frizz 0.12.10 → 0.12.11

package/dist/dev-child.js

@@ -13679,7 +13679,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -13803,7 +13803,14 @@ var init_src = __esm({
       slug: external_exports.string(),
       displayName: external_exports.string(),
       defaultEffort: external_exports.string(),
-      efforts: external_exports.array(external_exports.string())
+      efforts: external_exports.array(external_exports.string()),
+      // The model's stock context window and the largest one it accepts, in tokens, straight from the
+      // cache's `context_window` / `max_context_window` (272K / 872K on GPT-5.6, 128K / 128K on Spark).
+      // The Settings "Context window" presets are built from these so the drawer names the numbers codex
+      // will actually run at (maintainer 2026-09-11: "reflect the actual numbers"). Optional: a cache from
+      // before the fields existed, or the degraded fallback, simply carries neither.
+      contextWindow: external_exports.number().int().positive().optional(),
+      maxContextWindow: external_exports.number().int().positive().optional()
     });
     ThreadProfileOption = external_exports.object({
       model: external_exports.string().min(1),
@@ -14444,6 +14451,20 @@ var init_src = __esm({
       retrying: external_exports.boolean().optional(),
       at: external_exports.string().optional()
     });
+    ThreadLinkView = external_exports.object({
+      id: external_exports.string(),
+      kind: external_exports.enum(["link", "file"]),
+      label: external_exports.string(),
+      target: external_exports.string()
+    }).strict();
+    UpsertOwnLinkInput = external_exports.object({
+      slug: ThreadSlug,
+      label: external_exports.string().trim().min(1).max(240).regex(/^[^\x00-\x1f\x7f]+$/),
+      target: external_exports.string().trim().min(1).max(8192).regex(/^[^\x00-\x1f\x7f]+$/)
+    }).strict();
+    UpsertOwnLinkResult = external_exports.object({ link: ThreadLinkView }).strict();
+    DropOwnLinkInput = external_exports.object({ slug: ThreadSlug, id: external_exports.string().min(1) }).strict();
+    DropOwnLinkResult = external_exports.object({ dropped: external_exports.boolean() }).strict();
     ThreadView = external_exports.object({
       id: ThreadSlug,
       // slug; filename is <slug>.md
@@ -14512,6 +14533,8 @@ var init_src = __esm({
       // Live background SHELLS the worker launched (tailer-derived). Same default-[] discipline. Rendered
       // in the anchored background-ops strip alongside sub-agents; ids make current rows drillable.
       bgShells: external_exports.array(BgShellView).default([]),
+      // Optional for snapshots from a server that predates link registration.
+      links: external_exports.array(ThreadLinkView).optional(),
       // The thread's ARMED WATCHERS — registry-derived, not folded from the transcript, which is what makes
       // them survive the worker saying one more sentence. Same default-[] discipline as the two above.
       //
@@ -14830,6 +14853,15 @@ var init_src = __esm({
       // writes were 51% of a day's spend while the entries were invalidated every 15–30 minutes anyway
       // (see claudePromptCacheEnv). Optional so an old blob parses; defaultSettings pins "auto".
       promptCacheTtl: external_exports.enum(["auto", "5m", "1h"]).optional(),
+      // The context window a NEW Codex thread runs with, in tokens. Codex's own default is the model's
+      // stock window (272K on GPT-5.6), but the catalogue also carries a larger `max_context_window` (872K
+      // on GPT-5.6-sol/terra/luna and GPT-6-astra, measured 2026-09-11 in ~/.codex/models_cache.json) that
+      // a thread only reaches when asked. Reaches codex as the `model_context_window` config override on
+      // `thread/start` and every cold `thread/resume` (see codexContextWindowConfig); codex clamps it to
+      // the model's maximum, so a value above it is harmless, and it moves the auto-compact threshold with
+      // it (codex compacts at 90% of the resolved window). Unset ⇒ nothing is sent and the model's stock
+      // window applies. Optional so an old blob parses; defaultSettings leaves it unset.
+      codexContextWindow: external_exports.number().int().positive().optional(),
       // The GitHub batch-dispatch prompt template (the picker's per-item worker prompt). Optional: when
       // unset OR blank the server falls back to its exported DEFAULT_GITHUB_PROMPT. Substitution tokens
       // the server fills: {repo} {n} {title} {url} {labels} {body}. The leading `THREAD: <slug>` tag is
@@ -15049,6 +15081,7 @@ var init_src = __esm({
     }).strict();
     OwnThreadActivityResult = external_exports.object({
       activity: external_exports.array(ThreadActivityItem),
+      links: external_exports.array(ThreadLinkView).optional(),
       /** Every question still owed an answer. NOT a `ThreadActivityItem` and deliberately its own list: a
        *  question is not running work, it waits on a PERSON, and there is no `questions:` key in the awaiting
        *  fence for it to be written into. Until 2026-08-28 a worker could read its open questions back only
@@ -19385,6 +19418,20 @@ function createStorage(source, projectId) {
   `);
   const prWatchCursorStmt = scope.prepare("UPDATE pr_watch SET cursor = ? WHERE project_id = @project_id AND id = ? AND state = 'armed'");
   const delPrWatches = scope.prepare("DELETE FROM pr_watch WHERE project_id = @project_id AND thread_slug = ?");
+  const upsertThreadLinkStmt = scope.prepare(`
+    INSERT INTO thread_link (project_id, id, thread_slug, kind, label, target, created_at)
+    VALUES (@project_id, @id, @slug, @kind, @label, @target, @createdAtMs)
+    ON CONFLICT (project_id, thread_slug, label) DO UPDATE SET kind = excluded.kind, target = excluded.target
+    RETURNING *
+  `);
+  const threadLinksStmt = scope.prepare(
+    "SELECT * FROM thread_link WHERE project_id = @project_id ORDER BY created_at, rowid"
+  );
+  const threadLinksBySlugStmt = scope.prepare(
+    "SELECT * FROM thread_link WHERE project_id = @project_id AND thread_slug = ? ORDER BY created_at, rowid"
+  );
+  const dropThreadLinkStmt = scope.prepare("DELETE FROM thread_link WHERE project_id = @project_id AND thread_slug = ? AND id = ?");
+  const delThreadLinks = scope.prepare("DELETE FROM thread_link WHERE project_id = @project_id AND thread_slug = ?");
   const armThreadWatchStmt = scope.prepare(`
     INSERT INTO thread_watch (project_id, id, thread_slug, kind, target, state, created_at, expires_at, settled_at)
     VALUES (@project_id, @id, @slug, @kind, @target, 'armed', @createdAtMs, @expiresAtMs, NULL)
@@ -19524,6 +19571,7 @@ function createStorage(source, projectId) {
     delThreadTimers.run(existing.slug);
     delPrWatches.run(existing.slug);
     delThreadWatches.run(existing.slug);
+    delThreadLinks.run(existing.slug);
     delThreadQuestions.run(existing.slug);
     delThreadDone.run(existing.slug);
     delSubAgentSteers.run(existing.slug);
@@ -19975,6 +20023,10 @@ function createStorage(source, projectId) {
     dropPrWatch: (slug, id, settledAtMs) => dropPrWatchStmt.run(settledAtMs, id, slug).changes === 1,
     settlePrWatch: (id, settledAtMs) => settlePrWatchStmt.run(settledAtMs, id).changes === 1,
     setPrWatchCursor: (id, cursor) => prWatchCursorStmt.run(cursor, id).changes === 1,
+    upsertThreadLink: (link) => upsertThreadLinkStmt.get(link),
+    listThreadLinks: (slug) => threadLinksBySlugStmt.all(slug),
+    threadLinksBySlug: () => groupBySlug(threadLinksStmt.all()),
+    dropThreadLink: (slug, id) => dropThreadLinkStmt.run(slug, id).changes === 1,
     // IDEMPOTENT BY (thread, kind, target), which is what the partial unique index enforces. A worker
     // woken by an expiry re-registers the same wait, and a worker that simply calls twice must not end
     // up with two rows to drop — so an existing armed row is RETURNED rather than replaced. Replacing
@@ -20436,6 +20488,17 @@ var init_storage = __esm({
       ON pr_watch(project_id, state);
     CREATE INDEX IF NOT EXISTS pr_watch_slug
       ON pr_watch(project_id, thread_slug, state, created_at);
+    -- Saved destinations have no liveness or expiry. The label is a stable slot within one thread.
+    CREATE TABLE IF NOT EXISTS thread_link (
+      id          TEXT PRIMARY KEY,
+      project_id  TEXT NOT NULL,
+      thread_slug TEXT NOT NULL,
+      kind        TEXT NOT NULL CHECK (kind IN ('link', 'file')),
+      label       TEXT NOT NULL,
+      target      TEXT NOT NULL,
+      created_at  INTEGER NOT NULL,
+      UNIQUE (project_id, thread_slug, label)
+    );
     -- A worker's registered WATCHES on its own running work (2026-08-26). See
     -- plans/rest-by-registration.md: a wait stops being a line the worker re-writes at every rest and
     -- becomes a row it creates once, which the human sees in the queue and which wakes the thread itself.
@@ -20549,7 +20612,8 @@ var init_storage = __esm({
       "thread_watch",
       "thread_question",
       "thread_done",
-      "subagent_steer"
+      "subagent_steer",
+      "thread_link"
     ];
   }
 });
@@ -20694,6 +20758,9 @@ var init_settings = __esm({
       // "auto" = the CLI's own tier (1h on a subscription). See the schema and claudePromptCacheEnv for
       // when "5m" is the cheaper choice.
       promptCacheTtl: "auto",
+      // Unset = codex's own window for the model (272K on GPT-5.6). The schema and codexContextWindowConfig
+      // explain the 872K ceiling a larger value is clamped to.
+      codexContextWindow: void 0,
       // Hidden until asked for — see the schema for why.
       projectRail: false
     });
@@ -21350,7 +21417,23 @@ function toCodexModel(raw2) {
   const def = typeof m.default_reasoning_level === "string" ? m.default_reasoning_level : "";
   const defaultEffort = def && efforts.includes(def) ? def : efforts[0];
   const priority = typeof m.priority === "number" && Number.isFinite(m.priority) ? m.priority : Number.MAX_SAFE_INTEGER;
-  return { model: { slug, displayName, defaultEffort, efforts }, priority };
+  const window = (key) => {
+    const v = m[key];
+    return typeof v === "number" && Number.isInteger(v) && v > 0 ? v : void 0;
+  };
+  const contextWindow = window("context_window");
+  const maxContextWindow = window("max_context_window");
+  return {
+    model: {
+      slug,
+      displayName,
+      defaultEffort,
+      efforts,
+      ...contextWindow === void 0 ? {} : { contextWindow },
+      ...maxContextWindow === void 0 ? {} : { maxContextWindow }
+    },
+    priority
+  };
 }
 function parseCodexModelsCache(raw2) {
   let doc;
@@ -22260,6 +22343,7 @@ function forkBroker(options) {
   const socketPath = claudeBrokerSocketPath(options.stateDir, options.sessionId);
   const recordPath2 = claudeBrokerRecordPath(options.stateDir, options.sessionId);
   mkdirSync9(dirname8(recordPath2), { recursive: true });
+  const generation = randomUUID8();
   const config = {
     socketPath,
     cwd: options.cwd,
@@ -22268,7 +22352,7 @@ function forkBroker(options) {
     permissionMode: options.permissionMode,
     env: options.env,
     recordPath: recordPath2,
-    generation: randomUUID8(),
+    generation,
     // The daemon writes its own death forensics here. Same dir as the record, so a session's socket,
     // record and diagnostics stay together and a project teardown removes all three.
     diagnosticLogPath: claudeBrokerDiagnosticLogPath(options.stateDir, options.sessionId),
@@ -22290,14 +22374,45 @@ function forkBroker(options) {
   });
   child.unref();
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
+  const recordedCause = () => readClaudeBrokerExit(options.stateDir, options.sessionId, generation);
   return new Promise((resolve12, reject) => {
+    let settled = false;
+    let timer;
+    const settle = (outcome) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      outcome();
+    };
     const poll = () => {
       const record = readBrokerRecord(recordPath2);
-      if (record && pidAlive(record.daemonPid)) return resolve12(record);
-      if (Date.now() > deadline) return reject(new Error(`Claude broker for session ${options.sessionId} did not become ready`));
-      setTimeout(poll, 50);
+      if (record && pidAlive(record.daemonPid)) return settle(() => resolve12(record));
+      if (Date.now() > deadline) {
+        const exit = recordedCause();
+        return settle(() => reject(new Error(
+          `Claude broker for session ${options.sessionId} did not become ready${exit ? `: ${describeClaudeBrokerExit(exit)}` : ""}`
+        )));
+      }
+      timer = setTimeout(poll, 50);
     };
-    child.once("error", reject);
+    child.once("error", (error) => settle(() => reject(error)));
+    child.once("exit", (code, signal) => {
+      if (settled) return;
+      const how = signal ? `signal ${signal}` : `exit code ${code ?? "unknown"}`;
+      const until = Date.now() + 500;
+      const read = () => {
+        if (settled) return;
+        const exit = recordedCause();
+        if (!exit && Date.now() < until) {
+          setTimeout(read, 25);
+          return;
+        }
+        settle(() => reject(new Error(
+          `Claude broker for session ${options.sessionId} exited before it became ready (${how}): ${describeClaudeBrokerExit(exit)}`
+        )));
+      };
+      read();
+    });
     poll();
   });
 }
@@ -25979,14 +26094,15 @@ function parseToolArguments(args) {
 }
 function imageField(output) {
   if (!Array.isArray(output)) return {};
+  const images = [];
   for (const part of output) {
     if (!part || typeof part !== "object") continue;
     const p = part;
     if (p.type !== "input_image" && p.type !== "output_image" && p.type !== "image") continue;
     const url = typeof p.image_url === "string" ? p.image_url : typeof p.url === "string" ? p.url : void 0;
-    if (url?.startsWith("data:image/")) return { image: url };
+    if (url?.startsWith("data:image/")) images.push(url);
   }
-  return {};
+  return images.length ? { image: images[0], images } : {};
 }
 function codexItemText(content) {
   if (!Array.isArray(content)) return "";
@@ -29996,6 +30112,11 @@ function claudeCompactionEnv(settings) {
   if (window === void 0 || !Number.isInteger(window) || window <= 0) return {};
   return { [CLAUDE_AUTO_COMPACT_WINDOW_ENV]: String(window) };
 }
+function codexContextWindowConfig(settings) {
+  const window = settings?.codexContextWindow;
+  if (window === void 0 || !Number.isInteger(window) || window <= 0) return {};
+  return { [CODEX_CONTEXT_WINDOW_KEY]: window };
+}
 function claudePromptCacheEnv(settings) {
   const ttl = settings?.promptCacheTtl;
   if (ttl !== "5m" && ttl !== "1h") return {};
@@ -30007,7 +30128,7 @@ function claudeCompactionWindowOf(env) {
   const window = Number(raw2);
   return Number.isInteger(window) && window > 0 ? window : void 0;
 }
-var FRIZZ_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, CLAUDE_AUTO_COMPACT_WINDOW_ENV, CLAUDE_PROMPT_CACHE_TTL_ENV, CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV, WORKER_DISALLOWED_TOOLS;
+var FRIZZ_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, CLAUDE_AUTO_COMPACT_WINDOW_ENV, CODEX_CONTEXT_WINDOW_KEY, CLAUDE_PROMPT_CACHE_TTL_ENV, CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV, WORKER_DISALLOWED_TOOLS;
 var init_types2 = __esm({
   "packages/server/src/backend/types.ts"() {
     "use strict";
@@ -30025,6 +30146,7 @@ var init_types2 = __esm({
       BASH_MAX_TIMEOUT_MS: String(24 * 60 * 60 * 1e3)
     };
     CLAUDE_AUTO_COMPACT_WINDOW_ENV = "CLAUDE_CODE_AUTO_COMPACT_WINDOW";
+    CODEX_CONTEXT_WINDOW_KEY = "model_context_window";
     CLAUDE_PROMPT_CACHE_TTL_ENV = "CLAUDE_CODE_PROMPT_CACHE_TTL";
     CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV = "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL";
     WORKER_DISALLOWED_TOOLS = ["AskUserQuestion"];
@@ -31957,6 +32079,7 @@ var init_codex_app_server = __esm({
     init_auth_status();
     init_codex_mcp();
     init_codex_error();
+    init_types2();
     init_logging();
     CODEX_APP_SERVER_PROVIDER = "codex-app-server";
     CODEX_NATIVE_LISTEN_FLAG = "FRIZZ_CODEX_NATIVE_LISTEN";
@@ -33624,19 +33747,29 @@ var init_codex_app_server = __esm({
        */
       /**
        * The `config` bag for one thread's `thread/start` / `thread/resume`: frizz's MCP server mounted
-       * PER THREAD so it knows who is calling, plus whatever the caller passed.
+       * PER THREAD so it knows who is calling, the operator's Codex context window from Settings, plus
+       * whatever the caller passed.
        *
        * This is the only channel that can carry a caller identity on codex. The argv mount on the
        * app-server is process-wide and serves every thread in the project, so `FRIZZ_THREAD_SLUG` was
        * simply absent and every tool that acts on the caller's own thread failed at the moment of use —
        * see `codexThreadMcpConfig` for the list and the measurement. Returns `{}` when there is nothing
-       * to send, so a caller with no config and no resolved MCP descriptor sends no `config` key at all,
-       * exactly as before.
+       * to send, so a caller with no config, no resolved MCP descriptor and no context-window setting
+       * sends no `config` key at all, exactly as before.
+       *
+       * The context window rides the same bag rather than the process-wide argv because the app-server is
+       * a long-lived daemon: an argv value would be frozen at its first spawn, while a per-thread override
+       * reads Settings at every start and every cold resume — the same "next thread, and a thread that
+       * comes back" semantics the Claude compaction window has (see codexContextWindowConfig).
        *
        * The caller's own config wins on a key collision: this is a default, not an override.
        */
       threadConfig(threadSlug, callerConfig) {
-        const config = { ...codexThreadMcpConfig(this.options.frizzMcp, threadSlug), ...callerConfig };
+        const config = {
+          ...codexThreadMcpConfig(this.options.frizzMcp, threadSlug),
+          ...codexContextWindowConfig(this.options.getSettings?.()),
+          ...callerConfig
+        };
         return Object.keys(config).length ? { config } : {};
       }
       resumeSandboxOverride(row) {
@@ -34681,22 +34814,140 @@ var init_quota = __esm({
   }
 });
 
+// packages/server/src/local-file.ts
+import { spawn as spawn5 } from "node:child_process";
+import { readFileSync as readFileSync17, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { isAbsolute as isAbsolute4, join as join25, resolve as resolve5, sep as sep2 } from "node:path";
+function isUnder(real, root) {
+  let rootReal;
+  try {
+    rootReal = realpathSync6(root);
+  } catch {
+    return false;
+  }
+  return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
+}
+function resolveLocalFile(rawPath, roots) {
+  if (!isAbsolute4(rawPath)) throw new Error("Local path must be absolute");
+  let real;
+  try {
+    real = realpathSync6(rawPath);
+  } catch {
+    throw new Error("Local file was not found");
+  }
+  if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
+  try {
+    if (!statSync12(real).isFile()) throw new Error("Local path is not a regular file");
+  } catch (error) {
+    if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
+    throw new Error("Local file was not found");
+  }
+  return real;
+}
+function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
+  const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
+  if (!trimmed) return null;
+  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join25(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve5(projectDir, trimmed);
+  try {
+    return resolveLocalFile(abs, roots);
+  } catch {
+    return null;
+  }
+}
+function readLocalTextFile(rawPath, roots) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  const bytes = readFileSync17(path3);
+  if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
+  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
+  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
+  const lastBreak = head.lastIndexOf(10);
+  return { path: path3, text: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
+}
+function readLocalMarkdown(rawPath, roots) {
+  if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
+  const path3 = resolveLocalFile(rawPath, roots);
+  if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
+  const bytes = readFileSync17(path3);
+  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
+  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
+  const lastBreak = head.lastIndexOf(10);
+  return { path: path3, markdown: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
+}
+function resolveWatchableLocalFile(rawPath, roots) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  if (MARKDOWN_FILE_EXT.test(rawPath.trim()) && !MARKDOWN_FILE_EXT.test(path3)) {
+    throw new Error("Local file is not a Markdown file");
+  }
+  return path3;
+}
+function defaultSpawn(command, args, options) {
+  return spawn5(command, [...args], options);
+}
+function openLocalFile(rawPath, opener, roots, options = {}) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  const selected = options.forceSystem ? "system" : opener;
+  if (selected === "copy") return { action: "copy", path: path3 };
+  const spec = process.platform === "darwin" ? selected === "cursor" ? ["open", ["-a", "Cursor", path3]] : selected === "vscode" ? ["open", ["-a", "Visual Studio Code", path3]] : selected === "finder" ? ["open", ["-R", path3]] : ["open", [path3]] : selected === "finder" ? ["xdg-open", [path3]] : selected === "cursor" ? ["cursor", [path3]] : selected === "vscode" ? ["code", [path3]] : ["xdg-open", [path3]];
+  (options.spawn ?? defaultSpawn)(spec[0], spec[1], { detached: true, stdio: "ignore", shell: false }).unref();
+  return { action: "opened", path: path3 };
+}
+var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT;
+var init_local_file = __esm({
+  "packages/server/src/local-file.ts"() {
+    "use strict";
+    MARKDOWN_FILE_EXT = /\.(?:md|mdx|markdown)$/i;
+    MARKDOWN_READ_LIMIT = 1024 * 1024;
+  }
+});
+
+// packages/server/src/thread-links.ts
+import { isAbsolute as isAbsolute5 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+function threadLinkView(row) {
+  return { id: row.id, kind: row.kind, label: row.label, target: row.target };
+}
+function resolveThreadLink(target, projectDir, roots) {
+  if (/^https?:\/\//i.test(target)) {
+    const url = new URL(target);
+    if (url.username || url.password) throw new Error("Link URLs must not contain credentials");
+    return { kind: "link", target: url.href };
+  }
+  let path3 = target;
+  if (/^file:/i.test(target)) {
+    const url = new URL(target);
+    if (url.search || url.hash) throw new Error("File links must not contain a query or fragment");
+    path3 = fileURLToPath2(url);
+  } else if (!isAbsolute5(target) && /^[a-z][a-z\d+.-]*:/i.test(target)) {
+    throw new Error("Register an HTTP(S) URL or a local file");
+  }
+  const resolved = resolveOpenableFile(path3, projectDir, roots);
+  if (!resolved) throw new Error("Local file was not found or is outside Frizz's trusted roots");
+  return { kind: "file", target: resolved };
+}
+var init_thread_links = __esm({
+  "packages/server/src/thread-links.ts"() {
+    "use strict";
+    init_local_file();
+  }
+});
+
 // packages/server/src/frizz.ts
 import { execFile as execFile5 } from "node:child_process";
-import { lstatSync as lstatSync2, realpathSync as realpathSync6 } from "node:fs";
-import { basename as basename5, dirname as dirname9, join as join25, resolve as resolve5 } from "node:path";
+import { lstatSync as lstatSync2, realpathSync as realpathSync7 } from "node:fs";
+import { basename as basename5, dirname as dirname9, join as join26, resolve as resolve6 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
-  return resolve5(import.meta.dirname, "..", "..", "..", "board");
+  return resolve6(import.meta.dirname, "..", "..", "..", "board");
 }
 function directFrizzRoot(projectDir) {
   try {
-    const projectRoot = realpathSync6(projectDir);
-    const path3 = join25(projectRoot, ".frizz");
+    const projectRoot = realpathSync7(projectDir);
+    const path3 = join26(projectRoot, ".frizz");
     const stat2 = lstatSync2(path3);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
-    const real = realpathSync6(path3);
+    const real = realpathSync7(path3);
     return dirname9(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
   } catch {
     return null;
@@ -34707,7 +34958,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join25(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join26(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -34732,7 +34983,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join25(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join26(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -34817,12 +35068,12 @@ var init_awaiting = __esm({
 });
 
 // packages/server/src/backend/project-mcp-servers.ts
-import { readFileSync as readFileSync17 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join26 } from "node:path";
+import { readFileSync as readFileSync18 } from "node:fs";
+import { homedir as homedir12 } from "node:os";
+import { join as join27 } from "node:path";
 function readJsonObject(path3) {
   try {
-    const parsed = JSON.parse(readFileSync17(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync18(path3, "utf8"));
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -34913,17 +35164,17 @@ function userScopeRemoteServers(account, cwd, env) {
 }
 function projectMcpServers(cwd, options = {}) {
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir11();
+  const home = options.home ?? homedir12();
   const configOverride = options.claudeConfigDir ?? (env.CLAUDE_CONFIG_DIR?.trim() ? env.CLAUDE_CONFIG_DIR.trim() : void 0);
-  const accountFile = configOverride ? join26(configOverride, ".claude.json") : join26(home, ".claude.json");
-  const userSettingsFile = join26(configOverride ?? join26(home, ".claude"), "settings.json");
+  const accountFile = configOverride ? join27(configOverride, ".claude.json") : join27(home, ".claude.json");
+  const userSettingsFile = join27(configOverride ?? join27(home, ".claude"), "settings.json");
   const account = readJsonObject(accountFile);
   const out = userScopeRemoteServers(account, cwd, env);
-  const declared = objectField(readJsonObject(join26(cwd, ".mcp.json")), "mcpServers");
+  const declared = objectField(readJsonObject(join27(cwd, ".mcp.json")), "mcpServers");
   if (!declared) return out;
   const approval = collectApproval([
-    readJsonObject(join26(cwd, ".claude", "settings.json")),
-    readJsonObject(join26(cwd, ".claude", "settings.local.json")),
+    readJsonObject(join27(cwd, ".claude", "settings.json")),
+    readJsonObject(join27(cwd, ".claude", "settings.local.json")),
     readJsonObject(userSettingsFile),
     objectField(objectField(account, "projects"), cwd)
   ]);
@@ -34948,16 +35199,16 @@ var init_project_mcp_servers = __esm({
 
 // packages/server/src/worker-plugin-dir.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { dirname as dirname10, join as join27 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { dirname as dirname10, join as join28 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync8(join27(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync8(join28(override, ".claude-plugin", "plugin.json")))
     return override;
-  let current = dirname10(fileURLToPath2(moduleUrl));
+  let current = dirname10(fileURLToPath3(moduleUrl));
   for (; ; ) {
-    const candidate = join27(current, "cc-worker");
-    if (existsSync8(join27(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const candidate = join28(current, "cc-worker");
+    if (existsSync8(join28(candidate, ".claude-plugin", "plugin.json"))) return candidate;
     const parent = dirname10(current);
     if (parent === current) return void 0;
     current = parent;
@@ -34985,6 +35236,7 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
     lean ? null : THREAD_EXECUTION[kind],
     AGENT_COMPLETION,
     VISUAL_EVIDENCE,
+    REGISTERED_LINKS,
     QUALITY_BAR,
     TOKEN_ECONOMY,
     QUESTIONS,
@@ -34996,7 +35248,7 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
   out = out.replaceAll("{{FRIZZ_MONITORS_DIR}}", opts.monitorsDir?.trim() || MONITORS_DIR_FALLBACK);
   return out;
 }
-var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, QUALITY_BAR, TOKEN_ECONOMY, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, THREAD_NAME, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
+var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, REGISTERED_LINKS, QUALITY_BAR, TOKEN_ECONOMY, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, THREAD_NAME, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
 var init_workerPrompt = __esm({
   "packages/server/src/workerPrompt.ts"() {
     "use strict";
@@ -35288,6 +35540,12 @@ image paths through its guarded local-image proxy; only eligible workspace or ex
 image files can embed, and a path outside that safe boundary stays non-navigable. Do not bulk-embed
 irrelevant screenshots. Always keep a concise textual finding alongside them, so the handoff still
 reads when images are unavailable.`;
+    REGISTERED_LINKS = `## Saved links and files
+
+Use \`mcp__frizz__link\` with \`label\` and \`target\` for a dev server, working document, report or download
+the human should keep at hand. It stays underneath the prompt. Reuse the label to update its destination;
+read registrations with \`activity\` and remove one with \`unlink\`. Register existing files, using an
+absolute path outside the project root. A saved reference is not a running process or a completion gate.`;
     QUALITY_BAR = `## Quality bar
 
 - Verify behavior end-to-end before calling anything done. A green suite over a stubbed implementation
@@ -36112,12 +36370,12 @@ var init_claude_broker_client = __esm({
 });
 
 // packages/server/src/backend/claude-permission-interactions.ts
-import { homedir as homedir12 } from "node:os";
+import { homedir as homedir13 } from "node:os";
 function clip(text2, max) {
   return text2.length > max ? `${text2.slice(0, max - 1)}\u2026` : text2;
 }
 function tildePath(path3) {
-  const home = homedir12();
+  const home = homedir13();
   if (!path3.startsWith(home)) return path3;
   const rest = path3.slice(home.length);
   return rest === "" ? "~" : rest.startsWith("/") ? `~${rest}` : path3;
@@ -36767,8 +37025,8 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync12, constants, existsSync as existsSync9, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync18, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
-import { basename as basename6, join as join28, dirname as dirname11 } from "node:path";
+import { closeSync as closeSync12, constants, existsSync as existsSync9, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync19, realpathSync as realpathSync8, statSync as statSync13, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
+import { basename as basename6, join as join29, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -36787,7 +37045,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync9(join28(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync9(join29(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -36803,16 +37061,16 @@ function resolveLegacyThreadFile(projectDir, value) {
   const parsed = ThreadSlug.safeParse(value);
   if (!parsed.success) return null;
   try {
-    const projectRoot = realpathSync7(projectDir);
-    const frizzPath = join28(projectRoot, ".frizz");
+    const projectRoot = realpathSync8(projectDir);
+    const frizzPath = join29(projectRoot, ".frizz");
     const frizzStat = lstatSync3(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
-    const realFrizz = realpathSync7(frizzPath);
+    const realFrizz = realpathSync8(frizzPath);
     if (dirname11(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path3 = join28(realFrizz, `${parsed.data}.md`);
+    const path3 = join29(realFrizz, `${parsed.data}.md`);
     const before = lstatSync3(path3);
     if (!before.isFile() || before.isSymbolicLink()) return null;
-    const realPath = realpathSync7(path3);
+    const realPath = realpathSync8(path3);
     if (dirname11(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
     let contents;
     let openedBefore;
@@ -36820,7 +37078,7 @@ function resolveLegacyThreadFile(projectDir, value) {
     const fd = openSync13(path3, constants.O_RDONLY | constants.O_NOFOLLOW);
     try {
       openedBefore = fstatSync2(fd);
-      contents = readFileSync18(fd);
+      contents = readFileSync19(fd);
       openedAfter = fstatSync2(fd);
     } finally {
       closeSync12(fd);
@@ -36853,7 +37111,7 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path3 = join28(parent, name);
+  const path3 = join29(parent, name);
   try {
     mkdirSync13(path3);
   } catch (error) {
@@ -36862,7 +37120,7 @@ function ensureSafeDirectDirectory(parent, name) {
   }
   const stat2 = lstatSync3(path3);
   if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw new Error("unsafe project directory");
-  const real = realpathSync7(path3);
+  const real = realpathSync8(path3);
   if (dirname11(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
   return real;
 }
@@ -36871,7 +37129,7 @@ function scratchDirRelPath(sessionId) {
 }
 function writeScratchDir(projectDir, sessionId) {
   if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/.test(sessionId)) throw new Error("invalid session id");
-  const projectRoot = realpathSync7(projectDir);
+  const projectRoot = realpathSync8(projectDir);
   const frizzDir = ensureSafeDirectDirectory(projectRoot, ".frizz");
   const threadsDir = ensureSafeDirectDirectory(frizzDir, "threads");
   ensureSafeDirectDirectory(threadsDir, sessionId);
@@ -36883,8 +37141,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join28(plugin, "skills", "gh", "scripts");
-  return existsSync9(join28(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join29(plugin, "skills", "gh", "scripts");
+  return existsSync9(join29(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -36896,7 +37154,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join28(dirname11(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join29(dirname11(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -36922,7 +37180,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join28(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join29(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -36938,12 +37196,12 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work (${children2}). Nothing in this directory is read automatically; if you want a note back after a compaction, mcp__frizz__goal with post_compaction: true re-sends a prompt of your choosing.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path3 = join28(projectDir, "FRIZZ.md");
+  const path3 = join29(projectDir, "FRIZZ.md");
   let body;
   try {
-    const st = statSync12(path3);
+    const st = statSync13(path3);
     if (!st.isFile() || st.size > FRIZZ_MD_MAX_BYTES) return "";
-    body = readFileSync18(path3, "utf8").trim();
+    body = readFileSync19(path3, "utf8").trim();
   } catch {
     return "";
   }
@@ -36982,7 +37240,7 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join28(pluginDir, "bin", FRIZZ_MCP.script);
+  const scriptPath = join29(pluginDir, "bin", FRIZZ_MCP.script);
   if (!existsSync9(scriptPath)) return void 0;
   return {
     scriptPath,
@@ -37065,7 +37323,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join28(deps.project.dir, ".frizz");
+  const frizzDir = join29(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path3 of new Set(built.prewrite.map((file) => file.path))) {
@@ -37078,7 +37336,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync9(join28(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync9(join29(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -37516,11 +37774,11 @@ var init_dispatch = __esm({
 
 // packages/server/src/board.ts
 import {
-  realpathSync as realpathSync8,
+  realpathSync as realpathSync9,
   watch as fsWatch
 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname12, join as join29 } from "node:path";
+import { homedir as homedir14 } from "node:os";
+import { dirname as dirname12, join as join30 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -37903,6 +38161,7 @@ function registeredDoneFence(done, lastUserAt) {
 }
 function readThreadRegistries(storage) {
   return {
+    links: storage.threadLinksBySlug(),
     prWatches: storage.armedPrWatchesBySlug(),
     timers: storage.armedThreadTimersBySlug(),
     questions: storage.threadQuestionsBySlug(),
@@ -38010,6 +38269,7 @@ function sessionThreadView(projectDir, storage, row, rawTele, registeredLegacyTe
     lastAssistantAt: tele?.lastAssistantAt,
     subAgents: stampStoppable(tele?.subAgents ?? [], row),
     bgShells: stampStoppableShells(tele?.bgShells ?? [], row),
+    links: (registries.links.get(row.slug) ?? []).map(threadLinkView),
     // ONE SOURCE: the FENCE. Both kinds are derived from what the worker wrote — `prs:` entries
     // become the github rows, `watch:` lines the shell rows — so this strip lists exactly what will
     // actually wake the thread, and the two cannot drift into claiming different things. There is no
@@ -38257,7 +38517,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
       ...project.githubRepo ? { githubRepo: project.githubRepo } : {},
       projectSlug: findByPath(project.dir)?.slug,
       // So the client can expand a `~` a worker wrote in prose (see BoardSnapshot.homeDir).
-      homeDir: homedir13()
+      homeDir: homedir14()
     };
     const sessionThreads = buildSessionThreads(assembledAtMs);
     armSnoozeWake(sessionThreads, assembledAtMs);
@@ -38358,10 +38618,10 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const dir = join29(project.dir, ".frizz");
+      const dir = join30(project.dir, ".frizz");
       const roots = /* @__PURE__ */ new Set([dir]);
       try {
-        roots.add(realpathSync8(dir));
+        roots.add(realpathSync9(dir));
       } catch {
       }
       const next = await subscribe(
@@ -38373,7 +38633,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
           }
           if (events.some((event) => isBoardRelevantFrizzPath(roots, event.path))) scheduleRebuild();
         },
-        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join29(dir, name)) }
+        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join30(dir, name)) }
       );
       if (stopped) {
         await next.unsubscribe();
@@ -38455,6 +38715,7 @@ var init_board = __esm({
     "use strict";
     init_src();
     init_storage();
+    init_thread_links();
     init_thread_profiles();
     init_frizz();
     init_awaiting();
@@ -41050,7 +41311,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -41141,7 +41402,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join30(opts.logDir, `${sessionId}.jsonl`);
+      return join31(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -41311,13 +41572,13 @@ var init_login_utility = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
-import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync13 } from "node:fs";
-import { join as join31 } from "node:path";
+import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync14 } from "node:fs";
+import { join as join32 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join31(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join32(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join31(stateDir, "codex-app-server");
+  const dir = join32(stateDir, "codex-app-server");
   const path3 = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
@@ -41328,7 +41589,7 @@ function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__
         ensured = true;
       }
       try {
-        if (statSync13(path3).size > MAX_BYTES2) renameSync8(path3, `${path3}.1`);
+        if (statSync14(path3).size > MAX_BYTES2) renameSync8(path3, `${path3}.1`);
       } catch {
       }
       appendFileSync3(path3, `${JSON.stringify({ at: now().toISOString(), ...event })}
@@ -41349,7 +41610,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile8 } from "node:child_process";
 import { readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -41366,7 +41627,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join32(options.dir, name)).filter((path3) => !keep.has(path3));
+    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join33(options.dir, name)).filter((path3) => !keep.has(path3));
   } catch {
     return;
   }
@@ -41416,7 +41677,7 @@ var init_stale_socket_sweep = __esm({
 
 // packages/server/src/orphan-reaper.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { readFileSync as readFileSync19 } from "node:fs";
+import { readFileSync as readFileSync20 } from "node:fs";
 import { dirname as dirname13 } from "node:path";
 function firstTokenBasename(command) {
   const first = command.trimStart().split(/\s+/, 1)[0] ?? "";
@@ -41683,7 +41944,7 @@ var init_orphan_reaper = __esm({
     defaultExec = (file, args) => execFileSync4(file, args, { encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 1e4 });
     defaultReadEnv = (pid) => {
       try {
-        return readFileSync19(`/proc/${pid}/environ`, "utf8");
+        return readFileSync20(`/proc/${pid}/environ`, "utf8");
       } catch {
         return null;
       }
@@ -41830,9 +42091,9 @@ var init_thread_hibernation = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
-import { homedir as homedir14 } from "node:os";
+import { homedir as homedir15 } from "node:os";
 function reconcileSessions(storage) {
   for (const row of storage.allSessions()) {
     if (isHeadlessRow(row)) continue;
@@ -41978,9 +42239,9 @@ async function createContext(opts = {}) {
   }
 }
 function createContextUnchecked(opts, resources) {
-  const home = opts.home ?? homedir14();
+  const home = opts.home ?? homedir15();
   const project = opts.project ?? resolveProject();
-  const storage = createStorage(opts.database ?? join33(project.stateDir, "ui.db"), project.id);
+  const storage = createStorage(opts.database ?? join34(project.stateDir, "ui.db"), project.id);
   resources.storage = storage;
   const bus = new Bus();
   const transcriptChange = new Emitter();
@@ -42090,7 +42351,10 @@ function createContextUnchecked(opts, resources) {
       const mode = PermissionMode.safeParse(row.permission_mode);
       if (!mode.success) return void 0;
       return codexSandbox(mode.data);
-    }
+    },
+    // Read at every thread/start and cold resume, so the Codex context window the operator picks in
+    // Settings reaches the next thread without an app-server restart.
+    getSettings: () => getSettings(storage, home)
   }) : void 0;
   resources.codexAppServer = codexAppServer;
   if (codexAppServer) {
@@ -45035,8 +45299,8 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync11, readFileSync as readFileSync20, writeFileSync as writeFileSync11 } from "node:fs";
-import { basename as basename7, dirname as dirname14, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync11, readFileSync as readFileSync21, writeFileSync as writeFileSync11 } from "node:fs";
+import { basename as basename7, dirname as dirname14, resolve as resolve8 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
   return `"${v.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -45046,12 +45310,12 @@ function deriveTitle(body, slug) {
   return m ? m[1].trim() : slug;
 }
 function repairThreadFile(frizzDir, file) {
-  const root = resolve7(frizzDir);
-  const abs = resolve7(root, file);
+  const root = resolve8(frizzDir);
+  const abs = resolve8(root, file);
   if (dirname14(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
   if (!existsSync11(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
-  const content = readFileSync20(abs, "utf8");
+  const content = readFileSync21(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
     throw new RepairError(`${basename7(abs)} already opens with a "---" block \u2014 repair only heals a MISSING frontmatter block`);
@@ -45242,7 +45506,7 @@ var init_repo_files = __esm({
 });
 
 // cc-worker/hooks/bash-background.mjs
-import { readFileSync as readFileSync21 } from "node:fs";
+import { readFileSync as readFileSync22 } from "node:fs";
 import { basename as basename8 } from "node:path";
 import { pathToFileURL } from "node:url";
 function emit(obj) {
@@ -45391,7 +45655,7 @@ var init_bash_background = __esm({
     if (isDirectHookExecution(process.argv[1], import.meta.url)) {
       try {
         const env = process.argv.includes("--frizz-thread") ? { ...process.env, FRIZZ_THREAD: process.env.FRIZZ_THREAD || "codex-worker" } : process.env;
-        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync21(0, "utf8")), env));
+        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync22(0, "utf8")), env));
       } catch {
         emit({});
       }
@@ -45400,11 +45664,11 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync13, existsSync as existsSync12, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync22, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { closeSync as closeSync13, existsSync as existsSync12, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync23, readSync as readSync7, renameSync as renameSync9, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
-import { join as join34 } from "node:path";
-import { homedir as homedir15 } from "node:os";
+import { join as join35 } from "node:path";
+import { homedir as homedir16 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
   if (n >= 1e3) return `${Math.round(n / 1e3)}k`;
@@ -45983,14 +46247,14 @@ function pruneScreenshotCache() {
     if (entries2.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries2.map((n) => {
       try {
-        return { n, m: statSync14(join34(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync15(join35(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync5(join34(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync5(join35(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -46020,14 +46284,14 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path3 = join34(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path3 = join35(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
     if (existsSync12(path3)) return path3;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join35(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, path3);
     pruneScreenshotCache();
@@ -46042,14 +46306,14 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join34(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    const dest = join35(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
     if (existsSync12(dest)) return dest;
-    const size = statSync14(srcPath).size;
+    const size = statSync15(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
-    const buf = readFileSync22(srcPath);
+    const buf = readFileSync23(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join35(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, dest);
     pruneScreenshotCache();
@@ -46487,7 +46751,7 @@ function readTranscript(project, sessionId) {
 }
 function verifyIncrementalParse(path3, identityPrefix, incremental) {
   try {
-    const fresh = parseTranscript(readFileSync22(path3, "utf8"), identityPrefix);
+    const fresh = parseTranscript(readFileSync23(path3, "utf8"), identityPrefix);
     const a = JSON.stringify(incremental);
     const b = JSON.stringify(fresh);
     if (a !== b) {
@@ -46507,16 +46771,16 @@ function verifyIncrementalParse(path3, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join34(homedir15(), ".claude", "projects", project.cwdSlug);
+  return join35(homedir16(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path3 = join34(logDirOf(project), `${sessionId}.jsonl`);
+  const path3 = join35(logDirOf(project), `${sessionId}.jsonl`);
   try {
-    if (statSync14(path3).size > 0) return path3;
+    if (statSync15(path3).size > 0) return path3;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join34(stranded, `${sessionId}.jsonl`) : path3;
+  return stranded ? join35(stranded, `${sessionId}.jsonl`) : path3;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -46581,8 +46845,9 @@ ${text2}` : text2;
         }
         case "tool-call": {
           const m = openAssistant(ev.at, sourceId);
-          const call = codexToolCall(ev.name, ev.input, ev.id);
-          call.status = "pending";
+          const split = codexToolCards(ev.name, ev.input, ev.id);
+          const call = split.owner;
+          for (const card of split.cards) card.status = "pending";
           if (pendingCaption) {
             if (!call.desc) call.desc = pendingCaption;
             pendingCaption = void 0;
@@ -46592,8 +46857,10 @@ ${text2}` : text2;
           const interruptedOwner = call.name === "Interrupt process" && call.sessionId !== void 0 ? shellSessions.get(runningKey("Poll process", call.sessionId)) : void 0;
           if (!owner) {
             if (isPoll) call.backgroundState = "unknown";
-            pushToolPart(m, call);
-            m.tools.push(call);
+            for (const card of split.cards) {
+              pushToolPart(m, card);
+              m.tools.push(card);
+            }
           }
           if (call.name === "Spawn agent" && call.detail) agentDispatches.set(call.detail, { call, at: ev.at });
           if (ev.id) pendingCalls.set(ev.id, {
@@ -46602,7 +46869,8 @@ ${text2}` : text2;
             owner,
             interruptedOwner,
             orphanPoll: isPoll && !owner,
-            explicitBackground: codexExplicitBackground(ev.name, ev.input)
+            explicitBackground: codexExplicitBackground(ev.name, ev.input),
+            ...split.cards.length > 1 ? { companions: split.cards.filter((card) => card !== call), views: split.views } : {}
           });
           break;
         }
@@ -46612,7 +46880,17 @@ ${text2}` : text2;
           pendingCalls.delete(ev.id);
           const result = codexToolResult(ev.text);
           if (result.durationMs === void 0) result.durationMs = elapsedBetween(pending.at, ev.at);
-          if (ev.image && result.status !== "failed" && result.status !== "cancelled") {
+          if (pending.companions) {
+            for (const card of pending.companions) card.status = result.status === "cancelled" ? "cancelled" : "completed";
+            if (result.status !== "cancelled") {
+              const inline = ev.images ?? (ev.image ? [ev.image] : []);
+              pending.views?.forEach((view, i) => {
+                if (view.outputImage || !inline[i]) return;
+                const shot = persistDataUrlImage(inline[i], `${ev.id}:view:${i}`);
+                if (shot) view.outputImage = shot;
+              });
+            }
+          } else if (ev.image && result.status !== "failed" && result.status !== "cancelled") {
             const shot = persistDataUrlImage(ev.image, ev.id);
             if (shot) (pending.owner ?? pending).call.outputImage = shot;
           }
@@ -46841,6 +47119,11 @@ function latestTranscriptWindow(messages) {
   }
   return [...earlierInstructions, ...messages.slice(start), ...pinned.slice(-MAX_PINNED_BACKGROUND_OPERATIONS)];
 }
+function codexToolCards(name, input, callId) {
+  if (name === "exec" && typeof input === "string") return codexExecWrapperCards(input, callId);
+  const owner = codexToolCall(name, input, callId);
+  return { owner, cards: [owner] };
+}
 function codexToolCall(name, input, callId) {
   if (name === "exec" && typeof input === "string") return codexExecWrapperCall(input, callId);
   const obj = input && typeof input === "object" && !Array.isArray(input) ? input : {};
@@ -46999,8 +47282,32 @@ function formatCompactDuration(ms) {
   if (minutes < 60) return `${minutes}m`;
   return minutes % 60 ? `${Math.floor(minutes / 60)}h ${minutes % 60}m` : `${Math.floor(minutes / 60)}h`;
 }
-function codexExecWrapperCall(source, callId) {
+function codexExecWrapperCards(source, callId) {
   const calls = wrappedInvocations(source);
+  const rest = [];
+  const views = [];
+  const order = [];
+  if (calls.length > 1) {
+    for (const call of calls) {
+      if (call.name !== "view_image") {
+        if (!rest.length) order.push("rest");
+        rest.push(call);
+        continue;
+      }
+      const view = viewImageCall(jsStringProperty(call.args, "path"), `${callId ?? source}:view:${views.length}`);
+      views.push(view);
+      order.push(view);
+    }
+  }
+  if (!views.length) {
+    const owner = codexExecWrapperCall(source, callId, calls);
+    return { owner, cards: [owner] };
+  }
+  const remainder = rest.length ? codexExecWrapperCall(source, callId, rest) : void 0;
+  const cards = order.map((entry) => entry === "rest" ? remainder : entry);
+  return { owner: remainder ?? views[0], cards, views };
+}
+function codexExecWrapperCall(source, callId, calls = wrappedInvocations(source)) {
   if (calls.length !== 1) {
     return {
       name: "Exec",
@@ -47008,7 +47315,9 @@ function codexExecWrapperCall(source, callId) {
       input: capToolInput(source.trim())
     };
   }
-  const call = calls[0];
+  return wrappedSingleCall(calls[0], source, callId);
+}
+function wrappedSingleCall(call, source, callId) {
   if (call.name === "exec_command") {
     const cmd = jsStringProperty(call.args, "cmd") ?? jsStringProperty(call.args, "command");
     const cwd = jsStringProperty(call.args, "workdir") ?? jsStringProperty(call.args, "cwd");
@@ -47384,7 +47693,7 @@ function unifiedToolResult(text2) {
   if (!header) return void 0;
   const wrapperStatus = header[1] === "failed" ? "failed" : header[1] === "terminated" ? "cancelled" : "completed";
   const wrapperDurationMs = Number(header[2]) * 1e3;
-  const body = raw2.slice(header[0].length).trim();
+  const body = raw2.slice(header[0].length).split("[image output]").join("").trim();
   if (!body || body === "{}") return { status: wrapperStatus, durationMs: wrapperDurationMs, terminal: true };
   try {
     const parsed = JSON.parse(body);
@@ -47764,7 +48073,7 @@ function readEarlierThreadTranscriptPage(project, storage, slug, cursor, backend
 }
 function readCodexTranscriptFile(absPath, nativeId = absPath) {
   try {
-    return parseCodexTranscript(readFileSync22(absPath, "utf8"), `codex:${nativeId}`);
+    return parseCodexTranscript(readFileSync23(absPath, "utf8"), `codex:${nativeId}`);
   } catch {
     return [];
   }
@@ -47862,7 +48171,7 @@ function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup) {
 function readTranscriptFile(absPath) {
   try {
     const pathKey = createHash13("sha256").update(absPath).digest("base64url").slice(0, 16);
-    return parseTranscript(readFileSync22(absPath, "utf8"), `claude-file:${pathKey}`);
+    return parseTranscript(readFileSync23(absPath, "utf8"), `claude-file:${pathKey}`);
   } catch {
     return [];
   }
@@ -47938,7 +48247,7 @@ var init_transcript = __esm({
 });
 
 // packages/server/src/open-external.ts
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 function validateExternalUrl(raw2) {
   let parsed;
   try {
@@ -47955,7 +48264,7 @@ function openExternalUrl(raw2) {
   const v = validateExternalUrl(raw2);
   if (!v.ok) throw new Error(v.reason);
   const [cmd, args] = process.platform === "darwin" ? ["open", [v.url]] : ["xdg-open", [v.url]];
-  spawn5(cmd, args, { detached: true, stdio: "ignore" }).unref();
+  spawn6(cmd, args, { detached: true, stdio: "ignore" }).unref();
 }
 var init_open_external = __esm({
   "packages/server/src/open-external.ts"() {
@@ -47963,93 +48272,6 @@ var init_open_external = __esm({
   }
 });
 
-// packages/server/src/local-file.ts
-import { spawn as spawn6 } from "node:child_process";
-import { readFileSync as readFileSync23, realpathSync as realpathSync9, statSync as statSync15 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
-import { isAbsolute as isAbsolute4, join as join35, resolve as resolve8, sep as sep2 } from "node:path";
-function isUnder(real, root) {
-  let rootReal;
-  try {
-    rootReal = realpathSync9(root);
-  } catch {
-    return false;
-  }
-  return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
-}
-function resolveLocalFile(rawPath, roots) {
-  if (!isAbsolute4(rawPath)) throw new Error("Local path must be absolute");
-  let real;
-  try {
-    real = realpathSync9(rawPath);
-  } catch {
-    throw new Error("Local file was not found");
-  }
-  if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
-  try {
-    if (!statSync15(real).isFile()) throw new Error("Local path is not a regular file");
-  } catch (error) {
-    if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
-    throw new Error("Local file was not found");
-  }
-  return real;
-}
-function resolveOpenableFile(raw2, projectDir, roots, home = homedir16()) {
-  const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
-  if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join35(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve8(projectDir, trimmed);
-  try {
-    return resolveLocalFile(abs, roots);
-  } catch {
-    return null;
-  }
-}
-function readLocalTextFile(rawPath, roots) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  const bytes = readFileSync23(path3);
-  if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
-  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
-  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
-  const lastBreak = head.lastIndexOf(10);
-  return { path: path3, text: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
-}
-function readLocalMarkdown(rawPath, roots) {
-  if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
-  const path3 = resolveLocalFile(rawPath, roots);
-  if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
-  const bytes = readFileSync23(path3);
-  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
-  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
-  const lastBreak = head.lastIndexOf(10);
-  return { path: path3, markdown: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
-}
-function resolveWatchableLocalFile(rawPath, roots) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  if (MARKDOWN_FILE_EXT.test(rawPath.trim()) && !MARKDOWN_FILE_EXT.test(path3)) {
-    throw new Error("Local file is not a Markdown file");
-  }
-  return path3;
-}
-function defaultSpawn(command, args, options) {
-  return spawn6(command, [...args], options);
-}
-function openLocalFile(rawPath, opener, roots, options = {}) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  const selected = options.forceSystem ? "system" : opener;
-  if (selected === "copy") return { action: "copy", path: path3 };
-  const spec = process.platform === "darwin" ? selected === "cursor" ? ["open", ["-a", "Cursor", path3]] : selected === "vscode" ? ["open", ["-a", "Visual Studio Code", path3]] : selected === "finder" ? ["open", ["-R", path3]] : ["open", [path3]] : selected === "finder" ? ["xdg-open", [path3]] : selected === "cursor" ? ["cursor", [path3]] : selected === "vscode" ? ["code", [path3]] : ["xdg-open", [path3]];
-  (options.spawn ?? defaultSpawn)(spec[0], spec[1], { detached: true, stdio: "ignore", shell: false }).unref();
-  return { action: "opened", path: path3 };
-}
-var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT;
-var init_local_file = __esm({
-  "packages/server/src/local-file.ts"() {
-    "use strict";
-    MARKDOWN_FILE_EXT = /\.(?:md|mdx|markdown)$/i;
-    MARKDOWN_READ_LIMIT = 1024 * 1024;
-  }
-});
-
 // packages/server/src/github-hovercard.ts
 function parseRef(ref) {
   const match2 = REF_PATTERN.exec(ref);
@@ -50164,7 +50386,7 @@ ${gapNote}` : input.message;
             since: new Date(w.created_at).toISOString()
           });
         }
-        return { activity, questions: openQuestionViews(input.slug) };
+        return { activity, questions: openQuestionViews(input.slug), links: ctx.storage.listThreadLinks(input.slug).map(threadLinkView) };
       }
     }),
     // THE WATCHER REGISTRY WAS DELETED ON 2026-08-14 AND CAME BACK ON 2026-08-26, under two narrow verbs
@@ -50178,6 +50400,34 @@ ${gapNote}` : input.message;
     // binary naming them and gets a 404, which is the honest answer: its arguments do not fit this
     // registry (there is no `for:` in them at all), so an alias would have to invent the one field that
     // must not be guessed at.
+    upsertOwnLink: mutation({
+      input: UpsertOwnLinkInput,
+      output: UpsertOwnLinkResult,
+      handler: async ({ input }) => {
+        const row = ctx.storage.getSession(input.slug);
+        if (!row) throw new Error(`thread ${input.slug} is not registered`);
+        if (row.state === "archived" || row.archived === 1) throw new Error("Reopen this thread before registering a link");
+        const destination = resolveThreadLink(input.target, ctx.project.dir, openRoots);
+        const link = ctx.storage.upsertThreadLink({
+          id: `lnk_${randomUUID16().replace(/-/g, "").slice(0, 12)}`,
+          slug: input.slug,
+          label: input.label,
+          ...destination,
+          createdAtMs: Date.now()
+        });
+        ctx.board.refresh();
+        return { link: threadLinkView(link) };
+      }
+    }),
+    dropOwnLink: mutation({
+      input: DropOwnLinkInput,
+      output: DropOwnLinkResult,
+      handler: async ({ input }) => {
+        const dropped = ctx.storage.dropThreadLink(input.slug, input.id);
+        if (dropped) ctx.board.refresh();
+        return { dropped };
+      }
+    }),
     // ---- REGISTERED PR WATCHERS (add / drop / list) ---------------------------------------------
     // The worker's own PR watchers, from `mcp__frizz__watch_pr`. Same caller and therefore the same rules
     // as the timers above: slug-only (the MCP server outlives the session ids underneath it), and no
@@ -51121,6 +51371,7 @@ var init_router5 = __esm({
     init_open_external();
     init_local_file();
     init_project();
+    init_thread_links();
     init_github();
     init_github_hovercard();
     init_dispatch();
@@ -51343,9 +51594,9 @@ var init_compression = __esm({
 
 // packages/server/src/local-image.ts
 import { readFileSync as readFileSync25, realpathSync as realpathSync10, statSync as statSync18 } from "node:fs";
-import { extname as extname2, isAbsolute as isAbsolute5 } from "node:path";
+import { extname as extname2, isAbsolute as isAbsolute6 } from "node:path";
 function resolveLocalImage(rawPath) {
-  if (!rawPath || !isAbsolute5(rawPath)) return { status: 400 };
+  if (!rawPath || !isAbsolute6(rawPath)) return { status: 400 };
   const contentType = IMAGE_CONTENT_TYPE[extname2(rawPath).toLowerCase()];
   if (!contentType) return { status: 400 };
   let real;
@@ -53336,30 +53587,111 @@ var init_boot_progress = __esm({
   }
 });
 
+// packages/server/src/runtime-lease.ts
+import { existsSync as existsSync14, mkdirSync as mkdirSync19, readdirSync as readdirSync12, readFileSync as readFileSync29, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname19, join as join41 } from "node:path";
+function runtimeVersionDir(bin) {
+  let dir = dirname19(bin);
+  for (let step = 0; step < MAX_ASCENT; step++) {
+    if (existsSync14(join41(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname19(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+  return void 0;
+}
+function pidAlive4(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+}
+function leaseRuntime(bin, role) {
+  const versionDir = runtimeVersionDir(bin);
+  if (!versionDir) return () => {
+  };
+  const path3 = join41(versionDir, LEASES_DIR, `${process.pid}.json`);
+  try {
+    mkdirSync19(dirname19(path3), { recursive: true });
+    const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
+    writeFileSync16(path3, JSON.stringify(lease));
+  } catch {
+    return () => {
+    };
+  }
+  return () => {
+    try {
+      unlinkSync6(path3);
+    } catch {
+    }
+  };
+}
+function liveRuntimeLeases(versionDir) {
+  const dir = join41(versionDir, LEASES_DIR);
+  let names;
+  try {
+    names = readdirSync12(dir);
+  } catch {
+    return [];
+  }
+  const live = [];
+  for (const name of names) {
+    if (!name.endsWith(".json")) continue;
+    const path3 = join41(dir, name);
+    let lease;
+    try {
+      lease = JSON.parse(readFileSync29(path3, "utf8"));
+    } catch {
+      continue;
+    }
+    if (typeof lease.pid !== "number" || !pidAlive4(lease.pid)) {
+      try {
+        unlinkSync6(path3);
+      } catch {
+      }
+      ;
+      continue;
+    }
+    live.push({ pid: lease.pid, role: typeof lease.role === "string" ? lease.role : "unknown", bin: typeof lease.bin === "string" ? lease.bin : "", at: typeof lease.at === "string" ? lease.at : "" });
+  }
+  return live;
+}
+var PROVISIONED_MARKER, LEASES_DIR, MAX_ASCENT;
+var init_runtime_lease = __esm({
+  "packages/server/src/runtime-lease.ts"() {
+    "use strict";
+    PROVISIONED_MARKER = "provisioned.json";
+    LEASES_DIR = ".leases";
+    MAX_ASCENT = 6;
+  }
+});
+
 // packages/server/src/runtimes.ts
 import { createHash as createHash15 } from "node:crypto";
 import {
   chmodSync,
   closeSync as closeSync16,
-  existsSync as existsSync14,
-  mkdirSync as mkdirSync19,
+  existsSync as existsSync15,
+  mkdirSync as mkdirSync20,
   openSync as openSync17,
-  readFileSync as readFileSync29,
-  readdirSync as readdirSync12,
+  readFileSync as readFileSync30,
+  readdirSync as readdirSync13,
   renameSync as renameSync11,
   rmSync as rmSync12,
   statSync as statSync22,
-  writeFileSync as writeFileSync16,
+  writeFileSync as writeFileSync17,
   writeSync as writeSync2
 } from "node:fs";
-import { dirname as dirname19, isAbsolute as isAbsolute6, join as join41, normalize, relative as relative3, sep as sep5 } from "node:path";
+import { dirname as dirname20, isAbsolute as isAbsolute7, join as join42, normalize, relative as relative3, sep as sep5 } from "node:path";
 import { Readable, Transform, Writable as Writable3 } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGunzip } from "node:zlib";
 function runtimesRoot(env = process.env) {
   const override = env[RUNTIMES_DIR_ENV];
-  if (override && isAbsolute6(override)) return override;
-  return join41(frizzRoots().cache, "runtimes");
+  if (override && isAbsolute7(override)) return override;
+  return join42(frizzRoots().cache, "runtimes");
 }
 function isMusl() {
   if (process.platform !== "linux") return false;
@@ -53376,16 +53708,16 @@ function runtimeCoordinates(backend, platform3 = process.platform, arch = proces
   return { pkg: "@openai/codex", packageVersion: `${CODEX_VERSION}-${platform3}-${arch}`, label: CODEX_VERSION, binary: `codex${exe}` };
 }
 function provisionedBinary(backend, root, label) {
-  const dir = join41(root, backend, label);
+  const dir = join42(root, backend, label);
   let marker;
   try {
-    marker = JSON.parse(readFileSync29(join41(dir, MARKER), "utf8"));
+    marker = JSON.parse(readFileSync30(join42(dir, MARKER), "utf8"));
   } catch {
     return void 0;
   }
   if (typeof marker.binary !== "string" || marker.label !== label) return void 0;
-  const bin = join41(dir, marker.binary);
-  return existsSync14(bin) ? bin : void 0;
+  const bin = join42(dir, marker.binary);
+  return existsSync15(bin) ? bin : void 0;
 }
 function octal(buffer, offset, length) {
   const text2 = buffer.toString("latin1", offset, offset + length).replace(/\0.*$/su, "").trim();
@@ -53398,27 +53730,27 @@ function safeEntryPath(dest, name) {
   const parts = name.split("/").filter((part) => part.length > 0);
   if (parts.length < 2) return void 0;
   const rel = normalize(parts.slice(1).join(sep5));
-  if (isAbsolute6(rel) || rel === ".." || rel.startsWith(`..${sep5}`)) return void 0;
-  const full = join41(dest, rel);
+  if (isAbsolute7(rel) || rel === ".." || rel.startsWith(`..${sep5}`)) return void 0;
+  const full = join42(dest, rel);
   const back = relative3(dest, full);
-  if (back.startsWith("..") || isAbsolute6(back)) return void 0;
+  if (back.startsWith("..") || isAbsolute7(back)) return void 0;
   return full;
 }
 function locateBinary(dir, backend, binary) {
   if (backend === "claude") {
-    const direct = join41(dir, binary);
-    return existsSync14(direct) ? direct : void 0;
+    const direct = join42(dir, binary);
+    return existsSync15(direct) ? direct : void 0;
   }
-  const vendor = join41(dir, "vendor");
+  const vendor = join42(dir, "vendor");
   let triples;
   try {
-    triples = readdirSync12(vendor);
+    triples = readdirSync13(vendor);
   } catch {
     return void 0;
   }
   for (const triple of triples) {
-    const candidate = join41(vendor, triple, "bin", binary);
-    if (existsSync14(candidate)) return candidate;
+    const candidate = join42(vendor, triple, "bin", binary);
+    if (existsSync15(candidate)) return candidate;
   }
   return void 0;
 }
@@ -53433,12 +53765,12 @@ async function provisionRuntime(backend, options) {
   const registry = options.registry ?? REGISTRY;
   const progress = options.onProgress ?? (() => {
   });
-  const backendDir = join41(root, backend);
-  const finalDir = join41(backendDir, coordinates.label);
-  const partial = join41(backendDir, `.partial-${coordinates.label}-${process.pid}`);
-  mkdirSync19(backendDir, { recursive: true });
+  const backendDir = join42(root, backend);
+  const finalDir = join42(backendDir, coordinates.label);
+  const partial = join42(backendDir, `.partial-${coordinates.label}-${process.pid}`);
+  mkdirSync20(backendDir, { recursive: true });
   rmSync12(partial, { recursive: true, force: true });
-  mkdirSync19(partial);
+  mkdirSync20(partial);
   try {
     const manifestUrl = `${registry}/${coordinates.pkg.replace("/", "%2F")}/${coordinates.packageVersion}`;
     progress(`resolving ${coordinates.pkg}@${coordinates.packageVersion}`);
@@ -53482,7 +53814,7 @@ async function provisionRuntime(backend, options) {
       binary: relative3(partial, bin),
       at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    writeFileSync16(join41(partial, MARKER), `${JSON.stringify(marker, null, 2)}
+    writeFileSync17(join42(partial, MARKER), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
     try {
       renameSync11(partial, finalDir);
@@ -53493,35 +53825,41 @@ async function provisionRuntime(backend, options) {
       return { bin: theirs, label: coordinates.label, fetched: false };
     }
     progress("ready");
-    return { bin: join41(finalDir, marker.binary), label: coordinates.label, fetched: true };
+    return { bin: join42(finalDir, marker.binary), label: coordinates.label, fetched: true };
   } catch (err) {
     rmSync12(partial, { recursive: true, force: true });
     throw err;
   }
 }
 function sweepRuntimes(backend, root, keepLabel, now = Date.now()) {
-  const backendDir = join41(root, backend);
+  const backendDir = join42(root, backend);
   let entries2;
   try {
-    entries2 = readdirSync12(backendDir);
+    entries2 = readdirSync13(backendDir);
   } catch {
-    return [];
+    return { removed: [], kept: [] };
   }
-  const removed = [];
+  const sweep = { removed: [], kept: [] };
   for (const entry of entries2) {
     if (entry === keepLabel) continue;
-    const full = join41(backendDir, entry);
+    const full = join42(backendDir, entry);
     if (entry.startsWith(".partial-")) {
       try {
         if (now - statSync22(full).mtimeMs < 24 * 60 * 60 * 1e3) continue;
       } catch {
         continue;
       }
+    } else {
+      const leases = liveRuntimeLeases(full);
+      if (leases.length > 0) {
+        sweep.kept.push({ dir: full, leases: leases.map(({ pid, role }) => ({ pid, role })) });
+        continue;
+      }
     }
     rmSync12(full, { recursive: true, force: true });
-    removed.push(full);
+    sweep.removed.push(full);
   }
-  return removed;
+  return sweep;
 }
 async function resolveOne(backend, explicit, options) {
   const env = options.env ?? process.env;
@@ -53547,7 +53885,12 @@ async function resolveOne(backend, explicit, options) {
       onProgress: (message) => options.onProgress?.(backend, message)
     });
     if (provisioned.fetched) log3("info", `runtimes: provisioned ${backend} ${provisioned.label} at ${provisioned.bin}`);
-    for (const retired of sweepRuntimes(backend, root, coordinates.label)) log3("info", `runtimes: retired ${retired}`);
+    leaseRuntime(provisioned.bin, "server");
+    const sweep = sweepRuntimes(backend, root, coordinates.label);
+    for (const retired of sweep.removed) log3("info", `runtimes: retired ${retired}`);
+    for (const { dir, leases } of sweep.kept) {
+      log3("info", `runtimes: kept ${dir} \u2014 still used by ${leases.map((lease) => `${lease.role} pid ${lease.pid}`).join(", ")}`);
+    }
     return { bin: provisioned.bin, source: "provisioned", version: provisioned.label };
   } catch (err) {
     const note = err instanceof Error ? err.message : String(err);
@@ -53578,6 +53921,7 @@ var init_runtimes = __esm({
     "use strict";
     init_codex_app_server();
     init_frizz_paths();
+    init_runtime_lease();
     CLAUDE_AGENT_SDK_VERSION = "0.3.268";
     CLAUDE_CODE_VERSION = "2.1.268";
     CODEX_VERSION = CODEX_APP_SERVER_SUPPORTED_VERSION;
@@ -53668,7 +54012,7 @@ var init_runtimes = __esm({
             return;
           case "5": {
             const dir = safeEntryPath(this.dest, name);
-            if (dir) mkdirSync19(dir, { recursive: true });
+            if (dir) mkdirSync20(dir, { recursive: true });
             return;
           }
           case "0":
@@ -53676,7 +54020,7 @@ var init_runtimes = __esm({
           case "7": {
             const file = safeEntryPath(this.dest, name);
             if (!file) return;
-            mkdirSync19(dirname19(file), { recursive: true });
+            mkdirSync20(dirname20(file), { recursive: true });
             this.fd = openSync17(file, "w", octal(header, 100, 8) & 511 || 420);
             this.written.push(file);
             return;
@@ -54248,18 +54592,18 @@ var init_legacy_project_db = __esm({
 });
 
 // packages/server/src/frizz-db.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync20, readdirSync as readdirSync13, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
-import { basename as basename13, dirname as dirname20, join as join42 } from "node:path";
+import { existsSync as existsSync16, mkdirSync as mkdirSync21, readdirSync as readdirSync14, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
+import { basename as basename13, dirname as dirname21, join as join43 } from "node:path";
 function frizzDatabaseLocation(options) {
   if (options.stateDir !== void 0) {
-    const projectsDir = dirname20(options.stateDir);
+    const projectsDir = dirname21(options.stateDir);
     if (basename13(projectsDir) === "projects") {
-      return { path: options.path ?? join42(dirname20(projectsDir), "ui.db"), projectsDir };
+      return { path: options.path ?? join43(dirname21(projectsDir), "ui.db"), projectsDir };
     }
-    return { path: options.path ?? join42(options.stateDir, "ui.db"), projectsDir: void 0 };
+    return { path: options.path ?? join43(options.stateDir, "ui.db"), projectsDir: void 0 };
   }
   const data = options.home ? frizzPaths({ home: options.home }).data : frizzRoots().data;
-  return { path: options.path ?? join42(data, "ui.db"), projectsDir: join42(data, "projects") };
+  return { path: options.path ?? join43(data, "ui.db"), projectsDir: join43(data, "projects") };
 }
 function ensureFrizzSchema(db) {
   db.exec(`
@@ -54278,7 +54622,7 @@ function ensureFrizzSchema(db) {
 }
 function openFrizzDatabase(options = {}) {
   const { path: path3, projectsDir } = frizzDatabaseLocation(options);
-  mkdirSync20(dirname20(path3), { recursive: true });
+  mkdirSync21(dirname21(path3), { recursive: true });
   const db = new sqlite_default(path3);
   db.pragma("busy_timeout = 5000");
   db.pragma("journal_mode = WAL");
@@ -54290,10 +54634,10 @@ function openFrizzDatabase(options = {}) {
     );
     for (const projectId of retiredLegacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const dir = join42(projectsDir, projectId);
+      const dir = join43(projectsDir, projectId);
       try {
-        renameSync12(join42(dir, "ui.db.imported"), join42(dir, "ui.db"));
-        db.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join42(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
+        renameSync12(join43(dir, "ui.db.imported"), join43(dir, "ui.db"));
+        db.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join43(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
         alreadyImported.add(projectId);
         log.info("frizz-db", `${projectId}: restored ui.db.imported to ui.db and recorded it as imported`);
       } catch (error) {
@@ -54303,7 +54647,7 @@ function openFrizzDatabase(options = {}) {
     }
     for (const projectId of legacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const legacyPath = join42(projectsDir, projectId, "ui.db");
+      const legacyPath = join43(projectsDir, projectId, "ui.db");
       try {
         const rows = importLegacyProject(db, projectId, legacyPath);
         imported.push({ projectId, rows });
@@ -54333,10 +54677,10 @@ function openFrizzDatabase(options = {}) {
   };
 }
 function projectIdsWithFile(projectsDir, file) {
-  if (!existsSync15(projectsDir)) return [];
-  return readdirSync13(projectsDir).filter((name) => {
+  if (!existsSync16(projectsDir)) return [];
+  return readdirSync14(projectsDir).filter((name) => {
     try {
-      return statSync23(join42(projectsDir, name, file)).isFile();
+      return statSync23(join43(projectsDir, name, file)).isFile();
     } catch {
       return false;
     }
@@ -54346,7 +54690,7 @@ function legacyProjectIds(projectsDir) {
   return projectIdsWithFile(projectsDir, "ui.db");
 }
 function retiredLegacyProjectIds(projectsDir) {
-  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync15(join42(projectsDir, id, "ui.db")));
+  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync16(join43(projectsDir, id, "ui.db")));
 }
 function tableColumns(db, schema, table) {
   return db.prepare(`PRAGMA ${schema}.table_info(${table})`).all().map((c) => c.name);
@@ -54502,7 +54846,7 @@ var init_tenant_prime = __esm({
 // packages/server/src/project-teardown.ts
 import { rmSync as rmSync13 } from "node:fs";
 import { homedir as homedir19 } from "node:os";
-import { dirname as dirname21, resolve as resolve10 } from "node:path";
+import { dirname as dirname22, resolve as resolve10 } from "node:path";
 async function stopProjectWorkers(ctx) {
   let stopped = 0;
   for (const row of ctx.storage.allSessions()) {
@@ -54522,7 +54866,7 @@ function deleteProjectState(projectId, home = homedir19()) {
   if (!/^[\w.-]+$/u.test(projectId) || projectId === "." || projectId === "..") {
     throw new Error(`Refusing to delete state for a malformed project id: ${projectId}`);
   }
-  if (dirname21(resolve10(target)) !== resolve10(dirname21(projectStateDir("x", home)))) {
+  if (dirname22(resolve10(target)) !== resolve10(dirname22(projectStateDir("x", home)))) {
     throw new Error(`Refusing to delete ${target} \u2014 it is not a project state directory`);
   }
   rmSync13(target, { recursive: true, force: true });
@@ -54551,11 +54895,11 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync30, existsSync as existsSync16, statSync as statSync24 } from "node:fs";
-import { dirname as dirname22, join as join43, resolve as resolve11, extname as extname4, normalize as normalize2, sep as sep6 } from "node:path";
+import { readFileSync as readFileSync31, existsSync as existsSync17, statSync as statSync24 } from "node:fs";
+import { dirname as dirname23, join as join44, resolve as resolve11, extname as extname4, normalize as normalize2, sep as sep6 } from "node:path";
 function readServerAddressHolder(path3) {
   try {
-    const value = JSON.parse(readFileSync30(path3, "utf8"));
+    const value = JSON.parse(readFileSync31(path3, "utf8"));
     if (typeof value?.pid !== "number") return void 0;
     return { pid: value.pid, port: typeof value.port === "number" ? value.port : -1 };
   } catch {
@@ -54680,12 +55024,12 @@ function staticIsFresh(req, etag, mtimeMs) {
 }
 function serveStatic(distDir, req, res) {
   const rel = normalize2((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
-  let file = join43(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join43(distDir, "index.html");
-  if (!existsSync16(file)) file = join43(distDir, "index.html");
+  let file = join44(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir)) file = join44(distDir, "index.html");
+  if (!existsSync17(file)) file = join44(distDir, "index.html");
   try {
     const stats = statSync24(file);
-    const cacheControl = file.startsWith(join43(distDir, "assets") + sep6) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
+    const cacheControl = file.startsWith(join44(distDir, "assets") + sep6) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
     const etag = `"${stats.size.toString(16)}-${Math.trunc(stats.mtimeMs).toString(16)}"`;
     const headers = {
       "content-type": MIME[extname4(file)] ?? "application/octet-stream",
@@ -54701,7 +55045,7 @@ function serveStatic(distDir, req, res) {
       res.end();
       return;
     }
-    let body = readFileSync30(file);
+    let body = readFileSync31(file);
     const accept = req.headers["accept-encoding"];
     const encoding = negotiateEncoding(Array.isArray(accept) ? accept.join(",") : accept);
     if (encoding && shouldCompress(new Headers({ "content-type": headers["content-type"] }), body.byteLength)) {
@@ -54963,7 +55307,7 @@ async function startServer(opts = {}) {
       if (statusPath && statusIdentity) runtime.removeStatus(statusPath, statusIdentity);
       if (statusPath && statusIdentity) {
         try {
-          runtime.removeStatus(serverAddressPathForStateDir(dirname22(statusPath)), statusIdentity);
+          runtime.removeStatus(serverAddressPathForStateDir(dirname23(statusPath)), statusIdentity);
         } catch {
         }
       }
@@ -55101,7 +55445,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve11(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve11(opts.webDistDir) : join43(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve11(opts.webDistDir) : join44(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -55177,7 +55521,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync30(join43(webRoot, "index.html"), "utf8");
+            const html = readFileSync31(join44(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -55189,7 +55533,7 @@ async function startServer(opts = {}) {
         });
         return;
       }
-      if (existsSync16(distDir)) {
+      if (existsSync17(distDir)) {
         serveStatic(distDir, req, res);
         return;
       }
@@ -55387,7 +55731,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join43(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join44(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -55410,8 +55754,8 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
-import { existsSync as existsSync17 } from "node:fs";
-import { join as join44 } from "node:path";
+import { existsSync as existsSync18 } from "node:fs";
+import { join as join45 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -55449,9 +55793,9 @@ try {
       ["FRIZZ_SCRIPTS_DIR", process.env.FRIZZ_SCRIPTS_DIR, "index.mjs"],
       ["FRIZZ_WORKER_PLUGIN_DIR", process.env.FRIZZ_WORKER_PLUGIN_DIR, ".claude-plugin/plugin.json"]
     ];
-    if (!existsSync17(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
+    if (!existsSync18(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync17(join44(directory, requiredFile)))
+      if (!directory || !existsSync18(join45(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }