clay-server 2.19.0 → 2.20.0-beta.1

package/lib/notes.js

@@ -109,12 +109,32 @@ function createNotesManager(opts) {
     return update(id, { zIndex: maxZ + 1 });
   }
 
+  /**
+   * Return formatted text of all active (non-hidden) notes.
+   * Used to inject into mate CLAUDE.md so the mate can read them.
+   */
+  function getActiveNotesText() {
+    var active = [];
+    for (var i = 0; i < notes.length; i++) {
+      if (!notes[i].hidden && notes[i].text) active.push(notes[i]);
+    }
+    if (active.length === 0) return "";
+    var lines = [];
+    for (var j = 0; j < active.length; j++) {
+      var n = active[j];
+      var label = n.color ? "[" + n.color + "]" : "";
+      lines.push("- " + label + " " + n.text.trim());
+    }
+    return lines.join("\n");
+  }
+
   return {
     list: list,
     create: create,
     update: update,
     remove: remove,
     bringToFront: bringToFront,
+    getActiveNotesText: getActiveNotesText,
   };
 }
 

package/lib/os-users.js

@@ -103,6 +103,60 @@ function fsAsUser(op, args, osUserInfo) {
   return JSON.parse(output.trim());
 }
 
+/**
+ * Detect the Linux distribution family for package manager guidance.
+ * Returns "debian", "rhel", "alpine", "suse", "arch", or "unknown".
+ */
+function detectDistroFamily() {
+  try {
+    var release = fs.readFileSync("/etc/os-release", "utf8");
+    var idLike = "";
+    var id = "";
+    var lines = release.split("\n");
+    for (var i = 0; i < lines.length; i++) {
+      if (lines[i].indexOf("ID_LIKE=") === 0) idLike = lines[i].substring(8).replace(/"/g, "").toLowerCase();
+      if (lines[i].indexOf("ID=") === 0 && lines[i].indexOf("ID_LIKE=") !== 0) id = lines[i].substring(3).replace(/"/g, "").toLowerCase();
+    }
+    var all = id + " " + idLike;
+    if (all.indexOf("debian") !== -1 || all.indexOf("ubuntu") !== -1) return "debian";
+    if (all.indexOf("rhel") !== -1 || all.indexOf("centos") !== -1 || all.indexOf("fedora") !== -1 || all.indexOf("amzn") !== -1 || all.indexOf("amazon") !== -1) return "rhel";
+    if (all.indexOf("alpine") !== -1) return "alpine";
+    if (all.indexOf("suse") !== -1 || all.indexOf("opensuse") !== -1) return "suse";
+    if (all.indexOf("arch") !== -1 || all.indexOf("manjaro") !== -1) return "arch";
+    return "unknown";
+  } catch (e) {
+    return "unknown";
+  }
+}
+
+/**
+ * Build a user-friendly install command for the ACL package based on distro.
+ */
+function getAclInstallCommand() {
+  var distro = detectDistroFamily();
+  switch (distro) {
+    case "debian": return "sudo apt install -y acl";
+    case "rhel": return "sudo yum install -y acl";
+    case "alpine": return "sudo apk add acl";
+    case "suse": return "sudo zypper install -y acl";
+    case "arch": return "sudo pacman -S --noconfirm acl";
+    default: return "Install the 'acl' package using your distribution's package manager (apt, yum, apk, etc.)";
+  }
+}
+
+/**
+ * Check if setfacl is available on the system.
+ * Returns { available: true } or { available: false, installCmd: "..." }.
+ */
+function checkAclSupport() {
+  try {
+    execSync("which setfacl", { encoding: "utf8", timeout: 5000, stdio: "pipe" });
+    return { available: true };
+  } catch (e) {
+    return { available: false, installCmd: getAclInstallCommand() };
+  }
+}
+
 /**
  * Grant a Linux user ACL access (rwX) to a project directory.
  * Uses setfacl to add recursive + default ACL entries.
@@ -121,7 +175,14 @@ function grantProjectAccess(projectPath, linuxUser) {
     });
     console.log("[os-users] Granted ACL access for " + linuxUser + " on " + projectPath);
   } catch (e) {
-    console.error("[os-users] Failed to grant ACL access for " + linuxUser + " on " + projectPath + ": " + (e.message || e));
+    var errMsg = (e.stderr || e.message || "").toString();
+    if (errMsg.indexOf("not found") !== -1 || errMsg.indexOf("ENOENT") !== -1) {
+      var cmd = getAclInstallCommand();
+      console.error("[os-users] setfacl is not installed. ACL support is required for OS user isolation.");
+      console.error("[os-users] Install it with: " + cmd);
+    } else {
+      console.error("[os-users] Failed to grant ACL access for " + linuxUser + " on " + projectPath + ": " + errMsg);
+    }
   }
 }
 
@@ -140,7 +201,14 @@ function revokeProjectAccess(projectPath, linuxUser) {
     });
     console.log("[os-users] Revoked ACL access for " + linuxUser + " on " + projectPath);
   } catch (e) {
-    console.error("[os-users] Failed to revoke ACL access for " + linuxUser + " on " + projectPath + ": " + (e.message || e));
+    var errMsg = (e.stderr || e.message || "").toString();
+    if (errMsg.indexOf("not found") !== -1 || errMsg.indexOf("ENOENT") !== -1) {
+      var cmd = getAclInstallCommand();
+      console.error("[os-users] setfacl is not installed. ACL support is required for OS user isolation.");
+      console.error("[os-users] Install it with: " + cmd);
+    } else {
+      console.error("[os-users] Failed to revoke ACL access for " + linuxUser + " on " + projectPath + ": " + errMsg);
+    }
   }
 }
 
@@ -343,6 +411,7 @@ function ensureProjectsDir() {
 }
 
 module.exports = {
+  checkAclSupport: checkAclSupport,
   resolveOsUserInfo: resolveOsUserInfo,
   fsAsUser: fsAsUser,
   grantProjectAccess: grantProjectAccess,