frizz 0.13.7 → 0.13.8

package/dist/frizz.js

@@ -180,6 +180,324 @@ var init_local_origin = __esm({
   }
 });
 
+// packages/server/src/access-codes.ts
+import { randomBytes, timingSafeEqual, createHmac } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join as join2 } from "node:path";
+function memorySessionDirectory(seed = []) {
+  const records = new Map(seed.map((r) => [r.id, r]));
+  return {
+    record: (r) => void records.set(r.id, r),
+    isRevoked: (id) => records.get(id)?.revokedAt !== void 0,
+    // Reverse FIRST, then sort. Array.sort is stable, so two devices that redeemed in the same
+    // millisecond — which two taps on one page reliably are — keep newest-inserted-first instead of
+    // falling back to insertion order and reading as oldest first.
+    list: () => [...records.values()].reverse().sort((a, b) => b.createdAt - a.createdAt),
+    revoke(id) {
+      const found = records.get(id);
+      if (!found || found.revokedAt !== void 0) return false;
+      found.revokedAt = Date.now();
+      return true;
+    },
+    revokeAll() {
+      let n = 0;
+      const now = Date.now();
+      for (const r of records.values()) {
+        if (r.revokedAt !== void 0) continue;
+        r.revokedAt = now;
+        if (r.expiresAt === void 0 || r.expiresAt > now) n++;
+      }
+      return n;
+    }
+  };
+}
+function describeDevice(userAgent) {
+  const ua = userAgent ?? "";
+  if (!ua.trim()) return "unknown device";
+  const os = /iPhone/i.test(ua) ? "iPhone" : /iPad/i.test(ua) ? "iPad" : /Android/i.test(ua) ? "Android" : /Mac OS X|Macintosh/i.test(ua) ? "macOS" : /Windows/i.test(ua) ? "Windows" : /Linux/i.test(ua) ? "Linux" : "unknown device";
+  const browser = /Edg\//i.test(ua) ? "Edge" : /OPR\/|Opera/i.test(ua) ? "Opera" : /Firefox\//i.test(ua) ? "Firefox" : /Chrome\//i.test(ua) ? "Chrome" : /Safari\//i.test(ua) ? "Safari" : "";
+  return browser ? `${browser} on ${os}` : os;
+}
+function defaultRandomToken(bytes) {
+  return randomBytes(bytes).toString("base64url");
+}
+function secretsMatch(a, b) {
+  const left = Buffer.from(a);
+  const right = Buffer.from(b);
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+function fileSessionDirectory(stateDir, now = Date.now) {
+  const path = join2(stateDir, "sessions.json");
+  let records = [];
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    if (Array.isArray(parsed)) {
+      records = parsed.filter(
+        (r) => !!r && typeof r.id === "string" && typeof r.createdAt === "number"
+      );
+    }
+  } catch {
+  }
+  const inner = memorySessionDirectory(records);
+  const flush = () => {
+    try {
+      mkdirSync(dirname(path), { recursive: true });
+      writeFileSync(path, JSON.stringify(inner.list()), { mode: 384 });
+    } catch (error) {
+      if (process.env.FRIZZ_DEBUG_SESSIONS) console.error("[sessions] flush failed:", error);
+    }
+  };
+  return {
+    record(r) {
+      inner.record(r);
+      flush();
+    },
+    isRevoked: (id) => inner.isRevoked(id),
+    list: () => inner.list(),
+    revoke(id) {
+      const ok = inner.revoke(id);
+      if (ok) flush();
+      return ok;
+    },
+    revokeAll() {
+      const n = inner.revokeAll();
+      if (n > 0) flush();
+      return n;
+    }
+  };
+}
+function writeSessionKey(path, key) {
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, key, { mode: 384 });
+  try {
+    chmodSync(path, 384);
+  } catch {
+  }
+}
+function loadOrCreateSessionKey(stateDir) {
+  const path = join2(stateDir, SESSION_KEY_FILE);
+  try {
+    const existing = readFileSync(path);
+    if (existing.byteLength >= 32) return existing;
+  } catch {
+  }
+  return rotateSessionKey(stateDir);
+}
+function rotateSessionKey(stateDir) {
+  const key = randomBytes(32);
+  writeSessionKey(join2(stateDir, SESSION_KEY_FILE), key);
+  return key;
+}
+function readSessionEpoch(stateDir) {
+  try {
+    const parsed = JSON.parse(readFileSync(join2(stateDir, SESSION_EPOCH_FILE), "utf8"));
+    return Number.isInteger(parsed?.epoch) && parsed.epoch >= 0 ? parsed.epoch : 0;
+  } catch {
+    return 0;
+  }
+}
+function advanceSessionEpoch(stateDir, epoch = SESSION_EPOCH) {
+  const from = readSessionEpoch(stateDir);
+  if (from >= epoch) return { advanced: false, epoch: from };
+  const keyPath = join2(stateDir, SESSION_KEY_FILE);
+  const rotatedKey = existsSync(keyPath);
+  if (rotatedKey) rotateSessionKey(stateDir);
+  mkdirSync(stateDir, { recursive: true });
+  writeFileSync(
+    join2(stateDir, SESSION_EPOCH_FILE),
+    JSON.stringify({ epoch, advancedAt: (/* @__PURE__ */ new Date()).toISOString() }),
+    { mode: 384 }
+  );
+  return { advanced: true, from, to: epoch, rotatedKey };
+}
+function sessionEpochNotice(count) {
+  if (count <= 0) return null;
+  const devices = count === 1 ? "1 remote device" : `${count} remote devices`;
+  return `Security update: signed out ${devices} (a phone or browser reaching this board through frizz.sh or a tunnel). Each must sign in again with a fresh link.`;
+}
+function sessionEpochLogLine(advance, signedOut) {
+  if (!advance.advanced || !advance.rotatedKey) return null;
+  const count = signedOut === null ? "an unknown number of" : String(signedOut);
+  return `session epoch ${advance.from} -> ${advance.to}: rotated the session key and signed out ${count} recorded remote device(s); every older remote session is refused`;
+}
+function loadSessionState(stateDir, epoch = SESSION_EPOCH) {
+  const advance = advanceSessionEpoch(stateDir, epoch);
+  const key = loadOrCreateSessionKey(stateDir);
+  const directory = fileSessionDirectory(stateDir);
+  const signedOut = advance.advanced ? directory.revokeAll() : 0;
+  return { key, directory, rotateKey: () => rotateSessionKey(stateDir), advance, signedOut };
+}
+var CODE_BYTES, SESSION_BYTES, SESSION_ID_BYTES, DEFAULT_CODE_TTL_MS, DEFAULT_SESSION_TTL_MS, SESSION_EPOCH, AccessStore, SESSION_KEY_FILE, SESSION_EPOCH_FILE;
+var init_access_codes = __esm({
+  "packages/server/src/access-codes.ts"() {
+    "use strict";
+    CODE_BYTES = 16;
+    SESSION_BYTES = 32;
+    SESSION_ID_BYTES = 6;
+    DEFAULT_CODE_TTL_MS = 5 * 6e4;
+    DEFAULT_SESSION_TTL_MS = 30 * 24 * 60 * 6e4;
+    SESSION_EPOCH = 1;
+    AccessStore = class _AccessStore {
+      codes = /* @__PURE__ */ new Map();
+      options;
+      sessions;
+      /** Signing key for sessions. Persisted by the caller; a fresh one signs every device out. */
+      signingKey;
+      rotateSigningKey;
+      constructor(options2 = {}) {
+        this.signingKey = options2.signingKey ?? randomBytes(32);
+        this.rotateSigningKey = options2.rotateSigningKey ?? (() => randomBytes(32));
+        this.sessions = options2.sessions ?? memorySessionDirectory();
+        this.options = {
+          codeTtlMs: options2.codeTtlMs ?? DEFAULT_CODE_TTL_MS,
+          sessionTtlMs: options2.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS,
+          now: options2.now ?? Date.now,
+          randomToken: options2.randomToken ?? defaultRandomToken,
+          onConsumed: options2.onConsumed
+        };
+      }
+      /** Mint a code to show as a QR or a link. Minting does not invalidate codes already outstanding. */
+      issue() {
+        this.sweep();
+        const now = this.options.now();
+        const code = {
+          code: this.options.randomToken(CODE_BYTES),
+          createdAt: now,
+          expiresAt: now + this.options.codeTtlMs
+        };
+        this.codes.set(code.code, code);
+        return { code: code.code, createdAt: code.createdAt, expiresAt: code.expiresAt };
+      }
+      /**
+       * Trade a code for a session, at most once, ever.
+       *
+       * The consumed marker is set BEFORE anything else can observe success, and JS runs this method to
+       * completion without interleaving, so two browsers racing the same code cannot both win. That
+       * atomicity is what makes "single-use" true rather than aspirational — it is the first thing the
+       * tests attack.
+       */
+      redeem(code, device) {
+        if (!code) return { ok: false, reason: "unknown" };
+        const stored = this.codes.get(code);
+        if (!stored || !secretsMatch(stored.code, code)) return { ok: false, reason: "unknown" };
+        const now = this.options.now();
+        if (stored.consumedAt !== void 0) return { ok: false, reason: "already-used" };
+        if (now >= stored.expiresAt) {
+          this.sweep();
+          return { ok: false, reason: "expired" };
+        }
+        stored.consumedAt = now;
+        this.sweep();
+        this.options.onConsumed?.(code);
+        const minted = this.mintSession(now);
+        const expiresAt = now + this.options.sessionTtlMs;
+        this.sessions.record({ id: minted.id, label: device ?? "unknown device", createdAt: now, expiresAt });
+        return { ok: true, session: minted.session, expiresAt, id: minted.id };
+      }
+      /**
+       * Sign out EVERY device: `frizz --sign-out all`, and what a session-epoch bump asks of a running board.
+       *
+       * The denylist alone is not enough for that. It names only the ids it recorded, so a session minted
+       * before ids existed (2026-08-25), or while the directory was held in memory, would survive it. A new
+       * key kills every outstanding session whatever it carries; the denylist entries are what make
+       * `frizz --sessions` stop listing those devices as signed in. Returns how many recorded devices that was.
+       */
+      signOutAll() {
+        this.signingKey = this.rotateSigningKey();
+        return this.sessions.revokeAll();
+      }
+      /**
+       * A session is `<expiry>.<id>.<nonce>.<hmac>` — signed with a key the caller persists so it survives
+       * a restart, and self-describing enough that a stale cookie is rejected without any lookup.
+       *
+       * The `id` is what makes ONE device signable-out. It is short because an operator types it into
+       * `frizz --sign-out <id>`, and it is inside the signed payload so it cannot be swapped for another
+       * device's. Rotating the key still revokes everything at once; this is the scalpel beside that axe.
+       *
+       * A session minted before ids existed has a two-part payload and still verifies — it simply has no id
+       * to revoke individually. Adding ids was not meant to sign every device out; when that IS the intent,
+       * SESSION_EPOCH does it on purpose, by rotating the key.
+       */
+      mintSession(now) {
+        const expiresAt = now + this.options.sessionTtlMs;
+        const id = this.options.randomToken(SESSION_ID_BYTES);
+        const nonce = this.options.randomToken(SESSION_BYTES);
+        const payload = `${expiresAt}.${id}.${nonce}`;
+        return { session: `${payload}.${this.sign(payload)}`, id };
+      }
+      /** The expiry a session carries in its own payload. Only called on a session that already verified. */
+      static expiryOf(session) {
+        return Number(session.slice(0, session.indexOf(".")));
+      }
+      /** The id inside a session payload, or null for a legacy two-part one. */
+      static idOf(payload) {
+        const parts = payload.split(".");
+        return parts.length >= 3 ? parts[1] ?? null : null;
+      }
+      sign(payload) {
+        return createHmac("sha256", this.signingKey).update(payload).digest("base64url");
+      }
+      /** Is this cookie a session signed by this board's key, and still in date? */
+      verifySession(session) {
+        if (!session) return false;
+        const cut = session.lastIndexOf(".");
+        if (cut <= 0) return false;
+        const payload = session.slice(0, cut);
+        const signature = session.slice(cut + 1);
+        if (!secretsMatch(signature, this.sign(payload))) return false;
+        const expiresAt = Number(payload.slice(0, payload.indexOf(".")));
+        if (!Number.isFinite(expiresAt) || this.options.now() >= expiresAt) return false;
+        const id = _AccessStore.idOf(payload);
+        return !(id && this.sessions.isRevoked(id));
+      }
+      /**
+       * Sign out the device HOLDING this session — the "Sign out this device" row, not `--sign-out`.
+       *
+       * The id comes from the session itself, and only after its signature verifies, so the one thing this
+       * can ever revoke is the credential the caller just proved it holds. There is deliberately no
+       * parameter naming any other id: signing out SOMEONE ELSE stays loopback-only, because a stolen
+       * session must not be able to evict the owner and keep the board.
+       *
+       * - `revoked`: the id is on the denylist now, so a surviving copy of this cookie is refused too.
+       * - `legacy`: a session minted before ids existed verifies but has no id to revoke on its own. The
+       *   caller can still clear the cookie; signOutAll(), which rotates the key, is the way to kill a copy.
+       * - `no-session`: nothing valid was presented — absent, forged, expired, or already signed out.
+       */
+      signOutSession(session) {
+        if (!session || !this.verifySession(session)) return { result: "no-session" };
+        const id = _AccessStore.idOf(session.slice(0, session.lastIndexOf(".")));
+        if (!id) return { result: "legacy" };
+        if (!this.sessions.revoke(id)) {
+          this.sessions.record({ id, label: "unknown device", createdAt: this.options.now(), expiresAt: _AccessStore.expiryOf(session) });
+          this.sessions.revoke(id);
+        }
+        return this.sessions.isRevoked(id) ? { result: "revoked", id } : { result: "no-session" };
+      }
+      /**
+       * Drop codes past their expiry so a long-lived board does not accumulate them forever.
+       *
+       * A CONSUMED code is deliberately kept until that same expiry rather than deleted on use. Deleting it
+       * immediately would make a replay indistinguishable from a typo — both "unknown" — and the difference
+       * matters: "already-used" is the message that tells someone their link was used by somebody else.
+       * It costs one small entry for at most the code TTL.
+       */
+      sweep() {
+        const now = this.options.now();
+        for (const [key, stored] of this.codes) {
+          if (now >= stored.expiresAt) this.codes.delete(key);
+        }
+      }
+      /** Outstanding codes that could still be redeemed — neither consumed nor expired. */
+      outstanding() {
+        this.sweep();
+        return [...this.codes.values()].filter((stored) => stored.consumedAt === void 0).map(({ code, createdAt, expiresAt }) => ({ code, createdAt, expiresAt }));
+      }
+    };
+    SESSION_KEY_FILE = "session-key";
+    SESSION_EPOCH_FILE = "session-epoch";
+  }
+});
+
 // packages/server/src/local-path.ts
 function normalizeLocalPath(path, platform = process.platform) {
   return platform === "win32" ? path.replace(/^\/([a-zA-Z]:[\\/])/, "$1") : path;
@@ -191,12 +509,12 @@ var init_local_path = __esm({
 });
 
 // packages/server/src/local-image.ts
-import { readFileSync as readFileSync2, realpathSync, statSync } from "node:fs";
+import { createReadStream, realpathSync, statSync } from "node:fs";
 import { extname, isAbsolute } from "node:path";
-function resolveLocalImage(rawPath) {
+function resolveLocalImage(rawPath, range) {
   if (rawPath) rawPath = normalizeLocalPath(rawPath);
   if (!rawPath || !isAbsolute(rawPath)) return { status: 400 };
-  const contentType = IMAGE_CONTENT_TYPE[extname(rawPath).toLowerCase()];
+  const contentType = CONTENT_TYPE[extname(rawPath).toLowerCase()];
   if (!contentType) return { status: 400 };
   let real;
   try {
@@ -204,14 +522,48 @@ function resolveLocalImage(rawPath) {
   } catch {
     return { status: 404 };
   }
+  let size;
   try {
-    if (!statSync(real).isFile()) return { status: 404 };
-    return { status: 200, contentType, body: readFileSync2(real) };
+    const stat = statSync(real);
+    if (!stat.isFile()) return { status: 404 };
+    size = stat.size;
   } catch {
     return { status: 404 };
   }
+  const span = range ? byteRange(range, size) : null;
+  if (span === "unsatisfiable") return { status: 416, size };
+  if (span) return { status: 206, contentType, file: real, size, start: span.start, end: span.end };
+  return { status: 200, contentType, file: real, size, start: 0, end: size - 1 };
+}
+function byteRange(header, size) {
+  const match = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+  if (!match) return null;
+  const [, first, last] = match;
+  if (first === "" && last === "") return null;
+  if (first === "") {
+    const suffix = Number(last);
+    if (suffix === 0 || size === 0) return "unsatisfiable";
+    return { start: Math.max(size - suffix, 0), end: size - 1 };
+  }
+  const start = Number(first);
+  if (last !== "" && Number(last) < start) return null;
+  if (start >= size) return "unsatisfiable";
+  return { start, end: last === "" ? size - 1 : Math.min(Number(last), size - 1) };
+}
+function localImageHeaders(result) {
+  return {
+    "content-type": result.contentType,
+    "content-length": String(result.end - result.start + 1),
+    "accept-ranges": "bytes",
+    "cache-control": "private, max-age=60",
+    ...result.status === 206 ? { "content-range": `bytes ${result.start}-${result.end}/${result.size}` } : {}
+  };
+}
+function localImageStream(result) {
+  if (result.end < result.start) return null;
+  return createReadStream(result.file, { start: result.start, end: result.end });
 }
-var IMAGE_CONTENT_TYPE;
+var IMAGE_CONTENT_TYPE, VIDEO_CONTENT_TYPE, CONTENT_TYPE;
 var init_local_image = __esm({
   "packages/server/src/local-image.ts"() {
     "use strict";
@@ -223,65 +575,333 @@ var init_local_image = __esm({
       ".gif": "image/gif",
       ".webp": "image/webp"
     };
+    VIDEO_CONTENT_TYPE = {
+      ".mp4": "video/mp4",
+      ".m4v": "video/mp4",
+      ".webm": "video/webm",
+      ".mov": "video/quicktime"
+    };
+    CONTENT_TYPE = { ...IMAGE_CONTENT_TYPE, ...VIDEO_CONTENT_TYPE };
   }
 });
 
-// node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
-var require_identity = __commonJS({
-  "node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js"(exports) {
+// packages/server/src/supervisor-pages.ts
+function escapeHtml(value) {
+  return value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+}
+function retryTarget(url) {
+  return url.startsWith("/") && !url.startsWith("//") ? url : "/";
+}
+function documentShell(options2) {
+  return `<!doctype html><html lang="en" data-font="sans"><head><meta charset="utf-8"><title>${options2.title}</title><meta name="viewport" content="width=device-width,initial-scale=1">` + (options2.appearance ? `<meta name="color-scheme" content="dark light"><meta name="theme-color" content="#0d0e10">` : `<meta name="color-scheme" content="dark light"><meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0d0e10"><meta name="theme-color" media="(prefers-color-scheme: light)" content="#f7f7f7">`) + `<style>${options2.style ? `${BASE_STYLE}
+${options2.style}` : BASE_STYLE}</style>` + (options2.appearance ? `<script>${THEME_SCRIPT}</script>` : "") + `</head><body${options2.bodyAttributes ? ` ${options2.bodyAttributes}` : ""}><main>${options2.body}</main>` + (options2.script ? `<script>${options2.script}</script>` : "") + `</body></html>`;
+}
+function recoveryPage(url, variant = "starting") {
+  const copy = RECOVERY_COPY[variant];
+  const target2 = escapeHtml(retryTarget(url));
+  return documentShell({
+    title: copy.title,
+    style: RECOVERY_STYLE,
+    appearance: true,
+    bodyAttributes: `data-target="${target2}"`,
+    body: `<h1><span class="dot" id="dot" aria-hidden="true"></span><span id="heading">${copy.heading}</span></h1><p class="detail" id="detail">${copy.detail}</p><pre class="log" id="log" hidden></pre><p class="note">${THREADS_NOTE}</p><div class="actions"><a class="btn" href="${target2}">Try again</a><button class="btn" type="button" id="restart">Restart Frizz</button></div><p class="probe" id="probe" aria-live="polite"></p>`,
+    script: RECOVERY_SCRIPT
+  });
+}
+function unauthorizedPage(reason) {
+  const detail = reason === "already-used" ? "That link has already been used. Generate a fresh one." : reason === "expired" ? "That link expired. Generate a fresh one." : "This address needs a current access link.";
+  return documentShell({
+    title: "Unauthorized",
+    body: `<h1>Unauthorized</h1><p class="detail">${detail}</p>`
+  });
+}
+function unlistedHostPage(name) {
+  const shown = escapeHtml(name);
+  return documentShell({
+    title: "Not served by this name",
+    appearance: true,
+    body: `<h1>Not served by this name</h1><p class="detail">Frizz does not answer to <code>${shown}</code>. A name a browser has to resolve is how DNS rebinding makes another site's page count as this board, so an exposed board accepts only its own hostname and the names its operator lists.</p><p class="note">Open the board by its IP address, or relaunch with <code>--allowed-host ${shown}</code> (or <code>FRIZZ_ALLOWED_HOSTS=${shown}</code>) to accept this one.</p>`
+  });
+}
+var BASE_STYLE, RECOVERY_STYLE, THEME_SCRIPT, RECOVERY_SCRIPT, RECOVERY_COPY, THREADS_NOTE;
+var init_supervisor_pages = __esm({
+  "packages/server/src/supervisor-pages.ts"() {
     "use strict";
-    var ALIAS = Symbol.for("yaml.alias");
-    var DOC = Symbol.for("yaml.document");
-    var MAP = Symbol.for("yaml.map");
-    var PAIR = Symbol.for("yaml.pair");
-    var SCALAR = Symbol.for("yaml.scalar");
-    var SEQ = Symbol.for("yaml.seq");
-    var NODE_TYPE = Symbol.for("yaml.node.type");
-    var isAlias = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === ALIAS;
-    var isDocument = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === DOC;
-    var isMap = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === MAP;
-    var isPair = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === PAIR;
-    var isScalar = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SCALAR;
-    var isSeq = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
-    function isCollection(node) {
-      if (node && typeof node === "object")
-        switch (node[NODE_TYPE]) {
-          case MAP:
-          case SEQ:
-            return true;
-        }
-      return false;
-    }
-    function isNode(node) {
-      if (node && typeof node === "object")
-        switch (node[NODE_TYPE]) {
-          case ALIAS:
-          case MAP:
-          case SCALAR:
-          case SEQ:
-            return true;
-        }
-      return false;
-    }
-    var hasAnchor = (node) => (isScalar(node) || isCollection(node)) && !!node.anchor;
-    exports.ALIAS = ALIAS;
-    exports.DOC = DOC;
-    exports.MAP = MAP;
-    exports.NODE_TYPE = NODE_TYPE;
-    exports.PAIR = PAIR;
-    exports.SCALAR = SCALAR;
-    exports.SEQ = SEQ;
-    exports.hasAnchor = hasAnchor;
-    exports.isAlias = isAlias;
-    exports.isCollection = isCollection;
-    exports.isDocument = isDocument;
-    exports.isMap = isMap;
-    exports.isNode = isNode;
-    exports.isPair = isPair;
-    exports.isScalar = isScalar;
-    exports.isSeq = isSeq;
+    BASE_STYLE = `
+*,*::before,*::after{box-sizing:border-box}
+:root{
+  color-scheme:dark;
+  --bg:#0d0e10;--panel:#131519;--panel-2:#181b20;
+  --border:#26282d;--border-strong:#33363c;--control-border:#26282d;--control-strong:#33363c;
+  --fg:#e6e7e9;--muted:#8b8f96;--accent:#e8b923;--danger:#fca5a5;
+  --focus-border:color-mix(in srgb,var(--accent) 55%,transparent);--focus-ring:color-mix(in srgb,var(--accent) 22%,transparent);
+  --sans:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
+  --mono:ui-monospace,"JetBrains Mono","SF Mono","Cascadia Mono",Menlo,Consolas,monospace;
+  --ease:cubic-bezier(0,0,.2,1);
+}
+:root[data-theme=light]{
+  color-scheme:light;
+  --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
+  --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
+  --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
+  --focus-border:#416896;--focus-ring:#416896;
+}
+@media(prefers-color-scheme:light){
+  :root:not([data-theme]){
+    color-scheme:light;
+    --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
+    --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
+    --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
+    --focus-border:#416896;--focus-ring:#416896;
   }
-});
+}
+html,body{background:var(--bg)}
+body{
+  margin:0;min-height:100vh;min-height:100dvh;
+  display:flex;align-items:center;justify-content:center;padding:24px;
+  color:var(--fg);font-family:var(--sans);font-size:12.5px;line-height:1.55;
+  -webkit-font-smoothing:antialiased;
+}
+main{width:100%;max-width:28rem;padding:18px;border:1px solid var(--border-strong);border-radius:12px;background:var(--panel-2)}
+h1{margin:0;display:flex;align-items:baseline;gap:7px;font-size:14px;font-weight:600;letter-spacing:-.01em;line-height:1.4}
+p{margin:0;text-wrap:pretty}
+.detail{margin-top:7px;color:color-mix(in srgb,var(--fg) 88%,transparent)}
+.note{margin-top:12px;padding-top:11px;border-top:1px solid var(--border);color:var(--muted);font-size:11.5px;line-height:1.6}
+code{font-family:var(--mono);font-size:.92em;padding:.1em .35em;border-radius:4px;background:var(--panel);border:1px solid var(--border);white-space:nowrap}
+[hidden]{display:none!important}
+`.trim();
+    RECOVERY_STYLE = `
+.actions{margin-top:14px;display:flex;flex-wrap:wrap;gap:8px}
+/* ErrorBoundary's ACTION_CLASS, one size up for a page that is alone in a viewport. */
+.btn{
+  appearance:none;display:inline-flex;align-items:center;
+  border:1px solid var(--control-border);border-radius:6px;background:transparent;
+  padding:5px 10px;font:inherit;font-size:11.5px;color:color-mix(in srgb,var(--fg) 90%,transparent);
+  cursor:pointer;text-decoration:none;
+  transition:background-color 120ms var(--ease),border-color 120ms var(--ease),color 120ms var(--ease);
+}
+.btn:hover{background:var(--panel);border-color:var(--control-strong);color:var(--fg)}
+.btn:focus-visible{outline:none;border-color:var(--focus-border);box-shadow:0 0 0 2px var(--focus-ring)}
+.btn:disabled{opacity:.5;pointer-events:none}
+/* min-height holds the slot open while it is LIVE, so a changing status line never nudges the card;
+   :empty collapses it when there is nothing live to say, so a halted card has no trailing gutter. */
+.probe{margin-top:12px;font-family:var(--mono);font-size:11px;line-height:1.5;color:var(--muted);min-height:1.5em}
+.probe:empty{margin-top:0;min-height:0}
+/* RestartFailureNotice's block, at this altitude: a supervisor \`message\` is raw build output, and it
+   reads as what it is \u2014 a terminal excerpt \u2014 only inside a scrolling mono box. */
+.log{
+  margin-top:10px;max-height:16rem;overflow:auto;white-space:pre-wrap;overflow-wrap:break-word;
+  border:1px solid var(--border);border-radius:6px;background:var(--panel);padding:8px 10px;
+  font-family:var(--mono);font-size:11px;line-height:1.6;color:color-mix(in srgb,var(--fg) 70%,transparent);
+}
+
+/* THE LIVE DOT, and it is the app's own \`.frizz-live-dot\` \u2014 same 6px, same 28%/14% halo, same 1.25s
+   cadence \u2014 because it means the same thing here that it means there: work is in flight.
+
+   Alignment is an INK problem. A baseline-aligned flex item with no text of its own contributes its
+   BORDER-BOX BOTTOM as the baseline, so the dot's ink centre lands 3px above it while the cap band's
+   centre sits 0.5cap above it. \`cap\` is the resolved font's own cap height, so the correction holds
+   at any size, with nothing to re-measure when the type scale moves. The em spelling is the fallback for a browser without the unit (.35em ~= 0.5 x a
+   0.7em cap) and is overwritten wherever \`cap\` parses. */
+.dot{
+  width:6px;height:6px;flex:0 0 auto;border-radius:9999px;background:var(--accent);
+  box-shadow:0 0 0 1px color-mix(in srgb,var(--accent) 28%,transparent);
+  animation:frizz-live-pulse 1.25s ease-in-out infinite;
+  transform:translateY(calc(3px - .35em));
+  transform:translateY(calc(3px - .5cap));
+}
+.dot[data-state=idle]{animation:none;background:var(--muted);box-shadow:none}
+.dot[data-state=bad]{animation:none;background:var(--danger);box-shadow:0 0 0 1px color-mix(in srgb,var(--danger) 28%,transparent)}
+@keyframes frizz-live-pulse{50%{opacity:.62;box-shadow:0 0 0 2px color-mix(in srgb,var(--accent) 14%,transparent)}}
+@media (prefers-reduced-motion:reduce){
+  .dot{animation:none;background:transparent;border:2px solid var(--accent);box-shadow:none}
+  .dot[data-state=idle]{border-color:var(--muted)}
+  .dot[data-state=bad]{border-color:var(--danger);background:transparent}
+}
+
+/* The app's \`.shimmer-text\`: a highlight sweeping muted text is how this product says "working", and
+   the probe line is the only thing on the page that is. */
+.probe[data-live=yes]{
+  color:transparent;
+  background:linear-gradient(90deg,var(--muted) 0%,var(--muted) 35%,var(--fg) 50%,var(--muted) 65%,var(--muted) 100%) 0 0/200% 100%;
+  -webkit-background-clip:text;background-clip:text;
+  animation:frizz-shimmer 2.2s linear infinite;
+}
+@keyframes frizz-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
+@media (prefers-reduced-motion:reduce){
+  .probe[data-live=yes]{animation:none;background:none;color:var(--muted)}
+}
+`.trim();
+    THEME_SCRIPT = `var p;try{p=localStorage.getItem("frizz-theme")}catch{}var d=false;try{d=matchMedia&&matchMedia("(prefers-color-scheme: dark)").matches}catch{}var t=p==="dark"||p==="light"?p:d?"dark":"light";document.documentElement.dataset.theme=t;document.documentElement.style.colorScheme=t;document.querySelector('meta[name="theme-color"]').content=t==="dark"?"#0d0e10":"#f7f7f7"`;
+    RECOVERY_SCRIPT = `
+(function(){
+  var target=document.body.dataset.target||"/"
+  var heading=document.getElementById("heading")
+  var detail=document.getElementById("detail")
+  var probe=document.getElementById("probe")
+  var log=document.getElementById("log")
+  var dot=document.getElementById("dot")
+  var restart=document.getElementById("restart")
+  var BUDGET=120000,MIN=600,MAX=4000,GROWTH=1.4
+  var delay=MIN,deadline=Date.now()+BUDGET,timer=0,stopped=false,busy=false,told=""
+
+  function say(text,live){probe.textContent=text;probe.setAttribute("data-live",live?"yes":"no")}
+  function halt(text,bad){stopped=true;clearTimeout(timer);dot.setAttribute("data-state",bad?"bad":"idle");say(text,false)}
+  function showLog(message){if(message){log.textContent=message;log.hidden=false}else{log.hidden=true}}
+  function resume(){stopped=false;busy=false;delay=MIN;deadline=Date.now()+BUDGET;dot.removeAttribute("data-state");clearTimeout(timer);timer=setTimeout(tick,0)}
+
+  // 503 is this proxy's own "no child". Every other answer \u2014 200, 404, even a 500 from the app \u2014 means
+  // something is listening again, and the reader's own URL is the right thing to ask.
+  function alive(){
+    return fetch(target,{method:"HEAD",cache:"no-store",credentials:"same-origin"})
+      .then(function(r){return r.status!==503}).catch(function(){return false})
+  }
+  function readStatus(){
+    return fetch("/_frizz/control/status",{cache:"no-store",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.ok?r.json():null})
+      .then(function(b){return b&&b.protocol===1?b:null}).catch(function(){return null})
+  }
+
+  // An unreachable launcher leaves the server-rendered copy alone: it is already right for the case
+  // that rendered it, and guessing over it would be worse than saying nothing.
+  function narrate(status){
+    if(!status||status.state===told)return
+    told=status.state
+    if(status.state==="failed"){
+      heading.textContent="Frizz did not restart"
+      // Not a second copy of the note below it \u2014 a lead-in to the log, which is the next thing down.
+      detail.textContent="The launcher could not bring the application server back, and reported this:"
+      showLog(status.message||"The launcher gave no reason.")
+      halt("",true)
+      return
+    }
+    showLog("")
+    if(status.state==="restarting"){
+      heading.textContent="Frizz is restarting"
+      detail.textContent="The application server is coming back up."
+    }
+  }
+
+  function tick(){
+    if(stopped||busy)return
+    // A hidden tab neither polls nor spends its budget; visibilitychange starts the loop again.
+    if(document.hidden)return
+    alive().then(function(up){
+      if(up){say("Frizz is back. Reloading.",true);location.replace(target);return}
+      return readStatus().then(function(status){
+        narrate(status)
+        if(stopped)return
+        if(Date.now()>deadline){halt("No answer after 2m. This page stopped checking.",false);return}
+        delay=Math.min(MAX,delay*GROWTH)
+        say("Waiting for Frizz",true)
+        timer=setTimeout(tick,delay)
+      })
+    })
+  }
+
+  document.addEventListener("visibilitychange",function(){
+    if(document.hidden||stopped||busy)return
+    resume()
+  })
+
+  restart.addEventListener("click",function(){
+    if(busy)return
+    busy=true;stopped=false;told="";clearTimeout(timer)
+    restart.disabled=true;restart.textContent="Restarting"
+    dot.removeAttribute("data-state");showLog("");say("Restarting Frizz",true)
+    fetch("/_frizz/control/restart",{method:"POST",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.json().catch(function(){return null}).then(function(b){return{ok:r.ok,status:r.status,body:b}})})
+      .catch(function(){return{ok:false,status:0,body:null}})
+      .then(function(r){
+        restart.disabled=false;restart.textContent="Restart Frizz";busy=false
+        if(!r.ok){
+          heading.textContent="Frizz did not restart"
+          detail.textContent="The launcher could not bring the application server back, and reported this:"
+          showLog((r.body&&r.body.message)||("The launcher refused the restart ("+(r.status||"no response")+")."))
+          halt("",true)
+          return
+        }
+        // Accepted. The probe, not this response, decides whether the child is actually back.
+        resume()
+      })
+  })
+
+  say("Waiting for Frizz",true)
+  tick()
+})()
+`.trim();
+    RECOVERY_COPY = {
+      starting: {
+        title: "Restarting | Frizz",
+        heading: "Frizz is restarting",
+        detail: "The application server is not listening yet. This page reloads as soon as it answers."
+      },
+      unreachable: {
+        title: "Not responding | Frizz",
+        heading: "Frizz is not responding",
+        detail: "The application server accepted this request and then dropped it. Restarting it usually clears this."
+      }
+    };
+    THREADS_NOTE = "Threads already running are not affected. Each runs as its own detached process, and Frizz reattaches to it on restart.";
+  }
+});
+
+// node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
+var require_identity = __commonJS({
+  "node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js"(exports) {
+    "use strict";
+    var ALIAS = Symbol.for("yaml.alias");
+    var DOC = Symbol.for("yaml.document");
+    var MAP = Symbol.for("yaml.map");
+    var PAIR = Symbol.for("yaml.pair");
+    var SCALAR = Symbol.for("yaml.scalar");
+    var SEQ = Symbol.for("yaml.seq");
+    var NODE_TYPE = Symbol.for("yaml.node.type");
+    var isAlias = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === ALIAS;
+    var isDocument = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === DOC;
+    var isMap = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === MAP;
+    var isPair = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === PAIR;
+    var isScalar = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SCALAR;
+    var isSeq = (node) => !!node && typeof node === "object" && node[NODE_TYPE] === SEQ;
+    function isCollection(node) {
+      if (node && typeof node === "object")
+        switch (node[NODE_TYPE]) {
+          case MAP:
+          case SEQ:
+            return true;
+        }
+      return false;
+    }
+    function isNode(node) {
+      if (node && typeof node === "object")
+        switch (node[NODE_TYPE]) {
+          case ALIAS:
+          case MAP:
+          case SCALAR:
+          case SEQ:
+            return true;
+        }
+      return false;
+    }
+    var hasAnchor = (node) => (isScalar(node) || isCollection(node)) && !!node.anchor;
+    exports.ALIAS = ALIAS;
+    exports.DOC = DOC;
+    exports.MAP = MAP;
+    exports.NODE_TYPE = NODE_TYPE;
+    exports.PAIR = PAIR;
+    exports.SCALAR = SCALAR;
+    exports.SEQ = SEQ;
+    exports.hasAnchor = hasAnchor;
+    exports.isAlias = isAlias;
+    exports.isCollection = isCollection;
+    exports.isDocument = isDocument;
+    exports.isMap = isMap;
+    exports.isNode = isNode;
+    exports.isPair = isPair;
+    exports.isScalar = isScalar;
+    exports.isSeq = isSeq;
+  }
+});
 
 // node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/visit.js
 var require_visit = __commonJS({
@@ -12362,6 +12982,31 @@ var init_drainable_worker = __esm({
   }
 });
 
+// packages/shared/src/frizz-md.ts
+var FrizzMdLanding, FrizzMdAutonomy, FRIZZ_MD_NOTES_MAX, FrizzMdAnswers, FrizzMdStatus;
+var init_frizz_md = __esm({
+  "packages/shared/src/frizz-md.ts"() {
+    "use strict";
+    init_zod();
+    FrizzMdLanding = external_exports.enum(["pull-request", "main", "main-push", "branch"]);
+    FrizzMdAutonomy = external_exports.enum(["decide", "balanced", "check-in"]);
+    FRIZZ_MD_NOTES_MAX = 8e3;
+    FrizzMdAnswers = external_exports.object({
+      landing: FrizzMdLanding,
+      autonomy: FrizzMdAutonomy,
+      notes: external_exports.string().max(FRIZZ_MD_NOTES_MAX)
+    }).strict();
+    FrizzMdStatus = external_exports.object({
+      /** A FRIZZ.md is already at the project root: the project has its rules, so nothing is asked. */
+      exists: external_exports.boolean(),
+      /** The operator skipped the questionnaire for this project: it is not asked again. */
+      skipped: external_exports.boolean(),
+      /** The branch the landing rules name — the remote's default, else the checked-out one, else `main`. */
+      defaultBranch: external_exports.string()
+    });
+  }
+});
+
 // packages/shared/src/receipt-bus.ts
 var init_receipt_bus = __esm({
   "packages/shared/src/receipt-bus.ts"() {
@@ -12425,9 +13070,6 @@ var init_relay_protocol = __esm({
     RELAY_MAX_FRAME_BODY = 512 * 1024;
     RELAY_MAX_WS_CHUNK = 64 * 1024;
     WsMessageAssembler = class {
-      constructor(maxBytes = 8 * 1024 * 1024) {
-        this.maxBytes = maxBytes;
-      }
       parts = /* @__PURE__ */ new Map();
       sizes = /* @__PURE__ */ new Map();
       /**
@@ -12438,6 +13080,10 @@ var init_relay_protocol = __esm({
        * lighter and corrupt. The run stays poisoned until the frame that terminates it.
        */
       poisoned = /* @__PURE__ */ new Set();
+      maxBytes;
+      constructor(maxBytes = 8 * 1024 * 1024) {
+        this.maxBytes = maxBytes;
+      }
       /** Returns the complete message, or null while more is still to come (or once the run overflowed). */
       push(id, data, more) {
         if (this.poisoned.has(id)) {
@@ -12504,22 +13150,27 @@ function signoffNudgeAwaitingLines(needsInput) {
   return [
     "- `` ```awaiting `` \u2014 you are WAITING on work that is actually running: a background shell, a",
     "  sub-agent, a timer or a registered PR. FRONTMATTER, THEN MARKDOWN: one YAML list per kind of thing",
-    "  you are waiting on, a REQUIRED `for:` duration, a REQUIRED `needs_input:` answer, then optionally a",
-    "  `---` line and prose.",
+    "  you are waiting on, a REQUIRED `for:` duration, a REQUIRED `status:`, then optionally a `---` line",
+    "  and prose.",
     "",
     "  ```awaiting",
     "  agents: [<the id your runtime gave you>]",
-    "  needs_input: false",
+    "  status: working",
     "  for: 2h",
     "  ```",
     "",
-    "  `needs_input: false` \u2014 nothing for the human yet. The thread stays out of their queue until the work",
-    "  wakes you, and you owe NO write-up: the fence alone is the whole message. `needs_input: true` \u2014 the",
-    "  human can read, try or act on something NOW while the work runs (a partial result, a file you wrote,",
-    "  a server to try), even if you need nothing back from them; the thread goes into their queue, and the",
-    "  prose under `---` says what to look at. If you wrote ANY words for the human at this rest, it is",
-    "  `true` \u2014 a `false` rest is never put in front of them. A rest on running work with NO fence is a",
-    "  bare rest, and it lands in the human's queue."
+    "  `status:` says where the thread sits while you wait, in one of three words:",
+    "  - `working` \u2014 what you named finishes by itself: a test, a build, a benchmark, CI, a sub-agent doing",
+    "    a task. The thread shows as running until the work wakes you.",
+    "  - `watching` \u2014 something has to HAPPEN outside the thread: a release, a review, another agent's",
+    "    merge, the next daily cycle. The thread is snoozed, and nothing on its row moves, until a named",
+    "    item reports or `for:` runs out.",
+    "  - `needs_input` \u2014 the human can read, try or act on something NOW while the work runs (a partial",
+    "    result, a file you wrote, a server to try), even if you need nothing back from them. The thread",
+    "    goes into their queue, and the prose under `---` says what to look at.",
+    "  `working` and `watching` owe NO write-up: the fence alone is the whole message. If you wrote ANY",
+    "  words for the human at this rest, it is `needs_input` \u2014 nothing else is put in front of them. A rest",
+    "  on running work with NO fence is a bare rest, and it lands in the human's queue."
   ];
 }
 function signoffNudgeText(needsInput) {
@@ -12565,10 +13216,20 @@ function signoffNudgeText(needsInput) {
     "  A fence that names NOTHING is not a park at all \u2014 if you are not waiting on anything, you are not",
     "  awaiting, you are done. Register a PR with `mcp__frizz__watch_pr` and a timer with",
     "  `mcp__frizz__timer`; `mcp__frizz__activity` reads back everything you have running, with its id.",
+    "- `` ```awaiting `` with `steps:` \u2014 the human must PERFORM something you cannot: sign in, approve,",
+    "  merge, press a button you may not. List each step as a `- ` line under `steps:`, written to be",
+    "  followed cold: a real Markdown link to every page and file it names, every command in a code span,",
+    "  every value the act needs written in. Frizz reads them verbatim. Steps name the HUMAN as the wait,",
+    "  so the fence needs no other name and no `for:`, and the thread goes into their queue. Their Done",
+    "  comes back to you as their reply; anything else they need to say comes as a message of their own.",
+    "- `` ```awaiting `` with `questions:` \u2014 a question you registered at an EARLIER rest is still open and",
+    "  you still need its answer. Name every such question (`questions: [qst_\u2026]`) and withdraw the rest with",
+    "  `mcp__frizz__unask`: a fence that leaves an open question out is refused. A named card is drawn at",
+    "  this rest; an unnamed one stays where you asked it.",
     "",
     "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
     "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
-    "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
+    "the part that is someone else's to do. Each ends on a question with your recommendation as option 1,",
     "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
     "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
     "None of them is a `done`. And what is not",
@@ -12593,7 +13254,7 @@ function requireEffortOutsideAcp(profile, ctx) {
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -12606,6 +13267,7 @@ var init_src = __esm({
     init_code_fences();
     init_delta();
     init_drainable_worker();
+    init_frizz_md();
     init_interactions();
     init_receipt_bus();
     init_relay_protocol();
@@ -12931,7 +13593,7 @@ var init_src = __esm({
       questions: external_exports.array(AskQuestion)
     });
     AwaitingHint = external_exports.object({
-      kind: external_exports.enum(["shell", "agent", "timer", "pr", "issue", "for", "title", "needs_input"]),
+      kind: external_exports.enum(["shell", "agent", "timer", "pr", "issue", "for", "title", "status", "needs_input", "step", "question"]),
       value: external_exports.string()
     });
     RETIRED_AWAITING_KINDS = ["watch", "pr-watch", "human", "ci", "session", "shell", "agent", "timer", "pr", "reason"];
@@ -13199,10 +13861,11 @@ var init_src = __esm({
       header: external_exports.string().trim().max(24).optional(),
       kind: AskQuestionKind,
       danger: external_exports.boolean().optional(),
+      secret: external_exports.boolean().optional(),
       // UNBOUNDED, deliberately. This carried `.max(8)` from launch until 2026-09-03, when the maintainer
       // asked for the cap to go ("allow arbitrary numbers of options"): a `multi` over a long list — which
-      // gates to run, which of twenty findings to act on — is a real shape, and the card letters past 26
-      // (`AA.`) already. The count is the worker's to choose; the answer's `chosen` is unbounded to match.
+      // gates to run, which of twenty findings to act on — is a real shape, and the card numbers past 9
+      // (only 1–9 are keys) already. The count is the worker's to choose; the answer's `chosen` is unbounded to match.
       options: external_exports.array(AskedOptionSchema).optional()
     }).strict());
     AskInput = external_exports.object({
@@ -13216,8 +13879,12 @@ var init_src = __esm({
        *  an id alone cannot be correlated back to what was asked. */
       id: external_exports.string(),
       spec: AskedQuestionSchema,
-      askedAt: external_exports.string()
+      askedAt: external_exports.string(),
+      /** A `secret` question only: the path its value will be served at. Known at registration, so the
+       *  worker can prepare the command that reads it before the human has answered. */
+      secretPath: external_exports.string().optional()
     }).strict();
+    SECRET_TTL_MS = 15 * 6e4;
     AskResult = external_exports.object({
       registered: external_exports.array(RegisteredQuestionView),
       /** Everything still open on this thread afterwards, so a worker never needs a second call. */
@@ -13532,6 +14199,13 @@ var init_src = __esm({
       // Optional like needsYou/crashed: absent ⇒ a pre-restart server or a non-session row; the client
       // treats absence as false.
       awaitingBackground: external_exports.boolean().optional(),
+      // SERVER-DERIVED: which band a rest OUT OF THE QUEUE sits in (board.deriveWaitStatus, 2026-10-05).
+      // `working` — the work it waits on finishes by itself, so it is Running and spins; `watching` —
+      // something must happen outside the thread, so it is Snoozed and still. Present only for a thread at
+      // rest behind a wait the server honoured with no queue card; absent everywhere else, including every
+      // queued rest, which never spins. Absent from a pre-2026-10-05 server, which the client reads as the
+      // old Running placement.
+      waitStatus: external_exports.enum(["working", "watching"]).optional(),
       // Exact typed-interaction presence for this CURRENT registered session. The board already derives
       // this from the scoped durable journal to compute needsYou; exposing the reason lets React avoid a
       // pendingInteractions RPC for every unrelated question/completion card. Optional preserves rolling
@@ -13600,7 +14274,7 @@ var init_src = __esm({
       // further to do; otherwise the composer offers the upgrade, and the first message after the thread's
       // next compaction takes it on its own.
       modelUpgrade: external_exports.object({ label: external_exports.string(), staged: external_exports.boolean() }).optional(),
-      // How full the session's context window is right now — the footer's fullness readout. BOTH halves
+      // How full the session's context window is right now — the header's fullness readout. BOTH halves
       // are provider-measured and the field is emitted ONLY when both are present, so a client never has
       // to decide what to do with half a fraction: absent ⇒ no reading, never a 0% dial. Codex reports
       // both on every `token_count`; a Claude row gets `tokens` from each assistant record's usage but
@@ -14702,14 +15376,588 @@ ${DISPATCH_TASK_BANNER}
   }
 });
 
-// packages/server/src/frizz-paths.ts
-import { existsSync } from "node:fs";
-import { homedir as homedir2, tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative, resolve, sep as sep2 } from "node:path";
-function legacyFrizzRoot(home = homedir2()) {
-  return join3(home, LEGACY_DIR_NAME);
-}
-function xdg(env, name) {
+// packages/server/src/restart-supervisor.ts
+import { request as requestHttp, createServer } from "node:http";
+import { connect } from "node:net";
+import { pipeline } from "node:stream";
+function responseJson(res, status, value) {
+  res.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
+  res.end(JSON.stringify(value));
+}
+function proxyHeaders(req, childPort, vouchSameOrigin = false) {
+  const headers = { ...req.headers };
+  headers.host = `127.0.0.1:${childPort}`;
+  if (typeof headers.origin === "string") headers.origin = `http://127.0.0.1:${childPort}`;
+  for (const name of FORWARDED_HEADERS) delete headers[name];
+  if (vouchSameOrigin) headers["sec-fetch-site"] = "same-origin";
+  delete headers.connection;
+  return headers;
+}
+function readCookie(header, name) {
+  if (!header) return void 0;
+  for (const pair of header.split(";")) {
+    const eq = pair.indexOf("=");
+    if (eq === -1) continue;
+    if (pair.slice(0, eq).trim() === name) return pair.slice(eq + 1).trim();
+  }
+  return void 0;
+}
+function isControlRequest(req) {
+  const url = new URL(req.url ?? "/", "http://frizz.invalid");
+  return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH || url.pathname === SUPERVISOR_SIGN_OUT_PATH;
+}
+function isLocalImageRequest(req) {
+  if (req.method !== "GET" && req.method !== "HEAD") return false;
+  const { pathname } = new URL(req.url ?? "/", "http://frizz.invalid");
+  return LOCAL_IMAGE_PATH.test(pathname);
+}
+async function readJsonBody(req, limit = 64 * 1024) {
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of req) {
+    size += chunk.byteLength;
+    if (size > limit) return null;
+    chunks.push(chunk);
+  }
+  if (chunks.length === 0) return {};
+  try {
+    const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+var SUPERVISOR_CONTROL_PREFIX, SUPERVISOR_RESTART_PATH, SUPERVISOR_UPDATE_RESTART_PATH, SUPERVISOR_STATUS_PATH, SUPERVISOR_ACCESS_CODE_PATH, SUPERVISOR_SESSIONS_PATH, SUPERVISOR_SIGN_OUT_PATH, SUPERVISOR_CONTROL_PROTOCOL, ACCESS_CODE_PARAM, SESSION_COOKIE, LOOPBACK_HOSTNAMES, LOCAL_IMAGE_PATH, RestartSupervisorProxy;
+var init_restart_supervisor = __esm({
+  "packages/server/src/restart-supervisor.ts"() {
+    "use strict";
+    init_access_codes();
+    init_local_origin();
+    init_local_image();
+    init_supervisor_pages();
+    init_src();
+    SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
+    SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
+    SUPERVISOR_UPDATE_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/update-restart`;
+    SUPERVISOR_STATUS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/status`;
+    SUPERVISOR_ACCESS_CODE_PATH = `${SUPERVISOR_CONTROL_PREFIX}/access-code`;
+    SUPERVISOR_SESSIONS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sessions`;
+    SUPERVISOR_SIGN_OUT_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sign-out`;
+    SUPERVISOR_CONTROL_PROTOCOL = 1;
+    ACCESS_CODE_PARAM = "frizz_code";
+    SESSION_COOKIE = "frizz_session";
+    LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+    LOCAL_IMAGE_PATH = new RegExp(`^${FRIZZ_ROUTE_PREFIX}(?:/[^/]+)?/local-image$`);
+    RestartSupervisorProxy = class {
+      server = null;
+      restartInFlight = null;
+      /** Which action `restartInFlight` is. An update's prepare phase leaves the child serving; a restart does not. */
+      transition = null;
+      state = "ready";
+      message;
+      options;
+      host;
+      /**
+       * The authorities a browser may name for the PUBLIC port. This proxy is the whole boundary: it
+       * rewrites Host/Origin to the child's private loopback authority, so the child's own strict gate
+       * can never see (or reject) the real browser authority. Everything this class forwards has to be
+       * judged here first.
+       */
+      policy;
+      /** The origin a tunnel or proxy serves this board at; undefined while loopback-only. Live: see setPublicOrigin. */
+      publicOrigin;
+      /**
+       * Codes and sessions for the public origin, or null when no public origin is declared (loopback-only
+       * boards are never gated, so there is nothing to store).
+       */
+      access;
+      /** Both halves of every live upgraded pair, so close() can actually finish. See close(). */
+      upgradedSockets = /* @__PURE__ */ new Set();
+      constructor(options2) {
+        this.options = options2;
+        this.host = options2.host ?? LOOPBACK_BIND_HOST;
+        this.publicOrigin = options2.publicOrigin;
+        this.access = new AccessStore({
+          onConsumed: () => options2.onCodeConsumed?.(),
+          ...options2.sessionKey ? { signingKey: options2.sessionKey } : {},
+          ...options2.rotateSessionKey ? { rotateSigningKey: options2.rotateSessionKey } : {},
+          ...options2.sessionDirectory ? { sessions: options2.sessionDirectory } : {}
+        });
+        this.policy = this.buildPolicy();
+      }
+      /**
+       * Change the public origin on a running board — what the R pane does when the operator picks or
+       * clears a remote setup. Requests already in flight finish under the policy they started with; the
+       * next one is judged by the new origin. Sessions survive the change.
+       */
+      setPublicOrigin(origin) {
+        this.publicOrigin = origin;
+        this.policy = this.buildPolicy();
+      }
+      buildPolicy() {
+        return {
+          exposed: bindHostIsExposed(this.host),
+          allowedHosts: this.options.allowedHosts ?? [],
+          ...this.publicOrigin ? { publicOrigin: this.publicOrigin } : {}
+        };
+      }
+      /**
+       * Mint a single-use code for this board, or null when no public origin is declared.
+       *
+       * Issuing does NOT invalidate codes already outstanding — pressing the key twice, or two people
+       * asking at once, must not silently break the first QR somebody is still walking towards.
+       */
+      issueAccessCode() {
+        return this.publicOrigin ? this.access.issue() : null;
+      }
+      /** The full URL to show as a link or a QR. */
+      accessUrl(code) {
+        const origin = this.publicOrigin;
+        return origin ? `${origin}/?${ACCESS_CODE_PARAM}=${encodeURIComponent(code)}` : null;
+      }
+      async listen() {
+        if (this.server) return;
+        const server = createServer((req, res) => this.handle(req, res));
+        server.keepAliveTimeout = 5e3;
+        server.headersTimeout = 1e4;
+        server.on("upgrade", (req, socket, head) => this.handleUpgrade(req, socket, head));
+        await new Promise((resolveListen, rejectListen) => {
+          server.once("error", rejectListen);
+          server.listen(this.options.port, this.host, () => {
+            server.off("error", rejectListen);
+            resolveListen();
+          });
+        });
+        this.server = server;
+      }
+      /**
+       * Is this request allowed to reach the child at all?
+       *
+       * Deliberately the WEAKER of the two gates: a missing Origin passes here and the child then applies
+       * its own per-route rule for it (only /health, /control/stop and `Sec-Fetch-Site: same-origin` may
+       * omit one). What this stops is the thing the child cannot: an Origin naming somebody ELSE being
+       * laundered into a valid same-origin one by proxyHeaders below.
+       */
+      authorityAccepted(req, allowMissingOrigin = true) {
+        return isTrustedLocalHttpRequest(req.headers, this.options.port, allowMissingOrigin, this.policy);
+      }
+      /**
+       * Is this an Origin-less request that only LOOKS suspicious because the browser could not send
+       * Fetch Metadata to a non-loopback authority? See authoritySendsFetchMetadata.
+       *
+       * Frizz's missing-Origin rules ask for `Sec-Fetch-Site: same-origin`, which Chrome never sends over
+       * plain HTTP to a LAN address — so without this, `--host` serves the shell and then 403s every RPC
+       * the app makes. Narrow on purpose: the Host must already be an authority this proxy accepts, there
+       * must be no Origin at all (a present one still has to match, and is rejected above if it does not),
+       * and loopback traffic is never touched, so the default posture keeps the real Sec-Fetch signal.
+       *
+       * The condition is `authoritySendsFetchMetadata`, not "is the bind address exposed", because those
+       * two came apart with `--public-origin`: a tunnelled board stays on loopback yet is reached at a
+       * name. An https proxy origin is potentially trustworthy, so the real signal survives and this
+       * never fires for it; a plain-http one is in the same boat as a LAN address and needs the vouch.
+       *
+       * What this gives up, stated plainly: on an exposed board a cross-site GET carries no Origin and no
+       * Fetch Metadata, so it is indistinguishable from the app's own read and is allowed. The response is
+       * still opaque to the caller (no CORS), Frizz's GET procedures are reads, and every mutation is a POST
+       * — which a browser always stamps with an Origin, and which is therefore still refused.
+       */
+      vouchesSameOrigin(req) {
+        if (req.headers.origin !== void 0 || req.headers["sec-fetch-site"] !== void 0) return false;
+        const host = parseLocalHost(req.headers.host, this.options.port, this.policy);
+        return !!host && !authoritySendsFetchMetadata(host);
+      }
+      async close() {
+        const server = this.server;
+        this.server = null;
+        if (!server) return;
+        await new Promise((resolveClose, rejectClose) => {
+          server.close((error) => error ? rejectClose(error) : resolveClose());
+          server.closeAllConnections();
+          for (const socket of this.upgradedSockets) socket.destroy();
+          this.upgradedSockets.clear();
+        });
+      }
+      status() {
+        const delegated = this.options.status?.();
+        const updateVersion = this.options.updateVersion?.();
+        const version = typeof this.options.version === "function" ? this.options.version() : this.options.version;
+        const owner = { state: this.state, ...this.message ? { message: this.message } : {} };
+        const reported = this.transition === "update" && delegated ? { ...delegated, ...delegated.state === "ready" ? { preparing: true } : {} } : this.restartInFlight !== null || this.state === "failed" ? owner : delegated ?? owner;
+        return {
+          ...delegated ?? {},
+          ...reported,
+          // Never infer this from the generic protocol: legacy/static supervisors can recover a child
+          // but cannot build and promote the canonical Frizz artifact.
+          updateRestart: typeof this.options.updateRestart === "function",
+          // Sent ONLY when the launcher can actually answer it, so an older client — and frizz-dev, which
+          // has no notion of "already current" — keeps today's behaviour on its absence.
+          ...this.options.updateAvailable ? { updateAvailable: this.options.updateAvailable() === true } : {},
+          // The active SERVER version changes on a child-only update. Its absence keeps frizz-dev and
+          // old monolithic supervisors' status payload and versionless UI exactly as they were.
+          ...version ? { version } : {},
+          ...this.options.launcherVersion ? { launcherVersion: this.options.launcherVersion } : {},
+          ...updateVersion ? { updateVersion } : {},
+          // Sent only when TRUE, so a published Frizz's payload is byte-identical to what it sends today
+          // and an older client is unaffected. Absent therefore means "not a development build".
+          ...this.options.dev ? { dev: true } : {}
+        };
+      }
+      async runAction(action, transition) {
+        if (this.restartInFlight) return this.restartInFlight;
+        this.transition = transition;
+        this.state = "restarting";
+        this.message = void 0;
+        const work = (async () => {
+          await new Promise((resume) => setImmediate(resume));
+          return action();
+        })().then(
+          (result) => {
+            this.state = result.state;
+            this.message = result.message;
+            return result;
+          },
+          (error) => {
+            const result = { state: "failed", message: error instanceof Error ? error.message : String(error) };
+            this.state = result.state;
+            this.message = result.message;
+            return result;
+          }
+        ).finally(() => {
+          this.restartInFlight = null;
+          this.transition = null;
+        });
+        this.restartInFlight = work;
+        return work;
+      }
+      async handleControl(req, res) {
+        const pathname = new URL(req.url ?? "/", "http://frizz.invalid").pathname;
+        if (pathname !== SUPERVISOR_SIGN_OUT_PATH && this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
+          res.writeHead(401, { "cache-control": "no-store" });
+          res.end();
+          return;
+        }
+        const sameOrigin = req.headers["sec-fetch-site"] === "same-origin" || this.vouchesSameOrigin(req);
+        const allowMissingOrigin = pathname === SUPERVISOR_STATUS_PATH && req.method === "GET" && sameOrigin;
+        if (!this.authorityAccepted(req, allowMissingOrigin)) {
+          res.writeHead(403);
+          res.end("Forbidden");
+          return;
+        }
+        if (pathname === SUPERVISOR_ACCESS_CODE_PATH) {
+          if (this.arrivedPublicly(req)) {
+            res.writeHead(403);
+            res.end("Forbidden");
+            return;
+          }
+          if (req.method !== "POST") {
+            res.writeHead(405, { allow: "POST" });
+            res.end();
+            return;
+          }
+          const link = this.issueAccessCode();
+          const url = link && this.accessUrl(link.code);
+          if (!link || !url) {
+            responseJson(res, 409, { error: "this board has no public origin, so there is nothing to link to" });
+            return;
+          }
+          responseJson(res, 200, { url, expiresAt: link.expiresAt });
+          return;
+        }
+        if (pathname === SUPERVISOR_SESSIONS_PATH) {
+          if (this.arrivedPublicly(req)) {
+            res.writeHead(403);
+            res.end("Forbidden");
+            return;
+          }
+          if (!this.publicOrigin) {
+            responseJson(res, 409, { error: "this board has no public origin, so nothing is signed in" });
+            return;
+          }
+          if (req.method === "GET") {
+            responseJson(res, 200, { sessions: this.access.sessions.list() });
+            return;
+          }
+          if (req.method !== "POST") {
+            res.writeHead(405, { allow: "GET, POST" });
+            res.end();
+            return;
+          }
+          const body = await readJsonBody(req);
+          const id = typeof body?.id === "string" ? body.id : void 0;
+          if (body?.all === true) {
+            responseJson(res, 200, { signedOut: this.access.signOutAll() });
+            return;
+          }
+          if (!id) {
+            responseJson(res, 400, { error: "name a device id, or pass all: true" });
+            return;
+          }
+          if (!this.access.sessions.revoke(id)) {
+            responseJson(res, 404, { error: `no signed-in device has the id ${id}` });
+            return;
+          }
+          responseJson(res, 200, { signedOut: 1 });
+          return;
+        }
+        if (pathname === SUPERVISOR_SIGN_OUT_PATH) {
+          if (req.method !== "POST") {
+            res.writeHead(405, { allow: "POST" });
+            res.end();
+            return;
+          }
+          this.signOutThisDevice(req, res);
+          return;
+        }
+        if (pathname === SUPERVISOR_STATUS_PATH && req.method === "GET") {
+          responseJson(res, 200, {
+            protocol: SUPERVISOR_CONTROL_PROTOCOL,
+            ...this.status(),
+            // Sent ONLY when true, so a loopback tab's payload is byte-identical to what it was. The web
+            // app cannot tell on its own: the session cookie is HttpOnly, and the page is the same bundle
+            // whichever way it was reached. It is a fact about THIS request, never about the board.
+            ...this.carriesRemoteSession(req) ? { remoteSession: true } : {}
+          });
+          return;
+        }
+        if (pathname !== SUPERVISOR_RESTART_PATH && pathname !== SUPERVISOR_UPDATE_RESTART_PATH || req.method !== "POST") {
+          res.writeHead(405, { allow: pathname === SUPERVISOR_STATUS_PATH ? "GET" : "POST" });
+          res.end();
+          return;
+        }
+        if (pathname === SUPERVISOR_UPDATE_RESTART_PATH && !this.options.updateRestart) {
+          responseJson(res, 409, { protocol: SUPERVISOR_CONTROL_PROTOCOL, state: "failed", message: "Update & Restart is available only for a stable immutable Frizz artifact" });
+          return;
+        }
+        if (pathname === SUPERVISOR_UPDATE_RESTART_PATH) {
+          void this.runAction(this.options.updateRestart, "update");
+          responseJson(res, 202, { protocol: SUPERVISOR_CONTROL_PROTOCOL, state: "restarting" });
+          return;
+        }
+        const result = await this.runAction(this.options.restart, "restart");
+        responseJson(res, result.state === "ready" ? 202 : 503, { protocol: SUPERVISOR_CONTROL_PROTOCOL, ...result });
+      }
+      handleLocalImage(req, res) {
+        const allowMissingOrigin = req.headers.origin === void 0 && (req.headers["sec-fetch-site"] === "same-origin" || this.vouchesSameOrigin(req));
+        if (!this.authorityAccepted(req, allowMissingOrigin)) {
+          res.writeHead(403, { "content-type": "text/plain; charset=UTF-8" });
+          res.end("Forbidden");
+          return;
+        }
+        const url = new URL(req.url ?? "/", "http://frizz.invalid");
+        const result = resolveLocalImage(url.searchParams.get("path") ?? void 0, req.headers.range);
+        const origin = typeof req.headers.origin === "string" ? allowedLocalCorsOrigin(req.headers.origin, this.options.port, this.policy) : void 0;
+        const sharedHeaders = {
+          ...origin ? { "access-control-allow-origin": origin } : {},
+          "access-control-expose-headers": "x-frizz-boot",
+          vary: "Origin"
+        };
+        if (result.status === 416) {
+          res.writeHead(416, { ...sharedHeaders, "content-range": `bytes */${result.size}`, "accept-ranges": "bytes" });
+          res.end();
+          return;
+        }
+        if (result.status === 400 || result.status === 404) {
+          res.writeHead(result.status, { ...sharedHeaders, "content-type": "text/plain; charset=UTF-8" });
+          res.end(String(result.status));
+          return;
+        }
+        res.writeHead(result.status, { ...sharedHeaders, ...localImageHeaders(result) });
+        const stream = req.method === "HEAD" ? null : localImageStream(result);
+        if (!stream) {
+          res.end();
+          return;
+        }
+        pipeline(stream, res, () => void 0);
+      }
+      /**
+       * Is this request arriving as the declared public origin rather than over loopback?
+       *
+       * The token gate keys on this and not on "is the port exposed", because the two are independent:
+       * a tunnelled board stays bound to 127.0.0.1 while being reachable from the internet by name.
+       */
+      arrivedPublicly(req) {
+        const declared = this.publicOrigin;
+        if (!declared) return false;
+        const host = parseLocalHost(req.headers.host, this.options.port, this.policy);
+        return !!host && !LOOPBACK_HOSTNAMES.has(host.hostname);
+      }
+      /**
+       * Bearer check for the public origin. Two ways in: the cookie the exchange below sets, or the
+       * one-time `?frizz_token=` in the URL the operator was handed at launch.
+       *
+       * Compared with `timingSafeEqual` on equal-length buffers — a plain `===` on a secret leaks its
+       * prefix to a patient attacker, and this secret is the only thing between the internet and a shell.
+       */
+      /**
+       * Is this request carrying a session this process minted?
+       *
+       * Sessions only. A raw `?frizz_code=` is NOT accepted here — it is redeemed once by exchangeCode()
+       * below and traded for a session, so a code that has already been spent cannot keep working just by
+       * staying in somebody's URL bar.
+       */
+      sessionAccepted(req) {
+        if (!this.publicOrigin) return true;
+        return this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
+      }
+      /** Did this request arrive through the public origin carrying a live session? Loopback never does. */
+      carriesRemoteSession(req) {
+        return this.arrivedPublicly(req) && this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
+      }
+      /**
+       * End the session this request carries, and nothing else — see SUPERVISOR_SIGN_OUT_PATH in
+       * handleControl for why that makes it safe to reach from the tunnel.
+       *
+       * A loopback request is a no-op even if it somehow carries a cookie: the operator's own tab has no
+       * remote session to end, and loopback is the place `--sign-out` already covers.
+       */
+      signOutThisDevice(req, res) {
+        const reply = (status, body, clearCookie) => {
+          res.writeHead(status, {
+            "content-type": "application/json; charset=utf-8",
+            "cache-control": "no-store",
+            // Same attributes the exchange set, so the browser matches and drops that exact cookie.
+            ...clearCookie ? { "set-cookie": `${SESSION_COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0` } : {}
+          });
+          res.end(JSON.stringify(body));
+        };
+        if (!this.arrivedPublicly(req)) {
+          reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, false);
+          return;
+        }
+        const outcome = this.access.signOutSession(readCookie(req.headers.cookie, SESSION_COOKIE));
+        if (outcome.result === "revoked") {
+          reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "signed-out", id: outcome.id }, true);
+          return;
+        }
+        if (outcome.result === "legacy") {
+          reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "cookie-cleared" }, true);
+          return;
+        }
+        reply(401, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, true);
+      }
+      /**
+       * Trade `?frizz_code=…` for a cookie, then bounce to the same URL
+       * without the secret, so it never lands in history, a Referer header, or a screenshot.
+       */
+      exchangeCode(req, res) {
+        const url = new URL(req.url ?? "/", "http://frizz.invalid");
+        const code = url.searchParams.get(ACCESS_CODE_PARAM);
+        if (code === null) return false;
+        const redeemed = this.access.redeem(code, describeDevice(req.headers["user-agent"]));
+        if (!redeemed?.ok) {
+          res.writeHead(401, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+          res.end(unauthorizedPage(redeemed?.reason));
+          return true;
+        }
+        const cookie = `${SESSION_COOKIE}=${redeemed.session}`;
+        const maxAge = Math.max(0, Math.floor((redeemed.expiresAt - Date.now()) / 1e3));
+        url.searchParams.delete(ACCESS_CODE_PARAM);
+        const target2 = `${url.pathname}${url.search}${url.hash}` || "/";
+        res.writeHead(302, {
+          location: target2,
+          "set-cookie": `${cookie}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${maxAge}`,
+          "cache-control": "no-store"
+        });
+        res.end();
+        return true;
+      }
+      handle(req, res) {
+        if (isControlRequest(req)) {
+          void this.handleControl(req, res);
+          return;
+        }
+        if (this.arrivedPublicly(req) && this.exchangeCode(req, res)) return;
+        if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
+          res.writeHead(401, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+          res.end(unauthorizedPage());
+          return;
+        }
+        if (!this.authorityAccepted(req)) {
+          const name = unlistedHostName(req.headers.host, this.options.port, this.policy);
+          if (name) {
+            res.writeHead(403, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+            res.end(req.method === "HEAD" ? void 0 : unlistedHostPage(name));
+            return;
+          }
+          res.writeHead(403, { "content-type": "text/plain; charset=UTF-8" });
+          res.end("Forbidden");
+          return;
+        }
+        if (isLocalImageRequest(req)) {
+          this.handleLocalImage(req, res);
+          return;
+        }
+        const childPort = this.options.childPort();
+        if (!childPort) {
+          res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "retry-after": "2" });
+          res.end(recoveryPage(req.url ?? "/"));
+          return;
+        }
+        const upstream = requestHttp({
+          host: "127.0.0.1",
+          port: childPort,
+          method: req.method,
+          path: req.url,
+          headers: proxyHeaders(req, childPort, this.vouchesSameOrigin(req))
+        }, (upstreamResponse) => {
+          res.writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.headers);
+          upstreamResponse.pipe(res);
+        });
+        upstream.once("error", () => {
+          if (res.headersSent) return res.destroy();
+          res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+          res.end(recoveryPage(req.url ?? "/", "unreachable"));
+        });
+        req.pipe(upstream);
+      }
+      handleUpgrade(req, socket, head) {
+        if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
+          rejectWebSocketUpgrade(socket, 401, "Unauthorized");
+          return;
+        }
+        if (!this.authorityAccepted(req, false)) {
+          socket.destroy();
+          return;
+        }
+        const childPort = this.options.childPort();
+        if (!childPort) {
+          socket.destroy();
+          return;
+        }
+        const upstream = connect(childPort, "127.0.0.1");
+        for (const half of [socket, upstream]) {
+          this.upgradedSockets.add(half);
+          half.once("close", () => this.upgradedSockets.delete(half));
+        }
+        upstream.once("connect", () => {
+          const headers = proxyHeaders(req, childPort);
+          headers.connection = req.headers.connection ?? "Upgrade";
+          const lines = [`${req.method ?? "GET"} ${req.url ?? "/"} HTTP/${req.httpVersion}`];
+          for (const [name, value] of Object.entries(headers)) {
+            if (value === void 0) continue;
+            for (const entry of Array.isArray(value) ? value : [value]) lines.push(`${name}: ${entry}`);
+          }
+          upstream.write(`${lines.join("\r\n")}\r
+\r
+`);
+          if (head.length > 0) upstream.write(head);
+          socket.pipe(upstream).pipe(socket);
+        });
+        upstream.once("error", () => socket.destroy());
+        socket.once("error", () => upstream.destroy());
+      }
+    };
+  }
+});
+
+// packages/server/src/frizz-paths.ts
+import { existsSync as existsSync2 } from "node:fs";
+import { homedir as homedir2, tmpdir } from "node:os";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative, resolve, sep as sep2 } from "node:path";
+function legacyFrizzRoot(home = homedir2()) {
+  return join3(home, LEGACY_DIR_NAME);
+}
+function xdg(env, name) {
   const value = env[name];
   return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
 }
@@ -14749,7 +15997,7 @@ function frizzPaths(options2 = {}) {
   const env = options2.env ?? process.env;
   const platform = options2.platform ?? process.platform;
   const home = options2.home ?? homedir2();
-  const exists = options2.exists ?? existsSync;
+  const exists = options2.exists ?? existsSync2;
   const legacyRoot = legacyFrizzRoot(home);
   if (exists(legacyRoot)) {
     return { data: legacyRoot, state: legacyRoot, cache: legacyRoot, legacy: true };
@@ -18666,7 +19914,7 @@ var init_logging = __esm({
 // packages/server/src/process-generation.ts
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 import { join as join7 } from "node:path";
 function errorCode(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
@@ -18682,9 +19930,9 @@ function processAlive(pid) {
 }
 function linuxGeneration(pid) {
   try {
-    const bootId = readFileSync5("/proc/sys/kernel/random/boot_id", "utf8").trim().toLowerCase();
+    const bootId = readFileSync4("/proc/sys/kernel/random/boot_id", "utf8").trim().toLowerCase();
     if (!/^[0-9a-f-]{36}$/u.test(bootId)) return null;
-    const stat = readFileSync5(`/proc/${pid}/stat`, "utf8").trim();
+    const stat = readFileSync4(`/proc/${pid}/stat`, "utf8").trim();
     const suffixAt = stat.lastIndexOf(") ");
     if (suffixAt < 0) return null;
     const fields = stat.slice(suffixAt + 2).trim().split(/\s+/u);
@@ -18805,7 +20053,7 @@ import {
   fsyncSync,
   mkdirSync as mkdirSync5,
   openSync as openSync2,
-  readFileSync as readFileSync6,
+  readFileSync as readFileSync5,
   realpathSync as realpathSync2,
   renameSync,
   rmSync as rmSync3,
@@ -18867,7 +20115,7 @@ function lockOwnerPath(lockPath) {
 }
 function readOwner(lockPath) {
   try {
-    const value = JSON.parse(readFileSync6(lockOwnerPath(lockPath), "utf8"));
+    const value = JSON.parse(readFileSync5(lockOwnerPath(lockPath), "utf8"));
     if (value.version !== 1 || !Number.isInteger(value.pid) || value.pid <= 0 || value.processStart !== void 0 && (typeof value.processStart !== "string" || value.processStart.length > 256) || typeof value.token !== "string" || !PROJECT_ID_RE.test(value.token) || typeof value.at !== "string") return void 0;
     return value;
   } catch {
@@ -18876,7 +20124,7 @@ function readOwner(lockPath) {
 }
 function legacyOwnerPid(lockPath) {
   try {
-    const value = JSON.parse(readFileSync6(lockOwnerPath(lockPath), "utf8"));
+    const value = JSON.parse(readFileSync5(lockOwnerPath(lockPath), "utf8"));
     return Number.isInteger(value.pid) && value.pid > 0 ? value.pid : void 0;
   } catch {
     return void 0;
@@ -19222,7 +20470,7 @@ import {
   fsyncSync as fsyncSync2,
   mkdirSync as mkdirSync6,
   openSync as openSync3,
-  readFileSync as readFileSync7,
+  readFileSync as readFileSync6,
   renameSync as renameSync2,
   rmSync as rmSync4,
   statSync as statSync4,
@@ -19302,7 +20550,7 @@ function parseGeneration(value) {
 }
 function parseGuard(path) {
   try {
-    const value = JSON.parse(readFileSync7(path, "utf8"));
+    const value = JSON.parse(readFileSync6(path, "utf8"));
     const generation = parseGeneration(value);
     if (value.version !== 1 || !generation || typeof value.token !== "string" || !UUID_RE.test(value.token) || !validText(value.at, 128)) return null;
     return { version: 1, token: value.token, at: value.at, ...generation };
@@ -19382,7 +20630,7 @@ function parseDelegates(value) {
 }
 function parseOwner(path) {
   try {
-    const value = JSON.parse(readFileSync7(path, "utf8"));
+    const value = JSON.parse(readFileSync6(path, "utf8"));
     const generation = parseGeneration(value);
     if (value.version !== 1 && value.version !== OWNER_VERSION || !generation || typeof value.token !== "string" || !UUID_RE.test(value.token) || typeof value.projectId !== "string" || !UUID_RE.test(value.projectId) || !validText(value.projectDir) || !isAbsolute3(value.projectDir) || !validRole(value.role) || !validText(value.acquiredAt, 128) || !validText(value.updatedAt, 128)) return null;
     const delegates = value.version === 1 ? [] : parseDelegates(value.delegates);
@@ -19424,7 +20672,7 @@ function removeStatusesForToken(stateDir, token) {
   for (const name of ["dev-supervisor.lock", "server.lock"]) {
     const path = join9(stateDir, name);
     try {
-      const value = JSON.parse(readFileSync7(path, "utf8"));
+      const value = JSON.parse(readFileSync6(path, "utf8"));
       if (value.ownerToken === token) quarantine(path, "stale");
     } catch {
     }
@@ -19638,7 +20886,7 @@ function writeProjectStatus(path, value) {
 }
 function removeProjectStatus(path, expected2) {
   try {
-    const value = JSON.parse(readFileSync7(path, "utf8"));
+    const value = JSON.parse(readFileSync6(path, "utf8"));
     if (value.pid !== expected2.pid || value.processStart !== expected2.processStart || value.publisherToken !== expected2.publisherToken || value.ownerToken !== expected2.ownerToken) return false;
     return quarantine(path, "release");
   } catch {
@@ -19672,14 +20920,14 @@ var init_project_launch = __esm({
 });
 
 // packages/server/src/boot-progress.ts
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync8, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync7, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
 import { basename as basename3, dirname as dirname7, join as join10 } from "node:path";
 function bootProgressPath(stateDir) {
   return join10(stateDir, BOOT_PROGRESS_NAME);
 }
 function readBootProgress(stateDir) {
   try {
-    const value = JSON.parse(readFileSync8(bootProgressPath(stateDir), "utf8"));
+    const value = JSON.parse(readFileSync7(bootProgressPath(stateDir), "utf8"));
     if (!Number.isInteger(value.pid) || !Number.isInteger(value.step) || typeof value.phase !== "string" || typeof value.at !== "string") return null;
     return value;
   } catch {
@@ -19698,7 +20946,7 @@ var init_boot_progress = __esm({
 
 // packages/server/src/project-root.ts
 import { createHash as createHash3, randomUUID as randomUUID4 } from "node:crypto";
-import { closeSync as closeSync3, existsSync as existsSync3, fsyncSync as fsyncSync3, mkdirSync as mkdirSync8, openSync as openSync4, readFileSync as readFileSync9, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import { closeSync as closeSync3, existsSync as existsSync4, fsyncSync as fsyncSync3, mkdirSync as mkdirSync8, openSync as openSync4, readFileSync as readFileSync8, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname8, join as join11, parse, resolve as resolve3 } from "node:path";
 function projectIdPath(root) {
@@ -19707,7 +20955,7 @@ function projectIdPath(root) {
 function readProjectIdFile(root) {
   let raw;
   try {
-    raw = readFileSync9(projectIdPath(root), "utf8");
+    raw = readFileSync8(projectIdPath(root), "utf8");
   } catch {
     return void 0;
   }
@@ -19721,7 +20969,7 @@ function writeProjectIdFile(root, id) {
   const dir = join11(root, FRIZZ_DIR);
   mkdirSync8(dir, { recursive: true });
   const ignore = join11(dir, SELF_IGNORE);
-  if (!existsSync3(ignore)) {
+  if (!existsSync4(ignore)) {
     try {
       writeFileSync8(ignore, "*\n", { flag: "wx" });
     } catch {
@@ -19776,7 +21024,7 @@ function isNotAGitWorktree(error) {
   return /not a git repository/iu.test(stderr) || /must be run in a work ?tree/iu.test(stderr);
 }
 function hasAny(dir, names) {
-  return names.some((name) => existsSync3(join11(dir, name)));
+  return names.some((name) => existsSync4(join11(dir, name)));
 }
 function isHomeDirectory(dir, home = homedir8()) {
   const canonical = (value) => {
@@ -19818,7 +21066,7 @@ function discoverProjectRoot(cwd = process.cwd(), home = homedir8()) {
   const filesystemRoot = parse(dir).root;
   for (let at = dir; ; at = dirname8(at)) {
     if (at === stop || at === filesystemRoot) break;
-    if (existsSync3(projectIdPath(at))) return at;
+    if (existsSync4(projectIdPath(at))) return at;
     if (hasAny(at, REPO_MARKERS)) return at;
     if (hasAny(at, PROJECT_MARKERS)) return at;
     if (dirname8(at) === at) break;
@@ -19851,7 +21099,7 @@ var init_project_root = __esm({
 });
 
 // packages/server/src/project-registry.ts
-import { closeSync as closeSync4, existsSync as existsSync4, fsyncSync as fsyncSync4, mkdirSync as mkdirSync9, openSync as openSync5, readFileSync as readFileSync10, readdirSync as readdirSync2, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync9 } from "node:fs";
+import { closeSync as closeSync4, existsSync as existsSync5, fsyncSync as fsyncSync4, mkdirSync as mkdirSync9, openSync as openSync5, readFileSync as readFileSync9, readdirSync as readdirSync2, realpathSync as realpathSync4, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
 import { basename as basename4, dirname as dirname9, join as join12 } from "node:path";
 function registryPath(home = homedir9()) {
@@ -19860,7 +21108,7 @@ function registryPath(home = homedir9()) {
 function readRegistry(home = homedir9()) {
   let raw;
   try {
-    raw = readFileSync10(registryPath(home), "utf8");
+    raw = readFileSync9(registryPath(home), "utf8");
   } catch {
     return { ...EMPTY, projects: [] };
   }
@@ -19944,7 +21192,7 @@ function registerProject(input, home = homedir9()) {
       writeRegistry(registry, home);
       return { entry: byId, action: "reopened" };
     }
-    if (existsSync4(join12(byId.path, ".frizz", ".id"))) return { action: "duplicate" };
+    if (existsSync5(join12(byId.path, ".frizz", ".id"))) return { action: "duplicate" };
     byId.path = input.dir;
     byId.lastOpenedAt = at;
     writeRegistry(registry, home);
@@ -19970,7 +21218,7 @@ function registerProject(input, home = homedir9()) {
 }
 function listProjects(home = homedir9()) {
   const byRecency = (a, b) => a.lastOpenedAt < b.lastOpenedAt ? 1 : a.lastOpenedAt > b.lastOpenedAt ? -1 : 0;
-  return readRegistry(home).projects.map((p) => ({ ...p, stale: !existsSync4(p.path) })).sort((a, b) => {
+  return readRegistry(home).projects.map((p) => ({ ...p, stale: !existsSync5(p.path) })).sort((a, b) => {
     if (a.order === void 0 && b.order === void 0) return byRecency(a, b);
     if (a.order === void 0) return 1;
     if (b.order === void 0) return -1;
@@ -20032,7 +21280,7 @@ var init_project_registry = __esm({
 
 // src/production.ts
 init_local_origin();
-import { readFileSync as readFileSync15 } from "node:fs";
+import { readFileSync as readFileSync14 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { join as join17 } from "node:path";
@@ -20487,268 +21735,29 @@ html:not([tabsintitlebar="true"]) #tabbrowser-tabs {
   ).unref();
 }
 
-// packages/server/src/access-codes.ts
-import { randomBytes, timingSafeEqual, createHmac } from "node:crypto";
-import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join as join2 } from "node:path";
-var CODE_BYTES = 16;
-var SESSION_BYTES = 32;
-var SESSION_ID_BYTES = 6;
-var DEFAULT_CODE_TTL_MS = 5 * 6e4;
-var DEFAULT_SESSION_TTL_MS = 365 * 24 * 60 * 6e4;
-function memorySessionDirectory(seed = []) {
-  const records = new Map(seed.map((r) => [r.id, r]));
-  return {
-    record: (r) => void records.set(r.id, r),
-    isRevoked: (id) => records.get(id)?.revokedAt !== void 0,
-    // Reverse FIRST, then sort. Array.sort is stable, so two devices that redeemed in the same
-    // millisecond — which two taps on one page reliably are — keep newest-inserted-first instead of
-    // falling back to insertion order and reading as oldest first.
-    list: () => [...records.values()].reverse().sort((a, b) => b.createdAt - a.createdAt),
-    revoke(id) {
-      const found = records.get(id);
-      if (!found || found.revokedAt !== void 0) return false;
-      found.revokedAt = Date.now();
-      return true;
-    },
-    revokeAll() {
-      let n = 0;
-      for (const r of records.values()) if (r.revokedAt === void 0) {
-        r.revokedAt = Date.now();
-        n++;
-      }
-      return n;
-    }
-  };
-}
-function describeDevice(userAgent) {
-  const ua = userAgent ?? "";
-  if (!ua.trim()) return "unknown device";
-  const os = /iPhone/i.test(ua) ? "iPhone" : /iPad/i.test(ua) ? "iPad" : /Android/i.test(ua) ? "Android" : /Mac OS X|Macintosh/i.test(ua) ? "macOS" : /Windows/i.test(ua) ? "Windows" : /Linux/i.test(ua) ? "Linux" : "unknown device";
-  const browser = /Edg\//i.test(ua) ? "Edge" : /OPR\/|Opera/i.test(ua) ? "Opera" : /Firefox\//i.test(ua) ? "Firefox" : /Chrome\//i.test(ua) ? "Chrome" : /Safari\//i.test(ua) ? "Safari" : "";
-  return browser ? `${browser} on ${os}` : os;
-}
-function defaultRandomToken(bytes) {
-  return randomBytes(bytes).toString("base64url");
-}
-function secretsMatch(a, b) {
-  const left = Buffer.from(a);
-  const right = Buffer.from(b);
-  return left.length === right.length && timingSafeEqual(left, right);
-}
-var AccessStore = class _AccessStore {
-  codes = /* @__PURE__ */ new Map();
-  options;
-  sessions;
-  /** Signing key for sessions. Persisted by the caller; a fresh one signs every device out. */
-  signingKey;
-  constructor(options2 = {}) {
-    this.signingKey = options2.signingKey ?? randomBytes(32);
-    this.sessions = options2.sessions ?? memorySessionDirectory();
-    this.options = {
-      codeTtlMs: options2.codeTtlMs ?? DEFAULT_CODE_TTL_MS,
-      sessionTtlMs: options2.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS,
-      now: options2.now ?? Date.now,
-      randomToken: options2.randomToken ?? defaultRandomToken,
-      onConsumed: options2.onConsumed
-    };
-  }
-  /** Mint a code to show as a QR or a link. Minting does not invalidate codes already outstanding. */
-  issue() {
-    this.sweep();
-    const now = this.options.now();
-    const code = {
-      code: this.options.randomToken(CODE_BYTES),
-      createdAt: now,
-      expiresAt: now + this.options.codeTtlMs
-    };
-    this.codes.set(code.code, code);
-    return { code: code.code, createdAt: code.createdAt, expiresAt: code.expiresAt };
-  }
-  /**
-   * Trade a code for a session, at most once, ever.
-   *
-   * The consumed marker is set BEFORE anything else can observe success, and JS runs this method to
-   * completion without interleaving, so two browsers racing the same code cannot both win. That
-   * atomicity is what makes "single-use" true rather than aspirational — it is the first thing the
-   * tests attack.
-   */
-  redeem(code, device) {
-    if (!code) return { ok: false, reason: "unknown" };
-    const stored = this.codes.get(code);
-    if (!stored || !secretsMatch(stored.code, code)) return { ok: false, reason: "unknown" };
-    const now = this.options.now();
-    if (stored.consumedAt !== void 0) return { ok: false, reason: "already-used" };
-    if (now >= stored.expiresAt) {
-      this.sweep();
-      return { ok: false, reason: "expired" };
-    }
-    stored.consumedAt = now;
-    this.sweep();
-    this.options.onConsumed?.(code);
-    const minted = this.mintSession(now);
-    this.sessions.record({ id: minted.id, label: device ?? "unknown device", createdAt: now });
-    return { ok: true, session: minted.session, expiresAt: now + this.options.sessionTtlMs, id: minted.id };
-  }
-  /**
-   * A session is `<expiry>.<id>.<nonce>.<hmac>` — signed with a key the caller persists so it survives
-   * a restart, and self-describing enough that a stale cookie is rejected without any lookup.
-   *
-   * The `id` is what makes ONE device signable-out. It is short because an operator types it into
-   * `frizz --sign-out <id>`, and it is inside the signed payload so it cannot be swapped for another
-   * device's. Rotating the key still revokes everything at once; this is the scalpel beside that axe.
-   *
-   * A session minted before ids existed has a two-part payload and still verifies — it simply has no id
-   * to revoke individually. Upgrading must not sign every device out.
-   */
-  mintSession(now) {
-    const expiresAt = now + this.options.sessionTtlMs;
-    const id = this.options.randomToken(SESSION_ID_BYTES);
-    const nonce = this.options.randomToken(SESSION_BYTES);
-    const payload = `${expiresAt}.${id}.${nonce}`;
-    return { session: `${payload}.${this.sign(payload)}`, id };
-  }
-  /** The id inside a session payload, or null for a legacy two-part one. */
-  static idOf(payload) {
-    const parts = payload.split(".");
-    return parts.length >= 3 ? parts[1] ?? null : null;
-  }
-  sign(payload) {
-    return createHmac("sha256", this.signingKey).update(payload).digest("base64url");
-  }
-  /** Is this cookie a session signed by this board's key, and still in date? */
-  verifySession(session) {
-    if (!session) return false;
-    const cut = session.lastIndexOf(".");
-    if (cut <= 0) return false;
-    const payload = session.slice(0, cut);
-    const signature = session.slice(cut + 1);
-    if (!secretsMatch(signature, this.sign(payload))) return false;
-    const expiresAt = Number(payload.slice(0, payload.indexOf(".")));
-    if (!Number.isFinite(expiresAt) || this.options.now() >= expiresAt) return false;
-    const id = _AccessStore.idOf(payload);
-    return !(id && this.sessions.isRevoked(id));
-  }
-  /**
-   * Sign out the device HOLDING this session — the "Sign out this device" row, not `--sign-out`.
-   *
-   * The id comes from the session itself, and only after its signature verifies, so the one thing this
-   * can ever revoke is the credential the caller just proved it holds. There is deliberately no
-   * parameter naming any other id: signing out SOMEONE ELSE stays loopback-only, because a stolen
-   * session must not be able to evict the owner and keep the board.
-   *
-   * - `revoked`: the id is on the denylist now, so a surviving copy of this cookie is refused too.
-   * - `legacy`: a session minted before ids existed verifies but has no id to revoke on its own. The
-   *   caller can still clear the cookie; rotating the key remains the way to kill a copy of it.
-   * - `no-session`: nothing valid was presented — absent, forged, expired, or already signed out.
-   */
-  signOutSession(session) {
-    if (!session || !this.verifySession(session)) return { result: "no-session" };
-    const id = _AccessStore.idOf(session.slice(0, session.lastIndexOf(".")));
-    if (!id) return { result: "legacy" };
-    if (!this.sessions.revoke(id)) {
-      this.sessions.record({ id, label: "unknown device", createdAt: this.options.now() });
-      this.sessions.revoke(id);
-    }
-    return this.sessions.isRevoked(id) ? { result: "revoked", id } : { result: "no-session" };
-  }
-  /**
-   * Drop codes past their expiry so a long-lived board does not accumulate them forever.
-   *
-   * A CONSUMED code is deliberately kept until that same expiry rather than deleted on use. Deleting it
-   * immediately would make a replay indistinguishable from a typo — both "unknown" — and the difference
-   * matters: "already-used" is the message that tells someone their link was used by somebody else.
-   * It costs one small entry for at most the code TTL.
-   */
-  sweep() {
-    const now = this.options.now();
-    for (const [key, stored] of this.codes) {
-      if (now >= stored.expiresAt) this.codes.delete(key);
-    }
-  }
-  /** Outstanding codes that could still be redeemed — neither consumed nor expired. */
-  outstanding() {
-    this.sweep();
-    return [...this.codes.values()].filter((stored) => stored.consumedAt === void 0).map(({ code, createdAt, expiresAt }) => ({ code, createdAt, expiresAt }));
-  }
-};
-function fileSessionDirectory(stateDir, now = Date.now) {
-  const path = join2(stateDir, "sessions.json");
-  let records = [];
-  try {
-    const parsed = JSON.parse(readFileSync(path, "utf8"));
-    if (Array.isArray(parsed)) {
-      records = parsed.filter(
-        (r) => !!r && typeof r.id === "string" && typeof r.createdAt === "number"
-      );
-    }
-  } catch {
-  }
-  const inner = memorySessionDirectory(records);
-  const flush = () => {
-    try {
-      mkdirSync(dirname(path), { recursive: true });
-      writeFileSync(path, JSON.stringify(inner.list()), { mode: 384 });
-    } catch (error) {
-      if (process.env.FRIZZ_DEBUG_SESSIONS) console.error("[sessions] flush failed:", error);
-    }
-  };
-  return {
-    record(r) {
-      inner.record(r);
-      flush();
-    },
-    isRevoked: (id) => inner.isRevoked(id),
-    list: () => inner.list(),
-    revoke(id) {
-      const ok = inner.revoke(id);
-      if (ok) flush();
-      return ok;
-    },
-    revokeAll() {
-      const n = inner.revokeAll();
-      if (n > 0) flush();
-      return n;
-    }
-  };
-}
-function loadOrCreateSessionKey(stateDir) {
-  const path = join2(stateDir, "session-key");
-  try {
-    const existing = readFileSync(path);
-    if (existing.byteLength >= 32) return existing;
-  } catch {
-  }
-  const key = randomBytes(32);
-  mkdirSync(dirname(path), { recursive: true });
-  writeFileSync(path, key, { mode: 384 });
-  try {
-    chmodSync(path, 384);
-  } catch {
-  }
-  return key;
-}
-
-// node_modules/.pnpm/qrcode-generator@2.0.4/node_modules/qrcode-generator/dist/qrcode.mjs
-var qrcode = function(typeNumber, errorCorrectionLevel) {
-  const PAD0 = 236;
-  const PAD1 = 17;
-  let _typeNumber = typeNumber;
-  const _errorCorrectionLevel = QRErrorCorrectionLevel[errorCorrectionLevel];
-  let _modules = null;
-  let _moduleCount = 0;
-  let _dataCache = null;
-  const _dataList = [];
-  const _this = {};
-  const makeImpl = function(test, maskPattern) {
-    _moduleCount = _typeNumber * 4 + 17;
-    _modules = (function(moduleCount) {
-      const modules = new Array(moduleCount);
-      for (let row = 0; row < moduleCount; row += 1) {
-        modules[row] = new Array(moduleCount);
-        for (let col = 0; col < moduleCount; col += 1) {
-          modules[row][col] = null;
-        }
+// src/production.ts
+init_access_codes();
+
+// node_modules/.pnpm/qrcode-generator@2.0.4/node_modules/qrcode-generator/dist/qrcode.mjs
+var qrcode = function(typeNumber, errorCorrectionLevel) {
+  const PAD0 = 236;
+  const PAD1 = 17;
+  let _typeNumber = typeNumber;
+  const _errorCorrectionLevel = QRErrorCorrectionLevel[errorCorrectionLevel];
+  let _modules = null;
+  let _moduleCount = 0;
+  let _dataCache = null;
+  const _dataList = [];
+  const _this = {};
+  const makeImpl = function(test, maskPattern) {
+    _moduleCount = _typeNumber * 4 + 17;
+    _modules = (function(moduleCount) {
+      const modules = new Array(moduleCount);
+      for (let row = 0; row < moduleCount; row += 1) {
+        modules[row] = new Array(moduleCount);
+        for (let col = 0; col < moduleCount; col += 1) {
+          modules[row][col] = null;
+        }
       }
       return modules;
     })(_moduleCount);
@@ -22305,982 +23314,168 @@ var gifImage = function(width, height) {
         s = s + c;
       } else {
         bitOut.write(table.indexOf(s), bitLength);
-        if (table.size() < 4095) {
-          if (table.size() == 1 << bitLength) {
-            bitLength += 1;
-          }
-          table.add(s + c);
-        }
-        s = c;
-      }
-    }
-    bitOut.write(table.indexOf(s), bitLength);
-    bitOut.write(endCode, bitLength);
-    bitOut.flush();
-    return byteOut.toByteArray();
-  };
-  const lzwTable = function() {
-    const _map = {};
-    let _size = 0;
-    const _this2 = {};
-    _this2.add = function(key) {
-      if (_this2.contains(key)) {
-        throw "dup key:" + key;
-      }
-      _map[key] = _size;
-      _size += 1;
-    };
-    _this2.size = function() {
-      return _size;
-    };
-    _this2.indexOf = function(key) {
-      return _map[key];
-    };
-    _this2.contains = function(key) {
-      return typeof _map[key] != "undefined";
-    };
-    return _this2;
-  };
-  return _this;
-};
-var createDataURL = function(width, height, getPixel) {
-  const gif = gifImage(width, height);
-  for (let y = 0; y < height; y += 1) {
-    for (let x = 0; x < width; x += 1) {
-      gif.setPixel(x, y, getPixel(x, y));
-    }
-  }
-  const b = byteArrayOutputStream();
-  gif.write(b);
-  const base64 = base64EncodeOutputStream();
-  const bytes = b.toByteArray();
-  for (let i = 0; i < bytes.length; i += 1) {
-    base64.writeByte(bytes[i]);
-  }
-  base64.flush();
-  return "data:image/gif;base64," + base64;
-};
-var qrcode_default = qrcode;
-var stringToBytes = qrcode.stringToBytes;
-
-// packages/server/src/qr.ts
-var DARK = 232;
-var LIGHT = 231;
-var fg = (dark) => `\x1B[38;5;${dark ? DARK : LIGHT}m`;
-var bg = (dark) => `\x1B[48;5;${dark ? DARK : LIGHT}m`;
-var RESET = "\x1B[0m";
-var UPPER_HALF = "\u2580";
-var LOWER_HALF = "\u2584";
-var QUIET_ZONE = 4;
-var BLOCK_DRAWING_PROGRAMS = /* @__PURE__ */ new Set(["iTerm.app", "WezTerm", "ghostty", "WarpTerminal", "vscode"]);
-var BLOCK_DRAWING_TERMS = /* @__PURE__ */ new Set(["xterm-kitty", "xterm-ghostty", "alacritty", "wezterm"]);
-function drawsBlockElements(env = process.env) {
-  const term = env.TERM ?? "";
-  if (env.TMUX || env.STY || env.TERM_PROGRAM === "tmux" || term.startsWith("screen") || term.startsWith("tmux")) return false;
-  if (BLOCK_DRAWING_PROGRAMS.has(env.TERM_PROGRAM ?? "")) return true;
-  if (BLOCK_DRAWING_TERMS.has(term)) return true;
-  if (env.LC_TERMINAL === "iTerm2") return true;
-  return Boolean(
-    env.KITTY_WINDOW_ID || env.ALACRITTY_WINDOW_ID || env.WEZTERM_PANE || env.GHOSTTY_RESOURCES_DIR || env.WT_SESSION || env.VTE_VERSION
-  );
-}
-function encode(value, errorCorrection) {
-  const code = qrcode_default(0, errorCorrection);
-  code.addData(value);
-  code.make();
-  const modules = code.getModuleCount();
-  const size = modules + QUIET_ZONE * 2;
-  return {
-    size,
-    at: (x, y) => {
-      const mx = x - QUIET_ZONE;
-      const my = y - QUIET_ZONE;
-      if (mx < 0 || my < 0 || mx >= modules || my >= modules) return false;
-      return code.isDark(my, mx);
-    }
-  };
-}
-function sizeOf(size, style) {
-  return style === "paint" ? { columns: size * 2, rows: size } : { columns: size, rows: Math.ceil(size / 2) };
-}
-function qrSize(value, style = "half", errorCorrection = "M") {
-  return sizeOf(encode(value, errorCorrection).size, style);
-}
-function qrStyleFor(value, options2 = {}) {
-  const { area } = options2;
-  if (!area || drawsBlockElements(options2.env)) return "half";
-  const paint = qrSize(value, "paint", options2.errorCorrection);
-  return paint.columns <= area.columns && paint.rows <= area.rows ? "paint" : "half";
-}
-function qrAreaOf(stream, frame) {
-  if (!stream.columns || !stream.rows) return void 0;
-  return { columns: stream.columns - frame.indent, rows: stream.rows - frame.rows };
-}
-function halfLines(size, at, plain) {
-  const lines = [];
-  for (let y = 0; y < size; y += 2) {
-    let line = "";
-    for (let x = 0; x < size; x++) {
-      const top = at(x, y);
-      const bottom = y + 1 < size ? at(x, y + 1) : false;
-      if (plain) {
-        line += top && bottom ? "#" : top ? "^" : bottom ? "v" : " ";
-        continue;
-      }
-      if (top === bottom) {
-        line += `${bg(top)} `;
-        continue;
-      }
-      const above = y > 0 ? at(x, y - 1) : false;
-      const below = y + 2 < size ? at(x, y + 2) : false;
-      line += below === bottom && above !== top ? `${fg(top)}${bg(bottom)}${UPPER_HALF}` : `${fg(bottom)}${bg(top)}${LOWER_HALF}`;
-    }
-    lines.push(plain ? line : `${line}${RESET}`);
-  }
-  return lines;
-}
-function paintLines(size, at, plain) {
-  const lines = [];
-  for (let y = 0; y < size; y++) {
-    let line = "";
-    let last;
-    for (let x = 0; x < size; x++) {
-      const dark = at(x, y);
-      if (plain) line += dark ? "##" : "  ";
-      else {
-        if (dark !== last) line += bg(dark);
-        line += "  ";
-      }
-      last = dark;
-    }
-    lines.push(plain ? line : `${line}${RESET}`);
-  }
-  return lines;
-}
-function renderQrLines(value, options2 = {}) {
-  if (!value) throw new Error("renderQr requires a value");
-  const errorCorrection = options2.errorCorrection ?? "M";
-  const { size, at } = encode(value, errorCorrection);
-  const style = options2.style ?? qrStyleFor(value, { area: options2.area, env: options2.env, errorCorrection });
-  return style === "paint" ? paintLines(size, at, options2.plain ?? false) : halfLines(size, at, options2.plain ?? false);
-}
-
-// packages/server/src/restart-supervisor.ts
-import { request as requestHttp, createServer } from "node:http";
-import { connect } from "node:net";
-init_local_origin();
-init_local_image();
-
-// packages/server/src/supervisor-pages.ts
-function escapeHtml(value) {
-  return value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
-}
-function retryTarget(url) {
-  return url.startsWith("/") && !url.startsWith("//") ? url : "/";
-}
-var BASE_STYLE = `
-*,*::before,*::after{box-sizing:border-box}
-:root{
-  color-scheme:dark;
-  --bg:#0d0e10;--panel:#131519;--panel-2:#181b20;
-  --border:#26282d;--border-strong:#33363c;--control-border:#26282d;--control-strong:#33363c;
-  --fg:#e6e7e9;--muted:#8b8f96;--accent:#e8b923;--danger:#fca5a5;
-  --focus-border:color-mix(in srgb,var(--accent) 55%,transparent);--focus-ring:color-mix(in srgb,var(--accent) 22%,transparent);
-  --sans:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
-  --mono:ui-monospace,"JetBrains Mono","SF Mono","Cascadia Mono",Menlo,Consolas,monospace;
-  --ease:cubic-bezier(0,0,.2,1);
-}
-:root[data-theme=light]{
-  color-scheme:light;
-  --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
-  --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
-  --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
-  --focus-border:#416896;--focus-ring:#416896;
-}
-@media(prefers-color-scheme:light){
-  :root:not([data-theme]){
-    color-scheme:light;
-    --bg:#f7f7f7;--panel:#fff;--panel-2:#fafafa;
-    --border:#dedede;--border-strong:#cecece;--control-border:#858585;--control-strong:#7d7d7d;
-    --fg:#292929;--muted:#606060;--accent:#416896;--danger:#cf222e;
-    --focus-border:#416896;--focus-ring:#416896;
-  }
-}
-html,body{background:var(--bg)}
-body{
-  margin:0;min-height:100vh;min-height:100dvh;
-  display:flex;align-items:center;justify-content:center;padding:24px;
-  color:var(--fg);font-family:var(--sans);font-size:12.5px;line-height:1.55;
-  -webkit-font-smoothing:antialiased;
-}
-main{width:100%;max-width:28rem;padding:18px;border:1px solid var(--border-strong);border-radius:12px;background:var(--panel-2)}
-h1{margin:0;display:flex;align-items:baseline;gap:7px;font-size:14px;font-weight:600;letter-spacing:-.01em;line-height:1.4}
-p{margin:0;text-wrap:pretty}
-.detail{margin-top:7px;color:color-mix(in srgb,var(--fg) 88%,transparent)}
-.note{margin-top:12px;padding-top:11px;border-top:1px solid var(--border);color:var(--muted);font-size:11.5px;line-height:1.6}
-code{font-family:var(--mono);font-size:.92em;padding:.1em .35em;border-radius:4px;background:var(--panel);border:1px solid var(--border);white-space:nowrap}
-[hidden]{display:none!important}
-`.trim();
-var RECOVERY_STYLE = `
-.actions{margin-top:14px;display:flex;flex-wrap:wrap;gap:8px}
-/* ErrorBoundary's ACTION_CLASS, one size up for a page that is alone in a viewport. */
-.btn{
-  appearance:none;display:inline-flex;align-items:center;
-  border:1px solid var(--control-border);border-radius:6px;background:transparent;
-  padding:5px 10px;font:inherit;font-size:11.5px;color:color-mix(in srgb,var(--fg) 90%,transparent);
-  cursor:pointer;text-decoration:none;
-  transition:background-color 120ms var(--ease),border-color 120ms var(--ease),color 120ms var(--ease);
-}
-.btn:hover{background:var(--panel);border-color:var(--control-strong);color:var(--fg)}
-.btn:focus-visible{outline:none;border-color:var(--focus-border);box-shadow:0 0 0 2px var(--focus-ring)}
-.btn:disabled{opacity:.5;pointer-events:none}
-/* min-height holds the slot open while it is LIVE, so a changing status line never nudges the card;
-   :empty collapses it when there is nothing live to say, so a halted card has no trailing gutter. */
-.probe{margin-top:12px;font-family:var(--mono);font-size:11px;line-height:1.5;color:var(--muted);min-height:1.5em}
-.probe:empty{margin-top:0;min-height:0}
-/* RestartFailureNotice's block, at this altitude: a supervisor \`message\` is raw build output, and it
-   reads as what it is \u2014 a terminal excerpt \u2014 only inside a scrolling mono box. */
-.log{
-  margin-top:10px;max-height:16rem;overflow:auto;white-space:pre-wrap;overflow-wrap:break-word;
-  border:1px solid var(--border);border-radius:6px;background:var(--panel);padding:8px 10px;
-  font-family:var(--mono);font-size:11px;line-height:1.6;color:color-mix(in srgb,var(--fg) 70%,transparent);
-}
-
-/* THE LIVE DOT, and it is the app's own \`.frizz-live-dot\` \u2014 same 6px, same 28%/14% halo, same 1.25s
-   cadence \u2014 because it means the same thing here that it means there: work is in flight.
-
-   Alignment is an INK problem. A baseline-aligned flex item with no text of its own contributes its
-   BORDER-BOX BOTTOM as the baseline, so the dot's ink centre lands 3px above it while the cap band's
-   centre sits 0.5cap above it. \`cap\` is the resolved font's own cap height, so the correction holds
-   at any size, with nothing to re-measure when the type scale moves. The em spelling is the fallback for a browser without the unit (.35em ~= 0.5 x a
-   0.7em cap) and is overwritten wherever \`cap\` parses. */
-.dot{
-  width:6px;height:6px;flex:0 0 auto;border-radius:9999px;background:var(--accent);
-  box-shadow:0 0 0 1px color-mix(in srgb,var(--accent) 28%,transparent);
-  animation:frizz-live-pulse 1.25s ease-in-out infinite;
-  transform:translateY(calc(3px - .35em));
-  transform:translateY(calc(3px - .5cap));
-}
-.dot[data-state=idle]{animation:none;background:var(--muted);box-shadow:none}
-.dot[data-state=bad]{animation:none;background:var(--danger);box-shadow:0 0 0 1px color-mix(in srgb,var(--danger) 28%,transparent)}
-@keyframes frizz-live-pulse{50%{opacity:.62;box-shadow:0 0 0 2px color-mix(in srgb,var(--accent) 14%,transparent)}}
-@media (prefers-reduced-motion:reduce){
-  .dot{animation:none;background:transparent;border:2px solid var(--accent);box-shadow:none}
-  .dot[data-state=idle]{border-color:var(--muted)}
-  .dot[data-state=bad]{border-color:var(--danger);background:transparent}
-}
-
-/* The app's \`.shimmer-text\`: a highlight sweeping muted text is how this product says "working", and
-   the probe line is the only thing on the page that is. */
-.probe[data-live=yes]{
-  color:transparent;
-  background:linear-gradient(90deg,var(--muted) 0%,var(--muted) 35%,var(--fg) 50%,var(--muted) 65%,var(--muted) 100%) 0 0/200% 100%;
-  -webkit-background-clip:text;background-clip:text;
-  animation:frizz-shimmer 2.2s linear infinite;
-}
-@keyframes frizz-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
-@media (prefers-reduced-motion:reduce){
-  .probe[data-live=yes]{animation:none;background:none;color:var(--muted)}
-}
-`.trim();
-var THEME_SCRIPT = `var p;try{p=localStorage.getItem("frizz-theme")}catch{}var d=false;try{d=matchMedia&&matchMedia("(prefers-color-scheme: dark)").matches}catch{}var t=p==="dark"||p==="light"?p:d?"dark":"light";document.documentElement.dataset.theme=t;document.documentElement.style.colorScheme=t;document.querySelector('meta[name="theme-color"]').content=t==="dark"?"#0d0e10":"#f7f7f7"`;
-var RECOVERY_SCRIPT = `
-(function(){
-  var target=document.body.dataset.target||"/"
-  var heading=document.getElementById("heading")
-  var detail=document.getElementById("detail")
-  var probe=document.getElementById("probe")
-  var log=document.getElementById("log")
-  var dot=document.getElementById("dot")
-  var restart=document.getElementById("restart")
-  var BUDGET=120000,MIN=600,MAX=4000,GROWTH=1.4
-  var delay=MIN,deadline=Date.now()+BUDGET,timer=0,stopped=false,busy=false,told=""
-
-  function say(text,live){probe.textContent=text;probe.setAttribute("data-live",live?"yes":"no")}
-  function halt(text,bad){stopped=true;clearTimeout(timer);dot.setAttribute("data-state",bad?"bad":"idle");say(text,false)}
-  function showLog(message){if(message){log.textContent=message;log.hidden=false}else{log.hidden=true}}
-  function resume(){stopped=false;busy=false;delay=MIN;deadline=Date.now()+BUDGET;dot.removeAttribute("data-state");clearTimeout(timer);timer=setTimeout(tick,0)}
-
-  // 503 is this proxy's own "no child". Every other answer \u2014 200, 404, even a 500 from the app \u2014 means
-  // something is listening again, and the reader's own URL is the right thing to ask.
-  function alive(){
-    return fetch(target,{method:"HEAD",cache:"no-store",credentials:"same-origin"})
-      .then(function(r){return r.status!==503}).catch(function(){return false})
-  }
-  function readStatus(){
-    return fetch("/_frizz/control/status",{cache:"no-store",headers:{"cache-control":"no-store"}})
-      .then(function(r){return r.ok?r.json():null})
-      .then(function(b){return b&&b.protocol===1?b:null}).catch(function(){return null})
-  }
-
-  // An unreachable launcher leaves the server-rendered copy alone: it is already right for the case
-  // that rendered it, and guessing over it would be worse than saying nothing.
-  function narrate(status){
-    if(!status||status.state===told)return
-    told=status.state
-    if(status.state==="failed"){
-      heading.textContent="Frizz did not restart"
-      // Not a second copy of the note below it \u2014 a lead-in to the log, which is the next thing down.
-      detail.textContent="The launcher could not bring the application server back, and reported this:"
-      showLog(status.message||"The launcher gave no reason.")
-      halt("",true)
-      return
-    }
-    showLog("")
-    if(status.state==="restarting"){
-      heading.textContent="Frizz is restarting"
-      detail.textContent="The application server is coming back up."
-    }
-  }
-
-  function tick(){
-    if(stopped||busy)return
-    // A hidden tab neither polls nor spends its budget; visibilitychange starts the loop again.
-    if(document.hidden)return
-    alive().then(function(up){
-      if(up){say("Frizz is back. Reloading.",true);location.replace(target);return}
-      return readStatus().then(function(status){
-        narrate(status)
-        if(stopped)return
-        if(Date.now()>deadline){halt("No answer after 2m. This page stopped checking.",false);return}
-        delay=Math.min(MAX,delay*GROWTH)
-        say("Waiting for Frizz",true)
-        timer=setTimeout(tick,delay)
-      })
-    })
-  }
-
-  document.addEventListener("visibilitychange",function(){
-    if(document.hidden||stopped||busy)return
-    resume()
-  })
-
-  restart.addEventListener("click",function(){
-    if(busy)return
-    busy=true;stopped=false;told="";clearTimeout(timer)
-    restart.disabled=true;restart.textContent="Restarting"
-    dot.removeAttribute("data-state");showLog("");say("Restarting Frizz",true)
-    fetch("/_frizz/control/restart",{method:"POST",headers:{"cache-control":"no-store"}})
-      .then(function(r){return r.json().catch(function(){return null}).then(function(b){return{ok:r.ok,status:r.status,body:b}})})
-      .catch(function(){return{ok:false,status:0,body:null}})
-      .then(function(r){
-        restart.disabled=false;restart.textContent="Restart Frizz";busy=false
-        if(!r.ok){
-          heading.textContent="Frizz did not restart"
-          detail.textContent="The launcher could not bring the application server back, and reported this:"
-          showLog((r.body&&r.body.message)||("The launcher refused the restart ("+(r.status||"no response")+")."))
-          halt("",true)
-          return
-        }
-        // Accepted. The probe, not this response, decides whether the child is actually back.
-        resume()
-      })
-  })
-
-  say("Waiting for Frizz",true)
-  tick()
-})()
-`.trim();
-function documentShell(options2) {
-  return `<!doctype html><html lang="en" data-font="sans"><head><meta charset="utf-8"><title>${options2.title}</title><meta name="viewport" content="width=device-width,initial-scale=1">` + (options2.appearance ? `<meta name="color-scheme" content="dark light"><meta name="theme-color" content="#0d0e10">` : `<meta name="color-scheme" content="dark light"><meta name="theme-color" media="(prefers-color-scheme: dark)" content="#0d0e10"><meta name="theme-color" media="(prefers-color-scheme: light)" content="#f7f7f7">`) + `<style>${options2.style ? `${BASE_STYLE}
-${options2.style}` : BASE_STYLE}</style>` + (options2.appearance ? `<script>${THEME_SCRIPT}</script>` : "") + `</head><body${options2.bodyAttributes ? ` ${options2.bodyAttributes}` : ""}><main>${options2.body}</main>` + (options2.script ? `<script>${options2.script}</script>` : "") + `</body></html>`;
-}
-var RECOVERY_COPY = {
-  starting: {
-    title: "Restarting | Frizz",
-    heading: "Frizz is restarting",
-    detail: "The application server is not listening yet. This page reloads as soon as it answers."
-  },
-  unreachable: {
-    title: "Not responding | Frizz",
-    heading: "Frizz is not responding",
-    detail: "The application server accepted this request and then dropped it. Restarting it usually clears this."
-  }
-};
-var THREADS_NOTE = "Threads already running are not affected. Each runs as its own detached process, and Frizz reattaches to it on restart.";
-function recoveryPage(url, variant = "starting") {
-  const copy = RECOVERY_COPY[variant];
-  const target2 = escapeHtml(retryTarget(url));
-  return documentShell({
-    title: copy.title,
-    style: RECOVERY_STYLE,
-    appearance: true,
-    bodyAttributes: `data-target="${target2}"`,
-    body: `<h1><span class="dot" id="dot" aria-hidden="true"></span><span id="heading">${copy.heading}</span></h1><p class="detail" id="detail">${copy.detail}</p><pre class="log" id="log" hidden></pre><p class="note">${THREADS_NOTE}</p><div class="actions"><a class="btn" href="${target2}">Try again</a><button class="btn" type="button" id="restart">Restart Frizz</button></div><p class="probe" id="probe" aria-live="polite"></p>`,
-    script: RECOVERY_SCRIPT
-  });
-}
-function unauthorizedPage(reason) {
-  const detail = reason === "already-used" ? "That link has already been used. Generate a fresh one." : reason === "expired" ? "That link expired. Generate a fresh one." : "This address needs a current access link.";
-  return documentShell({
-    title: "Unauthorized",
-    body: `<h1>Unauthorized</h1><p class="detail">${detail}</p>`
-  });
-}
-function unlistedHostPage(name) {
-  const shown = escapeHtml(name);
-  return documentShell({
-    title: "Not served by this name",
-    appearance: true,
-    body: `<h1>Not served by this name</h1><p class="detail">Frizz does not answer to <code>${shown}</code>. A name a browser has to resolve is how DNS rebinding makes another site's page count as this board, so an exposed board accepts only its own hostname and the names its operator lists.</p><p class="note">Open the board by its IP address, or relaunch with <code>--allowed-host ${shown}</code> (or <code>FRIZZ_ALLOWED_HOSTS=${shown}</code>) to accept this one.</p>`
-  });
-}
-
-// packages/server/src/restart-supervisor.ts
-init_src();
-var SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
-var SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
-var SUPERVISOR_UPDATE_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/update-restart`;
-var SUPERVISOR_STATUS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/status`;
-var SUPERVISOR_ACCESS_CODE_PATH = `${SUPERVISOR_CONTROL_PREFIX}/access-code`;
-var SUPERVISOR_SESSIONS_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sessions`;
-var SUPERVISOR_SIGN_OUT_PATH = `${SUPERVISOR_CONTROL_PREFIX}/sign-out`;
-var SUPERVISOR_CONTROL_PROTOCOL = 1;
-function responseJson(res, status, value) {
-  res.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
-  res.end(JSON.stringify(value));
-}
-function proxyHeaders(req, childPort, vouchSameOrigin = false) {
-  const headers = { ...req.headers };
-  headers.host = `127.0.0.1:${childPort}`;
-  if (typeof headers.origin === "string") headers.origin = `http://127.0.0.1:${childPort}`;
-  for (const name of FORWARDED_HEADERS) delete headers[name];
-  if (vouchSameOrigin) headers["sec-fetch-site"] = "same-origin";
-  delete headers.connection;
-  return headers;
-}
-var ACCESS_CODE_PARAM = "frizz_code";
-var SESSION_COOKIE = "frizz_session";
-var LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
-function readCookie(header, name) {
-  if (!header) return void 0;
-  for (const pair of header.split(";")) {
-    const eq = pair.indexOf("=");
-    if (eq === -1) continue;
-    if (pair.slice(0, eq).trim() === name) return pair.slice(eq + 1).trim();
-  }
-  return void 0;
-}
-function isControlRequest(req) {
-  const url = new URL(req.url ?? "/", "http://frizz.invalid");
-  return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH || url.pathname === SUPERVISOR_SIGN_OUT_PATH;
-}
-function isLocalImageRequest(req) {
-  if (req.method !== "GET" && req.method !== "HEAD") return false;
-  const { pathname } = new URL(req.url ?? "/", "http://frizz.invalid");
-  return LOCAL_IMAGE_PATH.test(pathname);
-}
-var LOCAL_IMAGE_PATH = new RegExp(`^${FRIZZ_ROUTE_PREFIX}(?:/[^/]+)?/local-image$`);
-async function readJsonBody(req, limit = 64 * 1024) {
-  const chunks = [];
-  let size = 0;
-  for await (const chunk of req) {
-    size += chunk.byteLength;
-    if (size > limit) return null;
-    chunks.push(chunk);
-  }
-  if (chunks.length === 0) return {};
-  try {
-    const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
-  } catch {
-    return null;
-  }
-}
-var RestartSupervisorProxy = class {
-  server = null;
-  restartInFlight = null;
-  /** Which action `restartInFlight` is. An update's prepare phase leaves the child serving; a restart does not. */
-  transition = null;
-  state = "ready";
-  message;
-  options;
-  host;
-  /**
-   * The authorities a browser may name for the PUBLIC port. This proxy is the whole boundary: it
-   * rewrites Host/Origin to the child's private loopback authority, so the child's own strict gate
-   * can never see (or reject) the real browser authority. Everything this class forwards has to be
-   * judged here first.
-   */
-  policy;
-  /** The origin a tunnel or proxy serves this board at; undefined while loopback-only. Live: see setPublicOrigin. */
-  publicOrigin;
-  /**
-   * Codes and sessions for the public origin, or null when no public origin is declared (loopback-only
-   * boards are never gated, so there is nothing to store).
-   */
-  access;
-  /** Both halves of every live upgraded pair, so close() can actually finish. See close(). */
-  upgradedSockets = /* @__PURE__ */ new Set();
-  constructor(options2) {
-    this.options = options2;
-    this.host = options2.host ?? LOOPBACK_BIND_HOST;
-    this.publicOrigin = options2.publicOrigin;
-    this.access = new AccessStore({
-      onConsumed: () => options2.onCodeConsumed?.(),
-      ...options2.sessionKey ? { signingKey: options2.sessionKey } : {},
-      ...options2.sessionDirectory ? { sessions: options2.sessionDirectory } : {}
-    });
-    this.policy = this.buildPolicy();
-  }
-  /**
-   * Change the public origin on a running board — what the R pane does when the operator picks or
-   * clears a remote setup. Requests already in flight finish under the policy they started with; the
-   * next one is judged by the new origin. Sessions survive the change.
-   */
-  setPublicOrigin(origin) {
-    this.publicOrigin = origin;
-    this.policy = this.buildPolicy();
-  }
-  buildPolicy() {
-    return {
-      exposed: bindHostIsExposed(this.host),
-      allowedHosts: this.options.allowedHosts ?? [],
-      ...this.publicOrigin ? { publicOrigin: this.publicOrigin } : {}
-    };
-  }
-  /**
-   * Mint a single-use code for this board, or null when no public origin is declared.
-   *
-   * Issuing does NOT invalidate codes already outstanding — pressing the key twice, or two people
-   * asking at once, must not silently break the first QR somebody is still walking towards.
-   */
-  issueAccessCode() {
-    return this.publicOrigin ? this.access.issue() : null;
-  }
-  /** The full URL to show as a link or a QR. */
-  accessUrl(code) {
-    const origin = this.publicOrigin;
-    return origin ? `${origin}/?${ACCESS_CODE_PARAM}=${encodeURIComponent(code)}` : null;
-  }
-  async listen() {
-    if (this.server) return;
-    const server = createServer((req, res) => this.handle(req, res));
-    server.keepAliveTimeout = 5e3;
-    server.headersTimeout = 1e4;
-    server.on("upgrade", (req, socket, head) => this.handleUpgrade(req, socket, head));
-    await new Promise((resolveListen, rejectListen) => {
-      server.once("error", rejectListen);
-      server.listen(this.options.port, this.host, () => {
-        server.off("error", rejectListen);
-        resolveListen();
-      });
-    });
-    this.server = server;
-  }
-  /**
-   * Is this request allowed to reach the child at all?
-   *
-   * Deliberately the WEAKER of the two gates: a missing Origin passes here and the child then applies
-   * its own per-route rule for it (only /health, /control/stop and `Sec-Fetch-Site: same-origin` may
-   * omit one). What this stops is the thing the child cannot: an Origin naming somebody ELSE being
-   * laundered into a valid same-origin one by proxyHeaders below.
-   */
-  authorityAccepted(req, allowMissingOrigin = true) {
-    return isTrustedLocalHttpRequest(req.headers, this.options.port, allowMissingOrigin, this.policy);
-  }
-  /**
-   * Is this an Origin-less request that only LOOKS suspicious because the browser could not send
-   * Fetch Metadata to a non-loopback authority? See authoritySendsFetchMetadata.
-   *
-   * Frizz's missing-Origin rules ask for `Sec-Fetch-Site: same-origin`, which Chrome never sends over
-   * plain HTTP to a LAN address — so without this, `--host` serves the shell and then 403s every RPC
-   * the app makes. Narrow on purpose: the Host must already be an authority this proxy accepts, there
-   * must be no Origin at all (a present one still has to match, and is rejected above if it does not),
-   * and loopback traffic is never touched, so the default posture keeps the real Sec-Fetch signal.
-   *
-   * The condition is `authoritySendsFetchMetadata`, not "is the bind address exposed", because those
-   * two came apart with `--public-origin`: a tunnelled board stays on loopback yet is reached at a
-   * name. An https proxy origin is potentially trustworthy, so the real signal survives and this
-   * never fires for it; a plain-http one is in the same boat as a LAN address and needs the vouch.
-   *
-   * What this gives up, stated plainly: on an exposed board a cross-site GET carries no Origin and no
-   * Fetch Metadata, so it is indistinguishable from the app's own read and is allowed. The response is
-   * still opaque to the caller (no CORS), Frizz's GET procedures are reads, and every mutation is a POST
-   * — which a browser always stamps with an Origin, and which is therefore still refused.
-   */
-  vouchesSameOrigin(req) {
-    if (req.headers.origin !== void 0 || req.headers["sec-fetch-site"] !== void 0) return false;
-    const host = parseLocalHost(req.headers.host, this.options.port, this.policy);
-    return !!host && !authoritySendsFetchMetadata(host);
-  }
-  async close() {
-    const server = this.server;
-    this.server = null;
-    if (!server) return;
-    await new Promise((resolveClose, rejectClose) => {
-      server.close((error) => error ? rejectClose(error) : resolveClose());
-      server.closeAllConnections();
-      for (const socket of this.upgradedSockets) socket.destroy();
-      this.upgradedSockets.clear();
-    });
-  }
-  status() {
-    const delegated = this.options.status?.();
-    const updateVersion = this.options.updateVersion?.();
-    const version = typeof this.options.version === "function" ? this.options.version() : this.options.version;
-    const owner = { state: this.state, ...this.message ? { message: this.message } : {} };
-    const reported = this.transition === "update" && delegated ? { ...delegated, ...delegated.state === "ready" ? { preparing: true } : {} } : this.restartInFlight !== null || this.state === "failed" ? owner : delegated ?? owner;
-    return {
-      ...delegated ?? {},
-      ...reported,
-      // Never infer this from the generic protocol: legacy/static supervisors can recover a child
-      // but cannot build and promote the canonical Frizz artifact.
-      updateRestart: typeof this.options.updateRestart === "function",
-      // Sent ONLY when the launcher can actually answer it, so an older client — and frizz-dev, which
-      // has no notion of "already current" — keeps today's behaviour on its absence.
-      ...this.options.updateAvailable ? { updateAvailable: this.options.updateAvailable() === true } : {},
-      // The active SERVER version changes on a child-only update. Its absence keeps frizz-dev and
-      // old monolithic supervisors' status payload and versionless UI exactly as they were.
-      ...version ? { version } : {},
-      ...this.options.launcherVersion ? { launcherVersion: this.options.launcherVersion } : {},
-      ...updateVersion ? { updateVersion } : {},
-      // Sent only when TRUE, so a published Frizz's payload is byte-identical to what it sends today
-      // and an older client is unaffected. Absent therefore means "not a development build".
-      ...this.options.dev ? { dev: true } : {}
-    };
-  }
-  async runAction(action, transition) {
-    if (this.restartInFlight) return this.restartInFlight;
-    this.transition = transition;
-    this.state = "restarting";
-    this.message = void 0;
-    const work = (async () => {
-      await new Promise((resume) => setImmediate(resume));
-      return action();
-    })().then(
-      (result) => {
-        this.state = result.state;
-        this.message = result.message;
-        return result;
-      },
-      (error) => {
-        const result = { state: "failed", message: error instanceof Error ? error.message : String(error) };
-        this.state = result.state;
-        this.message = result.message;
-        return result;
-      }
-    ).finally(() => {
-      this.restartInFlight = null;
-      this.transition = null;
-    });
-    this.restartInFlight = work;
-    return work;
-  }
-  async handleControl(req, res) {
-    const pathname = new URL(req.url ?? "/", "http://frizz.invalid").pathname;
-    if (pathname !== SUPERVISOR_SIGN_OUT_PATH && this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
-      res.writeHead(401, { "cache-control": "no-store" });
-      res.end();
-      return;
-    }
-    const sameOrigin = req.headers["sec-fetch-site"] === "same-origin" || this.vouchesSameOrigin(req);
-    const allowMissingOrigin = pathname === SUPERVISOR_STATUS_PATH && req.method === "GET" && sameOrigin;
-    if (!this.authorityAccepted(req, allowMissingOrigin)) {
-      res.writeHead(403);
-      res.end("Forbidden");
-      return;
-    }
-    if (pathname === SUPERVISOR_ACCESS_CODE_PATH) {
-      if (this.arrivedPublicly(req)) {
-        res.writeHead(403);
-        res.end("Forbidden");
-        return;
-      }
-      if (req.method !== "POST") {
-        res.writeHead(405, { allow: "POST" });
-        res.end();
-        return;
-      }
-      const link = this.issueAccessCode();
-      const url = link && this.accessUrl(link.code);
-      if (!link || !url) {
-        responseJson(res, 409, { error: "this board has no public origin, so there is nothing to link to" });
-        return;
-      }
-      responseJson(res, 200, { url, expiresAt: link.expiresAt });
-      return;
-    }
-    if (pathname === SUPERVISOR_SESSIONS_PATH) {
-      if (this.arrivedPublicly(req)) {
-        res.writeHead(403);
-        res.end("Forbidden");
-        return;
-      }
-      if (!this.publicOrigin) {
-        responseJson(res, 409, { error: "this board has no public origin, so nothing is signed in" });
-        return;
-      }
-      if (req.method === "GET") {
-        responseJson(res, 200, { sessions: this.access.sessions.list() });
-        return;
-      }
-      if (req.method !== "POST") {
-        res.writeHead(405, { allow: "GET, POST" });
-        res.end();
-        return;
-      }
-      const body = await readJsonBody(req);
-      const id = typeof body?.id === "string" ? body.id : void 0;
-      if (body?.all === true) {
-        responseJson(res, 200, { signedOut: this.access.sessions.revokeAll() });
-        return;
-      }
-      if (!id) {
-        responseJson(res, 400, { error: "name a device id, or pass all: true" });
-        return;
-      }
-      if (!this.access.sessions.revoke(id)) {
-        responseJson(res, 404, { error: `no signed-in device has the id ${id}` });
-        return;
-      }
-      responseJson(res, 200, { signedOut: 1 });
-      return;
-    }
-    if (pathname === SUPERVISOR_SIGN_OUT_PATH) {
-      if (req.method !== "POST") {
-        res.writeHead(405, { allow: "POST" });
-        res.end();
-        return;
-      }
-      this.signOutThisDevice(req, res);
-      return;
-    }
-    if (pathname === SUPERVISOR_STATUS_PATH && req.method === "GET") {
-      responseJson(res, 200, {
-        protocol: SUPERVISOR_CONTROL_PROTOCOL,
-        ...this.status(),
-        // Sent ONLY when true, so a loopback tab's payload is byte-identical to what it was. The web
-        // app cannot tell on its own: the session cookie is HttpOnly, and the page is the same bundle
-        // whichever way it was reached. It is a fact about THIS request, never about the board.
-        ...this.carriesRemoteSession(req) ? { remoteSession: true } : {}
-      });
-      return;
-    }
-    if (pathname !== SUPERVISOR_RESTART_PATH && pathname !== SUPERVISOR_UPDATE_RESTART_PATH || req.method !== "POST") {
-      res.writeHead(405, { allow: pathname === SUPERVISOR_STATUS_PATH ? "GET" : "POST" });
-      res.end();
-      return;
-    }
-    if (pathname === SUPERVISOR_UPDATE_RESTART_PATH && !this.options.updateRestart) {
-      responseJson(res, 409, { protocol: SUPERVISOR_CONTROL_PROTOCOL, state: "failed", message: "Update & Restart is available only for a stable immutable Frizz artifact" });
-      return;
-    }
-    if (pathname === SUPERVISOR_UPDATE_RESTART_PATH) {
-      void this.runAction(this.options.updateRestart, "update");
-      responseJson(res, 202, { protocol: SUPERVISOR_CONTROL_PROTOCOL, state: "restarting" });
-      return;
-    }
-    const result = await this.runAction(this.options.restart, "restart");
-    responseJson(res, result.state === "ready" ? 202 : 503, { protocol: SUPERVISOR_CONTROL_PROTOCOL, ...result });
-  }
-  handleLocalImage(req, res) {
-    const allowMissingOrigin = req.headers.origin === void 0 && (req.headers["sec-fetch-site"] === "same-origin" || this.vouchesSameOrigin(req));
-    if (!this.authorityAccepted(req, allowMissingOrigin)) {
-      res.writeHead(403, { "content-type": "text/plain; charset=UTF-8" });
-      res.end("Forbidden");
-      return;
+        if (table.size() < 4095) {
+          if (table.size() == 1 << bitLength) {
+            bitLength += 1;
+          }
+          table.add(s + c);
+        }
+        s = c;
+      }
     }
-    const url = new URL(req.url ?? "/", "http://frizz.invalid");
-    const result = resolveLocalImage(url.searchParams.get("path") ?? void 0);
-    const origin = typeof req.headers.origin === "string" ? allowedLocalCorsOrigin(req.headers.origin, this.options.port, this.policy) : void 0;
-    const sharedHeaders = {
-      ...origin ? { "access-control-allow-origin": origin } : {},
-      "access-control-expose-headers": "x-frizz-boot",
-      vary: "Origin"
+    bitOut.write(table.indexOf(s), bitLength);
+    bitOut.write(endCode, bitLength);
+    bitOut.flush();
+    return byteOut.toByteArray();
+  };
+  const lzwTable = function() {
+    const _map = {};
+    let _size = 0;
+    const _this2 = {};
+    _this2.add = function(key) {
+      if (_this2.contains(key)) {
+        throw "dup key:" + key;
+      }
+      _map[key] = _size;
+      _size += 1;
     };
-    if (result.status !== 200) {
-      res.writeHead(result.status, { ...sharedHeaders, "content-type": "text/plain; charset=UTF-8" });
-      res.end(String(result.status));
-      return;
-    }
-    res.writeHead(200, {
-      ...sharedHeaders,
-      "content-type": result.contentType,
-      "content-length": result.body.length,
-      "cache-control": "private, max-age=60"
-    });
-    res.end(req.method === "HEAD" ? void 0 : result.body);
-  }
-  /**
-   * Is this request arriving as the declared public origin rather than over loopback?
-   *
-   * The token gate keys on this and not on "is the port exposed", because the two are independent:
-   * a tunnelled board stays bound to 127.0.0.1 while being reachable from the internet by name.
-   */
-  arrivedPublicly(req) {
-    const declared = this.publicOrigin;
-    if (!declared) return false;
-    const host = parseLocalHost(req.headers.host, this.options.port, this.policy);
-    return !!host && !LOOPBACK_HOSTNAMES.has(host.hostname);
-  }
-  /**
-   * Bearer check for the public origin. Two ways in: the cookie the exchange below sets, or the
-   * one-time `?frizz_token=` in the URL the operator was handed at launch.
-   *
-   * Compared with `timingSafeEqual` on equal-length buffers — a plain `===` on a secret leaks its
-   * prefix to a patient attacker, and this secret is the only thing between the internet and a shell.
-   */
-  /**
-   * Is this request carrying a session this process minted?
-   *
-   * Sessions only. A raw `?frizz_code=` is NOT accepted here — it is redeemed once by exchangeCode()
-   * below and traded for a session, so a code that has already been spent cannot keep working just by
-   * staying in somebody's URL bar.
-   */
-  sessionAccepted(req) {
-    if (!this.publicOrigin) return true;
-    return this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
-  }
-  /** Did this request arrive through the public origin carrying a live session? Loopback never does. */
-  carriesRemoteSession(req) {
-    return this.arrivedPublicly(req) && this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
-  }
-  /**
-   * End the session this request carries, and nothing else — see SUPERVISOR_SIGN_OUT_PATH in
-   * handleControl for why that makes it safe to reach from the tunnel.
-   *
-   * A loopback request is a no-op even if it somehow carries a cookie: the operator's own tab has no
-   * remote session to end, and loopback is the place `--sign-out` already covers.
-   */
-  signOutThisDevice(req, res) {
-    const reply = (status, body, clearCookie) => {
-      res.writeHead(status, {
-        "content-type": "application/json; charset=utf-8",
-        "cache-control": "no-store",
-        // Same attributes the exchange set, so the browser matches and drops that exact cookie.
-        ...clearCookie ? { "set-cookie": `${SESSION_COOKIE}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0` } : {}
-      });
-      res.end(JSON.stringify(body));
+    _this2.size = function() {
+      return _size;
     };
-    if (!this.arrivedPublicly(req)) {
-      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, false);
-      return;
-    }
-    const outcome = this.access.signOutSession(readCookie(req.headers.cookie, SESSION_COOKIE));
-    if (outcome.result === "revoked") {
-      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "signed-out", id: outcome.id }, true);
-      return;
-    }
-    if (outcome.result === "legacy") {
-      reply(200, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "cookie-cleared" }, true);
-      return;
+    _this2.indexOf = function(key) {
+      return _map[key];
+    };
+    _this2.contains = function(key) {
+      return typeof _map[key] != "undefined";
+    };
+    return _this2;
+  };
+  return _this;
+};
+var createDataURL = function(width, height, getPixel) {
+  const gif = gifImage(width, height);
+  for (let y = 0; y < height; y += 1) {
+    for (let x = 0; x < width; x += 1) {
+      gif.setPixel(x, y, getPixel(x, y));
     }
-    reply(401, { protocol: SUPERVISOR_CONTROL_PROTOCOL, result: "no-remote-session" }, true);
   }
-  /**
-   * Trade `?frizz_code=…` for a cookie, then bounce to the same URL
-   * without the secret, so it never lands in history, a Referer header, or a screenshot.
-   */
-  exchangeCode(req, res) {
-    const url = new URL(req.url ?? "/", "http://frizz.invalid");
-    const code = url.searchParams.get(ACCESS_CODE_PARAM);
-    if (code === null) return false;
-    const redeemed = this.access.redeem(code, describeDevice(req.headers["user-agent"]));
-    if (!redeemed?.ok) {
-      res.writeHead(401, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-      res.end(unauthorizedPage(redeemed?.reason));
-      return true;
-    }
-    const cookie = `${SESSION_COOKIE}=${redeemed.session}`;
-    url.searchParams.delete(ACCESS_CODE_PARAM);
-    const target2 = `${url.pathname}${url.search}${url.hash}` || "/";
-    res.writeHead(302, {
-      location: target2,
-      "set-cookie": `${cookie}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=31536000`,
-      "cache-control": "no-store"
-    });
-    res.end();
-    return true;
+  const b = byteArrayOutputStream();
+  gif.write(b);
+  const base64 = base64EncodeOutputStream();
+  const bytes = b.toByteArray();
+  for (let i = 0; i < bytes.length; i += 1) {
+    base64.writeByte(bytes[i]);
   }
-  handle(req, res) {
-    if (isControlRequest(req)) {
-      void this.handleControl(req, res);
-      return;
-    }
-    if (this.arrivedPublicly(req) && this.exchangeCode(req, res)) return;
-    if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
-      res.writeHead(401, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-      res.end(unauthorizedPage());
-      return;
+  base64.flush();
+  return "data:image/gif;base64," + base64;
+};
+var qrcode_default = qrcode;
+var stringToBytes = qrcode.stringToBytes;
+
+// packages/server/src/qr.ts
+var DARK = 232;
+var LIGHT = 231;
+var fg = (dark) => `\x1B[38;5;${dark ? DARK : LIGHT}m`;
+var bg = (dark) => `\x1B[48;5;${dark ? DARK : LIGHT}m`;
+var RESET = "\x1B[0m";
+var UPPER_HALF = "\u2580";
+var LOWER_HALF = "\u2584";
+var QUIET_ZONE = 4;
+var BLOCK_DRAWING_PROGRAMS = /* @__PURE__ */ new Set(["iTerm.app", "WezTerm", "ghostty", "WarpTerminal", "vscode"]);
+var BLOCK_DRAWING_TERMS = /* @__PURE__ */ new Set(["xterm-kitty", "xterm-ghostty", "alacritty", "wezterm"]);
+function drawsBlockElements(env = process.env) {
+  const term = env.TERM ?? "";
+  if (env.TMUX || env.STY || env.TERM_PROGRAM === "tmux" || term.startsWith("screen") || term.startsWith("tmux")) return false;
+  if (BLOCK_DRAWING_PROGRAMS.has(env.TERM_PROGRAM ?? "")) return true;
+  if (BLOCK_DRAWING_TERMS.has(term)) return true;
+  if (env.LC_TERMINAL === "iTerm2") return true;
+  return Boolean(
+    env.KITTY_WINDOW_ID || env.ALACRITTY_WINDOW_ID || env.WEZTERM_PANE || env.GHOSTTY_RESOURCES_DIR || env.WT_SESSION || env.VTE_VERSION
+  );
+}
+function encode(value, errorCorrection) {
+  const code = qrcode_default(0, errorCorrection);
+  code.addData(value);
+  code.make();
+  const modules = code.getModuleCount();
+  const size = modules + QUIET_ZONE * 2;
+  return {
+    size,
+    at: (x, y) => {
+      const mx = x - QUIET_ZONE;
+      const my = y - QUIET_ZONE;
+      if (mx < 0 || my < 0 || mx >= modules || my >= modules) return false;
+      return code.isDark(my, mx);
     }
-    if (!this.authorityAccepted(req)) {
-      const name = unlistedHostName(req.headers.host, this.options.port, this.policy);
-      if (name) {
-        res.writeHead(403, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-        res.end(req.method === "HEAD" ? void 0 : unlistedHostPage(name));
-        return;
+  };
+}
+function sizeOf(size, style) {
+  return style === "paint" ? { columns: size * 2, rows: size } : { columns: size, rows: Math.ceil(size / 2) };
+}
+function qrSize(value, style = "half", errorCorrection = "M") {
+  return sizeOf(encode(value, errorCorrection).size, style);
+}
+function qrStyleFor(value, options2 = {}) {
+  const { area } = options2;
+  if (!area || drawsBlockElements(options2.env)) return "half";
+  const paint = qrSize(value, "paint", options2.errorCorrection);
+  return paint.columns <= area.columns && paint.rows <= area.rows ? "paint" : "half";
+}
+function qrAreaOf(stream, frame) {
+  if (!stream.columns || !stream.rows) return void 0;
+  return { columns: stream.columns - frame.indent, rows: stream.rows - frame.rows };
+}
+function halfLines(size, at, plain) {
+  const lines = [];
+  for (let y = 0; y < size; y += 2) {
+    let line = "";
+    for (let x = 0; x < size; x++) {
+      const top = at(x, y);
+      const bottom = y + 1 < size ? at(x, y + 1) : false;
+      if (plain) {
+        line += top && bottom ? "#" : top ? "^" : bottom ? "v" : " ";
+        continue;
       }
-      res.writeHead(403, { "content-type": "text/plain; charset=UTF-8" });
-      res.end("Forbidden");
-      return;
-    }
-    if (isLocalImageRequest(req)) {
-      this.handleLocalImage(req, res);
-      return;
-    }
-    const childPort = this.options.childPort();
-    if (!childPort) {
-      res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "retry-after": "2" });
-      res.end(recoveryPage(req.url ?? "/"));
-      return;
+      if (top === bottom) {
+        line += `${bg(top)} `;
+        continue;
+      }
+      const above = y > 0 ? at(x, y - 1) : false;
+      const below = y + 2 < size ? at(x, y + 2) : false;
+      line += below === bottom && above !== top ? `${fg(top)}${bg(bottom)}${UPPER_HALF}` : `${fg(bottom)}${bg(top)}${LOWER_HALF}`;
     }
-    const upstream = requestHttp({
-      host: "127.0.0.1",
-      port: childPort,
-      method: req.method,
-      path: req.url,
-      headers: proxyHeaders(req, childPort, this.vouchesSameOrigin(req))
-    }, (upstreamResponse) => {
-      res.writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.headers);
-      upstreamResponse.pipe(res);
-    });
-    upstream.once("error", () => {
-      if (res.headersSent) return res.destroy();
-      res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-      res.end(recoveryPage(req.url ?? "/", "unreachable"));
-    });
-    req.pipe(upstream);
+    lines.push(plain ? line : `${line}${RESET}`);
   }
-  handleUpgrade(req, socket, head) {
-    if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
-      rejectWebSocketUpgrade(socket, 401, "Unauthorized");
-      return;
-    }
-    if (!this.authorityAccepted(req, false)) {
-      socket.destroy();
-      return;
-    }
-    const childPort = this.options.childPort();
-    if (!childPort) {
-      socket.destroy();
-      return;
-    }
-    const upstream = connect(childPort, "127.0.0.1");
-    for (const half of [socket, upstream]) {
-      this.upgradedSockets.add(half);
-      half.once("close", () => this.upgradedSockets.delete(half));
-    }
-    upstream.once("connect", () => {
-      const headers = proxyHeaders(req, childPort);
-      headers.connection = req.headers.connection ?? "Upgrade";
-      const lines = [`${req.method ?? "GET"} ${req.url ?? "/"} HTTP/${req.httpVersion}`];
-      for (const [name, value] of Object.entries(headers)) {
-        if (value === void 0) continue;
-        for (const entry of Array.isArray(value) ? value : [value]) lines.push(`${name}: ${entry}`);
+  return lines;
+}
+function paintLines(size, at, plain) {
+  const lines = [];
+  for (let y = 0; y < size; y++) {
+    let line = "";
+    let last;
+    for (let x = 0; x < size; x++) {
+      const dark = at(x, y);
+      if (plain) line += dark ? "##" : "  ";
+      else {
+        if (dark !== last) line += bg(dark);
+        line += "  ";
       }
-      upstream.write(`${lines.join("\r\n")}\r
-\r
-`);
-      if (head.length > 0) upstream.write(head);
-      socket.pipe(upstream).pipe(socket);
-    });
-    upstream.once("error", () => socket.destroy());
-    socket.once("error", () => upstream.destroy());
+      last = dark;
+    }
+    lines.push(plain ? line : `${line}${RESET}`);
   }
-};
+  return lines;
+}
+function renderQrLines(value, options2 = {}) {
+  if (!value) throw new Error("renderQr requires a value");
+  const errorCorrection = options2.errorCorrection ?? "M";
+  const { size, at } = encode(value, errorCorrection);
+  const style = options2.style ?? qrStyleFor(value, { area: options2.area, env: options2.env, errorCorrection });
+  return style === "paint" ? paintLines(size, at, options2.plain ?? false) : halfLines(size, at, options2.plain ?? false);
+}
 
 // src/sessions-cli.ts
+init_restart_supervisor();
 var ago = (at, now = Date.now()) => {
   const seconds = Math.max(0, Math.round((now - at) / 1e3));
   if (seconds < 90) return "just now";
@@ -23309,9 +23504,10 @@ async function call(port, init) {
 async function listSessions(port) {
   const body = await call(port);
   const sessions = body?.sessions ?? [];
-  const live = sessions.filter((s) => s.revokedAt === void 0);
+  const now = Date.now();
+  const live = sessions.filter((s) => s.revokedAt === void 0 && (s.expiresAt === void 0 || s.expiresAt > now));
   if (live.length === 0) {
-    console.log("No device has redeemed an access link.");
+    console.log("No device is signed in.");
     process.exit(0);
   }
   const width = Math.max(...live.map((s) => s.id.length));
@@ -23338,6 +23534,9 @@ async function signOutSession(port, target2) {
   process.exit(0);
 }
 
+// src/production.ts
+init_restart_supervisor();
+
 // src/pane-host.ts
 var CTRL_C = "";
 function raiseInterrupt() {
@@ -23506,7 +23705,7 @@ import { homedir as homedir5 } from "node:os";
 init_frizz_paths();
 init_src();
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3, rmSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname4, join as join5 } from "node:path";
@@ -23514,7 +23713,7 @@ import { dirname as dirname4, join as join5 } from "node:path";
 // src/identity.ts
 init_frizz_paths();
 init_src();
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname3, join as join4 } from "node:path";
 function claimIdentityPath(home = homedir3(), env) {
@@ -23524,7 +23723,7 @@ async function loadOrCreateClaimIdentity(home = homedir3()) {
   const path = claimIdentityPath(home);
   let stored;
   try {
-    stored = readFileSync3(path);
+    stored = readFileSync2(path);
   } catch {
     stored = void 0;
   }
@@ -23541,52 +23740,144 @@ async function loadOrCreateClaimIdentity(home = homedir3()) {
   return identity;
 }
 
-// src/github-identity.ts
-import { execFile as execFile2 } from "node:child_process";
-import { promisify } from "node:util";
-var run = promisify(execFile2);
-var GithubIdentityError = class extends Error {
+// src/github-device-flow.ts
+var GITHUB_CLIENT_ID_PLACEHOLDER = "frizz-oauth-app-client-id-not-set";
+var FRIZZ_GITHUB_CLIENT_ID = GITHUB_CLIENT_ID_PLACEHOLDER;
+function githubClientId(env = process.env) {
+  const id = env.FRIZZ_GITHUB_CLIENT_ID?.trim() || FRIZZ_GITHUB_CLIENT_ID;
+  return id === GITHUB_CLIENT_ID_PLACEHOLDER ? null : id;
+}
+var GithubSignInError = class extends Error {
   constructor(message, code) {
     super(message);
     this.code = code;
-    this.name = "GithubIdentityError";
+    this.name = "GithubSignInError";
   }
 };
-async function githubAccessToken() {
-  let stdout;
+var GITHUB_DEVICE_URL = "https://github.com/login/device";
+function abortableSleep(ms, signal) {
+  return new Promise((resolve7, reject) => {
+    if (signal?.aborted) return reject(cancelled());
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve7();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(cancelled());
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+var cancelled = () => new GithubSignInError("the GitHub sign-in was cancelled", "cancelled");
+async function postForm(fetchImpl, url, fields, signal) {
+  let response;
   try {
-    ({ stdout } = await run("gh", ["auth", "token"], { encoding: "utf8" }));
+    response = await fetchImpl(url, {
+      method: "POST",
+      headers: {
+        accept: "application/json",
+        "content-type": "application/x-www-form-urlencoded",
+        "user-agent": "frizz"
+      },
+      body: new URLSearchParams(fields).toString(),
+      ...signal ? { signal } : {}
+    });
   } catch (error) {
-    const code = error.code;
-    if (code === "ENOENT") {
-      throw new GithubIdentityError(
-        "claiming a name needs the GitHub CLI, which is not installed \u2014 see https://cli.github.com, then run `gh auth login`",
-        "missing-gh"
-      );
-    }
-    throw new GithubIdentityError(
-      "claiming a name needs a signed-in GitHub CLI \u2014 run `gh auth login` and try again",
-      "not-signed-in"
+    if (signal?.aborted) throw cancelled();
+    throw new GithubSignInError(
+      `could not reach GitHub to sign in: ${error instanceof Error ? error.message : error}`,
+      "unreachable"
+    );
+  }
+  const body = await response.json().catch(() => null);
+  return { status: response.status, body: body ?? {} };
+}
+var oauthErrorText = (body, fallback) => typeof body.error_description === "string" && body.error_description ? body.error_description : typeof body.error === "string" && body.error ? body.error : fallback;
+async function runDeviceFlow(options2) {
+  const clientId = options2.clientId === void 0 ? githubClientId() : options2.clientId;
+  if (!clientId) {
+    throw new GithubSignInError(
+      "custom frizz.sh names are not available in this version of Frizz yet: its GitHub sign-in is not set up. A private frizz.sh name needs no account and works today.",
+      "not-configured"
     );
   }
-  const token = stdout.trim();
-  if (!token) {
-    throw new GithubIdentityError(
-      "the GitHub CLI returned no token \u2014 run `gh auth login` and try again",
-      "not-signed-in"
+  const fetchImpl = options2.fetchImpl ?? fetch;
+  const now = options2.now ?? Date.now;
+  const sleep = options2.sleep ?? abortableSleep;
+  const githubOrigin = (options2.githubOrigin ?? "https://github.com").replace(/\/$/, "");
+  const apiOrigin = (options2.apiOrigin ?? "https://api.github.com").replace(/\/$/, "");
+  const { signal } = options2;
+  const start = await postForm(fetchImpl, `${githubOrigin}/login/device/code`, { client_id: clientId }, signal);
+  const deviceCode = start.body.device_code;
+  const userCode = start.body.user_code;
+  if (start.status !== 200 || typeof deviceCode !== "string" || typeof userCode !== "string") {
+    throw new GithubSignInError(
+      `GitHub would not start a sign-in: ${oauthErrorText(start.body, `HTTP ${start.status}`)}`,
+      "failed"
+    );
+  }
+  const verificationUri = typeof start.body.verification_uri === "string" ? start.body.verification_uri : GITHUB_DEVICE_URL;
+  const expiresIn = typeof start.body.expires_in === "number" ? start.body.expires_in : 900;
+  let interval = typeof start.body.interval === "number" ? start.body.interval : 5;
+  const expiresAt = now() + expiresIn * 1e3;
+  options2.onPrompt({ userCode, verificationUri, expiresAt });
+  for (; ; ) {
+    await sleep(interval * 1e3, signal);
+    if (now() >= expiresAt) {
+      throw new GithubSignInError("the GitHub code expired before it was entered \u2014 try again", "expired");
+    }
+    const poll = await postForm(
+      fetchImpl,
+      `${githubOrigin}/login/oauth/access_token`,
+      { client_id: clientId, device_code: deviceCode, grant_type: "urn:ietf:params:oauth:grant-type:device_code" },
+      signal
     );
+    const error = poll.body.error;
+    if (error === "authorization_pending") continue;
+    if (error === "slow_down") {
+      interval = typeof poll.body.interval === "number" ? poll.body.interval : interval + 5;
+      continue;
+    }
+    if (error === "expired_token") {
+      throw new GithubSignInError("the GitHub code expired before it was entered \u2014 try again", "expired");
+    }
+    if (error === "access_denied") {
+      throw new GithubSignInError("the GitHub sign-in was declined, so no name was claimed", "denied");
+    }
+    const token = poll.body.access_token;
+    if (typeof error === "string" || typeof token !== "string" || !token) {
+      throw new GithubSignInError(`GitHub sign-in failed: ${oauthErrorText(poll.body, `HTTP ${poll.status}`)}`, "failed");
+    }
+    const scope = typeof poll.body.scope === "string" ? poll.body.scope.trim() : "";
+    if (scope) {
+      throw new GithubSignInError(
+        `GitHub granted this sign-in more access than a name needs (${scope}), so Frizz did not use it`,
+        "scoped"
+      );
+    }
+    return { token, login: await readLogin(fetchImpl, apiOrigin, token) };
   }
-  return token;
 }
-async function githubLogin() {
+async function readLogin(fetchImpl, apiOrigin, token) {
   try {
-    const { stdout } = await run("gh", ["api", "user", "--jq", ".login"], { encoding: "utf8" });
-    return stdout.trim() || null;
+    const response = await fetchImpl(`${apiOrigin}/user`, {
+      headers: { authorization: `Bearer ${token}`, accept: "application/vnd.github+json", "user-agent": "frizz" }
+    });
+    if (!response.ok) return null;
+    const user = await response.json();
+    return typeof user.login === "string" ? user.login : null;
   } catch {
     return null;
   }
 }
-var githubCli = { accessToken: githubAccessToken, login: githubLogin };
+function deviceCodeMessage(prompt) {
+  return `to confirm your GitHub account, open ${prompt.verificationUri} and enter ${prompt.userCode} (Frizz asks GitHub for no permissions)`;
+}
+function githubDeviceFlow(options2 = {}) {
+  const onPrompt = options2.onPrompt ?? ((prompt) => console.log(`  ${deviceCodeMessage(prompt)}`));
+  return { authorize: () => runDeviceFlow({ onPrompt, ...options2.signal ? { signal: options2.signal } : {} }) };
+}
 
 // src/registrar-client.ts
 init_src();
@@ -23596,8 +23887,9 @@ function registrarOrigin(env = process.env) {
 }
 var ADVICE = {
   "name-taken": "that name is already taken \u2014 try another",
-  "github-required": "claiming a name needs a signed-in GitHub CLI \u2014 run `gh auth login` and try again",
-  "github-rejected": "GitHub did not recognise that login \u2014 run `gh auth login` and try again",
+  "github-required": "claiming a custom name needs a GitHub sign-in \u2014 try again and enter the code GitHub shows",
+  "github-rejected": "GitHub did not recognise that sign-in \u2014 try again",
+  "github-token-scoped": "the registrar accepts only a GitHub sign-in that grants no permissions \u2014 update Frizz and try again",
   "github-too-new": "that GitHub account is too new to claim a name",
   "one-name-per-account": "that GitHub account already holds a name \u2014 release it first",
   "one-name-per-key": "this machine already holds a name \u2014 release it first",
@@ -23674,11 +23966,11 @@ function serveRelayRequest(frame, options2) {
   const target2 = new URL(frame.url);
   const local = new URL(options2.origin);
   const publicUrl = new URL(options2.publicOrigin);
-  let cancelled = false;
+  let cancelled2 = false;
   let abort;
   const done = new Promise((resolve7) => {
     const send = (upFrame) => {
-      if (!cancelled) options2.send(upFrame);
+      if (!cancelled2) options2.send(upFrame);
     };
     const headers = {};
     for (const [name, value] of stripHopByHop(frame.headers)) headers[name] = value;
@@ -23772,8 +24064,8 @@ function serveRelayRequest(frame, options2) {
   return {
     done,
     cancel: () => {
-      if (cancelled) return;
-      cancelled = true;
+      if (cancelled2) return;
+      cancelled2 = true;
       abort?.();
     }
   };
@@ -24053,7 +24345,7 @@ function zoneClaimLabel(hostname) {
   const label = hostname.slice(0, -suffix.length);
   return label.length > 0 && !label.includes(".") ? label : null;
 }
-async function reconcileCloudConfig(config, port, home = homedir4(), onNotice, origin, github = githubCli) {
+async function reconcileCloudConfig(config, port, home = homedir4(), onNotice, origin, github = githubDeviceFlow(onNotice ? { onPrompt: (prompt) => onNotice(deviceCodeMessage(prompt)) } : {})) {
   if (isRelayConfig(config)) return config;
   const label = config.claim ?? zoneClaimLabel(config.hostname);
   if (!label) return config;
@@ -24067,7 +24359,7 @@ function cloudConfigPath(home = homedir4()) {
 }
 function readCloudConfig(home = homedir4()) {
   try {
-    const parsed = JSON.parse(readFileSync4(cloudConfigPath(home), "utf8"));
+    const parsed = JSON.parse(readFileSync3(cloudConfigPath(home), "utf8"));
     if (typeof parsed.hostname !== "string" || !parsed.hostname) return null;
     const claimed = typeof parsed.claim === "string" && parsed.claim.length > 0;
     const named = typeof parsed.tunnel === "string" && parsed.tunnel.length > 0;
@@ -24090,7 +24382,7 @@ function tunnelTokenPath(home = homedir4()) {
 }
 function readTunnelToken(home = homedir4()) {
   try {
-    const token = readFileSync4(tunnelTokenPath(home), "utf8").trim();
+    const token = readFileSync3(tunnelTokenPath(home), "utf8").trim();
     return token.length > 0 ? token : null;
   } catch {
     return null;
@@ -24128,7 +24420,7 @@ async function promptForTunnelName(hostname, fallback) {
     rl.close();
   }
 }
-async function establishCloudConfig(answer, port, home = homedir4(), origin, github = githubCli) {
+async function establishCloudConfig(answer, port, home = homedir4(), origin, github = githubDeviceFlow()) {
   if (answer.includes(".")) {
     const hostname = normalizeHostname(answer);
     const tunnel = await promptForTunnelName(hostname, hostname.split(".")[0]);
@@ -24147,9 +24439,9 @@ async function establishCloudConfig(answer, port, home = homedir4(), origin, git
   const identity = await loadOrCreateClaimIdentity(home);
   let token;
   if (!anonymous) {
-    token = await github.accessToken();
-    const login = await github.login();
-    if (login) console.log(`  claiming ${name}.frizz.sh for GitHub user ${login}`);
+    const authorization = await github.authorize();
+    token = authorization.token;
+    if (authorization.login) console.log(`  claiming ${name}.frizz.sh for GitHub user ${authorization.login}`);
   } else {
     console.log("  claiming a private name on frizz.sh \u2014 no account needed");
   }
@@ -24192,7 +24484,7 @@ async function resolveRunToken(config, port, home = homedir4(), onWarning, origi
 function resolveTunnelConfigPath(config, home = homedir4()) {
   if (config.config) return config.config;
   const candidate = join5(home, ".cloudflared", "frizz.yml");
-  return existsSync2(candidate) ? candidate : null;
+  return existsSync3(candidate) ? candidate : null;
 }
 async function startRelay(config, port, home = homedir4(), onStatus) {
   const identity = await loadOrCreateClaimIdentity(home);
@@ -24322,29 +24614,23 @@ function createRemoteController(options2) {
 }
 
 // src/remote-detect.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 var PROBE_TIMEOUT_MS = 4e3;
-function run2(command, args2) {
+function run(command, args2) {
   return new Promise((resolve7) => {
-    execFile3(command, args2, { encoding: "utf8", timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
+    execFile2(command, args2, { encoding: "utf8", timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
       resolve7(error ? null : stdout);
     });
   });
 }
-async function probeGithub() {
-  const version = await run2("gh", ["--version"]);
-  if (version === null) return { login: null, installed: false };
-  const login = await run2("gh", ["api", "user", "--jq", ".login"]);
-  return { login: login?.trim() || null, installed: true };
-}
 async function probeCloudflared() {
-  const out = await run2("cloudflared", ["--version"]);
+  const out = await run("cloudflared", ["--version"]);
   const version = out?.match(/\d+\.\d+\.\d+/)?.[0] ?? (out ? out.trim() : null);
   return { version };
 }
 async function probeTailscale() {
-  const out = await run2("tailscale", ["status", "--json"]);
-  if (out === null) return { installed: await run2("tailscale", ["--version"]) !== null, dnsName: null };
+  const out = await run("tailscale", ["status", "--json"]);
+  if (out === null) return { installed: await run("tailscale", ["--version"]) !== null, dnsName: null };
   try {
     const status = JSON.parse(out);
     const dnsName = status.Self?.DNSName?.replace(/\.$/, "") || null;
@@ -24358,7 +24644,7 @@ async function probeTailscale() {
 init_src();
 var CHOICES = [
   { kind: "private", title: "Private name", blurb: "an unguessable name on frizz.sh \u2014 no account, nothing to install" },
-  { kind: "frizz", title: "Custom name", blurb: "<name>.frizz.sh of your choosing; needs the GitHub CLI" },
+  { kind: "frizz", title: "Custom name", blurb: "<name>.frizz.sh of your choosing; needs a GitHub account" },
   { kind: "cloudflare", title: "Cloudflare Tunnel", blurb: "a domain you own on Cloudflare; cloudflared on this machine" },
   { kind: "tailscale", title: "Tailscale", blurb: "your tailnet; tailscale serve does the TLS" },
   { kind: "other", title: "Something else", blurb: "any proxy or tunnel you run \u2014 tell Frizz its address" },
@@ -24395,7 +24681,6 @@ function createRemotePane(options2) {
   const output = options2.output ?? process.stdout;
   let open = false;
   let screen = { name: "menu", index: 0 };
-  let github = null;
   let cloudflared = null;
   let tailscale = null;
   const write = (lines) => {
@@ -24440,6 +24725,10 @@ function createRemotePane(options2) {
       return;
     }
     if (s.name === "busy") {
+      if (s.detail) {
+        write([s.message, "", ...s.detail, "", `${DIM}waiting for GitHub\u2026 \xB7 esc cancel${RESET2}`]);
+        return;
+      }
       write([s.message, "", `${DIM}working\u2026${RESET2}`]);
       return;
     }
@@ -24469,7 +24758,6 @@ function createRemotePane(options2) {
   };
   const formHead = (kind) => {
     if (kind === "frizz") {
-      const gh = github === "pending" || github === null ? `${DIM}GitHub CLI   checking\u2026${RESET2}` : !github.installed ? "GitHub CLI   not installed \u2014 see https://cli.github.com, then `gh auth login`" : github.login ? check(true, `GitHub CLI   signed in as ${github.login}`) : "GitHub CLI   not signed in \u2014 run `gh auth login` in another terminal";
       return [
         "Custom frizz.sh name",
         "",
@@ -24478,7 +24766,9 @@ function createRemotePane(options2) {
         ),
         ...options2.sandbox ? ["", ...wrap("This is a sandbox, but a claim is real: it binds this machine's one name to your account, and your real board keeps it. Only the setup saved here is thrown away.")] : [],
         "",
-        gh
+        ...wrap(
+          "When you claim, Frizz shows a code to enter at github.com/login/device. The sign-in grants Frizz no permissions: it only tells the registrar which account you are."
+        )
       ];
     }
     if (kind === "cloudflare") {
@@ -24528,14 +24818,6 @@ function createRemotePane(options2) {
     const same = kindOf(current) === kind ? current : null;
     let fields;
     if (kind === "frizz") {
-      github = "pending";
-      void options2.probes.github().then((result) => {
-        github = result;
-        if (screen.name === "form" && screen.kind === "frizz" && !screen.fields[0].value && result.login) {
-          screen.fields[0].placeholder = result.login;
-        }
-        paint();
-      });
       fields = [{ label: "Name", value: same?.claim ?? "" }];
     } else if (kind === "cloudflare") {
       cloudflared = "pending";
@@ -24574,7 +24856,24 @@ function createRemotePane(options2) {
         if (!name) throw new Error("a name is needed");
         screen = { name: "busy", message: `claiming ${name}.frizz.sh\u2026` };
         paint();
-        next = await options2.claim(name);
+        const abort = new AbortController();
+        next = await options2.claim(name, {
+          signal: abort.signal,
+          onDeviceCode: (prompt) => {
+            screen = {
+              name: "busy",
+              message: `Confirm your GitHub account to claim ${name}.frizz.sh`,
+              detail: [
+                `Open      ${prompt.verificationUri}`,
+                `Enter     ${prompt.userCode}`,
+                "",
+                ...wrap("on this or any other device. Frizz asks GitHub for no permissions; the sign-in only names your account to the registrar.")
+              ],
+              cancel: () => abort.abort()
+            };
+            paint();
+          }
+        });
         justClaimed = true;
       } else if (form.kind === "cloudflare") {
         const hostname = normalizeHostname(valueOf(form.fields[0]));
@@ -24600,7 +24899,8 @@ function createRemotePane(options2) {
     screen = { name: "busy", message: "claiming a private name on frizz.sh\u2026" };
     paint();
     try {
-      const next = await options2.claim("");
+      const next = await options2.claim("", { signal: new AbortController().signal, onDeviceCode: () => {
+      } });
       screen = { name: "busy", message: `serving ${next.hostname}\u2026` };
       paint();
       await options2.apply(next, { justClaimed: true });
@@ -24635,7 +24935,13 @@ function createRemotePane(options2) {
     },
     key(key) {
       const s = screen;
-      if (s.name === "busy") return "keep";
+      if (s.name === "busy") {
+        if (key === ESC && s.cancel) {
+          s.cancel();
+          s.cancel = void 0;
+        }
+        return "keep";
+      }
       if (s.name === "done") return "close";
       if (s.name === "error") {
         screen = s.back;
@@ -25033,7 +25339,7 @@ init_boot_progress();
 init_frizz_paths();
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { createServer as createServer2 } from "node:net";
-import { existsSync as existsSync5, mkdirSync as mkdirSync10, mkdtempSync, readdirSync as readdirSync3, readFileSync as readFileSync11, realpathSync as realpathSync5, rmSync as rmSync8, symlinkSync as symlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync10, mkdtempSync, readdirSync as readdirSync3, readFileSync as readFileSync10, realpathSync as realpathSync5, rmSync as rmSync8, symlinkSync as symlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir10, tmpdir as tmpdir2 } from "node:os";
 import { basename as basename5, dirname as dirname10, join as join13, resolve as resolve4 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
@@ -25187,21 +25493,21 @@ function shareCredentials(realHome, home, realEnv, sandboxEnv) {
   mkdirSync10(dirname10(realKey), { recursive: true });
   mkdirSync10(dirname10(sandboxKey), { recursive: true });
   link(realKey, sandboxKey);
-  if (existsSync5(join13(realHome, ".config", "gh"))) {
+  if (existsSync6(join13(realHome, ".config", "gh"))) {
     mkdirSync10(join13(home, ".config"), { recursive: true });
     link(join13(realHome, ".config", "gh"), join13(home, ".config", "gh"));
   }
   const cloudflared = join13(realHome, ".cloudflared");
-  if (existsSync5(cloudflared)) {
+  if (existsSync6(cloudflared)) {
     mkdirSync10(join13(home, ".cloudflared"), { recursive: true });
     for (const entry of readdirSync3(cloudflared)) {
       if (entry === "cert.pem" || entry.endsWith(".json")) link(join13(cloudflared, entry), join13(home, ".cloudflared", entry));
     }
   }
   for (const entry of [".claude", ".claude.json", ".codex"]) {
-    if (existsSync5(join13(realHome, entry))) link(join13(realHome, entry), join13(home, entry));
+    if (existsSync6(join13(realHome, entry))) link(join13(realHome, entry), join13(home, entry));
   }
-  if (process.platform === "darwin" && existsSync5(join13(realHome, "Library", "Keychains"))) {
+  if (process.platform === "darwin" && existsSync6(join13(realHome, "Library", "Keychains"))) {
     mkdirSync10(join13(home, "Library"), { recursive: true });
     link(join13(realHome, "Library", "Keychains"), join13(home, "Library", "Keychains"));
   }
@@ -25294,7 +25600,7 @@ function workspaceFromLaunchTarget(target2, env = process.env) {
 function parseStatusFile(path, authoritative, expected2, adapter = defaultProcessPlatformAdapter) {
   try {
     const value = JSON.parse(
-      readFileSync11(path, "utf8")
+      readFileSync10(path, "utf8")
     );
     if (!Number.isInteger(value.pid) || value.pid <= 0 || !Number.isInteger(value.port) || value.port < 1 || value.port > 65535)
       return null;
@@ -25336,7 +25642,7 @@ function liveWorkspaceOwner(stateDir, expected2, adapter = defaultProcessPlatfor
 function readPreferredPort(stateDir) {
   try {
     const value = JSON.parse(
-      readFileSync11(join13(stateDir, "launcher.json"), "utf8")
+      readFileSync10(join13(stateDir, "launcher.json"), "utf8")
     );
     return Number.isInteger(value.port) && value.port > 0 && value.port <= 65535 ? value.port : void 0;
   } catch {
@@ -25572,15 +25878,16 @@ init_project_launch();
 
 // packages/server/src/dev-supervisor.ts
 init_project_launch();
+init_restart_supervisor();
+init_logging();
+init_boot_progress();
 import { fork } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync12 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync11, readFileSync as readFileSync11 } from "node:fs";
 import { createServer as createNetServer } from "node:net";
 import { basename as basename6, dirname as dirname11, extname as extname2, isAbsolute as isAbsolute4, relative as relative2, resolve as resolve5, sep as sep3 } from "node:path";
 import { fileURLToPath } from "node:url";
 import watcher from "@parcel/watcher";
-init_logging();
-init_boot_progress();
 var DEV_RESTART_DEBOUNCE_MS = 180;
 var DEV_CRASH_STABLE_MS = 5e3;
 var DEV_CRASH_RETRY_BASE_MS = 500;
@@ -25681,8 +25988,8 @@ function isWithin(path, root) {
   const rel = relative2(root, path);
   return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute4(rel);
 }
-function ignoredDevPath(path) {
-  const parts = resolve5(path).split(sep3);
+function ignoredDevPath(relPath) {
+  const parts = relPath.split(sep3);
   const name = parts.at(-1) ?? "";
   return parts.some((part) => GENERATED_DIRS.has(part) || part === "fixtures" || part.endsWith(".fixtures")) || /\.(?:test|spec)\.[^.]+$/.test(name) || name.includes(".golden.");
 }
@@ -25690,9 +25997,9 @@ function classifyDevChange(path, roots = defaultDevWatchRoots()) {
   const absolute = resolve5(path);
   const root = roots.find((candidate) => isWithin(absolute, resolve5(candidate)));
   if (!root) return null;
-  if (ignoredDevPath(absolute)) return null;
-  const name = basename6(absolute);
   const relToWorkspace = relative2(resolve5(root), absolute);
+  if (ignoredDevPath(relToWorkspace)) return null;
+  const name = basename6(absolute);
   const parts = relToWorkspace.split(sep3);
   const packageName = parts[0] === "packages" ? parts[1] : void 0;
   if (name === "package.json" && parts.length === 3 && packageName && CHILD_PACKAGE_METADATA.has(packageName)) {
@@ -25718,7 +26025,7 @@ function devConfigSyntaxError(path) {
   if (name !== "package.json" && !isTsconfig) return null;
   let text;
   try {
-    text = readFileSync12(path, "utf8");
+    text = readFileSync11(path, "utf8");
   } catch (err) {
     return `${name}: ${err instanceof Error ? err.message : err}`;
   }
@@ -25896,6 +26203,7 @@ var Supervisor = class {
       publicOrigin: opts.publicOrigin,
       onCodeConsumed: opts.onCodeConsumed,
       sessionKey: opts.sessionKey,
+      rotateSessionKey: opts.rotateSessionKey,
       sessionDirectory: opts.sessionDirectory,
       childPort: () => this.childPort,
       restart: () => this.restartFromBrowser(),
@@ -25941,7 +26249,7 @@ var Supervisor = class {
       await this.publicProxy.listen();
       if (this.watchEnabled) {
         const settled = await Promise.allSettled(
-          this.roots.filter(existsSync6).map((root) => this.watchSubscribe(root, (err, events) => this.onWatch(err, events), {
+          this.roots.filter(existsSync7).map((root) => this.watchSubscribe(root, (err, events) => this.onWatch(err, events), {
             ignore: DEV_WATCH_IGNORE
           }))
         );
@@ -26000,7 +26308,7 @@ var Supervisor = class {
     }
     this.reloadLauncher ||= reloadLauncher;
     if (this.debounce) clearTimeout(this.debounce);
-    const run3 = () => {
+    const run2 = () => {
       this.debounce = null;
       const scope = this.reloadLauncher ? "control plane + launcher" : "control plane";
       this.logLine(
@@ -26009,8 +26317,8 @@ var Supervisor = class {
       this.writeStatus("restarting", reason);
       void this.restart();
     };
-    if (immediate) run3();
-    else this.debounce = setTimeout(run3, delayMs);
+    if (immediate) run2();
+    else this.debounce = setTimeout(run2, delayMs);
   }
   async restart() {
     if (this.updateChildRunning) {
@@ -26602,13 +26910,13 @@ async function startDevSupervisor(opts) {
 }
 
 // src/production-update.ts
-import { execFile as execFile4, spawn as spawn3 } from "node:child_process";
-import { existsSync as existsSync7 } from "node:fs";
+import { execFile as execFile3, spawn as spawn3 } from "node:child_process";
+import { existsSync as existsSync8 } from "node:fs";
 import { dirname as dirname12, isAbsolute as isAbsolute5, join as join14 } from "node:path";
 init_src();
 var PRODUCTION_REEXEC_FLAG = "--_frizz-production-reexec";
 var PRODUCTION_PRINT_LAUNCHER_FLAG = "--_frizz-print-launcher";
-function resolveNpmInvocation(env = process.env, execPath = process.execPath, exists = existsSync7, platform = process.platform) {
+function resolveNpmInvocation(env = process.env, execPath = process.execPath, exists = existsSync8, platform = process.platform) {
   const nodeDir = dirname12(execPath);
   const candidates = [
     // pnpm, yarn and bun set `npm_execpath` too, to their own entry file. Their directories hold no
@@ -26706,7 +27014,7 @@ function createNpmRegistryReleaseAdapter(options2 = {}) {
         } catch (error) {
           return reject(error);
         }
-        execFile4(
+        execFile3(
           npm.command,
           [...npm.prefixArgs, "view", `${packageName}@latest`, "version", "--json"],
           { encoding: "utf8", windowsHide: true, timeout: viewTimeoutMs, killSignal: NPM_KILL_SIGNAL },
@@ -26774,15 +27082,15 @@ var npmRegistryReleaseAdapter = createNpmRegistryReleaseAdapter();
 
 // src/server-release.ts
 init_frizz_paths();
-import { execFile as execFile5 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { createHash as createHash4, randomUUID as randomUUID6 } from "node:crypto";
 import {
   closeSync as closeSync5,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   fsyncSync as fsyncSync5,
   mkdirSync as mkdirSync12,
   openSync as openSync6,
-  readFileSync as readFileSync13,
+  readFileSync as readFileSync12,
   realpathSync as realpathSync6,
   renameSync as renameSync6,
   rmSync as rmSync9,
@@ -26808,7 +27116,7 @@ function assertSpec(spec, compatibility = CURRENT_COMPATIBILITY) {
     throw new Error("this Frizz server requires a newer launcher or a data migration; restart with a compatible Frizz release");
 }
 function readJson(path) {
-  return JSON.parse(readFileSync13(path, "utf8"));
+  return JSON.parse(readFileSync12(path, "utf8"));
 }
 function record(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("invalid Frizz server manifest");
@@ -26873,12 +27181,12 @@ function resolveNpmCli(env = process.env, executable = process.execPath) {
     } catch {
     }
   }
-  const found = candidates.find((path) => existsSync8(path) && statSync5(path).isFile());
+  const found = candidates.find((path) => existsSync9(path) && statSync5(path).isFile());
   if (!found) throw new Error("npm was not found beside Node or on PATH; install Node with npm to install Frizz server releases");
   return resolve6(found);
 }
 function npmServerPackageInstaller(env = process.env) {
-  const run3 = (args2, cwd) => new Promise((resolveOutput, reject) => {
+  const run2 = (args2, cwd) => new Promise((resolveOutput, reject) => {
     let cli;
     try {
       cli = resolveNpmCli(env);
@@ -26886,7 +27194,7 @@ function npmServerPackageInstaller(env = process.env) {
       reject(error);
       return;
     }
-    execFile5(process.execPath, [cli, ...args2], {
+    execFile4(process.execPath, [cli, ...args2], {
       env,
       cwd,
       encoding: "utf8",
@@ -26904,7 +27212,7 @@ function npmServerPackageInstaller(env = process.env) {
   return {
     async install(prefix, spec) {
       assertSpec(spec);
-      await run3([
+      await run2([
         "install",
         "--prefix",
         prefix,
@@ -26922,7 +27230,7 @@ function npmServerPackageInstaller(env = process.env) {
     },
     async latestVersion(packageName) {
       if (!PACKAGE.test(packageName)) throw new Error("invalid Frizz server package name");
-      const parsed = JSON.parse(await run3(["view", `${packageName}@latest`, "version", "--json"]));
+      const parsed = JSON.parse(await run2(["view", `${packageName}@latest`, "version", "--json"]));
       const version = Array.isArray(parsed) && parsed.length === 1 ? parsed[0] : parsed;
       if (typeof version !== "string" || !VERSION.test(version)) throw new Error("npm returned an invalid Frizz server version");
       return version;
@@ -26975,7 +27283,7 @@ var ServerReleaseStore = class {
     return join15(this.generations, id, "node_modules", this.spec.package);
   }
   readCompatibilityMarker() {
-    if (!existsSync8(this.compatibilityMarker)) return void 0;
+    if (!existsSync9(this.compatibilityMarker)) return void 0;
     try {
       const marker = record(readJson(this.compatibilityMarker));
       const compatibility = { protocol: marker.protocol, dataEpoch: marker.dataEpoch };
@@ -27012,7 +27320,7 @@ var ServerReleaseStore = class {
   }
   async load() {
     this.assertMarkerIsSupported();
-    if (!existsSync8(this.selection)) return this.prepareInitial(this.spec.version);
+    if (!existsSync9(this.selection)) return this.prepareInitial(this.spec.version);
     const selected = record(readJson(this.selection));
     const spec = selected;
     assertSpecShape(spec);
@@ -27024,7 +27332,7 @@ var ServerReleaseStore = class {
     if (spec.dataEpoch > this.compatibility.dataEpoch)
       throw new Error("this Frizz server requires a newer launcher or a data migration; restart with a compatible Frizz release");
     const root = this.packageRoot(selected.id);
-    const generation = !existsSync8(root) ? await this.prepare(spec.version) : validateServerGeneration(root, spec, selected.id, this.compatibility);
+    const generation = !existsSync9(root) ? await this.prepare(spec.version) : validateServerGeneration(root, spec, selected.id, this.compatibility);
     this.markCompatibilityBeforeLaunch();
     return generation;
   }
@@ -27059,7 +27367,7 @@ var ServerReleaseStore = class {
 init_frizz_paths();
 init_project_launch();
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { mkdirSync as mkdirSync13, readFileSync as readFileSync14, realpathSync as realpathSync7 } from "node:fs";
+import { mkdirSync as mkdirSync13, readFileSync as readFileSync13, realpathSync as realpathSync7 } from "node:fs";
 import { join as join16 } from "node:path";
 var STABLE_SERVER_OWNER_NAME = "frizz-server";
 var STABLE_SERVER_OWNER_PROJECT_ID = "c1fd5810-0f8a-4c1d-91a0-6d7445d28e5a";
@@ -27082,7 +27390,7 @@ function matchingTarget(owner, target2) {
 }
 function readAddress(path) {
   try {
-    const value = JSON.parse(readFileSync14(path, "utf8"));
+    const value = JSON.parse(readFileSync13(path, "utf8"));
     if (value.version !== 1 || typeof value.ownerToken !== "string" || !UUID_RE2.test(value.ownerToken) || typeof value.publisherToken !== "string" || !UUID_RE2.test(value.publisherToken) || typeof value.pid !== "number" || !Number.isInteger(value.pid) || value.pid <= 0 || typeof value.processStart !== "string" || value.processStart.length === 0 || typeof value.port !== "number" || !Number.isInteger(value.port) || value.port < 1 || value.port > 65535) return null;
     return value;
   } catch {
@@ -27203,7 +27511,7 @@ init_project_identity();
 var PACKAGE_NAME = process.env.FRIZZ_REGISTRY_PACKAGE ?? "frizz";
 function resolvePackageVersion() {
   try {
-    const manifest = JSON.parse(readFileSync15(join17(import.meta.dirname, "..", "package.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync14(join17(import.meta.dirname, "..", "package.json"), "utf8"));
     if (typeof manifest.version === "string" && manifest.version.trim()) return manifest.version.trim();
   } catch {
   }
@@ -27270,6 +27578,7 @@ var paneHost = null;
 var globalInstall = process.env[GLOBAL_INSTALL_ENV] === "1" || isGlobalInstall(import.meta.dirname);
 var accessPane = null;
 var activeAccessLink = null;
+var sessionNotice = null;
 var serverOwner;
 process.on("exit", () => {
   if (serverOwner) releaseStableServerOwner(serverOwner);
@@ -27434,6 +27743,7 @@ async function openOrPrint(port, reused, path = "") {
   const publicOrigin = reused ? void 0 : remote?.origin();
   const warnings = [];
   if (sandbox) warnings.push(`Sandbox: everything here is throwaway (${sandbox.home}) and is deleted when this terminal closes.`);
+  if (sessionNotice && !reused) warnings.push(sessionNotice);
   if (!readout) {
     console.log(`${reused ? "reusing" : "started"} Frizz for ${workspace.root}`);
     console.log(url);
@@ -27477,7 +27787,7 @@ async function runSupervisor(port, token, onPrepared = () => {
     owner.token
   );
   const spec = serverReleaseSpec(
-    JSON.parse(readFileSync15(join17(import.meta.dirname, "..", "package.json"), "utf8")),
+    JSON.parse(readFileSync14(join17(import.meta.dirname, "..", "package.json"), "utf8")),
     process.env.FRIZZ_SERVER_PACKAGE
   );
   const installer = npmServerPackageInstaller(env);
@@ -27502,17 +27812,19 @@ async function runSupervisor(port, token, onPrepared = () => {
   void refreshUpdateAvailable();
   const updateAvailablePoll = setInterval(() => void refreshUpdateAvailable(), 30 * 60 * 1e3);
   updateAvailablePoll.unref();
+  const sessions = loadSessionState(workspace.stateDir);
+  const epochRecord = sessionEpochLogLine(sessions.advance, sessions.signedOut);
+  if (epochRecord) logger.warn("launcher", epochRecord);
+  sessionNotice = sessionEpochNotice(sessions.signedOut);
   const supervisor = await startDevSupervisor({
     port,
     host: LOOPBACK_BIND_HOST,
     allowedHosts: [],
     // A spent code repaints the open QR pane as stale, so nobody photographs a dead link.
     onCodeConsumed: () => accessPane?.markConsumed(),
-    // Persisted beside the project's other state, so a restart does not sign every device out.
-    // Always, not only when public: the origin can be switched on later (press R), and a phone signed
-    // in through one name stays signed in through the next.
-    sessionKey: loadOrCreateSessionKey(workspace.stateDir),
-    sessionDirectory: fileSessionDirectory(workspace.stateDir),
+    sessionKey: sessions.key,
+    rotateSessionKey: sessions.rotateKey,
+    sessionDirectory: sessions.directory,
     cwd: workspace.root,
     stateDir: workspace.stateDir,
     launchTarget: target,
@@ -27578,9 +27890,10 @@ async function runSupervisor(port, token, onPrepared = () => {
     port,
     current: () => remote?.current() ?? null,
     apply: (next, applyOptions) => remote.apply(next, applyOptions),
-    claim: (name) => establishCloudConfig(name, port),
+    // The pane shows the GitHub device code itself: a console line would land under its alternate screen.
+    claim: (name, signIn) => establishCloudConfig(name, port, void 0, void 0, githubDeviceFlow({ onPrompt: signIn.onDeviceCode, signal: signIn.signal })),
     issueLink: () => supervisor.issueAccessLink(),
-    probes: { github: probeGithub, cloudflared: probeCloudflared, tailscale: probeTailscale },
+    probes: { cloudflared: probeCloudflared, tailscale: probeTailscale },
     onChanged: (config) => logger.info("remote", config ? `reached at https://${config.hostname}` : "loopback only"),
     sandbox: sandbox !== null
   });