clay-server 4.1.0 → 4.2.0-beta.2

package/lib/public/modules/clay-log-links.js

@@ -1,4 +1,5 @@
 import { enhanceClayIssueLinks, isExactClayIssueReference } from './clay-issue-links.js';
+import { enhanceGithubLinks } from './github-links.js';
 
 export function renderClayRecordLink(href, text) {
   if (!isExactClayLogReference(href) && !isExactClayIssueReference(href)) return null;
@@ -28,6 +29,7 @@ function createLogLink(ref, labelText) {
   var button = document.createElement("button");
   button.type = "button";
   button.className = "clayos-log-link";
+  button.classList.add("clayos-record-link");
   button.contentEditable = "false";
   button.dataset.logRef = ref;
   button.setAttribute("aria-label", "Open Project Log" + (labelText ? " " + labelText : ""));
@@ -79,4 +81,7 @@ export function enhanceClayLogLinks(root) {
     fragment.appendChild(document.createTextNode(text.slice(offset)));
     nodes[i].parentNode.replaceChild(fragment, nodes[i]);
   }
+  // Issues and Logs call this enhancer directly, without the transcript
+  // session-link pass. Keep external GitHub chips common to those surfaces.
+  enhanceGithubLinks(root);
 }

package/lib/public/modules/github-links.js

@@ -0,0 +1,115 @@
+import { escapeHtml } from './utils.js';
+import { iconHtml, refreshIcons } from './icons.js';
+
+var GITLAB_RESERVED = { admin: true, dashboard: true, explore: true, groups: true, help: true, profile: true, projects: true, public: true, search: true, snippets: true, users: true };
+
+function parseTarget(href, provider) {
+  if (typeof href !== "string" || !href) return null;
+  var url;
+  try { url = new URL(href); } catch (e) { return null; }
+  if (url.protocol !== "https:" || url.hostname !== provider.host || url.port || url.username || url.password) return null;
+  if (url.pathname.indexOf("//") !== -1 || /%(?:2f|5c)/i.test(url.pathname)) return null;
+  var parts = url.pathname.split("/").filter(function (part) { return part !== ""; });
+  var repoParts = parts;
+  var resourceParts = [];
+  if (provider.name === "github") {
+    repoParts = parts.slice(0, 2); resourceParts = parts.slice(2);
+  } else if (provider.separator) {
+    var separator = parts.indexOf(provider.separator);
+    if (separator !== -1) { repoParts = parts.slice(0, separator); resourceParts = parts.slice(separator + 1); }
+  }
+  if (repoParts.length < 2 || (provider.reserved && provider.reserved[repoParts[0].toLowerCase()])) return null;
+  if (provider.ownerPattern && !provider.ownerPattern.test(repoParts[0])) return null;
+  if (provider.repoPattern && !provider.repoPattern.test(repoParts[repoParts.length - 1])) return null;
+  for (var i = 0; i < repoParts.length; i++) {
+    if (!/^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,99})$/.test(repoParts[i])) return null;
+  }
+  if (provider.name === "github" && repoParts.length !== 2) return null;
+  if (provider.name === "gitlab" && resourceParts.length > 2) return null;
+  var target = { url: url, provider: provider.name, icon: provider.icon, cssClass: provider.cssClass, owner: repoParts.slice(0, -1).join("/"), repo: repoParts[repoParts.length - 1], kind: "repository", label: repoParts.join("/") };
+  if (!resourceParts.length) return target;
+  if (provider.name === "github") {
+    if (resourceParts.length === 1 && (resourceParts[0] === "issues" || resourceParts[0] === "pulls")) {
+      target.kind = resourceParts[0]; target.label = resourceParts[0] === "issues" ? "Issues" : "Pull requests"; return target;
+    }
+    if (resourceParts.length === 2 && (resourceParts[0] === "issues" || resourceParts[0] === "pull") && /^\d+$/.test(resourceParts[1])) {
+      target.kind = resourceParts[0] === "pull" ? "pull" : "issue"; target.number = resourceParts[1]; target.label = target.kind === "pull" ? "PR #" + target.number : "Issue #" + target.number; return target;
+    }
+    return null;
+  }
+  if (resourceParts.length === 1 && (resourceParts[0] === "issues" || resourceParts[0] === "merge_requests")) {
+    target.kind = resourceParts[0] === "issues" ? "issues" : "merge_requests"; target.label = target.kind === "issues" ? "Issues" : "Merge requests"; return target;
+  }
+  if (resourceParts.length === 2 && (resourceParts[0] === "issues" || resourceParts[0] === "merge_requests") && /^\d+$/.test(resourceParts[1])) {
+    target.kind = resourceParts[0] === "issues" ? "issue" : "merge_request"; target.number = resourceParts[1]; target.label = target.kind === "issue" ? "Issue #" + target.number : "MR !" + target.number; return target;
+  }
+  return null;
+}
+
+var GITHUB = { name: "github", displayName: "GitHub", host: "github.com", icon: "github", cssClass: "github-link-chip", ownerPattern: /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/, repoPattern: /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,99})$/ };
+var GITLAB = { name: "gitlab", displayName: "GitLab", host: "gitlab.com", icon: "gitlab", cssClass: "gitlab-link-chip", separator: "-", reserved: GITLAB_RESERVED };
+
+function plainLabel(text) {
+  return String(text || "").replace(/<[^>]*>/g, "").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/\s+/g, " ").trim();
+}
+
+function hasCustomLabel(target, text) {
+  var label = plainLabel(text);
+  return !!label && label !== target.url.href;
+}
+
+function accessibleLabel(target, text) {
+  var location = target.owner + "/" + target.repo;
+  var detail = target.kind === "repository" ? "" : " · " + target.label;
+  return hasCustomLabel(target, text) ? plainLabel(text) + " · " + location + detail : location + detail;
+}
+
+function chipMarkup(target, text) {
+  var custom = hasCustomLabel(target, text);
+  var primary = custom ? plainLabel(text) : target.owner + "/" + target.repo;
+  var meta = custom ? target.owner + "/" + target.repo + (target.kind === "repository" ? "" : " · " + target.label) : (target.kind === "repository" ? "" : target.label);
+  return iconHtml(target.icon, "github-link-icon") + '<span class="github-link-main">' + escapeHtml(primary) + '</span>' +
+    (meta && primary !== target.label ? '<span class="github-link-kind">' + escapeHtml(meta) + '</span>' : "");
+}
+
+function renderHostedLink(href, title, text, provider) {
+  var target = parseTarget(href, provider);
+  if (!target) return null;
+  return '<a class="' + provider.cssClass + ' hosted-link-chip" href="' + escapeHtml(target.url.href) + '" target="_blank" rel="noopener noreferrer"' +
+    (title ? ' title="' + escapeHtml(title) + '"' : ' title="Open ' + escapeHtml(accessibleLabel(target, text)) + ' on ' + provider.displayName + '"') +
+    ' aria-label="Open ' + escapeHtml(accessibleLabel(target, text)) + ' on ' + provider.displayName + '">' + chipMarkup(target, text) + '</a>';
+}
+
+export function githubLinkTarget(href) {
+  var target = parseTarget(href, GITHUB);
+  if (!target) return null;
+  return { owner: target.owner, repo: target.repo, kind: target.kind, number: target.number || null, href: target.url.href, label: target.label };
+}
+
+export function gitlabLinkTarget(href) {
+  var target = parseTarget(href, GITLAB);
+  if (!target) return null;
+  return { owner: target.owner, repo: target.repo, kind: target.kind, number: target.number || null, href: target.url.href, label: target.label };
+}
+
+export function renderGithubLink(href, title, text) { return renderHostedLink(href, title, text, GITHUB); }
+export function renderGitlabLink(href, title, text) { return renderHostedLink(href, title, text, GITLAB); }
+
+export function enhanceGithubLinks(root) {
+  if (!root || typeof document === "undefined") return;
+  var anchors = root.querySelectorAll("a[href]");
+  for (var i = 0; i < anchors.length; i++) {
+    var anchor = anchors[i];
+    if (anchor.closest("code, pre")) continue;
+    var target = parseTarget(anchor.getAttribute("href"), anchor.classList.contains("gitlab-link-chip") ? GITLAB : GITHUB);
+    if (!target) { target = parseTarget(anchor.getAttribute("href"), GITLAB); if (!target) continue; }
+    var text = anchor.textContent || "";
+    if (anchor.classList.contains("github-link-chip") || anchor.classList.contains("gitlab-link-chip")) {
+      anchor.setAttribute("target", "_blank"); anchor.setAttribute("rel", "noopener noreferrer"); continue;
+    }
+    anchor.classList.add("hosted-link-chip", target.cssClass); anchor.setAttribute("target", "_blank"); anchor.setAttribute("rel", "noopener noreferrer");
+    anchor.setAttribute("aria-label", "Open " + accessibleLabel(target, text) + " on " + (target.provider === "gitlab" ? "GitLab" : "GitHub"));
+    anchor.innerHTML = chipMarkup(target, text);
+  }
+  refreshIcons();
+}

package/lib/public/modules/markdown.js

@@ -4,6 +4,7 @@ import { getMermaidThemeVars } from './theme.js';
 import { store } from './store.js';
 import { enhanceClayLogLinks, renderClayRecordLink } from './clay-log-links.js';
 import { renderLocalFileLink, enhanceClayFileLinks } from './clay-file-links.js';
+import { renderGithubLink, renderGitlabLink } from './github-links.js';
 
 // Initialize markdown parser
 marked.use({ gfm: true, breaks: false });
@@ -11,11 +12,17 @@ marked.use({ gfm: true, breaks: false });
 // Open external links in a new tab
 marked.use({
   renderer: {
-    link({ href, title, text }) {
+    link({ href, title, tokens, text }) {
       var recordLink = renderClayRecordLink(href, text);
       if (recordLink) return recordLink;
       var localLink = renderLocalFileLink(href, title, text);
       if (localLink) return localLink;
+      var githubText = text;
+      if (tokens && this.parser && this.parser.parseInline) githubText = this.parser.parseInline(tokens);
+      var githubLink = renderGithubLink(href, title, githubText);
+      if (githubLink) return githubLink;
+      var gitlabLink = renderGitlabLink(href, title, githubText);
+      if (gitlabLink) return gitlabLink;
       var isExternal = href && (href.startsWith('http://') || href.startsWith('https://'));
       var titleAttr = title ? ' title="' + title + '"' : '';
       var targetAttr = isExternal ? ' target="_blank" rel="noopener noreferrer"' : '';
@@ -56,7 +63,7 @@ export function renderMarkdown(text) {
     .replace(/[\u201C\u201D]/g, '"')
     .replace(/[\u2018\u2019]/g, "'")
     .replace(/\*\*[ \t]+([^*\n]+?)[ \t]+\*\*/g, "**$1**"));
-  return DOMPurify.sanitize(marked.parse(normalized));
+  return DOMPurify.sanitize(marked.parse(normalized), { ADD_ATTR: ["target", "rel"] });
 }
 
 export function enhanceClaySessionLinks(root) {

package/lib/public/modules/mcp-ui.js

@@ -4,6 +4,8 @@
 import { getWs } from './ws-ref.js';
 import { refreshIcons } from './icons.js';
 import { setHttpMcpServers } from './app-misc.js';
+import { store } from './store.js';
+import { showToast } from './utils.js';
 
 var modal = null;
 var contentEl = null;
@@ -11,6 +13,60 @@ var _mcpServers = []; // { name, transport, toolCount, extensionEnabled, project
 var _extensionConnected = false;
 var _nativeHostConnected = false;
 var _extensionId = null;
+var MCP_PERMISSION_TIMEOUT_MS = 10000;
+var _permissionModeTimers = {};
+
+function pendingKey(projectSlug, sessionId, requestId) {
+  return String(projectSlug) + ":" + String(sessionId) + ":" + String(requestId);
+}
+
+function pendingMap() {
+  return store.get('mcpPermissionModePendingByTarget') || {};
+}
+
+function setPendingMap(next) {
+  store.set({ mcpPermissionModePendingByTarget: next });
+}
+
+function findPending(requestId) {
+  var pending = pendingMap();
+  var keys = Object.keys(pending);
+  for (var i = 0; i < keys.length; i++) {
+    if (pending[keys[i]].requestId === requestId) return { key: keys[i], value: pending[keys[i]] };
+  }
+  return null;
+}
+
+function clearPendingRequest(requestId) {
+  var found = findPending(requestId);
+  if (!found) return null;
+  if (_permissionModeTimers[requestId]) clearTimeout(_permissionModeTimers[requestId]);
+  delete _permissionModeTimers[requestId];
+  var next = Object.assign({}, pendingMap());
+  delete next[found.key];
+  setPendingMap(next);
+  return found.value;
+}
+
+export function clearMcpPermissionModePending() {
+  var requestIds = Object.keys(_permissionModeTimers);
+  for (var i = 0; i < requestIds.length; i++) clearTimeout(_permissionModeTimers[requestIds[i]]);
+  _permissionModeTimers = {};
+  if (Object.keys(pendingMap()).length) setPendingMap({});
+}
+
+export function mcpPermissionModeApplicability(state) {
+  if (!state.permissionCapabilities || state.permissionCapabilities.mcpOverride !== true) {
+    return { applicable: false, reason: "AI review is unavailable for this SDK session." };
+  }
+  if (state.effectivePermissionMode === "auto" || state.effectivePermissionMode === "bypassPermissions") {
+    return { applicable: true, reason: "" };
+  }
+  if (!state.effectivePermissionMode && state.currentMode === "auto") {
+    return { applicable: false, reason: "Waiting for the SDK to confirm Auto." };
+  }
+  return { applicable: false, reason: "AI review requires an active Auto session." };
+}
 
 export function initMcp() {
   modal = document.getElementById("mcp-modal");
@@ -26,6 +82,14 @@ export function initMcp() {
   if (closeBtn) closeBtn.addEventListener("click", closeMcpModal);
   if (backdrop) backdrop.addEventListener("click", closeMcpModal);
 
+  store.subscribe(function (state, prev) {
+    var changed = state.activeSessionId !== prev.activeSessionId || state.currentSlug !== prev.currentSlug ||
+      state.currentMode !== prev.currentMode || state.effectivePermissionMode !== prev.effectivePermissionMode ||
+      state.permissionCapabilities !== prev.permissionCapabilities || state.mcpPermissionModeOverrides !== prev.mcpPermissionModeOverrides ||
+      state.mcpPermissionModePendingByTarget !== prev.mcpPermissionModePendingByTarget || state.connected !== prev.connected;
+    if (changed && modal && !modal.classList.contains("hidden")) renderMcpServerList();
+  });
+
   // ESC to close
   document.addEventListener("keydown", function (e) {
     if (e.key === "Escape" && modal && !modal.classList.contains("hidden")) {
@@ -140,21 +204,47 @@ function renderMcpServerList() {
 
       // Per-server permission mode override (applies to the active session only).
       if (server.projectEnabled) {
+        var permissionState = store.snap();
+        var applicability = mcpPermissionModeApplicability(permissionState);
+        if (!applicability.applicable) {
+          var unavailable = document.createElement("span");
+          unavailable.className = "mcp-server-perm-reason";
+          unavailable.textContent = applicability.reason;
+          row.appendChild(unavailable);
+          contentEl.appendChild(row);
+          continue;
+        }
         var modeSel = document.createElement("select");
         modeSel.className = "mcp-server-perm-mode";
         modeSel.dataset.serverName = server.name;
-        modeSel.title = "Permission mode for this server (this session only)";
+        modeSel.title = "AI review policy for this server (this session only)";
+        var optInherit = document.createElement("option");
+        optInherit.value = "";
+        optInherit.textContent = "Inherit";
         var optAsk = document.createElement("option");
         optAsk.value = "default";
         optAsk.textContent = "Ask";
         var optAuto = document.createElement("option");
         optAuto.value = "auto";
-        optAuto.textContent = "Auto-approve";
+        optAuto.textContent = "AI review";
+        modeSel.appendChild(optInherit);
         modeSel.appendChild(optAsk);
         modeSel.appendChild(optAuto);
-        modeSel.value = server.permissionModeOverride === "auto" ? "auto" : "default";
+        var overrides = store.get('mcpPermissionModeOverrides') || {};
+        modeSel.value = overrides[server.name] === "auto" || overrides[server.name] === "default" ? overrides[server.name] : "";
+        var pending = pendingMap();
+        var pendingKeys = Object.keys(pending);
+        for (var p = 0; p < pendingKeys.length; p++) {
+          var pendingValue = pending[pendingKeys[p]];
+          if (pendingValue.projectSlug === permissionState.currentSlug && pendingValue.sessionId === permissionState.activeSessionId && pendingValue.serverName === server.name) {
+            modeSel.value = pendingValue.mode;
+            modeSel.disabled = true;
+            break;
+          }
+        }
+        if (!permissionState.connected) modeSel.disabled = true;
         // The row is a <label>; keep select interactions from toggling the checkbox.
-        modeSel.addEventListener("click", function (e) { e.stopPropagation(); e.preventDefault(); });
+        modeSel.addEventListener("click", function (e) { e.stopPropagation(); });
         modeSel.addEventListener("change", onPermissionModeChange);
         row.appendChild(modeSel);
       }
@@ -318,22 +408,69 @@ function onToggle(e) {
 
 function onPermissionModeChange(e) {
   var name = e.target.dataset.serverName;
-  var mode = e.target.value; // "default" | "auto"
-
-  // Remember locally so a re-render keeps the selection.
-  for (var i = 0; i < _mcpServers.length; i++) {
-    if (_mcpServers[i].name === name) {
-      _mcpServers[i].permissionModeOverride = mode;
-      break;
-    }
-  }
+  sendMcpPermissionMode(store.get('currentSlug'), store.get('activeSessionId'), name, e.target.value);
+}
 
+export function sendMcpPermissionMode(projectSlug, sessionId, serverName, mode) {
+  var state = store.snap();
+  var applicability = mcpPermissionModeApplicability(state);
   var ws = getWs();
-  if (ws && ws.readyState === 1) {
-    ws.send(JSON.stringify({
+  if (!state.connected || state.currentSlug !== projectSlug || state.activeSessionId !== sessionId || !applicability.applicable || !ws || ws.readyState !== 1) {
+    showToast(applicability.applicable ? "Reconnect before changing AI review policy." : applicability.reason, "error");
+    return false;
+  }
+  var pending = pendingMap();
+  var pendingKeys = Object.keys(pending);
+  for (var i = 0; i < pendingKeys.length; i++) {
+    var item = pending[pendingKeys[i]];
+    if (item.projectSlug === projectSlug && item.sessionId === sessionId && item.serverName === serverName) return false;
+  }
+  var requestId = typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : String(Date.now());
+  var key = pendingKey(projectSlug, sessionId, requestId);
+  var overrides = state.mcpPermissionModeOverrides || {};
+  var next = Object.assign({}, pending);
+  next[key] = {
+    projectSlug: projectSlug,
+    sessionId: sessionId,
+    requestId: requestId,
+    serverName: serverName,
+    mode: mode || "",
+    previousMode: overrides[serverName] || ""
+  };
+  setPendingMap(next);
+  _permissionModeTimers[requestId] = setTimeout(function () {
+    if (!clearPendingRequest(requestId)) return;
+    showToast("Changing AI review policy timed out.", "error");
+  }, MCP_PERMISSION_TIMEOUT_MS);
+  try {
+    var result = ws.send(JSON.stringify({
       type: "set_mcp_permission_mode_override",
-      serverName: name,
-      mode: mode,
+      projectSlug: projectSlug,
+      sessionId: sessionId,
+      requestId: requestId,
+      serverName: serverName,
+      mode: mode || null,
     }));
+    if (result === false) throw new Error("WebSocket send failed");
+  } catch (error) {
+    clearPendingRequest(requestId);
+    showToast("Failed to send the AI review policy change.", "error");
+    return false;
+  }
+  return true;
+}
+
+export function handleMcpPermissionModeResult(msg) {
+  var found = findPending(msg.requestId);
+  if (!found) return;
+  var pending = found.value;
+  if (msg.projectSlug && msg.projectSlug !== pending.projectSlug) return;
+  if (msg.sessionId !== pending.sessionId || msg.serverName !== pending.serverName) return;
+  clearPendingRequest(msg.requestId);
+  if (pending.projectSlug !== store.get('currentSlug') || pending.sessionId !== store.get('activeSessionId')) return;
+  if (!msg.ok) {
+    showToast(msg.error || "Failed to change AI review policy.", "error");
+    return;
   }
+  store.set({ mcpPermissionModeOverrides: msg.mcpPermissionModeOverrides || {} });
 }

package/lib/public/modules/pane-bridge.js

@@ -42,6 +42,8 @@ export function forwardPaneIssueReference(ref, projectSlug) {
   return true;
 }
 
+export { forwardPaneFileReference } from './pane-file-bridge.js';
+
 // Toggle without setContextView: panes use a transient override and must not
 // rewrite the user's server-persisted main-view preference.
 function togglePaneContextPanel() {

package/lib/public/modules/pane-file-bridge.js

@@ -0,0 +1,69 @@
+import { store } from './store.js';
+
+function paneFrame(host, source) {
+  if (!host || !source) return null;
+  var frames = host.querySelectorAll(".split-pane-frame");
+  for (var i = 0; i < frames.length; i++) {
+    if (frames[i].contentWindow === source) return frames[i];
+  }
+  return null;
+}
+
+function matchingPane(frame, split) {
+  if (!frame || !split || !split.panes) return null;
+  for (var i = 0; i < split.panes.length; i++) {
+    var pane = split.panes[i];
+    if (String(pane.slug) === String(frame.dataset.projectSlug) && String(pane.sessionId) === String(frame.dataset.sessionId)) return pane;
+  }
+  return null;
+}
+
+function hasLivePaneSource(frame, pane) {
+  if (!frame || !pane || typeof frame.src !== "string") return false;
+  var expected = "/p/" + encodeURIComponent(pane.slug) + "/?pane=1&session=" + encodeURIComponent(pane.sessionId);
+  try { return new URL(expected, window.location.href).href === frame.src; } catch (e) { return false; }
+}
+
+function validLocation(value) {
+  return value == null || (Number.isSafeInteger(value) && value > 0);
+}
+
+export function revealFilesPanel() {
+  var filesPanel = document.getElementById("sidebar-panel-files");
+  if (!filesPanel || !filesPanel.classList.contains("hidden")) return false;
+  var filesButton = document.getElementById("file-browser-btn");
+  if (!filesButton) return false;
+  filesButton.click();
+  return true;
+}
+
+export function forwardPaneFileReference(path, opts) {
+  if (!store.get('paneMode') || window.parent === window || typeof path !== "string" || !path) return false;
+  window.parent.postMessage({
+    type: "clay-pane-open-file",
+    path: path,
+    line: opts && opts.line != null ? opts.line : null,
+    column: opts && opts.column != null ? opts.column : null,
+    projectSlug: opts && opts.projectSlug ? opts.projectSlug : store.get('currentSlug'),
+    sessionId: opts && opts.sessionId != null ? String(opts.sessionId) : (store.get('activeSessionId') != null ? String(store.get('activeSessionId')) : null),
+  }, window.location.origin);
+  return true;
+}
+
+export function handlePaneFileMessage(event, host, openFile, openFiles) {
+  if (!event || event.origin !== window.location.origin || !host) return false;
+  var msg = event.data;
+  if (!msg || msg.type !== "clay-pane-open-file") return false;
+  var frame = paneFrame(host, event.source);
+  var state = store.snap();
+  var pane = matchingPane(frame, state.splitPanes);
+  if (!pane || !hasLivePaneSource(frame, pane) || String(pane.slug) !== String(state.currentSlug) || msg.projectSlug !== frame.dataset.projectSlug || String(msg.sessionId) !== String(frame.dataset.sessionId) || !validLocation(msg.line) || !validLocation(msg.column)) return true;
+  if (typeof msg.path !== "string" || !msg.path) return true;
+  if (!state.connected || typeof openFile !== "function") return true;
+  // The frame/session association was validated above. The host browser owns
+  // the read, so do not apply the pane session as a host-session restriction;
+  // the normal authenticated project filesystem checks remain authoritative.
+  var result = openFile(msg.path, { line: msg.line, column: msg.column, projectSlug: msg.projectSlug });
+  if (result !== false && typeof openFiles === "function") openFiles();
+  return true;
+}

package/lib/public/modules/pending-message-queue-model.js

@@ -2,6 +2,12 @@ export function activeQueueItems(items) {
   return (items || []).filter(function (item) { return item.state === "pending" || item.state === "claimed"; });
 }
 
+export function hasFutureScheduledPending(items) {
+  items = items || [];
+  for (var i = 0; i < items.length; i++) if (items[i].state === "pending" && items[i].schedule && items[i].schedule.ready !== true) return true;
+  return false;
+}
+
 export function moveQueueId(ids, id, direction, targetId) {
   var next = (ids || []).slice();
   var from = next.indexOf(id);

package/lib/public/modules/pending-message-queue-recovery.js

@@ -0,0 +1,73 @@
+// Queue recovery keeps an authorized queue scope distinct from WebSocket transport.
+
+function sameId(a, b) { return String(a) === String(b); }
+
+export function emptyQueue() { return { projectSlug: null, sessionId: null, revision: 0, paused: false, items: [], loading: false, error: "" }; }
+
+export function queueContext(state) {
+  state = state || {};
+  var available = !!state.currentSlug && !!state.activeSessionId && state.activeSessionMode !== "tui" && !state.dmMode && !state.mateProjectSlug;
+  return {
+    connected: !!state.connected,
+    projectSlug: state.currentSlug || null,
+    sessionId: state.activeSessionId || null,
+    accountId: state.myUserId || "default",
+    available: available,
+    enabled: available && !!state.connected,
+  };
+}
+
+export function sameQueueContext(a, b) {
+  return !!a && !!b && a.projectSlug === b.projectSlug && sameId(a.sessionId, b.sessionId) && a.accountId === b.accountId;
+}
+
+export function queueScopeChanged(state, previous) {
+  var next = queueContext(state);
+  var prior = queueContext(previous);
+  return !sameQueueContext(next, prior) || next.available !== prior.available || !!state.isMultiUserMode !== !!previous.isMultiUserMode;
+}
+
+export function queueReconnected(state, previous) {
+  return !!state.connected && !previous.connected && !queueScopeChanged(state, previous);
+}
+
+export function queueCanRender(queue, target) {
+  return !!target && target.available && !!queue && queue.projectSlug === target.projectSlug && sameId(queue.sessionId, target.sessionId);
+}
+
+export function createQueueHydrationRecovery() {
+  var timer = null;
+  var requestId = null;
+  function clear(id) {
+    if (id && requestId !== id) return;
+    if (timer) clearTimeout(timer);
+    timer = null;
+    requestId = null;
+  }
+  return {
+    schedule: function (id, retry) {
+      clear();
+      requestId = id;
+      timer = setTimeout(function () {
+        timer = null;
+        requestId = null;
+        retry();
+      }, 10000);
+      if (timer && timer.unref) timer.unref();
+    },
+    clear: clear,
+  };
+}
+
+export function canonicalQueue(queue, result) {
+  if (queue && queue.projectSlug === result.projectSlug && sameId(queue.sessionId, result.sessionId) && Number(result.revision) < Number(queue.revision)) return null;
+  return {
+    projectSlug: result.projectSlug,
+    sessionId: result.sessionId,
+    revision: Number(result.revision) || 0,
+    paused: result.paused === true,
+    items: Array.isArray(result.items) ? result.items : queue.items || [],
+    loading: false,
+    error: "",
+  };
+}