frizz 0.4.0 → 0.5.0

package/README.md

@@ -122,6 +122,7 @@ $ npx frizz --help
 Frizz production launcher
 
 Usage: npx frizz [options] [repository]
+       npx frizz up            serve this repo publicly, board + tunnel together
 
 Runs the npm-resolved immutable Frizz package, then opens it in your default browser. Use frizz-dev
 only for a source checkout.
@@ -276,6 +277,22 @@ Frizz has its own small vocabulary. Most of it names a feature, so this doubles
 
 <br/>
 
+<h2 align="center">Contributing</h2>
+
+Issues and pull requests are welcome. Fork the repo, branch off `main`, and open the PR against `main` — CI runs on every pull request.
+
+Three checks run in CI, and they need no install:
+
+```sh
+$ node --test board/*.test.mjs
+$ node scripts/sync-portable-monitors.mjs --check
+$ node --test monitors/*.test.mjs
+```
+
+Everything else runs locally. Install with `pnpm install`, typecheck with `pnpm typecheck`, and run the full suite with `pnpm test` — that suite drives real agent CLIs and a real browser, which is why CI does not gate on it. Say in the PR what you ran.
+
+<br/>
+
 <h2 align="center">License</h2>
 
 MIT

package/dist/dev-child.js

@@ -5751,7 +5751,7 @@ function parseGithubWakeSteer(text) {
 function frizzRoute(path) {
   return `${FRIZZ_ROUTE_PREFIX}${path.startsWith("/") ? path : `/${path}`}`;
 }
-var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -6113,7 +6113,9 @@ var init_src = __esm({
       "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
       "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
       "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
-      "or gets its own card first via `mcp__frizz__spawn_thread`; none of them is a `done`. And what is not",
+      "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
+      "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
+      "None of them is a `done`. And what is not",
       'worth a card is not worth a SENTENCE: delete the dangling "one thing to carry forward", never park it',
       "in the handoff.",
       "",
@@ -6928,6 +6930,9 @@ ${DISPATCH_TASK_BANNER}
     );
     WAKE_ITEM = /^- (👤|🤖) (.+?) from @(\S+?)(?: at (\S+?))?(?:: (\S+))?$/;
     WAKE_MORE = /^- …and (\d+) more not listed — check .+ for the rest$/;
+    PR_WATCH_FINISHED = new RegExp(String.raw`^⏰ (${WAKE_REF}) was (MERGED|CLOSED)\.$`);
+    PR_WATCH_CI_PASSED = new RegExp(String.raw`^✅ CI PASSED on (${WAKE_REF}) — (\d+) checks? green\.$`);
+    PR_WATCH_CI_FAILED = new RegExp(String.raw`^❌ CI FAILED on (${WAKE_REF})(?:: (.+?))?\.$`);
     GithubStatus = external_exports.object({
       installed: external_exports.boolean(),
       inRepo: external_exports.boolean(),
@@ -15240,7 +15245,9 @@ function createTailer(deps) {
     for (const e of state.subAgents.values()) {
       if (e.kind !== "shell") continue;
       const lastActivityAt = entryLastActivity(e);
-      out.push({ label: e.label, startedAt: e.startedAt, state: "running", id: e.toolUseId, ...e.taskId ? { stoppable: true, taskId: e.taskId } : {}, ...lastActivityAt ? { lastActivityAt } : {} });
+      const since = Date.parse(lastActivityAt ?? e.startedAt);
+      const shellState = Number.isFinite(since) && now() - since > BGSHELL_STALE_MS ? "stale" : "running";
+      out.push({ label: e.label, startedAt: e.startedAt, state: shellState, id: e.toolUseId, ...e.taskId ? { stoppable: true, taskId: e.taskId } : {}, ...lastActivityAt ? { lastActivityAt } : {} });
     }
     return out;
   }
@@ -16294,7 +16301,7 @@ function landsAfterRead(eventAt, lastReadAt) {
   if (!Number.isFinite(e) || !Number.isFinite(r)) return true;
   return e > r;
 }
-var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS2, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, PERM_YES_OPTION, PERM_QUESTION, PERM_FOOTER, PERM_COMPOSER_FOOTER, PERM_MODAL_TAIL_ROWS, PERM_COMPOSER_TAIL_ROWS, BOOT_APIKEY_HEADLINE, BOOT_APIKEY_QUESTION, BOOT_TRUST_QUESTION, BOOT_TRUST_OPTION, BOOT_MODAL_TAIL_ROWS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, RESUME_REPLAY_SLACK_MS, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, AWAITING_HINT_RE, FENCE_BODY_MAX, HINT_MAX, HINT_VALUE_MAX, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
+var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS2, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, BGSHELL_STALE_MS, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, PERM_YES_OPTION, PERM_QUESTION, PERM_FOOTER, PERM_COMPOSER_FOOTER, PERM_MODAL_TAIL_ROWS, PERM_COMPOSER_TAIL_ROWS, BOOT_APIKEY_HEADLINE, BOOT_APIKEY_QUESTION, BOOT_TRUST_QUESTION, BOOT_TRUST_OPTION, BOOT_MODAL_TAIL_ROWS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, RESUME_REPLAY_SLACK_MS, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, AWAITING_HINT_RE, FENCE_BODY_MAX, HINT_MAX, HINT_VALUE_MAX, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
 var init_tailer = __esm({
   "packages/server/src/tailer.ts"() {
     "use strict";
@@ -16323,6 +16330,7 @@ var init_tailer = __esm({
     EMPTY_BUFFER = Buffer.alloc(0);
     MAX_POLL_MS = 1e4;
     SUBAGENT_STALE_MS = 15 * 6e4;
+    BGSHELL_STALE_MS = 12 * 60 * 6e4;
     FOREIGN_FRESH_MS = 24 * 60 * 6e4;
     FOREIGN_MAX = 20;
     FOREIGN_SCAN_EVERY = 5;
@@ -25485,15 +25493,26 @@ landed, a follow-up the change implies. \`done\` is barred \u2014 the finding di
 is barred \u2014 nothing is running. \`question\` looks barred \u2014 the human asked nothing. **That deadlock is
 not real, and stretching \`done\` is not how you break it.** Take the first exit that fits:
 
-1. **DO IT** \u2014 small, in scope, yours to make. The default from **The stop criterion**. Then \`done\` is
-   honest with nothing left over.
-2. **HAND IT OFF TO ITS OWN CARD** \u2014 \`mcp__frizz__spawn_thread\` puts a separable effort on the board as
-   its own thread. Once the follow-up has a card, THIS thread owes nothing and \`done\` is accurate; put
-   the returned \`[title](/thread/<slug>)\` link in the body. Spawn what deserves an effort, not every
-   stray observation \u2014 but an observation that does not deserve a card does not deserve a trailing
-   sentence either. DROP it.
-3. **ASK** \u2014 the human should choose whether or how it happens. An ordinary \` \`\`\`question \`; "nothing
-   was pending" is not an objection. Make "spawn it as its own thread" an option when it is a candidate.
+1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own blast
+   radius is exit 1: the fix your change implies, the test it needs, the breakage it revealed, the caller
+   it left stale. **Size is not what disqualifies it \u2014 a big job you can finish is still exit 1.** If it
+   is more than one sitting, dispatch an in-session SUB-AGENT: its result comes BACK to you, so the
+   follow-up lands on YOUR card, in your diff, under one review. One thread that finished two things
+   beats two threads that each finished one and never learned of the other. Then \`done\` is honest with
+   nothing left over.
+2. **ASK** \u2014 the human should choose whether or how it happens. An ordinary \` \`\`\`question \`; "nothing
+   was pending" is not an objection. This is the exit for work you cannot bound, cannot verify, or that
+   is genuinely the human's call \u2014 and it is where a separable effort goes, as an OPTION they pick,
+   rather than a card you create for them.
+3. **HAND IT OFF TO ITS OWN CARD \u2014 the LAST resort, not the tidy one.** \`mcp__frizz__spawn_thread\` puts
+   a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link in
+   the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so nothing it
+   learns can ever reach this effort or its siblings.** That is the whole cost, and it is not
+   theoretical \u2014 one thread here spawned four, three of those spawned more, and three separate
+   descendants independently rediscovered the SAME root-cause commit over twenty hours because none of
+   them could tell the others. Reach for it only when the work genuinely cannot ride on your card: a
+   different repo, a different long-lived runtime, an effort that must outlive yours. If a sub-agent
+   could do it, exit 1. If the human should choose, exit 2. Never spawn merely to clear your own \`done\`.
 4. **DROP IT** \u2014 it is not worth an effort, a card, or a question. Then it is not worth a SENTENCE
    either: delete it. Do not park it in the handoff as "one thing to carry forward".
 
@@ -26000,10 +26019,12 @@ Give it a self-contained \`prompt\` and choose \`model\` + \`effort\` by the new
 required). It returns a \`[title](/thread/<slug>)\` link \u2014 put that in your handoff so the human can open
 it.
 
-**Its most valuable use is the one that unblocks \` \`\`\`done \`.** When your own mandate is complete but
-you turned up separable follow-up work, that finding is exactly what a \`done\` card would bury. Spawn it,
-and it lives on its own card instead of inside a thread nobody will reopen \u2014 which is what makes \`done\`
-on THIS thread honest rather than a stretch. See **When the work is finished but the thread found
+**It is the LAST resort among the exits, never the tidy one.** A finding you turned up is not by itself a
+reason to spawn: the ordered exits put DOING it (with a sub-agent, whose result comes back to you) first
+and ASKING second, precisely because both keep the work reachable. A spawned thread does not \u2014 it reports
+to the HUMAN and nothing it learns returns to you or to its siblings, so a chain of them re-derives the
+same facts in parallel and nobody notices. Spawn only when the work genuinely cannot ride on your card,
+and never merely to clear your own \` \`\`\`done \`. See **When the work is finished but the thread found
 more**.`;
     THREAD_EXECUTION = {
       claude: `## Thread types
@@ -29378,8 +29399,11 @@ function isShellFenceId(fenceId) {
 function prWatchFenceId(watchId, report) {
   return `${PR_WATCH_FENCE_PREFIX}:${watchId}:${report}`;
 }
+function prWatchExpiredFenceId(watchId) {
+  return `${PR_WATCH_EXPIRED_FENCE_PREFIX}:${watchId}`;
+}
 function isPrWatchFenceId(fenceId) {
-  return fenceId.startsWith(`${PR_WATCH_FENCE_PREFIX}:`);
+  return fenceId.startsWith(`${PR_WATCH_FENCE_PREFIX}:`) || fenceId.startsWith(`${PR_WATCH_EXPIRED_FENCE_PREFIX}:`);
 }
 function signoffFenceId(restedAt) {
   return `${SIGNOFF_FENCE_PREFIX}:${restedAt}`;
@@ -29387,6 +29411,16 @@ function signoffFenceId(restedAt) {
 function isSignoffFenceId(fenceId) {
   return fenceId.startsWith(`${SIGNOFF_FENCE_PREFIX}:`);
 }
+function parkFenceId(cause, spokeAt) {
+  return `${PARK_FENCE_PREFIX}:${cause}:${spokeAt}`;
+}
+function isParkFenceId(fenceId) {
+  return fenceId.startsWith(`${PARK_FENCE_PREFIX}:`);
+}
+function parkFenceRestOf(fenceId) {
+  const cut = fenceId.indexOf(":", PARK_FENCE_PREFIX.length + 1);
+  return cut < 0 ? "" : fenceId.slice(cut + 1);
+}
 function timerFenceId(timerId) {
   return `${TIMER_FENCE_PREFIX}:${timerId}`;
 }
@@ -29670,6 +29704,14 @@ function createScheduler(deps) {
       if (!stillMissing) return "superseded";
       return tele.turn === "idle" ? "current-idle" : "current-busy";
     }
+    if (isParkFenceId(item.fenceId)) {
+      if (parkFenceRestOf(item.fenceId) !== (tele.lastAssistantAt ?? "")) return "superseded";
+      return tele.turn === "idle" ? "current-idle" : "current-busy";
+    }
+    if (!item.fenceId.includes("
")) {
+      log3(`waker: UNROUTED wake prefix ${item.fenceId.split(":")[0]} for ${item.slug} \u2014 no deliveryContext branch, superseding`);
+      return "superseded";
+    }
     const fence = tele.lastFence;
     if (!fence || fence.kind !== "awaiting" || !fence.hints.some(isActionable)) return "superseded";
     if (fenceIdentity(fence.hints, tele.lastActivityAt) !== item.fenceId) return "superseded";
@@ -30135,7 +30177,7 @@ You have NOTHING running right now \u2014 no shell, no sub-agent, no timer, no r
 pull request. There is nothing that could wake you, so this thread is not awaiting: finish in
 \`\`\`done, or ask a \`\`\`question.`;
       if (cause !== "expired" && (row.park_bumps ?? 0) >= PARK_BUMP_MAX) continue;
-      const fenceId = `park:${cause}:${spokeAt}`;
+      const fenceId = parkFenceId(cause, spokeAt);
       const deliveryId = wakeDeliveryId(row.slug, row.session_id, fenceId);
       if (outbox.get(deliveryId)) continue;
       const item = outbox.enqueue({
@@ -30170,7 +30212,7 @@ pull request. There is nothing that could wake you, so this thread is not awaiti
       const ref = `${w.owner}/${w.repo}#${w.number}`;
       log3(`waker: settled ${w.thread_slug} \u2014 pr watcher ${w.id} expired (${ref})`);
       if (!row || row.state === "archived" || row.archived === 1) continue;
-      const fenceId = `prwatch-expired:${w.id}`;
+      const fenceId = prWatchExpiredFenceId(w.id);
       const deliveryId = wakeDeliveryId(row.slug, row.session_id, fenceId);
       if (outbox.get(deliveryId)) continue;
       const item = outbox.enqueue({
@@ -30178,7 +30220,7 @@ pull request. There is nothing that could wake you, so this thread is not awaiti
         slug: row.slug,
         sessionId: row.session_id,
         fenceId,
-        hintKey: `prwatch-expired:${w.id}`,
+        hintKey: fenceId,
         message: `\u23F0 Your watcher on ${ref} has expired and is no longer armed \u2014 nothing on that PR will wake you now.
 
 If you still care about it, register it again with \`mcp__frizz__watch_pr\` and a fresh \`for:\`. If you do not, and it was the only thing you were waiting on, end in a proper terminal state instead of parking on it again.`,
@@ -30715,7 +30757,7 @@ If you still care about it, register it again with \`mcp__frizz__watch_pr\` and
     tick
   };
 }
-var execFileAsync4, PR_REF_RE2, LIMIT_FENCE_PREFIX, LIMIT_HINT_PREFIX, LIMIT_RESUME_GRACE_MS, LIMIT_RESUME_HEADROOM_PERCENT, LIMIT_HEADROOM_MIN_FAULT_AGE_MS, REPORT_FENCE_PREFIX, REPORT_HINT_PREFIX, SNOOZE_FENCE_PREFIX, SNOOZE_HINT_PREFIX, HEARTBEAT_FENCE_PREFIX, HEARTBEAT_HINT_PREFIX, STOP_HOOK_FENCE_PREFIX, STOP_HOOK_HINT_KEY, COMPACT_FENCE_PREFIX, COMPACT_HINT_KEY, TIMER_FENCE_PREFIX, TIMER_HINT_PREFIX, SHELL_FENCE_PREFIX, PR_WATCH_FENCE_PREFIX, PR_WATCH_POLL_MS, SIGNOFF_FENCE_PREFIX, SIGNOFF_HINT_KEY, SIGNOFF_NUDGE_MAX, PARK_BUMP_MAX, SIGNOFF_NUDGE_SETTING, FIRED_CAP, GITHUB_STATUS_CAP, REGISTRATION_CAP, REVIEW_SEEN_CAP, INTRODUCED_CAP, REVIEW_STEER_CAP;
+var execFileAsync4, PR_REF_RE2, LIMIT_FENCE_PREFIX, LIMIT_HINT_PREFIX, LIMIT_RESUME_GRACE_MS, LIMIT_RESUME_HEADROOM_PERCENT, LIMIT_HEADROOM_MIN_FAULT_AGE_MS, REPORT_FENCE_PREFIX, REPORT_HINT_PREFIX, SNOOZE_FENCE_PREFIX, SNOOZE_HINT_PREFIX, HEARTBEAT_FENCE_PREFIX, HEARTBEAT_HINT_PREFIX, STOP_HOOK_FENCE_PREFIX, STOP_HOOK_HINT_KEY, COMPACT_FENCE_PREFIX, COMPACT_HINT_KEY, TIMER_FENCE_PREFIX, TIMER_HINT_PREFIX, SHELL_FENCE_PREFIX, PR_WATCH_FENCE_PREFIX, PR_WATCH_EXPIRED_FENCE_PREFIX, PR_WATCH_POLL_MS, SIGNOFF_FENCE_PREFIX, SIGNOFF_HINT_KEY, SIGNOFF_NUDGE_MAX, PARK_BUMP_MAX, SIGNOFF_NUDGE_SETTING, PARK_FENCE_PREFIX, FIRED_CAP, GITHUB_STATUS_CAP, REGISTRATION_CAP, REVIEW_SEEN_CAP, INTRODUCED_CAP, REVIEW_STEER_CAP;
 var init_scheduler = __esm({
   "packages/server/src/scheduler.ts"() {
     "use strict";
@@ -30749,12 +30791,14 @@ var init_scheduler = __esm({
     TIMER_HINT_PREFIX = "timer:";
     SHELL_FENCE_PREFIX = "shell";
     PR_WATCH_FENCE_PREFIX = "prwatch";
+    PR_WATCH_EXPIRED_FENCE_PREFIX = "prwatch-expired";
     PR_WATCH_POLL_MS = 6e4;
     SIGNOFF_FENCE_PREFIX = "signoff";
     SIGNOFF_HINT_KEY = "signoff:rest";
     SIGNOFF_NUDGE_MAX = 2;
     PARK_BUMP_MAX = 3;
     SIGNOFF_NUDGE_SETTING = "signoffNudge";
+    PARK_FENCE_PREFIX = "park";
     FIRED_CAP = 500;
     GITHUB_STATUS_CAP = 200;
     REGISTRATION_CAP = 500;
@@ -34981,6 +35025,7 @@ function createTranscriptFold(identityPrefix = "claude") {
   const pendingTools = /* @__PURE__ */ new Map();
   const agentDispatches = /* @__PURE__ */ new Map();
   const backgroundShells = /* @__PURE__ */ new Map();
+  const consumedShells = /* @__PURE__ */ new Map();
   const backgroundTaskIds = /* @__PURE__ */ new Map();
   const relayedWakesDrawn = /* @__PURE__ */ new Set();
   const childDispatchIds = /* @__PURE__ */ new Map();
@@ -34988,9 +35033,11 @@ function createTranscriptFold(identityPrefix = "claude") {
   const queuedPending = [];
   let deliveredDedupe = null;
   let pendingRest = null;
+  const restEpoch = { n: 0 };
   function flushRest() {
     if (!pendingRest) return;
     out.push(restMessage(pendingRest.sourceId, pendingRest.at));
+    restEpoch.n++;
     pendingRest = null;
     lastAssistantId = null;
   }
@@ -35034,7 +35081,7 @@ function createTranscriptFold(identityPrefix = "claude") {
     if (pendingRest && !(rec.type === "assistant" && typeof rec.message?.id === "string" && rec.message.id === pendingRest.msgId)) {
       flushRest();
     }
-    const evs = completionEvents(rec, agentDispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn);
+    const evs = completionEvents(rec, agentDispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn, consumedShells, restEpoch);
     let drewEvents = false;
     if (evs.length > 0) {
       attachToolResults(rec, pendingTools, backgroundShells, backgroundTaskIds, childDispatchIds);
@@ -35283,9 +35330,14 @@ ${block.text}` : block.text;
   return {
     ingest,
     finalize,
+    // The SAME window the paged reader returns (latestWindowStart), because this is the OTHER producer:
+    // the /ws push renders from here while the RPC page renders from there, and a push whose head sat
+    // further forward than the page's would splice the human's ask straight back out of a card that had
+    // just anchored on it (reconcileLiveMessages replaces the window wholesale).
     messages: () => {
       const all = projected();
-      return all.length > MAX_MESSAGES ? all.slice(-MAX_MESSAGES) : all;
+      const start = latestWindowStart(all);
+      return start === 0 ? all : all.slice(start);
     },
     allMessages: projected,
     consumedBytes: () => offset + Buffer.byteLength(buffer)
@@ -35715,7 +35767,7 @@ function notificationCarrierText(rec) {
   }
   return void 0;
 }
-function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn) {
+function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn, consumedShells = /* @__PURE__ */ new Map(), restEpoch = { n: 0 }) {
   const carrier = notificationCarrierText(rec);
   const raw2 = carrier === void 0 ? void 0 : splitWakeDeliveries(carrier).map((s) => relayNotificationBlock(s) ?? s).join("\n");
   if (!raw2 || !raw2.includes("<task-notification>")) return [];
@@ -35749,10 +35801,17 @@ function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds,
       if (!d) {
         const shell = backgroundShells.get(id);
         if (!shell) {
+          const drawn = consumedShells.get(id);
+          if (drawn && restEpoch.n > drawn.epoch) {
+            consumedShells.set(id, { epoch: restEpoch.n, call: drawn.call });
+            out.push({ role: "assistant", kind: "event", boundary: "wake", text: backgroundWakeLabel(drawn.call, status, block), tools: [], parts: [], at });
+            continue;
+          }
           relayedFallback();
           continue;
         }
         backgroundShells.delete(id);
+        consumedShells.set(id, { epoch: restEpoch.n, call: shell.call });
         const elapsedMs2 = elapsedBetween(shell.at, rec.timestamp);
         shell.call.status = status === "completed" ? "completed" : status === "killed" ? "cancelled" : "failed";
         if (elapsedMs2 !== void 0) shell.call.durationMs = elapsedMs2;
@@ -36108,8 +36167,30 @@ function parseCodexTranscript(raw2, identityPrefix = "codex") {
   const out = projectCodexTranscript(raw2, identityPrefix);
   return latestTranscriptWindow(out);
 }
+function latestWindowStart(messages) {
+  const tail = Math.max(0, messages.length - MAX_MESSAGES);
+  if (tail === 0) return 0;
+  let boundary = -1;
+  for (let i = tail - 1; i >= 0; i--) {
+    const m = messages[i];
+    if (m.role === "user" && !m.wake && !m.queued) {
+      boundary = i;
+      break;
+    }
+  }
+  if (boundary < 0) return tail;
+  let start = tail;
+  let bytes = 0;
+  while (start > boundary && tail - start < LATEST_WINDOW_ASK_REACH_ITEMS) {
+    const nextBytes = messageBytes(messages[start - 1]);
+    if (bytes + nextBytes > LATEST_WINDOW_ASK_REACH_BYTES) break;
+    start--;
+    bytes += nextBytes;
+  }
+  return start === boundary ? start : tail;
+}
 function latestTranscriptWindow(messages) {
-  const start = Math.max(0, messages.length - MAX_MESSAGES);
+  const start = latestWindowStart(messages);
   if (start === 0) return [...messages];
   const pinned = [];
   for (let i = 0; i < start; i++) {
@@ -37002,7 +37083,7 @@ function readLatestThreadTranscriptPage(project, storage, slug, backendFor) {
     }
   }
   const latest = latestTranscriptWindow(projected);
-  const canonicalStart = Math.max(0, projected.length - MAX_MESSAGES);
+  const canonicalStart = latestWindowStart(projected);
   const row = storage.getSession(slug);
   const pageMessages = row ? projectDeliveryLedger(latest, parseDeliveryLedger(row.delivery_ledger)) : latest;
   return {
@@ -37143,7 +37224,7 @@ function readTranscriptFile(absPath) {
     return [];
   }
 }
-var MAX_MESSAGES, NOISE_PREFIXES, INTERRUPT_MARKERS, REST_LABEL, LEGACY_TASK_MARKER, LEGACY_BANNER_PREAMBLE, COMMAND_NAME_RE, COMMAND_ARGS_RE, PEER_SESSION_PREAMBLE, QUEUED_STALE_MS, EDIT_CAP, TRUNC_MARKER, ENCRYPTED_PAYLOAD, AGENT_PROMPT_CAP, SEND_BODY_CAP, COMMAND_CAP, TOOL_INPUT_CAP, READ_LINE_CAP, READ_BYTE_CAP, IMAGE_MEDIA_EXT, SCREENSHOT_CACHE_DIR, SCREENSHOT_CACHE_MAX, SCREENSHOT_MAX_BASE64, screenshotTmpSeq, SENT_IMAGE_MAX_BYTES, SENT_FILES_MAX, TODO_ROWS_MAX, TODO_TEXT_CAP, TRANSCRIPT_CACHE_CAP, transcriptCache, PARSE_VERIFY_SAMPLE, TRANSCRIPT_DECODE_WINDOW, FOREIGN_SESSION_ID_RE, MAX_PINNED_BACKGROUND_OPERATIONS, CAPTION_MAX, _defaultCodexBackend, TRANSCRIPT_EARLIER_MAX_ITEMS, TRANSCRIPT_EARLIER_MAX_BYTES, fullDigestCache, FULL_DIGEST_CACHE_CAP, EMPTY_RETIRED_OPS;
+var MAX_MESSAGES, LATEST_WINDOW_ASK_REACH_ITEMS, LATEST_WINDOW_ASK_REACH_BYTES, NOISE_PREFIXES, INTERRUPT_MARKERS, REST_LABEL, LEGACY_TASK_MARKER, LEGACY_BANNER_PREAMBLE, COMMAND_NAME_RE, COMMAND_ARGS_RE, PEER_SESSION_PREAMBLE, QUEUED_STALE_MS, EDIT_CAP, TRUNC_MARKER, ENCRYPTED_PAYLOAD, AGENT_PROMPT_CAP, SEND_BODY_CAP, COMMAND_CAP, TOOL_INPUT_CAP, READ_LINE_CAP, READ_BYTE_CAP, IMAGE_MEDIA_EXT, SCREENSHOT_CACHE_DIR, SCREENSHOT_CACHE_MAX, SCREENSHOT_MAX_BASE64, screenshotTmpSeq, SENT_IMAGE_MAX_BYTES, SENT_FILES_MAX, TODO_ROWS_MAX, TODO_TEXT_CAP, TRANSCRIPT_CACHE_CAP, transcriptCache, PARSE_VERIFY_SAMPLE, TRANSCRIPT_DECODE_WINDOW, FOREIGN_SESSION_ID_RE, MAX_PINNED_BACKGROUND_OPERATIONS, CAPTION_MAX, _defaultCodexBackend, TRANSCRIPT_EARLIER_MAX_ITEMS, TRANSCRIPT_EARLIER_MAX_BYTES, fullDigestCache, FULL_DIGEST_CACHE_CAP, EMPTY_RETIRED_OPS;
 var init_transcript = __esm({
   "packages/server/src/transcript.ts"() {
     "use strict";
@@ -37158,6 +37239,8 @@ var init_transcript = __esm({
     init_bash_background();
     init_frizz_paths();
     MAX_MESSAGES = 300;
+    LATEST_WINDOW_ASK_REACH_ITEMS = 100;
+    LATEST_WINDOW_ASK_REACH_BYTES = 512 * 1024;
     NOISE_PREFIXES = ["<task-notification>", "[SYSTEM NOTIFICATION", "<system-reminder>", "<frizz-", "[frizz]"];
     INTERRUPT_MARKERS = ["[Request interrupted by user]", "[Request interrupted by user for tool use]"];
     REST_LABEL = "Agent rested";

package/dist/frizz.js

@@ -6275,7 +6275,7 @@ var init_receipt_bus = __esm({
 function fallbackPort(base) {
   return base + 1e4;
 }
-var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
+var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -6623,7 +6623,9 @@ var init_src = __esm({
       "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
       "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
       "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
-      "or gets its own card first via `mcp__frizz__spawn_thread`; none of them is a `done`. And what is not",
+      "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
+      "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
+      "None of them is a `done`. And what is not",
       'worth a card is not worth a SENTENCE: delete the dangling "one thing to carry forward", never park it',
       "in the handoff.",
       "",
@@ -7429,6 +7431,9 @@ ${DISPATCH_TASK_BANNER}
     WAKE_MULTI_HEAD = new RegExp(
       String.raw`^(👤|🤖) (\d+) new GitHub items on (${WAKE_REF})\. Read exactly these — ` + WAKE_SCOPE + String.raw` — and continue:$`
     );
+    PR_WATCH_FINISHED = new RegExp(String.raw`^⏰ (${WAKE_REF}) was (MERGED|CLOSED)\.$`);
+    PR_WATCH_CI_PASSED = new RegExp(String.raw`^✅ CI PASSED on (${WAKE_REF}) — (\d+) checks? green\.$`);
+    PR_WATCH_CI_FAILED = new RegExp(String.raw`^❌ CI FAILED on (${WAKE_REF})(?:: (.+?))?\.$`);
     GithubStatus = external_exports.object({
       installed: external_exports.boolean(),
       inRepo: external_exports.boolean(),
@@ -8609,6 +8614,10 @@ var ANSI = {
   cyan: "\x1B[36m",
   red: "\x1B[31m"
 };
+function clockTime(ms) {
+  const at = new Date(ms);
+  return [at.getHours(), at.getMinutes(), at.getSeconds()].map((part) => String(part).padStart(2, "0")).join(":");
+}
 function formatDuration(ms) {
   if (ms < 1e3) return `${Math.round(ms)}ms`;
   if (ms < 1e4) return `${(ms / 1e3).toFixed(1)}s`;
@@ -8636,6 +8645,8 @@ var Readout = class {
   settled = false;
   /** Non-TTY only: suppress repeating an identical status row. */
   lastPlainLine = "";
+  /** Has a post-boot notice printed yet? The first one leads with a blank line, the rest stack. */
+  noticed = false;
   constructor(options2 = {}) {
     this.out = options2.output ?? process.stdout;
     this.tty = this.out.isTTY === true;
@@ -8765,8 +8776,33 @@ ${SYNC_END}`);
     this.out.write(`${line}
 `);
   }
+  /**
+   * A lifecycle line printed AFTER the ready block — the board restarting, updating, or falling over.
+   *
+   * The block above it is a snapshot of one moment; these are a timeline, and they arrive minutes or
+   * hours later because somebody clicked Restart in a browser or a control-plane child crashed. So
+   * this row carries a wall-clock time, which no other row here does: without one, a beat found on
+   * a scrolled-back terminal says what happened and gives no way to tell when.
+   */
+  notice(tone, label, detail) {
+    const glyph = tone === "done" ? this.c(ANSI.green, "\u2713") : tone === "failed" ? this.c(ANSI.red, "\u2717") : this.c(ANSI.cyan, "\u21BB");
+    if (!this.tty || this.debug) {
+      this.out.write(`frizz: ${label.toLowerCase()}${detail ? ` \u2014 ${detail}` : ""}
+`);
+      return;
+    }
+    const lead = this.noticed ? "" : "\n";
+    this.noticed = true;
+    const time = this.c(ANSI.dim, clockTime(this.now()));
+    const tail = detail ? this.c(ANSI.dim, detail) : "";
+    this.write(`${lead}  ${glyph}  ${time}  ${tail ? label.padEnd(12) : label}${tail}`);
+  }
   /** Print a line without disturbing the repaint region (used for the debug feed and warnings). */
   note(line) {
+    this.write(line);
+  }
+  /** Put one line on screen, above the repaint region if there still is one. */
+  write(line) {
     if (this.settled || !this.tty || this.debug) {
       this.out.write(`${line}
 `);
@@ -8880,6 +8916,19 @@ function sliceVisible(line, limit) {
   }
   return `${out}${ANSI.reset}`;
 }
+function renderSupervisorActivity(readout2, event) {
+  if (!readout2) return;
+  switch (event.kind) {
+    case "restarting":
+      return readout2.notice("progress", "Restarting", event.message);
+    case "updating":
+      return readout2.notice("progress", "Updating", event.message);
+    case "ready":
+      return readout2.notice("done", "Restarted", event.ms === void 0 ? event.message : `in ${formatDuration(event.ms)}`);
+    case "failed":
+      return readout2.notice("failed", "Failed", event.message);
+  }
+}
 
 // src/production.ts
 init_logging();
@@ -8991,6 +9040,7 @@ function parseCliArgs(argv) {
     "--stop",
     "--status",
     "--link",
+    "--cloud",
     "--help",
     "-h",
     "--dev",
@@ -9023,6 +9073,7 @@ function parseCliArgs(argv) {
     foreground: true,
     stop: args2.has("--stop"),
     link: args2.has("--link"),
+    cloud: args2.has("--cloud"),
     status: args2.has("--status"),
     help: args2.has("--help") || args2.has("-h"),
     dev: args2.has("--dev"),
@@ -10123,6 +10174,13 @@ var Supervisor = class {
   launchTarget;
   logLine;
   errorLine;
+  onActivity;
+  /** Suppresses activity beats until the first boot has settled; until then the readout owns the terminal. */
+  booted = false;
+  /** When the restart currently in flight began, so its "ready" beat can report a duration. */
+  restartStartedAt;
+  /** Last beat emitted, so a transition reported twice is printed once. */
+  lastActivity;
   publicProxy;
   updateRestart;
   rollbackUpdate;
@@ -10156,6 +10214,7 @@ var Supervisor = class {
     this.ownerToken = opts.launchOwnerToken;
     this.logLine = opts.log ?? ((line) => log.info("supervisor", stripPrefix(line)));
     this.errorLine = opts.error ?? ((line) => log.error("supervisor", stripPrefix(line)));
+    this.onActivity = opts.onActivity;
     this.updateRestart = opts.updateRestart;
     this.rollbackUpdate = opts.rollbackUpdate;
     this.durableReexec = opts.durableReexec;
@@ -10323,8 +10382,13 @@ var Supervisor = class {
   }
   async updateFromBrowser() {
     if (!this.updateRestart) return { state: "failed", message: "Update & Restart is unavailable in this launcher mode" };
+    this.emitActivity("updating", "preparing the new build \u2014 the running one is untouched until it is ready");
     const candidate = await this.updateRestart();
-    if (candidate.state !== "ready") return candidate;
+    if (candidate.state !== "ready") {
+      this.emitActivity("failed", candidate.message ?? "the update could not be prepared");
+      return candidate;
+    }
+    if (candidate.message) this.emitActivity("updating", candidate.message);
     if (!this.durableReexec) {
       return this.failDurableUpdate(
         "Update & Restart requires a durable supervisor handoff; the current supervisor was left running",
@@ -10489,7 +10553,38 @@ var Supervisor = class {
       });
     });
   }
+  /**
+   * One beat to the foreground terminal, deduped.
+   *
+   * Every transition already funnels through writeStatus, so this hangs off that single point rather
+   * than off the dozen call sites that report one — a path added later cannot forget to announce
+   * itself. The dedupe matters because a failure is often written twice (the crash handler, then the
+   * browser-restart waiter that observed it), and the operator should read that once.
+   */
+  emitActivity(kind, message, ms) {
+    if (!this.onActivity) return;
+    const signature = `${kind}\0${message}`;
+    if (signature === this.lastActivity) return;
+    this.lastActivity = signature;
+    try {
+      this.onActivity({ kind, message, ...ms === void 0 ? {} : { ms } });
+    } catch {
+    }
+  }
   writeStatus(state, message, boot = this.boot) {
+    if (state === "ready" && !this.booted) this.booted = true;
+    else if (this.booted) {
+      if (state === "restarting") {
+        this.restartStartedAt = Date.now();
+        this.emitActivity("restarting", message);
+      } else if (state === "ready") {
+        const startedAt = this.restartStartedAt;
+        this.restartStartedAt = void 0;
+        this.emitActivity("ready", message, startedAt === void 0 ? void 0 : Date.now() - startedAt);
+      } else if (state === "failed" || state === "degraded") {
+        this.emitActivity("failed", message);
+      }
+    }
     if (!this.supervisorLock) return;
     try {
       writeProjectStatus(this.supervisorLock, {
@@ -10791,6 +10886,7 @@ if (options.help) {
     `Frizz production launcher
 
 Usage: npx ${PACKAGE_NAME} [options] [repository]
+       npx ${PACKAGE_NAME} up            serve this repo publicly, board + tunnel together
 
 Runs the npm-resolved immutable Frizz package, then opens it in your default browser. Use frizz-dev
 only for a source checkout.
@@ -11009,6 +11105,10 @@ async function runSupervisor(port, token) {
     childEntry,
     childEnvironment: () => ({ FRIZZ_STABLE_WEB_DIST: webDist, FRIZZ_STABLE_ARTIFACT: `npm:${PACKAGE_NAME}@${PACKAGE_VERSION}`, FRIZZ_SCRIPTS_DIR: scriptsDir, FRIZZ_WORKER_PLUGIN_DIR: workerPluginDir }),
     updateAvailable: () => updateAvailable,
+    // The terminal that owns the board says so when the board goes down and comes back. Everything
+    // here is triggered from a browser tab or by a crash, so without this the foreground process is
+    // the last place to learn what happened to it.
+    onActivity: (event) => renderSupervisorActivity(readout, event),
     updateRestart: async () => {
       try {
         const plan = await planRegistryUpdate(PACKAGE_NAME, PACKAGE_VERSION, npmRegistryReleaseAdapter);
@@ -11026,6 +11126,10 @@ async function runSupervisor(port, token) {
       const plan = plannedUpdate ?? await planRegistryUpdate(PACKAGE_NAME, PACKAGE_VERSION, npmRegistryReleaseAdapter);
       if (!plan) throw new Error("Frizz is already current");
       handoffToRegistrySuccessor(plan, { port, projectDir: workspace.root, cwd: workspace.root, env }, npmRegistryReleaseAdapter);
+      readout?.notice("done", "Updated", `Frizz ${plan.latestVersion} is taking over on port ${port}`);
+      readout?.note(`
+  Frizz ${plan.latestVersion} now runs in the background \u2014 ctrl-c here no longer reaches it. Stop it with ${PACKAGE_NAME} --stop.
+`);
       process.exit(0);
     }
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frizz",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "private": false,
   "description": "A local web UI for running many coding agents at once",
   "keywords": [