clay-server 4.1.0-beta.8 → 4.1.0

package/lib/server-context-view.js

@@ -0,0 +1,53 @@
+// Authenticated user-wide context display preference service.
+
+function attachContextViewService(deps) {
+  var users = deps.users;
+  var forEachAppClient = deps.forEachAppClient;
+  var revisions = {};
+  var epoch = deps.serverEpoch || require("crypto").randomBytes(12).toString("hex");
+
+  function actor(ws) {
+    if (users.isMultiUser() !== true) return { userId: "default", user: true };
+    var claimed = ws && ws._clayUser && ws._clayUser.id;
+    var user = claimed ? users.findUserById(claimed) : null;
+    return user ? { userId: user.id, user: user } : { userId: null, user: null };
+  }
+  function sameActor(ws, userId) {
+    var current = actor(ws);
+    return current.user && current.userId === userId;
+  }
+  function send(ws, message) {
+    if (ws && ws.readyState === 1) ws.send(JSON.stringify(Object.assign({ serverEpoch: epoch }, message)));
+  }
+  function revision(userId) { return revisions[userId] || 0; }
+  function broadcast(userId, message, except) {
+    forEachAppClient(function (client) { if (client === except || !sameActor(client, userId)) return; send(client, message); });
+  }
+  function handleMessage(ws, msg) {
+    if (!msg || ["context_view_get", "context_view_set"].indexOf(msg.type) === -1) return false;
+    var requestId = typeof msg.requestId === "string" ? msg.requestId.slice(0, 200) : null;
+    var who = actor(ws);
+    if (!who.user) {
+      send(ws, { type: "context_view_state", requestId: requestId, accountAvailable: false, accountId: null, mode: null, error: "Your account is no longer available." });
+      return true;
+    }
+    if (msg.type === "context_view_get") {
+      var current = users.getContextViewPreference(who.userId);
+      send(ws, { type: "context_view_state", requestId: requestId, accountAvailable: true, accountId: who.userId, mode: current.mode, preferencePresent: current.present, canonicalRevision: revision(who.userId), ready: !current.error, error: current.error || "" });
+      return true;
+    }
+    var saved = users.setContextViewPreference(who.userId, msg.mode);
+    if (!saved.ok) {
+      send(ws, { type: "context_view_state", requestId: requestId, accountAvailable: true, accountId: who.userId, canonicalRevision: revision(who.userId), ready: false, error: saved.error });
+      return true;
+    }
+    revisions[who.userId] = revision(who.userId) + 1;
+    var state = { type: "context_view_state", requestId: null, accountAvailable: true, accountId: who.userId, mode: msg.mode, preferencePresent: true, canonicalRevision: revisions[who.userId], ready: true, error: "" };
+    broadcast(who.userId, state, ws);
+    send(ws, Object.assign({}, state, { requestId: requestId }));
+    return true;
+  }
+  return { handleMessage: handleMessage };
+}
+
+module.exports = { attachContextViewService: attachContextViewService };

package/lib/server-default-vendor.js

@@ -0,0 +1,60 @@
+// Authenticated user-wide New session vendor preference service.
+
+function attachDefaultVendorService(deps) {
+  var users = deps.users;
+  var homeChatHandler = deps.homeChatHandler;
+  var forEachAppClient = deps.forEachAppClient;
+  var revisions = {};
+  var epoch = deps.serverEpoch || require("crypto").randomBytes(12).toString("hex");
+
+  function multiUser() { return users.isMultiUser() === true; }
+  function actor(ws) {
+    if (!multiUser()) return { userId: "default", user: true };
+    var claimed = ws && ws._clayUser && ws._clayUser.id;
+    var user = claimed ? users.findUserById(claimed) : null;
+    return user ? { userId: user.id, user: user } : { userId: null, user: null };
+  }
+  function sameActor(ws, userId) { var current = actor(ws); return current.user && current.userId === userId; }
+  function send(ws, message) { if (ws && ws.readyState === 1) ws.send(JSON.stringify(Object.assign({ serverEpoch: epoch }, message))); }
+  function revision(userId) { return revisions[userId] || 0; }
+  function installedVendors(ws, who) {
+    var found;
+    try { found = homeChatHandler.findMateProject(multiUser() ? who.userId : null, null, true); } catch (e) { return []; }
+    if (!found || !found.ctx || typeof found.ctx.getVendorModelAvailability !== "function") return [];
+    var socket = Object.create(ws || null);
+    socket._clayUser = who.user === true ? null : who.user;
+    var choices = found.ctx.getVendorModelAvailability(socket) || [];
+    return choices.filter(function (choice) { return choice && choice.installed === true; }).map(function (choice) { return choice.id; });
+  }
+  function broadcast(userId, message, except) {
+    forEachAppClient(function (client) { if (client === except || !sameActor(client, userId)) return; send(client, message); });
+  }
+  function handle(ws, msg, projectSlug) {
+    if (!msg || ["default_vendor_get", "default_vendor_set"].indexOf(msg.type) === -1) return false;
+    var requestId = typeof msg.requestId === "string" ? msg.requestId.slice(0, 200) : null;
+    var who = actor(ws);
+    if (!who.user) { send(ws, { type: "default_vendor_state", requestId: requestId, accountAvailable: false, accountId: null, projectSlug: projectSlug || null, installedVendors: [], preference: null, error: "Your account is no longer available." }); return true; }
+    var installed = installedVendors(ws, who);
+    if (msg.type === "default_vendor_get") {
+      var saved = users.getDefaultVendorPreference(who.userId);
+      send(ws, { type: "default_vendor_state", requestId: requestId, projectSlug: projectSlug || null, accountAvailable: true, accountId: who.userId, installedVendors: installed, preference: saved.vendor, preferencePresent: saved.present, ready: !saved.error, canonicalRevision: revision(who.userId), error: saved.error || "" });
+      return true;
+    }
+    if (msg.vendor !== "" && (typeof msg.vendor !== "string" || installed.indexOf(msg.vendor) === -1)) {
+      send(ws, { type: "default_vendor_state", requestId: requestId, projectSlug: projectSlug || null, accountAvailable: true, accountId: who.userId, installedVendors: installed, preference: users.getDefaultVendorPreference(who.userId).vendor, ready: false, canonicalRevision: revision(who.userId), error: "That vendor is not installed or authorized." });
+      return true;
+    }
+    var savedResult = users.setDefaultVendorPreference(who.userId, msg.vendor);
+    if (!savedResult.ok) { send(ws, { type: "default_vendor_state", requestId: requestId, projectSlug: projectSlug || null, accountAvailable: true, accountId: who.userId, installedVendors: installed, ready: false, error: savedResult.error }); return true; }
+    revisions[who.userId] = revision(who.userId) + 1;
+    var state = { type: "default_vendor_state", requestId: null, projectSlug: projectSlug || null, accountAvailable: true, accountId: who.userId, installedVendors: installed, preference: msg.vendor || null, preferencePresent: !!msg.vendor, ready: true, canonicalRevision: revisions[who.userId], error: "" };
+    var broadcastState = Object.assign({}, state);
+    delete broadcastState.projectSlug;
+    broadcast(who.userId, broadcastState, ws);
+    send(ws, Object.assign({}, state, { requestId: requestId }));
+    return true;
+  }
+  return { handleMessage: handle };
+}
+
+module.exports = { attachDefaultVendorService: attachDefaultVendorService };

package/lib/server.js

@@ -17,6 +17,8 @@ var serverHomeChat = require("./server-home-chat");
 var shouldSuppressHomeResponse = require("./home-response-notifications").shouldSuppressHomeResponse;
 var serverHomePreferences = require("./server-home-preferences");
 var serverDefaultAi = require("./server-default-ai");
+var serverDefaultVendor = require("./server-default-vendor");
+var serverContextView = require("./server-context-view");
 var serverCursorSharing = require("./server-cursor-sharing");
 var serverTools = require("./server-tools");
 var serverAdmin = require("./server-admin");
@@ -943,9 +945,9 @@ function createServer(opts) {
       return;
     }
 
-    // Auth check for project routes
-    // Bypass auth for MCP bridge endpoint (localhost only).
-    // The mcp-bridge-server.js runs as a local child process and cannot carry cookies.
+    // Auth check for project routes. The local MCP bridge gets a narrowly
+    // scoped project capability from its parent process; localhost alone is
+    // not sufficient because browser/local callers must not reach the bridge.
     var projectUrlForAuth = stripPrefix(req.url.split("?")[0], slug);
     // req.socket.remoteAddress may differ between HTTP/HTTPS (TLSSocket wraps net.Socket).
     // Also check req.connection.remoteAddress for compatibility.
@@ -956,10 +958,18 @@ function createServer(opts) {
     var isMcpBridgeLocal = projectUrlForAuth === "/api/mcp-bridge"
       && req.method === "POST"
       && isLocalhost;
+    var isMcpBridgeAuthenticated = isMcpBridgeLocal
+      && typeof ctx.isMcpBridgeAuthenticated === "function"
+      && ctx.isMcpBridgeAuthenticated(req);
     if (projectUrlForAuth === "/api/mcp-bridge") {
-      console.log("[server] MCP bridge auth: method=" + req.method + " addr=" + remoteAddr + " bypass=" + isMcpBridgeLocal);
+      console.log("[server] MCP bridge auth: method=" + req.method + " addr=" + remoteAddr + " capability=" + isMcpBridgeAuthenticated);
     }
-    if (!isMcpBridgeLocal && !isRequestAuthed(req)) {
+    if (projectUrlForAuth === "/api/mcp-bridge" && !isMcpBridgeAuthenticated) {
+      res.writeHead(403, { "Content-Type": "application/json" });
+      res.end('{"error":"MCP bridge capability required"}');
+      return;
+    }
+    if (!isMcpBridgeAuthenticated && !isRequestAuthed(req)) {
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
       res.end(auth.getAuthPage());
       return;
@@ -969,7 +979,7 @@ function createServer(opts) {
     res.setHeader("Set-Cookie", "clay_last_project=" + slug + "; Path=/; SameSite=Strict; Max-Age=31536000" + (tlsOptions ? "; Secure" : ""));
 
     // Multi-user: check project access for HTTP requests
-    if (users.isMultiUser()) {
+    if (users.isMultiUser() && !isMcpBridgeAuthenticated) {
       var httpUser = getMultiUserFromReq(req);
       if (!httpUser || !canUserAccessSlug(httpUser.id, slug)) {
         res.writeHead(302, { "Location": "/" });
@@ -1067,6 +1077,8 @@ function createServer(opts) {
   var wss = new WebSocketServer({ noServer: true });
   var homePreferencesHandler = null;
   var defaultAiService = null;
+  var defaultVendorService = null;
+  var contextViewService = null;
   var cursorSharingService = null;
 
   // Slug-less /ws handler: lets a user with no projects yet load the regular
@@ -1321,6 +1333,7 @@ function createServer(opts) {
       projectOwnerId: projectOwnerId || null,
       projectKnowledgeId: extra.projectKnowledgeId || (worktreeMeta && worktreeMeta.projectKnowledgeId) || null,
       worktreeMeta: worktreeMeta || null,
+      mcpBridgeToken: extra.mcpBridgeToken || null,
       isMate: extra.isMate || false,
       mateId: extra.mateId || (extra.isMate ? path.basename(cwd) : null),
       mateDisplayName: extra.mateDisplayName || "",
@@ -1552,6 +1565,8 @@ function createServer(opts) {
   });
 
   defaultAiService = serverDefaultAi.attachDefaultAiService({ users: users, homeChatHandler: homeChatHandler, forEachAppClient: forEachAppClient });
+  defaultVendorService = serverDefaultVendor.attachDefaultVendorService({ users: users, homeChatHandler: homeChatHandler, forEachAppClient: forEachAppClient });
+  contextViewService = serverContextView.attachContextViewService({ users: users, forEachAppClient: forEachAppClient });
   cursorSharingService = serverCursorSharing.attachCursorSharingService({ users: users, forEachAppClient: forEachAppClient });
 
   // --- User-installed home tools handler ---
@@ -1580,6 +1595,8 @@ function createServer(opts) {
 
   function handleDmMessage(ws, msg, routedProjectSlug) {
     if (cursorSharingService && cursorSharingService.handleMessage(ws, msg)) return true;
+    if (defaultVendorService && defaultVendorService.handleMessage(ws, msg, routedProjectSlug)) return true;
+    if (contextViewService && contextViewService.handleMessage(ws, msg)) return true;
     if (defaultAiService && defaultAiService.handleMessage(ws, msg)) return true;
     if (assignmentService.handleMessage(ws, msg, routedProjectSlug)) return true;
     if (dmHandler.handleMessage(ws, msg)) return true;

package/lib/session-notes-mcp-server.js

@@ -4,10 +4,8 @@ var buildShape = require("./session-spawn-mcp-server").buildShape;
 
 var MEMORY_CONTRACT =
   "The sticky-note board persists across sessions and is a user-facing artifact shared with people and Clay agents, not private agent scratch space. " +
-  "Default to not writing. Create a note proactively only when the user explicitly asks to remember or track something, or when all of these are true: it will remain useful after the current task and session, it is not already adequately recorded in the repository or another note, and the user would likely be glad to find it on the board a week later. " +
-  "Good notes capture an unresolved commitment, durable product decision, user preference, constraint, or handoff that will materially change future work. " +
-  "Important exception for deferred defects: while doing code or technical work, actively create a sticky note when you discover a concrete defect, regression risk, security issue, or data-loss risk that is outside the current session goal and will remain unfixed when the turn ends. Do not wait for the user to ask. For a Project Driver session with Issues authority, search, reuse, or create the Issue first and put the primary details there: observable evidence, affected component, impact, and next action. Then make the sticky note only a concise title, one-line actionable cue, and the actual opaque issue: reference; do not duplicate the full defect details in the note. If you lack Issues authority, route through an eligible Project Driver; never invent an issue reference or drop the alert. Check active notes first when a duplicate is plausible. Do not create defect notes for speculation, general cleanup ideas, or problems you fixed in the current session. " +
-  "Important exception for deferred proposals: when you propose work (a fix, follow-up, improvement, or next step) and the user defers it rather than declining it (\"let's do that later\", \"next time\", \"after this\"), actively create a sticky note before the topic moves on. Do not wait to be asked. Capture what was proposed, why it mattered, and the agreed timing if any. Deferred agreements scroll out of chat history quickly and are hard to track; the board is where they survive. If the user declines the idea outright, do not write a note. " +
+  "Default to not writing. Create a note proactively only when the user explicitly asks to remember or track something, or when all of these are true: it will remain useful after the current task and session, it is not already adequately recorded in the repository, an Issue, or another note, and the user would likely be glad to find it on the board a week later. " +
+  "Use Sticky Notes for preferences, reminders, undeveloped ideas, or an explicit request to remember something; they are not mandatory duplicates of Project Issues. For concrete actionable bugs, improvements, or deferred implementation, an authorized Project Driver should use Project Issues. If you lack Issues authority, route the work through an eligible Project Driver. Check active notes first when a duplicate is plausible. " +
   "Never create a note merely because work is important, lengthy, spans agents or restarts, or might help another agent. Do not record completed work, implementation details, test results, investigation logs, transient blockers, conversation summaries, or announcements of your own activity. When uncertain, do not write. " +
   "Updates are visible too: update only when durable state materially changes. " +
   "A note is an attention item, so finishing it means closing it, never erasing it: call close_note once the thing it is asking for is done, and the note leaves the active board while the record stays and can be reopened. Do not turn a note into a completion log instead of closing it. " +
@@ -35,7 +33,7 @@ function getToolDefs(handlers) {
     },
     {
       name: "close_note",
-      description: MEMORY_CONTRACT + " Close a note created by this same session once what it asked for is done. Closing is not deletion: the note leaves the active board, stays queryable under state closed, and can be reopened. Notes created by users or other sessions cannot be closed by this session.",
+      description: MEMORY_CONTRACT + " Close a note once what it asked for is done. Authorized Project Drivers may close any note in their project, including notes created by people or other sessions. Other sessions may only close their own notes. Closing is not deletion: the note leaves the active board, stays queryable under state closed, and can be reopened.",
       inputSchema: buildShape({
         id: { type: "string", description: "Id of the note to close." },
       }, ["id"]),

package/lib/session-pair-factory.js

@@ -235,12 +235,12 @@ function attachPairFactory(ctx) {
     var request = args || {};
     var driverRuntime = preflightRuntime(request.driver || {}, "claude");
     var workerRuntime = preflightRuntime(request.worker || {}, null);
-    var driver = sm.createSessionRaw({ ownerId: ownerId || null, vendor: driverRuntime.vendor, model: driverRuntime.model, effort: driverRuntime.effort });
+    var driver = sm.createSessionRaw({ ownerId: ownerId || null, vendor: driverRuntime.vendor, model: driverRuntime.model, effort: driverRuntime.effort, hidden: request.hidden === true });
     var worker = null;
     try {
       driver.title = request.name ? request.name + " · Driver" : "Scheduled task · Driver";
       if (driverRuntime.explicitEffort) driver.loopSettings = { effort: driverRuntime.effort };
-      worker = sm.createSessionRaw({ ownerId: ownerId || null, vendor: workerRuntime.vendor, model: workerRuntime.model, effort: workerRuntime.effort });
+      worker = sm.createSessionRaw({ ownerId: ownerId || null, vendor: workerRuntime.vendor, model: workerRuntime.model, effort: workerRuntime.effort, hidden: request.hidden === true });
       worker.title = request.name ? request.name + " · Split Worker" : "Scheduled task · Split Worker";
       if (workerRuntime.explicitEffort) worker.loopSettings = { effort: workerRuntime.effort };
       sessionProvenance.markWorker(driver, worker, sm.sessions);

package/lib/session-pair-mcp-server.js

@@ -3,9 +3,10 @@
 var buildShape = require("./session-spawn-mcp-server").buildShape;
 var z;
 try { z = require("zod"); } catch (e) { z = null; }
+var EVALUATION_OUTCOMES = ["succeeded", "partial", "failed", "abandoned"];
 var evaluationSchema = z ? z.union([
-  z.string(),
-  z.object({ outcome: z.string(), note: z.string().optional() }),
+  z.enum(EVALUATION_OUTCOMES),
+  z.object({ outcome: z.enum(EVALUATION_OUTCOMES), note: z.string().optional() }),
 ]) : null;
 
 // `options.lifecycle` adds the autonomous management tools. They are omitted
@@ -75,7 +76,7 @@ function getToolDefs(handlers, options) {
         recommendationRationale: { type: "string", description: "Concise Driver-authored explanation of why the recommended replacement vendor, model, and effort fit the next task." },
         evaluation: {
           schema: evaluationSchema,
-          description: "Optional bounded assessment of the Worker being replaced, recorded against that exact generation.",
+          description: "Optional assessment of the Worker being replaced. Use succeeded, partial, failed, or abandoned, or an object with outcome set to one of those values and an optional note. Omit when no assessment is needed.",
         },
         operationId: { type: "string", description: "Optional stable id for this replacement. Reusing it within the same human turn returns the original operation instead of replacing twice." },
         supersedeProposalId: { type: "string", description: "Exact pending replacement proposal id to supersede with this new configuration." },
@@ -86,7 +87,7 @@ function getToolDefs(handlers, options) {
       name: "record_partner_evaluation",
       description: "Record a bounded assessment of one Split Worker generation so your later model choices can use observed outcomes instead of re-reading transcripts. Records your judgement alongside the objective signals Clay already measured (turns, errors, interruption, context used). This is scoped to your own pair and forms no global model ranking.",
       inputSchema: buildShape({
-        outcome: { type: "string", description: 'One of "succeeded", "partial", "failed", "abandoned".' },
+        outcome: { enum: EVALUATION_OUTCOMES, description: 'One of "succeeded", "partial", "failed", "abandoned".' },
         note: { type: "string", description: "Optional short reason, up to 400 characters." },
         generation: { type: "number", description: "Optional generation number. Defaults to the current Worker." },
       }, ["outcome"]),

package/lib/session-title-generator.js

@@ -0,0 +1,89 @@
+// Coordinates bounded semantic title generation for completed conversations.
+
+var MAX_ATTEMPTS = 3;
+
+function isWorker(session) {
+  return !!(session && session.sessionProvenance && session.sessionProvenance.kind === "worker");
+}
+
+function hasUserMessage(session) {
+  var history = session && Array.isArray(session.history) ? session.history : [];
+  for (var i = 0; i < history.length; i++) {
+    if (history[i] && history[i].type === "user_message" && typeof history[i].text === "string" && history[i].text.trim()) return true;
+  }
+  return false;
+}
+
+function attachSessionTitleGenerator(ctx) {
+  var sm = ctx.sm;
+  var getAdapter = ctx.getAdapter;
+  var getLinuxUser = ctx.getLinuxUser || function () { return null; };
+  var getRuntimeEnv = ctx.getRuntimeEnv || function () { return process.env; };
+  var cwd = ctx.cwd;
+
+  function isLive(session) {
+    if (!session || session.destroying || isWorker(session)) return false;
+    if (!sm || !sm.sessions || typeof sm.sessions.get !== "function") return true;
+    return sm.sessions.get(session.localId) === session;
+  }
+
+  function messagesFor(session) {
+    var result = [];
+    var history = Array.isArray(session.history) ? session.history : [];
+    for (var i = 0; i < history.length; i++) {
+      var entry = history[i];
+      if (entry && entry.type === "user_message" && entry.text) {
+        result.push(entry.text.substring(0, 200));
+        if (result.length >= 5) break;
+      }
+    }
+    return result;
+  }
+
+  function generate(session) {
+    if (!isLive(session) || session.titleManuallySet || session.titleAutoGenerated || !hasUserMessage(session)) return false;
+    if (session._autoTitleInFlight || (session._autoTitleAttempts || 0) >= MAX_ATTEMPTS) return false;
+    var sessionAdapter = getAdapter(session);
+    if (!sessionAdapter || typeof sessionAdapter.generateTitle !== "function") return false;
+    var messages = messagesFor(session);
+    if (!messages.length) return false;
+
+    session._autoTitleAttempts = (session._autoTitleAttempts || 0) + 1;
+    session._autoTitleInFlight = true;
+    var requestTitle = session.title;
+    return Promise.resolve().then(function () {
+      return sessionAdapter.generateTitle(messages, {
+        cwd: cwd,
+        linuxUser: getLinuxUser(session) || undefined,
+        env: getRuntimeEnv(session),
+      });
+    }).then(function (title) {
+      title = typeof title === "string" ? title.trim() : "";
+      if (title.length < 2) return false;
+      title = title.substring(0, 100);
+      if (!isLive(session) || session.titleManuallySet || session.titleAutoGenerated || session.title !== requestTitle) return false;
+      session.title = title;
+      session.titleProvisional = false;
+      session.titleAutoGenerated = true;
+      sm.saveSessionFile(session);
+      sm.broadcastSessionList();
+      if (session.cliSessionId && typeof sessionAdapter.renameSession === "function") {
+        return Promise.resolve(sessionAdapter.renameSession(session.cliSessionId, title, { dir: cwd })).then(function () { return true; });
+      }
+      return true;
+    }).catch(function (e) {
+      console.error("[auto-title] Failed:", e.message || e);
+      return false;
+    }).then(function (result) {
+      session._autoTitleInFlight = false;
+      return result;
+    }, function (e) {
+      session._autoTitleInFlight = false;
+      throw e;
+    });
+  }
+
+  return { generate: generate, maxAttempts: MAX_ATTEMPTS };
+}
+
+module.exports = { attachSessionTitleGenerator: attachSessionTitleGenerator };

package/lib/session-title-policy.js

@@ -2,7 +2,7 @@
 // Initial titles are immediate, provisional UI labels. Model-generated titles
 // replace them after enough conversation exists to describe the actual topic.
 
-var DEFAULT_GENERATION_TURN = 2;
+var DEFAULT_GENERATION_TURN = 1;
 var HOME_GENERATION_TURN = 1;
 var MAX_PROVISIONAL_CHARS = 60;
 var LEGACY_SEARCH_TITLE = "This conversation began in Clay Studio's global search.";
@@ -25,6 +25,7 @@ function firstRecordedUserMessage(session) {
 
 function selectInitialTitle(session, transportText) {
   var existing = cleanText(session && session.title);
+  if (existing && session && session.titleProvisional === true) return { title: existing, provisional: true };
   if (existing) return { title: existing, provisional: false };
 
   // Prefer the visible message recorded in history. Query transports may wrap
@@ -41,9 +42,13 @@ function generationTurn(isMate) {
   return isMate === true ? HOME_GENERATION_TURN : DEFAULT_GENERATION_TURN;
 }
 
+function isLegacySearchTitle(value) {
+  return cleanText(value).indexOf(LEGACY_SEARCH_TITLE) === 0;
+}
+
 function repairLegacySearchTitle(session) {
   var title = cleanText(session && session.title);
-  if (!session || title.indexOf(LEGACY_SEARCH_TITLE) !== 0) return false;
+  if (!session || !isLegacySearchTitle(title)) return false;
   var source = firstRecordedUserMessage(session);
   if (!source) return false;
   session.title = source.length > MAX_PROVISIONAL_CHARS ? source.substring(0, MAX_PROVISIONAL_CHARS) : source;
@@ -56,5 +61,6 @@ module.exports = {
   HOME_GENERATION_TURN: HOME_GENERATION_TURN,
   selectInitialTitle: selectInitialTitle,
   generationTurn: generationTurn,
+  isLegacySearchTitle: isLegacySearchTitle,
   repairLegacySearchTitle: repairLegacySearchTitle,
 };

package/lib/sessions.js

@@ -8,6 +8,7 @@ var hygiene = require("./session-hygiene");
 var backgroundTaskTiming = require("./background-task-timing");
 var sessionProvenance = require("./session-provenance");
 var sessionVisibility = require("./session-visibility");
+var sessionTitlePolicy = require("./session-title-policy");
 var projectAutonomousRun = require("./project-autonomous-run").projectAutonomousRun;
 var restoreStoredRun = require("./project-autonomous-run").restoreStoredRun;
 
@@ -23,6 +24,7 @@ function createSessionManager(opts) {
   var sessionViewedListeners = [];
   var onSessionRenamed = opts.onSessionRenamed || function () {};
   var onSessionIdentityAssigned = opts.onSessionIdentityAssigned || function () {};
+  var onSessionHydrate = opts.onSessionHydrate || null;
 
   // --- Multi-session state ---
   var nextLocalId = 1;
@@ -153,11 +155,15 @@ function createSessionManager(opts) {
         localId: session.localId,
         cliSessionId: session.cliSessionId,
         title: session.title,
+        titleProvisional: session.titleProvisional === true,
+        titleAutoGenerated: session.titleAutoGenerated === true,
+        titleManuallySet: session.titleManuallySet === true,
         createdAt: session.createdAt,
       };
       if (session.ownerId) metaObj.ownerId = session.ownerId;
       if (session.vendor) metaObj.vendor = session.vendor;
       if (session.codexDynamicToolCatalogVersion) metaObj.codexDynamicToolCatalogVersion = session.codexDynamicToolCatalogVersion;
+      if (session.codexIssuesToolCatalogVersion) metaObj.codexIssuesToolCatalogVersion = session.codexIssuesToolCatalogVersion;
       if (session.model) metaObj.model = session.model;
       if (session.effort) metaObj.effort = session.effort;
       // Persist the session's "born" mode so TUI sessions reappear after a
@@ -177,6 +183,7 @@ function createSessionManager(opts) {
       if (session.loopInterviewHandoff) metaObj.loopInterviewHandoff = session.loopInterviewHandoff;
       if (session.scheduledTaskDraft) metaObj.scheduledTaskDraft = session.scheduledTaskDraft;
       if (session.scheduledTaskRun) metaObj.scheduledTaskRun = session.scheduledTaskRun;
+      if (session.hidden) metaObj.hidden = true;
       metaObj.sessionVisibility = sessionVisibility.normalize(session.sessionVisibility);
       if (session.sessionVisibilityExplicit) metaObj.sessionVisibilityExplicit = true;
       if (session.bookmarked) metaObj.bookmarked = true;
@@ -285,6 +292,11 @@ function createSessionManager(opts) {
           messageUUIDs.push({ uuid: loaded[i].history[k].uuid, type: loaded[i].history[k].messageType, historyIndex: k });
         }
       }
+      var hasTitleProvenance = Object.prototype.hasOwnProperty.call(m, "titleProvisional")
+        || Object.prototype.hasOwnProperty.call(m, "titleAutoGenerated")
+        || Object.prototype.hasOwnProperty.call(m, "titleManuallySet");
+      var legacyTitleProtected = !hasTitleProvenance && typeof m.title === "string"
+        && m.title.trim() && !sessionTitlePolicy.isLegacySearchTitle(m.title);
       var session = {
         localId: localId,
         queryInstance: null,
@@ -296,6 +308,9 @@ function createSessionManager(opts) {
         pendingAskUser: {},
         isProcessing: false,
         title: m.title || "",
+        titleProvisional: m.titleProvisional === true,
+        titleAutoGenerated: m.titleAutoGenerated === true,
+        titleManuallySet: m.titleManuallySet === true || legacyTitleProtected,
         createdAt: m.createdAt || Date.now(),
         lastActivity: loaded[i].mtime || m.createdAt || Date.now(),
         history: loaded[i].history,
@@ -304,6 +319,7 @@ function createSessionManager(opts) {
       };
       if (m.vendor) session.vendor = m.vendor;
       session.codexDynamicToolCatalogVersion = Number(m.codexDynamicToolCatalogVersion || 0);
+      session.codexIssuesToolCatalogVersion = Number(m.codexIssuesToolCatalogVersion || 0);
       session.model = m.model || deriveSessionModel(loaded[i].history);
       session.effort = m.effort || null;
       if (m.loop) session.loop = m.loop;
@@ -338,6 +354,7 @@ function createSessionManager(opts) {
       session.loopInterviewHandoff = m.loopInterviewHandoff && typeof m.loopInterviewHandoff === "object" ? m.loopInterviewHandoff : null;
       session.scheduledTaskDraft = m.scheduledTaskDraft && typeof m.scheduledTaskDraft === "object" ? m.scheduledTaskDraft : null;
       session.scheduledTaskRun = m.scheduledTaskRun && typeof m.scheduledTaskRun === "object" ? m.scheduledTaskRun : null;
+      session.hidden = m.hidden === true || !!session.scheduledTaskRun;
       session.terminalId = null;
       session.runtimeMode = null;
       session.runtimeTerminalId = null;
@@ -641,6 +658,7 @@ function createSessionManager(opts) {
       allowedTools: {},
       isProcessing: false,
       title: "",
+      titleProvisional: false,
       titleAutoGenerated: false,
       turnCount: 0,
       createdAt: Date.now(),
@@ -664,6 +682,7 @@ function createSessionManager(opts) {
       loopInterviewHandoff: null,
       scheduledTaskDraft: null,
       scheduledTaskRun: null,
+      hidden: !!(sessionOpts && sessionOpts.hidden),
       terminalId: null,
       sessionOriginId: null,
     };
@@ -688,6 +707,7 @@ function createSessionManager(opts) {
       allowedTools: {},
       isProcessing: false,
       title: "",
+      titleProvisional: false,
       titleAutoGenerated: false,
       turnCount: 0,
       createdAt: Date.now(),
@@ -711,6 +731,7 @@ function createSessionManager(opts) {
       loopInterviewHandoff: null,
       scheduledTaskDraft: null,
       scheduledTaskRun: null,
+      hidden: !!(sessionOpts && sessionOpts.hidden),
       terminalId: null,
       sessionOriginId: null,
     };
@@ -779,6 +800,7 @@ function createSessionManager(opts) {
   function switchSession(localId, targetWs, transform) {
     var session = sessions.get(localId);
     if (!session) return;
+    if (typeof onSessionHydrate === "function") onSessionHydrate(session);
 
     // Pane sockets (split-view iframes) pin their session via switch_session
     // but must not move the project-global active pointer: reloads and
@@ -806,7 +828,9 @@ function createSessionManager(opts) {
     var _vendorCaps = _capsByVendor[_sessionVendor] || {};
     _send({ type: "session_switched", id: localId, cliSessionId: session.cliSessionId || null, loop: session.loop || null, vendor: session.vendor || null, model: session.model || null, effort: session.effort || null, hasHistory: (session.history && session.history.length > 0), capabilities: _vendorCaps, isProcessing: !!session.isProcessing, mode: session.mode || "gui", terminalId: typeof session.terminalId === "number" ? session.terminalId : null, runtimeMode: session.runtimeMode || null, runtimeTerminalId: typeof session.runtimeTerminalId === "number" ? session.runtimeTerminalId : null, tuiSuspended: !!session.tuiSuspended, dangerouslySkipPermissions: !!session.dangerouslySkipPermissions, permissionMode: session.permissionMode || null, autonomousRun: projectAutonomousRun(session.autonomousRun), loopInterviewBrief: session.loopInterviewBrief || null, loopInterviewHandoff: session.loopInterviewHandoff || null, scheduledTaskDraft: session.scheduledTaskDraft || null });
     // Send vendor-specific slash commands
-    var _vendorCmds = slashCommandsByVendor[_sessionVendor] || slashCommands || [];
+    var _vendorCmds = (session.slashCommandsByVendor && session.slashCommandsByVendor[_sessionVendor])
+      || session.slashCommands
+      || [];
     _send({ type: "slash_commands", commands: _vendorCmds, vendor: _sessionVendor });
     broadcastSessionList();
     replayHistory(session, undefined, targetWs, transform);
@@ -1270,6 +1294,7 @@ function createSessionManager(opts) {
   }
 
   return {
+    setSessionHydrator: function (fn) { onSessionHydrate = typeof fn === "function" ? fn : null; },
     get activeSessionId() { return activeSessionId; },
     get nextLocalId() { return nextLocalId; },
     get slashCommands() { return slashCommands; },

package/lib/user-presence.js

@@ -12,6 +12,11 @@ function sessionIdForPersistence(session) {
   return session.cliSessionId || session.localId || null;
 }
 
+function shouldPersistDisconnectPresence(existing, sessionId, existingSession, currentSession) {
+  return !!sessionId && (!existing || existing.sessionId === sessionId ||
+    (!!existingSession && !!currentSession && existingSession === currentSession));
+}
+
 function findSession(sessions, sessionId) {
   if (!sessions || sessionId == null) return null;
   var found = null;
@@ -100,6 +105,7 @@ load();
 
 module.exports = {
   sessionIdForPersistence: sessionIdForPersistence,
+  shouldPersistDisconnectPresence: shouldPersistDisconnectPresence,
   findSession: findSession,
   setPresence: setPresence,
   getPresence: getPresence,

package/lib/users-context-view-preferences.js

@@ -0,0 +1,65 @@
+// Durable user-scoped context display preference storage.
+
+var PREFERENCE_KEY = "contextViewPreference";
+var MODES = ["off", "mini", "panel"];
+
+function validMode(value) {
+  return MODES.indexOf(value) !== -1;
+}
+
+function attachContextViewPreferences(deps) {
+  var loadUsers = deps.loadUsers;
+  var saveUsers = deps.saveUsers;
+  var isMultiUser = deps.isMultiUser || function () { return false; };
+  var configModule = deps.configModule || require("./config");
+
+  function findRecord(data, userId) {
+    var records = Array.isArray(data.users) ? data.users : [];
+    for (var i = 0; i < records.length; i++) if (records[i] && records[i].id === userId) return records[i];
+    return null;
+  }
+
+  function result(value, source) {
+    if (value === undefined) return { present: false, mode: "off", source: null };
+    if (!validMode(value)) return { present: true, mode: "off", source: source, error: "Context display preference is invalid." };
+    return { present: true, mode: value, source: source };
+  }
+
+  function get(userId) {
+    var data;
+    try { data = loadUsers(); } catch (error) { return { present: false, mode: "off", source: null, error: "Unable to read context display preference: " + (error.message || error) }; }
+    var record = findRecord(data, userId);
+    if (isMultiUser() && !record) return { present: false, mode: "off", source: null, error: "User not found." };
+    if (record && Object.prototype.hasOwnProperty.call(record, PREFERENCE_KEY)) return result(record[PREFERENCE_KEY], "explicit");
+    if (record) return { present: false, mode: "off", source: null };
+    if (userId === "default") {
+      var config;
+      try { config = configModule.loadConfig() || {}; } catch (configError) { return { present: false, mode: "off", source: null, error: "Unable to read context display preference: " + (configError.message || configError) }; }
+      if (Object.prototype.hasOwnProperty.call(config, PREFERENCE_KEY)) return result(config[PREFERENCE_KEY], "explicit");
+    }
+    return { present: false, mode: "off", source: null };
+  }
+
+  function set(userId, mode) {
+    if (!validMode(mode)) return { ok: false, error: "Context display preference is invalid." };
+    var data;
+    try { data = loadUsers(); } catch (error) { return { ok: false, error: "Unable to read context display preference: " + (error.message || error) }; }
+    var record = findRecord(data, userId);
+    if (isMultiUser() && !record) return { ok: false, error: "User not found." };
+    if (record) {
+      var nextData = Object.assign({}, data, { users: (data.users || []).map(function (item) { return item === record ? Object.assign({}, item, { contextViewPreference: mode }) : item; }) });
+      try { saveUsers(nextData); } catch (saveError) { return { ok: false, error: "Unable to save context display preference: " + (saveError.message || saveError) }; }
+      return { ok: true, mode: mode };
+    }
+    if (userId !== "default") return { ok: false, error: "User not found." };
+    try {
+      var current = configModule.loadConfig() || {};
+      configModule.saveConfig(Object.assign({}, current, { contextViewPreference: mode }));
+      return { ok: true, mode: mode };
+    } catch (configSaveError) { return { ok: false, error: "Unable to save context display preference: " + (configSaveError.message || configSaveError) }; }
+  }
+
+  return { get: get, set: set, validMode: validMode, MODES: MODES };
+}
+
+module.exports = { attachContextViewPreferences: attachContextViewPreferences, validMode: validMode, MODES: MODES, PREFERENCE_KEY: PREFERENCE_KEY };