clay-server 3.8.1 → 4.0.0-beta.2

package/lib/public/modules/vendor-login.js

@@ -0,0 +1,287 @@
+// vendor-login.js - Vendor login (auth_required) recovery flow.
+//
+// The server owns the login terminal (see lib/project-vendor-login.js): exactly
+// one per vendor per project, tracked server-side, killed once the login lands.
+// This module is the client half of that contract - it asks for the flow, opens
+// the modal on whatever terminal the server hands back, and reflects the flow's
+// state in a banner.
+//
+// Nothing here spawns a terminal speculatively. Every auth_required after the
+// first is a no-op while a flow is live, which is what stops the login-terminal
+// pile-up and the endless auth_required -> login -> 401 loop.
+
+import { store } from './store.js';
+import { getWs } from './ws-ref.js';
+import { refreshIcons, iconHtml } from './icons.js';
+import { openTuiModal, closeTuiModal, getTuiModalTerminalId } from './tui-attention.js';
+import { forwardPaneAuthRequired } from './pane-bridge.js';
+
+// vendor -> { terminalId, startedAt } as last broadcast by the server.
+var activeFlows = Object.create(null);
+// vendor -> true between sending vendor_login_start and hearing back.
+var pendingStarts = Object.create(null);
+// Vendor whose login terminal the modal is currently showing.
+var modalVendor = null;
+// Set while this module tears the modal down itself, so the modal's close hook
+// does not read a programmatic close as "the user gave up".
+var closingModalInternally = false;
+
+function vendorDisplayName(vendor) {
+  var vendors = store.get('vendorInfo') || {};
+  var info = vendors[vendor];
+  if (info && info.displayName) return info.displayName;
+  return vendor === "codex" ? "Codex" : "Claude Code";
+}
+
+function currentProjectSlug() {
+  var slug = store.get('currentSlug') || "";
+  if (slug) return slug;
+  // Fallback: derive from the URL (/p/<slug>/...).
+  try {
+    var m = (window.location.pathname || "").match(/^\/p\/([a-z0-9_-]+)/);
+    if (m) return m[1];
+  } catch (e) {}
+  return "";
+}
+
+// The banner surface belongs to the notification center. Query it rather than
+// importing app-notifications so the dependency stays one-directional
+// (app-notifications -> vendor-login).
+function bannerContainer() {
+  return document.querySelector(".notif-banner-container");
+}
+
+function removeBannerEl(el) {
+  if (!el) return;
+  el.classList.remove("show");
+  setTimeout(function () {
+    if (el.parentNode) el.parentNode.removeChild(el);
+  }, 300);
+}
+
+function clearLoginBanners() {
+  var container = bannerContainer();
+  if (!container) return;
+  var existing = container.querySelectorAll('[data-vendor-login="true"]');
+  for (var i = 0; i < existing.length; i++) removeBannerEl(existing[i]);
+}
+
+function showLoginBanner(opts) {
+  var container = bannerContainer();
+  if (!container) return null;
+  clearLoginBanners();
+
+  var banner = document.createElement("div");
+  banner.className = "notif-banner notif-banner-update";
+  banner.setAttribute("data-notif-id", "_vendor_login");
+  banner.setAttribute("data-vendor-login", "true");
+  banner.innerHTML =
+    '<div class="notif-banner-icon">' + iconHtml(opts.icon || "check-circle") + '</div>' +
+    '<div class="notif-banner-body">' +
+      '<div class="notif-banner-project">CLAY</div>' +
+      '<div class="notif-banner-title">' + opts.title + '</div>' +
+      '<div class="notif-banner-text">' + opts.text + '</div>' +
+    '</div>' +
+    '<button class="notif-banner-close">' + iconHtml("x") + '</button>';
+
+  container.appendChild(banner);
+  refreshIcons();
+  requestAnimationFrame(function () { banner.classList.add("show"); });
+
+  var closeBtn = banner.querySelector(".notif-banner-close");
+  if (closeBtn) {
+    closeBtn.addEventListener("click", function (e) {
+      e.stopPropagation();
+      removeBannerEl(banner);
+      if (opts.onDismiss) opts.onDismiss();
+    });
+  }
+  if (typeof opts.autoDismissMs === "number") {
+    setTimeout(function () { removeBannerEl(banner); }, opts.autoDismissMs);
+  }
+  return banner;
+}
+
+function showLoginStartedBanner(vendor) {
+  showLoginBanner({
+    icon: "check-circle",
+    title: vendorDisplayName(vendor) + " login started",
+    text: "Finish the sign-in in the terminal. Clay reloads the credentials on its own, so your sessions keep working - no new session needed.",
+    onDismiss: function () { cancelVendorLogin(vendor); },
+  });
+}
+
+function showLoginCompleteBanner(vendor) {
+  showLoginBanner({
+    icon: "check-circle",
+    title: "Signed in to " + vendorDisplayName(vendor),
+    text: "Credentials reloaded. Send your next message to continue.",
+    autoDismissMs: 6000,
+  });
+}
+
+function showLoginErrorBanner(vendor, error) {
+  showLoginBanner({
+    icon: "alert-triangle",
+    title: vendorDisplayName(vendor) + " login could not start",
+    text: error || "The login terminal could not be created.",
+    autoDismissMs: 8000,
+  });
+}
+
+function closeModalInternally() {
+  modalVendor = null;
+  closingModalInternally = true;
+  try {
+    closeTuiModal();
+  } finally {
+    closingModalInternally = false;
+  }
+}
+
+function closeModalForVendor(vendor, terminalId) {
+  if (modalVendor !== vendor) return;
+  var openId = getTuiModalTerminalId();
+  if (typeof terminalId === "number" && openId != null && openId !== terminalId) return;
+  closeModalInternally();
+}
+
+// ========================================================
+// Outgoing
+// ========================================================
+
+/**
+ * Ask the server to start (or hand back) the login terminal for a vendor.
+ * opts.auto marks a request triggered by an auth_required event; those never
+ * open a second prompt while a flow is already running.
+ */
+export function requestVendorLogin(vendor, opts) {
+  var options = opts || {};
+  var target = vendor || "claude";
+  if (options.auto && (activeFlows[target] || pendingStarts[target])) return false;
+
+  var ws = getWs();
+  if (!ws || ws.readyState !== 1) return false;
+
+  pendingStarts[target] = true;
+  ws.send(JSON.stringify({
+    type: "vendor_login_start",
+    vendor: target,
+    auto: !!options.auto,
+    sessionId: options.sessionId || store.get('activeSessionId') || null,
+  }));
+  showLoginStartedBanner(target);
+  return true;
+}
+
+export function cancelVendorLogin(vendor) {
+  var target = vendor || modalVendor;
+  if (!target) return;
+  delete pendingStarts[target];
+  delete activeFlows[target];
+  clearLoginBanners();
+  if (modalVendor === target) closeModalInternally();
+  var ws = getWs();
+  if (ws && ws.readyState === 1) {
+    ws.send(JSON.stringify({ type: "vendor_login_cancel", vendor: target }));
+  }
+}
+
+/**
+ * Auto-open the login flow when the server reports the vendor isn't logged in.
+ *
+ * Split panes have no banner surface of their own (the parent shell owns the
+ * single visible one), so a pane hands the event up instead of running two
+ * competing flows.
+ */
+export function autoStartLoginIfNeeded(msg) {
+  if (!msg) return false;
+  if (store.get('paneMode')) {
+    return forwardPaneAuthRequired({
+      vendor: msg.vendor || "claude",
+      sessionId: store.get('activeSessionId') || null,
+    });
+  }
+  var vendor = msg.vendor || "claude";
+  if (activeFlows[vendor] || pendingStarts[vendor]) return false;
+  return requestVendorLogin(vendor, { auto: true, sessionId: msg.sessionId || null });
+}
+
+// ========================================================
+// Incoming
+// ========================================================
+
+export function handleVendorLoginReady(msg) {
+  if (!msg || typeof msg.terminalId !== "number") return;
+  var vendor = msg.vendor || "claude";
+  delete pendingStarts[vendor];
+  activeFlows[vendor] = { terminalId: msg.terminalId, startedAt: Date.now() };
+
+  var slug = msg.slug || currentProjectSlug();
+  if (!slug) return;
+  modalVendor = vendor;
+  openTuiModal(msg.terminalId, slug, {
+    sessionTitle: vendorDisplayName(vendor) + " login",
+    projectName: slug,
+    compact: true,
+    // Dismissing the modal abandons the login: kill the terminal server-side
+    // so it never lingers in the sidebar terminal list.
+    onClose: function () {
+      if (closingModalInternally) return;
+      modalVendor = null;
+      cancelVendorLogin(vendor);
+    },
+  });
+}
+
+export function handleVendorLoginState(msg) {
+  if (!msg) return;
+  var next = Object.create(null);
+  var flows = msg.flows || [];
+  for (var i = 0; i < flows.length; i++) {
+    next[flows[i].vendor] = { terminalId: flows[i].terminalId, startedAt: flows[i].startedAt };
+    delete pendingStarts[flows[i].vendor];
+  }
+
+  // A flow the server dropped without an auth_refreshed (cancelled elsewhere,
+  // terminal killed from the sidebar) must not leave a stale modal behind.
+  var previous = Object.keys(activeFlows);
+  for (var p = 0; p < previous.length; p++) {
+    if (!next[previous[p]] && modalVendor === previous[p]) {
+      closeModalInternally();
+      clearLoginBanners();
+    }
+  }
+  activeFlows = next;
+}
+
+export function handleAuthRefreshed(msg) {
+  if (!msg) return;
+  var vendor = msg.vendor || "claude";
+  var flow = activeFlows[vendor];
+  delete pendingStarts[vendor];
+  delete activeFlows[vendor];
+  closeModalForVendor(vendor, flow ? flow.terminalId : undefined);
+  clearLoginBanners();
+  showLoginCompleteBanner(vendor);
+}
+
+export function handleVendorLoginError(msg) {
+  if (!msg) return;
+  var vendor = msg.vendor || "claude";
+  delete pendingStarts[vendor];
+  delete activeFlows[vendor];
+  if (modalVendor === vendor) closeModalInternally();
+  clearLoginBanners();
+  showLoginErrorBanner(vendor, msg.error);
+}
+
+export function requestVendorLoginState() {
+  var ws = getWs();
+  if (!ws || ws.readyState !== 1) return;
+  ws.send(JSON.stringify({ type: "vendor_login_state_request" }));
+}
+
+export function getActiveLoginFlow(vendor) {
+  return activeFlows[vendor] || null;
+}

package/lib/public/modules/worker-proposal.js

@@ -158,7 +158,7 @@ export function renderWorkerProposal(msg) {
 
   var summary = document.createElement("p");
   summary.className = "worker-proposal-summary";
-  summary.textContent = msg.summary || "This task can be planned here and executed in a visible Worker session.";
+  summary.textContent = msg.summary || "This task can be planned here and executed in a visible Split Worker session.";
   card.appendChild(summary);
 
   var steps = planSteps(msg.plan);
@@ -225,7 +225,7 @@ export function renderWorkerProposal(msg) {
   var accept = document.createElement("button");
   accept.type = "button";
   accept.className = "worker-proposal-action primary";
-  accept.innerHTML = iconHtml("panel-right-open") + "<span>Run with Worker</span>";
+  accept.innerHTML = iconHtml("panel-right-open") + "<span>Run with Split Worker</span>";
   accept.addEventListener("click", function () { sendDecision(card, true); });
   actions.appendChild(decline);
   actions.appendChild(accept);

package/lib/public/modules/workspace-assignment-card.js

@@ -0,0 +1,149 @@
+import { getWs } from './ws-ref.js';
+import { iconHtml, refreshIcons } from './icons.js';
+
+var pendingFocus = {};
+
+function textElement(tag, className, text) {
+  var element = document.createElement(tag);
+  element.className = className;
+  element.textContent = text || "";
+  return element;
+}
+
+function statusLabel(status) {
+  if (status === "starting") return "Starting";
+  if (status === "running") return "In progress";
+  if (status === "completed") return "Completed";
+  if (status === "failed") return "Failed";
+  if (status === "cancelled") return "Cancelled";
+  if (status === "interrupted") return "Interrupted";
+  return "Approval required";
+}
+
+function sendDecision(assignment, action, surface, context, card, opener) {
+  var ws = getWs();
+  if (!ws || ws.readyState !== 1 || !assignment || assignment.status !== "proposed") return false;
+  pendingFocus[assignment.assignmentId] = opener || null;
+  card.setAttribute("aria-busy", "true");
+  var buttons = card.querySelectorAll("button");
+  for (var i = 0; i < buttons.length; i++) buttons[i].disabled = true;
+  ws.send(JSON.stringify({
+    type: "project_assignment_response",
+    assignmentId: assignment.assignmentId,
+    action: action,
+    surface: surface,
+    sourceProjectSlug: assignment.sourceProjectSlug,
+    sourceSessionRef: assignment.sourceSessionRef,
+    mateId: context && context.mateId || null,
+    sessionId: context && context.sessionId || null,
+    requestId: context && context.requestId || null,
+  }));
+  return true;
+}
+
+export function restoreWorkspaceAssignmentFocus(assignmentId, card) {
+  if (!assignmentId || !pendingFocus[assignmentId] || !card) return false;
+  delete pendingFocus[assignmentId];
+  var focusTarget = card.querySelector(".workspace-assignment-error") || card.querySelector('[role="status"]');
+  if (!focusTarget) return false;
+  focusTarget.tabIndex = -1;
+  requestAnimationFrame(function () { focusTarget.focus({ preventScroll: true }); });
+  return true;
+}
+
+export function createWorkspaceAssignmentCard(assignment, options) {
+  var config = options || {};
+  var followUp = assignment.delivery === "follow_up";
+  var card = document.createElement("section");
+  card.className = "workspace-assignment-card" + (config.home ? " home-workspace-assignment" : "");
+  card.dataset.assignmentId = assignment.assignmentId || "";
+  card.dataset.status = assignment.status || "proposed";
+  card.dataset.delivery = followUp ? "follow_up" : "new_session";
+  card.setAttribute("aria-label", (followUp ? "Project follow-up: " : "Project assignment: ") + (assignment.title || "Untitled assignment"));
+
+  var header = document.createElement("div");
+  header.className = "workspace-assignment-header";
+  var mark = document.createElement("span");
+  mark.className = "workspace-assignment-mark";
+  mark.innerHTML = iconHtml(followUp ? "message-square-plus" : "send");
+  mark.setAttribute("aria-hidden", "true");
+  header.appendChild(mark);
+  var heading = document.createElement("div");
+  heading.className = "workspace-assignment-heading";
+  heading.appendChild(textElement("span", "workspace-assignment-kicker", followUp ? "PROJECT FOLLOW-UP" : "PROJECT ASSIGNMENT"));
+  heading.appendChild(textElement("h3", "workspace-assignment-title", assignment.title || "Untitled assignment"));
+  header.appendChild(heading);
+  var status = textElement("span", "workspace-assignment-status", statusLabel(assignment.status));
+  status.setAttribute("role", "status");
+  header.appendChild(status);
+  card.appendChild(header);
+
+  var targetText = followUp
+    ? "Continue “" + (assignment.targetSessionTitle || "Existing session") + "” in " + (assignment.projectTitle || assignment.projectSlug || "project")
+    : "New private session in " + (assignment.projectTitle || assignment.projectSlug || "project");
+  var target = textElement("p", "workspace-assignment-target", targetText);
+  card.appendChild(target);
+  card.appendChild(textElement("p", "workspace-assignment-task", assignment.task || ""));
+
+  if (assignment.error) {
+    var error = textElement("p", "workspace-assignment-error", assignment.error);
+    error.setAttribute("role", "alert");
+    card.appendChild(error);
+  }
+  if (assignment.resultSummary) card.appendChild(textElement("p", "workspace-assignment-result", assignment.resultSummary));
+
+  var actions = document.createElement("div");
+  actions.className = "workspace-assignment-actions";
+  if (assignment.status === "proposed") {
+    var cancel = textElement("button", "workspace-assignment-action secondary", "Cancel");
+    cancel.type = "button";
+    cancel.setAttribute("aria-label", "Cancel project assignment");
+    cancel.addEventListener("click", function () { sendDecision(assignment, "cancel", config.home ? "home" : "project", config.context, card, cancel); });
+    var approve = textElement("button", "workspace-assignment-action primary", "Approve");
+    approve.type = "button";
+    approve.setAttribute("aria-label", followUp ? "Approve follow-up in " + (assignment.targetSessionTitle || "the target session") : "Approve new session in " + (assignment.projectTitle || assignment.projectSlug || "the target project"));
+    approve.addEventListener("click", function () { sendDecision(assignment, "approve", config.home ? "home" : "project", config.context, card, approve); });
+    actions.appendChild(cancel);
+    actions.appendChild(approve);
+  } else {
+    var resolved = textElement("span", "workspace-assignment-resolved", statusLabel(assignment.status));
+    resolved.setAttribute("role", "status");
+    resolved.tabIndex = -1;
+    actions.appendChild(resolved);
+  }
+  card.appendChild(actions);
+  restoreWorkspaceAssignmentFocus(assignment.assignmentId, card);
+  refreshIcons();
+  return card;
+}
+
+export function showWorkspaceAssignmentError(card, msg) {
+  if (!card) return false;
+  card.removeAttribute("aria-busy");
+  var buttons = card.querySelectorAll("button");
+  for (var i = 0; i < buttons.length; i++) buttons[i].disabled = false;
+  var error = card.querySelector(".workspace-assignment-error");
+  if (!error) {
+    error = textElement("p", "workspace-assignment-error", "");
+    error.setAttribute("role", "alert");
+    card.insertBefore(error, card.querySelector(".workspace-assignment-actions"));
+  }
+  error.textContent = msg.error || "The assignment could not be updated.";
+  error.tabIndex = -1;
+  error.focus({ preventScroll: true });
+  return true;
+}
+
+export function applyHomeWorkspaceAssignment(messages, msg) {
+  var assignment = msg && msg.assignment;
+  if (!assignment || !assignment.assignmentId) return messages;
+  var next = (messages || []).slice();
+  for (var i = 0; i < next.length; i++) {
+    if (next[i].role === "assignment" && next[i].assignment && next[i].assignment.assignmentId === assignment.assignmentId) {
+      next[i] = { role: "assignment", assignment: assignment };
+      return next;
+    }
+  }
+  next.push({ role: "assignment", assignment: assignment });
+  return next;
+}

package/lib/public/modules/workspace-assignment-routing.js

@@ -0,0 +1,4 @@
+export function isHomeWorkspaceAssignmentMessage(msg) {
+  if (!msg) return false;
+  return (msg.type === "home_project_assignment_proposal" || msg.type === "home_project_assignment_status") && !!msg.mateId && !!msg.requestId;
+}

package/lib/public/style.css

@@ -3,6 +3,7 @@
 @import url("css/title-bar.css?v=20260828-project-header1");
 @import url("css/pane.css");
 @import url("css/worker-proposal.css");
+@import url("css/workspace-assignment.css");
 @import url("css/session-actions.css?v=20260828-contrast1");
 @import url("css/sidebar.css?v=20260828-session-list3");
 @import url("css/overlays.css?v=20260827-brand3");
@@ -23,7 +24,13 @@
 @import url("css/scheduler.css");
 @import url("css/scheduler-modal.css");
 @import url("css/home-hub.css");
-/* @import url("css/home-chat.css"); */ /* FAB chat disabled */
+@import url("css/home-sidebar.css");
+@import url("css/home-session-actions.css");
+@import url("css/home-capsule-library.css");
+@import url("css/home-capsule-source.css");
+@import url("css/capsule-ui.css?v=20260831-v2");
+@import url("css/home-mate-model-picker.css");
+@import url("css/home-mate-settings.css");
 @import url("css/playbook.css");
 @import url("css/stt.css");
 @import url("css/profile.css");
@@ -32,9 +39,13 @@
 @import url("css/session-search.css");
 @import url("css/tooltip.css");
 @import url("css/mates.css?v=20260407");
-@import url("css/command-palette.css");
+@import url("css/command-palette.css?v=20260901-clay-chat2");
 @import url("css/mention.css");
 @import url("css/debate.css");
+@import url("css/home-debate-planning.css");
+@import url("css/home-mate-creation.css");
+@import url("css/home-debate-live.css");
+@import url("css/home-debates-archive.css");
 @import url("css/notifications-center.css");
 @import url("css/tui-attention.css?v=20260829-terminal-canvas1");
 @import url("css/pwa-mobile.css?v=20260824f");

package/lib/runtime-env.js

@@ -0,0 +1,65 @@
+var SAFE_KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var PROTECTED_KEYS = { HOME: true, USER: true, LOGNAME: true, SHELL: true, PATH: true, XDG_RUNTIME_DIR: true, NODE_OPTIONS: true, TERM: true, COLORFGBG: true };
+
+function isProtectedKey(key) {
+  return !!PROTECTED_KEYS[key] || key.indexOf("CLAY_") === 0 || key.indexOf("LD_") === 0 || key.indexOf("DYLD_") === 0;
+}
+
+function parseQuotedValue(value, lineNumber) {
+  var trimmed = value.trim();
+  if (!trimmed) return "";
+  var quote = trimmed.charAt(0);
+  if (quote !== "\"" && quote !== "'") {
+    if (/[;`|]|\$\(|&&/.test(trimmed)) throw new Error("Unsupported executable syntax at line " + lineNumber);
+    return trimmed;
+  }
+  if (trimmed.length < 2 || trimmed.charAt(trimmed.length - 1) !== quote) throw new Error("Invalid quoted value at line " + lineNumber);
+  var content = trimmed.substring(1, trimmed.length - 1);
+  if (quote === "'") return content;
+  try {
+    var parsed = JSON.parse(trimmed);
+    if (typeof parsed !== "string" || parsed.indexOf("\0") !== -1) throw new Error("Invalid");
+    return parsed;
+  } catch (e) {
+    throw new Error("Invalid quoted value at line " + lineNumber);
+  }
+}
+
+function parseEnvrc(text) {
+  var env = {};
+  var source = typeof text === "string" ? text : "";
+  if (source.indexOf("\0") !== -1) throw new Error("Environment values cannot contain NUL bytes");
+  var lines = source.split(/\r?\n/);
+  for (var i = 0; i < lines.length; i++) {
+    var line = lines[i].trim();
+    if (!line || line.charAt(0) === "#") continue;
+    if (line.indexOf("export ") === 0) line = line.substring(7).trim();
+    var equals = line.indexOf("=");
+    if (equals < 1) throw new Error("Unsupported syntax at line " + (i + 1) + ": use KEY=VALUE or export KEY=VALUE");
+    var key = line.substring(0, equals).trim();
+    if (!SAFE_KEY.test(key)) throw new Error("Invalid variable name at line " + (i + 1) + ": " + key);
+    env[key] = parseQuotedValue(line.substring(equals + 1), i + 1);
+  }
+  return env;
+}
+
+function validateEnvString(text) {
+  try { parseEnvrc(text); return null; }
+  catch (e) { return e.message || String(e); }
+}
+
+function applyEnv(target, values) {
+  var keys = Object.keys(values || {});
+  for (var i = 0; i < keys.length; i++) if (!isProtectedKey(keys[i])) target[keys[i]] = values[keys[i]];
+  return target;
+}
+
+function resolveRuntimeEnv(opts) {
+  opts = opts || {};
+  var result = Object.assign({}, opts.baseEnv || process.env);
+  applyEnv(result, parseEnvrc(opts.sharedEnvrc || ""));
+  applyEnv(result, parseEnvrc(opts.projectEnvrc || ""));
+  return result;
+}
+
+module.exports = { parseEnvrc: parseEnvrc, validateEnvString: validateEnvString, resolveRuntimeEnv: resolveRuntimeEnv, isProtectedKey: isProtectedKey };