frizz 0.7.3 → 0.7.5

package/dist/dev-child.js

@@ -129,6 +129,7 @@ var init_frizz_paths = __esm({
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
+import { join as join2 } from "node:path";
 function errorCode(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
 }
@@ -169,6 +170,38 @@ function fixedPsGeneration(pid) {
     return null;
   }
 }
+function windowsGeneration(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return null;
+  try {
+    const shell = join2(
+      process.env.SystemRoot ?? "C:\\Windows",
+      "System32",
+      "WindowsPowerShell",
+      "v1.0",
+      "powershell.exe"
+    );
+    const value = execFileSync(shell, [
+      "-NoProfile",
+      "-NonInteractive",
+      "-NoLogo",
+      "-Command",
+      // A vanished PID, a protected process and an access-denied StartTime all throw. Exit non-zero
+      // so execFileSync rejects, rather than letting PowerShell's error prose become a marker.
+      `try{[Console]::Out.Write((Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToFileTimeUtc())}catch{exit 1}`
+    ], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      // A wedged spawn must not hold a launcher's poll loop open forever; a timeout reads as
+      // unavailable, which retains the owner.
+      timeout: 5e3,
+      windowsHide: true
+    }).trim();
+    if (!/^\d{1,20}$/u.test(value)) return null;
+    return { processStart: `win32:${value}`, confidence: "exact" };
+  } catch {
+    return null;
+  }
+}
 function observeDefault(pid) {
   if (!processAlive(pid)) return { confidence: "unavailable" };
   if (process.platform === "linux") {
@@ -178,6 +211,7 @@ function observeDefault(pid) {
     return fallback ?? { confidence: "unavailable" };
   }
   if (process.platform === "darwin") return fixedPsGeneration(pid) ?? { confidence: "unavailable" };
+  if (process.platform === "win32") return windowsGeneration(pid) ?? { confidence: "unavailable" };
   return { confidence: "unavailable" };
 }
 function observeProcessGeneration(generation, adapter = defaultProcessPlatformAdapter) {
@@ -185,7 +219,7 @@ function observeProcessGeneration(generation, adapter = defaultProcessPlatformAd
   const self = adapter.current();
   if (generation.pid === self.pid && generation.processStart === self.processStart) return "exact";
   if (generation.processStart.startsWith("opaque:")) return "unavailable";
-  if (!/^(?:linux|ps-utc|opaque):/u.test(generation.processStart)) return "unavailable";
+  if (!/^(?:linux|ps-utc|win32|opaque):/u.test(generation.processStart)) return "unavailable";
   const observed = adapter.observe(generation.pid);
   if (!observed.processStart || observed.confidence === "unavailable") return "unavailable";
   if (observed.processStart.split(":", 1)[0] !== generation.processStart.split(":", 1)[0]) {
@@ -241,7 +275,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname2, join as join2, resolve } from "node:path";
+import { dirname as dirname2, join as join3, resolve } from "node:path";
 function errorCode2(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
 }
@@ -256,7 +290,7 @@ function canonicalHome(home) {
   }
 }
 function namedLaunchLockPath(home, name) {
-  return join2(frizzPaths({ home: canonicalHome(home) }).state, name);
+  return join3(frizzPaths({ home: canonicalHome(home) }).state, name);
 }
 function pidIsAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
@@ -284,7 +318,7 @@ function syncDirectory(path) {
 }
 function lockOwnerPath(lockPath) {
   try {
-    return statSync(lockPath).isDirectory() ? join2(lockPath, GLOBAL_LOCK_OWNER) : lockPath;
+    return statSync(lockPath).isDirectory() ? join3(lockPath, GLOBAL_LOCK_OWNER) : lockPath;
   } catch {
     return lockPath;
   }
@@ -446,7 +480,7 @@ function resolveGitWorktree(dir) {
     // Do not enable Git's repository-wide `extensions.worktreeConfig` merely to hold one private Frizz
     // value. A config file inside the linked worktree's own administrative directory has Git's atomic
     // config-lock behavior, survives `git worktree move`, and disappears with `git worktree remove`.
-    ...scope === "worktree" ? { identityConfig: join2(gitDir, "frizz.config") } : {}
+    ...scope === "worktree" ? { identityConfig: join3(gitDir, "frizz.config") } : {}
   };
 }
 function readProjectIdConfig(dir, args, description) {
@@ -615,9 +649,9 @@ var init_project_identity = __esm({
 import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
 import { closeSync as closeSync2, existsSync as existsSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync2, openSync as openSync2, readFileSync as readFileSync3, realpathSync as realpathSync2, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { dirname as dirname3, join as join3, parse, resolve as resolve2 } from "node:path";
+import { dirname as dirname3, join as join4, parse, resolve as resolve2 } from "node:path";
 function projectIdPath(root) {
-  return join3(root, FRIZZ_DIR, ID_FILE);
+  return join4(root, FRIZZ_DIR, ID_FILE);
 }
 function readProjectIdFile(root) {
   let raw2;
@@ -633,9 +667,9 @@ function readProjectIdFile(root) {
   }
 }
 function writeProjectIdFile(root, id) {
-  const dir = join3(root, FRIZZ_DIR);
+  const dir = join4(root, FRIZZ_DIR);
   mkdirSync2(dir, { recursive: true });
-  const ignore = join3(dir, SELF_IGNORE);
+  const ignore = join4(dir, SELF_IGNORE);
   if (!existsSync2(ignore)) {
     try {
       writeFileSync2(ignore, "*\n", { flag: "wx" });
@@ -643,7 +677,7 @@ function writeProjectIdFile(root, id) {
     }
   }
   const path = projectIdPath(root);
-  const temp = join3(dir, `.${ID_FILE}.${process.pid}.${randomUUID3()}.tmp`);
+  const temp = join4(dir, `.${ID_FILE}.${process.pid}.${randomUUID3()}.tmp`);
   let fd;
   try {
     fd = openSync2(temp, "wx", 384);
@@ -684,7 +718,7 @@ function ensureProjectIdFile(root, home = homedir3(), seed) {
   }
 }
 function hasAny(dir, names) {
-  return names.some((name) => existsSync2(join3(dir, name)));
+  return names.some((name) => existsSync2(join4(dir, name)));
 }
 function existingProjectId(dir) {
   const fromFile = readProjectIdFile(dir);
@@ -14925,9 +14959,9 @@ ${DISPATCH_TASK_BANNER}
 // packages/server/src/project-registry.ts
 import { closeSync as closeSync3, existsSync as existsSync3, fsyncSync as fsyncSync3, mkdirSync as mkdirSync3, openSync as openSync3, readFileSync as readFileSync4, readdirSync, realpathSync as realpathSync3, renameSync as renameSync3, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { basename, dirname as dirname4, join as join4 } from "node:path";
+import { basename, dirname as dirname4, join as join5 } from "node:path";
 function registryPath(home = homedir4()) {
-  return join4(frizzPaths({ home }).data, "registry.json");
+  return join5(frizzPaths({ home }).data, "registry.json");
 }
 function readRegistry(home = homedir4()) {
   let raw2;
@@ -15016,7 +15050,7 @@ function registerProject(input, home = homedir4()) {
       writeRegistry(registry, home);
       return { entry: byId, action: "reopened" };
     }
-    if (existsSync3(join4(byId.path, ".frizz", ".id"))) return { action: "duplicate" };
+    if (existsSync3(join5(byId.path, ".frizz", ".id"))) return { action: "duplicate" };
     byId.path = input.dir;
     byId.lastOpenedAt = at;
     writeRegistry(registry, home);
@@ -15043,14 +15077,14 @@ function registerProject(input, home = homedir4()) {
 function backfillRegistry(home = homedir4(), read = existingProjectId) {
   let dirs;
   try {
-    dirs = readdirSync(join4(frizzPaths({ home }).data, "projects"), { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+    dirs = readdirSync(join5(frizzPaths({ home }).data, "projects"), { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return 0;
   }
   const known = new Set(readRegistry(home).projects.map((p) => p.path));
   let added = 0;
   for (const id of dirs) {
-    const recorded = recordedProjectDir(join4(frizzPaths({ home }).data, "projects", id));
+    const recorded = recordedProjectDir(join5(frizzPaths({ home }).data, "projects", id));
     const dir = recorded ? canonicalPath(recorded) : void 0;
     if (!dir || known.has(dir)) continue;
     if (read(dir) !== id) continue;
@@ -15068,7 +15102,7 @@ function backfillRegistry(home = homedir4(), read = existingProjectId) {
 function recordedProjectDir(stateDir) {
   for (const name of ["launcher.json", "server.lock", "project-launch.owner"]) {
     try {
-      const value = JSON.parse(readFileSync4(join4(stateDir, name), "utf8")).projectDir;
+      const value = JSON.parse(readFileSync4(join5(stateDir, name), "utf8")).projectDir;
       if (typeof value === "string" && value.length > 0 && existsSync3(value)) return value;
     } catch {
     }
@@ -15111,7 +15145,7 @@ function findProjectBySegment(segment, home = homedir4()) {
   return findBySlug(segment, home) ?? findById(segment, home);
 }
 function customIconPath(id, extension2, home = homedir4()) {
-  return join4(frizzPaths({ home }).data, "projects", id, `icon${extension2}`);
+  return join5(frizzPaths({ home }).data, "projects", id, `icon${extension2}`);
 }
 function updateEntry(id, apply, home) {
   const registry = readRegistry(home);
@@ -15576,7 +15610,7 @@ CI (PRs): \`gh pr checks {n} -R {repo}\``;
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { mkdirSync as mkdirSync4, realpathSync as realpathSync4 } from "node:fs";
 import { homedir as homedir5, tmpdir as tmpdir2 } from "node:os";
-import { basename as basename2, join as join5, resolve as resolve3 } from "node:path";
+import { basename as basename2, join as join6, resolve as resolve3 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function projectRepoIdentity(dir, name) {
   const url = originRemoteUrl(dir);
@@ -15585,7 +15619,7 @@ function projectRepoIdentity(dir, name) {
   return { label: parseRepoLabel(url) ?? name, ...githubRepo ? { githubRepo } : {} };
 }
 function trustedLocalFileRoots(project) {
-  return [project.dir, tmpdir2(), "/tmp", resolve3(homedir5(), "Screenshots"), join5(project.stateDir, "attachments")];
+  return [project.dir, tmpdir2(), "/tmp", resolve3(homedir5(), "Screenshots"), join6(project.stateDir, "attachments")];
 }
 function openableFileRoots(project) {
   return [homedir5(), ...trustedLocalFileRoots(project)];
@@ -15691,10 +15725,10 @@ function resolveProject(cwd = process.cwd(), home = homedir5(), env = process.en
   };
 }
 function permRequestDir(project) {
-  return join5(project.stateDir, "perm-requests");
+  return join6(project.stateDir, "perm-requests");
 }
 function permMarkerPath(project, slug) {
-  return join5(permRequestDir(project), `${slug}.json`);
+  return join6(permRequestDir(project), `${slug}.json`);
 }
 function projectLaunchTarget(project) {
   return {
@@ -15749,7 +15783,7 @@ import {
   statSync as statSync2,
   writeFileSync as writeFileSync4
 } from "node:fs";
-import { basename as basename3, dirname as dirname5, isAbsolute, join as join6 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute, join as join7 } from "node:path";
 function errorCode3(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
 }
@@ -15773,7 +15807,7 @@ function syncDirectory2(path) {
 }
 function atomicJson(path, value) {
   mkdirSync5(dirname5(path), { recursive: true, mode: 448 });
-  const temp = join6(dirname5(path), `.${basename3(path)}.${process.pid}.${randomUUID5()}.tmp`);
+  const temp = join7(dirname5(path), `.${basename3(path)}.${process.pid}.${randomUUID5()}.tmp`);
   let fd;
   try {
     fd = openSync4(temp, "wx", 384);
@@ -15832,7 +15866,7 @@ function parseGuard(path) {
   }
 }
 function acquireMutationGuard(stateDir, timeoutMs = GUARD_TIMEOUT_MS, adapter = defaultProcessPlatformAdapter) {
-  const path = join6(stateDir, MUTATION_GUARD_NAME);
+  const path = join7(stateDir, MUTATION_GUARD_NAME);
   mkdirSync5(stateDir, { recursive: true, mode: 448 });
   const deadline = adapter.now() + Math.max(0, timeoutMs);
   for (; ; ) {
@@ -15926,7 +15960,7 @@ function parseOwner(path) {
   }
 }
 function projectLaunchOwnerPath(stateDir) {
-  return join6(stateDir, OWNER_NAME);
+  return join7(stateDir, OWNER_NAME);
 }
 function servedByAnotherProcess(stateDir, projectId, self = process.pid, alive = pidIsAlive) {
   const owner = readProjectLaunchOwner(stateDir);
@@ -15949,7 +15983,7 @@ function projectLaunchTokenProof(target, token) {
 }
 function removeStatusesForToken(stateDir, token) {
   for (const name of ["dev-supervisor.lock", "server.lock"]) {
-    const path = join6(stateDir, name);
+    const path = join7(stateDir, name);
     try {
       const value = JSON.parse(readFileSync5(path, "utf8"));
       if (value.ownerToken === token) quarantine(path, "stale");
@@ -16450,9 +16484,9 @@ import {
   writeSync
 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 function defaultLogRoot(stateDir, home = homedir6()) {
-  return stateDir ? join7(stateDir, "logs") : join7(frizzPaths({ home }).state, "logs");
+  return stateDir ? join8(stateDir, "logs") : join8(frizzPaths({ home }).state, "logs");
 }
 function runStamp(at) {
   const pad = (value) => String(value).padStart(2, "0");
@@ -16461,11 +16495,11 @@ function runStamp(at) {
 function runLogPath(stateDir, at = /* @__PURE__ */ new Date(), pid = process.pid, home = homedir6(), env = process.env) {
   const name = `frizz-${runStamp(at)}-${pid}.log`;
   const override = env[LOG_PATH_ENV]?.trim();
-  if (override) return override.endsWith(".log") ? override : join7(override, name);
-  return join7(defaultLogRoot(stateDir, home), name);
+  if (override) return override.endsWith(".log") ? override : join8(override, name);
+  return join8(defaultLogRoot(stateDir, home), name);
 }
 function latestLogPath(dir) {
-  return join7(dir, "latest.log");
+  return join8(dir, "latest.log");
 }
 function linkLatest(dir, target) {
   const link = latestLogPath(dir);
@@ -16489,7 +16523,7 @@ function pruneRunLogs(dir, keep = RETAINED_RUNS, days = RETAINED_DAYS, now = Dat
   }
   const dated = entries.map((name) => {
     try {
-      return { name, at: statSync3(join7(dir, name)).mtimeMs };
+      return { name, at: statSync3(join8(dir, name)).mtimeMs };
     } catch {
       return { name, at: 0 };
     }
@@ -16498,7 +16532,7 @@ function pruneRunLogs(dir, keep = RETAINED_RUNS, days = RETAINED_DAYS, now = Dat
   const stale = dated.filter((entry, index) => index >= keep || entry.at < cutoff);
   for (const entry of stale) {
     try {
-      rmSync5(join7(dir, entry.name), { force: true });
+      rmSync5(join8(dir, entry.name), { force: true });
     } catch {
     }
   }
@@ -16512,7 +16546,7 @@ function formatDiskLine(record) {
 }
 function openLogFile(path) {
   try {
-    mkdirSync6(join7(path, ".."), { recursive: true, mode: 448 });
+    mkdirSync6(join8(path, ".."), { recursive: true, mode: 448 });
     return openSync5(path, "a", 384);
   } catch {
     return null;
@@ -16526,7 +16560,7 @@ function createLogger(options = {}) {
   const maxBytes = options.maxBytes ?? MAX_LOG_BYTES;
   let fd = path === null ? null : openLogFile(path);
   if (fd !== null && path !== null && options.owner !== false) {
-    const dir = join7(path, "..");
+    const dir = join8(path, "..");
     pruneRunLogs(dir);
     linkLatest(dir, path);
   }
@@ -19475,9 +19509,9 @@ var init_storage = __esm({
 
 // packages/server/src/settings.ts
 import { closeSync as closeSync5, fsyncSync as fsyncSync5, mkdirSync as mkdirSync7, openSync as openSync6, readFileSync as readFileSync6, renameSync as renameSync5, rmSync as rmSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname6, join as join8 } from "node:path";
+import { dirname as dirname6, join as join9 } from "node:path";
 function machineSettingsPath(home) {
-  return join8(frizzPaths({ home }).data, "settings.json");
+  return join9(frizzPaths({ home }).data, "settings.json");
 }
 function pickMachine(settings) {
   return Object.fromEntries(MACHINE_KEYS.map((key) => [key, settings[key]]));
@@ -19571,7 +19605,7 @@ var init_settings = __esm({
 
 // packages/server/src/discover.ts
 import { readdirSync as readdirSync3, statSync as statSync4, openSync as openSync7, readSync, closeSync as closeSync6 } from "node:fs";
-import { dirname as dirname7, join as join9 } from "node:path";
+import { dirname as dirname7, join as join10 } from "node:path";
 function sentinelFor(sessionId) {
   return `threads/${sessionId}/`;
 }
@@ -19608,7 +19642,7 @@ function discoverTranscriptId(logDir, sessionId, opts = {}) {
     if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
     const id = name.slice(0, -".jsonl".length);
     if (!id || id === sessionId || exclude?.has(id)) continue;
-    const path = join9(logDir, name);
+    const path = join10(logDir, name);
     let mtime;
     try {
       mtime = statSync4(path).mtimeMs;
@@ -19636,7 +19670,7 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   const name = `${sessionId}.jsonl`;
   const better = (best2, dir) => {
     if (dir === logDir) return best2;
-    const at = mtimeOfNonEmpty(join9(dir, name));
+    const at = mtimeOfNonEmpty(join10(dir, name));
     if (at === void 0) return best2;
     return !best2 || at > best2.mtimeMs ? { dir, mtimeMs: at } : best2;
   };
@@ -19649,7 +19683,7 @@ function discoverTranscriptDir(logDir, sessionId, memo3 = strandedLogDirs) {
   } catch {
     return void 0;
   }
-  for (const entry of entries) best = better(best, join9(dirname7(logDir), entry));
+  for (const entry of entries) best = better(best, join10(dirname7(logDir), entry));
   if (!best) return void 0;
   memo3.add(best.dir);
   return best.dir;
@@ -19668,10 +19702,10 @@ var init_discover = __esm({
 
 // packages/server/src/session-files.ts
 import { lstatSync, rmSync as rmSync7 } from "node:fs";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function systemPromptPath(sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) throw new Error("invalid session id");
-  return join10(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
+  return join11(SYSTEM_PROMPT_DIR, `${sessionId}.md`);
 }
 function isDirectDirectory(path) {
   try {
@@ -19691,7 +19725,7 @@ function pathAbsent(path) {
 }
 function unlinkDirectChild(parent, filename) {
   if (!isDirectDirectory(parent)) return pathAbsent(parent);
-  const child = join10(parent, filename);
+  const child = join11(parent, filename);
   try {
     rmSync7(child, { force: true });
   } catch {
@@ -19701,12 +19735,12 @@ function unlinkDirectChild(parent, filename) {
 }
 function cleanupAdoptionSessionFiles(projectDir, sessionId) {
   if (!SESSION_ID_RE.test(sessionId)) return false;
-  const frizzDir = join10(projectDir, ".frizz");
+  const frizzDir = join11(projectDir, ".frizz");
   let clean = true;
   if (isDirectDirectory(frizzDir)) {
-    const threads = join10(frizzDir, "threads");
+    const threads = join11(frizzDir, "threads");
     if (isDirectDirectory(threads)) {
-      const child = join10(threads, sessionId);
+      const child = join11(threads, sessionId);
       try {
         rmSync7(child, { recursive: true, force: true });
       } catch {
@@ -19958,10 +19992,10 @@ var init_adoption_recovery = __esm({
 });
 
 // packages/server/src/backend/codex-models.ts
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 import { readFileSync as readFileSync7 } from "node:fs";
 function cachePath(codexHome) {
-  return join11(codexHome, "models_cache.json");
+  return join12(codexHome, "models_cache.json");
 }
 function toCodexModel(raw2) {
   if (!raw2 || typeof raw2 !== "object") return void 0;
@@ -20540,9 +20574,9 @@ var init_claude_agent_sdk_protocol = __esm({
 
 // packages/server/src/backend/claude-broker-diagnostics.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync8, readFileSync as readFileSync8, renameSync as renameSync6, statSync as statSync5 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function claudeBrokerDiagnosticLogPath(stateDir, sessionId) {
-  return join12(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
+  return join13(stateDir, "claude-broker", `${sessionId}.diagnostics.log`);
 }
 function readClaudeBrokerExit(stateDir, sessionId, generation) {
   if (!generation) return null;
@@ -20614,10 +20648,10 @@ var init_detached_daemons = __esm({
 });
 
 // packages/server/src/backend/ipc-path.ts
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 function frizzIpcPath(name) {
   if (process.platform === "win32") return `\\\\.\\pipe\\${name}`;
-  return join13(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
+  return join14(process.env.TMPDIR ?? "/tmp", `${name}.sock`);
 }
 var init_ipc_path = __esm({
   "packages/server/src/backend/ipc-path.ts"() {
@@ -20629,7 +20663,7 @@ var init_ipc_path = __esm({
 import { spawn } from "node:child_process";
 import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
 import { accessSync, constants as fsConstants, mkdirSync as mkdirSync9, readFileSync as readFileSync9, readdirSync as readdirSync4, unlinkSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { delimiter, dirname as dirname8, isAbsolute as isAbsolute2, join as join14 } from "node:path";
+import { delimiter, dirname as dirname8, isAbsolute as isAbsolute2, join as join15 } from "node:path";
 function windowsShimTarget(shimPath) {
   let body;
   try {
@@ -20639,7 +20673,7 @@ function windowsShimTarget(shimPath) {
   }
   const target = WINDOWS_SHIM_TARGET.exec(body)?.[1];
   if (!target) return void 0;
-  const full = join14(dirname8(shimPath), target);
+  const full = join15(dirname8(shimPath), target);
   try {
     accessSync(full, fsConstants.F_OK);
     return full;
@@ -20647,24 +20681,30 @@ function windowsShimTarget(shimPath) {
     return void 0;
   }
 }
+function searchPath(env) {
+  const direct = env.PATH ?? env.Path ?? env.path;
+  if (direct !== void 0) return direct;
+  for (const [key, value] of Object.entries(env)) if (key.toLowerCase() === "path") return value ?? "";
+  return "";
+}
 function resolveClaudeExecutableAbsolute(bin, env = process.env) {
   const candidate = bin && bin.length > 0 ? bin : "claude";
   if (isAbsolute2(candidate)) return candidate;
   const windows = process.platform === "win32";
-  for (const dir of (env.PATH ?? "").split(delimiter)) {
+  for (const dir of searchPath(env).split(delimiter)) {
     if (!dir) continue;
     if (windows) {
-      const exe = join14(dir, `${candidate}.exe`);
+      const exe = join15(dir, `${candidate}.exe`);
       try {
         accessSync(exe, fsConstants.F_OK);
         return exe;
       } catch {
       }
-      const viaShim = windowsShimTarget(join14(dir, `${candidate}.cmd`));
+      const viaShim = windowsShimTarget(join15(dir, `${candidate}.cmd`));
       if (viaShim) return viaShim;
       continue;
     }
-    const full = join14(dir, candidate);
+    const full = join15(dir, candidate);
     try {
       accessSync(full, fsConstants.X_OK);
       return full;
@@ -20679,11 +20719,11 @@ function claudeBrokerSocketPath(stateDir, sessionId) {
 }
 function claudeBrokerRecordPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join14(stateDir, "claude-broker", `${key}.json`);
+  return join15(stateDir, "claude-broker", `${key}.json`);
 }
 function claudeBrokerRetirementPath(stateDir, sessionId) {
   const key = createHash5("sha256").update(sessionId).digest("hex").slice(0, 16);
-  return join14(stateDir, "claude-broker", `${key}.retired`);
+  return join15(stateDir, "claude-broker", `${key}.retired`);
 }
 function markBrokerRetired(stateDir, sessionId, reason, generation) {
   const mark = { at: (/* @__PURE__ */ new Date()).toISOString(), generation, reason };
@@ -20750,7 +20790,7 @@ function liveBrokerRecord(recordPath2) {
   return null;
 }
 function liveBrokerRecords(stateDir) {
-  const dir = join14(stateDir, "claude-broker");
+  const dir = join15(stateDir, "claude-broker");
   let names;
   try {
     names = readdirSync4(dir);
@@ -20760,7 +20800,7 @@ function liveBrokerRecords(stateDir) {
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const record = liveBrokerRecord(join14(dir, name));
+    const record = liveBrokerRecord(join15(dir, name));
     if (record) out.push(record);
   }
   return out;
@@ -21569,14 +21609,14 @@ var init_completion_relay = __esm({
 // packages/server/src/tail-cache.ts
 import { createHash as createHash6 } from "node:crypto";
 import { closeSync as closeSync8, openSync as openSync9, readFileSync as readFileSync10, readSync as readSync3, statSync as statSync7 } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function foldSchemaDigest(dir = import.meta.dirname) {
   if (foldSchemaMemo) return foldSchemaMemo;
   const hash = createHash6("sha256").update("frizz-tail-state-v1\0");
   let read = 0;
   for (const name of FOLD_SOURCES) {
     try {
-      hash.update(name).update("\0").update(readFileSync10(join15(dir, name)));
+      hash.update(name).update("\0").update(readFileSync10(join16(dir, name)));
       read++;
     } catch {
       hash.update(name).update("\0missing\0");
@@ -21774,7 +21814,7 @@ var init_tail_cache = __esm({
 // packages/server/src/tailer.ts
 import { statSync as statSync8, openSync as openSync10, readSync as readSync4, closeSync as closeSync9, readdirSync as readdirSync5, realpathSync as realpathSync5, mkdirSync as mkdirSync10, writeFileSync as writeFileSync8, readFileSync as readFileSync11, existsSync as existsSync5 } from "node:fs";
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { basename as basename4, join as join16 } from "node:path";
+import { basename as basename4, join as join17 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 function probeShellAlive(outputFile) {
   if (!existsSync5(outputFile)) return void 0;
@@ -22036,7 +22076,7 @@ function launchTaskId(text) {
 function readDescendantSidecars(sessionDir, mtimeMs) {
   let names;
   try {
-    names = readdirSync5(join16(sessionDir, "subagents"));
+    names = readdirSync5(join17(sessionDir, "subagents"));
   } catch {
     return [];
   }
@@ -22047,7 +22087,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
     if (!agentId) continue;
     let parsed;
     try {
-      parsed = JSON.parse(readFileSync11(join16(sessionDir, "subagents", name), "utf8"));
+      parsed = JSON.parse(readFileSync11(join17(sessionDir, "subagents", name), "utf8"));
     } catch {
       continue;
     }
@@ -22061,7 +22101,7 @@ function readDescendantSidecars(sessionDir, mtimeMs) {
       agentType: text(meta.agentType),
       parentAgentId: text(meta.parentAgentId),
       spawnDepth: typeof meta.spawnDepth === "number" && Number.isFinite(meta.spawnDepth) ? meta.spawnDepth : void 0,
-      spawnedAtMs: mtimeMs(join16(sessionDir, "subagents", name))
+      spawnedAtMs: mtimeMs(join17(sessionDir, "subagents", name))
     });
   }
   return out;
@@ -22541,7 +22581,7 @@ function defaultMtimeMs(path) {
   }
 }
 function defaultLogDir(project) {
-  return join16(homedir7(), ".claude", "projects", project.cwdSlug);
+  return join17(homedir7(), ".claude", "projects", project.cwdSlug);
 }
 function defaultReadPermMarker(project) {
   if (!project.stateDir) return () => void 0;
@@ -22587,6 +22627,7 @@ function rowIsArchived(row) {
 }
 function createTailer(deps) {
   const now = deps.now ?? Date.now;
+  const monotonicNow = deps.monotonicNow ?? (() => performance.now());
   const paneDead = deps.paneDead ?? (() => true);
   const brokerDaemonAlive = deps.brokerDaemonAlive ?? defaultBrokerDaemonAlive(deps.project, now);
   const logDir = deps.sessionLogDir ?? defaultLogDir(deps.project);
@@ -22672,7 +22713,7 @@ function createTailer(deps) {
     return paneDead(row.slug);
   }
   const defaultBackend = {
-    transcriptPath: (sessionId) => join16(logDir, `${sessionId}.jsonl`),
+    transcriptPath: (sessionId) => join17(logDir, `${sessionId}.jsonl`),
     foldLine: (state, line) => {
       const rec = parseLine(line);
       if (rec) applyRecord(state, rec);
@@ -22797,7 +22838,7 @@ ${ask}`;
     return state.path.replace(/\.jsonl$/, "");
   }
   function descendantSidecars(state) {
-    const at = mtimeMs(join16(sessionDirOf(state), "subagents"));
+    const at = mtimeMs(join17(sessionDirOf(state), "subagents"));
     const cached2 = descendantIndex.get(state.slug);
     if (cached2 && cached2.at === at) return cached2.all;
     const all = readDescendantSidecars(sessionDirOf(state), mtimeMs);
@@ -22811,7 +22852,7 @@ ${ask}`;
     return descendantIndex.get(state.slug)?.byToolUse.get(id);
   }
   function descendantTranscript(state, meta) {
-    return join16(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
+    return join17(sessionDirOf(state), "subagents", `agent-${meta.agentId}.jsonl`);
   }
   function subAgentDescendantTasks(slug, id) {
     const state = states.get(slug);
@@ -23125,7 +23166,7 @@ ${ask}`;
       if (name.startsWith(".") || !name.endsWith(".jsonl")) continue;
       const id = name.slice(0, -".jsonl".length);
       if (!id || registered.has(id)) continue;
-      const path = join16(logDir, name);
+      const path = join17(logDir, name);
       let mtime;
       try {
         mtime = statSync8(path).mtimeMs;
@@ -23397,7 +23438,7 @@ ${ask}`;
     );
     try {
       mkdirSync10(stallLogDir, { recursive: true });
-      writeFileSync8(join16(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
+      writeFileSync8(join17(stallLogDir, `${row.slug}.stall.log`), `session_id: ${row.session_id}
 captured_at: ${new Date(now()).toISOString()}
 
 ${detail}
@@ -23425,7 +23466,7 @@ ${detail}
     state.nextDiscoverMs = nowMs + DISCOVER_RETRY_MS;
     const strandedDir = discoverTranscriptDir(logDir, row.session_id);
     if (strandedDir) {
-      state.path = join16(strandedDir, `${row.session_id}.jsonl`);
+      state.path = join17(strandedDir, `${row.session_id}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -23448,7 +23489,7 @@ ${detail}
         committed = false;
       }
       if (!committed) return false;
-      state.path = join16(logDir, `${found}.jsonl`);
+      state.path = join17(logDir, `${found}.jsonl`);
       state.offset = 0;
       state.partial = "";
       state.primed = false;
@@ -23484,7 +23525,7 @@ ${detail}
     }
     let primed = 0;
     let primedRows = 0;
-    const tickStartedMs = performance.now();
+    const tickStartedMs = monotonicNow();
     primeIncomplete = false;
     for (const row of rows) {
       if (primeProgress && primed % PRIME_PROGRESS_EVERY === 0) primeProgress(primed, rows.length);
@@ -23494,7 +23535,7 @@ ${detail}
       let state = states.get(row.slug);
       const runtimeGeneration = row.runtime_generation ?? 0;
       if (!state || state.sessionId !== row.session_id || state.nativeSessionId !== nativeId || state.runtimeGeneration !== runtimeGeneration) {
-        const path = backend.transcriptPath(nativeId) ?? join16(logDir, `${nativeId}.jsonl`);
+        const path = backend.transcriptPath(nativeId) ?? join17(logDir, `${nativeId}.jsonl`);
         state = newTailState(row.slug, row.session_id, path, false, nativeId, runtimeGeneration);
         state.dismissedOps = deps.storage.retiredOps(row.slug, row.session_id);
         hydrateFromCache(state, row, nativeId);
@@ -23512,7 +23553,7 @@ ${detail}
           // guarantee below. `primedRows > 0` keeps the archive advancing by at least one row per tick
           // even if a visible row were somehow to stay cold indefinitely, so deferral can never become
           // starvation. The visible row still primes on this same tick; it just is not necessarily first.
-          coldVisibleRow && primedRows > 0 && rowIsArchived(row) || primedRows >= MAX_PRIME_ROWS_PER_TICK || primedRows > 0 && performance.now() - tickStartedMs > PRIME_BUDGET_MS
+          coldVisibleRow && primedRows > 0 && rowIsArchived(row) || primedRows >= MAX_PRIME_ROWS_PER_TICK || primedRows > 0 && monotonicNow() - tickStartedMs > PRIME_BUDGET_MS
         ) {
           primeIncomplete = true;
           continue;
@@ -23715,11 +23756,11 @@ ${detail}
   let lastTickMs = 0;
   let primeIncomplete = false;
   function tickWithBudget() {
-    const started = performance.now();
+    const started = monotonicNow();
     try {
       tick();
     } finally {
-      const elapsed = performance.now() - started;
+      const elapsed = monotonicNow() - started;
       lastTickMs = elapsed;
       lastTickEndedAtMs = now();
       if (elapsed > POLL_MS2) {
@@ -23943,14 +23984,14 @@ var init_tailer = __esm({
 });
 
 // packages/server/src/backend/codex.ts
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 import { homedir as homedir8 } from "node:os";
 import { readdirSync as readdirSync6, statSync as statSync9, readFileSync as readFileSync12, openSync as openSync11, readSync as readSync5, closeSync as closeSync10 } from "node:fs";
 function defaultCodexHome() {
-  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join17(homedir8(), ".codex");
+  return process.env.CODEX_HOME && process.env.CODEX_HOME.trim() ? process.env.CODEX_HOME : join18(homedir8(), ".codex");
 }
 function sessionsDir(codexHome) {
-  return join17(codexHome, "sessions");
+  return join18(codexHome, "sessions");
 }
 function codexSandbox(mode) {
   switch (mode) {
@@ -24331,17 +24372,17 @@ function collectRollouts(dir, out, budget) {
   const files = entries.filter((e) => e.isFile() && e.name.startsWith("rollout-") && e.name.endsWith(".jsonl")).sort(descByName);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    collectRollouts(join17(dir, d.name), out, budget);
+    collectRollouts(join18(dir, d.name), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
     let mtimeMs;
     try {
-      mtimeMs = statSync9(join17(dir, f.name)).mtimeMs;
+      mtimeMs = statSync9(join18(dir, f.name)).mtimeMs;
     } catch {
       continue;
     }
-    out.push({ path: join17(dir, f.name), mtimeMs });
+    out.push({ path: join18(dir, f.name), mtimeMs });
     budget.n--;
   }
 }
@@ -24385,7 +24426,7 @@ function readCodexThreadNames(codexHome = defaultCodexHome()) {
   const out = /* @__PURE__ */ new Map();
   let raw2;
   try {
-    const path = join17(codexHome, "session_index.jsonl");
+    const path = join18(codexHome, "session_index.jsonl");
     if (statSync9(path).size > SESSION_INDEX_MAX_BYTES) return out;
     raw2 = readFileSync12(path, "utf8");
   } catch {
@@ -28423,16 +28464,16 @@ var init_wrapper = __esm({
 
 // packages/server/src/worker-plugin-dir.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { dirname as dirname9, join as join18 } from "node:path";
+import { dirname as dirname9, join as join19 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
   const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync6(join18(override, ".claude-plugin", "plugin.json")))
+  if (override && existsSync6(join19(override, ".claude-plugin", "plugin.json")))
     return override;
   let current = dirname9(fileURLToPath2(moduleUrl));
   for (; ; ) {
-    const candidate = join18(current, "cc-worker");
-    if (existsSync6(join18(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const candidate = join19(current, "cc-worker");
+    if (existsSync6(join19(candidate, ".claude-plugin", "plugin.json"))) return candidate;
     const parent = dirname9(current);
     if (parent === current) return void 0;
     current = parent;
@@ -28446,7 +28487,7 @@ var init_worker_plugin_dir = __esm({
 
 // packages/server/src/backend/types.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 function frizzMcpEnv(mcp) {
   return {
     FRIZZ_STATE_DIR: mcp.stateDir,
@@ -28470,7 +28511,7 @@ function chromeDevtoolsMcpMount() {
 function resolveBrowserMcpScript(moduleUrl = import.meta.url, env = process.env) {
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join19(pluginDir, "bin", CHROME_DEVTOOLS_MCP.script);
+  const scriptPath = join20(pluginDir, "bin", CHROME_DEVTOOLS_MCP.script);
   return existsSync7(scriptPath) ? scriptPath : void 0;
 }
 function workerCap(name, lifted, env) {
@@ -28569,14 +28610,14 @@ import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash7, randomUUID as randomUUID9 } from "node:crypto";
 import { existsSync as existsSync8, mkdirSync as mkdirSync11, readFileSync as readFileSync13, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 function nativeDir(stateDir) {
-  return join20(stateDir, "codex-app-server-native");
+  return join21(stateDir, "codex-app-server-native");
 }
 function nativeRecordPath(stateDir, projectId) {
-  return join20(nativeDir(stateDir), `${projectId}.json`);
+  return join21(nativeDir(stateDir), `${projectId}.json`);
 }
 function nativeListenSocketPath(stateDir, projectId) {
   const key = createHash7("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -28841,14 +28882,14 @@ import { spawn as spawn3, spawnSync } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync9, mkdirSync as mkdirSync12, readFileSync as readFileSync14, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 function daemonDir(stateDir) {
-  return join21(stateDir, "codex-app-server");
+  return join22(stateDir, "codex-app-server");
 }
 function recordPath(stateDir, projectId) {
-  return join21(daemonDir(stateDir), `${projectId}.json`);
+  return join22(daemonDir(stateDir), `${projectId}.json`);
 }
 function codexAppServerSocketPath(stateDir, projectId) {
   const key = createHash8("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -32076,11 +32117,11 @@ var init_codex_app_server = __esm({
 });
 
 // packages/server/src/backend/codex-quota.ts
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 import { readdirSync as readdirSync7, statSync as statSync10, openSync as openSync12, readSync as readSync6, fstatSync, closeSync as closeSync11 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
 function sessionsDir2(codexHome) {
-  return join22(codexHome, "sessions");
+  return join23(codexHome, "sessions");
 }
 function newestRollouts(dir, out, budget) {
   if (budget.n <= 0) return;
@@ -32094,11 +32135,11 @@ function newestRollouts(dir, out, budget) {
   const files = entries.filter((e) => e.isFile() && e.name.startsWith("rollout-") && e.name.endsWith(".jsonl")).map((e) => e.name).sort(descByName2);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    newestRollouts(join22(dir, d), out, budget);
+    newestRollouts(join23(dir, d), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
-    out.push(join22(dir, f));
+    out.push(join23(dir, f));
     budget.n--;
   }
 }
@@ -32298,7 +32339,7 @@ var init_codex_quota = __esm({
 });
 
 // packages/server/src/backend/claude-quota.ts
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 import { homedir as homedir9, platform } from "node:os";
 import { createHash as createHash10 } from "node:crypto";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -32306,7 +32347,7 @@ import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 function claudeConfigDir() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join23(homedir9(), ".claude");
+  return override && override.trim() ? override : join24(homedir9(), ".claude");
 }
 function tokenFromCredentialsJson(raw2) {
   let doc;
@@ -32335,7 +32376,7 @@ async function readKeychainToken() {
 }
 async function readAccessToken(configDir) {
   try {
-    const fromFile = tokenFromCredentialsJson(await readFile(join23(configDir, ".credentials.json"), "utf8"));
+    const fromFile = tokenFromCredentialsJson(await readFile(join24(configDir, ".credentials.json"), "utf8"));
     if (fromFile) return fromFile;
   } catch {
   }
@@ -32404,8 +32445,8 @@ function parseClaudeUsage(body, planType) {
 function cachePaths(cacheDir, configDir) {
   const profile = createHash10("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
-    data: join23(cacheDir, `claude-${profile}.json`),
-    lock: join23(cacheDir, `claude-${profile}.lock`)
+    data: join24(cacheDir, `claude-${profile}.json`),
+    lock: join24(cacheDir, `claude-${profile}.lock`)
   };
 }
 async function readShared(path) {
@@ -32453,7 +32494,11 @@ async function acquireLock(path) {
 }
 async function runClaudeUsage(claudeBin) {
   const { stdout } = await execFileAsync(
-    claudeBin,
+    // Never a bare name: on Windows `execFile("claude")` is ENOENT and `execFile("claude.cmd")` is
+    // EINVAL (node refuses .cmd/.bat without a shell since CVE-2024-27980), so this reader could
+    // never reach the CLI there and every quota refresh threw. See auth-status.ts for the measurement.
+    // A resolver throw is a refresh failure like any other — the callers' stale-serving catch owns it.
+    resolveClaudeExecutableAbsolute(claudeBin),
     ["-p", "/usage", "--safe-mode", "--output-format", "json", "--no-session-persistence", "--tools", ""],
     { encoding: "utf8", timeout: CLI_TIMEOUT_MS, maxBuffer: 2 * 1024 * 1024 }
   );
@@ -32597,7 +32642,7 @@ function refreshSharedInBackground(paths, claudeBin, deps, now) {
 async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join24(frizzRoots().cache, "quota-cache");
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
   } catch {
@@ -32608,7 +32653,7 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join24(frizzRoots().cache, "quota-cache");
   const paths = cachePaths(cacheDir, configDir);
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
@@ -32660,6 +32705,7 @@ var init_claude_quota = __esm({
   "packages/server/src/backend/claude-quota.ts"() {
     "use strict";
     init_frizz_paths();
+    init_claude_broker_host();
     execFileAsync = promisify2(execFile2);
     USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
     OAUTH_BETA = "oauth-2025-04-20";
@@ -32767,7 +32813,7 @@ var init_quota = __esm({
 // packages/server/src/frizz.ts
 import { execFile as execFile3 } from "node:child_process";
 import { lstatSync as lstatSync2, realpathSync as realpathSync6 } from "node:fs";
-import { basename as basename5, dirname as dirname10, join as join24, resolve as resolve4 } from "node:path";
+import { basename as basename5, dirname as dirname10, join as join25, resolve as resolve4 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
@@ -32776,7 +32822,7 @@ function frizzScriptsDir() {
 function directFrizzRoot(projectDir) {
   try {
     const projectRoot = realpathSync6(projectDir);
-    const path = join24(projectRoot, ".frizz");
+    const path = join25(projectRoot, ".frizz");
     const stat2 = lstatSync2(path);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
     const real = realpathSync6(path);
@@ -32790,7 +32836,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join24(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join25(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -32815,7 +32861,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join24(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join25(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -34700,19 +34746,19 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/backend/auth-status.ts
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 import { homedir as homedir11, platform as platform2 } from "node:os";
 import { readFileSync as readFileSync15, statSync as statSync11 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join25(homedir11(), ".claude");
+  return override && override.trim() ? override : join26(homedir11(), ".claude");
 }
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync15(join25(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync15(join26(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -34745,7 +34791,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync15(join25(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync15(join26(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -34782,8 +34828,8 @@ function parseClaudeAuthStatusJson(stdout) {
   }
 }
 async function readClaudeAuthStatusCli(opts) {
-  const bin = opts?.claudeBin ?? "claude";
   try {
+    const bin = resolveClaudeExecutableAbsolute(opts?.claudeBin);
     const { stdout } = await execFileAsync2(bin, ["auth", "status", "--json"], {
       encoding: "utf8",
       timeout: opts?.timeoutMs ?? 5e3,
@@ -34810,7 +34856,7 @@ function asEmail(value) {
 }
 function claudeAccountFile() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? join25(override, ".claude.json") : join25(homedir11(), ".claude.json");
+  return override && override.trim() ? join26(override, ".claude.json") : join26(homedir11(), ".claude.json");
 }
 function readClaudeAccountEmail(path = claudeAccountFile()) {
   let stat2;
@@ -34834,7 +34880,7 @@ function readClaudeAccountEmail(path = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync15(join25(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync15(join26(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -34888,6 +34934,7 @@ var init_auth_status = __esm({
     "use strict";
     init_claude_quota();
     init_codex();
+    init_claude_broker_host();
     execFileAsync2 = promisify4(execFile4);
     ProviderAuthRequiredError = class extends Error {
       backend;
@@ -34902,7 +34949,7 @@ var init_auth_status = __esm({
 
 // packages/server/src/dispatch.ts
 import { closeSync as closeSync12, constants, existsSync as existsSync10, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync16, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync8 } from "node:fs";
-import { basename as basename6, join as join26, dirname as dirname11 } from "node:path";
+import { basename as basename6, join as join27, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -34921,7 +34968,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync10(join26(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync10(join27(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -34938,12 +34985,12 @@ function resolveLegacyThreadFile(projectDir, value) {
   if (!parsed.success) return null;
   try {
     const projectRoot = realpathSync7(projectDir);
-    const frizzPath = join26(projectRoot, ".frizz");
+    const frizzPath = join27(projectRoot, ".frizz");
     const frizzStat = lstatSync3(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
     const realFrizz = realpathSync7(frizzPath);
     if (dirname11(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path = join26(realFrizz, `${parsed.data}.md`);
+    const path = join27(realFrizz, `${parsed.data}.md`);
     const before = lstatSync3(path);
     if (!before.isFile() || before.isSymbolicLink()) return null;
     const realPath = realpathSync7(path);
@@ -34987,7 +35034,7 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path = join26(parent, name);
+  const path = join27(parent, name);
   try {
     mkdirSync13(path);
   } catch (error) {
@@ -35017,8 +35064,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join26(plugin, "skills", "gh", "scripts");
-  return existsSync10(join26(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join27(plugin, "skills", "gh", "scripts");
+  return existsSync10(join27(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -35030,7 +35077,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join26(dirname11(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join27(dirname11(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -35056,7 +35103,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join26(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join27(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -35072,7 +35119,7 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work. On a long effort write the doc you would want if you lost your context (${children2}), then arm mcp__frizz__recurring_prompt with post_compaction: true and a prompt LINKING that file \u2014 frizz hands the link back when your context is compacted. Nothing in this directory is read automatically.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path = join26(projectDir, "FRIZZ.md");
+  const path = join27(projectDir, "FRIZZ.md");
   let body;
   try {
     const st = statSync12(path);
@@ -35112,7 +35159,7 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join26(pluginDir, "bin", FRIZZ_MCP.script);
+  const scriptPath = join27(pluginDir, "bin", FRIZZ_MCP.script);
   if (!existsSync10(scriptPath)) return void 0;
   return {
     scriptPath,
@@ -35195,7 +35242,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join26(deps.project.dir, ".frizz");
+  const frizzDir = join27(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path of new Set(built.prewrite.map((file) => file.path))) {
@@ -35208,7 +35255,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync8(join26(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync8(join27(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -35641,7 +35688,7 @@ import {
   watch as fsWatch
 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -36326,7 +36373,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const next = await subscribe(join27(project.dir, ".frizz"), () => scheduleRebuild());
+      const next = await subscribe(join28(project.dir, ".frizz"), () => scheduleRebuild());
       if (stopped) {
         await next.unsubscribe();
         return;
@@ -38260,7 +38307,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -38349,7 +38396,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join28(opts.logDir, `${sessionId}.jsonl`);
+      return join29(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -38519,12 +38566,12 @@ var init_login_utility = __esm({
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
 import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync13 } from "node:fs";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join29(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join30(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join29(stateDir, "codex-app-server");
+  const dir = join30(stateDir, "codex-app-server");
   const path = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
@@ -38556,7 +38603,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile7 } from "node:child_process";
 import { readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -38573,7 +38620,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join30(options.dir, name)).filter((path) => !keep.has(path));
+    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join31(options.dir, name)).filter((path) => !keep.has(path));
   } catch {
     return;
   }
@@ -39037,7 +39084,7 @@ var init_thread_hibernation = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { homedir as homedir13 } from "node:os";
 function reconcileSessions(storage) {
@@ -39195,7 +39242,7 @@ async function createContext(opts = {}) {
 function createContextUnchecked(opts, resources) {
   const home = opts.home ?? homedir13();
   const project = opts.project ?? resolveProject();
-  const dbPath = join31(project.stateDir, "ui.db");
+  const dbPath = join32(project.stateDir, "ui.db");
   const storage = createStorage(dbPath);
   resources.storage = storage;
   const bus = new Bus();
@@ -42433,7 +42480,7 @@ var init_bash_background = __esm({
 import { closeSync as closeSync13, existsSync as existsSync13, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync20, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 import { homedir as homedir14 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
@@ -42983,14 +43030,14 @@ function pruneScreenshotCache() {
     if (entries.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries.map((n) => {
       try {
-        return { n, m: statSync14(join32(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync14(join33(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync5(join32(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync5(join33(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -43020,14 +43067,14 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path = join32(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path = join33(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
     if (existsSync13(path)) return path;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join32(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join33(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, path);
     pruneScreenshotCache();
@@ -43042,14 +43089,14 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join32(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    const dest = join33(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
     if (existsSync13(dest)) return dest;
     const size = statSync14(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
     const buf = readFileSync20(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join32(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join33(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, dest);
     pruneScreenshotCache();
@@ -43486,16 +43533,16 @@ function verifyIncrementalParse(path, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join32(homedir14(), ".claude", "projects", project.cwdSlug);
+  return join33(homedir14(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path = join32(logDirOf(project), `${sessionId}.jsonl`);
+  const path = join33(logDirOf(project), `${sessionId}.jsonl`);
   try {
     if (statSync14(path).size > 0) return path;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join32(stranded, `${sessionId}.jsonl`) : path;
+  return stranded ? join33(stranded, `${sessionId}.jsonl`) : path;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -44726,7 +44773,11 @@ function readThreadTranscript(project, storage, slug, backendFor) {
     const found = discoverTranscriptId(logDirOf(project), row.session_id, { exclude });
     return projectDeliveryLedger(found ? readTranscript(project, found) : msgs, ledger);
   }
-  if (FOREIGN_SESSION_ID_RE.test(slug)) return readTranscript(project, slug);
+  if (FOREIGN_SESSION_ID_RE.test(slug)) {
+    const source = sourceForThread(project, storage, slug, backendFor);
+    if (!source) return [];
+    return source.backend === "codex" ? readCodexTranscriptFile(source.path, slug) : readTranscript(project, slug);
+  }
   return [];
 }
 function projectTranscriptAgentLifecycles(messages, lookup) {
@@ -44891,7 +44942,7 @@ var init_open_external = __esm({
 import { spawn as spawn6 } from "node:child_process";
 import { readFileSync as readFileSync21, realpathSync as realpathSync8, statSync as statSync15 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join33, resolve as resolve7, sep } from "node:path";
+import { isAbsolute as isAbsolute3, join as join34, resolve as resolve7, sep } from "node:path";
 function isUnder(real, root) {
   let rootReal;
   try {
@@ -44921,7 +44972,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir15()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join33(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join34(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -45693,7 +45744,7 @@ var init_directory_picker = __esm({
 
 // packages/server/src/router.ts
 import { readFileSync as readFileSync22, statSync as statSync17 } from "node:fs";
-import { join as join34, resolve as resolve8 } from "node:path";
+import { join as join35, resolve as resolve8 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { basename as basename9, dirname as dirname14 } from "node:path";
 import { existsSync as existsSync14, mkdirSync as mkdirSync16, rmSync as rmSync9, writeFileSync as writeFileSync13 } from "node:fs";
@@ -45856,7 +45907,7 @@ function projectCard(entry, stale) {
 function addProjectAtPath(input) {
   const typed = input.trim();
   if (!typed) throw new Error("Enter a folder path.");
-  const expanded = typed === "~" || typed.startsWith("~/") ? join34(homedir16(), typed.slice(1)) : typed;
+  const expanded = typed === "~" || typed.startsWith("~/") ? join35(homedir16(), typed.slice(1)) : typed;
   const absolute = resolve8(expanded);
   let stats;
   try {
@@ -45909,7 +45960,7 @@ function setProjectIconFromFile(id, file) {
   return storeProjectIcon(id, file, bytes);
 }
 function createRouter(ctx) {
-  const frizzDir = join34(ctx.project.dir, ".frizz");
+  const frizzDir = join35(ctx.project.dir, ".frizz");
   const openRoots = openableFileRoots(ctx.project);
   function isAutoTitledSession(slug) {
     return ctx.storage.getSession(slug)?.title_auto === 1;
@@ -47564,7 +47615,7 @@ ${gapNote}` : input.message;
         for (const entry of listProjects()) {
           if (entry.stale) continue;
           try {
-            const db = new sqlite_default(join34(projectStateDir(entry.id), "ui.db"), { readonly: true });
+            const db = new sqlite_default(join35(projectStateDir(entry.id), "ui.db"), { readonly: true });
             try {
               const hit = db.prepare("SELECT 1 FROM session WHERE slug = ? LIMIT 1").get(input.slug);
               if (hit) found.push({ projectSlug: entry.slug, projectName: entry.name ?? entry.slug });
@@ -47957,7 +48008,7 @@ var init_local_image = __esm({
 // packages/server/src/project-icon.ts
 import { readFileSync as readFileSync24, readdirSync as readdirSync10, realpathSync as realpathSync10, statSync as statSync19 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
-import { basename as basename10, dirname as dirname15, extname as extname3, join as join35, relative, sep as sep2 } from "node:path";
+import { basename as basename10, dirname as dirname15, extname as extname3, join as join36, relative, sep as sep2 } from "node:path";
 function normalizeStem(stem) {
   const sized = stem.toLowerCase().replace(/[@-]\d+(\.\d+)?x(\d+)?$/u, "").replace(/[-_]\d{2,4}$/u, "");
   const normalized = sized.replace(VARIANT_SUFFIX, "");
@@ -47975,7 +48026,7 @@ function sizeScore(dimensions) {
   return Math.max(0, Math.min(40, Math.round(Math.log2(edge / 24) * 8)));
 }
 function under(root, relativeDirectory) {
-  return relativeDirectory ? join35(root, relativeDirectory) : root;
+  return relativeDirectory ? join36(root, relativeDirectory) : root;
 }
 function listFiles(directory) {
   try {
@@ -47997,19 +48048,19 @@ function iconDirectories(root) {
   for (const asset of ASSET_DIRECTORIES) directories.push(under(root, asset));
   for (const host of HOST_DIRECTORIES) {
     if (!children2.has(host)) continue;
-    for (const asset of ASSET_DIRECTORIES) directories.push(under(join35(root, host), asset));
+    for (const asset of ASSET_DIRECTORIES) directories.push(under(join36(root, host), asset));
   }
   for (const extra of EXTRA_DIRECTORIES) directories.push(under(root, extra));
   for (const container of WORKSPACE_CONTAINERS) {
     if (!children2.has(container)) continue;
     let members;
     try {
-      members = readdirSync10(join35(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+      members = readdirSync10(join36(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
     } catch {
       continue;
     }
     for (const member of members) {
-      for (const asset of ASSET_DIRECTORIES) directories.push(under(join35(root, container, member), asset));
+      for (const asset of ASSET_DIRECTORIES) directories.push(under(join36(root, container, member), asset));
     }
   }
   return [...new Set(directories)];
@@ -48023,7 +48074,7 @@ function manifestIcons(manifestPath) {
   }
   if (!Array.isArray(parsed?.icons)) return [];
   const directory = dirname15(manifestPath);
-  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join35(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
+  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join36(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
 }
 function projectIconCandidates(root) {
   const projectStem = normalizeStem(basename10(root)).normalized;
@@ -48042,7 +48093,7 @@ function projectIconCandidates(root) {
     for (const name of listFiles(directory)) {
       const extension2 = extname3(name).toLowerCase();
       if (MANIFEST_NAMES.includes(name.toLowerCase())) {
-        for (const icon of manifestIcons(join35(directory, name))) {
+        for (const icon of manifestIcons(join36(directory, name))) {
           if (MEASURABLE_IMAGE_EXTENSIONS.has(extname3(icon).toLowerCase())) {
             fromManifest.add(icon);
             files.push({ path: icon, directory: dirname15(icon) });
@@ -48053,7 +48104,7 @@ function projectIconCandidates(root) {
       if (!MEASURABLE_IMAGE_EXTENSIONS.has(extension2)) continue;
       const stem = name.slice(0, name.length - extension2.length);
       if (normalizeStem(stem).normalized === "favicon") iconHomes.add(directory);
-      files.push({ path: join35(directory, name), directory });
+      files.push({ path: join36(directory, name), directory });
       if (files.length >= MAX_CANDIDATES) break;
     }
   }
@@ -48231,7 +48282,7 @@ var init_project_icon = __esm({
 
 // packages/server/src/local-visualization.ts
 import { readdirSync as readdirSync11, readFileSync as readFileSync25, realpathSync as realpathSync11, statSync as statSync20 } from "node:fs";
-import { join as join36, sep as sep3 } from "node:path";
+import { join as join37, sep as sep3 } from "node:path";
 function children(path, pattern) {
   try {
     return readdirSync11(path, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
@@ -48243,7 +48294,7 @@ function isUnder2(path, root) {
   return path === root || path.startsWith(root.endsWith(sep3) ? root : root + sep3);
 }
 function resolveFragment(projectDir, sessionId, file) {
-  const base = join36(projectDir, ".codex", "visualizations");
+  const base = join37(projectDir, ".codex", "visualizations");
   let projectReal;
   let baseReal;
   try {
@@ -48254,12 +48305,12 @@ function resolveFragment(projectDir, sessionId, file) {
   }
   if (!isUnder2(baseReal, projectReal)) return null;
   for (const year of children(base, YEAR_PART)) {
-    const yearDir = join36(base, year);
+    const yearDir = join37(base, year);
     for (const month of children(yearDir, DATE_PART)) {
-      const monthDir = join36(yearDir, month);
+      const monthDir = join37(yearDir, month);
       for (const day of children(monthDir, DATE_PART)) {
-        const sessionRoot = join36(baseReal, year, month, day, sessionId);
-        const candidate = join36(monthDir, day, sessionId, file);
+        const sessionRoot = join37(baseReal, year, month, day, sessionId);
+        const candidate = join37(monthDir, day, sessionId, file);
         try {
           const real = realpathSync11(candidate);
           if (isUnder2(real, sessionRoot) && statSync20(real).isFile()) return real;
@@ -48388,7 +48439,7 @@ var init_local_visualization = __esm({
 
 // packages/server/src/app.ts
 import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join37 } from "node:path";
+import { join as join38 } from "node:path";
 import { randomUUID as randomUUID17 } from "node:crypto";
 function createApp(ctx, options = {}) {
   const app = new Hono2();
@@ -48492,10 +48543,10 @@ function createApp(ctx, options = {}) {
     if (typeof body.data !== "string" || body.data.length > ATTACHMENT_MAX_BASE64_CHARS) return c.json({ error: "bad payload" }, 400);
     const ext = `.${attachmentExtension(name)}`;
     const buf = Buffer.from(body.data, "base64");
-    const dir = join37(ctx.project.stateDir, "attachments");
+    const dir = join38(ctx.project.stateDir, "attachments");
     mkdirSync17(dir, { recursive: true });
     const base = name.replace(/\.[^.]+$/, "").replace(/[^a-zA-Z0-9_-]+/g, "-").slice(0, 40) || "file";
-    const path = join37(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
+    const path = join38(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
     writeFileSync14(path, buf);
     return c.json({ path });
   });
@@ -49735,9 +49786,9 @@ var init_app_socket = __esm({
 
 // packages/server/src/boot-progress.ts
 import { mkdirSync as mkdirSync18, readFileSync as readFileSync26, renameSync as renameSync10, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "node:fs";
-import { basename as basename11, dirname as dirname16, join as join38 } from "node:path";
+import { basename as basename11, dirname as dirname16, join as join39 } from "node:path";
 function bootProgressPath(stateDir) {
-  return join38(stateDir, BOOT_PROGRESS_NAME);
+  return join39(stateDir, BOOT_PROGRESS_NAME);
 }
 function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   if (!stateDir) {
@@ -49758,7 +49809,7 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
     step++;
     try {
       mkdirSync18(dirname16(path), { recursive: true, mode: 448 });
-      const temp = join38(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
+      const temp = join39(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
       writeFileSync15(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
 `, "utf8");
       renameSync10(temp, path);
@@ -49876,7 +49927,7 @@ __export(index_exports, {
 });
 import { createServer } from "node:http";
 import { readFileSync as readFileSync27, existsSync as existsSync15 } from "node:fs";
-import { dirname as dirname17, join as join39, resolve as resolve9, extname as extname4, normalize } from "node:path";
+import { dirname as dirname17, join as join40, resolve as resolve9, extname as extname4, normalize } from "node:path";
 function readServerAddressHolder(path) {
   try {
     const value = JSON.parse(readFileSync27(path, "utf8"));
@@ -49979,9 +50030,9 @@ function createShutdownSignalHandler(options) {
 }
 function serveStatic(distDir, req, res) {
   const rel = normalize((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
-  let file = join39(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join39(distDir, "index.html");
-  if (!existsSync15(file)) file = join39(distDir, "index.html");
+  let file = join40(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir)) file = join40(distDir, "index.html");
+  if (!existsSync15(file)) file = join40(distDir, "index.html");
   try {
     const body = readFileSync27(file);
     res.writeHead(200, { "content-type": MIME[extname4(file)] ?? "application/octet-stream" });
@@ -50332,7 +50383,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve9(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join39(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join40(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -50408,7 +50459,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync27(join39(webRoot, "index.html"), "utf8");
+            const html = readFileSync27(join40(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -50600,7 +50651,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join39(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join40(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -50619,7 +50670,7 @@ init_project_launch();
 init_shutdown();
 init_logging();
 import { existsSync as existsSync16 } from "node:fs";
-import { join as join40 } from "node:path";
+import { join as join41 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -50659,7 +50710,7 @@ try {
     ];
     if (!existsSync16(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync16(join40(directory, requiredFile)))
+      if (!directory || !existsSync16(join41(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }