frizz 0.10.1 → 0.12.0

package/dist/frizz.js

@@ -12458,11 +12458,18 @@ var init_relay_protocol = __esm({
   }
 });
 
+// packages/shared/src/shell-writes.ts
+var init_shell_writes = __esm({
+  "packages/shared/src/shell-writes.ts"() {
+    "use strict";
+  }
+});
+
 // packages/shared/src/index.ts
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -12477,6 +12484,7 @@ var init_src = __esm({
     init_interactions();
     init_receipt_bus();
     init_relay_protocol();
+    init_shell_writes();
     init_thread_slug();
     ATTACHMENT_IMAGE_EXTENSIONS = ["png", "jpg", "jpeg", "gif", "webp"];
     ATTACHMENT_TEXT_EXTENSIONS = [
@@ -12882,6 +12890,19 @@ var init_src = __esm({
       running: external_exports.number().int().nonnegative(),
       passed: external_exports.number().int().nonnegative(),
       failed: external_exports.number().int().nonnegative(),
+      /** Checks that reached a terminal state without asserting anything — GitHub's `SKIPPED` and `STALE`.
+       *  Counted apart from `passed` since 2026-09-04: they were folded into it, so a rollup of 12 skipped
+       *  no-ops and 3 label bots rendered and reported as "15 checks green". Defaulted, because a reading
+       *  written before that date carries neither this nor `gated`. */
+      skipped: external_exports.number().int().nonnegative().default(0),
+      /** Workflows held at `action_required` — GitHub's "Approve and run" gate on a fork or first-time
+       *  contributor's PR. They produce NO check run, so they are absent from the rollup entirely and the
+       *  poll cannot see them there; the head's workflow runs are where they show up. Non-zero means CI has
+       *  not started and will not until a maintainer presses the button. */
+      gated: external_exports.number().int().nonnegative().default(0),
+      /** The gated workflow NAMES, capped — "Test Linux, Test macOS, Linters" says what is being withheld,
+       *  where a bare count does not. */
+      gating: external_exports.array(external_exports.string()).max(8).default([]),
       /** The failing job NAMES, capped — what a human actually needs to decide whether to look. */
       failing: external_exports.array(external_exports.string()).max(8).default([]),
       merge: GithubMergeState,
@@ -13889,7 +13910,9 @@ ${DISPATCH_TASK_BANNER}
       String.raw`^(👤|🤖) (\d+) new GitHub items on (${WAKE_REF})\. Read exactly these — ` + WAKE_SCOPE + String.raw` — and continue:$`
     );
     PR_WATCH_FINISHED = new RegExp(String.raw`^⏰ (${WAKE_REF}) was (MERGED|CLOSED)\.$`);
-    PR_WATCH_CI_PASSED = new RegExp(String.raw`^✅ CI PASSED on (${WAKE_REF}) — (\d+) checks? green\.$`);
+    PR_WATCH_CI_PASSED = new RegExp(String.raw`^✅ CI PASSED on (${WAKE_REF}) — (\d+) checks? green(?:, (\d+) skipped)?\.$`);
+    PR_WATCH_CI_GATED = new RegExp(String.raw`^⏸️ CI on (${WAKE_REF}) is WAITING FOR APPROVAL — (\d+) workflows? held(?:: (.+?))?\.$`);
+    PR_WATCH_STATE = new RegExp(String.raw`^🔔 (${WAKE_REF}): (.+)\.$`);
     PR_WATCH_CI_FAILED = new RegExp(String.raw`^❌ CI FAILED on (${WAKE_REF})(?:: (.+?))?\.$`);
     GithubStatus = external_exports.object({
       installed: external_exports.boolean(),
@@ -22114,6 +22137,248 @@ import { request as requestHttp, createServer } from "node:http";
 import { connect } from "node:net";
 init_local_origin();
 init_local_image();
+
+// packages/server/src/supervisor-pages.ts
+function escapeHtml(value) {
+  return value.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+}
+function retryTarget(url) {
+  return url.startsWith("/") && !url.startsWith("//") ? url : "/";
+}
+var BASE_STYLE = `
+*,*::before,*::after{box-sizing:border-box}
+:root{
+  color-scheme:dark;
+  --bg:#0d0e10;--panel:#131519;--panel-2:#181b20;
+  --border:#26282d;--border-strong:#33363c;
+  --fg:#e6e7e9;--muted:#8b8f96;--accent:#e8b923;--danger:#fca5a5;
+  --sans:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif;
+  --mono:ui-monospace,"JetBrains Mono","SF Mono","Cascadia Mono",Menlo,Consolas,monospace;
+  --ease:cubic-bezier(0,0,.2,1);
+}
+html,body{background:var(--bg)}
+body{
+  margin:0;min-height:100vh;min-height:100dvh;
+  display:flex;align-items:center;justify-content:center;padding:24px;
+  color:var(--fg);font-family:var(--sans);font-size:12.5px;line-height:1.55;
+  -webkit-font-smoothing:antialiased;
+}
+html[data-font=mono] body{font-family:var(--mono)}
+main{width:100%;max-width:28rem;padding:18px;border:1px solid var(--border-strong);border-radius:12px;background:var(--panel-2)}
+h1{margin:0;display:flex;align-items:baseline;gap:7px;font-size:14px;font-weight:600;letter-spacing:-.01em;line-height:1.4}
+p{margin:0;text-wrap:pretty}
+.detail{margin-top:7px;color:color-mix(in srgb,var(--fg) 88%,transparent)}
+.note{margin-top:12px;padding-top:11px;border-top:1px solid var(--border);color:var(--muted);font-size:11.5px;line-height:1.6}
+code{font-family:var(--mono);font-size:.92em;padding:.1em .35em;border-radius:4px;background:var(--panel);border:1px solid var(--border);white-space:nowrap}
+[hidden]{display:none!important}
+`.trim();
+var RECOVERY_STYLE = `
+.actions{margin-top:14px;display:flex;flex-wrap:wrap;gap:8px}
+/* ErrorBoundary's ACTION_CLASS, one size up for a page that is alone in a viewport. */
+.btn{
+  appearance:none;display:inline-flex;align-items:center;
+  border:1px solid var(--border);border-radius:6px;background:transparent;
+  padding:5px 10px;font:inherit;font-size:11.5px;color:color-mix(in srgb,var(--fg) 90%,transparent);
+  cursor:pointer;text-decoration:none;
+  transition:background-color 120ms var(--ease),border-color 120ms var(--ease),color 120ms var(--ease);
+}
+.btn:hover{background:var(--panel);border-color:var(--border-strong);color:var(--fg)}
+.btn:focus-visible{outline:none;border-color:color-mix(in srgb,var(--accent) 55%,transparent);box-shadow:0 0 0 2px color-mix(in srgb,var(--accent) 22%,transparent)}
+.btn:disabled{opacity:.5;pointer-events:none}
+/* min-height holds the slot open while it is LIVE, so a changing status line never nudges the card;
+   :empty collapses it when there is nothing live to say, so a halted card has no trailing gutter. */
+.probe{margin-top:12px;font-family:var(--mono);font-size:11px;line-height:1.5;color:var(--muted);min-height:1.5em}
+.probe:empty{margin-top:0;min-height:0}
+/* RestartFailureNotice's block, at this altitude: a supervisor \`message\` is raw build output, and it
+   reads as what it is \u2014 a terminal excerpt \u2014 only inside a scrolling mono box. */
+.log{
+  margin-top:10px;max-height:16rem;overflow:auto;white-space:pre-wrap;overflow-wrap:break-word;
+  border:1px solid var(--border);border-radius:6px;background:var(--panel);padding:8px 10px;
+  font-family:var(--mono);font-size:11px;line-height:1.6;color:color-mix(in srgb,var(--fg) 70%,transparent);
+}
+
+/* THE LIVE DOT, and it is the app's own \`.frizz-live-dot\` \u2014 same 6px, same 28%/14% halo, same 1.25s
+   cadence \u2014 because it means the same thing here that it means there: work is in flight.
+
+   Alignment is an INK problem. A baseline-aligned flex item with no text of its own contributes its
+   BORDER-BOX BOTTOM as the baseline, so the dot's ink centre lands 3px above it while the cap band's
+   centre sits 0.5cap above it. \`cap\` is the resolved font's own cap height, so the correction holds
+   in BOTH board fonts and at any size, with nothing to re-measure when the type scale moves or the
+   font setting flips. The em spelling is the fallback for a browser without the unit (.35em ~= 0.5 x a
+   0.7em cap) and is overwritten wherever \`cap\` parses. */
+.dot{
+  width:6px;height:6px;flex:0 0 auto;border-radius:9999px;background:var(--accent);
+  box-shadow:0 0 0 1px color-mix(in srgb,var(--accent) 28%,transparent);
+  animation:frizz-live-pulse 1.25s ease-in-out infinite;
+  transform:translateY(calc(3px - .35em));
+  transform:translateY(calc(3px - .5cap));
+}
+.dot[data-state=idle]{animation:none;background:var(--muted);box-shadow:none}
+.dot[data-state=bad]{animation:none;background:var(--danger);box-shadow:0 0 0 1px color-mix(in srgb,var(--danger) 28%,transparent)}
+@keyframes frizz-live-pulse{50%{opacity:.62;box-shadow:0 0 0 2px color-mix(in srgb,var(--accent) 14%,transparent)}}
+@media (prefers-reduced-motion:reduce){
+  .dot{animation:none;background:transparent;border:2px solid var(--accent);box-shadow:none}
+  .dot[data-state=idle]{border-color:var(--muted)}
+  .dot[data-state=bad]{border-color:var(--danger);background:transparent}
+}
+
+/* The app's \`.shimmer-text\`: a highlight sweeping muted text is how this product says "working", and
+   the probe line is the only thing on the page that is. */
+.probe[data-live=yes]{
+  color:transparent;
+  background:linear-gradient(90deg,var(--muted) 0%,var(--muted) 35%,var(--fg) 50%,var(--muted) 65%,var(--muted) 100%) 0 0/200% 100%;
+  -webkit-background-clip:text;background-clip:text;
+  animation:frizz-shimmer 2.2s linear infinite;
+}
+@keyframes frizz-shimmer{from{background-position:200% 0}to{background-position:-200% 0}}
+@media (prefers-reduced-motion:reduce){
+  .probe[data-live=yes]{animation:none;background:none;color:var(--muted)}
+}
+`.trim();
+var FONT_SCRIPT = `try{document.documentElement.dataset.font=localStorage.getItem("frizz-font")==="mono"?"mono":"sans"}catch{}`;
+var RECOVERY_SCRIPT = `
+(function(){
+  var target=document.body.dataset.target||"/"
+  var heading=document.getElementById("heading")
+  var detail=document.getElementById("detail")
+  var probe=document.getElementById("probe")
+  var log=document.getElementById("log")
+  var dot=document.getElementById("dot")
+  var restart=document.getElementById("restart")
+  var BUDGET=120000,MIN=600,MAX=4000,GROWTH=1.4
+  var delay=MIN,deadline=Date.now()+BUDGET,timer=0,stopped=false,busy=false,told=""
+
+  function say(text,live){probe.textContent=text;probe.setAttribute("data-live",live?"yes":"no")}
+  function halt(text,bad){stopped=true;clearTimeout(timer);dot.setAttribute("data-state",bad?"bad":"idle");say(text,false)}
+  function showLog(message){if(message){log.textContent=message;log.hidden=false}else{log.hidden=true}}
+  function resume(){stopped=false;busy=false;delay=MIN;deadline=Date.now()+BUDGET;dot.removeAttribute("data-state");clearTimeout(timer);timer=setTimeout(tick,0)}
+
+  // 503 is this proxy's own "no child". Every other answer \u2014 200, 404, even a 500 from the app \u2014 means
+  // something is listening again, and the reader's own URL is the right thing to ask.
+  function alive(){
+    return fetch(target,{method:"HEAD",cache:"no-store",credentials:"same-origin"})
+      .then(function(r){return r.status!==503}).catch(function(){return false})
+  }
+  function readStatus(){
+    return fetch("/_frizz/control/status",{cache:"no-store",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.ok?r.json():null})
+      .then(function(b){return b&&b.protocol===1?b:null}).catch(function(){return null})
+  }
+
+  // An unreachable launcher leaves the server-rendered copy alone: it is already right for the case
+  // that rendered it, and guessing over it would be worse than saying nothing.
+  function narrate(status){
+    if(!status||status.state===told)return
+    told=status.state
+    if(status.state==="failed"){
+      heading.textContent="Frizz did not restart"
+      // Not a second copy of the note below it \u2014 a lead-in to the log, which is the next thing down.
+      detail.textContent="The launcher could not bring the application server back, and reported this:"
+      showLog(status.message||"The launcher gave no reason.")
+      halt("",true)
+      return
+    }
+    showLog("")
+    if(status.state==="restarting"){
+      heading.textContent="Frizz is restarting"
+      detail.textContent="The application server is coming back up."
+    }
+  }
+
+  function tick(){
+    if(stopped||busy)return
+    // A hidden tab neither polls nor spends its budget; visibilitychange starts the loop again.
+    if(document.hidden)return
+    alive().then(function(up){
+      if(up){say("Frizz is back. Reloading.",true);location.replace(target);return}
+      return readStatus().then(function(status){
+        narrate(status)
+        if(stopped)return
+        if(Date.now()>deadline){halt("No answer after 2m. This page stopped checking.",false);return}
+        delay=Math.min(MAX,delay*GROWTH)
+        say("Waiting for Frizz",true)
+        timer=setTimeout(tick,delay)
+      })
+    })
+  }
+
+  document.addEventListener("visibilitychange",function(){
+    if(document.hidden||stopped||busy)return
+    resume()
+  })
+
+  restart.addEventListener("click",function(){
+    if(busy)return
+    busy=true;stopped=false;told="";clearTimeout(timer)
+    restart.disabled=true;restart.textContent="Restarting"
+    dot.removeAttribute("data-state");showLog("");say("Restarting Frizz",true)
+    fetch("/_frizz/control/restart",{method:"POST",headers:{"cache-control":"no-store"}})
+      .then(function(r){return r.json().catch(function(){return null}).then(function(b){return{ok:r.ok,status:r.status,body:b}})})
+      .catch(function(){return{ok:false,status:0,body:null}})
+      .then(function(r){
+        restart.disabled=false;restart.textContent="Restart Frizz";busy=false
+        if(!r.ok){
+          heading.textContent="Frizz did not restart"
+          detail.textContent="The launcher could not bring the application server back, and reported this:"
+          showLog((r.body&&r.body.message)||("The launcher refused the restart ("+(r.status||"no response")+")."))
+          halt("",true)
+          return
+        }
+        // Accepted. The probe, not this response, decides whether the child is actually back.
+        resume()
+      })
+  })
+
+  say("Waiting for Frizz",true)
+  tick()
+})()
+`.trim();
+function documentShell(options2) {
+  return `<!doctype html><html lang="en" data-font="sans"><head><meta charset="utf-8"><title>${options2.title}</title><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="color-scheme" content="dark"><meta name="theme-color" content="#0d0e10"><style>${options2.style ? `${BASE_STYLE}
+${options2.style}` : BASE_STYLE}</style>` + (options2.font ? `<script>${FONT_SCRIPT}</script>` : "") + `</head><body${options2.bodyAttributes ? ` ${options2.bodyAttributes}` : ""}><main>${options2.body}</main>` + (options2.script ? `<script>${options2.script}</script>` : "") + `</body></html>`;
+}
+var RECOVERY_COPY = {
+  starting: {
+    title: "Restarting | Frizz",
+    heading: "Frizz is restarting",
+    detail: "The application server is not listening yet. This page reloads as soon as it answers."
+  },
+  unreachable: {
+    title: "Not responding | Frizz",
+    heading: "Frizz is not responding",
+    detail: "The application server accepted this request and then dropped it. Restarting it usually clears this."
+  }
+};
+var THREADS_NOTE = "Threads already running are not affected. Each runs as its own detached process, and Frizz reattaches to it on restart.";
+function recoveryPage(url, variant = "starting") {
+  const copy = RECOVERY_COPY[variant];
+  const target2 = escapeHtml(retryTarget(url));
+  return documentShell({
+    title: copy.title,
+    style: RECOVERY_STYLE,
+    font: true,
+    bodyAttributes: `data-target="${target2}"`,
+    body: `<h1><span class="dot" id="dot" aria-hidden="true"></span><span id="heading">${copy.heading}</span></h1><p class="detail" id="detail">${copy.detail}</p><pre class="log" id="log" hidden></pre><p class="note">${THREADS_NOTE}</p><div class="actions"><a class="btn" href="${target2}">Try again</a><button class="btn" type="button" id="restart">Restart Frizz</button></div><p class="probe" id="probe" aria-live="polite"></p>`,
+    script: RECOVERY_SCRIPT
+  });
+}
+function unauthorizedPage(reason) {
+  const detail = reason === "already-used" ? "That link has already been used. Generate a fresh one." : reason === "expired" ? "That link expired. Generate a fresh one." : "This address needs a current access link.";
+  return documentShell({
+    title: "Unauthorized",
+    body: `<h1>Unauthorized</h1><p class="detail">${detail}</p>`
+  });
+}
+function unlistedHostPage(name) {
+  const shown = escapeHtml(name);
+  return documentShell({
+    title: "Not served by this name",
+    font: true,
+    body: `<h1>Not served by this name</h1><p class="detail">Frizz does not answer to <code>${shown}</code>. A name a browser has to resolve is how DNS rebinding makes another site's page count as this board, so an exposed board accepts only its own hostname and the names its operator lists.</p><p class="note">Open the board by its IP address, or relaunch with <code>--allowed-host ${shown}</code> (or <code>FRIZZ_ALLOWED_HOSTS=${shown}</code>) to accept this one.</p>`
+  });
+}
+
+// packages/server/src/restart-supervisor.ts
 init_src();
 var SUPERVISOR_CONTROL_PREFIX = "/_frizz/control";
 var SUPERVISOR_RESTART_PATH = `${SUPERVISOR_CONTROL_PREFIX}/restart`;
@@ -22126,10 +22391,6 @@ function responseJson(res, status, value) {
   res.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" });
   res.end(JSON.stringify(value));
 }
-function recoveryPage(url, detail = "Frizz is restarting or unavailable.") {
-  const escaped = url.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll('"', "&quot;");
-  return `<!doctype html><meta charset="utf-8"><title>Frizz recovering</title><meta name="viewport" content="width=device-width,initial-scale=1"><style>body{margin:3rem;font:16px system-ui;color:#e7e7e7;background:#171717}main{max-width:36rem;padding:1.5rem;border:1px solid #444;border-radius:.75rem;background:#222}a{color:#f7d64a}</style><main><h1>Frizz is recovering</h1><p>${detail}</p><p><a href="${escaped}">Try this page again</a></p></main>`;
-}
 function proxyHeaders(req, childPort, vouchSameOrigin = false) {
   const headers = { ...req.headers };
   headers.host = `127.0.0.1:${childPort}`;
@@ -22151,14 +22412,6 @@ function readCookie(header, name) {
   }
   return void 0;
 }
-function unauthorizedPage(reason) {
-  const detail = reason === "already-used" ? "That link has already been used. Generate a fresh one." : reason === "expired" ? "That link expired. Generate a fresh one." : "This address needs a current access link.";
-  return `<!doctype html><meta charset="utf-8"><title>Unauthorized</title><meta name="viewport" content="width=device-width,initial-scale=1"><style>body{margin:3rem;font:16px system-ui;color:#e7e7e7;background:#171717}main{max-width:30rem;padding:1.5rem;border:1px solid #444;border-radius:.75rem;background:#222}</style><main><h1>Unauthorized</h1>${detail ? `<p>${detail}</p>` : ""}</main>`;
-}
-function unlistedHostPage(name) {
-  const shown = name.replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
-  return `<!doctype html><meta charset="utf-8"><title>Not served by this name</title><meta name="viewport" content="width=device-width,initial-scale=1"><style>body{margin:3rem;font:16px system-ui;color:#e7e7e7;background:#171717}main{max-width:34rem;padding:1.5rem;border:1px solid #444;border-radius:.75rem;background:#222}code{font:14px ui-monospace,monospace;padding:.1em .3em;border-radius:.3em;background:#333;white-space:nowrap}</style><main><h1>Not served by this name</h1><p>Frizz does not answer to <code>${shown}</code>. A name a browser has to resolve is how DNS rebinding makes another site's page count as this board, so an exposed board accepts only its own hostname and the names its operator lists.</p><p>Open the board by its IP address, or relaunch with <code>--allowed-host ${shown}</code> (or <code>FRIZZ_ALLOWED_HOSTS=${shown}</code>) to accept this one.</p></main>`;
-}
 function isControlRequest(req) {
   const url = new URL(req.url ?? "/", "http://frizz.invalid");
   return url.pathname === SUPERVISOR_RESTART_PATH || url.pathname === SUPERVISOR_UPDATE_RESTART_PATH || url.pathname === SUPERVISOR_STATUS_PATH || url.pathname === SUPERVISOR_ACCESS_CODE_PATH || url.pathname === SUPERVISOR_SESSIONS_PATH;
@@ -22572,7 +22825,7 @@ var RestartSupervisorProxy = class {
     upstream.once("error", () => {
       if (res.headersSent) return res.destroy();
       res.writeHead(503, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
-      res.end(recoveryPage(req.url ?? "/", "The Frizz application server is unavailable. Use Restart Frizz to recover it."));
+      res.end(recoveryPage(req.url ?? "/", "unreachable"));
     });
     req.pipe(upstream);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frizz",
-  "version": "0.10.1",
+  "version": "0.12.0",
   "private": false,
   "description": "A local web UI for running many coding agents at once",
   "keywords": [
@@ -37,7 +37,7 @@
     "frizz-dev:check": "nub scripts/install-global-cli.mjs --check",
     "frizz-dev:uninstall": "nub scripts/install-global-cli.mjs --uninstall",
     "install:global": "nub scripts/install-global-cli.mjs",
-    "typecheck": "tsc -b packages/shared packages/rpc packages/server packages/registrar packages/relay . && pnpm --filter @frizz/web typecheck",
+    "typecheck": "tsc -b packages/shared packages/rpc packages/server packages/registrar packages/relay . packages/web",
     "test": "nub scripts/run-tests.mjs",
     "test:e2e": "nub scripts/e2e-web.mjs",
     "prepack": "node ./scripts/prepare-package.mjs && node ./scripts/build-package.mjs && node ./scripts/publish-manifest.mjs --strip",

package/runtime/cc-worker/bin/frizz-mcp.mjs

@@ -1040,9 +1040,13 @@ async function callRpc(procedure, body) {
 function threadSlug() {
   const slug = process.env.FRIZZ_THREAD_SLUG || process.env.FRIZZ_THREAD
   if (!slug) {
+    // Ten tools resolve their caller through here, so the message must not name one of them. It said
+    // "so it cannot arm a goal for it" for every single one — which read as a bug in `goal` no matter
+    // which tool the worker had actually called, and sent at least one worker off debugging the wrong
+    // thing after `title` failed on a codex thread.
     throw new Error(
       "this frizz MCP server was not told which thread it belongs to (no FRIZZ_THREAD_SLUG), so it cannot " +
-      "arm a goal for it. This is a frizz bug — report it rather than working around it.",
+      "act on the caller's own thread. This is a frizz bug — report it rather than working around it.",
     )
   }
   return slug