clay-server 4.0.0-beta.11 → 4.0.0-beta.13

package/lib/project-logs-mcp-server.js

@@ -21,21 +21,22 @@ var LOGS_CONTRACT =
   "Do not log conversation summaries, task narration, restatements of the request, completed-work announcements, speculation, or anything the repository and its history already record. " +
   "Every write is attributed and permanently revision-tracked, so keep entries short, concrete, and true.";
 
-// Learning moments are a durable project asset, so capturing them is a default
-// rather than an option. The point is to help the person's own model get
-// sharper, not to replace their thinking: a concept they can name is a concept
-// they can reuse without asking again.
+// User learning moments are a durable project asset, so capturing them is a
+// default rather than an option. This category is about a change in the user's
+// conceptual model, never knowledge the Driver acquired while doing the work.
 var LEARNING_CONTRACT =
-  "Capture durable learning moments as Project Logs, normally under the category `learning`. " +
-  "There are two kinds. First, the person asks a conceptual question directly and the answer is durable and relevant to this project. " +
-  "Second, and easier to miss: the person describes something in their own approximate words and you identify the precise term, model, or mechanism behind it. " +
+  "Capture durable user learning moments as Project Logs, normally under the category `learning`. " +
+  "A learning entry is exclusively about the user's learning: the user must have engaged with a concept they did not previously know, or expressed an approximate mental model that you made more precise. It is never a record of something you, the Driver, learned or discovered while inspecting the project. " +
+  "There are two kinds. First, the user asks a conceptual question directly and the answer is durable and relevant to this project. " +
+  "Second, and easier to miss: the user describes something in their own approximate words and you identify the precise term, model, or mechanism behind it. " +
   "If someone says the background is transparent and blurry and you name that as backdrop blur, implemented with the CSS backdrop-filter property, that is a learning moment and it should not evaporate when the conversation scrolls away. " +
-  "Record four things: the person's original wording or mental model, the precise concept it corresponds to, why and how it applies in this project, and any boundary or common misconception worth knowing. " +
+  "Record four things: the user's original wording or mental model, the precise concept it corresponds to, why and how it applies in this project, and any boundary or common misconception worth knowing. " +
   "Write the title and summary so they teach at a glance: someone reading only the ledger row should come away knowing the concept. " +
   "When it comes to learning, always capture once these criteria are met; treat it as the default rather than a judgement call. " +
   "Never fabricate a learning moment, and never claim someone learned something they did not actually engage with. " +
   "Attribute respectfully and factually: write that a concept was clarified in discussion. Never grade, rank, or characterise the person's knowledge. " +
-  "Do not log routine command syntax, trivial confirmations, facts the person clearly already knows, or every explanation you happen to give. Capture when a conceptual model becomes measurably more precise. " +
+  "Do not classify engineering lessons, repository discoveries, investigation outcomes, defect causes, implementation insights, decisions, or facts you learned during the work as learning; use an appropriate category such as `investigation`, `defect`, `decision`, or `reference`. " +
+  "Do not log routine command syntax, trivial confirmations, facts the user clearly already knows, or every explanation you happen to give. Capture when the user's conceptual model becomes measurably more precise. " +
   "When new learning refines or supersedes an existing learning entry, revise that entry instead of adding a near-duplicate.";
 
 // Sticky Notes and Project Logs are different layers, and the failure mode is
@@ -71,9 +72,10 @@ var CATEGORY_DESCRIPTION = "Record category: a short lowercase hyphen-separated
   "Letters and digits in any script are accepted, so a project may keep its vocabulary in the language it works in. " +
   "This project's own vocabulary, not a fixed list. Call list_logs or search_logs first and reuse an established category when one fits; " +
   "coin a new concise one only when this project needs a durable distinction it does not yet have. " +
-  "Common starting points are " + logsSchema.SEED_CATEGORIES.join(", ") + ". A category is dry metadata, never a persona or an identifier.";
+  "Common starting points are " + logsSchema.SEED_CATEGORIES.join(", ") + ". A category is dry metadata, never a persona or an identifier. " +
+  "Use `learning` only for a user learning moment described by the learning contract, never for knowledge or lessons acquired by the Driver.";
 var PRIORITY_DESCRIPTION = "How much this outranks routine work: " + logsSchema.PRIORITIES.join(", ") + ". Defaults to normal. Priority is independent of category, so an urgent decision is both.";
-var SUMMARY_DESCRIPTION = "One or two sentences explaining what was decided or done and why. This is what a reader sees in the ledger, so it must stand alone. For a learning entry, name the concept plainly enough that the row itself teaches it.";
+var SUMMARY_DESCRIPTION = "One or two sentences explaining what was decided or done and why. This is what a reader sees in the ledger, so it must stand alone. For a learning entry, identify the concept the user engaged with plainly enough that the row itself teaches it.";
 var REF_DESCRIPTION = "Opaque log reference returned by list_logs, search_logs, or create_log.";
 
 function textResult(value) {
@@ -152,7 +154,7 @@ function projectTools(bound) {
         priority: { type: "string", enum: logsSchema.PRIORITIES, description: PRIORITY_DESCRIPTION },
         title: { type: "string", description: "Short factual title, plain text, written like a good commit subject." },
         summary: { type: "string", description: SUMMARY_DESCRIPTION },
-        body: { type: "string", description: "The durable facts, context, and outcome in Markdown. No narration of your own activity. For a learning entry, cover the original wording or mental model, the precise concept, how it applies here, and any boundary or misconception." },
+        body: { type: "string", description: "The durable facts, context, and outcome in Markdown. No narration of your own activity. For a learning entry, cover the user's original wording or mental model, the precise concept, how it applies here, and any boundary or misconception." },
         tags: { type: "string", description: "Optional JSON array of short tag strings." },
       }, ["kind", "title", "summary"]),
       handler: handler(bound, "createLog"),

package/lib/project-pair-lifecycle.js

@@ -130,6 +130,7 @@ function activityStatus(session) {
 function attachPairLifecycle(ctx) {
   var sm = ctx.sm;
   var store = ctx.splitStore;
+  var turnControl = ctx.turnControl;
 
   // Per-Driver ledger of the Worker generations it has run, newest last.
   // Lives on the live Driver session object: it informs the Driver's next
@@ -219,7 +220,7 @@ function attachPairLifecycle(ctx) {
   function partnerStatus(caller) {
     var resolved = resolveDriverPair(caller);
     var worker = resolved.worker;
-    var blocked = replaceBlockedReason(worker);
+    var blocked = turnControl.blockedReason(caller) || replaceBlockedReason(worker);
     var ledger = ledgerFor(caller).map(function (record) {
       return {
         generation: record.generation,
@@ -242,6 +243,7 @@ function attachPairLifecycle(ctx) {
       activity: activityStatus(worker),
       context: contextStatus(worker),
       continuity: continuityStatus(worker),
+      orchestration: turnControl.status(caller),
       replaceSafe: !blocked,
       replaceBlockedReason: blocked,
       driverTier: resolved.tier ? resolved.tier.name : null,
@@ -258,6 +260,7 @@ function attachPairLifecycle(ctx) {
     var resolved = resolveDriverPair(caller);
     var group = resolved.group;
     var oldWorker = resolved.worker;
+    turnControl.assertWorkerAction(caller);
 
     // Validate the replacement while the old pair is still fully intact. An
     // uninstalled vendor, an unavailable model or an unsupported effort must
@@ -275,6 +278,9 @@ function attachPairLifecycle(ctx) {
         "; call again with interrupt set to true to stop it first");
     }
 
+    if (args.evaluation) validateEvaluation(args.evaluation);
+    var creationTicket = turnControl.reserveCreation(caller, "replace");
+
     if (blocked) {
       oldWorker.taskStopRequested = true;
       if (oldWorker.abortController) {
@@ -290,15 +296,12 @@ function attachPairLifecycle(ctx) {
       ctx.cancelWorkerPermissions(oldWorker, "The Driver replaced this Split Worker.");
     }
 
-    // The outgoing generation is closed only after the replacement exists, so a
-    // rollback leaves its ledger entry open and its evaluation untouched. The
-    // evaluation shape is still checked here, before anything is destroyed, so
-    // a malformed assessment cannot dissolve the pair and then be rejected.
-    if (args.evaluation) validateEvaluation(args.evaluation);
-
     var ws = { _clayUser: caller.ownerId ? { id: caller.ownerId } : null };
     var dissolved = store.dissolve(ws, { id: group.id });
-    if (!dissolved.ok) throw new Error(dissolved.error || "could not dissolve the existing pair");
+    if (!dissolved.ok) {
+      turnControl.releaseCreation(creationTicket);
+      throw new Error(dissolved.error || "could not dissolve the existing pair");
+    }
 
     // History is preserved: the old Worker session stays in the project.
     //
@@ -334,6 +337,7 @@ function attachPairLifecycle(ctx) {
       var interruptNote = blocked
         ? " Its interrupted turn cannot be resumed, because stopping it was explicitly requested."
         : "";
+      turnControl.releaseCreation(creationTicket);
       throw new Error("could not create the replacement Split Worker: " + (e.message || String(e)) +
         ". " + restoreNote + interruptNote);
     }

package/lib/project-session-pair.js

@@ -2,12 +2,11 @@ var pairMcp = require("./session-pair-mcp-server");
 var pairPrompts = require("./session-pair-prompts");
 var { attachPairFactory } = require("./session-pair-factory");
 var { attachPairLifecycle } = require("./project-pair-lifecycle");
+var { attachPairTurnControl } = require("./session-pair-turn-control");
 var driverEligibility = require("./session-driver-eligibility");
 var { attachWorkerPermission } = require("./project-worker-permission");
 var { attachWorkerProposal } = require("./project-worker-proposal");
-
 var MAX_RESPONSE_CHARS = 30000;
-
 function toolResult(value) {
   return Promise.resolve({ content: [{ type: "text", text: JSON.stringify(value) }] });
 }
@@ -65,13 +64,10 @@ function attachSessionPair(ctx) {
   var workerProposal;
   var workerPermission;
   var lifecycle;
-
+  var turnControl = attachPairTurnControl({ sm: sm, splitStore: store });
   function groupAndPartner(caller) {
     if (!caller) throw new Error("partner tools require a session-bound tool server");
-    // Exact live object identity. MCP tool handlers are captured per query and
-    // outlive the session they were bound to, so a stale session object — or a
-    // different object reusing the same localId — must not be able to drive a
-    // pair through a handler someone still holds a reference to.
+    // Captured handlers must remain bound to the exact live Session object.
     if (sm.sessions.get(caller.localId) !== caller) {
       throw new Error("this session is no longer live; the partner tools are bound to an exact session");
     }
@@ -106,11 +102,10 @@ function attachSessionPair(ctx) {
     broadcastDelegation(group, caller, partner, false);
   }
 
-  // Deliver an internal message to the Driver and make sure it is running so
-  // the message is actually consumed. Shared by the delegated-result push-back
-  // and by Split Worker permission routing, so both use one resume path.
+  // Shared resume path for delegated results and Worker permission routing.
   function resumeDriverWithMessage(caller, text, meta) {
     if (!caller || caller.destroying) return false;
+    if (turnControl.blockedReason(caller)) return false;
     var record = {
       type: "user_message",
       text: text,
@@ -165,9 +160,7 @@ function attachSessionPair(ctx) {
     });
   }
 
-  // A Driver blocked inside a waiting send_to_partner cannot answer a tool
-  // call. Asking the wait to detach lets its turn continue; the delegated
-  // result then arrives through the existing detached push-back path.
+  // Give a waiting Driver its turn back so it can answer Worker permissions.
   function requestDetach(worker) {
     var token = worker && worker._pairDelegation;
     if (!token || token.detached || token.detachRequested) return false;
@@ -216,9 +209,7 @@ function attachSessionPair(ctx) {
           });
           return;
         }
-        // Either the deadline passed, or something needs the Driver's turn
-        // back before then (a Split Worker permission request). Both detach
-        // the same way, so the completed result still returns automatically.
+        // Timeouts and permission requests both detach into the push-back path.
         if (Date.now() >= deadline || token.detachRequested) {
           clearInterval(timer);
           token.detached = true;
@@ -245,9 +236,12 @@ function attachSessionPair(ctx) {
       if (caller && caller._delegatedBy) throw new Error("delegated turns cannot delegate to another session");
       var message = typeof args.message === "string" ? args.message.trim() : "";
       if (!message) throw new Error("message is required");
+      turnControl.assertWorkerAction(caller);
       var created = null;
       if (caller && !store.groupForMember(caller.localId)) {
-        created = createWorkerForDriver(caller, args);
+        var creationTicket = turnControl.reserveCreation(caller, "create");
+        try { created = createWorkerForDriver(caller, args); }
+        catch (createError) { turnControl.releaseCreation(creationTicket); throw createError; }
       }
       var resolved = groupAndPartner(caller);
       if (created && created.worker) lifecycle.recordGenerationStart(caller, created.worker);
@@ -322,8 +316,7 @@ function attachSessionPair(ctx) {
         title: resolved.partner.title || "New Session",
         turns: count > 0 ? recentTurns(resolved.partner, count) : [],
       };
-      // The same bounded capacity report partner_status returns, so a Driver
-      // already reading turns needs no second call; null for anyone else.
+      // partner_status's bounded report, so reading turns needs no second call.
       payload.capacity = lifecycle.optionalStatus(caller);
       return toolResult(payload);
     } catch (e) {
@@ -368,6 +361,13 @@ function attachSessionPair(ctx) {
     }
   }
 
+  function handleHumanStop(session) {
+    var roles = turnControl.markHumanStop(session);
+    if (!roles) return false;
+    workerPermission.cancelForSession(roles.worker, "The human stopped this Split Worker turn.");
+    return true;
+  }
+
   function getToolDefs(boundSession) {
     if (!boundSession) return pairMcp.getToolDefs({
       send: function () { return toolError(new Error("send_to_partner requires a session-bound tool server")); },
@@ -378,40 +378,37 @@ function attachSessionPair(ctx) {
       replace: function () { return toolError(new Error("replace_partner requires a session-bound tool server")); },
       evaluate: function () { return toolError(new Error("record_partner_evaluation requires a session-bound tool server")); },
     });
-    // Mount whenever we have a bound session: MCP servers are fixed for the
-    // lifetime of a query, and Claude queries live across turns, so gating on
-    // group membership HERE would permanently hide the tools from a session
-    // whose split is created mid-conversation (the ad-hoc flow). Handlers
-    // re-resolve the group on every call, so an ungrouped session gets a
-    // clear error, and a session that gains a partner later just works.
-    // The one structural exclusion: a session that is ALREADY a configured
-    // pair worker at query start never sees the tools.
+    // Mount for the query lifetime; handlers re-resolve live pair state.
     var group = store.groupForMember(boundSession.localId);
     if (group && group.pair && group.pair.driverId !== boundSession.localId) return [];
-    // A plain side-by-side split has no Driver role, so it keeps exactly the
-    // partner tools it always had. Every path that would make this session a
-    // Driver — an existing configured pair, or an unpaired session whose
-    // send_to_partner would create one — requires the hard tier invariant. A
-    // model below its family's threshold never receives the autonomous
-    // lifecycle tools and cannot create or direct a pair.
+    // Plain splits keep base tools; autonomous Drivers must pass the tier gate.
     var adHocSplit = !!(group && !group.pair);
     if (!adHocSplit && !driverEligibility.isEligibleDriverSession(boundSession, sm)) return [];
     var lifecycleHandlers = lifecycle.toolHandlers(boundSession);
     var tools = pairMcp.getToolDefs({
-      send: function (args) { return sendToPartner(args, boundSession); },
+      send: function (args) {
+        return turnControl.runOperation(boundSession, "send", args && args.operationId, function () {
+          return sendToPartner(args || {}, boundSession);
+        });
+      },
       read: function (args) { return readPartner(args, boundSession); },
       interrupt: function (args) { return interruptPartner(args, boundSession); },
       close: function (args) { return closePartner(args, boundSession); },
       status: lifecycleHandlers.status,
-      replace: lifecycleHandlers.replace,
+      replace: function (args) {
+        return turnControl.runOperation(boundSession, "replace", args && args.operationId, function () {
+          return lifecycleHandlers.replace(args || {});
+        });
+      },
       evaluate: lifecycleHandlers.evaluate,
     }, { lifecycle: !adHocSplit });
     return tools
-      .concat(workerPermission.getToolDefs(boundSession))
+      .concat(workerPermission.getToolDefs(boundSession, { dormantDriver: !group }))
       .concat(workerProposal.getToolDefs(boundSession));
   }
 
-  var factory = attachPairFactory({ sm: sm, splitStore: store, ctx: ctx });
+  // Passed through as-is; re-wrapping drops fields. See session-pair-factory.js.
+  var factory = attachPairFactory(ctx);
   var createPairRecord = factory.createPairRecord;
   var createWorkerForDriver = factory.createWorkerForDriver;
   var createPair = factory.createPair;
@@ -427,6 +424,7 @@ function attachSessionPair(ctx) {
     cancelWorkerPermissions: function (worker, reason) {
       return workerPermission.cancelForSession(worker, reason);
     },
+    turnControl: turnControl,
   });
 
   workerPermission = attachWorkerPermission({
@@ -483,7 +481,9 @@ function attachSessionPair(ctx) {
   }
 
   return {
+    beginHumanTurn: turnControl.beginHumanTurn,
     getToolDefs: getToolDefs,
+    handleHumanStop: handleHumanStop,
     handleMessage: handleMessage,
     handleTurnDone: handleTurnDone,
     getSystemPrompt: getSystemPrompt,

package/lib/project-sessions.js

@@ -1004,7 +1004,8 @@ function attachSessions(ctx) {
 
     if (msg.type === "stop") {
       var session = getSessionForWs(ws);
-      if (session && session.isProcessing) {
+      if (session && (session.isProcessing || session._queryStarting)) {
+        if (typeof ctx.onHumanPairStop === "function") ctx.onHumanPairStop(session);
         session.taskStopRequested = true;
         if (session.abortController) session.abortController.abort();
       }

package/lib/project-user-message.js

@@ -331,6 +331,7 @@ function attachUserMessage(ctx) {
       });
       return true;
     }
+    if (typeof ctx.beginHumanPairTurn === "function") ctx.beginHumanPairTurn(session);
     if (gitAttribution) gitAttribution.beginTurn(session);
 
     // Bind vendor to session on first message (if not already set)

package/lib/project-worker-permission.js

@@ -328,10 +328,11 @@ function attachWorkerPermission(ctx) {
   }
 
   // Exposed to the Driver only, and only while it really is a pair Driver.
-  function getToolDefs(boundSession) {
+  function getToolDefs(boundSession, options) {
     if (!boundSession || !store) return [];
     var group = store.groupForMember(boundSession.localId);
-    if (!group || !group.pair || group.pair.driverId !== boundSession.localId) return [];
+    var dormantDriver = !!(options && options.dormantDriver);
+    if (!dormantDriver && (!group || !group.pair || group.pair.driverId !== boundSession.localId)) return [];
     return [{
       name: "respond_to_worker_permission",
       description: "Approve or deny one tool-permission request raised by your paired Split Worker. " +

package/lib/project.js

@@ -1599,6 +1599,7 @@ function createProjectContext(opts) {
     matesModule: matesModule,
     pushModule: pushModule,
     getSessionForWs: getSessionForWs,
+    onHumanPairStop: function (session) { return _sessionPair.handleHumanStop(session); },
     getLinuxUserForSession: getLinuxUserForSession,
     ensureProjectAccessForSession: ensureProjectAccessForSession,
     getOsUserInfoForWs: getOsUserInfoForWs,
@@ -1674,6 +1675,7 @@ function createProjectContext(opts) {
       if (isMate || !_sessionPair.workerPermission) return false;
       return _sessionPair.workerPermission.isDriverOperated(session);
     },
+    beginHumanPairTurn: function (session) { return _sessionPair.beginHumanTurn(session); },
     cwd: cwd,
     slug: slug,
     isMate: isMate,

package/lib/public/app.js

@@ -344,8 +344,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     projectLogsCommentStatusEl: null,
     projectLogsUnread: 0,
     projectLogsSeenRevisions: {},
-    projectLogsPreview: false,
-    projectLogsPinned: false,
     installedTools: [],
     homeToolRegistryLoaded: false,
     toolScanErrors: [],

package/lib/public/css/project-logs.css

@@ -1,4 +1,4 @@
-/* Project Logs — restrained, factual project ledger. */
+/* Project Logs — a restrained editorial ledger, designed for close reading. */
 
 /* Wide screens: bounded workbench window beside #app, matching the geometry of
    the document viewer and the terminal. */
@@ -94,90 +94,32 @@
 .project-logs-icon-btn[aria-pressed="true"] { border-color: var(--accent); color: var(--accent); }
 .project-logs-icon-btn:disabled { opacity: 0.4; cursor: default; }
 .project-logs-window-actions { display: inline-flex; align-items: center; gap: 6px; }
-/* --- Ambient edge handle ---------------------------------------------
-   A slim notch on the right workbench boundary, offered only where a real
-   pointer can hover. Touch keeps the explicit toolbar route. */
-@media (min-width: 1024px) {
-  .project-logs-handle {
-    position: absolute;
-    top: 50%;
-    right: 0;
-    transform: translateY(-50%);
-    width: 14px;
-    height: 88px;
-    padding: 0;
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    border: 1px solid var(--border);
-    border-right: 0;
-    border-radius: 8px 0 0 8px;
-    background: var(--bg-alt);
-    cursor: pointer;
-    z-index: 40;
-    transition: width 0.16s ease, background 0.16s ease;
-  }
-  .project-logs-handle:hover,
-  .project-logs-handle:focus-visible { width: 18px; background: var(--bg); }
-  .project-logs-handle:focus-visible { outline: 2px solid var(--accent); outline-offset: -2px; }
-  .project-logs-handle.hidden { display: none; }
-  .project-logs-handle-notch {
-    width: 3px;
-    height: 34px;
-    border-radius: 999px;
-    background: var(--border);
-    transition: background 0.16s ease, height 0.16s ease;
-  }
-  .project-logs-handle:hover .project-logs-handle-notch { background: var(--text-dimmer); }
-  /* Unread: a brighter notch, no motion of its own. */
-  .project-logs-handle.has-unread .project-logs-handle-notch { background: var(--accent); height: 46px; }
-}
-
-/* Touch and narrow viewports never depend on hover. */
-@media (max-width: 1023px) {
-  .project-logs-handle { display: none; }
-}
-
-/* A preview is the same pane, revealed but uncommitted. */
-#project-logs-panel.project-logs-previewing { box-shadow: 0 0 0 1px var(--accent), 4px 8px 24px rgba(var(--shadow-rgb), 0.2); }
-
-/* --- Unread cues --- */
+/* The explicit tool button is the only discovery affordance. */
 #project-logs-btn.project-logs-unread { color: var(--accent); }
 #project-logs-count { background: var(--accent); color: #fff; }
 
-@keyframes project-logs-pulse {
-  0% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--accent) 45%, transparent); }
-  70% { box-shadow: 0 0 0 7px transparent; }
-  100% { box-shadow: 0 0 0 0 transparent; }
-}
-.project-logs-pulse { animation: project-logs-pulse 1.1s ease-out 2; }
-
-/* Reduced motion keeps the static unread marker and drops every flourish. */
-@media (prefers-reduced-motion: reduce) {
-  .project-logs-pulse { animation: none; }
-  .project-logs-handle { transition: none; }
-  .project-logs-handle-notch { transition: none; }
-}
-
 /* --- Ledger toolbar --- */
-.project-logs-toolbar { display: flex; align-items: center; gap: 8px; padding: 10px 12px; border-bottom: 1px solid var(--border-subtle); flex: 0 0 auto; }
+.project-logs-toolbar { display: flex; align-items: center; gap: 8px; padding: 12px 14px; border-bottom: 1px solid var(--border-subtle); flex: 0 0 auto; background: color-mix(in srgb, var(--bg-alt) 72%, transparent); }
 .project-logs-toolbar.hidden { display: none; }
-.project-logs-search { flex: 1; min-width: 0; height: 32px; display: flex; align-items: center; gap: 7px; padding: 0 9px; border: 1px solid var(--border); border-radius: 7px; background: var(--bg-alt); color: var(--text-dimmer); }
+.project-logs-search { flex: 1; min-width: 0; height: 36px; display: flex; align-items: center; gap: 8px; padding: 0 10px; border: 1px solid var(--border); border-radius: 6px; background: var(--bg); color: var(--text-dimmer); }
 .project-logs-search .lucide { width: 14px; flex: 0 0 auto; }
 .project-logs-search input { width: 100%; border: 0; outline: 0; background: transparent; color: var(--text); font: inherit; font-size: 12px; }
-.project-logs-filter { height: 32px; max-width: 42%; padding: 0 8px; border: 1px solid var(--border); border-radius: 7px; background: var(--bg-alt); color: var(--text-secondary); font: inherit; font-size: 12px; cursor: pointer; }
+.project-logs-search:focus-within, .project-logs-filter:focus-visible { outline: 2px solid color-mix(in srgb, var(--accent) 35%, transparent); border-color: var(--accent); }
+.project-logs-filter { height: 36px; max-width: 42%; padding: 0 8px; border: 1px solid var(--border); border-radius: 6px; background: var(--bg); color: var(--text-secondary); font: inherit; font-size: 12px; cursor: pointer; }
 
 /* --- Ledger list: full pane, chronological, commit-history feel --- */
-.project-logs-list { flex: 1; min-height: 0; overflow-y: auto; padding: 4px 0; }
+.project-logs-list { flex: 1; min-height: 0; overflow-y: auto; padding: 8px 0 18px; }
 .project-logs-list.hidden { display: none; }
-.project-log-row { width: 100%; display: block; padding: 12px 14px; border: 0; border-bottom: 1px solid var(--border-subtle); background: transparent; color: inherit; text-align: left; cursor: pointer; }
-.project-log-row:hover { background: rgba(var(--overlay-rgb), 0.05); }
+.project-log-row { width: 100%; display: block; padding: 15px 18px 14px; border: 0; border-bottom: 1px solid var(--border-subtle); border-left: 2px solid transparent; background: transparent; color: inherit; text-align: left; cursor: pointer; transition: background 0.14s ease, border-color 0.14s ease; }
+.project-log-row:hover { background: color-mix(in srgb, var(--accent) 5%, transparent); border-left-color: var(--accent); }
+.project-log-row:focus-visible { outline: 2px solid var(--accent); outline-offset: -3px; }
 .project-log-row:last-child { border-bottom: 0; }
 .project-log-row-head { display: flex; align-items: baseline; gap: 7px; flex-wrap: wrap; }
-.project-log-row-title { flex: 1; min-width: 0; font-size: 13px; font-weight: 650; color: var(--text); }
-.project-log-row-summary { margin: 5px 0 0; color: var(--text-secondary); font-size: 12px; line-height: 1.5; }
-.project-log-row-meta { margin-top: 6px; color: var(--text-dimmer); font-size: 10.5px; font-family: var(--font-mono); }
-.project-logs-list-empty { padding: 32px 20px; color: var(--text-dimmer); font-size: 12px; text-align: center; line-height: 1.6; }
+.project-log-row-title { flex: 1; min-width: 0; font-size: 14px; font-weight: 700; letter-spacing: -0.01em; color: var(--text); }
+.project-log-row-summary { margin: 7px 0 0; color: var(--text-secondary); font-size: 12.5px; line-height: 1.55; }
+.project-log-row-meta { margin-top: 8px; color: var(--text-dimmer); font-size: 10.5px; font-family: var(--font-mono); }
+.project-logs-list-empty { max-width: 320px; margin: 54px auto; padding: 20px; border-top: 1px solid var(--border); border-bottom: 1px solid var(--border); color: var(--text-dimmer); font-size: 12px; text-align: center; line-height: 1.7; }
+.project-logs-list[aria-busy="true"] .project-logs-list-empty { color: var(--text-secondary); font-family: var(--font-mono); }
 
 /* Category chip and priority signal. Categories are project-defined, so the
    chip is deliberately neutral: no per-category selectors and no exhaustive
@@ -191,13 +133,13 @@
 /* --- Entry detail: full pane, replaces the list --- */
 .project-logs-detail { flex: 1; min-width: 0; min-height: 0; overflow-y: auto; }
 .project-logs-detail.hidden { display: none; }
-.project-log-document { max-width: 820px; margin: 0 auto; padding: 22px 22px 40px; }
+.project-log-document { max-width: 760px; margin: 0 auto; padding: 32px 28px 52px; }
 #project-logs-panel.panel-fullscreen .project-log-document { padding: clamp(28px, 5vw, 64px); }
 .project-log-doc-chips { display: flex; align-items: center; gap: 7px; margin-bottom: 10px; }
-.project-log-document h1 { margin: 0 0 8px; color: var(--text); font-family: var(--font-display); font-size: clamp(20px, 2.4vw, 28px); line-height: 1.2; }
-.project-log-doc-summary { margin: 0 0 10px; color: var(--text-secondary); font-size: 13px; line-height: 1.55; }
-.project-log-byline { margin: 0 0 18px; padding-bottom: 16px; border-bottom: 1px solid var(--border-subtle); color: var(--text-dimmer); font-size: 11px; font-family: var(--font-mono); }
-.project-log-markdown { line-height: 1.65; }
+.project-log-document h1 { margin: 0 0 10px; color: var(--text); font-family: var(--font-display); font-size: clamp(24px, 2.8vw, 34px); letter-spacing: -0.025em; line-height: 1.12; }
+.project-log-doc-summary { margin: 0 0 13px; color: var(--text-secondary); font-size: 14px; line-height: 1.6; }
+.project-log-byline { margin: 0 0 25px; padding-bottom: 18px; border-bottom: 2px solid var(--border-subtle); color: var(--text-dimmer); font-size: 11px; font-family: var(--font-mono); }
+.project-log-markdown { font-size: 14px; line-height: 1.75; }
 
 /* --- Discussion --- */
 .project-log-discussion { margin-top: 30px; padding-top: 18px; border-top: 1px solid var(--border-subtle); }
@@ -230,5 +172,9 @@
 
 @media (max-width: 768px) {
   .project-logs-subtitle { display: none; }
-  .project-log-document { padding: 18px 16px 32px; }
+  .project-logs-topbar { gap: 8px; padding: 0 12px; }
+  .project-logs-toolbar { padding: 10px 12px; }
+  .project-logs-filter { max-width: 44%; }
+  .project-log-row { padding: 14px 14px 13px; }
+  .project-log-document { padding: 24px 18px 38px; }
 }

package/lib/public/modules/project-logs-render.js

@@ -159,12 +159,12 @@ function renderRow(entry, onOpen) {
   return row;
 }
 
-export function renderList(listEl, entries, onOpen) {
+export function renderList(listEl, entries, onOpen, emptyState) {
   listEl.innerHTML = "";
   if (!entries.length) {
     var empty = document.createElement("div");
     empty.className = "project-logs-list-empty";
-    empty.textContent = "No logs yet. This project's agent sessions record decisions and work here.";
+    empty.textContent = emptyState || "No logs yet. This project's agent sessions record decisions and work here.";
     listEl.appendChild(empty);
     return;
   }