session_id: sessionId,
+              thread_name: threadIdentityName(slug),
+              spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
+              last_read_at: null,
+              unread: 0,
+              exited: 0,
+              archived: 0,
+              rested_at: null,
+              title_auto: input.title?.trim() ? 0 : 1,
+              title_locked: 0,
+              title: registryTitle,
+              state: "open",
+              meta: null,
+              seen_at: null,
+              transcript_id: null,
+              model: model ?? null,
+              effort: null,
+              permission_mode: permissionMode
+            });
+            deps.storage.setBackend(slug, "acp");
+            deps.storage.setAgentSession(slug, spawned.acpSessionId);
+            deps.storage.setAcpAgent(slug, agentId);
+            deps.storage.setWorkerSurface(slug, "cli");
+            void deps.board.rebuild().catch(() => {
+            });
+            return { slug, sessionId };
+          } catch (err) {
+            try {
+              bridge.releaseSession(slug, sessionId, "session-deleted");
+            } catch {
+            }
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error(`The ACP agent could not start this thread: ${err.message}`);
           }
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error(`The ACP agent could not start this thread: ${err.message}`);
         }
-      }
-      if (kind === "claude") {
-        const bridge = deps.claudeBroker;
-        if (!bridge) {
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error("Claude session broker is unavailable; cannot start this thread.");
-        }
-        const appendSystemPrompt = [
-          loadWorkerPrompt("claude"),
-          scratchpadOrientation(sessionId, kind),
-          frizzConfigBlock(deps.project.dir)
-        ].filter(Boolean).join("\n\n");
-        try {
-          await bridge.spawnDispatch({
-            threadSlug: slug,
-            sessionId,
-            cwd: deps.project.dir,
-            prompt,
-            permissionMode,
-            appendSystemPrompt,
-            model,
-            effort
-          });
-          deps.storage.upsertSession({
-            slug,
-            session_id: sessionId,
-            thread_name: threadIdentityName(slug),
-            spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
-            last_read_at: null,
-            unread: 0,
-            exited: 0,
-            archived: 0,
-            rested_at: null,
-            title_auto: input.title?.trim() ? 0 : 1,
-            title_locked: 0,
-            // a caller's hard-coded title is not a human's — the worker may rename it
-            title: registryTitle,
-            state: "open",
-            meta: null,
-            seen_at: null,
-            transcript_id: null,
-            model: model ?? null,
-            effort: effort ?? null,
-            permission_mode: permissionMode
-          });
-          deps.storage.setBackend(slug, "claude");
-          deps.storage.setClaudeRuntime(slug, "broker");
-          deps.storage.setWorkerSurface(slug, "cli");
-          void deps.board.rebuild().catch(() => {
-          });
-          return { slug, sessionId };
-        } catch (err) {
+        if (kind === "claude") {
+          const bridge = deps.claudeBroker;
+          if (!bridge) {
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error("Claude session broker is unavailable; cannot start this thread.");
+          }
+          const appendSystemPrompt = claudeWorkerSystemPrompt(sessionId, deps.project.dir);
           try {
-            bridge.releaseSession(slug, sessionId, "session-deleted");
-          } catch {
+            await bridge.spawnDispatch({
+              threadSlug: slug,
+              sessionId,
+              cwd: deps.project.dir,
+              prompt,
+              permissionMode,
+              appendSystemPrompt,
+              model,
+              effort
+            });
+            deps.storage.upsertSession({
+              slug,
+              session_id: sessionId,
+              thread_name: threadIdentityName(slug),
+              spawned_at: (/* @__PURE__ */ new Date()).toISOString(),
+              last_read_at: null,
+              unread: 0,
+              exited: 0,
+              archived: 0,
+              rested_at: null,
+              title_auto: input.title?.trim() ? 0 : 1,
+              title_locked: 0,
+              // a caller's hard-coded title is not a human's — the worker may rename it
+              title: registryTitle,
+              state: "open",
+              meta: null,
+              seen_at: null,
+              transcript_id: null,
+              model: model ?? null,
+              effort: effort ?? null,
+              permission_mode: permissionMode
+            });
+            deps.storage.setBackend(slug, "claude");
+            deps.storage.setClaudeRuntime(slug, "broker");
+            deps.storage.setWorkerSurface(slug, "cli");
+            void deps.board.rebuild().catch(() => {
+            });
+            return { slug, sessionId };
+          } catch (err) {
+            try {
+              bridge.releaseSession(slug, sessionId, "session-deleted");
+            } catch {
+            }
+            cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+            throw new Error(`Claude session broker could not start this thread: ${err.message}.`);
           }
-          cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-          throw new Error(`Claude session broker could not start this thread: ${err.message}.`);
         }
+        cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
+        throw new Error(`unsupported backend for dispatch: ${String(kind)}`);
+      } finally {
+        inFlightSlugs.delete(slug);
       }
-      cleanupDispatchFiles(scratchRel, { argv: [], env: {}, prewrite: [] }, sessionId);
-      throw new Error(`unsupported backend for dispatch: ${String(kind)}`);
     },
     // ---- PROMOTION: the human steered one of their own terminals, so it becomes a frizz thread ----
     //
@@ -41678,12 +41732,7 @@ function createDispatcher(deps) {
           cwd: deps.project.dir,
           prompt,
           permissionMode,
-          appendSystemPrompt: [
-            loadWorkerPrompt("claude"),
-            scratchpadOrientation(sessionId),
-            frizzConfigBlock(deps.project.dir),
-            adoption
-          ].filter(Boolean).join("\n\n"),
+          appendSystemPrompt: [claudeWorkerSystemPrompt(sessionId, deps.project.dir), adoption].filter(Boolean).join("\n\n"),
           model: settings.model,
           effort: settings.effort
         });
@@ -42040,7 +42089,7 @@ function bgSnoozeArmed(row) {
 function hasParkedExternalWait(tele, _nowMs) {
   return false;
 }
-function fenceWatchViews(slug, tele, fenceAt, github = {}, registered = [], armedTimers = [], armedWatches = [], issueBook = {}) {
+function fenceWatchViews(slug, tele, fenceAt, github = {}, registered = [], armedTimers = [], armedWatches = [], issueBook = {}, armedCommands = []) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
   for (const t of armedTimers) {
@@ -42057,6 +42106,26 @@ function fenceWatchViews(slug, tele, fenceAt, github = {}, registered = [], arme
       timer: { fireAt: t.fireAt, prompt: t.prompt }
     });
   }
+  for (const w of armedCommands) {
+    if (w.state !== "armed" || seen.has(`command:${w.id}`)) continue;
+    seen.add(`command:${w.id}`);
+    out.push({
+      id: `command:${slug}:${w.id}`,
+      kind: "command",
+      target: w.id,
+      state: "armed",
+      createdAt: new Date(w.created_at).toISOString(),
+      // The same projection as the worker's read-back (router commandWatchView), so the row and
+      // `frizzctl watch-command` name one cadence and one last check.
+      command: {
+        command: w.command,
+        every: formatElapsed(w.every_ms),
+        expiresAt: new Date(w.expires_at).toISOString(),
+        runs: w.runs,
+        ...w.last_run_at !== null && w.last_outcome ? { lastRun: { at: new Date(w.last_run_at).toISOString(), outcome: w.last_outcome, exitCode: w.last_exit, output: w.last_output ?? "" } } : {}
+      }
+    });
+  }
   for (const w of registered) {
     const subject = w.kind === "issue" ? "issue" : "pull";
     const dedupe = `github:${subject}:${w.target}`;
@@ -42392,7 +42461,7 @@ function sessionThreadView(projectDir, storage, row, rawTele, registeredLegacyTe
     // become the github rows, `watch:` lines the shell rows — so this strip lists exactly what will
     // actually wake the thread, and the two cannot drift into claiming different things. There is no
     // registry behind either any more (`thread_watch`, retired 2026-08-14).
-    watches: fenceWatchViews(row.slug, tele, tele?.lastAssistantAt, github, armedPrWatches, armedTimers, armedWatches, issueBook),
+    watches: fenceWatchViews(row.slug, tele, tele?.lastAssistantAt, github, armedPrWatches, armedTimers, armedWatches, issueBook, armedCommandWatches),
     pendingAsk: tele?.pendingAsk ? { questions: tele.pendingAsk.questions } : void 0,
     pendingQuestion: tele?.pendingQuestion ?? false,
     questions,
@@ -46241,15 +46310,31 @@ function parseAcpRecord(line) {
   }
   if (!raw2 || typeof raw2 !== "object" || typeof raw2.kind !== "string") return void 0;
   const kind = raw2.kind;
-  if (kind === "acp-session" || kind === "acp-note" || EVENT_KINDS.has(kind)) return raw2;
+  if (kind === "acp-session" || kind === "acp-note" || kind === "acp-contract" || EVENT_KINDS.has(kind)) return raw2;
   return void 0;
 }
 function parseAcpLine(line) {
   const rec = parseAcpRecord(line);
-  if (!rec || rec.kind === "acp-session" || rec.kind === "acp-note") return [];
+  if (!rec || rec.kind === "acp-session" || rec.kind === "acp-note" || rec.kind === "acp-contract") return [];
   const { messageId: _m2, acp: _a2, ...ev } = rec;
   return [ev];
 }
+function acpContractOwed(path3) {
+  let text2;
+  try {
+    text2 = readFileSync25(path3, "utf8");
+  } catch {
+    return false;
+  }
+  let owed = false;
+  for (const line of text2.split("\n")) {
+    if (!line.includes('"compaction"') && !line.includes('"acp-contract"')) continue;
+    const rec = parseAcpRecord(line);
+    if (rec?.kind === "compaction") owed = true;
+    else if (rec?.kind === "acp-contract") owed = false;
+  }
+  return owed;
+}
 function createAcpBackend(opts) {
   return {
     kind: "acp",
@@ -46341,6 +46426,7 @@ function projectAcpTranscript(raw2, identityPrefix = "acp") {
     switch (rec.kind) {
       case "acp-session":
       case "acp-note":
+      case "acp-contract":
       case "title":
       case "context-usage":
       case "compaction":
@@ -46565,7 +46651,10 @@ var init_acp_types = __esm({
       external_exports.object({ sessionUpdate: external_exports.literal("usage_update"), used: external_exports.number(), size: external_exports.number(), cost: external_exports.unknown().optional() }).passthrough(),
       external_exports.object({ sessionUpdate: external_exports.literal("session_info_update"), title: external_exports.string().nullish(), updatedAt: external_exports.string().nullish() }).passthrough(),
       external_exports.object({ sessionUpdate: external_exports.literal("config_option_update"), configOptions: external_exports.array(AcpConfigOption) }).passthrough(),
-      external_exports.object({ sessionUpdate: external_exports.literal("compaction_update"), compactionId: external_exports.string().optional(), status: external_exports.string().optional() }).passthrough()
+      external_exports.object({ sessionUpdate: external_exports.literal("compaction_update"), compactionId: external_exports.string().optional(), status: external_exports.string().optional() }).passthrough(),
+      // The summary streaming in while a compaction runs — sent only to a client that advertised
+      // `session.compaction`, which the bridge does. The `completed` update is the one that matters.
+      external_exports.object({ sessionUpdate: external_exports.literal("compaction_summary_chunk"), compactionId: external_exports.string().optional() }).passthrough()
     ]);
     AcpSessionNotification = external_exports.object({ sessionId: external_exports.string(), update: external_exports.unknown() }).passthrough();
     AcpStopReason = external_exports.enum(["end_turn", "max_tokens", "max_turn_requests", "refusal", "cancelled"]);
@@ -47107,6 +47196,14 @@ var init_acp_host = __esm({
 function clip3(text2, max) {
   return text2.length > max ? `${text2.slice(0, max - 1)}\u2026` : text2;
 }
+function isSlashCommand(text2) {
+  return /^\/[\w-]+(?:\s|$)/.test(text2.trimStart());
+}
+function opencodeCompactionStatus(update) {
+  const meta = update?._meta?.["opencode/compaction"];
+  const status = meta?.status;
+  return typeof status === "string" ? status : void 0;
+}
 function frizzMcpServer(mcp, slug) {
   if (!mcp) return [];
   return [{
@@ -47235,6 +47332,7 @@ var init_acp_bridge = __esm({
       host() {
         return this.options.host ?? (this.options.spawn ? directAcpHost(this.options.spawn) : daemonAcpHost);
       }
+      /** `dispatch` marks the open that starts a brand-new thread, whose first prompt already IS the contract. */
       async open(input) {
         const { threadSlug: slug, sessionId, cwd } = input;
         const agent = this.resolveAgent(input.agentId);
@@ -47244,6 +47342,7 @@ var init_acp_bridge = __esm({
         const attachment = await this.host()({ stateDir: this.options.stateDir, threadSlug: slug, sessionId, command: agent.bin, args: agent.args, cwd, env });
         const proc = attachment.process;
         const writer = new AcpTranscriptWriter(acpTranscriptPath(this.options.stateDir, sessionId));
+        const owedFromTranscript = acpContractOwed(writer.path);
         let live2;
         let isReady = false;
         const held = [];
@@ -47280,14 +47379,16 @@ var init_acp_bridge = __esm({
         try {
           init = AcpInitializeResult.parse(await conn.request("initialize", {
             protocolVersion: ACP_PROTOCOL_VERSION,
-            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false },
+            // `session.compaction` asks for the standard `compaction_update`; without it opencode reports a
+            // compaction only through `_meta` on a `session_info_update` (both are handled below).
+            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false, session: { compaction: {} } },
             clientInfo: { name: "frizz", version: "0" }
           }));
         } catch (err) {
           return fail(err instanceof Error ? new Error(`${agent.label} did not complete the ACP handshake: ${err.message}`) : err);
         }
         const mcpServers = this.options.mountsMcp?.(slug) === false ? [] : frizzMcpServer(this.options.frizzMcp, slug);
-        live2 = { slug, sessionId, cwd, agent, conn, init, acpSessionId: "", writer, loading: false, queue: [], pendingPerms: /* @__PURE__ */ new Map(), tools: /* @__PURE__ */ new Map(), exited: false, detaching: false };
+        live2 = { slug, sessionId, cwd, agent, conn, init, acpSessionId: "", writer, loading: false, queue: [], pendingPerms: /* @__PURE__ */ new Map(), tools: /* @__PURE__ */ new Map(), exited: false, detaching: false, ...owedFromTranscript ? { contractOwed: "compaction" } : {} };
         void conn.exited.then(() => {
           if (live2) this.onExit(live2);
         });
@@ -47343,6 +47444,7 @@ var init_acp_bridge = __esm({
         if (resumed === "fresh") {
           writer.append({ kind: "acp-session", at: this.now(), agent: { id: agent.id, ...init.agentInfo?.name ? { name: init.agentInfo.name } : {}, ...init.agentInfo?.version ? { version: init.agentInfo.version } : {} }, acpSessionId: live2.acpSessionId, cwd, ...live2.model ? { model: live2.model } : {} });
           if (input.acpSessionId) writer.append({ kind: "acp-note", at: this.now(), text: `Resumed with a fresh ${agent.label} session: the previous one (${input.acpSessionId}) could not be loaded, so the agent no longer has the earlier conversation.` });
+          if (!input.dispatch) live2.contractOwed = "fresh-session";
         }
         if (modelProblem) writer.append({ kind: "acp-note", at: this.now(), text: modelProblem });
         this.sessions.set(sessionId, live2);
@@ -47474,7 +47576,7 @@ var init_acp_bridge = __esm({
       // ---- public API --------------------------------------------------------------------------------
       async spawnDispatch(input) {
         if (this.closed) throw new Error("ACP bridge is closed");
-        const { live: live2 } = await this.openOnce(input);
+        const { live: live2 } = await this.openOnce({ ...input, dispatch: true });
         void this.runTurn(live2, input.prompt, input.userText, void 0);
         return this.info(live2);
       }
@@ -47615,6 +47717,15 @@ var init_acp_bridge = __esm({
       async runTurn(live2, sendText, recordText, deliveryId) {
         const turn = this.newTurn(deliveryId);
         live2.turn = turn;
+        const owed = live2.contractOwed;
+        const contract = owed && !isSlashCommand(sendText) ? this.options.contractFor?.(live2.slug, live2.sessionId) : void 0;
+        if (owed && contract) {
+          sendText = `${contract}
+
+${sendText}`;
+          live2.contractOwed = void 0;
+          live2.writer.append({ kind: "acp-contract", at: turn.startedAt, reason: owed });
+        }
         live2.writer.append({ kind: "user-message", at: turn.startedAt, text: recordText, synthetic: false });
         live2.writer.append({ kind: "turn-start", at: turn.startedAt });
         this.options.onStatusChange?.();
@@ -47768,19 +47879,32 @@ var init_acp_bridge = __esm({
             return;
           case "session_info_update":
             if (update.title) live2.writer.append({ kind: "title", title: clip3(update.title, 200) });
+            if (opencodeCompactionStatus(update) === "completed") this.compacted(live2);
             return;
           case "config_option_update":
             this.adoptModel(live2, update.configOptions);
             return;
+          case "compaction_update":
+            if (update.status === "completed") this.compacted(live2);
+            return;
           case "plan":
           case "user_message_chunk":
-          case "compaction_update":
+          case "compaction_summary_chunk":
             return;
           case "unknown":
             this.diagnostic(live2.slug, "update", `unhandled session/update ${String(update.raw?.sessionUpdate)}`);
             return;
         }
       }
+      /** The agent rewrote its history. The `compaction` record is the fold's (it sets `lastCompactionAt`,
+       *  which the post-compaction Goal trigger reads, and the activity clock); the debt is this bridge's.
+       *  A `session/load` replays old compactions too, but `handleNotification` drops replays (`loading`). */
+      compacted(live2) {
+        this.flushThought(live2);
+        this.flushText(live2, false);
+        live2.writer.append({ kind: "compaction", at: this.now() });
+        live2.contractOwed = "compaction";
+      }
       recordToolResult(live2, tc) {
         const meta = live2.tools.get(tc.toolCallId);
         if (meta?.status === "completed" || meta?.status === "failed") return;
@@ -74756,11 +74880,7 @@ function deliverCodexWake(deps) {
 }
 function deliverClaudeBrokerWake(deps) {
   const { bridge, slug, cwd, row, settings, deliveryMessage, freshProcess } = deps;
-  const appendSystemPrompt = [
-    loadWorkerPrompt("claude"),
-    scratchpadOrientation(row.session_id, "claude"),
-    frizzConfigBlock(cwd)
-  ].filter(Boolean).join("\n\n");
+  const appendSystemPrompt = claudeWorkerSystemPrompt(row.session_id, cwd);
   return bridge.followUp({
     threadSlug: slug,
     sessionId: row.session_id,
@@ -74926,13 +75046,18 @@ function createContextUnchecked(opts, resources) {
     // Codex's MCP servers mount PROCESS-wide on the app-server, not per thread, so the descriptor
     // is resolved once here — the codex twin of the per-dispatch resolveFrizzMcp on the claude side.
     frizzMcp: resolveFrizzMcp(frizzMcpTarget),
-    // …and only for a thread whose contract taught it the MCP tools: a codex thread keeps the
-    // contract it was started with, so one that predates `frizzctl` keeps its mount.
+    // …and only for a thread whose contract taught it the MCP tools. One that predates `frizzctl`
+    // keeps its mount even though its next resume hands it the current contract: its history still
+    // calls the tools, and a thread only rejoined (mid-turn, or holding a background command) runs
+    // on the contract it was loaded with until it is rebuilt.
     mountsMcp: (slug) => workerTaughtMcp(storage.getSession(slug)),
     frizzCli: resolveFrizzCli(frizzMcpTarget),
     // The rest of a worker thread's config — hooks and reasoning summaries — sent with the start
     // and every resume, so a thread that comes back under this server runs on this server's.
     workerConfig: (_slug, sessionId) => codexWorkerThreadConfig(sessionId),
+    // The worker contract, rebuilt for every resume exactly as dispatch builds it for the start —
+    // see codexWorkerBaseInstructions for why a resume that sends none can lose it.
+    workerBaseInstructions: (_slug, sessionId) => codexWorkerBaseInstructions(sessionId, project.dir),
     db: storage.db,
     interactions: storage.interactions,
     codexBin: opts.codexBin,
@@ -74984,6 +75109,11 @@ function createContextUnchecked(opts, resources) {
     interactions: storage.interactions,
     env: process.env,
     customAgents: () => getSettings(storage, home).acpAgents,
+    // Re-sent after the agent compacts and into a fresh session that replaced a lost one (acp-bridge.ts).
+    // Today's contract, not the one the thread was born with: that one is gone from the session. A thread
+    // born under the MCP contract keeps its mount (mountsMcp above), and its agent is forked with
+    // `frizzctl` on PATH like any other (frizzCli above), so the `frizzctl` contract still holds for it.
+    contractFor: (_slug, sessionId) => acpWorkerContract(sessionId, project.dir),
     onStatusChange: () => board?.refresh()
   });
   resources.acpBridge = acpBridge;
@@ -78692,6 +78822,14 @@ function createTranscriptFold(identityPrefix = "claude") {
   const childDispatchIds = /* @__PURE__ */ new Map();
   const dispatchLabels = /* @__PURE__ */ new Map();
   const queuedPending = [];
+  const placed = /* @__PURE__ */ new Set();
+  function place(m) {
+    m.queued = false;
+    if (placed.has(m)) return;
+    placed.add(m);
+    out.push(m);
+    lastAssistantId = null;
+  }
   let deliveredDedupe = null;
   let compactCommandOpen = false;
   let pendingRest = null;
@@ -78728,7 +78866,7 @@ function createTranscriptFold(identityPrefix = "claude") {
   function resolveQueuedThrough(entry) {
     for (const e13 of queuedPending) {
       if (e13 === entry) break;
-      e13.message.queued = false;
+      place(e13.message);
     }
   }
   function resolveQueued(key) {
@@ -78736,7 +78874,7 @@ function createTranscriptFold(identityPrefix = "claude") {
     if (!entry) return false;
     if (entry.message.queued) resolveQueuedThrough(entry);
     dropQueued(entry);
-    entry.message.queued = false;
+    place(entry.message);
     return true;
   }
   let offset = 0;
@@ -78788,13 +78926,12 @@ function createTranscriptFold(identityPrefix = "claude") {
       if (op2 === "enqueue" && content.trim() && !isInjectedNoise(content) && !dropCorrection(content)) {
         const queuedProjection = userProjection(content, out.length === 0);
         const m = { sourceId, role: "user", text: content, ...queuedProjection, tools: [], parts: [], at: thisTs, queued: true };
-        out.push(m);
         queuedPending.push({ key: content, message: m });
       } else if ((op2 === "remove" || op2 === "dequeue" || op2 === "popAll") && content.trim()) {
         const entry = findQueued(content);
         if (entry) {
           resolveQueuedThrough(entry);
-          entry.message.queued = false;
+          place(entry.message);
         }
       }
       return;
@@ -79043,7 +79180,9 @@ ${block.text}` : block.text;
     buffer = "";
   }
   function projected() {
-    return pendingRest ? [...out, restMessage(pendingRest.sourceId, pendingRest.at)] : out;
+    const waiting = queuedPending.filter((e13) => e13.message.queued && !placed.has(e13.message)).map((e13) => e13.message);
+    if (!pendingRest && waiting.length === 0) return out;
+    return [...out, ...pendingRest ? [restMessage(pendingRest.sourceId, pendingRest.at)] : [], ...waiting];
   }
   return {
     ingest,
@@ -82666,11 +82805,7 @@ ${gapNote}` : input.message;
       if (row?.backend === "claude" && row.claude_runtime === "broker") {
         const bridge = ctx.claudeBroker;
         if (!bridge) throw new Error("Claude session broker is unavailable; cannot deliver this follow-up");
-        const appendSystemPrompt = [
-          loadWorkerPrompt("claude"),
-          scratchpadOrientation(row.session_id, "claude"),
-          frizzConfigBlock(ctx.project.dir)
-        ].filter(Boolean).join("\n\n");
+        const appendSystemPrompt = claudeWorkerSystemPrompt(row.session_id, ctx.project.dir);
         const midTurn = (ctx.tailer.get(input.slug)?.turn ?? "in-flight") === "in-flight";
         const upgradeCandidate = claudeUpgradeCandidate({ stateDir: ctx.project.stateDir, projectId: ctx.project.id, storage: ctx.storage, telemetry: ctx.tailer.get(input.slug) }, row);
         const upgrade = upgradeCandidate ? claudeModelUpgradeDue(upgradeCandidate, { catalogue: peekClaudeModels(), nowMs: Date.now(), serverStartedAtMs: SERVER_STARTED_AT_MS }) : void 0;
@@ -83103,8 +83238,10 @@ ${gapNote}` : input.message;
         // `isDaemonAlive` above is a check, not a hold: the daemon can exit before this frame lands,
         // and followUp then COLD-RESUMES rather than failing. Take the same floor every other fork
         // takes, so a notice that loses the race cannot be the thing that rebuilds the worker at
-        // Claude's `default` — see coldResumePermission.
+        // Claude's `default` — see coldResumePermission — or rebuilds it with no worker contract,
+        // which the daemon it forks would then keep for every later message.
         permissionMode: coldResumePermission(row, ctx.getSettings()),
+        appendSystemPrompt: claudeWorkerSystemPrompt(row.session_id, ctx.project.dir),
         model: row.model ?? void 0,
         effort: row.effort ?? void 0,
         // Frizz's own notice, not the operator's reply to anything: an open card stays open.
@@ -83742,11 +83879,7 @@ ${gapNote}` : input.message;
         }
         const bridge = ctx.claudeBroker;
         if (!bridge) throw new Error("Claude session broker is unavailable; cannot compact this thread");
-        const appendSystemPrompt = [
-          loadWorkerPrompt("claude"),
-          scratchpadOrientation(row.session_id, "claude"),
-          frizzConfigBlock(ctx.project.dir)
-        ].filter(Boolean).join("\n\n");
+        const appendSystemPrompt = claudeWorkerSystemPrompt(row.session_id, ctx.project.dir);
         await bridge.followUp({
           threadSlug: input.slug,
           sessionId: row.session_id,