clay-server 2.47.0-beta.2 → 2.47.0-beta.3

package/lib/codex-defaults.js

@@ -1,12 +1,20 @@
 var CODEX_DEFAULTS = {
-  approval: "on-failure",
+  approval: "on-request",
   sandbox: "danger-full-access",
   webSearch: "live",
 };
 
+var CODEX_APPROVAL_POLICIES = ["untrusted", "on-request", "granular", "never"];
+
+function normalizeCodexApproval(value) {
+  if (value === "on-failure") return CODEX_DEFAULTS.approval;
+  if (CODEX_APPROVAL_POLICIES.indexOf(value) === -1) return CODEX_DEFAULTS.approval;
+  return value;
+}
+
 function getCodexConfig(sm) {
   return {
-    approval: (sm && sm.codexApproval) || CODEX_DEFAULTS.approval,
+    approval: normalizeCodexApproval(sm && sm.codexApproval),
     sandbox: (sm && sm.codexSandbox) || CODEX_DEFAULTS.sandbox,
     webSearch: (sm && sm.codexWebSearch) || CODEX_DEFAULTS.webSearch,
   };
@@ -14,5 +22,7 @@ function getCodexConfig(sm) {
 
 module.exports = {
   CODEX_DEFAULTS: CODEX_DEFAULTS,
+  CODEX_APPROVAL_POLICIES: CODEX_APPROVAL_POLICIES,
+  normalizeCodexApproval: normalizeCodexApproval,
   getCodexConfig: getCodexConfig,
 };

package/lib/project-connection.js

@@ -4,6 +4,7 @@ var usersModule = require("./users");
 var userPresence = require("./user-presence");
 var emailAccounts = require("./email-accounts");
 var { getCodexConfig } = require("./codex-defaults");
+var yoke = require("./yoke");
 
 /**
  * Attach connection/disconnection handlers to a project context.
@@ -132,7 +133,7 @@ function attachConnection(ctx) {
     var restoredActive = restoredState.active;
     var initialVendor = (restoredActive && restoredActive.vendor) || sm.defaultVendor || "claude";
     var initialModels = (sm.modelsByVendor && sm.modelsByVendor[initialVendor]) || sm.availableModels || [];
-    sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId, ownerLocked: ownerLocked });
+    sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId, ownerLocked: ownerLocked, vendors: yoke.VENDOR_REGISTRY });
     // Update notifications are pushed on a scheduled interval (see
     // scheduleUpdateBroadcast). We no longer push on connect to avoid
     // re-triggering the banner on every page refresh.

package/lib/project-notifications.js

@@ -5,6 +5,7 @@
 var fs = require("fs");
 var path = require("path");
 var config = require("./config");
+var yoke = require("./yoke");
 
 var NOTIF_FILE = path.join(config.CONFIG_DIR, "notifications.json");
 var REMINDER_INTERVAL = 60 * 60 * 1000; // 1 hour
@@ -21,7 +22,8 @@ function generateId() {
 var formatters = {
   auth_required: function (data) {
     var vendor = data.vendor || "claude";
-    var title = data.title || ((vendor === "codex" ? "Codex" : (vendor === "kiro" ? "Kiro CLI" : "Claude Code")) + " is not logged in");
+    var vendorInfo = yoke.getVendorInfo(vendor);
+    var title = data.title || (((vendorInfo && vendorInfo.displayName) || "Claude Code") + " is not logged in");
     return {
       type: "auth_required",
       title: title,

package/lib/project-sessions.js

@@ -3,6 +3,12 @@ var path = require("path");
 var crypto = require("crypto");
 var { execFileSync } = require("child_process");
 var { CODEX_DEFAULTS, getCodexConfig } = require("./codex-defaults");
+var yoke = require("./yoke");
+
+function vendorSupportsTui(vendor) {
+  var info = yoke.getVendorInfo(vendor);
+  return !!(info && info.sessionModes.indexOf("tui") !== -1);
+}
 
 // Format a user's answer to an ask_user_questions card as a plain user
 // message so the MCP path can feed it back to the agent on the next turn.
@@ -274,6 +280,8 @@ function attachSessions(ctx) {
     var sid = session.cliSessionId;
     var localId = session.localId;
     var resumeSkip = session.dangerouslySkipPermissions ? " --dangerously-skip-permissions" : "";
+    // Command construction is Claude-specific. Generalize this before any
+    // other vendor declares "tui" in the YOKE registry.
     var cmd = "claude --resume " + sid + resumeSkip + "; exit\n";
     var term = tm.create(80, 24, getOsUserInfoForWs(ws), ws, {
       initialInput: cmd,
@@ -346,7 +354,7 @@ function attachSessions(ctx) {
   // born-TUI session shows the same read-only + Resume view as a fresh click.
   function resolveSessionForView(session, ws) {
     if (!session) return;
-    if (session.vendor && session.vendor !== "claude") { session.tuiSuspended = false; return; }
+    if (session.vendor && !vendorSupportsTui(session.vendor)) { session.tuiSuspended = false; return; }
     var pref = getClaudeOpenModeForWs(ws);
     // A LIVE runtime always wins over the viewer's claudeOpenMode pref:
     // another user (or this user in another tab) may be in the session right
@@ -424,13 +432,13 @@ function attachSessions(ctx) {
       if (ws._clayUser && usersModule.isMultiUser()) sessionOpts.ownerId = ws._clayUser.id;
       if (msg.sessionVisibility) sessionOpts.sessionVisibility = msg.sessionVisibility;
       if (msg.vendor) sessionOpts.vendor = msg.vendor;
-      // Mode resolution: codex and kiro sessions are always GUI (no TUI adapter).
-      // Claude sessions honor the explicit msg.mode if provided, otherwise
+      // Mode resolution: vendors without a TUI session mode are always GUI.
+      // TUI-capable sessions honor the explicit msg.mode if provided, otherwise
       // fall back to the user's claudeOpenMode preference. This is what
       // makes the sidebar's "Claude" icon button create the right kind of
       // session without the client needing to know the preference.
       var requestedMode;
-      if (msg.vendor === "codex" || msg.vendor === "kiro") {
+      if (msg.vendor && !vendorSupportsTui(msg.vendor)) {
         requestedMode = "gui";
       } else if (msg.mode === "tui" || msg.mode === "gui") {
         requestedMode = msg.mode;
@@ -625,7 +633,7 @@ function attachSessions(ctx) {
         // for every viewer; only cold sessions follow the clicker's
         // claudeOpenMode pref. Nothing is spawned here.
         var xmTarget = sm.sessions.get(msg.id);
-        if (xmTarget && (xmTarget.vendor === "claude" || !xmTarget.vendor)) {
+        if (xmTarget && (!xmTarget.vendor || vendorSupportsTui(xmTarget.vendor))) {
           // Single source of truth: live runtime wins (tui stays tui, gui stays
           // gui); only cold sessions follow the viewer's pref. No PTY is spawned
           // on switch - born-TUI resumes lazily via the Resume bar
@@ -678,7 +686,7 @@ function attachSessions(ctx) {
     if (msg.type === "resume_tui_session") {
       if (msg.id && sm.sessions.has(msg.id)) {
         var rtTarget = sm.sessions.get(msg.id);
-        var rtOk = rtTarget && (rtTarget.vendor === "claude" || !rtTarget.vendor) &&
+        var rtOk = rtTarget && (!rtTarget.vendor || vendorSupportsTui(rtTarget.vendor)) &&
                    rtTarget.cliSessionId && tm;
         if (rtOk) {
           if (usersModule.isMultiUser() && ws._clayUser &&
@@ -706,7 +714,7 @@ function attachSessions(ctx) {
     if (msg.type === "suspend_tui_session") {
       if (msg.id && sm.sessions.has(msg.id)) {
         var stTarget = sm.sessions.get(msg.id);
-        var stOk = stTarget && (stTarget.vendor === "claude" || !stTarget.vendor);
+        var stOk = stTarget && (!stTarget.vendor || vendorSupportsTui(stTarget.vendor));
         if (stOk && (!usersModule.isMultiUser() || !ws._clayUser ||
             usersModule.canAccessSession(ws._clayUser.id, stTarget, { visibility: "public" }))) {
           if (tm) {
@@ -737,7 +745,7 @@ function attachSessions(ctx) {
       var tprId = msg.id;
       var tprSess = (tprId && sm.sessions.has(tprId)) ? sm.sessions.get(tprId) : null;
       if (!tprSess || !tprSess.cliSessionId || tprSess.mode !== "tui") return true;
-      if (tprSess.vendor && tprSess.vendor !== "claude") return true;
+      if (tprSess.vendor && !vendorSupportsTui(tprSess.vendor)) return true;
       if (usersModule.isMultiUser() && ws._clayUser
           && !usersModule.canAccessSession(ws._clayUser.id, tprSess, { visibility: "public" })) {
         return true;
@@ -1084,7 +1092,7 @@ function attachSessions(ctx) {
 
     // Codex-specific settings (stored on sessionManager, passed to adapter via adapterOptions)
     if (msg.type === "set_codex_approval") {
-      sm.codexApproval = msg.approval || CODEX_DEFAULTS.approval;
+      sm.codexApproval = getCodexConfig({ codexApproval: msg.approval }).approval;
       send(Object.assign({ type: "codex_config" }, getCodexConfig(sm)));
       return true;
     }

package/lib/project.js

@@ -914,18 +914,25 @@ function createProjectContext(opts) {
                 clayAuthToken: serverAuthToken,
                 slug: slug,
               });
-            } else if ((!sm.modelsByVendor || !sm.modelsByVendor[msg.vendor]) && typeof vendorAdapter.init === "function") {
+            }
+            var needsReadyMetadata = !sm.capabilitiesByVendor || !sm.capabilitiesByVendor[msg.vendor]
+              || !sm.modelsByVendor || !sm.modelsByVendor[msg.vendor];
+            if (vendorAdapter && needsReadyMetadata && typeof vendorAdapter.init === "function") {
               // Init warms the adapter, but a slow/failed init must not block
               // model listing (e.g. Codex models are a fixed list). Keep going
               // to supportedModels() even if init throws.
               try {
-                await vendorAdapter.init({
+                var readyResult = await vendorAdapter.init({
                   cwd: cwd,
                   clayPort: serverPort,
                   clayTls: serverTls,
                   clayAuthToken: serverAuthToken,
                   slug: slug,
                 });
+                sm.capabilitiesByVendor = sm.capabilitiesByVendor || {};
+                sm.capabilitiesByVendor[msg.vendor] = readyResult.capabilities || {};
+                sm.modelsByVendor = sm.modelsByVendor || {};
+                if (Array.isArray(readyResult.models)) sm.modelsByVendor[msg.vendor] = readyResult.models;
               } catch (e) {
                 console.error("[project] " + msg.vendor + " init failed (continuing to model list):", e.message || e);
               }
@@ -957,7 +964,8 @@ function createProjectContext(opts) {
             }
           }
         }
-        sendTo(ws, { type: "model_info", model: modelToSend, models: vendorModels, vendor: msg.vendor, availableVendors: sm.availableVendors || [], installedVendors: sm.installedVendors || [] });
+        var vendorCapabilities = (sm.capabilitiesByVendor && sm.capabilitiesByVendor[msg.vendor]) || {};
+        sendTo(ws, { type: "model_info", model: modelToSend, models: vendorModels, vendor: msg.vendor, capabilities: vendorCapabilities, availableVendors: sm.availableVendors || [], installedVendors: sm.installedVendors || [] });
       })();
       return;
     }

package/lib/public/app.js

@@ -312,6 +312,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     currentModels: [],
     // Project's last-used vendor; seeds the sidebar's "New session" button.
     lastVendor: "",
+    // Static adapter metadata sent before any vendor is initialized.
+    vendorInfo: {},
     // How Claude sessions open: "gui" (default) or "tui". The server sends
     // claude_open_mode_changed on connect; this seeds it beforehand so the
     // new-session menu doesn't flash the TUI-only entry.

package/lib/public/modules/app-messages.js

@@ -289,7 +289,7 @@ export function processMessage(msg) {
         // host lives on document.body (it's position: fixed), so it
         // survives project navigation unless we detach explicitly here.
         detachTuiView();
-        store.set({ projectName: msg.project || msg.cwd });
+        store.set({ projectName: msg.project || msg.cwd, vendorInfo: msg.vendors || {} });
         if (msg.cwd) store.set({ cwd: msg.cwd });
         if (msg.slug) store.set({ currentSlug: msg.slug });
         try { var _is = store.snap(); localStorage.setItem("clay-project-name-" + (_is.currentSlug || "default"), _is.projectName); } catch (e) {}
@@ -464,6 +464,7 @@ export function processMessage(msg) {
         if (msg.vendor && !store.get('vendorSelectionLocked')) _miUpdate.currentVendor = msg.vendor;
         if (msg.availableVendors) _miUpdate.availableVendors = msg.availableVendors;
         if (msg.installedVendors) _miUpdate.installedVendors = msg.installedVendors;
+        if (msg.capabilities) _miUpdate.vendorCapabilities = msg.capabilities;
         store.set(_miUpdate);
         updateSettingsModels(_modelVal, msg.models || []);
         break;
@@ -1359,7 +1360,7 @@ export function processMessage(msg) {
           var _lm = store.get('pendingLoginModal');
           store.set({ pendingLoginModal: null });
           openTuiModal(msg.id, _lm.slug, {
-            sessionTitle: (_lm.vendor === "codex" ? "Codex" : "Claude") + " login",
+            sessionTitle: (VENDOR_NAMES[_lm.vendor] || "Claude Code") + " login",
             projectName: _lm.slug,
             compact: true,
           });

package/lib/public/modules/app-notifications.js

@@ -19,6 +19,14 @@ var bannerContainer = null;
 var bellBtn = null;
 var badgeEl = null;
 
+function getVendorLoginCommand(vendor) {
+  var vendors = store.get('vendorInfo') || {};
+  var info = vendors[vendor];
+  if (info && info.loginCommand) return info.loginCommand;
+  var fallbacks = { codex: "codex login --device-auth", claude: "claude login" };
+  return fallbacks[vendor] || fallbacks.claude;
+}
+
 // --- Pending TUI attention tracking ---
 // Mirrors the icon-shake / favicon-blink behavior the SDK side already gets
 // from `pendingPermissions` on project status broadcasts. The notification
@@ -252,7 +260,7 @@ function showBanner(notif, autoDismissMs) {
           removeBanner(banner);
           dismissNotif(notif.id);
           var authMeta = notif.meta || {};
-          startLoginInModal(authMeta.loginCommand || ((authMeta.vendor || "claude") === "codex" ? "codex login --device-auth" : "claude login"), authMeta.vendor || "claude");
+          startLoginInModal(authMeta.loginCommand || getVendorLoginCommand(authMeta.vendor || "claude"), authMeta.vendor || "claude");
           showLoginReminderBanner();
         });
       }
@@ -332,7 +340,7 @@ function startLoginInModal(loginCommand, vendor) {
   if (authReminderVisible) return;
   var ws = getWs();
   if (!ws || ws.readyState !== 1) return;
-  var cmd = loginCommand || (vendor === "codex" ? "codex login --device-auth" : "claude login");
+  var cmd = loginCommand || getVendorLoginCommand(vendor);
   var slug = currentProjectSlug();
   if (!slug) { startLoginCommand(cmd); return; }
   store.set({ pendingLoginModal: { slug: slug, vendor: vendor || "claude" } });
@@ -366,7 +374,7 @@ export function autoStartLoginIfNeeded(msg) {
   if (authReminderVisible) return false;
   var vendor = msg.vendor || "claude";
   var cmd = msg.loginCommand
-    || (vendor === "codex" ? "codex login --device-auth" : "claude login");
+    || getVendorLoginCommand(vendor);
   startLoginInModal(cmd, vendor);
   showLoginReminderBanner();
   return true;
@@ -426,7 +434,7 @@ function showLoginReminderBanner() {
 export function showAuthRequiredBanner(msg) {
   if (!bannerContainer) return;
   var vendor = (msg && (msg.vendor || (msg.meta && msg.meta.vendor))) || "claude";
-  var loginCommand = (msg && (msg.loginCommand || (msg.meta && msg.meta.loginCommand))) || (vendor === "codex" ? "codex login --device-auth" : "claude login");
+  var loginCommand = (msg && (msg.loginCommand || (msg.meta && msg.meta.loginCommand))) || getVendorLoginCommand(vendor);
   activeAuthRequiredMsg = Object.assign({}, msg || {}, {
     id: (msg && msg.id) || ("_auth_" + Date.now()),
     type: "auth_required",

package/lib/public/modules/app-panels.js

@@ -93,7 +93,7 @@ var EFFORT_LEVELS_BY_VENDOR = {
 var THINKING_OPTIONS = ["disabled", "adaptive", "budget"];
 var CODEX_APPROVAL_OPTIONS = [
   { value: "never", label: "Auto" },
-  { value: "on-failure", label: "On Fail" },
+  { value: "untrusted", label: "Untrusted" },
   { value: "on-request", label: "Ask" },
 ];
 var CODEX_SANDBOX_OPTIONS = [
@@ -641,11 +641,14 @@ export function updateConfigChip() {
   rebuildModeList();
   rebuildEffortBar();
 
-  // Vendor-specific sections
+  // MODE remains Claude-specific until adapter modes become capabilities.
   var isClaude = vendor === "claude";
-  // MODE, THINKING, BETA are Claude-only
   if (configModeList && configModeList.parentElement) configModeList.parentElement.style.display = isClaude ? "" : "none";
   rebuildThinkingSection();
+  // capabilities.thinking means "emits a thinking stream" (true for every
+  // vendor), NOT "accepts thinking config". The adaptive/extended toggle and
+  // budget only feed Claude queries (sm.currentThinking), so the section
+  // stays Claude-only until a dedicated thinkingConfig capability exists.
   if (configThinkingSection) configThinkingSection.style.display = isClaude ? "" : "none";
   // BETA section deprecated (1M context is now standard)
   if (configBetaSection) configBetaSection.style.display = "none";

package/lib/public/modules/app-rate-limit.js

@@ -23,20 +23,37 @@ var fastModeIndicatorEl = null;
 // --- Internal helpers ---
 
 function getVendorUsageMeta(vendor) {
-  if (vendor === "codex") {
-    return {
+  var vendors = store.get('vendorInfo') || {};
+  var info = vendors[vendor];
+  if (info && info.usageDashboard) return info.usageDashboard;
+  var fallbacks = {
+    codex: {
       icon: "/codex-avatar.png",
       alt: "Codex",
       href: "https://chatgpt.com/admin/usage",
       title: "Check usage on ChatGPT",
-    };
-  }
-  return {
-    icon: "/claude-code-avatar.png",
-    alt: "Claude Code",
-    href: "https://claude.ai/settings/usage",
-    title: "Check usage on claude.ai",
+    },
+    claude: {
+      icon: "/claude-code-avatar.png",
+      alt: "Claude Code",
+      href: "https://claude.ai/settings/usage",
+      title: "Check usage on claude.ai",
+    },
   };
+  return fallbacks[vendor] || fallbacks.claude;
+}
+
+function vendorTracksRateLimits(vendor) {
+  var vendors = store.get('vendorInfo') || {};
+  var info = vendors[vendor];
+  if (info) return info.rateLimitTracking !== false;
+  var legacyTrackedVendors = ["claude", "codex"];
+  return legacyTrackedVendors.indexOf(vendor) !== -1;
+}
+
+function vendorSupportsScheduledMessages(vendor) {
+  var scheduledMessageVendors = ["claude"];
+  return scheduledMessageVendors.indexOf(vendor) !== -1;
 }
 
 function rateLimitTypeLabel(type) {
@@ -178,8 +195,13 @@ function tickRateLimitUsage() {
 
 export function initRateLimit() {
   store.subscribe(function(state, prev) {
-    if (state.currentVendor !== prev.currentVendor && state.currentVendor && state.currentVendor !== "claude") {
-      clearScheduleDelay();
+    if (state.currentVendor !== prev.currentVendor && state.currentVendor) {
+      if (!vendorSupportsScheduledMessages(state.currentVendor)) clearScheduleDelay();
+    }
+    if (state.currentVendor !== prev.currentVendor || state.vendorInfo !== prev.vendorInfo) {
+      if (rateLimitUsageEl) {
+        rateLimitUsageEl.style.display = vendorTracksRateLimits(state.currentVendor || "claude") ? "" : "none";
+      }
     }
   });
 }
@@ -203,7 +225,7 @@ export function handleRateLimitEvent(msg) {
     if (rateLimitResetTimer) clearTimeout(rateLimitResetTimer);
     // Auto-switch input to schedule mode: any message typed will be queued for after reset
     var delayUntilReset = msg.resetsAt - Date.now();
-    if (delayUntilReset > 0 && (store.get('currentVendor') || "claude") === "claude") {
+    if (delayUntilReset > 0 && vendorSupportsScheduledMessages(store.get('currentVendor') || "claude")) {
       setScheduleDelayMs(delayUntilReset + 60000); // +1min buffer after reset
     }
     rateLimitResetTimer = setTimeout(function () {
@@ -222,6 +244,11 @@ export function handleRateLimitEvent(msg) {
 }
 
 export function updateRateLimitUsage(msg) {
+  var activeVendor = store.get('currentVendor') || "claude";
+  if (!vendorTracksRateLimits(activeVendor)) {
+    if (rateLimitUsageEl) rateLimitUsageEl.style.display = "none";
+    return;
+  }
   if (msg.rateLimitType && msg.resetsAt) {
     rateLimitResetState[msg.rateLimitType] = { resetsAt: msg.resetsAt, status: msg.status };
   }
@@ -238,6 +265,7 @@ export function updateRateLimitUsage(msg) {
     var ref = document.getElementById("skip-perms-pill");
     topBarActions.insertBefore(rateLimitUsageEl, ref);
   }
+  rateLimitUsageEl.style.display = "";
 
   // Build label from available reset times
   var parts = [];
@@ -251,7 +279,7 @@ export function updateRateLimitUsage(msg) {
   }
 
   var label = parts.length > 0 ? parts.join(" · ") : "Check usage";
-  var vendor = store.get('currentVendor') || "claude";
+  var vendor = activeVendor;
   var meta = getVendorUsageMeta(vendor);
   rateLimitUsageEl.href = meta.href;
   rateLimitUsageEl.title = meta.title;

package/lib/public/modules/app-rendering.js

@@ -14,6 +14,8 @@ import { sendMessage, hasSendableContent } from './input.js';
 import { getChatLayout } from './theme.js';
 import { getScheduledMsgEl } from './app-rate-limit.js';
 
+// Keep these client constants aligned with lib/yoke/vendor-registry.js. The
+// browser cannot import the server's CommonJS registry directly.
 export var VENDOR_AVATARS = {
   claude: "/claude-code-avatar.png",
   codex: "/codex-avatar.png",

package/lib/public/modules/input.js

@@ -5,6 +5,7 @@ import { checkForMention, showMentionMenu, hideMentionMenu, isMentionMenuVisible
 import { store } from './store.js';
 import { mateAvatarUrl } from './avatar.js';
 import { tuiIsActive, tuiSubmitText } from './session-tui-view.js';
+import { VENDOR_AVATARS, VENDOR_NAMES } from './app-rendering.js';
 
 var ctx;
 
@@ -300,11 +301,9 @@ export function sendMessage() {
       _vtw2.classList.remove("locked");
     }
     if (_avi && _avIcon) {
-      var _vendorAvatars = { claude: "/claude-code-avatar.png", codex: "/codex-avatar.png", kiro: "/kiro-avatar.svg" };
-      var _vendorNames = { claude: "Claude", codex: "Codex", kiro: "Kiro CLI" };
-      _avIcon.src = _vendorAvatars[_committedVendor] || _vendorAvatars.claude;
-      _avIcon.alt = _vendorNames[_committedVendor] || _vendorNames.claude;
-      _avi.title = (_vendorNames[_committedVendor] || _vendorNames.claude) + " session";
+      _avIcon.src = VENDOR_AVATARS[_committedVendor] || VENDOR_AVATARS.claude;
+      _avIcon.alt = VENDOR_NAMES[_committedVendor] || VENDOR_NAMES.claude;
+      _avi.title = (VENDOR_NAMES[_committedVendor] || VENDOR_NAMES.claude) + " session";
       _avi.classList.remove("hidden");
     }
   } else if (_vtw2) {

package/lib/public/modules/tui-grab.js

@@ -24,6 +24,8 @@
 // Codex sessions never receive a transcript_state (no JSONL), so the
 // overlay stays disabled — selection copy still works normally.
 
+import { store } from './store.js';
+
 import { copyToClipboard, showToast } from './utils.js';
 import { getWs } from './ws-ref.js';
 
@@ -629,9 +631,16 @@ function requestTranscript(localId) {
 export function attachTuiGrab(xterm, containerEl, localId, opts) {
   if (!xterm || !containerEl || !localId) return;
   clearActive();
-  // For non-claude vendors (e.g. Codex) we don't even bother — no
-  // transcript exists on disk, so there's nothing to match against.
-  if (opts && opts.vendor && opts.vendor !== "claude") return;
+  // Vendors without TUI sessions have no transcript to match against.
+  if (opts && opts.vendor) {
+    var vendors = store.get('vendorInfo') || {};
+    var info = vendors[opts.vendor];
+    var legacyTuiVendors = ["claude"];
+    var supportsTui = info
+      ? Array.isArray(info.sessionModes) && info.sessionModes.indexOf("tui") !== -1
+      : legacyTuiVendors.indexOf(opts.vendor) !== -1;
+    if (!supportsTui) return;
+  }
 
   var overlayEl = buildOverlay(containerEl);
   active = {

package/lib/sdk-bridge.js

@@ -10,6 +10,7 @@ var { splitShellSegments, attachSkillDiscovery } = require("./sdk-skill-discover
 var { isSafeBashSegment } = require("./safe-bash-commands");
 var { createMessageQueue } = require("./sdk-message-queue");
 var { attachMessageProcessor } = require("./sdk-message-processor");
+var yoke = require("./yoke");
 
 // Extract serializable tool descriptors from MCP server instances.
 // Used for IPC to worker processes (McpSdkServerConfigWithInstance is not serializable).
@@ -127,7 +128,6 @@ function createSDKBridge(opts) {
   var _cachedFreshAuthAt = 0;
 
   function getFreshAuthState(force) {
-    var yoke = require("./yoke");
     var now = Date.now();
     if (!force && _cachedFreshAuthState && now - _cachedFreshAuthAt < 15000) {
       return _cachedFreshAuthState;
@@ -150,10 +150,13 @@ function createSDKBridge(opts) {
   }
 
   function getLoginCommand(vendor) {
-    if (vendor === "codex") return "codex login --device-auth";
-    if (vendor === "claude") return "claude login";
-    if (vendor === "kiro") return "kiro-cli login";
-    return (vendor || "claude") + " login";
+    var info = yoke.getVendorInfo(vendor);
+    return (info && info.loginCommand) || "claude login";
+  }
+
+  function supportsOsUserIsolation(vendor) {
+    var info = yoke.getVendorInfo(vendor);
+    return !info || info.osUserIsolation !== false;
   }
 
   function notifyAuthRequired(session, title, body, authLinuxUser, canAutoLogin, loginCommand) {
@@ -220,15 +223,25 @@ function createSDKBridge(opts) {
   }
 
   function sendModelInfoForVendor(vendor, model) {
+    var resolvedVendor = vendor || (adapter && adapter.vendor) || "claude";
     send({
       type: "model_info",
       model: model || "",
-      models: getModelsForVendor(vendor),
-      vendor: vendor || (adapter && adapter.vendor) || "claude",
+      models: getModelsForVendor(resolvedVendor),
+      vendor: resolvedVendor,
+      capabilities: (sm.capabilitiesByVendor && sm.capabilitiesByVendor[resolvedVendor]) || {},
       availableVendors: sm.availableVendors || [],
       installedVendors: sm.installedVendors || [],
     });
   }
+
+  function rememberAdapterReady(vendor, result) {
+    if (!vendor || !result) return;
+    sm.modelsByVendor = sm.modelsByVendor || {};
+    sm.capabilitiesByVendor = sm.capabilitiesByVendor || {};
+    if (Array.isArray(result.models)) sm.modelsByVendor[vendor] = result.models;
+    sm.capabilitiesByVendor[vendor] = result.capabilities || {};
+  }
   var onTurnDone = opts.onTurnDone || null;
 
   // --- Idle session reaper ---
@@ -869,7 +882,8 @@ function createSDKBridge(opts) {
               var canAutoLogin = !usersModule.isMultiUser()
                 || !!authLinuxUser
                 || (authUser && authUser.role === "admin");
-              var authVendorLabel = session.vendor === "codex" ? "Codex" : (session.vendor === "kiro" ? "Kiro CLI" : "Claude Code");
+              var authInfo = yoke.getVendorInfo(session.vendor);
+              var authVendorLabel = (authInfo && authInfo.displayName) || "Claude Code";
               var authTitle = authVendorLabel + " is not logged in.";
               var authMsg = {
                 type: "auth_required",
@@ -1070,10 +1084,9 @@ function createSDKBridge(opts) {
   async function startQuery(session, text, images, linuxUser) {
     async function ensureVendorReady(vendor) {
       if (!vendor) return null;
-      if (linuxUser && vendor === "kiro") return null;
+      if (linuxUser && !supportsOsUserIsolation(vendor)) return null;
       var vendorAdapter = adapters[vendor] || null;
       if (!vendorAdapter) {
-        var yoke = require("./yoke");
         vendorAdapter = await yoke.lazyCreateAdapter(adapters, vendor, {
           cwd: cwd,
           dangerouslySkipPermissions: dangerouslySkipPermissions,
@@ -1083,8 +1096,11 @@ function createSDKBridge(opts) {
           clayAuthToken: clayAuthToken,
           slug: slug,
         });
-      } else if ((!sm.modelsByVendor || !sm.modelsByVendor[vendor]) && typeof vendorAdapter.init === "function") {
-        await vendorAdapter.init({
+      }
+      var needsReadyMetadata = !sm.capabilitiesByVendor || !sm.capabilitiesByVendor[vendor]
+        || !sm.modelsByVendor || !sm.modelsByVendor[vendor];
+      if (vendorAdapter && needsReadyMetadata && typeof vendorAdapter.init === "function") {
+        var readyResult = await vendorAdapter.init({
           cwd: cwd,
           dangerouslySkipPermissions: dangerouslySkipPermissions,
           linuxUser: linuxUser || undefined,
@@ -1093,6 +1109,7 @@ function createSDKBridge(opts) {
           clayAuthToken: clayAuthToken,
           slug: slug,
         });
+        rememberAdapterReady(vendor, readyResult);
       }
       if (vendorAdapter) {
         sm.availableVendors = getAvailableVendors(linuxUser);
@@ -1100,6 +1117,11 @@ function createSDKBridge(opts) {
         if (!sm.modelsByVendor[vendor] && typeof vendorAdapter.supportedModels === "function") {
           sm.modelsByVendor[vendor] = await vendorAdapter.supportedModels();
         }
+        var vendorModels = getModelsForVendor(vendor);
+        var modelForVendor = resolveModelInList(vendorModels, sm.currentModel)
+          || modelEntryValue(vendorModels[0])
+          || "";
+        sendModelInfoForVendor(vendor, modelForVendor);
       }
       return vendorAdapter;
     }
@@ -1108,11 +1130,13 @@ function createSDKBridge(opts) {
     // OS-isolated session would expose the daemon user's HOME and Kiro
     // credentials to another user, so refuse until the adapter has a
     // per-user worker path.
-    if (linuxUser && session.vendor === "kiro") {
-      console.error("[sdk-bridge] Refusing Kiro for OS-isolated user " + linuxUser + ": per-user ACP spawning is not implemented");
+    if (linuxUser && !supportsOsUserIsolation(session.vendor)) {
+      var isolatedVendorInfo = yoke.getVendorInfo(session.vendor);
+      var isolatedVendorName = (isolatedVendorInfo && isolatedVendorInfo.displayName) || session.vendor || "This vendor";
+      console.error("[sdk-bridge] Refusing " + isolatedVendorName + " for OS-isolated user " + linuxUser + ": per-user spawning is not implemented");
       sendAndRecord(session, {
         type: "error",
-        text: "Kiro is not available for OS-isolated users yet.",
+        text: isolatedVendorName + " is not available for OS-isolated users yet.",
       });
       sendAndRecord(session, { type: "done", code: 1 });
       return;
@@ -1139,7 +1163,9 @@ function createSDKBridge(opts) {
     }
     // If still not available after lazy check, send auth_required
     if (session.vendor && !adapters[session.vendor]) {
-      var vendorName = session.vendor.charAt(0).toUpperCase() + session.vendor.slice(1);
+      var missingVendorInfo = yoke.getVendorInfo(session.vendor);
+      var vendorName = (missingVendorInfo && missingVendorInfo.displayName)
+        || session.vendor.charAt(0).toUpperCase() + session.vendor.slice(1);
       var authUser = session.ownerId ? usersModule.findUserById(session.ownerId) : null;
       var authLinuxUser = authUser && authUser.linuxUser ? authUser.linuxUser : null;
       var canAutoLogin = !usersModule.isMultiUser()
@@ -1520,25 +1546,26 @@ function createSDKBridge(opts) {
     }
 
     // Claude: check if binary is in PATH
-    if (tryLookup("claude")) result.push("claude");
+    if (tryLookup(yoke.getVendorInfo("claude").binaryName)) result.push("claude");
 
     // Codex: check bundled binary or PATH
     var codexBin = null;
     try {
       codexBin = require("./yoke/codex-app-server").findCodexPath();
     } catch (e) {}
-    if ((codexBin && fs.existsSync(codexBin)) || tryLookup("codex")) result.push("codex");
+    if ((codexBin && fs.existsSync(codexBin)) || tryLookup(yoke.getVendorInfo("codex").binaryName)) result.push("codex");
 
     // Kiro has no per-user ACP spawn path yet. Do not advertise the daemon's
     // binary to an OS-isolated user, even if that user also has Kiro installed.
-    if (!linuxUser) {
+    var kiroInfo = yoke.getVendorInfo("kiro");
+    if (!linuxUser || kiroInfo.osUserIsolation) {
       var kiroBin = null;
       try {
         kiroBin = require("./yoke/kiro-acp-server").findKiroPath();
       } catch (e) {}
-      if ((kiroBin && fs.existsSync(kiroBin)) || tryLookup("kiro-cli")) result.push("kiro");
+      if ((kiroBin && fs.existsSync(kiroBin)) || tryLookup(kiroInfo.binaryName)) result.push("kiro");
     } else {
-      console.log("[sdk-bridge] Kiro hidden for OS-isolated user " + linuxUser + ": per-user ACP spawning is not implemented");
+      console.log("[sdk-bridge] " + kiroInfo.displayName + " hidden for OS-isolated user " + linuxUser + ": per-user spawning is not implemented");
     }
 
     return result;
@@ -1546,7 +1573,7 @@ function createSDKBridge(opts) {
 
   function getAvailableVendors(linuxUser) {
     return Object.keys(adapters).filter(function(vendor) {
-      return !(linuxUser && vendor === "kiro");
+      return !(linuxUser && !supportsOsUserIsolation(vendor));
     });
   }
 
@@ -1591,10 +1618,7 @@ function createSDKBridge(opts) {
         }
         sm.availableModels = result.models || [];
         // Store per-vendor models and capabilities
-        sm.modelsByVendor = sm.modelsByVendor || {};
-        sm.modelsByVendor[defaultVendor] = result.models || [];
-        sm.capabilitiesByVendor = sm.capabilitiesByVendor || {};
-        sm.capabilitiesByVendor[defaultVendor] = result.capabilities || {};
+        rememberAdapterReady(defaultVendor, result);
       } catch (e) {
         if (e && e.name !== "AbortError" && !(e.message && e.message.indexOf("aborted") !== -1)) {
           send({ type: "error", text: "Failed to load " + defaultVendor + " SDK: " + (e.message || e) });

package/lib/sdk-message-processor.js

@@ -1,4 +1,5 @@
 var usersModule = require("./users");
+var yoke = require("./yoke");
 
 function attachMessageProcessor(ctx) {
   var sm = ctx.sm;
@@ -50,12 +51,9 @@ function attachMessageProcessor(ctx) {
     var canAutoLogin = !usersModule.isMultiUser()
       || !!authLinuxUser
       || (authUser && authUser.role === "admin");
-    var authTitle = session.vendor === "codex"
-      ? "Codex is not logged in."
-      : (session.vendor === "kiro" ? "Kiro CLI is not logged in." : "Claude Code is not logged in.");
-    var loginCommand = session.vendor === "codex"
-      ? "codex login --device-auth"
-      : (session.vendor === "kiro" ? "kiro-cli login" : "claude login");
+    var vendorInfo = yoke.getVendorInfo(session.vendor);
+    var authTitle = ((vendorInfo && vendorInfo.displayName) || "Claude Code") + " is not logged in.";
+    var loginCommand = (vendorInfo && vendorInfo.loginCommand) || "claude login";
     var _nmLogin = getNotificationsModule();
     sendAndRecord(session, {
       type: "auth_required",

package/lib/yoke/adapters/claude.js

@@ -1180,6 +1180,11 @@ function createClaudeAdapter(opts) {
         slashCommands: [],
         fastModeState: null,
         capabilities: {
+          effort: true,
+          fork: true,
+          rollback: false,
+          sessionListing: true,
+          sessionRename: true,
           thinking: true,
           betas: true,
           rewind: true,
@@ -1556,6 +1561,11 @@ function createClaudeAdapter(opts) {
             slashCommands: r.slashCommands || [],
             fastModeState: r.fastModeState || null,
             capabilities: {
+              effort: true,
+              fork: true,
+              rollback: false,
+              sessionListing: true,
+              sessionRename: true,
               thinking: true,
               betas: true,
               rewind: true,
@@ -1628,6 +1638,11 @@ function createClaudeAdapter(opts) {
         slashCommands: [],
         fastModeState: null,
         capabilities: {
+          effort: true,
+          fork: true,
+          rollback: false,
+          sessionListing: true,
+          sessionRename: true,
           thinking: true,
           betas: true,
           rewind: true,
@@ -1708,6 +1723,11 @@ function createClaudeAdapter(opts) {
             slashCommands: r.slashCommands || [],
             fastModeState: r.fastModeState || null,
             capabilities: {
+              effort: true,
+              fork: true,
+              rollback: false,
+              sessionListing: true,
+              sessionRename: true,
               thinking: true,
               betas: true,
               rewind: true,
@@ -1737,4 +1757,9 @@ function createClaudeAdapter(opts) {
 module.exports = {
   createClaudeAdapter: createClaudeAdapter,
   createMessageQueue: createMessageQueue,
+  contractTestKit: {
+    createMessageQueue: createMessageQueue,
+    createQueryHandle: createQueryHandle,
+    normalizeEvent: flattenEvent,
+  },
 };

package/lib/yoke/adapters/codex.js

@@ -597,6 +597,27 @@ function flattenEvent(notification, state) {
   return events;
 }
 
+function createEventState(model) {
+  return {
+    blockCounter: 0,
+    threadId: null,
+    turnStarted: false,
+    lastUsage: null,
+    lastInputTokens: null,
+    done: false,
+    aborted: false,
+    loopStarted: false,
+    model: model || "gpt-5.6-terra",
+    textBlocks: {},
+    textLengths: {},
+    thinkingBlocks: {},
+    thinkingLengths: {},
+    toolBlocks: {},
+    commandInputs: {},
+    planTexts: {},
+  };
+}
+
 // --- QueryHandle ---
 
 function createCodexQueryHandle(appServer, queryOpts) {
@@ -611,25 +632,7 @@ function createCodexQueryHandle(appServer, queryOpts) {
     return state.aborted || (abortController && abortController.signal && abortController.signal.aborted);
   }
 
-  var state = {
-    blockCounter: 0,
-    threadId: null,
-    turnStarted: false,
-    lastUsage: null,
-    lastInputTokens: null, // from thread/tokenUsage/updated
-    done: false,
-    aborted: false,
-    loopStarted: false,
-    model: queryOpts.model || "gpt-5.6-terra",
-    // Track incremental text deltas
-    textBlocks: {},     // itemId -> true (text_start sent)
-    textLengths: {},    // itemId -> last sent length
-    thinkingBlocks: {}, // itemId -> blockId
-    thinkingLengths: {}, // itemId -> last sent length
-    toolBlocks: {},     // itemId -> blockId (for tool_start dedup)
-    commandInputs: {},  // itemId -> command captured from approval/start events
-    planTexts: {},      // itemId -> streamed plan text
-  };
+  var state = createEventState(queryOpts.model);
 
   // Internal event buffer for async iterator
   var eventBuffer = [];
@@ -867,7 +870,7 @@ function createCodexQueryHandle(appServer, queryOpts) {
       var threadParams = {
         model: queryOpts.model || "gpt-5.6-terra",
         sandbox: queryOpts.sandboxMode || "workspace-write",
-        approvalPolicy: queryOpts.approvalPolicy || "on-failure",
+        approvalPolicy: queryOpts.approvalPolicy || "on-request",
         cwd: queryOpts.cwd,
         skipGitRepoCheck: true,
       };
@@ -1139,6 +1142,11 @@ function createCodexAdapter(opts) {
       slashCommands: skillNames || [],
       fastModeState: null,
       capabilities: {
+        effort: true,
+        fork: true,
+        rollback: true,
+        sessionListing: false,
+        sessionRename: false,
         thinking: true,
         betas: false,
         rewind: false,
@@ -1463,7 +1471,7 @@ function createCodexAdapter(opts) {
       if (queryOpts.toolPolicy === "allow-all") {
         handleOpts.approvalPolicy = "never";
       } else {
-        handleOpts.approvalPolicy = codexOpts.approvalPolicy || "on-failure";
+        handleOpts.approvalPolicy = codexOpts.approvalPolicy || "on-request";
       }
 
       // Sandbox mode
@@ -1590,4 +1598,9 @@ function createCodexAdapter(opts) {
 
 module.exports = {
   createCodexAdapter: createCodexAdapter,
+  contractTestKit: {
+    createEventState: createEventState,
+    createQueryHandle: createCodexQueryHandle,
+    normalizeEvent: flattenEvent,
+  },
 };

package/lib/yoke/adapters/kiro.js

@@ -377,30 +377,19 @@ function finalToolContent(state, callId, update) {
   return extractRawOutput(update.rawOutput);
 }
 
-// --- QueryHandle ---
-
-function createKiroQueryHandle(acp, queryOpts) {
-  var abortController = queryOpts.abortController;
-  var systemPrompt = queryOpts.systemPrompt || "";
-  var canUseTool = queryOpts.canUseTool || null;
-  var onFinished = queryOpts.onFinished || null;
-
-  function isCancelled() {
-    return state.aborted || (abortController && abortController.signal && abortController.signal.aborted);
-  }
-
-  var state = {
+function createEventState(opts) {
+  opts = opts || {};
+  return {
     blockCounter: 0,
-    sessionId: queryOpts.resumeSessionId || null,
-    model: queryOpts.model || "auto",
-    engine: queryOpts.engine || KIRO_DEFAULTS.engine,
+    sessionId: opts.resumeSessionId || null,
+    model: opts.model || "auto",
+    engine: opts.engine || KIRO_DEFAULTS.engine,
     lastInputTokens: null,
-    contextWindow: queryOpts.contextWindow || null,
+    contextWindow: opts.contextWindow || null,
     done: false,
     aborted: false,
     loopStarted: false,
     loadingSession: false,
-    // per-turn block tracking (reset each turn)
     textBlockOpen: false,
     textBlockId: null,
     thinkBlockOpen: false,
@@ -409,6 +398,21 @@ function createKiroQueryHandle(acp, queryOpts) {
     toolMeta: {},
     toolContent: {},
   };
+}
+
+// --- QueryHandle ---
+
+function createKiroQueryHandle(acp, queryOpts) {
+  var abortController = queryOpts.abortController;
+  var systemPrompt = queryOpts.systemPrompt || "";
+  var canUseTool = queryOpts.canUseTool || null;
+  var onFinished = queryOpts.onFinished || null;
+
+  function isCancelled() {
+    return state.aborted || (abortController && abortController.signal && abortController.signal.aborted);
+  }
+
+  var state = createEventState(queryOpts);
 
   // Async iterator plumbing
   var eventBuffer = [];
@@ -864,6 +868,11 @@ function createKiroAdapter(opts) {
       slashCommands: skillNames || [],
       fastModeState: null,
       capabilities: {
+        effort: false,
+        fork: false,
+        rollback: false,
+        sessionListing: false,
+        sessionRename: false,
         thinking: true,
         betas: false,
         rewind: false,
@@ -872,7 +881,7 @@ function createKiroAdapter(opts) {
         elicitation: false,
         fileCheckpointing: false,
         contextCompacting: true,
-        toolPolicy: ["ask", "allow-all"],
+        toolPolicy: ["ask"],
       },
     };
   }
@@ -1153,4 +1162,9 @@ function createKiroAdapter(opts) {
 
 module.exports = {
   createKiroAdapter: createKiroAdapter,
+  contractTestKit: {
+    createEventState: createEventState,
+    createQueryHandle: createKiroQueryHandle,
+    normalizeEvent: flattenUpdate,
+  },
 };

package/lib/yoke/index.js

@@ -3,6 +3,7 @@
 
 var iface = require("./interface");
 var instructions = require("./instructions");
+var vendorRegistry = require("./vendor-registry");
 var createClaudeAdapter = require("./adapters/claude").createClaudeAdapter;
 var createCodexAdapter = require("./adapters/codex").createCodexAdapter;
 var createKiroAdapter = require("./adapters/kiro").createKiroAdapter;
@@ -45,6 +46,8 @@ function wrapCreateQuery(adapter, defaultCwd) {
  * @returns {Adapter}
  */
 function createAdapter(opts) {
+  // Adding a vendor here also requires a registry entry and an update to the
+  // completeness list in test/yoke-vendor-registry.test.js.
   var vendor = (opts && opts.vendor) || "claude";
   var adapter;
   if (vendor === "claude") {
@@ -284,7 +287,12 @@ function createAdapters(opts) {
   var auth = { claude: false, codex: false, kiro: false };
   var adapters = {};
 
-  if (installed.claude) {
+  function supportsConfiguredIsolation(vendor) {
+    var info = vendorRegistry.getVendorInfo(vendor);
+    return !opts.osUsers || !info || info.osUserIsolation;
+  }
+
+  if (installed.claude && supportsConfiguredIsolation("claude")) {
     try {
       if (!_sharedClaudeAdapter) {
         _sharedClaudeAdapter = createAdapter({ vendor: "claude", cwd: opts.cwd });
@@ -301,7 +309,7 @@ function createAdapters(opts) {
     }
   }
 
-  if (installed.codex) {
+  if (installed.codex && supportsConfiguredIsolation("codex")) {
     try {
       adapters.codex = createAdapter({ vendor: "codex", cwd: opts.cwd, slug: opts.slug });
       auth.codex = true;
@@ -311,7 +319,8 @@ function createAdapters(opts) {
     }
   }
 
-  if (installed.kiro && !opts.osUsers) {
+  var kiroInfo = vendorRegistry.getVendorInfo("kiro");
+  if (installed.kiro && supportsConfiguredIsolation("kiro")) {
     try {
       adapters.kiro = createAdapter({ vendor: "kiro", cwd: opts.cwd, slug: opts.slug });
       auth.kiro = true;
@@ -320,7 +329,7 @@ function createAdapters(opts) {
       console.error("[yoke] Failed to create adapter for kiro:", e.message);
     }
   } else if (installed.kiro && opts.osUsers) {
-    console.log("[yoke] Kiro adapter disabled: OS-user isolation requires per-user ACP spawning");
+    console.log("[yoke] " + kiroInfo.displayName + " adapter disabled: OS-user isolation requires per-user spawning");
   }
 
   return { adapters: adapters, auth: auth };
@@ -334,8 +343,9 @@ function createAdapters(opts) {
 async function lazyCreateAdapter(adapters, vendor, opts) {
   opts = opts || {};
 
-  if (vendor === "kiro" && (opts.osUsers || opts.linuxUser)) {
-    console.log("[yoke] Refusing lazy Kiro adapter creation for OS-isolated user " + (opts.linuxUser || "unknown"));
+  var vendorInfo = vendorRegistry.getVendorInfo(vendor);
+  if (vendorInfo && !vendorInfo.osUserIsolation && (opts.osUsers || opts.linuxUser)) {
+    console.log("[yoke] Refusing lazy " + vendorInfo.displayName + " adapter creation for OS-isolated user " + (opts.linuxUser || "unknown"));
     return null;
   }
 
@@ -365,6 +375,8 @@ module.exports = {
   checkAuth: checkAuth,
   checkInstalled: checkInstalled,
   invalidateAuthCache: invalidateAuthCache,
+  VENDOR_REGISTRY: vendorRegistry.VENDOR_REGISTRY,
+  getVendorInfo: vendorRegistry.getVendorInfo,
   TOOL_POLICIES: iface.TOOL_POLICIES,
   validateAdapter: iface.validateAdapter,
   validateQueryHandle: iface.validateQueryHandle,

package/lib/yoke/vendor-registry.js

@@ -0,0 +1,55 @@
+// Static, init-free facts about each vendor YOKE supports. Host code that
+// needs metadata before adapter initialization should read it from here.
+// Do not import adapters into this module.
+
+var VENDOR_REGISTRY = {
+  claude: {
+    displayName: "Claude Code",
+    loginCommand: "claude login",
+    binaryName: "claude",
+    avatar: "/claude-code-avatar.png",
+    sessionModes: ["gui", "tui"],
+    osUserIsolation: true,
+    usageDashboard: {
+      icon: "/claude-code-avatar.png",
+      alt: "Claude Code",
+      href: "https://claude.ai/settings/usage",
+      title: "Check usage on claude.ai",
+    },
+    rateLimitTracking: true,
+  },
+  codex: {
+    displayName: "Codex",
+    loginCommand: "codex login --device-auth",
+    binaryName: "codex",
+    avatar: "/codex-avatar.png",
+    sessionModes: ["gui"],
+    osUserIsolation: true,
+    usageDashboard: {
+      icon: "/codex-avatar.png",
+      alt: "Codex",
+      href: "https://chatgpt.com/admin/usage",
+      title: "Check usage on ChatGPT",
+    },
+    rateLimitTracking: true,
+  },
+  kiro: {
+    displayName: "Kiro CLI",
+    loginCommand: "kiro-cli login",
+    binaryName: "kiro-cli",
+    avatar: "/kiro-avatar.svg",
+    sessionModes: ["gui"],
+    osUserIsolation: false,
+    usageDashboard: null,
+    rateLimitTracking: false,
+  },
+};
+
+function getVendorInfo(vendor) {
+  return VENDOR_REGISTRY[vendor] || null;
+}
+
+module.exports = {
+  VENDOR_REGISTRY: VENDOR_REGISTRY,
+  getVendorInfo: getVendorInfo,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "2.47.0-beta.2",
+  "version": "2.47.0-beta.3",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js",
@@ -49,9 +49,9 @@
   "homepage": "https://github.com/chadbyte/clay#readme",
   "author": "Chad",
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.198",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.233",
     "@lydell/node-pty": "^1.2.0-beta.3",
-    "@openai/codex": "^0.142.4",
+    "@openai/codex": "^0.147.0",
     "imapflow": "^1.3.1",
     "nodemailer": "^6.10.1",
     "qrcode-terminal": "^0.12.0",