clay-server 4.0.0-beta.23 → 4.0.0-beta.25

package/lib/project-filesystem.js

@@ -1,6 +1,7 @@
 var fs = require("fs");
 var path = require("path");
-var execFileSync = require("child_process").execFileSync;
+var attachRequestAccess = require("./project-request-access").attachRequestAccess;
+var attachFileHistory = require("./project-file-history").attachFileHistory;
 
 /**
  * Attach filesystem-related message handlers to a project context.
@@ -20,17 +21,12 @@ var execFileSync = require("child_process").execFileSync;
 function attachFilesystem(ctx) {
   var cwd = ctx.cwd;
   var slug = ctx.slug;
-  var osUsers = ctx.osUsers;
-  var sm = ctx.sm;
-  var send = ctx.send;
   var sendTo = ctx.sendTo;
   var safePath = ctx.safePath;
   var safeAbsPath = ctx.safeAbsPath;
-  var getOsUserInfoForWs = ctx.getOsUserInfoForWs;
   var startFileWatch = ctx.startFileWatch;
   var stopFileWatch = ctx.stopFileWatch;
   var startDirWatch = ctx.startDirWatch;
-  var usersModule = ctx.usersModule;
   var fsAsUser = ctx.fsAsUser;
   var validateEnvString = ctx.validateEnvString;
   var onEnvironmentChanged = ctx.onEnvironmentChanged || function () {};
@@ -40,15 +36,19 @@ function attachFilesystem(ctx) {
   var IMAGE_EXTS = ctx.IMAGE_EXTS;
   var FS_MAX_SIZE = ctx.FS_MAX_SIZE;
 
+  var access = ctx.requestAccess || attachRequestAccess(ctx);
+  var fileHistory = attachFileHistory(ctx, access);
+
   function handleFilesystemMessage(ws, msg) {
-    // --- File browser permission gate ---
-    if (msg.type === "fs_list" || msg.type === "fs_read" || msg.type === "fs_write" || msg.type === "fs_delete" || msg.type === "fs_rename" || msg.type === "fs_mkdir" || msg.type === "fs_upload" || msg.type === "fs_search") {
-      if (ws._clayUser) {
-        var fbPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!fbPerms.fileBrowser) {
-          sendTo(ws, { type: msg.type + "_result", error: "File browser access is not permitted" });
-          return true;
-        }
+    // Unsubscription must remain available after permission revocation.
+    if (/^fs_/.test(msg.type) && msg.type !== "fs_unwatch") {
+      if (!access.canUseFiles(ws)) {
+        sendTo(ws, { type: msg.type + "_result", error: "File browser access is not permitted" });
+        return true;
+      }
+      try { access.osIdentity(ws); } catch (e) {
+        sendTo(ws, { type: msg.type + "_result", error: e.message });
+        return true;
       }
     }
 
@@ -56,7 +56,7 @@ function attachFilesystem(ctx) {
     if (msg.type === "fs_list") {
       var fsDir = safePath(cwd, msg.path || ".");
       // In OS user mode, fall back to absolute path resolution (ACL enforces access)
-      if (!fsDir && getOsUserInfoForWs(ws)) {
+      if (!fsDir && access.osIdentity(ws)) {
         fsDir = safeAbsPath(msg.path);
       }
       if (!fsDir) {
@@ -64,7 +64,7 @@ function attachFilesystem(ctx) {
         return true;
       }
       try {
-        var fsListUserInfo = getOsUserInfoForWs(ws);
+        var fsListUserInfo = access.osIdentity(ws);
         var entries = [];
         if (fsListUserInfo) {
           // Run as target OS user to respect Linux file permissions
@@ -92,7 +92,7 @@ function attachFilesystem(ctx) {
         }
         sendTo(ws, { type: "fs_list_result", path: msg.path || ".", entries: entries });
         // Auto-watch the directory for changes
-        startDirWatch(msg.path || ".");
+        startDirWatch(ws, msg.path || ".");
       } catch (e) {
         sendTo(ws, { type: "fs_list_result", path: msg.path, entries: [], error: e.message });
       }
@@ -109,7 +109,7 @@ function attachFilesystem(ctx) {
       try {
         var searchResults = [];
         var MAX_RESULTS = 50;
-        var searchUserInfo = getOsUserInfoForWs(ws);
+        var searchUserInfo = access.osIdentity(ws);
 
         function walkDir(dir, relPrefix) {
           if (searchResults.length >= MAX_RESULTS) return;
@@ -148,7 +148,7 @@ function attachFilesystem(ctx) {
     // --- fs_read ---
     if (msg.type === "fs_read") {
       var fsFile = safePath(cwd, msg.path);
-      if (!fsFile && getOsUserInfoForWs(ws)) {
+      if (!fsFile && access.osIdentity(ws)) {
         fsFile = safeAbsPath(msg.path);
       }
       if (!fsFile) {
@@ -156,7 +156,7 @@ function attachFilesystem(ctx) {
         return true;
       }
       try {
-        var fsReadUserInfo = getOsUserInfoForWs(ws);
+        var fsReadUserInfo = access.osIdentity(ws);
         var ext = path.extname(fsFile).toLowerCase();
         if (fsReadUserInfo) {
           // Run stat and read as target OS user
@@ -197,7 +197,7 @@ function attachFilesystem(ctx) {
     // --- fs_write ---
     if (msg.type === "fs_write") {
       var fsWriteFile = safePath(cwd, msg.path);
-      if (!fsWriteFile && getOsUserInfoForWs(ws)) {
+      if (!fsWriteFile && access.osIdentity(ws)) {
         fsWriteFile = safeAbsPath(msg.path);
       }
       if (!fsWriteFile) {
@@ -205,7 +205,7 @@ function attachFilesystem(ctx) {
         return true;
       }
       try {
-        var fsWriteUserInfo = getOsUserInfoForWs(ws);
+        var fsWriteUserInfo = access.osIdentity(ws);
         if (fsWriteUserInfo) {
           fsAsUser("write", { file: fsWriteFile, content: msg.content || "" }, fsWriteUserInfo);
         } else {
@@ -223,12 +223,12 @@ function attachFilesystem(ctx) {
         msg.type === "read_global_claude_md" || msg.type === "write_global_claude_md" ||
         msg.type === "get_shared_env" || msg.type === "set_shared_env" ||
         msg.type === "transfer_project_owner") {
-      if (ws._clayUser) {
-        var psPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!psPerms.projectSettings) {
-          sendTo(ws, { type: "error", text: "Project settings access is not permitted" });
-          return true;
-        }
+      var globalSetting = /^(read_global_claude_md|write_global_claude_md|get_shared_env|set_shared_env)$/.test(msg.type);
+      var targetSlug = msg.slug || slug;
+      if (!access.hasPermission(ws, "projectSettings") ||
+          (globalSetting ? !access.isAdmin(ws) : !access.canAccessProject(ws, targetSlug))) {
+        sendTo(ws, { type: "error", text: "Project settings access is not permitted" });
+        return true;
       }
     }
 
@@ -236,7 +236,7 @@ function attachFilesystem(ctx) {
     if (msg.type === "get_project_env") {
       var envrc = "";
       if (typeof opts.onGetProjectEnv === "function") {
-        var envResult = opts.onGetProjectEnv(msg.slug);
+        var envResult = opts.onGetProjectEnv(targetSlug);
         envrc = envResult.envrc || "";
       }
       sendTo(ws, { type: "project_env_result", slug: msg.slug, envrc: envrc });
@@ -250,7 +250,7 @@ function attachFilesystem(ctx) {
           sendTo(ws, { type: "set_project_env_result", ok: false, slug: msg.slug, error: envError });
           return true;
         }
-        var setResult = opts.onSetProjectEnv(msg.slug, msg.envrc || "");
+        var setResult = opts.onSetProjectEnv(targetSlug, msg.envrc || "");
         if (setResult.ok) onEnvironmentChanged();
         sendTo(ws, { type: "set_project_env_result", ok: setResult.ok, slug: msg.slug, error: setResult.error, timing: setResult.ok ? "Applies to newly created coding-agent processes. Active processes keep their current environment." : undefined });
       } else {
@@ -324,196 +324,7 @@ function attachFilesystem(ctx) {
       return true;
     }
 
-    // --- File edit history ---
-    if (msg.type === "fs_file_history") {
-      var histPath = msg.path;
-      if (!histPath) {
-        sendTo(ws, { type: "fs_file_history_result", path: histPath, entries: [] });
-        return true;
-      }
-      var absHistPath = path.resolve(cwd, histPath);
-      var entries = [];
-
-      // Collect session edits
-      sm.sessions.forEach(function (session) {
-        var sessionLocalId = session.localId;
-        var sessionTitle = session.title || "Untitled";
-        var histLen = session.history.length || 1;
-
-        for (var hi = 0; hi < session.history.length; hi++) {
-          var entry = session.history[hi];
-          if (entry.type !== "tool_executing") continue;
-          if (entry.name !== "Edit" && entry.name !== "Write") continue;
-          if (!entry.input || !entry.input.file_path) continue;
-          if (entry.input.file_path !== absHistPath) continue;
-
-          // Find parent assistant UUID + message snippet by scanning backwards
-          var assistantUuid = null;
-          var uuidIndex = -1;
-          for (var hj = hi - 1; hj >= 0; hj--) {
-            if (session.history[hj].type === "message_uuid" && session.history[hj].messageType === "assistant") {
-              assistantUuid = session.history[hj].uuid;
-              uuidIndex = hj;
-              break;
-            }
-          }
-
-          // Find user prompt by scanning backwards from the assistant uuid
-          var messageSnippet = "";
-          var searchFrom = uuidIndex >= 0 ? uuidIndex : hi;
-          for (var hk = searchFrom - 1; hk >= 0; hk--) {
-            if (session.history[hk].type === "user_message" && session.history[hk].text) {
-              messageSnippet = session.history[hk].text.trim().substring(0, 100);
-              break;
-            }
-          }
-
-          // Collect Claude's explanation: scan backwards from tool_executing
-          // to find the nearest delta text block (skipping tool_start).
-          // If no delta found immediately before this tool, scan past
-          // intervening tool blocks to find the last delta text within
-          // the same assistant turn.
-          var assistantSnippet = "";
-          var deltaChunks = [];
-          for (var hd = hi - 1; hd >= 0; hd--) {
-            var hEntry = session.history[hd];
-            if (hEntry.type === "tool_start") continue;
-            if (hEntry.type === "delta" && hEntry.text) {
-              deltaChunks.unshift(hEntry.text);
-            } else {
-              break;
-            }
-          }
-          if (deltaChunks.length === 0) {
-            // No delta immediately before; scan past tool blocks
-            // to find the nearest preceding delta in the same turn
-            for (var hd2 = hi - 1; hd2 >= 0; hd2--) {
-              var hEntry2 = session.history[hd2];
-              if (hEntry2.type === "tool_start" || hEntry2.type === "tool_executing" || hEntry2.type === "tool_result") continue;
-              if (hEntry2.type === "delta" && hEntry2.text) {
-                // Found a delta before an earlier tool in the same turn.
-                // Collect this contiguous block of deltas.
-                for (var hd3 = hd2; hd3 >= 0; hd3--) {
-                  var hEntry3 = session.history[hd3];
-                  if (hEntry3.type === "tool_start") continue;
-                  if (hEntry3.type === "delta" && hEntry3.text) {
-                    deltaChunks.unshift(hEntry3.text);
-                  } else {
-                    break;
-                  }
-                }
-                break;
-              } else {
-                // Hit message_uuid, user_message, etc. Stop.
-                break;
-              }
-            }
-          }
-          assistantSnippet = deltaChunks.join("").trim().substring(0, 150);
-
-          // Approximate timestamp: interpolate between session creation and last activity
-          var tStart = session.createdAt || 0;
-          var tEnd = session.lastActivity || tStart;
-          var ts = tStart + Math.floor((hi / histLen) * (tEnd - tStart));
-
-          var editRecord = {
-            source: "session",
-            timestamp: ts,
-            sessionLocalId: sessionLocalId,
-            sessionTitle: sessionTitle,
-            assistantUuid: assistantUuid,
-            toolId: entry.id,
-            messageSnippet: messageSnippet,
-            assistantSnippet: assistantSnippet,
-            toolName: entry.name,
-          };
-
-          if (entry.name === "Edit") {
-            editRecord.old_string = entry.input.old_string || "";
-            editRecord.new_string = entry.input.new_string || "";
-          } else {
-            editRecord.isFullWrite = true;
-          }
-
-          entries.push(editRecord);
-        }
-      });
-
-      // Collect git commits
-      try {
-        var gitLog = execFileSync(
-          "git", ["log", "--format=%H|%at|%an|%s", "--follow", "--", histPath],
-          { cwd: cwd, encoding: "utf8", timeout: 5000 }
-        );
-        var gitLines = gitLog.trim().split("\n");
-        for (var gi = 0; gi < gitLines.length; gi++) {
-          if (!gitLines[gi]) continue;
-          var parts = gitLines[gi].split("|");
-          if (parts.length < 4) continue;
-          entries.push({
-            source: "git",
-            hash: parts[0],
-            timestamp: parseInt(parts[1], 10) * 1000,
-            author: parts[2],
-            message: parts.slice(3).join("|"),
-          });
-        }
-      } catch (e) {
-        // Not a git repo or file not tracked, that is fine
-      }
-
-      // Sort by timestamp descending (newest first)
-      entries.sort(function (a, b) { return b.timestamp - a.timestamp; });
-
-      sendTo(ws, { type: "fs_file_history_result", path: histPath, entries: entries });
-      return true;
-    }
-
-    // --- Git diff for file history ---
-    if (msg.type === "fs_git_diff") {
-      var diffPath = msg.path;
-      var hash = msg.hash;
-      var hash2 = msg.hash2 || null;
-      if (!diffPath || !hash) {
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, path: diffPath, diff: "", error: "Missing params" });
-        return true;
-      }
-      try {
-        var diff;
-        if (hash2) {
-          diff = execFileSync("git", ["diff", hash, hash2, "--", diffPath],
-            { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        } else {
-          diff = execFileSync("git", ["show", hash, "--format=", "--", diffPath],
-            { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        }
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, hash2: hash2, path: diffPath, diff: diff || "" });
-      } catch (e) {
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, hash2: hash2, path: diffPath, diff: "", error: e.message });
-      }
-      return true;
-    }
-
-    // --- File content at a git commit ---
-    if (msg.type === "fs_file_at") {
-      var atPath = msg.path;
-      var atHash = msg.hash;
-      if (!atPath || !atHash) {
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: "", error: "Missing params" });
-        return true;
-      }
-      try {
-        // Convert to repo-relative path (git show requires hash:relative/path)
-        var atAbsPath = path.resolve(cwd, atPath);
-        var atRelPath = path.relative(cwd, atAbsPath);
-        var content = execFileSync("git", ["show", atHash + ":" + atRelPath],
-          { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: content });
-      } catch (e) {
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: "", error: e.message });
-      }
-      return true;
-    }
+    if (fileHistory.handleFileHistory(ws, msg)) return true;
 
     return false;
   }

package/lib/project-request-access.js

@@ -0,0 +1,66 @@
+// Shared authorization for project requests and long-lived file subscriptions.
+function attachRequestAccess(ctx) {
+  var users = ctx.usersModule;
+  var opts = ctx.opts || {};
+
+  function isMultiUser() {
+    return !!(users && users.isMultiUser && users.isMultiUser());
+  }
+
+  function userFor(ws) {
+    var user = ws && ws._clayUser;
+    if (user && users.findUserById) return users.findUserById(user.id);
+    return user || null;
+  }
+
+  function canAccessProject(ws, slug) {
+    if (!isMultiUser()) return true;
+    var user = userFor(ws);
+    if (!user || typeof slug !== "string" || !slug) return false;
+    try {
+      return typeof opts.canAccessProjectSlug === "function" && opts.canAccessProjectSlug(user.id, slug) === true;
+    } catch (e) { return false; }
+  }
+
+  function permitMessage(ws, msg) {
+    if (canAccessProject(ws, ctx.slug) && (!msg.targetSlug || canAccessProject(ws, msg.targetSlug))) return true;
+    ctx.sendTo(ws, { type: "error", text: "Project access is not permitted" });
+    return false;
+  }
+
+  function hasPermission(ws, permission) {
+    var user = userFor(ws);
+    if (!user) return !isMultiUser();
+    return users.getEffectivePermissions(user, ctx.osUsers)[permission] === true;
+  }
+
+  function canUseFiles(ws) {
+    return canAccessProject(ws, ctx.slug) && hasPermission(ws, "fileBrowser");
+  }
+
+  function isAdmin(ws) {
+    if (!isMultiUser() && !(ws && ws._clayUser)) return true;
+    var user = userFor(ws);
+    return !!(user && user.role === "admin");
+  }
+
+  function canReadSession(ws, session) {
+    if (!isMultiUser()) return true;
+    var user = userFor(ws);
+    return !!(user && canAccessProject(ws, ctx.slug) && users.canAccessSession(user.id, session, { visibility: "public" }));
+  }
+
+  function osIdentity(ws) {
+    if (!ctx.osUsers) return null;
+    var user = userFor(ws);
+    if (!user || !user.linuxUser) throw new Error("OS user identity is unavailable");
+    var info = ctx.getOsUserInfoForWs({ _clayUser: user });
+    if (!info) throw new Error("OS user identity is unavailable");
+    return info;
+  }
+
+  return { permitMessage: permitMessage, canAccessProject: canAccessProject, hasPermission: hasPermission,
+    canUseFiles: canUseFiles, isAdmin: isAdmin, canReadSession: canReadSession, osIdentity: osIdentity };
+}
+
+module.exports = { attachRequestAccess: attachRequestAccess };

package/lib/project.js

@@ -26,6 +26,7 @@ var { attachMemory } = require("./project-memory");
 var { attachMateInteraction } = require("./project-mate-interaction");
 var { attachUserMention } = require("./project-user-mention");
 var { attachLoop } = require("./project-loop");
+var { attachRequestAccess } = require("./project-request-access");
 var { attachFileWatch } = require("./project-file-watch");
 var { attachHTTP } = require("./project-http");
 var { attachImage } = require("./project-image");
@@ -513,8 +514,14 @@ function createProjectContext(opts) {
     getProjectOwnerId: function () { return projectOwnerId; },
   });
 
+  var _requestAccess = attachRequestAccess({
+    slug: slug, opts: opts, usersModule: usersModule, osUsers: osUsers,
+    sendTo: sendTo, getOsUserInfoForWs: getOsUserInfoForWs,
+  });
+
   // --- File/directory watcher engine (delegated to project-file-watch.js) ---
   var _fileWatch = attachFileWatch({
+    requestAccess: _requestAccess, fsAsUser: fsAsUser,
     cwd: cwd,
     send: send,
     sendTo: sendTo,
@@ -1294,6 +1301,7 @@ function createProjectContext(opts) {
   }
 
   function handleMessage(ws, msg) {
+    if (!_requestAccess.permitMessage(ws, msg)) return;
     // --- Keep-alive (delegated to project-connection.js) ---
     // Answered before any routing so a ping can never be forwarded elsewhere.
     // _connection is assigned later in this factory than the other modules, so
@@ -1770,6 +1778,7 @@ function createProjectContext(opts) {
 
   // --- Filesystem handler (delegated to project-filesystem.js) ---
   var _filesystem = attachFilesystem({
+    requestAccess: _requestAccess,
     cwd: cwd,
     slug: slug,
     osUsers: osUsers,

package/lib/public/app.js

@@ -377,6 +377,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     currentMsgEl: null,
     currentFullText: "",
     matePreThinkingEl: null,
+    thinkingState: null,
     // panels
     fileViewerFullscreen: false,
     markdownSlidesActive: false,

package/lib/public/css/messages.css

@@ -693,6 +693,8 @@ pre.mermaid-error {
 
 .thinking-header {
   display: inline-flex;
+  max-width: 100%;
+  box-sizing: border-box;
   align-items: center;
   gap: 6px;
   cursor: pointer;
@@ -726,9 +728,44 @@ pre.mermaid-error {
 .thinking-label {
   font-size: 13px;
   color: var(--text-muted);
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
 }
 
+.thinking-live .thinking-header {
+  padding: 6px 0;
+  background: transparent;
+  border-radius: 0;
+}
+
+.thinking-live .thinking-chevron { display: none; }
+
+.thinking-live .thinking-label {
+  background: linear-gradient(100deg, var(--text-muted) 40%, var(--text-dimmer) 50%, var(--text-muted) 60%);
+  background-size: 300% 100%;
+  background-clip: text;
+  -webkit-background-clip: text;
+  color: transparent;
+  animation: thinking-summary-shimmer 2.8s ease-in-out infinite;
+}
+
+@keyframes thinking-summary-shimmer {
+  from { background-position: 100% 0; }
+  to { background-position: 0% 0; }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .thinking-live .thinking-label { animation: none; background: none; color: var(--text-muted); }
+}
+
+.thinking-header[aria-disabled="true"] { cursor: default; }
+.thinking-header:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.thinking-item .thinking-spinner { display: none; }
+
 .thinking-duration {
+  flex-shrink: 0;
   color: var(--text-dimmer);
   font-size: 12px;
 }
@@ -753,7 +790,7 @@ pre.mermaid-error {
   font-size: 13px;
   line-height: 1.55;
   color: var(--text-muted);
-  white-space: pre-wrap;
+  white-space: normal;
   word-break: break-word;
   max-height: 300px;
   overflow-y: auto;
@@ -762,6 +799,8 @@ pre.mermaid-error {
 }
 
 .thinking-item.expanded .thinking-content { display: block; }
+.thinking-content > :first-child { margin-top: 0; }
+.thinking-content > :last-child { margin-bottom: 0; }
 
 /* ==========================================================================
    Tool Items

package/lib/public/css/pane.css

@@ -104,6 +104,49 @@ body.pane-mode #input-area {
   flex-shrink: 0;
 }
 
+.split-pane-header.has-worker-runtime {
+  flex-wrap: nowrap;
+}
+
+.split-pane-header.has-worker-runtime .split-pane-context {
+  order: 1;
+}
+
+.split-pane-header.has-worker-runtime .split-pane-close {
+  order: 2;
+  flex-shrink: 0;
+}
+
+.split-worker-runtime {
+  flex: 0 1 auto;
+  min-width: 0;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 11px;
+  line-height: 18px;
+  white-space: nowrap;
+}
+
+.split-worker-runtime-model {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  color: var(--text);
+  font-weight: 600;
+}
+
+.split-worker-runtime-thinking {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  padding: 0 6px;
+  border-radius: 4px;
+  background: var(--bg-alt);
+  color: var(--text-secondary);
+}
+
 .split-pane-title {
   flex: 0 1 auto;
   max-width: 46%;
@@ -192,8 +235,7 @@ body.pane-mode #input-area {
 @keyframes pair-divider-flow-left { 0%, 100% { transform: translateX(3px); opacity: 0.65; } 50% { transform: translateX(-3px); opacity: 1; } }
 @keyframes pair-status-pulse { 50% { opacity: 0.55; } }
 
-/* Worker-pane composer notice: shown while this pane's session processes a
-   delegated turn. Informational only -- the composer stays enabled. */
+/* Worker activity notice shown while this pane processes a delegated task. */
 .pane-delegation-notice {
   display: none;
   align-items: center;
@@ -202,7 +244,7 @@ body.pane-mode #input-area {
   max-width: var(--content-width);
   margin: 0 auto;
   padding: 4px 10px;
-  border-radius: 8px 8px 0 0;
+  border-radius: 8px;
   background: color-mix(in srgb, var(--accent) 8%, var(--bg));
   color: var(--text-secondary);
   font-size: 11px;
@@ -210,13 +252,6 @@ body.pane-mode #input-area {
   transition: box-shadow 0.2s;
 }
 .pane-delegation-notice.visible { display: flex; }
-.pane-delegation-notice.visible:has(+ #input-wrapper #input-row:focus-within) {
-  box-shadow: 0 0 0 1px var(--border);
-  clip-path: inset(-1px -1px 0 -1px);
-}
-.pane-delegation-notice.visible + #input-wrapper #input-row {
-  border-radius: 0 0 8px 8px;
-}
 .pane-delegation-notice::before {
   content: "";
   width: 6px;

package/lib/public/css/worker-proposal.css

@@ -141,9 +141,9 @@
 .worker-proposal-action:not(:disabled):hover { filter: brightness(1.12); }
 .worker-proposal-action:disabled, .worker-proposal-select:disabled, .worker-proposal-effort-btn:disabled { cursor: default; opacity: 0.58; }
 
-.worker-proposal-error, .worker-proposal-result { margin-top: 10px; padding: 8px 10px; border-radius: 8px; font-size: 10px; line-height: 1.45; }
+.worker-proposal-error { margin-top: 10px; padding: 8px 10px; border-radius: 8px; font-size: 10px; line-height: 1.45; }
 .worker-proposal-error { color: var(--error); background: var(--error-8); }
-.worker-proposal-result { max-height: 96px; overflow: hidden; color: var(--text-muted); background: color-mix(in srgb, var(--success) 7%, transparent); white-space: pre-wrap; }
+.worker-proposal-error.hidden { display: none; }
 .worker-proposal-card[data-status="starting"] .worker-proposal-status,
 .worker-proposal-card[data-status="running"] .worker-proposal-status { animation: worker-proposal-pulse 1.6s ease-in-out infinite; }
 .worker-proposal-card[data-status="completed"] { border-color: color-mix(in srgb, var(--success) 35%, var(--border)); }