clay-server 2.40.0-beta.1 → 2.40.0-beta.3

package/lib/claude-hook-installer.js

@@ -24,8 +24,17 @@ var CLAY_HOOK_MARKER = "clay:tui-notify";
 // Allow-patterns Clay manages in ~/.claude/settings.json `permissions.allow`.
 // These mirror sdk-bridge.js `checkToolWhitelist` so TUI sessions get the
 // same auto-approval convenience as SDK sessions. Conservative: only
-// commands that stay safe even under Claude Code's prefix matching (compound
-// commands like `ls && rm -rf /` would otherwise sneak past `Bash(ls:*)`).
+// commands that stay safe even under Claude Code's wildcard matching
+// (compound commands like `ls && rm -rf /` would otherwise sneak past
+// `Bash(ls *)`).
+//
+// Pattern syntax note: claude 2.x uses space-wildcard form `Bash(cmd *)`
+// for prefix matching. The older colon form `Bash(cmd:*)` is flagged as
+// legacy in the CLI and no longer reliably matches argument-bearing
+// commands - the TUI was still prompting for read-only invocations like
+// `ls -la` even with the allow-list installed. Patterns below use the
+// modern form. The bare command (e.g. `Bash(ls)`) is included alongside
+// the wildcard so zero-arg invocations are also covered.
 //
 // User-authored entries are preserved -- on re-install we only strip
 // patterns that appear in this constant list.
@@ -48,46 +57,48 @@ var CLAY_MANAGED_ALLOW = [
   // Safe Bash commands. Match the curated set in sdk-bridge.js's
   // safeBashCommands, restricted to ones whose pure read-only behavior
   // doesn't depend on argument shape.
-  "Bash(ls:*)", "Bash(cat:*)", "Bash(head:*)", "Bash(tail:*)", "Bash(wc:*)",
-  "Bash(file:*)", "Bash(stat:*)", "Bash(find:*)", "Bash(tree:*)",
-  "Bash(du:*)", "Bash(df:*)", "Bash(readlink:*)", "Bash(realpath:*)",
-  "Bash(basename:*)", "Bash(dirname:*)",
-  "Bash(grep:*)", "Bash(rg:*)", "Bash(ag:*)", "Bash(ack:*)",
-  "Bash(fgrep:*)", "Bash(egrep:*)",
-  "Bash(which:*)", "Bash(type:*)", "Bash(whereis:*)",
-  "Bash(echo:*)", "Bash(printf:*)", "Bash(env:*)", "Bash(printenv:*)",
-  "Bash(pwd:*)", "Bash(whoami:*)", "Bash(id:*)", "Bash(groups:*)",
-  "Bash(date:*)", "Bash(uname:*)", "Bash(hostname:*)", "Bash(uptime:*)",
-  "Bash(arch:*)", "Bash(nproc:*)", "Bash(free:*)",
-  "Bash(lsb_release:*)", "Bash(sw_vers:*)", "Bash(locale:*)",
+  "Bash(ls)", "Bash(ls *)", "Bash(cat *)", "Bash(head *)", "Bash(tail *)", "Bash(wc *)",
+  "Bash(file *)", "Bash(stat *)", "Bash(find *)", "Bash(tree)", "Bash(tree *)",
+  "Bash(du *)", "Bash(df)", "Bash(df *)", "Bash(readlink *)", "Bash(realpath *)",
+  "Bash(basename *)", "Bash(dirname *)",
+  "Bash(grep *)", "Bash(rg *)", "Bash(ag *)", "Bash(ack *)",
+  "Bash(fgrep *)", "Bash(egrep *)",
+  "Bash(which *)", "Bash(type *)", "Bash(whereis *)",
+  "Bash(echo)", "Bash(echo *)", "Bash(printf *)", "Bash(env)", "Bash(env *)", "Bash(printenv)", "Bash(printenv *)",
+  "Bash(pwd)", "Bash(whoami)", "Bash(id)", "Bash(id *)", "Bash(groups)", "Bash(groups *)",
+  "Bash(date)", "Bash(date *)", "Bash(uname)", "Bash(uname *)", "Bash(hostname)", "Bash(uptime)",
+  "Bash(arch)", "Bash(nproc)", "Bash(free)", "Bash(free *)",
+  "Bash(lsb_release *)", "Bash(sw_vers)", "Bash(sw_vers *)", "Bash(locale)", "Bash(locale *)",
   // Git read-only subcommands. Listed individually so write subcommands
   // (commit, push, reset, etc.) still prompt.
-  "Bash(git status:*)", "Bash(git log:*)", "Bash(git diff:*)",
-  "Bash(git show:*)", "Bash(git branch:*)", "Bash(git tag:*)",
-  "Bash(git remote:*)", "Bash(git config --get:*)",
-  "Bash(git rev-parse:*)", "Bash(git ls-files:*)",
-  "Bash(git blame:*)", "Bash(git describe:*)",
+  "Bash(git status)", "Bash(git status *)", "Bash(git log)", "Bash(git log *)",
+  "Bash(git diff)", "Bash(git diff *)", "Bash(git show)", "Bash(git show *)",
+  "Bash(git branch)", "Bash(git branch *)", "Bash(git tag)", "Bash(git tag *)",
+  "Bash(git remote)", "Bash(git remote *)", "Bash(git config --get *)",
+  "Bash(git rev-parse *)", "Bash(git ls-files)", "Bash(git ls-files *)",
+  "Bash(git blame *)", "Bash(git describe)", "Bash(git describe *)",
   // Package manager read-only subcommands
-  "Bash(npm list:*)", "Bash(npm ls:*)", "Bash(npm view:*)", "Bash(npm outdated:*)",
-  "Bash(npm config get:*)", "Bash(yarn list:*)", "Bash(pnpm list:*)",
+  "Bash(npm list)", "Bash(npm list *)", "Bash(npm ls)", "Bash(npm ls *)",
+  "Bash(npm view *)", "Bash(npm outdated)", "Bash(npm outdated *)",
+  "Bash(npm config get *)", "Bash(yarn list)", "Bash(yarn list *)", "Bash(pnpm list)", "Bash(pnpm list *)",
   // Version checks
-  "Bash(node --version:*)", "Bash(npm --version:*)", "Bash(python --version:*)",
-  "Bash(python3 --version:*)", "Bash(go version:*)", "Bash(ruby --version:*)",
+  "Bash(node --version)", "Bash(npm --version)", "Bash(python --version)",
+  "Bash(python3 --version)", "Bash(go version)", "Bash(ruby --version)",
   // Text processing (pure stdin/stdout)
-  "Bash(jq:*)", "Bash(yq:*)", "Bash(sort:*)", "Bash(uniq:*)",
-  "Bash(cut:*)", "Bash(tr:*)", "Bash(awk:*)", "Bash(sed:*)",
-  "Bash(paste:*)", "Bash(column:*)", "Bash(rev:*)", "Bash(tac:*)",
-  "Bash(nl:*)", "Bash(fmt:*)", "Bash(comm:*)", "Bash(join:*)",
+  "Bash(jq *)", "Bash(yq *)", "Bash(sort)", "Bash(sort *)", "Bash(uniq)", "Bash(uniq *)",
+  "Bash(cut *)", "Bash(tr *)", "Bash(awk *)", "Bash(sed *)",
+  "Bash(paste *)", "Bash(column *)", "Bash(rev)", "Bash(rev *)", "Bash(tac)", "Bash(tac *)",
+  "Bash(nl)", "Bash(nl *)", "Bash(fmt)", "Bash(fmt *)", "Bash(comm *)", "Bash(join *)",
   // Comparison / hashing (read-only)
-  "Bash(diff:*)", "Bash(cmp:*)", "Bash(md5sum:*)", "Bash(sha256sum:*)",
-  "Bash(sha1sum:*)", "Bash(shasum:*)", "Bash(cksum:*)", "Bash(base64:*)",
-  "Bash(xxd:*)", "Bash(od:*)", "Bash(hexdump:*)",
+  "Bash(diff *)", "Bash(cmp *)", "Bash(md5sum *)", "Bash(sha256sum *)",
+  "Bash(sha1sum *)", "Bash(shasum *)", "Bash(cksum *)", "Bash(base64)", "Bash(base64 *)",
+  "Bash(xxd *)", "Bash(od *)", "Bash(hexdump *)",
   // Calendar / math
-  "Bash(cal:*)", "Bash(bc:*)", "Bash(expr:*)", "Bash(factor:*)", "Bash(seq:*)",
+  "Bash(cal)", "Bash(cal *)", "Bash(bc)", "Bash(bc *)", "Bash(expr *)", "Bash(factor *)", "Bash(seq *)",
   // Process / network introspection (read-only)
-  "Bash(ps:*)", "Bash(top:*)", "Bash(htop:*)", "Bash(pgrep:*)", "Bash(lsof:*)",
-  "Bash(netstat:*)", "Bash(ss:*)", "Bash(ifconfig:*)", "Bash(ip:*)",
-  "Bash(dig:*)", "Bash(nslookup:*)", "Bash(host:*)",
+  "Bash(ps)", "Bash(ps *)", "Bash(top)", "Bash(top *)", "Bash(htop)", "Bash(pgrep *)", "Bash(lsof)", "Bash(lsof *)",
+  "Bash(netstat)", "Bash(netstat *)", "Bash(ss)", "Bash(ss *)", "Bash(ifconfig)", "Bash(ifconfig *)", "Bash(ip *)",
+  "Bash(dig *)", "Bash(nslookup *)", "Bash(host *)",
 ];
 
 function buildHookCommand(notifyUrl) {
@@ -186,11 +197,27 @@ function installNotificationHook(opts) {
   return { installed: installed, errors: errors };
 }
 
+// Pattern shapes Clay used to install in older versions. Listed here so an
+// upgrade can strip them from settings.json before re-installing the modern
+// list. Without this, users who already had Clay running would end up with
+// stale legacy-syntax entries next to the new ones - mostly harmless but
+// noisy, and confusing if anyone reads the file.
+function isLegacyClayPattern(p) {
+  if (typeof p !== "string") return false;
+  // Old colon-prefix Bash patterns: Bash(ls:*), Bash(git status:*), etc.
+  // Modern patterns use space-asterisk and never contain ":*", so this is
+  // a safe identifier for old Clay entries even though it can't tell apart
+  // user-authored colon patterns. The risk is judged acceptable because
+  // claude flags the colon form as legacy and is phasing it out anyway.
+  if (p.indexOf("Bash(") === 0 && p.indexOf(":*)") !== -1) return true;
+  return false;
+}
+
 // Merge Clay's managed allow-list into permissions.allow without disturbing
 // the user's own entries. We identify "ours" by membership in
-// CLAY_MANAGED_ALLOW: re-install strips any existing CLAY_MANAGED_ALLOW
-// patterns, then re-inserts the current list. User-authored patterns
-// survive unchanged because they're never in CLAY_MANAGED_ALLOW.
+// CLAY_MANAGED_ALLOW (current) or isLegacyClayPattern (previous shape):
+// re-install strips both, then re-inserts the current list. User-authored
+// patterns survive unchanged.
 function mergeAllowList(settingsPath, patterns) {
   var data = readSettings(settingsPath);
   if (!data.permissions || typeof data.permissions !== "object") data.permissions = {};
@@ -199,8 +226,13 @@ function mergeAllowList(settingsPath, patterns) {
   var managedSet = {};
   for (var i = 0; i < CLAY_MANAGED_ALLOW.length; i++) managedSet[CLAY_MANAGED_ALLOW[i]] = true;
 
-  // Strip prior Clay-managed entries, then append the fresh list.
-  var preserved = allow.filter(function (p) { return !managedSet[p]; });
+  // Strip prior Clay-managed entries (current shape + legacy colon shape),
+  // then append the fresh list.
+  var preserved = allow.filter(function (p) {
+    if (managedSet[p]) return false;
+    if (isLegacyClayPattern(p)) return false;
+    return true;
+  });
   var next = preserved.concat(patterns);
 
   var before = JSON.stringify(allow);

package/lib/public/css/menus.css

@@ -544,6 +544,27 @@
 .config-radio-item:hover { background: rgba(var(--overlay-rgb),0.05); color: var(--text); }
 .config-radio-item.active { color: var(--accent); font-weight: 600; }
 
+/* Locked picker items (Codex GUI sessions after the first message: model
+   is bound to the thread, picks would be silently ignored). Active model
+   stays slightly more legible so the user can still see which one's live. */
+.config-radio-item.locked {
+  cursor: not-allowed;
+  opacity: 0.5;
+}
+.config-radio-item.locked:hover {
+  background: transparent;
+  color: var(--text-secondary);
+}
+.config-radio-item.locked.active {
+  opacity: 0.85;
+}
+.config-model-hint {
+  padding: 4px 14px 10px;
+  font-size: 11px;
+  color: var(--text-dimmer);
+  font-style: italic;
+}
+
 /* Segmented control for effort */
 .config-segmented {
   display: flex;

package/lib/public/css/mobile-nav.css

@@ -358,6 +358,42 @@
     background: rgba(var(--overlay-rgb), 0.06);
   }
 
+  /* Vendor-split row: Claude + Codex side-by-side. Used inside
+     renderMobileSessionsInto so users can pick the vendor on mobile, the
+     same way the desktop sidebar already does. */
+  .mobile-session-new-row {
+    display: flex;
+    gap: 6px;
+    padding: 6px 8px 8px;
+    border-bottom: 1px solid var(--border-subtle);
+  }
+
+  .mobile-session-new-row .mobile-session-new-vendor {
+    flex: 1 1 0;
+    width: auto;
+    margin-bottom: 0;
+    padding: 10px 12px;
+    border: 1px solid var(--border-subtle);
+    border-radius: 8px;
+    background: rgba(var(--overlay-rgb), 0.03);
+    color: var(--text);
+    justify-content: center;
+    gap: 8px;
+  }
+  .mobile-session-new-row .mobile-session-new-vendor:last-of-type {
+    border-bottom: 1px solid var(--border-subtle);
+  }
+  .mobile-session-new-row .mobile-session-new-vendor:active {
+    background: rgba(var(--overlay-rgb), 0.1);
+  }
+  .mobile-session-new-icon {
+    width: 18px;
+    height: 18px;
+    flex-shrink: 0;
+    border-radius: 4px;
+    object-fit: cover;
+  }
+
   /* --- Chat filter bar (horizontal scroll chips) --- */
   .mobile-chat-filter-bar {
     display: flex;

package/lib/public/css/user-settings.css

@@ -862,8 +862,32 @@
 
 /* Header TUI font icon button - single trigger that opens a popover
    with the full font picker + size stepper. Visible only when a TUI
-   session is active. Inherits title-bar icon button styling so it
-   blends with the existing toolbar. */
+   session is active. Matches the title-bar icon button tone used by
+   #terminal-toggle-btn / #find-in-session-btn / #debate-pdf-btn so
+   it blends into the toolbar instead of looking like a raw button. */
+.header-tui-font-btn {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: none;
+  border: 1px solid transparent;
+  border-radius: 8px;
+  color: var(--text-dimmer);
+  cursor: pointer;
+  padding: 4px;
+  transition: color 0.15s, background 0.15s, border-color 0.15s;
+}
+.header-tui-font-btn .lucide { width: 15px; height: 15px; }
+.header-tui-font-btn:hover {
+  color: var(--text-secondary);
+  background: rgba(var(--overlay-rgb), 0.04);
+  border-color: var(--border);
+}
+.header-tui-font-btn.active {
+  color: var(--text);
+  background: rgba(var(--overlay-rgb), 0.06);
+  border-color: var(--border);
+}
 .header-tui-font-btn.hidden { display: none; }
 
 /* Floating popover that holds the font menu + size row. Anchored

package/lib/public/modules/app-messages.js

@@ -168,10 +168,17 @@ export function processMessage(msg) {
         if (!store.get('sessionIsProcessing')) {
           applyDeadSessionTodoCompaction();
         }
-        // Hide vendor toggle if session has history (vendor already locked)
+        // Show the locked vendor toggle only when history exists AND the
+        // vendor isn't already committed. With a committed vendor,
+        // session_switched has already hidden the toggle and shown the
+        // small #active-vendor-indicator; re-showing the locked toggle
+        // here would duplicate the avatar next to the indicator.
         var _hTotal = store.get('historyTotal') || 0;
         var _vtw2 = document.getElementById("vendor-toggle-wrap");
-        if (_vtw2 && _hTotal > 0) { _vtw2.classList.remove("hidden"); _vtw2.classList.add("locked"); }
+        if (_vtw2 && _hTotal > 0 && !store.get('currentVendor')) {
+          _vtw2.classList.remove("hidden");
+          _vtw2.classList.add("locked");
+        }
         // Restore cached rich context usage BEFORE updateContextPanel runs
         if (msg.contextUsage) {
           store.set({ richContextUsage: msg.contextUsage });

package/lib/public/modules/app-panels.js

@@ -177,16 +177,27 @@ function hasBeta(name) {
 
 function rebuildModelList() {
   if (!configModelList) return;
-  // GUI chat sessions have their model bound at creation time (picked from
-  // the new-session config before the first message). Showing a picker
-  // inside the chat is misleading: changing it mid-thread breaks tool
-  // schemas and cache reuse. Hide the entire MODEL section in GUI mode.
+  // Picker visibility by vendor+mode:
+  //   Claude TUI -> shown (Claude TUI accepts mid-thread model swaps).
+  //   Claude GUI -> hidden (Agent SDK binds model at session creation;
+  //                 changing mid-thread breaks tool schemas and cache reuse).
+  //   Codex GUI  -> shown but locked after the first message (Codex protocol
+  //                 binds model at thread creation; sdk-bridge setModel
+  //                 already stores into sm.currentModel when there's no
+  //                 active queryInstance, so picks made before the first
+  //                 message do take effect on thread start).
   var modelSection = configModelList.parentElement;
   var s = store.snap();
-  var hideModelPicker = s.activeSessionMode === "gui";
+  var vendor = s.currentVendor || "claude";
+  var hideModelPicker = s.activeSessionMode === "gui" && vendor === "claude";
   if (modelSection) modelSection.style.display = hideModelPicker ? "none" : "";
   configModelList.innerHTML = "";
   if (hideModelPicker) return;
+
+  var lockedForCodex = vendor === "codex"
+    && s.activeSessionMode === "gui"
+    && !!s.sessionHasHistory;
+
   var list = s.currentModels.length > 0 ? s.currentModels : (s.currentModel ? [{ value: s.currentModel, displayName: s.currentModel }] : []);
   for (var i = 0; i < list.length; i++) {
     var item = list[i];
@@ -196,19 +207,32 @@ function rebuildModelList() {
     var btn = document.createElement("button");
     btn.className = "config-radio-item";
     if (value === s.currentModel) btn.classList.add("active");
+    if (lockedForCodex) btn.classList.add("locked");
     btn.dataset.model = value;
     btn.textContent = label;
-    btn.addEventListener("click", function () {
-      var model = this.dataset.model;
-      var ws = getWs();
-      if (ws && ws.readyState === 1) {
-        ws.send(JSON.stringify({ type: "set_model", model: model }));
-      }
-      configPopover.classList.add("hidden");
-      configChip.classList.remove("active");
-    });
+    if (lockedForCodex) {
+      btn.disabled = true;
+      btn.title = "Model is locked after the first message in a Codex session. Start a new session to change it.";
+    } else {
+      btn.addEventListener("click", function () {
+        var model = this.dataset.model;
+        var ws = getWs();
+        if (ws && ws.readyState === 1) {
+          ws.send(JSON.stringify({ type: "set_model", model: model }));
+        }
+        configPopover.classList.add("hidden");
+        configChip.classList.remove("active");
+      });
+    }
     configModelList.appendChild(btn);
   }
+
+  if (lockedForCodex) {
+    var hint = document.createElement("div");
+    hint.className = "config-model-hint";
+    hint.textContent = "Locked after first message — start a new session to change.";
+    configModelList.appendChild(hint);
+  }
 }
 
 function rebuildModeList() {

package/lib/public/modules/input.js

@@ -260,10 +260,36 @@ export function sendMessage() {
   if (_selVendor) payload.vendor = _selVendor;
   ctx.ws.send(JSON.stringify(payload));
 
-  // Hide vendor toggle after first message (vendor is locked to this session)
+  // First message commits the vendor and bumps the session into
+  // has-history state. The server won't re-fire session_switched after a
+  // message, so mirror the vendor-toggle/active-indicator swap locally:
+  // hide the picker, show the small avatar next to the config chip.
+  // Bumping sessionHasHistory drives in-session lock states (e.g. the
+  // Codex model picker that becomes informational once the thread is
+  // bound to a model).
+  var _committedVendor = store.get('currentVendor');
   var _vtw2 = document.getElementById("vendor-toggle-wrap");
-  if (_vtw2) { _vtw2.classList.remove("hidden"); _vtw2.classList.add("locked"); }
-  store.set({ vendorSelectionLocked: false });
+  var _avi = document.getElementById("active-vendor-indicator");
+  var _avIcon = document.getElementById("active-vendor-icon");
+  if (_committedVendor) {
+    if (_vtw2) {
+      _vtw2.classList.add("hidden");
+      _vtw2.classList.remove("locked");
+    }
+    if (_avi && _avIcon) {
+      _avIcon.src = _committedVendor === "codex" ? "/codex-avatar.png" : "/claude-code-avatar.png";
+      _avIcon.alt = _committedVendor === "codex" ? "Codex" : "Claude";
+      _avi.title = (_committedVendor === "codex" ? "Codex" : "Claude") + " session";
+      _avi.classList.remove("hidden");
+    }
+  } else if (_vtw2) {
+    // No committed vendor (defensive — shouldn't happen because the
+    // input is otherwise gated on a vendor pick). Fall back to the
+    // locked toggle so the running vendor is still visible.
+    _vtw2.classList.remove("hidden");
+    _vtw2.classList.add("locked");
+  }
+  store.set({ vendorSelectionLocked: false, sessionHasHistory: true });
 
   // Show pre-thinking dots before server responds
   if (ctx.isMateDm && ctx.isMateDm()) {

package/lib/public/modules/profile.js

@@ -6,6 +6,7 @@ import { iconHtml, refreshIcons } from './icons.js';
 import { setSTTLang } from './stt.js';
 import { avatarUrl, mateAvatarUrl, AVATAR_STYLES } from './avatar.js';
 import { store } from './store.js';
+import { applyTerminalFont } from './terminal-prefs.js';
 
 var ctx;
 var profile = { name: '', lang: 'en-US', avatarStyle: 'thumbs', avatarSeed: '', avatarColor: '#7c3aed', avatarCustom: '' };
@@ -579,6 +580,14 @@ export function initProfile(_ctx) {
       setSTTLang(profile.lang);
     }
 
+    // Hydrate terminal font prefs at boot. Previously this only happened
+    // when the user opened the Settings modal (user-settings.js's
+    // populateAccount), so a hard refresh would drop persisted picks back
+    // to defaults until the modal was visited.
+    if (data.terminalFont && typeof data.terminalFont === "object") {
+      applyTerminalFont(data.terminalFont.family, data.terminalFont.size);
+    }
+
     // Apply Mates UI gate at boot so the sidebar avatars / DM picker
     // entry / home-hub strip are hidden before the user opens settings.
     // Default true: only flip the body class off when explicitly false.

package/lib/public/modules/session-tui-view.js

@@ -304,7 +304,10 @@ function fitNow() {
   if (!xterm || !fitAddon || !hostEl) return;
   syncHostBounds();
   try {
+    var prevCols = xterm.cols;
+    var prevRows = xterm.rows;
     fitAddon.fit();
+    var dimsChanged = (xterm.cols !== prevCols || xterm.rows !== prevRows);
     // Inform the server so its PTY's idea of cols/rows matches what xterm
     // just rendered. Without this, claude TUI redraws using stale dims.
     if (currentTermId != null && getWs() && getWs().readyState === 1) {
@@ -315,6 +318,14 @@ function fitNow() {
         rows: xterm.rows,
       }));
     }
+    // After cols/rows change, the previous frame in xterm's buffer is now
+    // reflowed/truncated against the new geometry. Claude TUI (ink) repaints
+    // using absolute cursor positioning and only writes cells it considers
+    // dirty - cells outside the old bounding box stay showing stale or empty
+    // content (the "right half is blank after window enlarges" symptom).
+    // Wipe the screen here so the next SIGWINCH-driven redraw lands on a
+    // clean canvas.
+    if (dimsChanged) xterm.write("\x1b[2J\x1b[H");
   } catch (e) {}
 }
 

package/lib/public/modules/sidebar-mobile.js

@@ -698,16 +698,35 @@ function renderMateMobileActions(container) {
 
 // Helper: render sorted sessions into a container with date groups (with loop session grouping)
 function renderMobileSessionsInto(container) {
-  var newBtn = document.createElement("button");
-  newBtn.className = "mobile-session-new";
-  newBtn.innerHTML = '<i data-lucide="plus" style="width:16px;height:16px"></i> New session';
-  newBtn.addEventListener("click", function () {
+  // Vendor-aware new-session row. Mirrors the desktop sidebar's two-button
+  // pattern (Claude defaults to TUI, Codex always GUI) so mobile users can
+  // pick the vendor instead of being silently routed to Claude TUI.
+  var newRow = document.createElement("div");
+  newRow.className = "mobile-session-new-row";
+
+  var claudeBtn = document.createElement("button");
+  claudeBtn.className = "mobile-session-new mobile-session-new-vendor";
+  claudeBtn.innerHTML = '<img src="/claude-code-avatar.png" class="mobile-session-new-icon" alt=""><span>Claude</span>';
+  claudeBtn.addEventListener("click", function () {
     if (getWs() && store.get('connected')) {
-      getWs().send(JSON.stringify({ type: "new_session" }));
+      getWs().send(JSON.stringify({ type: "new_session", vendor: "claude", mode: "tui" }));
     }
     closeMobileSheet();
   });
-  container.appendChild(newBtn);
+  newRow.appendChild(claudeBtn);
+
+  var codexBtn = document.createElement("button");
+  codexBtn.className = "mobile-session-new mobile-session-new-vendor";
+  codexBtn.innerHTML = '<img src="/codex-avatar.png" class="mobile-session-new-icon" alt=""><span>Codex</span>';
+  codexBtn.addEventListener("click", function () {
+    if (getWs() && store.get('connected')) {
+      getWs().send(JSON.stringify({ type: "new_session", vendor: "codex" }));
+    }
+    closeMobileSheet();
+  });
+  newRow.appendChild(codexBtn);
+
+  container.appendChild(newRow);
 
   // Partition: loop sessions vs normal sessions (same logic as desktop renderSessionList)
   var sessions = getCachedSessions();

package/lib/public/modules/terminal.js

@@ -440,6 +440,29 @@ function createXtermForTab(tab) {
   tab.bodyEl = bodyEl;
 }
 
+// Rebuild a tab's WebGL glyph atlas, then force a full redraw.
+//
+// The WebGL renderer caches rasterized glyphs in a texture atlas keyed on
+// the font (family + cell metrics). When the font changes or cell size
+// shifts on resize, the atlas keeps glyphs rasterized from the old state,
+// so text renders garbled until a full repaint rebuilds it. That repaint
+// is exactly what "select all" triggers, which is why selecting everything
+// appears to "fix" the corruption. clearTextureAtlas() forces the rebuild
+// so glyphs re-rasterize at the new font/metrics immediately. Deferred one
+// frame so any preceding fit() has settled. No-op on tabs that fell back to
+// the DOM renderer. Mirrors the resize handler in session-tui-view.js.
+function rebuildTabGlyphAtlas(tab) {
+  if (!tab) return;
+  requestAnimationFrame(function () {
+    if (tab._webglAddon && typeof tab._webglAddon.clearTextureAtlas === "function") {
+      try { tab._webglAddon.clearTextureAtlas(); } catch (e) {}
+    }
+    if (tab.xterm) {
+      try { tab.xterm.refresh(0, tab.xterm.rows - 1); } catch (e) {}
+    }
+  });
+}
+
 // --- Fit active terminal ---
 var fitRafId = null;
 
@@ -462,6 +485,9 @@ function fitTerminal() {
         }));
       }
     } catch (e) {}
+    // Cell metrics shift on resize; rebuild the WebGL glyph atlas so glyphs
+    // don't render against stale cell dimensions.
+    rebuildTabGlyphAtlas(tab);
   });
 }
 
@@ -818,7 +844,23 @@ function applyFontToAllTabs(family, size) {
       if (family) tab.xterm.options.fontFamily = family;
       if (size) tab.xterm.options.fontSize = size;
       if (tab.fitAddon) tab.fitAddon.fit();
+      // A font-size change shifts cell metrics, so fit() recomputes
+      // cols/rows. Notify the PTY of the new size - otherwise the running
+      // program keeps drawing to the old dimensions and the output looks
+      // corrupted. (Font-family-only changes leave cols/rows unchanged,
+      // making this a harmless no-op.) Mirrors fitTerminal()'s resize msg.
+      if (ctx.ws && ctx.connected) {
+        ctx.ws.send(JSON.stringify({
+          type: "term_resize",
+          id: tab.id,
+          cols: tab.xterm.cols,
+          rows: tab.xterm.rows,
+        }));
+      }
     } catch (e) {}
+    // Changing the font invalidates the WebGL glyph atlas; rebuild it so
+    // the new font renders cleanly instead of stale, garbled cached glyphs.
+    rebuildTabGlyphAtlas(tab);
   }
 }
 onTerminalFontChange(applyFontToAllTabs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "2.40.0-beta.1",
+  "version": "2.40.0-beta.3",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js",