clay-server 2.44.1-beta.1 → 2.45.0-beta.1

package/lib/daemon.js

@@ -28,7 +28,8 @@ var path = require("path");
 var { loadConfig, saveConfig, socketPath, generateSlug, syncClayrc, removeFromClayrc, writeCrashInfo, readCrashInfo, clearCrashInfo, isPidAlive, clearStaleConfig, REAL_HOME } = require("./config");
 var { createIPCServer } = require("./ipc");
 var { createServer, generateAuthToken } = require("./server");
-var { checkAclSupport, grantProjectAccess, revokeProjectAccess, provisionAllUsers, provisionLinuxUser, grantAllUsersAccess, deactivateLinuxUser, ensureProjectsDir } = require("./os-users");
+var osUsersMod = require("./os-users");
+var { checkAclSupport, grantProjectAccess, revokeProjectAccess, provisionAllUsers, provisionLinuxUser, grantAllUsersAccess, deactivateLinuxUser, ensureProjectsDir } = osUsersMod;
 var usersModule = require("./users");
 var { createWorktree, removeWorktree, isWorktree } = require("./worktree");
 var mates = require("./mates");
@@ -52,6 +53,9 @@ if (process.env.SUDO_USER) console.log("[daemon] SUDO_USER: " + process.env.SUDO
 console.log("[daemon] UID: " + (typeof process.getuid === "function" ? process.getuid() : "N/A"));
 
 // --- OS users mode: check required system dependencies ---
+// Supplementary-group inheritance (issue #367): default on so sessions behave
+// like a normal login; operators can disable via config / the settings toggle.
+osUsersMod.setInheritGroups(config.inheritGroups !== false);
 if (config.osUsers) {
   var checkExec = require("child_process").execFileSync;
   var missing = [];
@@ -63,6 +67,11 @@ if (config.osUsers) {
     console.error("[daemon] Install with:  sudo apt install " + missing.map(function (m) { return m.split(" ")[0]; }).join(" "));
     process.exit(78); // EX_CONFIG
   }
+  if (config.inheritGroups !== false) {
+    console.log("[daemon] Sessions inherit each user's supplementary groups (docker, etc.); disable in Settings > User Groups.");
+  } else {
+    console.log("[daemon] Sessions run with primary group only (supplementary groups dropped); enable in Settings > User Groups.");
+  }
 }
 
 // --- TLS ---
@@ -216,7 +225,8 @@ var relay = createServer({
           if (uidGid) {
             fs.chmodSync(targetDir, 0o700);
             execFileSync("chown", ["-R", linuxUser + ":" + linuxUser, targetDir]);
-            execFileSync("git", ["init"], { cwd: targetDir, uid: uidGid.uid, gid: uidGid.gid, env: { PATH: "/usr/local/bin:/usr/bin:/bin" } });
+            var gitInit = osUsersMod.wrapSpawnAsUser("git", ["init"], { cwd: targetDir, uid: uidGid.uid, gid: uidGid.gid, env: { PATH: "/usr/local/bin:/usr/bin:/bin" } });
+            execFileSync(gitInit.command, gitInit.args, gitInit.options);
           } else {
             execFileSync("git", ["init"], { cwd: targetDir });
           }
@@ -296,7 +306,8 @@ var relay = createServer({
         return;
       }
     }
-    var proc = spawn("git", ["clone", cloneUrl, targetDir], spawnOpts);
+    var cloneSpawn = osUsersMod.wrapSpawnAsUser("git", ["clone", cloneUrl, targetDir], spawnOpts);
+    var proc = spawn(cloneSpawn.command, cloneSpawn.args, cloneSpawn.options);
     var stderrBuf = "";
     proc.stderr.on("data", function (chunk) { stderrBuf += chunk.toString(); });
     // 5 minute timeout
@@ -689,8 +700,10 @@ var relay = createServer({
       headless: !!config.headless,
       keepAwake: !!config.keepAwake,
       autoContinueOnRateLimit: !!config.autoContinueOnRateLimit,
+      osUsers: !!config.osUsers,
+      inheritGroups: config.inheritGroups !== false,
       chatLayout: config.chatLayout || "channel",
-      matesEnabled: config.matesEnabled !== false,
+      matesEnabled: config.matesEnabled === true,
       pinEnabled: !!config.pinHash,
       platform: process.platform,
       hostname: os2.hostname(),
@@ -804,6 +817,16 @@ var relay = createServer({
     console.log("[daemon] Keep awake:", want, "(web)");
     return { ok: true, keepAwake: want };
   },
+  onSetInheritGroups: function (value) {
+    var want = !!value;
+    config.inheritGroups = want;
+    saveConfig(config);
+    // Apply live so subsequent session/terminal spawns pick it up without a
+    // daemon restart; already-running sessions keep their current groups.
+    osUsersMod.setInheritGroups(want);
+    console.log("[daemon] Inherit supplementary groups:", want, "(web)");
+    return { ok: true, inheritGroups: want };
+  },
   onShutdown: function () {
     console.log("[daemon] Shutdown requested via web UI");
     gracefulShutdown();

package/lib/os-users.js

@@ -14,6 +14,68 @@ function isSafeLinuxUsername(username) {
   return typeof username === "string" && /^[a-z_][a-z0-9_-]*[$]?$/.test(username);
 }
 
+// --- Supplementary group inheritance (issue #367) ---
+// Node's child_process { uid, gid } options call setuid/setgid but never
+// initgroups(), so spawned sessions drop all supplementary groups (docker,
+// video, wheel, ...). When inheritGroups is enabled we route the spawn through
+// `setpriv --init-groups` so the child gets the same groups as a normal login.
+var _inheritGroups = true; // default: behave like a normal login shell
+var _setprivAvail = null;
+var _warnedNoSetpriv = false;
+
+function setInheritGroups(value) {
+  _inheritGroups = !!value;
+}
+
+function getInheritGroups() {
+  return _inheritGroups;
+}
+
+function setprivAvailable() {
+  if (_setprivAvail !== null) return _setprivAvail;
+  try {
+    execFileSync("setpriv", ["--help"], { stdio: "ignore", timeout: 5000 });
+    _setprivAvail = true;
+  } catch (e) {
+    _setprivAvail = false;
+  }
+  return _setprivAvail;
+}
+
+/**
+ * Wrap a spawn/exec invocation so the child runs as the target user WITH its
+ * supplementary groups initialized (initgroups), which Node's uid/gid options
+ * do not do. Accepts (command, args, options) where options may carry
+ * uid/gid, and returns a normalized { command, args, options } to pass to
+ * spawn()/execFileSync()/pty.spawn().
+ *
+ * - Same-user spawns (no uid/gid in options) are returned unchanged.
+ * - When inheritGroups is disabled, or setpriv is unavailable, falls back to
+ *   Node's uid/gid options (primary group only) so behavior degrades safely.
+ * Requires the parent process to be root, which is the case in os-users mode.
+ */
+function wrapSpawnAsUser(command, args, options) {
+  args = args || [];
+  options = options || {};
+  var uid = options.uid;
+  var gid = options.gid;
+  if (uid == null || gid == null) return { command: command, args: args, options: options };
+
+  if (_inheritGroups && setprivAvailable()) {
+    var wrappedArgs = ["--reuid", String(uid), "--regid", String(gid), "--init-groups", "--", command].concat(args);
+    var newOpts = Object.assign({}, options);
+    delete newOpts.uid;
+    delete newOpts.gid;
+    return { command: "setpriv", args: wrappedArgs, options: newOpts };
+  }
+
+  if (_inheritGroups && !_warnedNoSetpriv) {
+    _warnedNoSetpriv = true;
+    console.warn("[os-users] inheritGroups enabled but `setpriv` not found; supplementary groups will be dropped. Install util-linux to restore them.");
+  }
+  return { command: command, args: args, options: options };
+}
+
 /**
  * Resolve Linux user info from username via getent passwd.
  * Returns { uid, gid, home, user, shell } or throws on failure.
@@ -84,13 +146,14 @@ function fsAsUser(op, args, osUserInfo) {
       "var buf = fs.readFileSync(f);",
       "process.stdout.write(buf.toString('base64'));",
     ].join(" ");
-    var binOutput = execFileSync(process.execPath, ["-e", script], {
+    var binSpawn = wrapSpawnAsUser(process.execPath, ["-e", script], {
       encoding: "utf8",
       timeout: 10000,
       uid: osUserInfo.uid,
       gid: osUserInfo.gid,
       maxBuffer: 50 * 1024 * 1024,
     });
+    var binOutput = execFileSync(binSpawn.command, binSpawn.args, binSpawn.options);
     return { buffer: Buffer.from(binOutput.trim(), "base64") };
   } else if (op === "write") {
     script = [
@@ -104,12 +167,13 @@ function fsAsUser(op, args, osUserInfo) {
     throw new Error("Unknown fsAsUser operation: " + op);
   }
 
-  var output = execFileSync(process.execPath, ["-e", script], {
+  var fsSpawn = wrapSpawnAsUser(process.execPath, ["-e", script], {
     encoding: "utf8",
     timeout: 10000,
     uid: osUserInfo.uid,
     gid: osUserInfo.gid,
   });
+  var output = execFileSync(fsSpawn.command, fsSpawn.args, fsSpawn.options);
 
   return JSON.parse(output.trim());
 }
@@ -554,6 +618,9 @@ module.exports = {
   grantAllUsersAccess: grantAllUsersAccess,
   installClaudeCli: installClaudeCli,
   claudeAvailableForUser: claudeAvailableForUser,
+  setInheritGroups: setInheritGroups,
+  getInheritGroups: getInheritGroups,
+  wrapSpawnAsUser: wrapSpawnAsUser,
   deactivateLinuxUser: deactivateLinuxUser,
   ensureProjectsDir: ensureProjectsDir,
   isHomeDirectory: isHomeDirectory,

package/lib/project-http.js

@@ -335,7 +335,8 @@ function attachHTTP(ctx) {
           });
         }
         console.log("[skill-install] spawning: npx skills add " + url + " --skill " + skill + " --yes " + scopeFlag + " (cwd: " + spawnCwd + ")");
-        var child = spawn("npx", ["skills", "add", url, "--skill", skill, "--yes", scopeFlag], skillSpawnOpts);
+        var skillAddSpawn = require("./os-users").wrapSpawnAsUser("npx", ["skills", "add", url, "--skill", skill, "--yes", scopeFlag], skillSpawnOpts);
+        var child = spawn(skillAddSpawn.command, skillAddSpawn.args, skillAddSpawn.options);
         var stdoutBuf = "";
         var stderrBuf = "";
         child.stdout.on("data", function (chunk) {
@@ -427,11 +428,12 @@ function attachHTTP(ctx) {
           if (uninstallUserInfo) {
             // Run rm as target user to respect permissions
             var rmScript = "var fs = require('fs'); fs.rmSync(" + JSON.stringify(resolved) + ", { recursive: true, force: true });";
-            execFileSync(process.execPath, ["-e", rmScript], {
+            var rmSpawn = require("./os-users").wrapSpawnAsUser(process.execPath, ["-e", rmScript], {
               uid: uninstallUserInfo.uid,
               gid: uninstallUserInfo.gid,
               timeout: 10000,
             });
+            execFileSync(rmSpawn.command, rmSpawn.args, rmSpawn.options);
           } else {
             fs.rmSync(resolved, { recursive: true, force: true });
           }

package/lib/project-sessions.js

@@ -169,19 +169,32 @@ function attachSessions(ctx) {
         var termId = (typeof s.runtimeTerminalId === "number")
           ? s.runtimeTerminalId
           : (typeof s.terminalId === "number" ? s.terminalId : null);
-        try {
-          ctx._notifications && ctx._notifications.notify("tui_attention", {
-            slug: slug,
-            sessionId: s.localId,
-            ownerId: s.ownerId || null,
-            targetUserId: s.ownerId || null,
-            title: "Claude responded",
-            body: firstLine,
-            terminalId: termId,
-            sessionTitle: s.title || "",
-            cliSessionId: s.cliSessionId || null,
-          });
-        } catch (e) {}
+        // Don't banner a session someone is already watching — they can see
+        // the reply in the TUI. Gate at the source (server) rather than relying
+        // on the client's activeSessionId suppression, which isn't reliable for
+        // TUI sessions and lets banners pile up for the session in view.
+        var beingViewed = false;
+        for (var vws of clients) {
+          if (vws.readyState === 1 && vws._clayActiveSession === s.localId) {
+            beingViewed = true;
+            break;
+          }
+        }
+        if (!beingViewed) {
+          try {
+            ctx._notifications && ctx._notifications.notify("tui_attention", {
+              slug: slug,
+              sessionId: s.localId,
+              ownerId: s.ownerId || null,
+              targetUserId: s.ownerId || null,
+              title: "Claude responded",
+              body: firstLine,
+              terminalId: termId,
+              sessionTitle: s.title || "",
+              cliSessionId: s.cliSessionId || null,
+            });
+          } catch (e) {}
+        }
         // Re-read the assistant text index and broadcast it so any client
         // with this session in view can wire hover-to-grab onto the new
         // message right away. The transcript is small enough that a full
@@ -904,6 +917,24 @@ function attachSessions(ctx) {
       return true;
     }
 
+    if (msg.type === "reload_skills") {
+      var session = getSessionForWs(ws);
+      if (session && sdk.reloadSkills) {
+        sdk.reloadSkills(session);
+      }
+      return true;
+    }
+
+    if (msg.type === "set_mcp_permission_mode_override" && msg.serverName) {
+      var session = getSessionForWs(ws);
+      if (session && sdk.setMcpPermissionModeOverride) {
+        // mode: "default" | "auto" | null (null clears the override)
+        var mcpMode = (msg.mode === "auto" || msg.mode === "default") ? msg.mode : null;
+        sdk.setMcpPermissionModeOverride(session, msg.serverName, mcpMode);
+      }
+      return true;
+    }
+
     if (msg.type === "set_vendor" && msg.vendor) {
       var vendorSession = getSessionForWs(ws);
       if (vendorSession) {
@@ -1256,13 +1287,18 @@ function attachSessions(ctx) {
           sdk.pushMessage(session, answerText);
         }
       } else {
-        // Claude native AskUserQuestion path (canUseTool). The SDK is
-        // synchronously blocked on the permission callback, so we must
-        // resolve it with the standard permission shape.
-        pending.resolve({
-          behavior: "allow",
-          updatedInput: Object.assign({}, pending.input, { answers: answers }),
-        });
+        // Claude native AskUserQuestion path (built-in tool, intercepted via
+        // canUseTool). In headless SDK mode the built-in can't render its own
+        // answer UI: resolving "allow" lets it return an EMPTY result, so the
+        // model continues the same turn with no answer ("I don't see an
+        // answer"). Injected user messages also lose the race against that
+        // empty result. Instead, deliver the answer as the tool_result by
+        // denying with the formatted answer text — the SDK surfaces a deny
+        // `message` to the model as the tool result, so the model receives the
+        // user's choice in the same turn. (updatedInput.answers is not read by
+        // the 0.3.x built-in, which is what caused answers to be dropped.)
+        var nativeAnswerText = formatAskUserAnswerAsMessage(pending.input, answers);
+        pending.resolve({ behavior: "deny", message: nativeAnswerText });
       }
       return true;
     }
@@ -1457,6 +1493,26 @@ function attachSessions(ctx) {
       return true;
     }
 
+    // --- Host user dialog response (SDK request_user_dialog) ---
+    if (msg.type === "user_dialog_response") {
+      var session = getSessionForWs(ws);
+      if (!session) return true;
+      var pending = session.pendingUserDialogs && session.pendingUserDialogs[msg.requestId];
+      if (!pending) return true;
+      delete session.pendingUserDialogs[msg.requestId];
+      if (msg.behavior === "completed") {
+        pending.resolve({ behavior: "completed", result: msg.result });
+      } else {
+        pending.resolve({ behavior: "cancelled" });
+      }
+      sm.sendAndRecord(session, {
+        type: "user_dialog_resolved",
+        requestId: msg.requestId,
+        behavior: msg.behavior === "completed" ? "completed" : "cancelled",
+      });
+      return true;
+    }
+
     // --- Browse directories (for add-project autocomplete) ---
     if (msg.type === "browse_dir") {
       var rawPath = (msg.path || "").replace(/^~/, require("./config").REAL_HOME);
@@ -1700,7 +1756,7 @@ function attachSessions(ctx) {
 
     // --- Daemon config / server management (admin-only in multi-user mode) ---
     if (msg.type === "get_daemon_config" || msg.type === "set_pin" || msg.type === "set_keep_awake" ||
-        msg.type === "set_auto_continue" || msg.type === "set_image_retention" || msg.type === "shutdown_server" || msg.type === "restart_server") {
+        msg.type === "set_auto_continue" || msg.type === "set_inherit_groups" || msg.type === "set_image_retention" || msg.type === "shutdown_server" || msg.type === "restart_server") {
       if (usersModule.isMultiUser()) {
         var _wsUser = ws._clayUser;
         if (!_wsUser || _wsUser.role !== "admin") {
@@ -1744,6 +1800,15 @@ function attachSessions(ctx) {
       return true;
     }
 
+    if (msg.type === "set_inherit_groups") {
+      if (typeof opts.onSetInheritGroups === "function") {
+        var igResult = opts.onSetInheritGroups(msg.value);
+        sendTo(ws, { type: "set_inherit_groups_result", ok: igResult.ok, inheritGroups: igResult.inheritGroups });
+        send({ type: "inherit_groups_changed", inheritGroups: igResult.inheritGroups });
+      }
+      return true;
+    }
+
     if (msg.type === "get_claude_allow_list") {
       var galUid = ws._clayUser ? ws._clayUser.id : null;
       var galManaged = [];

package/lib/public/app.js

@@ -287,7 +287,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     cachedMatesList: [],
     cachedDmFavorites: [],
     cachedAvailableBuiltins: [],
-    matesEnabled: true,
+    matesEnabled: false,
     returningFromMateDm: false,
     pendingMateInterview: null,
     pendingTermCommand: null,

package/lib/public/index.html

@@ -1151,6 +1151,7 @@
           </optgroup>
           <optgroup label="Server">
             <option value="keep-awake" class="hidden" id="settings-keep-awake-opt">Keep Awake</option>
+            <option value="inherit-groups" class="hidden" id="settings-inherit-groups-opt">User Groups</option>
             <option value="restart">Restart</option>
             <option value="shutdown">Shutdown</option>
           </optgroup>
@@ -1177,6 +1178,7 @@
           <div class="settings-nav-separator"></div>
           <div class="settings-nav-category">Server</div>
           <button class="settings-nav-item hidden" data-section="keep-awake" id="settings-keep-awake-nav"><span>Keep Awake</span></button>
+          <button class="settings-nav-item hidden settings-admin-only" data-section="inherit-groups" id="settings-inherit-groups-nav"><span>User Groups</span></button>
           <button class="settings-nav-item" data-section="restart"><span>Restart</span></button>
           <button class="settings-nav-item settings-nav-danger" data-section="shutdown"><span>Shutdown</span></button>
         </div>
@@ -1430,6 +1432,19 @@
             </label>
           </div>
         </div>
+        <div class="server-settings-section hidden settings-admin-only" data-section="inherit-groups" id="settings-inherit-groups-section">
+          <h2>User Groups</h2>
+          <div class="settings-card">
+            <label class="settings-toggle-row">
+              <div>
+                <span class="settings-label">Inherit supplementary groups</span>
+                <div class="settings-hint">Give each session the user's full group membership (docker, video, etc.), matching a normal login. Disable to run sessions with only the primary group. Requires <code>setpriv</code> (util-linux). Applies to new sessions.</div>
+              </div>
+              <input type="checkbox" id="settings-inherit-groups">
+              <span class="toggle-track"><span class="toggle-thumb"></span></span>
+            </label>
+          </div>
+        </div>
         <div class="server-settings-section" data-section="restart">
           <h2>Restart</h2>
           <p class="settings-hint" style="margin-bottom: 16px;">Restart the Clay daemon process. All active sessions will be briefly interrupted and clients will automatically reconnect.</p>

package/lib/public/modules/app-messages.js

@@ -21,11 +21,11 @@ import { renderMemoryList } from './mate-memory.js';
 import { handlePaletteSessionSwitch, setPaletteVersion } from './command-palette.js';
 import { handleFindInSessionResults } from './session-search.js';
 import { handleInputSync, autoResize, builtinCommands, setScheduleBtnDisabled } from './input.js';
-import { startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, closeToolGroup, removeToolFromGroup, resetToolState, getTools, getPlanContent, setPlanContent, renderPlanBanner, renderPlanCard, getTodoTools, handleTodoWrite, handleTaskCreate, handleTaskUpdate, applyDeadSessionTodoCompaction, isPlanFilePath, enableMainInput, addTurnMeta, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, initSubagentStop, updateSubagentProgress, updateSubagentTaskStatus, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionCancelled, markPermissionResolved, renderElicitationRequest, markElicitationResolved } from './tools.js';
+import { startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, closeToolGroup, removeToolFromGroup, resetToolState, getTools, getPlanContent, setPlanContent, renderPlanBanner, renderPlanCard, getTodoTools, handleTodoWrite, handleTaskCreate, handleTaskUpdate, applyDeadSessionTodoCompaction, isPlanFilePath, enableMainInput, addTurnMeta, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, initSubagentStop, updateSubagentProgress, updateSubagentTaskStatus, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionCancelled, markPermissionResolved, renderElicitationRequest, markElicitationResolved, renderUserDialogRequest, markUserDialogResolved, updateThinkingTokens } from './tools.js';
 import { showDoneNotification, playDoneSound, isNotifAlertEnabled, isNotifSoundEnabled } from './notifications.js';
 import { handleFsList, handleFsRead, handleFileChanged, handleDirChanged, handleFileHistory, handleGitDiff, handleFileAt, refreshIfOpen, getPendingNavigate, handleFsSearch } from './filebrowser.js';
 import { isProjectSettingsOpen, handleInstructionsRead, handleInstructionsWrite, handleProjectEnv, handleProjectEnvSaved, handleProjectSharedEnv, handleProjectSharedEnvSaved, handleProjectOwnerChanged } from './project-settings.js';
-import { updateSettingsModels, updateSettingsStats, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved, handleGlobalClaudeMdRead, handleGlobalClaudeMdWrite } from './server-settings.js';
+import { updateSettingsModels, updateSettingsStats, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleInheritGroupsChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved, handleGlobalClaudeMdRead, handleGlobalClaudeMdWrite } from './server-settings.js';
 import { handleTermList, handleTermCreated, sendTerminalCommand, handleTermOutput, handleTermResized, handleTermExited, handleTermClosed } from './terminal.js';
 import { attachTuiView, detachTuiView, setTuiSuspendedView, tuiHandleTermOutput, tuiHandleTermResized, tuiHandleTermExited, tuiHandleTermClosed } from './session-tui-view.js';
 import { handleTuiTranscriptState } from './tui-grab.js';
@@ -992,6 +992,16 @@ export function processMessage(msg) {
         stopUrgentBlink();
         break;
 
+      case "user_dialog_request":
+        renderUserDialogRequest(msg);
+        startUrgentBlink();
+        break;
+
+      case "user_dialog_resolved":
+        markUserDialogResolved(msg.requestId, msg.behavior);
+        stopUrgentBlink();
+        break;
+
       case "slash_command_result":
         finalizeAssistantBlock();
         var cmdBlock = document.createElement("div");
@@ -1088,6 +1098,43 @@ export function processMessage(msg) {
         addSystemMessage(msg.text, false);
         break;
 
+      case "thinking_tokens":
+        updateThinkingTokens(msg.estimatedTokens);
+        break;
+
+      case "informational":
+        // level: info | notice | suggestion | warning
+        if (msg.content) addSystemMessage(msg.content, msg.level === "warning");
+        break;
+
+      case "permission_denied": {
+        var deniedText = (msg.toolName ? msg.toolName + ": " : "")
+          + "tool call denied"
+          + (msg.reason ? " — " + msg.reason : (msg.message ? " — " + msg.message : ""))
+          + ".";
+        addSystemMessage(deniedText, false);
+        break;
+      }
+
+      case "model_refusal": {
+        var refusalText;
+        if (msg.refusalKind === "fallback") {
+          refusalText = "The model declined this request and automatically retried"
+            + (msg.fallbackModel ? " with " + msg.fallbackModel : " with a fallback model")
+            + (msg.originalModel ? " (originally " + msg.originalModel + ")" : "")
+            + ".";
+          if (msg.category) refusalText += " Category: " + msg.category + ".";
+          addSystemMessage(refusalText, false);
+        } else {
+          refusalText = "The model declined to respond to this request.";
+          if (msg.explanation) refusalText += " " + msg.explanation;
+          else if (msg.content) refusalText += " " + msg.content;
+          if (msg.category) refusalText += " (Category: " + msg.category + ")";
+          addSystemMessage(refusalText, true);
+        }
+        break;
+      }
+
       case "process_conflict":
         removeMatePreThinking();
         setActivity(null);
@@ -1705,6 +1752,11 @@ export function processMessage(msg) {
         handleKeepAwakeChanged(msg);
         break;
 
+      case "set_inherit_groups_result":
+      case "inherit_groups_changed":
+        handleInheritGroupsChanged(msg);
+        break;
+
       case "set_auto_continue_result":
       case "auto_continue_changed":
         handleAutoContinueChanged(msg);

package/lib/public/modules/mcp-ui.js

@@ -137,6 +137,28 @@ function renderMcpServerList() {
 
       row.appendChild(cb);
       row.appendChild(info);
+
+      // Per-server permission mode override (applies to the active session only).
+      if (server.projectEnabled) {
+        var modeSel = document.createElement("select");
+        modeSel.className = "mcp-server-perm-mode";
+        modeSel.dataset.serverName = server.name;
+        modeSel.title = "Permission mode for this server (this session only)";
+        var optAsk = document.createElement("option");
+        optAsk.value = "default";
+        optAsk.textContent = "Ask";
+        var optAuto = document.createElement("option");
+        optAuto.value = "auto";
+        optAuto.textContent = "Auto-approve";
+        modeSel.appendChild(optAsk);
+        modeSel.appendChild(optAuto);
+        modeSel.value = server.permissionModeOverride === "auto" ? "auto" : "default";
+        // The row is a <label>; keep select interactions from toggling the checkbox.
+        modeSel.addEventListener("click", function (e) { e.stopPropagation(); e.preventDefault(); });
+        modeSel.addEventListener("change", onPermissionModeChange);
+        row.appendChild(modeSel);
+      }
+
       contentEl.appendChild(row);
     }
     refreshIcons(contentEl);
@@ -293,3 +315,25 @@ function onToggle(e) {
     }));
   }
 }
+
+function onPermissionModeChange(e) {
+  var name = e.target.dataset.serverName;
+  var mode = e.target.value; // "default" | "auto"
+
+  // Remember locally so a re-render keeps the selection.
+  for (var i = 0; i < _mcpServers.length; i++) {
+    if (_mcpServers[i].name === name) {
+      _mcpServers[i].permissionModeOverride = mode;
+      break;
+    }
+  }
+
+  var ws = getWs();
+  if (ws && ws.readyState === 1) {
+    ws.send(JSON.stringify({
+      type: "set_mcp_permission_mode_override",
+      serverName: name,
+      mode: mode,
+    }));
+  }
+}

package/lib/public/modules/profile.js

@@ -590,8 +590,8 @@ export function initProfile(_ctx) {
 
     // Apply Mates UI gate at boot so the sidebar avatars / DM picker
     // entry / home-hub strip are hidden before the user opens settings.
-    // Default true: only flip the body class off when explicitly false.
-    var matesOn = data.matesEnabled !== false;
+    // Default OFF: Mates is opt-in, so only enable when explicitly true.
+    var matesOn = data.matesEnabled === true;
     store.set({ matesEnabled: matesOn });
     if (document.body) document.body.classList.toggle('mates-disabled', !matesOn);
   }).catch(function(err) {

package/lib/public/modules/server-settings.js

@@ -157,6 +157,17 @@ export function initServerSettings(appCtx) {
     });
   }
 
+  // Inherit supplementary groups toggle (OS-users mode)
+  var inheritGroupsToggle = document.getElementById("settings-inherit-groups");
+  if (inheritGroupsToggle) {
+    inheritGroupsToggle.addEventListener("change", function () {
+      var ws = ctx.ws;
+      if (ws && ws.readyState === 1) {
+        ws.send(JSON.stringify({ type: "set_inherit_groups", value: this.checked }));
+      }
+    });
+  }
+
   // Image retention select
   var imageRetentionSelect = document.getElementById("settings-image-retention");
   if (imageRetentionSelect) {
@@ -482,6 +493,10 @@ export function updateDaemonConfig(config) {
   var keepAwakeToggle = document.getElementById("settings-keep-awake");
   if (keepAwakeToggle) keepAwakeToggle.checked = !!config.keepAwake;
 
+  // Inherit supplementary groups (only relevant in OS-users mode)
+  var inheritGroupsToggle = document.getElementById("settings-inherit-groups");
+  if (inheritGroupsToggle) inheritGroupsToggle.checked = config.inheritGroups !== false;
+
   // Image retention
   var imageRetentionSelect = document.getElementById("settings-image-retention");
   if (imageRetentionSelect && config.imageRetentionDays !== undefined) {
@@ -517,6 +532,20 @@ export function updateDaemonConfig(config) {
     if (keepAwakeNav) keepAwakeNav.classList.add("hidden");
     if (keepAwakeOpt) keepAwakeOpt.classList.add("hidden");
   }
+
+  // Show inherit-groups section/nav only in OS-users mode
+  var inheritGroupsSection = document.getElementById("settings-inherit-groups-section");
+  var inheritGroupsNav = document.getElementById("settings-inherit-groups-nav");
+  var inheritGroupsOpt = document.getElementById("settings-inherit-groups-opt");
+  if (config.osUsers) {
+    if (inheritGroupsSection) inheritGroupsSection.classList.remove("hidden");
+    if (inheritGroupsNav) inheritGroupsNav.classList.remove("hidden");
+    if (inheritGroupsOpt) inheritGroupsOpt.classList.remove("hidden");
+  } else {
+    if (inheritGroupsSection) inheritGroupsSection.classList.add("hidden");
+    if (inheritGroupsNav) inheritGroupsNav.classList.add("hidden");
+    if (inheritGroupsOpt) inheritGroupsOpt.classList.add("hidden");
+  }
 }
 
 export function handleSetPinResult(msg) {
@@ -532,6 +561,11 @@ export function handleKeepAwakeChanged(msg) {
   if (keepAwakeToggle) keepAwakeToggle.checked = !!msg.keepAwake;
 }
 
+export function handleInheritGroupsChanged(msg) {
+  var inheritGroupsToggle = document.getElementById("settings-inherit-groups");
+  if (inheritGroupsToggle) inheritGroupsToggle.checked = msg.inheritGroups !== false;
+}
+
 export function handleAutoContinueChanged(msg) {
   // Auto-continue is now per-user; server broadcast no longer updates UI
 }