frizz 0.8.1 → 0.9.0

package/dist/frizz.js

@@ -4175,10 +4175,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep3, value } = collItem;
+        const { start, key, sep: sep4, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -4192,7 +4192,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep3) {
+          if (!keyProps.anchor && !keyProps.tag && !sep4) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -4216,7 +4216,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep4 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -4232,7 +4232,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep3, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep4, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -4323,7 +4323,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep3 = "";
+        let sep4 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -4337,13 +4337,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep3 + cb;
-              sep3 = "";
+                comment += sep4 + cb;
+              sep4 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep3 += source;
+                sep4 += source;
               hasSpace = true;
               break;
             default:
@@ -4386,18 +4386,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i = 0; i < fc.items.length; ++i) {
         const collItem = fc.items[i];
-        const { start, key, sep: sep3, value } = collItem;
+        const { start, key, sep: sep4, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep3?.[0],
+          next: key ?? sep4?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep3 && !value) {
+          if (!props.anchor && !props.tag && !sep4 && !value) {
             if (i === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i < fc.items.length - 1)
@@ -4451,8 +4451,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep3 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep3, null, props, onError);
+        if (!isMap && !sep4 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep4, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -4464,7 +4464,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep3 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep4 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -4475,8 +4475,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep3)
-                for (const st of sep3) {
+              if (sep4)
+                for (const st of sep4) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -4493,7 +4493,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep3, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep4, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4673,7 +4673,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i + 1;
       }
       let value = "";
-      let sep3 = "";
+      let sep4 = "";
       let prevMoreIndented = false;
       for (let i = 0; i < contentStart; ++i)
         value += lines[i][0].slice(trimIndent) + "\n";
@@ -4690,24 +4690,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          value += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep3 === " ")
-            sep3 = "\n";
-          else if (!prevMoreIndented && sep3 === "\n")
-            sep3 = "\n\n";
-          value += sep3 + indent.slice(trimIndent) + content;
-          sep3 = "\n";
+          if (sep4 === " ")
+            sep4 = "\n";
+          else if (!prevMoreIndented && sep4 === "\n")
+            sep4 = "\n\n";
+          value += sep4 + indent.slice(trimIndent) + content;
+          sep4 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep3 === "\n")
+          if (sep4 === "\n")
             value += "\n";
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          value += sep3 + content;
-          sep3 = " ";
+          value += sep4 + content;
+          sep4 = " ";
           prevMoreIndented = false;
         }
       }
@@ -4889,25 +4889,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep3 = " ";
+      let sep4 = " ";
       let pos = first.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep3 === "\n")
-            res += sep3;
+          if (sep4 === "\n")
+            res += sep4;
           else
-            sep3 = "\n";
+            sep4 = "\n";
         } else {
-          res += sep3 + match[1];
-          sep3 = " ";
+          res += sep4 + match[1];
+          sep4 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep3 + (match?.[1] ?? "");
+      return res + sep4 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -5717,14 +5717,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep3, value }) {
+    function stringifyItem({ start, key, sep: sep4, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep3)
-        for (const st of sep3)
+      if (sep4)
+        for (const st of sep4)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -6891,18 +6891,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep3;
+          let sep4;
           if (scalar.end) {
-            sep3 = scalar.end;
-            sep3.push(this.sourceToken);
+            sep4 = scalar.end;
+            sep4.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep3 = [this.sourceToken];
+            sep4 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep3 }]
+            items: [{ start, key: scalar, sep: sep4 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -7055,15 +7055,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep3 = it.sep;
-                  sep3.push(this.sourceToken);
+                  const sep4 = it.sep;
+                  sep4.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep3 }]
+                    items: [{ start: start2, key, sep: sep4 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -7257,13 +7257,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep3 = fc.end.splice(1, fc.end.length);
-            sep3.push(this.sourceToken);
+            const sep4 = fc.end.splice(1, fc.end.length);
+            sep4.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep3 }]
+              items: [{ start, key: fc, sep: sep4 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -12184,6 +12184,16 @@ var init_interactions = __esm({
 });
 
 // packages/shared/src/claim.ts
+function isAnonymousClaimName(name) {
+  return ANONYMOUS_CLAIM_PATTERN.test(name);
+}
+function generateAnonymousClaimName() {
+  const bytes = new Uint8Array(ANONYMOUS_CLAIM_NAME_LENGTH);
+  crypto.getRandomValues(bytes);
+  let name = "";
+  for (const byte of bytes) name += ANONYMOUS_CLAIM_ALPHABET[byte & 31];
+  return name;
+}
 function toBase64Url(bytes) {
   const view = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
   let binary = "";
@@ -12267,7 +12277,7 @@ async function claimIdentityFromPrivateKey(pkcs8) {
     return null;
   }
 }
-var CLAIM_PROTOCOL_VERSION, CLAIM_MAX_AGE_MS, CLAIM_LEASE_MS, RESERVED_CLAIM_NAMES, CLAIM_NAME_MIN_LENGTH, CLAIM_NAME_MAX_LENGTH;
+var CLAIM_PROTOCOL_VERSION, CLAIM_MAX_AGE_MS, CLAIM_LEASE_MS, RESERVED_CLAIM_NAMES, CLAIM_NAME_MIN_LENGTH, CLAIM_NAME_MAX_LENGTH, ANONYMOUS_CLAIM_NAME_LENGTH, ANONYMOUS_CLAIM_ALPHABET, ANONYMOUS_CLAIM_PATTERN;
 var init_claim = __esm({
   "packages/shared/src/claim.ts"() {
     "use strict";
@@ -12306,6 +12316,9 @@ var init_claim = __esm({
     ]);
     CLAIM_NAME_MIN_LENGTH = 3;
     CLAIM_NAME_MAX_LENGTH = 63;
+    ANONYMOUS_CLAIM_NAME_LENGTH = 20;
+    ANONYMOUS_CLAIM_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+    ANONYMOUS_CLAIM_PATTERN = new RegExp(`^[a-z2-7]{${ANONYMOUS_CLAIM_NAME_LENGTH}}$`);
   }
 });
 
@@ -12374,7 +12387,7 @@ function relayHandshakeInput(name, pubkey, issuedAt) {
     ["frizz-relay", `v${RELAY_PROTOCOL_VERSION}`, name, pubkey, String(issuedAt)].join(":")
   );
 }
-var RELAY_PROTOCOL_VERSION, RELAY_STRIPPED_HEADERS, RELAY_MAX_FRAME_BODY, RELAY_MAX_WS_CHUNK, WsMessageAssembler, serializeFrame;
+var RELAY_PROTOCOL_VERSION, RELAY_STRIPPED_HEADERS, RELAY_MAX_FRAME_BODY, RELAY_MAX_WS_CHUNK, WsMessageAssembler, serializeFrame, RELAY_KEEPALIVE_PING, RELAY_KEEPALIVE_PONG;
 var init_relay_protocol = __esm({
   "packages/shared/src/relay-protocol.ts"() {
     "use strict";
@@ -12440,6 +12453,8 @@ var init_relay_protocol = __esm({
       }
     };
     serializeFrame = (frame) => JSON.stringify(frame);
+    RELAY_KEEPALIVE_PING = serializeFrame({ t: "ping", id: "keepalive" });
+    RELAY_KEEPALIVE_PONG = serializeFrame({ t: "pong", id: "keepalive" });
   }
 });
 
@@ -12447,7 +12462,7 @@ var init_relay_protocol = __esm({
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, ASK_MAX_PER_CALL, ASK_MAX_OPEN, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -12464,7 +12479,7 @@ var init_src = __esm({
     init_relay_protocol();
     init_thread_slug();
     ATTACHMENT_IMAGE_EXTENSIONS = ["png", "jpg", "jpeg", "gif", "webp"];
-    ATTACHMENT_DOC_EXTENSIONS = [
+    ATTACHMENT_TEXT_EXTENSIONS = [
       "pdf",
       "svg",
       "txt",
@@ -12476,6 +12491,7 @@ var init_src = __esm({
       "tsv",
       "json",
       "jsonl",
+      "ndjson",
       "yaml",
       "yml",
       "toml",
@@ -12512,6 +12528,38 @@ var init_src = __esm({
       "lua",
       "r"
     ];
+    ATTACHMENT_OFFICE_EXTENSIONS = [
+      "xlsx",
+      "xlsm",
+      "xls",
+      "docx",
+      "doc",
+      "pptx",
+      "ppt",
+      "odt",
+      "ods",
+      "odp",
+      "rtf",
+      "epub"
+    ];
+    ATTACHMENT_DATA_EXTENSIONS = [
+      "parquet",
+      "avro",
+      "orc",
+      "arrow",
+      "feather",
+      "ipynb",
+      "db",
+      "sqlite",
+      "sqlite3"
+    ];
+    ATTACHMENT_ARCHIVE_EXTENSIONS = ["zip", "tar", "gz", "tgz", "bz2", "xz", "zst", "7z"];
+    ATTACHMENT_DOC_EXTENSIONS = [
+      ...ATTACHMENT_TEXT_EXTENSIONS,
+      ...ATTACHMENT_OFFICE_EXTENSIONS,
+      ...ATTACHMENT_DATA_EXTENSIONS,
+      ...ATTACHMENT_ARCHIVE_EXTENSIONS
+    ];
     ATTACHMENT_EXTENSIONS = [...ATTACHMENT_IMAGE_EXTENSIONS, ...ATTACHMENT_DOC_EXTENSIONS];
     ATTACHMENT_MAX_BASE64_CHARS = 25e6;
     ATTACHMENT_MAX_BYTES = Math.floor(ATTACHMENT_MAX_BASE64_CHARS / 4) * 3;
@@ -12564,17 +12612,25 @@ var init_src = __esm({
       // clears itself when that work does. Every liveness reading keys on "running", so a rested row holds
       // nothing back: it does not block a rest, hold the queue, or gate Mark-as-done.
       state: external_exports.enum(["running", "stale", "rested"]),
-      // The worker-profile cell (model+effort) from the dispatch's `subagent_type`. It is NO LONGER drawn as
-      // a tag on the child rows under the prompt box (maintainer 2026-07-27: the profile belongs to the
-      // prompt box's own control one line up, not repeated on every child line); the transcript's dispatch
-      // card still shows it, the sidebar rail carries it in the row tooltip, and the drill-in passes it to
-      // the drawer. Optional — absent on dispatches without it.
+      // The worker-profile cell (model+effort) for the dispatch — RESOLVED, not the raw `subagent_type`:
+      // an effort-only profile carries no model, so the server composes it from the call's own `model` or
+      // the dispatching turn's (server/subagent-profile.ts). It is NO LONGER drawn as a tag on the child
+      // rows under the prompt box (maintainer 2026-07-27: the profile belongs to the prompt box's own
+      // control one line up, not repeated on every child line); the transcript's dispatch card shows it,
+      // the sidebar rail carries it in the row tooltip, and the drill-in passes it to the drawer.
+      // Optional — absent when nothing about the child's runtime is known.
       subagentType: external_exports.string().optional(),
       // The dispatch tool_use id (the stable correlation key: same id on the Agent tool_use block, the
       // completion <task-notification>, and the transcript AgentBlock). Optional — absent on a pre-restart
       // server that doesn't emit it yet → the drill-in drawer's entry point is simply not offered. Present
       // → the banner row / AgentBlock is clickable and resolves this exact child's transcript.
       id: external_exports.string().optional(),
+      // The RUNTIME agent id — the `agentId: a01b2d20b32feab11` line of the Agent tool's launch ack, which
+      // is the only id the MODEL is ever shown for its child (the tool_use id above is invisible to it). So
+      // it is the string a worker writes in an `agents:` fence line or registers a `watch` against, exactly
+      // as BgShellView.taskId is for a shell. Every liveness reading accepts both. Absent for a codex row
+      // and for a Claude row between its tool_use and its launch ack.
+      taskId: external_exports.string().optional(),
       // Can frizz actually END this child's work right now? Computed SERVER-side (board.ts, the one place
       // holding both the session row and the tailer's telemetry) and never re-derived by a client — the
       // same discipline as `steerable`, and for the same reason: the policy depends on the thread's
@@ -12898,6 +12954,137 @@ var init_src = __esm({
       dropped: external_exports.boolean(),
       watches: external_exports.array(PrWatchView)
     }).strict();
+    OwnWatchKind = external_exports.enum(["shell", "agent"]);
+    AddOwnWatchInput = external_exports.object({
+      slug: ThreadSlug,
+      /** What KIND of thing the target is. Stored, and checked against the thread's live telemetry before the
+       *  row is written — see the note on `target`. */
+      kind: OwnWatchKind,
+      /** The handle the worker was shown: a runtime task id ("Command running in background with ID: …"), a
+       *  launch tool_use id, or the op's own label.
+       *
+       *  VALIDATED AGAINST LIVE TELEMETRY, NOT AGAINST ITS SHAPE. A PR ref is checkable by shape because
+       *  `owner/repo#123` looks like nothing else; a shell handle and a sub-agent handle are both opaque
+       *  runtime strings and overlap completely, so shape can only ever be a guess. What frizz CAN answer
+       *  exactly is whether this thread has a live shell — or a live sub-agent — answering to this handle, and
+       *  that is both the stronger check and the one that catches the real mistake: naming a sub-agent under
+       *  `kind: "shell"`, which is what put two sub-agents under a "Background shells" heading on 2026-08-26. */
+      target: external_exports.string().trim().min(1).max(200),
+      /** REQUIRED, and a DURATION (`30m`, `2h`, `3d` — parseAwaitingDuration, capped at 24h).
+       *
+       *  No default and no wire-level optionality, unlike `AddOwnPrWatchInput.for`: that field is optional
+       *  only to keep working for sessions dispatched before it existed, and this RPC has no such sessions.
+       *  On elapse the row is CANCELLED and the thread woken to re-decide, which is what stops a registration
+       *  outliving its own relevance — the one thing an un-restated fence could never do wrong. */
+      for: external_exports.string().trim().min(1).max(16)
+    }).strict();
+    OwnWatchView = external_exports.object({
+      id: external_exports.string(),
+      kind: OwnWatchKind,
+      target: external_exports.string(),
+      /** The op's own label where the target resolved to one, so a read-back names the work rather than an
+       *  opaque handle. Absent when the target no longer resolves — the row still stands and names itself. */
+      label: external_exports.string().optional(),
+      createdAt: external_exports.string(),
+      expiresAt: external_exports.string()
+    }).strict();
+    AddOwnWatchResult = external_exports.object({
+      id: external_exports.string(),
+      kind: OwnWatchKind,
+      target: external_exports.string(),
+      /** True when this exact (kind, target) was already watched, so the call registered nothing new and the
+       *  existing expiry stands. Re-registering after a wake or a compaction is the common, correct case. */
+      alreadyArmed: external_exports.boolean(),
+      watches: external_exports.array(OwnWatchView)
+    }).strict();
+    DropOwnWatchInput = external_exports.object({
+      slug: ThreadSlug,
+      id: external_exports.string().min(1).max(64)
+    }).strict();
+    DropOwnWatchResult = external_exports.object({
+      dropped: external_exports.boolean(),
+      watches: external_exports.array(OwnWatchView)
+    }).strict();
+    AskQuestionKind = external_exports.enum(["question", "multi"]);
+    ASK_MAX_PER_CALL = 4;
+    ASK_MAX_OPEN = 12;
+    AskedOptionSchema = external_exports.lazy(() => external_exports.object({
+      label: external_exports.string().trim().min(1).max(120),
+      description: external_exports.string().trim().max(400).optional(),
+      recommended: external_exports.boolean().optional(),
+      preview: external_exports.string().max(4e3).optional(),
+      followUps: external_exports.array(AskedQuestionSchema).max(ASK_MAX_PER_CALL).optional()
+    }).strict());
+    AskedQuestionSchema = external_exports.lazy(() => external_exports.object({
+      question: external_exports.string().trim().min(1).max(600),
+      header: external_exports.string().trim().max(24).optional(),
+      kind: AskQuestionKind,
+      danger: external_exports.boolean().optional(),
+      options: external_exports.array(AskedOptionSchema).max(8).optional()
+    }).strict());
+    AskInput = external_exports.object({
+      slug: ThreadSlug,
+      questions: external_exports.array(AskedQuestionSchema).min(1).max(ASK_MAX_PER_CALL)
+    }).strict();
+    RegisteredQuestionView = external_exports.object({
+      /** Minted by frizz. The worker never chose it, which is why an answer RESTATES the question text —
+       *  an id alone cannot be correlated back to what was asked. */
+      id: external_exports.string(),
+      spec: AskedQuestionSchema,
+      askedAt: external_exports.string()
+    }).strict();
+    AskResult = external_exports.object({
+      registered: external_exports.array(RegisteredQuestionView),
+      /** Everything still open on this thread afterwards, so a worker never needs a second call. */
+      open: external_exports.array(RegisteredQuestionView)
+    }).strict();
+    UnaskInput = external_exports.object({
+      slug: ThreadSlug,
+      id: external_exports.string().min(1).max(64)
+    }).strict();
+    UnaskResult = external_exports.object({
+      withdrawn: external_exports.boolean(),
+      open: external_exports.array(RegisteredQuestionView)
+    }).strict();
+    QuestionAnswerSchema = external_exports.lazy(() => external_exports.object({
+      questionId: external_exports.string().min(1).max(64),
+      question: external_exports.string().min(1).max(600),
+      chosen: external_exports.array(external_exports.string().max(200)).max(8),
+      text: external_exports.string().max(8e3).optional(),
+      followUps: external_exports.array(QuestionAnswerSchema).max(ASK_MAX_PER_CALL).optional()
+    }).strict());
+    AnswerQuestionsInput = external_exports.object({
+      slug: ThreadSlug,
+      /** SUBMITTED AS A UNIT. The card sends whatever was answered in one call, because a per-question send
+       *  would half-wake a turn: the worker would come back to a payload it cannot act on and would have to
+       *  ask again for the rest. */
+      answers: external_exports.array(QuestionAnswerSchema).min(1).max(ASK_MAX_OPEN)
+    }).strict();
+    AnswerQuestionsResult = external_exports.object({
+      /** The ids that were open and are now answered. An id that was already settled is silently absent
+       *  rather than an error: two browser tabs answering the same card is a race nobody should see. */
+      answered: external_exports.array(external_exports.string()),
+      open: external_exports.array(RegisteredQuestionView)
+    }).strict();
+    DismissQuestionsInput = external_exports.object({
+      slug: ThreadSlug,
+      ids: external_exports.array(external_exports.string().min(1).max(64)).min(1).max(ASK_MAX_OPEN)
+    }).strict();
+    DismissQuestionsResult = external_exports.object({
+      dismissed: external_exports.array(external_exports.string()),
+      open: external_exports.array(RegisteredQuestionView)
+    }).strict();
+    MarkOwnDoneInput = external_exports.object({
+      slug: ThreadSlug,
+      body: external_exports.string().trim().min(1).max(2e4)
+    }).strict();
+    MarkOwnDoneResult = external_exports.object({
+      done: external_exports.boolean(),
+      /** Open questions, by id and question text. */
+      blockingQuestions: external_exports.array(external_exports.object({ id: external_exports.string(), question: external_exports.string() }).strict()),
+      /** Armed registrations, by id and what each names. Watches, PR watchers and timers alike. */
+      blockingWatches: external_exports.array(external_exports.object({ id: external_exports.string(), what: external_exports.string() }).strict())
+    }).strict();
     ListOwnPrWatchesInput = external_exports.object({ slug: ThreadSlug }).strict();
     OwnPrWatchesResult = external_exports.object({ watches: external_exports.array(PrWatchView) }).strict();
     ThreadTimerView = external_exports.object({
@@ -12912,9 +13099,15 @@ var init_src = __esm({
       kind: external_exports.enum(["done", "awaiting"]),
       body: external_exports.string(),
       // fence body minus hint lines, capped server-side; may be ""
-      hints: external_exports.array(AwaitingHint).default([])
+      hints: external_exports.array(AwaitingHint).default([]),
+      // Present only on a completion the worker REGISTERED (`mcp__frizz__done`, board.registeredDoneFence)
+      // rather than wrote as a ```done fence in its final message. The two are one fence to every predicate,
+      // but the TRANSCRIPT draws a fence card from the message text it parses — so a registered done, which
+      // is in no message, needs the client to know it must draw the card itself at the bottom of the thread
+      // (maintainer 2026-08-27: a thread that signed off by tool rested with no card at all).
+      registered: external_exports.literal(true).optional()
     });
-    LimitWindow = external_exports.enum(["session", "weekly", "unknown"]);
+    LimitWindow = external_exports.enum(["session", "weekly", "model", "unknown"]);
     LimitPause = external_exports.object({
       backend: Backend,
       window: LimitWindow,
@@ -13008,6 +13201,18 @@ var init_src = __esm({
       // Derived safety net (tailer): at rest with an unanswered ```question the worker asked in chat but
       // never encoded as blocked. Defaults false so old snapshots/rows parse. Feeds needsAction.
       pendingQuestion: external_exports.boolean().default(false),
+      // The worker's REGISTERED questions, still open (thread_question). Distinct from `pendingQuestion`
+      // beside it, and the difference is the whole point of the registry: that boolean is recomputed from
+      // the LATEST assistant text on every assistant record and cleared by any human turn, so it cannot
+      // outlive the message that carried it. These rows can, and they carry the question itself rather than
+      // merely asserting one exists — the card renders from this instead of re-parsing prose.
+      questions: external_exports.array(RegisteredQuestionView).default([]),
+      /** The answer the human has already SENT that the worker has not received yet, as the exact message
+       *  the delivery will carry (board.answersInFlight → questionAnswerMessage). The chat parses it with
+       *  the same reader it uses on the delivered turn, so the in-flight card and the landed one are the
+       *  same card and the swap is invisible. Absent whenever there is nothing in flight, which is almost
+       *  always — it exists for the seconds between the human sending and the worker being handed it. */
+      answersInFlight: external_exports.string().optional(),
       // ISO8601 of the newest REAL user interaction (answer/steer/dispatch) — the chronological listing
       // sort key. Optional; the listing falls back to spawnedAt when absent (a dispatch IS an interaction).
       lastUserAt: external_exports.string().optional(),
@@ -13193,7 +13398,7 @@ var init_src = __esm({
       key: external_exports.string(),
       // stable id: "5h" | "weekly" (provider-neutral)
       label: external_exports.string(),
-      // short human label for the chip ("5h", "Weekly")
+      // short human label for the chip ("5h", "Weekly") — house duration grammar
       usedPercent: external_exports.number(),
       // 0..100
       resetsAt: external_exports.number().optional()
@@ -13490,13 +13695,25 @@ var init_src = __esm({
       /** ISO8601 of when it started or was armed — absent when frizz has no instant for it. */
       since: external_exports.string().optional(),
       /** A timer's fire instant, or a PR's expiry. Absent for shells and sub-agents. */
-      until: external_exports.string().optional()
+      until: external_exports.string().optional(),
+      /** The `wch_…` id of the REGISTERED WATCH holding this item, when the worker armed one — so a readout
+       *  that exists to hand ids back also hands back the one `unwatch` takes. A separate ROW per watch was
+       *  the alternative and it would list the same shell twice, which is exactly the duplication that put
+       *  two sub-agents under a "Background shells" heading. */
+      watchId: external_exports.string().optional()
     }).strict();
     ListOwnThreadActivityInput = external_exports.object({
       slug: ThreadSlug
     }).strict();
     OwnThreadActivityResult = external_exports.object({
-      activity: external_exports.array(ThreadActivityItem)
+      activity: external_exports.array(ThreadActivityItem),
+      /** Every question still owed an answer. NOT a `ThreadActivityItem` and deliberately its own list: a
+       *  question is not running work, it waits on a PERSON, and there is no `questions:` key in the awaiting
+       *  fence for it to be written into. Until 2026-08-28 a worker could read its open questions back only
+       *  as a side effect of `ask` (which registers another) or `unask` (which withdraws one) — so the ids
+       *  that block `done` were readable only by mutating something (maintainer: "Is there a way for the
+       *  agent to read out the current set of watchers and questions?"). */
+      questions: external_exports.array(RegisteredQuestionView).default([])
     }).strict();
     SetOwnThreadTimerResult = external_exports.object({
       id: external_exports.string(),
@@ -13531,6 +13748,15 @@ var init_src = __esm({
     });
     AiRenameThreadInput = external_exports.object({ slug: ThreadSlug });
     AiRenameThreadResult = external_exports.object({ title: external_exports.string().min(1).max(200) });
+    SetOwnThreadTitleInput = external_exports.object({
+      slug: ThreadSlug,
+      title: external_exports.string().trim().min(1).max(200)
+    }).strict();
+    SetOwnThreadTitleResult = external_exports.object({
+      accepted: external_exports.boolean(),
+      title: external_exports.string(),
+      lockedByHuman: external_exports.boolean()
+    }).strict();
     SetThreadPermissionInput = external_exports.object({
       slug: ThreadSlug,
       permissionMode: PermissionMode
@@ -13757,7 +13983,11 @@ ${DISPATCH_TASK_BANNER}
     TranscriptEdit = external_exports.object({
       file: external_exports.string(),
       old: external_exports.string(),
-      new: external_exports.string()
+      new: external_exports.string(),
+      // Line counts of the UNCAPPED sides, taken at projection time — `old`/`new` above are capped for
+      // transport, so a diffstat recomputed from them undercounts any large edit.
+      added: external_exports.number().int().nonnegative().optional(),
+      removed: external_exports.number().int().nonnegative().optional()
     });
     TranscriptTodo = external_exports.object({
       text: external_exports.string(),
@@ -13829,8 +14059,10 @@ ${DISPATCH_TASK_BANNER}
       // optional so a pre-restart server / older transcript falls back to the plain `Agent(detail)` line.
       prompt: external_exports.string().optional(),
       // the capped dispatch prompt (the AgentBlock's expanded body)
+      // The RESOLVED model+effort cell (e.g. "frizz:opus-high"), not `subagent_type` verbatim: a modern
+      // profile is effort-only, so the server folds the call's `model` — or, when omitted, the model the
+      // dispatching turn itself ran at — back into the cell. See server/subagent-profile.ts.
       subagentType: external_exports.string().optional(),
-      // the dispatch's subagent_type verbatim (e.g. "frizz:frizz-opus-high")
       agentId: external_exports.string().optional(),
       // the Agent tool_use id — the correlation key to the live tracked sub-agent
       // Terminal outcome of the dispatched sub-agent, back-filled when a matching completion
@@ -13892,7 +14124,19 @@ ${DISPATCH_TASK_BANNER}
       // The whole to-do list, for the calls that carry it (see TranscriptTodo). The client promotes such a
       // call into a TodoBlock — a checklist card, one row per task with its status. Optional, so a
       // pre-restart server / older transcript falls back to the generic card.
-      todos: external_exports.array(TranscriptTodo).optional()
+      todos: external_exports.array(TranscriptTodo).optional(),
+      // ---- Native question (AskUserQuestion) block ----
+      // The structured questions an `AskUserQuestion` tool_use asked, so a SETTLED call renders as a
+      // read-only question card at its place in the transcript instead of a generic tool line buried in a
+      // disclosure. This is what keeps a question the human saw from vanishing: a follow-up sent instead
+      // of an answer retires the pending interaction card (the broker denies the parked call), and without
+      // this field nothing in the transcript ever said what was asked. Optional, so a pre-restart server /
+      // older transcript falls back to the generic card.
+      ask: external_exports.array(AskQuestion).optional(),
+      // The human's answers, parallel to `ask` (null = that question got no answer), parsed from the
+      // call's structured tool result. Absent entirely when the call settled unanswered — the withdrawn /
+      // denied case — which the client renders as "Not answered".
+      askAnswers: external_exports.array(external_exports.string().nullable()).optional()
     });
     TranscriptPart = external_exports.discriminatedUnion("kind", [
       external_exports.object({ kind: external_exports.literal("text"), text: external_exports.string() }),
@@ -14044,12 +14288,23 @@ ${DISPATCH_TASK_BANNER}
       fenceRefused: external_exports.literal(true).optional()
     });
     TranscriptPageCursor = external_exports.string().min(1).max(2048).regex(/^[A-Za-z0-9_-]+$/);
+    EditedFile = external_exports.object({
+      path: external_exports.string().min(1),
+      edits: external_exports.number().int().positive(),
+      lastEditedAt: external_exports.string().optional(),
+      // The file's diffstat, summed over its write calls (each call's counts are the line counts of its
+      // raw old/new sides). A Write counts as all additions — what it replaced is unknowable here.
+      added: external_exports.number().int().nonnegative().optional(),
+      removed: external_exports.number().int().nonnegative().optional()
+    }).strict();
     TranscriptPage = external_exports.object({
       messages: external_exports.array(TranscriptMessage),
       beforeCursor: TranscriptPageCursor.nullable(),
       hasEarlier: external_exports.boolean(),
       reachedTurnBoundary: external_exports.boolean(),
-      transcriptKey: external_exports.string().min(1).max(256)
+      transcriptKey: external_exports.string().min(1).max(256),
+      // The LATEST page only (see EditedFile); an earlier page is settled history and carries none.
+      editedFiles: external_exports.array(EditedFile).optional()
     }).strict();
     TranscriptEarlierInput = external_exports.object({
       slug: ThreadSlug,
@@ -14112,6 +14367,85 @@ ${DISPATCH_TASK_BANNER}
   }
 });
 
+// packages/server/src/frizz-paths.ts
+import { existsSync } from "node:fs";
+import { homedir as homedir2, tmpdir } from "node:os";
+import { dirname as dirname2, isAbsolute as isAbsolute2, join as join3, relative, resolve, sep as sep2 } from "node:path";
+function legacyFrizzRoot(home = homedir2()) {
+  return join3(home, LEGACY_DIR_NAME);
+}
+function xdg(env, name) {
+  const value = env[name];
+  return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
+}
+function insideHome(child, home) {
+  const norm = (value) => value.replace(/[\\/]+$/u, "").replaceAll("\\", "/").toLowerCase();
+  const parent = norm(home);
+  const inner = norm(child);
+  return inner === parent || inner.startsWith(`${parent}/`);
+}
+function windowsRoots(env, home) {
+  const local = env.LOCALAPPDATA && insideHome(env.LOCALAPPDATA, home) ? env.LOCALAPPDATA : join3(home, "AppData", "Local");
+  const base = join3(local, "Frizz");
+  return {
+    data: join3(base, "Data"),
+    state: join3(base, "State"),
+    cache: join3(base, "Cache")
+  };
+}
+function darwinRoots(home) {
+  const support = join3(home, "Library", "Application Support", "Frizz");
+  return {
+    data: support,
+    // macOS has no state directory concept; Application Support is where this belongs, and the log
+    // files themselves already live under each project's own directory.
+    state: support,
+    cache: join3(home, "Library", "Caches", "Frizz")
+  };
+}
+function xdgRoots(env, home) {
+  return {
+    data: join3(xdg(env, "XDG_DATA_HOME") ?? join3(home, ".local", "share"), "frizz"),
+    state: join3(xdg(env, "XDG_STATE_HOME") ?? join3(home, ".local", "state"), "frizz"),
+    cache: join3(xdg(env, "XDG_CACHE_HOME") ?? join3(home, ".cache"), "frizz")
+  };
+}
+function frizzPaths(options2 = {}) {
+  const env = options2.env ?? process.env;
+  const platform = options2.platform ?? process.platform;
+  const home = options2.home ?? homedir2();
+  const exists = options2.exists ?? existsSync;
+  const legacyRoot = legacyFrizzRoot(home);
+  if (exists(legacyRoot)) {
+    return { data: legacyRoot, state: legacyRoot, cache: legacyRoot, legacy: true };
+  }
+  const explicit = {
+    data: xdg(env, "XDG_DATA_HOME"),
+    state: xdg(env, "XDG_STATE_HOME"),
+    cache: xdg(env, "XDG_CACHE_HOME")
+  };
+  const platformRoots = platform === "win32" ? windowsRoots(env, home) : platform === "darwin" ? darwinRoots(home) : xdgRoots(env, home);
+  return {
+    data: explicit.data ? join3(explicit.data, "frizz") : platformRoots.data,
+    state: explicit.state ? join3(explicit.state, "frizz") : platformRoots.state,
+    cache: explicit.cache ? join3(explicit.cache, "frizz") : platformRoots.cache,
+    legacy: false
+  };
+}
+function frizzRoots() {
+  return cached ??= frizzPaths();
+}
+function projectStateDir(projectId, home) {
+  return join3(home ? frizzPaths({ home }).data : frizzRoots().data, "projects", projectId);
+}
+var LEGACY_DIR_NAME, cached;
+var init_frizz_paths = __esm({
+  "packages/server/src/frizz-paths.ts"() {
+    "use strict";
+    LEGACY_DIR_NAME = ".frizz";
+  }
+});
+
 // node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/constants.js
 var require_constants = __commonJS({
   "node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/constants.js"(exports, module) {
@@ -17806,85 +18140,6 @@ var init_wrapper = __esm({
   }
 });
 
-// packages/server/src/frizz-paths.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { homedir as homedir5, tmpdir } from "node:os";
-import { dirname as dirname4, join as join5 } from "node:path";
-function legacyFrizzRoot(home = homedir5()) {
-  return join5(home, LEGACY_DIR_NAME);
-}
-function xdg(env, name) {
-  const value = env[name];
-  return value && (value.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(value)) ? value : void 0;
-}
-function insideHome(child, home) {
-  const norm = (value) => value.replace(/[\\/]+$/u, "").replaceAll("\\", "/").toLowerCase();
-  const parent = norm(home);
-  const inner = norm(child);
-  return inner === parent || inner.startsWith(`${parent}/`);
-}
-function windowsRoots(env, home) {
-  const local = env.LOCALAPPDATA && insideHome(env.LOCALAPPDATA, home) ? env.LOCALAPPDATA : join5(home, "AppData", "Local");
-  const base = join5(local, "Frizz");
-  return {
-    data: join5(base, "Data"),
-    state: join5(base, "State"),
-    cache: join5(base, "Cache")
-  };
-}
-function darwinRoots(home) {
-  const support = join5(home, "Library", "Application Support", "Frizz");
-  return {
-    data: support,
-    // macOS has no state directory concept; Application Support is where this belongs, and the log
-    // files themselves already live under each project's own directory.
-    state: support,
-    cache: join5(home, "Library", "Caches", "Frizz")
-  };
-}
-function xdgRoots(env, home) {
-  return {
-    data: join5(xdg(env, "XDG_DATA_HOME") ?? join5(home, ".local", "share"), "frizz"),
-    state: join5(xdg(env, "XDG_STATE_HOME") ?? join5(home, ".local", "state"), "frizz"),
-    cache: join5(xdg(env, "XDG_CACHE_HOME") ?? join5(home, ".cache"), "frizz")
-  };
-}
-function frizzPaths(options2 = {}) {
-  const env = options2.env ?? process.env;
-  const platform = options2.platform ?? process.platform;
-  const home = options2.home ?? homedir5();
-  const exists = options2.exists ?? existsSync2;
-  const legacyRoot = legacyFrizzRoot(home);
-  if (exists(legacyRoot)) {
-    return { data: legacyRoot, state: legacyRoot, cache: legacyRoot, legacy: true };
-  }
-  const explicit = {
-    data: xdg(env, "XDG_DATA_HOME"),
-    state: xdg(env, "XDG_STATE_HOME"),
-    cache: xdg(env, "XDG_CACHE_HOME")
-  };
-  const platformRoots = platform === "win32" ? windowsRoots(env, home) : platform === "darwin" ? darwinRoots(home) : xdgRoots(env, home);
-  return {
-    data: explicit.data ? join5(explicit.data, "frizz") : platformRoots.data,
-    state: explicit.state ? join5(explicit.state, "frizz") : platformRoots.state,
-    cache: explicit.cache ? join5(explicit.cache, "frizz") : platformRoots.cache,
-    legacy: false
-  };
-}
-function frizzRoots() {
-  return cached ??= frizzPaths();
-}
-function projectStateDir(projectId, home) {
-  return join5(home ? frizzPaths({ home }).data : frizzRoots().data, "projects", projectId);
-}
-var LEGACY_DIR_NAME, cached;
-var init_frizz_paths = __esm({
-  "packages/server/src/frizz-paths.ts"() {
-    "use strict";
-    LEGACY_DIR_NAME = ".frizz";
-  }
-});
-
 // packages/server/src/logging.ts
 import {
   appendFileSync,
@@ -18223,7 +18478,7 @@ import {
   writeFileSync as writeFileSync5
 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname5, join as join8, resolve } from "node:path";
+import { dirname as dirname5, join as join8, resolve as resolve2 } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 function errorCode2(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
@@ -18235,7 +18490,7 @@ function canonicalHome(home) {
   try {
     return realpathSync2(home);
   } catch {
-    return resolve(home);
+    return resolve2(home);
   }
 }
 function globalLaunchLockPath(home = homedir7()) {
@@ -18440,7 +18695,7 @@ function revParsePath(dir, flag) {
     throw new Error("unable to inspect Git worktree identity");
   }
   try {
-    return realpathSync2(resolve(dir, raw));
+    return realpathSync2(resolve2(dir, raw));
   } catch {
     throw new Error("unable to canonicalize Git worktree identity");
   }
@@ -18512,7 +18767,7 @@ function syncGitConfig(dir) {
   } catch {
     throw new Error("unable to locate git config after writing frizz.id");
   }
-  const path = resolve(dir, raw);
+  const path = resolve2(dir, raw);
   syncGitConfigPath(path);
 }
 function createGitProjectId(dir) {
@@ -18638,7 +18893,7 @@ import {
   statSync as statSync4,
   writeFileSync as writeFileSync6
 } from "node:fs";
-import { basename as basename2, dirname as dirname6, isAbsolute as isAbsolute2, join as join9 } from "node:path";
+import { basename as basename2, dirname as dirname6, isAbsolute as isAbsolute3, join as join9 } from "node:path";
 function errorCode3(error) {
   return error && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
 }
@@ -18794,7 +19049,7 @@ function parseOwner(path) {
   try {
     const value = JSON.parse(readFileSync7(path, "utf8"));
     const generation = parseGeneration(value);
-    if (value.version !== 1 && value.version !== OWNER_VERSION || !generation || typeof value.token !== "string" || !UUID_RE.test(value.token) || typeof value.projectId !== "string" || !UUID_RE.test(value.projectId) || !validText(value.projectDir) || !isAbsolute2(value.projectDir) || !validRole(value.role) || !validText(value.acquiredAt, 128) || !validText(value.updatedAt, 128)) return null;
+    if (value.version !== 1 && value.version !== OWNER_VERSION || !generation || typeof value.token !== "string" || !UUID_RE.test(value.token) || typeof value.projectId !== "string" || !UUID_RE.test(value.projectId) || !validText(value.projectDir) || !isAbsolute3(value.projectDir) || !validRole(value.role) || !validText(value.acquiredAt, 128) || !validText(value.updatedAt, 128)) return null;
     const delegates = value.version === 1 ? [] : parseDelegates(value.delegates);
     const state = value.version === 1 ? "active" : value.state;
     if (!delegates || state !== "active" && state !== "draining") return null;
@@ -19031,7 +19286,7 @@ function projectLaunchTargetFromEnvironment(env) {
   const projectDir = env[FRIZZ_LAUNCH_PROJECT_DIR];
   const stateDir = env[FRIZZ_LAUNCH_STATE_DIR];
   const scope = env[FRIZZ_LAUNCH_IDENTITY_SCOPE];
-  if (!projectId || !UUID_RE.test(projectId) || !projectDir || !isAbsolute2(projectDir) || !stateDir || !isAbsolute2(stateDir) || scope !== "repository" && scope !== "worktree") return null;
+  if (!projectId || !UUID_RE.test(projectId) || !projectDir || !isAbsolute3(projectDir) || !stateDir || !isAbsolute3(stateDir) || scope !== "repository" && scope !== "worktree") return null;
   return {
     projectId,
     projectDir,
@@ -19108,7 +19363,7 @@ var init_boot_progress = __esm({
 import { createHash as createHash3, randomUUID as randomUUID4 } from "node:crypto";
 import { closeSync as closeSync3, existsSync as existsSync3, fsyncSync as fsyncSync3, mkdirSync as mkdirSync8, openSync as openSync4, readFileSync as readFileSync9, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { dirname as dirname8, join as join11, parse, resolve as resolve2 } from "node:path";
+import { dirname as dirname8, join as join11, parse, resolve as resolve3 } from "node:path";
 function projectIdPath(root) {
   return join11(root, FRIZZ_DIR, ID_FILE);
 }
@@ -19189,9 +19444,9 @@ function hasAny(dir, names) {
 function isHomeDirectory(dir, home = homedir8()) {
   const canonical = (value) => {
     try {
-      return realpathSync3(resolve2(value));
+      return realpathSync3(resolve3(value));
     } catch {
-      return resolve2(value);
+      return resolve3(value);
     }
   };
   try {
@@ -19218,11 +19473,11 @@ function hasProjectMarker(dir) {
 function discoverProjectRoot(cwd = process.cwd(), home = homedir8()) {
   let dir;
   try {
-    dir = resolve2(cwd);
+    dir = resolve3(cwd);
   } catch {
-    return resolve2(cwd);
+    return resolve3(cwd);
   }
-  const stop = resolve2(home);
+  const stop = resolve3(home);
   const filesystemRoot = parse(dir).root;
   for (let at = dir; ; at = dirname8(at)) {
     if (at === stop || at === filesystemRoot) break;
@@ -19605,12 +19860,12 @@ function manifestIdFor(url) {
   return url.endsWith("/") ? url : `${url}/`;
 }
 function execFileP(cmd, args2) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     execFile(
       cmd,
       args2,
       { encoding: "utf8", timeout: 1e4 },
-      (err, stdout) => err ? reject(err) : resolve5(stdout)
+      (err, stdout) => err ? reject(err) : resolve6(stdout)
     );
   });
 }
@@ -19689,9 +19944,9 @@ function openCdpSession(browserPath, dataPath) {
   cmdPipe.on("error", failAll);
   resPipe.on("error", failAll);
   child.on("exit", () => failAll(new Error("chrome exited before the CDP handshake completed")));
-  const call2 = (method, params = {}, timeoutMs = 2e4) => new Promise((resolve5, reject) => {
+  const call2 = (method, params = {}, timeoutMs = 2e4) => new Promise((resolve6, reject) => {
     const id = ++seq;
-    pending.set(id, { resolve: resolve5, reject });
+    pending.set(id, { resolve: resolve6, reject });
     cmdPipe.write(JSON.stringify({ id, method, params }) + "\0");
     setTimeout(() => {
       if (pending.has(id)) {
@@ -19704,15 +19959,15 @@ function openCdpSession(browserPath, dataPath) {
     await call2("Browser.close").catch(() => {
     });
     if (child.exitCode !== null || child.signalCode !== null) return;
-    await new Promise((resolve5) => {
+    await new Promise((resolve6) => {
       const t = setTimeout(() => {
         child.kill();
-        resolve5();
+        resolve6();
       }, 1e4);
       t.unref();
       child.once("exit", () => {
         clearTimeout(t);
-        resolve5();
+        resolve6();
       });
     });
   };
@@ -22451,7 +22706,15 @@ function createAccessPane(options2) {
       ticker.unref?.();
       return true;
     },
-    key() {
+    key(key) {
+      if (key === "l" || key === "L") {
+        const link = options2.issue();
+        if (!link) return "close";
+        shown = link;
+        consumed = false;
+        paint();
+        return "keep";
+      }
       return "close";
     },
     close() {
@@ -22473,25 +22736,26 @@ function createAccessPane(options2) {
 }
 
 // src/remote-controller.ts
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 
 // src/cloud.ts
 init_src();
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
-import { homedir as homedir3 } from "node:os";
-import { dirname as dirname3, join as join4 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname4, join as join5 } from "node:path";
 
 // src/identity.ts
+init_frizz_paths();
 init_src();
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname2, join as join3 } from "node:path";
-function claimIdentityPath(home = homedir2()) {
-  return join3(home, ".frizz", "identity.key");
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname3, join as join4 } from "node:path";
+function claimIdentityPath(home = homedir3()) {
+  return join4(frizzPaths({ home }).state, "identity.key");
 }
-async function loadOrCreateClaimIdentity(home = homedir2()) {
+async function loadOrCreateClaimIdentity(home = homedir3()) {
   const path = claimIdentityPath(home);
   let stored;
   try {
@@ -22507,7 +22771,7 @@ async function loadOrCreateClaimIdentity(home = homedir2()) {
     );
   }
   const identity = await generateClaimIdentity();
-  mkdirSync2(dirname2(path), { recursive: true });
+  mkdirSync2(dirname3(path), { recursive: true });
   writeFileSync2(path, await exportClaimPrivateKey(identity.privateKey), { mode: 384 });
   return identity;
 }
@@ -22645,7 +22909,12 @@ function serveRelayRequest(frame, options2) {
   const target2 = new URL(frame.url);
   const local = new URL(options2.origin);
   const publicUrl = new URL(options2.publicOrigin);
-  return new Promise((resolve5) => {
+  let cancelled = false;
+  let abort;
+  const done = new Promise((resolve6) => {
+    const send = (upFrame) => {
+      if (!cancelled) options2.send(upFrame);
+    };
     const headers = {};
     for (const [name, value] of stripHopByHop(frame.headers)) headers[name] = value;
     headers.host = publicUrl.host;
@@ -22664,10 +22933,10 @@ function serveRelayRequest(frame, options2) {
         );
         const streaming = shouldStream(outHeaders);
         if (streaming) {
-          options2.send({ t: "res", id: frame.id, status: res.statusCode ?? 502, headers: outHeaders, end: false });
+          send({ t: "res", id: frame.id, status: res.statusCode ?? 502, headers: outHeaders, end: false });
           res.on("data", (chunk) => {
             for (let at = 0; at < chunk.length; at += RELAY_MAX_FRAME_BODY) {
-              options2.send({
+              send({
                 t: "res-chunk",
                 id: frame.id,
                 data: encodeBody(new Uint8Array(chunk.subarray(at, at + RELAY_MAX_FRAME_BODY)))
@@ -22675,12 +22944,12 @@ function serveRelayRequest(frame, options2) {
             }
           });
           res.on("end", () => {
-            options2.send({ t: "res-end", id: frame.id });
-            resolve5();
+            send({ t: "res-end", id: frame.id });
+            resolve6();
           });
           res.on("error", () => {
-            options2.send({ t: "res-end", id: frame.id });
-            resolve5();
+            send({ t: "res-end", id: frame.id });
+            resolve6();
           });
           return;
         }
@@ -22689,7 +22958,7 @@ function serveRelayRequest(frame, options2) {
         res.on("end", () => {
           const body = Buffer.concat(chunks);
           if (body.byteLength <= RELAY_MAX_FRAME_BODY) {
-            options2.send({
+            send({
               t: "res",
               id: frame.id,
               status: res.statusCode ?? 502,
@@ -22697,28 +22966,28 @@ function serveRelayRequest(frame, options2) {
               ...body.byteLength > 0 ? { body: encodeBody(new Uint8Array(body)) } : {},
               end: true
             });
-            resolve5();
+            resolve6();
             return;
           }
-          options2.send({ t: "res", id: frame.id, status: res.statusCode ?? 502, headers: outHeaders, end: false });
+          send({ t: "res", id: frame.id, status: res.statusCode ?? 502, headers: outHeaders, end: false });
           for (let at = 0; at < body.byteLength; at += RELAY_MAX_FRAME_BODY) {
-            options2.send({
+            send({
               t: "res-chunk",
               id: frame.id,
               data: encodeBody(new Uint8Array(body.subarray(at, at + RELAY_MAX_FRAME_BODY)))
             });
           }
-          options2.send({ t: "res-end", id: frame.id });
-          resolve5();
+          send({ t: "res-end", id: frame.id });
+          resolve6();
         });
         res.on("error", () => {
-          options2.send({ t: "res", id: frame.id, status: 502, headers: [], end: true });
-          resolve5();
+          send({ t: "res", id: frame.id, status: 502, headers: [], end: true });
+          resolve6();
         });
       }
     );
     req.on("error", (error) => {
-      options2.send({
+      send({
         t: "res",
         id: frame.id,
         status: 502,
@@ -22726,11 +22995,23 @@ function serveRelayRequest(frame, options2) {
         body: encodeBody(new TextEncoder().encode(`Frizz is not answering on this machine: ${error.message}`)),
         end: true
       });
-      resolve5();
+      resolve6();
     });
     if (frame.body) req.write(Buffer.from(decodeBody(frame.body)));
     req.end();
+    abort = () => {
+      req.destroy();
+      resolve6();
+    };
   });
+  return {
+    done,
+    cancel: () => {
+      if (cancelled) return;
+      cancelled = true;
+      abort?.();
+    }
+  };
 }
 var HANDSHAKE_HEADERS = /* @__PURE__ */ new Set([
   "sec-websocket-key",
@@ -22812,6 +23093,7 @@ function defaultBackoff(attempt, random = Math.random) {
   const base = Math.min(3e4, 500 * 2 ** Math.min(attempt, 6));
   return Math.round(base / 2 + random() * (base / 2));
 }
+var RELAY_KEEPALIVE_INTERVAL_MS = 45e3;
 async function signRelayHandshake(name, identity, issuedAt) {
   const pubkey = await exportClaimPublicKey(identity.publicKey);
   const signature = await crypto.subtle.sign(
@@ -22829,9 +23111,22 @@ function connectRelay(options2) {
   const makeSocket = options2.socketFactory ?? ((url) => new WebSocket(url));
   let socket = null;
   const nested = /* @__PURE__ */ new Map();
+  const requests = /* @__PURE__ */ new Map();
   let attempt = 0;
   let stopped = false;
   let retryHandle;
+  let keepaliveHandle;
+  let awaitingPong = false;
+  const clearKeepalive = () => {
+    if (keepaliveHandle !== void 0) {
+      clearTimer(keepaliveHandle);
+      keepaliveHandle = void 0;
+    }
+  };
+  const cancelRequests = () => {
+    for (const request of requests.values()) request.cancel();
+    requests.clear();
+  };
   const send = (frame) => {
     try {
       socket?.send(serializeFrame(frame));
@@ -22858,7 +23153,26 @@ function connectRelay(options2) {
     const next = makeSocket(url);
     socket = next;
     let settled;
+    const beat = () => {
+      if (stopped || socket !== next) return;
+      if (awaitingPong) {
+        dropped();
+        try {
+          next.close();
+        } catch {
+        }
+        return;
+      }
+      awaitingPong = true;
+      try {
+        next.send(RELAY_KEEPALIVE_PING);
+      } catch {
+      }
+      keepaliveHandle = setTimer(beat, RELAY_KEEPALIVE_INTERVAL_MS);
+    };
     next.addEventListener("open", () => {
+      awaitingPong = false;
+      keepaliveHandle = setTimer(beat, RELAY_KEEPALIVE_INTERVAL_MS);
       settled = setTimer(() => {
         attempt = 0;
       }, SETTLED_MS);
@@ -22872,12 +23186,25 @@ function connectRelay(options2) {
         send({ t: "pong", id: frame.id });
         return;
       }
+      if (frame.t === "pong") {
+        awaitingPong = false;
+        return;
+      }
       if (frame.t === "req") {
-        void serveRelayRequest(frame, {
+        const handle = serveRelayRequest(frame, {
           origin: options2.boardOrigin,
           publicOrigin: options2.publicOrigin,
           send
         });
+        requests.set(frame.id, handle);
+        void handle.done.then(() => {
+          if (requests.get(frame.id) === handle) requests.delete(frame.id);
+        });
+        return;
+      }
+      if (frame.t === "req-cancel") {
+        requests.get(frame.id)?.cancel();
+        requests.delete(frame.id);
         return;
       }
       if (frame.t === "ws-open") {
@@ -22906,9 +23233,11 @@ function connectRelay(options2) {
         clearTimer(settled);
         settled = void 0;
       }
+      clearKeepalive();
       socket = null;
       for (const session of nested.values()) session.close();
       nested.clear();
+      cancelRequests();
       options2.onStatus?.("disconnected");
       scheduleRetry("the relay connection closed");
     };
@@ -22920,12 +23249,14 @@ function connectRelay(options2) {
     stop() {
       stopped = true;
       if (retryHandle !== void 0) clearTimer(retryHandle);
+      clearKeepalive();
       try {
         socket?.close();
       } catch {
       }
       for (const session of nested.values()) session.close();
       nested.clear();
+      cancelRequests();
       socket = null;
     },
     get connected() {
@@ -22957,7 +23288,7 @@ function zoneClaimLabel(hostname) {
   const label = hostname.slice(0, -suffix.length);
   return label.length > 0 && !label.includes(".") ? label : null;
 }
-async function reconcileCloudConfig(config, port, home = homedir3(), onNotice, origin, github = githubCli) {
+async function reconcileCloudConfig(config, port, home = homedir4(), onNotice, origin, github = githubCli) {
   if (isRelayConfig(config)) return config;
   const label = config.claim ?? zoneClaimLabel(config.hostname);
   if (!label) return config;
@@ -22966,10 +23297,10 @@ async function reconcileCloudConfig(config, port, home = homedir3(), onNotice, o
   );
   return establishCloudConfig(label, port, home, origin, github);
 }
-function cloudConfigPath(home = homedir3()) {
-  return join4(home, ".frizz", "cloud.json");
+function cloudConfigPath(home = homedir4()) {
+  return join5(home, ".frizz", "cloud.json");
 }
-function readCloudConfig(home = homedir3()) {
+function readCloudConfig(home = homedir4()) {
   try {
     const parsed = JSON.parse(readFileSync4(cloudConfigPath(home), "utf8"));
     if (typeof parsed.hostname !== "string" || !parsed.hostname) return null;
@@ -22989,10 +23320,10 @@ function readCloudConfig(home = homedir3()) {
     return null;
   }
 }
-function tunnelTokenPath(home = homedir3()) {
-  return join4(home, ".frizz", "tunnel-token");
+function tunnelTokenPath(home = homedir4()) {
+  return join5(home, ".frizz", "tunnel-token");
 }
-function readTunnelToken(home = homedir3()) {
+function readTunnelToken(home = homedir4()) {
   try {
     const token = readFileSync4(tunnelTokenPath(home), "utf8").trim();
     return token.length > 0 ? token : null;
@@ -23000,18 +23331,18 @@ function readTunnelToken(home = homedir3()) {
     return null;
   }
 }
-function writeTunnelToken(token, home = homedir3()) {
+function writeTunnelToken(token, home = homedir4()) {
   const path = tunnelTokenPath(home);
-  mkdirSync3(dirname3(path), { recursive: true });
+  mkdirSync3(dirname4(path), { recursive: true });
   writeFileSync3(path, `${token}
 `, { mode: 384 });
 }
-function deleteCloudConfig(home = homedir3()) {
+function deleteCloudConfig(home = homedir4()) {
   rmSync(cloudConfigPath(home), { force: true });
 }
-function writeCloudConfig(config, home = homedir3()) {
+function writeCloudConfig(config, home = homedir4()) {
   const path = cloudConfigPath(home);
-  mkdirSync3(dirname3(path), { recursive: true });
+  mkdirSync3(dirname4(path), { recursive: true });
   writeFileSync3(path, `${JSON.stringify(config, null, 2)}
 `);
 }
@@ -23032,7 +23363,7 @@ async function promptForTunnelName(hostname, fallback) {
     rl.close();
   }
 }
-async function establishCloudConfig(answer, port, home = homedir3(), origin, github = githubCli) {
+async function establishCloudConfig(answer, port, home = homedir4(), origin, github = githubCli) {
   if (answer.includes(".")) {
     const hostname = normalizeHostname(answer);
     const tunnel = await promptForTunnelName(hostname, hostname.split(".")[0]);
@@ -23043,17 +23374,23 @@ async function establishCloudConfig(answer, port, home = homedir3(), origin, git
       "claiming a name on frizz.sh is not available yet.\n       Reach this board through a tunnel of your own instead \u2014 see docs/remote-access.md \u2014 and\n       answer with its hostname rather than a bare name."
     );
   }
-  if (!claimNameIsValid(answer)) {
+  const anonymous = answer === "" || isAnonymousClaimName(answer);
+  if (!anonymous && !claimNameIsValid(answer)) {
     normalizeClaimName(answer);
   }
-  const name = normalizeClaimName(answer);
+  const name = answer === "" ? generateAnonymousClaimName() : normalizeClaimName(answer);
   const identity = await loadOrCreateClaimIdentity(home);
-  const token = await github.accessToken();
-  const login = await github.login();
-  if (login) console.log(`  claiming ${name}.frizz.sh for GitHub user ${login}`);
+  let token;
+  if (!anonymous) {
+    token = await github.accessToken();
+    const login = await github.login();
+    if (login) console.log(`  claiming ${name}.frizz.sh for GitHub user ${login}`);
+  } else {
+    console.log("  claiming a private name on frizz.sh \u2014 no account needed");
+  }
   let result;
   try {
-    result = await claimName({ name, port, identity, github: token, ...origin ? { origin } : {} });
+    result = await claimName({ name, port, identity, ...token ? { github: token } : {}, ...origin ? { origin } : {} });
   } catch (error) {
     if (error instanceof ClaimError && error.code === "unreachable") {
       throw new ClaimError(
@@ -23070,7 +23407,7 @@ async function establishCloudConfig(answer, port, home = homedir3(), origin, git
   }
   return { hostname: result.hostname, claim: name, serve: "relay" };
 }
-async function resolveRunToken(config, port, home = homedir3(), onWarning, origin) {
+async function resolveRunToken(config, port, home = homedir4(), onWarning, origin) {
   if (!isClaimedConfig(config)) return null;
   const cached2 = readTunnelToken(home);
   try {
@@ -23087,12 +23424,12 @@ async function resolveRunToken(config, port, home = homedir3(), onWarning, origi
     throw error;
   }
 }
-function resolveTunnelConfigPath(config, home = homedir3()) {
+function resolveTunnelConfigPath(config, home = homedir4()) {
   if (config.config) return config.config;
-  const candidate = join4(home, ".cloudflared", "frizz.yml");
-  return existsSync(candidate) ? candidate : null;
+  const candidate = join5(home, ".cloudflared", "frizz.yml");
+  return existsSync2(candidate) ? candidate : null;
 }
-async function startRelay(config, port, home = homedir3(), onStatus) {
+async function startRelay(config, port, home = homedir4(), onStatus) {
   const identity = await loadOrCreateClaimIdentity(home);
   const origin = `https://${config.hostname}`;
   return connectRelay({
@@ -23110,7 +23447,7 @@ async function startRelay(config, port, home = homedir3(), onStatus) {
     } : {}
   });
 }
-function startTunnel(config, onExit, onError, home = homedir3(), runToken) {
+function startTunnel(config, onExit, onError, home = homedir4(), runToken) {
   const configPath = runToken ? null : resolveTunnelConfigPath(config, home);
   const args2 = runToken ? ["tunnel", "--no-autoupdate", "run", "--token", runToken] : [
     "tunnel",
@@ -23141,7 +23478,7 @@ function startTunnel(config, onExit, onError, home = homedir3(), runToken) {
 
 // src/remote-controller.ts
 function createRemoteController(options2) {
-  const home = options2.home ?? homedir4();
+  const home = options2.home ?? homedir5();
   let config = null;
   let transport = null;
   const stopTransport = () => {
@@ -23223,9 +23560,9 @@ function createRemoteController(options2) {
 import { execFile as execFile3 } from "node:child_process";
 var PROBE_TIMEOUT_MS = 4e3;
 function run2(command, args2) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     execFile3(command, args2, { encoding: "utf8", timeout: PROBE_TIMEOUT_MS }, (error, stdout) => {
-      resolve5(error ? null : stdout);
+      resolve6(error ? null : stdout);
     });
   });
 }
@@ -23253,8 +23590,10 @@ async function probeTailscale() {
 }
 
 // src/remote-pane.ts
+init_src();
 var CHOICES = [
-  { kind: "frizz", title: "frizz.sh name", blurb: "<name>.frizz.sh \u2014 nothing to install; needs the GitHub CLI" },
+  { kind: "private", title: "Private name", blurb: "an unguessable name on frizz.sh \u2014 no account, nothing to install" },
+  { kind: "frizz", title: "Custom name", blurb: "<name>.frizz.sh of your choosing; needs the GitHub CLI" },
   { kind: "cloudflare", title: "Cloudflare Tunnel", blurb: "a domain you own on Cloudflare; cloudflared on this machine" },
   { kind: "tailscale", title: "Tailscale", blurb: "your tailnet; tailscale serve does the TLS" },
   { kind: "other", title: "Something else", blurb: "any proxy or tunnel you run \u2014 tell Frizz its address" },
@@ -23269,7 +23608,7 @@ var TAB = "	";
 var SHIFT_TAB = "\x1B[Z";
 function kindOf(config) {
   if (!config) return "off";
-  if (isClaimedConfig(config)) return "frizz";
+  if (isClaimedConfig(config)) return isAnonymousClaimName(config.claim) ? "private" : "frizz";
   if (isExternalConfig(config)) return config.provider === "tailscale" ? "tailscale" : "other";
   return "cloudflare";
 }
@@ -23356,10 +23695,10 @@ function createRemotePane(options2) {
     if (kind === "frizz") {
       const gh = github === "pending" || github === null ? `${DIM}GitHub CLI   checking\u2026${RESET2}` : !github.installed ? "GitHub CLI   not installed \u2014 see https://cli.github.com, then `gh auth login`" : github.login ? check(true, `GitHub CLI   signed in as ${github.login}`) : "GitHub CLI   not signed in \u2014 run `gh auth login` in another terminal";
       return [
-        "frizz.sh name",
+        "Custom frizz.sh name",
         "",
         ...wrap(
-          "Claims <name>.frizz.sh for your GitHub account. The board dials out to frizz.sh \u2014 no port, no DNS record, no tunnel binary. One name per account; a name nobody runs for 30 days is released."
+          "Claims <name>.frizz.sh of your choosing, tied to your GitHub account so names cannot be squatted. The board dials out to frizz.sh \u2014 no port, no DNS record, no tunnel binary. One name per account; a name nobody runs for 30 days is released. (A private name needs none of this.)"
         ),
         ...options2.sandbox ? ["", ...wrap("This is a sandbox, but a claim is real: it binds this machine's one name to your account, and your real board keeps it. Only the setup saved here is thrown away.")] : [],
         "",
@@ -23480,6 +23819,22 @@ function createRemotePane(options2) {
     }
     paint();
   };
+  const claimPrivate = async () => {
+    const back = { name: "menu", index: 0 };
+    screen = { name: "busy", message: "claiming a private name on frizz.sh\u2026" };
+    paint();
+    try {
+      const next = await options2.claim("");
+      screen = { name: "busy", message: `serving ${next.hostname}\u2026` };
+      paint();
+      await options2.apply(next, { justClaimed: true });
+      options2.onChanged?.(next);
+      screen = { name: "done", message: `Serving https://${next.hostname} (${describeCloudConfig(next)}).`, link: options2.issueLink(), config: next };
+    } catch (error) {
+      screen = { name: "error", message: error instanceof Error ? error.message : String(error), back };
+    }
+    paint();
+  };
   const turnOff = async () => {
     screen = { name: "busy", message: "back to loopback only\u2026" };
     paint();
@@ -23515,10 +23870,11 @@ function createRemotePane(options2) {
         if (key === ESC || key === "q") return "close";
         if (key === UP || key === "k") s.index = (s.index + CHOICES.length - 1) % CHOICES.length;
         else if (key === DOWN || key === "j") s.index = (s.index + 1) % CHOICES.length;
-        else if (/^[1-5]$/.test(key)) s.index = Number(key) - 1;
+        else if (/^[1-6]$/.test(key)) s.index = Number(key) - 1;
         else if (ENTER.has(key)) {
           const choice = CHOICES[s.index];
           if (choice.kind === "off") void turnOff();
+          else if (choice.kind === "private") void claimPrivate();
           else openForm(choice.kind);
           return "keep";
         }
@@ -23894,22 +24250,22 @@ init_project_launch();
 init_local_origin();
 init_boot_progress();
 init_frizz_paths();
-init_project_root();
-init_logging();
-init_src();
-init_project_registry();
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { createServer as createServer2 } from "node:net";
 import { existsSync as existsSync5, mkdirSync as mkdirSync10, mkdtempSync, readdirSync as readdirSync3, readFileSync as readFileSync11, realpathSync as realpathSync5, rmSync as rmSync8, symlinkSync as symlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir10, tmpdir as tmpdir2 } from "node:os";
-import { basename as basename5, join as join13, resolve as resolve3 } from "node:path";
+import { basename as basename5, dirname as dirname10, join as join13, resolve as resolve4 } from "node:path";
 import { setTimeout as delay2 } from "node:timers/promises";
+init_project_root();
+init_logging();
+init_src();
+init_project_registry();
 var PORT_SCAN_COUNT = 100;
 var LAUNCH_TIMEOUT_MS = 3e4;
 var LAUNCH_HARD_TIMEOUT_MS = 10 * 6e4;
 var RETIRED_NETWORK_FLAGS = ["--host", "--allowed-host", "--public-origin", "--cloud"];
 function retiredFlagMessage(flag) {
-  return `${flag} was retired \u2014 how a board is reached is set up from the running board now: press R in its terminal to pick a frizz.sh name, a Cloudflare Tunnel, Tailscale or a proxy of your own. The choice is remembered, so a plain launch serves it.`;
+  return `${flag} was retired \u2014 how a board is reached is set up from the running board now: press R in its terminal to pick a private or custom frizz.sh name, a Cloudflare Tunnel, Tailscale or a proxy of your own. The choice is remembered, so a plain launch serves it.`;
 }
 function parseCliArgs(argv) {
   const args2 = new Set(argv);
@@ -24042,9 +24398,11 @@ function shareCredentials(realHome, home) {
     } catch {
     }
   };
-  mkdirSync10(join13(realHome, ".frizz"), { recursive: true });
-  mkdirSync10(join13(home, ".frizz"), { recursive: true });
-  link(join13(realHome, ".frizz", "identity.key"), join13(home, ".frizz", "identity.key"));
+  const realKey = claimIdentityPath(realHome);
+  const sandboxKey = claimIdentityPath(home);
+  mkdirSync10(dirname10(realKey), { recursive: true });
+  mkdirSync10(dirname10(sandboxKey), { recursive: true });
+  link(realKey, sandboxKey);
   if (existsSync5(join13(realHome, ".config", "gh"))) {
     mkdirSync10(join13(home, ".config"), { recursive: true });
     link(join13(realHome, ".config", "gh"), join13(home, ".config", "gh"));
@@ -24326,7 +24684,7 @@ import { fork } from "node:child_process";
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { existsSync as existsSync6, mkdirSync as mkdirSync11, readFileSync as readFileSync12 } from "node:fs";
 import { createServer as createNetServer } from "node:net";
-import { basename as basename6, dirname as dirname10, extname as extname2, isAbsolute as isAbsolute3, relative, resolve as resolve4, sep as sep2 } from "node:path";
+import { basename as basename6, dirname as dirname11, extname as extname2, isAbsolute as isAbsolute4, relative as relative2, resolve as resolve5, sep as sep3 } from "node:path";
 import { fileURLToPath } from "node:url";
 import watcher from "@parcel/watcher";
 init_logging();
@@ -24417,29 +24775,29 @@ function createSupervisorShutdownHandler(options2) {
     );
   };
 }
-var packagesDir = resolve4(import.meta.dirname, "..", "..");
-var workspaceDir = resolve4(packagesDir, "..");
+var packagesDir = resolve5(import.meta.dirname, "..", "..");
+var workspaceDir = resolve5(packagesDir, "..");
 var INITIAL_BOOT_REASON = "initial boot";
 function defaultDevWatchRoots() {
   return [workspaceDir];
 }
 function isWithin(path, root) {
-  const rel = relative(root, path);
-  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep2}`) && !isAbsolute3(rel);
+  const rel = relative2(root, path);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute4(rel);
 }
 function ignoredDevPath(path) {
-  const parts = resolve4(path).split(sep2);
+  const parts = resolve5(path).split(sep3);
   const name = parts.at(-1) ?? "";
   return parts.some((part) => GENERATED_DIRS.has(part) || part === "fixtures" || part.endsWith(".fixtures")) || /\.(?:test|spec)\.[^.]+$/.test(name) || name.includes(".golden.");
 }
 function classifyDevChange(path, roots = defaultDevWatchRoots()) {
-  const absolute = resolve4(path);
-  const root = roots.find((candidate) => isWithin(absolute, resolve4(candidate)));
+  const absolute = resolve5(path);
+  const root = roots.find((candidate) => isWithin(absolute, resolve5(candidate)));
   if (!root) return null;
   if (ignoredDevPath(absolute)) return null;
   const name = basename6(absolute);
-  const relToWorkspace = relative(resolve4(root), absolute);
-  const parts = relToWorkspace.split(sep2);
+  const relToWorkspace = relative2(resolve5(root), absolute);
+  const parts = relToWorkspace.split(sep3);
   const packageName = parts[0] === "packages" ? parts[1] : void 0;
   if (name === "package.json" && parts.length === 3 && packageName && CHILD_PACKAGE_METADATA.has(packageName)) {
     return "child";
@@ -24586,10 +24944,10 @@ var Supervisor = class {
     if (launchOwner.pid !== callerGeneration.pid || launchOwner.processStart !== callerGeneration.processStart) throw new Error("dev supervisor caller is not the exact project launch owner");
     this.port = opts.port;
     this.launchTarget = opts.launchTarget;
-    this.cwd = resolve4(opts.cwd ?? opts.launchTarget.projectDir);
+    this.cwd = resolve5(opts.cwd ?? opts.launchTarget.projectDir);
     if (this.cwd !== opts.launchTarget.projectDir) throw new Error("dev supervisor cwd does not match its owned project");
     this.parentEnv = projectLaunchEnvironment(opts.env ?? process.env, opts.launchTarget, opts.launchOwnerToken);
-    this.roots = (opts.watchRoots ?? defaultDevWatchRoots()).map((root) => resolve4(root));
+    this.roots = (opts.watchRoots ?? defaultDevWatchRoots()).map((root) => resolve5(root));
     this.watchEnabled = opts.watch !== false;
     this.childEnvironment = opts.childEnvironment ?? (() => ({}));
     this.debounceMs = opts.debounceMs ?? DEV_RESTART_DEBOUNCE_MS;
@@ -24599,10 +24957,10 @@ var Supervisor = class {
     this.childArgs = opts.childArgs ?? [];
     this.watchSubscribe = opts.watchSubscribe ?? ((root, callback, options2) => watcher.subscribe(root, callback, options2));
     this.reexec = opts.reexec ?? (typeof process.execve === "function" ? (request) => process.execve(request.executable, request.argv, request.env) : void 0);
-    if (opts.stateDir && resolve4(opts.stateDir) !== opts.launchTarget.stateDir) {
+    if (opts.stateDir && resolve5(opts.stateDir) !== opts.launchTarget.stateDir) {
       throw new Error("dev supervisor state directory does not match its owned project");
     }
-    this.supervisorLock = resolve4(opts.launchTarget.stateDir, "dev-supervisor.lock");
+    this.supervisorLock = resolve5(opts.launchTarget.stateDir, "dev-supervisor.lock");
     this.ownerToken = opts.launchOwnerToken;
     this.logLine = opts.log ?? ((line) => log.info("supervisor", stripPrefix(line)));
     this.errorLine = opts.error ?? ((line) => log.error("supervisor", stripPrefix(line)));
@@ -24654,7 +25012,7 @@ var Supervisor = class {
   }
   async start() {
     if (this.supervisorLock) {
-      mkdirSync11(dirname10(this.supervisorLock), { recursive: true });
+      mkdirSync11(dirname11(this.supervisorLock), { recursive: true });
       this.writeStatus("starting", "watcher initializing");
     }
     try {
@@ -24709,7 +25067,7 @@ var Supervisor = class {
         return;
       }
       this.crashAttempts = 0;
-      this.requestRestart(relative(workspaceDir, relevant.path), false, kind === "launcher");
+      this.requestRestart(relative2(workspaceDir, relevant.path), false, kind === "launcher");
     }
   }
   requestRestart(reason, immediate = false, reloadLauncher = false, delayMs = this.debounceMs) {
@@ -25187,7 +25545,7 @@ var npmRegistryReleaseAdapter = {
 import { spawnSync } from "node:child_process";
 import { chmodSync as chmodSync2, statSync as statSync5 } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname as dirname11, join as join14 } from "node:path";
+import { dirname as dirname12, join as join14 } from "node:path";
 var SUPPORTED_NODE_LINES = [
   { major: 22, minor: 13 },
   { major: 23, minor: 4 }
@@ -25239,7 +25597,7 @@ function ensureNativeHelperPermissions(options2 = {}) {
   const resolvePty = options2.resolvePty ?? (() => createRequire(import.meta.url).resolve("node-pty/package.json"));
   try {
     const helper = join14(
-      dirname11(resolvePty()),
+      dirname12(resolvePty()),
       "prebuilds",
       `${platform}-${options2.arch ?? process.arch}`,
       "spawn-helper"
@@ -25304,7 +25662,8 @@ Options:
 
 
 To reach the board from a phone or another machine, press R in the terminal running it: a short
-walkthrough sets up a frizz.sh name, a Cloudflare Tunnel, Tailscale, or a proxy of your own, and
+walkthrough sets up a private frizz.sh name (no account needed), a custom one, a Cloudflare
+Tunnel, Tailscale, or a proxy of your own, and
 remembers the choice, so a plain launch serves it from then on. The board stays on loopback and
 shows a single-use sign-in link as a QR; press L for a fresh one, or run --link from another shell.`
   );