frizz 0.12.10 → 0.12.12

package/dist/claude-agent-broker.js

@@ -2,7 +2,7 @@ import { createRequire as __frizzCreateRequire } from "node:module"; const requi
 
 // packages/server/src/backend/claude-agent-broker.ts
 import net2 from "node:net";
-import { readFileSync as readFileSync4, realpathSync as realpathSync2, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
+import { readFileSync as readFileSync5, realpathSync as realpathSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { fileURLToPath } from "node:url";
 
@@ -35355,13 +35355,50 @@ function objectValue(value, label) {
   return value;
 }
 
+// packages/server/src/runtime-lease.ts
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync2, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
+import { dirname as dirname4, join as join5 } from "node:path";
+var PROVISIONED_MARKER = "provisioned.json";
+var LEASES_DIR = ".leases";
+var MAX_ASCENT = 6;
+function runtimeVersionDir(bin) {
+  let dir = dirname4(bin);
+  for (let step = 0; step < MAX_ASCENT; step++) {
+    if (existsSync2(join5(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname4(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+  return void 0;
+}
+function leaseRuntime(bin, role) {
+  const versionDir = runtimeVersionDir(bin);
+  if (!versionDir) return () => {
+  };
+  const path = join5(versionDir, LEASES_DIR, `${process.pid}.json`);
+  try {
+    mkdirSync2(dirname4(path), { recursive: true });
+    const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
+    writeFileSync(path, JSON.stringify(lease));
+  } catch {
+    return () => {
+    };
+  }
+  return () => {
+    try {
+      unlinkSync2(path);
+    } catch {
+    }
+  };
+}
+
 // packages/server/src/backend/project-mcp-servers.ts
-import { readFileSync as readFileSync2 } from "node:fs";
+import { readFileSync as readFileSync3 } from "node:fs";
 import { homedir } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 function readJsonObject(path) {
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
   } catch {
     return void 0;
@@ -35455,15 +35492,15 @@ function projectMcpServers(cwd, options = {}) {
   const env = options.env ?? process.env;
   const home = options.home ?? homedir();
   const configOverride = options.claudeConfigDir ?? (env.CLAUDE_CONFIG_DIR?.trim() ? env.CLAUDE_CONFIG_DIR.trim() : void 0);
-  const accountFile = configOverride ? join5(configOverride, ".claude.json") : join5(home, ".claude.json");
-  const userSettingsFile = join5(configOverride ?? join5(home, ".claude"), "settings.json");
+  const accountFile = configOverride ? join6(configOverride, ".claude.json") : join6(home, ".claude.json");
+  const userSettingsFile = join6(configOverride ?? join6(home, ".claude"), "settings.json");
   const account = readJsonObject(accountFile);
   const out = userScopeRemoteServers(account, cwd, env);
-  const declared = objectField(readJsonObject(join5(cwd, ".mcp.json")), "mcpServers");
+  const declared = objectField(readJsonObject(join6(cwd, ".mcp.json")), "mcpServers");
   if (!declared) return out;
   const approval = collectApproval([
-    readJsonObject(join5(cwd, ".claude", "settings.json")),
-    readJsonObject(join5(cwd, ".claude", "settings.local.json")),
+    readJsonObject(join6(cwd, ".claude", "settings.json")),
+    readJsonObject(join6(cwd, ".claude", "settings.local.json")),
     readJsonObject(userSettingsFile),
     objectField(objectField(account, "projects"), cwd)
   ]);
@@ -35494,12 +35531,12 @@ function claudeCompactionWindowOf(env) {
 }
 
 // packages/server/src/backend/claude-broker-diagnostics.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2 } from "node:fs";
-import { join as join6 } from "node:path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync as renameSync2, statSync as statSync2 } from "node:fs";
+import { join as join7 } from "node:path";
 var MAX_BYTES = 4 * 1024 * 1024;
 function appendRecord(path, record) {
   try {
-    mkdirSync2(join6(path, ".."), { recursive: true });
+    mkdirSync3(join7(path, ".."), { recursive: true });
     try {
       if (statSync2(path).size > MAX_BYTES) renameSync2(path, `${path}.1`);
     } catch {
@@ -35560,6 +35597,7 @@ function runClaudeBroker(config) {
   };
   const writeDiagnostic = config.diagnosticLogPath ? createClaudeBrokerDiagnosticWriter(config.diagnosticLogPath, { daemonPid: process.pid, generation }) : void 0;
   const writeExit = config.diagnosticLogPath ? createClaudeBrokerExitWriter(config.diagnosticLogPath, { daemonPid: process.pid, generation }) : void 0;
+  const releaseRuntimeLease = leaseRuntime(config.executablePath, "claude-broker");
   const factory = createClaudeQueryFactory({ enabled: true, executablePath: config.executablePath });
   const env = { ...inheritWorkerEnvironment(config.env), ...config.workerEnv ?? {} };
   const handle = factory.start({
@@ -35740,7 +35778,7 @@ function runClaudeBroker(config) {
   const recordOwner = () => {
     if (!config.recordPath) return null;
     try {
-      return JSON.parse(readFileSync4(config.recordPath, "utf8")).daemonPid;
+      return JSON.parse(readFileSync5(config.recordPath, "utf8")).daemonPid;
     } catch {
       return null;
     }
@@ -35750,18 +35788,19 @@ function runClaudeBroker(config) {
     if (closed) return;
     closed = true;
     writeExit?.(reason, detail);
+    releaseRuntimeLease();
     clearTimeout(idleTimer);
     clearInterval(reach);
     const owner = recordOwner();
     if (config.recordPath && owner === process.pid) {
       try {
-        unlinkSync2(config.recordPath);
+        unlinkSync3(config.recordPath);
       } catch {
       }
     }
     if (!(published && owner !== null && owner !== process.pid) && published && process.platform !== "win32") {
       try {
-        unlinkSync2(config.socketPath);
+        unlinkSync3(config.socketPath);
       } catch {
       }
     }
@@ -35800,7 +35839,7 @@ function runClaudeBroker(config) {
     void shutdown(1, "socket-listen-failed", message);
   });
   try {
-    unlinkSync2(config.socketPath);
+    unlinkSync3(config.socketPath);
   } catch {
   }
   server.listen(config.socketPath, () => {
@@ -35808,7 +35847,7 @@ function runClaudeBroker(config) {
     if (config.recordPath) {
       const record = { daemonPid: process.pid, socketPath: config.socketPath, sessionId: config.sessionId, generation, createdAt: (/* @__PURE__ */ new Date()).toISOString(), capabilities: BROKER_CAPABILITIES, compactionWindow: claudeCompactionWindowOf(config.workerEnv) };
       try {
-        writeFileSync(config.recordPath, JSON.stringify(record), { mode: 384 });
+        writeFileSync2(config.recordPath, JSON.stringify(record), { mode: 384 });
       } catch {
       }
     }

package/dist/codex-app-server-daemon.js

@@ -3,8 +3,8 @@ import { createRequire as __frizzCreateRequire } from "node:module"; const requi
 // packages/server/src/backend/codex-app-server-daemon.ts
 import { spawn } from "node:child_process";
 import { createServer } from "node:net";
-import { existsSync, readFileSync, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname2 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 
 // packages/server/src/backend/stale-socket-sweep.ts
@@ -70,6 +70,43 @@ function sweepStaleSockets(options, deps = {}) {
   });
 }
 
+// packages/server/src/runtime-lease.ts
+import { existsSync, mkdirSync, readdirSync as readdirSync2, readFileSync, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
+import { dirname, join as join2 } from "node:path";
+var PROVISIONED_MARKER = "provisioned.json";
+var LEASES_DIR = ".leases";
+var MAX_ASCENT = 6;
+function runtimeVersionDir(bin) {
+  let dir = dirname(bin);
+  for (let step = 0; step < MAX_ASCENT; step++) {
+    if (existsSync(join2(dir, PROVISIONED_MARKER))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+  return void 0;
+}
+function leaseRuntime(bin, role) {
+  const versionDir = runtimeVersionDir(bin);
+  if (!versionDir) return () => {
+  };
+  const path = join2(versionDir, LEASES_DIR, `${process.pid}.json`);
+  try {
+    mkdirSync(dirname(path), { recursive: true });
+    const lease = { pid: process.pid, role, bin, at: (/* @__PURE__ */ new Date()).toISOString() };
+    writeFileSync(path, JSON.stringify(lease));
+  } catch {
+    return () => {
+    };
+  }
+  return () => {
+    try {
+      unlinkSync2(path);
+    } catch {
+    }
+  };
+}
+
 // packages/server/src/backend/codex-app-server-daemon.ts
 var MAX_QUEUED_LINES = 2e4;
 var MAX_QUEUED_BYTES = 64 * 1024 * 1024;
@@ -118,10 +155,18 @@ function lineReader(onLine, onOverflow) {
 }
 function main() {
   const config = readConfig();
+  const releaseRuntimeLease = leaseRuntime(config.codexBin, "codex-app-server");
   const child = spawn(config.codexBin, config.appServerArgs ?? ["app-server", "--stdio"], {
     cwd: config.cwd,
     env: config.env,
-    stdio: ["pipe", "pipe", "pipe"]
+    stdio: ["pipe", "pipe", "pipe"],
+    // This daemon is forked `detached`, which on Windows is DETACHED_PROCESS: it owns NO console. A
+    // console-less parent starting a console-subsystem exe (codex.exe) without CREATE_NO_WINDOW gets
+    // a fresh, VISIBLE console allocated for it — a black `codex.exe` window on every Codex dispatch,
+    // and closing it killed the app-server and every Codex thread in the project (Windows audit
+    // 2026-09-11, finding 4; the same mechanism PR #32 found for the update successor). The Claude
+    // side was safe only because the SDK passes windowsHide in its own spawn.
+    windowsHide: true
   });
   let client = null;
   let queuedLines = [];
@@ -131,7 +176,7 @@ function main() {
   let published = false;
   const recordOwner = () => {
     try {
-      const value = JSON.parse(readFileSync(config.recordPath, "utf8"));
+      const value = JSON.parse(readFileSync2(config.recordPath, "utf8"));
       return typeof value.daemonPid === "number" ? value.daemonPid : null;
     } catch {
       return null;
@@ -145,21 +190,21 @@ function main() {
     const owner = recordOwner();
     if (owner === process.pid) {
       try {
-        unlinkSync2(config.recordPath);
+        unlinkSync3(config.recordPath);
       } catch {
       }
     }
     if (published && owner !== null && owner !== process.pid) return;
     if (published && process.platform !== "win32") {
       try {
-        unlinkSync2(config.socketPath);
+        unlinkSync3(config.socketPath);
       } catch {
       }
     }
   };
   const writeExitBreadcrumb = (reason) => {
     try {
-      writeFileSync(`${config.recordPath}.exit`, JSON.stringify({
+      writeFileSync2(`${config.recordPath}.exit`, JSON.stringify({
         projectId: config.projectId,
         generation: config.generation,
         daemonPid: process.pid,
@@ -172,6 +217,7 @@ function main() {
   };
   const die = (code, reason) => {
     writeExitBreadcrumb(reason);
+    releaseRuntimeLease();
     cleanup();
     process.exit(code);
   };
@@ -279,7 +325,7 @@ function main() {
     toServer(message);
   };
   const writeRecord = () => {
-    writeFileSync(config.recordPath, JSON.stringify({
+    writeFileSync2(config.recordPath, JSON.stringify({
       projectId: config.projectId,
       generation: config.generation,
       daemonPid: process.pid,
@@ -323,11 +369,11 @@ function main() {
     sock.on("close", drop);
     sock.on("error", drop);
   });
-  const sweepOwnFamily = () => sweepStaleSockets({ dir: dirname(config.socketPath), prefix: "frizz-codex-", keep: [config.socketPath] });
+  const sweepOwnFamily = () => sweepStaleSockets({ dir: dirname2(config.socketPath), prefix: "frizz-codex-", keep: [config.socketPath] });
   const startListening = () => {
-    if (process.platform !== "win32" && existsSync(config.socketPath)) {
+    if (process.platform !== "win32" && existsSync2(config.socketPath)) {
       try {
-        unlinkSync2(config.socketPath);
+        unlinkSync3(config.socketPath);
       } catch {
       }
     }