frizz 0.7.8 → 0.8.0

package/README.md

@@ -142,6 +142,9 @@ for a source checkout.
 Options:
   --no-app               print the URL without opening a browser
   --port <port>          request a fixed port for a new workspace server
+  --sandbox              a disposable Frizz to try things in: throwaway home and project, its
+                         own port, deleted when this terminal closes; credentials (gh,
+                         cloudflared, Claude, Codex, the machine's frizz.sh key) are shared
   --link                 print a fresh single-use access link for the running board
   --debug                stream the full event feed to the terminal instead of the compact readout
   -h, --help             show this help
@@ -204,6 +207,8 @@ shows a single-use sign-in link as a QR; press L for a fresh one, or run --link
 
 > Yes. Press **R** in the terminal running Frizz. A short walkthrough sets up one of four ways to reach the board — a name on frizz.sh, a Cloudflare Tunnel you own, Tailscale, or any proxy you run — checks what each needs, prints the commands, and remembers your choice. From then on a plain `npx frizz` serves it; pick **Off** in the same place to go back to loopback only.
 >
+> To try any of this without touching the board you run, launch a second one with `npx frizz --sandbox` — a throwaway home and project on its own port, deleted on ctrl-c.
+>
 > The board stays bound to `127.0.0.1` in every case. Something in front of it — the frizz.sh relay, the tunnel, Tailscale, your proxy — carries the traffic, and Frizz gates the first visit with a single-use sign-in link shown as a QR. Press **L** for a fresh link any time, or `npx frizz --link` from another shell (over SSH, for a headless box). See [Remote access](docs/remote-access.md) for what each option needs.
 
 </details>

package/dist/claude-agent-broker.js

@@ -20667,11 +20667,14 @@ function startClaudeQuery(executablePath, options) {
       // `user,project,local` reported it applied.
       settingSources: options.settingSources ?? ["user", "project", "local"],
       // The frizz worker environment (see ClaudeQueryStartOptions): load the local cc-worker plugin so a
-      // broker session gets the frizz sub-agent profiles + hooks, mount the MCP servers (frizz +
-      // chrome-devtools), and pre-approve them.
+      // broker session gets the frizz sub-agent profiles + hooks, mount the frizz MCP server, and
+      // pre-approve it. EMPTY is skipped, not passed: since frizz stopped mounting a browser (2026-08-26)
+      // a resolved-nothing worker env is a real state, and `{}`/`[]` are truthy — handing the SDK an
+      // empty allowlist is not the same as handing it none. The project's own `.mcp.json` servers are
+      // loaded by settingSources, independently of this.
       ...options.pluginDir ? { plugins: [{ type: "local", path: options.pluginDir }] } : {},
-      ...options.mcpServers ? { mcpServers: options.mcpServers } : {},
-      ...options.allowedTools ? { allowedTools: options.allowedTools } : {},
+      ...options.mcpServers && Object.keys(options.mcpServers).length > 0 ? { mcpServers: options.mcpServers } : {},
+      ...options.allowedTools?.length ? { allowedTools: options.allowedTools } : {},
       ...options.disallowedTools?.length ? { disallowedTools: [...options.disallowedTools] } : {},
       persistSession: options.persistSession ?? false,
       // Keep Claude's default (preset) system prompt and APPEND the frizz worker contract, the SDK