frizz 0.13.5 → 0.13.7

package/dist/frizz.js

@@ -12485,6 +12485,106 @@ var init_shell_writes = __esm({
 });
 
 // packages/shared/src/index.ts
+function signoffNudgeAwaitingLines(needsInput) {
+  if (!needsInput) {
+    return [
+      "- `` ```awaiting `` \u2014 you are WAITING on work that is actually running. FRONTMATTER, THEN MARKDOWN:",
+      "  one YAML list per kind of thing you are waiting on, a REQUIRED `for:` duration, then a `---` line and",
+      "  as much prose as you want. The prose is OPTIONAL; the lines above it are not.",
+      "",
+      "  ```awaiting",
+      "  shells: [<the id your runtime gave you>]",
+      "  prs: [owner/repo#123]",
+      "  for: 2h",
+      "  ---",
+      "  What you are waiting for, in your own words \u2014 this is what the human reads on your card.",
+      "  ```"
+    ];
+  }
+  return [
+    "- `` ```awaiting `` \u2014 you are WAITING on work that is actually running: a background shell, a",
+    "  sub-agent, a timer or a registered PR. FRONTMATTER, THEN MARKDOWN: one YAML list per kind of thing",
+    "  you are waiting on, a REQUIRED `for:` duration, a REQUIRED `needs_input:` answer, then optionally a",
+    "  `---` line and prose.",
+    "",
+    "  ```awaiting",
+    "  agents: [<the id your runtime gave you>]",
+    "  needs_input: false",
+    "  for: 2h",
+    "  ```",
+    "",
+    "  `needs_input: false` \u2014 nothing for the human yet. The thread stays out of their queue until the work",
+    "  wakes you, and you owe NO write-up: the fence alone is the whole message. `needs_input: true` \u2014 the",
+    "  human can read, try or act on something NOW while the work runs (a partial result, a file you wrote,",
+    "  a server to try), even if you need nothing back from them; the thread goes into their queue, and the",
+    "  prose under `---` says what to look at. If you wrote ANY words for the human at this rest, it is",
+    "  `true` \u2014 a `false` rest is never put in front of them. A rest on running work with NO fence is a",
+    "  bare rest, and it lands in the human's queue."
+  ];
+}
+function signoffNudgeText(needsInput) {
+  return [
+    `${SIGNOFF_NUDGE_MARKER} Nothing about your task has changed, and no new work is being asked of you.`,
+    "",
+    "You rested without a fence, so this thread cannot be triaged.",
+    "",
+    "**IF THE TASK STILL HAS PARTS LEFT, THE FENCE IS NOT WHAT YOU OWE \u2014 THE WORK IS.** If ANY part of the",
+    "original task is unfinished, unverified, or deferred, resume it NOW, in THIS turn, and sign off once it",
+    "is genuinely finished. A milestone, a green test run and a long turn are none of them endings, and",
+    "neither is naming the next step or writing it into a scratch file.",
+    "",
+    "**AND THAT TASK IS ALSO THE CEILING \u2014 finish it, and nothing else.** Work you notice on the way is a",
+    "FINDING TO REPORT in your sign-off, never work to take on: the bug beside the one you were sent for,",
+    "the refactor the code obviously wants, the second issue the first one touches. Widening the job is not",
+    "thoroughness \u2014 it is a different job nobody asked for, and it buries the answer they did ask for under",
+    "changes they now have to review. If it should be done, name it in one line and let the human dispatch",
+    "it.",
+    "",
+    "**IF WHAT YOU WERE ASKED FOR IS A DOCUMENT, THE DOCUMENT IS THE ENDING.** A triage, a review, an",
+    "investigation, a recommendation, a plan \u2014 when that is the deliverable, the finished write-up IS the",
+    "work. Implementing what it proposes is the NEXT job, and not yours unless you were asked. Sign off with",
+    "the write-up.",
+    "",
+    "**DECIDE RATHER THAN ASK.** Stop only for a decision that is genuinely the human's AND that blocks you",
+    "right now: register that one with `mcp__frizz__ask`. Every other open choice INSIDE the task \u2014 a name, a",
+    "default, a reversible design call \u2014 is yours to make: decide it, say in one line which way you went and",
+    "what would reverse it, and carry on. A choice that would ENLARGE the task is not one of those: an",
+    "unanswered question is not permission to go build the answer.",
+    "",
+    "Otherwise, sign off \u2014 a registration, or a fence at the END of your next message:",
+    "",
+    "- `mcp__frizz__ask` \u2014 you need the human. NOT a fence: the ```question fence is retired, and a fence",
+    "  with a question in its body is plain prose. Register it (options with one-line trade-offs, the",
+    "  recommended one first), then rest normally \u2014 an open registered question is the sign-off.",
+    "- `` ```done `` \u2014 genuinely FINISHED. A DISMISSAL: the card is filed away and nobody looks again, so",
+    "  if anything is still owed, it is not done. Body: 1-3 sentences, then bullets, each opening with a",
+    "  **bolded verb phrase**.",
+    ...signoffNudgeAwaitingLines(needsInput),
+    "",
+    "  Frizz CHECKS every line: name something that is not running and you are bumped rather than parked.",
+    "  A fence that names NOTHING is not a park at all \u2014 if you are not waiting on anything, you are not",
+    "  awaiting, you are done. Register a PR with `mcp__frizz__watch_pr` and a timer with",
+    "  `mcp__frizz__timer`; `mcp__frizz__activity` reads back everything you have running, with its id.",
+    "",
+    "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
+    "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
+    "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
+    "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
+    "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
+    "None of them is a `done`. And what is not",
+    'worth a card is not worth a SENTENCE: delete the dangling "one thing to carry forward", never park it',
+    "in the handoff.",
+    "",
+    "**DO NOT REPEAT YOURSELF.** If the message you just wrote already stands on its own, reply with the",
+    "fence ALONE \u2014 the human reads both together, so restating it costs them the second read for nothing.",
+    "The same holds inside one message: the card is the ledger of what shipped, the prose is only what a",
+    "ledger cannot hold, and a sentence that reads the same in either belongs in exactly one of them.",
+    "",
+    "Only if it does NOT stand alone, fix that first, briefly. It has to be readable cold: the human has",
+    "seen nothing since their own last message \u2014 the Goal, this reminder, a watcher wake all came from",
+    "frizz \u2014 so anything you assumed they had followed, they have not."
+  ].join("\n");
+}
 function requireEffortOutsideAcp(profile, ctx) {
   if (profile.backend !== "acp" && profile.effort === void 0) {
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["effort"], message: `effort is required for a ${profile.backend} profile` });
@@ -12493,7 +12593,7 @@ function requireEffortOutsideAcp(profile, ctx) {
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -12831,7 +12931,7 @@ var init_src = __esm({
       questions: external_exports.array(AskQuestion)
     });
     AwaitingHint = external_exports.object({
-      kind: external_exports.enum(["shell", "agent", "timer", "pr", "issue", "for", "title"]),
+      kind: external_exports.enum(["shell", "agent", "timer", "pr", "issue", "for", "title", "needs_input"]),
       value: external_exports.string()
     });
     RETIRED_AWAITING_KINDS = ["watch", "pr-watch", "human", "ci", "session", "shell", "agent", "timer", "pr", "reason"];
@@ -12870,77 +12970,8 @@ var init_src = __esm({
     TIMER_MAX_DELAY_SECONDS = 30 * 24 * 60 * 60;
     TimerPromptText = external_exports.string().trim().min(1).max(TIMER_PROMPT_MAX);
     SIGNOFF_NUDGE_MARKER = "**This message is from frizz, not from the human.**";
-    SIGNOFF_NUDGE_MESSAGE = [
-      `${SIGNOFF_NUDGE_MARKER} Nothing about your task has changed, and no new work is being asked of you.`,
-      "",
-      "You rested without a fence, so this thread cannot be triaged.",
-      "",
-      "**IF THE TASK STILL HAS PARTS LEFT, THE FENCE IS NOT WHAT YOU OWE \u2014 THE WORK IS.** If ANY part of the",
-      "original task is unfinished, unverified, or deferred, resume it NOW, in THIS turn, and sign off once it",
-      "is genuinely finished. A milestone, a green test run and a long turn are none of them endings, and",
-      "neither is naming the next step or writing it into a scratch file.",
-      "",
-      "**AND THAT TASK IS ALSO THE CEILING \u2014 finish it, and nothing else.** Work you notice on the way is a",
-      "FINDING TO REPORT in your sign-off, never work to take on: the bug beside the one you were sent for,",
-      "the refactor the code obviously wants, the second issue the first one touches. Widening the job is not",
-      "thoroughness \u2014 it is a different job nobody asked for, and it buries the answer they did ask for under",
-      "changes they now have to review. If it should be done, name it in one line and let the human dispatch",
-      "it.",
-      "",
-      "**IF WHAT YOU WERE ASKED FOR IS A DOCUMENT, THE DOCUMENT IS THE ENDING.** A triage, a review, an",
-      "investigation, a recommendation, a plan \u2014 when that is the deliverable, the finished write-up IS the",
-      "work. Implementing what it proposes is the NEXT job, and not yours unless you were asked. Sign off with",
-      "the write-up.",
-      "",
-      "**DECIDE RATHER THAN ASK.** Stop only for a decision that is genuinely the human's AND that blocks you",
-      "right now: register that one with `mcp__frizz__ask`. Every other open choice INSIDE the task \u2014 a name, a",
-      "default, a reversible design call \u2014 is yours to make: decide it, say in one line which way you went and",
-      "what would reverse it, and carry on. A choice that would ENLARGE the task is not one of those: an",
-      "unanswered question is not permission to go build the answer.",
-      "",
-      "Otherwise, sign off \u2014 a registration, or a fence at the END of your next message:",
-      "",
-      "- `mcp__frizz__ask` \u2014 you need the human. NOT a fence: the ```question fence is retired, and a fence",
-      "  with a question in its body is plain prose. Register it (options with one-line trade-offs, the",
-      "  recommended one first), then rest normally \u2014 an open registered question is the sign-off.",
-      "- `` ```done `` \u2014 genuinely FINISHED. A DISMISSAL: the card is filed away and nobody looks again, so",
-      "  if anything is still owed, it is not done. Body: 1-3 sentences, then bullets, each opening with a",
-      "  **bolded verb phrase**.",
-      "- `` ```awaiting `` \u2014 you are WAITING on work that is actually running. FRONTMATTER, THEN MARKDOWN:",
-      "  one structural line per thing you are waiting on, a REQUIRED `for:` duration, then a `---` line and",
-      "  as much prose as you want. The prose is OPTIONAL; the lines above it are not.",
-      "",
-      "  ```awaiting",
-      "  shell: <the id your runtime gave you>",
-      "  pr: owner/repo#123",
-      "  for: 2h",
-      "  ---",
-      "  What you are waiting for, in your own words \u2014 this is what the human reads on your card.",
-      "  ```",
-      "",
-      "  Frizz CHECKS every line: name something that is not running and you are bumped rather than parked.",
-      "  A fence that names NOTHING is not a park at all \u2014 if you are not waiting on anything, you are not",
-      "  awaiting, you are done. Register a PR with `mcp__frizz__watch_pr` and a timer with",
-      "  `mcp__frizz__timer`; `mcp__frizz__activity` reads back everything you have running, with its id.",
-      "",
-      "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
-      "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
-      "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
-      "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
-      "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
-      "None of them is a `done`. And what is not",
-      'worth a card is not worth a SENTENCE: delete the dangling "one thing to carry forward", never park it',
-      "in the handoff.",
-      "",
-      "**DO NOT REPEAT YOURSELF.** If the message you just wrote already stands on its own, reply with the",
-      "fence ALONE \u2014 the human reads both together, so restating it costs them the second read for nothing.",
-      "The same holds inside one message: the card is the ledger of what shipped, the prose is only what a",
-      "ledger cannot hold, and a sentence that reads the same in either belongs in exactly one of them.",
-      "",
-      "Only if it does NOT stand alone, fix that first, briefly. It has to be readable cold: the human has",
-      "seen nothing since their own last message \u2014 the Goal, this reminder, a watcher wake all came from",
-      "frizz \u2014 so anything you assumed they had followed, they have not."
-    ].join("\n");
+    SIGNOFF_NUDGE_MESSAGE = signoffNudgeText(false);
+    SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT = signoffNudgeText(true);
     ThreadWatchKind = external_exports.enum(["shell", "github", "timer"]);
     GithubChecksState = external_exports.enum(["none", "running", "passing", "failing"]);
     GithubMergeState = external_exports.enum(["mergeable", "blocked", "conflicting", "unknown"]);
@@ -13307,6 +13338,11 @@ var init_src = __esm({
     UpsertOwnLinkResult = external_exports.object({ link: ThreadLinkView }).strict();
     DropOwnLinkInput = external_exports.object({ slug: ThreadSlug, id: external_exports.string().min(1) }).strict();
     DropOwnLinkResult = external_exports.object({ dropped: external_exports.boolean() }).strict();
+    LiveTool = external_exports.object({
+      name: external_exports.string(),
+      desc: external_exports.string().optional(),
+      detail: external_exports.string().optional()
+    });
     ThreadView = external_exports.object({
       id: ThreadSlug,
       // slug; filename is <slug>.md
@@ -13345,6 +13381,15 @@ var init_src = __esm({
       // user hid the row from the nav; respawn/resume un-archives
       lastAssistant: external_exports.string().optional(),
       // trimmed preview of last assistant text
+      // The FIRST non-empty line of that same text, markdown intact and newlines honoured (capped) — the
+      // handoff's verdict line ("**Fixed** — …"), which `lastAssistant` cannot give back because its preview
+      // collapses every newline to a space. The phone board's rested row reads it. Optional so old
+      // snapshots parse.
+      lastAssistantLine: external_exports.string().optional(),
+      // The newest tool call the agent has issued and not yet had a result for (Claude session threads),
+      // in the shape `toolActivityLabel` reads, so a list row can say "Running the focused tests" with the
+      // gerund the chat's working indicator shows. Absent between calls, at rest, and for other backends.
+      liveTool: LiveTool.optional(),
       spawnedAt: external_exports.string().optional(),
       // ISO8601
       lastActivityAt: external_exports.string().optional(),
@@ -13403,6 +13448,11 @@ var init_src = __esm({
        *  same card and the swap is invisible. Absent whenever there is nothing in flight, which is almost
        *  always — it exists for the seconds between the human sending and the worker being handed it. */
       answersInFlight: external_exports.string().optional(),
+      /** The human's message — a follow-up or a registered answer — is on its way to the worker and the turn
+       *  has not started yet (board.deriveDeliveryInFlight). The queue has already let the thread go; this
+       *  tells the rail to draw it as working in every tab, not only the one that sent it (web
+       *  lib/steering.ts). Absent otherwise. */
+      deliveryInFlight: external_exports.boolean().optional(),
       // ISO8601 of the newest REAL user interaction (answer/steer/dispatch) — the chronological listing
       // sort key. Optional; the listing falls back to spawnedAt when absent (a dispatch IS an interaction).
       lastUserAt: external_exports.string().optional(),
@@ -13835,8 +13885,18 @@ var init_src = __esm({
       // Broker-backed Claude only — that is every Claude thread dispatched since the broker cutover. On
       // any other runtime the message is delivered normally and this is ignored, never refused: a send
       // that arrives is always better than a send that errors.
-      interrupt: external_exports.boolean().optional()
+      interrupt: external_exports.boolean().optional(),
+      // The deliveryId of a FAILED send this one re-sends — the failed bubble's Retry. The server drops that
+      // failed entry in the same write that opens this send's own, so the retry replaces the failed bubble
+      // rather than standing beside it. A new deliveryId, never the old one: the old send's failure may be
+      // ambiguous, and only the operator decides to risk a second copy.
+      supersedes: external_exports.string().min(1).max(200).optional()
     });
+    DismissFailedFollowUpInput = external_exports.object({
+      slug: ThreadSlug,
+      deliveryId: external_exports.string().min(1).max(200)
+    }).strict();
+    DismissFailedFollowUpResult = external_exports.object({ dismissed: external_exports.boolean() }).strict();
     UnqueueFollowUpInput = external_exports.object({
       slug: ThreadSlug,
       // Same staleness guard as followUp: a stale tab must not unqueue against a re-dispatched session.
@@ -13856,6 +13916,11 @@ var init_src = __esm({
       interrupted: external_exports.boolean(),
       reason: external_exports.string().optional()
     }).strict();
+    CompactThreadInput = external_exports.object({
+      slug: ThreadSlug,
+      // Same staleness guard as followUp: a stale tab must not compact a re-dispatched session.
+      sessionId: external_exports.string().min(1)
+    }).strict();
     SetThreadSnoozeInput = external_exports.object({
       slug: ThreadSlug,
       sessionId: external_exports.string().min(1),
@@ -14464,8 +14529,13 @@ ${DISPATCH_TASK_BANNER}
       // yet — renders as an ordinary (un-grayed) user bubble. "unconfirmed": no evidence appeared within
       // the timeout — the injection likely mutated/never landed; the client renders a quiet warning.
       // Once the real transcript record lands the ledger drops the item and this field goes with it.
-      // Additive + optional.
-      deliveryState: external_exports.enum(["pending", "enqueued", "delivered", "unconfirmed"]).optional(),
+      // "sending": the server's WRITE-AHEAD entry, opened before any transport is touched, so the text is
+      // the server's from the instant it arrives. "failed": the transport threw, or never answered — the
+      // text is kept until the operator retries, edits or dismisses it, and nothing retries it on its own.
+      // Additive + optional: an older client renders both as a plain bubble (gray for "sending").
+      deliveryState: external_exports.enum(["sending", "pending", "enqueued", "delivered", "unconfirmed", "failed"]).optional(),
+      // Why a "failed" send failed, verbatim from the transport. Set only alongside deliveryState "failed".
+      deliveryError: external_exports.string().optional(),
       // FRIZZ wrote this user turn, not the human: it is a scheduler wake delivery (isWakeDelivery). The
       // client renders it as a first-party card rather than the human's off-white right-justified bubble,
       // which was claiming the operator had typed a message the watcher composed. Additive + optional: an
@@ -14617,7 +14687,8 @@ ${DISPATCH_TASK_BANNER}
     });
     ProjectRailCounts = external_exports.object({
       queued: external_exports.number().int().nonnegative(),
-      running: external_exports.number().int().nonnegative()
+      running: external_exports.number().int().nonnegative(),
+      asks: external_exports.number().int().nonnegative()
     });
     PROJECT_ICON_MAX_BASE64_CHARS = 4 * 1024 * 1024;
     DirectoryPickResult = external_exports.discriminatedUnion("kind", [
@@ -20558,6 +20629,29 @@ var AccessStore = class _AccessStore {
     const id = _AccessStore.idOf(payload);
     return !(id && this.sessions.isRevoked(id));
   }
+  /**
+   * Sign out the device HOLDING this session — the "Sign out this device" row, not `--sign-out`.
+   *
+   * The id comes from the session itself, and only after its signature verifies, so the one thing this
+   * can ever revoke is the credential the caller just proved it holds. There is deliberately no
+   * parameter naming any other id: signing out SOMEONE ELSE stays loopback-only, because a stolen
+   * session must not be able to evict the owner and keep the board.
+   *
+   * - `revoked`: the id is on the denylist now, so a surviving copy of this cookie is refused too.
+   * - `legacy`: a session minted before ids existed verifies but has no id to revoke on its own. The
+   *   caller can still clear the cookie; rotating the key remains the way to kill a copy of it.
+   * - `no-session`: nothing valid was presented — absent, forged, expired, or already signed out.
+   */
+  signOutSession(session) {
+    if (!session || !this.verifySession(session)) return { result: "no-session" };
+    const id = _AccessStore.idOf(session.slice(0, session.lastIndexOf(".")));
+    if (!id) return { result: "legacy" };
+    if (!this.sessions.revoke(id)) {
+      this.sessions.record({ id, label: "unknown device", createdAt: this.options.now() });
+      this.sessions.revoke(id);
+    }
+    return this.sessions.isRevoked(id) ? { result: "revoked", id } : { result: "no-session" };
+  }
   /**
    * Drop codes past their expiry so a long-lived board does not accumulate them forever.
    *
@@ -22270,13 +22364,26 @@ var qrcode_default = qrcode;
 var stringToBytes = qrcode.stringToBytes;
 
 // packages/server/src/qr.ts
-var LIGHT_BG = "\x1B[48;5;15m";
-var DARK = "\x1B[38;5;0m";
-var DARK_BG = "\x1B[48;5;0m";
+var DARK = 232;
+var LIGHT = 231;
+var fg = (dark) => `\x1B[38;5;${dark ? DARK : LIGHT}m`;
+var bg = (dark) => `\x1B[48;5;${dark ? DARK : LIGHT}m`;
 var RESET = "\x1B[0m";
 var UPPER_HALF = "\u2580";
 var LOWER_HALF = "\u2584";
 var QUIET_ZONE = 4;
+var BLOCK_DRAWING_PROGRAMS = /* @__PURE__ */ new Set(["iTerm.app", "WezTerm", "ghostty", "WarpTerminal", "vscode"]);
+var BLOCK_DRAWING_TERMS = /* @__PURE__ */ new Set(["xterm-kitty", "xterm-ghostty", "alacritty", "wezterm"]);
+function drawsBlockElements(env = process.env) {
+  const term = env.TERM ?? "";
+  if (env.TMUX || env.STY || env.TERM_PROGRAM === "tmux" || term.startsWith("screen") || term.startsWith("tmux")) return false;
+  if (BLOCK_DRAWING_PROGRAMS.has(env.TERM_PROGRAM ?? "")) return true;
+  if (BLOCK_DRAWING_TERMS.has(term)) return true;
+  if (env.LC_TERMINAL === "iTerm2") return true;
+  return Boolean(
+    env.KITTY_WINDOW_ID || env.ALACRITTY_WINDOW_ID || env.WEZTERM_PANE || env.GHOSTTY_RESOURCES_DIR || env.WT_SESSION || env.VTE_VERSION
+  );
+}
 function encode(value, errorCorrection) {
   const code = qrcode_default(0, errorCorrection);
   code.addData(value);
@@ -22293,26 +22400,70 @@ function encode(value, errorCorrection) {
     }
   };
 }
-function renderQrLines(value, options2 = {}) {
-  if (!value) throw new Error("renderQr requires a value");
-  const { size, at } = encode(value, options2.errorCorrection ?? "M");
+function sizeOf(size, style) {
+  return style === "paint" ? { columns: size * 2, rows: size } : { columns: size, rows: Math.ceil(size / 2) };
+}
+function qrSize(value, style = "half", errorCorrection = "M") {
+  return sizeOf(encode(value, errorCorrection).size, style);
+}
+function qrStyleFor(value, options2 = {}) {
+  const { area } = options2;
+  if (!area || drawsBlockElements(options2.env)) return "half";
+  const paint = qrSize(value, "paint", options2.errorCorrection);
+  return paint.columns <= area.columns && paint.rows <= area.rows ? "paint" : "half";
+}
+function qrAreaOf(stream, frame) {
+  if (!stream.columns || !stream.rows) return void 0;
+  return { columns: stream.columns - frame.indent, rows: stream.rows - frame.rows };
+}
+function halfLines(size, at, plain) {
   const lines = [];
   for (let y = 0; y < size; y += 2) {
     let line = "";
     for (let x = 0; x < size; x++) {
       const top = at(x, y);
       const bottom = y + 1 < size ? at(x, y + 1) : false;
-      if (options2.plain) {
+      if (plain) {
         line += top && bottom ? "#" : top ? "^" : bottom ? "v" : " ";
         continue;
       }
-      if (top === bottom) line += `${top ? DARK_BG : LIGHT_BG} `;
-      else line += `${DARK}${LIGHT_BG}${top ? UPPER_HALF : LOWER_HALF}`;
+      if (top === bottom) {
+        line += `${bg(top)} `;
+        continue;
+      }
+      const above = y > 0 ? at(x, y - 1) : false;
+      const below = y + 2 < size ? at(x, y + 2) : false;
+      line += below === bottom && above !== top ? `${fg(top)}${bg(bottom)}${UPPER_HALF}` : `${fg(bottom)}${bg(top)}${LOWER_HALF}`;
+    }
+    lines.push(plain ? line : `${line}${RESET}`);
+  }
+  return lines;
+}
+function paintLines(size, at, plain) {
+  const lines = [];
+  for (let y = 0; y < size; y++) {
+    let line = "";
+    let last;
+    for (let x = 0; x < size; x++) {
+      const dark = at(x, y);
+      if (plain) line += dark ? "##" : "  ";
+      else {
+        if (dark !== last) line += bg(dark);
+        line += "  ";
+      }
+      last = dark;
     }
-    lines.push(options2.plain ? line : `${line}${RESET}`);
+    lines.push(plain ? line : `${line}${RESET}`);
   }
   return lines;
 }
+function renderQrLines(value, options2 = {}) {
+  if (!value) throw new Error("renderQr requires a value");
+  const errorCorrection = options2.errorCorrection ?? "M";
+  const { size, at } = encode(value, errorCorrection);
+  const style = options2.style ?? qrStyleFor(value, { area: options2.area, env: options2.env, errorCorrection });
+  return style === "paint" ? paintLines(size, at, options2.plain ?? false) : halfLines(size, at, options2.plain ?? false);
+}
 
 // packages/server/src/restart-supervisor.ts
 import { request as requestHttp, createServer } from "node:http";
@@ -22583,6 +22734,7 @@ var SUPERVISOR_UPDATE_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/update-restar
 var SUPERVISOR_STATUS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/status`;
 var SUPERVISOR_ACCESS_CODE_PATH = `${SUPERVISOR_CONTROL_PREFIX}/access-code`;
 var SUPERVISOR_SESSIONS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sessions`;
+var SUPERVISOR_SIGN_OUT_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sign-out`;
 var SUPERVISOR_CONTROL_PROTOCOL = 1;
 function responseJson(res, status, value) {
   res.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
@@ -22611,7 +22763,7 @@ function readCookie(header, name) {
 }
 function isControlRequest(req) {
   const url = new URL(req.url ?? "/", "http://frizz.invalid");
-  return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH;
+  return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH || url.pathname === SUPERVISOR_SIGN_OUT_PATH;
 }
 function isLocalImageRequest(req) {
   if (req.method !== "GET" && req.method !== "HEAD") return false;
@@ -22817,6 +22969,11 @@ var RestartSupervisorProxy = class {
   }
   async handleControl(req, res) {
     const pathname = new URL(req.url ?? "/", "http://frizz.invalid").pathname;
+    if (pathname !== SUPERVISOR_SIGN_OUT_PATH && this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
+      res.writeHead(401, { "cache-control": "no-store" });
+      res.end();
+      return;
+    }
     const sameOrigin = req.headers["sec-fetch-site"] === "same-origin" || this.vouchesSameOrigin(req);
     const allowMissingOrigin = pathname === SUPERVISOR_STATUS_PATH && req.method === "GET" && sameOrigin;
     if (!this.authorityAccepted(req, allowMissingOrigin)) {
@@ -22880,8 +23037,24 @@ var RestartSupervisorProxy = class {
       responseJson(res, 200, { signedOut: 1 });
       return;
     }
+    if (pathname === SUPERVISOR_SIGN_OUT_PATH) {
+      if (req.method !== "POST") {
+        res.writeHead(405, { allow: "POST" });
+        res.end();
+        return;
+      }
+      this.signOutThisDevice(req, res);
+      return;
+    }
     if (pathname === SUPERVISOR_STATUS_PATH && req.method === "GET") {
-      responseJson(res, 200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, ...this.status() });
+      responseJson(res, 200, {
+        protocol: SUPERVISOR_CONTROL_PROTOCOL,
+        ...this.status(),
+        // Sent ONLY when true, so a loopback tab's payload is byte-identical to what it was. The web
+        // app cannot tell on its own: the session cookie is HttpOnly, and the page is the same bundle
+        // whichever way it was reached. It is a fact about THIS request, never about the board.
+        ...this.carriesRemoteSession(req) ? { remoteSession: true } : {}
+      });
       return;
     }
     if (pathname !== SUPERVISOR_RESTART_PATH && pathname !== SUPERVISOR_UPDATE_RESTART_PATH || req.method !== "POST") {
@@ -22959,6 +23132,42 @@ var RestartSupervisorProxy = class {
     if (!this.publicOrigin) return true;
     return this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
   }
+  /** Did this request arrive through the public origin carrying a live session? Loopback never does. */
+  carriesRemoteSession(req) {
+    return this.arrivedPublicly(req) && this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
+  }
+  /**
+   * End the session this request carries, and nothing else — see SUPERVISOR_SIGN_OUT_PATH in
+   * handleControl for why that makes it safe to reach from the tunnel.
+   *
+   * A loopback request is a no-op even if it somehow carries a cookie: the operator's own tab has no
+   * remote session to end, and loopback is the place `--sign-out` already covers.
+   */
+  signOutThisDevice(req, res) {
+    const reply = (status, body, clearCookie) => {
+      res.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+        "cache-control": "no-store",
+        // Same attributes the exchange set, so the browser matches and drops that exact cookie.
+        ...clearCookie ? { "set-cookie": `${SESSION_COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0` } : {}
+      });
+      res.end(JSON.stringify(body));
+    };
+    if (!this.arrivedPublicly(req)) {
+      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, false);
+      return;
+    }
+    const outcome = this.access.signOutSession(readCookie(req.headers.cookie, SESSION_COOKIE));
+    if (outcome.result === "revoked") {
+      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "signed-out", id: outcome.id }, true);
+      return;
+    }
+    if (outcome.result === "legacy") {
+      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "cookie-cleared" }, true);
+      return;
+    }
+    reply(401, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, true);
+  }
   /**
    * Trade `?frizz_code=…` for a cookie, then bounce to the same URL
    * without the secret, so it never lands in history, a Referer header, or a screenshot.
@@ -23177,12 +23386,20 @@ function installPaneHost(options2) {
     input.pause();
     process.off("exit", restore);
   };
+  const reclaim = () => {
+    if (disposed) return;
+    try {
+      input.setRawMode(false);
+      input.setRawMode(true);
+    } catch {
+    }
+  };
   input.setRawMode(true);
   input.resume();
   input.setEncoding("utf8");
   input.on("data", onKey);
   process.on("exit", restore);
-  return { dispose: restore, isOpen: () => active !== null };
+  return { dispose: restore, isOpen: () => active !== null, reclaim };
 }
 
 // src/access-pane.ts
@@ -23196,6 +23413,18 @@ var RESET2 = "\x1B[0m";
 function secondsUntil(expiresAt, now) {
   return Math.max(0, Math.ceil((expiresAt - now) / 1e3));
 }
+function fitScreen(entries, rows, columns) {
+  const width = columns ?? 80;
+  const height = (text) => Math.max(1, Math.ceil([...text.replace(/\x1b\[[0-9;]*m/g, "")].length / width));
+  const kept = entries.map((entry) => typeof entry === "string" ? { text: entry, drop: Infinity } : entry);
+  const total = () => kept.reduce((sum, entry) => sum + height(entry.text), 0);
+  while (rows && total() > rows) {
+    const next = kept.reduce((lowest, entry, index) => entry.drop < (kept[lowest]?.drop ?? Infinity) ? index : lowest, -1);
+    if (next < 0) break;
+    kept.splice(next, 1);
+  }
+  return kept.map((entry) => entry.text).join("\n");
+}
 function createAccessPane(options2) {
   const output = options2.output ?? process.stdout;
   const now = options2.now ?? Date.now;
@@ -23207,16 +23436,25 @@ function createAccessPane(options2) {
     if (!shown) return;
     const remaining = secondsUntil(shown.expiresAt, now());
     const status = consumed ? "This link has been used. Press L for another." : remaining === 0 ? "This link has expired. Press L for another." : `Single use, expires in ${remaining}s.`;
+    const footer = `${status}  Press any other key to close.`;
+    const width = output.columns ?? 80;
+    const wrapped = (text) => Math.max(1, Math.ceil((text.length + 2) / width));
+    const qr = renderQrLines(shown.url, { area: qrAreaOf(output, { indent: 2, rows: wrapped(shown.url) + wrapped(footer) + 1 }) });
     output.write(CLEAR);
-    output.write("\n");
-    for (const row of renderQrLines(shown.url)) output.write(`  ${row}
-`);
-    output.write(`
-  ${shown.url}
-`);
-    output.write(`
-  ${DIM}${status}  Press any other key to close.${RESET2}
-`);
+    output.write(
+      fitScreen(
+        [
+          { text: "", drop: 1 },
+          ...qr.map((row) => `  ${row}`),
+          { text: "", drop: 3 },
+          `  ${shown.url}`,
+          { text: "", drop: 2 },
+          `  ${DIM}${footer}${RESET2}`
+        ],
+        output.rows,
+        output.columns
+      )
+    );
   };
   return {
     open() {
@@ -24163,9 +24401,8 @@ function createRemotePane(options2) {
   const write = (lines) => {
     if (!open) return;
     output.write(CLEAR);
-    output.write("\n");
-    for (const line of lines) output.write(`  ${line}
-`);
+    const indented = lines.map((line) => typeof line === "string" ? `  ${line}` : { ...line, text: `  ${line.text}` });
+    output.write(fitScreen([{ text: "", drop: 0 }, ...indented], output.rows, output.columns));
   };
   const check = (ok, text) => ok ? `${text} \u2713` : text;
   const paint = () => {
@@ -24207,13 +24444,25 @@ function createRemotePane(options2) {
       return;
     }
     if (s.name === "done") {
-      const lines = [s.message, ""];
-      if (s.link) {
-        for (const row of renderQrLines(s.link.url)) lines.push(row);
-        lines.push("", s.link.url, "", `${DIM}Scan to sign in on a phone. Single use, expires in 5 minutes. Press L later for another.${RESET2}`);
+      if (!s.link) {
+        write([s.message, "", `${DIM}press any key to return${RESET2}`]);
+        return;
       }
-      lines.push("", `${DIM}press any key to return${RESET2}`);
-      write(lines);
+      const note = `${DIM}Scan to sign in on a phone. Single use, expires in 5 minutes. Press L later for another.${RESET2}`;
+      const width = output.columns ?? 80;
+      const wrapped = (text) => Math.max(1, Math.ceil((text.length + 2) / width));
+      const qr = renderQrLines(s.link.url, { area: qrAreaOf(output, { indent: 2, rows: wrapped(s.message) + 1 + wrapped(s.link.url) + 1 }) });
+      write([
+        s.message,
+        { text: "", drop: 4 },
+        ...qr,
+        { text: "", drop: 6 },
+        s.link.url,
+        { text: "", drop: 2 },
+        { text: note, drop: 5 },
+        { text: "", drop: 3 },
+        `${DIM}press any key to return${RESET2}`
+      ]);
       return;
     }
     write([`Could not apply that: ${s.message}`, "", `${DIM}press any key to go back${RESET2}`]);
@@ -25578,6 +25827,7 @@ var Supervisor = class {
   logLine;
   errorLine;
   onActivity;
+  onChildExit;
   /** Suppresses activity beats until the first boot has settled; until then the readout owns the terminal. */
   booted = false;
   /** When the restart currently in flight began, so its "ready" beat can report a duration. */
@@ -25630,6 +25880,7 @@ var Supervisor = class {
     this.logLine = opts.log ?? ((line) => log.info("supervisor", stripPrefix(line)));
     this.errorLine = opts.error ?? ((line) => log.error("supervisor", stripPrefix(line)));
     this.onActivity = opts.onActivity;
+    this.onChildExit = opts.onChildExit;
     this.updateRestart = opts.updateRestart;
     this.updateMode = opts.updateMode ?? "durableReexec";
     this.commitUpdate = opts.commitUpdate;
@@ -26128,6 +26379,10 @@ var Supervisor = class {
         settleSpawn(false);
       });
       child.once("exit", (code, signal) => {
+        try {
+          this.onChildExit?.();
+        } catch {
+        }
         if (this.child === child) {
           this.child = null;
           this.childPort = void 0;
@@ -27096,7 +27351,7 @@ if (options.link) {
     process.exit(1);
   }
   const { url } = await response.json();
-  if (process.stdout.isTTY) for (const row of renderQrLines(url)) console.log(`  ${row}`);
+  if (process.stdout.isTTY) for (const row of renderQrLines(url, { area: qrAreaOf(process.stdout, { indent: 2, rows: 3 }) })) console.log(`  ${row}`);
   console.log(process.stdout.isTTY ? `
   ${url}` : url);
   process.exit(0);
@@ -27274,6 +27529,9 @@ async function runSupervisor(port, token, onPrepared = () => {
     // here is triggered from a browser tab or by a crash, so without this the foreground process is
     // the last place to learn what happened to it.
     onActivity: (event) => renderSupervisorActivity(activityReadout, event),
+    // Every child leaves the terminal as it found it at its own fork, and the first one was forked
+    // before the keyboard went raw — so without this R stopped working after the first update.
+    onChildExit: () => paneHost?.reclaim(),
     updateRestart: async () => {
       previous = active;
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frizz",
-  "version": "0.13.5",
+  "version": "0.13.7",
   "private": false,
   "description": "A local web UI for running many coding agents at once",
   "keywords": [
@@ -66,7 +66,7 @@
   },
   "frizzServer": {
     "package": "frizz-server",
-    "version": "0.15.3",
+    "version": "0.15.8",
     "protocol": 1,
     "dataEpoch": 1
   }