clay-server 2.32.0-beta.7 → 2.32.0-beta.9

package/lib/codex-defaults.js

@@ -0,0 +1,18 @@
+var CODEX_DEFAULTS = {
+  approval: "on-failure",
+  sandbox: "danger-full-access",
+  webSearch: "live",
+};
+
+function getCodexConfig(sm) {
+  return {
+    approval: (sm && sm.codexApproval) || CODEX_DEFAULTS.approval,
+    sandbox: (sm && sm.codexSandbox) || CODEX_DEFAULTS.sandbox,
+    webSearch: (sm && sm.codexWebSearch) || CODEX_DEFAULTS.webSearch,
+  };
+}
+
+module.exports = {
+  CODEX_DEFAULTS: CODEX_DEFAULTS,
+  getCodexConfig: getCodexConfig,
+};

package/lib/project-connection.js

@@ -3,6 +3,7 @@ var path = require("path");
 var usersModule = require("./users");
 var userPresence = require("./user-presence");
 var emailAccounts = require("./email-accounts");
+var { getCodexConfig } = require("./codex-defaults");
 
 /**
  * Attach connection/disconnection handlers to a project context.
@@ -84,10 +85,9 @@ function attachConnection(ctx) {
     var project = getProject();
     var ownerLocked = !!(osUsers && osUsers.length > 0 && /^\/home\/[^/]+\//.test(cwd));
     sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId, ownerLocked: ownerLocked });
-    var latestVersion = getLatestVersion();
-    if (latestVersion && ws._clayUser && ws._clayUser.role === "admin") {
-      sendTo(ws, { type: "update_available", version: latestVersion });
-    }
+    // Update notifications are pushed on a scheduled interval (see
+    // scheduleUpdateBroadcast). We no longer push on connect to avoid
+    // re-triggering the banner on every page refresh.
     if (sm.slashCommands) {
       sendTo(ws, { type: "slash_commands", commands: sm.slashCommands });
     }
@@ -96,6 +96,7 @@ function attachConnection(ctx) {
       sendTo(ws, { type: "model_info", model: sm.currentModel, models: sm.availableModels || [], vendor: sm.defaultVendor || "claude", availableVendors: sm.availableVendors || [], installedVendors: sm.installedVendors || [] });
     }
     sendTo(ws, { type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
+    sendTo(ws, Object.assign({ type: "codex_config" }, getCodexConfig(sm)));
     sendTo(ws, { type: "term_list", terminals: tm.list() });
     // Context sources sent after session is resolved (per-session storage)
     // Send email accounts list for context sources picker

package/lib/project-mate-interaction.js

@@ -4,6 +4,7 @@ var crypto = require("crypto");
 
 function attachMateInteraction(ctx) {
   var cwd = ctx.cwd;
+  var slug = ctx.slug || "";
   var sm = ctx.sm;
   var sdk = ctx.sdk;
   var send = ctx.send;
@@ -21,6 +22,7 @@ function attachMateInteraction(ctx) {
   var loadMateDigests = ctx.loadMateDigests;
   var updateMemorySummary = ctx.updateMemorySummary;
   var initMemorySummary = ctx.initMemorySummary;
+  var getNotificationsModule = ctx.getNotificationsModule || function () { return null; };
   // checkForDmDebateBrief is accessed via ctx at call time because
   // it comes from the debate module initialized after this one.
 
@@ -104,6 +106,30 @@ function attachMateInteraction(ctx) {
     return lines.join("\n") + "\n\n";
   }
 
+  function getHostMateId() {
+    if (typeof slug === "string" && slug.indexOf("mate-") === 0) {
+      return slug.substring(5) || null;
+    }
+    return null;
+  }
+
+  function notifyMentionResponse(session, mentionMateId, mentionMateName, fullText) {
+    var notificationsModule = getNotificationsModule();
+    var hostMateId = getHostMateId();
+    var preview = (fullText || "").replace(/\s+/g, " ").trim();
+    if (preview.length > 140) preview = preview.substring(0, 140) + "...";
+    if (!notificationsModule || !hostMateId) return;
+    notificationsModule.notify("mention_response", {
+      title: (mentionMateName || "Mate") + " responded",
+      preview: preview,
+      slug: slug,
+      sessionId: session.localId,
+      mateId: hostMateId,
+      avatarMateId: mentionMateId || null,
+      ownerId: session.ownerId || null,
+    });
+  }
+
   // --- Shared digest worker: one reusable Haiku session for gate+digest ---
   // Combines gate check and digest generation into a single prompt,
   // processes jobs sequentially from a queue, reuses the session across calls.
@@ -557,6 +583,10 @@ function attachMateInteraction(ctx) {
         sendToSession(session.localId, { type: "mention_done", mateId: msg.mateId });
         send({ type: "mention_processing", mateId: msg.mateId, active: false });
 
+        if (isMate) {
+          notifyMentionResponse(session, msg.mateId, mateName, fullText);
+        }
+
         // Check if the mate wrote a debate brief during this turn
         ctx.checkForDmDebateBrief(session, msg.mateId, mateCtx);
 

package/lib/project-notifications.js

@@ -60,6 +60,15 @@ var formatters = {
       body: data.preview || "Sent you a message",
     };
   },
+
+  mention_response: function (data) {
+    return {
+      type: "mention_response",
+      title: data.title || "Mention response ready",
+      body: data.preview || "",
+      meta: { avatarMateId: data.avatarMateId || null },
+    };
+  },
 };
 
 // ========================================================

package/lib/project-sessions.js

@@ -1,6 +1,7 @@
 var fs = require("fs");
 var path = require("path");
 var { execFileSync } = require("child_process");
+var { CODEX_DEFAULTS, getCodexConfig } = require("./codex-defaults");
 
 /**
  * Attach session management, config, project management, and mid-section
@@ -520,18 +521,18 @@ function attachSessions(ctx) {
 
     // Codex-specific settings (stored on sessionManager, passed to adapter via adapterOptions)
     if (msg.type === "set_codex_approval") {
-      sm.codexApproval = msg.approval || "on-failure";
-      send({ type: "codex_config", approval: sm.codexApproval, sandbox: sm.codexSandbox || "workspace-write", webSearch: sm.codexWebSearch || "disabled" });
+      sm.codexApproval = msg.approval || CODEX_DEFAULTS.approval;
+      send(Object.assign({ type: "codex_config" }, getCodexConfig(sm)));
       return true;
     }
     if (msg.type === "set_codex_sandbox") {
-      sm.codexSandbox = msg.sandbox || "workspace-write";
-      send({ type: "codex_config", approval: sm.codexApproval || "on-failure", sandbox: sm.codexSandbox, webSearch: sm.codexWebSearch || "disabled" });
+      sm.codexSandbox = msg.sandbox || CODEX_DEFAULTS.sandbox;
+      send(Object.assign({ type: "codex_config" }, getCodexConfig(sm)));
       return true;
     }
     if (msg.type === "set_codex_websearch") {
-      sm.codexWebSearch = msg.webSearch || "disabled";
-      send({ type: "codex_config", approval: sm.codexApproval || "on-failure", sandbox: sm.codexSandbox || "workspace-write", webSearch: sm.codexWebSearch });
+      sm.codexWebSearch = msg.webSearch || CODEX_DEFAULTS.webSearch;
+      send(Object.assign({ type: "codex_config" }, getCodexConfig(sm)));
       return true;
     }
 

package/lib/project.js

@@ -615,15 +615,33 @@ function createProjectContext(opts) {
   var tm = createTerminalManager({ cwd: cwd, send: send, sendTo: sendTo });
   var nm = createNotesManager({ cwd: cwd, send: send, sendTo: sendTo });
 
-  // Check for updates in background (admin only)
-  fetchVersion(updateChannel).then(function (v) {
-    if (v && isNewer(v, currentVersion)) {
-      latestVersion = v;
-      sendToAdmins({ type: "update_available", version: v });
-    }
-  }).catch(function (e) {
-    console.error("[project] Background version check failed:", e.message || e);
-  });
+  // Check for updates in background (admin only). The result is stored in
+  // latestVersion; broadcast is handled by the hourly scheduler below, so
+  // page refreshes don't re-trigger the banner.
+  function runVersionCheck(broadcast) {
+    fetchVersion(updateChannel).then(function (v) {
+      if (v && isNewer(v, currentVersion)) {
+        latestVersion = v;
+        if (broadcast) sendToAdmins({ type: "update_available", version: v });
+      }
+    }).catch(function (e) {
+      console.error("[project] Background version check failed:", e.message || e);
+    });
+  }
+  runVersionCheck(false);
+
+  // Push update_available on every hour boundary. Clients can dismiss the
+  // banner; the next hourly push acts as a fresh ping. This avoids needing
+  // any dismissed-state persistence.
+  function scheduleNextHourlyBroadcast() {
+    var now = Date.now();
+    var msUntilNextHour = 60 * 60 * 1000 - (now % (60 * 60 * 1000));
+    setTimeout(function tick() {
+      runVersionCheck(true);
+      setTimeout(tick, 60 * 60 * 1000);
+    }, msUntilNextHour);
+  }
+  scheduleNextHourlyBroadcast();
 
   // --- WS connection handler (delegated to project-connection.js) ---
   function handleConnection(ws, wsUser) {
@@ -850,6 +868,7 @@ function createProjectContext(opts) {
   // so we use a lazy getter that resolves at call time.
   var _mateInteraction = attachMateInteraction({
     cwd: cwd,
+    slug: slug,
     sm: sm,
     sdk: sdk,
     send: send,
@@ -867,6 +886,7 @@ function createProjectContext(opts) {
     loadMateDigests: loadMateDigests,
     updateMemorySummary: updateMemorySummary,
     initMemorySummary: initMemorySummary,
+    getNotificationsModule: function () { return _notifications; },
     get checkForDmDebateBrief() { return checkForDmDebateBrief; },
   });
   var handleMention = _mateInteraction.handleMention;

package/lib/public/app.js

@@ -309,6 +309,9 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     currentBetas: [],
     currentThinking: "adaptive",
     currentThinkingBudget: 10000,
+    codexApproval: null,
+    codexSandbox: null,
+    codexWebSearch: null,
     ctxPopoverVisible: false,
     headerContextEl: null,
     // loop
@@ -782,6 +785,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     var _perms = store.get('permissions');
     if (_perms) {
       if (!_perms.terminal) {
+        var termBtn = document.getElementById("terminal-toggle-btn");
+        if (termBtn) termBtn.style.display = "none";
         var termSideBtn = document.getElementById("terminal-sidebar-btn");
         if (termSideBtn) termSideBtn.style.display = "none";
       }

package/lib/public/css/input.css

@@ -746,12 +746,14 @@
   display: flex;
   align-items: center;
   justify-content: space-between;
+  gap: 4px;
 }
 
 #input-bottom-right {
   display: flex;
   align-items: center;
   gap: 4px;
+  flex-shrink: 0;
 }
 
 /* --- Vendor toggle (split toggle) --- */
@@ -812,22 +814,26 @@
 .vendor-toggle-label {
   pointer-events: none;
 }
-@media (max-width: 600px) {
+@media (max-width: 900px) {
   .vendor-toggle-label { display: none; }
+  .vendor-toggle-btn { padding: 0 8px; }
 }
 
 /* --- Attach buttons & menu --- */
 #attach-wrap {
   position: relative;
-  flex-shrink: 0;
+  min-width: 0;
   display: flex;
   align-items: center;
   gap: 2px;
+  flex-wrap: nowrap;
+  overflow: hidden;
 }
 
 #attach-file-btn,
 #attach-image-btn,
-#schedule-btn {
+#schedule-btn,
+#input-more-btn {
   width: 36px;
   height: 36px;
   border-radius: 50%;
@@ -844,11 +850,13 @@
 
 #attach-file-btn .lucide,
 #attach-image-btn .lucide,
-#schedule-btn .lucide { width: 20px; height: 20px; flex-shrink: 0; }
+#schedule-btn .lucide,
+#input-more-btn .lucide { width: 20px; height: 20px; flex-shrink: 0; }
 
 #attach-file-btn:hover,
 #attach-image-btn:hover,
-#schedule-btn:hover { background: rgba(var(--overlay-rgb), 0.06); color: var(--text); }
+#schedule-btn:hover,
+#input-more-btn:hover { background: rgba(var(--overlay-rgb), 0.06); color: var(--text); }
 
 #ask-mate-btn {
   width: 36px;
@@ -1137,6 +1145,146 @@
   body.keyboard-open #input-area {
     padding-bottom: 8px;
   }
+
+  /* Mobile visibility utilities for input toolbar */
+  .desktop-only { display: none !important; }
+  .mobile-only { display: inline-flex !important; }
+}
+
+/* Desktop: hide mobile-only, show desktop-only */
+@media (min-width: 769px) {
+  .mobile-only { display: none !important; }
+}
+
+/* ==========================================================================
+   Input More Bottom Sheet (mobile)
+   ========================================================================== */
+
+#input-more-sheet {
+  position: fixed;
+  inset: 0;
+  z-index: 10000;
+  pointer-events: none;
+}
+
+#input-more-sheet.hidden {
+  display: none;
+}
+
+.input-more-backdrop {
+  position: absolute;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.4);
+  opacity: 0;
+  transition: opacity 0.2s ease;
+  pointer-events: auto;
+}
+
+#input-more-sheet.open .input-more-backdrop {
+  opacity: 1;
+}
+
+.input-more-content {
+  position: absolute;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  background: var(--bg);
+  border-top-left-radius: 16px;
+  border-top-right-radius: 16px;
+  padding: 8px 0 calc(var(--safe-bottom) + 16px);
+  transform: translateY(100%);
+  transition: transform 0.25s ease;
+  pointer-events: auto;
+  box-shadow: 0 -8px 24px rgba(0, 0, 0, 0.15);
+}
+
+#input-more-sheet.open .input-more-content {
+  transform: translateY(0);
+}
+
+.input-more-handle {
+  width: 40px;
+  height: 4px;
+  border-radius: 2px;
+  background: var(--border-subtle);
+  margin: 8px auto 12px;
+}
+
+.input-more-actions {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 8px;
+  padding: 4px 16px 12px;
+}
+
+.input-more-action {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  padding: 16px 8px;
+  background: var(--hover);
+  border: 1px solid var(--border-subtle);
+  border-radius: 10px;
+  font-size: 13px;
+  color: var(--text);
+  cursor: pointer;
+}
+
+.input-more-action:active {
+  opacity: 0.7;
+}
+
+.input-more-action .lucide {
+  width: 22px;
+  height: 22px;
+  color: var(--text-secondary);
+}
+
+.input-more-divider {
+  height: 1px;
+  background: var(--border-subtle);
+  margin: 0 16px;
+}
+
+.input-more-section-label {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 14px 20px 6px;
+  font-size: 13px;
+  font-weight: 500;
+  color: var(--text-secondary);
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+}
+
+.input-more-section-label .lucide {
+  width: 16px;
+  height: 16px;
+}
+
+.input-more-context-body {
+  max-height: 50vh;
+  overflow-y: auto;
+  padding: 0 8px 8px;
+}
+
+.input-more-context-body .context-picker-item {
+  padding: 12px 16px;
+  font-size: 15px;
+  border-radius: 8px;
+}
+
+.input-more-context-body .context-picker-item .lucide {
+  width: 18px;
+  height: 18px;
+}
+
+.input-more-context-body .context-picker-section-label {
+  padding: 10px 16px 4px;
 }
 
 /* ==========================================================================

package/lib/public/css/notifications-center.css

@@ -81,6 +81,13 @@
 }
 .notif-banner-icon .lucide { width: 16px; height: 16px; }
 .notif-banner-emoji { font-size: 18px; line-height: 1; }
+.notif-banner-avatar {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+  border-radius: 8px;
+  display: block;
+}
 
 .notif-banner-body {
   flex: 1;

package/lib/public/css/tooltip.css

@@ -18,3 +18,50 @@
 }
 
 .tooltip.visible { opacity: 1; }
+
+.tooltip.multi-line {
+  white-space: pre-line;
+  text-align: left;
+  max-width: 320px;
+  line-height: 1.5;
+}
+
+/* Context sources tooltip */
+.ctx-tip-header {
+  font-size: 11px;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: var(--text-muted);
+  margin-bottom: 6px;
+}
+
+.ctx-tip-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 4px 0;
+  color: var(--text);
+  font-size: 12px;
+}
+
+.ctx-tip-row .lucide {
+  width: 14px;
+  height: 14px;
+  flex-shrink: 0;
+  color: var(--text-secondary);
+}
+
+.ctx-tip-favicon {
+  width: 14px;
+  height: 14px;
+  flex-shrink: 0;
+  border-radius: 2px;
+}
+
+.ctx-tip-row span {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  max-width: 260px;
+}

package/lib/public/index.html

@@ -352,6 +352,7 @@
         <div class="status">
           <button id="debate-pdf-btn" class="hidden" title="Export debate as PDF"><i data-lucide="download"></i></button>
           <button id="find-in-session-btn" title="Search in session (Ctrl+F)"><i data-lucide="search"></i></button>
+          <button id="terminal-toggle-btn" title="Terminal"><i data-lucide="square-terminal"></i><span id="terminal-count" class="hidden"></span></button>
         </div>
       </div>
       <div id="main-panels">
@@ -459,13 +460,14 @@
           </div>
           <div id="input-bottom">
             <div id="attach-wrap">
-              <button id="attach-file-btn" type="button" aria-label="Attach file" title="Attach file"><i data-lucide="paperclip"></i></button>
-              <button id="attach-image-btn" type="button" aria-label="Attach image" title="Attach image"><i data-lucide="image"></i></button>
+              <button id="input-more-btn" type="button" aria-label="More options" title="More options" class="mobile-only"><i data-lucide="plus"></i></button>
+              <button id="attach-file-btn" type="button" aria-label="Attach file" title="Attach file" class="desktop-only"><i data-lucide="paperclip"></i></button>
+              <button id="attach-image-btn" type="button" aria-label="Attach image" title="Attach image" class="desktop-only"><i data-lucide="image"></i></button>
               <button id="stt-btn" type="button" aria-label="Voice input" title="Voice input"><i data-lucide="mic"></i></button>
               <button id="schedule-btn" type="button" aria-label="Schedule message" title="Schedule message"><i data-lucide="clock"></i></button>
               <button id="ask-mate-btn" type="button" aria-label="Ask Mate" title="Ask a Mate for advice on this session"><i data-lucide="at-sign"></i></button>
-              <div id="context-sources-btn-wrap">
-                <button id="context-sources-add" type="button" title="Add context sources"><i data-lucide="plus"></i><span class="ctx-label">Context</span></button>
+              <div id="context-sources-btn-wrap" class="desktop-only">
+                <button id="context-sources-add" type="button" title="Add context sources"><i data-lucide="library"></i><span class="ctx-label">Context</span></button>
                 <div id="context-sources-picker" class="hidden">
                   <div class="context-picker-section" id="context-picker-email"></div>
                   <div class="context-picker-section" id="context-picker-terminals"></div>
@@ -542,6 +544,34 @@
       </div>
     </div>
   </div>
+  <!-- Mobile input-more bottom sheet: attach / image + context sources -->
+  <div id="input-more-sheet" class="hidden">
+    <div class="input-more-backdrop"></div>
+    <div class="input-more-content">
+      <div class="input-more-handle"></div>
+      <div class="input-more-actions">
+        <button class="input-more-action" id="input-more-attach">
+          <i data-lucide="paperclip"></i>
+          <span>Attach file</span>
+        </button>
+        <button class="input-more-action" id="input-more-image">
+          <i data-lucide="image"></i>
+          <span>Image</span>
+        </button>
+      </div>
+      <div class="input-more-divider"></div>
+      <div class="input-more-section-label">
+        <i data-lucide="library"></i>
+        <span>Context sources</span>
+      </div>
+      <div class="input-more-context-body" id="input-more-context-body">
+        <div class="context-picker-section" id="context-picker-email-mobile"></div>
+        <div class="context-picker-section" id="context-picker-terminals-mobile"></div>
+        <div class="context-picker-section" id="context-picker-tabs-mobile"></div>
+      </div>
+    </div>
+  </div>
+
   <!-- Mobile fullscreen sheet overlay (Projects / Sessions) -->
   <div id="mobile-sheet" class="hidden">
     <div class="mobile-sheet-backdrop"></div>

package/lib/public/modules/app-dm.js

@@ -210,6 +210,8 @@ export function enterDmMode(key, targetUser, messages) {
     // Close file viewer and terminal panel BEFORE switching WS (needs old WS still open)
     try { closeFileViewer(); } catch(e) {}
     closeTerminal();
+    var termBtn = document.getElementById("terminal-toggle-btn");
+    if (termBtn) termBtn.style.display = "none";
     // Apply mate color to chat title bar and panels
     var mateColor = (targetUser.profile && targetUser.profile.avatarColor) || targetUser.avatarColor || "#7c3aed";
     document.body.style.setProperty("--mate-color", mateColor);
@@ -323,6 +325,9 @@ export function exitDmMode(skipProjectSwitch) {
   hideKnowledge();
   hideMemory();
   if (isSchedulerOpen()) closeScheduler();
+  // Restore terminal button
+  var termBtn = document.getElementById("terminal-toggle-btn");
+  if (termBtn) termBtn.style.display = "";
   // Reset DM header
   var dmHeaderBar = document.getElementById("dm-header-bar");
   if (dmHeaderBar) {

package/lib/public/modules/app-messages.js

@@ -11,7 +11,7 @@ import { refreshIcons, iconHtml } from './icons.js';
 import { renderMarkdown } from './markdown.js';
 import { updatePageTitle } from './sidebar.js';
 import { renderSessionList, updateSessionPresence, populateCliSessionList, handleSearchResults, updateSessionBadge } from './sidebar-sessions.js';
-import { updateDmBadge, renderSidebarPresence, setMentionActive } from './sidebar-mates.js';
+import { updateDmBadge, renderSidebarPresence, setMentionActive, renderUserStrip } from './sidebar-mates.js';
 import { refreshMobileChatSheet } from './sidebar-mobile.js';
 import { renderMateSessionList, handleMateSearchResults, updateMateSidebarProfile } from './mate-sidebar.js';
 import { renderKnowledgeList, handleKnowledgeContent } from './mate-knowledge.js';
@@ -369,9 +369,9 @@ export function processMessage(msg) {
 
       case "codex_config":
         store.set({
-          codexApproval: msg.approval || "on-failure",
-          codexSandbox: msg.sandbox || "workspace-write",
-          codexWebSearch: msg.webSearch || "disabled",
+          codexApproval: msg.approval,
+          codexSandbox: msg.sandbox,
+          codexWebSearch: msg.webSearch,
         });
         break;
 
@@ -1171,6 +1171,7 @@ export function processMessage(msg) {
 
       case "projects_updated":
         updateProjectList(msg);
+        renderUserStrip();
         break;
 
       case "project_owner_changed":