frizz 0.12.10 → 0.12.12

package/dist/dev-child.js

@@ -13456,8 +13456,8 @@ function parkExpiredWakeMessage(status) {
     ...status,
     "",
     "Re-park if they are genuinely still going \u2014 there is no limit on that, and a long job is not a",
-    "failure. If something is finished, read its result. If nothing is left, end in ```done or ask a",
-    "```question."
+    "failure. If something is finished, read its result. If nothing is left, end in ```done or register",
+    "a question with `mcp__frizz__ask`."
   ].join("\n");
 }
 function parkFinishedWakeMessage(status, several) {
@@ -13469,7 +13469,7 @@ function parkFinishedWakeMessage(status, several) {
     "READ ITS OUTPUT AND CARRY ON. This is not a broken fence and there is nothing to fix: the wait",
     "you declared simply ended. Do NOT relaunch the same work \u2014 its result is already on disk.",
     "",
-    "Then park on whatever comes next, or end in ```done or a ```question if nothing is left."
+    "Then park on whatever comes next, or end in ```done or a registered question (`mcp__frizz__ask`) if nothing is left."
   ].join("\n");
 }
 function prWatchExpiredWakeMessage(ref) {
@@ -13483,6 +13483,12 @@ function ownWatchExpiredWakeMessage(kind, target) {
 
 If you are still waiting on it, register it again with \`mcp__frizz__watch\` and a fresh \`for:\`. If you are not, and it was the only thing you were waiting on, end in a proper terminal state instead of parking on it again.`;
 }
+function questionFencesLive(spawnedAt) {
+  if (spawnedAt === void 0 || spawnedAt === null) return true;
+  const at = typeof spawnedAt === "number" ? spawnedAt : Date.parse(spawnedAt);
+  if (!Number.isFinite(at)) return true;
+  return at < Date.parse(QUESTION_FENCE_RETIRED_AT);
+}
 function askedQuestionDepth(q) {
   let deepest = 1;
   for (const option of q.options ?? []) {
@@ -13679,7 +13685,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -13803,7 +13809,14 @@ var init_src = __esm({
       slug: external_exports.string(),
       displayName: external_exports.string(),
       defaultEffort: external_exports.string(),
-      efforts: external_exports.array(external_exports.string())
+      efforts: external_exports.array(external_exports.string()),
+      // The model's stock context window and the largest one it accepts, in tokens, straight from the
+      // cache's `context_window` / `max_context_window` (272K / 872K on GPT-5.6, 128K / 128K on Spark).
+      // The Settings "Context window" presets are built from these so the drawer names the numbers codex
+      // will actually run at (maintainer 2026-09-11: "reflect the actual numbers"). Optional: a cache from
+      // before the fields existed, or the degraded fallback, simply carries neither.
+      contextWindow: external_exports.number().int().positive().optional(),
+      maxContextWindow: external_exports.number().int().positive().optional()
     });
     ThreadProfileOption = external_exports.object({
       model: external_exports.string().min(1),
@@ -13990,7 +14003,7 @@ var init_src = __esm({
     RETIRED_AWAITING_REPLACEMENT = {
       "watch": "`shells: [<the id your runtime gave you>]` (or `agents: [<id>]`) \u2014 the same id, in the current sequence",
       "pr-watch": "register the PR with `mcp__frizz__watch_pr`, then name it `prs: [owner/repo#123]`",
-      "human": "there is no human gate any more \u2014 if you need a person, ask a ```question instead of parking",
+      "human": "there is no human gate any more \u2014 if you need a person, register a question with `mcp__frizz__ask` instead of parking",
       "ci": "CI is not a wait of its own: register the PR with `mcp__frizz__watch_pr` and you are woken when its checks settle",
       "session": "there is no cross-session wait \u2014 name the sub-agent you dispatched with `agents: [<id>]`",
       // THE 2026-08-24 CUTOVER. The frontmatter is YAML now, and YAML has no repeated keys — so the four
@@ -14050,7 +14063,7 @@ var init_src = __esm({
     INTERRUPT_MARKERS = ["[Request interrupted by user]", "[Request interrupted by user for tool use]"];
     ALLDONE_SENTINEL = "ALLDONE";
     OPT_OUT_NOTE = "To stop these, sign off with a ```done fence \u2014 but ONLY when the work is genuinely finished: it files this thread away, and nothing but new work from the human reopens it.";
-    OVER_QUESTION_NOTE = "Your ```question is still unanswered, and a Goal armed at rest means the operator is not waiting to answer it: decide it yourself, say in one line which way you went and what would reverse it, and carry on. Do NOT re-ask it.";
+    OVER_QUESTION_NOTE = "Your registered question is still unanswered, and a Goal armed at rest means the operator is not waiting to answer it: decide it yourself, say in one line which way you went and what would reverse it, and carry on. Do NOT re-ask it.";
     TIMER_PROMPT_MAX = SNOOZE_PROMPT_MAX;
     TIMER_MAX_DELAY_SECONDS = 30 * 24 * 60 * 60;
     TIMER_MAX_ARMED = 64;
@@ -14082,14 +14095,16 @@ var init_src = __esm({
       "the write-up.",
       "",
       "**DECIDE RATHER THAN ASK.** Stop only for a decision that is genuinely the human's AND that blocks you",
-      "right now: ask that one in a question fence. Every other open choice INSIDE the task \u2014 a name, a",
+      "right now: register that one with `mcp__frizz__ask`. Every other open choice INSIDE the task \u2014 a name, a",
       "default, a reversible design call \u2014 is yours to make: decide it, say in one line which way you went and",
       "what would reverse it, and carry on. A choice that would ENLARGE the task is not one of those: an",
       "unanswered question is not permission to go build the answer.",
       "",
-      "Otherwise, add a fence at the END of your next message:",
+      "Otherwise, sign off \u2014 a registration, or a fence at the END of your next message:",
       "",
-      "- `` ```question `` \u2014 you need the human. One question per fence, lettered options, one recommended.",
+      "- `mcp__frizz__ask` \u2014 you need the human. NOT a fence: the ```question fence is retired, and a fence",
+      "  with a question in its body is plain prose. Register it (options with one-line trade-offs, the",
+      "  recommended one first), then rest normally \u2014 an open registered question is the sign-off.",
       "- `` ```done `` \u2014 genuinely FINISHED. A DISMISSAL: the card is filed away and nobody looks again, so",
       "  if anything is still owed, it is not done. Body: 1-3 sentences, then bullets, each opening with a",
       "  **bolded verb phrase**.",
@@ -14304,6 +14319,7 @@ var init_src = __esm({
       watches: external_exports.array(OwnWatchView)
     }).strict();
     OWN_WATCH_MAX_ARMED = 24;
+    QUESTION_FENCE_RETIRED_AT = "2026-09-11T17:30:00Z";
     AskQuestionKind = external_exports.enum(["question", "multi"]);
     ASK_MAX_DEPTH = 3;
     AskedOptionSchema = external_exports.lazy(() => external_exports.object({
@@ -14444,6 +14460,20 @@ var init_src = __esm({
       retrying: external_exports.boolean().optional(),
       at: external_exports.string().optional()
     });
+    ThreadLinkView = external_exports.object({
+      id: external_exports.string(),
+      kind: external_exports.enum(["link", "file"]),
+      label: external_exports.string(),
+      target: external_exports.string()
+    }).strict();
+    UpsertOwnLinkInput = external_exports.object({
+      slug: ThreadSlug,
+      label: external_exports.string().trim().min(1).max(240).regex(/^[^\x00-\x1f\x7f]+$/),
+      target: external_exports.string().trim().min(1).max(8192).regex(/^[^\x00-\x1f\x7f]+$/)
+    }).strict();
+    UpsertOwnLinkResult = external_exports.object({ link: ThreadLinkView }).strict();
+    DropOwnLinkInput = external_exports.object({ slug: ThreadSlug, id: external_exports.string().min(1) }).strict();
+    DropOwnLinkResult = external_exports.object({ dropped: external_exports.boolean() }).strict();
     ThreadView = external_exports.object({
       id: ThreadSlug,
       // slug; filename is <slug>.md
@@ -14512,6 +14542,8 @@ var init_src = __esm({
       // Live background SHELLS the worker launched (tailer-derived). Same default-[] discipline. Rendered
       // in the anchored background-ops strip alongside sub-agents; ids make current rows drillable.
       bgShells: external_exports.array(BgShellView).default([]),
+      // Optional for snapshots from a server that predates link registration.
+      links: external_exports.array(ThreadLinkView).optional(),
       // The thread's ARMED WATCHERS — registry-derived, not folded from the transcript, which is what makes
       // them survive the worker saying one more sentence. Same default-[] discipline as the two above.
       //
@@ -14830,6 +14862,15 @@ var init_src = __esm({
       // writes were 51% of a day's spend while the entries were invalidated every 15–30 minutes anyway
       // (see claudePromptCacheEnv). Optional so an old blob parses; defaultSettings pins "auto".
       promptCacheTtl: external_exports.enum(["auto", "5m", "1h"]).optional(),
+      // The context window a NEW Codex thread runs with, in tokens. Codex's own default is the model's
+      // stock window (272K on GPT-5.6), but the catalogue also carries a larger `max_context_window` (872K
+      // on GPT-5.6-sol/terra/luna and GPT-6-astra, measured 2026-09-11 in ~/.codex/models_cache.json) that
+      // a thread only reaches when asked. Reaches codex as the `model_context_window` config override on
+      // `thread/start` and every cold `thread/resume` (see codexContextWindowConfig); codex clamps it to
+      // the model's maximum, so a value above it is harmless, and it moves the auto-compact threshold with
+      // it (codex compacts at 90% of the resolved window). Unset ⇒ nothing is sent and the model's stock
+      // window applies. Optional so an old blob parses; defaultSettings leaves it unset.
+      codexContextWindow: external_exports.number().int().positive().optional(),
       // The GitHub batch-dispatch prompt template (the picker's per-item worker prompt). Optional: when
       // unset OR blank the server falls back to its exported DEFAULT_GITHUB_PROMPT. Substitution tokens
       // the server fills: {repo} {n} {title} {url} {labels} {body}. The leading `THREAD: <slug>` tag is
@@ -15049,6 +15090,7 @@ var init_src = __esm({
     }).strict();
     OwnThreadActivityResult = external_exports.object({
       activity: external_exports.array(ThreadActivityItem),
+      links: external_exports.array(ThreadLinkView).optional(),
       /** Every question still owed an answer. NOT a `ThreadActivityItem` and deliberately its own list: a
        *  question is not running work, it waits on a PERSON, and there is no `questions:` key in the awaiting
        *  fence for it to be written into. Until 2026-08-28 a worker could read its open questions back only
@@ -17788,7 +17830,7 @@ function rpcRequestIdJson(value) {
 }
 function canonicalJson(value) {
   const visiting = /* @__PURE__ */ new WeakSet();
-  const normalize3 = (candidate) => {
+  const normalize2 = (candidate) => {
     if (candidate === null || typeof candidate === "string" || typeof candidate === "boolean") return candidate;
     if (typeof candidate === "number") {
       if (!Number.isFinite(candidate)) throw new InteractionStoreError("invalid-response", "provider JSON contains a non-finite number");
@@ -17800,14 +17842,14 @@ function canonicalJson(value) {
     if (visiting.has(candidate)) throw new InteractionStoreError("invalid-response", "provider JSON contains a cycle");
     visiting.add(candidate);
     try {
-      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize3(item));
+      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize2(item));
       const object = candidate;
-      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize3(object[key])]));
+      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize2(object[key])]));
     } finally {
       visiting.delete(candidate);
     }
   };
-  return JSON.stringify(normalize3(value));
+  return JSON.stringify(normalize2(value));
 }
 function boundedProviderJson(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -19385,6 +19427,20 @@ function createStorage(source, projectId) {
   `);
   const prWatchCursorStmt = scope.prepare("UPDATE pr_watch SET cursor = ? WHERE project_id = @project_id AND id = ? AND state = 'armed'");
   const delPrWatches = scope.prepare("DELETE FROM pr_watch WHERE project_id = @project_id AND thread_slug = ?");
+  const upsertThreadLinkStmt = scope.prepare(`
+    INSERT INTO thread_link (project_id, id, thread_slug, kind, label, target, created_at)
+    VALUES (@project_id, @id, @slug, @kind, @label, @target, @createdAtMs)
+    ON CONFLICT (project_id, thread_slug, label) DO UPDATE SET kind = excluded.kind, target = excluded.target
+    RETURNING *
+  `);
+  const threadLinksStmt = scope.prepare(
+    "SELECT * FROM thread_link WHERE project_id = @project_id ORDER BY created_at, rowid"
+  );
+  const threadLinksBySlugStmt = scope.prepare(
+    "SELECT * FROM thread_link WHERE project_id = @project_id AND thread_slug = ? ORDER BY created_at, rowid"
+  );
+  const dropThreadLinkStmt = scope.prepare("DELETE FROM thread_link WHERE project_id = @project_id AND thread_slug = ? AND id = ?");
+  const delThreadLinks = scope.prepare("DELETE FROM thread_link WHERE project_id = @project_id AND thread_slug = ?");
   const armThreadWatchStmt = scope.prepare(`
     INSERT INTO thread_watch (project_id, id, thread_slug, kind, target, state, created_at, expires_at, settled_at)
     VALUES (@project_id, @id, @slug, @kind, @target, 'armed', @createdAtMs, @expiresAtMs, NULL)
@@ -19524,6 +19580,7 @@ function createStorage(source, projectId) {
     delThreadTimers.run(existing.slug);
     delPrWatches.run(existing.slug);
     delThreadWatches.run(existing.slug);
+    delThreadLinks.run(existing.slug);
     delThreadQuestions.run(existing.slug);
     delThreadDone.run(existing.slug);
     delSubAgentSteers.run(existing.slug);
@@ -19975,6 +20032,10 @@ function createStorage(source, projectId) {
     dropPrWatch: (slug, id, settledAtMs) => dropPrWatchStmt.run(settledAtMs, id, slug).changes === 1,
     settlePrWatch: (id, settledAtMs) => settlePrWatchStmt.run(settledAtMs, id).changes === 1,
     setPrWatchCursor: (id, cursor) => prWatchCursorStmt.run(cursor, id).changes === 1,
+    upsertThreadLink: (link) => upsertThreadLinkStmt.get(link),
+    listThreadLinks: (slug) => threadLinksBySlugStmt.all(slug),
+    threadLinksBySlug: () => groupBySlug(threadLinksStmt.all()),
+    dropThreadLink: (slug, id) => dropThreadLinkStmt.run(slug, id).changes === 1,
     // IDEMPOTENT BY (thread, kind, target), which is what the partial unique index enforces. A worker
     // woken by an expiry re-registers the same wait, and a worker that simply calls twice must not end
     // up with two rows to drop — so an existing armed row is RETURNED rather than replaced. Replacing
@@ -20436,6 +20497,17 @@ var init_storage = __esm({
       ON pr_watch(project_id, state);
     CREATE INDEX IF NOT EXISTS pr_watch_slug
       ON pr_watch(project_id, thread_slug, state, created_at);
+    -- Saved destinations have no liveness or expiry. The label is a stable slot within one thread.
+    CREATE TABLE IF NOT EXISTS thread_link (
+      id          TEXT PRIMARY KEY,
+      project_id  TEXT NOT NULL,
+      thread_slug TEXT NOT NULL,
+      kind        TEXT NOT NULL CHECK (kind IN ('link', 'file')),
+      label       TEXT NOT NULL,
+      target      TEXT NOT NULL,
+      created_at  INTEGER NOT NULL,
+      UNIQUE (project_id, thread_slug, label)
+    );
     -- A worker's registered WATCHES on its own running work (2026-08-26). See
     -- plans/rest-by-registration.md: a wait stops being a line the worker re-writes at every rest and
     -- becomes a row it creates once, which the human sees in the queue and which wakes the thread itself.
@@ -20549,7 +20621,8 @@ var init_storage = __esm({
       "thread_watch",
       "thread_question",
       "thread_done",
-      "subagent_steer"
+      "subagent_steer",
+      "thread_link"
     ];
   }
 });
@@ -20694,6 +20767,9 @@ var init_settings = __esm({
       // "auto" = the CLI's own tier (1h on a subscription). See the schema and claudePromptCacheEnv for
       // when "5m" is the cheaper choice.
       promptCacheTtl: "auto",
+      // Unset = codex's own window for the model (272K on GPT-5.6). The schema and codexContextWindowConfig
+      // explain the 872K ceiling a larger value is clamped to.
+      codexContextWindow: void 0,
       // Hidden until asked for — see the schema for why.
       projectRail: false
     });
@@ -21350,7 +21426,23 @@ function toCodexModel(raw2) {
   const def = typeof m.default_reasoning_level === "string" ? m.default_reasoning_level : "";
   const defaultEffort = def && efforts.includes(def) ? def : efforts[0];
   const priority = typeof m.priority === "number" && Number.isFinite(m.priority) ? m.priority : Number.MAX_SAFE_INTEGER;
-  return { model: { slug, displayName, defaultEffort, efforts }, priority };
+  const window = (key) => {
+    const v = m[key];
+    return typeof v === "number" && Number.isInteger(v) && v > 0 ? v : void 0;
+  };
+  const contextWindow = window("context_window");
+  const maxContextWindow = window("max_context_window");
+  return {
+    model: {
+      slug,
+      displayName,
+      defaultEffort,
+      efforts,
+      ...contextWindow === void 0 ? {} : { contextWindow },
+      ...maxContextWindow === void 0 ? {} : { maxContextWindow }
+    },
+    priority
+  };
 }
 function parseCodexModelsCache(raw2) {
   let doc;
@@ -22098,6 +22190,35 @@ var init_detached_daemons = __esm({
   }
 });
 
+// packages/server/src/backend/daemon-tree.ts
+import { spawnSync } from "node:child_process";
+function endDaemonTree(pid, signal, deps = {}) {
+  const kill = deps.kill ?? defaultKill;
+  if ((deps.platform ?? process.platform) !== "win32") {
+    try {
+      kill(pid, signal);
+    } catch {
+    }
+    return;
+  }
+  const killed = (deps.spawnSync ?? spawnSync)("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+  if (killed.error || killed.status !== 0) {
+    try {
+      kill(pid, signal);
+    } catch {
+    }
+  }
+}
+var defaultKill;
+var init_daemon_tree = __esm({
+  "packages/server/src/backend/daemon-tree.ts"() {
+    "use strict";
+    defaultKill = (pid, signal) => {
+      process.kill(pid, signal);
+    };
+  }
+});
+
 // packages/server/src/backend/ipc-path.ts
 import { join as join15 } from "node:path";
 function frizzIpcPath(name) {
@@ -22260,6 +22381,7 @@ function forkBroker(options) {
   const socketPath = claudeBrokerSocketPath(options.stateDir, options.sessionId);
   const recordPath2 = claudeBrokerRecordPath(options.stateDir, options.sessionId);
   mkdirSync9(dirname8(recordPath2), { recursive: true });
+  const generation = randomUUID8();
   const config = {
     socketPath,
     cwd: options.cwd,
@@ -22268,7 +22390,7 @@ function forkBroker(options) {
     permissionMode: options.permissionMode,
     env: options.env,
     recordPath: recordPath2,
-    generation: randomUUID8(),
+    generation,
     // The daemon writes its own death forensics here. Same dir as the record, so a session's socket,
     // record and diagnostics stay together and a project teardown removes all three.
     diagnosticLogPath: claudeBrokerDiagnosticLogPath(options.stateDir, options.sessionId),
@@ -22286,18 +22408,52 @@ function forkBroker(options) {
     cwd: options.cwd,
     env: { ...process.env, FRIZZ_CLAUDE_BROKER: JSON.stringify(config) },
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // A detached process owns no console on Windows; keep the daemon from ever being handed a
+    // visible one (Windows audit 2026-09-11, finding 4 — the Codex daemon's spawn tells the story).
+    windowsHide: true
   });
   child.unref();
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
+  const recordedCause = () => readClaudeBrokerExit(options.stateDir, options.sessionId, generation);
   return new Promise((resolve12, reject) => {
+    let settled = false;
+    let timer;
+    const settle = (outcome) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      outcome();
+    };
     const poll = () => {
       const record = readBrokerRecord(recordPath2);
-      if (record && pidAlive(record.daemonPid)) return resolve12(record);
-      if (Date.now() > deadline) return reject(new Error(`Claude broker for session ${options.sessionId} did not become ready`));
-      setTimeout(poll, 50);
+      if (record && pidAlive(record.daemonPid)) return settle(() => resolve12(record));
+      if (Date.now() > deadline) {
+        const exit = recordedCause();
+        return settle(() => reject(new Error(
+          `Claude broker for session ${options.sessionId} did not become ready${exit ? `: ${describeClaudeBrokerExit(exit)}` : ""}`
+        )));
+      }
+      timer = setTimeout(poll, 50);
     };
-    child.once("error", reject);
+    child.once("error", (error) => settle(() => reject(error)));
+    child.once("exit", (code, signal) => {
+      if (settled) return;
+      const how = signal ? `signal ${signal}` : `exit code ${code ?? "unknown"}`;
+      const until = Date.now() + 500;
+      const read = () => {
+        if (settled) return;
+        const exit = recordedCause();
+        if (!exit && Date.now() < until) {
+          setTimeout(read, 25);
+          return;
+        }
+        settle(() => reject(new Error(
+          `Claude broker for session ${options.sessionId} exited before it became ready (${how}): ${describeClaudeBrokerExit(exit)}`
+        )));
+      };
+      read();
+    });
     poll();
   });
 }
@@ -22306,7 +22462,7 @@ async function adoptOrForkBroker(options) {
   if (existing) return { record: existing, reattached: true };
   return { record: await forkBroker(options), reattached: false };
 }
-function killBroker(stateDir, sessionId, retireReason) {
+function killBroker(stateDir, sessionId, retireReason, deps = {}) {
   const recordPath2 = claudeBrokerRecordPath(stateDir, sessionId);
   const record = liveBrokerRecord(recordPath2);
   if (retireReason) {
@@ -22314,10 +22470,7 @@ function killBroker(stateDir, sessionId, retireReason) {
   } else takeBrokerRetirement(stateDir, sessionId);
   if (record) {
     rememberBrokerIdentity(recordPath2, record);
-    try {
-      process.kill(record.daemonPid, "SIGTERM");
-    } catch {
-    }
+    endDaemonTree(record.daemonPid, "SIGTERM", deps);
   }
   try {
     unlinkSync(recordPath2);
@@ -22331,6 +22484,7 @@ var init_claude_broker_host = __esm({
     "use strict";
     init_detached_daemons();
     init_claude_broker_diagnostics();
+    init_daemon_tree();
     init_ipc_path();
     WINDOWS_SHIM_TARGET = /^\s*"%dp0%\\(.+?)"/mu;
   }
@@ -23286,10 +23440,30 @@ var init_tail_cache = __esm({
 import { statSync as statSync8, openSync as openSync10, readSync as readSync4, closeSync as closeSync9, readdirSync as readdirSync5, realpathSync as realpathSync5, mkdirSync as mkdirSync10, writeFileSync as writeFileSync8, readFileSync as readFileSync12, existsSync as existsSync5 } from "node:fs";
 import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
-import { basename as basename4, join as join18 } from "node:path";
+import { basename as basename4, join as join18, win32 } from "node:path";
 import { homedir as homedir7 } from "node:os";
-async function probeShellsAlive(outputFiles) {
+async function probeShellsAlive(outputFiles, opts = {}) {
+  const platform3 = opts.platform ?? process.platform;
+  const exec = opts.exec ?? execFileAsync;
   const verdicts = /* @__PURE__ */ new Map();
+  if (platform3 === "win32") {
+    const present = outputFiles.filter((file) => {
+      if (existsSync5(file)) return true;
+      verdicts.set(file, void 0);
+      return false;
+    });
+    if (present.length === 0) return verdicts;
+    const [shell, args] = windowsShellHolderCommand(present, opts.env ?? process.env);
+    let report;
+    try {
+      report = (await exec(shell, args, { encoding: "utf8", timeout: 8e3, windowsHide: true })).stdout;
+    } catch {
+      for (const file of present) verdicts.set(file, void 0);
+      return verdicts;
+    }
+    for (const [file, alive] of parseWindowsShellHolderReport(String(report), present)) verdicts.set(file, alive);
+    return verdicts;
+  }
   const live = [];
   for (const file of outputFiles) {
     if (!existsSync5(file)) {
@@ -23305,7 +23479,7 @@ async function probeShellsAlive(outputFiles) {
   if (live.length === 0) return verdicts;
   let stdout = "";
   try {
-    stdout = (await execFileAsync("lsof", ["-F", "pn", "--", ...live.map((f) => f.real)], { encoding: "utf8", timeout: 8e3 })).stdout;
+    stdout = (await exec("lsof", ["-F", "pn", "--", ...live.map((f) => f.real)], { encoding: "utf8", timeout: 8e3 })).stdout;
   } catch (err) {
     const e = err;
     const ran = typeof e.code === "number" && !e.killed;
@@ -23320,6 +23494,25 @@ async function probeShellsAlive(outputFiles) {
   for (const f of live) verdicts.set(f.requested, held.has(f.real));
   return verdicts;
 }
+function windowsShellHolderCommand(paths, env = process.env) {
+  const shell = win32.join(env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  const list = paths.map((p) => `'${p.replace(/'/g, "''")}'`).join(",");
+  const script = `foreach($p in @(${list})){try{$f=[System.IO.File]::Open($p,[System.IO.FileMode]::Open,[System.IO.FileAccess]::Read,[System.IO.FileShare]::None);$f.Close();'free'}catch [System.IO.IOException]{if((($_.Exception.HResult) -band 0xFFFF) -in 32,33){'held'}else{'unknown'}}catch{'unknown'}}`;
+  return [shell, ["-NoProfile", "-NonInteractive", "-NoLogo", "-Command", script]];
+}
+function parseWindowsShellHolderReport(report, paths) {
+  const verdicts = /* @__PURE__ */ new Map();
+  const lines = report.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+  if (lines.length !== paths.length) {
+    for (const file of paths) verdicts.set(file, void 0);
+    return verdicts;
+  }
+  paths.forEach((file, i) => {
+    const word = lines[i];
+    verdicts.set(file, word === "held" ? true : word === "free" ? false : void 0);
+  });
+  return verdicts;
+}
 function activityMinute(at) {
   if (!at) return "";
   const ms = Date.parse(at);
@@ -25403,18 +25596,20 @@ ${detail2}
     }, delay2);
     nudgeTimer.unref?.();
   }
-  function registeredStateIsCurrent(state) {
+  function currentRowFor(state) {
     const current = deps.storage.getSession(state.slug);
-    return Boolean(
-      current && current.session_id === state.sessionId && (current.runtime_generation ?? 0) === state.runtimeGeneration
-    );
+    return current && current.session_id === state.sessionId && (current.runtime_generation ?? 0) === state.runtimeGeneration ? current : void 0;
+  }
+  function registeredStateIsCurrent(state) {
+    return currentRowFor(state) !== void 0;
   }
   return {
     get(slug) {
       const registered = states.get(slug);
-      const s = registered && registeredStateIsCurrent(registered) ? registered : registered ? void 0 : foreignStates.get(slug);
+      const row = registered ? currentRowFor(registered) : void 0;
+      const s = registered ? row ? registered : void 0 : foreignStates.get(slug);
       if (!s) return void 0;
-      const pendingQuestion = s.lastAssistantHasQuestion;
+      const pendingQuestion = s.lastAssistantHasQuestion && questionFencesLive(row?.spawned_at);
       const nowMs = now();
       return { turn: s.turn, permPrompt: s.permPrompt, permPolicy: s.permPolicy, permDenies: s.permDenies, model: s.model, effort: s.effort, profileAt: s.profileAt, profileRevision: s.profileRevision, permissionMode: s.permissionMode, permissionModeAt: s.permissionModeAt, permissionModeRevision: s.permissionModeRevision, lastActivityAt: s.lastActivityAt, lastAssistantAt: s.lastAssistantAt, lastAssistant: s.lastAssistant, aiTitle: s.aiTitle, customTitle: s.customTitle, customTitleRevision: s.customTitleRevision, subAgents: subAgentViews(s, nowMs), droppedReports: [...s.queuedReports.values()], bgShells: [...bgShellViews(s), ...codexBgShellViews(s)], retiredShells: retiredShellViews(s), pendingAsk: s.pendingAsk, pendingQuestion, lastAssistantAllDone: s.lastAssistantAllDone, lastUserAt: s.lastUserAt, lastUserText: s.lastUserText, firstUserText: s.firstUserText, lastFence: s.lastFence, noTranscript: s.noTranscript, authFault: s.authFault, apiFault: s.apiFault, providerError: s.providerError, limitFault: s.limitFault, contextTokens: s.contextTokens, contextWindow: s.contextWindow, lastCompactionAt: s.lastCompactionAt };
     },
@@ -25979,14 +26174,15 @@ function parseToolArguments(args) {
 }
 function imageField(output) {
   if (!Array.isArray(output)) return {};
+  const images = [];
   for (const part of output) {
     if (!part || typeof part !== "object") continue;
     const p = part;
     if (p.type !== "input_image" && p.type !== "output_image" && p.type !== "image") continue;
     const url = typeof p.image_url === "string" ? p.image_url : typeof p.url === "string" ? p.url : void 0;
-    if (url?.startsWith("data:image/")) return { image: url };
+    if (url?.startsWith("data:image/")) images.push(url);
   }
-  return {};
+  return images.length ? { image: images[0], images } : {};
 }
 function codexItemText(content) {
   if (!Array.isArray(content)) return "";
@@ -26255,6 +26451,101 @@ var init_codex = __esm({
   }
 });
 
+// packages/server/src/backend/codex-executable.ts
+import { accessSync as accessSync2, constants as fsConstants2, readFileSync as readFileSync14 } from "node:fs";
+import { posix, win32 as win322 } from "node:path";
+function defaultAccess(path3, mode) {
+  try {
+    accessSync2(path3, mode === "executable" ? fsConstants2.X_OK : fsConstants2.F_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function defaultReadFile(path3) {
+  try {
+    return readFileSync14(path3, "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function searchPath2(env) {
+  const direct = env.PATH ?? env.Path ?? env.path;
+  if (direct !== void 0) return direct;
+  for (const [key, value] of Object.entries(env)) if (key.toLowerCase() === "path") return value ?? "";
+  return "";
+}
+function vendoredNativeBeside(launcherJs, arch, access) {
+  const triple = WINDOWS_TRIPLE[arch];
+  if (!triple) return void 0;
+  const { dirname: dirname24, join: join46 } = win322;
+  const pkgRoot = dirname24(dirname24(launcherJs));
+  const platformPkg = `codex-win32-${arch}`;
+  const vendorRoots = [
+    join46(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
+    // nested under the package
+    join46(dirname24(pkgRoot), platformPkg, "vendor"),
+    // hoisted beside it: <prefix>\node_modules\@openai\<pkg>
+    join46(pkgRoot, "vendor")
+    // the pre-platform-package layout, binaries inside @openai/codex itself
+  ];
+  for (const root of vendorRoots) {
+    const exe = join46(root, triple, "bin", "codex.exe");
+    if (access(exe, "exists")) return exe;
+  }
+  return void 0;
+}
+function resolveCodexExecutable(bin, deps = {}) {
+  const env = deps.env ?? process.env;
+  const platform3 = deps.platform ?? process.platform;
+  const arch = deps.arch ?? process.arch;
+  const execPath = deps.execPath ?? process.execPath;
+  const access = deps.access ?? defaultAccess;
+  const readFile2 = deps.readFile ?? defaultReadFile;
+  const windows = platform3 === "win32";
+  const path3 = windows ? win322 : posix;
+  const candidate = bin && bin.length > 0 ? bin : "codex";
+  if (path3.isAbsolute(candidate) || /[\\/]/u.test(candidate)) return { file: candidate, args: [] };
+  for (const dir of searchPath2(env).split(path3.delimiter)) {
+    if (!dir) continue;
+    if (!windows) {
+      const full2 = path3.join(dir, candidate);
+      if (access(full2, "executable")) return { file: full2, args: [] };
+      continue;
+    }
+    const exe = path3.join(dir, `${candidate}.exe`);
+    if (access(exe, "exists")) return { file: exe, args: [] };
+    const body = readFile2(path3.join(dir, `${candidate}.cmd`));
+    const target = body === void 0 ? void 0 : WINDOWS_SHIM_TARGET2.exec(body)?.[1];
+    if (!target) continue;
+    const full = path3.join(dir, target);
+    if (!access(full, "exists")) continue;
+    if (!/\.(?:js|mjs|cjs)$/iu.test(full)) return { file: full, args: [] };
+    const native = vendoredNativeBeside(full, arch, access);
+    if (native) return { file: native, args: [] };
+    return { file: execPath, args: [full] };
+  }
+  throw new CodexExecutableNotFoundError(candidate);
+}
+var CodexExecutableNotFoundError, WINDOWS_SHIM_TARGET2, WINDOWS_TRIPLE;
+var init_codex_executable = __esm({
+  "packages/server/src/backend/codex-executable.ts"() {
+    "use strict";
+    CodexExecutableNotFoundError = class extends Error {
+      code = "ENOENT";
+      constructor(candidate) {
+        super(`could not resolve '${candidate}' to an executable on PATH`);
+        this.name = "CodexExecutableNotFoundError";
+      }
+    };
+    WINDOWS_SHIM_TARGET2 = /"%dp0%\\([^"]+)"\s+%\*/u;
+    WINDOWS_TRIPLE = {
+      x64: "x86_64-pc-windows-msvc",
+      arm64: "aarch64-pc-windows-msvc"
+    };
+  }
+});
+
 // packages/server/src/backend/worker-env.ts
 function isFrizzInternalEnvKey(key) {
   return key.startsWith(FRIZZ_INTERNAL_PREFIX);
@@ -27623,14 +27914,14 @@ var require_receiver = __commonJS({
        * @return {(Error|RangeError)} The error
        * @private
        */
-      createError(ErrorCtor, message, prefix, statusCode, errorCode4) {
+      createError(ErrorCtor, message, prefix, statusCode, errorCode5) {
         this._loop = false;
         this._errored = true;
         const err = new ErrorCtor(
           prefix ? `Invalid WebSocket frame: ${message}` : message
         );
         Error.captureStackTrace(err, this.createError);
-        err.code = errorCode4;
+        err.code = errorCode5;
         err[kStatusCode] = statusCode;
         return err;
       }
@@ -29996,6 +30287,11 @@ function claudeCompactionEnv(settings) {
   if (window === void 0 || !Number.isInteger(window) || window <= 0) return {};
   return { [CLAUDE_AUTO_COMPACT_WINDOW_ENV]: String(window) };
 }
+function codexContextWindowConfig(settings) {
+  const window = settings?.codexContextWindow;
+  if (window === void 0 || !Number.isInteger(window) || window <= 0) return {};
+  return { [CODEX_CONTEXT_WINDOW_KEY]: window };
+}
 function claudePromptCacheEnv(settings) {
   const ttl = settings?.promptCacheTtl;
   if (ttl !== "5m" && ttl !== "1h") return {};
@@ -30007,7 +30303,7 @@ function claudeCompactionWindowOf(env) {
   const window = Number(raw2);
   return Number.isInteger(window) && window > 0 ? window : void 0;
 }
-var FRIZZ_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, CLAUDE_AUTO_COMPACT_WINDOW_ENV, CLAUDE_PROMPT_CACHE_TTL_ENV, CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV, WORKER_DISALLOWED_TOOLS;
+var FRIZZ_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, CLAUDE_AUTO_COMPACT_WINDOW_ENV, CODEX_CONTEXT_WINDOW_KEY, CLAUDE_PROMPT_CACHE_TTL_ENV, CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV, WORKER_DISALLOWED_TOOLS;
 var init_types2 = __esm({
   "packages/server/src/backend/types.ts"() {
     "use strict";
@@ -30025,6 +30321,7 @@ var init_types2 = __esm({
       BASH_MAX_TIMEOUT_MS: String(24 * 60 * 60 * 1e3)
     };
     CLAUDE_AUTO_COMPACT_WINDOW_ENV = "CLAUDE_CODE_AUTO_COMPACT_WINDOW";
+    CODEX_CONTEXT_WINDOW_KEY = "model_context_window";
     CLAUDE_PROMPT_CACHE_TTL_ENV = "CLAUDE_CODE_PROMPT_CACHE_TTL";
     CLAUDE_SUBAGENT_PROMPT_CACHE_TTL_ENV = "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL";
     WORKER_DISALLOWED_TOOLS = ["AskUserQuestion"];
@@ -30088,7 +30385,7 @@ import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash7, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync15, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { join as join20 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
@@ -30112,7 +30409,7 @@ function pidAlive2(pid) {
 }
 function readNativeRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync14(nativeRecordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync15(nativeRecordPath(stateDir, projectId), "utf8"));
     if (typeof value.listenerPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -30282,7 +30579,10 @@ async function startListener(options) {
     cwd: options.cwd,
     env: options.env,
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // No console window for codex.exe on Windows (Windows audit 2026-09-11, finding 4; the story is on
+    // the daemon's spawn in codex-app-server-daemon.ts).
+    windowsHide: true
   });
   child.unref();
   const record = {
@@ -30354,7 +30654,7 @@ var init_codex_app_server_native = __esm({
           };
         }
         log.error("codex", `codex app-server native listener unavailable (${error.message}); falling back to an in-process app-server \u2014 turns will NOT survive a frizz restart`);
-        const child = spawn2(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), { cwd: options.cwd, env: options.env, stdio: ["pipe", "pipe", "pipe"] });
+        const child = spawn2(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), { cwd: options.cwd, env: options.env, stdio: ["pipe", "pipe", "pipe"], windowsHide: true });
         return { process: child, generation: randomUUID9(), reattached: false, daemonPid: process.pid, droppedWhileDetached: 0, authAccountId: options.authAccountId };
       }
     };
@@ -30362,10 +30662,10 @@ var init_codex_app_server_native = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-host.ts
-import { spawn as spawn3, spawnSync } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync12, readFileSync as readFileSync15, unlinkSync as unlinkSync3 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync12, readFileSync as readFileSync16, unlinkSync as unlinkSync3 } from "node:fs";
 import { join as join21 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
@@ -30389,7 +30689,7 @@ function pidAlive3(pid) {
 }
 function readDaemonRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync15(recordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync16(recordPath(stateDir, projectId), "utf8"));
     if (typeof value.daemonPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -30406,7 +30706,7 @@ function readDaemonRecord(stateDir, projectId) {
 }
 function readDaemonExitBreadcrumb(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync15(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
+    const value = JSON.parse(readFileSync16(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
     if (typeof value.generation !== "string" || typeof value.reason !== "string") return null;
     return {
       generation: value.generation,
@@ -30429,22 +30729,6 @@ function liveDaemonRecord(stateDir, projectId) {
   }
   return null;
 }
-function endDaemonTree(pid, signal) {
-  if (process.platform !== "win32") {
-    try {
-      process.kill(pid, signal);
-    } catch {
-    }
-    return;
-  }
-  const killed = spawnSync("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
-  if (killed.error || killed.status !== 0) {
-    try {
-      process.kill(pid, signal);
-    } catch {
-    }
-  }
-}
 function killCodexAppServerDaemon(stateDir, projectId) {
   const record = liveDaemonRecord(stateDir, projectId);
   if (!record) return;
@@ -30505,7 +30789,11 @@ function forkDaemon(options) {
     // the payload and is applied by the daemon, keeping the audited env allowlist authoritative.
     env: { ...process.env, FRIZZ_CODEX_APP_SERVER_DAEMON: payload },
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // Belt to the daemon's own braces: a detached process owns no console on Windows, so anything
+    // console-subsystem it starts without CREATE_NO_WINDOW gets a fresh visible one (Windows audit
+    // 2026-09-11, finding 4). The daemon hides its app-server; this keeps the daemon itself hidden.
+    windowsHide: true
   });
   child.unref();
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
@@ -30610,7 +30898,11 @@ function inProcessCodexAppServer(options) {
   const child = spawn3(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), {
     cwd: options.cwd,
     env: options.env,
-    stdio: ["pipe", "pipe", "pipe"]
+    stdio: ["pipe", "pipe", "pipe"],
+    // No console window for codex.exe (Windows audit 2026-09-11, finding 4). The server child has a
+    // console of its own so this site was not the visible-window bug, but a codex.exe that inherits
+    // it dies with it, and the shape test in daemon-tree.test.ts holds every provider spawn to it.
+    windowsHide: true
   });
   const kill = child.kill.bind(child);
   child.kill = ((signal) => {
@@ -30637,6 +30929,7 @@ var init_codex_app_server_host = __esm({
   "packages/server/src/backend/codex-app-server-host.ts"() {
     "use strict";
     init_detached_daemons();
+    init_daemon_tree();
     init_codex_app_server_native();
     init_ipc_path();
     init_codex_mcp();
@@ -31084,7 +31377,7 @@ var init_claude_quota = __esm({
 // packages/server/src/backend/auth-status.ts
 import { join as join23 } from "node:path";
 import { homedir as homedir10, platform as platform2 } from "node:os";
-import { readFileSync as readFileSync16, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync17, statSync as statSync10 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
@@ -31094,7 +31387,7 @@ function claudeConfigDir2() {
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync16(join23(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync17(join23(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -31127,7 +31420,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync16(join23(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync17(join23(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -31147,7 +31440,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
 function readCodexAccountId(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return void 0;
   try {
-    const doc = JSON.parse(readFileSync16(join23(codexHome, "auth.json"), "utf8"));
+    const doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
     if (!doc || typeof doc !== "object") return void 0;
     const tokens = doc.tokens;
     if (!tokens || typeof tokens !== "object") return void 0;
@@ -31157,9 +31450,10 @@ function readCodexAccountId(codexHome = defaultCodexHome()) {
     return void 0;
   }
 }
-async function readCodexBinaryState(codexBin = "codex", exec = execFileAsync3) {
+async function readCodexBinaryState(codexBin = "codex", exec = execFileAsync3, resolve12 = resolveCodexExecutable) {
   try {
-    await exec(codexBin, ["--version"], { timeout: 5e3 });
+    const codex = resolve12(codexBin);
+    await exec(codex.file, [...codex.args, "--version"], { timeout: 5e3 });
     return "present";
   } catch (err) {
     return err.code === "ENOENT" ? "missing" : "unknown";
@@ -31218,7 +31512,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
   if (memo3 && memo3.path === path3 && memo3.mtimeMs === stat2.mtimeMs && memo3.size === stat2.size) return memo3.email;
   let email;
   try {
-    const doc = JSON.parse(readFileSync16(path3, "utf8"));
+    const doc = JSON.parse(readFileSync17(path3, "utf8"));
     email = asEmail(doc?.oauthAccount?.emailAddress);
   } catch {
     email = void 0;
@@ -31229,7 +31523,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync16(join23(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -31284,6 +31578,7 @@ var init_auth_status = __esm({
     init_claude_quota();
     init_codex();
     init_claude_broker_host();
+    init_codex_executable();
     execFileAsync3 = promisify4(execFile4);
     ProviderAuthRequiredError = class extends Error {
       backend;
@@ -31624,7 +31919,7 @@ function fileChangeDisplays(changes) {
 }
 function canonicalJson2(value) {
   const visiting = /* @__PURE__ */ new WeakSet();
-  const normalize3 = (candidate) => {
+  const normalize2 = (candidate) => {
     if (candidate === null || typeof candidate === "string" || typeof candidate === "boolean") return candidate;
     if (typeof candidate === "number") {
       if (!Number.isFinite(candidate)) throw new Error("non-finite JSON number");
@@ -31634,14 +31929,14 @@ function canonicalJson2(value) {
     if (visiting.has(candidate)) throw new Error("cyclic JSON value");
     visiting.add(candidate);
     try {
-      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize3(item));
+      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize2(item));
       const object = candidate;
-      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize3(object[key])]));
+      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize2(object[key])]));
     } finally {
       visiting.delete(candidate);
     }
   };
-  return JSON.stringify(normalize3(value));
+  return JSON.stringify(normalize2(value));
 }
 function logicalRequestId(method, parts) {
   const digest = createHash10("sha256").update(JSON.stringify([method, ...parts])).digest("hex");
@@ -31957,6 +32252,7 @@ var init_codex_app_server = __esm({
     init_auth_status();
     init_codex_mcp();
     init_codex_error();
+    init_types2();
     init_logging();
     CODEX_APP_SERVER_PROVIDER = "codex-app-server";
     CODEX_NATIVE_LISTEN_FLAG = "FRIZZ_CODEX_NATIVE_LISTEN";
@@ -33624,19 +33920,29 @@ var init_codex_app_server = __esm({
        */
       /**
        * The `config` bag for one thread's `thread/start` / `thread/resume`: frizz's MCP server mounted
-       * PER THREAD so it knows who is calling, plus whatever the caller passed.
+       * PER THREAD so it knows who is calling, the operator's Codex context window from Settings, plus
+       * whatever the caller passed.
        *
        * This is the only channel that can carry a caller identity on codex. The argv mount on the
        * app-server is process-wide and serves every thread in the project, so `FRIZZ_THREAD_SLUG` was
        * simply absent and every tool that acts on the caller's own thread failed at the moment of use —
        * see `codexThreadMcpConfig` for the list and the measurement. Returns `{}` when there is nothing
-       * to send, so a caller with no config and no resolved MCP descriptor sends no `config` key at all,
-       * exactly as before.
+       * to send, so a caller with no config, no resolved MCP descriptor and no context-window setting
+       * sends no `config` key at all, exactly as before.
+       *
+       * The context window rides the same bag rather than the process-wide argv because the app-server is
+       * a long-lived daemon: an argv value would be frozen at its first spawn, while a per-thread override
+       * reads Settings at every start and every cold resume — the same "next thread, and a thread that
+       * comes back" semantics the Claude compaction window has (see codexContextWindowConfig).
        *
        * The caller's own config wins on a key collision: this is a default, not an override.
        */
       threadConfig(threadSlug, callerConfig) {
-        const config = { ...codexThreadMcpConfig(this.options.frizzMcp, threadSlug), ...callerConfig };
+        const config = {
+          ...codexThreadMcpConfig(this.options.frizzMcp, threadSlug),
+          ...codexContextWindowConfig(this.options.getSettings?.()),
+          ...callerConfig
+        };
         return Object.keys(config).length ? { config } : {};
       }
       resumeSandboxOverride(row) {
@@ -34522,9 +34828,12 @@ function queryCodexRateLimits(codexHome = defaultCodexHome(), codexBin = "codex"
   return new Promise((resolve12) => {
     let child;
     try {
-      child = spawn4(codexBin, ["app-server"], {
+      const codex = resolveCodexExecutable(codexBin);
+      child = spawn4(codex.file, [...codex.args, "app-server"], {
         stdio: ["pipe", "pipe", "ignore"],
-        env: { ...process.env, CODEX_HOME: codexHome }
+        env: { ...process.env, CODEX_HOME: codexHome },
+        // No console window for codex.exe (Windows audit 2026-09-11, finding 4).
+        windowsHide: true
       });
     } catch {
       resolve12(void 0);
@@ -34604,6 +34913,7 @@ var init_codex_quota = __esm({
   "packages/server/src/backend/codex-quota.ts"() {
     "use strict";
     init_codex();
+    init_codex_executable();
     init_codex_app_server();
     descByName2 = (a, b) => a < b ? 1 : a > b ? -1 : 0;
     TAIL_BYTES = 512 * 1024;
@@ -34681,22 +34991,181 @@ var init_quota = __esm({
   }
 });
 
+// packages/server/src/local-file.ts
+import { spawn as spawn5 } from "node:child_process";
+import { existsSync as existsSync8, readFileSync as readFileSync18, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { isAbsolute as isAbsolute4, join as join25, resolve as resolve5, sep as sep2 } from "node:path";
+function isUnder(real, root) {
+  let rootReal;
+  try {
+    rootReal = realpathSync6(root);
+  } catch {
+    return false;
+  }
+  return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
+}
+function resolveLocalFile(rawPath, roots) {
+  if (!isAbsolute4(rawPath)) throw new Error("Local path must be absolute");
+  let real;
+  try {
+    real = realpathSync6(rawPath);
+  } catch {
+    throw new Error("Local file was not found");
+  }
+  if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
+  try {
+    if (!statSync12(real).isFile()) throw new Error("Local path is not a regular file");
+  } catch (error) {
+    if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
+    throw new Error("Local file was not found");
+  }
+  return real;
+}
+function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
+  const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
+  if (!trimmed) return null;
+  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join25(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve5(projectDir, trimmed);
+  try {
+    return resolveLocalFile(abs, roots);
+  } catch {
+    return null;
+  }
+}
+function readLocalTextFile(rawPath, roots) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  const bytes = readFileSync18(path3);
+  if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
+  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
+  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
+  const lastBreak = head.lastIndexOf(10);
+  return { path: path3, text: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
+}
+function readLocalMarkdown(rawPath, roots) {
+  if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
+  const path3 = resolveLocalFile(rawPath, roots);
+  if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
+  const bytes = readFileSync18(path3);
+  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
+  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
+  const lastBreak = head.lastIndexOf(10);
+  return { path: path3, markdown: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
+}
+function resolveWatchableLocalFile(rawPath, roots) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  if (MARKDOWN_FILE_EXT.test(rawPath.trim()) && !MARKDOWN_FILE_EXT.test(path3)) {
+    throw new Error("Local file is not a Markdown file");
+  }
+  return path3;
+}
+function defaultSpawn(command, args, options) {
+  return spawn5(command, [...args], options);
+}
+async function awaitOpenerStart(child, command) {
+  child.unref();
+  await new Promise((resolve12, reject) => {
+    child.once("error", (error) => reject(new Error(
+      error.code === "ENOENT" ? `${command} is not installed or not on PATH` : `could not start ${command}: ${error.message}`
+    )));
+    child.once("spawn", resolve12);
+  });
+}
+function localFileOpenCommand(path3, selected, options = {}) {
+  const platform3 = options.platform ?? process.platform;
+  if (platform3 === "darwin") {
+    return selected === "cursor" ? { command: "open", args: ["-a", "Cursor", path3] } : selected === "vscode" ? { command: "open", args: ["-a", "Visual Studio Code", path3] } : selected === "finder" ? { command: "open", args: ["-R", path3] } : { command: "open", args: [path3] };
+  }
+  if (platform3 === "win32") {
+    if (selected === "system") return { command: "explorer.exe", args: [path3] };
+    if (selected === "finder") return { command: "explorer.exe", args: [`/select,${path3}`] };
+    const editor = WINDOWS_EDITOR_EXE[selected];
+    const env = options.env ?? process.env;
+    const exists = options.exists ?? existsSync8;
+    const localAppData = env.LOCALAPPDATA;
+    if (localAppData) {
+      const exe = join25(localAppData, ...editor.exe);
+      if (exists(exe)) return { command: exe, args: [path3] };
+    }
+    if (/["%\r\n]/u.test(path3)) throw new Error(`cannot hand ${path3} to the ${editor.shim} shim through cmd.exe`);
+    return { command: "cmd.exe", args: ["/d", "/s", "/c", `"${editor.shim} "${path3}""`], verbatim: true };
+  }
+  return selected === "cursor" ? { command: "cursor", args: [path3] } : selected === "vscode" ? { command: "code", args: [path3] } : { command: "xdg-open", args: [path3] };
+}
+async function openLocalFile(rawPath, opener, roots, options = {}) {
+  const path3 = resolveLocalFile(rawPath, roots);
+  const selected = options.forceSystem ? "system" : opener;
+  if (selected === "copy") return { action: "copy", path: path3 };
+  const spec = localFileOpenCommand(path3, selected, options);
+  const child = (options.spawn ?? defaultSpawn)(spec.command, spec.args, {
+    detached: true,
+    stdio: "ignore",
+    shell: false,
+    windowsHide: true,
+    ...spec.verbatim ? { windowsVerbatimArguments: true } : {}
+  });
+  await awaitOpenerStart(child, spec.command);
+  return { action: "opened", path: path3 };
+}
+var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT, WINDOWS_EDITOR_EXE;
+var init_local_file = __esm({
+  "packages/server/src/local-file.ts"() {
+    "use strict";
+    MARKDOWN_FILE_EXT = /\.(?:md|mdx|markdown)$/i;
+    MARKDOWN_READ_LIMIT = 1024 * 1024;
+    WINDOWS_EDITOR_EXE = {
+      cursor: { exe: ["Programs", "cursor", "Cursor.exe"], shim: "cursor" },
+      vscode: { exe: ["Programs", "Microsoft VS Code", "Code.exe"], shim: "code" }
+    };
+  }
+});
+
+// packages/server/src/thread-links.ts
+import { isAbsolute as isAbsolute5 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+function threadLinkView(row) {
+  return { id: row.id, kind: row.kind, label: row.label, target: row.target };
+}
+function resolveThreadLink(target, projectDir, roots) {
+  if (/^https?:\/\//i.test(target)) {
+    const url = new URL(target);
+    if (url.username || url.password) throw new Error("Link URLs must not contain credentials");
+    return { kind: "link", target: url.href };
+  }
+  let path3 = target;
+  if (/^file:/i.test(target)) {
+    const url = new URL(target);
+    if (url.search || url.hash) throw new Error("File links must not contain a query or fragment");
+    path3 = fileURLToPath2(url);
+  } else if (!isAbsolute5(target) && /^[a-z][a-z\d+.-]*:/i.test(target)) {
+    throw new Error("Register an HTTP(S) URL or a local file");
+  }
+  const resolved = resolveOpenableFile(path3, projectDir, roots);
+  if (!resolved) throw new Error("Local file was not found or is outside Frizz's trusted roots");
+  return { kind: "file", target: resolved };
+}
+var init_thread_links = __esm({
+  "packages/server/src/thread-links.ts"() {
+    "use strict";
+    init_local_file();
+  }
+});
+
 // packages/server/src/frizz.ts
 import { execFile as execFile5 } from "node:child_process";
-import { lstatSync as lstatSync2, realpathSync as realpathSync6 } from "node:fs";
-import { basename as basename5, dirname as dirname9, join as join25, resolve as resolve5 } from "node:path";
+import { lstatSync as lstatSync2, realpathSync as realpathSync7 } from "node:fs";
+import { basename as basename5, dirname as dirname9, join as join26, resolve as resolve6 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
-  return resolve5(import.meta.dirname, "..", "..", "..", "board");
+  return resolve6(import.meta.dirname, "..", "..", "..", "board");
 }
 function directFrizzRoot(projectDir) {
   try {
-    const projectRoot = realpathSync6(projectDir);
-    const path3 = join25(projectRoot, ".frizz");
+    const projectRoot = realpathSync7(projectDir);
+    const path3 = join26(projectRoot, ".frizz");
     const stat2 = lstatSync2(path3);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
-    const real = realpathSync6(path3);
+    const real = realpathSync7(path3);
     return dirname9(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
   } catch {
     return null;
@@ -34707,7 +35176,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join25(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join26(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -34732,7 +35201,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join25(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join26(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -34817,12 +35286,12 @@ var init_awaiting = __esm({
 });
 
 // packages/server/src/backend/project-mcp-servers.ts
-import { readFileSync as readFileSync17 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join26 } from "node:path";
+import { readFileSync as readFileSync19 } from "node:fs";
+import { homedir as homedir12 } from "node:os";
+import { join as join27 } from "node:path";
 function readJsonObject(path3) {
   try {
-    const parsed = JSON.parse(readFileSync17(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync19(path3, "utf8"));
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -34913,17 +35382,17 @@ function userScopeRemoteServers(account, cwd, env) {
 }
 function projectMcpServers(cwd, options = {}) {
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir11();
+  const home = options.home ?? homedir12();
   const configOverride = options.claudeConfigDir ?? (env.CLAUDE_CONFIG_DIR?.trim() ? env.CLAUDE_CONFIG_DIR.trim() : void 0);
-  const accountFile = configOverride ? join26(configOverride, ".claude.json") : join26(home, ".claude.json");
-  const userSettingsFile = join26(configOverride ?? join26(home, ".claude"), "settings.json");
+  const accountFile = configOverride ? join27(configOverride, ".claude.json") : join27(home, ".claude.json");
+  const userSettingsFile = join27(configOverride ?? join27(home, ".claude"), "settings.json");
   const account = readJsonObject(accountFile);
   const out = userScopeRemoteServers(account, cwd, env);
-  const declared = objectField(readJsonObject(join26(cwd, ".mcp.json")), "mcpServers");
+  const declared = objectField(readJsonObject(join27(cwd, ".mcp.json")), "mcpServers");
   if (!declared) return out;
   const approval = collectApproval([
-    readJsonObject(join26(cwd, ".claude", "settings.json")),
-    readJsonObject(join26(cwd, ".claude", "settings.local.json")),
+    readJsonObject(join27(cwd, ".claude", "settings.json")),
+    readJsonObject(join27(cwd, ".claude", "settings.local.json")),
     readJsonObject(userSettingsFile),
     objectField(objectField(account, "projects"), cwd)
   ]);
@@ -34947,17 +35416,17 @@ var init_project_mcp_servers = __esm({
 });
 
 // packages/server/src/worker-plugin-dir.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { dirname as dirname10, join as join27 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { existsSync as existsSync9 } from "node:fs";
+import { dirname as dirname10, join as join28 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync8(join27(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync9(join28(override, ".claude-plugin", "plugin.json")))
     return override;
-  let current = dirname10(fileURLToPath2(moduleUrl));
+  let current = dirname10(fileURLToPath3(moduleUrl));
   for (; ; ) {
-    const candidate = join27(current, "cc-worker");
-    if (existsSync8(join27(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const candidate = join28(current, "cc-worker");
+    if (existsSync9(join28(candidate, ".claude-plugin", "plugin.json"))) return candidate;
     const parent = dirname10(current);
     if (parent === current) return void 0;
     current = parent;
@@ -34985,6 +35454,7 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
     lean ? null : THREAD_EXECUTION[kind],
     AGENT_COMPLETION,
     VISUAL_EVIDENCE,
+    REGISTERED_LINKS,
     QUALITY_BAR,
     TOKEN_ECONOMY,
     QUESTIONS,
@@ -34996,7 +35466,7 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
   out = out.replaceAll("{{FRIZZ_MONITORS_DIR}}", opts.monitorsDir?.trim() || MONITORS_DIR_FALLBACK);
   return out;
 }
-var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, QUALITY_BAR, TOKEN_ECONOMY, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, THREAD_NAME, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
+var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, REGISTERED_LINKS, QUALITY_BAR, TOKEN_ECONOMY, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, THREAD_NAME, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
 var init_workerPrompt = __esm({
   "packages/server/src/workerPrompt.ts"() {
     "use strict";
@@ -35073,9 +35543,11 @@ nothing. Frizz bumps you for one, twice, then gives up \u2014 a turn wasted each
 \`mcp__frizz__ask\` and \`mcp__frizz__watch\` each record a ROW, and frizz reads all three as a sign-off
 \u2014 it will not bump you for a missing fence after any of them. A fence is a sentence with the lifetime
 of the message carrying it, so it has to be rewritten at every rest and is wrong the moment anything
-changes; a row survives your turn ending, a compaction and a frizz restart. **The fences below all still
-work**, they are still the right shape for the prose the human reads, and nothing is being taken away \u2014
-but where a verb exists for what you are saying, call it.
+changes; a row survives your turn ending, a compaction and a frizz restart. **The \`done\` and
+\`awaiting\` fences below still work**, they are still the right shape for the prose the human reads \u2014
+but where a verb exists for what you are saying, call it. **A QUESTION HAS NO FENCE ANY MORE** (retired
+2026-09-11): the only way to ask is \`mcp__frizz__ask\`, and a question written into a fence's body is
+plain prose \u2014 no card, no answer, and no sign-off.
 
 **AN OPEN QUESTION IS A STANDING SIGN-OFF \u2014 REST NORMALLY.** Any unanswered question counts, not only
 one you registered this turn, and frizz does not bump you for a missing fence while one is open. When
@@ -35089,8 +35561,9 @@ without it. Name what is still running in the prose (frizz lists every live shel
 watcher under the prompt box whether or not a fence names it). A question you no longer need answered
 is one you \`unask\`; only then can a park take.
 
-Use at most ONE fenced signal block, at the very END. The fence language is the state; the body is the
-card the human reads. A \` \`\`\`question \` block and real permission prompts are higher-priority asks
+Use at most ONE fenced signal block, at the very END (a question's PLACEMENT marker is not a signal
+block \u2014 see Questions for the human). The fence language is the state; the body is the card the human
+reads. An open registered question and real permission prompts are higher-priority asks
 than \`done\` or \`awaiting\`.
 
 **NAME THE PULL REQUEST, EVERY TIME YOU REST** \u2014 its number in EVERY resting message, not just the
@@ -35141,7 +35614,8 @@ exactly ONE of them.
   - **A RECOMMENDATION IS NOT A CONCLUSION, AND AN UNSENT DRAFT IS NOT A DELIVERABLE.** When the
     verdict is that SOMEONE SHOULD NOW DO SOMETHING \u2014 merge it, decline it, post this comment, pick
     one of these designs, press the button you are not allowed to press \u2014 that someone is the human,
-    so end on a \` \`\`\`question \` carrying your recommendation as option A. Same for anything you WROTE
+    so register the question with \`mcp__frizz__ask\`, your recommendation as option A, and rest on
+    it. Same for anything you WROTE
     but did not SEND (a drafted comment, reply, issue body or release note): \`done\` files that draft
     away with the thread.
   - Follow-up work you DISCOVERED blocks \`done\` just as hard as work you were assigned, even when it
@@ -35227,8 +35701,9 @@ exactly ONE of them.
     dimmed Snoozed band; any one dead, unknown or not yours \u21D2 you are BUMPED immediately and told which.
     **A FENCE THAT NAMES NOTHING IS NOT A PARK** \u2014 \`for:\` describes a wait, it is not one \u2014 so
     "waiting on the checks" plus a duration just sits in the queue: REGISTER the PR and name it, and
-    if nothing is actually running, end with \`\`\`done or ask a \`\`\`question.
-  - **WAITING ON A PERSON IS A \` \`\`\`question \`.** There is no human gate and no prose park.
+    if nothing is actually running, end with \`\`\`done or register a question with \`mcp__frizz__ask\`.
+  - **WAITING ON A PERSON IS A REGISTERED QUESTION** \u2014 \`mcp__frizz__ask\`. There is no human gate, no
+    prose park, and no question fence.
   - **CI, RELEASES, DEPLOYS AND MERGE PROGRESSION ARE AUTOMATABLE \u2014 never \` \`\`\`awaiting \` them
     BLINDLY.** For a pull request, \`mcp__frizz__watch_pr\`. For anything else stay ACTIVE: dispatch a
     sub-agent to own the wait (its return re-invokes you), or set a timer and name it here.
@@ -35239,13 +35714,14 @@ exactly ONE of them.
     is still running, and emit a FRESH fence naming it. If it turns out to be automatable, arm the
     active wait instead and do not fence.
 
-- \` \`\`\`question \` \u2014 you need the human's input; see **Questions for the human**.
+- A REGISTERED QUESTION \u2014 \`mcp__frizz__ask\`, not a fence: you need the human's input, and the open
+  row IS the handback; see **Questions for the human**.
 
 ### When the work is finished but the thread found more
 
 Your mandate is complete and you turned up something else \u2014 a bug you were not sent for, a follow-up
 the change implies. \`done\` is barred (the finding dies with the card), \`awaiting\` is barred (nothing
-is running), and \`question\` only looks barred. That deadlock is not real, and stretching \`done\` is not
+is running), and asking only looks barred. That deadlock is not real, and stretching \`done\` is not
 how you break it. Take the first exit that fits:
 
 1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own
@@ -35254,10 +35730,10 @@ how you break it. Take the first exit that fits:
    is more than one sitting, dispatch an in-session
    SUB-AGENT: its result comes BACK to you, so the follow-up lands on YOUR card, in your diff, under one
    review. Then \`done\` is honest with nothing left over.
-2. **ASK** \u2014 the human should choose whether or how it happens; "nothing was pending" is not an
-   objection. This is the exit for work you cannot bound or verify, or that is genuinely the human's
-   call \u2014 and it is where a separable effort goes, as an OPTION they pick, rather than a card you
-   create for them.
+2. **ASK** \u2014 \`mcp__frizz__ask\`: the human should choose whether or how it happens; "nothing was
+   pending" is not an objection. This is the exit for work you cannot bound or verify, or that is
+   genuinely the human's call \u2014 and it is where a separable effort goes, as an OPTION they pick, rather
+   than a card you create for them.
 3. **HAND IT OFF TO ITS OWN CARD \u2014 the LAST resort, not the tidy one.** \`mcp__frizz__spawn_thread\` puts
    a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link
    in the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so
@@ -35288,6 +35764,12 @@ image paths through its guarded local-image proxy; only eligible workspace or ex
 image files can embed, and a path outside that safe boundary stays non-navigable. Do not bulk-embed
 irrelevant screenshots. Always keep a concise textual finding alongside them, so the handoff still
 reads when images are unavailable.`;
+    REGISTERED_LINKS = `## Saved links and files
+
+Use \`mcp__frizz__link\` with \`label\` and \`target\` for a dev server, working document, report or download
+the human should keep at hand. It stays underneath the prompt. Reuse the label to update its destination;
+read registrations with \`activity\` and remove one with \`unlink\`. Register existing files, using an
+absolute path outside the project root. A saved reference is not a running process or a completion gate.`;
     QUALITY_BAR = `## Quality bar
 
 - Verify behavior end-to-end before calling anything done. A green suite over a stubbed implementation
@@ -35319,88 +35801,101 @@ The API call is the unit of cost, not the tokens you type: each message re-reads
   do not rest on a step you could take now.`;
     QUESTIONS = `## Questions for the human
 
-You run under a dashboard, not a live chat, so your FINAL MESSAGE is the whole interface. Open with 2-4
-sentences of status (what's done, what's in flight, what this answer unblocks), then put each question
-in its own fenced \`question\` block \u2014 the dashboard renders them as answerable cards:
+You run under a dashboard, not a live chat, so a question is a ROW the human still owes an answer to,
+never a sentence in a message: \`mcp__frizz__ask\` registers it, and the dashboard renders it as an
+answerable card. **THERE IS NO \`question\` FENCE ANY MORE.** A fence with a question written in its body
+is plain prose \u2014 it draws no card, nothing can answer it, and it is not a sign-off. (Retired 2026-09-11:
+the fence was taught beside the tool for two weeks, workers went on writing it on most days, and nothing
+tracks a fence's answer \u2014 a fence is bytes in a message; the row is the only lifecycle.)
 
-\`\`\`question
-Should the settings store use SQLite or a JSON file?
-
-- A. SQLite \u2014 transactional, matches how sessions are already stored (recommended: consistency)
-- B. JSON file \u2014 zero deps, human-editable, racy under concurrent writes
-\`\`\`
-
-Each block must stand alone: the specific question, lettered options with a one-line tradeoff each, and
-enough context to answer cold. Options go in a markdown list so each renders on its own line, and the
-question itself stays on ONE line \u2014 inside a fence a newline is a HARD break, so a hard-wrapped sentence
-renders ragged in the card. Mark your recommendation by writing \`recommended\` on that option's line \u2014
-\`(recommended)\` or \`(recommended: one-line why)\` \u2014 and put it FIRST as \`A\`; mark exactly one. Use
-MULTIPLE blocks for multiple independent questions, never one bundled block. A bare "which approach?"
-with no options is a broken handoff.
-
-NO "I" AND NO "you" ANYWHERE IN A QUESTION \u2014 this block, or any interactive prompt. Clicking an
-option is the HUMAN speaking, so first and second person flip between writer and reader: in "A. Leave
-it \u2014 you run the command yourself" / "B. I run it now", neither line says which actor is which. Write
-the whole block actor-explicit \u2014 each option an instruction the human hands back ("Reinstall the
-hooks now") or one that names its actor outright ("the worker retries nightly", "left for the
+\`ask\` takes \`questions\` \u2014 several at once, each with \`question\`, \`kind\` (\`question\` = pick one,
+\`multi\` = pick several, no options at all = free text), an optional \`danger\`, and \`options\` each
+carrying a \`label\`, a \`description\` (ONE LINE by default \u2014 name the trade-off and stop; earn more
+than that and spend it on a shape the human can SCAN, a short list, a table, a code block, the diff an
+option would produce, the message that would be posted, and never a run of one-sentence paragraphs;
+it renders inside the option, so the human sees it BEFORE choosing), an optional \`recommended\`, and
+optional \`followUps\`: questions that become live ONLY if that option is taken, so you can ask "and if
+so, which?" without asking it of somebody who said no. Written out, one registration reads:
+
+    question: Should the settings store use SQLite or a JSON file?
+    kind: question
+    options:
+      - label: SQLite
+        description: transactional, matches how sessions are already stored
+        recommended: true
+      - label: JSON file
+        description: zero deps, human-editable, racy under concurrent writes
+
+Each question must stand alone: the specific question on ONE line, options each with a one-line
+trade-off, and enough context to answer cold. The card letters the options A, B, C in the order you
+give them, so put the one you would take FIRST and mark it \`recommended\`; mark exactly one. Several
+independent questions are several entries of ONE \`ask\` call, never one bundled question. A bare
+"which approach?" with no options is a broken handoff.
+
+NO "I" AND NO "you" ANYWHERE IN A QUESTION \u2014 the question, its options, or any interactive prompt.
+Clicking an option is the HUMAN speaking, so first and second person flip between writer and reader: in
+"Leave it \u2014 you run the command yourself" / "I run it now", neither line says which actor is which.
+Write the whole question actor-explicit \u2014 each option an instruction the human hands back ("Reinstall
+the hooks now") or one that names its actor outright ("the worker retries nightly", "left for the
 maintainer's own terminal"):
 
-\`\`\`question
-A reply for issue #482 explaining the workaround is drafted. Post it from the maintainer's GitHub account, or leave it a draft?
-
-- A. Post it \u2014 the reporter is blocked and the workaround is verified (recommended)
-- B. Leave it in the handoff, for edits before anything is posted
-\`\`\`
+    question: A reply for issue #482 explaining the workaround is drafted. Post it from the maintainer's GitHub account, or leave it a draft?
+    kind: question
+    options:
+      - label: Post it
+        description: the reporter is blocked and the workaround is verified
+        recommended: true
+      - label: Leave it in the handoff
+        description: for edits before anything is posted
 
-Write the block in the human's OWN vocabulary: they have their original prompt and nothing else \u2014 not
+Write the question in the human's OWN vocabulary: they have their original prompt and nothing else \u2014 not
 your plan, your notes, or the names you settled on while working. A name you coined mid-effort (a
 phase, lane, tier, step or section number, "the C path", "the second variant") means nothing to them, so
 translate it into what the thing does. Minimize code identifiers by default: lead with the behavior, and
 spend a file, symbol or flag where it genuinely reads clearest or the human already uses it. Every input
 the choice needs \u2014 what happens today, each option's user-visible consequence, any number that matters \u2014
-belongs INSIDE the block; "as discussed above" points at something they cannot see.
-
-A GO/NO-GO gate is not a special fence \u2014 it is an ordinary \`question\` with two options (the go and the
-decline, each a real choice the human can click). Tag the fence only to change how it renders:
-\`question danger\` for the genuinely irreversible (force-merge, deletion, history rewrite, prod
-rollback), \`question multi\` for select-several triage.
-
-**BETTER THAN A FENCED BLOCK \u2014 REGISTER THE QUESTION:** \`mcp__frizz__ask\` creates a ROW the human
-still owes an answer to, instead of a block inside a message. That is the difference that matters: a
-fence is answerable only while its message is on screen, so a question written into one is gone once
-the transcript scrolls or your context is compacted, while a registration is still there tomorrow. It
-takes \`questions\` \u2014 several at once, each with \`question\`, \`kind\` (\`question\` = pick one,
-\`multi\` = pick several, no options at all = free text), an optional \`danger\`, and \`options\` each
-carrying a \`label\`, a \`description\` (ONE LINE by default \u2014 name the trade-off and stop; earn more
-than that and spend it on a shape the human can SCAN, a short list, a table, a code block, the diff an
-option would produce, the message that would be posted, and never a run of one-sentence paragraphs;
-it renders inside the option, so the human sees it BEFORE choosing), an optional
-\`recommended\`, and optional \`followUps\`: questions that become live ONLY if that option is taken,
-so you can ask "and if so, which?" without asking it of somebody who said no. **REGISTERING A QUESTION DOES NOT END YOUR TURN** \u2014
-it carries no timeout and waits on a person, so keep doing everything that does not depend on the
-answer. The answer comes back as its own wake, restating what was asked. Withdraw one you no longer
-need with \`mcp__frizz__unask\`, above all when you work the answer out yourself. **ON A THREAD
-CARRYING A GOAL IT REFUSES** \u2014 a standing "keep going, decide for yourself" is autonomous mode, and the
-refusal hands that instruction back at the moment it matters. Decide, and say which way you went. A
-genuinely human-owned call still belongs in the prose of your FINAL MESSAGE; autonomous does not mean
-nobody reads.
+belongs INSIDE the question and its options; "as discussed above" points at something they cannot see.
+
+A GO/NO-GO gate is not a special kind \u2014 it is an ordinary \`question\` with two options (the go and the
+decline, each a real choice the human can click). Tag it only to change how it renders: \`danger\` for
+the genuinely irreversible (force-merge, deletion, history rewrite, prod rollback), \`kind: multi\` for
+select-several triage.
+
+**REGISTERING A QUESTION DOES NOT END YOUR TURN** \u2014 it carries no timeout and waits on a person, so
+keep doing everything that does not depend on the answer, and register the question the moment you
+find it rather than saving it for the end. The answer comes back as its own wake, restating what was
+asked. Withdraw one you no longer need with \`mcp__frizz__unask\`, above all when you work the answer
+out yourself. **ON A THREAD CARRYING A GOAL IT REFUSES** \u2014 a standing "keep going, decide for yourself"
+is autonomous mode, and the refusal hands that instruction back at the moment it matters. Decide, and
+say which way you went. A genuinely human-owned call still belongs in the prose of your FINAL MESSAGE;
+autonomous does not mean nobody reads.
 
 **EVERY OPEN QUESTION DRAWS ITS OWN CARD AT ITS REST \u2014 never write it into the handoff.** The
-registered card renders whether you mention it or not, and a fence that names or restates a registered
-question draws NOTHING: one question, one card, and answering the registered one is what settles the
-row and un-gates \`done\`. So the handoff's job is the reasoning around the ask, not the ask itself.
-(Mid-prose placement \u2014 an empty \`\`\`question fence carrying the row's id \u2014 was retired 2026-08-30;
-a marker you still write draws nothing.)
+registered card renders whether you mention it or not, and prose that restates a registered question
+draws NOTHING: one question, one card, and answering the registered one is what settles the row and
+un-gates \`done\`. So the handoff's job is the reasoning around the ask, not the ask itself.
+
+**TO PLACE A QUESTION INSIDE YOUR PROSE, WRITE AN EMPTY FENCE NAMING ITS ID** \u2014 the id \`ask\` returned
+(\`mcp__frizz__activity\` lists them). At the point your write-up has earned the ask \u2014 after the
+paragraph that sets it up, before the one that says what happens either way:
+
+\`\`\`question qst_ab12cd34
+\`\`\`
+
+Frizz draws the registered card THERE instead of at the tail. Nothing goes in the body: the card comes
+from the ROW, so nothing about the question is ever guessed from prose, and a marker naming no open
+question of yours draws nothing. One marker per question. Placement is OPTIONAL \u2014 a question with no
+marker renders at the tail of the rest, and a handoff that writes no marker loses nothing. Every answer
+of the rest is sent together, with ONE Send button at the tail, wherever the cards sit. (Placement was
+retired 2026-08-30 and restored 2026-09-11 with the free-form fence's retirement: the marker references
+a row, which is exactly what a fence with a body never did.)
 
 A question you no longer want answered is not one you leave out of the write-up \u2014 it is one you
 \`unask\`, which is the difference between deciding something yourself and quietly hoping nobody
 answers. Questions asked in one \`ask\` call render together and send as one batch.
 
-Fence a question you did NOT register only when you mean to ask it in the message itself.
-
-A \` \`\`\`question \` block IS the handback \u2014 do not also emit a \`done\`/\`awaiting\` fence, and the same
-holds while a REGISTERED question stands open. Answers arrive as your next user message, possibly as
-terse as "1: A, 2: B".`;
+**AN OPEN REGISTERED QUESTION IS THE HANDBACK** \u2014 emit no \`done\`/\`awaiting\` fence beside it, and
+write no question fence at all. The answer arrives as your next user message, as its own wake.`;
     STOP_CRITERION = `## The stop criterion
 
 **COMING TO REST IS A STOP, and it needs the same justification as a question.** The far more common
@@ -35448,14 +35943,14 @@ Stop only when a wrong guess would be BOTH costly AND hard to undo: destructive
 security posture with real exposure; product/UX direction that is genuinely the human's taste to set;
 scope so vague that acting means inventing substantial new code with no way to check it. Everything
 else \u2014 mechanical work, clear bugs, refactors, defaults you can justify, architecture you can reverse \u2014
-you finish. When you do stop, surface it as a \` \`\`\`question \` with your recommendation marked, and do
-all the work that does NOT depend on the answer first.`;
+you finish. When you do stop, register it with \`mcp__frizz__ask\` with your recommendation marked, and
+do all the work that does NOT depend on the answer first.`;
     TRIVIAL_PROMPTS = `## Trivial and conversational prompts
 
 Some dispatches never deserved a work effort \u2014 a greeting, a one-line question, a joke, a test ping.
 Resolve them with ZERO ceremony: answer inline in one message, and close with a \` \`\`\`done \` fence whose
 body is one line ("Answered inline \u2014 conversational prompt, nothing to ship."). If the answer genuinely
-needs a reply, ask with a \` \`\`\`question \` instead. Do not manufacture scope, restate the "task", or ask
+needs a reply, register it with \`mcp__frizz__ask\` instead. Do not manufacture scope, restate the "task", or ask
 clarifying questions to seem busy.`;
     THREAD_NAME = `## Name your thread once you know what the work is
 
@@ -35835,7 +36330,7 @@ Dispatches share a vocabulary for the deliverable and quality bar, not for fleet
   first that works? Cover and synthesize every relevant prong inline unless delegation was
   explicitly requested. Close with a \` \`\`\`done \` fence listing the completed research/evidence \u2014
   the report IS this thread's deliverable, unlike a bug/issue investigation headed for a fix, which
-  bare-rests; use \` \`\`\`question \` for a human call.
+  bare-rests; use \`mcp__frizz__ask\` for a human call.
 - **Audit thread** \u2014 adversarially verify correctness, safety, or compatibility of something that
   exists. Exercise proportionate cases and lenses until dry; re-check load-bearing verdicts and cite
   evidence. Thorough coverage is required, but the audit label alone does not authorize fan-out.
@@ -36112,15 +36607,14 @@ var init_claude_broker_client = __esm({
 });
 
 // packages/server/src/backend/claude-permission-interactions.ts
-import { homedir as homedir12 } from "node:os";
+import { homedir as homedir13 } from "node:os";
 function clip(text2, max) {
   return text2.length > max ? `${text2.slice(0, max - 1)}\u2026` : text2;
 }
-function tildePath(path3) {
-  const home = homedir12();
+function tildePath(path3, home = homedir13()) {
   if (!path3.startsWith(home)) return path3;
   const rest = path3.slice(home.length);
-  return rest === "" ? "~" : rest.startsWith("/") ? `~${rest}` : path3;
+  return rest === "" ? "~" : /^[\\/]/.test(rest) ? `~${rest}` : path3;
 }
 function inputPreview(input, shown) {
   if (!input) return "";
@@ -36354,8 +36848,8 @@ var init_claude_permission_interactions = __esm({
     HAS_UNSAFE_TEXT = new RegExp(UNSAFE_TEXT_SOURCE, "u");
     CLAUDE_NOTES_ONLY = "(notes only)";
     CLAUDE_QUESTION_DECLINED = "The operator did not answer this question from the frizz dashboard. Do not ask it again with this tool \u2014 decide with the information you already have, or raise it in your final message.";
-    CLAUDE_ASK_DENY_MESSAGE = "Frizz could not render this question as a card. Ask it in your FINAL MESSAGE instead, in a ```question fenced block \u2014 context, the question, lettered `- A. \u2026` options, a recommendation \u2014 then end your turn. The operator answers it from the queue and the reply arrives as your next user message.";
-    CLAUDE_ASK_WITHDRAWN_MESSAGE = "This question was withdrawn before anyone answered it \u2014 most likely because the operator sent a message instead. Read their next message and follow it. Do not ask this again with this tool; if you still need the decision, put it in your final message as a ```question fenced block.";
+    CLAUDE_ASK_DENY_MESSAGE = "Frizz could not render this question as a card. Register it with `mcp__frizz__ask` instead \u2014 context, the question, options with a one-line trade-off each, the recommended one first \u2014 never as a ```question fence, which is retired. The operator answers it from the queue and the reply arrives as your next user message.";
+    CLAUDE_ASK_WITHDRAWN_MESSAGE = "This question was withdrawn before anyone answered it \u2014 most likely because the operator sent a message instead. Read their next message and follow it. Do not ask this again with this tool; if you still need the decision, register it with `mcp__frizz__ask`.";
   }
 });
 
@@ -36767,8 +37261,8 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync12, constants, existsSync as existsSync9, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync18, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
-import { basename as basename6, join as join28, dirname as dirname11 } from "node:path";
+import { closeSync as closeSync12, constants, existsSync as existsSync10, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync20, realpathSync as realpathSync8, statSync as statSync13, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
+import { basename as basename6, join as join29, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -36787,7 +37281,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync9(join28(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync10(join29(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -36803,16 +37297,16 @@ function resolveLegacyThreadFile(projectDir, value) {
   const parsed = ThreadSlug.safeParse(value);
   if (!parsed.success) return null;
   try {
-    const projectRoot = realpathSync7(projectDir);
-    const frizzPath = join28(projectRoot, ".frizz");
+    const projectRoot = realpathSync8(projectDir);
+    const frizzPath = join29(projectRoot, ".frizz");
     const frizzStat = lstatSync3(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
-    const realFrizz = realpathSync7(frizzPath);
+    const realFrizz = realpathSync8(frizzPath);
     if (dirname11(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path3 = join28(realFrizz, `${parsed.data}.md`);
+    const path3 = join29(realFrizz, `${parsed.data}.md`);
     const before = lstatSync3(path3);
     if (!before.isFile() || before.isSymbolicLink()) return null;
-    const realPath = realpathSync7(path3);
+    const realPath = realpathSync8(path3);
     if (dirname11(realPath) !== realFrizz || basename6(realPath) !== `${parsed.data}.md`) return null;
     let contents;
     let openedBefore;
@@ -36820,7 +37314,7 @@ function resolveLegacyThreadFile(projectDir, value) {
     const fd = openSync13(path3, constants.O_RDONLY | constants.O_NOFOLLOW);
     try {
       openedBefore = fstatSync2(fd);
-      contents = readFileSync18(fd);
+      contents = readFileSync20(fd);
       openedAfter = fstatSync2(fd);
     } finally {
       closeSync12(fd);
@@ -36853,7 +37347,7 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path3 = join28(parent, name);
+  const path3 = join29(parent, name);
   try {
     mkdirSync13(path3);
   } catch (error) {
@@ -36862,7 +37356,7 @@ function ensureSafeDirectDirectory(parent, name) {
   }
   const stat2 = lstatSync3(path3);
   if (!stat2.isDirectory() || stat2.isSymbolicLink()) throw new Error("unsafe project directory");
-  const real = realpathSync7(path3);
+  const real = realpathSync8(path3);
   if (dirname11(real) !== parent || basename6(real) !== name) throw new Error("unsafe project directory");
   return real;
 }
@@ -36871,7 +37365,7 @@ function scratchDirRelPath(sessionId) {
 }
 function writeScratchDir(projectDir, sessionId) {
   if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/.test(sessionId)) throw new Error("invalid session id");
-  const projectRoot = realpathSync7(projectDir);
+  const projectRoot = realpathSync8(projectDir);
   const frizzDir = ensureSafeDirectDirectory(projectRoot, ".frizz");
   const threadsDir = ensureSafeDirectDirectory(frizzDir, "threads");
   ensureSafeDirectDirectory(threadsDir, sessionId);
@@ -36883,8 +37377,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join28(plugin, "skills", "gh", "scripts");
-  return existsSync9(join28(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join29(plugin, "skills", "gh", "scripts");
+  return existsSync10(join29(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -36896,7 +37390,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join28(dirname11(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join29(dirname11(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -36922,7 +37416,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join28(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join29(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -36938,12 +37432,12 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work (${children2}). Nothing in this directory is read automatically; if you want a note back after a compaction, mcp__frizz__goal with post_compaction: true re-sends a prompt of your choosing.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path3 = join28(projectDir, "FRIZZ.md");
+  const path3 = join29(projectDir, "FRIZZ.md");
   let body;
   try {
-    const st = statSync12(path3);
+    const st = statSync13(path3);
     if (!st.isFile() || st.size > FRIZZ_MD_MAX_BYTES) return "";
-    body = readFileSync18(path3, "utf8").trim();
+    body = readFileSync20(path3, "utf8").trim();
   } catch {
     return "";
   }
@@ -36982,8 +37476,8 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join28(pluginDir, "bin", FRIZZ_MCP.script);
-  if (!existsSync9(scriptPath)) return void 0;
+  const scriptPath = join29(pluginDir, "bin", FRIZZ_MCP.script);
+  if (!existsSync10(scriptPath)) return void 0;
   return {
     scriptPath,
     stateDir,
@@ -37065,7 +37559,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join28(deps.project.dir, ".frizz");
+  const frizzDir = join29(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path3 of new Set(built.prewrite.map((file) => file.path))) {
@@ -37078,7 +37572,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync9(join28(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync9(join29(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -37516,11 +38010,11 @@ var init_dispatch = __esm({
 
 // packages/server/src/board.ts
 import {
-  realpathSync as realpathSync8,
+  realpathSync as realpathSync9,
   watch as fsWatch
 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname12, join as join29 } from "node:path";
+import { homedir as homedir14 } from "node:os";
+import { dirname as dirname12, join as join30 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -37831,20 +38325,20 @@ function resolveSessionProfile(row, tele) {
 function resolveSessionPermission(row, tele) {
   const saved = PermissionMode.safeParse(row.permission_mode);
   const pending = PermissionMode.safeParse(row.permission_pending);
-  const normalize3 = (mode) => effectivePermissionMode(row.backend === "codex" ? "codex" : "claude", mode);
-  if (saved.success && pending.success && normalize3(saved.data) === normalize3(pending.data)) return normalize3(saved.data);
+  const normalize2 = (mode) => effectivePermissionMode(row.backend === "codex" ? "codex" : "claude", mode);
+  if (saved.success && pending.success && normalize2(saved.data) === normalize2(pending.data)) return normalize2(saved.data);
   if (row.backend === "codex" && saved.success) {
     const observedAt = tele?.permissionModeAt ? Date.parse(tele.permissionModeAt) : NaN;
     const spawnedAt = Date.parse(row.spawned_at);
     if (tele?.permissionMode && Number.isFinite(observedAt) && Number.isFinite(spawnedAt) && observedAt >= spawnedAt) {
       const setAt = row.permission_set_at ? Date.parse(row.permission_set_at) : NaN;
-      if (Number.isFinite(setAt) && setAt > observedAt) return normalize3(saved.data);
-      return normalize3(tele.permissionMode);
+      if (Number.isFinite(setAt) && setAt > observedAt) return normalize2(saved.data);
+      return normalize2(tele.permissionMode);
     }
-    return normalize3(saved.data);
+    return normalize2(saved.data);
   }
-  if (saved.success) return normalize3(saved.data);
-  return tele?.permissionMode ? normalize3(tele.permissionMode) : void 0;
+  if (saved.success) return normalize2(saved.data);
+  return tele?.permissionMode ? normalize2(tele.permissionMode) : void 0;
 }
 function resolvePendingPermission(row) {
   const parsed = PermissionMode.safeParse(row.permission_pending);
@@ -37903,6 +38397,7 @@ function registeredDoneFence(done, lastUserAt) {
 }
 function readThreadRegistries(storage) {
   return {
+    links: storage.threadLinksBySlug(),
     prWatches: storage.armedPrWatchesBySlug(),
     timers: storage.armedThreadTimersBySlug(),
     questions: storage.threadQuestionsBySlug(),
@@ -38010,6 +38505,7 @@ function sessionThreadView(projectDir, storage, row, rawTele, registeredLegacyTe
     lastAssistantAt: tele?.lastAssistantAt,
     subAgents: stampStoppable(tele?.subAgents ?? [], row),
     bgShells: stampStoppableShells(tele?.bgShells ?? [], row),
+    links: (registries.links.get(row.slug) ?? []).map(threadLinkView),
     // ONE SOURCE: the FENCE. Both kinds are derived from what the worker wrote — `prs:` entries
     // become the github rows, `watch:` lines the shell rows — so this strip lists exactly what will
     // actually wake the thread, and the two cannot drift into claiming different things. There is no
@@ -38257,7 +38753,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
       ...project.githubRepo ? { githubRepo: project.githubRepo } : {},
       projectSlug: findByPath(project.dir)?.slug,
       // So the client can expand a `~` a worker wrote in prose (see BoardSnapshot.homeDir).
-      homeDir: homedir13()
+      homeDir: homedir14()
     };
     const sessionThreads = buildSessionThreads(assembledAtMs);
     armSnoozeWake(sessionThreads, assembledAtMs);
@@ -38358,10 +38854,10 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const dir = join29(project.dir, ".frizz");
+      const dir = join30(project.dir, ".frizz");
       const roots = /* @__PURE__ */ new Set([dir]);
       try {
-        roots.add(realpathSync8(dir));
+        roots.add(realpathSync9(dir));
       } catch {
       }
       const next = await subscribe(
@@ -38373,7 +38869,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
           }
           if (events.some((event) => isBoardRelevantFrizzPath(roots, event.path))) scheduleRebuild();
         },
-        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join29(dir, name)) }
+        { ignore: FRIZZ_WATCH_IGNORED_DIRS.map((name) => join30(dir, name)) }
       );
       if (stopped) {
         await next.unsubscribe();
@@ -38455,6 +38951,7 @@ var init_board = __esm({
     "use strict";
     init_src();
     init_storage();
+    init_thread_links();
     init_thread_profiles();
     init_frizz();
     init_awaiting();
@@ -40003,8 +40500,8 @@ ${wakeTimeHeader(nowMs, spokeAt)}`,
         "in a sentence breaks the YAML, which is why `reason:` is gone.",
         "",
         "`mcp__frizz__activity` lists everything you have running, and prints it back as a ready-to-paste",
-        "fence. If you are not waiting on anything, you are not awaiting \u2014 end with ```done, or ask a",
-        "```question."
+        "fence. If you are not waiting on anything, you are not awaiting \u2014 end with ```done, or register",
+        "a question with `mcp__frizz__ask`."
       ].join("\n") : nameless ? [
         `${PARK_CORRECTION_NAMES_LEAD}nothing to wait on, so it is not a park \u2014 your thread is still`,
         "in the queue, and nothing will wake you.",
@@ -40020,15 +40517,15 @@ ${wakeTimeHeader(nowMs, spokeAt)}`,
         "Use `mcp__frizz__activity` to read it all back as a ready-to-paste fence.",
         "",
         "AND IF YOU ARE NOT WAITING ON ANYTHING, you are not awaiting \u2014 you are done. End with ```done,",
-        "or ask a ```question if you need the human."
+        "or register a question with `mcp__frizz__ask` if you need the human."
       ].join("\n") : expired ? parkExpiredWakeMessage(status) : allFinished ? parkFinishedWakeMessage(status, dead.length !== 1) : [
         `${PARK_CORRECTION_NAMES_LEAD}${dead.length === 1 ? "something that is" : "things that are"} not running, so it is not a park and your thread stayed in the queue.`,
         "",
         ...status,
         "",
         "Use `mcp__frizz__activity` to read back what you actually have out, with the exact id each line",
-        "needs, then re-fence naming only those \u2014 or end in ```done or a ```question if there is nothing",
-        "left to wait for."
+        "needs, then re-fence naming only those \u2014 or end in ```done or a registered question",
+        "(`mcp__frizz__ask`) if there is nothing left to wait for."
       ].join("\n");
       const cause = retired.length > 0 ? "retired" : nameless ? "nameless" : expired ? "expired" : "dead";
       const ops = cause === "expired" ? [] : liveOpsLines({
@@ -41050,7 +41547,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -41141,7 +41638,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join30(opts.logDir, `${sessionId}.jsonl`);
+      return join31(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -41170,10 +41667,31 @@ import { randomBytes } from "node:crypto";
 import pty from "node-pty";
 function createLoginUtility(deps) {
   const spawnPty = deps.spawnPty ?? pty.spawn;
+  const env = deps.env ?? process.env;
   const lifetimeMs = deps.lifetimeMs ?? ATTEMPT_LIFETIME_MS;
   const attempts = /* @__PURE__ */ new Map();
   function loginArgv(backend) {
-    return backend === "codex" ? { file: deps.codexBin ?? "codex", args: ["login"] } : { file: deps.claudeBin ?? "claude", args: ["auth", "login"] };
+    if (backend === "codex") {
+      const codex = resolveCodexExecutable(deps.codexBin, { env });
+      return { file: codex.file, args: [...codex.args, "login"] };
+    }
+    return { file: resolveClaudeExecutableAbsolute(deps.claudeBin, env), args: ["auth", "login"] };
+  }
+  function failedAttempt(id, backend, cause) {
+    const reason = cause instanceof Error ? cause.message : String(cause);
+    const error = `Could not start the ${backend === "codex" ? "Codex" : "Claude"} sign-in: ${reason}`;
+    return {
+      id,
+      backend,
+      timer: setTimeout(() => teardown(id), lifetimeMs),
+      buffer: `${error}\r
+`,
+      bufferBytes: Buffer.byteLength(error) + 2,
+      exited: true,
+      error,
+      dataListeners: /* @__PURE__ */ new Set(),
+      exitListeners: /* @__PURE__ */ new Set()
+    };
   }
   function teardown(id) {
     const attempt = attempts.get(id);
@@ -41191,7 +41709,7 @@ function createLoginUtility(deps) {
     }
     attempt.exitListeners.clear();
     try {
-      attempt.term.kill();
+      attempt.term?.kill();
     } catch {
     }
   }
@@ -41203,14 +41721,22 @@ function createLoginUtility(deps) {
         teardown(attempt2.id);
       }
       const id = `login-${randomBytes(8).toString("hex")}`;
-      const { file, args } = loginArgv(backend);
-      const term = spawnPty(file, args, {
-        name: process.platform === "win32" ? "xterm-color" : "xterm-256color",
-        cwd: deps.cwd,
-        env: process.env,
-        cols: 120,
-        rows: 30
-      });
+      let term;
+      try {
+        const { file, args } = loginArgv(backend);
+        term = spawnPty(file, args, {
+          name: process.platform === "win32" ? "xterm-color" : "xterm-256color",
+          cwd: deps.cwd,
+          env,
+          cols: 120,
+          rows: 30
+        });
+      } catch (cause) {
+        const failed = failedAttempt(id, backend, cause);
+        failed.timer.unref?.();
+        attempts.set(id, failed);
+        return { attemptId: id };
+      }
       const attempt = {
         id,
         backend,
@@ -41262,7 +41788,7 @@ function createLoginUtility(deps) {
         write: (data) => {
           if (!attempt.exited) {
             try {
-              attempt.term.write(data);
+              attempt.term?.write(data);
             } catch {
             }
           }
@@ -41270,7 +41796,7 @@ function createLoginUtility(deps) {
         resize: (cols, rows) => {
           if (!attempt.exited) {
             try {
-              attempt.term.resize(cols, rows);
+              attempt.term?.resize(cols, rows);
             } catch {
             }
           }
@@ -41291,7 +41817,7 @@ function createLoginUtility(deps) {
     status(attemptId) {
       const attempt = attempts.get(attemptId);
       if (!attempt) return { state: "exited" };
-      return { state: attempt.exited ? "exited" : "running", backend: attempt.backend };
+      return { state: attempt.exited ? "exited" : "running", backend: attempt.backend, ...attempt.error ? { error: attempt.error } : {} };
     },
     cancel(attemptId) {
       teardown(attemptId);
@@ -41305,19 +41831,21 @@ var ATTEMPT_LIFETIME_MS, REPLAY_CAP_BYTES;
 var init_login_utility = __esm({
   "packages/server/src/login-utility.ts"() {
     "use strict";
+    init_claude_broker_host();
+    init_codex_executable();
     ATTEMPT_LIFETIME_MS = 10 * 60 * 1e3;
     REPLAY_CAP_BYTES = 256 * 1024;
   }
 });
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
-import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync13 } from "node:fs";
-import { join as join31 } from "node:path";
+import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync14 } from "node:fs";
+import { join as join32 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join31(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join32(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join31(stateDir, "codex-app-server");
+  const dir = join32(stateDir, "codex-app-server");
   const path3 = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
@@ -41328,7 +41856,7 @@ function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__
         ensured = true;
       }
       try {
-        if (statSync13(path3).size > MAX_BYTES2) renameSync8(path3, `${path3}.1`);
+        if (statSync14(path3).size > MAX_BYTES2) renameSync8(path3, `${path3}.1`);
       } catch {
       }
       appendFileSync3(path3, `${JSON.stringify({ at: now().toISOString(), ...event })}
@@ -41349,7 +41877,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile8 } from "node:child_process";
 import { readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -41366,7 +41894,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join32(options.dir, name)).filter((path3) => !keep.has(path3));
+    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join33(options.dir, name)).filter((path3) => !keep.has(path3));
   } catch {
     return;
   }
@@ -41416,7 +41944,7 @@ var init_stale_socket_sweep = __esm({
 
 // packages/server/src/orphan-reaper.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { readFileSync as readFileSync19 } from "node:fs";
+import { readFileSync as readFileSync21 } from "node:fs";
 import { dirname as dirname13 } from "node:path";
 function firstTokenBasename(command) {
   const first = command.trimStart().split(/\s+/, 1)[0] ?? "";
@@ -41572,7 +42100,7 @@ ${chunk}`;
   }
   return rows;
 }
-function reapSubtrees(seed, rows, protectedPids, live, kill = defaultKill) {
+function reapSubtrees(seed, rows, protectedPids, live, kill = defaultKill2) {
   const keep = (row) => protectedPids.has(row.pid) || isSessionRoot(row.command) || isTmuxServer(row.command) || row.slug !== null && live.has(row.slug);
   const order = subtreeKillOrder(seed, rows, keep);
   for (const pid of order) kill(pid);
@@ -41624,8 +42152,9 @@ function sweepOrphansOnce(deps = {}) {
   let rows;
   try {
     rows = enumerateProcs(exec, { platform: deps.platform, readEnv: deps.readEnv });
-  } catch {
-    return { reaped: 0, deadSlugs: [], liveSlugs: [] };
+  } catch (error) {
+    const code = error?.code;
+    return { reaped: 0, deadSlugs: [], liveSlugs: [], ...code === "ENOENT" ? { unavailable: "`ps` is not on PATH" } : {} };
   }
   const protectedPids = selfAndAncestors(rows, selfPid);
   const { reap, liveSlugs } = decideOrphans(rows, { minAgeMs, protectedPids });
@@ -41649,14 +42178,25 @@ function sweepStaleBrokerSockets() {
   }
 }
 function startOrphanReaper(deps = {}) {
+  if ((deps.platform ?? process.platform) === "win32") {
+    deps.log?.(UNAVAILABLE_ON_WINDOWS);
+    return () => {
+    };
+  }
   const intervalMs = deps.intervalMs ?? ORPHAN_REAP_INTERVAL_MS;
+  const unavailable = (result) => {
+    if (!result.unavailable) return false;
+    deps.log?.(`orphan-reaper: unavailable on this machine \u2014 ${result.unavailable}; background processes a stopped thread leaves behind are not collected here`);
+    return true;
+  };
   try {
-    sweepOrphansOnce(deps);
+    if (unavailable(sweepOrphansOnce(deps))) return () => {
+    };
   } catch {
   }
   const timer = setInterval(() => {
     try {
-      sweepOrphansOnce(deps);
+      if (unavailable(sweepOrphansOnce(deps))) clearInterval(timer);
     } catch {
     }
   }, intervalMs);
@@ -41671,7 +42211,7 @@ function startOrphanReaper(deps = {}) {
     clearInterval(socketTimer);
   };
 }
-var ORPHAN_REAP_INTERVAL_MS, ORPHAN_MIN_AGE_MS, SLUG_RE, defaultExec, defaultReadEnv, defaultKill, STALE_SOCKET_SWEEP_INTERVAL_MS, STALE_SOCKET_SWEEP_DELAY_MS, CLAUDE_BROKER_SOCKET_PREFIX;
+var ORPHAN_REAP_INTERVAL_MS, ORPHAN_MIN_AGE_MS, SLUG_RE, defaultExec, defaultReadEnv, defaultKill2, STALE_SOCKET_SWEEP_INTERVAL_MS, STALE_SOCKET_SWEEP_DELAY_MS, CLAUDE_BROKER_SOCKET_PREFIX, UNAVAILABLE_ON_WINDOWS;
 var init_orphan_reaper = __esm({
   "packages/server/src/orphan-reaper.ts"() {
     "use strict";
@@ -41683,12 +42223,12 @@ var init_orphan_reaper = __esm({
     defaultExec = (file, args) => execFileSync4(file, args, { encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 1e4 });
     defaultReadEnv = (pid) => {
       try {
-        return readFileSync19(`/proc/${pid}/environ`, "utf8");
+        return readFileSync21(`/proc/${pid}/environ`, "utf8");
       } catch {
         return null;
       }
     };
-    defaultKill = (pid) => {
+    defaultKill2 = (pid) => {
       try {
         process.kill(pid, "SIGKILL");
       } catch {
@@ -41697,6 +42237,7 @@ var init_orphan_reaper = __esm({
     STALE_SOCKET_SWEEP_INTERVAL_MS = 10 * 6e4;
     STALE_SOCKET_SWEEP_DELAY_MS = 3e4;
     CLAUDE_BROKER_SOCKET_PREFIX = "frizz-claude-";
+    UNAVAILABLE_ON_WINDOWS = "orphan-reaper: unavailable on Windows \u2014 a worker's FRIZZ_THREAD is read from its process environment, which Windows does not expose; background processes a stopped thread leaves behind are not collected here, and a live thread's runaway work is not reported";
   }
 });
 
@@ -41830,9 +42371,9 @@ var init_thread_hibernation = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
-import { homedir as homedir14 } from "node:os";
+import { homedir as homedir15 } from "node:os";
 function reconcileSessions(storage) {
   for (const row of storage.allSessions()) {
     if (isHeadlessRow(row)) continue;
@@ -41978,9 +42519,9 @@ async function createContext(opts = {}) {
   }
 }
 function createContextUnchecked(opts, resources) {
-  const home = opts.home ?? homedir14();
+  const home = opts.home ?? homedir15();
   const project = opts.project ?? resolveProject();
-  const storage = createStorage(opts.database ?? join33(project.stateDir, "ui.db"), project.id);
+  const storage = createStorage(opts.database ?? join34(project.stateDir, "ui.db"), project.id);
   resources.storage = storage;
   const bus = new Bus();
   const transcriptChange = new Emitter();
@@ -42090,7 +42631,10 @@ function createContextUnchecked(opts, resources) {
       const mode = PermissionMode.safeParse(row.permission_mode);
       if (!mode.success) return void 0;
       return codexSandbox(mode.data);
-    }
+    },
+    // Read at every thread/start and cold resume, so the Codex context window the operator picks in
+    // Settings reaches the next thread without an app-server restart.
+    getSettings: () => getSettings(storage, home)
   }) : void 0;
   resources.codexAppServer = codexAppServer;
   if (codexAppServer) {
@@ -45035,8 +45579,8 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync11, readFileSync as readFileSync20, writeFileSync as writeFileSync11 } from "node:fs";
-import { basename as basename7, dirname as dirname14, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync22, writeFileSync as writeFileSync11 } from "node:fs";
+import { basename as basename7, dirname as dirname14, resolve as resolve8 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
   return `"${v.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -45046,12 +45590,12 @@ function deriveTitle(body, slug) {
   return m ? m[1].trim() : slug;
 }
 function repairThreadFile(frizzDir, file) {
-  const root = resolve7(frizzDir);
-  const abs = resolve7(root, file);
+  const root = resolve8(frizzDir);
+  const abs = resolve8(root, file);
   if (dirname14(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
-  if (!existsSync11(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
-  const content = readFileSync20(abs, "utf8");
+  if (!existsSync12(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
+  const content = readFileSync22(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
     throw new RepairError(`${basename7(abs)} already opens with a "---" block \u2014 repair only heals a MISSING frontmatter block`);
@@ -45242,9 +45786,9 @@ var init_repo_files = __esm({
 });
 
 // cc-worker/hooks/bash-background.mjs
-import { readFileSync as readFileSync21 } from "node:fs";
+import { readFileSync as readFileSync23, realpathSync as realpathSync10 } from "node:fs";
 import { basename as basename8 } from "node:path";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 function emit(obj) {
   process.stdout.write(JSON.stringify(obj));
   process.exit(0);
@@ -45380,8 +45924,14 @@ function evaluateBashBackgroundHook(input, env = process.env) {
     }
   };
 }
-function isDirectHookExecution(argv1, moduleUrl) {
-  return typeof argv1 === "string" && basename8(argv1) === "bash-background.mjs" && pathToFileURL(argv1).href === moduleUrl;
+function isDirectHookExecution(argv1, moduleUrl, realpath = realpathSync10) {
+  if (typeof argv1 !== "string" || basename8(argv1) !== "bash-background.mjs") return false;
+  if (pathToFileURL(argv1).href === moduleUrl) return true;
+  try {
+    return realpath(argv1) === realpath(fileURLToPath4(moduleUrl));
+  } catch {
+    return false;
+  }
 }
 var LOCAL_SHELL_SCRIPT;
 var init_bash_background = __esm({
@@ -45391,7 +45941,7 @@ var init_bash_background = __esm({
     if (isDirectHookExecution(process.argv[1], import.meta.url)) {
       try {
         const env = process.argv.includes("--frizz-thread") ? { ...process.env, FRIZZ_THREAD: process.env.FRIZZ_THREAD || "codex-worker" } : process.env;
-        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync21(0, "utf8")), env));
+        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync23(0, "utf8")), env));
       } catch {
         emit({});
       }
@@ -45400,11 +45950,11 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync13, existsSync as existsSync12, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync22, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { closeSync as closeSync13, existsSync as existsSync13, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync24, readSync as readSync7, renameSync as renameSync9, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
-import { join as join34 } from "node:path";
-import { homedir as homedir15 } from "node:os";
+import { join as join35 } from "node:path";
+import { homedir as homedir16 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
   if (n >= 1e3) return `${Math.round(n / 1e3)}k`;
@@ -45983,14 +46533,14 @@ function pruneScreenshotCache() {
     if (entries2.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries2.map((n) => {
       try {
-        return { n, m: statSync14(join34(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync15(join35(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync5(join34(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync5(join35(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -46020,14 +46570,14 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path3 = join34(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path3 = join35(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
-    if (existsSync12(path3)) return path3;
+    if (existsSync13(path3)) return path3;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join35(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, path3);
     pruneScreenshotCache();
@@ -46042,14 +46592,14 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join34(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
-    if (existsSync12(dest)) return dest;
-    const size = statSync14(srcPath).size;
+    const dest = join35(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    if (existsSync13(dest)) return dest;
+    const size = statSync15(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
-    const buf = readFileSync22(srcPath);
+    const buf = readFileSync24(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join35(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, dest);
     pruneScreenshotCache();
@@ -46487,7 +47037,7 @@ function readTranscript(project, sessionId) {
 }
 function verifyIncrementalParse(path3, identityPrefix, incremental) {
   try {
-    const fresh = parseTranscript(readFileSync22(path3, "utf8"), identityPrefix);
+    const fresh = parseTranscript(readFileSync24(path3, "utf8"), identityPrefix);
     const a = JSON.stringify(incremental);
     const b = JSON.stringify(fresh);
     if (a !== b) {
@@ -46507,16 +47057,16 @@ function verifyIncrementalParse(path3, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join34(homedir15(), ".claude", "projects", project.cwdSlug);
+  return join35(homedir16(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path3 = join34(logDirOf(project), `${sessionId}.jsonl`);
+  const path3 = join35(logDirOf(project), `${sessionId}.jsonl`);
   try {
-    if (statSync14(path3).size > 0) return path3;
+    if (statSync15(path3).size > 0) return path3;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join34(stranded, `${sessionId}.jsonl`) : path3;
+  return stranded ? join35(stranded, `${sessionId}.jsonl`) : path3;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -46581,8 +47131,9 @@ ${text2}` : text2;
         }
         case "tool-call": {
           const m = openAssistant(ev.at, sourceId);
-          const call = codexToolCall(ev.name, ev.input, ev.id);
-          call.status = "pending";
+          const split = codexToolCards(ev.name, ev.input, ev.id);
+          const call = split.owner;
+          for (const card of split.cards) card.status = "pending";
           if (pendingCaption) {
             if (!call.desc) call.desc = pendingCaption;
             pendingCaption = void 0;
@@ -46592,8 +47143,10 @@ ${text2}` : text2;
           const interruptedOwner = call.name === "Interrupt process" && call.sessionId !== void 0 ? shellSessions.get(runningKey("Poll process", call.sessionId)) : void 0;
           if (!owner) {
             if (isPoll) call.backgroundState = "unknown";
-            pushToolPart(m, call);
-            m.tools.push(call);
+            for (const card of split.cards) {
+              pushToolPart(m, card);
+              m.tools.push(card);
+            }
           }
           if (call.name === "Spawn agent" && call.detail) agentDispatches.set(call.detail, { call, at: ev.at });
           if (ev.id) pendingCalls.set(ev.id, {
@@ -46602,7 +47155,8 @@ ${text2}` : text2;
             owner,
             interruptedOwner,
             orphanPoll: isPoll && !owner,
-            explicitBackground: codexExplicitBackground(ev.name, ev.input)
+            explicitBackground: codexExplicitBackground(ev.name, ev.input),
+            ...split.cards.length > 1 ? { companions: split.cards.filter((card) => card !== call), views: split.views } : {}
           });
           break;
         }
@@ -46612,7 +47166,17 @@ ${text2}` : text2;
           pendingCalls.delete(ev.id);
           const result = codexToolResult(ev.text);
           if (result.durationMs === void 0) result.durationMs = elapsedBetween(pending.at, ev.at);
-          if (ev.image && result.status !== "failed" && result.status !== "cancelled") {
+          if (pending.companions) {
+            for (const card of pending.companions) card.status = result.status === "cancelled" ? "cancelled" : "completed";
+            if (result.status !== "cancelled") {
+              const inline = ev.images ?? (ev.image ? [ev.image] : []);
+              pending.views?.forEach((view, i) => {
+                if (view.outputImage || !inline[i]) return;
+                const shot = persistDataUrlImage(inline[i], `${ev.id}:view:${i}`);
+                if (shot) view.outputImage = shot;
+              });
+            }
+          } else if (ev.image && result.status !== "failed" && result.status !== "cancelled") {
             const shot = persistDataUrlImage(ev.image, ev.id);
             if (shot) (pending.owner ?? pending).call.outputImage = shot;
           }
@@ -46841,6 +47405,11 @@ function latestTranscriptWindow(messages) {
   }
   return [...earlierInstructions, ...messages.slice(start), ...pinned.slice(-MAX_PINNED_BACKGROUND_OPERATIONS)];
 }
+function codexToolCards(name, input, callId) {
+  if (name === "exec" && typeof input === "string") return codexExecWrapperCards(input, callId);
+  const owner = codexToolCall(name, input, callId);
+  return { owner, cards: [owner] };
+}
 function codexToolCall(name, input, callId) {
   if (name === "exec" && typeof input === "string") return codexExecWrapperCall(input, callId);
   const obj = input && typeof input === "object" && !Array.isArray(input) ? input : {};
@@ -46999,8 +47568,32 @@ function formatCompactDuration(ms) {
   if (minutes < 60) return `${minutes}m`;
   return minutes % 60 ? `${Math.floor(minutes / 60)}h ${minutes % 60}m` : `${Math.floor(minutes / 60)}h`;
 }
-function codexExecWrapperCall(source, callId) {
+function codexExecWrapperCards(source, callId) {
   const calls = wrappedInvocations(source);
+  const rest = [];
+  const views = [];
+  const order = [];
+  if (calls.length > 1) {
+    for (const call of calls) {
+      if (call.name !== "view_image") {
+        if (!rest.length) order.push("rest");
+        rest.push(call);
+        continue;
+      }
+      const view = viewImageCall(jsStringProperty(call.args, "path"), `${callId ?? source}:view:${views.length}`);
+      views.push(view);
+      order.push(view);
+    }
+  }
+  if (!views.length) {
+    const owner = codexExecWrapperCall(source, callId, calls);
+    return { owner, cards: [owner] };
+  }
+  const remainder = rest.length ? codexExecWrapperCall(source, callId, rest) : void 0;
+  const cards = order.map((entry) => entry === "rest" ? remainder : entry);
+  return { owner: remainder ?? views[0], cards, views };
+}
+function codexExecWrapperCall(source, callId, calls = wrappedInvocations(source)) {
   if (calls.length !== 1) {
     return {
       name: "Exec",
@@ -47008,7 +47601,9 @@ function codexExecWrapperCall(source, callId) {
       input: capToolInput(source.trim())
     };
   }
-  const call = calls[0];
+  return wrappedSingleCall(calls[0], source, callId);
+}
+function wrappedSingleCall(call, source, callId) {
   if (call.name === "exec_command") {
     const cmd = jsStringProperty(call.args, "cmd") ?? jsStringProperty(call.args, "command");
     const cwd = jsStringProperty(call.args, "workdir") ?? jsStringProperty(call.args, "cwd");
@@ -47384,7 +47979,7 @@ function unifiedToolResult(text2) {
   if (!header) return void 0;
   const wrapperStatus = header[1] === "failed" ? "failed" : header[1] === "terminated" ? "cancelled" : "completed";
   const wrapperDurationMs = Number(header[2]) * 1e3;
-  const body = raw2.slice(header[0].length).trim();
+  const body = raw2.slice(header[0].length).split("[image output]").join("").trim();
   if (!body || body === "{}") return { status: wrapperStatus, durationMs: wrapperDurationMs, terminal: true };
   try {
     const parsed = JSON.parse(body);
@@ -47498,7 +48093,7 @@ function sourceForThread(project, storage, slug, backendFor) {
   }
   if (!FOREIGN_SESSION_ID_RE.test(slug)) return void 0;
   const claudePath = resolveTranscriptPath(project, slug);
-  if (existsSync12(claudePath)) {
+  if (existsSync13(claudePath)) {
     return { slug, sessionId: slug, nativeId: slug, backend: "claude", runtimeGeneration: 0, path: claudePath };
   }
   const rollout = (backendFor?.("codex") ?? defaultCodexBackend()).transcriptPath(slug);
@@ -47764,7 +48359,7 @@ function readEarlierThreadTranscriptPage(project, storage, slug, cursor, backend
 }
 function readCodexTranscriptFile(absPath, nativeId = absPath) {
   try {
-    return parseCodexTranscript(readFileSync22(absPath, "utf8"), `codex:${nativeId}`);
+    return parseCodexTranscript(readFileSync24(absPath, "utf8"), `codex:${nativeId}`);
   } catch {
     return [];
   }
@@ -47862,7 +48457,7 @@ function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup) {
 function readTranscriptFile(absPath) {
   try {
     const pathKey = createHash13("sha256").update(absPath).digest("base64url").slice(0, 16);
-    return parseTranscript(readFileSync22(absPath, "utf8"), `claude-file:${pathKey}`);
+    return parseTranscript(readFileSync24(absPath, "utf8"), `claude-file:${pathKey}`);
   } catch {
     return [];
   }
@@ -47938,7 +48533,7 @@ var init_transcript = __esm({
 });
 
 // packages/server/src/open-external.ts
-import { spawn as spawn5 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 function validateExternalUrl(raw2) {
   let parsed;
   try {
@@ -47951,102 +48546,30 @@ function validateExternalUrl(raw2) {
   }
   return { ok: true, url: parsed.toString() };
 }
-function openExternalUrl(raw2) {
+function externalUrlOpenCommand(url, platform3 = process.platform) {
+  if (platform3 === "darwin") return { command: "open", args: [url] };
+  if (platform3 === "win32") return { command: "rundll32.exe", args: ["url.dll,FileProtocolHandler", url] };
+  return { command: "xdg-open", args: [url] };
+}
+async function openExternalUrl(raw2, options = {}) {
   const v = validateExternalUrl(raw2);
   if (!v.ok) throw new Error(v.reason);
-  const [cmd, args] = process.platform === "darwin" ? ["open", [v.url]] : ["xdg-open", [v.url]];
-  spawn5(cmd, args, { detached: true, stdio: "ignore" }).unref();
-}
-var init_open_external = __esm({
-  "packages/server/src/open-external.ts"() {
-    "use strict";
-  }
-});
-
-// packages/server/src/local-file.ts
-import { spawn as spawn6 } from "node:child_process";
-import { readFileSync as readFileSync23, realpathSync as realpathSync9, statSync as statSync15 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
-import { isAbsolute as isAbsolute4, join as join35, resolve as resolve8, sep as sep2 } from "node:path";
-function isUnder(real, root) {
-  let rootReal;
+  const spec = externalUrlOpenCommand(v.url, options.platform);
+  const child = (options.spawn ?? spawn6)(spec.command, [...spec.args], { detached: true, stdio: "ignore", windowsHide: true });
   try {
-    rootReal = realpathSync9(root);
-  } catch {
-    return false;
-  }
-  return real === rootReal || real.startsWith(rootReal.endsWith(sep2) ? rootReal : rootReal + sep2);
-}
-function resolveLocalFile(rawPath, roots) {
-  if (!isAbsolute4(rawPath)) throw new Error("Local path must be absolute");
-  let real;
-  try {
-    real = realpathSync9(rawPath);
-  } catch {
-    throw new Error("Local file was not found");
-  }
-  if (!roots.some((root) => isUnder(real, root))) throw new Error("Local file is outside Frizz's trusted roots");
-  try {
-    if (!statSync15(real).isFile()) throw new Error("Local path is not a regular file");
+    await awaitOpenerStart(child, spec.command);
+    return { opened: true };
   } catch (error) {
-    if (error instanceof Error && error.message === "Local path is not a regular file") throw error;
-    throw new Error("Local file was not found");
-  }
-  return real;
-}
-function resolveOpenableFile(raw2, projectDir, roots, home = homedir16()) {
-  const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
-  if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join35(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve8(projectDir, trimmed);
-  try {
-    return resolveLocalFile(abs, roots);
-  } catch {
-    return null;
-  }
-}
-function readLocalTextFile(rawPath, roots) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  const bytes = readFileSync23(path3);
-  if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
-  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
-  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
-  const lastBreak = head.lastIndexOf(10);
-  return { path: path3, text: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
-}
-function readLocalMarkdown(rawPath, roots) {
-  if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
-  const path3 = resolveLocalFile(rawPath, roots);
-  if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
-  const bytes = readFileSync23(path3);
-  if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
-  const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
-  const lastBreak = head.lastIndexOf(10);
-  return { path: path3, markdown: head.subarray(0, lastBreak > 0 ? lastBreak : head.length).toString("utf8"), truncated: true };
-}
-function resolveWatchableLocalFile(rawPath, roots) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  if (MARKDOWN_FILE_EXT.test(rawPath.trim()) && !MARKDOWN_FILE_EXT.test(path3)) {
-    throw new Error("Local file is not a Markdown file");
+    const message = error instanceof Error ? error.message : String(error);
+    (options.onError ?? ((line) => log.warn("open-external", line)))(`could not open ${v.url}: ${message}`);
+    return { opened: false, error: message };
   }
-  return path3;
-}
-function defaultSpawn(command, args, options) {
-  return spawn6(command, [...args], options);
-}
-function openLocalFile(rawPath, opener, roots, options = {}) {
-  const path3 = resolveLocalFile(rawPath, roots);
-  const selected = options.forceSystem ? "system" : opener;
-  if (selected === "copy") return { action: "copy", path: path3 };
-  const spec = process.platform === "darwin" ? selected === "cursor" ? ["open", ["-a", "Cursor", path3]] : selected === "vscode" ? ["open", ["-a", "Visual Studio Code", path3]] : selected === "finder" ? ["open", ["-R", path3]] : ["open", [path3]] : selected === "finder" ? ["xdg-open", [path3]] : selected === "cursor" ? ["cursor", [path3]] : selected === "vscode" ? ["code", [path3]] : ["xdg-open", [path3]];
-  (options.spawn ?? defaultSpawn)(spec[0], spec[1], { detached: true, stdio: "ignore", shell: false }).unref();
-  return { action: "opened", path: path3 };
 }
-var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT;
-var init_local_file = __esm({
-  "packages/server/src/local-file.ts"() {
+var init_open_external = __esm({
+  "packages/server/src/open-external.ts"() {
     "use strict";
-    MARKDOWN_FILE_EXT = /\.(?:md|mdx|markdown)$/i;
-    MARKDOWN_READ_LIMIT = 1024 * 1024;
+    init_local_file();
+    init_logging();
   }
 });
 
@@ -48375,7 +48898,14 @@ var init_account_actions = __esm({
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
-function providerResumeCommand(backend, projectDir, sessionId) {
+function powershellQuote(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
+function providerResumeCommand(backend, projectDir, sessionId, platform3 = process.platform) {
+  if (platform3 === "win32") {
+    const resume2 = backend === "codex" ? `& codex resume ${powershellQuote(sessionId)} --dangerously-bypass-approvals-and-sandbox` : `& claude --resume ${powershellQuote(sessionId)} --dangerously-skip-permissions`;
+    return `Set-Location -LiteralPath ${powershellQuote(projectDir)}; ${resume2}`;
+  }
   const resume = backend === "codex" ? `codex resume ${shellQuote(sessionId)} --dangerously-bypass-approvals-and-sandbox` : `claude --resume ${shellQuote(sessionId)} --dangerously-skip-permissions`;
   return `cd ${shellQuote(projectDir)} && ${resume}`;
 }
@@ -48723,11 +49253,11 @@ var init_directory_picker = __esm({
 });
 
 // packages/server/src/router.ts
-import { readFileSync as readFileSync24, statSync as statSync17 } from "node:fs";
+import { readFileSync as readFileSync25, statSync as statSync17 } from "node:fs";
 import { join as join36, resolve as resolve9 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { basename as basename9, dirname as dirname15 } from "node:path";
-import { existsSync as existsSync13, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 function validateGithubDispatchProfile(input) {
   validateThreadProfile(input.backend, input.model, input.effort);
@@ -48937,7 +49467,7 @@ function storeProjectIcon(id, name, bytes) {
 function setProjectIconFromFile(id, file) {
   let bytes;
   try {
-    bytes = readFileSync24(file);
+    bytes = readFileSync25(file);
   } catch {
     throw new Error("That file could not be read.");
   }
@@ -50164,7 +50694,7 @@ ${gapNote}` : input.message;
             since: new Date(w.created_at).toISOString()
           });
         }
-        return { activity, questions: openQuestionViews(input.slug) };
+        return { activity, questions: openQuestionViews(input.slug), links: ctx.storage.listThreadLinks(input.slug).map(threadLinkView) };
       }
     }),
     // THE WATCHER REGISTRY WAS DELETED ON 2026-08-14 AND CAME BACK ON 2026-08-26, under two narrow verbs
@@ -50178,6 +50708,34 @@ ${gapNote}` : input.message;
     // binary naming them and gets a 404, which is the honest answer: its arguments do not fit this
     // registry (there is no `for:` in them at all), so an alias would have to invent the one field that
     // must not be guessed at.
+    upsertOwnLink: mutation({
+      input: UpsertOwnLinkInput,
+      output: UpsertOwnLinkResult,
+      handler: async ({ input }) => {
+        const row = ctx.storage.getSession(input.slug);
+        if (!row) throw new Error(`thread ${input.slug} is not registered`);
+        if (row.state === "archived" || row.archived === 1) throw new Error("Reopen this thread before registering a link");
+        const destination = resolveThreadLink(input.target, ctx.project.dir, openRoots);
+        const link = ctx.storage.upsertThreadLink({
+          id: `lnk_${randomUUID16().replace(/-/g, "").slice(0, 12)}`,
+          slug: input.slug,
+          label: input.label,
+          ...destination,
+          createdAtMs: Date.now()
+        });
+        ctx.board.refresh();
+        return { link: threadLinkView(link) };
+      }
+    }),
+    dropOwnLink: mutation({
+      input: DropOwnLinkInput,
+      output: DropOwnLinkResult,
+      handler: async ({ input }) => {
+        const dropped = ctx.storage.dropThreadLink(input.slug, input.id);
+        if (dropped) ctx.board.refresh();
+        return { dropped };
+      }
+    }),
     // ---- REGISTERED PR WATCHERS (add / drop / list) ---------------------------------------------
     // The worker's own PR watchers, from `mcp__frizz__watch_pr`. Same caller and therefore the same rules
     // as the timers above: slug-only (the MCP server outlives the session ids underneath it), and no
@@ -50529,7 +51087,8 @@ Say which way you went and why in your write-up, so the human can course-correct
     openExternal: mutation({
       input: external_exports.object({ url: external_exports.string() }),
       handler: async ({ input }) => {
-        openExternalUrl(input.url);
+        const result = await openExternalUrl(input.url);
+        if (!result.opened) throw new Error(result.error);
       }
     }),
     // A local file can be opened only after its canonical real path is contained by the openable roots
@@ -50937,7 +51496,7 @@ Say which way you went and why in your write-up, so the human can course-correct
         }
         const updated = clearProjectIcon(input.id);
         if (!updated) throw new Error("No such project.");
-        return projectCard(updated, !existsSync13(updated.path));
+        return projectCard(updated, !existsSync14(updated.path));
       }
     }),
     /**
@@ -51121,6 +51680,7 @@ var init_router5 = __esm({
     init_open_external();
     init_local_file();
     init_project();
+    init_thread_links();
     init_github();
     init_github_hovercard();
     init_dispatch();
@@ -51342,21 +51902,21 @@ var init_compression = __esm({
 });
 
 // packages/server/src/local-image.ts
-import { readFileSync as readFileSync25, realpathSync as realpathSync10, statSync as statSync18 } from "node:fs";
-import { extname as extname2, isAbsolute as isAbsolute5 } from "node:path";
+import { readFileSync as readFileSync26, realpathSync as realpathSync11, statSync as statSync18 } from "node:fs";
+import { extname as extname2, isAbsolute as isAbsolute6 } from "node:path";
 function resolveLocalImage(rawPath) {
-  if (!rawPath || !isAbsolute5(rawPath)) return { status: 400 };
+  if (!rawPath || !isAbsolute6(rawPath)) return { status: 400 };
   const contentType = IMAGE_CONTENT_TYPE[extname2(rawPath).toLowerCase()];
   if (!contentType) return { status: 400 };
   let real;
   try {
-    real = realpathSync10(rawPath);
+    real = realpathSync11(rawPath);
   } catch {
     return { status: 404 };
   }
   try {
     if (!statSync18(real).isFile()) return { status: 404 };
-    return { status: 200, contentType, body: readFileSync25(real) };
+    return { status: 200, contentType, body: readFileSync26(real) };
   } catch {
     return { status: 404 };
   }
@@ -51376,7 +51936,7 @@ var init_local_image = __esm({
 });
 
 // packages/server/src/project-icon.ts
-import { readFileSync as readFileSync26, readdirSync as readdirSync10, realpathSync as realpathSync11, statSync as statSync19 } from "node:fs";
+import { readFileSync as readFileSync27, readdirSync as readdirSync10, realpathSync as realpathSync12, statSync as statSync19 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
 import { basename as basename10, dirname as dirname16, extname as extname3, join as join37, relative as relative2, sep as sep3 } from "node:path";
 function normalizeStem(stem) {
@@ -51438,7 +51998,7 @@ function iconDirectories(root) {
 function manifestIcons(manifestPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync26(manifestPath, "utf8"));
+    parsed = JSON.parse(readFileSync27(manifestPath, "utf8"));
   } catch {
     return [];
   }
@@ -51525,21 +52085,21 @@ function resolveProjectIconResponse(id, options = {}) {
   if (!contentType) return { status: 404 };
   let real;
   try {
-    real = realpathSync11(path3);
+    real = realpathSync12(path3);
     if (!statSync19(real).isFile()) return { status: 404 };
   } catch {
     return { status: 404 };
   }
   const roots = [entry.path, projectStateDir(id, home)].map((root) => {
     try {
-      return realpathSync11(root);
+      return realpathSync12(root);
     } catch {
       return root;
     }
   });
   if (!roots.some((root) => real === root || real.startsWith(root + sep3))) return { status: 404 };
   try {
-    return { status: 200, contentType, body: readFileSync26(real) };
+    return { status: 200, contentType, body: readFileSync27(real) };
   } catch {
     return { status: 404 };
   }
@@ -51651,7 +52211,7 @@ var init_project_icon = __esm({
 });
 
 // packages/server/src/local-visualization.ts
-import { readdirSync as readdirSync11, readFileSync as readFileSync27, realpathSync as realpathSync12, statSync as statSync20 } from "node:fs";
+import { readdirSync as readdirSync11, readFileSync as readFileSync28, realpathSync as realpathSync13, statSync as statSync20 } from "node:fs";
 import { join as join38, sep as sep4 } from "node:path";
 function children(path3, pattern) {
   try {
@@ -51668,8 +52228,8 @@ function resolveFragment(projectDir, sessionId, file) {
   let projectReal;
   let baseReal;
   try {
-    projectReal = realpathSync12(projectDir);
-    baseReal = realpathSync12(base);
+    projectReal = realpathSync13(projectDir);
+    baseReal = realpathSync13(base);
   } catch {
     return null;
   }
@@ -51682,7 +52242,7 @@ function resolveFragment(projectDir, sessionId, file) {
         const sessionRoot = join38(baseReal, year, month, day, sessionId);
         const candidate = join38(monthDir, day, sessionId, file);
         try {
-          const real = realpathSync12(candidate);
+          const real = realpathSync13(candidate);
           if (isUnder2(real, sessionRoot) && statSync20(real).isFile()) return real;
         } catch {
         }
@@ -51766,7 +52326,7 @@ function resolveLocalVisualization(projectDir, sessionId, file) {
   try {
     const size = statSync20(path3).size;
     if (size > MAX_FRAGMENT_BYTES) return { status: 413 };
-    fragment = readFileSync27(path3, "utf8");
+    fragment = readFileSync28(path3, "utf8");
   } catch {
     return { status: 404 };
   }
@@ -53288,7 +53848,7 @@ var init_local_file_watch = __esm({
 });
 
 // packages/server/src/boot-progress.ts
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync28, renameSync as renameSync10, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync29, renameSync as renameSync10, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
 import { basename as basename12, dirname as dirname18, join as join40 } from "node:path";
 function bootProgressPath(stateDir) {
   return join40(stateDir, BOOT_PROGRESS_NAME);
@@ -53336,30 +53896,111 @@ var init_boot_progress = __esm({
   }
 });
 
+// packages/server/src/runtime-lease.ts
+import { existsSync as existsSync15, mkdirSync as mkdirSync19, readdirSync as readdirSync12, readFileSync as readFileSync30, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname19, join as join41 } from "node:path";
+function runtimeVersionDir(bin) {
+  let dir = dirname19(bin);
+  for (let step = 0; step < MAX_ASCENT; step++) {
+    if (existsSync15(join41(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname19(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+  return void 0;
+}
+function pidAlive4(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+}
+function leaseRuntime(bin, role) {
+  const versionDir = runtimeVersionDir(bin);
+  if (!versionDir) return () => {
+  };
+  const path3 = join41(versionDir, LEASES_DIR, `${process.pid}.json`);
+  try {
+    mkdirSync19(dirname19(path3), { recursive: true });
+    const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
+    writeFileSync16(path3, JSON.stringify(lease));
+  } catch {
+    return () => {
+    };
+  }
+  return () => {
+    try {
+      unlinkSync6(path3);
+    } catch {
+    }
+  };
+}
+function liveRuntimeLeases(versionDir) {
+  const dir = join41(versionDir, LEASES_DIR);
+  let names;
+  try {
+    names = readdirSync12(dir);
+  } catch {
+    return [];
+  }
+  const live = [];
+  for (const name of names) {
+    if (!name.endsWith(".json")) continue;
+    const path3 = join41(dir, name);
+    let lease;
+    try {
+      lease = JSON.parse(readFileSync30(path3, "utf8"));
+    } catch {
+      continue;
+    }
+    if (typeof lease.pid !== "number" || !pidAlive4(lease.pid)) {
+      try {
+        unlinkSync6(path3);
+      } catch {
+      }
+      ;
+      continue;
+    }
+    live.push({ pid: lease.pid, role: typeof lease.role === "string" ? lease.role : "unknown", bin: typeof lease.bin === "string" ? lease.bin : "", at: typeof lease.at === "string" ? lease.at : "" });
+  }
+  return live;
+}
+var PROVISIONED_MARKER, LEASES_DIR, MAX_ASCENT;
+var init_runtime_lease = __esm({
+  "packages/server/src/runtime-lease.ts"() {
+    "use strict";
+    PROVISIONED_MARKER = "provisioned.json";
+    LEASES_DIR = ".leases";
+    MAX_ASCENT = 6;
+  }
+});
+
 // packages/server/src/runtimes.ts
 import { createHash as createHash15 } from "node:crypto";
 import {
   chmodSync,
   closeSync as closeSync16,
-  existsSync as existsSync14,
-  mkdirSync as mkdirSync19,
+  existsSync as existsSync16,
+  mkdirSync as mkdirSync20,
   openSync as openSync17,
-  readFileSync as readFileSync29,
-  readdirSync as readdirSync12,
+  readFileSync as readFileSync31,
+  readdirSync as readdirSync13,
   renameSync as renameSync11,
   rmSync as rmSync12,
   statSync as statSync22,
-  writeFileSync as writeFileSync16,
+  writeFileSync as writeFileSync17,
   writeSync as writeSync2
 } from "node:fs";
-import { dirname as dirname19, isAbsolute as isAbsolute6, join as join41, normalize, relative as relative3, sep as sep5 } from "node:path";
+import { dirname as dirname20, isAbsolute as isAbsolute7, join as join42, normalize, relative as relative3, sep as sep5 } from "node:path";
 import { Readable, Transform, Writable as Writable3 } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGunzip } from "node:zlib";
 function runtimesRoot(env = process.env) {
   const override = env[RUNTIMES_DIR_ENV];
-  if (override && isAbsolute6(override)) return override;
-  return join41(frizzRoots().cache, "runtimes");
+  if (override && isAbsolute7(override)) return override;
+  return join42(frizzRoots().cache, "runtimes");
 }
 function isMusl() {
   if (process.platform !== "linux") return false;
@@ -53376,16 +54017,16 @@ function runtimeCoordinates(backend, platform3 = process.platform, arch = proces
   return { pkg: "@openai/codex", packageVersion: `${CODEX_VERSION}-${platform3}-${arch}`, label: CODEX_VERSION, binary: `codex${exe}` };
 }
 function provisionedBinary(backend, root, label) {
-  const dir = join41(root, backend, label);
+  const dir = join42(root, backend, label);
   let marker;
   try {
-    marker = JSON.parse(readFileSync29(join41(dir, MARKER), "utf8"));
+    marker = JSON.parse(readFileSync31(join42(dir, MARKER), "utf8"));
   } catch {
     return void 0;
   }
   if (typeof marker.binary !== "string" || marker.label !== label) return void 0;
-  const bin = join41(dir, marker.binary);
-  return existsSync14(bin) ? bin : void 0;
+  const bin = join42(dir, marker.binary);
+  return existsSync16(bin) ? bin : void 0;
 }
 function octal(buffer, offset, length) {
   const text2 = buffer.toString("latin1", offset, offset + length).replace(/\0.*$/su, "").trim();
@@ -53398,27 +54039,27 @@ function safeEntryPath(dest, name) {
   const parts = name.split("/").filter((part) => part.length > 0);
   if (parts.length < 2) return void 0;
   const rel = normalize(parts.slice(1).join(sep5));
-  if (isAbsolute6(rel) || rel === ".." || rel.startsWith(`..${sep5}`)) return void 0;
-  const full = join41(dest, rel);
+  if (isAbsolute7(rel) || rel === ".." || rel.startsWith(`..${sep5}`)) return void 0;
+  const full = join42(dest, rel);
   const back = relative3(dest, full);
-  if (back.startsWith("..") || isAbsolute6(back)) return void 0;
+  if (back.startsWith("..") || isAbsolute7(back)) return void 0;
   return full;
 }
 function locateBinary(dir, backend, binary) {
   if (backend === "claude") {
-    const direct = join41(dir, binary);
-    return existsSync14(direct) ? direct : void 0;
+    const direct = join42(dir, binary);
+    return existsSync16(direct) ? direct : void 0;
   }
-  const vendor = join41(dir, "vendor");
+  const vendor = join42(dir, "vendor");
   let triples;
   try {
-    triples = readdirSync12(vendor);
+    triples = readdirSync13(vendor);
   } catch {
     return void 0;
   }
   for (const triple of triples) {
-    const candidate = join41(vendor, triple, "bin", binary);
-    if (existsSync14(candidate)) return candidate;
+    const candidate = join42(vendor, triple, "bin", binary);
+    if (existsSync16(candidate)) return candidate;
   }
   return void 0;
 }
@@ -53433,12 +54074,12 @@ async function provisionRuntime(backend, options) {
   const registry = options.registry ?? REGISTRY;
   const progress = options.onProgress ?? (() => {
   });
-  const backendDir = join41(root, backend);
-  const finalDir = join41(backendDir, coordinates.label);
-  const partial = join41(backendDir, `.partial-${coordinates.label}-${process.pid}`);
-  mkdirSync19(backendDir, { recursive: true });
+  const backendDir = join42(root, backend);
+  const finalDir = join42(backendDir, coordinates.label);
+  const partial = join42(backendDir, `.partial-${coordinates.label}-${process.pid}`);
+  mkdirSync20(backendDir, { recursive: true });
   rmSync12(partial, { recursive: true, force: true });
-  mkdirSync19(partial);
+  mkdirSync20(partial);
   try {
     const manifestUrl = `${registry}/${coordinates.pkg.replace("/", "%2F")}/${coordinates.packageVersion}`;
     progress(`resolving ${coordinates.pkg}@${coordinates.packageVersion}`);
@@ -53482,10 +54123,19 @@ async function provisionRuntime(backend, options) {
       binary: relative3(partial, bin),
       at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    writeFileSync16(join41(partial, MARKER), `${JSON.stringify(marker, null, 2)}
+    writeFileSync17(join42(partial, MARKER), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
+    const rename2 = options.rename ?? renameSync11;
     try {
-      renameSync11(partial, finalDir);
+      for (let attempt = 1; ; attempt++) {
+        try {
+          rename2(partial, finalDir);
+          break;
+        } catch (err) {
+          if (attempt >= RENAME_ATTEMPTS || !TRANSIENT_HANDLE_CODES.has(errorCode4(err) ?? "") || existsSync16(finalDir)) throw err;
+          await new Promise((resolve12) => setTimeout(resolve12, options.retryDelayMs ?? RENAME_RETRY_DELAY_MS));
+        }
+      }
     } catch (err) {
       const theirs = provisionedBinary(backend, root, coordinates.label);
       if (!theirs) throw err;
@@ -53493,35 +54143,48 @@ async function provisionRuntime(backend, options) {
       return { bin: theirs, label: coordinates.label, fetched: false };
     }
     progress("ready");
-    return { bin: join41(finalDir, marker.binary), label: coordinates.label, fetched: true };
+    return { bin: join42(finalDir, marker.binary), label: coordinates.label, fetched: true };
   } catch (err) {
     rmSync12(partial, { recursive: true, force: true });
     throw err;
   }
 }
-function sweepRuntimes(backend, root, keepLabel, now = Date.now()) {
-  const backendDir = join41(root, backend);
+function sweepRuntimes(backend, root, keepLabel, now = Date.now(), deps = {}) {
+  const rm2 = deps.rm ?? defaultSweepRm;
+  const backendDir = join42(root, backend);
   let entries2;
   try {
-    entries2 = readdirSync12(backendDir);
+    entries2 = readdirSync13(backendDir);
   } catch {
-    return [];
+    return { removed: [], kept: [] };
   }
-  const removed = [];
+  const sweep = { removed: [], kept: [] };
   for (const entry of entries2) {
     if (entry === keepLabel) continue;
-    const full = join41(backendDir, entry);
+    const full = join42(backendDir, entry);
     if (entry.startsWith(".partial-")) {
       try {
         if (now - statSync22(full).mtimeMs < 24 * 60 * 60 * 1e3) continue;
       } catch {
         continue;
       }
+    } else {
+      const leases = liveRuntimeLeases(full);
+      if (leases.length > 0) {
+        sweep.kept.push({ dir: full, leases: leases.map(({ pid, role }) => ({ pid, role })) });
+        continue;
+      }
+    }
+    try {
+      rm2(full);
+      sweep.removed.push(full);
+    } catch (err) {
+      const code = errorCode4(err);
+      const reason = code && TRANSIENT_HANDLE_CODES.has(code) ? `in use (${code})` : `could not remove: ${err instanceof Error ? err.message : String(err)}`;
+      sweep.kept.push({ dir: full, leases: [], reason });
     }
-    rmSync12(full, { recursive: true, force: true });
-    removed.push(full);
   }
-  return removed;
+  return sweep;
 }
 async function resolveOne(backend, explicit, options) {
   const env = options.env ?? process.env;
@@ -53538,22 +54201,34 @@ async function resolveOne(backend, explicit, options) {
     return { bin: bare, source: "path", version: "unknown", note };
   }
   const root = options.root ?? runtimesRoot(env);
+  let provisioned;
   try {
-    const provisioned = await provisionRuntime(backend, {
+    provisioned = await provisionRuntime(backend, {
       root,
       coordinates,
       fetch: options.fetch,
       registry: options.registry,
+      rename: options.rename,
       onProgress: (message) => options.onProgress?.(backend, message)
     });
-    if (provisioned.fetched) log3("info", `runtimes: provisioned ${backend} ${provisioned.label} at ${provisioned.bin}`);
-    for (const retired of sweepRuntimes(backend, root, coordinates.label)) log3("info", `runtimes: retired ${retired}`);
-    return { bin: provisioned.bin, source: "provisioned", version: provisioned.label };
   } catch (err) {
     const note = err instanceof Error ? err.message : String(err);
     log3("warn", `runtimes: could not provision ${backend} ${coordinates.label} (${note}); using ${bare} from PATH \u2014 the version Frizz was built against is not what will run`);
     return { bin: bare, source: "path", version: "unknown", note };
   }
+  if (provisioned.fetched) log3("info", `runtimes: provisioned ${backend} ${provisioned.label} at ${provisioned.bin}`);
+  leaseRuntime(provisioned.bin, "server");
+  try {
+    const sweep = sweepRuntimes(backend, root, coordinates.label, Date.now(), { rm: options.rm });
+    for (const retired of sweep.removed) log3("info", `runtimes: retired ${retired}`);
+    for (const { dir, leases, reason } of sweep.kept) {
+      const why = reason ?? `still used by ${leases.map((lease) => `${lease.role} pid ${lease.pid}`).join(", ")}`;
+      log3("info", `runtimes: kept ${dir} \u2014 ${why}`);
+    }
+  } catch (err) {
+    log3("warn", `runtimes: sweep of superseded ${backend} versions failed (${err instanceof Error ? err.message : String(err)}); the pin is unaffected`);
+  }
+  return { bin: provisioned.bin, source: "provisioned", version: provisioned.label };
 }
 async function resolveRuntimes(options = {}) {
   const [claude, codex] = await Promise.all([
@@ -53572,12 +54247,13 @@ function describeRuntime(backend, runtime) {
       return `${backend}: ${runtime.bin} from PATH${runtime.note ? ` \u2014 ${runtime.note}` : ""}`;
   }
 }
-var CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_VERSION, CODEX_VERSION, RUNTIMES_MODE_ENV, RUNTIMES_DIR_ENV, CLAUDE_BIN_ENV, CODEX_BIN_ENV, REGISTRY, MARKER, BLOCK, TarExtractor;
+var CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_VERSION, CODEX_VERSION, RUNTIMES_MODE_ENV, RUNTIMES_DIR_ENV, CLAUDE_BIN_ENV, CODEX_BIN_ENV, REGISTRY, MARKER, BLOCK, TarExtractor, RENAME_ATTEMPTS, RENAME_RETRY_DELAY_MS, TRANSIENT_HANDLE_CODES, errorCode4, defaultSweepRm;
 var init_runtimes = __esm({
   "packages/server/src/runtimes.ts"() {
     "use strict";
     init_codex_app_server();
     init_frizz_paths();
+    init_runtime_lease();
     CLAUDE_AGENT_SDK_VERSION = "0.3.268";
     CLAUDE_CODE_VERSION = "2.1.268";
     CODEX_VERSION = CODEX_APP_SERVER_SUPPORTED_VERSION;
@@ -53668,7 +54344,7 @@ var init_runtimes = __esm({
             return;
           case "5": {
             const dir = safeEntryPath(this.dest, name);
-            if (dir) mkdirSync19(dir, { recursive: true });
+            if (dir) mkdirSync20(dir, { recursive: true });
             return;
           }
           case "0":
@@ -53676,7 +54352,7 @@ var init_runtimes = __esm({
           case "7": {
             const file = safeEntryPath(this.dest, name);
             if (!file) return;
-            mkdirSync19(dirname19(file), { recursive: true });
+            mkdirSync20(dirname20(file), { recursive: true });
             this.fd = openSync17(file, "w", octal(header, 100, 8) & 511 || 420);
             this.written.push(file);
             return;
@@ -53716,6 +54392,11 @@ var init_runtimes = __esm({
         }
       }
     };
+    RENAME_ATTEMPTS = 5;
+    RENAME_RETRY_DELAY_MS = 200;
+    TRANSIENT_HANDLE_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
+    errorCode4 = (err) => err?.code;
+    defaultSweepRm = (path3) => rmSync12(path3, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
   }
 });
 
@@ -54248,18 +54929,18 @@ var init_legacy_project_db = __esm({
 });
 
 // packages/server/src/frizz-db.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync20, readdirSync as readdirSync13, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
-import { basename as basename13, dirname as dirname20, join as join42 } from "node:path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync21, readdirSync as readdirSync14, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
+import { basename as basename13, dirname as dirname21, join as join43 } from "node:path";
 function frizzDatabaseLocation(options) {
   if (options.stateDir !== void 0) {
-    const projectsDir = dirname20(options.stateDir);
+    const projectsDir = dirname21(options.stateDir);
     if (basename13(projectsDir) === "projects") {
-      return { path: options.path ?? join42(dirname20(projectsDir), "ui.db"), projectsDir };
+      return { path: options.path ?? join43(dirname21(projectsDir), "ui.db"), projectsDir };
     }
-    return { path: options.path ?? join42(options.stateDir, "ui.db"), projectsDir: void 0 };
+    return { path: options.path ?? join43(options.stateDir, "ui.db"), projectsDir: void 0 };
   }
   const data = options.home ? frizzPaths({ home: options.home }).data : frizzRoots().data;
-  return { path: options.path ?? join42(data, "ui.db"), projectsDir: join42(data, "projects") };
+  return { path: options.path ?? join43(data, "ui.db"), projectsDir: join43(data, "projects") };
 }
 function ensureFrizzSchema(db) {
   db.exec(`
@@ -54278,7 +54959,7 @@ function ensureFrizzSchema(db) {
 }
 function openFrizzDatabase(options = {}) {
   const { path: path3, projectsDir } = frizzDatabaseLocation(options);
-  mkdirSync20(dirname20(path3), { recursive: true });
+  mkdirSync21(dirname21(path3), { recursive: true });
   const db = new sqlite_default(path3);
   db.pragma("busy_timeout = 5000");
   db.pragma("journal_mode = WAL");
@@ -54290,10 +54971,10 @@ function openFrizzDatabase(options = {}) {
     );
     for (const projectId of retiredLegacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const dir = join42(projectsDir, projectId);
+      const dir = join43(projectsDir, projectId);
       try {
-        renameSync12(join42(dir, "ui.db.imported"), join42(dir, "ui.db"));
-        db.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join42(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
+        renameSync12(join43(dir, "ui.db.imported"), join43(dir, "ui.db"));
+        db.prepare("INSERT INTO imported_project (project_id, source, rows, imported_at) VALUES (?, ?, 0, ?)").run(projectId, join43(dir, "ui.db"), (/* @__PURE__ */ new Date()).toISOString());
         alreadyImported.add(projectId);
         log.info("frizz-db", `${projectId}: restored ui.db.imported to ui.db and recorded it as imported`);
       } catch (error) {
@@ -54303,7 +54984,7 @@ function openFrizzDatabase(options = {}) {
     }
     for (const projectId of legacyProjectIds(projectsDir)) {
       if (alreadyImported.has(projectId)) continue;
-      const legacyPath = join42(projectsDir, projectId, "ui.db");
+      const legacyPath = join43(projectsDir, projectId, "ui.db");
       try {
         const rows = importLegacyProject(db, projectId, legacyPath);
         imported.push({ projectId, rows });
@@ -54333,10 +55014,10 @@ function openFrizzDatabase(options = {}) {
   };
 }
 function projectIdsWithFile(projectsDir, file) {
-  if (!existsSync15(projectsDir)) return [];
-  return readdirSync13(projectsDir).filter((name) => {
+  if (!existsSync17(projectsDir)) return [];
+  return readdirSync14(projectsDir).filter((name) => {
     try {
-      return statSync23(join42(projectsDir, name, file)).isFile();
+      return statSync23(join43(projectsDir, name, file)).isFile();
     } catch {
       return false;
     }
@@ -54346,7 +55027,7 @@ function legacyProjectIds(projectsDir) {
   return projectIdsWithFile(projectsDir, "ui.db");
 }
 function retiredLegacyProjectIds(projectsDir) {
-  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync15(join42(projectsDir, id, "ui.db")));
+  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync17(join43(projectsDir, id, "ui.db")));
 }
 function tableColumns(db, schema, table) {
   return db.prepare(`PRAGMA ${schema}.table_info(${table})`).all().map((c) => c.name);
@@ -54502,7 +55183,7 @@ var init_tenant_prime = __esm({
 // packages/server/src/project-teardown.ts
 import { rmSync as rmSync13 } from "node:fs";
 import { homedir as homedir19 } from "node:os";
-import { dirname as dirname21, resolve as resolve10 } from "node:path";
+import { dirname as dirname22, resolve as resolve10 } from "node:path";
 async function stopProjectWorkers(ctx) {
   let stopped = 0;
   for (const row of ctx.storage.allSessions()) {
@@ -54522,7 +55203,7 @@ function deleteProjectState(projectId, home = homedir19()) {
   if (!/^[\w.-]+$/u.test(projectId) || projectId === "." || projectId === "..") {
     throw new Error(`Refusing to delete state for a malformed project id: ${projectId}`);
   }
-  if (dirname21(resolve10(target)) !== resolve10(dirname21(projectStateDir("x", home)))) {
+  if (dirname22(resolve10(target)) !== resolve10(dirname22(projectStateDir("x", home)))) {
     throw new Error(`Refusing to delete ${target} \u2014 it is not a project state directory`);
   }
   rmSync13(target, { recursive: true, force: true });
@@ -54551,11 +55232,11 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync30, existsSync as existsSync16, statSync as statSync24 } from "node:fs";
-import { dirname as dirname22, join as join43, resolve as resolve11, extname as extname4, normalize as normalize2, sep as sep6 } from "node:path";
+import { readFileSync as readFileSync32, existsSync as existsSync18, statSync as statSync24 } from "node:fs";
+import { dirname as dirname23, join as join44, resolve as resolve11, extname as extname4, posix as posix2, sep as sep6 } from "node:path";
 function readServerAddressHolder(path3) {
   try {
-    const value = JSON.parse(readFileSync30(path3, "utf8"));
+    const value = JSON.parse(readFileSync32(path3, "utf8"));
     if (typeof value?.pid !== "number") return void 0;
     return { pid: value.pid, port: typeof value.port === "number" ? value.port : -1 };
   } catch {
@@ -54679,13 +55360,13 @@ function staticIsFresh(req, etag, mtimeMs) {
   return Number.isFinite(since) && Math.floor(mtimeMs / 1e3) <= Math.floor(since / 1e3);
 }
 function serveStatic(distDir, req, res) {
-  const rel = normalize2((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
-  let file = join43(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join43(distDir, "index.html");
-  if (!existsSync16(file)) file = join43(distDir, "index.html");
+  const rel = posix2.normalize((req.url ?? "/").split("?")[0].replace(/\\/g, "/")).replace(/^(\.\.[/\\])+/, "");
+  let file = join44(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir + sep6)) file = join44(distDir, "index.html");
+  if (!existsSync18(file)) file = join44(distDir, "index.html");
   try {
     const stats = statSync24(file);
-    const cacheControl = file.startsWith(join43(distDir, "assets") + sep6) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
+    const cacheControl = file.startsWith(join44(distDir, "assets") + sep6) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
     const etag = `"${stats.size.toString(16)}-${Math.trunc(stats.mtimeMs).toString(16)}"`;
     const headers = {
       "content-type": MIME[extname4(file)] ?? "application/octet-stream",
@@ -54701,7 +55382,7 @@ function serveStatic(distDir, req, res) {
       res.end();
       return;
     }
-    let body = readFileSync30(file);
+    let body = readFileSync32(file);
     const accept = req.headers["accept-encoding"];
     const encoding = negotiateEncoding(Array.isArray(accept) ? accept.join(",") : accept);
     if (encoding && shouldCompress(new Headers({ "content-type": headers["content-type"] }), body.byteLength)) {
@@ -54963,7 +55644,7 @@ async function startServer(opts = {}) {
       if (statusPath && statusIdentity) runtime.removeStatus(statusPath, statusIdentity);
       if (statusPath && statusIdentity) {
         try {
-          runtime.removeStatus(serverAddressPathForStateDir(dirname22(statusPath)), statusIdentity);
+          runtime.removeStatus(serverAddressPathForStateDir(dirname23(statusPath)), statusIdentity);
         } catch {
         }
       }
@@ -55101,7 +55782,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve11(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve11(opts.webDistDir) : join43(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve11(opts.webDistDir) : join44(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -55177,7 +55858,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync30(join43(webRoot, "index.html"), "utf8");
+            const html = readFileSync32(join44(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -55189,7 +55870,7 @@ async function startServer(opts = {}) {
         });
         return;
       }
-      if (existsSync16(distDir)) {
+      if (existsSync18(distDir)) {
         serveStatic(distDir, req, res);
         return;
       }
@@ -55387,7 +56068,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join43(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join44(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -55410,8 +56091,8 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
-import { existsSync as existsSync17 } from "node:fs";
-import { join as join44 } from "node:path";
+import { existsSync as existsSync19 } from "node:fs";
+import { join as join45 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -55433,6 +56114,15 @@ function notifySupervisor(message) {
   } catch {
   }
 }
+var shutdown;
+process.once("disconnect", () => {
+  if (shutdown) {
+    void shutdown();
+    return;
+  }
+  log.info("dev-child", "supervisor disconnected before the server was up; exiting");
+  process.exit(0);
+});
 try {
   const target = projectLaunchTargetFromEnvironment(process.env);
   const launchOwnerToken = projectLaunchOwnerTokenFromEnvironment(process.env);
@@ -55449,9 +56139,9 @@ try {
       ["FRIZZ_SCRIPTS_DIR", process.env.FRIZZ_SCRIPTS_DIR, "index.mjs"],
       ["FRIZZ_WORKER_PLUGIN_DIR", process.env.FRIZZ_WORKER_PLUGIN_DIR, ".claude-plugin/plugin.json"]
     ];
-    if (!existsSync17(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
+    if (!existsSync19(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync17(join44(directory, requiredFile)))
+      if (!directory || !existsSync19(join45(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }
@@ -55472,7 +56162,7 @@ try {
     bootId: server.ctx.bootId
   });
   let shuttingDown = false;
-  const shutdown = async () => {
+  const stop = async () => {
     if (shuttingDown) return;
     shuttingDown = true;
     const force = setTimeout(() => process.exit(1), 15e3);
@@ -55495,9 +56185,9 @@ try {
       process.exit(1);
     }
   };
-  process.on("SIGINT", () => void shutdown());
-  process.on("SIGTERM", () => void shutdown());
-  process.once("disconnect", () => void shutdown());
+  shutdown = stop;
+  process.on("SIGINT", () => void stop());
+  process.on("SIGTERM", () => void stop());
 } catch (err) {
   log.error("dev-child", `failed to start: ${err instanceof Error ? err.stack ?? err.message : err}`);
   process.exit(1);