frizz 0.7.1 → 0.7.2

package/dist/dev-child.js

@@ -50,8 +50,14 @@ function xdg(env, name) {
   const value = env[name];
   return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
 }
+function insideHome(child, home) {
+  const norm = (value) => value.replace(/[\\/]+$/u, "").replaceAll("\\", "/").toLowerCase();
+  const parent = norm(home);
+  const inner = norm(child);
+  return inner === parent || inner.startsWith(`${parent}/`);
+}
 function windowsRoots(env, home) {
-  const local = env.LOCALAPPDATA || join(env.USERPROFILE || home, "AppData", "Local");
+  const local = env.LOCALAPPDATA && insideHome(env.LOCALAPPDATA, home) ? env.LOCALAPPDATA : join(home, "AppData", "Local");
   const base = join(local, "Frizz");
   return {
     data: join(base, "Data"),
@@ -13072,6 +13078,9 @@ function prWatchExpiredWakeMessage(ref) {
 
 If you still care about it, register it again with \`mcp__frizz__watch_pr\` and a fresh \`for:\`. If you do not, and it was the only thing you were waiting on, end in a proper terminal state instead of parking on it again.`;
 }
+function queuedThread(t) {
+  return t.kind === "session" && t.foreign !== true && t.needsYou === true && t.state !== "archived";
+}
 function formatElapsed(ms) {
   if (!Number.isFinite(ms) || ms < 0) return "an unknown time";
   const s = Math.floor(ms / 1e3);
@@ -14037,8 +14046,8 @@ var init_src = __esm({
     PermissionMode = external_exports.enum(["auto", "default", "acceptEdits", "plan", "bypassPermissions"]);
     LocalFileOpener = external_exports.enum(["system", "cursor", "vscode", "finder", "copy"]);
     Settings = external_exports.object({
-      // The mode NEW Claude workers launch in. Settings surfaces exactly two of them — `auto` (the shipped
-      // default) and `bypassPermissions` (--dangerously-skip-permissions) — because those are the only two
+      // The mode NEW Claude workers launch in. Settings surfaces exactly two of them — `bypassPermissions`
+      // (--dangerously-skip-permissions, the shipped default since 0.7.2) and `auto` — because those are the only two
       // an unattended worker can actually run in; the server's workerDispatchPermission enforces that same
       // floor, so a restrictive value left here by an older build cannot reach a spawn.
       permissionMode: PermissionMode,
@@ -19542,11 +19551,13 @@ var init_settings = __esm({
     SETTINGS_KEY = "settings";
     MACHINE_KEYS = ["font", "notifications", "localFileOpener", "projectRail"];
     defaultSettings = () => ({
-      // `auto` = the CLI's classifier mode: safe actions auto-approve, risky ones still surface an approval
-      // card. Fewer invisible permission stalls than acceptEdits/default. The Settings "Claude permissions"
-      // control can raise this to `bypassPermissions` (--dangerously-skip-permissions) — the only other
-      // value a headless worker can run in, and the only deviation workerDispatchPermission honors.
-      permissionMode: "auto",
+      // `bypassPermissions` = claude's --dangerously-skip-permissions: a headless worker never stops on an
+      // approval card. Shipped default since 0.7.2 (maintainer 2026-08-24); the Settings "Permissions"
+      // (under Claude) control can lower it to `auto` — the CLI's classifier mode, where risky actions
+      // still surface an approval card in the thread. Those are the only two values a headless worker can
+      // run in: the dispatch floor (WORKER_DISPATCH_PERMISSION) stays `auto`, and workerDispatchPermission
+      // honors exactly one deviation from it, which is this one.
+      permissionMode: "bypassPermissions",
       model: void 0,
       effort: void 0,
       notifications: true,
@@ -20602,11 +20613,23 @@ var init_detached_daemons = __esm({
   }
 });
 
+// packages/server/src/backend/ipc-path.ts
+import { join as join13 } from "node:path";
+function frizzIpcPath(name) {
+  if (process.platform === "win32") return `\\\\.\\pipe\\${name}`;
+  return join13(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
+}
+var init_ipc_path = __esm({
+  "packages/server/src/backend/ipc-path.ts"() {
+    "use strict";
+  }
+});
+
 // packages/server/src/backend/claude-broker-host.ts
 import { spawn } from "node:child_process";
 import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
 import { accessSync, constants as fsConstants, mkdirSync as mkdirSync9, readFileSync as readFileSync9, readdirSync as readdirSync4, unlinkSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { delimiter, dirname as dirname8, isAbsolute as isAbsolute2, join as join13 } from "node:path";
+import { delimiter, dirname as dirname8, isAbsolute as isAbsolute2, join as join14 } from "node:path";
 function windowsShimTarget(shimPath) {
   let body;
   try {
@@ -20616,7 +20639,7 @@ function windowsShimTarget(shimPath) {
   }
   const target = WINDOWS_SHIM_TARGET.exec(body)?.[1];
   if (!target) return void 0;
-  const full = join13(dirname8(shimPath), target);
+  const full = join14(dirname8(shimPath), target);
   try {
     accessSync(full, fsConstants.F_OK);
     return full;
@@ -20631,17 +20654,17 @@ function resolveClaudeExecutableAbsolute(bin, env = process.env) {
   for (const dir of (env.PATH ?? "").split(delimiter)) {
     if (!dir) continue;
     if (windows) {
-      const exe = join13(dir, `${candidate}.exe`);
+      const exe = join14(dir, `${candidate}.exe`);
       try {
         accessSync(exe, fsConstants.F_OK);
         return exe;
       } catch {
       }
-      const viaShim = windowsShimTarget(join13(dir, `${candidate}.cmd`));
+      const viaShim = windowsShimTarget(join14(dir, `${candidate}.cmd`));
       if (viaShim) return viaShim;
       continue;
     }
-    const full = join13(dir, candidate);
+    const full = join14(dir, candidate);
     try {
       accessSync(full, fsConstants.X_OK);
       return full;
@@ -20652,16 +20675,15 @@ function resolveClaudeExecutableAbsolute(bin, env = process.env) {
 }
 function claudeBrokerSocketPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(stateDir).update("\0").update(sessionId).digest("hex").slice(0, 16);
-  if (process.platform === "win32") return `\\\\.\\pipe\\frizz-claude-${key}`;
-  return join13(process.env.TMPDIR ?? "/tmp", `frizz-claude-${key}.sock`);
+  return frizzIpcPath(`frizz-claude-${key}`);
 }
 function claudeBrokerRecordPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join13(stateDir, "claude-broker", `${key}.json`);
+  return join14(stateDir, "claude-broker", `${key}.json`);
 }
 function claudeBrokerRetirementPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join13(stateDir, "claude-broker", `${key}.retired`);
+  return join14(stateDir, "claude-broker", `${key}.retired`);
 }
 function markBrokerRetired(stateDir, sessionId, reason, generation) {
   const mark = { at: (/* @__PURE__ */ new Date()).toISOString(), generation, reason };
@@ -20728,7 +20750,7 @@ function liveBrokerRecord(recordPath2) {
   return null;
 }
 function liveBrokerRecords(stateDir) {
-  const dir = join13(stateDir, "claude-broker");
+  const dir = join14(stateDir, "claude-broker");
   let names;
   try {
     names = readdirSync4(dir);
@@ -20738,7 +20760,7 @@ function liveBrokerRecords(stateDir) {
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const record = liveBrokerRecord(join13(dir, name));
+    const record = liveBrokerRecord(join14(dir, name));
     if (record) out.push(record);
   }
   return out;
@@ -20818,6 +20840,7 @@ var init_claude_broker_host = __esm({
     "use strict";
     init_detached_daemons();
     init_claude_broker_diagnostics();
+    init_ipc_path();
     WINDOWS_SHIM_TARGET = /^\s*"%dp0%\\(.+?)"/mu;
   }
 });
@@ -21546,14 +21569,14 @@ var init_completion_relay = __esm({
 // packages/server/src/tail-cache.ts
 import { createHash as createHash6 } from "node:crypto";
 import { closeSync as closeSync8, openSync as openSync9, readFileSync as readFileSync10, readSync as readSync3, statSync as statSync7 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function foldSchemaDigest(dir = import.meta.dirname) {
   if (foldSchemaMemo) return foldSchemaMemo;
   const hash = createHash6("sha256").update("frizz-tail-state-v1\0");
   let read = 0;
   for (const name of FOLD_SOURCES) {
     try {
-      hash.update(name).update("\0").update(readFileSync10(join14(dir, name)));
+      hash.update(name).update("\0").update(readFileSync10(join15(dir, name)));
       read++;
     } catch {
       hash.update(name).update("\0missing\0");
@@ -21751,7 +21774,7 @@ var init_tail_cache = __esm({
 // packages/server/src/tailer.ts
 import { statSync as statSync8, openSync as openSync10, readSync as readSync4, closeSync as closeSync9, readdirSync as readdirSync5, realpathSync as realpathSync5, mkdirSync as mkdirSync10, writeFileSync as writeFileSync8, readFileSync as readFileSync11, existsSync as existsSync5 } from "node:fs";
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { basename as basename4, join as join15 } from "node:path";
+import { basename as basename4, join as join16 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 function probeShellAlive(outputFile) {
   if (!existsSync5(outputFile)) return void 0;
@@ -22013,7 +22036,7 @@ function launchTaskId(text) {
 function readDescendantSidecars(sessionDir, mtimeMs) {
   let names;
   try {
-    names = readdirSync5(join15(sessionDir, "subagents"));
+    names = readdirSync5(join16(sessionDir, "subagents"));
   } catch {
     return [];
   }
@@ -22024,7 +22047,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
     if (!agentId) continue;
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync11(join15(sessionDir, "subagents", name), "utf8"));
+      parsed = JSON.parse(readFileSync11(join16(sessionDir, "subagents", name), "utf8"));
     } catch {
       continue;
     }
@@ -22038,7 +22061,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
       agentType: text(meta.agentType),
       parentAgentId: text(meta.parentAgentId),
       spawnDepth: typeof meta.spawnDepth === "number" && Number.isFinite(meta.spawnDepth) ? meta.spawnDepth : void 0,
-      spawnedAtMs: mtimeMs(join15(sessionDir, "subagents", name))
+      spawnedAtMs: mtimeMs(join16(sessionDir, "subagents", name))
     });
   }
   return out;
@@ -22518,7 +22541,7 @@ function defaultMtimeMs(path) {
   }
 }
 function defaultLogDir(project) {
-  return join15(homedir7(), ".claude", "projects", project.cwdSlug);
+  return join16(homedir7(), ".claude", "projects", project.cwdSlug);
 }
 function defaultReadPermMarker(project) {
   if (!project.stateDir) return () => void 0;
@@ -22649,7 +22672,7 @@ function createTailer(deps) {
     return paneDead(row.slug);
   }
   const defaultBackend = {
-    transcriptPath: (sessionId) => join15(logDir, `${sessionId}.jsonl`),
+    transcriptPath: (sessionId) => join16(logDir, `${sessionId}.jsonl`),
     foldLine: (state, line) => {
       const rec = parseLine(line);
       if (rec) applyRecord(state, rec);
@@ -22774,7 +22797,7 @@ ${ask}`;
     return state.path.replace(/\.jsonl$/, "");
   }
   function descendantSidecars(state) {
-    const at = mtimeMs(join15(sessionDirOf(state), "subagents"));
+    const at = mtimeMs(join16(sessionDirOf(state), "subagents"));
     const cached2 = descendantIndex.get(state.slug);
     if (cached2 && cached2.at === at) return cached2.all;
     const all = readDescendantSidecars(sessionDirOf(state), mtimeMs);
@@ -22788,7 +22811,7 @@ ${ask}`;
     return descendantIndex.get(state.slug)?.byToolUse.get(id);
   }
   function descendantTranscript(state, meta) {
-    return join15(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
+    return join16(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
   }
   function subAgentDescendantTasks(slug, id) {
     const state = states.get(slug);
@@ -23102,7 +23125,7 @@ ${ask}`;
       if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
       const id = name.slice(0, -".jsonl".length);
       if (!id || registered.has(id)) continue;
-      const path = join15(logDir, name);
+      const path = join16(logDir, name);
       let mtime;
       try {
         mtime = statSync8(path).mtimeMs;
@@ -23374,7 +23397,7 @@ ${ask}`;
     );
     try {
       mkdirSync10(stallLogDir, { recursive: true });
-      writeFileSync8(join15(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
+      writeFileSync8(join16(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
 captured_at: ${new Date(now()).toISOString()}
 
 ${detail}
@@ -23402,7 +23425,7 @@ ${detail}
     state.nextDiscoverMs = nowMs + DISCOVER_RETRY_MS;
     const strandedDir = discoverTranscriptDir(logDir, row.session_id);
     if (strandedDir) {
-      state.path = join15(strandedDir, `${row.session_id}.jsonl`);
+      state.path = join16(strandedDir, `${row.session_id}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -23425,7 +23448,7 @@ ${detail}
         committed = false;
       }
       if (!committed) return false;
-      state.path = join15(logDir, `${found}.jsonl`);
+      state.path = join16(logDir, `${found}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -23471,7 +23494,7 @@ ${detail}
       let state = states.get(row.slug);
       const runtimeGeneration = row.runtime_generation ?? 0;
       if (!state || state.sessionId !== row.session_id || state.nativeSessionId !== nativeId || state.runtimeGeneration !== runtimeGeneration) {
-        const path = backend.transcriptPath(nativeId) ?? join15(logDir, `${nativeId}.jsonl`);
+        const path = backend.transcriptPath(nativeId) ?? join16(logDir, `${nativeId}.jsonl`);
         state = newTailState(row.slug, row.session_id, path, false, nativeId, runtimeGeneration);
         state.dismissedOps = deps.storage.retiredOps(row.slug, row.session_id);
         hydrateFromCache(state, row, nativeId);
@@ -23920,14 +23943,14 @@ var init_tailer = __esm({
 });
 
 // packages/server/src/backend/codex.ts
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import { homedir as homedir8 } from "node:os";
 import { readdirSync as readdirSync6, statSync as statSync9, readFileSync as readFileSync12, openSync as openSync11, readSync as readSync5, closeSync as closeSync10 } from "node:fs";
 function defaultCodexHome() {
-  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join16(homedir8(), ".codex");
+  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join17(homedir8(), ".codex");
 }
 function sessionsDir(codexHome) {
-  return join16(codexHome, "sessions");
+  return join17(codexHome, "sessions");
 }
 function codexSandbox(mode) {
   switch (mode) {
@@ -24308,17 +24331,17 @@ function collectRollouts(dir, out, budget) {
   const files = entries.filter((e) => e.isFile() && e.name.startsWith("rollout-") && e.name.endsWith(".jsonl")).sort(descByName);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    collectRollouts(join16(dir, d.name), out, budget);
+    collectRollouts(join17(dir, d.name), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
     let mtimeMs;
     try {
-      mtimeMs = statSync9(join16(dir, f.name)).mtimeMs;
+      mtimeMs = statSync9(join17(dir, f.name)).mtimeMs;
     } catch {
       continue;
     }
-    out.push({ path: join16(dir, f.name), mtimeMs });
+    out.push({ path: join17(dir, f.name), mtimeMs });
     budget.n--;
   }
 }
@@ -24362,7 +24385,7 @@ function readCodexThreadNames(codexHome = defaultCodexHome()) {
   const out = /* @__PURE__ */ new Map();
   let raw2;
   try {
-    const path = join16(codexHome, "session_index.jsonl");
+    const path = join17(codexHome, "session_index.jsonl");
     if (statSync9(path).size > SESSION_INDEX_MAX_BYTES) return out;
     raw2 = readFileSync12(path, "utf8");
   } catch {
@@ -28400,16 +28423,16 @@ var init_wrapper = __esm({
 
 // packages/server/src/worker-plugin-dir.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { dirname as dirname9, join as join17 } from "node:path";
+import { dirname as dirname9, join as join18 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync6(join17(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync6(join18(override, ".claude-plugin", "plugin.json")))
     return override;
   let current = dirname9(fileURLToPath2(moduleUrl));
   for (; ; ) {
-    const candidate = join17(current, "cc-worker");
-    if (existsSync6(join17(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const candidate = join18(current, "cc-worker");
+    if (existsSync6(join18(candidate, ".claude-plugin", "plugin.json"))) return candidate;
     const parent = dirname9(current);
     if (parent === current) return void 0;
     current = parent;
@@ -28423,7 +28446,7 @@ var init_worker_plugin_dir = __esm({
 
 // packages/server/src/backend/types.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function frizzMcpEnv(mcp) {
   return {
     FRIZZ_STATE_DIR: mcp.stateDir,
@@ -28447,7 +28470,7 @@ function chromeDevtoolsMcpMount() {
 function resolveBrowserMcpScript(moduleUrl = import.meta.url, env = process.env) {
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join18(pluginDir, "bin", CHROME_DEVTOOLS_MCP.script);
+  const scriptPath = join19(pluginDir, "bin", CHROME_DEVTOOLS_MCP.script);
   return existsSync7(scriptPath) ? scriptPath : void 0;
 }
 function workerCap(name, lifted, env) {
@@ -28543,21 +28566,21 @@ var init_codex_mcp = __esm({
 // packages/server/src/backend/codex-app-server-native.ts
 import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
+import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash7, randomUUID as randomUUID9 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync11, readFileSync as readFileSync13, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 function nativeDir(stateDir) {
-  return join19(stateDir, "codex-app-server-native");
+  return join20(stateDir, "codex-app-server-native");
 }
 function nativeRecordPath(stateDir, projectId) {
-  return join19(nativeDir(stateDir), `${projectId}.json`);
+  return join20(nativeDir(stateDir), `${projectId}.json`);
 }
 function nativeListenSocketPath(stateDir, projectId) {
   const key = createHash7("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
-  if (process.platform === "win32") return `\\\\.\\pipe\\frizz-codex-native-${key}`;
-  return join19(process.env.TMPDIR ?? "/tmp", `frizz-codex-native-${key}.sock`);
+  return frizzIpcPath(`frizz-codex-native-${key}`);
 }
 function pidAlive2(pid) {
   try {
@@ -28634,9 +28657,18 @@ function socketAccepting(socketPath) {
     setTimeout(() => done(false), 2e3).unref?.();
   });
 }
+function ipcWebSocket(endpoint) {
+  if (process.platform !== "win32") return new import_websocket.default(`ws+unix://${endpoint}:/`, { perMessageDeflate: false });
+  class PipeAgent extends HttpAgent {
+    createConnection() {
+      return connect(endpoint);
+    }
+  }
+  return new import_websocket.default("ws://localhost/", { agent: new PipeAgent(), perMessageDeflate: false });
+}
 function attach(record, timeoutMs) {
   return new Promise((resolve10, reject) => {
-    const socket = new import_websocket.default(`ws+unix://${record.socketPath}:/`, { perMessageDeflate: false });
+    const socket = ipcWebSocket(record.socketPath);
     const stdout = new PassThrough();
     const stderr = new PassThrough();
     const listeners = { exit: [], error: [] };
@@ -28753,6 +28785,7 @@ var init_codex_app_server_native = __esm({
   "packages/server/src/backend/codex-app-server-native.ts"() {
     "use strict";
     init_wrapper();
+    init_ipc_path();
     init_codex_mcp();
     init_logging();
     PRESUMED_LOSSY_REJOIN = 1;
@@ -28804,23 +28837,22 @@ var init_codex_app_server_native = __esm({
 });
 
 // packages/server/src/backend/codex-app-server-host.ts
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn3, spawnSync } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync9, mkdirSync as mkdirSync12, readFileSync as readFileSync14, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 function daemonDir(stateDir) {
-  return join20(stateDir, "codex-app-server");
+  return join21(stateDir, "codex-app-server");
 }
 function recordPath(stateDir, projectId) {
-  return join20(daemonDir(stateDir), `${projectId}.json`);
+  return join21(daemonDir(stateDir), `${projectId}.json`);
 }
 function codexAppServerSocketPath(stateDir, projectId) {
   const key = createHash8("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
-  if (process.platform === "win32") return `\\\\.\\pipe\\frizz-codex-${key}`;
-  return join20(process.env.TMPDIR ?? "/tmp", `frizz-codex-${key}.sock`);
+  return frizzIpcPath(`frizz-codex-${key}`);
 }
 function pidAlive3(pid) {
   try {
@@ -28871,13 +28903,26 @@ function liveDaemonRecord(stateDir, projectId) {
   }
   return null;
 }
+function endDaemonTree(pid, signal) {
+  if (process.platform !== "win32") {
+    try {
+      process.kill(pid, signal);
+    } catch {
+    }
+    return;
+  }
+  const killed = spawnSync("taskkill", ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+  if (killed.error || killed.status !== 0) {
+    try {
+      process.kill(pid, signal);
+    } catch {
+    }
+  }
+}
 function killCodexAppServerDaemon(stateDir, projectId) {
   const record = liveDaemonRecord(stateDir, projectId);
   if (!record) return;
-  try {
-    process.kill(record.daemonPid, "SIGTERM");
-  } catch {
-  }
+  endDaemonTree(record.daemonPid, "SIGTERM");
   try {
     unlinkSync3(recordPath(stateDir, projectId));
   } catch {
@@ -28893,10 +28938,7 @@ async function stopCodexAppServerDaemon(stateDir, projectId, timeoutMs = 1e4) {
     await new Promise((resolve10) => setTimeout(resolve10, 25));
   }
   if (pidAlive3(record.daemonPid)) {
-    try {
-      process.kill(record.daemonPid, "SIGKILL");
-    } catch {
-    }
+    endDaemonTree(record.daemonPid, "SIGKILL");
     while (pidAlive3(record.daemonPid) && Date.now() < deadline + 2e3) {
       await new Promise((resolve10) => setTimeout(resolve10, 25));
     }
@@ -29043,6 +29085,14 @@ function inProcessCodexAppServer(options) {
     env: options.env,
     stdio: ["pipe", "pipe", "pipe"]
   });
+  const kill = child.kill.bind(child);
+  child.kill = ((signal) => {
+    try {
+      return kill(signal);
+    } catch {
+      return false;
+    }
+  });
   return { process: child, generation: randomUUID10(), reattached: false, daemonPid: process.pid, droppedWhileDetached: 0 };
 }
 function directChildHost(spawnChild, generationId = randomUUID10) {
@@ -29060,6 +29110,7 @@ var init_codex_app_server_host = __esm({
     "use strict";
     init_detached_daemons();
     init_codex_app_server_native();
+    init_ipc_path();
     init_codex_mcp();
     init_logging();
     daemonEntry = () => resolveDetachedDaemonEntry(import.meta.url, "codex-app-server-daemon");
@@ -32025,11 +32076,11 @@ var init_codex_app_server = __esm({
 });
 
 // packages/server/src/backend/codex-quota.ts
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 import { readdirSync as readdirSync7, statSync as statSync10, openSync as openSync12, readSync as readSync6, fstatSync, closeSync as closeSync11 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
 function sessionsDir2(codexHome) {
-  return join21(codexHome, "sessions");
+  return join22(codexHome, "sessions");
 }
 function newestRollouts(dir, out, budget) {
   if (budget.n <= 0) return;
@@ -32043,11 +32094,11 @@ function newestRollouts(dir, out, budget) {
   const files = entries.filter((e) => e.isFile() && e.name.startsWith("rollout-") && e.name.endsWith(".jsonl")).map((e) => e.name).sort(descByName2);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    newestRollouts(join21(dir, d), out, budget);
+    newestRollouts(join22(dir, d), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
-    out.push(join21(dir, f));
+    out.push(join22(dir, f));
     budget.n--;
   }
 }
@@ -32247,7 +32298,7 @@ var init_codex_quota = __esm({
 });
 
 // packages/server/src/backend/claude-quota.ts
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 import { homedir as homedir9, platform } from "node:os";
 import { createHash as createHash10 } from "node:crypto";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -32255,7 +32306,7 @@ import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 function claudeConfigDir() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join22(homedir9(), ".claude");
+  return override && override.trim() ? override : join23(homedir9(), ".claude");
 }
 function tokenFromCredentialsJson(raw2) {
   let doc;
@@ -32284,7 +32335,7 @@ async function readKeychainToken() {
 }
 async function readAccessToken(configDir) {
   try {
-    const fromFile = tokenFromCredentialsJson(await readFile(join22(configDir, ".credentials.json"), "utf8"));
+    const fromFile = tokenFromCredentialsJson(await readFile(join23(configDir, ".credentials.json"), "utf8"));
     if (fromFile) return fromFile;
   } catch {
   }
@@ -32353,8 +32404,8 @@ function parseClaudeUsage(body, planType) {
 function cachePaths(cacheDir, configDir) {
   const profile = createHash10("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
-    data: join22(cacheDir, `claude-${profile}.json`),
-    lock: join22(cacheDir, `claude-${profile}.lock`)
+    data: join23(cacheDir, `claude-${profile}.json`),
+    lock: join23(cacheDir, `claude-${profile}.lock`)
   };
 }
 async function readShared(path) {
@@ -32546,7 +32597,7 @@ function refreshSharedInBackground(paths, claudeBin, deps, now) {
 async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join22(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
   } catch {
@@ -32557,7 +32608,7 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join22(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
   const paths = cachePaths(cacheDir, configDir);
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
@@ -32716,7 +32767,7 @@ var init_quota = __esm({
 // packages/server/src/frizz.ts
 import { execFile as execFile3 } from "node:child_process";
 import { lstatSync as lstatSync2, realpathSync as realpathSync6 } from "node:fs";
-import { basename as basename5, dirname as dirname10, join as join23, resolve as resolve4 } from "node:path";
+import { basename as basename5, dirname as dirname10, join as join24, resolve as resolve4 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
@@ -32725,7 +32776,7 @@ function frizzScriptsDir() {
 function directFrizzRoot(projectDir) {
   try {
     const projectRoot = realpathSync6(projectDir);
-    const path = join23(projectRoot, ".frizz");
+    const path = join24(projectRoot, ".frizz");
     const stat2 = lstatSync2(path);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
     const real = realpathSync6(path);
@@ -32739,7 +32790,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join23(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join24(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -32764,7 +32815,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join23(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join24(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -34649,19 +34700,19 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/backend/auth-status.ts
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 import { homedir as homedir11, platform as platform2 } from "node:os";
 import { readFileSync as readFileSync15, statSync as statSync11 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join24(homedir11(), ".claude");
+  return override && override.trim() ? override : join25(homedir11(), ".claude");
 }
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync15(join24(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync15(join25(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -34694,7 +34745,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync15(join24(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync15(join25(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -34759,7 +34810,7 @@ function asEmail(value) {
 }
 function claudeAccountFile() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? join24(override, ".claude.json") : join24(homedir11(), ".claude.json");
+  return override && override.trim() ? join25(override, ".claude.json") : join25(homedir11(), ".claude.json");
 }
 function readClaudeAccountEmail(path = claudeAccountFile()) {
   let stat2;
@@ -34783,7 +34834,7 @@ function readClaudeAccountEmail(path = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync15(join24(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync15(join25(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -34851,7 +34902,7 @@ var init_auth_status = __esm({
 
 // packages/server/src/dispatch.ts
 import { closeSync as closeSync12, constants, existsSync as existsSync10, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync16, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync8 } from "node:fs";
-import { basename as basename6, join as join25, dirname as dirname11 } from "node:path";
+import { basename as basename6, join as join26, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -34870,7 +34921,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync10(join25(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync10(join26(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -34887,12 +34938,12 @@ function resolveLegacyThreadFile(projectDir, value) {
   if (!parsed.success) return null;
   try {
     const projectRoot = realpathSync7(projectDir);
-    const frizzPath = join25(projectRoot, ".frizz");
+    const frizzPath = join26(projectRoot, ".frizz");
     const frizzStat = lstatSync3(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
     const realFrizz = realpathSync7(frizzPath);
     if (dirname11(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path = join25(realFrizz, `${parsed.data}.md`);
+    const path = join26(realFrizz, `${parsed.data}.md`);
     const before = lstatSync3(path);
     if (!before.isFile() || before.isSymbolicLink()) return null;
     const realPath = realpathSync7(path);
@@ -34936,7 +34987,7 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path = join25(parent, name);
+  const path = join26(parent, name);
   try {
     mkdirSync13(path);
   } catch (error) {
@@ -34966,8 +35017,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join25(plugin, "skills", "gh", "scripts");
-  return existsSync10(join25(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join26(plugin, "skills", "gh", "scripts");
+  return existsSync10(join26(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -34979,7 +35030,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join25(dirname11(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join26(dirname11(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -35005,7 +35056,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join25(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join26(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -35021,7 +35072,7 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work. On a long effort write the doc you would want if you lost your context (${children2}), then arm mcp__frizz__recurring_prompt with post_compaction: true and a prompt LINKING that file \u2014 frizz hands the link back when your context is compacted. Nothing in this directory is read automatically.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path = join25(projectDir, "FRIZZ.md");
+  const path = join26(projectDir, "FRIZZ.md");
   let body;
   try {
     const st = statSync12(path);
@@ -35061,7 +35112,7 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join25(pluginDir, "bin", FRIZZ_MCP.script);
+  const scriptPath = join26(pluginDir, "bin", FRIZZ_MCP.script);
   if (!existsSync10(scriptPath)) return void 0;
   return {
     scriptPath,
@@ -35144,7 +35195,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join25(deps.project.dir, ".frizz");
+  const frizzDir = join26(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path of new Set(built.prewrite.map((file) => file.path))) {
@@ -35157,7 +35208,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync8(join25(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync8(join26(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -35590,7 +35641,7 @@ import {
   watch as fsWatch
 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -36275,7 +36326,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const next = await subscribe(join26(project.dir, ".frizz"), () => scheduleRebuild());
+      const next = await subscribe(join27(project.dir, ".frizz"), () => scheduleRebuild());
       if (stopped) {
         await next.unsubscribe();
         return;
@@ -38209,7 +38260,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -38298,7 +38349,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join27(opts.logDir, `${sessionId}.jsonl`);
+      return join28(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -38468,12 +38519,12 @@ var init_login_utility = __esm({
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
 import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync13 } from "node:fs";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join28(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join29(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join28(stateDir, "codex-app-server");
+  const dir = join29(stateDir, "codex-app-server");
   const path = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
@@ -38505,7 +38556,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile7 } from "node:child_process";
 import { readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -38522,7 +38573,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join29(options.dir, name)).filter((path) => !keep.has(path));
+    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join30(options.dir, name)).filter((path) => !keep.has(path));
   } catch {
     return;
   }
@@ -38986,7 +39037,7 @@ var init_thread_hibernation = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { homedir as homedir13 } from "node:os";
 function reconcileSessions(storage) {
@@ -39144,7 +39195,7 @@ async function createContext(opts = {}) {
 function createContextUnchecked(opts, resources) {
   const home = opts.home ?? homedir13();
   const project = opts.project ?? resolveProject();
-  const dbPath = join30(project.stateDir, "ui.db");
+  const dbPath = join31(project.stateDir, "ui.db");
   const storage = createStorage(dbPath);
   resources.storage = storage;
   const bus = new Bus();
@@ -39472,6 +39523,7 @@ ${wakeDeliveryToken(deliveryId)}`;
     getSettings: () => getSettings(storage, home),
     setSettings: (s) => setSettings(storage, s, home),
     resetSettings: () => resetSettings(storage, home),
+    activeTenants: opts.activeTenants,
     claudeBin: opts.claudeBin,
     codexBin: opts.codexBin,
     loginUtility: createLoginUtility({ claudeBin: opts.claudeBin, codexBin: opts.codexBin, cwd: project.dir })
@@ -42381,7 +42433,7 @@ var init_bash_background = __esm({
 import { closeSync as closeSync13, existsSync as existsSync13, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync20, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 import { homedir as homedir14 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
@@ -42931,14 +42983,14 @@ function pruneScreenshotCache() {
     if (entries.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries.map((n) => {
       try {
-        return { n, m: statSync14(join31(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync14(join32(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync5(join31(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync5(join32(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -42968,14 +43020,14 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path = join31(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path = join32(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
     if (existsSync13(path)) return path;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join31(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join32(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, path);
     pruneScreenshotCache();
@@ -42990,14 +43042,14 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join31(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    const dest = join32(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
     if (existsSync13(dest)) return dest;
     const size = statSync14(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
     const buf = readFileSync20(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join31(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join32(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, dest);
     pruneScreenshotCache();
@@ -43434,16 +43486,16 @@ function verifyIncrementalParse(path, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join31(homedir14(), ".claude", "projects", project.cwdSlug);
+  return join32(homedir14(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path = join31(logDirOf(project), `${sessionId}.jsonl`);
+  const path = join32(logDirOf(project), `${sessionId}.jsonl`);
   try {
     if (statSync14(path).size > 0) return path;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join31(stranded, `${sessionId}.jsonl`) : path;
+  return stranded ? join32(stranded, `${sessionId}.jsonl`) : path;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -44839,7 +44891,7 @@ var init_open_external = __esm({
 import { spawn as spawn6 } from "node:child_process";
 import { readFileSync as readFileSync21, realpathSync as realpathSync8, statSync as statSync15 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join32, resolve as resolve7, sep } from "node:path";
+import { isAbsolute as isAbsolute3, join as join33, resolve as resolve7, sep } from "node:path";
 function isUnder(real, root) {
   let rootReal;
   try {
@@ -44869,7 +44921,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir15()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join32(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join33(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -45641,7 +45693,7 @@ var init_directory_picker = __esm({
 
 // packages/server/src/router.ts
 import { readFileSync as readFileSync22, statSync as statSync17 } from "node:fs";
-import { join as join33, resolve as resolve8 } from "node:path";
+import { join as join34, resolve as resolve8 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { basename as basename9, dirname as dirname14 } from "node:path";
 import { existsSync as existsSync14, mkdirSync as mkdirSync16, rmSync as rmSync9, writeFileSync as writeFileSync13 } from "node:fs";
@@ -45804,7 +45856,7 @@ function projectCard(entry, stale) {
 function addProjectAtPath(input) {
   const typed = input.trim();
   if (!typed) throw new Error("Enter a folder path.");
-  const expanded = typed === "~" || typed.startsWith("~/") ? join33(homedir16(), typed.slice(1)) : typed;
+  const expanded = typed === "~" || typed.startsWith("~/") ? join34(homedir16(), typed.slice(1)) : typed;
   const absolute = resolve8(expanded);
   let stats;
   try {
@@ -45857,7 +45909,7 @@ function setProjectIconFromFile(id, file) {
   return storeProjectIcon(id, file, bytes);
 }
 function createRouter(ctx) {
-  const frizzDir = join33(ctx.project.dir, ".frizz");
+  const frizzDir = join34(ctx.project.dir, ".frizz");
   const openRoots = openableFileRoots(ctx.project);
   function isAutoTitledSession(slug) {
     return ctx.storage.getSession(slug)?.title_auto === 1;
@@ -47362,6 +47414,35 @@ ${gapNote}` : input.message;
       output: external_exports.array(ProjectCard),
       handler: async () => listProjects().map((entry) => projectCard(entry, entry.stale))
     }),
+    /**
+     * How many threads are in each project's queue, keyed by project id — the rail's badges.
+     *
+     * MACHINE-WIDE, answered from the boards this process has OPEN. A queue count is a board fact:
+     * `needsYou` is derived from the tailer's live view of each session, so a project nobody has
+     * opened since boot has no honest count, and it is left out rather than guessed at or opened for
+     * the purpose (activating a project to badge it is exactly the cost lazy activation exists to
+     * avoid — see tenants.ts). Absent ⇒ no badge; the project the operator is looking at is always
+     * present, and the client draws THAT one from its own live board anyway.
+     *
+     * Kept OFF `projectsList` on purpose: that list is one registry-file read, cheap enough to be the
+     * home page with forty projects, and this is a walk over live boards. The cached snapshot makes
+     * it cheap too — but cheap-and-polled is a different budget from cheap-and-once.
+     */
+    projectsQueueCounts: query({
+      output: external_exports.record(external_exports.string(), external_exports.number().int().nonnegative()),
+      handler: async () => {
+        const counts = {};
+        const open = ctx.activeTenants?.() ?? [{ project: ctx.project, board: ctx.board }];
+        for (const { project, board } of open) {
+          try {
+            const { threads } = await board.snapshot();
+            counts[project.id] = threads.filter(queuedThread).length;
+          } catch {
+          }
+        }
+        return counts;
+      }
+    }),
     /**
      * Pin the rail's order.
      *
@@ -47483,7 +47564,7 @@ ${gapNote}` : input.message;
         for (const entry of listProjects()) {
           if (entry.stale) continue;
           try {
-            const db = new sqlite_default(join33(projectStateDir(entry.id), "ui.db"), { readonly: true });
+            const db = new sqlite_default(join34(projectStateDir(entry.id), "ui.db"), { readonly: true });
             try {
               const hit = db.prepare("SELECT 1 FROM session WHERE slug = ? LIMIT 1").get(input.slug);
               if (hit) found.push({ projectSlug: entry.slug, projectName: entry.name ?? entry.slug });
@@ -47876,7 +47957,7 @@ var init_local_image = __esm({
 // packages/server/src/project-icon.ts
 import { readFileSync as readFileSync24, readdirSync as readdirSync10, realpathSync as realpathSync10, statSync as statSync19 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
-import { basename as basename10, dirname as dirname15, extname as extname3, join as join34, relative, sep as sep2 } from "node:path";
+import { basename as basename10, dirname as dirname15, extname as extname3, join as join35, relative, sep as sep2 } from "node:path";
 function normalizeStem(stem) {
   const sized = stem.toLowerCase().replace(/[@-]\d+(\.\d+)?x(\d+)?$/u, "").replace(/[-_]\d{2,4}$/u, "");
   const normalized = sized.replace(VARIANT_SUFFIX, "");
@@ -47894,7 +47975,7 @@ function sizeScore(dimensions) {
   return Math.max(0, Math.min(40, Math.round(Math.log2(edge / 24) * 8)));
 }
 function under(root, relativeDirectory) {
-  return relativeDirectory ? join34(root, relativeDirectory) : root;
+  return relativeDirectory ? join35(root, relativeDirectory) : root;
 }
 function listFiles(directory) {
   try {
@@ -47916,19 +47997,19 @@ function iconDirectories(root) {
   for (const asset of ASSET_DIRECTORIES) directories.push(under(root, asset));
   for (const host of HOST_DIRECTORIES) {
     if (!children2.has(host)) continue;
-    for (const asset of ASSET_DIRECTORIES) directories.push(under(join34(root, host), asset));
+    for (const asset of ASSET_DIRECTORIES) directories.push(under(join35(root, host), asset));
   }
   for (const extra of EXTRA_DIRECTORIES) directories.push(under(root, extra));
   for (const container of WORKSPACE_CONTAINERS) {
     if (!children2.has(container)) continue;
     let members;
     try {
-      members = readdirSync10(join34(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+      members = readdirSync10(join35(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
     } catch {
       continue;
     }
     for (const member of members) {
-      for (const asset of ASSET_DIRECTORIES) directories.push(under(join34(root, container, member), asset));
+      for (const asset of ASSET_DIRECTORIES) directories.push(under(join35(root, container, member), asset));
     }
   }
   return [...new Set(directories)];
@@ -47942,7 +48023,7 @@ function manifestIcons(manifestPath) {
   }
   if (!Array.isArray(parsed?.icons)) return [];
   const directory = dirname15(manifestPath);
-  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join34(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
+  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join35(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
 }
 function projectIconCandidates(root) {
   const projectStem = normalizeStem(basename10(root)).normalized;
@@ -47961,7 +48042,7 @@ function projectIconCandidates(root) {
     for (const name of listFiles(directory)) {
       const extension2 = extname3(name).toLowerCase();
       if (MANIFEST_NAMES.includes(name.toLowerCase())) {
-        for (const icon of manifestIcons(join34(directory, name))) {
+        for (const icon of manifestIcons(join35(directory, name))) {
           if (MEASURABLE_IMAGE_EXTENSIONS.has(extname3(icon).toLowerCase())) {
             fromManifest.add(icon);
             files.push({ path: icon, directory: dirname15(icon) });
@@ -47972,7 +48053,7 @@ function projectIconCandidates(root) {
       if (!MEASURABLE_IMAGE_EXTENSIONS.has(extension2)) continue;
       const stem = name.slice(0, name.length - extension2.length);
       if (normalizeStem(stem).normalized === "favicon") iconHomes.add(directory);
-      files.push({ path: join34(directory, name), directory });
+      files.push({ path: join35(directory, name), directory });
       if (files.length >= MAX_CANDIDATES) break;
     }
   }
@@ -48150,7 +48231,7 @@ var init_project_icon = __esm({
 
 // packages/server/src/local-visualization.ts
 import { readdirSync as readdirSync11, readFileSync as readFileSync25, realpathSync as realpathSync11, statSync as statSync20 } from "node:fs";
-import { join as join35, sep as sep3 } from "node:path";
+import { join as join36, sep as sep3 } from "node:path";
 function children(path, pattern) {
   try {
     return readdirSync11(path, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
@@ -48162,7 +48243,7 @@ function isUnder2(path, root) {
   return path === root || path.startsWith(root.endsWith(sep3) ? root : root + sep3);
 }
 function resolveFragment(projectDir, sessionId, file) {
-  const base = join35(projectDir, ".codex", "visualizations");
+  const base = join36(projectDir, ".codex", "visualizations");
   let projectReal;
   let baseReal;
   try {
@@ -48173,12 +48254,12 @@ function resolveFragment(projectDir, sessionId, file) {
   }
   if (!isUnder2(baseReal, projectReal)) return null;
   for (const year of children(base, YEAR_PART)) {
-    const yearDir = join35(base, year);
+    const yearDir = join36(base, year);
     for (const month of children(yearDir, DATE_PART)) {
-      const monthDir = join35(yearDir, month);
+      const monthDir = join36(yearDir, month);
       for (const day of children(monthDir, DATE_PART)) {
-        const sessionRoot = join35(baseReal, year, month, day, sessionId);
-        const candidate = join35(monthDir, day, sessionId, file);
+        const sessionRoot = join36(baseReal, year, month, day, sessionId);
+        const candidate = join36(monthDir, day, sessionId, file);
         try {
           const real = realpathSync11(candidate);
           if (isUnder2(real, sessionRoot) && statSync20(real).isFile()) return real;
@@ -48307,7 +48388,7 @@ var init_local_visualization = __esm({
 
 // packages/server/src/app.ts
 import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 import { randomUUID as randomUUID17 } from "node:crypto";
 function createApp(ctx, options = {}) {
   const app = new Hono2();
@@ -48411,10 +48492,10 @@ function createApp(ctx, options = {}) {
     if (typeof body.data !== "string" || body.data.length > ATTACHMENT_MAX_BASE64_CHARS) return c.json({ error: "bad payload" }, 400);
     const ext = `.${attachmentExtension(name)}`;
     const buf = Buffer.from(body.data, "base64");
-    const dir = join36(ctx.project.stateDir, "attachments");
+    const dir = join37(ctx.project.stateDir, "attachments");
     mkdirSync17(dir, { recursive: true });
     const base = name.replace(/\.[^.]+$/, "").replace(/[^a-zA-Z0-9_-]+/g, "-").slice(0, 40) || "file";
-    const path = join36(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
+    const path = join37(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
     writeFileSync14(path, buf);
     return c.json({ path });
   });
@@ -49654,9 +49735,9 @@ var init_app_socket = __esm({
 
 // packages/server/src/boot-progress.ts
 import { mkdirSync as mkdirSync18, readFileSync as readFileSync26, renameSync as renameSync10, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "node:fs";
-import { basename as basename11, dirname as dirname16, join as join37 } from "node:path";
+import { basename as basename11, dirname as dirname16, join as join38 } from "node:path";
 function bootProgressPath(stateDir) {
-  return join37(stateDir, BOOT_PROGRESS_NAME);
+  return join38(stateDir, BOOT_PROGRESS_NAME);
 }
 function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   if (!stateDir) {
@@ -49677,7 +49758,7 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
     step++;
     try {
       mkdirSync18(dirname16(path), { recursive: true, mode: 448 });
-      const temp = join37(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
+      const temp = join38(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
       writeFileSync15(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
 `, "utf8");
       renameSync10(temp, path);
@@ -49795,7 +49876,7 @@ __export(index_exports, {
 });
 import { createServer } from "node:http";
 import { readFileSync as readFileSync27, existsSync as existsSync15 } from "node:fs";
-import { dirname as dirname17, join as join38, resolve as resolve9, extname as extname4, normalize } from "node:path";
+import { dirname as dirname17, join as join39, resolve as resolve9, extname as extname4, normalize } from "node:path";
 function readServerAddressHolder(path) {
   try {
     const value = JSON.parse(readFileSync27(path, "utf8"));
@@ -49898,9 +49979,9 @@ function createShutdownSignalHandler(options) {
 }
 function serveStatic(distDir, req, res) {
   const rel = normalize((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
-  let file = join38(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join38(distDir, "index.html");
-  if (!existsSync15(file)) file = join38(distDir, "index.html");
+  let file = join39(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir)) file = join39(distDir, "index.html");
+  if (!existsSync15(file)) file = join39(distDir, "index.html");
   try {
     const body = readFileSync27(file);
     res.writeHead(200, { "content-type": MIME[extname4(file)] ?? "application/octet-stream" });
@@ -49931,6 +50012,7 @@ async function startServer(opts = {}) {
       `${candidate.name} is already being served by another Frizz (pid ${other}). Stop that one first \u2014 two servers on one board would fire its timers and recurring prompts twice.`
     );
   };
+  const activeTenants = () => tenants.active().map(({ project: open, ctx: openCtx }) => ({ project: open, board: openCtx.board }));
   const tenants = createTenantMap({
     createContext: (contextOptions) => {
       if (contextOptions.project) assertNotServedElsewhere(contextOptions.project);
@@ -49938,7 +50020,7 @@ async function startServer(opts = {}) {
     },
     // serverLockPath is the LAUNCHING project's: it is the only `server.lock` this process publishes
     // (see "status publication"), so it is the only file a tenant's worker can read the port out of.
-    contextOptions: { claudeBin: opts.claudeBin, serverLockPath: serverLockPathFor(project) },
+    contextOptions: { claudeBin: opts.claudeBin, serverLockPath: serverLockPathFor(project), activeTenants },
     // Each project's app carries ITS OWN owner proof, so /health stays honest per project rather than
     // answering for whichever one happened to launch the server. The transports are per project for a
     // blunter reason: a socket is a live feed of ONE board, so sharing the launcher's would push its
@@ -50197,6 +50279,7 @@ async function startServer(opts = {}) {
         claudeBin: opts.claudeBin,
         project,
         serverLockPath: serverLockPathFor(project),
+        activeTenants,
         startup: {
           afterPhase: (p) => {
             bootProgress(`context: ${p}`);
@@ -50249,7 +50332,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve9(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join38(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join39(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -50325,7 +50408,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync27(join38(webRoot, "index.html"), "utf8");
+            const html = readFileSync27(join39(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -50517,7 +50600,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join38(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join39(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -50536,7 +50619,7 @@ init_project_launch();
 init_shutdown();
 init_logging();
 import { existsSync as existsSync16 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -50576,7 +50659,7 @@ try {
     ];
     if (!existsSync16(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync16(join39(directory, requiredFile)))
+      if (!directory || !existsSync16(join40(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }