frizz 0.5.0 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frizz",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "private": false,
   "description": "A local web UI for running many coding agents at once",
   "keywords": [
@@ -39,6 +39,7 @@
     "install:global": "nub scripts/install-global-cli.mjs",
     "typecheck": "tsc -b packages/shared packages/rpc packages/server . && pnpm --filter @frizz/web typecheck",
     "test": "nub scripts/run-tests.mjs",
+    "test:e2e": "nub scripts/e2e-web.mjs",
     "prepack": "node ./scripts/prepare-package.mjs && node ./scripts/build-package.mjs && node ./scripts/publish-manifest.mjs --strip",
     "postpack": "node ./scripts/publish-manifest.mjs --restore && node ./scripts/prepare-package.mjs --clean"
   },

package/runtime/cc-worker/DECISIONS.md

@@ -249,8 +249,8 @@ shell-out, so they take effect on the next board rebuild with NO server restart.
   **top-level `additionalContext`** (NOT `decision.message`), which Claude injects to the model as a
   plain-text system-reminder; exit 0 with the JSON on stdout (exit 2 makes Claude ignore it). CAVEAT:
   PermissionRequest hooks do NOT fire under `claude -p` (headless print mode), so the `-p` smoke test
-  can't exercise it — but frizz workers run as INTERACTIVE tmux `claude` sessions, where they DO
-  fire. Both deny hooks are FRIZZ_THREAD-gated and fail-open. (`AskUserQuestion` was not surfaced as
+  can't exercise it — but a frizz worker runs as an INTERACTIVE `claude` session inside its
+  session-broker daemon, where they DO fire. Both deny hooks are FRIZZ_THREAD-gated and fail-open. (`AskUserQuestion` was not surfaced as
   an invokable tool in the `-p` harness either, so both hooks were verified by piping their exact hook
   payloads rather than by driving a live prompt.)