npm - frizz-server - Versions diffs - 0.14.1 → 0.14.3 - Mend

frizz-server 0.14.1 → 0.14.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (93) hide show

package/dist/dev-child.js CHANGED Viewed

@@ -14086,7 +14086,7 @@ var init_src = __esm({
     };
     AWAITING_HINT_MAX = 8;
     AWAITING_HINT_VALUE_MAX = 200;
-    AWAITING_TITLE_MAX = 40;
+    AWAITING_TITLE_MAX = 120;
     AWAITING_ITEM_KINDS = ["shell", "agent", "timer", "pr", "issue"];
     AWAITING_DURATION_RE = /^(\d{1,5})(s|m|h|d)$/;
     DURATION_UNIT_MS = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
@@ -14935,13 +14935,13 @@ var init_src = __esm({
        * to, not furniture you sit beside. Hidden, the way back is a breadcrumb in the status bar, which
        * costs a click exactly when you meant to switch and nothing when you did not.
        *
-       * Machine-level, like the font: which chrome you want is a property of the person, not the repo.
+       * Machine-level: which chrome you want is a property of the person, not the repo.
        */
       projectRail: external_exports.boolean(),
-      // UI type family. `mono` (default) is the mono-forward system; `sans` swaps prose/UI chrome to a
-      // sans stack while code / tool lines / the terminal stay mono. Optional so an old settings blob
-      // parses; defaultSettings pins "mono".
-      font: external_exports.enum(["mono", "sans"]).optional(),
+      // There is no `font` key any more. The interface rendered in one of two type families as a machine
+      // setting until 2026-09-19 (maintainer: "let's drop monospace as an option"); every surface is sans
+      // now, and index.html pins `data-font="sans"` on <html> directly. Settings is a non-strict object,
+      // so a stored `font` is stripped the moment an old blob parses — no migration.
       // Default action for a vetted non-image local path in agent markdown. Image clicks always use the
       // OS default viewer so screenshots retain their expected behavior.
       localFileOpener: LocalFileOpener.optional(),
@@ -20911,12 +20911,12 @@ var init_settings = __esm({
     init_frizz_paths();
     init_machine_config();
     SETTINGS_KEY = "settings";
-    MACHINE_KEYS = ["font", "notifications", "localFileOpener", "projectRail"];
+    MACHINE_KEYS = ["notifications", "localFileOpener", "projectRail"];
     MachineSettingsRecord = Settings.partial();
     defaultSettings = () => ({
       // `bypassPermissions` = claude's --dangerously-skip-permissions: a headless worker never stops on an
-      // approval card. Shipped default since 0.7.2 (maintainer 2026-08-24); the Settings "Permissions"
-      // (under Claude) control can lower it to `auto` — the CLI's classifier mode, where risky actions
+      // approval card. Shipped default since 0.7.2 (maintainer 2026-08-24); the "Permissions" control
+      // behind the Claude Code gear in the model picker can lower it to `auto` — the CLI's classifier mode, where risky actions
       // still surface an approval card in the thread. Those are the only two values a headless worker can
       // run in: the dispatch floor (WORKER_DISPATCH_PERMISSION) stays `auto`, and workerDispatchPermission
       // honors exactly one deviation from it, which is this one.
@@ -20924,7 +20924,6 @@ var init_settings = __esm({
       model: void 0,
       effort: void 0,
       notifications: true,
-      font: "sans",
       localFileOpener: "system",
       // 500K tokens: half the 1M window every Claude worker is dispatched with. See the schema for why a
       // worker left to compact at 1M is the biggest single reason a Frizz thread out-spends the TUI.
@@ -30508,14 +30507,18 @@ function tomlString(value) {
 function inlineTable(entries2) {
   return `{${entries2.map(([k, v]) => `${k}=${v}`).join(",")}}`;
 }
-function serverTable(command, args, env) {
+function serverTable(command, args, cwd, env) {
   const entries2 = [
     ["command", tomlString(command)],
-    ["args", `[${args.map(tomlString).join(",")}]`]
+    ["args", `[${args.map(tomlString).join(",")}]`],
+    // Where the child RUNS, pinned so it never depends on the thread's own cwd — see
+    // codexThreadMcpConfig for the rename that took a thread's tools with it.
+    ["cwd", tomlString(cwd)]
   ];
   if (env && Object.keys(env).length > 0) {
     entries2.push(["env", inlineTable(Object.entries(env).map(([k, v]) => [k, tomlString(v)]))]);
   }
+  entries2.push(["default_tools_approval_mode", tomlString("approve")]);
   return inlineTable(entries2);
 }
 function codexMcpConfigArgs(frizzMcp, nodeBin = process.execPath) {
@@ -30523,7 +30526,7 @@ function codexMcpConfigArgs(frizzMcp, nodeBin = process.execPath) {
   if (frizzMcp) {
     args.push(
       "-c",
-      `mcp_servers.${FRIZZ_MCP.name}=${serverTable(nodeBin, [frizzMcp.scriptPath], frizzMcpEnv(frizzMcp))}`
+      `mcp_servers.${FRIZZ_MCP.name}=${serverTable(nodeBin, [frizzMcp.scriptPath], frizzMcp.stateDir, frizzMcpEnv(frizzMcp))}`
     );
   }
   args.push("-c", `default_tools_approval_mode=${tomlString("approve")}`);
@@ -30537,6 +30540,7 @@ function codexThreadMcpConfig(frizzMcp, slug, nodeBin = process.execPath) {
         // The ABSOLUTE node path, for the same reason the argv mount pins it — see codexMcpConfigArgs.
         command: nodeBin,
         args: [frizzMcp.scriptPath],
+        cwd: frizzMcp.stateDir,
         env: frizzMcpEnv({ ...frizzMcp, slug }),
         default_tools_approval_mode: "approve"
       }
@@ -31247,6 +31251,11 @@ function parseClaudeUsage(body, planType) {
   if (windows.length === 0) return { status: "unavailable", windows: [], detail: "No usage windows reported" };
   return { status: "ok", planType, windows };
 }
+function retryAtFrom(res, now) {
+  const seconds = Number(res.headers.get("retry-after"));
+  const backoff = Number.isFinite(seconds) && seconds > 0 ? seconds * 1e3 : RATE_LIMIT_DEFAULT_BACKOFF_MS;
+  return now + Math.min(backoff, RATE_LIMIT_MAX_BACKOFF_MS);
+}
 function cachePaths(cacheDir, configDir) {
   const profile = createHash9("sha256").update(configDir).digest("hex").slice(0, 12);
   return {
@@ -31335,10 +31344,10 @@ async function refreshQuota(claudeBin, deps, now) {
         const quota2 = parseClaudeUsage(body, planType);
         if (quota2.status === "ok") return quota2;
       } else if (res.status === 429 || res.status === 529) {
-        throw new Error(`Usage endpoint ${res.status}`);
+        throw new UsageRateLimited(res.status, retryAtFrom(res, now));
       }
     } catch (err) {
-      if (err instanceof Error && /^Usage endpoint (429|529)$/.test(err.message)) throw err;
+      if (err instanceof UsageRateLimited) throw err;
     }
   }
   const quota = parseClaudeUsageOutput(await (deps.execUsage ?? runClaudeUsage)(claudeBin), now);
@@ -31428,14 +31437,30 @@ async function tryAcquireLock2(path3) {
   }
   return void 0;
 }
+function rateLimited(shared, now) {
+  return shared?.retryAt !== void 0 && now < shared.retryAt;
+}
+function serveRateLimited(shared, now) {
+  if (shared.quota.status !== "ok" || now - shared.at >= STALE_MAX_AGE_MS) return UNAVAILABLE;
+  const minutes = (ms, round) => Math.max(1, round(ms / 6e4));
+  return {
+    ...shared.quota,
+    detail: `Next refresh in ${minutes(shared.retryAt - now, Math.ceil)}m \xB7 last updated ${minutes(now - shared.at, Math.round)}m ago`
+  };
+}
 function refreshSharedInBackground(paths, claudeBin, deps, now) {
   if (backgroundRefreshes.has(paths.data)) return;
   const task = (async () => {
+    if (rateLimited(await readShared(paths.data), now)) return;
     const release = await tryAcquireLock2(paths.lock);
     if (!release) return;
     try {
       const quota = await refreshQuota(claudeBin, deps, now);
       await writeShared(paths.data, { at: now, quota });
+    } catch (err) {
+      if (!(err instanceof UsageRateLimited)) throw err;
+      const current = await readShared(paths.data);
+      await writeShared(paths.data, { ...current ?? { at: now, quota: UNAVAILABLE }, retryAt: err.retryAt });
     } finally {
       await release().catch(() => {
       });
@@ -31453,7 +31478,10 @@ async function refreshClaudeQuotaInBackground(claudeBin = "claude", deps = {}) {
   } catch {
     return;
   }
-  refreshSharedInBackground(cachePaths(cacheDir, configDir), claudeBin, deps, now);
+  const paths = cachePaths(cacheDir, configDir);
+  const current = await readShared(paths.data);
+  if (current?.quota.status === "ok" && now - current.at < OK_TTL_MS) return;
+  refreshSharedInBackground(paths, claudeBin, deps, now);
 }
 async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   const now = (deps.now ?? Date.now)();
@@ -31476,36 +31504,44 @@ async function readClaudeQuota(claudeBin = "claude", deps = {}, options = {}) {
   if (!options.force && initial?.quota.status === "ok" && now - initial.at < STALE_MAX_AGE_MS) {
     refreshSharedInBackground(paths, claudeBin, deps, now);
     const ageMs = now - initial.at;
+    if (ageMs >= 10 * 6e4 && rateLimited(initial, now)) return serveRateLimited(initial, now);
     if (ageMs < 10 * 6e4) return initial.quota;
     return { ...initial.quota, detail: `Refreshing \xB7 last updated ${Math.round(ageMs / 6e4)}m ago` };
   }
+  if (rateLimited(initial, now)) return serveRateLimited(initial, now);
   let release;
   try {
     release = await acquireLock(paths.lock);
     const afterLock = await readShared(paths.data);
+    if (rateLimited(afterLock, now)) return serveRateLimited(afterLock, now);
     if (afterLock && afterLock.at !== initial?.at && now - afterLock.at < OK_TTL_MS) return afterLock.quota;
     const quota = await refreshQuota(claudeBin, deps, now);
     await writeShared(paths.data, { at: now, quota }).catch(() => {
     });
     return quota;
-  } catch {
+  } catch (err) {
     const fallback = await readShared(paths.data);
+    if (err instanceof UsageRateLimited) {
+      const refused = { ...fallback ?? { at: now, quota: UNAVAILABLE }, retryAt: err.retryAt };
+      await writeShared(paths.data, refused).catch(() => {
+      });
+      return serveRateLimited(refused, now);
+    }
     if (fallback?.quota.status === "ok" && now - fallback.at < STALE_MAX_AGE_MS) {
       return {
         ...fallback.quota,
         detail: `Could not refresh \xB7 last updated ${Math.max(1, Math.round((now - fallback.at) / 6e4))}m ago`
       };
     }
-    const unavailable = { status: "unavailable", windows: [], detail: "Claude Code usage unavailable" };
-    await writeShared(paths.data, { at: now, quota: unavailable }).catch(() => {
+    await writeShared(paths.data, { at: now, quota: UNAVAILABLE }).catch(() => {
     });
-    return unavailable;
+    return UNAVAILABLE;
   } finally {
     await release?.().catch(() => {
     });
   }
 }
-var execFileAsync2, USAGE_URL, OAUTH_BETA, USER_AGENT, ENDPOINT_TIMEOUT_MS, OK_TTL_MS, FAIL_TTL_MS, STALE_MAX_AGE_MS, CLI_TIMEOUT_MS, LOCK_STALE_MS, LOCK_WAIT_MS, LOCK_POLL_MS2, LINE_WINDOWS, MONTH_INDEX, backgroundRefreshes;
+var execFileAsync2, USAGE_URL, OAUTH_BETA, USER_AGENT, ENDPOINT_TIMEOUT_MS, OK_TTL_MS, FAIL_TTL_MS, STALE_MAX_AGE_MS, CLI_TIMEOUT_MS, LOCK_STALE_MS, LOCK_WAIT_MS, LOCK_POLL_MS2, RATE_LIMIT_DEFAULT_BACKOFF_MS, RATE_LIMIT_MAX_BACKOFF_MS, UsageRateLimited, LINE_WINDOWS, MONTH_INDEX, UNAVAILABLE, backgroundRefreshes;
 var init_claude_quota = __esm({
   "packages/server/src/backend/claude-quota.ts"() {
     "use strict";
@@ -31523,6 +31559,14 @@ var init_claude_quota = __esm({
     LOCK_STALE_MS = 4e4;
     LOCK_WAIT_MS = 15e3;
     LOCK_POLL_MS2 = 50;
+    RATE_LIMIT_DEFAULT_BACKOFF_MS = 5 * 6e4;
+    RATE_LIMIT_MAX_BACKOFF_MS = 60 * 6e4;
+    UsageRateLimited = class extends Error {
+      constructor(status, retryAt) {
+        super(`Usage endpoint ${status}`);
+        this.retryAt = retryAt;
+      }
+    };
     LINE_WINDOWS = [
       [/^Current session$/i, "5h", "5h"],
       [/^Current week \(all models\)$/i, "weekly", "Weekly"],
@@ -31543,6 +31587,7 @@ var init_claude_quota = __esm({
       nov: 10,
       dec: 11
     };
+    UNAVAILABLE = { status: "unavailable", windows: [], detail: "Claude Code usage unavailable" };
     backgroundRefreshes = /* @__PURE__ */ new Map();
   }
 });
@@ -36040,9 +36085,11 @@ exactly ONE of them.
     until somebody notices. Long is free \u2014 real activity wakes you the moment it lands either way, and
     the human snoozes or archives the thread when they want it gone. Hours are for a PR you control and
     a check you expect to settle today.
-  - \`title:\` \u2014 OPTIONAL, the card's heading: **40 characters or fewer**, sentence case, naming THIS
-    wait ("Fork-CI approval", "Nightly bench, arm 3 of 3"); longer is trimmed on a word boundary.
-    Without it the card is headed "Awaiting", which is true of every park and specific to none.
+  - \`title:\` \u2014 OPTIONAL, the card's heading: a short phrase in sentence case naming THIS wait
+    ("Fork-CI approval", "Nightly bench, arm 3 of 3", "Spread ask and soundness issue on two TypeScript
+    issues"). It wraps, so name the wait fully; a HEADING, though, not the handoff \u2014 past 120
+    characters it is trimmed on a word boundary. Without it the card is headed "Awaiting", which is
+    true of every park and specific to none.
   - **REGISTERING IS NOT PARKING, AND PARKING IS NOT REGISTERING.** Your shells, sub-agents, timers
     and PR watchers are watched AUTOMATICALLY, fence or no fence \u2014 frizz wakes you when one finishes,
     every time. The fence only declares that you have STOPPED, and names which of them you stopped
@@ -44881,7 +44928,7 @@ var init_context = __esm({
     init_logging();
     init_project_launch();
     CONTEXT_STARTUP_CLEANUP_TIMEOUT_MS = 4e3;
-    QUOTA_REFRESH_INTERVAL_MS = 2 * 6e4;
+    QUOTA_REFRESH_INTERVAL_MS = 3e4;
     ContextStartupError = class extends Error {
       startupError;
       cleanupError;
@@ -53646,16 +53693,6 @@ Say which way you went and why in your write-up, so the human can course-correct
       output: Settings,
       handler: async ({ input }) => ctx.setSettings(input)
     }),
-    // Context controls live in the new-thread picker. Patch only the chosen field against the
-    // latest settings, synchronously, rather than replacing unrelated settings from a stale drawer.
-    contextWindowSet: mutation({
-      input: external_exports.object({ backend: external_exports.enum(["claude", "codex"]), tokens: external_exports.number().int().positive().nullable() }),
-      output: Settings,
-      handler: async ({ input }) => ctx.setSettings({
-        ...ctx.getSettings(),
-        [input.backend === "claude" ? "autoCompactWindow" : "codexContextWindow"]: input.tokens ?? void 0
-      })
-    }),
     // Clear the stored settings blob so defaults (incl. the shipped default preamble) apply again.
     settingsReset: mutation({
       input: external_exports.object({}),
@@ -54390,12 +54427,15 @@ a { color: inherit; }
 (() => {
   const notifyHeight = () => parent.postMessage({ type: "frizz-inline-vis-height", height: Math.ceil(document.documentElement.scrollHeight) }, "*");
   addEventListener("message", (event) => {
-    if (event.data?.type !== "frizz-inline-vis-theme" || !event.data.vars) return;
+    if (event.source !== parent) return;
+    if (event.data?.type !== "frizz-inline-vis-theme" || !event.data.vars || !Number.isSafeInteger(event.data.requestId)) return;
     for (const [name, value] of Object.entries(event.data.vars)) {
       if (/^--[a-z0-9-]+$/.test(name) && typeof value === "string") document.documentElement.style.setProperty(name, value);
     }
     document.documentElement.style.colorScheme = event.data.colorScheme === "light" ? "light" : "dark";
     requestAnimationFrame(notifyHeight);
+    dispatchEvent(new CustomEvent("frizz-theme-change", { detail: { requestId: event.data.requestId, colorScheme: document.documentElement.style.colorScheme, vars: event.data.vars } }));
+    parent.postMessage({ type: "frizz-inline-vis-applied", requestId: event.data.requestId }, "*");
   });
   window.openai = Object.freeze({
     sendFollowUpMessage: async () => { throw new Error("Follow-up actions are not supported in Frizz visualizations yet"); }
@@ -54403,6 +54443,7 @@ a { color: inherit; }
   addEventListener("DOMContentLoaded", () => {
     new ResizeObserver(notifyHeight).observe(document.body);
     notifyHeight();
+    parent.postMessage({ type: "frizz-inline-vis-ready" }, "*");
   });
 })();
 </script>
@@ -56358,8 +56399,8 @@ var init_runtimes = __esm({
     init_codex_app_server();
     init_frizz_paths();
     init_runtime_lease();
-    CLAUDE_AGENT_SDK_VERSION = "0.3.277";
-    CLAUDE_CODE_VERSION = "2.1.277";
+    CLAUDE_AGENT_SDK_VERSION = "0.3.278";
+    CLAUDE_CODE_VERSION = "2.1.278";
     CODEX_VERSION = CODEX_APP_SERVER_SUPPORTED_VERSION;
     RUNTIMES_MODE_ENV = "FRIZZ_RUNTIMES";
     RUNTIMES_DIR_ENV = "FRIZZ_RUNTIMES_DIR";

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "frizz-server",
-  "version": "0.14.1",
+  "version": "0.14.3",
   "private": false,
   "description": "Replaceable Frizz server runtime",
   "license": "MIT",