frizz 0.4.0 → 0.5.1

package/README.md

@@ -122,6 +122,7 @@ $ npx frizz --help
 Frizz production launcher
 
 Usage: npx frizz [options] [repository]
+       npx frizz up            serve this repo publicly, board + tunnel together
 
 Runs the npm-resolved immutable Frizz package, then opens it in your default browser. Use frizz-dev
 only for a source checkout.
@@ -276,6 +277,22 @@ Frizz has its own small vocabulary. Most of it names a feature, so this doubles
 
 <br/>
 
+<h2 align="center">Contributing</h2>
+
+Issues and pull requests are welcome. Fork the repo, branch off `main`, and open the PR against `main` — CI runs on every pull request.
+
+Three checks run in CI, and they need no install:
+
+```sh
+$ node --test board/*.test.mjs
+$ node scripts/sync-portable-monitors.mjs --check
+$ node --test monitors/*.test.mjs
+```
+
+Everything else runs locally. Install with `pnpm install`, typecheck with `pnpm typecheck`, and run the full suite with `pnpm test` — that suite drives real agent CLIs and a real browser, which is why CI does not gate on it. Say in the PR what you ran.
+
+<br/>
+
 <h2 align="center">License</h2>
 
 MIT

package/dist/claude-agent-broker.js

@@ -19832,6 +19832,18 @@ function claudeUltracodeSettings() {
   return { ultracode: true };
 }
 
+// packages/server/src/backend/claude-context-window.ts
+var WINDOW_SUFFIX = "[1m]";
+var CLAUDE_1M_MODELS = ["fable", "opus", "sonnet"];
+function resolveClaudeLaunchModel(model) {
+  if (!model) return void 0;
+  if (model.endsWith(WINDOW_SUFFIX)) {
+    return { model, fallbackModel: model.slice(0, -WINDOW_SUFFIX.length) };
+  }
+  if (!CLAUDE_1M_MODELS.includes(model)) return { model };
+  return { model: `${model}${WINDOW_SUFFIX}`, fallbackModel: model };
+}
+
 // packages/server/src/backend/claude-agent-sdk-protocol.ts
 var CLAUDE_AGENT_SDK_PROTOCOL_VERSION = 1;
 var CLAUDE_AGENT_SDK_MAX_INPUT_BYTES = 64 * 1024;
@@ -20612,6 +20624,7 @@ function startClaudeQuery(executablePath, options) {
     }
   } : void 0;
   const claudeEffort = resolveClaudeEffort(options.effort);
+  const launchModel = resolveClaudeLaunchModel(options.model);
   const raw = uGe({
     prompt: input,
     options: {
@@ -20646,7 +20659,12 @@ function startClaudeQuery(executablePath, options) {
       // Keep Claude's default (preset) system prompt and APPEND the frizz worker contract, the SDK
       // equivalent of the tmux path's --append-system-prompt-file.
       ...options.appendSystemPrompt ? { systemPrompt: { type: "preset", preset: "claude_code", append: options.appendSystemPrompt } } : {},
-      ...options.model ? { model: options.model } : {},
+      // The 1M context window rides the MODEL value as a `[1m]` suffix, always paired with the bare
+      // alias as `fallbackModel` — an unavailable long-context beta is a hard 400 that kills the
+      // session, and the fallback is what makes asking for it safe on every subscription. See
+      // claude-context-window.ts for the measurements.
+      ...launchModel ? { model: launchModel.model } : {},
+      ...launchModel?.fallbackModel ? { fallbackModel: launchModel.fallbackModel } : {},
       // "ultracode" is not an `effort` value — it resolves to xhigh plus a session setting, and the two
       // must travel TOGETHER or the setting is silently ignored (see resolveClaudeEffort). `settings` is
       // an additional highest-precedence settings source, layered over `settingSources` above.

package/dist/dev-child.js

@@ -5751,7 +5751,7 @@ function parseGithubWakeSteer(text) {
 function frizzRoute(path) {
   return `${FRIZZ_ROUTE_PREFIX}${path.startsWith("/") ? path : `/${path}`}`;
 }
-var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
+var ATTACHMENT_IMAGE_EXTENSIONS, ATTACHMENT_DOC_EXTENSIONS, ATTACHMENT_EXTENSIONS, ATTACHMENT_MAX_BASE64_CHARS, ATTACHMENT_MAX_BYTES, ATTACHMENT_EXT_SET, ATTACHMENT_ACCEPT, FrizzStatus, BlockMechanism, RuntimeState, Backend, CodexModel, ThreadProfileOption, ThreadAgent, SubAgentView, BgShellView, CompletionHoldOp, CompletionHold, AskOption, AskQuestion, PendingAsk, NativeInputRequired, AwaitingHint, RETIRED_AWAITING_KINDS, RETIRED_LINE_RE, RETIRED_AWAITING_REPLACEMENT, AWAITING_ITEM_KINDS, AWAITING_DURATION_RE, DURATION_UNIT_MS, AWAITING_FOR_MAX_MS, SnoozeUntil, SNOOZE_PROMPT_MAX, SnoozePrompt, RECURRING_PROMPT_MAX, RECURRING_MIN_INTERVAL_SECONDS, RECURRING_MAX_INTERVAL_SECONDS, RecurringPromptText, RecurringIntervalSeconds, ThreadRecurringPrompt, ALLDONE_SENTINEL, OPT_OUT_NOTE, OVER_QUESTION_NOTE, TIMER_PROMPT_MAX, TIMER_MAX_DELAY_SECONDS, TIMER_MAX_ARMED, TimerPromptText, SIGNOFF_NUDGE_MARKER, SIGNOFF_NUDGE_MESSAGE, ThreadWatchKind, GithubChecksState, GithubMergeState, GithubWatchStatus, ThreadWatchView, PR_WATCH_DEFAULT_FOR_MS, PR_WATCH_MAX_ARMED, PrWatchView, AddOwnPrWatchInput, AddOwnPrWatchResult, DropOwnPrWatchInput, DropOwnPrWatchResult, ListOwnPrWatchesInput, OwnPrWatchesResult, ThreadTimerView, ThreadFence, PlanView, LimitWindow, LimitPause, ThreadView, BoardErrorItem, BoardSnapshot, QuotaWindow, ProviderQuota, QuotaSnapshot, ProviderAuth, AccountEmails, AuthSnapshot, AccountLogoutInput, AccountLogoutResult, AccountLoginStartInput, AccountLoginStartResult, AccountLoginStatusInput, AccountLoginStatusResult, PermissionMode, LocalFileOpener, Settings, DispatchProviderPreferences, DispatchPreferences, DispatchProfileSnapshot, SetDispatchPreferenceInput, DispatchInput, ADOPT_THREAD_MESSAGE_MAX_CHARS, AdoptThreadInput, AdoptThreadResult, FollowUpInput, UnqueueFollowUpInput, UnqueueFollowUpResult, DeliverQueuedNowInput, DeliverQueuedNowResult, SetThreadSnoozeInput, SetThreadRecurringPromptInput, SetOwnThreadRecurringPromptInput, SetOwnThreadRecurringPromptResult, GetOwnThreadRecurringPromptInput, OwnThreadRecurringPromptResult, SetOwnThreadTimerInput, CancelOwnThreadTimerInput, ListOwnThreadTimersInput, OwnThreadTimersResult, ThreadActivityItem, ListOwnThreadActivityInput, OwnThreadActivityResult, SetOwnThreadTimerResult, CancelOwnThreadTimerResult, SetOwnThreadStopHookInput, SetOwnThreadHeartbeatInput, ThreadPluginReloadResult, ConfirmAwaitingInput, RenameThreadInput, AiRenameThreadInput, AiRenameThreadResult, SetThreadPermissionInput, SetThreadPermissionResult, ThreadProfileOptionsInput, ThreadProfileOptionsResult, SetThreadProfileInput, SetThreadProfileResult, DISPATCH_TASK_BANNER, DISPATCH_TASK_BANNER_MARKER, GITHUB_DISPATCH_UI_BOUNDARY, WAKE_DELIVERY_TOKEN_TAIL, WAKE_DELIVERY_TOKEN_LINE, AGENT_MESSAGE_WRAPPER, GithubWakeItem, GithubWakeSteer, WAKE_SCOPE, WAKE_REVIEW_LEAD, WAKE_BACKLOG_TAIL, WAKE_REF, WAKE_SINGLE, WAKE_MULTI_HEAD, WAKE_ITEM, WAKE_MORE, PR_WATCH_FINISHED, PR_WATCH_CI_PASSED, PR_WATCH_CI_FAILED, GithubStatus, GithubRefCard, GithubRefPreviewInput, GithubRefPreviewResult, GithubItem, GithubListInput, GithubListResult, GithubBatchInput, GithubBatchResult, BoardMeta, ServerEvent, TranscriptEdit, TranscriptTodo, TranscriptToolCall, TranscriptPart, TranscriptMessage, TranscriptPageCursor, TranscriptPage, TranscriptEarlierInput, SocketTranscriptSlug, SocketClientMsg, ProjectCard, PROJECT_ICON_EXTENSIONS, PROJECT_ICON_MAX_BASE64_CHARS, DirectoryPickResult, ThreadLocation, FRIZZ_ROUTE_PREFIX, DEFAULT_PORT, threadIdentityName;
 var init_src = __esm({
   "packages/shared/src/index.ts"() {
     "use strict";
@@ -6113,7 +6113,9 @@ var init_src = __esm({
       "**STILL OWED counts things you are not going to do yourself.** A decision you are RECOMMENDING, a",
       "draft you wrote but did not send, follow-up work you discovered \u2014 all of it dies with the card, even",
       "the part that is someone else's to do. Each ends on a question with your recommendation as option A,",
-      "or gets its own card first via `mcp__frizz__spawn_thread`; none of them is a `done`. And what is not",
+      "or you DO it first \u2014 a sub-agent's result comes BACK to you, so it lands on your card; a new card via",
+      "`mcp__frizz__spawn_thread` is the LAST resort, since nothing it learns returns to you or its siblings.",
+      "None of them is a `done`. And what is not",
       'worth a card is not worth a SENTENCE: delete the dangling "one thing to carry forward", never park it',
       "in the handoff.",
       "",
@@ -6928,6 +6930,9 @@ ${DISPATCH_TASK_BANNER}
     );
     WAKE_ITEM = /^- (👤|🤖) (.+?) from @(\S+?)(?: at (\S+?))?(?:: (\S+))?$/;
     WAKE_MORE = /^- …and (\d+) more not listed — check .+ for the rest$/;
+    PR_WATCH_FINISHED = new RegExp(String.raw`^⏰ (${WAKE_REF}) was (MERGED|CLOSED)\.$`);
+    PR_WATCH_CI_PASSED = new RegExp(String.raw`^✅ CI PASSED on (${WAKE_REF}) — (\d+) checks? green\.$`);
+    PR_WATCH_CI_FAILED = new RegExp(String.raw`^❌ CI FAILED on (${WAKE_REF})(?:: (.+?))?\.$`);
     GithubStatus = external_exports.object({
       installed: external_exports.boolean(),
       inRepo: external_exports.boolean(),
@@ -15240,7 +15245,9 @@ function createTailer(deps) {
     for (const e of state.subAgents.values()) {
       if (e.kind !== "shell") continue;
       const lastActivityAt = entryLastActivity(e);
-      out.push({ label: e.label, startedAt: e.startedAt, state: "running", id: e.toolUseId, ...e.taskId ? { stoppable: true, taskId: e.taskId } : {}, ...lastActivityAt ? { lastActivityAt } : {} });
+      const since = Date.parse(lastActivityAt ?? e.startedAt);
+      const shellState = Number.isFinite(since) && now() - since > BGSHELL_STALE_MS ? "stale" : "running";
+      out.push({ label: e.label, startedAt: e.startedAt, state: shellState, id: e.toolUseId, ...e.taskId ? { stoppable: true, taskId: e.taskId } : {}, ...lastActivityAt ? { lastActivityAt } : {} });
     }
     return out;
   }
@@ -16294,7 +16301,7 @@ function landsAfterRead(eventAt, lastReadAt) {
   if (!Number.isFinite(e) || !Number.isFinite(r)) return true;
   return e > r;
 }
-var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS2, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, PERM_YES_OPTION, PERM_QUESTION, PERM_FOOTER, PERM_COMPOSER_FOOTER, PERM_MODAL_TAIL_ROWS, PERM_COMPOSER_TAIL_ROWS, BOOT_APIKEY_HEADLINE, BOOT_APIKEY_QUESTION, BOOT_TRUST_QUESTION, BOOT_TRUST_OPTION, BOOT_MODAL_TAIL_ROWS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, RESUME_REPLAY_SLACK_MS, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, AWAITING_HINT_RE, FENCE_BODY_MAX, HINT_MAX, HINT_VALUE_MAX, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
+var IDLE_BACKSTOP_MS, RUNTIME_CHASE_MAX, POLL_MS2, MAX_PRIME_ROWS_PER_TICK, PRIME_BUDGET_MS, TRANSCRIPT_READ_WINDOW, EMPTY_BUFFER, MAX_POLL_MS, SUBAGENT_STALE_MS, BGSHELL_STALE_MS, FOREIGN_FRESH_MS, FOREIGN_MAX, FOREIGN_SCAN_EVERY, CACHE_FLUSH_MS, PRIME_PROGRESS_EVERY, DISCOVER_RETRY_MS, DISCOVER_RETRY_MAX_MS, PERM_YES_OPTION, PERM_QUESTION, PERM_FOOTER, PERM_COMPOSER_FOOTER, PERM_MODAL_TAIL_ROWS, PERM_COMPOSER_TAIL_ROWS, BOOT_APIKEY_HEADLINE, BOOT_APIKEY_QUESTION, BOOT_TRUST_QUESTION, BOOT_TRUST_OPTION, BOOT_MODAL_TAIL_ROWS, RETAINED_SUBAGENTS_MAX, RETAINED_SHELLS_MAX, DESCENDANT_TERMINALS_MAX, PENDING_RESUMES_MAX, PENDING_SHELLS_MAX, RESUME_REPLAY_SLACK_MS, QUESTION_BLOCK_RE, SIGNAL_FENCE_RE, AWAITING_HINT_RE, FENCE_BODY_MAX, HINT_MAX, HINT_VALUE_MAX, LAUNCH_ACK_RE, AUTO_BACKGROUND_ACK_RE, DESCENDANT_SIDECAR_MAX, DESCENDANT_NOTIFY_GRACE_MS, MAX_OWNED_TOOL_USE_IDS, BROKER_LIVENESS_TTL_MS, UNRESTORED_TAIL_FIELDS;
 var init_tailer = __esm({
   "packages/server/src/tailer.ts"() {
     "use strict";
@@ -16323,6 +16330,7 @@ var init_tailer = __esm({
     EMPTY_BUFFER = Buffer.alloc(0);
     MAX_POLL_MS = 1e4;
     SUBAGENT_STALE_MS = 15 * 6e4;
+    BGSHELL_STALE_MS = 12 * 60 * 6e4;
     FOREIGN_FRESH_MS = 24 * 60 * 6e4;
     FOREIGN_MAX = 20;
     FOREIGN_SCAN_EVERY = 5;
@@ -25485,15 +25493,26 @@ landed, a follow-up the change implies. \`done\` is barred \u2014 the finding di
 is barred \u2014 nothing is running. \`question\` looks barred \u2014 the human asked nothing. **That deadlock is
 not real, and stretching \`done\` is not how you break it.** Take the first exit that fits:
 
-1. **DO IT** \u2014 small, in scope, yours to make. The default from **The stop criterion**. Then \`done\` is
-   honest with nothing left over.
-2. **HAND IT OFF TO ITS OWN CARD** \u2014 \`mcp__frizz__spawn_thread\` puts a separable effort on the board as
-   its own thread. Once the follow-up has a card, THIS thread owes nothing and \`done\` is accurate; put
-   the returned \`[title](/thread/<slug>)\` link in the body. Spawn what deserves an effort, not every
-   stray observation \u2014 but an observation that does not deserve a card does not deserve a trailing
-   sentence either. DROP it.
-3. **ASK** \u2014 the human should choose whether or how it happens. An ordinary \` \`\`\`question \`; "nothing
-   was pending" is not an objection. Make "spawn it as its own thread" an option when it is a candidate.
+1. **DO IT \u2014 the default, and it covers far more than "small".** Anything inside your change's own blast
+   radius is exit 1: the fix your change implies, the test it needs, the breakage it revealed, the caller
+   it left stale. **Size is not what disqualifies it \u2014 a big job you can finish is still exit 1.** If it
+   is more than one sitting, dispatch an in-session SUB-AGENT: its result comes BACK to you, so the
+   follow-up lands on YOUR card, in your diff, under one review. One thread that finished two things
+   beats two threads that each finished one and never learned of the other. Then \`done\` is honest with
+   nothing left over.
+2. **ASK** \u2014 the human should choose whether or how it happens. An ordinary \` \`\`\`question \`; "nothing
+   was pending" is not an objection. This is the exit for work you cannot bound, cannot verify, or that
+   is genuinely the human's call \u2014 and it is where a separable effort goes, as an OPTION they pick,
+   rather than a card you create for them.
+3. **HAND IT OFF TO ITS OWN CARD \u2014 the LAST resort, not the tidy one.** \`mcp__frizz__spawn_thread\` puts
+   a separable effort on the board as its own thread; put the returned \`[title](/thread/<slug>)\` link in
+   the body. **A spawned thread is FIRE-AND-FORGET: it reports to the HUMAN, never to you, so nothing it
+   learns can ever reach this effort or its siblings.** That is the whole cost, and it is not
+   theoretical \u2014 one thread here spawned four, three of those spawned more, and three separate
+   descendants independently rediscovered the SAME root-cause commit over twenty hours because none of
+   them could tell the others. Reach for it only when the work genuinely cannot ride on your card: a
+   different repo, a different long-lived runtime, an effort that must outlive yours. If a sub-agent
+   could do it, exit 1. If the human should choose, exit 2. Never spawn merely to clear your own \`done\`.
 4. **DROP IT** \u2014 it is not worth an effort, a card, or a question. Then it is not worth a SENTENCE
    either: delete it. Do not park it in the handoff as "one thing to carry forward".
 
@@ -26000,10 +26019,12 @@ Give it a self-contained \`prompt\` and choose \`model\` + \`effort\` by the new
 required). It returns a \`[title](/thread/<slug>)\` link \u2014 put that in your handoff so the human can open
 it.
 
-**Its most valuable use is the one that unblocks \` \`\`\`done \`.** When your own mandate is complete but
-you turned up separable follow-up work, that finding is exactly what a \`done\` card would bury. Spawn it,
-and it lives on its own card instead of inside a thread nobody will reopen \u2014 which is what makes \`done\`
-on THIS thread honest rather than a stretch. See **When the work is finished but the thread found
+**It is the LAST resort among the exits, never the tidy one.** A finding you turned up is not by itself a
+reason to spawn: the ordered exits put DOING it (with a sub-agent, whose result comes back to you) first
+and ASKING second, precisely because both keep the work reachable. A spawned thread does not \u2014 it reports
+to the HUMAN and nothing it learns returns to you or to its siblings, so a chain of them re-derives the
+same facts in parallel and nobody notices. Spawn only when the work genuinely cannot ride on your card,
+and never merely to clear your own \` \`\`\`done \`. See **When the work is finished but the thread found
 more**.`;
     THREAD_EXECUTION = {
       claude: `## Thread types
@@ -29378,8 +29399,11 @@ function isShellFenceId(fenceId) {
 function prWatchFenceId(watchId, report) {
   return `${PR_WATCH_FENCE_PREFIX}:${watchId}:${report}`;
 }
+function prWatchExpiredFenceId(watchId) {
+  return `${PR_WATCH_EXPIRED_FENCE_PREFIX}:${watchId}`;
+}
 function isPrWatchFenceId(fenceId) {
-  return fenceId.startsWith(`${PR_WATCH_FENCE_PREFIX}:`);
+  return fenceId.startsWith(`${PR_WATCH_FENCE_PREFIX}:`) || fenceId.startsWith(`${PR_WATCH_EXPIRED_FENCE_PREFIX}:`);
 }
 function signoffFenceId(restedAt) {
   return `${SIGNOFF_FENCE_PREFIX}:${restedAt}`;
@@ -29387,6 +29411,16 @@ function signoffFenceId(restedAt) {
 function isSignoffFenceId(fenceId) {
   return fenceId.startsWith(`${SIGNOFF_FENCE_PREFIX}:`);
 }
+function parkFenceId(cause, spokeAt) {
+  return `${PARK_FENCE_PREFIX}:${cause}:${spokeAt}`;
+}
+function isParkFenceId(fenceId) {
+  return fenceId.startsWith(`${PARK_FENCE_PREFIX}:`);
+}
+function parkFenceRestOf(fenceId) {
+  const cut = fenceId.indexOf(":", PARK_FENCE_PREFIX.length + 1);
+  return cut < 0 ? "" : fenceId.slice(cut + 1);
+}
 function timerFenceId(timerId) {
   return `${TIMER_FENCE_PREFIX}:${timerId}`;
 }
@@ -29670,6 +29704,14 @@ function createScheduler(deps) {
       if (!stillMissing) return "superseded";
       return tele.turn === "idle" ? "current-idle" : "current-busy";
     }
+    if (isParkFenceId(item.fenceId)) {
+      if (parkFenceRestOf(item.fenceId) !== (tele.lastAssistantAt ?? "")) return "superseded";
+      return tele.turn === "idle" ? "current-idle" : "current-busy";
+    }
+    if (!item.fenceId.includes("
")) {
+      log3(`waker: UNROUTED wake prefix ${item.fenceId.split(":")[0]} for ${item.slug} \u2014 no deliveryContext branch, superseding`);
+      return "superseded";
+    }
     const fence = tele.lastFence;
     if (!fence || fence.kind !== "awaiting" || !fence.hints.some(isActionable)) return "superseded";
     if (fenceIdentity(fence.hints, tele.lastActivityAt) !== item.fenceId) return "superseded";
@@ -30135,7 +30177,7 @@ You have NOTHING running right now \u2014 no shell, no sub-agent, no timer, no r
 pull request. There is nothing that could wake you, so this thread is not awaiting: finish in
 \`\`\`done, or ask a \`\`\`question.`;
       if (cause !== "expired" && (row.park_bumps ?? 0) >= PARK_BUMP_MAX) continue;
-      const fenceId = `park:${cause}:${spokeAt}`;
+      const fenceId = parkFenceId(cause, spokeAt);
       const deliveryId = wakeDeliveryId(row.slug, row.session_id, fenceId);
       if (outbox.get(deliveryId)) continue;
       const item = outbox.enqueue({
@@ -30170,7 +30212,7 @@ pull request. There is nothing that could wake you, so this thread is not awaiti
       const ref = `${w.owner}/${w.repo}#${w.number}`;
       log3(`waker: settled ${w.thread_slug} \u2014 pr watcher ${w.id} expired (${ref})`);
       if (!row || row.state === "archived" || row.archived === 1) continue;
-      const fenceId = `prwatch-expired:${w.id}`;
+      const fenceId = prWatchExpiredFenceId(w.id);
       const deliveryId = wakeDeliveryId(row.slug, row.session_id, fenceId);
       if (outbox.get(deliveryId)) continue;
       const item = outbox.enqueue({
@@ -30178,7 +30220,7 @@ pull request. There is nothing that could wake you, so this thread is not awaiti
         slug: row.slug,
         sessionId: row.session_id,
         fenceId,
-        hintKey: `prwatch-expired:${w.id}`,
+        hintKey: fenceId,
         message: `\u23F0 Your watcher on ${ref} has expired and is no longer armed \u2014 nothing on that PR will wake you now.
 
 If you still care about it, register it again with \`mcp__frizz__watch_pr\` and a fresh \`for:\`. If you do not, and it was the only thing you were waiting on, end in a proper terminal state instead of parking on it again.`,
@@ -30715,7 +30757,7 @@ If you still care about it, register it again with \`mcp__frizz__watch_pr\` and
     tick
   };
 }
-var execFileAsync4, PR_REF_RE2, LIMIT_FENCE_PREFIX, LIMIT_HINT_PREFIX, LIMIT_RESUME_GRACE_MS, LIMIT_RESUME_HEADROOM_PERCENT, LIMIT_HEADROOM_MIN_FAULT_AGE_MS, REPORT_FENCE_PREFIX, REPORT_HINT_PREFIX, SNOOZE_FENCE_PREFIX, SNOOZE_HINT_PREFIX, HEARTBEAT_FENCE_PREFIX, HEARTBEAT_HINT_PREFIX, STOP_HOOK_FENCE_PREFIX, STOP_HOOK_HINT_KEY, COMPACT_FENCE_PREFIX, COMPACT_HINT_KEY, TIMER_FENCE_PREFIX, TIMER_HINT_PREFIX, SHELL_FENCE_PREFIX, PR_WATCH_FENCE_PREFIX, PR_WATCH_POLL_MS, SIGNOFF_FENCE_PREFIX, SIGNOFF_HINT_KEY, SIGNOFF_NUDGE_MAX, PARK_BUMP_MAX, SIGNOFF_NUDGE_SETTING, FIRED_CAP, GITHUB_STATUS_CAP, REGISTRATION_CAP, REVIEW_SEEN_CAP, INTRODUCED_CAP, REVIEW_STEER_CAP;
+var execFileAsync4, PR_REF_RE2, LIMIT_FENCE_PREFIX, LIMIT_HINT_PREFIX, LIMIT_RESUME_GRACE_MS, LIMIT_RESUME_HEADROOM_PERCENT, LIMIT_HEADROOM_MIN_FAULT_AGE_MS, REPORT_FENCE_PREFIX, REPORT_HINT_PREFIX, SNOOZE_FENCE_PREFIX, SNOOZE_HINT_PREFIX, HEARTBEAT_FENCE_PREFIX, HEARTBEAT_HINT_PREFIX, STOP_HOOK_FENCE_PREFIX, STOP_HOOK_HINT_KEY, COMPACT_FENCE_PREFIX, COMPACT_HINT_KEY, TIMER_FENCE_PREFIX, TIMER_HINT_PREFIX, SHELL_FENCE_PREFIX, PR_WATCH_FENCE_PREFIX, PR_WATCH_EXPIRED_FENCE_PREFIX, PR_WATCH_POLL_MS, SIGNOFF_FENCE_PREFIX, SIGNOFF_HINT_KEY, SIGNOFF_NUDGE_MAX, PARK_BUMP_MAX, SIGNOFF_NUDGE_SETTING, PARK_FENCE_PREFIX, FIRED_CAP, GITHUB_STATUS_CAP, REGISTRATION_CAP, REVIEW_SEEN_CAP, INTRODUCED_CAP, REVIEW_STEER_CAP;
 var init_scheduler = __esm({
   "packages/server/src/scheduler.ts"() {
     "use strict";
@@ -30749,12 +30791,14 @@ var init_scheduler = __esm({
     TIMER_HINT_PREFIX = "timer:";
     SHELL_FENCE_PREFIX = "shell";
     PR_WATCH_FENCE_PREFIX = "prwatch";
+    PR_WATCH_EXPIRED_FENCE_PREFIX = "prwatch-expired";
     PR_WATCH_POLL_MS = 6e4;
     SIGNOFF_FENCE_PREFIX = "signoff";
     SIGNOFF_HINT_KEY = "signoff:rest";
     SIGNOFF_NUDGE_MAX = 2;
     PARK_BUMP_MAX = 3;
     SIGNOFF_NUDGE_SETTING = "signoffNudge";
+    PARK_FENCE_PREFIX = "park";
     FIRED_CAP = 500;
     GITHUB_STATUS_CAP = 200;
     REGISTRATION_CAP = 500;
@@ -34981,6 +35025,7 @@ function createTranscriptFold(identityPrefix = "claude") {
   const pendingTools = /* @__PURE__ */ new Map();
   const agentDispatches = /* @__PURE__ */ new Map();
   const backgroundShells = /* @__PURE__ */ new Map();
+  const consumedShells = /* @__PURE__ */ new Map();
   const backgroundTaskIds = /* @__PURE__ */ new Map();
   const relayedWakesDrawn = /* @__PURE__ */ new Set();
   const childDispatchIds = /* @__PURE__ */ new Map();
@@ -34988,9 +35033,11 @@ function createTranscriptFold(identityPrefix = "claude") {
   const queuedPending = [];
   let deliveredDedupe = null;
   let pendingRest = null;
+  const restEpoch = { n: 0 };
   function flushRest() {
     if (!pendingRest) return;
     out.push(restMessage(pendingRest.sourceId, pendingRest.at));
+    restEpoch.n++;
     pendingRest = null;
     lastAssistantId = null;
   }
@@ -35034,7 +35081,7 @@ function createTranscriptFold(identityPrefix = "claude") {
     if (pendingRest && !(rec.type === "assistant" && typeof rec.message?.id === "string" && rec.message.id === pendingRest.msgId)) {
       flushRest();
     }
-    const evs = completionEvents(rec, agentDispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn);
+    const evs = completionEvents(rec, agentDispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn, consumedShells, restEpoch);
     let drewEvents = false;
     if (evs.length > 0) {
       attachToolResults(rec, pendingTools, backgroundShells, backgroundTaskIds, childDispatchIds);
@@ -35283,9 +35330,14 @@ ${block.text}` : block.text;
   return {
     ingest,
     finalize,
+    // The SAME window the paged reader returns (latestWindowStart), because this is the OTHER producer:
+    // the /ws push renders from here while the RPC page renders from there, and a push whose head sat
+    // further forward than the page's would splice the human's ask straight back out of a card that had
+    // just anchored on it (reconcileLiveMessages replaces the window wholesale).
     messages: () => {
       const all = projected();
-      return all.length > MAX_MESSAGES ? all.slice(-MAX_MESSAGES) : all;
+      const start = latestWindowStart(all);
+      return start === 0 ? all : all.slice(start);
     },
     allMessages: projected,
     consumedBytes: () => offset + Buffer.byteLength(buffer)
@@ -35715,7 +35767,7 @@ function notificationCarrierText(rec) {
   }
   return void 0;
 }
-function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn) {
+function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds, relayedWakesDrawn, consumedShells = /* @__PURE__ */ new Map(), restEpoch = { n: 0 }) {
   const carrier = notificationCarrierText(rec);
   const raw2 = carrier === void 0 ? void 0 : splitWakeDeliveries(carrier).map((s) => relayNotificationBlock(s) ?? s).join("\n");
   if (!raw2 || !raw2.includes("<task-notification>")) return [];
@@ -35749,10 +35801,17 @@ function completionEvents(rec, dispatches, backgroundShells, backgroundTaskIds,
       if (!d) {
         const shell = backgroundShells.get(id);
         if (!shell) {
+          const drawn = consumedShells.get(id);
+          if (drawn && restEpoch.n > drawn.epoch) {
+            consumedShells.set(id, { epoch: restEpoch.n, call: drawn.call });
+            out.push({ role: "assistant", kind: "event", boundary: "wake", text: backgroundWakeLabel(drawn.call, status, block), tools: [], parts: [], at });
+            continue;
+          }
           relayedFallback();
           continue;
         }
         backgroundShells.delete(id);
+        consumedShells.set(id, { epoch: restEpoch.n, call: shell.call });
         const elapsedMs2 = elapsedBetween(shell.at, rec.timestamp);
         shell.call.status = status === "completed" ? "completed" : status === "killed" ? "cancelled" : "failed";
         if (elapsedMs2 !== void 0) shell.call.durationMs = elapsedMs2;
@@ -36108,8 +36167,30 @@ function parseCodexTranscript(raw2, identityPrefix = "codex") {
   const out = projectCodexTranscript(raw2, identityPrefix);
   return latestTranscriptWindow(out);
 }
+function latestWindowStart(messages) {
+  const tail = Math.max(0, messages.length - MAX_MESSAGES);
+  if (tail === 0) return 0;
+  let boundary = -1;
+  for (let i = tail - 1; i >= 0; i--) {
+    const m = messages[i];
+    if (m.role === "user" && !m.wake && !m.queued) {
+      boundary = i;
+      break;
+    }
+  }
+  if (boundary < 0) return tail;
+  let start = tail;
+  let bytes = 0;
+  while (start > boundary && tail - start < LATEST_WINDOW_ASK_REACH_ITEMS) {
+    const nextBytes = messageBytes(messages[start - 1]);
+    if (bytes + nextBytes > LATEST_WINDOW_ASK_REACH_BYTES) break;
+    start--;
+    bytes += nextBytes;
+  }
+  return start === boundary ? start : tail;
+}
 function latestTranscriptWindow(messages) {
-  const start = Math.max(0, messages.length - MAX_MESSAGES);
+  const start = latestWindowStart(messages);
   if (start === 0) return [...messages];
   const pinned = [];
   for (let i = 0; i < start; i++) {
@@ -37002,7 +37083,7 @@ function readLatestThreadTranscriptPage(project, storage, slug, backendFor) {
     }
   }
   const latest = latestTranscriptWindow(projected);
-  const canonicalStart = Math.max(0, projected.length - MAX_MESSAGES);
+  const canonicalStart = latestWindowStart(projected);
   const row = storage.getSession(slug);
   const pageMessages = row ? projectDeliveryLedger(latest, parseDeliveryLedger(row.delivery_ledger)) : latest;
   return {
@@ -37143,7 +37224,7 @@ function readTranscriptFile(absPath) {
     return [];
   }
 }
-var MAX_MESSAGES, NOISE_PREFIXES, INTERRUPT_MARKERS, REST_LABEL, LEGACY_TASK_MARKER, LEGACY_BANNER_PREAMBLE, COMMAND_NAME_RE, COMMAND_ARGS_RE, PEER_SESSION_PREAMBLE, QUEUED_STALE_MS, EDIT_CAP, TRUNC_MARKER, ENCRYPTED_PAYLOAD, AGENT_PROMPT_CAP, SEND_BODY_CAP, COMMAND_CAP, TOOL_INPUT_CAP, READ_LINE_CAP, READ_BYTE_CAP, IMAGE_MEDIA_EXT, SCREENSHOT_CACHE_DIR, SCREENSHOT_CACHE_MAX, SCREENSHOT_MAX_BASE64, screenshotTmpSeq, SENT_IMAGE_MAX_BYTES, SENT_FILES_MAX, TODO_ROWS_MAX, TODO_TEXT_CAP, TRANSCRIPT_CACHE_CAP, transcriptCache, PARSE_VERIFY_SAMPLE, TRANSCRIPT_DECODE_WINDOW, FOREIGN_SESSION_ID_RE, MAX_PINNED_BACKGROUND_OPERATIONS, CAPTION_MAX, _defaultCodexBackend, TRANSCRIPT_EARLIER_MAX_ITEMS, TRANSCRIPT_EARLIER_MAX_BYTES, fullDigestCache, FULL_DIGEST_CACHE_CAP, EMPTY_RETIRED_OPS;
+var MAX_MESSAGES, LATEST_WINDOW_ASK_REACH_ITEMS, LATEST_WINDOW_ASK_REACH_BYTES, NOISE_PREFIXES, INTERRUPT_MARKERS, REST_LABEL, LEGACY_TASK_MARKER, LEGACY_BANNER_PREAMBLE, COMMAND_NAME_RE, COMMAND_ARGS_RE, PEER_SESSION_PREAMBLE, QUEUED_STALE_MS, EDIT_CAP, TRUNC_MARKER, ENCRYPTED_PAYLOAD, AGENT_PROMPT_CAP, SEND_BODY_CAP, COMMAND_CAP, TOOL_INPUT_CAP, READ_LINE_CAP, READ_BYTE_CAP, IMAGE_MEDIA_EXT, SCREENSHOT_CACHE_DIR, SCREENSHOT_CACHE_MAX, SCREENSHOT_MAX_BASE64, screenshotTmpSeq, SENT_IMAGE_MAX_BYTES, SENT_FILES_MAX, TODO_ROWS_MAX, TODO_TEXT_CAP, TRANSCRIPT_CACHE_CAP, transcriptCache, PARSE_VERIFY_SAMPLE, TRANSCRIPT_DECODE_WINDOW, FOREIGN_SESSION_ID_RE, MAX_PINNED_BACKGROUND_OPERATIONS, CAPTION_MAX, _defaultCodexBackend, TRANSCRIPT_EARLIER_MAX_ITEMS, TRANSCRIPT_EARLIER_MAX_BYTES, fullDigestCache, FULL_DIGEST_CACHE_CAP, EMPTY_RETIRED_OPS;
 var init_transcript = __esm({
   "packages/server/src/transcript.ts"() {
     "use strict";
@@ -37158,6 +37239,8 @@ var init_transcript = __esm({
     init_bash_background();
     init_frizz_paths();
     MAX_MESSAGES = 300;
+    LATEST_WINDOW_ASK_REACH_ITEMS = 100;
+    LATEST_WINDOW_ASK_REACH_BYTES = 512 * 1024;
     NOISE_PREFIXES = ["<task-notification>", "[SYSTEM NOTIFICATION", "<system-reminder>", "<frizz-", "[frizz]"];
     INTERRUPT_MARKERS = ["[Request interrupted by user]", "[Request interrupted by user for tool use]"];
     REST_LABEL = "Agent rested";