frizz 0.7.8 → 0.8.1

package/dist/dev-child.js

@@ -12938,6 +12938,13 @@ function retiredAwaitingKindsIn(body) {
   }
   return found;
 }
+function trimAwaitingTitle(raw2) {
+  const flat = raw2.replace(/\s+/g, " ").trim();
+  if (flat.length <= AWAITING_TITLE_MAX) return flat;
+  const cut = flat.slice(0, AWAITING_TITLE_MAX);
+  const space = cut.lastIndexOf(" ");
+  return `${(space > AWAITING_TITLE_MAX / 2 ? cut.slice(0, space) : cut).replace(/[.,;:–—-]$/, "").trimEnd()}\u2026`;
+}
 function splitAwaitingFrontmatter(raw2) {
   const lines = raw2.split("\n").map((l) => l.replace(/\r$/, ""));
   const delimiter2 = lines.findIndex((l) => /^\s*---+\s*$/.test(l));
@@ -12981,6 +12988,8 @@ function parseAwaitingYaml(text) {
       for (const entry of Array.isArray(raw2) ? raw2 : [raw2]) push(itemKind, entry);
     } else if (key === "for") {
       push("for", raw2);
+    } else if (key === "title") {
+      if (typeof raw2 === "string" || typeof raw2 === "number") push("title", trimAwaitingTitle(String(raw2)));
     }
   }
   return { ok: true, hints };
@@ -13263,7 +13272,7 @@ function parseGithubWakeSteer(text) {
 function frizzRoute(path) {
   return `${FRIZZ_ROUTE_PREFIX}${path.startsWith("/") ? path : `/${path}`}`;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_KEY_RE, AWAITING_YAML_KEYS, AWAITING_SEQUENCE_KEYS, AWAITING_HINT_MAX, AWAITING_HINT_VALUE_MAX, AWAITING_TITLE_MAX, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, INTERRUPT_MARKERS, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, PARK_CORRECTION_NAMES_LEAD, PARK_CORRECTION_RETIRED_LEAD, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, HUMAN_GAP_FLOOR_MS, HUMAN_GAP_NOTE_TAIL, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, NOISE_PREFIXES, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -13519,7 +13528,7 @@ var init_src = __esm({
       questions: external_exports.array(AskQuestion)
     });
     AwaitingHint = external_exports.object({
-      kind: external_exports.enum(["shell", "agent", "timer", "pr", "for"]),
+      kind: external_exports.enum(["shell", "agent", "timer", "pr", "for", "title"]),
       value: external_exports.string()
     });
     RETIRED_AWAITING_KINDS = ["watch", "pr-watch", "human", "ci", "session", "shell", "agent", "timer", "pr", "reason"];
@@ -13541,7 +13550,7 @@ var init_src = __esm({
       "reason": "put it below the `---` as ordinary Markdown \u2014 the frontmatter is YAML now and takes no prose"
     };
     AWAITING_KEY_RE = /^([a-z][a-z-]*):\s*(\S.*)?$/i;
-    AWAITING_YAML_KEYS = /* @__PURE__ */ new Set(["shells", "agents", "timers", "prs", "for"]);
+    AWAITING_YAML_KEYS = /* @__PURE__ */ new Set(["shells", "agents", "timers", "prs", "for", "title"]);
     AWAITING_SEQUENCE_KEYS = {
       shells: "shell",
       agents: "agent",
@@ -13550,6 +13559,7 @@ var init_src = __esm({
     };
     AWAITING_HINT_MAX = 8;
     AWAITING_HINT_VALUE_MAX = 200;
+    AWAITING_TITLE_MAX = 40;
     AWAITING_ITEM_KINDS = ["shell", "agent", "timer", "pr"];
     AWAITING_DURATION_RE = /^(\d{1,5})(s|m|h|d)$/;
     DURATION_UNIT_MS = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
@@ -14133,6 +14143,14 @@ var init_src = __esm({
       // Default action for a vetted non-image local path in agent markdown. Image clicks always use the
       // OS default viewer so screenshots retain their expected behavior.
       localFileOpener: LocalFileOpener.optional(),
+      // The token count at which a NEW Claude worker auto-compacts its conversation. Frizz requests the
+      // 1M context window on every dispatch (resolveClaudeLaunchModel), so without this a worker grows
+      // toward 1M before it ever compacts — and every turn past 200K re-sends up to 5x the conversation a
+      // 200K TUI session would, which is the single largest reason a Frizz thread spends quota faster than
+      // the TUI (measured 2026-08-26). Reaches the worker as CLAUDE_CODE_AUTO_COMPACT_WINDOW, which Claude
+      // Code caps to the model's real window. Optional so an old blob parses; defaultSettings pins 500_000
+      // (maintainer 2026-08-26: "a default compaction window of 500k by default").
+      autoCompactWindow: external_exports.number().int().positive().optional(),
       // The GitHub batch-dispatch prompt template (the picker's per-item worker prompt). Optional: when
       // unset OR blank the server falls back to its exported DEFAULT_GITHUB_PROMPT. Substitution tokens
       // the server fills: {repo} {n} {title} {url} {labels} {body}. The leading `THREAD: <slug>` tag is
@@ -14398,9 +14416,11 @@ var init_src = __esm({
       backend: Backend,
       options: external_exports.array(ThreadProfileOption)
     });
+    ThreadSkillSource = external_exports.enum(["project", "user", "builtin", "plugin"]);
     ThreadSkill = external_exports.object({
       name: external_exports.string().min(1).max(512),
-      description: external_exports.string().max(1024)
+      description: external_exports.string().max(1024),
+      source: ThreadSkillSource.optional()
     }).strict();
     ThreadSkillsInput = external_exports.object({ slug: ThreadSlug }).strict();
     ThreadSkillsResult = external_exports.object({ skills: external_exports.array(ThreadSkill).max(1024) }).strict();
@@ -19652,6 +19672,9 @@ var init_settings = __esm({
       notifications: true,
       font: "sans",
       localFileOpener: "system",
+      // 500K tokens: half the 1M window every Claude worker is dispatched with. See the schema for why a
+      // worker left to compact at 1M is the biggest single reason a Frizz thread out-spends the TUI.
+      autoCompactWindow: 5e5,
       // Hidden until asked for — see the schema for why.
       projectRail: false
     });
@@ -28586,32 +28609,7 @@ var init_wrapper = __esm({
   }
 });
 
-// packages/server/src/worker-plugin-dir.ts
-import { existsSync as existsSync6 } from "node:fs";
-import { dirname as dirname9, join as join20 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
-function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
-  const override = env.FRIZZ_WORKER_PLUGIN_DIR;
-  if (override && existsSync6(join20(override, ".claude-plugin", "plugin.json")))
-    return override;
-  let current = dirname9(fileURLToPath2(moduleUrl));
-  for (; ; ) {
-    const candidate = join20(current, "cc-worker");
-    if (existsSync6(join20(candidate, ".claude-plugin", "plugin.json"))) return candidate;
-    const parent = dirname9(current);
-    if (parent === current) return void 0;
-    current = parent;
-  }
-}
-var init_worker_plugin_dir = __esm({
-  "packages/server/src/worker-plugin-dir.ts"() {
-    "use strict";
-  }
-});
-
 // packages/server/src/backend/types.ts
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join21 } from "node:path";
 function frizzMcpEnv(mcp) {
   return {
     FRIZZ_STATE_DIR: mcp.stateDir,
@@ -28620,24 +28618,6 @@ function frizzMcpEnv(mcp) {
     ...mcp.slug ? { FRIZZ_THREAD_SLUG: mcp.slug } : {}
   };
 }
-function chromeDevtoolsMcpSpec(scriptPath, nodeBin) {
-  const args = [...CHROME_DEVTOOLS_MCP.args];
-  if (!scriptPath) return { command: "npx", args: ["-y", `${CHROME_DEVTOOLS_MCP.package}@${CHROME_DEVTOOLS_MCP.version}`, ...args] };
-  return {
-    command: nodeBin,
-    args: [scriptPath, ...args],
-    env: { FRIZZ_BROWSER_MCP_PACKAGE: `${CHROME_DEVTOOLS_MCP.package}@${CHROME_DEVTOOLS_MCP.version}` }
-  };
-}
-function chromeDevtoolsMcpMount() {
-  return chromeDevtoolsMcpSpec(resolveBrowserMcpScript(), process.execPath);
-}
-function resolveBrowserMcpScript(moduleUrl = import.meta.url, env = process.env) {
-  const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
-  if (!pluginDir) return void 0;
-  const scriptPath = join21(pluginDir, "bin", CHROME_DEVTOOLS_MCP.script);
-  return existsSync7(scriptPath) ? scriptPath : void 0;
-}
 function workerCap(name, lifted, env) {
   const override = env[name];
   if (override !== void 0 && /^[1-9][0-9]*$/.test(override)) return override;
@@ -28651,29 +28631,20 @@ function claudeWorkerEnv(env = process.env) {
     CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS: workerCap("CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS", WORKER_MAX_CONCURRENT_SUBAGENTS, env)
   };
 }
-var FRIZZ_MCP, CHROME_DEVTOOLS_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, WORKER_DISALLOWED_TOOLS;
+function claudeCompactionEnv(settings) {
+  const window = settings?.autoCompactWindow;
+  if (window === void 0 || !Number.isInteger(window) || window <= 0) return {};
+  return { CLAUDE_CODE_AUTO_COMPACT_WINDOW: String(window) };
+}
+var FRIZZ_MCP, WORKER_MAX_WEB_SEARCHES, WORKER_MAX_SUBAGENTS, WORKER_MAX_CONCURRENT_SUBAGENTS, CLAUDE_WORKER_ENV, WORKER_DISALLOWED_TOOLS;
 var init_types2 = __esm({
   "packages/server/src/backend/types.ts"() {
     "use strict";
-    init_worker_plugin_dir();
     FRIZZ_MCP = {
       name: "frizz",
       script: "frizz-mcp.mjs"
       // resolved under <worker plugin dir>/bin/
     };
-    CHROME_DEVTOOLS_MCP = {
-      name: "chrome-devtools",
-      // Resolved under <worker plugin dir>/bin/, exactly like FRIZZ_MCP.script.
-      script: "browser-mcp.mjs",
-      package: "chrome-devtools-mcp",
-      version: "1.7.0",
-      args: [
-        "--experimentalPageIdRouting",
-        "--headless",
-        "--isolated",
-        "--no-usage-statistics"
-      ]
-    };
     WORKER_MAX_WEB_SEARCHES = 1e4;
     WORKER_MAX_SUBAGENTS = 1e4;
     WORKER_MAX_CONCURRENT_SUBAGENTS = 100;
@@ -28703,12 +28674,8 @@ function serverTable(command, args, env) {
   }
   return inlineTable(entries);
 }
-function codexMcpConfigArgs(frizzMcp, nodeBin = process.execPath, browserMcpScript) {
-  const chrome = chromeDevtoolsMcpSpec(browserMcpScript ?? resolveBrowserMcpScript(), nodeBin);
-  const args = [
-    "-c",
-    `mcp_servers.${CHROME_DEVTOOLS_MCP.name}=${serverTable(chrome.command, chrome.args, chrome.env)}`
-  ];
+function codexMcpConfigArgs(frizzMcp, nodeBin = process.execPath) {
+  const args = [];
   if (frizzMcp) {
     args.push(
       "-c",
@@ -28733,15 +28700,15 @@ import { spawn as spawn2 } from "node:child_process";
 import { connect } from "node:net";
 import { Agent as HttpAgent } from "node:http";
 import { createHash as createHash7, randomUUID as randomUUID9 } from "node:crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync11, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join22 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync14, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join20 } from "node:path";
 import { PassThrough, Writable } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 function nativeDir(stateDir) {
-  return join22(stateDir, "codex-app-server-native");
+  return join20(stateDir, "codex-app-server-native");
 }
 function nativeRecordPath(stateDir, projectId) {
-  return join22(nativeDir(stateDir), `${projectId}.json`);
+  return join20(nativeDir(stateDir), `${projectId}.json`);
 }
 function nativeListenSocketPath(stateDir, projectId) {
   const key = createHash7("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -28773,7 +28740,7 @@ function readNativeRecord(stateDir, projectId) {
 function liveNativeRecord(stateDir, projectId) {
   const record = readNativeRecord(stateDir, projectId);
   if (!record) return null;
-  if (pidAlive2(record.listenerPid) && existsSync8(record.socketPath)) return record;
+  if (pidAlive2(record.listenerPid) && existsSync6(record.socketPath)) return record;
   try {
     unlinkSync2(nativeRecordPath(stateDir, projectId));
   } catch {
@@ -28915,7 +28882,7 @@ async function startListener(options) {
   const { stateDir, projectId } = options;
   mkdirSync11(nativeDir(stateDir), { recursive: true });
   const socketPath = nativeListenSocketPath(stateDir, projectId);
-  if (existsSync8(socketPath) && !await socketAccepting(socketPath)) {
+  if (existsSync6(socketPath) && !await socketAccepting(socketPath)) {
     try {
       unlinkSync2(socketPath);
     } catch {
@@ -28939,7 +28906,7 @@ async function startListener(options) {
   writeFileSync9(nativeRecordPath(stateDir, projectId), JSON.stringify(record));
   const deadline = Date.now() + (options.timeoutMs ?? 3e4);
   for (; ; ) {
-    if (existsSync8(socketPath) && await socketAccepting(socketPath)) return record;
+    if (existsSync6(socketPath) && await socketAccepting(socketPath)) return record;
     if (!pidAlive2(record.listenerPid)) throw new Error("codex app-server listener exited before it became ready");
     if (Date.now() > deadline) throw new Error("codex app-server listener did not become ready");
     await new Promise((resolve10) => setTimeout(resolve10, 50));
@@ -29005,15 +28972,15 @@ var init_codex_app_server_native = __esm({
 import { spawn as spawn3, spawnSync } from "node:child_process";
 import { createConnection } from "node:net";
 import { createHash as createHash8, randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync12, readFileSync as readFileSync15, unlinkSync as unlinkSync3 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync12, readFileSync as readFileSync15, unlinkSync as unlinkSync3 } from "node:fs";
+import { join as join21 } from "node:path";
 import { PassThrough as PassThrough2, Writable as Writable2 } from "node:stream";
 import { StringDecoder as StringDecoder2 } from "node:string_decoder";
 function daemonDir(stateDir) {
-  return join23(stateDir, "codex-app-server");
+  return join21(stateDir, "codex-app-server");
 }
 function recordPath(stateDir, projectId) {
-  return join23(daemonDir(stateDir), `${projectId}.json`);
+  return join21(daemonDir(stateDir), `${projectId}.json`);
 }
 function codexAppServerSocketPath(stateDir, projectId) {
   const key = createHash8("sha256").update(stateDir).update("\0").update(projectId).digest("hex").slice(0, 16);
@@ -29295,7 +29262,7 @@ var init_codex_app_server_host = __esm({
       }
       if (process.platform !== "win32") {
         const stale = codexAppServerSocketPath(options.stateDir, options.projectId);
-        if (existsSync9(stale) && !liveDaemonRecord(options.stateDir, options.projectId)) {
+        if (existsSync7(stale) && !liveDaemonRecord(options.stateDir, options.projectId)) {
           try {
             unlinkSync3(stale);
           } catch {
@@ -29842,6 +29809,12 @@ Suggested answers: ${question.options.map((option) => option.label).join(", ")}`
     return { ...base, input: "multiline", maxLength: 4e3 };
   });
 }
+function codexSkillSource(scope) {
+  if (scope === "repo") return "project";
+  if (scope === "user") return "user";
+  if (scope === "system") return "builtin";
+  return void 0;
+}
 function resumedThreadHasLiveTurn(rawResponse) {
   const parsed = ThreadResumeStatus.safeParse(rawResponse);
   return parsed.success && parsed.data.thread.status.type === "active";
@@ -30380,7 +30353,12 @@ var init_codex_app_server = __esm({
         skills: external_exports.array(external_exports.object({
           name: external_exports.string(),
           description: external_exports.string().optional(),
-          enabled: external_exports.boolean().optional()
+          enabled: external_exports.boolean().optional(),
+          // The root the app-server resolved this skill from — measured against codex-cli 0.146.0 as
+          // `repo` (`<cwd>/.agents/skills/…`), `user` (`~/.agents/skills/…`) and `system`
+          // (`~/.codex/skills/.system/…`). Kept as a free string, not an enum: an unmapped value must
+          // leave the row unlabelled, never fail the listing (see codexSkillSource).
+          scope: external_exports.string().optional()
         }).passthrough()).optional()
       }).passthrough()).optional()
     }).passthrough();
@@ -30875,7 +30853,11 @@ var init_codex_app_server = __esm({
               if (skills.length >= 1024) return skills;
               if (seen.has(skill.name)) continue;
               seen.add(skill.name);
-              skills.push({ name: skill.name.slice(0, 512), description: (skill.description ?? "").slice(0, 1024) });
+              skills.push({
+                name: skill.name.slice(0, 512),
+                description: (skill.description ?? "").slice(0, 1024),
+                source: codexSkillSource(skill.scope)
+              });
             }
           }
           return skills;
@@ -32241,11 +32223,11 @@ var init_codex_app_server = __esm({
 });
 
 // packages/server/src/backend/codex-quota.ts
-import { join as join24 } from "node:path";
+import { join as join22 } from "node:path";
 import { readdirSync as readdirSync7, statSync as statSync10, openSync as openSync12, readSync as readSync6, fstatSync, closeSync as closeSync11 } from "node:fs";
 import { spawn as spawn4 } from "node:child_process";
 function sessionsDir2(codexHome) {
-  return join24(codexHome, "sessions");
+  return join22(codexHome, "sessions");
 }
 function newestRollouts(dir, out, budget) {
   if (budget.n <= 0) return;
@@ -32259,11 +32241,11 @@ function newestRollouts(dir, out, budget) {
   const files = entries.filter((e) => e.isFile() && e.name.startsWith("rollout-") && e.name.endsWith(".jsonl")).map((e) => e.name).sort(descByName2);
   for (const d of dirs) {
     if (budget.n <= 0) return;
-    newestRollouts(join24(dir, d), out, budget);
+    newestRollouts(join22(dir, d), out, budget);
   }
   for (const f of files) {
     if (budget.n <= 0) return;
-    out.push(join24(dir, f));
+    out.push(join22(dir, f));
     budget.n--;
   }
 }
@@ -32463,7 +32445,7 @@ var init_codex_quota = __esm({
 });
 
 // packages/server/src/backend/claude-quota.ts
-import { join as join25 } from "node:path";
+import { join as join23 } from "node:path";
 import { homedir as homedir9, platform } from "node:os";
 import { createHash as createHash10 } from "node:crypto";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
@@ -32471,7 +32453,7 @@ import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 function claudeConfigDir() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join25(homedir9(), ".claude");
+  return override && override.trim() ? override : join23(homedir9(), ".claude");
 }
 function tokenFromCredentialsJson(raw2) {
   let doc;
@@ -32500,7 +32482,7 @@ async function readKeychainToken() {
 }
 async function readAccessToken(configDir) {
   try {
-    const fromFile = tokenFromCredentialsJson(await readFile(join25(configDir, ".credentials.json"), "utf8"));
+    const fromFile = tokenFromCredentialsJson(await readFile(join23(configDir, ".credentials.json"), "utf8"));
     if (fromFile) return fromFile;
   } catch {
   }
@@ -32569,8 +32551,8 @@ function parseClaudeUsage(body, planType) {
 function cachePaths(cacheDir, configDir) {
   const profile = createHash10("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
-    data: join25(cacheDir, `claude-${profile}.json`),
-    lock: join25(cacheDir, `claude-${profile}.lock`)
+    data: join23(cacheDir, `claude-${profile}.json`),
+    lock: join23(cacheDir, `claude-${profile}.lock`)
   };
 }
 async function readShared(path) {
@@ -32766,7 +32748,7 @@ function refreshSharedInBackground(paths, claudeBin, deps, now) {
 async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
   } catch {
@@ -32777,7 +32759,7 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
   const configDir = claudeConfigDir();
-  const cacheDir = deps.cacheDir ?? join25(frizzRoots().cache, "quota-cache");
+  const cacheDir = deps.cacheDir ?? join23(frizzRoots().cache, "quota-cache");
   const paths = cachePaths(cacheDir, configDir);
   try {
     await mkdir(cacheDir, { recursive: true, mode: 448 });
@@ -32937,7 +32919,7 @@ var init_quota = __esm({
 // packages/server/src/frizz.ts
 import { execFile as execFile3 } from "node:child_process";
 import { lstatSync as lstatSync2, realpathSync as realpathSync6 } from "node:fs";
-import { basename as basename5, dirname as dirname10, join as join26, resolve as resolve4 } from "node:path";
+import { basename as basename5, dirname as dirname9, join as join24, resolve as resolve4 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function frizzScriptsDir() {
   if (process.env.FRIZZ_SCRIPTS_DIR) return process.env.FRIZZ_SCRIPTS_DIR;
@@ -32946,11 +32928,11 @@ function frizzScriptsDir() {
 function directFrizzRoot(projectDir) {
   try {
     const projectRoot = realpathSync6(projectDir);
-    const path = join26(projectRoot, ".frizz");
+    const path = join24(projectRoot, ".frizz");
     const stat2 = lstatSync2(path);
     if (!stat2.isDirectory() || stat2.isSymbolicLink()) return null;
     const real = realpathSync6(path);
-    return dirname10(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
+    return dirname9(real) === projectRoot && basename5(real) === ".frizz" ? real : null;
   } catch {
     return null;
   }
@@ -32960,7 +32942,7 @@ function frizzDirExists(projectDir) {
 }
 async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   if (!directFrizzRoot(projectDir)) throw new Error("unsafe or missing .frizz directory");
-  const { stdout } = await execFileP("node", [join26(scriptsDir, "index.mjs"), "--json"], {
+  const { stdout } = await execFileP("node", [join24(scriptsDir, "index.mjs"), "--json"], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
     maxBuffer: 32 * 1024 * 1024
@@ -32985,7 +32967,7 @@ async function readBoard(projectDir, scriptsDir = frizzScriptsDir()) {
   };
 }
 async function runThreadUpdate(projectDir, slug, args, scriptsDir = frizzScriptsDir()) {
-  await execFileP("node", [join26(scriptsDir, "thread-update.mjs"), slug, ...args], {
+  await execFileP("node", [join24(scriptsDir, "thread-update.mjs"), slug, ...args], {
     cwd: projectDir,
     env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir }
   });
@@ -33021,7 +33003,12 @@ function readAwaitingPark(hints) {
   return { items, forMs };
 }
 function unaccountedItems(items, live) {
-  return items.filter((i) => !live[LIVE_SET[i.kind]].has(i.value));
+  return items.filter((i) => !live[LIVE_SET[i.kind]].has(liveKey(i)));
+}
+function liveKey(i) {
+  if (i.kind !== "pr") return i.value;
+  const ref = parsePrRef(i.value);
+  return ref ? githubStatusKey(ref) : i.value;
 }
 function parkIsHonoured(park, live) {
   if (park.items.length === 0) return false;
@@ -33060,6 +33047,29 @@ var init_awaiting = __esm({
   }
 });
 
+// packages/server/src/worker-plugin-dir.ts
+import { existsSync as existsSync8 } from "node:fs";
+import { dirname as dirname10, join as join25 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+function resolveWorkerPluginDir(moduleUrl = import.meta.url, env = process.env) {
+  const override = env.FRIZZ_WORKER_PLUGIN_DIR;
+  if (override && existsSync8(join25(override, ".claude-plugin", "plugin.json")))
+    return override;
+  let current = dirname10(fileURLToPath2(moduleUrl));
+  for (; ; ) {
+    const candidate = join25(current, "cc-worker");
+    if (existsSync8(join25(candidate, ".claude-plugin", "plugin.json"))) return candidate;
+    const parent = dirname10(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+}
+var init_worker_plugin_dir = __esm({
+  "packages/server/src/worker-plugin-dir.ts"() {
+    "use strict";
+  }
+});
+
 // packages/server/src/workerPrompt.ts
 function buildWorkerPrompt(kind = "claude", opts = {}) {
   const lean = kind === "claude";
@@ -33075,7 +33085,6 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
     lean ? null : THREAD_EXECUTION[kind],
     AGENT_COMPLETION,
     VISUAL_EVIDENCE,
-    GIT_DISCIPLINE,
     QUALITY_BAR,
     QUESTIONS,
     STOP_CRITERION,
@@ -33086,7 +33095,7 @@ function buildWorkerPrompt(kind = "claude", opts = {}) {
   out = out.replaceAll("{{FRIZZ_MONITORS_DIR}}", opts.monitorsDir?.trim() || MONITORS_DIR_FALLBACK);
   return out;
 }
-var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, GIT_DISCIPLINE, QUALITY_BAR, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
+var INLINE, INTRO, DEFER, OPENING, ACTIVITY_CAPTIONS, SIGNALS, AGENT_COMPLETION, VISUAL_EVIDENCE, QUALITY_BAR, QUESTIONS, STOP_CRITERION, TRIVIAL_PROMPTS, SCRATCHPAD, BACKEND, SPAWN_THREAD, THREAD_EXECUTION, MONITORS_DIR_FALLBACK;
 var init_workerPrompt = __esm({
   "packages/server/src/workerPrompt.ts"() {
     "use strict";
@@ -33149,114 +33158,81 @@ command pasted as prose. Never prefix a description with \`Running\` to force it
 verb itself, and use \`Running\` only when the thing you are doing is literally running something.`;
     SIGNALS = `## End-of-turn signals \u2014 your final message IS the interface
 
-When you come to rest, your last message is the entire interface the human sees \u2014 they read it in a
-queue, hours later, with none of your working context. Write it self-contained.
+When you come to rest, your last message is the whole interface: the human reads it in a queue, hours
+later, with none of your context \u2014 and they have seen NOTHING since their own last message; every
+prompt in between (the Goal, a sign-off reminder, a watcher wake) came from frizz. So summarise the
+whole stretch since their last message: what you did, found, changed, and would do next. Be concise
+but do not omit; use whatever markup reads well.
 
 **ALWAYS SIGN OFF WITH A FENCE.** A bare rest \u2014 no fence \u2014 is not a handoff, it is an item nobody can
 triage: it says neither "answer me" nor "this is finished", so it sits in the queue meaning nothing.
-Frizz corrects it, twice, and then stops: rest without a fence and you will be told to pick one, which
-costs you a turn each time.
-
-Pick \`question\` when you need the human, \`done\` when the work is genuinely finished, and \`awaiting\`
-when you are WAITING \u2014 on a PR, or on your own background work \u2014 naming what you wait on, one line each.
-
-\`awaiting\` REGISTERS NOTHING. It is how you come to rest without being bumped for a handoff, and how
-the human sees what you are waiting on. Your background shells and sub-agents are watched AUTOMATICALLY,
-fence or no fence: frizz wakes you when one finishes, every time.
-
-**WRITE IT TO BE READ COLD.** The human reads your final message in a queue, hours later, with none of
-your context \u2014 and they have NOT seen anything since their own last message. Every prompt you received
-in between came from FRIZZ, not from them: the Goal, the sign-off reminder, a watcher waking you. So
-summarise the whole stretch since their last message \u2014 what you did, what you found, what changed, what
-you would do next \u2014 rather than only the last thing you touched. Do not assume they watched.
-
-Be concise, but do not omit. Use whatever markup makes it readable: headings, bullets, tables, code.
-The one place brevity is a RULE is a \`done\` body \u2014 see its entry below.
-
-**NAME THE PULL REQUEST, EVERY TIME YOU REST.** If your effort has a PR \u2014 one you opened, one you are
-reviewing, one you are fixing \u2014 write its number in EVERY resting message, not just the one where it
-first appeared. The human reads these as a queue of cards from a dozen threads at once, and a card that
-says "pushed the fix, CI is green" without a number is a card they cannot place: they have to open the
-thread to learn which PR it was about (maintainer 2026-08-16: "I keep being unclear what PR is being
-implemented in a given chat"). One \`#123\` in the first line or two costs you nothing and answers it.
-
-Several PRs in play \u21D2 name them all. No PR yet \u21D2 say what the work is against instead (a branch, an
-issue, a file) \u2014 the point is that the card identifies its own subject without being opened.
-
-Frizz turns \`#123\`, \`owner/repo#123\` and bare commit hashes into github.com links itself, in every
-surface it draws your prose, for any project whose origin remote is github.com. Write the bare form;
-wrapping one in a \`[link](url)\` yourself is redundant. Everything else you want clickable \u2014 a file, a
-thread, any other URL \u2014 is still yours to write as a real link.
-
-Use at most ONE fenced signal block, at the very END of the final message. The fence language is the
-state; the body is the card the human reads. A \` \`\`\`question \` block and real permission prompts are
-higher-priority asks than either fence below.
+Frizz bumps you for one, twice, then gives up \u2014 a turn wasted each time. Use at most ONE fenced signal
+block, at the very END. The fence language is the state; the body is the card the human reads. A
+\` \`\`\`question \` block and real permission prompts are higher-priority asks than \`done\` or \`awaiting\`.
+
+**NAME THE PULL REQUEST, EVERY TIME YOU REST** \u2014 its number in EVERY resting message, not just the
+one where it first appeared: one \`#123\` in the first line or two. Several PRs in play \u21D2 name them
+all. No PR yet \u21D2 say what the work is against instead: a branch, an issue, a file. Cards from a dozen
+threads queue together, and a card without its subject cannot be placed (maintainer 2026-08-16: "I keep being
+unclear what PR is being implemented in a given chat"). Frizz links \`#123\`, \`owner/repo#123\` and bare
+commit hashes itself for github.com remotes; write the bare form. Anything else you want clickable \u2014 a
+file, a thread, a URL \u2014 is yours to write as a real link.
 
 **THE FENCE AND THE PROSE ABOVE IT ARE TWO SURFACES, NOT ONE MESSAGE WRITTEN TWICE.** The card is the
-LEDGER: one bullet per deliverable, what shipped and where. The prose is only what a ledger cannot hold
-\u2014 the reasoning, the caveat, the thing the human has to do. If a sentence would read the same in either,
-it belongs in exactly ONE of them. Writing the summary and then restating it as bullets costs the human
-a second read for nothing, and it is the commonest thing wrong with an otherwise good handoff.
-
-- \` \`\`\`done \` \u2014 you COMPLETED the effort's real work: code LANDED on the project's mainline, a plan or
-  doc written, or a commissioned research/audit report finished INTO A FILE. Body: ONE TO THREE SENTENCES, then a
-  BULLET LIST, one \`- \` item per task, each opening with a **bolded verb phrase** and naming what
-  shipped and where. This is the ONE place the short shape is a rule \u2014 a dismissal card is scanned, not
-  read, so it is a ledger. Everywhere else, say as much as the reader needs. The card renders inline markdown, so backtick every path,
-  identifier and command, and make FILE references real \`[links](url)\` \u2014 issue numbers and commit
-  hashes link themselves, per above. It renders as a
-  checked success card in the queue and stays there until the human archives it. The fence MUTATES
-  NOTHING.
+LEDGER: one bullet per deliverable, what shipped and where. The prose holds only what a ledger cannot \u2014
+the reasoning, the caveat, the thing the human has to do. If a sentence would read the same in either, it belongs in
+exactly ONE of them.
+
+- \` \`\`\`done \` \u2014 you COMPLETED the effort's real work: code LANDED on the project's mainline, or a plan,
+  doc or commissioned research/audit report written INTO A FILE. Body: ONE TO THREE SENTENCES, then a
+  BULLET LIST, one \`- \` item per task, each opening with a **bolded verb phrase** naming what shipped
+  and where; backtick every path, identifier and command, and make FILE references real \`[links](url)\`
+  (issue numbers and commit hashes link themselves). It renders as a checked success card in the queue
+  until the human archives it. The fence MUTATES NOTHING.
 
   \`\`\`done
   - Fixed the cache collision in [\`src/resolver.ts\`](https://github.com/acme/app/pull/391) \u2014 the lookup now keys on the normalized id.
   - Added a regression test; \`npm test\` green.
   \`\`\`
 
-  **\`done\` is a DISMISSAL, not a summary** \u2014 its card files the thread away where nobody looks again,
-  and anything living only in the conversation goes with it. So the test is never "have I stopped
-  working": it is **WHAT IS LOST IF NOBODY EVER OPENS THIS THREAD AGAIN?** Name one thing and it is not
-  done. If the thread points at future work AT ALL, you are not done \u2014 see **When the work is finished
-  but the thread found more** for the ways out of that, none of which is stretching \`done\`. Uncertain
-  is not done.
-
-  **A RECOMMENDATION IS NOT A CONCLUSION, AND AN UNSENT DRAFT IS NOT A DELIVERABLE.** When the verdict
-  is that SOMEONE SHOULD NOW DO SOMETHING \u2014 merge it, decline it, post this comment, pick one of these
-  two designs, press the button you are not allowed to press \u2014 that someone is the human, so the effort
-  ends on a \` \`\`\`question \` carrying your recommendation as option A. Same for anything you WROTE but
-  did not SEND: a drafted comment, reply, issue body or release note you were right not to publish
-  unilaterally is one click short of delivered, and \`done\` files that draft away with the thread.
-
-  **A \`done\` MESSAGE SAYS WHAT HAPPENED. DELETE EVERY DANGLING "WORTH DOING LATER".** "One thing to
-  carry forward\u2026", "a follow-up could\u2026", "someone should add a changelog line before this ships" \u2014 a
-  forward-reference parked in a dismissal card is clutter: too weak for anyone to act on, too present to
-  ignore, and archived unread. Each one resolves four ways and there is no fifth \u2014 DO it, SPAWN it onto
-  its own card, ASK about it, or DROP it. Something the human must do NOW ("re-pull before you restart")
-  is not a dangling idea; that is the handoff, and it belongs in the prose.
-
-  What blocks \`done\` is work still OWED \u2014 by you, or by the human because of what you found \u2014 not a
-  BACKGROUND PROCESS that happens to still be running: a watcher, dev server, or poller you have already
-  moved on from does not hold it back \u2014 name it in the body and fence anyway. **Read that carve-out
-  narrowly: its subject is a running process, and nothing else.** Follow-up work you DISCOVERED blocks
-  \`done\` just as hard as work you were assigned, even when it is someone else's to do \u2014 "not mine" is
-  not "not owed", because the card takes the finding with it either way. A \`done\` fence REPLACES the
-  awaiting-background card with your own completion card, which is what turns a finished thread with a
-  live watcher into a one-click dismissal instead of a card the human has to keep deciding about. Code
-  written but not LANDED is not done (a commit, a pushed branch, an open PR is work still ahead of the
-  merge \u2014 where the project uses PRs, \`done\` waits for the MERGE, so park the PR on \` \`\`\`awaiting \`
-  with \`prs:\`). An investigation headed for a fix is NOT \`done\`; the fix is still owed. Two cases
-  DO earn \`done\` on something other than landed code, and BOTH earn it the same way \u2014 by passing the
-  test above, because the deliverable is a FILE the human opens without this thread: a commissioned
-  research or audit EFFORT, whose finished report is written to that file, earns \`done\`; and so does a
-  PLANNING session whose plan file is FULLY written and PERSISTED (wherever the dispatch or the
-  project's conventions put it \u2014 frizz prescribes no location), because
-  that artifact already lives outside the thread, so dismissing the thread loses nothing. Neither
-  exception stretches to a report that ENDS IN A DECISION the human has yet to make: write the file AND
-  ask the question.
-
-- \` \`\`\`awaiting \` \u2014 you have STOPPED, and you are waiting on work that is actually running. The
-  fence is PURE STRUCTURE: a list of things frizz can look up, how long the park may stand, and one line
-  of prose. Nothing else belongs in it.
+  **\`done\` is a DISMISSAL, not a summary:** its card files the thread away where nobody looks again,
+  and anything living only in the conversation goes with it. The test is never "have I stopped
+  working" \u2014 it is **WHAT IS LOST IF NOBODY EVER OPENS THIS THREAD AGAIN?** Name one thing and it is
+  not done; uncertain is not done. What blocks \`done\` is work still OWED \u2014 by you, or by the human
+  because of what you found \u2014 not a BACKGROUND PROCESS that happens to still be running \u2014 a watcher, dev server or
+  poller you have already moved on from: name it in the body and fence anyway (a \`done\` fence REPLACES
+  the awaiting card).
+  Read that carve-out narrowly: its subject is a running process, and nothing else.
+  - Code written but not LANDED is not done: a commit, a pushed branch or an open PR is work still
+    ahead of the merge \u2014 where the project uses PRs, \`done\` waits for the MERGE, so park the PR on
+    \` \`\`\`awaiting \` with \`prs:\`. Opening the PR does NOT finish the thread \u2014 the MERGE does. An
+    investigation headed for a fix is not done; the fix is still owed.
+  - **A RECOMMENDATION IS NOT A CONCLUSION, AND AN UNSENT DRAFT IS NOT A DELIVERABLE.** When the
+    verdict is that SOMEONE SHOULD NOW DO SOMETHING \u2014 merge it, decline it, post this comment, pick
+    one of these designs, press the button you are not allowed to press \u2014 that someone is the human,
+    so end on a \` \`\`\`question \` carrying your recommendation as option A. Same for anything you WROTE
+    but did not SEND (a drafted comment, reply, issue body or release note): \`done\` files that draft
+    away with the thread.
+  - Follow-up work you DISCOVERED blocks \`done\` just as hard as work you were assigned, even when it
+    is someone else's to do \u2014 "not mine" is not "not owed", because the card takes the finding with
+    it either way. If the thread points at future work AT ALL, see **When the work is finished but
+    the thread found more** \u2014 none of its exits is stretching \`done\`.
+  - **A \`done\` MESSAGE SAYS WHAT HAPPENED. DELETE EVERY DANGLING "WORTH DOING LATER".** "One thing to
+    carry forward\u2026", "a follow-up could\u2026" \u2014 a forward-reference in a dismissal card is too weak to act
+    on and archived unread. Each one resolves four ways and there is no fifth \u2014 DO it, SPAWN it onto
+    its own card, ASK about it, or DROP it. Something the human must do NOW ("re-pull before you
+    restart") is not a dangling idea; that is the handoff, and it belongs in the prose.
+  - Two cases earn \`done\` without landed code, by the same test \u2014 the deliverable is a FILE the human
+    opens without this thread. A commissioned research or audit EFFORT whose finished report is
+    written to that file earns \`done\`; so does a PLANNING session whose plan file is FULLY written and
+    PERSISTED (wherever the dispatch or the project's conventions put it \u2014 frizz prescribes no
+    location), because that artifact already lives outside the thread, so dismissing the thread loses
+    nothing. The WRITTEN, PERSISTED file is the whole reason a planning thread may end on \`done\`: the
+    design outlives the thread's dismissal. Neither exception stretches to a report that ENDS IN A DECISION the
+    human has yet to make: write the file AND ask the question.
+
+- \` \`\`\`awaiting \` \u2014 you have STOPPED, and you are waiting on work that is actually running (never on
+  a human \u2014 that is a question). The fence is PURE STRUCTURE: YAML frontmatter naming what frizz can look up, then \`---\`, then Markdown prose.
 
   \`\`\`awaiting
   shells: [bzvtnt3ig]
@@ -33264,6 +33240,7 @@ a second read for nothing, and it is the commonest thing wrong with an otherwise
   timers: [tmr_a1b2c3d4e5f6]
   prs: [acme/app#391]
   for: 2h
+  title: Three-platform CI run
   ---
   Waiting on the three-platform run before porting the v2 drivers.
 
@@ -33271,111 +33248,78 @@ a second read for nothing, and it is the commonest thing wrong with an otherwise
   - if it goes red I will bisect rather than re-run
   \`\`\`
 
-  **THE FRONTMATTER IS YAML. THE BODY IS MARKDOWN.** Everything above the \`---\` is a real YAML mapping \u2014
-  four PLURAL keys taking LISTS, plus \`for:\`. Everything after the \`---\` is ordinary Markdown, as much as
-  you want, with paragraphs, lists and links. That prose is what the human reads on your resting card, so
-  write it as a handoff, not as a label.
-
-  **NO PROSE ABOVE THE \`---\`, EVER.** A sentence in the frontmatter is what makes it stop being YAML: a
-  colon inside it, or a \` #\` before an issue ref, and the parse either fails or silently eats half the
-  line. There is no \`reason:\` key any more \u2014 write the reason in the body.
-
-  Both list forms work, and a single item may be written bare:
-
-  \`\`\`awaiting
-  prs:
-    - acme/app#391
-    - acme/app#402
-  for: 6h
-  ---
-  Both are green; waiting on your merge.
-  \`\`\`
-
-  - \`shells:\` / \`agents:\` \u2014 the runtime ids you were handed when you launched them ("Command running in
-    background with ID: bzvtnt3ig").
-
-  **LOST AN ID? \`mcp__frizz__activity\` PRINTS THEM ALL** \u2014 every shell, sub-agent, timer and PR you have
-  out, each with the exact id your fence needs. Call it rather than guessing: a guessed id names
-  nothing, so frizz refuses the park and bumps you.
+  - **THE FRONTMATTER IS YAML. THE BODY IS MARKDOWN.** Four PLURAL keys taking LISTS (either list form;
+    a single item may be written bare), plus the scalars \`for:\` and \`title:\`. **NO PROSE ABOVE THE
+    \`---\`, EVER** \u2014 a colon or a \` #\` inside a sentence breaks the parse. There is no \`reason:\` key any more;
+    the reason goes in the body, which is the handoff the human reads. **THE SINGULAR KEYS ARE GONE** \u2014 \`shell:\`,
+    \`agent:\`, \`timer:\`, \`pr:\` and \`reason:\`, one per line, were the grammar until 2026-08-24; YAML
+    cannot express a repeated key, so they became the lists above. Write one and frizz tells you what
+    replaced it while your thread sits in the queue.
+  - \`shells:\` / \`agents:\` \u2014 the runtime ids you were handed at launch ("Command running in background
+    with ID: bzvtnt3ig"). **LOST AN ID? \`mcp__frizz__activity\` PRINTS THEM ALL** \u2014 every shell,
+    sub-agent, timer and PR you have out, with the exact id the fence needs. A guessed id names
+    nothing, so frizz refuses the park and bumps you.
   - \`timers:\` \u2014 timer ids from \`mcp__frizz__timer\`. NOT instants; the tool creates the timer.
-  - \`prs:\` \u2014 pull requests you REGISTERED with \`mcp__frizz__watch_pr\`, written \`owner/repo#N\`. Register
-    FIRST: this line states the wait, it does not create one. That tool wakes you on CI turning green or red,
-    and on every later review, approval or comment, human or bot, for as long as the PR lives.
+  - \`prs:\` \u2014 pull requests you REGISTERED with \`mcp__frizz__watch_pr\`, written \`owner/repo#N\`.
+    Register FIRST: this line states the wait, it does not create one. That tool wakes you on CI
+    turning green or red, and on every later review, approval or comment, for as long as the PR lives.
   - \`for:\` \u2014 **REQUIRED**, and a DURATION: \`30s\`, \`15m\`, \`2h\`, \`3d\`. Never an instant. When it runs
     out frizz brings you back to re-check everything; re-parking is fine and uncapped.
-
-  **THE SINGULAR KEYS ARE GONE** \u2014 \`shell:\`, \`agent:\`, \`timer:\`, \`pr:\` and \`reason:\`, one per line, were
-  the grammar until 2026-08-24. YAML cannot express a repeated key, so they became the lists above. Write
-  one and frizz tells you what replaced it; your thread stays in the queue meanwhile.
-
-  **REGISTERING IS NOT PARKING, AND PARKING IS NOT REGISTERING.** Launching a shell, dispatching a
-  sub-agent, setting a timer, registering a PR watcher \u2014 those just happen, and frizz watches them
-  whether or not you ever write a fence. This fence is only how you declare that you have STOPPED, and
-  name which of them you stopped for.
-
-  **A FENCE THAT NAMES NOTHING IS NOT A PARK.** \`for:\` describes a wait; it is not one.
-  If you are waiting on CI, REGISTER the PR and name it \u2014 do not write "waiting on the checks" and a
-  duration, because nothing will wake you and your thread just sits in the queue. And if you are not
-  actually waiting on anything, you are not awaiting: end with \`\`\`done, or ask a \`\`\`question.
-
-  **FRIZZ CHECKS EVERY NAME THE MOMENT YOU REST.** All of them live \u21D2 your thread parks in the dimmed
-  Held band. Any one of them dead, unknown, or not yours \u21D2 you are BUMPED immediately and told which.
-  A fence naming nothing at all is not a park either \u2014 it is a claim to be waiting with no way to be
-  woken, which is the exact failure this grammar exists to make impossible.
-
-  **WAITING ON A PERSON IS A \` \`\`\`question \`.** There is no human gate and there is no prose park.
-  If you need a human, ask them something answerable.
-
-  **CI, RELEASES, DEPLOYS AND MERGE PROGRESSION ARE AUTOMATABLE \u2014 never \` \`\`\`awaiting \` them
-  BLINDLY.** For a PULL REQUEST that is what \`mcp__frizz__watch_pr\` is for: register it and you are told
-  when CI settles, so the wait is real rather than a hope. For anything else, stay ACTIVE \u2014 dispatch a
-  sub-agent to own the wait (its return re-invokes you), or set a timer and name it here.
-
-  **THE PARK SURVIVES A RESTART.** The registration and the fence are both durable, so frizz brings you
-  back (\`{{FRIZZ_RESUME_CMD}}\`) even if its own server or your daemon is replaced while you wait.
-
-  **A follow-up clears the previous fence.** If the human says "back to awaiting", never answer that it
-  is already parked and never rely on the old fence: re-check what you are waiting on, confirm it is
-  still running, and emit a FRESH fence naming it. If it turns out to be automatable, arm the active
-  wait instead and do not fence.
+  - \`title:\` \u2014 OPTIONAL, the card's heading: **40 characters or fewer**, sentence case, naming THIS
+    wait ("Fork-CI approval", "Nightly bench, arm 3 of 3"); longer is trimmed on a word boundary.
+    Without it the card is headed "Awaiting", which is true of every park and specific to none.
+  - **REGISTERING IS NOT PARKING, AND PARKING IS NOT REGISTERING.** Your shells, sub-agents, timers
+    and PR watchers are watched AUTOMATICALLY, fence or no fence \u2014 frizz wakes you when one finishes,
+    every time. The fence only declares that you have STOPPED, and names which of them you stopped
+    for. **FRIZZ CHECKS EVERY NAME THE MOMENT YOU REST:** all of them live \u21D2 your thread parks in the
+    dimmed Held band; any one dead, unknown or not yours \u21D2 you are BUMPED immediately and told which.
+    **A FENCE THAT NAMES NOTHING IS NOT A PARK** \u2014 \`for:\` describes a wait, it is not one \u2014 so
+    "waiting on the checks" plus a duration just sits in the queue: REGISTER the PR and name it, and
+    if nothing is actually running, end with \`\`\`done or ask a \`\`\`question.
+  - **WAITING ON A PERSON IS A \` \`\`\`question \`.** There is no human gate and no prose park.
+  - **CI, RELEASES, DEPLOYS AND MERGE PROGRESSION ARE AUTOMATABLE \u2014 never \` \`\`\`awaiting \` them
+    BLINDLY.** For a pull request, \`mcp__frizz__watch_pr\`. For anything else stay ACTIVE: dispatch a
+    sub-agent to own the wait (its return re-invokes you), or set a timer and name it here.
+  - **THE PARK SURVIVES A RESTART.** Registration and fence are both durable, so frizz brings you back
+    (\`{{FRIZZ_RESUME_CMD}}\`) even if its own server or your daemon is replaced while you wait.
+  - **A follow-up clears the previous fence.** If the human says "back to awaiting", never answer that
+    it is already parked and never rely on the old fence: re-check what you are waiting on, confirm it
+    is still running, and emit a FRESH fence naming it. If it turns out to be automatable, arm the
+    active wait instead and do not fence.
 
 - \` \`\`\`question \` \u2014 you need the human's input; see **Questions for the human**.
 
 ### When the work is finished but the thread found more
 
-Your mandate is complete and you turned up something else: a bug you were not sent for, a fix nobody
-landed, a follow-up the change implies. \`done\` is barred \u2014 the finding dies with the card. \`awaiting\`
-is barred \u2014 nothing is running. \`question\` looks barred \u2014 the human asked nothing. **That deadlock is
-not real, and stretching \`done\` is not how you break it.** Take the first exit that fits:
-
-1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own blast
-   radius is exit 1: the fix your change implies, the test it needs, the breakage it revealed, the caller
-   it left stale. **Size is not what disqualifies it \u2014 a big job you can finish is still exit 1.** If it
-   is more than one sitting, dispatch an in-session SUB-AGENT: its result comes BACK to you, so the
-   follow-up lands on YOUR card, in your diff, under one review. One thread that finished two things
-   beats two threads that each finished one and never learned of the other. Then \`done\` is honest with
-   nothing left over.
-2. **ASK** \u2014 the human should choose whether or how it happens. An ordinary \` \`\`\`question \`; "nothing
-   was pending" is not an objection. This is the exit for work you cannot bound, cannot verify, or that
-   is genuinely the human's call \u2014 and it is where a separable effort goes, as an OPTION they pick,
-   rather than a card you create for them.
+Your mandate is complete and you turned up something else \u2014 a bug you were not sent for, a follow-up
+the change implies. \`done\` is barred (the finding dies with the card), \`awaiting\` is barred (nothing
+is running), and \`question\` only looks barred. That deadlock is not real, and stretching \`done\` is not
+how you break it. Take the first exit that fits:
+
+1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own
+   blast radius \u2014 the fix it implies, the test it needs, the breakage it revealed, the caller it left
+   stale \u2014 is exit 1. **Size is not what disqualifies it** \u2014 a big job you can finish is still exit 1. If it
+   is more than one sitting, dispatch an in-session
+   SUB-AGENT: its result comes BACK to you, so the follow-up lands on YOUR card, in your diff, under one
+   review. Then \`done\` is honest with nothing left over.
+2. **ASK** \u2014 the human should choose whether or how it happens; "nothing was pending" is not an
+   objection. This is the exit for work you cannot bound or verify, or that is genuinely the human's
+   call \u2014 and it is where a separable effort goes, as an OPTION they pick, rather than a card you
+   create for them.
 3. **HAND IT OFF TO ITS OWN CARD \u2014 the LAST resort, not the tidy one.** \`mcp__frizz__spawn_thread\` puts
-   a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link in
-   the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so nothing it
-   learns can ever reach this effort or its siblings.** That is the whole cost, and it is not
-   theoretical \u2014 one thread here spawned four, three of those spawned more, and three separate
-   descendants independently rediscovered the SAME root-cause commit over twenty hours because none of
-   them could tell the others. Reach for it only when the work genuinely cannot ride on your card: a
-   different repo, a different long-lived runtime, an effort that must outlive yours. If a sub-agent
-   could do it, exit 1. If the human should choose, exit 2. Never spawn merely to clear your own \`done\`.
-4. **DROP IT** \u2014 it is not worth an effort, a card, or a question. Then it is not worth a SENTENCE
-   either: delete it. Do not park it in the handoff as "one thing to carry forward".
+   a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link
+   in the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so
+   nothing it learns can ever reach this effort or its siblings** (three descendants of one thread once
+   rediscovered the SAME root-cause commit over twenty hours). Only for work that genuinely cannot
+   ride on your card \u2014 a different repo, a different long-lived runtime, an effort that must outlive
+   yours. If a sub-agent could do it, exit 1; if the human should choose, exit 2. Never spawn merely
+   to clear your own \`done\`.
+4. **DROP IT** \u2014 not worth an effort, a card, or a question \u21D2 not worth a SENTENCE either: delete it.
+   Do not park it in the handoff as "one thing to carry forward".
 
 A bare rest is the residual, not a plan \u2014 legitimate only when nothing above fits, and frizz will ask
-you twice for a fence before it gives up.
-
-A mid-conversation turn carries NO fence. Nor is a turn on a thread that still points at future work \u2014
-a live code-change discussion above all \u2014 ever \`done\`.`;
+you twice for a fence before it gives up. A mid-conversation turn carries NO fence. Nor is a turn on
+a thread that still points at future work \u2014 a live code-change discussion above all \u2014 ever \`done\`.`;
     AGENT_COMPLETION = `## Agent completion invariant
 
 Once you spawn a sub-agent, let it run to its terminal return. Never interrupt one to reclaim capacity,
@@ -33392,16 +33336,6 @@ image paths through its guarded local-image proxy; only eligible workspace or ex
 image files can embed, and a path outside that safe boundary stays non-navigable. Do not bulk-embed
 irrelevant screenshots. Always keep a concise textual finding alongside them, so the handoff still
 reads when images are unavailable.`;
-    GIT_DISCIPLINE = `## Git discipline
-
-Follow the project's own git/branch/PR conventions \u2014 \`FRIZZ.md\` first, then \`AGENTS.md\`/\`CLAUDE.md\`.
-This contract states NO default about pull requests: read the repo and do what it says.
-
-Where the project is silent: if others (humans or agents) may share the working tree, work from an
-isolated worktree on a fresh branch (\`git worktree add <dir> -b <slug>\`) and never branch, reset, or
-stash the shared tree. Commit small and often \u2014 committed work cannot be clobbered \u2014 and commit before
-you rest. Where the project does use PRs, push as soon as a commit exists. Opening the PR does NOT
-finish the thread \u2014 the MERGE does.`;
     QUALITY_BAR = `## Quality bar
 
 - Verify behavior end-to-end before calling anything done. A green suite over a stubbed implementation
@@ -33464,84 +33398,53 @@ A \` \`\`\`question \` block IS the handback \u2014 do not also emit a \`done\`/
 as your next user message, possibly as terse as "1: A, 2: B".`;
     STOP_CRITERION = `## The stop criterion
 
-**COMING TO REST IS A STOP, and it needs the same justification as a question.** Everything below is
-about when to ASK \u2014 but the far more common failure is quieter: you finish one part of a multi-part
-instruction, write it up, and rest with the rest of the mandate untouched. Nobody asked you to stop;
-you simply produced a handoff because a handoff was the shape closest to hand. That is not a report,
-it is an abandonment, and it costs the human the same hours a needless question does.
-
-So: **if the human's instruction still has parts left, do not write up \u2014 do the next part in this same
-turn.** Keep issuing tool calls. A verified milestone is not a stopping point, a green test run is not
-a stopping point, and neither is a long turn \u2014 the conversation is summarized automatically, so turn
-length is never a reason to pause. The only things that end a turn are the stop criteria below and
-actually being finished.
-
-Three specific traps, each of which has ended a turn that should have continued:
-
-- **Announcing the next step instead of taking it.** "Now starting X" followed by no tool call is a
-  stop wearing the costume of progress. If you can write the sentence, you can make the call instead.
-- **Writing the next action into a scratch file and feeling done.** Recording work is not doing work.
-  Notes are crash insurance, never a handoff. If the next action you just wrote down is something the
-  human already told you to do, the only correct move is to do it NOW.
-- **Pre-emptively worrying about context budget.** You do not get to stop early because the turn feels
-  long. If context genuinely runs out, the harness summarizes and you continue.
-
-**AND THE INSTRUCTION IS ALSO THE CEILING.** Everything above pushes you not to stop early; none of it
-is a licence to grow the job. "Keep going" has no upper bound of its own \u2014 there is always more to do
-in any repository \u2014 so a worker that may not stop until nothing is left can only ever stop by widening
-what it was asked. Finish the mandate you were given, and nothing else.
-
-- **Work you notice on the way is a FINDING, not a task.** The bug beside the one you were sent for,
-  the refactor the code obviously wants, the second issue the first one touches: name each in one line
-  in your handoff and let the human dispatch it. Widening is not thoroughness \u2014 it buries the answer
-  they asked for under changes they now have to review, and it spends hours they did not agree to.
-- **If the deliverable is a DOCUMENT, the document is the ending.** A triage, a review, an
-  investigation, a recommendation, a plan \u2014 when that is what you were asked for, the finished
-  write-up IS the work. Implementing what it proposes is the NEXT job, and it is not yours unless you
-  were asked.
-- **An unanswered question is not permission to build the answer.** If you asked and nobody has
-  replied, decide what the task itself needs and carry on INSIDE it. Do not treat the silence as
-  authorization for the work the answer would have unlocked.
-
-**Your default is to DECIDE.** A reversible call costs minutes to redo; a round-trip to the human costs
-hours \u2014 they may not read your question for hours, and the whole effort sits idle until they do. If it
-is derivable from the code, the conventions, or ordinary engineering judgment, it is yours: make it,
-say which way you went, and keep moving.
-
-**The test that catches almost every bad question: if you are about to mark one option
-\`(recommended)\`, you already know the answer \u2014 so implement it instead of asking.** Writing a
-confident rationale for your own recommendation is proof the decision was yours to make. The same goes
-for "want me to fix it?" on a bug you were dispatched to fix, "should I also
-handle X?" where X is obviously in scope, and any question about a name, a default value, a file
-location, an error message, a flag spelling, or which of two equivalent designs to use. Those are
-granular implementation calls. (A bug you merely NOTICED is not a question either \u2014 by the ceiling
-above it is a line in your handoff, not work to adopt and not permission to seek.) Make them, note the
-notable ones in your handoff, and move on \u2014 a
-decision the human can see and reverse in a line of code is not worth an hours-long stall.
-
-**"Run it now, or leave it for the human?" is never a question.** Running commands is the job. A
-safe, reversible command that fixes what you found \u2014 an install, a rebuild, a cache clear, a restart
-of a process you own \u2014 is run and reported, not offered; a shared working tree changes WHEN you run
-it, not WHO. Only the ACT behind a command can earn a card (destructive, irreversible, outside your
-boundary) \u2014 and then the question is whether the thing happens, never who types it.
-
-**That test inverts when knowing the answer and being ABLE TO ACT ON IT come apart.** Where the act is
-one you are not permitted or not able to perform \u2014 a read-only boundary, a comment that goes out under
-the human's name, a merge, a close, a publish, a spend \u2014 your recommendation is not a decision you take
-silently. It becomes the QUESTION, with the recommendation as option A and the act spelled out concretely
+**COMING TO REST IS A STOP, and it needs the same justification as a question.** The far more common
+failure is quiet: you finish one part of a multi-part instruction, write it up, and rest with the rest
+of the mandate untouched \u2014 a handoff produced because a handoff was the shape closest to hand. That is
+an abandonment, and it costs the human the same hours a needless question does. **If the human's
+instruction still has parts left, do not write up \u2014 do the next part in this same turn.** A verified
+milestone is not a stopping point, a green test run is not, and neither is a long turn \u2014 the
+conversation is summarized automatically, so length is never a reason to pause. Three traps, each of
+which has ended a turn that should have continued: announcing the next step instead of taking it ("Now
+starting X" with no tool call); writing the next action into a scratch file and feeling done (Recording work is not
+doing work; notes are crash insurance, never a handoff \u2014 if the action you wrote down is what the human asked for, do it
+NOW); and stopping because the turn feels long.
+
+**AND THE INSTRUCTION IS ALSO THE CEILING.** "Keep going" has no upper bound of its own \u2014 there is
+always more to do in any repository \u2014 so finish the mandate you were given, and nothing else.
+Work you notice on the way is a FINDING, not a task: name it in one line in your handoff and let the
+human dispatch it; widening buries the answer they asked for under changes they now have to review.
+If the deliverable is a DOCUMENT \u2014 a triage, a review, an investigation, a recommendation, a plan \u2014
+the document is the ending: the finished write-up IS the work.
+Implementing what it proposes is the NEXT job, not yours unless you were asked. An
+unanswered question is not permission to build the answer: decide what the task itself needs and
+carry on INSIDE it.
+
+**Your default is to DECIDE.** A reversible call costs minutes to redo; a round-trip to the human
+costs hours, with the whole effort idle meanwhile. Anything derivable from the code, the conventions, or
+ordinary engineering judgment is yours: make it, say which way you went, and keep moving. **The test
+that catches almost every bad question: if you are about to mark one option \`(recommended)\`, you
+already know the answer \u2014 so implement it instead of asking.** The same goes for "want me to fix it?"
+on a bug you were dispatched to fix, "should I also handle X?" where X is obviously in scope, and any
+question about a name, a default value, a file location, an error message, a flag spelling, or which of
+two equivalent designs to use \u2014 granular implementation calls the human can see and reverse in a line
+of code. (A bug you merely NOTICED is a line in your handoff, not work to adopt and not permission to
+seek.) **"Run it now, or leave it for the human?" is never a question:** a safe, reversible command that
+fixes what you found \u2014 an install, a rebuild, a cache clear, a restart of a process you own \u2014 is run
+and reported, not offered. Only the ACT behind a command can earn a card (destructive, irreversible,
+outside your boundary), and then the question is whether the thing happens, never who types it.
+
+**That test inverts when knowing the answer and being ABLE TO ACT ON IT come apart** \u2014 a read-only
+boundary, a comment that goes out under the human's name, a merge, a close, a publish, a spend. It becomes the QUESTION, with the recommendation as option A and the act spelled out concretely
 enough to approve in one word. Never resolve that fork by fencing \` \`\`\`done \` on the investigation.
 
-Stop only when a wrong guess would be BOTH costly AND hard to undo:
-
-- destructive or irreversible actions (history rewrite, data loss, force-merge, a published release);
-- an external-facing commitment, or a security posture with real exposure;
-- product/UX direction that is genuinely the human's taste to set, not a detail you can infer;
-- scope so vague that acting means inventing substantial new code with no way to check it \u2014 ask before
-  building the wrong thing, and do not invent scope to seem productive.
-
-Everything else \u2014 mechanical work, clear bugs, refactors, defaults you can justify, architecture you
-can reverse \u2014 you finish. When you do stop, surface it as a \` \`\`\`question \` with your recommendation
-marked, and do all the work that does NOT depend on the answer first.`;
+Stop only when a wrong guess would be BOTH costly AND hard to undo: destructive or irreversible actions
+(history rewrite, data loss, force-merge, a published release); an external-facing commitment, or a
+security posture with real exposure; product/UX direction that is genuinely the human's taste to set;
+scope so vague that acting means inventing substantial new code with no way to check it. Everything
+else \u2014 mechanical work, clear bugs, refactors, defaults you can justify, architecture you can reverse \u2014
+you finish. When you do stop, surface it as a \` \`\`\`question \` with your recommendation marked, and do
+all the work that does NOT depend on the answer first.`;
     TRIVIAL_PROMPTS = `## Trivial and conversational prompts
 
 Some dispatches never deserved a work effort \u2014 a greeting, a one-line question, a joke, a test ping.
@@ -33630,13 +33533,10 @@ see your conversation, so handing over context is always your job. The absence o
 a blocker to report \u2014 write what the child needs into the prompt or a scratch file you name, or do
 the work inline.
 
-Pass \`subagent_type\` as the namespaced string \`frizz:<model>-<effort>\` (a bare \`opus-high\` will not
-resolve); the profile descriptions carry the routing guidance. Tier by JUDGMENT required, not task
-type: \`frizz:haiku\` for fully-scripted mechanical harvest only; \`frizz:sonnet-medium\` for
-observable-fact probes, scaffolding, and doc/CI work; \`frizz:opus-high\`/\`-xhigh\` for the fix that
-lands, diagnosis, architecture, and any probe whose deliverable is a load-bearing verdict. Effort runs
-low\u2192medium\u2192high\u2192xhigh\u2192max. Bias toward Opus and buy extra rigor with EFFORT; re-verify any cheap-tier
-load-bearing claim yourself.
+Two knobs, one each: the model rides the Agent tool's own \`model\` parameter (omit it and the child
+inherits yours), and the effort rides \`subagent_type\` as the namespaced string \`frizz:<effort>\` \u2014
+\`frizz:low\`, \`frizz:medium\`, \`frizz:high\`, \`frizz:xhigh\` or \`frizz:max\` (a bare \`high\` will not
+resolve). Haiku takes no effort setting: dispatch it with \`model: "haiku"\` and no \`subagent_type\`.
 
 Fan out one sub-agent per prong when work genuinely decomposes and the scale warrants it \u2014 authorized,
 never required, and never a substitute for running the thing yourself.
@@ -33656,66 +33556,42 @@ the handoff.
 
 ## Automated waits in Claude Code
 
-Prefer a project-declared monitor when one exists (inspect project-local \`AGENTS.md\`, skills, docs,
-package scripts, and declared monitor tooling) only after validating its absolute command and
-terminal event/exit semantics; invalid declared tooling is a visible configuration error and must never be
-silently shadowed. Otherwise frizz's portable \`monitors/*.mjs\` are the fallback and native \`Monitor\` is the
-Claude adapter for a changing condition.
-
 **The mechanism is decided by whether you will REST while it runs.** Only a live sub-agent keeps a
 rested thread out of the queue.
 
-- **Resting until the condition is met (the usual CI / PR / release wait) \u2192 dispatch a SUB-AGENT to own
-  the wait.** It runs the watcher to completion in its own foreground and returns the verdict; you stay
-  Active and its return re-invokes you. Foreground Bash caps at ~10 min, so a longer wait loops until
-  its terminal condition. A helper must not hand back while its own watcher is still live.
-- **Working alongside a process you launched (dev server, log tail) \u2192 \`Bash\` with
-  \`run_in_background: true\`.** Fire-and-forget infrastructure you do not rest on. Never put shell
-  job control (\`&\`, \`nohup \u2026 &\`, or \`disown\`) inside the Bash command to imitate the native flag:
-  Frizz's hook rejects escaping jobs because the process could survive without a lifecycle id or wake.
+- **Resting until a condition is met** (the usual CI / PR / release wait) \u2192 for a pull request,
+  \`mcp__frizz__watch_pr\`; for anything else dispatch a SUB-AGENT to own the wait. It runs the watcher
+  to completion in its own foreground and returns the verdict; you stay Active and its return
+  re-invokes you. Foreground Bash caps at ~10 min, so a longer wait loops until its terminal
+  condition. A helper must not hand back while its own watcher is still live.
+- **Working alongside a process you launched** (dev server, log tail) \u2192 \`Bash\` with
+  \`run_in_background: true\`. Never put shell job control (\`&\`, \`nohup \u2026 &\`, \`disown\`) inside the
+  command to imitate the native flag: frizz's hook rejects an escaping job, because the process could
+  survive without a lifecycle id or wake.
 - \`Monitor\` streams events INTO an active turn (\`persistent: true\` runs until \`TaskStop\` or session
   end); it is not something to park a rest on. \`TaskOutput\` is deprecated \u2014 use \`Read\` on that output
   path for diagnostics. \`TaskStop\` is only for your own monitor after its terminal handoff, never to
   cut off a sub-agent.
 
 These live tasks do not survive the session ending. Never fake a wait with \`echo waiting\` or repeated
-foreground sleeps. Load \`frizz:waits\` for the full playbook.
-
-**How to keep yourself moving across rests, and it is not Claude Code's own scheduler.**
-\`CronCreate\` and \`ScheduleWakeup\` cannot fire in the runtime frizz runs you in: their gate stays shut
-for as long as ANY background task of yours is outstanding, so the moment you are parked behind a
-background shell or a sub-agent \u2014 exactly when a wake would matter \u2014 they go silent (measured: 3 fires
-in 150s with no background work, 0 with a background shell alive). frizz's own rides its outbox and is
-unaffected.
-
-\`mcp__frizz__recurring_prompt\` arms ONE piece of text on your own thread, with either or both of two
-triggers:
-
-- \`stop_hook\` \u2014 sent every time you come to REST. For driving an effort forward.
-- \`heartbeat_seconds\` \u2014 sent on a CLOCK, whatever you are doing. It reaches you MID-TURN: a queued
-  message you read at your next tool boundary rather than one that waits for you to stop. It never
-  aborts what you are running.
-
-Setting both is the ordinary "keep this moving" case. Disarm with \`action: "stop"\` when the work it
-drives is finished \u2014 one left armed on a finished thread wakes it forever, and the human can also
-switch it off in the thread footer. Replying \`ALLDONE\` on its own line stops BOTH triggers too, but
-treat that as a last resort: it permanently stalls the run, and a stalled run nobody is watching does
-not restart itself. Be certain there is no further work before you use it.
-
-**And for a single moment in the future, \`mcp__frizz__timer\` \u2014 your own alarm clock.** It arms ONE
-piece of text for ONE instant (\`action: "set"\` with \`prompt\` plus either \`in_seconds\` or an ISO
-\`at\`), delivered exactly once and then gone. It is the heartbeat without the repetition, and it shares
-the property that matters: it reaches you MID-TURN, so it lands when you asked for it whether or not
-you have stopped, and it never aborts what you are running.
-
-Unlike the recurring prompt \u2014 of which a thread has at most one \u2014 you may hold MANY timers at once,
-each with its own instant and its own text. \`action: "list"\` shows what is armed and \`action:
-"cancel"\` withdraws one by id; a fired timer needs no cleanup.
-
-Reach for it when you want to come back to something at a specific time: re-check a deploy in ten
-minutes, re-read a slow log at the top of the hour. Do NOT use it to poll something you could be woken
-by \u2014 if a background shell, a sub-agent or a monitor can tell you the moment a thing happens, that is
-strictly better than an alarm that asks "is it done yet".
+foreground sleeps.
+
+**\`CronCreate\` and \`ScheduleWakeup\` cannot fire in the runtime frizz runs you in:** their gate stays
+shut for as long as ANY background task of yours is outstanding \u2014 exactly when a wake would matter
+(measured: 3 fires in 150s with no background work, 0 with a background shell alive). Frizz's own rides
+its outbox and is unaffected:
+
+- \`mcp__frizz__recurring_prompt\` arms ONE piece of text on your own thread, with any of three triggers:
+  \`stop_hook\` \u2014 sent every time you come to REST, for driving an effort forward; \`heartbeat_seconds\` \u2014
+  on a CLOCK, whatever you are doing, delivered MID-TURN at your next tool boundary and never aborting
+  what you are running; \`post_compaction\` \u2014 into the emptied window after a compaction. Disarm with
+  \`action: "stop"\` when the work it drives is finished \u2014 one left armed on a finished thread wakes it
+  forever, and the human can also switch it off in the thread footer. Replying \`ALLDONE\` on its own
+  line stops it too, but that permanently stalls the run: a last resort, only when nothing is left.
+- \`mcp__frizz__timer\` is your own alarm clock: \`action: "set"\` with \`prompt\` plus \`in_seconds\` or an
+  ISO \`at\`, delivered exactly once, mid-turn, and then gone. You may hold MANY at once; \`action: "list"\`
+  shows them and \`action: "cancel"\` withdraws one by id. Use it to come back to something at a specific
+  time \u2014 never to poll something a background shell, a sub-agent or a monitor can wake you for.
 
 ## Showing the human files and images
 
@@ -33725,6 +33601,15 @@ your scratch directory. Pass an ARRAY to render several in one captioned block:
 \u2014 \`"proactive"\` when the human is away and should get a push, else \`"normal"\`. Reach for it eagerly
 whenever you have screenshots worth showing: it renders the whole decisive set inline, which a terminal
 agent cannot do.`,
+      // § Bounded native delegation describes the NATIVE `spawn_agent` surface, which frizz does not
+      // configure at all. The only `-c` overrides frizz puts on a codex app-server are the frizz MCP mount
+      // and `default_tools_approval_mode` (backend/codex-mcp.ts `codexAppServerArgv`, the single argv
+      // builder for all four spawn sites). Until 2026-08-26 this section opened by claiming frizz "requests
+      // the V2 surface with process-scoped, version-gated CLI overrides" — no commit ever added one, so
+      // every codex worker was told frizz did something it does not do. The gate itself was never wrong:
+      // `spawn_agent` carries `model`/`reasoning_effort` natively (parseCodexSubAgentLine reads both off
+      // real rollouts), so reading the live schema is the whole check. Keep this paragraph a statement
+      // about what CODEX ships, never about what frizz sends.
       codex: `## Own one task
 
 You are one top-level Frizz worker, not the dashboard's portfolio orchestrator. Own only the TASK
@@ -33780,11 +33665,12 @@ for the title signal: H1 parsing exists only for compatibility with old transcri
 
 When delegation is explicitly authorized:
 
-1. Frizz requests the V2 surface with process-scoped, version-gated CLI overrides; that request is
-   not proof that this Codex release accepted it. Use the active native spawn tool only when its
+1. Frizz sends NO config override for the native spawn surface \u2014 the only \`-c\` overrides on the
+   app-server mount frizz's own MCP server and pre-approve its tools \u2014 so what the spawn tool accepts
+   is whatever this Codex release happens to ship. Use the active native spawn tool only when its
    runtime schema exposes both \`model\` and
-   \`reasoning_effort\`. The configured namespace is \`frizz\`, but Codex may show a runtime-normalized
-   tool name; trust the callable schema. Pass both fields on every dispatch; omit \`agent_type\` for
+   \`reasoning_effort\`. Codex may show a runtime-normalized tool name, so trust the callable schema
+   rather than the name you expect. Pass both fields on every dispatch; omit \`agent_type\` for
    ordinary compute routing. Choose the child's CONTEXT deliberately \u2014 the schema's context-fork
    control goes BOTH ways, under whatever name the live schema exposes it (current Codex: \`fork_turns\`;
    older builds: \`fork_context\`). Pass NO parent history (\`fork_turns: "none"\`) for an INDEPENDENT
@@ -33794,10 +33680,10 @@ When delegation is explicitly authorized:
    conversation so far is load-bearing. Fresh is the default for frizz work; a fork is heavier and
    carries your assumptions with it. The schema default is a FULL fork, so an unset control silently
    hands the child everything \u2014 set it explicitly either way, and when you do fork, verify the child's
-   effective model/effort from native metadata rather than assuming your overrides survived. Never
-   invent a field the schema lacks, and a missing or unfamiliar context-fork control is NOT by itself
-   a routing failure (keep such a child self-contained and note it). Only \`model\`/\`reasoning_effort\`
-   being unavailable\u2014or startup rejecting the private overrides\u2014makes the session degraded/no-routing:
+   effective model/effort from native metadata rather than assuming the fields you passed survived.
+   Never invent a field the schema lacks, and a missing or unfamiliar context-fork control is NOT by
+   itself a routing failure (keep such a child self-contained and note it). Only
+   \`model\`/\`reasoning_effort\` being absent from the live schema makes the session degraded/no-routing:
    do not silently fall back to inherited compute. Finish inline when independence is not required,
    or report the unmet gate.
 2. Give each child one self-contained, non-overlapping outcome with its paths, authority, evidence or
@@ -34065,7 +33951,7 @@ function connectClaudeBroker(socketPath, handlers, options = {}) {
           pendingSkills.delete(frame.requestId);
           clearTimeout(entry.timer);
           if (typeof frame.error === "string" && frame.error) entry.fail(new Error(frame.error));
-          else entry.settle((Array.isArray(frame.skills) ? frame.skills : []).filter((s) => typeof s?.name === "string" && typeof s?.description === "string"));
+          else entry.settle((Array.isArray(frame.skills) ? frame.skills : []).filter((s) => typeof s?.name === "string" && typeof s?.description === "string").map((s) => ({ name: s.name, description: s.description, source: SKILL_SOURCES.has(s.source) ? s.source : void 0 })));
           break;
         }
       }
@@ -34213,9 +34099,12 @@ function connectClaudeBroker(socketPath, handlers, options = {}) {
     }
   };
 }
+var SKILL_SOURCES;
 var init_claude_broker_client = __esm({
   "packages/server/src/backend/claude-broker-client.ts"() {
     "use strict";
+    init_src();
+    SKILL_SOURCES = new Set(ThreadSkillSource.options);
   }
 });
 
@@ -34595,6 +34484,9 @@ function createClaudeAgentBrokerBridge(deps) {
       // claudeWorkerEnv). Spread here rather than inherited, which is what gives these per-thread
       // values priority over anything in the environment frizz itself was launched with.
       ...claudeWorkerEnv(),
+      // The auto-compact ceiling, from Settings (500K by default). Without it a `[1m]` worker compacts
+      // only near 1M, re-sending up to 5x a TUI session's conversation on every turn past 200K.
+      ...claudeCompactionEnv(deps.getSettings?.()),
       ...we?.permDir ? { FRIZZ_PERM_DIR: we.permDir } : {},
       // The cc-worker plugin's PreToolUse hook DENIES AskUserQuestion, because without frizz in the
       // loop a blocking question freezes a headless worker where nobody can answer it. On the broker path
@@ -34870,19 +34762,19 @@ var init_claude_agent_broker_bridge = __esm({
 });
 
 // packages/server/src/backend/auth-status.ts
-import { join as join27 } from "node:path";
+import { join as join26 } from "node:path";
 import { homedir as homedir11, platform as platform2 } from "node:os";
 import { readFileSync as readFileSync16, statSync as statSync11 } from "node:fs";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 function claudeConfigDir2() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? override : join27(homedir11(), ".claude");
+  return override && override.trim() ? override : join26(homedir11(), ".claude");
 }
 function claudeFileState(configDir) {
   let raw2;
   try {
-    raw2 = readFileSync16(join27(configDir, ".credentials.json"), "utf8");
+    raw2 = readFileSync16(join26(configDir, ".credentials.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "absent" : "error";
   }
@@ -34915,7 +34807,7 @@ function readCodexAuthState(codexHome = defaultCodexHome()) {
   if (process.env.OPENAI_API_KEY || process.env.CODEX_API_KEY || process.env.CODEX_ACCESS_TOKEN) return "authed";
   let raw2;
   try {
-    raw2 = readFileSync16(join27(codexHome, "auth.json"), "utf8");
+    raw2 = readFileSync16(join26(codexHome, "auth.json"), "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? "signed-out" : "unknown";
   }
@@ -34980,7 +34872,7 @@ function asEmail(value) {
 }
 function claudeAccountFile() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  return override && override.trim() ? join27(override, ".claude.json") : join27(homedir11(), ".claude.json");
+  return override && override.trim() ? join26(override, ".claude.json") : join26(homedir11(), ".claude.json");
 }
 function readClaudeAccountEmail(path = claudeAccountFile()) {
   let stat2;
@@ -35004,7 +34896,7 @@ function readClaudeAccountEmail(path = claudeAccountFile()) {
 function readCodexAccountEmail(codexHome = defaultCodexHome()) {
   let doc;
   try {
-    doc = JSON.parse(readFileSync16(join27(codexHome, "auth.json"), "utf8"));
+    doc = JSON.parse(readFileSync16(join26(codexHome, "auth.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -35072,8 +34964,8 @@ var init_auth_status = __esm({
 });
 
 // packages/server/src/dispatch.ts
-import { closeSync as closeSync12, constants, existsSync as existsSync10, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync17, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
-import { basename as basename6, join as join28, dirname as dirname11 } from "node:path";
+import { closeSync as closeSync12, constants, existsSync as existsSync9, fstatSync as fstatSync2, lstatSync as lstatSync3, openSync as openSync13, readFileSync as readFileSync17, realpathSync as realpathSync7, statSync as statSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync13, rmSync as rmSync9 } from "node:fs";
+import { basename as basename6, join as join27, dirname as dirname11 } from "node:path";
 import { createHash as createHash11, randomUUID as randomUUID13 } from "node:crypto";
 function fallbackTitle(prompt) {
   const firstLine2 = prompt.trim().split("\n", 1)[0].trim();
@@ -35092,7 +34984,7 @@ function fallbackTitle(prompt) {
 }
 function resolveSlug(frizzDir, base, taken) {
   base = ThreadSlug.parse(base);
-  const isTaken = (slug) => existsSync10(join28(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
+  const isTaken = (slug) => existsSync9(join27(frizzDir, `${slug}.md`)) || (taken?.(slug) ?? false);
   if (!isTaken(base)) return base;
   for (let n = 2; ; n++) {
     const suffix = `-${n}`;
@@ -35109,12 +35001,12 @@ function resolveLegacyThreadFile(projectDir, value) {
   if (!parsed.success) return null;
   try {
     const projectRoot = realpathSync7(projectDir);
-    const frizzPath = join28(projectRoot, ".frizz");
+    const frizzPath = join27(projectRoot, ".frizz");
     const frizzStat = lstatSync3(frizzPath);
     if (!frizzStat.isDirectory() || frizzStat.isSymbolicLink()) return null;
     const realFrizz = realpathSync7(frizzPath);
     if (dirname11(realFrizz) !== projectRoot || basename6(realFrizz) !== ".frizz") return null;
-    const path = join28(realFrizz, `${parsed.data}.md`);
+    const path = join27(realFrizz, `${parsed.data}.md`);
     const before = lstatSync3(path);
     if (!before.isFile() || before.isSymbolicLink()) return null;
     const realPath = realpathSync7(path);
@@ -35158,7 +35050,7 @@ function boardAuthorizesAdoption(board, slug) {
   return !board.errorItems.some((item) => item.file === `${slug}.md`);
 }
 function ensureSafeDirectDirectory(parent, name) {
-  const path = join28(parent, name);
+  const path = join27(parent, name);
   try {
     mkdirSync13(path);
   } catch (error) {
@@ -35188,8 +35080,8 @@ function loadWorkerPrompt(kind = "claude") {
 function monitorScriptsDir() {
   const plugin = workerPluginDir();
   if (!plugin) return void 0;
-  const dir = join28(plugin, "skills", "gh", "scripts");
-  return existsSync10(join28(dir, "ci-watch.mjs")) ? dir : void 0;
+  const dir = join27(plugin, "skills", "gh", "scripts");
+  return existsSync9(join27(dir, "ci-watch.mjs")) ? dir : void 0;
 }
 function codexScratchpadHookConfig(hookScript, sessionId) {
   if (!hookScript || !sessionId) return {};
@@ -35201,7 +35093,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
       }
     ]
   });
-  const bashBackgroundHook = join28(dirname11(hookScript), "bash-background.mjs");
+  const bashBackgroundHook = join27(dirname11(hookScript), "bash-background.mjs");
   return {
     bypass_hook_trust: true,
     hooks: {
@@ -35227,7 +35119,7 @@ function codexScratchpadHookConfig(hookScript, sessionId) {
 }
 function scratchpadHookScript() {
   const plugin = workerPluginDir();
-  return plugin ? join28(plugin, "hooks", "scratchpad.mjs") : void 0;
+  return plugin ? join27(plugin, "hooks", "scratchpad.mjs") : void 0;
 }
 function composePrompt(sessionId, prompt, kind = "claude") {
   const children2 = kind === "codex" ? "Native sub-agents share it \u2014 have each write its OWN file rather than all editing one." : "Name it in a sub-agent's prompt when you want its notes to land somewhere you can read; give each child its OWN file rather than having them all edit one.";
@@ -35243,7 +35135,7 @@ function scratchpadOrientation(sessionId, kind = "claude") {
   return `SCRATCH DIRECTORY: .frizz/threads/${sessionId}/ \u2014 yours, free-form, as many files as you like, and nothing is expected in it. A single direct task usually needs none; writing notes is never a substitute for doing the work. On a long effort write the doc you would want if you lost your context (${children2}), then arm mcp__frizz__recurring_prompt with post_compaction: true and a prompt LINKING that file \u2014 frizz hands the link back when your context is compacted. Nothing in this directory is read automatically.`;
 }
 function frizzConfigBlock(projectDir) {
-  const path = join28(projectDir, "FRIZZ.md");
+  const path = join27(projectDir, "FRIZZ.md");
   let body;
   try {
     const st = statSync12(path);
@@ -35283,8 +35175,8 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   const { stateDir, serverLock, projectId } = typeof target === "string" ? { stateDir: target } : target;
   const pluginDir = resolveWorkerPluginDir(moduleUrl, env);
   if (!pluginDir) return void 0;
-  const scriptPath = join28(pluginDir, "bin", FRIZZ_MCP.script);
-  if (!existsSync10(scriptPath)) return void 0;
+  const scriptPath = join27(pluginDir, "bin", FRIZZ_MCP.script);
+  if (!existsSync9(scriptPath)) return void 0;
   return {
     scriptPath,
     stateDir,
@@ -35294,12 +35186,8 @@ function resolveFrizzMcp(target, moduleUrl = import.meta.url, env = process.env,
   };
 }
 function claudeMcpConfig(mcp) {
-  const mcpServers = {
-    // chromeDevtoolsMcpMount(), never the fields: it is the ONE builder both backends render, and it
-    // is what mounts frizz's lazy proxy instead of the real server (backend/types.ts).
-    [CHROME_DEVTOOLS_MCP.name]: chromeDevtoolsMcpMount()
-  };
-  const allowedTools = [`mcp__${CHROME_DEVTOOLS_MCP.name}`];
+  const mcpServers = {};
+  const allowedTools = [];
   if (mcp) {
     const env = frizzMcpEnv(mcp);
     mcpServers[FRIZZ_MCP.name] = { command: process.execPath, args: [mcp.scriptPath], env };
@@ -35309,6 +35197,7 @@ function claudeMcpConfig(mcp) {
 }
 function claudeMcpFlags(mcp) {
   const { mcpServers, allowedTools } = claudeMcpConfig(mcp);
+  if (Object.keys(mcpServers).length === 0) return [];
   const config = JSON.stringify({ mcpServers });
   return ["--mcp-config", config, `--allowedTools=${allowedTools.join(",")}`];
 }
@@ -35366,7 +35255,7 @@ function buildClaudeResumeCommand(opts) {
 }
 function createDispatcher(deps) {
   const readBoardSource = deps.readBoard ?? readBoard;
-  const frizzDir = join28(deps.project.dir, ".frizz");
+  const frizzDir = join27(deps.project.dir, ".frizz");
   const adoptionRuntime = deps.adoptionRuntime ?? productionRuntime;
   function cleanupPrewrites(built) {
     for (const path of new Set(built.prewrite.map((file) => file.path))) {
@@ -35379,7 +35268,7 @@ function createDispatcher(deps) {
   function cleanupDispatchFiles(scratchRel, built, sessionId) {
     cleanupPrewrites(built);
     try {
-      rmSync9(join28(deps.project.dir, scratchRel), { force: true, recursive: true });
+      rmSync9(join27(deps.project.dir, scratchRel), { force: true, recursive: true });
     } catch {
     }
     cleanupAdoptionSessionFiles(deps.project.dir, sessionId);
@@ -35812,7 +35701,7 @@ import {
   watch as fsWatch
 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join29 } from "node:path";
+import { join as join28 } from "node:path";
 import watcher from "@parcel/watcher";
 function appServerTurnStalled(liveness, lastActivityAt, nowMs) {
   if (!liveness) return false;
@@ -35910,9 +35799,9 @@ function hasParkedTimerWatch(tele, armedTimerIds) {
   if (tele?.lastFence?.kind !== "awaiting") return false;
   return tele.lastFence.hints.some((hint) => hint.kind === "timer" && armedTimerIds.has(hint.value.trim()));
 }
-function hasDeclaredWait(tele, nowMs, armedTimerIds = /* @__PURE__ */ new Set()) {
+function hasDeclaredWait(tele, nowMs, armedTimerIds = /* @__PURE__ */ new Set(), registeredPrWatches = /* @__PURE__ */ new Set()) {
   if (hasDeclaredBackgroundPark(tele, nowMs)) return true;
-  if (tele?.lastFence?.kind === "awaiting" && hasParkedPrWatch(tele)) return true;
+  if (tele?.lastFence?.kind === "awaiting" && hasParkedPrWatch(tele, registeredPrWatches)) return true;
   if (hasParkedTimerWatch(tele, armedTimerIds)) return true;
   return (tele?.subAgents ?? []).some((a) => isDirectSubAgent(a) && a.state === "running");
 }
@@ -35930,7 +35819,7 @@ function heldByRunningChecks(tele, github, registered) {
     return status?.checks === "running" && status.state === "open";
   });
 }
-function hasLiveOwnWork(tele) {
+function hasLiveOwnWork(tele, registeredPrWatches) {
   return Boolean(
     tele?.subAgents?.some((agent) => isDirectSubAgent(agent) && agent.state === "running") || tele?.bgShells?.some((shell) => shell.state === "running") || // A PARKED PR WATCHER COUNTS (2026-08-13). It is the same shape of thing as a detached shell: the
     // worker left it running, it will re-invoke the thread on its own, and until it does there is
@@ -35938,12 +35827,16 @@ function hasLiveOwnWork(tele) {
     // counting it — for that card's event-snooze, which is now the ONE control for hiding a parked
     // watcher (maintainer: "the user can just use the generic snooze card… now GitHub watchers can be
     // included in the ranks of those").
-    hasParkedPrWatch(tele)
+    hasParkedPrWatch(tele, registeredPrWatches)
   );
 }
-function hasParkedPrWatch(tele) {
+function hasParkedPrWatch(tele, registered) {
   if (tele?.lastFence?.kind !== "awaiting") return false;
-  return tele.lastFence.hints.some((hint) => hint.kind === "pr" && parsePrRef(hint.value) !== void 0);
+  return tele.lastFence.hints.some((hint) => {
+    if (hint.kind !== "pr") return false;
+    const ref = parsePrRef(hint.value);
+    return ref !== void 0 && registered.has(githubStatusKey(ref));
+  });
 }
 function bgSnoozeArmed(row) {
   return row.bg_snooze_rested_at != null && row.rested_at != null && row.bg_snooze_rested_at === row.rested_at;
@@ -35985,7 +35878,7 @@ function fenceWatchViews(slug, tele, fenceAt, github = {}, registered = [], arme
   if (tele?.lastFence?.kind !== "awaiting") return out;
   const createdAt = fenceAt ?? tele.lastAssistantAt ?? (/* @__PURE__ */ new Date()).toISOString();
   for (const hint of tele.lastFence.hints) {
-    if (hint.kind !== "shell" && hint.kind !== "agent") continue;
+    if (hint.kind !== "shell") continue;
     const target = hint.value.trim();
     if (!target || seen.has(`shell:${target}`) || !liveWaitHandles(tele).has(target)) continue;
     seen.add(`shell:${target}`);
@@ -36012,15 +35905,15 @@ function deriveNeedsYou(row, tele, runtime, hasActionableInteraction = false, no
   if (excuseLiveOwnWork && runtime !== "exited" && hasLiveBackgroundWork(tele) && !tele?.lastFence) return false;
   if (excuseLiveOwnWork && runtime !== "exited" && hasDeclaredBackgroundPark(tele, nowMs)) return false;
   if (excuseLiveOwnWork && runtime !== "exited" && heldByRunningChecks(tele, github, registeredPrWatches)) return false;
-  if (runtime !== "exited" && (hasLiveOwnWork(tele) || hasParkedTimerWatch(tele, armedTimerIds)) && tele?.lastFence?.kind !== "done") return !bgSnoozeArmed(row);
+  if (runtime !== "exited" && (hasLiveOwnWork(tele, registeredPrWatches) || hasParkedTimerWatch(tele, armedTimerIds)) && tele?.lastFence?.kind !== "done") return !bgSnoozeArmed(row);
   if (tele?.lastFence?.kind === "done") return true;
   return true;
 }
 function deriveAwaitingBackground(row, tele, runtime, hasActionableInteraction = false, nowMs = Date.now(), limitPause = void 0, deliveryProcessGone = false, github = {}, registeredPrWatches = /* @__PURE__ */ new Set(), armedTimerIds = /* @__PURE__ */ new Set()) {
-  if (runtime !== "turn-idle" || !hasDeclaredWait(tele, nowMs, armedTimerIds)) return false;
+  if (runtime !== "turn-idle" || !hasDeclaredWait(tele, nowMs, armedTimerIds, registeredPrWatches)) return false;
   if (hasActionableInteraction || tele?.pendingAsk || tele?.pendingQuestion) return false;
   if (tele?.lastFence?.kind === "done") return false;
-  if (tele?.lastFence?.kind === "awaiting" && !hasParkedPrWatch(tele) && !hasDeclaredBackgroundPark(tele, nowMs) && // A TIMER PARK IS THE SAME EXCEPTION AGAIN (2026-08-24): its fence has no park action either, so
+  if (tele?.lastFence?.kind === "awaiting" && !hasParkedPrWatch(tele, registeredPrWatches) && !hasDeclaredBackgroundPark(tele, nowMs) && // A TIMER PARK IS THE SAME EXCEPTION AGAIN (2026-08-24): its fence has no park action either, so
   // suppressing this card left the wait stated nowhere but the fence's own machinery footer.
   !hasParkedTimerWatch(tele, armedTimerIds)) return false;
   return deriveNeedsYou({ ...row, bg_snooze_rested_at: null }, tele, runtime, hasActionableInteraction, nowMs, limitPause, false, deliveryProcessGone, {}, /* @__PURE__ */ new Set(), armedTimerIds);
@@ -36497,7 +36390,7 @@ function createBoard(project, storage, bus, tailer, bootId, deps = {}) {
     if (parcelSub || stopped) return Promise.resolve();
     if (watchSetup) return watchSetup;
     const setup = (async () => {
-      const next = await subscribe(join29(project.dir, ".frizz"), () => scheduleRebuild());
+      const next = await subscribe(join28(project.dir, ".frizz"), () => scheduleRebuild());
       if (stopped) {
         await next.unsubscribe();
         return;
@@ -37724,10 +37617,17 @@ ${wakeTimeHeader(now(), spokeAt)}`;
       for (const sh of tele.retiredShells ?? []) {
         for (const h of [sh.taskId, sh.id, sh.label]) if (h) finishedHandles.add(h);
       }
-      const finishedItem = (i) => finishedHandles.has(i.value);
+      for (const a of tele.subAgents ?? []) {
+        if (a.state !== "rested") continue;
+        for (const h of [a.id, a.label]) if (h) finishedHandles.add(h);
+      }
+      const firedTimers = new Set(
+        deps.storage.listThreadTimers(row.slug).filter((t) => t.state === "fired").map((t) => t.id)
+      );
+      const finishedItem = (i) => finishedHandles.has(i.value) || i.kind === "timer" && firedTimers.has(i.value);
       const status = park.items.map((i) => {
         const gone = dead.some((d) => d.kind === i.kind && d.value === i.value);
-        const note = !gone ? "still running" : finishedItem(i) ? "FINISHED \u2014 its result is waiting for you" : i.kind === "pr" ? "NOT REGISTERED \u2014 register it with `mcp__frizz__watch_pr` first, then name it here" : "NOT RUNNING (nothing by that name)";
+        const note = !gone ? "still running" : i.kind === "timer" && firedTimers.has(i.value) ? "already FIRED \u2014 its wake was delivered; there is nothing left to wait on" : finishedItem(i) ? "FINISHED \u2014 its result is waiting for you" : i.kind === "pr" ? "NOT REGISTERED \u2014 register it with `mcp__frizz__watch_pr` first, then name it here" : "NOT RUNNING (nothing by that name)";
         return `- \`${AWAITING_KEY_OF[i.kind]}: [${i.value}]\` \u2014 ${note}`;
       });
       const allFinished = dead.length > 0 && dead.every(finishedItem);
@@ -38523,7 +38423,7 @@ var init_resume = __esm({
 });
 
 // packages/server/src/backend/claude.ts
-import { join as join30 } from "node:path";
+import { join as join29 } from "node:path";
 function toolResultText2(content) {
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -38612,7 +38512,7 @@ function createClaudeBackend(opts) {
       return { argv, env: claudeWorkerEnvironment(), prewrite: [] };
     },
     transcriptPath(sessionId) {
-      return join30(opts.logDir, `${sessionId}.jsonl`);
+      return join29(opts.logDir, `${sessionId}.jsonl`);
     },
     parseLine(line) {
       return parseClaudeLine(line);
@@ -38782,12 +38682,12 @@ var init_login_utility = __esm({
 
 // packages/server/src/backend/codex-app-server-diagnostics.ts
 import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync14, renameSync as renameSync8, statSync as statSync13 } from "node:fs";
-import { join as join31 } from "node:path";
+import { join as join30 } from "node:path";
 function codexDiagnosticLogPath(stateDir, projectId) {
-  return join31(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
+  return join30(stateDir, "codex-app-server", `${projectId}.diagnostics.log`);
 }
 function createCodexDiagnosticSink(stateDir, projectId, now = () => /* @__PURE__ */ new Date()) {
-  const dir = join31(stateDir, "codex-app-server");
+  const dir = join30(stateDir, "codex-app-server");
   const path = codexDiagnosticLogPath(stateDir, projectId);
   let ensured = false;
   return (event) => {
@@ -38819,7 +38719,7 @@ var init_codex_app_server_diagnostics = __esm({
 import { execFile as execFile7 } from "node:child_process";
 import { readdirSync as readdirSync8, unlinkSync as unlinkSync4 } from "node:fs";
 import { connect as connectSocket } from "node:net";
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 function parseLsofSocketNames(stdout) {
   const referenced = /* @__PURE__ */ new Set();
   for (const line of stdout.split("\n")) {
@@ -38836,7 +38736,7 @@ function sweepStaleSockets(options, deps = {}) {
   const keep = new Set(options.keep ?? []);
   let candidates;
   try {
-    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join32(options.dir, name)).filter((path) => !keep.has(path));
+    candidates = (deps.readdir ?? readdirSync8)(options.dir).filter((name) => name.startsWith(options.prefix) && name.endsWith(".sock")).map((name) => join31(options.dir, name)).filter((path) => !keep.has(path));
   } catch {
     return;
   }
@@ -39300,7 +39200,7 @@ var init_thread_hibernation = __esm({
 });
 
 // packages/server/src/context.ts
-import { join as join33 } from "node:path";
+import { join as join32 } from "node:path";
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { homedir as homedir13 } from "node:os";
 function reconcileSessions(storage) {
@@ -39458,7 +39358,7 @@ async function createContext(opts = {}) {
 function createContextUnchecked(opts, resources) {
   const home = opts.home ?? homedir13();
   const project = opts.project ?? resolveProject();
-  const dbPath = join33(project.stateDir, "ui.db");
+  const dbPath = join32(project.stateDir, "ui.db");
   const storage = createStorage(dbPath);
   resources.storage = storage;
   const bus = new Bus();
@@ -39603,12 +39503,16 @@ function createContextUnchecked(opts, resources) {
     projectId: project.id,
     // The frizz worker environment — the SDK equivalent of the CLI argv's --plugin-dir / --mcp-config.
     // Computed ONCE here (constant per project) and applied on every broker fork so a broker worker
-    // gets the frizz sub-agent profiles, the frizz + chrome-devtools MCP, and the cc-worker hooks.
+    // gets the frizz sub-agent profiles, the frizz MCP server (the only one frizz mounts), and the
+    // cc-worker hooks. A project's own `.mcp.json` servers load on top of these, not through them.
     workerEnv: {
       pluginDir: workerPluginDir(),
       ...claudeMcpConfig(resolveFrizzMcp(frizzMcpTarget)),
       permDir: permRequestDir(project)
     },
+    // Read at every fork, not captured once: the compaction window is a Settings value the drawer
+    // can change while the server runs, and the next dispatch or cold resume should carry it.
+    getSettings: () => getSettings(storage, home),
     // Which broker threads warmUp() may reattach at boot. Same predicate codex's shouldAutoResume
     // applies: never wake a thread the human has already put away — a boot reattach is only for a
     // thread that is still open and still theirs to come back to. Broker-backed rows only; a
@@ -42499,7 +42403,7 @@ var init_server = __esm({
 });
 
 // packages/server/src/repair.ts
-import { existsSync as existsSync12, readFileSync as readFileSync19, writeFileSync as writeFileSync11 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync19, writeFileSync as writeFileSync11 } from "node:fs";
 import { basename as basename7, dirname as dirname13, resolve as resolve6 } from "node:path";
 function quoteValue(v) {
   if (/^[\w./#:+-]+$/.test(v)) return v;
@@ -42514,7 +42418,7 @@ function repairThreadFile(frizzDir, file) {
   const abs = resolve6(root, file);
   if (dirname13(abs) !== root) throw new RepairError(`refusing to repair "${file}": not directly under .frizz/`);
   if (!abs.endsWith(".md")) throw new RepairError(`refusing to repair "${file}": not a .md thread file`);
-  if (!existsSync12(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
+  if (!existsSync11(abs)) throw new RepairError(`no thread file to repair: ${basename7(abs)}`);
   const content = readFileSync19(abs, "utf8");
   const firstLine2 = content.replace(/^/, "").split(/\r?\n/).find((l) => l.trim() !== "");
   if (firstLine2?.trim() === "---") {
@@ -42706,10 +42610,10 @@ var init_bash_background = __esm({
 });
 
 // packages/server/src/transcript.ts
-import { closeSync as closeSync13, existsSync as existsSync13, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync21, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
+import { closeSync as closeSync13, existsSync as existsSync12, fstatSync as fstatSync3, mkdirSync as mkdirSync15, openSync as openSync14, readdirSync as readdirSync9, readFileSync as readFileSync21, readSync as readSync7, renameSync as renameSync9, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync12 } from "node:fs";
 import { createHash as createHash13 } from "node:crypto";
 import { StringDecoder as StringDecoder4 } from "node:string_decoder";
-import { join as join34 } from "node:path";
+import { join as join33 } from "node:path";
 import { homedir as homedir14 } from "node:os";
 function formatTokens(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
@@ -43259,14 +43163,14 @@ function pruneScreenshotCache() {
     if (entries.length <= SCREENSHOT_CACHE_MAX) return;
     const byMtime = entries.map((n) => {
       try {
-        return { n, m: statSync14(join34(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
+        return { n, m: statSync14(join33(SCREENSHOT_CACHE_DIR, n)).mtimeMs };
       } catch {
         return { n, m: 0 };
       }
     }).sort((a, b) => b.m - a.m);
     for (const { n } of byMtime.slice(SCREENSHOT_CACHE_MAX)) {
       try {
-        unlinkSync5(join34(SCREENSHOT_CACHE_DIR, n));
+        unlinkSync5(join33(SCREENSHOT_CACHE_DIR, n));
       } catch {
       }
     }
@@ -43296,14 +43200,14 @@ function persistBase64Image(mediaType, data, idKey) {
   const ext = IMAGE_MEDIA_EXT[typeof mediaType === "string" ? mediaType.toLowerCase() : ""];
   if (!ext || !data) return void 0;
   const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-  const path = join34(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
+  const path = join33(SCREENSHOT_CACHE_DIR, `${name}.${ext}`);
   try {
-    if (existsSync13(path)) return path;
+    if (existsSync12(path)) return path;
     if (data.length > SCREENSHOT_MAX_BASE64) return void 0;
     const buf = Buffer.from(data, "base64");
     if (buf.length === 0 || !looksLikeImage(buf, ext)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join33(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, path);
     pruneScreenshotCache();
@@ -43318,14 +43222,14 @@ function persistSentFile(srcPath, idKey) {
   const outExt = ext === "jpeg" ? "jpg" : ext;
   try {
     const name = createHash13("sha256").update(idKey).digest("hex").slice(0, 32);
-    const dest = join34(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
-    if (existsSync13(dest)) return dest;
+    const dest = join33(SCREENSHOT_CACHE_DIR, `${name}.${outExt}`);
+    if (existsSync12(dest)) return dest;
     const size = statSync14(srcPath).size;
     if (size === 0 || size > SENT_IMAGE_MAX_BYTES) return void 0;
     const buf = readFileSync21(srcPath);
     if (!looksLikeImage(buf, outExt)) return void 0;
     mkdirSync15(SCREENSHOT_CACHE_DIR, { recursive: true });
-    const tmp = join34(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
+    const tmp = join33(SCREENSHOT_CACHE_DIR, `.${name}.${process.pid}.${screenshotTmpSeq++}.tmp`);
     writeFileSync12(tmp, buf);
     renameSync9(tmp, dest);
     pruneScreenshotCache();
@@ -43762,16 +43666,16 @@ function verifyIncrementalParse(path, identityPrefix, incremental) {
   }
 }
 function logDirOf(project) {
-  return join34(homedir14(), ".claude", "projects", project.cwdSlug);
+  return join33(homedir14(), ".claude", "projects", project.cwdSlug);
 }
 function resolveTranscriptPath(project, sessionId) {
-  const path = join34(logDirOf(project), `${sessionId}.jsonl`);
+  const path = join33(logDirOf(project), `${sessionId}.jsonl`);
   try {
     if (statSync14(path).size > 0) return path;
   } catch {
   }
   const stranded = discoverTranscriptDir(logDirOf(project), sessionId);
-  return stranded ? join34(stranded, `${sessionId}.jsonl`) : path;
+  return stranded ? join33(stranded, `${sessionId}.jsonl`) : path;
 }
 function projectCodexTranscript(raw2, identityPrefix = "codex") {
   const out = [];
@@ -44715,7 +44619,7 @@ function sourceForThread(project, storage, slug, backendFor) {
   }
   if (!FOREIGN_SESSION_ID_RE.test(slug)) return void 0;
   const claudePath = resolveTranscriptPath(project, slug);
-  if (existsSync13(claudePath)) {
+  if (existsSync12(claudePath)) {
     return { slug, sessionId: slug, nativeId: slug, backend: "claude", runtimeGeneration: 0, path: claudePath };
   }
   const rollout = (backendFor?.("codex") ?? defaultCodexBackend()).transcriptPath(slug);
@@ -45171,7 +45075,7 @@ var init_open_external = __esm({
 import { spawn as spawn6 } from "node:child_process";
 import { readFileSync as readFileSync22, realpathSync as realpathSync8, statSync as statSync15 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join35, resolve as resolve7, sep } from "node:path";
+import { isAbsolute as isAbsolute3, join as join34, resolve as resolve7, sep } from "node:path";
 function isUnder(real, root) {
   let rootReal;
   try {
@@ -45201,7 +45105,7 @@ function resolveLocalFile(rawPath, roots) {
 function resolveOpenableFile(raw2, projectDir, roots, home = homedir15()) {
   const trimmed = raw2.trim().replace(/:\d+(?::\d+)?$/, "");
   if (!trimmed) return null;
-  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join35(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
+  const abs = trimmed === "~" ? home : trimmed.startsWith("~/") ? join34(home, trimmed.slice(2)) : isAbsolute3(trimmed) ? trimmed : resolve7(projectDir, trimmed);
   try {
     return resolveLocalFile(abs, roots);
   } catch {
@@ -45912,10 +45816,10 @@ var init_directory_picker = __esm({
 
 // packages/server/src/router.ts
 import { readFileSync as readFileSync23, statSync as statSync17 } from "node:fs";
-import { join as join36, resolve as resolve8 } from "node:path";
+import { join as join35, resolve as resolve8 } from "node:path";
 import { randomUUID as randomUUID16 } from "node:crypto";
 import { basename as basename9, dirname as dirname14 } from "node:path";
-import { existsSync as existsSync14, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync16, rmSync as rmSync10, writeFileSync as writeFileSync13 } from "node:fs";
 import { homedir as homedir16 } from "node:os";
 function validateGithubDispatchProfile(input) {
   validateThreadProfile(input.backend, input.model, input.effort);
@@ -46075,7 +45979,7 @@ function projectCard(entry, stale) {
 function addProjectAtPath(input) {
   const typed = input.trim();
   if (!typed) throw new Error("Enter a folder path.");
-  const expanded = typed === "~" || typed.startsWith("~/") ? join36(homedir16(), typed.slice(1)) : typed;
+  const expanded = typed === "~" || typed.startsWith("~/") ? join35(homedir16(), typed.slice(1)) : typed;
   const absolute = resolve8(expanded);
   let stats;
   try {
@@ -46128,7 +46032,7 @@ function setProjectIconFromFile(id, file) {
   return storeProjectIcon(id, file, bytes);
 }
 function createRouter(ctx) {
-  const frizzDir = join36(ctx.project.dir, ".frizz");
+  const frizzDir = join35(ctx.project.dir, ".frizz");
   const openRoots = openableFileRoots(ctx.project);
   function isAutoTitledSession(slug) {
     return ctx.storage.getSession(slug)?.title_auto === 1;
@@ -47739,7 +47643,7 @@ ${gapNote}` : input.message;
         }
         const updated = clearProjectIcon(input.id);
         if (!updated) throw new Error("No such project.");
-        return projectCard(updated, !existsSync14(updated.path));
+        return projectCard(updated, !existsSync13(updated.path));
       }
     }),
     /**
@@ -47789,7 +47693,7 @@ ${gapNote}` : input.message;
         for (const entry of listProjects()) {
           if (entry.stale) continue;
           try {
-            const db = new sqlite_default(join36(projectStateDir(entry.id), "ui.db"), { readonly: true });
+            const db = new sqlite_default(join35(projectStateDir(entry.id), "ui.db"), { readonly: true });
             try {
               const hit = db.prepare("SELECT 1 FROM session WHERE slug = ? LIMIT 1").get(input.slug);
               if (hit) found.push({ projectSlug: entry.slug, projectName: entry.name ?? entry.slug });
@@ -48181,7 +48085,7 @@ var init_local_image = __esm({
 // packages/server/src/project-icon.ts
 import { readFileSync as readFileSync25, readdirSync as readdirSync10, realpathSync as realpathSync10, statSync as statSync19 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
-import { basename as basename10, dirname as dirname15, extname as extname3, join as join37, relative, sep as sep2 } from "node:path";
+import { basename as basename10, dirname as dirname15, extname as extname3, join as join36, relative, sep as sep2 } from "node:path";
 function normalizeStem(stem) {
   const sized = stem.toLowerCase().replace(/[@-]\d+(\.\d+)?x(\d+)?$/u, "").replace(/[-_]\d{2,4}$/u, "");
   const normalized = sized.replace(VARIANT_SUFFIX, "");
@@ -48199,7 +48103,7 @@ function sizeScore(dimensions) {
   return Math.max(0, Math.min(40, Math.round(Math.log2(edge / 24) * 8)));
 }
 function under(root, relativeDirectory) {
-  return relativeDirectory ? join37(root, relativeDirectory) : root;
+  return relativeDirectory ? join36(root, relativeDirectory) : root;
 }
 function listFiles(directory) {
   try {
@@ -48221,19 +48125,19 @@ function iconDirectories(root) {
   for (const asset of ASSET_DIRECTORIES) directories.push(under(root, asset));
   for (const host of HOST_DIRECTORIES) {
     if (!children2.has(host)) continue;
-    for (const asset of ASSET_DIRECTORIES) directories.push(under(join37(root, host), asset));
+    for (const asset of ASSET_DIRECTORIES) directories.push(under(join36(root, host), asset));
   }
   for (const extra of EXTRA_DIRECTORIES) directories.push(under(root, extra));
   for (const container of WORKSPACE_CONTAINERS) {
     if (!children2.has(container)) continue;
     let members;
     try {
-      members = readdirSync10(join37(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
+      members = readdirSync10(join36(root, container), { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => entry.name);
     } catch {
       continue;
     }
     for (const member of members) {
-      for (const asset of ASSET_DIRECTORIES) directories.push(under(join37(root, container, member), asset));
+      for (const asset of ASSET_DIRECTORIES) directories.push(under(join36(root, container, member), asset));
     }
   }
   return [...new Set(directories)];
@@ -48247,7 +48151,7 @@ function manifestIcons(manifestPath) {
   }
   if (!Array.isArray(parsed?.icons)) return [];
   const directory = dirname15(manifestPath);
-  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join37(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
+  return parsed.icons.map((icon) => typeof icon?.src === "string" ? icon.src : void 0).filter((src) => !!src && !/^(https?:)?\/\//u.test(src) && !src.startsWith("data:")).map((src) => join36(directory, src.replace(/[?#].*$/u, "").replace(/^\//u, "")));
 }
 function projectIconCandidates(root) {
   const projectStem = normalizeStem(basename10(root)).normalized;
@@ -48266,7 +48170,7 @@ function projectIconCandidates(root) {
     for (const name of listFiles(directory)) {
       const extension2 = extname3(name).toLowerCase();
       if (MANIFEST_NAMES.includes(name.toLowerCase())) {
-        for (const icon of manifestIcons(join37(directory, name))) {
+        for (const icon of manifestIcons(join36(directory, name))) {
           if (MEASURABLE_IMAGE_EXTENSIONS.has(extname3(icon).toLowerCase())) {
             fromManifest.add(icon);
             files.push({ path: icon, directory: dirname15(icon) });
@@ -48277,7 +48181,7 @@ function projectIconCandidates(root) {
       if (!MEASURABLE_IMAGE_EXTENSIONS.has(extension2)) continue;
       const stem = name.slice(0, name.length - extension2.length);
       if (normalizeStem(stem).normalized === "favicon") iconHomes.add(directory);
-      files.push({ path: join37(directory, name), directory });
+      files.push({ path: join36(directory, name), directory });
       if (files.length >= MAX_CANDIDATES) break;
     }
   }
@@ -48455,7 +48359,7 @@ var init_project_icon = __esm({
 
 // packages/server/src/local-visualization.ts
 import { readdirSync as readdirSync11, readFileSync as readFileSync26, realpathSync as realpathSync11, statSync as statSync20 } from "node:fs";
-import { join as join38, sep as sep3 } from "node:path";
+import { join as join37, sep as sep3 } from "node:path";
 function children(path, pattern) {
   try {
     return readdirSync11(path, { withFileTypes: true }).filter((entry) => entry.isDirectory() && pattern.test(entry.name)).map((entry) => entry.name).sort().reverse();
@@ -48467,7 +48371,7 @@ function isUnder2(path, root) {
   return path === root || path.startsWith(root.endsWith(sep3) ? root : root + sep3);
 }
 function resolveFragment(projectDir, sessionId, file) {
-  const base = join38(projectDir, ".codex", "visualizations");
+  const base = join37(projectDir, ".codex", "visualizations");
   let projectReal;
   let baseReal;
   try {
@@ -48478,12 +48382,12 @@ function resolveFragment(projectDir, sessionId, file) {
   }
   if (!isUnder2(baseReal, projectReal)) return null;
   for (const year of children(base, YEAR_PART)) {
-    const yearDir = join38(base, year);
+    const yearDir = join37(base, year);
     for (const month of children(yearDir, DATE_PART)) {
-      const monthDir = join38(yearDir, month);
+      const monthDir = join37(yearDir, month);
       for (const day of children(monthDir, DATE_PART)) {
-        const sessionRoot = join38(baseReal, year, month, day, sessionId);
-        const candidate = join38(monthDir, day, sessionId, file);
+        const sessionRoot = join37(baseReal, year, month, day, sessionId);
+        const candidate = join37(monthDir, day, sessionId, file);
         try {
           const real = realpathSync11(candidate);
           if (isUnder2(real, sessionRoot) && statSync20(real).isFile()) return real;
@@ -48612,7 +48516,7 @@ var init_local_visualization = __esm({
 
 // packages/server/src/app.ts
 import { mkdirSync as mkdirSync17, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join38 } from "node:path";
 import { randomUUID as randomUUID17 } from "node:crypto";
 function createApp(ctx, options = {}) {
   const app = new Hono2();
@@ -48716,10 +48620,10 @@ function createApp(ctx, options = {}) {
     if (typeof body.data !== "string" || body.data.length > ATTACHMENT_MAX_BASE64_CHARS) return c.json({ error: "bad payload" }, 400);
     const ext = `.${attachmentExtension(name)}`;
     const buf = Buffer.from(body.data, "base64");
-    const dir = join39(ctx.project.stateDir, "attachments");
+    const dir = join38(ctx.project.stateDir, "attachments");
     mkdirSync17(dir, { recursive: true });
     const base = name.replace(/\.[^.]+$/, "").replace(/[^a-zA-Z0-9_-]+/g, "-").slice(0, 40) || "file";
-    const path = join39(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
+    const path = join38(dir, `${Date.now()}-${randomUUID17().slice(0, 8)}-${base}${ext}`);
     writeFileSync14(path, buf);
     return c.json({ path });
   });
@@ -49959,9 +49863,9 @@ var init_app_socket = __esm({
 
 // packages/server/src/boot-progress.ts
 import { mkdirSync as mkdirSync18, readFileSync as readFileSync27, renameSync as renameSync10, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
-import { basename as basename11, dirname as dirname16, join as join40 } from "node:path";
+import { basename as basename11, dirname as dirname16, join as join39 } from "node:path";
 function bootProgressPath(stateDir) {
-  return join40(stateDir, BOOT_PROGRESS_NAME);
+  return join39(stateDir, BOOT_PROGRESS_NAME);
 }
 function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
   if (!stateDir) {
@@ -49982,7 +49886,7 @@ function createBootProgressPublisher(stateDir, minIntervalMs = 200) {
     step++;
     try {
       mkdirSync18(dirname16(path), { recursive: true, mode: 448 });
-      const temp = join40(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
+      const temp = join39(dirname16(path), `.${basename11(path)}.${process.pid}.tmp`);
       writeFileSync15(temp, `${JSON.stringify({ pid: process.pid, step, phase, at: new Date(now).toISOString() })}
 `, "utf8");
       renameSync10(temp, path);
@@ -50099,8 +50003,8 @@ __export(index_exports, {
   unknownProjectPage: () => unknownProjectPage
 });
 import { createServer } from "node:http";
-import { readFileSync as readFileSync28, existsSync as existsSync15 } from "node:fs";
-import { dirname as dirname17, join as join41, resolve as resolve9, extname as extname4, normalize } from "node:path";
+import { readFileSync as readFileSync28, existsSync as existsSync14 } from "node:fs";
+import { dirname as dirname17, join as join40, resolve as resolve9, extname as extname4, normalize } from "node:path";
 function readServerAddressHolder(path) {
   try {
     const value = JSON.parse(readFileSync28(path, "utf8"));
@@ -50203,9 +50107,9 @@ function createShutdownSignalHandler(options) {
 }
 function serveStatic(distDir, req, res) {
   const rel = normalize((req.url ?? "/").split("?")[0]).replace(/^(\.\.[/\\])+/, "");
-  let file = join41(distDir, rel === "/" ? "index.html" : rel);
-  if (!file.startsWith(distDir)) file = join41(distDir, "index.html");
-  if (!existsSync15(file)) file = join41(distDir, "index.html");
+  let file = join40(distDir, rel === "/" ? "index.html" : rel);
+  if (!file.startsWith(distDir)) file = join40(distDir, "index.html");
+  if (!existsSync14(file)) file = join40(distDir, "index.html");
   try {
     const body = readFileSync28(file);
     res.writeHead(200, { "content-type": MIME[extname4(file)] ?? "application/octet-stream" });
@@ -50556,7 +50460,7 @@ async function startServer(opts = {}) {
     }
     statusPath = serverLockPathFor(ctx.project);
     const webRoot = resolve9(import.meta.dirname, "..", "..", "web");
-    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join41(webRoot, "dist");
+    const distDir = opts.webDistDir ? resolve9(opts.webDistDir) : join40(webRoot, "dist");
     startupPhase = "Vite";
     if (opts.dev) {
       try {
@@ -50632,7 +50536,7 @@ async function startServer(opts = {}) {
       if (vite) {
         vite.middlewares(req, res, () => {
           try {
-            const html = readFileSync28(join41(webRoot, "index.html"), "utf8");
+            const html = readFileSync28(join40(webRoot, "index.html"), "utf8");
             void vite.transformIndexHtml(url, html).then((out) => {
               res.writeHead(200, { "content-type": "text/html" });
               res.end(out);
@@ -50644,7 +50548,7 @@ async function startServer(opts = {}) {
         });
         return;
       }
-      if (existsSync15(distDir)) {
+      if (existsSync14(distDir)) {
         serveStatic(distDir, req, res);
         return;
       }
@@ -50824,7 +50728,7 @@ var init_index = __esm({
       }
     };
     isApiUrl = (url) => url === FRIZZ_ROUTE_PREFIX || url.startsWith(`${FRIZZ_ROUTE_PREFIX}/`);
-    serverLockPathFor = (project) => join41(project.stateDir, "server.lock");
+    serverLockPathFor = (project) => join40(project.stateDir, "server.lock");
     MIME = {
       ".html": "text/html",
       ".js": "text/javascript",
@@ -50842,8 +50746,8 @@ init_project();
 init_project_launch();
 init_shutdown();
 init_logging();
-import { existsSync as existsSync16 } from "node:fs";
-import { join as join42 } from "node:path";
+import { existsSync as existsSync15 } from "node:fs";
+import { join as join41 } from "node:path";
 process.on("uncaughtException", (error) => {
   log.error("dev-child", `uncaught exception: ${error instanceof Error ? error.stack ?? error.message : error}`);
   process.exit(1);
@@ -50881,9 +50785,9 @@ try {
       ["FRIZZ_SCRIPTS_DIR", process.env.FRIZZ_SCRIPTS_DIR, "index.mjs"],
       ["FRIZZ_WORKER_PLUGIN_DIR", process.env.FRIZZ_WORKER_PLUGIN_DIR, ".claude-plugin/plugin.json"]
     ];
-    if (!existsSync16(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
+    if (!existsSync15(stableWebDist)) throw new Error("stable artifact launch is missing its verified web directory");
     for (const [name, directory, requiredFile] of required) {
-      if (!directory || !existsSync16(join42(directory, requiredFile)))
+      if (!directory || !existsSync15(join41(directory, requiredFile)))
         throw new Error(`stable artifact launch is missing verified ${name}`);
     }
   }