frizz 0.12.11 → 0.12.13

package/dist/dev-child.js

@@ -13456,8 +13456,8 @@ function parkExpiredWakeMessage(status) {
     ...status,
     "",
     "Re-park if they are genuinely still going \u2014 there is no limit on that, and a long job is not a",
-    "failure. If something is finished, read its result. If nothing is left, end in ```done or ask a",
-    "```question."
+    "failure. If something is finished, read its result. If nothing is left, end in ```done or register",
+    "a question with `mcp__frizz__ask`."
   ].join("\n");
 }
 function parkFinishedWakeMessage(status, several) {
@@ -13469,7 +13469,7 @@ function parkFinishedWakeMessage(status, several) {
     "READ ITS OUTPUT AND CARRY ON. This is not a broken fence and there is nothing to fix: the wait",
     "you declared simply ended. Do NOT relaunch the same work \u2014 its result is already on disk.",
     "",
-    "Then park on whatever comes next, or end in ```done or a ```question if nothing is left."
+    "Then park on whatever comes next, or end in ```done or a registered question (`mcp__frizz__ask`) if nothing is left."
   ].join("\n");
 }
 function prWatchExpiredWakeMessage(ref) {
@@ -13483,6 +13483,12 @@ function ownWatchExpiredWakeMessage(kind, target) {
 
 If you are still waiting on it, register it again with \`mcp__frizz__watch\` and a fresh \`for:\`. If you are not, and it was the only thing you were waiting on, end in a proper terminal state instead of parking on it again.`;
 }
+function questionFencesLive(spawnedAt) {
+  if (spawnedAt === void 0 || spawnedAt === null) return true;
+  const at = typeof spawnedAt === "number" ? spawnedAt : Date.parse(spawnedAt);
+  if (!Number.isFinite(at)) return true;
+  return at < Date.parse(QUESTION_FENCE_RETIRED_AT);
+}
 function askedQuestionDepth(q) {
   let deepest = 1;
   for (const option of q.options ?? []) {
@@ -13679,7 +13685,7 @@ function parseGithubWakeSteer(text2) {
 function frizzRoute(path3) {
   return `${FRIZZ_ROUTE_PREFIX}${path3.startsWith("/") ? path3 : `/${path3}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, PR_WATCH_SPENT_TRAILER, PR_WATCH_ARMED_TRAILER, SHELL_DONE_TRAILER, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, PARK_CORRECTION_QUESTION_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, OWN_WATCH_MAX_ARMED, QUESTION_FENCE_RETIRED_AT, AskQuestionKind, ASK_MAX_DEPTH, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, BURIED_ANSWERS_HEADER, ANSWER_FOLLOW_UP_MARKER, DISMISSED_ANSWER, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_TIME_HEADER_TAIL, WAKE_TRAILERS, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -13997,7 +14003,7 @@ var init_src = __esm({
     RETIRED_AWAITING_REPLACEMENT = {
       "watch": "`shells: [<the id your runtime gave you>]` (or `agents: [<id>]`) \u2014 the same id, in the current sequence",
       "pr-watch": "register the PR with `mcp__frizz__watch_pr`, then name it `prs: [owner/repo#123]`",
-      "human": "there is no human gate any more \u2014 if you need a person, ask a ```question instead of parking",
+      "human": "there is no human gate any more \u2014 if you need a person, register a question with `mcp__frizz__ask` instead of parking",
       "ci": "CI is not a wait of its own: register the PR with `mcp__frizz__watch_pr` and you are woken when its checks settle",
       "session": "there is no cross-session wait \u2014 name the sub-agent you dispatched with `agents: [<id>]`",
       // THE 2026-08-24 CUTOVER. The frontmatter is YAML now, and YAML has no repeated keys — so the four
@@ -14057,7 +14063,7 @@ var init_src = __esm({
     INTERRUPT_MARKERS = ["[Request interrupted by user]", "[Request interrupted by user for tool use]"];
     ALLDONE_SENTINEL = "ALLDONE";
     OPT_OUT_NOTE = "To stop these, sign off with a ```done fence \u2014 but ONLY when the work is genuinely finished: it files this thread away, and nothing but new work from the human reopens it.";
-    OVER_QUESTION_NOTE = "Your ```question is still unanswered, and a Goal armed at rest means the operator is not waiting to answer it: decide it yourself, say in one line which way you went and what would reverse it, and carry on. Do NOT re-ask it.";
+    OVER_QUESTION_NOTE = "Your registered question is still unanswered, and a Goal armed at rest means the operator is not waiting to answer it: decide it yourself, say in one line which way you went and what would reverse it, and carry on. Do NOT re-ask it.";
     TIMER_PROMPT_MAX = SNOOZE_PROMPT_MAX;
     TIMER_MAX_DELAY_SECONDS = 30 * 24 * 60 * 60;
     TIMER_MAX_ARMED = 64;
@@ -14089,14 +14095,16 @@ var init_src = __esm({
       "the write-up.",
       "",
       "**DECIDE RATHER THAN ASK.** Stop only for a decision that is genuinely the human's AND that blocks you",
-      "right now: ask that one in a question fence. Every other open choice INSIDE the task \u2014 a name, a",
+      "right now: register that one with `mcp__frizz__ask`. Every other open choice INSIDE the task \u2014 a name, a",
       "default, a reversible design call \u2014 is yours to make: decide it, say in one line which way you went and",
       "what would reverse it, and carry on. A choice that would ENLARGE the task is not one of those: an",
       "unanswered question is not permission to go build the answer.",
       "",
-      "Otherwise, add a fence at the END of your next message:",
+      "Otherwise, sign off \u2014 a registration, or a fence at the END of your next message:",
       "",
-      "- `` ```question `` \u2014 you need the human. One question per fence, lettered options, one recommended.",
+      "- `mcp__frizz__ask` \u2014 you need the human. NOT a fence: the ```question fence is retired, and a fence",
+      "  with a question in its body is plain prose. Register it (options with one-line trade-offs, the",
+      "  recommended one first), then rest normally \u2014 an open registered question is the sign-off.",
       "- `` ```done `` \u2014 genuinely FINISHED. A DISMISSAL: the card is filed away and nobody looks again, so",
       "  if anything is still owed, it is not done. Body: 1-3 sentences, then bullets, each opening with a",
       "  **bolded verb phrase**.",
@@ -14311,6 +14319,7 @@ var init_src = __esm({
       watches: external_exports.array(OwnWatchView)
     }).strict();
     OWN_WATCH_MAX_ARMED = 24;
+    QUESTION_FENCE_RETIRED_AT = "2026-09-11T17:30:00Z";
     AskQuestionKind = external_exports.enum(["question", "multi"]);
     ASK_MAX_DEPTH = 3;
     AskedOptionSchema = external_exports.lazy(() => external_exports.object({
@@ -17821,7 +17830,7 @@ function rpcRequestIdJson(value) {
 }
 function canonicalJson(value) {
   const visiting = /* @__PURE__ */ new WeakSet();
-  const normalize3 = (candidate) => {
+  const normalize2 = (candidate) => {
     if (candidate === null || typeof candidate === "string" || typeof candidate === "boolean") return candidate;
     if (typeof candidate === "number") {
       if (!Number.isFinite(candidate)) throw new InteractionStoreError("invalid-response", "provider JSON contains a non-finite number");
@@ -17833,14 +17842,14 @@ function canonicalJson(value) {
     if (visiting.has(candidate)) throw new InteractionStoreError("invalid-response", "provider JSON contains a cycle");
     visiting.add(candidate);
     try {
-      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize3(item));
+      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize2(item));
       const object = candidate;
-      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize3(object[key])]));
+      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize2(object[key])]));
     } finally {
       visiting.delete(candidate);
     }
   };
-  return JSON.stringify(normalize3(value));
+  return JSON.stringify(normalize2(value));
 }
 function boundedProviderJson(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -22181,6 +22190,35 @@ var init_detached_daemons = __esm({
   }
 });
 
+// packages/server/src/backend/daemon-tree.ts
+import { spawnSync } from "node:child_process";
+function endDaemonTree(pid, signal, deps = {}) {
+  const kill = deps.kill ?? defaultKill;
+  if ((deps.platform ?? process.platform) !== "win32") {
+    try {
+      kill(pid, signal);
+    } catch {
+    }
+    return;
+  }
+  const killed = (deps.spawnSync ?? spawnSync)("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+  if (killed.error || killed.status !== 0) {
+    try {
+      kill(pid, signal);
+    } catch {
+    }
+  }
+}
+var defaultKill;
+var init_daemon_tree = __esm({
+  "packages/server/src/backend/daemon-tree.ts"() {
+    "use strict";
+    defaultKill = (pid, signal) => {
+      process.kill(pid, signal);
+    };
+  }
+});
+
 // packages/server/src/backend/ipc-path.ts
 import { join as join15 } from "node:path";
 function frizzIpcPath(name) {
@@ -22370,7 +22408,10 @@ function forkBroker(options) {
     cwd: options.cwd,
     env: { ...process.env, FRIZZ_CLAUDE_BROKER: JSON.stringify(config) },
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // A detached process owns no console on Windows; keep the daemon from ever being handed a
+    // visible one (Windows audit 2026-09-11, finding 4 — the Codex daemon's spawn tells the story).
+    windowsHide: true
   });
   child.unref();
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
@@ -22421,7 +22462,7 @@ async function adoptOrForkBroker(options) {
   if (existing) return { record: existing, reattached: true };
   return { record: await forkBroker(options), reattached: false };
 }
-function killBroker(stateDir, sessionId, retireReason) {
+function killBroker(stateDir, sessionId, retireReason, deps = {}) {
   const recordPath2 = claudeBrokerRecordPath(stateDir, sessionId);
   const record = liveBrokerRecord(recordPath2);
   if (retireReason) {
@@ -22429,10 +22470,7 @@ function killBroker(stateDir, sessionId, retireReason) {
   } else takeBrokerRetirement(stateDir, sessionId);
   if (record) {
     rememberBrokerIdentity(recordPath2, record);
-    try {
-      process.kill(record.daemonPid, "SIGTERM");
-    } catch {
-    }
+    endDaemonTree(record.daemonPid, "SIGTERM", deps);
   }
   try {
     unlinkSync(recordPath2);
@@ -22446,6 +22484,7 @@ var init_claude_broker_host = __esm({
     "use strict";
     init_detached_daemons();
     init_claude_broker_diagnostics();
+    init_daemon_tree();
     init_ipc_path();
     WINDOWS_SHIM_TARGET = /^\s*"%dp0%\\(.+?)"/mu;
   }
@@ -23401,10 +23440,30 @@ var init_tail_cache = __esm({
 import { statSync as statSync8, openSync as openSync10, readSync as readSync4, closeSync as closeSync9, readdirSync as readdirSync5, realpathSync as realpathSync5, mkdirSync as mkdirSync10, writeFileSync as writeFileSync8, readFileSync as readFileSync12, existsSync as existsSync5 } from "node:fs";
 import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
-import { basename as basename4, join as join18 } from "node:path";
+import { basename as basename4, join as join18, win32 } from "node:path";
 import { homedir as homedir7 } from "node:os";
-async function probeShellsAlive(outputFiles) {
+async function probeShellsAlive(outputFiles, opts = {}) {
+  const platform3 = opts.platform ?? process.platform;
+  const exec = opts.exec ?? execFileAsync;
   const verdicts = /* @__PURE__ */ new Map();
+  if (platform3 === "win32") {
+    const present = outputFiles.filter((file) => {
+      if (existsSync5(file)) return true;
+      verdicts.set(file, void 0);
+      return false;
+    });
+    if (present.length === 0) return verdicts;
+    const [shell, args] = windowsShellHolderCommand(present, opts.env ?? process.env);
+    let report;
+    try {
+      report = (await exec(shell, args, { encoding: "utf8", timeout: 8e3, windowsHide: true })).stdout;
+    } catch {
+      for (const file of present) verdicts.set(file, void 0);
+      return verdicts;
+    }
+    for (const [file, alive] of parseWindowsShellHolderReport(String(report), present)) verdicts.set(file, alive);
+    return verdicts;
+  }
   const live = [];
   for (const file of outputFiles) {
     if (!existsSync5(file)) {
@@ -23420,7 +23479,7 @@ async function probeShellsAlive(outputFiles) {
   if (live.length === 0) return verdicts;
   let stdout = "";
   try {
-    stdout = (await execFileAsync("lsof", ["-F", "pn", "--", ...live.map((f) => f.real)], { encoding: "utf8", timeout: 8e3 })).stdout;
+    stdout = (await exec("lsof", ["-F", "pn", "--", ...live.map((f) => f.real)], { encoding: "utf8", timeout: 8e3 })).stdout;
   } catch (err) {
     const e = err;
     const ran = typeof e.code === "number" && !e.killed;
@@ -23435,6 +23494,25 @@ async function probeShellsAlive(outputFiles) {
   for (const f of live) verdicts.set(f.requested, held.has(f.real));
   return verdicts;
 }
+function windowsShellHolderCommand(paths, env = process.env) {
+  const shell = win32.join(env.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  const list = paths.map((p) => `'${p.replace(/'/g, "''")}'`).join(",");
+  const script = `foreach($p in @(${list})){try{$f=[System.IO.File]::Open($p,[System.IO.FileMode]::Open,[System.IO.FileAccess]::Read,[System.IO.FileShare]::None);$f.Close();'free'}catch [System.IO.IOException]{if((($_.Exception.HResult) -band 0xFFFF) -in 32,33){'held'}else{'unknown'}}catch{'unknown'}}`;
+  return [shell, ["-NoProfile", "-NonInteractive", "-NoLogo", "-Command", script]];
+}
+function parseWindowsShellHolderReport(report, paths) {
+  const verdicts = /* @__PURE__ */ new Map();
+  const lines = report.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+  if (lines.length !== paths.length) {
+    for (const file of paths) verdicts.set(file, void 0);
+    return verdicts;
+  }
+  paths.forEach((file, i) => {
+    const word = lines[i];
+    verdicts.set(file, word === "held" ? true : word === "free" ? false : void 0);
+  });
+  return verdicts;
+}
 function activityMinute(at) {
   if (!at) return "";
   const ms = Date.parse(at);
@@ -25518,18 +25596,20 @@ ${detail2}
     }, delay2);
     nudgeTimer.unref?.();
   }
-  function registeredStateIsCurrent(state) {
+  function currentRowFor(state) {
     const current = deps.storage.getSession(state.slug);
-    return Boolean(
-      current && current.session_id === state.sessionId && (current.runtime_generation ?? 0) === state.runtimeGeneration
-    );
+    return current && current.session_id === state.sessionId && (current.runtime_generation ?? 0) === state.runtimeGeneration ? current : void 0;
+  }
+  function registeredStateIsCurrent(state) {
+    return currentRowFor(state) !== void 0;
   }
   return {
     get(slug) {
       const registered = states.get(slug);
-      const s = registered && registeredStateIsCurrent(registered) ? registered : registered ? void 0 : foreignStates.get(slug);
+      const row = registered ? currentRowFor(registered) : void 0;
+      const s = registered ? row ? registered : void 0 : foreignStates.get(slug);
       if (!s) return void 0;
-      const pendingQuestion = s.lastAssistantHasQuestion;
+      const pendingQuestion = s.lastAssistantHasQuestion && questionFencesLive(row?.spawned_at);
       const nowMs = now();
       return { turn: s.turn, permPrompt: s.permPrompt, permPolicy: s.permPolicy, permDenies: s.permDenies, model: s.model, effort: s.effort, profileAt: s.profileAt, profileRevision: s.profileRevision, permissionMode: s.permissionMode, permissionModeAt: s.permissionModeAt, permissionModeRevision: s.permissionModeRevision, lastActivityAt: s.lastActivityAt, lastAssistantAt: s.lastAssistantAt, lastAssistant: s.lastAssistant, aiTitle: s.aiTitle, customTitle: s.customTitle, customTitleRevision: s.customTitleRevision, subAgents: subAgentViews(s, nowMs), droppedReports: [...s.queuedReports.values()], bgShells: [...bgShellViews(s), ...codexBgShellViews(s)], retiredShells: retiredShellViews(s), pendingAsk: s.pendingAsk, pendingQuestion, lastAssistantAllDone: s.lastAssistantAllDone, lastUserAt: s.lastUserAt, lastUserText: s.lastUserText, firstUserText: s.firstUserText, lastFence: s.lastFence, noTranscript: s.noTranscript, authFault: s.authFault, apiFault: s.apiFault, providerError: s.providerError, limitFault: s.limitFault, contextTokens: s.contextTokens, contextWindow: s.contextWindow, lastCompactionAt: s.lastCompactionAt };
     },
@@ -26371,6 +26451,101 @@ var init_codex = __esm({
   }
 });
 
+// packages/server/src/backend/codex-executable.ts
+import { accessSync as accessSync2, constants as fsConstants2, readFileSync as readFileSync14 } from "node:fs";
+import { posix, win32 as win322 } from "node:path";
+function defaultAccess(path3, mode) {
+  try {
+    accessSync2(path3, mode === "executable" ? fsConstants2.X_OK : fsConstants2.F_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function defaultReadFile(path3) {
+  try {
+    return readFileSync14(path3, "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function searchPath2(env) {
+  const direct = env.PATH ?? env.Path ?? env.path;
+  if (direct !== void 0) return direct;
+  for (const [key, value] of Object.entries(env)) if (key.toLowerCase() === "path") return value ?? "";
+  return "";
+}
+function vendoredNativeBeside(launcherJs, arch, access) {
+  const triple = WINDOWS_TRIPLE[arch];
+  if (!triple) return void 0;
+  const { dirname: dirname24, join: join46 } = win322;
+  const pkgRoot = dirname24(dirname24(launcherJs));
+  const platformPkg = `codex-win32-${arch}`;
+  const vendorRoots = [
+    join46(pkgRoot, "node_modules", "@openai", platformPkg, "vendor"),
+    // nested under the package
+    join46(dirname24(pkgRoot), platformPkg, "vendor"),
+    // hoisted beside it: <prefix>\node_modules\@openai\<pkg>
+    join46(pkgRoot, "vendor")
+    // the pre-platform-package layout, binaries inside @openai/codex itself
+  ];
+  for (const root of vendorRoots) {
+    const exe = join46(root, triple, "bin", "codex.exe");
+    if (access(exe, "exists")) return exe;
+  }
+  return void 0;
+}
+function resolveCodexExecutable(bin, deps = {}) {
+  const env = deps.env ?? process.env;
+  const platform3 = deps.platform ?? process.platform;
+  const arch = deps.arch ?? process.arch;
+  const execPath = deps.execPath ?? process.execPath;
+  const access = deps.access ?? defaultAccess;
+  const readFile2 = deps.readFile ?? defaultReadFile;
+  const windows = platform3 === "win32";
+  const path3 = windows ? win322 : posix;
+  const candidate = bin && bin.length > 0 ? bin : "codex";
+  if (path3.isAbsolute(candidate) || /[\\/]/u.test(candidate)) return { file: candidate, args: [] };
+  for (const dir of searchPath2(env).split(path3.delimiter)) {
+    if (!dir) continue;
+    if (!windows) {
+      const full2 = path3.join(dir, candidate);
+      if (access(full2, "executable")) return { file: full2, args: [] };
+      continue;
+    }
+    const exe = path3.join(dir, `${candidate}.exe`);
+    if (access(exe, "exists")) return { file: exe, args: [] };
+    const body = readFile2(path3.join(dir, `${candidate}.cmd`));
+    const target = body === void 0 ? void 0 : WINDOWS_SHIM_TARGET2.exec(body)?.[1];
+    if (!target) continue;
+    const full = path3.join(dir, target);
+    if (!access(full, "exists")) continue;
+    if (!/\.(?:js|mjs|cjs)$/iu.test(full)) return { file: full, args: [] };
+    const native = vendoredNativeBeside(full, arch, access);
+    if (native) return { file: native, args: [] };
+    return { file: execPath, args: [full] };
+  }
+  throw new CodexExecutableNotFoundError(candidate);
+}
+var CodexExecutableNotFoundError, WINDOWS_SHIM_TARGET2, WINDOWS_TRIPLE;
+var init_codex_executable = __esm({
+  "packages/server/src/backend/codex-executable.ts"() {
+    "use strict";
+    CodexExecutableNotFoundError = class extends Error {
+      code = "ENOENT";
+      constructor(candidate) {
+        super(`could not resolve '${candidate}' to an executable on PATH`);
+        this.name = "CodexExecutableNotFoundError";
+      }
+    };
+    WINDOWS_SHIM_TARGET2 = /"%dp0%\\([^"]+)"\s+%\*/u;
+    WINDOWS_TRIPLE = {
+      x64: "x86_64-pc-windows-msvc",
+      arm64: "aarch64-pc-windows-msvc"
+    };
+  }
+});
+
 // packages/server/src/backend/worker-env.ts
 function isFrizzInternalEnvKey(key) {
   return key.startsWith(FRIZZ_INTERNAL_PREFIX);
@@ -27739,14 +27914,14 @@ var require_receiver = __commonJS({
        * @return {(Error|RangeError)} The error
        * @private
        */
-      createError(ErrorCtor, message, prefix, statusCode, errorCode4) {
+      createError(ErrorCtor, message, prefix, statusCode, errorCode5) {
         this._loop = false;
         this._errored = true;
         const err = new ErrorCtor(
           prefix ? `Invalid WebSocket frame: ${message}` : message
         );
         Error.captureStackTrace(err, this.createError);
-        err.code = errorCode4;
+        err.code = errorCode5;
         err[kStatusCode] = statusCode;
         return err;
       }
@@ -30210,7 +30385,7 @@ import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash7, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync15, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { join as join20 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
@@ -30234,7 +30409,7 @@ function pidAlive2(pid) {
 }
 function readNativeRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync14(nativeRecordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync15(nativeRecordPath(stateDir, projectId), "utf8"));
     if (typeof value.listenerPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -30404,7 +30579,10 @@ async function startListener(options) {
     cwd: options.cwd,
     env: options.env,
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // No console window for codex.exe on Windows (Windows audit 2026-09-11, finding 4; the story is on
+    // the daemon's spawn in codex-app-server-daemon.ts).
+    windowsHide: true
   });
   child.unref();
   const record = {
@@ -30476,7 +30654,7 @@ var init_codex_app_server_native = __esm({
           };
         }
         log.error("codex", `codex app-server native listener unavailable (${error.message}); falling back to an in-process app-server \u2014 turns will NOT survive a frizz restart`);
-        const child = spawn2(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), { cwd: options.cwd, env: options.env, stdio: ["pipe", "pipe", "pipe"] });
+        const child = spawn2(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), { cwd: options.cwd, env: options.env, stdio: ["pipe", "pipe", "pipe"], windowsHide: true });
         return { process: child, generation: randomUUID9(), reattached: false, daemonPid: process.pid, droppedWhileDetached: 0, authAccountId: options.authAccountId };
       }
     };
@@ -30484,10 +30662,10 @@ var init_codex_app_server_native = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-host.ts
-import { spawn as spawn3, spawnSync } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync12, readFileSync as readFileSync15, unlinkSync as unlinkSync3 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync12, readFileSync as readFileSync16, unlinkSync as unlinkSync3 } from "node:fs";
 import { join as join21 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
@@ -30511,7 +30689,7 @@ function pidAlive3(pid) {
 }
 function readDaemonRecord(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync15(recordPath(stateDir, projectId), "utf8"));
+    const value = JSON.parse(readFileSync16(recordPath(stateDir, projectId), "utf8"));
     if (typeof value.daemonPid !== "number" || typeof value.socketPath !== "string" || typeof value.generation !== "string") return null;
     return {
       projectId,
@@ -30528,7 +30706,7 @@ function readDaemonRecord(stateDir, projectId) {
 }
 function readDaemonExitBreadcrumb(stateDir, projectId) {
   try {
-    const value = JSON.parse(readFileSync15(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
+    const value = JSON.parse(readFileSync16(`${recordPath(stateDir, projectId)}.exit`, "utf8"));
     if (typeof value.generation !== "string" || typeof value.reason !== "string") return null;
     return {
       generation: value.generation,
@@ -30551,22 +30729,6 @@ function liveDaemonRecord(stateDir, projectId) {
   }
   return null;
 }
-function endDaemonTree(pid, signal) {
-  if (process.platform !== "win32") {
-    try {
-      process.kill(pid, signal);
-    } catch {
-    }
-    return;
-  }
-  const killed = spawnSync("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
-  if (killed.error || killed.status !== 0) {
-    try {
-      process.kill(pid, signal);
-    } catch {
-    }
-  }
-}
 function killCodexAppServerDaemon(stateDir, projectId) {
   const record = liveDaemonRecord(stateDir, projectId);
   if (!record) return;
@@ -30627,7 +30789,11 @@ function forkDaemon(options) {
     // the payload and is applied by the daemon, keeping the audited env allowlist authoritative.
     env: { ...process.env, FRIZZ_CODEX_APP_SERVER_DAEMON: payload },
     detached: true,
-    stdio: "ignore"
+    stdio: "ignore",
+    // Belt to the daemon's own braces: a detached process owns no console on Windows, so anything
+    // console-subsystem it starts without CREATE_NO_WINDOW gets a fresh visible one (Windows audit
+    // 2026-09-11, finding 4). The daemon hides its app-server; this keeps the daemon itself hidden.
+    windowsHide: true
   });
   child.unref();
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
@@ -30732,7 +30898,11 @@ function inProcessCodexAppServer(options) {
   const child = spawn3(options.codexBin, codexAppServerArgv(["--stdio"], options.frizzMcp), {
     cwd: options.cwd,
     env: options.env,
-    stdio: ["pipe", "pipe", "pipe"]
+    stdio: ["pipe", "pipe", "pipe"],
+    // No console window for codex.exe (Windows audit 2026-09-11, finding 4). The server child has a
+    // console of its own so this site was not the visible-window bug, but a codex.exe that inherits
+    // it dies with it, and the shape test in daemon-tree.test.ts holds every provider spawn to it.
+    windowsHide: true
   });
   const kill = child.kill.bind(child);
   child.kill = ((signal) => {
@@ -30759,6 +30929,7 @@ var init_codex_app_server_host = __esm({
   "packages/server/src/backend/codex-app-server-host.ts"() {
     "use strict";
     init_detached_daemons();
+    init_daemon_tree();
     init_codex_app_server_native();
     init_ipc_path();
     init_codex_mcp();
@@ -31206,7 +31377,7 @@ var init_claude_quota = __esm({
 // packages/server/src/backend/auth-status.ts
 import { join as join23 } from "node:path";
 import { homedir as homedir10, platform as platform2 } from "node:os";
-import { readFileSync as readFileSync16, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync17, statSync as statSync10 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
@@ -31216,7 +31387,7 @@ function claudeConfigDir2() {
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync16(join23(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync17(join23(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -31249,7 +31420,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync16(join23(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync17(join23(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -31269,7 +31440,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
 function readCodexAccountId(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return void 0;
   try {
-    const doc = JSON.parse(readFileSync16(join23(codexHome, "auth.json"), "utf8"));
+    const doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
     if (!doc || typeof doc !== "object") return void 0;
     const tokens = doc.tokens;
     if (!tokens || typeof tokens !== "object") return void 0;
@@ -31279,9 +31450,10 @@ function readCodexAccountId(codexHome = defaultCodexHome()) {
     return void 0;
   }
 }
-async function readCodexBinaryState(codexBin = "codex", exec = execFileAsync3) {
+async function readCodexBinaryState(codexBin = "codex", exec = execFileAsync3, resolve12 = resolveCodexExecutable) {
   try {
-    await exec(codexBin, ["--version"], { timeout: 5e3 });
+    const codex = resolve12(codexBin);
+    await exec(codex.file, [...codex.args, "--version"], { timeout: 5e3 });
     return "present";
   } catch (err) {
     return err.code === "ENOENT" ? "missing" : "unknown";
@@ -31340,7 +31512,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
   if (memo3 && memo3.path === path3 && memo3.mtimeMs === stat2.mtimeMs && memo3.size === stat2.size) return memo3.email;
   let email;
   try {
-    const doc = JSON.parse(readFileSync16(path3, "utf8"));
+    const doc = JSON.parse(readFileSync17(path3, "utf8"));
     email = asEmail(doc?.oauthAccount?.emailAddress);
   } catch {
     email = void 0;
@@ -31351,7 +31523,7 @@ function readClaudeAccountEmail(path3 = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync16(join23(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync17(join23(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -31406,6 +31578,7 @@ var init_auth_status = __esm({
     init_claude_quota();
     init_codex();
     init_claude_broker_host();
+    init_codex_executable();
     execFileAsync3 = promisify4(execFile4);
     ProviderAuthRequiredError = class extends Error {
       backend;
@@ -31746,7 +31919,7 @@ function fileChangeDisplays(changes) {
 }
 function canonicalJson2(value) {
   const visiting = /* @__PURE__ */ new WeakSet();
-  const normalize3 = (candidate) => {
+  const normalize2 = (candidate) => {
     if (candidate === null || typeof candidate === "string" || typeof candidate === "boolean") return candidate;
     if (typeof candidate === "number") {
       if (!Number.isFinite(candidate)) throw new Error("non-finite JSON number");
@@ -31756,14 +31929,14 @@ function canonicalJson2(value) {
     if (visiting.has(candidate)) throw new Error("cyclic JSON value");
     visiting.add(candidate);
     try {
-      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize3(item));
+      if (Array.isArray(candidate)) return candidate.map((item) => item === void 0 ? null : normalize2(item));
       const object = candidate;
-      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize3(object[key])]));
+      return Object.fromEntries(Object.keys(object).sort().filter((key) => object[key] !== void 0).map((key) => [key, normalize2(object[key])]));
     } finally {
       visiting.delete(candidate);
     }
   };
-  return JSON.stringify(normalize3(value));
+  return JSON.stringify(normalize2(value));
 }
 function logicalRequestId(method, parts) {
   const digest = createHash10("sha256").update(JSON.stringify([method, ...parts])).digest("hex");
@@ -34655,9 +34828,12 @@ function queryCodexRateLimits(codexHome = defaultCodexHome(), codexBin = "codex"
   return new Promise((resolve12) => {
     let child;
     try {
-      child = spawn4(codexBin, ["app-server"], {
+      const codex = resolveCodexExecutable(codexBin);
+      child = spawn4(codex.file, [...codex.args, "app-server"], {
         stdio: ["pipe", "pipe", "ignore"],
-        env: { ...process.env, CODEX_HOME: codexHome }
+        env: { ...process.env, CODEX_HOME: codexHome },
+        // No console window for codex.exe (Windows audit 2026-09-11, finding 4).
+        windowsHide: true
       });
     } catch {
       resolve12(void 0);
@@ -34737,6 +34913,7 @@ var init_codex_quota = __esm({
   "packages/server/src/backend/codex-quota.ts"() {
     "use strict";
     init_codex();
+    init_codex_executable();
     init_codex_app_server();
     descByName2 = (a, b) => a < b ? 1 : a > b ? -1 : 0;
     TAIL_BYTES = 512 * 1024;
@@ -34816,7 +34993,7 @@ var init_quota = __esm({
 
 // packages/server/src/local-file.ts
 import { spawn as spawn5 } from "node:child_process";
-import { readFileSync as readFileSync17, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync18, realpathSync as realpathSync6, statSync as statSync12 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
 import { isAbsolute as isAbsolute4, join as join25, resolve as resolve5, sep as sep2 } from "node:path";
 function isUnder(real, root) {
@@ -34848,7 +35025,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join25(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve5(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : /^~[\/\\]/.test(trimmed) ? join25(home, trimmed.slice(2)) : isAbsolute4(trimmed) ? trimmed : resolve5(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -34857,7 +35034,7 @@ function resolveOpenableFile(raw2, projectDir, roots, home = homedir11()) {
 }
 function readLocalTextFile(rawPath, roots) {
   const path3 = resolveLocalFile(rawPath, roots);
-  const bytes = readFileSync17(path3);
+  const bytes = readFileSync18(path3);
   if (bytes.subarray(0, 8192).includes(0)) throw new Error("Local file is not a text file");
   if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, text: bytes.toString("utf8"), truncated: false };
   const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
@@ -34868,7 +35045,7 @@ function readLocalMarkdown(rawPath, roots) {
   if (!MARKDOWN_FILE_EXT.test(rawPath.trim())) throw new Error("Local file is not a Markdown file");
   const path3 = resolveLocalFile(rawPath, roots);
   if (!MARKDOWN_FILE_EXT.test(path3)) throw new Error("Local file is not a Markdown file");
-  const bytes = readFileSync17(path3);
+  const bytes = readFileSync18(path3);
   if (bytes.length <= MARKDOWN_READ_LIMIT) return { path: path3, markdown: bytes.toString("utf8"), truncated: false };
   const head = bytes.subarray(0, MARKDOWN_READ_LIMIT);
   const lastBreak = head.lastIndexOf(10);
@@ -34884,20 +35061,61 @@ function resolveWatchableLocalFile(rawPath, roots) {
 function defaultSpawn(command, args, options) {
   return spawn5(command, [...args], options);
 }
-function openLocalFile(rawPath, opener, roots, options = {}) {
+async function awaitOpenerStart(child, command) {
+  child.unref();
+  await new Promise((resolve12, reject) => {
+    child.once("error", (error) => reject(new Error(
+      error.code === "ENOENT" ? `${command} is not installed or not on PATH` : `could not start ${command}: ${error.message}`
+    )));
+    child.once("spawn", resolve12);
+  });
+}
+function localFileOpenCommand(path3, selected, options = {}) {
+  const platform3 = options.platform ?? process.platform;
+  if (platform3 === "darwin") {
+    return selected === "cursor" ? { command: "open", args: ["-a", "Cursor", path3] } : selected === "vscode" ? { command: "open", args: ["-a", "Visual Studio Code", path3] } : selected === "finder" ? { command: "open", args: ["-R", path3] } : { command: "open", args: [path3] };
+  }
+  if (platform3 === "win32") {
+    if (selected === "system") return { command: "explorer.exe", args: [path3] };
+    if (selected === "finder") return { command: "explorer.exe", args: [`/select,${path3}`] };
+    const editor = WINDOWS_EDITOR_EXE[selected];
+    const env = options.env ?? process.env;
+    const exists = options.exists ?? existsSync8;
+    const localAppData = env.LOCALAPPDATA;
+    if (localAppData) {
+      const exe = join25(localAppData, ...editor.exe);
+      if (exists(exe)) return { command: exe, args: [path3] };
+    }
+    if (/["%\r\n]/u.test(path3)) throw new Error(`cannot hand ${path3} to the ${editor.shim} shim through cmd.exe`);
+    return { command: "cmd.exe", args: ["/d", "/s", "/c", `"${editor.shim} "${path3}""`], verbatim: true };
+  }
+  return selected === "cursor" ? { command: "cursor", args: [path3] } : selected === "vscode" ? { command: "code", args: [path3] } : { command: "xdg-open", args: [path3] };
+}
+async function openLocalFile(rawPath, opener, roots, options = {}) {
   const path3 = resolveLocalFile(rawPath, roots);
   const selected = options.forceSystem ? "system" : opener;
   if (selected === "copy") return { action: "copy", path: path3 };
-  const spec = process.platform === "darwin" ? selected === "cursor" ? ["open", ["-a", "Cursor", path3]] : selected === "vscode" ? ["open", ["-a", "Visual Studio Code", path3]] : selected === "finder" ? ["open", ["-R", path3]] : ["open", [path3]] : selected === "finder" ? ["xdg-open", [path3]] : selected === "cursor" ? ["cursor", [path3]] : selected === "vscode" ? ["code", [path3]] : ["xdg-open", [path3]];
-  (options.spawn ?? defaultSpawn)(spec[0], spec[1], { detached: true, stdio: "ignore", shell: false }).unref();
+  const spec = localFileOpenCommand(path3, selected, options);
+  const child = (options.spawn ?? defaultSpawn)(spec.command, spec.args, {
+    detached: true,
+    stdio: "ignore",
+    shell: false,
+    windowsHide: true,
+    ...spec.verbatim ? { windowsVerbatimArguments: true } : {}
+  });
+  await awaitOpenerStart(child, spec.command);
   return { action: "opened", path: path3 };
 }
-var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT;
+var MARKDOWN_FILE_EXT, MARKDOWN_READ_LIMIT, WINDOWS_EDITOR_EXE;
 var init_local_file = __esm({
   "packages/server/src/local-file.ts"() {
     "use strict";
     MARKDOWN_FILE_EXT = /\.(?:md|mdx|markdown)$/i;
     MARKDOWN_READ_LIMIT = 1024 * 1024;
+    WINDOWS_EDITOR_EXE = {
+      cursor: { exe: ["Programs", "cursor", "Cursor.exe"], shim: "cursor" },
+      vscode: { exe: ["Programs", "Microsoft VS Code", "Code.exe"], shim: "code" }
+    };
   }
 });
 
@@ -35068,12 +35286,12 @@ var init_awaiting = __esm({
 });
 
 // packages/server/src/backend/project-mcp-servers.ts
-import { readFileSync as readFileSync18 } from "node:fs";
+import { readFileSync as readFileSync19 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join27 } from "node:path";
 function readJsonObject(path3) {
   try {
-    const parsed = JSON.parse(readFileSync18(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync19(path3, "utf8"));
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -35198,17 +35416,17 @@ var init_project_mcp_servers = __esm({
 });
 
 // packages/server/src/worker-plugin-dir.ts
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { dirname as dirname10, join as join28 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync8(join28(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync9(join28(override, ".claude-plugin", "plugin.json")))
     return override;
   let current = dirname10(fileURLToPath3(moduleUrl));
   for (; ; ) {
     const candidate = join28(current, "cc-worker");
-    if (existsSync8(join28(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    if (existsSync9(join28(candidate, ".claude-plugin", "plugin.json"))) return candidate;
     const parent = dirname10(current);
     if (parent === current) return void 0;
     current = parent;
@@ -35325,9 +35543,11 @@ nothing. Frizz bumps you for one, twice, then gives up \u2014 a turn wasted each
 \`mcp__frizz__ask\` and \`mcp__frizz__watch\` each record a ROW, and frizz reads all three as a sign-off
 \u2014 it will not bump you for a missing fence after any of them. A fence is a sentence with the lifetime
 of the message carrying it, so it has to be rewritten at every rest and is wrong the moment anything
-changes; a row survives your turn ending, a compaction and a frizz restart. **The fences below all still
-work**, they are still the right shape for the prose the human reads, and nothing is being taken away \u2014
-but where a verb exists for what you are saying, call it.
+changes; a row survives your turn ending, a compaction and a frizz restart. **The \`done\` and
+\`awaiting\` fences below still work**, they are still the right shape for the prose the human reads \u2014
+but where a verb exists for what you are saying, call it. **A QUESTION HAS NO FENCE ANY MORE** (retired
+2026-09-11): the only way to ask is \`mcp__frizz__ask\`, and a question written into a fence's body is
+plain prose \u2014 no card, no answer, and no sign-off.
 
 **AN OPEN QUESTION IS A STANDING SIGN-OFF \u2014 REST NORMALLY.** Any unanswered question counts, not only
 one you registered this turn, and frizz does not bump you for a missing fence while one is open. When
@@ -35341,8 +35561,9 @@ without it. Name what is still running in the prose (frizz lists every live shel
 watcher under the prompt box whether or not a fence names it). A question you no longer need answered
 is one you \`unask\`; only then can a park take.
 
-Use at most ONE fenced signal block, at the very END. The fence language is the state; the body is the
-card the human reads. A \` \`\`\`question \` block and real permission prompts are higher-priority asks
+Use at most ONE fenced signal block, at the very END (a question's PLACEMENT marker is not a signal
+block \u2014 see Questions for the human). The fence language is the state; the body is the card the human
+reads. An open registered question and real permission prompts are higher-priority asks
 than \`done\` or \`awaiting\`.
 
 **NAME THE PULL REQUEST, EVERY TIME YOU REST** \u2014 its number in EVERY resting message, not just the
@@ -35393,7 +35614,8 @@ exactly ONE of them.
   - **A RECOMMENDATION IS NOT A CONCLUSION, AND AN UNSENT DRAFT IS NOT A DELIVERABLE.** When the
     verdict is that SOMEONE SHOULD NOW DO SOMETHING \u2014 merge it, decline it, post this comment, pick
     one of these designs, press the button you are not allowed to press \u2014 that someone is the human,
-    so end on a \` \`\`\`question \` carrying your recommendation as option A. Same for anything you WROTE
+    so register the question with \`mcp__frizz__ask\`, your recommendation as option A, and rest on
+    it. Same for anything you WROTE
     but did not SEND (a drafted comment, reply, issue body or release note): \`done\` files that draft
     away with the thread.
   - Follow-up work you DISCOVERED blocks \`done\` just as hard as work you were assigned, even when it
@@ -35479,8 +35701,9 @@ exactly ONE of them.
     dimmed Snoozed band; any one dead, unknown or not yours \u21D2 you are BUMPED immediately and told which.
     **A FENCE THAT NAMES NOTHING IS NOT A PARK** \u2014 \`for:\` describes a wait, it is not one \u2014 so
     "waiting on the checks" plus a duration just sits in the queue: REGISTER the PR and name it, and
-    if nothing is actually running, end with \`\`\`done or ask a \`\`\`question.
-  - **WAITING ON A PERSON IS A \` \`\`\`question \`.** There is no human gate and no prose park.
+    if nothing is actually running, end with \`\`\`done or register a question with \`mcp__frizz__ask\`.
+  - **WAITING ON A PERSON IS A REGISTERED QUESTION** \u2014 \`mcp__frizz__ask\`. There is no human gate, no
+    prose park, and no question fence.
   - **CI, RELEASES, DEPLOYS AND MERGE PROGRESSION ARE AUTOMATABLE \u2014 never \` \`\`\`awaiting \` them
     BLINDLY.** For a pull request, \`mcp__frizz__watch_pr\`. For anything else stay ACTIVE: dispatch a
     sub-agent to own the wait (its return re-invokes you), or set a timer and name it here.
@@ -35491,13 +35714,14 @@ exactly ONE of them.
     is still running, and emit a FRESH fence naming it. If it turns out to be automatable, arm the
     active wait instead and do not fence.
 
-- \` \`\`\`question \` \u2014 you need the human's input; see **Questions for the human**.
+- A REGISTERED QUESTION \u2014 \`mcp__frizz__ask\`, not a fence: you need the human's input, and the open
+  row IS the handback; see **Questions for the human**.
 
 ### When the work is finished but the thread found more
 
 Your mandate is complete and you turned up something else \u2014 a bug you were not sent for, a follow-up
 the change implies. \`done\` is barred (the finding dies with the card), \`awaiting\` is barred (nothing
-is running), and \`question\` only looks barred. That deadlock is not real, and stretching \`done\` is not
+is running), and asking only looks barred. That deadlock is not real, and stretching \`done\` is not
 how you break it. Take the first exit that fits:
 
 1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own
@@ -35506,10 +35730,10 @@ how you break it. Take the first exit that fits:
    is more than one sitting, dispatch an in-session
    SUB-AGENT: its result comes BACK to you, so the follow-up lands on YOUR card, in your diff, under one
    review. Then \`done\` is honest with nothing left over.
-2. **ASK** \u2014 the human should choose whether or how it happens; "nothing was pending" is not an
-   objection. This is the exit for work you cannot bound or verify, or that is genuinely the human's
-   call \u2014 and it is where a separable effort goes, as an OPTION they pick, rather than a card you
-   create for them.
+2. **ASK** \u2014 \`mcp__frizz__ask\`: the human should choose whether or how it happens; "nothing was
+   pending" is not an objection. This is the exit for work you cannot bound or verify, or that is
+   genuinely the human's call \u2014 and it is where a separable effort goes, as an OPTION they pick, rather
+   than a card you create for them.
 3. **HAND IT OFF TO ITS OWN CARD \u2014 the LAST resort, not the tidy one.** \`mcp__frizz__spawn_thread\` puts
    a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link
    in the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so
@@ -35577,88 +35801,101 @@ The API call is the unit of cost, not the tokens you type: each message re-reads
   do not rest on a step you could take now.`;
     QUESTIONS = `## Questions for the human
 
-You run under a dashboard, not a live chat, so your FINAL MESSAGE is the whole interface. Open with 2-4
-sentences of status (what's done, what's in flight, what this answer unblocks), then put each question
-in its own fenced \`question\` block \u2014 the dashboard renders them as answerable cards:
+You run under a dashboard, not a live chat, so a question is a ROW the human still owes an answer to,
+never a sentence in a message: \`mcp__frizz__ask\` registers it, and the dashboard renders it as an
+answerable card. **THERE IS NO \`question\` FENCE ANY MORE.** A fence with a question written in its body
+is plain prose \u2014 it draws no card, nothing can answer it, and it is not a sign-off. (Retired 2026-09-11:
+the fence was taught beside the tool for two weeks, workers went on writing it on most days, and nothing
+tracks a fence's answer \u2014 a fence is bytes in a message; the row is the only lifecycle.)
 
-\`\`\`question
-Should the settings store use SQLite or a JSON file?
-
-- A. SQLite \u2014 transactional, matches how sessions are already stored (recommended: consistency)
-- B. JSON file \u2014 zero deps, human-editable, racy under concurrent writes
-\`\`\`
-
-Each block must stand alone: the specific question, lettered options with a one-line tradeoff each, and
-enough context to answer cold. Options go in a markdown list so each renders on its own line, and the
-question itself stays on ONE line \u2014 inside a fence a newline is a HARD break, so a hard-wrapped sentence
-renders ragged in the card. Mark your recommendation by writing \`recommended\` on that option's line \u2014
-\`(recommended)\` or \`(recommended: one-line why)\` \u2014 and put it FIRST as \`A\`; mark exactly one. Use
-MULTIPLE blocks for multiple independent questions, never one bundled block. A bare "which approach?"
-with no options is a broken handoff.
-
-NO "I" AND NO "you" ANYWHERE IN A QUESTION \u2014 this block, or any interactive prompt. Clicking an
-option is the HUMAN speaking, so first and second person flip between writer and reader: in "A. Leave
-it \u2014 you run the command yourself" / "B. I run it now", neither line says which actor is which. Write
-the whole block actor-explicit \u2014 each option an instruction the human hands back ("Reinstall the
-hooks now") or one that names its actor outright ("the worker retries nightly", "left for the
+\`ask\` takes \`questions\` \u2014 several at once, each with \`question\`, \`kind\` (\`question\` = pick one,
+\`multi\` = pick several, no options at all = free text), an optional \`danger\`, and \`options\` each
+carrying a \`label\`, a \`description\` (ONE LINE by default \u2014 name the trade-off and stop; earn more
+than that and spend it on a shape the human can SCAN, a short list, a table, a code block, the diff an
+option would produce, the message that would be posted, and never a run of one-sentence paragraphs;
+it renders inside the option, so the human sees it BEFORE choosing), an optional \`recommended\`, and
+optional \`followUps\`: questions that become live ONLY if that option is taken, so you can ask "and if
+so, which?" without asking it of somebody who said no. Written out, one registration reads:
+
+    question: Should the settings store use SQLite or a JSON file?
+    kind: question
+    options:
+      - label: SQLite
+        description: transactional, matches how sessions are already stored
+        recommended: true
+      - label: JSON file
+        description: zero deps, human-editable, racy under concurrent writes
+
+Each question must stand alone: the specific question on ONE line, options each with a one-line
+trade-off, and enough context to answer cold. The card letters the options A, B, C in the order you
+give them, so put the one you would take FIRST and mark it \`recommended\`; mark exactly one. Several
+independent questions are several entries of ONE \`ask\` call, never one bundled question. A bare
+"which approach?" with no options is a broken handoff.
+
+NO "I" AND NO "you" ANYWHERE IN A QUESTION \u2014 the question, its options, or any interactive prompt.
+Clicking an option is the HUMAN speaking, so first and second person flip between writer and reader: in
+"Leave it \u2014 you run the command yourself" / "I run it now", neither line says which actor is which.
+Write the whole question actor-explicit \u2014 each option an instruction the human hands back ("Reinstall
+the hooks now") or one that names its actor outright ("the worker retries nightly", "left for the
 maintainer's own terminal"):
 
-\`\`\`question
-A reply for issue #482 explaining the workaround is drafted. Post it from the maintainer's GitHub account, or leave it a draft?
+    question: A reply for issue #482 explaining the workaround is drafted. Post it from the maintainer's GitHub account, or leave it a draft?
+    kind: question
+    options:
+      - label: Post it
+        description: the reporter is blocked and the workaround is verified
+        recommended: true
+      - label: Leave it in the handoff
+        description: for edits before anything is posted
 
-- A. Post it \u2014 the reporter is blocked and the workaround is verified (recommended)
-- B. Leave it in the handoff, for edits before anything is posted
-\`\`\`
-
-Write the block in the human's OWN vocabulary: they have their original prompt and nothing else \u2014 not
+Write the question in the human's OWN vocabulary: they have their original prompt and nothing else \u2014 not
 your plan, your notes, or the names you settled on while working. A name you coined mid-effort (a
 phase, lane, tier, step or section number, "the C path", "the second variant") means nothing to them, so
 translate it into what the thing does. Minimize code identifiers by default: lead with the behavior, and
 spend a file, symbol or flag where it genuinely reads clearest or the human already uses it. Every input
 the choice needs \u2014 what happens today, each option's user-visible consequence, any number that matters \u2014
-belongs INSIDE the block; "as discussed above" points at something they cannot see.
-
-A GO/NO-GO gate is not a special fence \u2014 it is an ordinary \`question\` with two options (the go and the
-decline, each a real choice the human can click). Tag the fence only to change how it renders:
-\`question danger\` for the genuinely irreversible (force-merge, deletion, history rewrite, prod
-rollback), \`question multi\` for select-several triage.
-
-**BETTER THAN A FENCED BLOCK \u2014 REGISTER THE QUESTION:** \`mcp__frizz__ask\` creates a ROW the human
-still owes an answer to, instead of a block inside a message. That is the difference that matters: a
-fence is answerable only while its message is on screen, so a question written into one is gone once
-the transcript scrolls or your context is compacted, while a registration is still there tomorrow. It
-takes \`questions\` \u2014 several at once, each with \`question\`, \`kind\` (\`question\` = pick one,
-\`multi\` = pick several, no options at all = free text), an optional \`danger\`, and \`options\` each
-carrying a \`label\`, a \`description\` (ONE LINE by default \u2014 name the trade-off and stop; earn more
-than that and spend it on a shape the human can SCAN, a short list, a table, a code block, the diff an
-option would produce, the message that would be posted, and never a run of one-sentence paragraphs;
-it renders inside the option, so the human sees it BEFORE choosing), an optional
-\`recommended\`, and optional \`followUps\`: questions that become live ONLY if that option is taken,
-so you can ask "and if so, which?" without asking it of somebody who said no. **REGISTERING A QUESTION DOES NOT END YOUR TURN** \u2014
-it carries no timeout and waits on a person, so keep doing everything that does not depend on the
-answer. The answer comes back as its own wake, restating what was asked. Withdraw one you no longer
-need with \`mcp__frizz__unask\`, above all when you work the answer out yourself. **ON A THREAD
-CARRYING A GOAL IT REFUSES** \u2014 a standing "keep going, decide for yourself" is autonomous mode, and the
-refusal hands that instruction back at the moment it matters. Decide, and say which way you went. A
-genuinely human-owned call still belongs in the prose of your FINAL MESSAGE; autonomous does not mean
-nobody reads.
+belongs INSIDE the question and its options; "as discussed above" points at something they cannot see.
+
+A GO/NO-GO gate is not a special kind \u2014 it is an ordinary \`question\` with two options (the go and the
+decline, each a real choice the human can click). Tag it only to change how it renders: \`danger\` for
+the genuinely irreversible (force-merge, deletion, history rewrite, prod rollback), \`kind: multi\` for
+select-several triage.
+
+**REGISTERING A QUESTION DOES NOT END YOUR TURN** \u2014 it carries no timeout and waits on a person, so
+keep doing everything that does not depend on the answer, and register the question the moment you
+find it rather than saving it for the end. The answer comes back as its own wake, restating what was
+asked. Withdraw one you no longer need with \`mcp__frizz__unask\`, above all when you work the answer
+out yourself. **ON A THREAD CARRYING A GOAL IT REFUSES** \u2014 a standing "keep going, decide for yourself"
+is autonomous mode, and the refusal hands that instruction back at the moment it matters. Decide, and
+say which way you went. A genuinely human-owned call still belongs in the prose of your FINAL MESSAGE;
+autonomous does not mean nobody reads.
 
 **EVERY OPEN QUESTION DRAWS ITS OWN CARD AT ITS REST \u2014 never write it into the handoff.** The
-registered card renders whether you mention it or not, and a fence that names or restates a registered
-question draws NOTHING: one question, one card, and answering the registered one is what settles the
-row and un-gates \`done\`. So the handoff's job is the reasoning around the ask, not the ask itself.
-(Mid-prose placement \u2014 an empty \`\`\`question fence carrying the row's id \u2014 was retired 2026-08-30;
-a marker you still write draws nothing.)
+registered card renders whether you mention it or not, and prose that restates a registered question
+draws NOTHING: one question, one card, and answering the registered one is what settles the row and
+un-gates \`done\`. So the handoff's job is the reasoning around the ask, not the ask itself.
+
+**TO PLACE A QUESTION INSIDE YOUR PROSE, WRITE AN EMPTY FENCE NAMING ITS ID** \u2014 the id \`ask\` returned
+(\`mcp__frizz__activity\` lists them). At the point your write-up has earned the ask \u2014 after the
+paragraph that sets it up, before the one that says what happens either way:
+
+\`\`\`question qst_ab12cd34
+\`\`\`
+
+Frizz draws the registered card THERE instead of at the tail. Nothing goes in the body: the card comes
+from the ROW, so nothing about the question is ever guessed from prose, and a marker naming no open
+question of yours draws nothing. One marker per question. Placement is OPTIONAL \u2014 a question with no
+marker renders at the tail of the rest, and a handoff that writes no marker loses nothing. Every answer
+of the rest is sent together, with ONE Send button at the tail, wherever the cards sit. (Placement was
+retired 2026-08-30 and restored 2026-09-11 with the free-form fence's retirement: the marker references
+a row, which is exactly what a fence with a body never did.)
 
 A question you no longer want answered is not one you leave out of the write-up \u2014 it is one you
 \`unask\`, which is the difference between deciding something yourself and quietly hoping nobody
 answers. Questions asked in one \`ask\` call render together and send as one batch.
 
-Fence a question you did NOT register only when you mean to ask it in the message itself.
-
-A \` \`\`\`question \` block IS the handback \u2014 do not also emit a \`done\`/\`awaiting\` fence, and the same
-holds while a REGISTERED question stands open. Answers arrive as your next user message, possibly as
-terse as "1: A, 2: B".`;
+**AN OPEN REGISTERED QUESTION IS THE HANDBACK** \u2014 emit no \`done\`/\`awaiting\` fence beside it, and
+write no question fence at all. The answer arrives as your next user message, as its own wake.`;
     STOP_CRITERION = `## The stop criterion
 
 **COMING TO REST IS A STOP, and it needs the same justification as a question.** The far more common
@@ -35706,14 +35943,14 @@ Stop only when a wrong guess would be BOTH costly AND hard to undo: destructive
 security posture with real exposure; product/UX direction that is genuinely the human's taste to set;
 scope so vague that acting means inventing substantial new code with no way to check it. Everything
 else \u2014 mechanical work, clear bugs, refactors, defaults you can justify, architecture you can reverse \u2014
-you finish. When you do stop, surface it as a \` \`\`\`question \` with your recommendation marked, and do
-all the work that does NOT depend on the answer first.`;
+you finish. When you do stop, register it with \`mcp__frizz__ask\` with your recommendation marked, and
+do all the work that does NOT depend on the answer first.`;
     TRIVIAL_PROMPTS = `## Trivial and conversational prompts
 
 Some dispatches never deserved a work effort \u2014 a greeting, a one-line question, a joke, a test ping.
 Resolve them with ZERO ceremony: answer inline in one message, and close with a \` \`\`\`done \` fence whose
 body is one line ("Answered inline \u2014 conversational prompt, nothing to ship."). If the answer genuinely
-needs a reply, ask with a \` \`\`\`question \` instead. Do not manufacture scope, restate the "task", or ask
+needs a reply, register it with \`mcp__frizz__ask\` instead. Do not manufacture scope, restate the "task", or ask
 clarifying questions to seem busy.`;
     THREAD_NAME = `## Name your thread once you know what the work is
 
@@ -36093,7 +36330,7 @@ Dispatches share a vocabulary for the deliverable and quality bar, not for fleet
   first that works? Cover and synthesize every relevant prong inline unless delegation was
   explicitly requested. Close with a \` \`\`\`done \` fence listing the completed research/evidence \u2014
   the report IS this thread's deliverable, unlike a bug/issue investigation headed for a fix, which
-  bare-rests; use \` \`\`\`question \` for a human call.
+  bare-rests; use \`mcp__frizz__ask\` for a human call.
 - **Audit thread** \u2014 adversarially verify correctness, safety, or compatibility of something that
   exists. Exercise proportionate cases and lenses until dry; re-check load-bearing verdicts and cite
   evidence. Thorough coverage is required, but the audit label alone does not authorize fan-out.
@@ -36374,11 +36611,10 @@ import { homedir as homedir13 } from "node:os";
 function clip(text2, max) {
   return text2.length > max ? `${text2.slice(0, max - 1)}\u2026` : text2;
 }
-function tildePath(path3) {
-  const home = homedir13();
+function tildePath(path3, home = homedir13()) {
   if (!path3.startsWith(home)) return path3;
   const rest = path3.slice(home.length);
-  return rest === "" ? "~" : rest.startsWith("/") ? `~${rest}` : path3;
+  return rest === "" ? "~" : /^[\\/]/.test(rest) ? `~${rest}` : path3;
 }
 function inputPreview(input, shown) {
   if (!input) return "";
@@ -36612,8 +36848,8 @@ var init_claude_permission_interactions = __esm({
     HAS_UNSAFE_TEXT = new RegExp(UNSAFE_TEXT_SOURCE, "u");
     CLAUDE_NOTES_ONLY = "(notes only)";
     CLAUDE_QUESTION_DECLINED = "The operator did not answer this question from the frizz dashboard. Do not ask it again with this tool \u2014 decide with the information you already have, or raise it in your final message.";
-    CLAUDE_ASK_DENY_MESSAGE = "Frizz could not render this question as a card. Ask it in your FINAL MESSAGE instead, in a ```question fenced block \u2014 context, the question, lettered `- A. \u2026` options, a recommendation \u2014 then end your turn. The operator answers it from the queue and the reply arrives as your next user message.";
-    CLAUDE_ASK_WITHDRAWN_MESSAGE = "This question was withdrawn before anyone answered it \u2014 most likely because the operator sent a message instead. Read their next message and follow it. Do not ask this again with this tool; if you still need the decision, put it in your final message as a ```question fenced block.";
+    CLAUDE_ASK_DENY_MESSAGE = "Frizz could not render this question as a card. Register it with `mcp__frizz__ask` instead \u2014 context, the question, options with a one-line trade-off each, the recommended one first \u2014 never as a ```question fence, which is retired. The operator answers it from the queue and the reply arrives as your next user message.";
+    CLAUDE_ASK_WITHDRAWN_MESSAGE = "This question was withdrawn before anyone answered it \u2014 most likely because the operator sent a message instead. Read their next message and follow it. Do not ask this again with this tool; if you still need the decision, register it with `mcp__frizz__ask`.";
   }
 });
 
@@ -37025,7 +37261,7 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync12, constants, existsSync as existsSync9, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync19, realpathSync as realpathSync8, statSync as statSync13, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
+import { closeSync as closeSync12, constants, existsSync as existsSync10, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync20, realpathSync as realpathSync8, statSync as statSync13, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
 import { basename as basename6, join as join29, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
@@ -37045,7 +37281,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync9(join29(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync10(join29(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -37078,7 +37314,7 @@ function resolveLegacyThreadFile(projectDir, value) {
     const fd = openSync13(path3, constants.O_RDONLY | constants.O_NOFOLLOW);
     try {
       openedBefore = fstatSync2(fd);
-      contents = readFileSync19(fd);
+      contents = readFileSync20(fd);
       openedAfter = fstatSync2(fd);
     } finally {
       closeSync12(fd);
@@ -37142,7 +37378,7 @@ function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
   const dir = join29(plugin, "skills", "gh", "scripts");
-  return existsSync9(join29(dir, "ci-watch.mjs")) ? dir : void 0;
+  return existsSync10(join29(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -37201,7 +37437,7 @@ function frizzConfigBlock(projectDir) {
   try {
     const st = statSync13(path3);
     if (!st.isFile() || st.size > FRIZZ_MD_MAX_BYTES) return "";
-    body = readFileSync19(path3, "utf8").trim();
+    body = readFileSync20(path3, "utf8").trim();
   } catch {
     return "";
   }
@@ -37241,7 +37477,7 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
   const scriptPath = join29(pluginDir, "bin", FRIZZ_MCP.script);
-  if (!existsSync9(scriptPath)) return void 0;
+  if (!existsSync10(scriptPath)) return void 0;
   return {
     scriptPath,
     stateDir,
@@ -38089,20 +38325,20 @@ function resolveSessionProfile(row, tele) {
 function resolveSessionPermission(row, tele) {
   const saved = PermissionMode.safeParse(row.permission_mode);
   const pending = PermissionMode.safeParse(row.permission_pending);
-  const normalize3 = (mode) => effectivePermissionMode(row.backend === "codex" ? "codex" : "claude", mode);
-  if (saved.success && pending.success && normalize3(saved.data) === normalize3(pending.data)) return normalize3(saved.data);
+  const normalize2 = (mode) => effectivePermissionMode(row.backend === "codex" ? "codex" : "claude", mode);
+  if (saved.success && pending.success && normalize2(saved.data) === normalize2(pending.data)) return normalize2(saved.data);
   if (row.backend === "codex" && saved.success) {
     const observedAt = tele?.permissionModeAt ? Date.parse(tele.permissionModeAt) : NaN;
     const spawnedAt = Date.parse(row.spawned_at);
     if (tele?.permissionMode && Number.isFinite(observedAt) && Number.isFinite(spawnedAt) && observedAt >= spawnedAt) {
       const setAt = row.permission_set_at ? Date.parse(row.permission_set_at) : NaN;
-      if (Number.isFinite(setAt) && setAt > observedAt) return normalize3(saved.data);
-      return normalize3(tele.permissionMode);
+      if (Number.isFinite(setAt) && setAt > observedAt) return normalize2(saved.data);
+      return normalize2(tele.permissionMode);
     }
-    return normalize3(saved.data);
+    return normalize2(saved.data);
   }
-  if (saved.success) return normalize3(saved.data);
-  return tele?.permissionMode ? normalize3(tele.permissionMode) : void 0;
+  if (saved.success) return normalize2(saved.data);
+  return tele?.permissionMode ? normalize2(tele.permissionMode) : void 0;
 }
 function resolvePendingPermission(row) {
   const parsed = PermissionMode.safeParse(row.permission_pending);
@@ -40264,8 +40500,8 @@ ${wakeTimeHeader(nowMs, spokeAt)}`,
         "in a sentence breaks the YAML, which is why `reason:` is gone.",
         "",
         "`mcp__frizz__activity` lists everything you have running, and prints it back as a ready-to-paste",
-        "fence. If you are not waiting on anything, you are not awaiting \u2014 end with ```done, or ask a",
-        "```question."
+        "fence. If you are not waiting on anything, you are not awaiting \u2014 end with ```done, or register",
+        "a question with `mcp__frizz__ask`."
       ].join("\n") : nameless ? [
         `${PARK_CORRECTION_NAMES_LEAD}nothing to wait on, so it is not a park \u2014 your thread is still`,
         "in the queue, and nothing will wake you.",
@@ -40281,15 +40517,15 @@ ${wakeTimeHeader(nowMs, spokeAt)}`,
         "Use `mcp__frizz__activity` to read it all back as a ready-to-paste fence.",
         "",
         "AND IF YOU ARE NOT WAITING ON ANYTHING, you are not awaiting \u2014 you are done. End with ```done,",
-        "or ask a ```question if you need the human."
+        "or register a question with `mcp__frizz__ask` if you need the human."
       ].join("\n") : expired ? parkExpiredWakeMessage(status) : allFinished ? parkFinishedWakeMessage(status, dead.length !== 1) : [
         `${PARK_CORRECTION_NAMES_LEAD}${dead.length === 1 ? "something that is" : "things that are"} not running, so it is not a park and your thread stayed in the queue.`,
         "",
         ...status,
         "",
         "Use `mcp__frizz__activity` to read back what you actually have out, with the exact id each line",
-        "needs, then re-fence naming only those \u2014 or end in ```done or a ```question if there is nothing",
-        "left to wait for."
+        "needs, then re-fence naming only those \u2014 or end in ```done or a registered question",
+        "(`mcp__frizz__ask`) if there is nothing left to wait for."
       ].join("\n");
       const cause = retired.length > 0 ? "retired" : nameless ? "nameless" : expired ? "expired" : "dead";
       const ops = cause === "expired" ? [] : liveOpsLines({
@@ -41431,10 +41667,31 @@ import { randomBytes } from "node:crypto";
 import pty from "node-pty";
 function createLoginUtility(deps) {
   const spawnPty = deps.spawnPty ?? pty.spawn;
+  const env = deps.env ?? process.env;
   const lifetimeMs = deps.lifetimeMs ?? ATTEMPT_LIFETIME_MS;
   const attempts = /* @__PURE__ */ new Map();
   function loginArgv(backend) {
-    return backend === "codex" ? { file: deps.codexBin ?? "codex", args: ["login"] } : { file: deps.claudeBin ?? "claude", args: ["auth", "login"] };
+    if (backend === "codex") {
+      const codex = resolveCodexExecutable(deps.codexBin, { env });
+      return { file: codex.file, args: [...codex.args, "login"] };
+    }
+    return { file: resolveClaudeExecutableAbsolute(deps.claudeBin, env), args: ["auth", "login"] };
+  }
+  function failedAttempt(id, backend, cause) {
+    const reason = cause instanceof Error ? cause.message : String(cause);
+    const error = `Could not start the ${backend === "codex" ? "Codex" : "Claude"} sign-in: ${reason}`;
+    return {
+      id,
+      backend,
+      timer: setTimeout(() => teardown(id), lifetimeMs),
+      buffer: `${error}\r
+`,
+      bufferBytes: Buffer.byteLength(error) + 2,
+      exited: true,
+      error,
+      dataListeners: /* @__PURE__ */ new Set(),
+      exitListeners: /* @__PURE__ */ new Set()
+    };
   }
   function teardown(id) {
     const attempt = attempts.get(id);
@@ -41452,7 +41709,7 @@ function createLoginUtility(deps) {
     }
     attempt.exitListeners.clear();
     try {
-      attempt.term.kill();
+      attempt.term?.kill();
     } catch {
     }
   }
@@ -41464,14 +41721,22 @@ function createLoginUtility(deps) {
         teardown(attempt2.id);
       }
       const id = `login-${randomBytes(8).toString("hex")}`;
-      const { file, args } = loginArgv(backend);
-      const term = spawnPty(file, args, {
-        name: process.platform === "win32" ? "xterm-color" : "xterm-256color",
-        cwd: deps.cwd,
-        env: process.env,
-        cols: 120,
-        rows: 30
-      });
+      let term;
+      try {
+        const { file, args } = loginArgv(backend);
+        term = spawnPty(file, args, {
+          name: process.platform === "win32" ? "xterm-color" : "xterm-256color",
+          cwd: deps.cwd,
+          env,
+          cols: 120,
+          rows: 30
+        });
+      } catch (cause) {
+        const failed = failedAttempt(id, backend, cause);
+        failed.timer.unref?.();
+        attempts.set(id, failed);
+        return { attemptId: id };
+      }
       const attempt = {
         id,
         backend,
@@ -41523,7 +41788,7 @@ function createLoginUtility(deps) {
         write: (data) => {
           if (!attempt.exited) {
             try {
-              attempt.term.write(data);
+              attempt.term?.write(data);
             } catch {
             }
           }
@@ -41531,7 +41796,7 @@ function createLoginUtility(deps) {
         resize: (cols, rows) => {
           if (!attempt.exited) {
             try {
-              attempt.term.resize(cols, rows);
+              attempt.term?.resize(cols, rows);
             } catch {
             }
           }
@@ -41552,7 +41817,7 @@ function createLoginUtility(deps) {
     status(attemptId) {
       const attempt = attempts.get(attemptId);
       if (!attempt) return { state: "exited" };
-      return { state: attempt.exited ? "exited" : "running", backend: attempt.backend };
+      return { state: attempt.exited ? "exited" : "running", backend: attempt.backend, ...attempt.error ? { error: attempt.error } : {} };
     },
     cancel(attemptId) {
       teardown(attemptId);
@@ -41566,6 +41831,8 @@ var ATTEMPT_LIFETIME_MS, REPLAY_CAP_BYTES;
 var init_login_utility = __esm({
   "packages/server/src/login-utility.ts"() {
     "use strict";
+    init_claude_broker_host();
+    init_codex_executable();
     ATTEMPT_LIFETIME_MS = 10 * 60 * 1e3;
     REPLAY_CAP_BYTES = 256 * 1024;
   }
@@ -41677,7 +41944,7 @@ var init_stale_socket_sweep = __esm({
 
 // packages/server/src/orphan-reaper.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { readFileSync as readFileSync20 } from "node:fs";
+import { readFileSync as readFileSync21 } from "node:fs";
 import { dirname as dirname13 } from "node:path";
 function firstTokenBasename(command) {
   const first = command.trimStart().split(/\s+/, 1)[0] ?? "";
@@ -41833,7 +42100,7 @@ ${chunk}`;
   }
   return rows;
 }
-function reapSubtrees(seed, rows, protectedPids, live, kill = defaultKill) {
+function reapSubtrees(seed, rows, protectedPids, live, kill = defaultKill2) {
   const keep = (row) => protectedPids.has(row.pid) || isSessionRoot(row.command) || isTmuxServer(row.command) || row.slug !== null && live.has(row.slug);
   const order = subtreeKillOrder(seed, rows, keep);
   for (const pid of order) kill(pid);
@@ -41885,8 +42152,9 @@ function sweepOrphansOnce(deps = {}) {
   let rows;
   try {
     rows = enumerateProcs(exec, { platform: deps.platform, readEnv: deps.readEnv });
-  } catch {
-    return { reaped: 0, deadSlugs: [], liveSlugs: [] };
+  } catch (error) {
+    const code = error?.code;
+    return { reaped: 0, deadSlugs: [], liveSlugs: [], ...code === "ENOENT" ? { unavailable: "`ps` is not on PATH" } : {} };
   }
   const protectedPids = selfAndAncestors(rows, selfPid);
   const { reap, liveSlugs } = decideOrphans(rows, { minAgeMs, protectedPids });
@@ -41910,14 +42178,25 @@ function sweepStaleBrokerSockets() {
   }
 }
 function startOrphanReaper(deps = {}) {
+  if ((deps.platform ?? process.platform) === "win32") {
+    deps.log?.(UNAVAILABLE_ON_WINDOWS);
+    return () => {
+    };
+  }
   const intervalMs = deps.intervalMs ?? ORPHAN_REAP_INTERVAL_MS;
+  const unavailable = (result) => {
+    if (!result.unavailable) return false;
+    deps.log?.(`orphan-reaper: unavailable on this machine \u2014 ${result.unavailable}; background processes a stopped thread leaves behind are not collected here`);
+    return true;
+  };
   try {
-    sweepOrphansOnce(deps);
+    if (unavailable(sweepOrphansOnce(deps))) return () => {
+    };
   } catch {
   }
   const timer = setInterval(() => {
     try {
-      sweepOrphansOnce(deps);
+      if (unavailable(sweepOrphansOnce(deps))) clearInterval(timer);
     } catch {
     }
   }, intervalMs);
@@ -41932,7 +42211,7 @@ function startOrphanReaper(deps = {}) {
     clearInterval(socketTimer);
   };
 }
-var ORPHAN_REAP_INTERVAL_MS, ORPHAN_MIN_AGE_MS, SLUG_RE, defaultExec, defaultReadEnv, defaultKill, STALE_SOCKET_SWEEP_INTERVAL_MS, STALE_SOCKET_SWEEP_DELAY_MS, CLAUDE_BROKER_SOCKET_PREFIX;
+var ORPHAN_REAP_INTERVAL_MS, ORPHAN_MIN_AGE_MS, SLUG_RE, defaultExec, defaultReadEnv, defaultKill2, STALE_SOCKET_SWEEP_INTERVAL_MS, STALE_SOCKET_SWEEP_DELAY_MS, CLAUDE_BROKER_SOCKET_PREFIX, UNAVAILABLE_ON_WINDOWS;
 var init_orphan_reaper = __esm({
   "packages/server/src/orphan-reaper.ts"() {
     "use strict";
@@ -41944,12 +42223,12 @@ var init_orphan_reaper = __esm({
     defaultExec = (file, args) => execFileSync4(file, args, { encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 1e4 });
     defaultReadEnv = (pid) => {
       try {
-        return readFileSync20(`/proc/${pid}/environ`, "utf8");
+        return readFileSync21(`/proc/${pid}/environ`, "utf8");
       } catch {
         return null;
       }
     };
-    defaultKill = (pid) => {
+    defaultKill2 = (pid) => {
       try {
         process.kill(pid, "SIGKILL");
       } catch {
@@ -41958,6 +42237,7 @@ var init_orphan_reaper = __esm({
     STALE_SOCKET_SWEEP_INTERVAL_MS = 10 * 6e4;
     STALE_SOCKET_SWEEP_DELAY_MS = 3e4;
     CLAUDE_BROKER_SOCKET_PREFIX = "frizz-claude-";
+    UNAVAILABLE_ON_WINDOWS = "orphan-reaper: unavailable on Windows \u2014 a worker's FRIZZ_THREAD is read from its process environment, which Windows does not expose; background processes a stopped thread leaves behind are not collected here, and a live thread's runaway work is not reported";
   }
 });
 
@@ -45299,7 +45579,7 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync11, readFileSync as readFileSync21, writeFileSync as writeFileSync11 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync22, writeFileSync as writeFileSync11 } from "node:fs";
 import { basename as basename7, dirname as dirname14, resolve as resolve8 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
@@ -45314,8 +45594,8 @@ function repairThreadFile(frizzDir, file) {
   const abs = resolve8(root, file);
   if (dirname14(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
-  if (!existsSync11(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
-  const content = readFileSync21(abs, "utf8");
+  if (!existsSync12(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
+  const content = readFileSync22(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
     throw new RepairError(`${basename7(abs)} already opens with a "---" block \u2014 repair only heals a MISSING frontmatter block`);
@@ -45506,9 +45786,9 @@ var init_repo_files = __esm({
 });
 
 // cc-worker/hooks/bash-background.mjs
-import { readFileSync as readFileSync22 } from "node:fs";
+import { readFileSync as readFileSync23, realpathSync as realpathSync10 } from "node:fs";
 import { basename as basename8 } from "node:path";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 function emit(obj) {
   process.stdout.write(JSON.stringify(obj));
   process.exit(0);
@@ -45644,8 +45924,14 @@ function evaluateBashBackgroundHook(input, env = process.env) {
     }
   };
 }
-function isDirectHookExecution(argv1, moduleUrl) {
-  return typeof argv1 === "string" && basename8(argv1) === "bash-background.mjs" && pathToFileURL(argv1).href === moduleUrl;
+function isDirectHookExecution(argv1, moduleUrl, realpath = realpathSync10) {
+  if (typeof argv1 !== "string" || basename8(argv1) !== "bash-background.mjs") return false;
+  if (pathToFileURL(argv1).href === moduleUrl) return true;
+  try {
+    return realpath(argv1) === realpath(fileURLToPath4(moduleUrl));
+  } catch {
+    return false;
+  }
 }
 var LOCAL_SHELL_SCRIPT;
 var init_bash_background = __esm({
@@ -45655,7 +45941,7 @@ var init_bash_background = __esm({
     if (isDirectHookExecution(process.argv[1], import.meta.url)) {
       try {
         const env = process.argv.includes("--frizz-thread") ? { ...process.env, FRIZZ_THREAD: process.env.FRIZZ_THREAD || "codex-worker" } : process.env;
-        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync22(0, "utf8")), env));
+        emit(evaluateBashBackgroundHook(JSON.parse(readFileSync23(0, "utf8")), env));
       } catch {
         emit({});
       }
@@ -45664,7 +45950,7 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync13, existsSync as existsSync12, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync23, readSync as readSync7, renameSync as renameSync9, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { closeSync as closeSync13, existsSync as existsSync13, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync24, readSync as readSync7, renameSync as renameSync9, statSync as statSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
 import { join as join35 } from "node:path";
@@ -46286,7 +46572,7 @@ function persistBase64Image(mediaType, data, idKey) {
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
   const path3 = join35(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
-    if (existsSync12(path3)) return path3;
+    if (existsSync13(path3)) return path3;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
@@ -46307,10 +46593,10 @@ function persistSentFile(srcPath, idKey) {
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
     const dest = join35(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
-    if (existsSync12(dest)) return dest;
+    if (existsSync13(dest)) return dest;
     const size = statSync15(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
-    const buf = readFileSync23(srcPath);
+    const buf = readFileSync24(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
     const tmp = join35(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
@@ -46751,7 +47037,7 @@ function readTranscript(project, sessionId) {
 }
 function verifyIncrementalParse(path3, identityPrefix, incremental) {
   try {
-    const fresh = parseTranscript(readFileSync23(path3, "utf8"), identityPrefix);
+    const fresh = parseTranscript(readFileSync24(path3, "utf8"), identityPrefix);
     const a = JSON.stringify(incremental);
     const b = JSON.stringify(fresh);
     if (a !== b) {
@@ -47807,7 +48093,7 @@ function sourceForThread(project, storage, slug, backendFor) {
   }
   if (!FOREIGN_SESSION_ID_RE.test(slug)) return void 0;
   const claudePath = resolveTranscriptPath(project, slug);
-  if (existsSync12(claudePath)) {
+  if (existsSync13(claudePath)) {
     return { slug, sessionId: slug, nativeId: slug, backend: "claude", runtimeGeneration: 0, path: claudePath };
   }
   const rollout = (backendFor?.("codex") ?? defaultCodexBackend()).transcriptPath(slug);
@@ -48073,7 +48359,7 @@ function readEarlierThreadTranscriptPage(project, storage, slug, cursor, backend
 }
 function readCodexTranscriptFile(absPath, nativeId = absPath) {
   try {
-    return parseCodexTranscript(readFileSync23(absPath, "utf8"), `codex:${nativeId}`);
+    return parseCodexTranscript(readFileSync24(absPath, "utf8"), `codex:${nativeId}`);
   } catch {
     return [];
   }
@@ -48171,7 +48457,7 @@ function projectTranscriptPageAgentLifecycles(page, lookup, peerLookup) {
 function readTranscriptFile(absPath) {
   try {
     const pathKey = createHash13("sha256").update(absPath).digest("base64url").slice(0, 16);
-    return parseTranscript(readFileSync23(absPath, "utf8"), `claude-file:${pathKey}`);
+    return parseTranscript(readFileSync24(absPath, "utf8"), `claude-file:${pathKey}`);
   } catch {
     return [];
   }
@@ -48260,15 +48546,30 @@ function validateExternalUrl(raw2) {
   }
   return { ok: true, url: parsed.toString() };
 }
-function openExternalUrl(raw2) {
+function externalUrlOpenCommand(url, platform3 = process.platform) {
+  if (platform3 === "darwin") return { command: "open", args: [url] };
+  if (platform3 === "win32") return { command: "rundll32.exe", args: ["url.dll,FileProtocolHandler", url] };
+  return { command: "xdg-open", args: [url] };
+}
+async function openExternalUrl(raw2, options = {}) {
   const v = validateExternalUrl(raw2);
   if (!v.ok) throw new Error(v.reason);
-  const [cmd, args] = process.platform === "darwin" ? ["open", [v.url]] : ["xdg-open", [v.url]];
-  spawn6(cmd, args, { detached: true, stdio: "ignore" }).unref();
+  const spec = externalUrlOpenCommand(v.url, options.platform);
+  const child = (options.spawn ?? spawn6)(spec.command, [...spec.args], { detached: true, stdio: "ignore", windowsHide: true });
+  try {
+    await awaitOpenerStart(child, spec.command);
+    return { opened: true };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    (options.onError ?? ((line) => log.warn("open-external", line)))(`could not open ${v.url}: ${message}`);
+    return { opened: false, error: message };
+  }
 }
 var init_open_external = __esm({
   "packages/server/src/open-external.ts"() {
     "use strict";
+    init_local_file();
+    init_logging();
   }
 });
 
@@ -48597,7 +48898,14 @@ var init_account_actions = __esm({
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
-function providerResumeCommand(backend, projectDir, sessionId) {
+function powershellQuote(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
+function providerResumeCommand(backend, projectDir, sessionId, platform3 = process.platform) {
+  if (platform3 === "win32") {
+    const resume2 = backend === "codex" ? `& codex resume ${powershellQuote(sessionId)} --dangerously-bypass-approvals-and-sandbox` : `& claude --resume ${powershellQuote(sessionId)} --dangerously-skip-permissions`;
+    return `Set-Location -LiteralPath ${powershellQuote(projectDir)}; ${resume2}`;
+  }
   const resume = backend === "codex" ? `codex resume ${shellQuote(sessionId)} --dangerously-bypass-approvals-and-sandbox` : `claude --resume ${shellQuote(sessionId)} --dangerously-skip-permissions`;
   return `cd ${shellQuote(projectDir)} && ${resume}`;
 }
@@ -48945,11 +49253,11 @@ var init_directory_picker = __esm({
 });
 
 // packages/server/src/router.ts
-import { readFileSync as readFileSync24, statSync as statSync17 } from "node:fs";
+import { readFileSync as readFileSync25, statSync as statSync17 } from "node:fs";
 import { join as join36, resolve as resolve9 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { basename as basename9, dirname as dirname15 } from "node:path";
-import { existsSync as existsSync13, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 function validateGithubDispatchProfile(input) {
   validateThreadProfile(input.backend, input.model, input.effort);
@@ -49159,7 +49467,7 @@ function storeProjectIcon(id, name, bytes) {
 function setProjectIconFromFile(id, file) {
   let bytes;
   try {
-    bytes = readFileSync24(file);
+    bytes = readFileSync25(file);
   } catch {
     throw new Error("That file could not be read.");
   }
@@ -50779,7 +51087,8 @@ Say which way you went and why in your write-up, so the human can course-correct
     openExternal: mutation({
       input: external_exports.object({ url: external_exports.string() }),
       handler: async ({ input }) => {
-        openExternalUrl(input.url);
+        const result = await openExternalUrl(input.url);
+        if (!result.opened) throw new Error(result.error);
       }
     }),
     // A local file can be opened only after its canonical real path is contained by the openable roots
@@ -51187,7 +51496,7 @@ Say which way you went and why in your write-up, so the human can course-correct
         }
         const updated = clearProjectIcon(input.id);
         if (!updated) throw new Error("No such project.");
-        return projectCard(updated, !existsSync13(updated.path));
+        return projectCard(updated, !existsSync14(updated.path));
       }
     }),
     /**
@@ -51593,7 +51902,7 @@ var init_compression = __esm({
 });
 
 // packages/server/src/local-image.ts
-import { readFileSync as readFileSync25, realpathSync as realpathSync10, statSync as statSync18 } from "node:fs";
+import { readFileSync as readFileSync26, realpathSync as realpathSync11, statSync as statSync18 } from "node:fs";
 import { extname as extname2, isAbsolute as isAbsolute6 } from "node:path";
 function resolveLocalImage(rawPath) {
   if (!rawPath || !isAbsolute6(rawPath)) return { status: 400 };
@@ -51601,13 +51910,13 @@ function resolveLocalImage(rawPath) {
   if (!contentType) return { status: 400 };
   let real;
   try {
-    real = realpathSync10(rawPath);
+    real = realpathSync11(rawPath);
   } catch {
     return { status: 404 };
   }
   try {
     if (!statSync18(real).isFile()) return { status: 404 };
-    return { status: 200, contentType, body: readFileSync25(real) };
+    return { status: 200, contentType, body: readFileSync26(real) };
   } catch {
     return { status: 404 };
   }
@@ -51627,7 +51936,7 @@ var init_local_image = __esm({
 });
 
 // packages/server/src/project-icon.ts
-import { readFileSync as readFileSync26, readdirSync as readdirSync10, realpathSync as realpathSync11, statSync as statSync19 } from "node:fs";
+import { readFileSync as readFileSync27, readdirSync as readdirSync10, realpathSync as realpathSync12, statSync as statSync19 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
 import { basename as basename10, dirname as dirname16, extname as extname3, join as join37, relative as relative2, sep as sep3 } from "node:path";
 function normalizeStem(stem) {
@@ -51689,7 +51998,7 @@ function iconDirectories(root) {
 function manifestIcons(manifestPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync26(manifestPath, "utf8"));
+    parsed = JSON.parse(readFileSync27(manifestPath, "utf8"));
   } catch {
     return [];
   }
@@ -51776,21 +52085,21 @@ function resolveProjectIconResponse(id, options = {}) {
   if (!contentType) return { status: 404 };
   let real;
   try {
-    real = realpathSync11(path3);
+    real = realpathSync12(path3);
     if (!statSync19(real).isFile()) return { status: 404 };
   } catch {
     return { status: 404 };
   }
   const roots = [entry.path, projectStateDir(id, home)].map((root) => {
     try {
-      return realpathSync11(root);
+      return realpathSync12(root);
     } catch {
       return root;
     }
   });
   if (!roots.some((root) => real === root || real.startsWith(root + sep3))) return { status: 404 };
   try {
-    return { status: 200, contentType, body: readFileSync26(real) };
+    return { status: 200, contentType, body: readFileSync27(real) };
   } catch {
     return { status: 404 };
   }
@@ -51902,7 +52211,7 @@ var init_project_icon = __esm({
 });
 
 // packages/server/src/local-visualization.ts
-import { readdirSync as readdirSync11, readFileSync as readFileSync27, realpathSync as realpathSync12, statSync as statSync20 } from "node:fs";
+import { readdirSync as readdirSync11, readFileSync as readFileSync28, realpathSync as realpathSync13, statSync as statSync20 } from "node:fs";
 import { join as join38, sep as sep4 } from "node:path";
 function children(path3, pattern) {
   try {
@@ -51919,8 +52228,8 @@ function resolveFragment(projectDir, sessionId, file) {
   let projectReal;
   let baseReal;
   try {
-    projectReal = realpathSync12(projectDir);
-    baseReal = realpathSync12(base);
+    projectReal = realpathSync13(projectDir);
+    baseReal = realpathSync13(base);
   } catch {
     return null;
   }
@@ -51933,7 +52242,7 @@ function resolveFragment(projectDir, sessionId, file) {
         const sessionRoot = join38(baseReal, year, month, day, sessionId);
         const candidate = join38(monthDir, day, sessionId, file);
         try {
-          const real = realpathSync12(candidate);
+          const real = realpathSync13(candidate);
           if (isUnder2(real, sessionRoot) && statSync20(real).isFile()) return real;
         } catch {
         }
@@ -52017,7 +52326,7 @@ function resolveLocalVisualization(projectDir, sessionId, file) {
   try {
     const size = statSync20(path3).size;
     if (size > MAX_FRAGMENT_BYTES) return { status: 413 };
-    fragment = readFileSync27(path3, "utf8");
+    fragment = readFileSync28(path3, "utf8");
   } catch {
     return { status: 404 };
   }
@@ -53539,7 +53848,7 @@ var init_local_file_watch = __esm({
 });
 
 // packages/server/src/boot-progress.ts
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync28, renameSync as renameSync10, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync29, renameSync as renameSync10, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
 import { basename as basename12, dirname as dirname18, join as join40 } from "node:path";
 function bootProgressPath(stateDir) {
   return join40(stateDir, BOOT_PROGRESS_NAME);
@@ -53588,12 +53897,12 @@ var init_boot_progress = __esm({
 });
 
 // packages/server/src/runtime-lease.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync19, readdirSync as readdirSync12, readFileSync as readFileSync29, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync19, readdirSync as readdirSync12, readFileSync as readFileSync30, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "node:fs";
 import { dirname as dirname19, join as join41 } from "node:path";
 function runtimeVersionDir(bin) {
   let dir = dirname19(bin);
   for (let step = 0; step < MAX_ASCENT; step++) {
-    if (existsSync14(join41(dir, PROVISIONED_MARKER))) return dir;
+    if (existsSync15(join41(dir, PROVISIONED_MARKER))) return dir;
     const parent = dirname19(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -53642,7 +53951,7 @@ function liveRuntimeLeases(versionDir) {
     const path3 = join41(dir, name);
     let lease;
     try {
-      lease = JSON.parse(readFileSync29(path3, "utf8"));
+      lease = JSON.parse(readFileSync30(path3, "utf8"));
     } catch {
       continue;
     }
@@ -53673,10 +53982,10 @@ import { createHash as createHash15 } from "node:crypto";
 import {
   chmodSync,
   closeSync as closeSync16,
-  existsSync as existsSync15,
+  existsSync as existsSync16,
   mkdirSync as mkdirSync20,
   openSync as openSync17,
-  readFileSync as readFileSync30,
+  readFileSync as readFileSync31,
   readdirSync as readdirSync13,
   renameSync as renameSync11,
   rmSync as rmSync12,
@@ -53711,13 +54020,13 @@ function provisionedBinary(backend, root, label) {
   const dir = join42(root, backend, label);
   let marker;
   try {
-    marker = JSON.parse(readFileSync30(join42(dir, MARKER), "utf8"));
+    marker = JSON.parse(readFileSync31(join42(dir, MARKER), "utf8"));
   } catch {
     return void 0;
   }
   if (typeof marker.binary !== "string" || marker.label !== label) return void 0;
   const bin = join42(dir, marker.binary);
-  return existsSync15(bin) ? bin : void 0;
+  return existsSync16(bin) ? bin : void 0;
 }
 function octal(buffer, offset, length) {
   const text2 = buffer.toString("latin1", offset, offset + length).replace(/\0.*$/su, "").trim();
@@ -53739,7 +54048,7 @@ function safeEntryPath(dest, name) {
 function locateBinary(dir, backend, binary) {
   if (backend === "claude") {
     const direct = join42(dir, binary);
-    return existsSync15(direct) ? direct : void 0;
+    return existsSync16(direct) ? direct : void 0;
   }
   const vendor = join42(dir, "vendor");
   let triples;
@@ -53750,7 +54059,7 @@ function locateBinary(dir, backend, binary) {
   }
   for (const triple of triples) {
     const candidate = join42(vendor, triple, "bin", binary);
-    if (existsSync15(candidate)) return candidate;
+    if (existsSync16(candidate)) return candidate;
   }
   return void 0;
 }
@@ -53816,8 +54125,17 @@ async function provisionRuntime(backend, options) {
     };
     writeFileSync17(join42(partial, MARKER), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
+    const rename2 = options.rename ?? renameSync11;
     try {
-      renameSync11(partial, finalDir);
+      for (let attempt = 1; ; attempt++) {
+        try {
+          rename2(partial, finalDir);
+          break;
+        } catch (err) {
+          if (attempt >= RENAME_ATTEMPTS || !TRANSIENT_HANDLE_CODES.has(errorCode4(err) ?? "") || existsSync16(finalDir)) throw err;
+          await new Promise((resolve12) => setTimeout(resolve12, options.retryDelayMs ?? RENAME_RETRY_DELAY_MS));
+        }
+      }
     } catch (err) {
       const theirs = provisionedBinary(backend, root, coordinates.label);
       if (!theirs) throw err;
@@ -53831,7 +54149,8 @@ async function provisionRuntime(backend, options) {
     throw err;
   }
 }
-function sweepRuntimes(backend, root, keepLabel, now = Date.now()) {
+function sweepRuntimes(backend, root, keepLabel, now = Date.now(), deps = {}) {
+  const rm2 = deps.rm ?? defaultSweepRm;
   const backendDir = join42(root, backend);
   let entries2;
   try {
@@ -53856,8 +54175,14 @@ function sweepRuntimes(backend, root, keepLabel, now = Date.now()) {
         continue;
       }
     }
-    rmSync12(full, { recursive: true, force: true });
-    sweep.removed.push(full);
+    try {
+      rm2(full);
+      sweep.removed.push(full);
+    } catch (err) {
+      const code = errorCode4(err);
+      const reason = code && TRANSIENT_HANDLE_CODES.has(code) ? `in use (${code})` : `could not remove: ${err instanceof Error ? err.message : String(err)}`;
+      sweep.kept.push({ dir: full, leases: [], reason });
+    }
   }
   return sweep;
 }
@@ -53876,27 +54201,34 @@ async function resolveOne(backend, explicit, options) {
     return { bin: bare, source: "path", version: "unknown", note };
   }
   const root = options.root ?? runtimesRoot(env);
+  let provisioned;
   try {
-    const provisioned = await provisionRuntime(backend, {
+    provisioned = await provisionRuntime(backend, {
       root,
       coordinates,
       fetch: options.fetch,
       registry: options.registry,
+      rename: options.rename,
       onProgress: (message) => options.onProgress?.(backend, message)
     });
-    if (provisioned.fetched) log3("info", `runtimes: provisioned ${backend} ${provisioned.label} at ${provisioned.bin}`);
-    leaseRuntime(provisioned.bin, "server");
-    const sweep = sweepRuntimes(backend, root, coordinates.label);
-    for (const retired of sweep.removed) log3("info", `runtimes: retired ${retired}`);
-    for (const { dir, leases } of sweep.kept) {
-      log3("info", `runtimes: kept ${dir} \u2014 still used by ${leases.map((lease) => `${lease.role} pid ${lease.pid}`).join(", ")}`);
-    }
-    return { bin: provisioned.bin, source: "provisioned", version: provisioned.label };
   } catch (err) {
     const note = err instanceof Error ? err.message : String(err);
     log3("warn", `runtimes: could not provision ${backend} ${coordinates.label} (${note}); using ${bare} from PATH \u2014 the version Frizz was built against is not what will run`);
     return { bin: bare, source: "path", version: "unknown", note };
   }
+  if (provisioned.fetched) log3("info", `runtimes: provisioned ${backend} ${provisioned.label} at ${provisioned.bin}`);
+  leaseRuntime(provisioned.bin, "server");
+  try {
+    const sweep = sweepRuntimes(backend, root, coordinates.label, Date.now(), { rm: options.rm });
+    for (const retired of sweep.removed) log3("info", `runtimes: retired ${retired}`);
+    for (const { dir, leases, reason } of sweep.kept) {
+      const why = reason ?? `still used by ${leases.map((lease) => `${lease.role} pid ${lease.pid}`).join(", ")}`;
+      log3("info", `runtimes: kept ${dir} \u2014 ${why}`);
+    }
+  } catch (err) {
+    log3("warn", `runtimes: sweep of superseded ${backend} versions failed (${err instanceof Error ? err.message : String(err)}); the pin is unaffected`);
+  }
+  return { bin: provisioned.bin, source: "provisioned", version: provisioned.label };
 }
 async function resolveRuntimes(options = {}) {
   const [claude, codex] = await Promise.all([
@@ -53915,7 +54247,7 @@ function describeRuntime(backend, runtime) {
       return `${backend}: ${runtime.bin} from PATH${runtime.note ? ` \u2014 ${runtime.note}` : ""}`;
   }
 }
-var CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_VERSION, CODEX_VERSION, RUNTIMES_MODE_ENV, RUNTIMES_DIR_ENV, CLAUDE_BIN_ENV, CODEX_BIN_ENV, REGISTRY, MARKER, BLOCK, TarExtractor;
+var CLAUDE_AGENT_SDK_VERSION, CLAUDE_CODE_VERSION, CODEX_VERSION, RUNTIMES_MODE_ENV, RUNTIMES_DIR_ENV, CLAUDE_BIN_ENV, CODEX_BIN_ENV, REGISTRY, MARKER, BLOCK, TarExtractor, RENAME_ATTEMPTS, RENAME_RETRY_DELAY_MS, TRANSIENT_HANDLE_CODES, errorCode4, defaultSweepRm;
 var init_runtimes = __esm({
   "packages/server/src/runtimes.ts"() {
     "use strict";
@@ -54060,6 +54392,11 @@ var init_runtimes = __esm({
         }
       }
     };
+    RENAME_ATTEMPTS = 5;
+    RENAME_RETRY_DELAY_MS = 200;
+    TRANSIENT_HANDLE_CODES = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES", "ENOTEMPTY"]);
+    errorCode4 = (err) => err?.code;
+    defaultSweepRm = (path3) => rmSync12(path3, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 });
   }
 });
 
@@ -54592,7 +54929,7 @@ var init_legacy_project_db = __esm({
 });
 
 // packages/server/src/frizz-db.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync21, readdirSync as readdirSync14, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync21, readdirSync as readdirSync14, renameSync as renameSync12, statSync as statSync23 } from "node:fs";
 import { basename as basename13, dirname as dirname21, join as join43 } from "node:path";
 function frizzDatabaseLocation(options) {
   if (options.stateDir !== void 0) {
@@ -54677,7 +55014,7 @@ function openFrizzDatabase(options = {}) {
   };
 }
 function projectIdsWithFile(projectsDir, file) {
-  if (!existsSync16(projectsDir)) return [];
+  if (!existsSync17(projectsDir)) return [];
   return readdirSync14(projectsDir).filter((name) => {
     try {
       return statSync23(join43(projectsDir, name, file)).isFile();
@@ -54690,7 +55027,7 @@ function legacyProjectIds(projectsDir) {
   return projectIdsWithFile(projectsDir, "ui.db");
 }
 function retiredLegacyProjectIds(projectsDir) {
-  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync16(join43(projectsDir, id, "ui.db")));
+  return projectIdsWithFile(projectsDir, "ui.db.imported").filter((id) => !existsSync17(join43(projectsDir, id, "ui.db")));
 }
 function tableColumns(db, schema, table) {
   return db.prepare(`PRAGMA ${schema}.table_info(${table})`).all().map((c) => c.name);
@@ -54895,11 +55232,11 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync31, existsSync as existsSync17, statSync as statSync24 } from "node:fs";
-import { dirname as dirname23, join as join44, resolve as resolve11, extname as extname4, normalize as normalize2, sep as sep6 } from "node:path";
+import { readFileSync as readFileSync32, existsSync as existsSync18, statSync as statSync24 } from "node:fs";
+import { dirname as dirname23, join as join44, resolve as resolve11, extname as extname4, posix as posix2, sep as sep6 } from "node:path";
 function readServerAddressHolder(path3) {
   try {
-    const value = JSON.parse(readFileSync31(path3, "utf8"));
+    const value = JSON.parse(readFileSync32(path3, "utf8"));
     if (typeof value?.pid !== "number") return void 0;
     return { pid: value.pid, port: typeof value.port === "number" ? value.port : -1 };
   } catch {
@@ -55023,10 +55360,10 @@ function staticIsFresh(req, etag, mtimeMs) {
   return Number.isFinite(since) && Math.floor(mtimeMs / 1e3) <= Math.floor(since / 1e3);
 }
 function serveStatic(distDir, req, res) {
-  const rel = normalize2((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
+  const rel = posix2.normalize((req.url ?? "/").split("?")[0].replace(/\\/g, "/")).replace(/^(\.\.[/\\])+/, "");
   let file = join44(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join44(distDir, "index.html");
-  if (!existsSync17(file)) file = join44(distDir, "index.html");
+  if (!file.startsWith(distDir + sep6)) file = join44(distDir, "index.html");
+  if (!existsSync18(file)) file = join44(distDir, "index.html");
   try {
     const stats = statSync24(file);
     const cacheControl = file.startsWith(join44(distDir, "assets") + sep6) ? STATIC_CACHE_IMMUTABLE : STATIC_CACHE_REVALIDATE;
@@ -55045,7 +55382,7 @@ function serveStatic(distDir, req, res) {
       res.end();
       return;
     }
-    let body = readFileSync31(file);
+    let body = readFileSync32(file);
     const accept = req.headers["accept-encoding"];
     const encoding = negotiateEncoding(Array.isArray(accept) ? accept.join(",") : accept);
     if (encoding && shouldCompress(new Headers({ "content-type": headers["content-type"] }), body.byteLength)) {
@@ -55521,7 +55858,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync31(join44(webRoot, "index.html"), "utf8");
+            const html = readFileSync32(join44(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -55533,7 +55870,7 @@ async function startServer(opts = {}) {
         });
         return;
       }
-      if (existsSync17(distDir)) {
+      if (existsSync18(distDir)) {
         serveStatic(distDir, req, res);
         return;
       }
@@ -55754,7 +56091,7 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
-import { existsSync as existsSync18 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 import { join as join45 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
@@ -55777,6 +56114,15 @@ function notifySupervisor(message) {
   } catch {
   }
 }
+var shutdown;
+process.once("disconnect", () => {
+  if (shutdown) {
+    void shutdown();
+    return;
+  }
+  log.info("dev-child", "supervisor disconnected before the server was up; exiting");
+  process.exit(0);
+});
 try {
   const target = projectLaunchTargetFromEnvironment(process.env);
   const launchOwnerToken = projectLaunchOwnerTokenFromEnvironment(process.env);
@@ -55793,9 +56139,9 @@ try {
       ["FRIZZ_SCRIPTS_DIR", process.env.FRIZZ_SCRIPTS_DIR, "index.mjs"],
       ["FRIZZ_WORKER_PLUGIN_DIR", process.env.FRIZZ_WORKER_PLUGIN_DIR, ".claude-plugin/plugin.json"]
     ];
-    if (!existsSync18(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
+    if (!existsSync19(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync18(join45(directory, requiredFile)))
+      if (!directory || !existsSync19(join45(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }
@@ -55816,7 +56162,7 @@ try {
     bootId: server.ctx.bootId
   });
   let shuttingDown = false;
-  const shutdown = async () => {
+  const stop = async () => {
     if (shuttingDown) return;
     shuttingDown = true;
     const force = setTimeout(() => process.exit(1), 15e3);
@@ -55839,9 +56185,9 @@ try {
       process.exit(1);
     }
   };
-  process.on("SIGINT", () => void shutdown());
-  process.on("SIGTERM", () => void shutdown());
-  process.once("disconnect", () => void shutdown());
+  shutdown = stop;
+  process.on("SIGINT", () => void stop());
+  process.on("SIGTERM", () => void stop());
 } catch (err) {
   log.error("dev-child", `failed to start: ${err instanceof Error ? err.stack ?? err.message : err}`);
   process.exit(1);