frizz 0.13.8 → 0.13.10

package/dist/frizz.js

@@ -450,6 +450,15 @@ var init_access_codes = __esm({
         const id = _AccessStore.idOf(payload);
         return !(id && this.sessions.isRevoked(id));
       }
+      /**
+       * Which device this session belongs to, for the audit trail: its record id (what `frizz --sessions`
+       * lists and `--sign-out` takes), `"legacy"` for a session minted before ids existed, or null when it
+       * does not verify. Never the session itself — the id is the one part of it that is not a credential.
+       */
+      sessionIdOf(session) {
+        if (!session || !this.verifySession(session)) return null;
+        return _AccessStore.idOf(session.slice(0, session.lastIndexOf("."))) ?? "legacy";
+      }
       /**
        * Sign out the device HOLDING this session — the "Sign out this device" row, not `--sign-out`.
        *
@@ -846,6 +855,295 @@ code{font-family:var(--mono);font-size:.92em;padding:.1em .35em;border-radius:4p
   }
 });
 
+// packages/server/src/frizz-paths.ts
+import { existsSync as existsSync2 } from "node:fs";
+import { homedir as homedir2, tmpdir } from "node:os";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative, resolve, sep as sep2 } from "node:path";
+function legacyFrizzRoot(home = homedir2()) {
+  return join3(home, LEGACY_DIR_NAME);
+}
+function isLegacyStateRoot(root, exists) {
+  if (!exists(root)) return false;
+  if (!exists(join3(root, ".id")) && !exists(join3(root, ".gitignore"))) return true;
+  return exists(join3(root, "projects")) || exists(join3(root, "registry.json"));
+}
+function xdg(env, name) {
+  const value = env[name];
+  return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
+}
+function insideHome(child, home) {
+  const norm = (value) => value.replace(/[\\/]+$/u, "").replaceAll("\\", "/").toLowerCase();
+  const parent = norm(home);
+  const inner = norm(child);
+  return inner === parent || inner.startsWith(`${parent}/`);
+}
+function windowsRoots(env, home) {
+  const local = env.LOCALAPPDATA && insideHome(env.LOCALAPPDATA, home) ? env.LOCALAPPDATA : join3(home, "AppData", "Local");
+  const base = join3(local, "Frizz");
+  return {
+    data: join3(base, "Data"),
+    state: join3(base, "State"),
+    cache: join3(base, "Cache")
+  };
+}
+function darwinRoots(home) {
+  const support = join3(home, "Library", "Application Support", "Frizz");
+  return {
+    data: support,
+    // macOS has no state directory concept; Application Support is where this belongs, and the log
+    // files themselves already live under each project's own directory.
+    state: support,
+    cache: join3(home, "Library", "Caches", "Frizz")
+  };
+}
+function xdgRoots(env, home) {
+  return {
+    data: join3(xdg(env, "XDG_DATA_HOME") ?? join3(home, ".local", "share"), "frizz"),
+    state: join3(xdg(env, "XDG_STATE_HOME") ?? join3(home, ".local", "state"), "frizz"),
+    cache: join3(xdg(env, "XDG_CACHE_HOME") ?? join3(home, ".cache"), "frizz")
+  };
+}
+function frizzPaths(options2 = {}) {
+  const env = options2.env ?? process.env;
+  const platform = options2.platform ?? process.platform;
+  const home = options2.home ?? homedir2();
+  const exists = options2.exists ?? existsSync2;
+  const legacyRoot = legacyFrizzRoot(home);
+  if (isLegacyStateRoot(legacyRoot, exists)) {
+    return { data: legacyRoot, state: legacyRoot, cache: legacyRoot, legacy: true };
+  }
+  const explicit = {
+    data: xdg(env, "XDG_DATA_HOME"),
+    state: xdg(env, "XDG_STATE_HOME"),
+    cache: xdg(env, "XDG_CACHE_HOME")
+  };
+  const platformRoots = platform === "win32" ? windowsRoots(env, home) : platform === "darwin" ? darwinRoots(home) : xdgRoots(env, home);
+  return {
+    data: explicit.data ? join3(explicit.data, "frizz") : platformRoots.data,
+    state: explicit.state ? join3(explicit.state, "frizz") : platformRoots.state,
+    cache: explicit.cache ? join3(explicit.cache, "frizz") : platformRoots.cache,
+    legacy: false
+  };
+}
+function frizzRoots() {
+  return cached ??= frizzPaths();
+}
+function projectStateDir(projectId, home) {
+  return join3(home ? frizzPaths({ home }).data : frizzRoots().data, "projects", projectId);
+}
+var LEGACY_DIR_NAME, cached;
+var init_frizz_paths = __esm({
+  "packages/server/src/frizz-paths.ts"() {
+    "use strict";
+    LEGACY_DIR_NAME = ".frizz";
+  }
+});
+
+// packages/server/src/logging.ts
+import {
+  appendFileSync,
+  mkdirSync as mkdirSync2,
+  openSync,
+  readdirSync,
+  rmSync,
+  statSync as statSync2,
+  symlinkSync,
+  writeFileSync as writeFileSync2,
+  writeSync
+} from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join4 } from "node:path";
+function defaultLogRoot(stateDir, home = homedir3()) {
+  return stateDir ? join4(stateDir, "logs") : join4(frizzPaths({ home }).state, "logs");
+}
+function runStamp(at) {
+  const pad = (value) => String(value).padStart(2, "0");
+  return `${at.getFullYear()}-${pad(at.getMonth() + 1)}-${pad(at.getDate())}T${pad(at.getHours())}-${pad(at.getMinutes())}-${pad(at.getSeconds())}`;
+}
+function runLogPath(stateDir, at = /* @__PURE__ */ new Date(), pid = process.pid, home = homedir3(), env = process.env) {
+  const name = `frizz-${runStamp(at)}-${pid}.log`;
+  const override = env[LOG_PATH_ENV]?.trim();
+  if (override) return override.endsWith(".log") ? override : join4(override, name);
+  return join4(defaultLogRoot(stateDir, home), name);
+}
+function latestLogPath(dir) {
+  return join4(dir, "latest.log");
+}
+function linkLatest(dir, target2) {
+  const link = latestLogPath(dir);
+  try {
+    rmSync(link, { force: true });
+    symlinkSync(target2, link);
+  } catch {
+    try {
+      writeFileSync2(link, `${target2}
+`, { mode: 384 });
+    } catch {
+    }
+  }
+}
+function pruneRunLogs(dir, keep = RETAINED_RUNS, days = RETAINED_DAYS, now = Date.now()) {
+  let entries;
+  try {
+    entries = readdirSync(dir).filter((name) => name.endsWith(".log") && name !== "latest.log");
+  } catch {
+    return;
+  }
+  const dated = entries.map((name) => {
+    try {
+      return { name, at: statSync2(join4(dir, name)).mtimeMs };
+    } catch {
+      return { name, at: 0 };
+    }
+  }).sort((a, b) => b.at - a.at);
+  const cutoff = now - days * 24 * 60 * 60 * 1e3;
+  const stale = dated.filter((entry, index) => index >= keep || entry.at < cutoff);
+  for (const entry of stale) {
+    try {
+      rmSync(join4(dir, entry.name), { force: true });
+    } catch {
+    }
+  }
+}
+function formatDiskLine(record2) {
+  const at = new Date(record2.at);
+  const pad = (value, width = 2) => String(value).padStart(width, "0");
+  const clock = `${pad(at.getHours())}:${pad(at.getMinutes())}:${pad(at.getSeconds())}.${pad(at.getMilliseconds(), 3)}`;
+  return `${clock}  ${record2.level.toUpperCase().padEnd(5)}  ${record2.scope.padEnd(12)}  ${record2.message}
+`;
+}
+function openLogFile(path) {
+  try {
+    mkdirSync2(join4(path, ".."), { recursive: true, mode: 448 });
+    return openSync(path, "a", 384);
+  } catch {
+    return null;
+  }
+}
+function createLogger(options2 = {}) {
+  const path = options2.file === null ? null : options2.file ?? runLogPath(options2.stateDir);
+  const level = options2.level ?? "debug";
+  const now = options2.now ?? Date.now;
+  const threshold = LEVEL_ORDER[level];
+  const maxBytes = options2.maxBytes ?? MAX_LOG_BYTES;
+  let fd = path === null ? null : openLogFile(path);
+  if (fd !== null && path !== null && options2.owner !== false) {
+    const dir = join4(path, "..");
+    pruneRunLogs(dir);
+    linkLatest(dir, path);
+  }
+  let written = 0;
+  const listeners = /* @__PURE__ */ new Set();
+  const emit = (recordLevel, scope, message) => {
+    if (LEVEL_ORDER[recordLevel] < threshold) return;
+    const record2 = { at: now(), level: recordLevel, scope, message };
+    if (fd !== null) {
+      try {
+        const line = formatDiskLine(record2);
+        if (written + line.length > maxBytes) {
+          writeSync(fd, `--- log truncated at ${maxBytes} bytes ---
+`);
+          fd = null;
+        } else {
+          writeSync(fd, line);
+          written += line.length;
+        }
+      } catch {
+        fd = null;
+      }
+    }
+    for (const listener of listeners) {
+      try {
+        listener(record2);
+      } catch {
+      }
+    }
+  };
+  return {
+    debug: (scope, message) => emit("debug", scope, message),
+    info: (scope, message) => emit("info", scope, message),
+    warn: (scope, message) => emit("warn", scope, message),
+    error: (scope, message) => emit("error", scope, message),
+    get file() {
+      return fd === null ? null : path;
+    },
+    onRecord(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    close() {
+      listeners.clear();
+      fd = null;
+    }
+  };
+}
+function setAmbientLogger(logger2) {
+  ambient = logger2;
+  return logger2;
+}
+function formatFeedLine(record2) {
+  return formatDiskLine(record2).trimEnd();
+}
+function attachTerminalMirror(logger2, enabled = process.env.FRIZZ_DEBUG === "1") {
+  if (!enabled) return () => {
+  };
+  return logger2.onRecord((record2) => process.stderr.write(`${formatFeedLine(record2)}
+`));
+}
+function ambientLogger() {
+  if (ambient) return ambient;
+  const inherited = process.env[LOG_FILE_ENV] ?? process.env[LOG_PATH_ENV];
+  const level = process.env[LOG_LEVEL_ENV];
+  const logger2 = createLogger({
+    ...inherited ? { file: inherited, owner: false } : { file: null },
+    ...level && level in LEVEL_ORDER ? { level } : {}
+  });
+  attachTerminalMirror(logger2);
+  ambient = logger2;
+  return ambient;
+}
+function logEnvironment(logger2, level = "debug") {
+  return logger2.file ? { [LOG_FILE_ENV]: logger2.file, [LOG_LEVEL_ENV]: level } : {};
+}
+var LEVEL_ORDER, LOG_FILE_ENV, LOG_LEVEL_ENV, LOG_PATH_ENV, RETAINED_RUNS, RETAINED_DAYS, MAX_LOG_BYTES, ambient, log;
+var init_logging = __esm({
+  "packages/server/src/logging.ts"() {
+    "use strict";
+    init_frizz_paths();
+    LEVEL_ORDER = { debug: 10, info: 20, warn: 30, error: 40 };
+    LOG_FILE_ENV = "FRIZZ_LOG_FILE";
+    LOG_LEVEL_ENV = "FRIZZ_LOG_LEVEL";
+    LOG_PATH_ENV = "FRIZZ_LOG_PATH";
+    RETAINED_RUNS = 20;
+    RETAINED_DAYS = 14;
+    MAX_LOG_BYTES = 32 * 1024 * 1024;
+    ambient = null;
+    log = {
+      debug: (scope, message) => ambientLogger().debug(scope, message),
+      info: (scope, message) => ambientLogger().info(scope, message),
+      warn: (scope, message) => ambientLogger().warn(scope, message),
+      error: (scope, message) => ambientLogger().error(scope, message)
+    };
+  }
+});
+
+// packages/server/src/audit.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+function encodeCallerStamp(stamp) {
+  return Buffer.from(JSON.stringify(stamp)).toString("base64url");
+}
+var CALLER_HEADER, requestOrigin;
+var init_audit = __esm({
+  "packages/server/src/audit.ts"() {
+    "use strict";
+    init_access_codes();
+    init_frizz_paths();
+    init_logging();
+    CALLER_HEADER = "x-frizz-caller";
+    requestOrigin = new AsyncLocalStorage();
+  }
+});
+
 // node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS({
   "node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js"(exports) {
@@ -12982,31 +13280,6 @@ var init_drainable_worker = __esm({
   }
 });
 
-// packages/shared/src/frizz-md.ts
-var FrizzMdLanding, FrizzMdAutonomy, FRIZZ_MD_NOTES_MAX, FrizzMdAnswers, FrizzMdStatus;
-var init_frizz_md = __esm({
-  "packages/shared/src/frizz-md.ts"() {
-    "use strict";
-    init_zod();
-    FrizzMdLanding = external_exports.enum(["pull-request", "main", "main-push", "branch"]);
-    FrizzMdAutonomy = external_exports.enum(["decide", "balanced", "check-in"]);
-    FRIZZ_MD_NOTES_MAX = 8e3;
-    FrizzMdAnswers = external_exports.object({
-      landing: FrizzMdLanding,
-      autonomy: FrizzMdAutonomy,
-      notes: external_exports.string().max(FRIZZ_MD_NOTES_MAX)
-    }).strict();
-    FrizzMdStatus = external_exports.object({
-      /** A FRIZZ.md is already at the project root: the project has its rules, so nothing is asked. */
-      exists: external_exports.boolean(),
-      /** The operator skipped the questionnaire for this project: it is not asked again. */
-      skipped: external_exports.boolean(),
-      /** The branch the landing rules name — the remote's default, else the checked-out one, else `main`. */
-      defaultBranch: external_exports.string()
-    });
-  }
-});
-
 // packages/shared/src/receipt-bus.ts
 var init_receipt_bus = __esm({
   "packages/shared/src/receipt-bus.ts"() {
@@ -13254,7 +13527,7 @@ function requireEffortOutsideAcp(profile, ctx) {
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ClaudeModel, AcpAgent, AcpAgentModel, AcpAgentModels, AcpAgentModelsInput, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, SIGNOFF_NUDGE_MESSAGE_NEEDS_INPUT, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, GithubIssueStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, SECRET_TTL_MS, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, SettledQuestionView, ThreadSettledQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, LiveTool, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountBackend, AccountLogoutInput, AccountLogoutResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshotShape, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, SteerThreadInput, SteerThreadResult, DismissFailedFollowUpInput, DismissFailedFollowUpResult, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, CompactThreadInput, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, UpgradeThreadModelInput, UpgradeThreadModelResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, ProjectRailCounts, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -13267,7 +13540,6 @@ var init_src = __esm({
     init_code_fences();
     init_delta();
     init_drainable_worker();
-    init_frizz_md();
     init_interactions();
     init_receipt_bus();
     init_relay_protocol();
@@ -14566,6 +14838,19 @@ var init_src = __esm({
       // ambiguous, and only the operator decides to risk a second copy.
       supersedes: external_exports.string().min(1).max(200).optional()
     });
+    SteerThreadInput = external_exports.object({
+      from: ThreadSlug,
+      to: ThreadSlug,
+      message: external_exports.string().min(1).max(1e5)
+    }).strict();
+    SteerThreadResult = external_exports.object({
+      slug: ThreadSlug,
+      title: external_exports.string(),
+      // What the target was doing when the message arrived: `running` ⇒ it reads it at its next tool
+      // boundary; `resting` ⇒ the message started its next turn; `reopened` ⇒ it was marked done and this
+      // message put it back on the board.
+      delivery: external_exports.enum(["running", "resting", "reopened"])
+    }).strict();
     DismissFailedFollowUpInput = external_exports.object({
       slug: ThreadSlug,
       deliveryId: external_exports.string().min(1).max(200)
@@ -15275,6 +15560,20 @@ ${DISPATCH_TASK_BANNER}
       // pairing, and `projectTranscriptPeerNames` uses this id to ask it. Never a drawer key on its own —
       // that is `peerDispatchId`, which the same pass can also supply once this resolves.
       peerSenderTaskId: external_exports.string().optional(),
+      // ANOTHER TOP-LEVEL SESSION wrote this user turn — a thread messaging this one through Claude Code's
+      // cross-session channel (see parseCrossSessionMessage), most often the coordinator thread that spawned
+      // it. Not the human, and not a sub-agent either: the chat draws it as an expandable hairline naming
+      // the sending thread, with the body one click away. `displayText` carries the unwrapped body.
+      //
+      // `name` is the sender's Claude Code session name, the fallback label. `thread` is the Frizz thread
+      // behind it, filled in by the server from the sender's socket (session-peer.ts) — absent when the
+      // sender is not a Frizz thread or is gone without having been resolved, and then the line names the
+      // session without a link. `project` is the URL slug of the sender's project.
+      sessionPeer: external_exports.object({
+        name: external_exports.string().optional(),
+        socket: external_exports.string().optional(),
+        thread: external_exports.object({ project: external_exports.string().optional(), slug: external_exports.string(), title: external_exports.string() }).optional()
+      }).optional(),
       // FRIZZ REFUSED the ```awaiting fence this message ends in — it named something that is not running,
       // or named nothing at all, or used a retired line kind (see `isParkCorrection`). The fence is not a
       // park, so the chat draws nothing for it: an hourglass card with a park button asserts a wait that
@@ -15384,8 +15683,9 @@ function responseJson(res, status, value) {
   res.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
   res.end(JSON.stringify(value));
 }
-function proxyHeaders(req, childPort, vouchSameOrigin = false) {
+function proxyHeaders(req, childPort, callerStamp, vouchSameOrigin = false) {
   const headers = { ...req.headers };
+  headers[CALLER_HEADER] = callerStamp;
   headers.host = `127.0.0.1:${childPort}`;
   if (typeof headers.origin === "string") headers.origin = `http://127.0.0.1:${childPort}`;
   for (const name of FORWARDED_HEADERS) delete headers[name];
@@ -15402,6 +15702,15 @@ function readCookie(header, name) {
   }
   return void 0;
 }
+function firstHeader(value) {
+  const first = Array.isArray(value) ? value[0] : value;
+  return first?.trim() || void 0;
+}
+function isLoopbackAddress(address) {
+  if (!address) return false;
+  const v4 = address.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
+  return v4.startsWith("127.") || address === "::1";
+}
 function isControlRequest(req) {
   const url = new URL(req.url ?? "/", "http://frizz.invalid");
   return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH || url.pathname === SUPERVISOR_SIGN_OUT_PATH;
@@ -15435,6 +15744,7 @@ var init_restart_supervisor = __esm({
     init_local_origin();
     init_local_image();
     init_supervisor_pages();
+    init_audit();
     init_src();
     SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
     SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
@@ -15799,6 +16109,28 @@ var init_restart_supervisor = __esm({
         if (!this.publicOrigin) return true;
         return this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
       }
+      /**
+       * What this proxy knows about who sent a request, for the application server's audit trail
+       * (audit.ts). The session is named by its record id, never its value, and only once it verifies.
+       *
+       * `clientIp` is only ever taken from a request that arrived as the public origin, and it is that
+       * origin's CLAIM: a relay or tunnel reaches this port from loopback, so the real visitor address
+       * exists only in what the relay chose to forward (`cf-connecting-ip` from Cloudflare).
+       */
+      callerStamp(req) {
+        const remote2 = req.socket.remoteAddress ?? null;
+        const via = this.arrivedPublicly(req) ? "public" : isLoopbackAddress(remote2) ? "loopback" : "network";
+        const host = via === "loopback" ? void 0 : firstHeader(req.headers.host);
+        const forwarded = firstHeader(req.headers["x-forwarded-for"])?.split(",")[0]?.trim();
+        const clientIp = via === "public" ? firstHeader(req.headers["cf-connecting-ip"]) ?? firstHeader(req.headers["x-real-ip"]) ?? forwarded : void 0;
+        return encodeCallerStamp({
+          via,
+          remote: remote2,
+          ...host ? { host: host.slice(0, 200) } : {},
+          ...clientIp ? { clientIp: clientIp.slice(0, 200) } : {},
+          session: this.access.sessionIdOf(readCookie(req.headers.cookie, SESSION_COOKIE))
+        });
+      }
       /** Did this request arrive through the public origin carrying a live session? Loopback never does. */
       carriesRemoteSession(req) {
         return this.arrivedPublicly(req) && this.access.verifySession(readCookie(req.headers.cookie, SESSION_COOKIE));
@@ -15898,134 +16230,55 @@ var init_restart_supervisor = __esm({
           port: childPort,
           method: req.method,
           path: req.url,
-          headers: proxyHeaders(req, childPort, this.vouchesSameOrigin(req))
+          headers: proxyHeaders(req, childPort, this.callerStamp(req), this.vouchesSameOrigin(req))
         }, (upstreamResponse) => {
           res.writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.headers);
-          upstreamResponse.pipe(res);
-        });
-        upstream.once("error", () => {
-          if (res.headersSent) return res.destroy();
-          res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-          res.end(recoveryPage(req.url ?? "/", "unreachable"));
-        });
-        req.pipe(upstream);
-      }
-      handleUpgrade(req, socket, head) {
-        if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
-          rejectWebSocketUpgrade(socket, 401, "Unauthorized");
-          return;
-        }
-        if (!this.authorityAccepted(req, false)) {
-          socket.destroy();
-          return;
-        }
-        const childPort = this.options.childPort();
-        if (!childPort) {
-          socket.destroy();
-          return;
-        }
-        const upstream = connect(childPort, "127.0.0.1");
-        for (const half of [socket, upstream]) {
-          this.upgradedSockets.add(half);
-          half.once("close", () => this.upgradedSockets.delete(half));
-        }
-        upstream.once("connect", () => {
-          const headers = proxyHeaders(req, childPort);
-          headers.connection = req.headers.connection ?? "Upgrade";
-          const lines = [`${req.method ?? "GET"} ${req.url ?? "/"} HTTP/${req.httpVersion}`];
-          for (const [name, value] of Object.entries(headers)) {
-            if (value === void 0) continue;
-            for (const entry of Array.isArray(value) ? value : [value]) lines.push(`${name}: ${entry}`);
-          }
-          upstream.write(`${lines.join("\r\n")}\r
-\r
-`);
-          if (head.length > 0) upstream.write(head);
-          socket.pipe(upstream).pipe(socket);
-        });
-        upstream.once("error", () => socket.destroy());
-        socket.once("error", () => upstream.destroy());
-      }
-    };
-  }
-});
-
-// packages/server/src/frizz-paths.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { homedir as homedir2, tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative, resolve, sep as sep2 } from "node:path";
-function legacyFrizzRoot(home = homedir2()) {
-  return join3(home, LEGACY_DIR_NAME);
-}
-function xdg(env, name) {
-  const value = env[name];
-  return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
-}
-function insideHome(child, home) {
-  const norm = (value) => value.replace(/[\\/]+$/u, "").replaceAll("\\", "/").toLowerCase();
-  const parent = norm(home);
-  const inner = norm(child);
-  return inner === parent || inner.startsWith(`${parent}/`);
-}
-function windowsRoots(env, home) {
-  const local = env.LOCALAPPDATA && insideHome(env.LOCALAPPDATA, home) ? env.LOCALAPPDATA : join3(home, "AppData", "Local");
-  const base = join3(local, "Frizz");
-  return {
-    data: join3(base, "Data"),
-    state: join3(base, "State"),
-    cache: join3(base, "Cache")
-  };
-}
-function darwinRoots(home) {
-  const support = join3(home, "Library", "Application Support", "Frizz");
-  return {
-    data: support,
-    // macOS has no state directory concept; Application Support is where this belongs, and the log
-    // files themselves already live under each project's own directory.
-    state: support,
-    cache: join3(home, "Library", "Caches", "Frizz")
-  };
-}
-function xdgRoots(env, home) {
-  return {
-    data: join3(xdg(env, "XDG_DATA_HOME") ?? join3(home, ".local", "share"), "frizz"),
-    state: join3(xdg(env, "XDG_STATE_HOME") ?? join3(home, ".local", "state"), "frizz"),
-    cache: join3(xdg(env, "XDG_CACHE_HOME") ?? join3(home, ".cache"), "frizz")
-  };
-}
-function frizzPaths(options2 = {}) {
-  const env = options2.env ?? process.env;
-  const platform = options2.platform ?? process.platform;
-  const home = options2.home ?? homedir2();
-  const exists = options2.exists ?? existsSync2;
-  const legacyRoot = legacyFrizzRoot(home);
-  if (exists(legacyRoot)) {
-    return { data: legacyRoot, state: legacyRoot, cache: legacyRoot, legacy: true };
-  }
-  const explicit = {
-    data: xdg(env, "XDG_DATA_HOME"),
-    state: xdg(env, "XDG_STATE_HOME"),
-    cache: xdg(env, "XDG_CACHE_HOME")
-  };
-  const platformRoots = platform === "win32" ? windowsRoots(env, home) : platform === "darwin" ? darwinRoots(home) : xdgRoots(env, home);
-  return {
-    data: explicit.data ? join3(explicit.data, "frizz") : platformRoots.data,
-    state: explicit.state ? join3(explicit.state, "frizz") : platformRoots.state,
-    cache: explicit.cache ? join3(explicit.cache, "frizz") : platformRoots.cache,
-    legacy: false
-  };
-}
-function frizzRoots() {
-  return cached ??= frizzPaths();
-}
-function projectStateDir(projectId, home) {
-  return join3(home ? frizzPaths({ home }).data : frizzRoots().data, "projects", projectId);
-}
-var LEGACY_DIR_NAME, cached;
-var init_frizz_paths = __esm({
-  "packages/server/src/frizz-paths.ts"() {
-    "use strict";
-    LEGACY_DIR_NAME = ".frizz";
+          upstreamResponse.pipe(res);
+        });
+        upstream.once("error", () => {
+          if (res.headersSent) return res.destroy();
+          res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+          res.end(recoveryPage(req.url ?? "/", "unreachable"));
+        });
+        req.pipe(upstream);
+      }
+      handleUpgrade(req, socket, head) {
+        if (this.arrivedPublicly(req) && !this.sessionAccepted(req)) {
+          rejectWebSocketUpgrade(socket, 401, "Unauthorized");
+          return;
+        }
+        if (!this.authorityAccepted(req, false)) {
+          socket.destroy();
+          return;
+        }
+        const childPort = this.options.childPort();
+        if (!childPort) {
+          socket.destroy();
+          return;
+        }
+        const upstream = connect(childPort, "127.0.0.1");
+        for (const half of [socket, upstream]) {
+          this.upgradedSockets.add(half);
+          half.once("close", () => this.upgradedSockets.delete(half));
+        }
+        upstream.once("connect", () => {
+          const headers = proxyHeaders(req, childPort, this.callerStamp(req));
+          headers.connection = req.headers.connection ?? "Upgrade";
+          const lines = [`${req.method ?? "GET"} ${req.url ?? "/"} HTTP/${req.httpVersion}`];
+          for (const [name, value] of Object.entries(headers)) {
+            if (value === void 0) continue;
+            for (const entry of Array.isArray(value) ? value : [value]) lines.push(`${name}: ${entry}`);
+          }
+          upstream.write(`${lines.join("\r\n")}\r
+\r
+`);
+          if (head.length > 0) upstream.write(head);
+          socket.pipe(upstream).pipe(socket);
+        });
+        upstream.once("error", () => socket.destroy());
+        socket.once("error", () => upstream.destroy());
+      }
+    };
   }
 });
 
@@ -19723,194 +19976,6 @@ var init_wrapper = __esm({
   }
 });
 
-// packages/server/src/logging.ts
-import {
-  appendFileSync,
-  mkdirSync as mkdirSync4,
-  openSync,
-  readdirSync,
-  rmSync as rmSync2,
-  statSync as statSync2,
-  symlinkSync,
-  writeFileSync as writeFileSync4,
-  writeSync
-} from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join6 } from "node:path";
-function defaultLogRoot(stateDir, home = homedir6()) {
-  return stateDir ? join6(stateDir, "logs") : join6(frizzPaths({ home }).state, "logs");
-}
-function runStamp(at) {
-  const pad = (value) => String(value).padStart(2, "0");
-  return `${at.getFullYear()}-${pad(at.getMonth() + 1)}-${pad(at.getDate())}T${pad(at.getHours())}-${pad(at.getMinutes())}-${pad(at.getSeconds())}`;
-}
-function runLogPath(stateDir, at = /* @__PURE__ */ new Date(), pid = process.pid, home = homedir6(), env = process.env) {
-  const name = `frizz-${runStamp(at)}-${pid}.log`;
-  const override = env[LOG_PATH_ENV]?.trim();
-  if (override) return override.endsWith(".log") ? override : join6(override, name);
-  return join6(defaultLogRoot(stateDir, home), name);
-}
-function latestLogPath(dir) {
-  return join6(dir, "latest.log");
-}
-function linkLatest(dir, target2) {
-  const link = latestLogPath(dir);
-  try {
-    rmSync2(link, { force: true });
-    symlinkSync(target2, link);
-  } catch {
-    try {
-      writeFileSync4(link, `${target2}
-`, { mode: 384 });
-    } catch {
-    }
-  }
-}
-function pruneRunLogs(dir, keep = RETAINED_RUNS, days = RETAINED_DAYS, now = Date.now()) {
-  let entries;
-  try {
-    entries = readdirSync(dir).filter((name) => name.endsWith(".log") && name !== "latest.log");
-  } catch {
-    return;
-  }
-  const dated = entries.map((name) => {
-    try {
-      return { name, at: statSync2(join6(dir, name)).mtimeMs };
-    } catch {
-      return { name, at: 0 };
-    }
-  }).sort((a, b) => b.at - a.at);
-  const cutoff = now - days * 24 * 60 * 60 * 1e3;
-  const stale = dated.filter((entry, index) => index >= keep || entry.at < cutoff);
-  for (const entry of stale) {
-    try {
-      rmSync2(join6(dir, entry.name), { force: true });
-    } catch {
-    }
-  }
-}
-function formatDiskLine(record2) {
-  const at = new Date(record2.at);
-  const pad = (value, width = 2) => String(value).padStart(width, "0");
-  const clock = `${pad(at.getHours())}:${pad(at.getMinutes())}:${pad(at.getSeconds())}.${pad(at.getMilliseconds(), 3)}`;
-  return `${clock}  ${record2.level.toUpperCase().padEnd(5)}  ${record2.scope.padEnd(12)}  ${record2.message}
-`;
-}
-function openLogFile(path) {
-  try {
-    mkdirSync4(join6(path, ".."), { recursive: true, mode: 448 });
-    return openSync(path, "a", 384);
-  } catch {
-    return null;
-  }
-}
-function createLogger(options2 = {}) {
-  const path = options2.file === null ? null : options2.file ?? runLogPath(options2.stateDir);
-  const level = options2.level ?? "debug";
-  const now = options2.now ?? Date.now;
-  const threshold = LEVEL_ORDER[level];
-  const maxBytes = options2.maxBytes ?? MAX_LOG_BYTES;
-  let fd = path === null ? null : openLogFile(path);
-  if (fd !== null && path !== null && options2.owner !== false) {
-    const dir = join6(path, "..");
-    pruneRunLogs(dir);
-    linkLatest(dir, path);
-  }
-  let written = 0;
-  const listeners = /* @__PURE__ */ new Set();
-  const emit = (recordLevel, scope, message) => {
-    if (LEVEL_ORDER[recordLevel] < threshold) return;
-    const record2 = { at: now(), level: recordLevel, scope, message };
-    if (fd !== null) {
-      try {
-        const line = formatDiskLine(record2);
-        if (written + line.length > maxBytes) {
-          writeSync(fd, `--- log truncated at ${maxBytes} bytes ---
-`);
-          fd = null;
-        } else {
-          writeSync(fd, line);
-          written += line.length;
-        }
-      } catch {
-        fd = null;
-      }
-    }
-    for (const listener of listeners) {
-      try {
-        listener(record2);
-      } catch {
-      }
-    }
-  };
-  return {
-    debug: (scope, message) => emit("debug", scope, message),
-    info: (scope, message) => emit("info", scope, message),
-    warn: (scope, message) => emit("warn", scope, message),
-    error: (scope, message) => emit("error", scope, message),
-    get file() {
-      return fd === null ? null : path;
-    },
-    onRecord(listener) {
-      listeners.add(listener);
-      return () => listeners.delete(listener);
-    },
-    close() {
-      listeners.clear();
-      fd = null;
-    }
-  };
-}
-function setAmbientLogger(logger2) {
-  ambient = logger2;
-  return logger2;
-}
-function formatFeedLine(record2) {
-  return formatDiskLine(record2).trimEnd();
-}
-function attachTerminalMirror(logger2, enabled = process.env.FRIZZ_DEBUG === "1") {
-  if (!enabled) return () => {
-  };
-  return logger2.onRecord((record2) => process.stderr.write(`${formatFeedLine(record2)}
-`));
-}
-function ambientLogger() {
-  if (ambient) return ambient;
-  const inherited = process.env[LOG_FILE_ENV] ?? process.env[LOG_PATH_ENV];
-  const level = process.env[LOG_LEVEL_ENV];
-  const logger2 = createLogger({
-    ...inherited ? { file: inherited, owner: false } : { file: null },
-    ...level && level in LEVEL_ORDER ? { level } : {}
-  });
-  attachTerminalMirror(logger2);
-  ambient = logger2;
-  return ambient;
-}
-function logEnvironment(logger2, level = "debug") {
-  return logger2.file ? { [LOG_FILE_ENV]: logger2.file, [LOG_LEVEL_ENV]: level } : {};
-}
-var LEVEL_ORDER, LOG_FILE_ENV, LOG_LEVEL_ENV, LOG_PATH_ENV, RETAINED_RUNS, RETAINED_DAYS, MAX_LOG_BYTES, ambient, log;
-var init_logging = __esm({
-  "packages/server/src/logging.ts"() {
-    "use strict";
-    init_frizz_paths();
-    LEVEL_ORDER = { debug: 10, info: 20, warn: 30, error: 40 };
-    LOG_FILE_ENV = "FRIZZ_LOG_FILE";
-    LOG_LEVEL_ENV = "FRIZZ_LOG_LEVEL";
-    LOG_PATH_ENV = "FRIZZ_LOG_PATH";
-    RETAINED_RUNS = 20;
-    RETAINED_DAYS = 14;
-    MAX_LOG_BYTES = 32 * 1024 * 1024;
-    ambient = null;
-    log = {
-      debug: (scope, message) => ambientLogger().debug(scope, message),
-      info: (scope, message) => ambientLogger().info(scope, message),
-      warn: (scope, message) => ambientLogger().warn(scope, message),
-      error: (scope, message) => ambientLogger().error(scope, message)
-    };
-  }
-});
-
 // packages/server/src/process-generation.ts
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -20946,7 +21011,7 @@ var init_boot_progress = __esm({
 
 // packages/server/src/project-root.ts
 import { createHash as createHash3, randomUUID as randomUUID4 } from "node:crypto";
-import { closeSync as closeSync3, existsSync as existsSync4, fsyncSync as fsyncSync3, mkdirSync as mkdirSync8, openSync as openSync4, readFileSync as readFileSync8, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import { closeSync as closeSync3, existsSync as existsSync4, fsyncSync as fsyncSync3, mkdirSync as mkdirSync8, openSync as openSync4, readFileSync as readFileSync8, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync5, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname8, join as join11, parse, resolve as resolve3 } from "node:path";
 function projectIdPath(root) {
@@ -21040,6 +21105,24 @@ function isHomeDirectory(dir, home = homedir8()) {
     return false;
   }
 }
+function isStateRootHome(dir, home = homedir8()) {
+  return isHomeDirectory(dir, home) && frizzPaths({ home }).legacy;
+}
+function refuseStateRootHome(dir, home = homedir8()) {
+  if (isStateRootHome(dir, home))
+    throw new Error("Frizz keeps its own files in ~/.frizz on this machine, so the home folder cannot be a project here \u2014 choose a folder inside it.");
+}
+function isWorldWritable(dir, platform = process.platform) {
+  if (platform === "win32") return false;
+  try {
+    return (statSync5(dir).mode & 2) !== 0;
+  } catch {
+    return false;
+  }
+}
+function refuseWorldWritableProject(dir) {
+  if (isWorldWritable(dir)) throw new Error(`A folder every account can write to cannot be a project: ${dir}`);
+}
 function existingProjectId(dir) {
   const fromFile = readProjectIdFile(dir);
   if (fromFile) return fromFile;
@@ -21065,7 +21148,7 @@ function discoverProjectRoot(cwd = process.cwd(), home = homedir8()) {
   const stop = resolve3(home);
   const filesystemRoot = parse(dir).root;
   for (let at = dir; ; at = dirname8(at)) {
-    if (at === stop || at === filesystemRoot) break;
+    if (at === stop || at === filesystemRoot || isHomeDirectory(at, home)) break;
     if (existsSync4(projectIdPath(at))) return at;
     if (hasAny(at, REPO_MARKERS)) return at;
     if (hasAny(at, PROJECT_MARKERS)) return at;
@@ -21077,6 +21160,7 @@ var FRIZZ_DIR, ID_FILE, SELF_IGNORE, REPO_MARKERS, PROJECT_MARKERS;
 var init_project_root = __esm({
   "packages/server/src/project-root.ts"() {
     "use strict";
+    init_frizz_paths();
     init_project_identity();
     FRIZZ_DIR = ".frizz";
     ID_FILE = ".id";
@@ -21115,11 +21199,13 @@ function readRegistry(home = homedir9()) {
   try {
     const parsed = JSON.parse(raw);
     if (parsed?.version !== 1 || !Array.isArray(parsed.projects)) return { ...EMPTY, projects: [] };
+    const forgotten = Array.isArray(parsed.forgotten) ? parsed.forgotten.filter((id) => typeof id === "string") : [];
     return {
       version: 1,
       projects: parsed.projects.filter(
         (p) => p && typeof p.id === "string" && typeof p.path === "string" && typeof p.slug === "string"
-      )
+      ),
+      ...forgotten.length > 0 ? { forgotten } : {}
     };
   } catch {
     return { ...EMPTY, projects: [] };
@@ -21184,6 +21270,10 @@ function canonicalPath(dir) {
 function registerProject(input, home = homedir9()) {
   input = { ...input, dir: canonicalPath(input.dir) };
   const registry = readRegistry(home);
+  if (registry.forgotten) {
+    registry.forgotten = registry.forgotten.filter((id) => id !== input.id);
+    if (registry.forgotten.length === 0) delete registry.forgotten;
+  }
   const at = (input.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
   const byId = registry.projects.find((p) => p.id === input.id);
   if (byId) {
@@ -23699,27 +23789,27 @@ function createAccessPane(options2) {
 }
 
 // src/remote-controller.ts
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 
 // src/cloud.ts
 init_frizz_paths();
 init_src();
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3, rmSync } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync4, rmSync as rmSync2 } from "node:fs";
 import { createInterface } from "node:readline/promises";
-import { homedir as homedir4 } from "node:os";
-import { dirname as dirname4, join as join5 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname4, join as join6 } from "node:path";
 
 // src/identity.ts
 init_frizz_paths();
 init_src();
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { dirname as dirname3, join as join4 } from "node:path";
-function claimIdentityPath(home = homedir3(), env) {
-  return join4(frizzPaths({ home, env }).state, "identity.key");
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname3, join as join5 } from "node:path";
+function claimIdentityPath(home = homedir4(), env) {
+  return join5(frizzPaths({ home, env }).state, "identity.key");
 }
-async function loadOrCreateClaimIdentity(home = homedir3()) {
+async function loadOrCreateClaimIdentity(home = homedir4()) {
   const path = claimIdentityPath(home);
   let stored;
   try {
@@ -23735,8 +23825,8 @@ async function loadOrCreateClaimIdentity(home = homedir3()) {
     );
   }
   const identity = await generateClaimIdentity();
-  mkdirSync2(dirname3(path), { recursive: true });
-  writeFileSync2(path, await exportClaimPrivateKey(identity.privateKey), { mode: 384 });
+  mkdirSync3(dirname3(path), { recursive: true });
+  writeFileSync3(path, await exportClaimPrivateKey(identity.privateKey), { mode: 384 });
   return identity;
 }
 
@@ -24332,6 +24422,11 @@ function describeCloudConfig(config) {
   return "Cloudflare Tunnel";
 }
 var REGISTRAR_IS_LIVE = true;
+var CUSTOM_NAMES_OFFERED = false;
+function customNamesOffered(env = process.env) {
+  return CUSTOM_NAMES_OFFERED || env.FRIZZ_CUSTOM_NAMES === "1";
+}
+var CUSTOM_NAMES_PAUSED = "custom frizz.sh names are paused for now \u2014 press enter for a private name (no account needed), or answer with the hostname of a tunnel you run";
 function isClaimedConfig(config) {
   return typeof config.claim === "string" && config.claim.length > 0;
 }
@@ -24345,19 +24440,24 @@ function zoneClaimLabel(hostname) {
   const label = hostname.slice(0, -suffix.length);
   return label.length > 0 && !label.includes(".") ? label : null;
 }
-async function reconcileCloudConfig(config, port, home = homedir4(), onNotice, origin, github = githubDeviceFlow(onNotice ? { onPrompt: (prompt) => onNotice(deviceCodeMessage(prompt)) } : {})) {
+async function reconcileCloudConfig(config, port, home = homedir5(), onNotice, origin, github = githubDeviceFlow(onNotice ? { onPrompt: (prompt) => onNotice(deviceCodeMessage(prompt)) } : {})) {
   if (isRelayConfig(config)) return config;
   const label = config.claim ?? zoneClaimLabel(config.hostname);
   if (!label) return config;
+  if (!isAnonymousClaimName(label) && !customNamesOffered()) {
+    throw new Error(
+      `${config.hostname} needs moving onto the Frizz relay, which means claiming it again, and custom frizz.sh names are paused for now \u2014 press R to pick a private name or another setup`
+    );
+  }
   onNotice?.(
     isClaimedConfig(config) ? `${config.hostname} is served by the Frizz relay now; moving this board off its tunnel` : `${config.hostname} is inside ${CLAIM_ZONE}, where names are claimed, not tunnelled; claiming ${label}`
   );
   return establishCloudConfig(label, port, home, origin, github);
 }
-function cloudConfigPath(home = homedir4()) {
-  return join5(frizzPaths({ home }).data, "cloud.json");
+function cloudConfigPath(home = homedir5()) {
+  return join6(frizzPaths({ home }).data, "cloud.json");
 }
-function readCloudConfig(home = homedir4()) {
+function readCloudConfig(home = homedir5()) {
   try {
     const parsed = JSON.parse(readFileSync3(cloudConfigPath(home), "utf8"));
     if (typeof parsed.hostname !== "string" || !parsed.hostname) return null;
@@ -24377,10 +24477,10 @@ function readCloudConfig(home = homedir4()) {
     return null;
   }
 }
-function tunnelTokenPath(home = homedir4()) {
-  return join5(frizzPaths({ home }).state, "tunnel-token");
+function tunnelTokenPath(home = homedir5()) {
+  return join6(frizzPaths({ home }).state, "tunnel-token");
 }
-function readTunnelToken(home = homedir4()) {
+function readTunnelToken(home = homedir5()) {
   try {
     const token = readFileSync3(tunnelTokenPath(home), "utf8").trim();
     return token.length > 0 ? token : null;
@@ -24388,19 +24488,19 @@ function readTunnelToken(home = homedir4()) {
     return null;
   }
 }
-function writeTunnelToken(token, home = homedir4()) {
+function writeTunnelToken(token, home = homedir5()) {
   const path = tunnelTokenPath(home);
-  mkdirSync3(dirname4(path), { recursive: true });
-  writeFileSync3(path, `${token}
+  mkdirSync4(dirname4(path), { recursive: true });
+  writeFileSync4(path, `${token}
 `, { mode: 384 });
 }
-function deleteCloudConfig(home = homedir4()) {
-  rmSync(cloudConfigPath(home), { force: true });
+function deleteCloudConfig(home = homedir5()) {
+  rmSync2(cloudConfigPath(home), { force: true });
 }
-function writeCloudConfig(config, home = homedir4()) {
+function writeCloudConfig(config, home = homedir5()) {
   const path = cloudConfigPath(home);
-  mkdirSync3(dirname4(path), { recursive: true });
-  writeFileSync3(path, `${JSON.stringify(config, null, 2)}
+  mkdirSync4(dirname4(path), { recursive: true });
+  writeFileSync4(path, `${JSON.stringify(config, null, 2)}
 `);
 }
 function normalizeHostname(raw) {
@@ -24420,7 +24520,7 @@ async function promptForTunnelName(hostname, fallback) {
     rl.close();
   }
 }
-async function establishCloudConfig(answer, port, home = homedir4(), origin, github = githubDeviceFlow()) {
+async function establishCloudConfig(answer, port, home = homedir5(), origin, github = githubDeviceFlow()) {
   if (answer.includes(".")) {
     const hostname = normalizeHostname(answer);
     const tunnel = await promptForTunnelName(hostname, hostname.split(".")[0]);
@@ -24432,6 +24532,7 @@ async function establishCloudConfig(answer, port, home = homedir4(), origin, git
     );
   }
   const anonymous = answer === "" || isAnonymousClaimName(answer);
+  if (!anonymous && !customNamesOffered()) throw new Error(CUSTOM_NAMES_PAUSED);
   if (!anonymous && !claimNameIsValid(answer)) {
     normalizeClaimName(answer);
   }
@@ -24464,7 +24565,7 @@ async function establishCloudConfig(answer, port, home = homedir4(), origin, git
   }
   return { hostname: result.hostname, claim: name, serve: "relay" };
 }
-async function resolveRunToken(config, port, home = homedir4(), onWarning, origin) {
+async function resolveRunToken(config, port, home = homedir5(), onWarning, origin) {
   if (!isClaimedConfig(config)) return null;
   const cached2 = readTunnelToken(home);
   try {
@@ -24481,12 +24582,12 @@ async function resolveRunToken(config, port, home = homedir4(), onWarning, origi
     throw error;
   }
 }
-function resolveTunnelConfigPath(config, home = homedir4()) {
+function resolveTunnelConfigPath(config, home = homedir5()) {
   if (config.config) return config.config;
-  const candidate = join5(home, ".cloudflared", "frizz.yml");
+  const candidate = join6(home, ".cloudflared", "frizz.yml");
   return existsSync3(candidate) ? candidate : null;
 }
-async function startRelay(config, port, home = homedir4(), onStatus) {
+async function startRelay(config, port, home = homedir5(), onStatus) {
   const identity = await loadOrCreateClaimIdentity(home);
   const origin = `https://${config.hostname}`;
   return connectRelay({
@@ -24504,7 +24605,7 @@ async function startRelay(config, port, home = homedir4(), onStatus) {
     } : {}
   });
 }
-function startTunnel(config, onExit, onError, home = homedir4(), runToken) {
+function startTunnel(config, onExit, onError, home = homedir5(), runToken) {
   const configPath = runToken ? null : resolveTunnelConfigPath(config, home);
   const args2 = runToken ? ["tunnel", "--no-autoupdate", "run", "--token", runToken] : [
     "tunnel",
@@ -24535,7 +24636,7 @@ function startTunnel(config, onExit, onError, home = homedir4(), runToken) {
 
 // src/remote-controller.ts
 function createRemoteController(options2) {
-  const home = options2.home ?? homedir5();
+  const home = options2.home ?? homedir6();
   let config = null;
   let transport = null;
   const stopTransport = () => {
@@ -24650,6 +24751,15 @@ var CHOICES = [
   { kind: "other", title: "Something else", blurb: "any proxy or tunnel you run \u2014 tell Frizz its address" },
   { kind: "off", title: "Off", blurb: "loopback only" }
 ];
+function choicesFor(current) {
+  if (customNamesOffered()) return CHOICES;
+  if (kindOf(current) === "frizz") {
+    return CHOICES.map(
+      (choice) => choice.kind === "frizz" ? { ...choice, blurb: `${current.hostname} \u2014 kept and renewed; new custom names are paused` } : choice
+    );
+  }
+  return CHOICES.filter((choice) => choice.kind !== "frizz");
+}
 var ENTER = /* @__PURE__ */ new Set(["\r", "\n"]);
 var BACKSPACE = /* @__PURE__ */ new Set(["\x7F", "\b"]);
 var ESC = "\x1B";
@@ -24690,6 +24800,8 @@ function createRemotePane(options2) {
     output.write(fitScreen([{ text: "", drop: 0 }, ...indented], output.rows, output.columns));
   };
   const check = (ok, text) => ok ? `${text} \u2713` : text;
+  const choices = () => choicesFor(options2.current());
+  const rowOf = (kind) => Math.max(0, choices().findIndex((choice) => choice.kind === kind));
   const paint = () => {
     if (!open) return;
     const s = screen;
@@ -24702,7 +24814,7 @@ function createRemotePane(options2) {
           "Frizz binds 127.0.0.1 and has no login. Reaching it from another device means something in front of it does the authenticating. Whatever you pick here is remembered; from then on a plain `npx frizz` serves it."
         ),
         "",
-        ...CHOICES.map((choice, index) => {
+        ...choices().map((choice, index) => {
           const marker = index === s.index ? "\u276F" : " ";
           const title = choice.title.padEnd(18);
           const now = choice.kind === current ? `  ${DIM}(current)${RESET2}` : "";
@@ -24911,6 +25023,21 @@ function createRemotePane(options2) {
     }
     paint();
   };
+  const serveCurrent = async () => {
+    const current = options2.current();
+    const back = { name: "menu", index: rowOf("frizz") };
+    if (!current) return;
+    screen = { name: "busy", message: `serving ${current.hostname}\u2026` };
+    paint();
+    try {
+      await options2.apply(current);
+      options2.onChanged?.(current);
+      screen = { name: "done", message: `Serving https://${current.hostname} (${describeCloudConfig(current)}).`, link: options2.issueLink(), config: current };
+    } catch (error) {
+      screen = { name: "error", message: error instanceof Error ? error.message : String(error), back };
+    }
+    paint();
+  };
   const turnOff = async () => {
     screen = { name: "busy", message: "back to loopback only\u2026" };
     paint();
@@ -24919,15 +25046,14 @@ function createRemotePane(options2) {
       options2.onChanged?.(null);
       screen = { name: "done", message: "Loopback only. This board is reachable from this machine alone.", link: null, config: null };
     } catch (error) {
-      screen = { name: "error", message: error instanceof Error ? error.message : String(error), back: { name: "menu", index: CHOICES.length - 1 } };
+      screen = { name: "error", message: error instanceof Error ? error.message : String(error), back: { name: "menu", index: rowOf("off") } };
     }
     paint();
   };
   return {
     open() {
       open = true;
-      const current = kindOf(options2.current());
-      screen = { name: "menu", index: Math.max(0, CHOICES.findIndex((choice) => choice.kind === current)) };
+      screen = { name: "menu", index: rowOf(kindOf(options2.current())) };
       output.write(ALT_SCREEN_ON);
       output.write(HIDE_CURSOR);
       paint();
@@ -24950,13 +25076,15 @@ function createRemotePane(options2) {
       }
       if (s.name === "menu") {
         if (key === ESC || key === "q") return "close";
-        if (key === UP || key === "k") s.index = (s.index + CHOICES.length - 1) % CHOICES.length;
-        else if (key === DOWN || key === "j") s.index = (s.index + 1) % CHOICES.length;
-        else if (/^[1-6]$/.test(key)) s.index = Number(key) - 1;
+        const rows = choices();
+        if (key === UP || key === "k") s.index = (s.index + rows.length - 1) % rows.length;
+        else if (key === DOWN || key === "j") s.index = (s.index + 1) % rows.length;
+        else if (/^[1-9]$/.test(key) && Number(key) <= rows.length) s.index = Number(key) - 1;
         else if (ENTER.has(key)) {
-          const choice = CHOICES[s.index];
+          const choice = rows[Math.min(s.index, rows.length - 1)];
           if (choice.kind === "off") void turnOff();
           else if (choice.kind === "private") void claimPrivate();
+          else if (choice.kind === "frizz" && !customNamesOffered()) void serveCurrent();
           else openForm(choice.kind);
           return "keep";
         }
@@ -24964,7 +25092,7 @@ function createRemotePane(options2) {
         return "keep";
       }
       if (key === ESC) {
-        screen = { name: "menu", index: CHOICES.findIndex((choice) => choice.kind === s.kind) };
+        screen = { name: "menu", index: rowOf(s.kind) };
         paint();
         return "keep";
       }
@@ -25352,7 +25480,7 @@ var LAUNCH_TIMEOUT_MS = BOOT_STALL_TIMEOUT_MS;
 var LAUNCH_HARD_TIMEOUT_MS = BOOT_HARD_TIMEOUT_MS;
 var RETIRED_NETWORK_FLAGS = ["--host", "--allowed-host", "--public-origin", "--cloud"];
 function retiredFlagMessage(flag) {
-  return `${flag} was retired \u2014 how a board is reached is set up from the running board now: press R in its terminal to pick a private or custom frizz.sh name, a Cloudflare Tunnel, Tailscale or a proxy of your own. The choice is remembered, so a plain launch serves it.`;
+  return `${flag} was retired \u2014 how a board is reached is set up from the running board now: press R in its terminal to pick a private frizz.sh name, a Cloudflare Tunnel, Tailscale or a proxy of your own. The choice is remembered, so a plain launch serves it.`;
 }
 function parseCliArgs(argv) {
   const args2 = new Set(argv);
@@ -25518,19 +25646,26 @@ function cleanupSandbox(home) {
   } catch {
   }
 }
+function emptyLaunchMessage(intent) {
+  return intent.reason === "home" ? "Frizz keeps its own files in ~/.frizz on this machine, so it cannot open your home directory as a project, and there is no other project to show yet. cd into another folder and run frizz there." : `A folder every account can write to cannot be a project: ${intent.directory}. Run frizz in a folder only you can write to.`;
+}
 function resolveLaunchIntent(cwd = process.cwd(), home = homedir10(), env = process.env) {
   const candidate = realpathSync5(discoverProjectRoot(cwd, home));
   const known = isExistingProjectRoot(candidate) || findByPath(candidate, home) !== void 0;
-  if ((known || hasProjectMarker(candidate)) && !isHomeDirectory(candidate, home))
+  const isHome = isHomeDirectory(candidate, home);
+  const refused = isWorldWritable(candidate) ? "world-writable" : isStateRootHome(candidate, home) ? "home" : void 0;
+  if (!refused && (known || hasProjectMarker(candidate) && !isHome))
     return { kind: "open", workspace: resolveWorkspace(cwd, home, env) };
   const host = mostRecentProject(home, env);
-  const reason = isHomeDirectory(candidate, home) ? "home" : "unadopted";
-  if (!host) return { kind: "empty", directory: candidate, reason };
-  return reason === "home" ? { kind: "grid", workspace: host } : { kind: "offer", workspace: host, directory: candidate };
+  if (!host) {
+    if (refused) return { kind: "empty", directory: candidate, reason: refused };
+    return { kind: "open", workspace: resolveWorkspace(cwd, home, env) };
+  }
+  return refused || isHome ? { kind: "grid", workspace: host } : { kind: "offer", workspace: host, directory: candidate };
 }
 function mostRecentProject(home, env) {
   for (const entry of listProjects(home)) {
-    if (entry.stale || isHomeDirectory(entry.path, home)) continue;
+    if (entry.stale || isStateRootHome(entry.path, home) || isWorldWritable(entry.path)) continue;
     try {
       return resolveWorkspace(entry.path, home, env);
     } catch {
@@ -25553,6 +25688,8 @@ function resolveWorkspace(cwd = process.cwd(), home = homedir10(), env = process
     gitRoot = void 0;
   }
   const root0 = realpathSync5(gitRoot ?? discoverProjectRoot(cwd, home));
+  refuseWorldWritableProject(root0);
+  refuseStateRootHome(root0, home);
   const identity = gitRoot ? resolveGitProjectIdentity(root0, home) : void 0;
   const root = identity?.root ?? root0;
   const id = ensureProjectIdFile(root, home, identity?.id);
@@ -27094,7 +27231,7 @@ import {
   realpathSync as realpathSync6,
   renameSync as renameSync6,
   rmSync as rmSync9,
-  statSync as statSync5,
+  statSync as statSync6,
   writeFileSync as writeFileSync11
 } from "node:fs";
 import { delimiter as delimiter2, dirname as dirname13, isAbsolute as isAbsolute6, join as join15, relative as relative3, resolve as resolve6, sep as sep4 } from "node:path";
@@ -27138,7 +27275,7 @@ function containedFile(root, name, directory = false) {
   const rel = relative3(realpathSync6(root), path);
   if (rel === ".." || rel.startsWith(`..${sep4}`) || isAbsolute6(rel))
     throw new Error(`Frizz server artifact escapes its package: ${name}`);
-  const stat = statSync5(path);
+  const stat = statSync6(path);
   if (directory ? !stat.isDirectory() : !stat.isFile()) throw new Error(`invalid Frizz server artifact: ${name}`);
   return path;
 }
@@ -27181,7 +27318,7 @@ function resolveNpmCli(env = process.env, executable = process.execPath) {
     } catch {
     }
   }
-  const found = candidates.find((path) => existsSync9(path) && statSync5(path).isFile());
+  const found = candidates.find((path) => existsSync9(path) && statSync6(path).isFile());
   if (!found) throw new Error("npm was not found beside Node or on PATH; install Node with npm to install Frizz server releases");
   return resolve6(found);
 }
@@ -27563,7 +27700,7 @@ Options:
 
 
 To reach the board from a phone or another machine, press R in the terminal running it: a short
-walkthrough sets up a private frizz.sh name (no account needed), a custom one, a Cloudflare
+walkthrough sets up a private frizz.sh name (no account needed), a Cloudflare
 Tunnel, Tailscale, or a proxy of your own, and
 remembers the choice, so a plain launch serves it from then on. The board stays on loopback and
 shows a single-use sign-in link as a QR; press L for a fresh one, or run --link from another shell.`
@@ -27596,10 +27733,7 @@ var workspace = (() => {
       return workspaceFromLaunchTarget(pinned);
     }
     const intent = resolveLaunchIntent();
-    if (intent.kind === "empty")
-      throw new Error(
-        intent.reason === "home" ? "frizz cannot open your home directory as a project, and there is no other project to show yet. cd into a repository and run frizz there." : `${intent.directory} is not a Frizz project yet, and there is no other project to show. Run frizz inside a repository, or add this one from the projects page once a board is open.`
-      );
+    if (intent.kind === "empty") throw new Error(emptyLaunchMessage(intent));
     launchIntent = intent;
     return intent.workspace;
   } catch (error) {