clay-server 2.8.2 → 2.9.0

package/lib/public/modules/profile.js

@@ -7,6 +7,7 @@ import { setSTTLang, getSTTLang } from './stt.js';
 
 var ctx;
 var profile = { name: '', lang: 'en-US', avatarStyle: 'thumbs', avatarSeed: '', avatarColor: '#7c3aed' };
+var profileUsername = '';
 var popoverEl = null;
 var saveTimer = null;
 var previewSeed = '';
@@ -95,6 +96,17 @@ function applyToIsland() {
   }
 
   nameEl.textContent = displayName;
+
+  // Show CTA if user hasn't personalized their name
+  var ctaEl = document.querySelector('.user-island-cta');
+  if (ctaEl) {
+    var isDefault = profileUsername && profile.name === profileUsername;
+    if (isDefault) {
+      ctaEl.classList.remove('hidden');
+    } else {
+      ctaEl.classList.add('hidden');
+    }
+  }
 }
 
 // --- Popover ---
@@ -325,12 +337,21 @@ export function initProfile(_ctx) {
     });
   }
 
+  var ctaEl = island.querySelector('.user-island-cta');
+  if (ctaEl) {
+    ctaEl.addEventListener('click', function(e) {
+      e.stopPropagation();
+      showPopover();
+    });
+  }
+
   fetchProfile().then(function(data) {
     if (data.name !== undefined) profile.name = data.name;
     if (data.lang) profile.lang = data.lang;
     if (data.avatarColor) profile.avatarColor = data.avatarColor;
     if (data.avatarStyle) profile.avatarStyle = data.avatarStyle;
     if (data.avatarSeed) profile.avatarSeed = data.avatarSeed;
+    if (data.username) profileUsername = data.username;
 
     // Auto-generate seed if none exists
     if (!profile.avatarSeed) {

package/lib/public/modules/project-settings.js

@@ -1,6 +1,7 @@
 // project-settings.js — Project settings panel (profile, defaults, instructions, env)
 import { refreshIcons } from './icons.js';
 import { showToast } from './utils.js';
+import { parseEmojis } from './markdown.js';
 
 var ctx = null;
 var panelEl = null;
@@ -252,6 +253,7 @@ function updateIconPreview(icon) {
   var removeBtn = document.getElementById("ps-icon-remove-btn");
   if (preview) {
     preview.textContent = icon || "";
+    if (icon) parseEmojis(preview);
   }
   if (removeBtn) {
     removeBtn.classList.toggle("hidden", !icon);
@@ -308,6 +310,7 @@ function showPsEmojiPicker() {
       tabBtns.push(tab);
     })(EMOJI_CATEGORIES[t], t);
   }
+  parseEmojis(tabBar);
   picker.appendChild(tabBar);
 
   // Grid
@@ -336,7 +339,7 @@ function showPsEmojiPicker() {
         grid.appendChild(btn);
       })(emojis[i]);
     }
-
+    parseEmojis(grid);
     scrollArea.scrollTop = 0;
   }
 

package/lib/public/modules/server-settings.js

@@ -2,6 +2,7 @@
 import { refreshIcons } from './icons.js';
 import { showToast, copyToClipboard } from './utils.js';
 import { parseEnvString, looksLikeEnv } from './project-settings.js';
+import { checkAdminAccess, loadAdminSection } from './admin.js';
 
 var ctx = null;
 var settingsEl = null;
@@ -240,6 +241,10 @@ function switchSection(sectionName) {
   // Lazy-load section data
   if (sectionName === "claudemd") loadGlobalClaudeMd();
   if (sectionName === "environment") loadSharedEnv();
+  if (sectionName === "admin-users" || sectionName === "admin-invites" || sectionName === "admin-projects" || sectionName === "admin-smtp") {
+    var adminBody = document.getElementById(sectionName + "-body");
+    if (adminBody) loadAdminSection(sectionName, adminBody);
+  }
 }
 
 function openSettings() {
@@ -251,6 +256,14 @@ function openSettings() {
   resetRestartButton();
   resetShutdownForm();
 
+  // Show/hide admin sections based on role
+  checkAdminAccess().then(function (isAdmin) {
+    var adminEls = settingsEl.querySelectorAll(".settings-admin-only");
+    for (var ai = 0; ai < adminEls.length; ai++) {
+      adminEls[ai].style.display = isAdmin ? "" : "none";
+    }
+  });
+
   // Start periodic stats refresh
   requestStats();
   statsTimer = setInterval(requestStats, 5000);

package/lib/public/modules/sidebar.js

@@ -2,6 +2,7 @@ import { escapeHtml, copyToClipboard } from './utils.js';
 import { iconHtml, refreshIcons } from './icons.js';
 import { openProjectSettings } from './project-settings.js';
 import { triggerShare } from './qrcode.js';
+import { parseEmojis } from './markdown.js';
 
 var ctx;
 
@@ -16,6 +17,9 @@ var expandedLoopGroups = new Set();
 var cachedProjectList = [];
 var cachedCurrentSlug = null;
 
+// --- Session presence (multi-user: who is viewing which session) ---
+var sessionPresence = {}; // { sessionId: [{ id, displayName, avatarStyle, avatarSeed }] }
+
 // --- Countdown timer for upcoming schedules ---
 var countdownTimer = null;
 var countdownContainer = null;
@@ -32,7 +36,7 @@ function closeSessionCtxMenu() {
   }
 }
 
-function showSessionCtxMenu(anchorBtn, sessionId, title, cliSid) {
+function showSessionCtxMenu(anchorBtn, sessionId, title, cliSid, sessionData) {
   closeSessionCtxMenu();
   sessionCtxSessionId = sessionId;
 
@@ -49,6 +53,24 @@ function showSessionCtxMenu(anchorBtn, sessionId, title, cliSid) {
   });
   menu.appendChild(renameItem);
 
+  // Session visibility toggle (only the session owner can change)
+  if (ctx.multiUser && sessionData && sessionData.ownerId && sessionData.ownerId === ctx.myUserId) {
+    var currentVis = (sessionData && sessionData.sessionVisibility) || "shared";
+    var isPrivate = currentVis === "private";
+    var visItem = document.createElement("button");
+    visItem.className = "session-ctx-item";
+    visItem.innerHTML = iconHtml(isPrivate ? "eye" : "eye-off") + " <span>" + (isPrivate ? "Make Shared" : "Make Private") + "</span>";
+    visItem.addEventListener("click", function (e) {
+      e.stopPropagation();
+      closeSessionCtxMenu();
+      var newVis = isPrivate ? "shared" : "private";
+      if (ctx.ws && ctx.connected) {
+        ctx.ws.send(JSON.stringify({ type: "set_session_visibility", sessionId: sessionId, visibility: newVis }));
+      }
+    });
+    menu.appendChild(visItem);
+  }
+
   var deleteItem = document.createElement("button");
   deleteItem.className = "session-ctx-item session-ctx-delete";
   deleteItem.innerHTML = iconHtml("trash-2") + " <span>Delete</span>";
@@ -394,6 +416,9 @@ function renderSessionItem(s) {
   if (s.isProcessing) {
     textHtml += '<span class="session-processing"></span>';
   }
+  if (ctx.multiUser && s.sessionVisibility === "private") {
+    textHtml += '<span class="session-private-icon" title="Private session">' + iconHtml("lock") + '</span>';
+  }
   textHtml += highlightMatch(s.title || "New Session", searchQuery);
   textSpan.innerHTML = textHtml;
   el.appendChild(textSpan);
@@ -402,12 +427,12 @@ function renderSessionItem(s) {
   moreBtn.className = "session-more-btn";
   moreBtn.innerHTML = iconHtml("ellipsis");
   moreBtn.title = "More options";
-  moreBtn.addEventListener("click", (function(id, title, cliSid, btn) {
+  moreBtn.addEventListener("click", (function(id, title, cliSid, btn, sData) {
     return function(e) {
       e.stopPropagation();
-      showSessionCtxMenu(btn, id, title, cliSid);
+      showSessionCtxMenu(btn, id, title, cliSid, sData);
     };
-  })(s.id, s.title, s.cliSessionId, moreBtn));
+  })(s.id, s.title, s.cliSessionId, moreBtn, s));
   el.appendChild(moreBtn);
 
   el.addEventListener("click", (function (id) {
@@ -419,6 +444,9 @@ function renderSessionItem(s) {
     };
   })(s.id));
 
+  // Presence avatars (multi-user)
+  renderPresenceAvatars(el, String(s.id));
+
   return el;
 }
 
@@ -510,6 +538,59 @@ export function handleSearchResults(msg) {
   }
 }
 
+export function updateSessionPresence(presence) {
+  sessionPresence = presence;
+  // Update presence avatars on existing session items without full re-render
+  var items = ctx.sessionListEl.querySelectorAll("[data-session-id]");
+  for (var i = 0; i < items.length; i++) {
+    renderPresenceAvatars(items[i], items[i].dataset.sessionId);
+  }
+}
+
+function presenceAvatarUrl(style, seed) {
+  var s = encodeURIComponent(seed || "anonymous");
+  return "https://api.dicebear.com/9.x/" + (style || "thumbs") + "/svg?seed=" + s + "&size=24";
+}
+
+function renderPresenceAvatars(el, sessionId) {
+  // Remove existing presence container
+  var existing = el.querySelector(".session-presence");
+  if (existing) existing.remove();
+
+  var users = sessionPresence[sessionId];
+  if (!users || users.length === 0) return;
+
+  var container = document.createElement("span");
+  container.className = "session-presence";
+
+  var max = 3;
+  var shown = users.length > max ? max : users.length;
+  for (var i = 0; i < shown; i++) {
+    var u = users[i];
+    var img = document.createElement("img");
+    img.className = "session-presence-avatar";
+    img.src = presenceAvatarUrl(u.avatarStyle, u.avatarSeed);
+    img.alt = u.displayName;
+    img.dataset.tip = u.displayName + (u.username ? " (@" + u.username + ")" : "");
+    if (i > 0) img.style.marginLeft = "-6px";
+    container.appendChild(img);
+  }
+  if (users.length > max) {
+    var more = document.createElement("span");
+    more.className = "session-presence-more";
+    more.textContent = "+" + (users.length - max);
+    container.appendChild(more);
+  }
+
+  // Insert before the more-btn
+  var moreBtn = el.querySelector(".session-more-btn");
+  if (moreBtn) {
+    el.insertBefore(container, moreBtn);
+  } else {
+    el.appendChild(container);
+  }
+}
+
 export function updatePageTitle() {
   var sessionTitle = "";
   var activeItem = ctx.sessionListEl.querySelector(".session-item.active .session-item-text");
@@ -1685,6 +1766,7 @@ function showEmojiPicker(slug, anchorEl) {
       tabBtns.push(tab);
     })(EMOJI_CATEGORIES[t], t);
   }
+  parseEmojis(tabBar);
   picker.appendChild(tabBar);
 
   // --- Scrollable grid area ---
@@ -1713,7 +1795,7 @@ function showEmojiPicker(slug, anchorEl) {
         grid.appendChild(btn);
       })(emojis[i]);
     }
-
+    parseEmojis(grid);
     scrollArea.scrollTop = 0;
   }
 
@@ -1970,6 +2052,29 @@ function setupDragHandlers(el, slug) {
   });
 }
 
+export function renderSidebarPresence(onlineUsers) {
+  var container = document.getElementById("sidebar-presence");
+  if (!container) return;
+  container.innerHTML = "";
+  if (!onlineUsers || onlineUsers.length < 2) return;
+  var maxShow = 4;
+  for (var i = 0; i < Math.min(onlineUsers.length, maxShow); i++) {
+    var ou = onlineUsers[i];
+    var img = document.createElement("img");
+    img.className = "sidebar-presence-avatar";
+    img.src = presenceAvatarUrl(ou.avatarStyle, ou.avatarSeed);
+    img.alt = ou.displayName;
+    img.dataset.tip = ou.displayName + " (@" + ou.username + ")";
+    container.appendChild(img);
+  }
+  if (onlineUsers.length > maxShow) {
+    var more = document.createElement("span");
+    more.className = "sidebar-presence-more";
+    more.textContent = "+" + (onlineUsers.length - maxShow);
+    container.appendChild(more);
+  }
+}
+
 export function renderIconStrip(projects, currentSlug) {
   // Cache for mobile sheet
   cachedProjectList = projects;
@@ -1991,6 +2096,7 @@ export function renderIconStrip(projects, currentSlug) {
       var emojiSpan = document.createElement("span");
       emojiSpan.className = "project-emoji";
       emojiSpan.textContent = p.icon;
+      parseEmojis(emojiSpan);
       el.appendChild(emojiSpan);
     } else {
       el.appendChild(document.createTextNode(getProjectAbbrev(p.name)));

package/lib/public/style.css

@@ -21,3 +21,4 @@
 @import url("css/playbook.css");
 @import url("css/stt.css");
 @import url("css/profile.css");
+@import url("css/admin.css");

package/lib/push.js

@@ -17,6 +17,9 @@ function loadOrCreateVapidKeys() {
   var keys = webpush.generateVAPIDKeys();
   fs.mkdirSync(dir, { recursive: true });
   fs.writeFileSync(keyFile, JSON.stringify(keys, null, 2));
+  if (process.platform !== "win32") {
+    try { fs.chmodSync(keyFile, 0o600); } catch (e) {}
+  }
   return keys;
 }
 
@@ -53,6 +56,9 @@ function initPush() {
         vapidKey: keys.publicKey,
         subs: [...subscriptions.values()],
       }));
+      if (process.platform !== "win32") {
+        try { fs.chmodSync(subFile, 0o600); } catch (e2) {}
+      }
     } catch (e) {}
   }