clay-server 4.1.0-beta.8 → 4.1.0

package/lib/project-session-notes.js

@@ -1,5 +1,6 @@
 var sessionNotesMcp = require("./session-notes-mcp-server");
 var lifecycle = require("./notes-lifecycle");
+var driverEligibility = require("./session-driver-eligibility");
 
 var MAX_NOTE_TEXT_CHARS = 20000;
 var MAX_ACTIVE_NOTES = 20;
@@ -172,13 +173,19 @@ function attachSessionNotes(ctx) {
     return toolResult(publicNote(created));
   }
 
-  // A session may only act on notes it created. Ownership is checked against the
-  // note's recorded origin and the server-bound caller, never against anything
-  // in the arguments.
+  // Cross-session closure requires a live, authorized Project Driver.
+  // Reopening retains the existing creator-only permission.
   function ownedNote(args, caller, verb) {
+    var authorized = typeof ctx.canUseSession === "function" && ctx.canUseSession(caller);
+    if (ctx.canUseSession && !authorized) {
+      return { error: "this session no longer has access to project notes" };
+    }
     var note = findNote(nm.list() || [], args && args.id);
     if (!note) return { error: "note not found: " + ((args && args.id) || "unknown") };
-    if (!note.origin || note.origin.sessionId !== caller.localId) {
+    var driverCanClose = verb === "close" && !ctx.isMate &&
+      driverEligibility.isEligibleDriverSession(caller) &&
+      authorized;
+    if (!driverCanClose && (!note.origin || note.origin.sessionId !== caller.localId)) {
       return { error: "this session can only " + verb + " notes it created" };
     }
     return { note: note };

package/lib/project-sessions.js

@@ -6,6 +6,7 @@ var { CODEX_DEFAULTS, getCodexConfig } = require("./codex-defaults");
 var updateSnooze = require("./update-snooze");
 var yoke = require("./yoke");
 var sessionVisibility = require("./session-visibility");
+var contextUsageModule = require("./context-usage");
 
 function vendorSupportsTui(vendor) {
   var info = yoke.getVendorInfo(vendor);
@@ -82,6 +83,7 @@ function formatAskUserAnswerAsMessage(input, answers) {
  *   getLatestVersion, setLatestVersion
  */
 function attachSessions(ctx) {
+  var contextUsage = contextUsageModule.attachContextUsage(ctx);
   var cwd = ctx.cwd;
   var slug = ctx.slug;
   var isMate = ctx.isMate;
@@ -108,6 +110,7 @@ function attachSessions(ctx) {
   var getLinuxUserForSession = ctx.getLinuxUserForSession;
   var ensureProjectAccessForSession = ctx.ensureProjectAccessForSession;
   var getOsUserInfoForWs = ctx.getOsUserInfoForWs;
+  var hydrateSkillCatalog = ctx.hydrateSkillCatalog || function () { return []; };
   function stopSession(session, actor) {
     if (!session) return false;
     session._pendingMessageDrainPaused = true;
@@ -568,6 +571,7 @@ function attachSessions(ctx) {
   }
 
   function handleSessionsMessage(ws, msg) {
+    if (contextUsage.handleMessage(ws, msg)) return true;
 
     if (msg.type === "push_subscribe") {
       var _pushUserId = ws._clayUser ? ws._clayUser.id : null;
@@ -981,6 +985,8 @@ function attachSessions(ctx) {
       if (msg.id && sm.sessions.has(msg.id) && msg.title) {
         var s = sm.sessions.get(msg.id);
         s.title = String(msg.title).substring(0, 100);
+        s.titleProvisional = false;
+        s.titleAutoGenerated = false;
         s.titleManuallySet = true;
         sm.saveSessionFile(s);
         sm.notifySessionRenamed(s.localId);
@@ -1679,6 +1685,7 @@ function attachSessions(ctx) {
         return true;
       }
 
+      if (decision === "allow_always" && pending.suppressAlwaysAllowRule) decision = "allow";
       if (decision === "allow" || decision === "allow_always") {
         if (decision === "allow_always") {
           if (!session.allowedTools) session.allowedTools = {};

package/lib/project-user-message.js

@@ -24,6 +24,7 @@ var fs = require("fs");
  *   pendingMessageQueue,
  *   loadContextSources, saveContextSources,
  *   digestDmTurn, gateMemory,
+ *   getProjectAccess, canAccessProjectSlug,
  *   adapter            - YOKE adapter instance
  */
 function attachUserMessage(ctx) {
@@ -55,6 +56,8 @@ function attachUserMessage(ctx) {
   var getLinuxUserForSession = ctx.getLinuxUserForSession;
   var ensureProjectAccessForSession = ctx.ensureProjectAccessForSession;
   var getOsUserInfoForWs = ctx.getOsUserInfoForWs;
+  var getProjectAccess = ctx.getProjectAccess;
+  var canAccessProjectSlug = ctx.canAccessProjectSlug;
 
   var hydrateImageRefs = ctx.hydrateImageRefs;
   var saveImageFile = ctx.saveImageFile;
@@ -99,6 +102,21 @@ function attachUserMessage(ctx) {
     }
   }
 
+  function canHumanManageNotes(ws) {
+    if (!usersModule.isMultiUser()) return true;
+    if (!ws || !ws._clayUser || !ws._clayUser.id) return false;
+    var actor = usersModule.findUserById(ws._clayUser.id);
+    if (!actor) return false;
+    if (typeof canAccessProjectSlug === "function" && !canAccessProjectSlug(actor.id, slug)) return false;
+    var access = typeof getProjectAccess === "function" ? getProjectAccess() : null;
+    return !!(access && !access.error && usersModule.canAccessProject(actor.id, access));
+  }
+
+  function noteDeleteResult(ws, msg, ok, error) {
+    sendTo(ws, { type: "note_delete_result", projectSlug: slug, noteId: msg.id || null,
+      requestId: msg.requestId || null, ok: !!ok, error: error || null });
+  }
+
   // --------------- Main handler ---------------
 
   function handleUserMessage(ws, msg, forcedSession, internal) {
@@ -171,6 +189,31 @@ function attachUserMessage(ctx) {
       return true;
     }
 
+    if (msg.type === "note_delete_permanently") {
+      if (!msg.id || !canHumanManageNotes(ws)) {
+        noteDeleteResult(ws, msg, false, "You are not authorized to delete notes in this project.");
+        return true;
+      }
+      var current = nm.list().filter(function (item) { return item && item.id === msg.id; })[0];
+      if (!current) {
+        noteDeleteResult(ws, msg, false, "Note not found.");
+        return true;
+      }
+      if (!notesLifecycle.isClosed(current)) {
+        noteDeleteResult(ws, msg, false, "Only closed notes can be permanently deleted.");
+        return true;
+      }
+      var removed = nm.removeClosed(msg.id);
+      if (!removed) {
+        noteDeleteResult(ws, msg, false, "The note changed before it could be deleted.");
+        return true;
+      }
+      send({ type: "note_deleted", id: removed.id });
+      noteDeleteResult(ws, msg, true, null);
+      syncNotesKnowledge();
+      return true;
+    }
+
     if (msg.type === "note_list_request") {
       sendTo(ws, { type: "notes_list", notes: nm.list() });
       return true;
@@ -303,22 +346,42 @@ function attachUserMessage(ctx) {
     // --- Schedule message for after rate limit resets ---
     if (msg.type === "schedule_message") {
       var schedSession = getSessionForWs(ws);
-      if (!schedSession || !msg.text || !msg.resetsAt) return true;
-      scheduleMessage(schedSession, msg.text, msg.resetsAt, ws._clayUser || null, ws);
+      var transportAccountId = (ws && ws._clayUser && ws._clayUser.id) ? String(ws._clayUser.id) : "default";
+      if (!schedSession || msg.projectSlug !== slug || String(msg.sessionId) !== String(schedSession && schedSession.localId) ||
+          (msg.accountId || "default") !== transportAccountId) {
+        if (msg.requestId) sendTo(ws, { type: "schedule_message_result", requestId: msg.requestId,
+          projectSlug: msg.projectSlug || slug, sessionId: msg.sessionId == null ? null : msg.sessionId,
+          accountId: transportAccountId, ok: false, error: "The scheduling session or account is stale.", scheduledMessage: null });
+        return true;
+      }
+      scheduleMessage(schedSession, msg.text || "", msg.resetsAt, ws._clayUser || null, ws,
+        { images: msg.images, pastes: msg.pastes }, msg.requestId || null, transportAccountId);
       return true;
     }
 
     if (msg.type === "cancel_scheduled_message") {
       var cancelSession = getSessionForWs(ws);
       if (!cancelSession) return true;
-      cancelScheduledMessage(cancelSession, ws._clayUser || null, ws, { jobId: msg.jobId, revision: msg.revision });
+      if (msg.projectSlug && msg.projectSlug !== slug) return true;
+      if (msg.sessionId != null && String(msg.sessionId) !== String(cancelSession.localId)) return true;
+      cancelScheduledMessage(cancelSession, ws._clayUser || null, ws, { jobId: msg.jobId, revision: msg.revision, queueRevision: msg.queueRevision, requestId: msg.requestId });
       return true;
     }
 
     if (msg.type === "send_scheduled_now") {
       var nowSession = getSessionForWs(ws);
-      if (!nowSession || !nowSession.scheduledMessage) return true;
-      sendScheduledMessageNow(nowSession, ws._clayUser || null, ws, { jobId: msg.jobId, revision: msg.revision });
+      var requestedContext = { projectSlug: slug, sessionId: nowSession ? nowSession.localId : msg.sessionId, revision: pendingMessageQueue ? pendingMessageQueue.getRevision() : 0, items: [], paused: false };
+      var controlResult;
+      if (!nowSession) controlResult = Object.assign({}, requestedContext, { ok: false, error: "The session is no longer available." });
+      else if (msg.projectSlug && msg.projectSlug !== slug) controlResult = Object.assign({}, requestedContext, { ok: false, error: "Project changed" });
+      else if (msg.sessionId != null && String(msg.sessionId) !== String(nowSession.localId)) controlResult = Object.assign({}, requestedContext, { ok: false, error: "Session changed" });
+      else if (!nowSession.scheduledMessage) controlResult = Object.assign({}, requestedContext, { ok: false, error: "The scheduled message is no longer available." });
+      else {
+        var sentNow = sendScheduledMessageNow(nowSession, ws._clayUser || null, ws, { jobId: msg.jobId, revision: msg.revision, queueRevision: msg.queueRevision, requestId: msg.requestId });
+        controlResult = pendingMessageQueue ? pendingMessageQueue.hydrate(nowSession, ws._clayUser || null) : { ok: sentNow === true, projectSlug: slug, sessionId: nowSession.localId, revision: 0, items: [], paused: false };
+        if (sentNow !== true) controlResult = Object.assign({}, controlResult, { ok: false, error: "Could not send the scheduled message." });
+      }
+      if (msg.requestId) sendTo(ws, { type: "pending_message_result", requestId: msg.requestId, result: controlResult });
       return true;
     }
 
@@ -459,6 +522,10 @@ function attachUserMessage(ctx) {
     function recordSessionTitle() {
       if (!session.title) {
         session.title = (msg.text || "Image").substring(0, 50);
+        // This title is an optimistic first-message label, not a semantic or
+        // explicit title. Persist its provenance so startQuery can preserve
+        // eligibility for model generation after this function returns.
+        session.titleProvisional = true;
         sm.saveSessionFile(session);
         sm.broadcastSessionList();
         // Sync auto-title to SDK

package/lib/project.js

@@ -46,6 +46,7 @@ var { attachVendorLogin } = require("./project-vendor-login");
 var { attachConnection } = require("./project-connection");
 var { attachProjectScheduledMessages } = require("./project-scheduled-messages");
 var { attachMcp } = require("./project-mcp");
+var { createSessionSkillCatalog } = require("./yoke/session-skill-catalog");
 var { createLocalMcp } = require("./mcp-local");
 var { attachEmail: attachEmailModule } = require("./project-email");
 var { attachSessionSpawn } = require("./project-session-spawn");
@@ -256,11 +257,20 @@ function createProjectContext(opts) {
   var serverPort = opts.port || 2633;
   var serverTls = opts.tls || false;
   var serverAuthToken = opts.authToken || null;
+  var mcpBridgeToken = opts.mcpBridgeToken || crypto.randomBytes(32).toString("hex");
   var latestVersion = null;
   var sessionTitleMigrationScheduled = false;
 
   // --- YOKE adapters (multi-vendor, lazy init) ---
-  var _yokeState = yoke.createAdapters({ cwd: cwd, slug: slug, osUsers: osUsers });
+  var _yokeState = yoke.createAdapters({
+    cwd: cwd,
+    slug: slug,
+    osUsers: osUsers,
+    clayPort: serverPort,
+    clayTls: serverTls,
+    clayAuthToken: serverAuthToken,
+    clayBridgeToken: mcpBridgeToken,
+  });
   var adapters = _yokeState.adapters;
   // A new project has no remembered vendor. Select the first installed
   // provider by the shared Claude -> Codex -> Kiro preference order.
@@ -555,6 +565,7 @@ function createProjectContext(opts) {
   // --- File/directory watcher engine (delegated to project-file-watch.js) ---
   var _fileWatch = attachFileWatch({
     requestAccess: _requestAccess, fsAsUser: fsAsUser,
+    osUsers: osUsers,
     cwd: cwd,
     send: send,
     sendTo: sendTo,
@@ -634,6 +645,8 @@ function createProjectContext(opts) {
       var access = opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public", ownerId: projectOwnerId || null };
       return !usersModule.isMultiUser() || !!(freshActor && (!opts.canAccessProjectSlug || opts.canAccessProjectSlug(freshActor.id, slug)) && usersModule.canAccessSession(freshActor.id, session, access));
     },
+    onItemCancelled: function (item) { return _scheduledMessages && _scheduledMessages.onQueueCancelled(item); },
+    onItemConsumed: function (item) { return _scheduledMessages && _scheduledMessages.onQueueConsumed(item); },
   });
 
   var sdk = null;
@@ -715,6 +728,15 @@ function createProjectContext(opts) {
   var nm = createNotesManager({ cwd: cwd, send: send, sendTo: sendTo });
   var _sessionNotes = attachSessionNotes({
     nm: nm,
+    canUseSession: function (session) {
+      if (!session || sm.sessions.get(session.localId) !== session) return false;
+      if (!usersModule.isMultiUser()) return true;
+      var owner = session.ownerId && usersModule.findUserById(session.ownerId);
+      if (!owner) return false;
+      var access = opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public", ownerId: projectOwnerId || null };
+      if (opts.canAccessProjectSlug && !opts.canAccessProjectSlug(owner.id, slug)) return false;
+      return usersModule.canAccessSession(owner.id, session, access) && (!osUsers || !!getLinuxUserForSession(session));
+    },
     send: send,
     isMate: isMate,
     broadcastWritten: function (message) {
@@ -1215,6 +1237,7 @@ function createProjectContext(opts) {
     clayPort: serverPort,
     clayTls: serverTls,
     clayAuthToken: serverAuthToken,
+    clayBridgeToken: mcpBridgeToken,
     getWorkerPermissionRouter: function () {
       return isMate ? null : _sessionPair.workerPermission;
     },
@@ -1360,6 +1383,8 @@ function createProjectContext(opts) {
     isDriverOperatedSession: function (session) {
       return !isMate && _sessionPair.workerPermission.isDriverOperated(session);
     },
+    pendingMessageQueue: _pendingMessageQueue,
+    consumePendingMessage: function (session) { return _userMessage && _userMessage.consumePendingMessage(session); },
   });
 
   // --- Loop engine (delegated to project-loop.js) ---
@@ -1409,6 +1434,9 @@ function createProjectContext(opts) {
     canExecuteScheduledTask: function (record) {
       return !!(_scheduledTaskExecution && _scheduledTaskExecution.runnable(record).ok);
     },
+    onScheduledRunTerminal: function (record, run) {
+      if (_scheduledTaskExecution) _scheduledTaskExecution.recordTerminal(record, run);
+    },
     onProcessingChanged: onProcessingChanged,
     hydrateImageRefs: hydrateImageRefs,
   });
@@ -1424,6 +1452,7 @@ function createProjectContext(opts) {
     getSdk: function () { return sdk; }, getLinuxUserForSession: getLinuxUserForSession,
     requiresLinuxUser: function () { return osUsers; },
     onProcessingChanged: onProcessingChanged,
+    recordResult: function (result) { return _projectLogs.recordScheduledResult(result); },
     authorize: function (record) {
       return authorizeStoredOwner(record, {
         usersModule: usersModule, osUsers: osUsers,
@@ -1433,6 +1462,7 @@ function createProjectContext(opts) {
       });
     },
   });
+  setTimeout(function () { _scheduledTaskExecution.syncTerminalResults(); }, 0);
 
   _scheduledTasks = attachScheduledTasks({
     cwd: cwd,
@@ -1544,8 +1574,8 @@ function createProjectContext(opts) {
   }
 
   // --- Schedule / cancel a message (used by WS handler and auto-continue) ---
-  function scheduleMessage(session, text, resetsAt, actorUser, targetWs) {
-    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs) : null;
+  function scheduleMessage(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) {
+    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) : null;
   }
 
   function cancelScheduledMessage(session, actorUser, targetWs, correlation) {
@@ -1579,8 +1609,8 @@ function createProjectContext(opts) {
     }
 
     // --- DM messages (delegated to server-level handler) ---
-    if (msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
-      if (typeof opts.onDmMessage === "function") opts.onDmMessage(ws, msg);
+    if (msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "default_vendor_get" || msg.type === "default_vendor_set" || msg.type === "context_view_get" || msg.type === "context_view_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
+      if (typeof opts.onDmMessage === "function") opts.onDmMessage(ws, msg, slug);
       return;
     }
     if (msg.type === "issue_reference_resolve" || msg.type === "home_clay_ask" || msg.type === "home_clay_session_resolve" || msg.type === "home_clay_log_resolve") {
@@ -1859,6 +1889,12 @@ function createProjectContext(opts) {
   }
 
   // --- Sessions/config/project handler (delegated to project-sessions.js) ---
+  var _sessionSkillCatalog = createSessionSkillCatalog({
+    cwd: cwd,
+    osUsers: osUsers,
+    getLinuxUser: getLinuxUserForSession,
+  });
+  sm.setSessionHydrator(_sessionSkillCatalog.hydrate);
   var _sessions = attachSessions({
     cwd: cwd,
     slug: slug,
@@ -1898,6 +1934,7 @@ function createProjectContext(opts) {
     getLinuxUserForSession: getLinuxUserForSession,
     ensureProjectAccessForSession: ensureProjectAccessForSession,
     getOsUserInfoForWs: getOsUserInfoForWs,
+    hydrateSkillCatalog: _sessionSkillCatalog.hydrate,
     hydrateImageRefs: hydrateImageRefs,
     onProcessingChanged: onProcessingChanged,
     broadcastPresence: broadcastPresence,
@@ -1927,6 +1964,7 @@ function createProjectContext(opts) {
     saveContextSources: saveContextSources,
     _email: _email,
     _notifications: _notifications,
+    _projectLogs: _projectLogs,
   });
 
   var _models = attachModels({
@@ -1996,6 +2034,7 @@ function createProjectContext(opts) {
     beginHumanPairTurn: function (session) { return _sessionPair.beginHumanTurn(session); },
     authorizePendingDispatch: function (session, actor, item) {
       if (!session || sm.sessions.get(session.localId) !== session || !item || item.projectSlug !== slug) return false;
+      if (_scheduledMessages && !_scheduledMessages.authorizePending(item, session)) return false;
       if (!isMate && _sessionPair.workerPermission && _sessionPair.workerPermission.isDriverOperated(session)) return false;
       if (!usersModule.isMultiUser()) return item.actorId === "default" || !!(actor && String(actor.id) === item.actorId);
       var freshActor = actor && actor.id && usersModule.findUserById(actor.id);
@@ -2025,6 +2064,8 @@ function createProjectContext(opts) {
     getSessionForWs: getSessionForWs,
     getLinuxUserForSession: getLinuxUserForSession,
     ensureProjectAccessForSession: ensureProjectAccessForSession,
+    getProjectAccess: function () { return opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public", ownerId: projectOwnerId || null }; },
+    canAccessProjectSlug: opts.canAccessProjectSlug || function () { return !usersModule.isMultiUser(); },
     getOsUserInfoForWs: getOsUserInfoForWs,
     hydrateImageRefs: hydrateImageRefs,
     saveImageFile: saveImageFile,
@@ -2107,6 +2148,12 @@ function createProjectContext(opts) {
   function getMcpBridgeHandler(sessionId, sessionOnly, queryGeneration) {
     var boundSession = Number.isInteger(sessionId) ? sm.sessions.get(sessionId) : null;
     var queryToolBridge = createSessionQueryToolBridge({ session: boundSession, sdk: sdk });
+    function sessionQueryValid() {
+      return !!boundSession
+        && Number.isInteger(queryGeneration)
+        && sm.sessions.get(boundSession.localId) === boundSession
+        && Number(boundSession._sdkQueryGeneration || 0) === queryGeneration;
+    }
     // Build set of local MCP server names to exclude (Codex handles these natively)
     var localMcpNames = {};
     try {
@@ -2121,6 +2168,7 @@ function createProjectContext(opts) {
     return {
       listTools: function () {
         var tools = [];
+        if (sessionOnly && !sessionQueryValid()) return Promise.resolve(tools);
         var toJSONSchema;
         var zod;
         try { zod = require("zod"); toJSONSchema = zod.toJSONSchema; } catch (e) { /* fallback */ }
@@ -2246,6 +2294,9 @@ function createProjectContext(opts) {
         return Promise.resolve(tools);
       },
       callTool: function (serverName, toolName, args) {
+        if (sessionOnly && !sessionQueryValid()) {
+          return Promise.reject(new Error("Session tool unavailable or older query: " + serverName + "/" + toolName));
+        }
         var queryCall = queryToolBridge.callTool(queryGeneration, serverName, toolName, args);
         if (queryCall) return queryCall;
         if (boundSession && serverName === "clay-sessions") {
@@ -2404,6 +2455,7 @@ function createProjectContext(opts) {
     getLatestVersion: function () { return latestVersion; },
     getTitle: function () { return title; },
     getProject: function () { return project; },
+    hydrateSkillCatalog: _sessionSkillCatalog.hydrate,
     // Exposed so the first websocket connection can lazily warm up the
     // adapters for this project (see project-connection handleConnection).
     warmup: function (linuxUser) {
@@ -2628,6 +2680,9 @@ function createProjectContext(opts) {
     handleDisconnection: handleDisconnection,
     handleHTTP: handleHTTP,
     getMcpBridgeHandler: getMcpBridgeHandler,
+    isMcpBridgeAuthenticated: function (req) {
+      return !!(req && req.headers && req.headers["x-clay-bridge-token"] && req.headers["x-clay-bridge-token"] === mcpBridgeToken);
+    },
     getStatus: getStatus,
     getSessionManager: function () { return sm; },
     createDelegatedSession: _delegatedSession.createDelegatedSession,

package/lib/public/app.js

@@ -28,7 +28,7 @@ import { initRewind, setRewindMode, showRewindModal, clearPendingRewindUuid, add
 import { initNotifications, showDoneNotification, playDoneSound, isNotifAlertEnabled, isNotifSoundEnabled } from './modules/notifications.js';
 import { initInput, clearPendingImages, handleInputSync, autoResize, builtinCommands, sendMessage, hasSendableContent, setScheduleBtnDisabled, setScheduleDelayMs, clearScheduleDelay } from './modules/input.js';
 import { initQrCode, triggerShare } from './modules/qrcode.js';
-import { initFileBrowser, loadRootDirectory, refreshTree, handleFsList, handleFsRead, handleDirChanged, refreshIfOpen, handleFileChanged, handleFileHistory, handleGitDiff, handleFileAt, getPendingNavigate, closeFileViewer, resetFileBrowser } from './modules/filebrowser.js';
+import { initFileBrowser, loadRootDirectory, reopenFileViewer, refreshTree, handleFsList, handleFsRead, handleDirChanged, refreshIfOpen, handleFileChanged, handleFileHistory, handleGitDiff, handleFileAt, getPendingNavigate, closeFileViewer, resetFileBrowser } from './modules/filebrowser.js';
 import { initGitPanel } from './modules/git-panel.js';
 import { initWorkerPaneLock } from './modules/worker-pane-lock.js';
 import { initAutonomousRun } from './modules/autonomous-run.js';
@@ -36,7 +36,7 @@ import { initLoopInterview } from './modules/loop-interview.js';
 import { initTerminal, openTerminal, closeTerminal, resetTerminals, handleTermList, handleTermCreated, handleTermOutput, handleTermResized, handleTermExited, handleTermClosed, sendTerminalCommand } from './modules/terminal.js';
 import { initContextSources, updateTerminalList, updateBrowserTabList, handleContextSourcesState, getActiveSources, hasActiveSources } from './modules/context-sources.js';
 import { initStickyNotes, handleNotesList, handleNoteCreated, handleNoteUpdated, handleNoteDeleted, hideNotes, showNotes, isNotesVisible, createNote, setBrowserRefresh, toggleNotesTemporaryVisibility } from './modules/sticky-notes.js';
-import { initNotesBrowser, openNotesBrowser, closeNotesBrowser, isNotesBrowserOpen, renderNotesBrowser, registerExclusiveClosers } from './modules/sticky-notes-browser.js';
+import { initNotesBrowser, openNotesBrowser, closeNotesBrowser, isNotesBrowserOpen, renderNotesBrowser } from './modules/sticky-notes-browser.js';
 import { initTheme, getThemeColor, getComputedVar, onThemeChange, getCurrentTheme, getChatLayout } from './modules/theme.js';
 import { initTools, resetToolState, saveToolState, restoreToolState, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionResolved, markPermissionCancelled, renderElicitationRequest, markElicitationResolved, renderPlanBanner, renderPlanCard, handleTodoWrite, handleTaskCreate, handleTaskUpdate, startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, addTurnMeta, resetTurnMetaCost, enableMainInput, getTools, getPlanContent, setPlanContent, isPlanFilePath, getTodoTools, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, updateSubagentProgress, initSubagentStop, closeToolGroup, removeToolFromGroup } from './modules/tools.js';
 import { initServerSettings, updateSettingsStats, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved, handleGlobalClaudeMdRead, handleGlobalClaudeMdWrite } from './modules/server-settings.js';
@@ -68,9 +68,10 @@ import { initHomeSidebar } from './modules/home-sidebar.js';
 import { openHomeMateAction } from './modules/home-mate-chat.js';
 import { initHomeSurfaceBoot } from './modules/home-surface-boot.js';
 import { rememberHomePrimarySurface } from './modules/home-surface.js';
-import { initRateLimit, handleRateLimitEvent as _rlHandleRateLimitEvent, updateRateLimitUsage as _rlUpdateRateLimitUsage, addScheduledMessageBubble as _rlAddScheduledMessageBubble, removeScheduledMessageBubble as _rlRemoveScheduledMessageBubble, handleFastModeState as _rlHandleFastModeState, getScheduledMsgEl, resetRateLimitState } from './modules/app-rate-limit.js';
+import { initRateLimit, handleRateLimitEvent as _rlHandleRateLimitEvent, updateRateLimitUsage as _rlUpdateRateLimitUsage, handleFastModeState as _rlHandleFastModeState, resetRateLimitState } from './modules/app-rate-limit.js';
 import { initCursors, handleRemoteCursorMove as _curHandleRemoteCursorMove, handleRemoteCursorLeave as _curHandleRemoteCursorLeave, handleRemoteSelection as _curHandleRemoteSelection, clearRemoteCursors as _curClearRemoteCursors, initCursorToggle } from './modules/app-cursors.js';
 import { initDefaultAi } from './modules/default-ai.js';
+import { requestDefaultVendor } from './modules/default-vendor.js';
 import { initFavicon, updateFavicon as _favUpdateFavicon, setSendBtnMode as _favSetSendBtnMode, blinkIO as _favBlinkIO, blinkSessionDot as _favBlinkSessionDot, updateCrossProjectBlink as _favUpdateCrossProjectBlink, startUrgentBlink as _favStartUrgentBlink, stopUrgentBlink as _favStopUrgentBlink, setActivity as _favSetActivity } from './modules/app-favicon.js';
 import { initHeader, closeSessionInfoPopover as _hdrCloseSessionInfoPopover, updateHistorySentinel as _hdrUpdateHistorySentinel, requestMoreHistory as _hdrRequestMoreHistory, prependOlderHistory as _hdrPrependOlderHistory } from './modules/app-header.js';
 import { initSessionActions } from './modules/session-actions.js';
@@ -286,6 +287,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     currentSlug: currentSlug,
     activeProjectSlug: null,
     sessionActivatedProjectSlug: null,
+    sessionListProjectSlug: null,
+    splitGroupsProjectSlug: null,
     socketPath: null,
     pendingHomeProjectSlug: null,
     currentProjectOwnerId: null,
@@ -323,6 +326,9 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     connected: false,
     fileReadRequest: null,
     pendingFileNavigation: null,
+    rightWorkbenchOwner: null,
+    rightWorkbenchRevision: 0,
+    fileViewerOpenRevision: 0,
     cursorSharingEnabled: false,
     cursorSharingHydrated: false,
     pendingOutboundMessages: [],
@@ -381,6 +387,12 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     projectLogsCanDelete: false,
     projectLogsUnread: 0,
     projectLogsSeenRevisions: {},
+    scheduledResultUnread: 0,
+    scheduledResultAutoFocusHandled: false,
+    scheduledResultFocusRef: null,
+    scheduledResultPendingReadRef: null,
+    scheduledResultSeenRefs: {},
+    scheduledResultSessionRequestId: null,
     issuesOpen: false,
     issuesView: "list",
     issuesSelected: null,
@@ -388,6 +400,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     issuesRequests: {},
     issuesViewRequest: null,
     issuesViewGeneration: 0,
+    issuesUpdateAvailable: null,
     issuesCache: {},
     issuesEpoch: 0,
     issuesSearchTimer: null,
@@ -418,6 +431,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     defaultAiState: { loading: false, saving: false, refreshRequestId: null, saveRequestId: null, catalogRequestIds: {}, catalogs: {}, preference: null, selection: null, installedVendors: [], accountAvailable: true, accountId: null, serverEpoch: null, canonicalRevision: 0, error: "" },
     defaultAiDraft: { vendor: "", model: "", effort: "" },
     defaultAiDraftDirty: false,
+    defaultVendorState: { loading: false, saving: false, getRequestId: null, saveRequestId: null, preference: null, preferencePresent: false, installedVendors: [], accountId: null, projectSlug: null, serverEpoch: null, canonicalRevision: 0, error: "" },
 
     // dm
     dmTargetUser: null,
@@ -434,6 +448,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     pendingShellCommandId: null,
     mateProjectSlug: null,
     myUserId: null,
+    contextViewPreferenceState: { mode: "off", canonicalMode: "off", preferencePresent: false, loading: false, saving: false, requestId: null, saveRequestId: null, pendingSaves: [], accountId: null, serverEpoch: null, rejectedEpoch: null, canonicalRevision: 0, error: "" },
+    contextViewOverride: null,
     isMultiUserMode: false,
     dmUnread: {},
     dmRemovedUsers: {},
@@ -469,6 +485,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     lastVendor: "",
     // Static adapter metadata sent before any vendor is initialized.
     vendorInfo: {},
+    // Rate-limit data is projected only for the displayed session/vendor.
+    rateLimitState: {},
     // How Claude sessions open: "gui" (default) or "tui". The server sends
     // claude_open_mode_changed on connect; this seeds it beforehand so the
     // new-session menu doesn't flash the TUI-only entry.
@@ -544,7 +562,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     newSessionBtn: newSessionBtn,
     headerTitleEl: headerTitleEl,
     showConfirm: showConfirm,
-    onFilesTabOpen: function () { loadRootDirectory(); },
+    onFilesTabOpen: function () {
+      reopenFileViewer();
+      loadRootDirectory();
+      if (isSchedulerOpen()) closeScheduler();
+    },
     requestKnowledgeList: function () { requestKnowledgeList(); },
     switchProject: function (slug) { switchProject(slug); },
     openTerminal: function () { openTerminal(); },
@@ -844,8 +866,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   // --- Rate Limit / Scheduled Messages / Fast Mode (delegated to app-rate-limit.js) ---
   function handleRateLimitEvent(msg) { _rlHandleRateLimitEvent(msg); }
   function updateRateLimitUsage(msg) { _rlUpdateRateLimitUsage(msg); }
-  function addScheduledMessageBubble(text, resetsAt) { _rlAddScheduledMessageBubble(text, resetsAt); }
-  function removeScheduledMessageBubble() { _rlRemoveScheduledMessageBubble(); }
   function handleFastModeState(state) { _rlHandleFastModeState(state); }
 
   // --- Prompt suggestion chips (delegated to app-rendering.js) ---
@@ -1011,7 +1031,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       // the project Mate DM preference therefore hides only Mate shortcuts.
       if (document.body) document.body.classList.add('is-multi-user');
     }
-    if (d.user && d.user.id) { store.set({ myUserId: d.user.id }); }
+    if (d.user && d.user.id) { store.set({ myUserId: d.user.id }); requestDefaultVendor(); }
     if (d.permissions) store.set({ permissions: d.permissions });
     if (d.mustChangePin) showForceChangePinOverlay();
     // Single-user mode: clear user strip skeletons immediately (no presence message will arrive)
@@ -1190,9 +1210,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   // The browser refreshes from note messages without the canvas module having
   // to import it, which would be a cycle.
   setBrowserRefresh(function () { if (isNotesBrowserOpen()) renderNotesBrowser(); });
-  // Opening the browser claims the single right workbench slot. Registered here
-  // so the browser module never imports the other tools.
-  registerExclusiveClosers([closeIssues, closeProjectLogs, closeScheduledTasks, closeFileViewer, closeTerminal]);
 
   // --- Sticky Notes sidebar button (create new note) ---
   var stickyNotesSidebarBtn = $("sticky-notes-sidebar-btn");
@@ -1231,10 +1248,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   }
 
   // Close the notes browser / scheduler panel when switching to other sidebar panels
-  var fileBrowserBtn = $("file-browser-btn");
   var gitPlacardMoreBtn = $("git-placard-more");
   var terminalSidebarBtn = $("terminal-sidebar-btn");
-  if (fileBrowserBtn) fileBrowserBtn.addEventListener("click", function () { closeIssues(); closeProjectLogs(); closeScheduledTasks(); if (isNotesBrowserOpen()) closeNotesBrowser(); if (isSchedulerOpen()) closeScheduler(); });
   if (gitPlacardMoreBtn) gitPlacardMoreBtn.addEventListener("click", function () { closeIssues(); closeProjectLogs(); closeScheduledTasks(); if (isNotesBrowserOpen()) closeNotesBrowser(); if (isSchedulerOpen()) closeScheduler(); });
   if (terminalSidebarBtn) terminalSidebarBtn.addEventListener("click", function () { closeIssues(); closeProjectLogs(); closeScheduledTasks(); if (isNotesBrowserOpen()) closeNotesBrowser(); if (isSchedulerOpen()) closeScheduler(); });
 

package/lib/public/css/avatar-imprints.css

@@ -1,4 +1,4 @@
-/* Clay Imprints use one consistent, pressed-square silhouette everywhere. */
+/* Local pixel avatars use one consistent, pressed-square silhouette everywhere. */
 .activity-inline-avatar,
 .ask-mate-avatar,
 .client-avatar,

package/lib/public/css/command-palette.css

@@ -513,6 +513,7 @@ body.mate-dm-active .search-clay-transcript .search-clay-message-user .bubble,
 @keyframes searchClaySpin { to { transform: rotate(360deg); } }
 
 .clayos-session-link,
+.clayos-issue-link,
 .clayos-log-link {
   display: inline-flex;
   align-items: center;
@@ -531,6 +532,7 @@ body.mate-dm-active .search-clay-transcript .search-clay-message-user .bubble,
   cursor: pointer;
 }
 .clayos-session-link::before,
+.clayos-issue-link::before,
 .clayos-log-link::before {
   content: "\2197";
   display: grid;
@@ -542,20 +544,28 @@ body.mate-dm-active .search-clay-transcript .search-clay-message-user .bubble,
   color: var(--accent);
   font-size: 12px;
 }
+.clayos-issue-link::before,
 .clayos-log-link::before { content: "\2261"; }
 .clayos-session-link > span,
+.clayos-issue-link > span,
 .clayos-log-link > span { font-weight: 620; }
 .clayos-session-link > small,
+.clayos-issue-link > small,
 .clayos-log-link > small { color: var(--text-muted); font-size: 10px; }
 .clayos-session-link:hover,
+.clayos-issue-link:hover,
 .clayos-log-link:hover { border-color: color-mix(in srgb, var(--accent) 52%, var(--border)); background: color-mix(in srgb, var(--accent) 11%, var(--bg-alt)); }
 .clayos-session-link:focus-visible,
+.clayos-issue-link:focus-visible,
 .clayos-log-link:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
 .clayos-session-link.is-loading,
+.clayos-issue-link.is-loading,
 .clayos-log-link.is-loading { opacity: 0.62; cursor: progress; }
 .clayos-session-link.is-loading::before,
+.clayos-issue-link.is-loading::before,
 .clayos-log-link.is-loading::before { animation: searchClaySpin 1.2s linear infinite; }
 .clayos-session-link.is-error,
+.clayos-issue-link.is-error,
 .clayos-log-link.is-error { border-color: color-mix(in srgb, var(--warning) 48%, var(--border)); }
 
 .search-clay-pending {
@@ -913,3 +923,13 @@ body.mate-dm-active .search-clay-transcript .search-clay-message-user .bubble,
   font-family: inherit;
   color: var(--text-muted);
 }
+
+.clayos-issue-link { max-width: min(100%, 30em); box-sizing: border-box; }
+.clayos-issue-link::before { content: "\25CE"; flex: 0 0 17px; }
+.clayos-issue-link[data-status="in_progress"]::before { color: #bd923f; }
+.clayos-issue-link[data-status="resolved"]::before { content: "\2713"; color: var(--brand-green); }
+.clayos-issue-link[data-status="closed"]::before { content: "\00D7"; color: var(--text-dimmer); }
+.clayos-issue-link > span { flex-shrink: 0; }
+.clayos-issue-link > small { min-width: 0; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+.clayos-log-link { max-width: 100%; box-sizing: border-box; }
+.clayos-log-link > small { min-width: 0; overflow-wrap: anywhere; line-height: 1.35; }