clay-server 4.1.0-beta.16 → 4.1.0-beta.17

package/lib/notes.js

@@ -39,8 +39,10 @@ function createNotesManager(opts) {
       var tmpPath = notesFile + ".tmp";
       fs.writeFileSync(tmpPath, JSON.stringify({ notes: notes }, null, 2));
       fs.renameSync(tmpPath, notesFile);
+      return true;
     } catch (e) {
       console.error("[notes] Failed to save:", e.message);
+      return false;
     }
   }
 
@@ -139,9 +141,23 @@ function createNotesManager(opts) {
     return lifecycle.closedNotes(notes);
   }
 
-  // Permanent deletion. Deliberately not reachable from any WebSocket message,
-  // MCP tool, or UI control: completion closes, it never erases. Retained only
-  // for maintenance callers that must truly discard a record.
+  // Permanent deletion for the human-only closed-note path. Callers must still
+  // authorize the actor and recheck the lifecycle before invoking this method.
+  // The closed-state guard makes a stale confirmation harmless at storage.
+  function removeClosed(id) {
+    for (var i = 0; i < notes.length; i++) {
+      if (notes[i].id !== id || !lifecycle.isClosed(notes[i])) continue;
+      var removed = notes[i];
+      notes.splice(i, 1);
+      if (saveToDisk()) return removed;
+      notes.splice(i, 0, removed);
+      return null;
+    }
+    return null;
+  }
+
+  // Retained for maintenance callers that must truly discard a record. It is
+  // intentionally not exposed through WebSocket, MCP, or the UI.
   function remove(id) {
     for (var i = 0; i < notes.length; i++) {
       if (notes[i].id === id) {
@@ -197,6 +213,7 @@ function createNotesManager(opts) {
     close: close,
     reopen: reopen,
     remove: remove,
+    removeClosed: removeClosed,
     bringToFront: bringToFront,
     getActiveNotesText: getActiveNotesText,
   };

package/lib/os-users.js

@@ -139,6 +139,12 @@ function fsAsUser(op, args, osUserInfo) {
       "var stat = fs.statSync(f);",
       "process.stdout.write(JSON.stringify({ size: stat.size, isDir: stat.isDirectory(), mtime: stat.mtimeMs }));",
     ].join(" ");
+  } else if (op === "realpath") {
+    script = [
+      "var fs = require('fs');",
+      "var f = " + JSON.stringify(args.file) + ";",
+      "process.stdout.write(JSON.stringify({ path: fs.realpathSync(f) }));",
+    ].join(" ");
   } else if (op === "read_binary") {
     // Read file as base64 for binary content (images, etc.)
     script = [

package/lib/project-connection.js

@@ -95,6 +95,7 @@ function attachConnection(ctx) {
   var getLatestVersion = ctx.getLatestVersion;
   var getTitle = ctx.getTitle;
   var getProject = ctx.getProject;
+  var hydrateSkillCatalog = ctx.hydrateSkillCatalog || function () { return []; };
   var warmup = ctx.warmup;
   var scheduledMessages = ctx.scheduledMessages;
   var sendCursorSharingState = ctx.sendCursorSharingState;
@@ -169,6 +170,7 @@ function attachConnection(ctx) {
       ? { active: null, storedPresence: null }
       : findRestoredActiveSession(ws, wsUser, allSessions);
     var restoredActive = restoredState.active;
+    if (restoredActive) hydrateSkillCatalog(restoredActive);
     var initialVendor = (restoredActive && restoredActive.vendor) || sm.defaultVendor || "claude";
     var initialEffort = (restoredActive && restoredActive.effort) || yoke.clampEffort(
       initialVendor,
@@ -184,8 +186,9 @@ function attachConnection(ctx) {
     // Update notifications are pushed on a scheduled interval (see
     // scheduleUpdateBroadcast). We no longer push on connect to avoid
     // re-triggering the banner on every page refresh.
-    if (sm.slashCommands) {
-      sendTo(ws, { type: "slash_commands", commands: sm.slashCommands });
+    var initialSlashCommands = restoredActive && (restoredActive.slashCommandsByVendor && restoredActive.slashCommandsByVendor[initialVendor] || restoredActive.slashCommands);
+    if (initialSlashCommands) {
+      sendTo(ws, { type: "slash_commands", commands: initialSlashCommands, vendor: initialVendor });
     }
     var initialModel = (restoredActive && restoredActive.model) || ((sm.defaultModelByVendor || {})[initialVendor]) || "";
     // Vendor installation state is needed even before a new project has a

package/lib/project-http.js

@@ -7,6 +7,7 @@ var defaultFsAsUser = require("./os-users").fsAsUser;
 var defaultUsersModule = require("./users");
 var gitCli = require("./git-cli");
 var resolveFilePath = require("./project-file-path").resolveFilePath;
+var sharedSkillDiscovery = require("./yoke/skill-discovery");
 
 var IMAGE_EXTS = new Set([".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".bmp", ".ico"]);
 var MIME_TYPES = {
@@ -560,44 +561,40 @@ function attachHTTP(ctx) {
     // Installed skills (global + project)
     if (req.method === "GET" && urlPath === "/api/installed-skills") {
       var installed = {};
-      var globalDir = path.join(require("./config").REAL_HOME, ".claude", "skills");
-      var projectDir = path.join(cwd, ".claude", "skills");
-      var scanDirs = [
-        { dir: globalDir, scope: "global" },
-        { dir: projectDir, scope: "project" },
-      ];
-      for (var sd = 0; sd < scanDirs.length; sd++) {
-        var entries;
-        try { entries = fs.readdirSync(scanDirs[sd].dir, { withFileTypes: true }); } catch (e) { continue; }
-        for (var si = 0; si < entries.length; si++) {
-          var ent = entries[si];
-          if (!ent.isDirectory() && !ent.isSymbolicLink()) continue;
-          var mdPath = path.join(scanDirs[sd].dir, ent.name, "SKILL.md");
-          try {
-            var mdContent = fs.readFileSync(mdPath, "utf8");
-            var desc = "";
-            // Parse YAML frontmatter for description
-            var version = "";
-            if (mdContent.startsWith("---")) {
-              var endIdx = mdContent.indexOf("---", 3);
-              if (endIdx !== -1) {
-                var frontmatter = mdContent.substring(3, endIdx);
-                var descMatch = frontmatter.match(/^description:\s*(.+)/m);
-                if (descMatch) desc = descMatch[1].trim();
-                var verMatch = frontmatter.match(/version:\s*"?([^"\n]+)"?/m);
-                if (verMatch) version = verMatch[1].trim();
-              }
-            }
-            if (!installed[ent.name]) {
-              installed[ent.name] = { scope: scanDirs[sd].scope, description: desc, version: version, path: path.join(scanDirs[sd].dir, ent.name) };
-            } else {
-              // project-level adds to existing global entry
-              installed[ent.name].scope = "both";
-              if (desc && !installed[ent.name].description) installed[ent.name].description = desc;
-              if (version && !installed[ent.name].version) installed[ent.name].version = version;
+      var installedUserInfo = getOsUserInfoForReq(req);
+      if (osUsers && !installedUserInfo) {
+        res.writeHead(403, { "Content-Type": "application/json" });
+        res.end('{"error":"A mapped OS user is required to list skills"}');
+        return true;
+      }
+      var installedOptions = installedUserInfo
+        ? sharedSkillDiscovery.optionsForOsUser(installedUserInfo, fsAsUser)
+        : { homeDir: require("./config").REAL_HOME };
+      installedOptions.includeDuplicates = true;
+      var discoveredInstalled = sharedSkillDiscovery.discoverSkills(cwd, installedOptions);
+      for (var si = 0; si < discoveredInstalled.length; si++) {
+        var discoveredSkill = discoveredInstalled[si];
+        try {
+          var desc = discoveredSkill.description || "";
+          var version = discoveredSkill.version || "";
+          var scope = discoveredSkill.source.indexOf("-project") !== -1 || discoveredSkill.source === "project" ? "project" : "global";
+          if (!installed[discoveredSkill.name]) {
+            installed[discoveredSkill.name] = { scope: scope, description: desc || discoveredSkill.description, version: version, path: path.dirname(discoveredSkill.path), source: discoveredSkill.source, sources: [discoveredSkill.source] };
+          } else {
+            // project-level adds to existing global entry
+            var priorScope = installed[discoveredSkill.name].scope;
+            installed[discoveredSkill.name].scope = priorScope === scope ? scope : "both";
+            if (installed[discoveredSkill.name].sources.indexOf(discoveredSkill.source) === -1) installed[discoveredSkill.name].sources.push(discoveredSkill.source);
+            if (scope === "project" || priorScope === "project") {
+              installed[discoveredSkill.name].path = path.dirname(discoveredSkill.path);
+              installed[discoveredSkill.name].source = discoveredSkill.source;
+              installed[discoveredSkill.name].description = desc || discoveredSkill.description;
+              installed[discoveredSkill.name].version = version;
             }
-          } catch (e) {}
-        }
+            if (desc && !installed[discoveredSkill.name].description) installed[discoveredSkill.name].description = desc;
+            if (version && !installed[discoveredSkill.name].version) installed[discoveredSkill.name].version = version;
+          }
+        } catch (e) {}
       }
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify({ installed: installed }));

package/lib/project-sessions.js

@@ -110,6 +110,7 @@ function attachSessions(ctx) {
   var getLinuxUserForSession = ctx.getLinuxUserForSession;
   var ensureProjectAccessForSession = ctx.ensureProjectAccessForSession;
   var getOsUserInfoForWs = ctx.getOsUserInfoForWs;
+  var hydrateSkillCatalog = ctx.hydrateSkillCatalog || function () { return []; };
   function stopSession(session, actor) {
     if (!session) return false;
     session._pendingMessageDrainPaused = true;

package/lib/project-user-message.js

@@ -24,6 +24,7 @@ var fs = require("fs");
  *   pendingMessageQueue,
  *   loadContextSources, saveContextSources,
  *   digestDmTurn, gateMemory,
+ *   getProjectAccess, canAccessProjectSlug,
  *   adapter            - YOKE adapter instance
  */
 function attachUserMessage(ctx) {
@@ -55,6 +56,8 @@ function attachUserMessage(ctx) {
   var getLinuxUserForSession = ctx.getLinuxUserForSession;
   var ensureProjectAccessForSession = ctx.ensureProjectAccessForSession;
   var getOsUserInfoForWs = ctx.getOsUserInfoForWs;
+  var getProjectAccess = ctx.getProjectAccess;
+  var canAccessProjectSlug = ctx.canAccessProjectSlug;
 
   var hydrateImageRefs = ctx.hydrateImageRefs;
   var saveImageFile = ctx.saveImageFile;
@@ -99,6 +102,21 @@ function attachUserMessage(ctx) {
     }
   }
 
+  function canHumanManageNotes(ws) {
+    if (!usersModule.isMultiUser()) return true;
+    if (!ws || !ws._clayUser || !ws._clayUser.id) return false;
+    var actor = usersModule.findUserById(ws._clayUser.id);
+    if (!actor) return false;
+    if (typeof canAccessProjectSlug === "function" && !canAccessProjectSlug(actor.id, slug)) return false;
+    var access = typeof getProjectAccess === "function" ? getProjectAccess() : null;
+    return !!(access && !access.error && usersModule.canAccessProject(actor.id, access));
+  }
+
+  function noteDeleteResult(ws, msg, ok, error) {
+    sendTo(ws, { type: "note_delete_result", projectSlug: slug, noteId: msg.id || null,
+      requestId: msg.requestId || null, ok: !!ok, error: error || null });
+  }
+
   // --------------- Main handler ---------------
 
   function handleUserMessage(ws, msg, forcedSession, internal) {
@@ -171,6 +189,31 @@ function attachUserMessage(ctx) {
       return true;
     }
 
+    if (msg.type === "note_delete_permanently") {
+      if (!msg.id || !canHumanManageNotes(ws)) {
+        noteDeleteResult(ws, msg, false, "You are not authorized to delete notes in this project.");
+        return true;
+      }
+      var current = nm.list().filter(function (item) { return item && item.id === msg.id; })[0];
+      if (!current) {
+        noteDeleteResult(ws, msg, false, "Note not found.");
+        return true;
+      }
+      if (!notesLifecycle.isClosed(current)) {
+        noteDeleteResult(ws, msg, false, "Only closed notes can be permanently deleted.");
+        return true;
+      }
+      var removed = nm.removeClosed(msg.id);
+      if (!removed) {
+        noteDeleteResult(ws, msg, false, "The note changed before it could be deleted.");
+        return true;
+      }
+      send({ type: "note_deleted", id: removed.id });
+      noteDeleteResult(ws, msg, true, null);
+      syncNotesKnowledge();
+      return true;
+    }
+
     if (msg.type === "note_list_request") {
       sendTo(ws, { type: "notes_list", notes: nm.list() });
       return true;

package/lib/project.js

@@ -46,6 +46,7 @@ var { attachVendorLogin } = require("./project-vendor-login");
 var { attachConnection } = require("./project-connection");
 var { attachProjectScheduledMessages } = require("./project-scheduled-messages");
 var { attachMcp } = require("./project-mcp");
+var { createSessionSkillCatalog } = require("./yoke/session-skill-catalog");
 var { createLocalMcp } = require("./mcp-local");
 var { attachEmail: attachEmailModule } = require("./project-email");
 var { attachSessionSpawn } = require("./project-session-spawn");
@@ -1878,6 +1879,12 @@ function createProjectContext(opts) {
   }
 
   // --- Sessions/config/project handler (delegated to project-sessions.js) ---
+  var _sessionSkillCatalog = createSessionSkillCatalog({
+    cwd: cwd,
+    osUsers: osUsers,
+    getLinuxUser: getLinuxUserForSession,
+  });
+  sm.setSessionHydrator(_sessionSkillCatalog.hydrate);
   var _sessions = attachSessions({
     cwd: cwd,
     slug: slug,
@@ -1917,6 +1924,7 @@ function createProjectContext(opts) {
     getLinuxUserForSession: getLinuxUserForSession,
     ensureProjectAccessForSession: ensureProjectAccessForSession,
     getOsUserInfoForWs: getOsUserInfoForWs,
+    hydrateSkillCatalog: _sessionSkillCatalog.hydrate,
     hydrateImageRefs: hydrateImageRefs,
     onProcessingChanged: onProcessingChanged,
     broadcastPresence: broadcastPresence,
@@ -2046,6 +2054,8 @@ function createProjectContext(opts) {
     getSessionForWs: getSessionForWs,
     getLinuxUserForSession: getLinuxUserForSession,
     ensureProjectAccessForSession: ensureProjectAccessForSession,
+    getProjectAccess: function () { return opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public", ownerId: projectOwnerId || null }; },
+    canAccessProjectSlug: opts.canAccessProjectSlug || function () { return !usersModule.isMultiUser(); },
     getOsUserInfoForWs: getOsUserInfoForWs,
     hydrateImageRefs: hydrateImageRefs,
     saveImageFile: saveImageFile,
@@ -2128,6 +2138,12 @@ function createProjectContext(opts) {
   function getMcpBridgeHandler(sessionId, sessionOnly, queryGeneration) {
     var boundSession = Number.isInteger(sessionId) ? sm.sessions.get(sessionId) : null;
     var queryToolBridge = createSessionQueryToolBridge({ session: boundSession, sdk: sdk });
+    function sessionQueryValid() {
+      return !!boundSession
+        && Number.isInteger(queryGeneration)
+        && sm.sessions.get(boundSession.localId) === boundSession
+        && Number(boundSession._sdkQueryGeneration || 0) === queryGeneration;
+    }
     // Build set of local MCP server names to exclude (Codex handles these natively)
     var localMcpNames = {};
     try {
@@ -2142,6 +2158,7 @@ function createProjectContext(opts) {
     return {
       listTools: function () {
         var tools = [];
+        if (sessionOnly && !sessionQueryValid()) return Promise.resolve(tools);
         var toJSONSchema;
         var zod;
         try { zod = require("zod"); toJSONSchema = zod.toJSONSchema; } catch (e) { /* fallback */ }
@@ -2267,6 +2284,9 @@ function createProjectContext(opts) {
         return Promise.resolve(tools);
       },
       callTool: function (serverName, toolName, args) {
+        if (sessionOnly && !sessionQueryValid()) {
+          return Promise.reject(new Error("Session tool unavailable or older query: " + serverName + "/" + toolName));
+        }
         var queryCall = queryToolBridge.callTool(queryGeneration, serverName, toolName, args);
         if (queryCall) return queryCall;
         if (boundSession && serverName === "clay-sessions") {
@@ -2425,6 +2445,7 @@ function createProjectContext(opts) {
     getLatestVersion: function () { return latestVersion; },
     getTitle: function () { return title; },
     getProject: function () { return project; },
+    hydrateSkillCatalog: _sessionSkillCatalog.hydrate,
     // Exposed so the first websocket connection can lazily warm up the
     // adapters for this project (see project-connection handleConnection).
     warmup: function (linuxUser) {

package/lib/public/css/issues.css

@@ -1,7 +1,20 @@
-#issues-panel { position: relative; width: 48%; max-width: 760px; min-width: 360px; height: calc(100% - 16px); margin: 8px; align-self: center; display: flex; flex-direction: column; background: var(--bg); color: var(--text); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; flex-shrink: 0; }
+#issues-panel { position: relative; width: 50%; max-width: 720px; min-width: 360px; height: calc(100% - 16px); margin: 8px 8px 8px 10px; min-height: 0; align-self: center; display: flex; flex-direction: column; background: var(--bg); color: var(--text); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; flex-shrink: 0; }
+@media (min-width: 1024px) {
+  #issues-panel {
+    box-shadow:
+      4px 8px 18px rgba(var(--shadow-rgb), 0.14),
+      2px 2px 4px rgba(var(--shadow-rgb), 0.08),
+      inset 0 1px 0 rgba(255, 255, 255, 0.04);
+    animation: workbench-panel-in 0.18s cubic-bezier(0.2, 0.8, 0.2, 1);
+    transition: max-width 0.2s ease, width 0.2s ease, box-shadow 0.2s ease;
+  }
+}
+@media (prefers-reduced-motion: reduce) {
+  #issues-panel { animation: none; }
+}
 #issues-panel.hidden { display: none; }
 #issues-panel.issues-wide { width: 70%; max-width: 1200px; }
-#issues-panel.panel-fullscreen { width: 100%; max-width: none; height: 100%; margin: 0; }
+#issues-panel.panel-fullscreen { width: 100%; max-width: none; min-width: 0; height: 100%; margin: 0; border: 0; border-radius: 0; box-shadow: none; animation: none; }
 #issues-panel header { height: 48px; box-sizing: border-box; display: flex; align-items: center; gap: 12px; padding: 0 16px; border-bottom: 1px solid var(--border-subtle); flex: 0 0 auto; }
 #issues-panel .issues-title { display: inline-flex; align-items: center; gap: 7px; font-weight: 700; }
 #issues-panel .issues-title .lucide { width: 15px; color: var(--accent); }
@@ -79,7 +92,8 @@
 .issues-content > h2 { margin: 0 0 10px; font-family: var(--font-display); font-size: 14px; line-height: 1.2; }
 .issues-history-note { margin: 0; padding: 14px 18px; border-bottom: 1px solid var(--border-subtle); color: var(--text-dimmer); font-size: 11px; font-family: var(--font-mono); }
 .clayos-issue-link { display: inline-flex; max-width: 100%; border: 1px solid var(--border); border-radius: 5px; background: var(--bg); color: inherit; font: inherit; font-size: .85em; padding: 2px 7px; cursor: pointer; vertical-align: baseline; overflow-wrap: anywhere; }
-@media (max-width: 1023px) { #issues-panel, #issues-panel.issues-wide { position: fixed; inset: 0; z-index: 150; width: 100%; max-width: none; min-width: 0; height: 100%; margin: 0; border-radius: 0; padding-top: var(--safe-top, 0px); padding-bottom: var(--safe-bottom, 0px); box-sizing: border-box; } #issues-panel button { min-height: 36px; } }
+@media (max-width: 1023px) { #issues-panel, #issues-panel.issues-wide { position: fixed; inset: 0; z-index: 300; width: 100%; max-width: none; min-width: 0; height: 100%; margin: 0; border: 0; border-radius: 0; padding-top: var(--safe-top, 0px); padding-bottom: var(--safe-bottom, 0px); box-sizing: border-box; } #issues-panel button { min-height: 36px; } }
+@media (max-width: 1023px) { #issues-panel [data-issues-wide], #issues-panel [data-issues-full] { display: none; } }
 @media (max-width: 390px) {
   #issues-panel header { gap: 4px; padding: 8px; }
   #issues-panel header button { padding: 7px; }

package/lib/public/css/sticky-notes.css

@@ -764,6 +764,35 @@
 .notes-browser-card-action:hover { background: var(--bg-alt); color: var(--text); }
 .notes-browser-card-action:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
 
+.notes-delete-dialog {
+  position: absolute;
+  inset: 0;
+  z-index: 2;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 24px;
+  background: rgba(var(--shadow-rgb), 0.28);
+}
+.notes-delete-dialog.hidden { display: none; }
+.notes-delete-dialog-card {
+  width: min(420px, 100%);
+  padding: 20px;
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: var(--bg);
+  box-shadow: 0 12px 36px rgba(var(--shadow-rgb), 0.24);
+}
+.notes-delete-dialog-card h2 { margin: 0 0 10px; font-size: 16px; }
+.notes-delete-dialog-card p { margin: 8px 0; color: var(--text-secondary); font-size: 12px; }
+.notes-delete-dialog-title { font-weight: 700; color: var(--text) !important; overflow-wrap: anywhere; }
+.notes-delete-dialog-status { min-height: 18px; }
+.notes-delete-dialog-actions { display: flex; justify-content: flex-end; gap: 8px; margin-top: 16px; }
+.notes-delete-dialog-actions button { padding: 7px 12px; border: 1px solid var(--border); border-radius: 6px; background: var(--bg); color: var(--text); font: inherit; cursor: pointer; }
+.notes-delete-dialog-actions button.danger { background: var(--danger, #b42318); border-color: var(--danger, #b42318); color: #fff; }
+.notes-delete-dialog-actions button:disabled { opacity: 0.55; cursor: default; }
+.notes-delete-dialog-actions button:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
+
 .notes-browser-card-body {
   flex: 1;
   font-size: 11.5px;

package/lib/public/modules/app-messages.js

@@ -46,6 +46,7 @@ import { tuiModalHandleTermOutput, tuiModalHandleTermResized, tuiModalHandleTerm
 import { updateTerminalList, handleContextSourcesState, updateEmailAccountList, updateEmailUnreadCounts, handleEmailTestResult, handleEmailAddResult, handleEmailRemoveResult } from './context-sources.js';
 import { refreshEmailSettings } from './user-settings.js';
 import { handleNotesList, handleNoteCreated, handleNoteUpdated, handleNoteDeleted, handleNoteWritten } from './sticky-notes.js';
+import { handleNoteDeleteResult } from './sticky-notes-browser.js';
 import { handleProjectLogsState, handleProjectLogEntry, handleProjectLogCommented, handleProjectLogCommentReviewed, handleProjectLogDeleted, handleProjectLogUpdated, handleProjectLogsError, handleScheduledTaskResultsState, handleScheduledTaskResultCreated, handleScheduledTaskResultSession } from './project-logs.js';
 import { handleSkillInstalled, handleSkillUninstalled } from './skills.js';
 import { showRewindModal, onRewindComplete, setRewindMode, onRewindError, clearPendingRewindUuid, addRewindButton } from './rewind.js';
@@ -1646,6 +1647,10 @@ export function processMessage(msg) {
         handleNoteDeleted(msg);
         break;
 
+      case "note_delete_result":
+        handleNoteDeleteResult(msg);
+        break;
+
       case "project_logs_state":
         handleProjectLogsState(msg);
         break;

package/lib/public/modules/scheduled-tasks.js

@@ -257,7 +257,7 @@ function handleClick(event) {
   var button = event.target.closest("button[data-action]");
   if (!button) return;
   var action = button.dataset.action;
-  if (action === "default-ai") { openDefaultAi(); return; }
+  if (action === "default-ai") { event.stopPropagation(); openDefaultAi(); return; }
   if (action === "close") { closeScheduledTasks(); return; }
   if (action === "wide") { applyWindowState(!store.get('scheduledTasksWide'), store.get('scheduledTasksFullscreen')); return; }
   if (action === "fullscreen") { applyWindowState(store.get('scheduledTasksWide'), !store.get('scheduledTasksFullscreen')); return; }

package/lib/public/modules/sticky-notes-browser.js

@@ -4,9 +4,8 @@
 // the canvas over the conversation; this pane lists them, splits them into Open
 // and Closed, and is where a note is completed or brought back.
 //
-// Completion here is Close, never delete. A closed note leaves the active
-// canvas and moves to the Closed tab, where it stays readable and reversible.
-// There is deliberately no destructive control on this surface at all.
+// Completion here is Close. Permanent deletion is available only for closed
+// notes and always requires an explicit, accessible confirmation.
 
 import { store } from './store.js';
 import { iconHtml, refreshIcons } from './icons.js';
@@ -19,6 +18,10 @@ import { claimRightWorkbench, registerRightWorkbench, releaseRightWorkbench } fr
 var panel = null;
 var gridEl = null;
 var tabsEl = null;
+var deleteDialog = null;
+var deleteTrigger = null;
+var deleteRequestCounter = 0;
+var deleteRequestTimer = null;
 
 // Registered by app.js so this module never imports the other right-pane tools
 // and cannot form an import cycle with them.
@@ -63,11 +66,15 @@ function ensurePanel() {
       '</div>' +
     '</header>' +
     '<div id="notes-browser-tabs" class="notes-browser-tabs" role="tablist" aria-label="Sticky Notes state"></div>' +
-    '<div id="notes-browser-grid" class="notes-browser-grid" role="list"></div>';
+    '<div id="notes-browser-grid" class="notes-browser-grid" role="list"></div>' +
+    '<div id="notes-delete-dialog" class="notes-delete-dialog hidden" role="dialog" aria-modal="true" aria-labelledby="notes-delete-heading">' +
+      '<div class="notes-delete-dialog-card"><h2 id="notes-delete-heading">Delete this note permanently?</h2><p>This permanently removes the note. It cannot be restored.</p><p class="notes-delete-dialog-title"></p><p class="notes-delete-dialog-status" role="status"></p><div class="notes-delete-dialog-actions"><button type="button" data-action="cancel">Cancel</button><button type="button" class="danger" data-action="delete">Delete permanently</button></div></div>' +
+    '</div>';
   panels.appendChild(panel);
 
   gridEl = panel.querySelector("#notes-browser-grid");
   tabsEl = panel.querySelector("#notes-browser-tabs");
+  deleteDialog = panel.querySelector("#notes-delete-dialog");
 
   panel.querySelector("#notes-browser-close").addEventListener("click", closeNotesBrowser);
   panel.querySelector("#notes-browser-wide").addEventListener("click", function () {
@@ -76,6 +83,29 @@ function ensurePanel() {
   panel.querySelector("#notes-browser-fullscreen").addEventListener("click", function () {
     applyWindowState(store.get('notesBrowserWide'), !store.get('notesBrowserFullscreen'));
   });
+  deleteDialog.querySelector('[data-action="cancel"]').addEventListener("click", closeDeleteDialog);
+  deleteDialog.querySelector('[data-action="delete"]').addEventListener("click", confirmDelete);
+  deleteDialog.addEventListener("click", function (event) { if (event.target === deleteDialog) closeDeleteDialog(); });
+  deleteDialog.addEventListener("keydown", function (event) {
+    if (event.key === "Escape") {
+      event.preventDefault();
+      event.stopPropagation();
+      closeDeleteDialog(true);
+      return;
+    }
+    if (event.key !== "Tab") return;
+    var focusable = deleteDialog.querySelectorAll("button:not(:disabled), [href], input:not(:disabled), select:not(:disabled), textarea:not(:disabled), [tabindex]:not([tabindex='-1'])");
+    if (!focusable.length) return;
+    var first = focusable[0];
+    var last = focusable[focusable.length - 1];
+    if (event.shiftKey && document.activeElement === first) {
+      event.preventDefault();
+      last.focus();
+    } else if (!event.shiftKey && document.activeElement === last) {
+      event.preventDefault();
+      first.focus();
+    }
+  });
   refreshIcons();
 }
 
@@ -166,7 +196,8 @@ function buildCard(data) {
   title.textContent = getTitle(data.text) || "Untitled";
   header.appendChild(title);
 
-  // Exactly one lifecycle action per card, and it is never destructive.
+  // Closing and reopening are lifecycle actions; permanent deletion is offered
+  // separately below only because this card is known to be closed.
   var action = document.createElement("button");
   action.type = "button";
   action.className = "notes-browser-card-action";
@@ -200,6 +231,14 @@ function buildCard(data) {
   card.appendChild(body);
 
   if (closed) {
+    var deleteAction = document.createElement("button");
+    deleteAction.type = "button";
+    deleteAction.className = "notes-browser-card-action notes-browser-card-delete";
+    deleteAction.innerHTML = iconHtml("trash-2") + "<span>Delete permanently</span>";
+    deleteAction.title = "Permanently delete this closed note";
+    deleteAction.setAttribute("aria-label", "Delete permanently: " + title.textContent);
+    deleteAction.addEventListener("click", function (e) { e.stopPropagation(); openDeleteDialog(data, deleteAction); });
+    header.appendChild(deleteAction);
     var meta = document.createElement("p");
     meta.className = "notes-browser-card-meta";
     meta.textContent = closedMeta(data);
@@ -224,6 +263,77 @@ function buildCard(data) {
   return card;
 }
 
+function nextDeleteRequestId() {
+  deleteRequestCounter++;
+  return "delete-note-" + Date.now() + "-" + deleteRequestCounter;
+}
+
+function accountKey() {
+  return store.get('myUserId') ? String(store.get('myUserId')) : "single";
+}
+
+function openDeleteDialog(data, trigger) {
+  if (!deleteDialog || !data || !isClosed(data)) return;
+  deleteTrigger = trigger || null;
+  store.set({ notesDeletePending: { noteId: data.id, requestId: null, projectSlug: store.get('currentSlug') || null, accountKey: accountKey() } });
+  deleteDialog.querySelector(".notes-delete-dialog-title").textContent = getTitle(data.text) || "Untitled";
+  deleteDialog.querySelector(".notes-delete-dialog-status").textContent = "";
+  deleteDialog.querySelector('[data-action="delete"]').disabled = false;
+  deleteDialog.querySelector('[data-action="cancel"]').disabled = false;
+  deleteDialog.classList.remove("hidden");
+  deleteDialog.querySelector('[data-action="cancel"]').focus();
+}
+
+function closeDeleteDialog(force) {
+  var pending = store.get('notesDeletePending');
+  if (!force && pending && pending.requestId) return;
+  if (deleteRequestTimer) { clearTimeout(deleteRequestTimer); deleteRequestTimer = null; }
+  if (deleteDialog) deleteDialog.classList.add("hidden");
+  store.set({ notesDeletePending: null });
+  if (deleteTrigger && deleteTrigger.isConnected) deleteTrigger.focus();
+  deleteTrigger = null;
+}
+
+function confirmDelete() {
+  var pending = store.get('notesDeletePending');
+  if (!pending || !deleteDialog) return;
+  if (!store.get('connected')) {
+    deleteDialog.querySelector(".notes-delete-dialog-status").textContent = "Sticky Notes are unavailable while disconnected.";
+    return;
+  }
+  var requestId = nextDeleteRequestId();
+  store.set({ notesDeletePending: Object.assign({}, pending, { requestId: requestId }) });
+  deleteDialog.querySelector('[data-action="delete"]').disabled = true;
+  deleteDialog.querySelector('[data-action="cancel"]').disabled = true;
+  deleteDialog.querySelector(".notes-delete-dialog-status").textContent = "Deleting permanently...";
+  send({ type: "note_delete_permanently", id: pending.noteId, requestId: requestId });
+  deleteRequestTimer = setTimeout(function () {
+    var active = store.get('notesDeletePending');
+    if (!deleteDialog || !active || active.requestId !== requestId) return;
+    store.set({ notesDeletePending: Object.assign({}, active, { requestId: null }) });
+    deleteDialog.querySelector('[data-action="delete"]').disabled = false;
+    deleteDialog.querySelector('[data-action="cancel"]').disabled = false;
+    deleteDialog.querySelector(".notes-delete-dialog-status").textContent = "The delete request timed out. Try again.";
+    deleteRequestTimer = null;
+  }, 10000);
+}
+
+export function handleNoteDeleteResult(msg) {
+  var pending = store.get('notesDeletePending');
+  if (!deleteDialog || !msg || msg.projectSlug !== store.get('currentSlug') ||
+      msg.requestId !== (pending && pending.requestId) || !pending || msg.noteId !== pending.noteId ||
+      msg.projectSlug !== pending.projectSlug || pending.accountKey !== accountKey()) return;
+  if (deleteRequestTimer) { clearTimeout(deleteRequestTimer); deleteRequestTimer = null; }
+  if (msg.ok) {
+    closeDeleteDialog(true);
+    return;
+  }
+  store.set({ notesDeletePending: Object.assign({}, pending, { requestId: null }) });
+  deleteDialog.querySelector('[data-action="delete"]').disabled = false;
+  deleteDialog.querySelector('[data-action="cancel"]').disabled = false;
+  deleteDialog.querySelector(".notes-delete-dialog-status").textContent = msg.error || "The note could not be deleted.";
+}
+
 function emptyState(tab) {
   var empty = document.createElement("div");
   empty.className = "notes-browser-empty";
@@ -242,6 +352,11 @@ function emptyState(tab) {
 export function renderNotesBrowser() {
   if (!gridEl) return;
   var all = listNoteData();
+  var pending = store.get('notesDeletePending');
+  if (pending) {
+    var pendingCurrent = all.filter(function (item) { return item && item.id === pending.noteId; })[0];
+    if (!pendingCurrent || !isClosed(pendingCurrent)) closeDeleteDialog(true);
+  }
   var open = openNotes(all);
   var closed = closedNotes(all);
   renderTabs(open.length, closed.length);
@@ -284,6 +399,9 @@ export function openNotesBrowser() {
 }
 
 export function closeNotesBrowser() {
+  // Reset destructive UI state even when the panel was already closed. Right
+  // workbench/project transitions can race with panel visibility updates.
+  closeDeleteDialog(true);
   releaseRightWorkbench("notes-browser");
   if (!store.get('notesBrowserOpen')) return;
   if (panel) panel.classList.add("hidden");
@@ -304,10 +422,13 @@ export function initNotesBrowser() {
   registerRightWorkbench("notes-browser", closeNotesBrowser);
   document.addEventListener("keydown", function (e) {
     if (e.key !== "Escape") return;
+    if (deleteDialog && !deleteDialog.classList.contains("hidden")) return;
     if (!store.get('notesBrowserOpen')) return;
     closeNotesBrowser();
   });
   store.subscribe(function (state, previous) {
+    if (state.connected !== previous.connected || state.myUserId !== previous.myUserId ||
+        state.isMultiUserMode !== previous.isMultiUserMode) closeDeleteDialog(true);
     if (state.currentSlug === previous.currentSlug) return;
     // A different project starts from a closed, bounded, Open-tab pane.
     closeNotesBrowser();