frizz 0.12.9 → 0.12.11

package/dist/frizz.js

@@ -12469,7 +12469,7 @@ var init_shell_writes = __esm({
 function fallbackPort(base) {
   return base + 1e4;
 }
-var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var import_yaml, ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_TEXT_EXTENSIONS, ATTACHMENT_OFFICE_EXTENSIONS, ATTACHMENT_DATA_EXTENSIONS, ATTACHMENT_ARCHIVE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_FOR_MAX_MS, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, OwnWatchKind, AddOwnWatchInput, OwnWatchView, AddOwnWatchResult, DropOwnWatchInput, DropOwnWatchResult, AskQuestionKind, AskedOptionSchema, AskedQuestionSchema, AskInput, RegisteredQuestionView, AskResult, UnaskInput, UnaskResult, QuestionAnswerSchema, AnswerQuestionsInput, AnswerQuestionsResult, DismissQuestionsInput, DismissQuestionsResult, MarkOwnDoneInput, MarkOwnDoneResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, LimitWindow, LimitPause, ProviderError, ThreadLinkView, UpsertOwnLinkInput, UpsertOwnLinkResult, DropOwnLinkInput, DropOwnLinkResult, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, AdoptSessionInput, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadPinnedInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetOwnThreadTitleInput, SetOwnThreadTitleResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, ThreadSkillSource, ThreadSkill, ThreadSkillsInput, ThreadSkillsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, HUMAN_GAP_FLOOR_MS, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_GATED, PR_WATCH_STATE, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, EditedFile, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketFilePath, SocketTranscriptClientMsg, SocketFileClientMsg, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -12593,7 +12593,14 @@ var init_src = __esm({
       slug: external_exports.string(),
       displayName: external_exports.string(),
       defaultEffort: external_exports.string(),
-      efforts: external_exports.array(external_exports.string())
+      efforts: external_exports.array(external_exports.string()),
+      // The model's stock context window and the largest one it accepts, in tokens, straight from the
+      // cache's `context_window` / `max_context_window` (272K / 872K on GPT-5.6, 128K / 128K on Spark).
+      // The Settings "Context window" presets are built from these so the drawer names the numbers codex
+      // will actually run at (maintainer 2026-09-11: "reflect the actual numbers"). Optional: a cache from
+      // before the fields existed, or the degraded fallback, simply carries neither.
+      contextWindow: external_exports.number().int().positive().optional(),
+      maxContextWindow: external_exports.number().int().positive().optional()
     });
     ThreadProfileOption = external_exports.object({
       model: external_exports.string().min(1),
@@ -13187,6 +13194,20 @@ var init_src = __esm({
       retrying: external_exports.boolean().optional(),
       at: external_exports.string().optional()
     });
+    ThreadLinkView = external_exports.object({
+      id: external_exports.string(),
+      kind: external_exports.enum(["link", "file"]),
+      label: external_exports.string(),
+      target: external_exports.string()
+    }).strict();
+    UpsertOwnLinkInput = external_exports.object({
+      slug: ThreadSlug,
+      label: external_exports.string().trim().min(1).max(240).regex(/^[^\x00-\x1f\x7f]+$/),
+      target: external_exports.string().trim().min(1).max(8192).regex(/^[^\x00-\x1f\x7f]+$/)
+    }).strict();
+    UpsertOwnLinkResult = external_exports.object({ link: ThreadLinkView }).strict();
+    DropOwnLinkInput = external_exports.object({ slug: ThreadSlug, id: external_exports.string().min(1) }).strict();
+    DropOwnLinkResult = external_exports.object({ dropped: external_exports.boolean() }).strict();
     ThreadView = external_exports.object({
       id: ThreadSlug,
       // slug; filename is <slug>.md
@@ -13255,6 +13276,8 @@ var init_src = __esm({
       // Live background SHELLS the worker launched (tailer-derived). Same default-[] discipline. Rendered
       // in the anchored background-ops strip alongside sub-agents; ids make current rows drillable.
       bgShells: external_exports.array(BgShellView).default([]),
+      // Optional for snapshots from a server that predates link registration.
+      links: external_exports.array(ThreadLinkView).optional(),
       // The thread's ARMED WATCHERS — registry-derived, not folded from the transcript, which is what makes
       // them survive the worker saying one more sentence. Same default-[] discipline as the two above.
       //
@@ -13573,6 +13596,15 @@ var init_src = __esm({
       // writes were 51% of a day's spend while the entries were invalidated every 15–30 minutes anyway
       // (see claudePromptCacheEnv). Optional so an old blob parses; defaultSettings pins "auto".
       promptCacheTtl: external_exports.enum(["auto", "5m", "1h"]).optional(),
+      // The context window a NEW Codex thread runs with, in tokens. Codex's own default is the model's
+      // stock window (272K on GPT-5.6), but the catalogue also carries a larger `max_context_window` (872K
+      // on GPT-5.6-sol/terra/luna and GPT-6-astra, measured 2026-09-11 in ~/.codex/models_cache.json) that
+      // a thread only reaches when asked. Reaches codex as the `model_context_window` config override on
+      // `thread/start` and every cold `thread/resume` (see codexContextWindowConfig); codex clamps it to
+      // the model's maximum, so a value above it is harmless, and it moves the auto-compact threshold with
+      // it (codex compacts at 90% of the resolved window). Unset ⇒ nothing is sent and the model's stock
+      // window applies. Optional so an old blob parses; defaultSettings leaves it unset.
+      codexContextWindow: external_exports.number().int().positive().optional(),
       // The GitHub batch-dispatch prompt template (the picker's per-item worker prompt). Optional: when
       // unset OR blank the server falls back to its exported DEFAULT_GITHUB_PROMPT. Substitution tokens
       // the server fills: {repo} {n} {title} {url} {labels} {body}. The leading `THREAD: <slug>` tag is
@@ -13792,6 +13824,7 @@ var init_src = __esm({
     }).strict();
     OwnThreadActivityResult = external_exports.object({
       activity: external_exports.array(ThreadActivityItem),
+      links: external_exports.array(ThreadLinkView).optional(),
       /** Every question still owed an answer. NOT a `ThreadActivityItem` and deliberately its own list: a
        *  question is not running work, it waits on a PERSON, and there is no `questions:` key in the awaiting
        *  fence for it to be written into. Until 2026-08-28 a worker could read its open questions back only
@@ -24557,6 +24590,11 @@ function sliceVisible(line, limit) {
   }
   return `${out}${ANSI.reset}`;
 }
+function noticeOnlyReadout(options2 = {}) {
+  const readout2 = new Readout(options2);
+  readout2.stop();
+  return readout2;
+}
 function renderSupervisorActivity(readout2, event) {
   if (!readout2) return;
   switch (event.kind) {
@@ -25802,7 +25840,10 @@ async function startDevSupervisor(opts) {
 
 // src/production-update.ts
 import { execFile as execFile4, spawn as spawn3 } from "node:child_process";
+import { existsSync as existsSync7 } from "node:fs";
+import { isAbsolute as isAbsolute5 } from "node:path";
 var PRODUCTION_REEXEC_FLAG = "--_frizz-production-reexec";
+var PRODUCTION_PRINT_LAUNCHER_FLAG = "--_frizz-print-launcher";
 function compareReleaseVersions(a, b) {
   const parse2 = (value) => {
     const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u.exec(value);
@@ -25829,18 +25870,45 @@ async function planRegistryUpdate(packageName, currentVersion, adapter) {
   if (comparison >= 0) return null;
   return { packageName, currentVersion, latestVersion, packageSpec: `${packageName}@${latestVersion}` };
 }
-function handoffToRegistrySuccessor(plan, request, adapter) {
-  const child = adapter.spawnNpmExec({
+function successorArgs(port) {
+  return [PRODUCTION_REEXEC_FLAG, "--port", String(port)];
+}
+async function resolveRegistrySuccessor(plan, request, adapter) {
+  const result = await adapter.npmExec({
     packageSpec: plan.packageSpec,
     // The published bin name tracks the package name (frizz). Never hardcode a stale bin here or
     // a renamed release would resolve the new package but invoke a bin that no longer exists.
     bin: plan.packageName,
-    args: [PRODUCTION_REEXEC_FLAG, "--port", String(request.port), request.projectDir],
+    args: [PRODUCTION_PRINT_LAUNCHER_FLAG],
+    cwd: request.cwd,
+    env: request.env
+  });
+  if (result.code !== 0) {
+    const how = result.signal ? `signal ${result.signal}` : `exit ${result.code}`;
+    const tail = result.stderr.trim().split("\n").slice(-6).join("\n").trim();
+    throw new Error(`npm exec ${plan.packageSpec} failed (${how})${tail ? `: ${tail}` : ""}`);
+  }
+  const entry = result.stdout.trim().split("\n").map((line) => line.trim()).filter(Boolean).at(-1) ?? "";
+  if (!isAbsolute5(entry) || !existsSync7(entry))
+    throw new Error(`${plan.packageSpec} did not report its launcher entry (got ${JSON.stringify(entry)})`);
+  return { plan, entry };
+}
+function reexecIntoRegistrySuccessor(successor, request, execve = process.execve.bind(process)) {
+  return execve(process.execPath, [process.execPath, successor.entry, ...successorArgs(request.port)], {
+    ...request.env,
+    FRIZZ_REGISTRY_PACKAGE: successor.plan.packageName,
+    FRIZZ_REGISTRY_VERSION: successor.plan.latestVersion
+  });
+}
+function handoffToRegistrySuccessor(successor, request, adapter) {
+  const child = adapter.spawnDetached({
+    entry: successor.entry,
+    args: successorArgs(request.port),
     cwd: request.cwd,
     env: {
       ...request.env,
-      FRIZZ_REGISTRY_PACKAGE: plan.packageName,
-      FRIZZ_REGISTRY_VERSION: plan.latestVersion
+      FRIZZ_REGISTRY_PACKAGE: successor.plan.packageName,
+      FRIZZ_REGISTRY_VERSION: successor.plan.latestVersion
     }
   });
   child.once("error", () => {
@@ -25861,13 +25929,28 @@ var npmRegistryReleaseAdapter = {
       });
     });
   },
-  spawnNpmExec({ packageSpec, bin, args: args2, cwd, env }) {
-    return spawn3("npm", ["exec", "--yes", `--package=${packageSpec}`, "--", bin, ...args2], {
-      cwd,
-      env,
-      detached: true,
-      stdio: "ignore"
+  npmExec({ packageSpec, bin, args: args2, cwd, env }) {
+    return new Promise((settle) => {
+      const child = spawn3("npm", ["exec", "--yes", `--package=${packageSpec}`, "--", bin, ...args2], {
+        cwd,
+        env,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      let stdout = "";
+      let stderr = "";
+      child.stdout.setEncoding("utf8").on("data", (chunk) => {
+        stdout += chunk;
+      });
+      child.stderr.setEncoding("utf8").on("data", (chunk) => {
+        stderr += chunk;
+      });
+      child.once("error", (error) => settle({ code: null, signal: null, stdout, stderr: `${stderr}
+${error.message}` }));
+      child.once("close", (code, signal) => settle({ code, signal, stdout, stderr }));
     });
+  },
+  spawnDetached({ entry, args: args2, cwd, env }) {
+    return spawn3(process.execPath, [entry, ...args2], { cwd, env, detached: true, stdio: "ignore" });
   }
 };
 
@@ -25955,6 +26038,10 @@ function resolvePackageVersion() {
 var PACKAGE_VERSION = resolvePackageVersion();
 var rawArgs = process.argv.slice(2);
 var reexec = rawArgs.includes(PRODUCTION_REEXEC_FLAG);
+if (rawArgs.includes(PRODUCTION_PRINT_LAUNCHER_FLAG)) {
+  console.log(fileURLToPath2(import.meta.url));
+  process.exit(0);
+}
 var args = rawArgs.filter((arg) => arg !== PRODUCTION_REEXEC_FLAG);
 var fail = (error) => {
   console.error(`frizz: ${error instanceof Error ? error.message : error}`);
@@ -26064,6 +26151,7 @@ var logger = setAmbientLogger(
   process.env.FRIZZ_LOG_FILE ? createLogger({ file: process.env.FRIZZ_LOG_FILE, owner: false }) : createLogger({ file: runLogPath(workspace.stateDir) })
 );
 var readout = reexec || process.env.FRIZZ_PRODUCTION_SUPERVISOR === "1" ? void 0 : new Readout({ debug: options.debug, version: PACKAGE_VERSION });
+var activityReadout = readout ?? (reexec && process.stdout.isTTY ? noticeOnlyReadout({ version: PACKAGE_VERSION }) : void 0);
 attachTerminalMirror(logger, options.debug || process.env.FRIZZ_DEBUG === "1");
 readout?.plan([
   { key: "server", label: "Server" },
@@ -26182,7 +26270,7 @@ async function runSupervisor(port, token) {
   const scriptsDir = join15(runtimeDir, "board");
   const workerPluginDir = join15(runtimeDir, "cc-worker");
   const childEntry = fileURLToPath2(new URL("./dev-child.js", import.meta.url));
-  let plannedUpdate;
+  let plannedSuccessor;
   let updateAvailable = true;
   let updateVersion;
   const refreshUpdateAvailable = async () => {
@@ -26221,7 +26309,7 @@ async function runSupervisor(port, token) {
     // The terminal that owns the board says so when the board goes down and comes back. Everything
     // here is triggered from a browser tab or by a crash, so without this the foreground process is
     // the last place to learn what happened to it.
-    onActivity: (event) => renderSupervisorActivity(readout, event),
+    onActivity: (event) => renderSupervisorActivity(activityReadout, event),
     updateRestart: async () => {
       try {
         const plan = await planRegistryUpdate(PACKAGE_NAME, PACKAGE_VERSION, npmRegistryReleaseAdapter);
@@ -26230,17 +26318,25 @@ async function runSupervisor(port, token) {
           updateVersion = void 0;
           return { state: "failed", message: `Frizz ${PACKAGE_VERSION} is already current` };
         }
-        plannedUpdate = plan;
         updateVersion = plan.latestVersion;
-        return { state: "ready", message: `Frizz ${plan.latestVersion} will start in a new npm execution cache` };
+        plannedSuccessor = await resolveRegistrySuccessor(plan, { cwd: workspace.root, env }, npmRegistryReleaseAdapter);
+        return { state: "ready", message: `Frizz ${plan.latestVersion} is installed in its own npm execution cache` };
       } catch (error) {
         return { state: "failed", message: error instanceof Error ? error.message : String(error) };
       }
     },
     durableReexec: async () => {
-      const plan = plannedUpdate ?? await planRegistryUpdate(PACKAGE_NAME, PACKAGE_VERSION, npmRegistryReleaseAdapter);
-      if (!plan) throw new Error("Frizz is already current");
-      handoffToRegistrySuccessor(plan, { port, projectDir: workspace.root, cwd: workspace.root, env }, npmRegistryReleaseAdapter);
+      const successor = plannedSuccessor;
+      if (!successor) throw new Error("no update was prepared");
+      const { plan } = successor;
+      const successorEnv = { ...env, FRIZZ_REGISTRY_PACKAGE: plan.packageName, FRIZZ_REGISTRY_VERSION: plan.latestVersion };
+      if (typeof process.execve === "function") {
+        activityReadout?.notice("progress", "Updating", `reloading this launcher in place on Frizz ${plan.latestVersion}`);
+        paneHost?.dispose();
+        remote?.stop();
+        reexecIntoRegistrySuccessor(successor, { port, env: successorEnv });
+      }
+      handoffToRegistrySuccessor(successor, { port, cwd: workspace.root, env: successorEnv }, npmRegistryReleaseAdapter);
       readout?.notice("done", "Updated", `Frizz ${plan.latestVersion} is taking over on port ${port}`);
       readout?.note(`
   Frizz ${plan.latestVersion} now runs in the background \u2014 ctrl-c here no longer reaches it. Stop it with ${PACKAGE_NAME} --stop.
@@ -26276,7 +26372,7 @@ async function runSupervisor(port, token) {
     // Acknowledge the first signal on the spot; the drain that follows is bounded but not instant.
     onStop: () => {
       logger.info("launcher", "stop signal received; draining the control plane");
-      readout?.notice("progress", "Stopping", "draining the control plane \u2014 press ctrl-c again to force");
+      activityReadout?.notice("progress", "Stopping", "draining the control plane \u2014 press ctrl-c again to force");
     },
     exit: (code) => {
       logger.info("launcher", `stopped with code ${code}`);
@@ -26302,6 +26398,7 @@ async function runSupervisor(port, token) {
   process.on("SIGHUP", stop);
   void supervisor.stopRequested.then(stop);
   await supervisor.firstBoot;
+  if (reexec) activityReadout?.notice("done", "Updated", `Frizz ${PACKAGE_VERSION} is serving on port ${port} \xB7 ctrl-c to stop`);
   return await new Promise(() => {
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frizz",
-  "version": "0.12.9",
+  "version": "0.12.11",
   "private": false,
   "description": "A local web UI for running many coding agents at once",
   "keywords": [

package/runtime/cc-worker/bin/frizz-mcp.mjs

@@ -672,7 +672,7 @@ const ACTIVITY = {
   description:
     "EVERYTHING YOU CURRENTLY HAVE OUT, with the id each one is named by — your background shells, your " +
     "sub-agents, your armed timers, the pull requests you registered, the `wch_…` of every watch holding " +
-    "one of them, and every QUESTION still owed an answer.\n\n" +
+    "one of them, every QUESTION still owed an answer, and saved links/files with their lnk_ ids.\n\n" +
     "WHY YOU NEED IT: an ```awaiting fence names what you are waiting on BY ID, and frizz checks every " +
     "one against what is actually live. A name that matches nothing is not a park — you are bumped and " +
     "your thread queues. The same goes for the ids `unwatch` and `unask` take, and for the id you put in " +
@@ -684,7 +684,36 @@ const ACTIVITY = {
   inputSchema: { type: "object", properties: {}, required: [] },
 }
 
-const TOOLS = [SPAWN_THREAD, GOAL, TIMER, WATCH_PR, WATCH, UNWATCH, ASK, UNASK, DONE, TITLE, ACTIVITY]
+const LINK = {
+  name: "link",
+  description: "Register a labeled URL or local file underneath this thread's prompt, alongside agents and shells. " +
+    "Use for dev servers, working documents, reports, and downloads the human will need again. " +
+    "The same label updates its existing row without duplicating or reordering it. " +
+    "HTTP(S) destinations render as Link; local files render as File and use Frizz's existing file reader/opener. " +
+    "Files must exist. Relative paths resolve from the project root; use absolute paths for worktrees. " +
+    "Registration survives rests and restarts, but does not start, monitor, or verify a server. " +
+    "It never blocks done or parks the thread. Read registrations with activity; remove one with unlink.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      label: { type: "string", description: "Short destination label, such as Open dev server or Working plan. Reuse it to update that row." },
+      target: { type: "string", description: "An HTTP(S) URL, file:// URL, or existing local file path. No credentials in URLs." },
+    },
+    required: ["label", "target"],
+    additionalProperties: false,
+  },
+}
+const UNLINK = {
+  name: "unlink",
+  description: "Remove one saved link/file from this thread by its lnk_ id (returned by link or listed by activity). " +
+    "Only removes the registration: it never deletes a file or stops a server.",
+  inputSchema: {
+    type: "object", properties: { id: { type: "string", description: "The lnk_ id of a registration on this thread." } },
+    required: ["id"], additionalProperties: false,
+  },
+}
+
+const TOOLS = [SPAWN_THREAD, GOAL, TIMER, WATCH_PR, WATCH, UNWATCH, ASK, UNASK, DONE, TITLE, ACTIVITY, LINK, UNLINK]
 
 /** @type {Record<string, (args: Record<string, unknown>) => Promise<string>>} */
 const HANDLERS = {
@@ -699,6 +728,27 @@ const HANDLERS = {
   [TITLE.name]: title,
   [UNWATCH.name]: unwatch,
   [ACTIVITY.name]: activity,
+  [LINK.name]: link,
+  [UNLINK.name]: unlink,
+}
+
+/** @param {Record<string, unknown>} args @returns {Promise<string>} */
+async function link(args) {
+  const label = typeof args.label === "string" ? args.label.trim() : ""
+  const target = typeof args.target === "string" ? args.target.trim() : ""
+  if (!label || !target) throw new Error("`label` and `target` are required")
+  const result = (await callRpc("upsertOwnLink", { slug: threadSlug(), label, target }))?.result
+  const saved = result?.link
+  if (!saved?.id) throw new Error("Frizz did not return a saved link")
+  return `Registered ${saved.kind} ${saved.id}: ${saved.label}\n${saved.target}\n\nThis reference stays underneath the prompt. It does not assert a server is running or block completion. Remove it with unlink.`
+}
+
+/** @param {Record<string, unknown>} args @returns {Promise<string>} */
+async function unlink(args) {
+  const id = typeof args.id === "string" ? args.id.trim() : ""
+  if (!id) throw new Error("`id` is required — take it from link or activity")
+  const result = (await callRpc("dropOwnLink", { slug: threadSlug(), id }))?.result
+  return result?.dropped ? `Removed registration ${id}. No file was deleted and no server was stopped.` : `No registration ${id} on this thread.`
 }
 
 /** The `title` handler: register this thread's considered name.
@@ -726,6 +776,9 @@ async function activity() {
   const result = (await callRpc("listOwnThreadActivity", { slug: threadSlug() }))?.result
   const items = Array.isArray(result?.activity) ? result.activity : []
   const questions = Array.isArray(result?.questions) ? result.questions : []
+  const links = Array.isArray(result?.links) ? result.links : []
+  const linksBlock = links.length === 0 ? "" : "\n\nSaved links and files (not running work; remove with unlink):\n" +
+    links.map((link) => `  ${link.id}  ${link.kind}: ${link.label}\n    ${link.target}`).join("\n")
   // THE QUESTIONS ARE NOT PART OF THE FENCE, so they are printed in their own section and never fed to
   // the fence builder below. A question waits on a person; there is no `questions:` key to write it into.
   const askedBlock = questions.length === 0 ? "" : (
@@ -740,14 +793,14 @@ async function activity() {
       return (
         "Nothing is RUNNING on this thread — no background shells, no sub-agents, no armed timers, no " +
         "registered PRs. So an ```awaiting fence would have nothing to name, and a fence naming nothing " +
-        "is not a park." + askedBlock
+        "is not a park." + askedBlock + linksBlock
       )
     }
     return (
       "Nothing is running on this thread — no background shells, no sub-agents, no armed timers, no " +
       "registered PRs, and no open questions.\n\nSo there is nothing to wait on: an ```awaiting fence " +
       "would have nothing to name, and a fence naming nothing is not a park. End with ```done, or with " +
-      "a ```question if you need the human."
+      "a ```question if you need the human." + linksBlock
     )
   }
   const lines = items.map((i) => {
@@ -775,7 +828,7 @@ async function activity() {
     "```\n\nDrop the lines you are not actually waiting on — a dev server you left running is not a wait." +
     "\n\nBETTER THAN NAMING A SHELL IN THE FENCE: `watch` REGISTERS the wait, so it survives your turn " +
     "ending and you never restate it. Anything already marked `[watched as …]` above needs no fence line." +
-    askedBlock
+    askedBlock + linksBlock
   )
 }