frizz 0.8.0 → 0.9.0

package/README.md

@@ -151,7 +151,8 @@ Options:
 
 
 To reach the board from a phone or another machine, press R in the terminal running it: a short
-walkthrough sets up a frizz.sh name, a Cloudflare Tunnel, Tailscale, or a proxy of your own, and
+walkthrough sets up a private frizz.sh name (no account needed), a custom one, a Cloudflare
+Tunnel, Tailscale, or a proxy of your own, and
 remembers the choice, so a plain launch serves it from then on. The board stays on loopback and
 shows a single-use sign-in link as a QR; press L for a fresh one, or run --link from another shell.
 ```
@@ -216,7 +217,7 @@ shows a single-use sign-in link as a QR; press L for a fresh one, or run --link
 <details>
 <summary><b>Can I reach it from anywhere, not just my LAN?</b></summary>
 
-> Same answer: press **R** and pick a frizz.sh name, a Cloudflare Tunnel, or Tailscale. Each is reachable from anywhere the transport is — a frizz.sh name and a Cloudflare Tunnel from the open internet, Tailscale from your own devices.
+> Same answer: press **R** and pick a private frizz.sh name (unguessable, no account), a custom frizz.sh name, a Cloudflare Tunnel, or Tailscale. Each is reachable from anywhere the transport is — a frizz.sh name and a Cloudflare Tunnel from the open internet, Tailscale from your own devices.
 >
 > Frizz has no accounts, so the single-use sign-in link **is** the door: a phone that scans it gets a session; nobody else gets in. Sessions are per device and can be listed and revoked with `npx frizz --sessions` and `npx frizz --sign-out`.
 

package/dist/claude-agent-broker.js

@@ -20353,6 +20353,7 @@ var RealClaudeQueryHandle = class {
     await this.ready();
     this.assertOpen();
     const result = await this.awaitOpenControl(this.sdkQuery.reloadPlugins());
+    this.skillSourcesPromise = null;
     return {
       plugins: Array.isArray(result?.plugins) ? result.plugins.length : 0,
       commands: Array.isArray(result?.commands) ? result.commands.length : 0,
@@ -20371,16 +20372,59 @@ var RealClaudeQueryHandle = class {
   // `supportedCommands()` would re-serve from its cache), and the init frame's `skills` array is the
   // harness's own verdict on which of those are skills rather than built-in commands. The intersection
   // is exactly "what `/name` invokes a skill", with descriptions, and zero frizz-side discovery.
+  //
+  // Where each one CAME FROM is a second question, and claude answers it in exactly one place:
+  // `getContextUsage().skills.skillFrontmatter[].source`. Not in `SlashCommand`, which carries only
+  // {name, description, argumentHint, aliases}. The tempting free alternative — the CLI appends the
+  // source to the description as a parenthetical, " (user)" / " (project)" — was measured and rejected:
+  // it names only those two of the four roots, and the same regex false-positives on descriptions that
+  // legitimately end in a parenthetical (`/deep-research` ends "(dynamic workflow)", `/clear`
+  // "(resumable with /resume)", `/fast` "(Opus 4.8)"). A wrong label is worse than none.
   async listSkills() {
     const initialization = await this.initializationResult();
+    const sources = await this.skillSources();
     const skillNames = new Set(this.initSkills);
     const skills = [];
     for (const command of initialization.commands) {
       if (!command.name || !skillNames.has(command.name)) continue;
-      skills.push({ name: command.name, description: command.description.slice(0, 1024) });
+      const source = sources.get(command.name);
+      skills.push({ name: command.name, description: withoutRedundantSource(command.description, source).slice(0, 1024), source });
     }
     return skills;
   }
+  // The name→source map behind listSkills, fetched ONCE per session and memoized on the promise.
+  //
+  // `getContextUsage()` is a real control round trip that re-counts tokens every time — measured at
+  // 1222ms then 1105ms against claude 2.1.246, so the CLI does not cache it either. Paying that on
+  // every `/` would be felt; paying it once, lazily, on the first `/` a thread ever opens is not, and
+  // the web caches the finished listing per slug on top of that. Deliberately NOT prefetched at init:
+  // most threads never open the menu, and taxing every session start for a menu nobody asked for is
+  // the wrong trade.
+  //
+  // A failure resolves to an EMPTY map rather than rejecting: the source is decoration, and losing it
+  // must never cost the operator the listing itself.
+  skillSourcesPromise = null;
+  skillSources() {
+    this.skillSourcesPromise ??= this.fetchSkillSources().catch(() => /* @__PURE__ */ new Map());
+    return this.skillSourcesPromise;
+  }
+  async fetchSkillSources() {
+    this.assertOpen();
+    const usage = await this.awaitOpenControl(this.sdkQuery.getContextUsage());
+    const rows = boundedArray(usage?.skills?.skillFrontmatter, "contextUsage.skills.skillFrontmatter", 1024);
+    const sources = /* @__PURE__ */ new Map();
+    for (const [index, entry] of rows.entries()) {
+      try {
+        const row = objectValue(entry, `contextUsage.skills.skillFrontmatter[${index}]`);
+        const name = safeText(row.name, `contextUsage.skills.skillFrontmatter[${index}].name`, 512);
+        const source = claudeSkillSource(safeText(row.source, `contextUsage.skills.skillFrontmatter[${index}].source`, 64));
+        if (name && source) sources.set(name, source);
+      } catch {
+        continue;
+      }
+    }
+    return sources;
+  }
   // Unqueue a follow-up the operator has taken back.
   //
   // `cancelAsyncMessage` is present at runtime in @anthropic-ai/claude-agent-sdk 0.3.207 but absent
@@ -21255,6 +21299,19 @@ function mapModelContextWindows(raw) {
   }
   return count === 0 ? void 0 : out;
 }
+var CLAUDE_SOURCE_SUFFIX = { user: " (user)", project: " (project)" };
+function withoutRedundantSource(description, source) {
+  const suffix = source && CLAUDE_SOURCE_SUFFIX[source];
+  if (!suffix || !description.endsWith(suffix)) return description;
+  return description.slice(0, -suffix.length).trimEnd();
+}
+function claudeSkillSource(source) {
+  if (source === "projectSettings") return "project";
+  if (source === "userSettings") return "user";
+  if (source === "built-in") return "builtin";
+  if (source === "plugin") return "plugin";
+  return void 0;
+}
 function mapControlInitialization(raw) {
   const commands = boundedArray(raw.commands, "initialization.commands", 256).map((entry, index) => {
     const command = objectValue(entry, `initialization.commands[${index}]`);
@@ -21445,6 +21502,20 @@ function objectValue(value, label) {
   return value;
 }
 
+// packages/server/src/backend/types.ts
+var CLAUDE_WORKER_ENV = {
+  CLAUDE_CODE_TOTAL_TOKENS_REMINDER: "infinite",
+  BASH_DEFAULT_TIMEOUT_MS: "60000",
+  BASH_MAX_TIMEOUT_MS: String(24 * 60 * 60 * 1e3)
+};
+var CLAUDE_AUTO_COMPACT_WINDOW_ENV = "CLAUDE_CODE_AUTO_COMPACT_WINDOW";
+function claudeCompactionWindowOf(env) {
+  const raw = env?.[CLAUDE_AUTO_COMPACT_WINDOW_ENV];
+  if (raw === void 0) return void 0;
+  const window2 = Number(raw);
+  return Number.isInteger(window2) && window2 > 0 ? window2 : void 0;
+}
+
 // packages/server/src/backend/claude-broker-diagnostics.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, statSync as statSync2 } from "node:fs";
 import { join } from "node:path";
@@ -21755,7 +21826,7 @@ function runClaudeBroker(config) {
   server.listen(config.socketPath, () => {
     published = true;
     if (config.recordPath) {
-      const record = { daemonPid: process.pid, socketPath: config.socketPath, sessionId: config.sessionId, generation, createdAt: (/* @__PURE__ */ new Date()).toISOString(), capabilities: BROKER_CAPABILITIES };
+      const record = { daemonPid: process.pid, socketPath: config.socketPath, sessionId: config.sessionId, generation, createdAt: (/* @__PURE__ */ new Date()).toISOString(), capabilities: BROKER_CAPABILITIES, compactionWindow: claudeCompactionWindowOf(config.workerEnv) };
       try {
         writeFileSync(config.recordPath, JSON.stringify(record), { mode: 384 });
       } catch {