clay-server 4.8.0-beta.1 → 4.8.0-beta.3

package/lib/project-shared-browser.js

@@ -0,0 +1,256 @@
+var activityHistory = require("./shared-browser-activity-history");
+var crypto = require("crypto");
+var policy = require("./shared-browser-policy");
+var browserTools = require("./shared-browser-tools");
+var createRuntime = require("./shared-browser-runtime").createRuntime;
+
+function attachSharedBrowser(ctx) {
+  var records = new Map();
+  var viewers = new Map();
+  var destroyed = false;
+  function allowed(session, ws) {
+    try {
+      if (ctx.isMate || !session || ctx.sm.sessions.get(session.localId) !== session) return false;
+      if (ctx.usersModule.isMultiUser()) {
+        var user = ctx.usersModule.findUserById(session.ownerId);
+        if (!user || (ws && (!ws._clayUser || String(ws._clayUser.id) !== String(user.id)))) return false;
+        var actor = { _clayUser: user };
+        if (!ctx.requestAccess.canAccessProject(actor, ctx.slug) || !ctx.requestAccess.hasPermission(actor, "terminal")) return false;
+      } else if (ws && !ctx.requestAccess.hasPermission(ws, "terminal")) return false;
+      if (ctx.osUsers && !ctx.getIdentity(session)) return false;
+      return true;
+    } catch (e) { return false; }
+  }
+  function identityKey(session) {
+    var identity = ctx.getIdentity(session);
+    return identity ? JSON.stringify([identity.uid, identity.gid, identity.home]) : "default";
+  }
+  function recordAllowed(record, ws) {
+    try { return allowed(record.session, ws) && record.ownerId === record.session.ownerId && record.identity === identityKey(record.session); }
+    catch (e) { return false; }
+  }
+  function requireAccess(session, ws) {
+    if (!allowed(session, ws)) throw new Error("Shared browser access is not permitted for this session");
+  }
+  function projection(record) {
+    if (!record) return null;
+    return { id: record.id, phase: record.phase, control: record.control, epoch: record.epoch, handoff: !!record.handoff,
+      url: record.url, width: record.width, height: record.height, activity: record.activity || null, activityHistory: record.activityHistory || [], pointer: record.pointer || null, error: record.error || "" };
+  }
+  function sessionRecords(session) {
+    return Array.from(records.values()).filter(function (record) { return record.session === session && recordAllowed(record); });
+  }
+  function selectRecord(session, id) {
+    var tabs = sessionRecords(session);
+    if (id) {
+      var record = records.get(id);
+      if (!record || record.session !== session || !recordAllowed(record)) throw new Error("Browser tab expired");
+      return record;
+    }
+    if (tabs.length > 1) throw new Error("Choose a browserId from status before operating a tab");
+    return tabs[0] || null;
+  }
+  function sendState(ws, session, record, present, focus) {
+    if (!ws || ws.readyState !== 1 || !allowed(session, ws) || (record && !recordAllowed(record, ws))) return;
+    ctx.sendTo(ws, { type: "shared_browser_state", sessionId: session.localId, browser: projection(record), browsers: sessionRecords(session).map(projection), present: !!present, focus: !!focus });
+  }
+  function broadcast(record, present) {
+    ctx.clients.forEach(function (ws) {
+      if (ctx.getSessionForWs(ws) === record.session) sendState(ws, record.session, record, present);
+    });
+  }
+  function watching(record, ws) {
+    return ws.readyState === 1 && viewers.get(ws) === record.id && ctx.getSessionForWs(ws) === record.session && recordAllowed(record, ws);
+  }
+  function visibility(record) {
+    if (!record.runtime) return;
+    var visible = false;
+    viewers.forEach(function (id, ws) { if (id === record.id && watching(record, ws)) visible = true; });
+    record.runtime.viewing(visible);
+  }
+  function end(record, reason) {
+    if (record.runtime) record.runtime.close();
+    record.runtime = null;
+    record.phase = "ended";
+    record.error = reason || "";
+    record.control = "user";
+    activityHistory.interruptActivity(record); record.pointer = null;
+    record.epoch++;
+    record.rejectReady(new Error(reason || "Browser ended"));
+    broadcast(record);
+  }
+  function receive(record, message) {
+    if (destroyed || records.get(record.id) !== record || !record.runtime) return;
+    if (!recordAllowed(record)) { end(record, "Browser access was revoked"); records.delete(record.id); return; }
+    if (message.type === "activity" || message.type === "pointer") {
+      if (message.epoch !== record.epoch || message.generation !== Number(record.session._sdkQueryGeneration || 0) || record.control !== "agent" || record.handoff) return;
+      record.activityGeneration = message.generation;
+      if (message.type === "activity") activityHistory.recordActivity(record, message.activity);
+      else record.pointer = message.pointer;
+      broadcast(record); return;
+    }
+    if ((record.activity || record.pointer) && record.activityGeneration !== Number(record.session._sdkQueryGeneration || 0)) {
+      activityHistory.interruptActivity(record); record.pointer = null; broadcast(record);
+    }
+    if (message.type === "ready") { record.phase = "live"; record.resolveReady(); }
+    if (message.type === "error") { end(record, message.error); return; }
+    if (message.url !== undefined) record.url = policy.visibleUrl(message.url);
+    if (message.width) { record.width = message.width; record.height = message.height; }
+    if (message.type === "frame") {
+      record.frame = { type: "shared_browser_frame", sessionId: record.session.localId, browserId: record.id,
+        data: message.data, width: record.width, height: record.height };
+      viewers.forEach(function (id, ws) {
+        if (watching(record, ws) && ws.bufferedAmount < 1024 * 1024) ctx.sendTo(ws, record.frame);
+      });
+      visibility(record);
+    } else broadcast(record);
+  }
+  function create(session, control, newTab) {
+    requireAccess(session);
+    var tabs = sessionRecords(session);
+    var previous = !newTab && tabs.find(function (record) { return record.runtime && record.control === control; });
+    if (previous) return previous;
+    if (tabs.length >= 12) {
+      var expired = tabs.find(function (record) { return !record.runtime; });
+      if (expired) records.delete(expired.id);
+      else throw new Error("Close a browser tab before opening another");
+    }
+    var active = 0;
+    records.forEach(function (record) { if (record.runtime && record.ownerId === session.ownerId) active++; });
+    if (active >= 4) throw new Error("End another browser before opening more than four active tabs");
+    var record = { session: session, ownerId: session.ownerId, identity: identityKey(session), id: crypto.randomUUID(), phase: "starting", control: control, epoch: 0,
+      url: "", width: 1280, height: 800, touched: Date.now(), runtime: null, frame: null };
+    record.ready = new Promise(function (resolve, reject) { record.resolveReady = resolve; record.rejectReady = reject; });
+    record.ready.catch(function () {});
+    records.set(record.id, record);
+    try {
+      record.runtime = (ctx.createRuntime || createRuntime)({ identity: ctx.getIdentity(session), onEvent: function (message) { receive(record, message); } });
+    } catch (e) { end(record, e.message); }
+    broadcast(record, true);
+    return record;
+  }
+  async function changeControl(record, control) {
+    if (!record.runtime) throw new Error("Open a browser first");
+    record.control = control;
+    activityHistory.interruptActivity(record); record.pointer = null;
+    record.epoch++;
+    record.touched = Date.now();
+    record.handoff = true;
+    var epoch = record.epoch;
+    broadcast(record);
+    try {
+      await record.runtime.control(epoch);
+      if (record.runtime && record.epoch === epoch) { record.handoff = false; broadcast(record); }
+    } catch (e) { if (record.runtime && record.epoch === epoch) end(record, e.message); }
+
+  }
+  async function run(session, record, actor, action, event, intent) {
+    requireAccess(session);
+    if (!record || !record.runtime || !recordAllowed(record)) throw new Error("Open a browser first");
+    if (record.handoff) throw new Error("Browser control is changing; wait for the handoff");
+    if (action !== "inspect" && record.control !== actor) throw new Error(actor === "agent" ? "The user controls this browser. Ask them to choose Give control." : "The Driver controls this browser. Choose Take control first.");
+    var epoch = record.epoch;
+    var generation = Number(session._sdkQueryGeneration || 0);
+    await record.ready;
+    if (actor === "agent" && Number(session._sdkQueryGeneration || 0) !== generation) throw new Error("Browser request belongs to an older query");
+    requireAccess(session);
+    if (!recordAllowed(record) || !record.runtime || record.epoch !== epoch) throw new Error("Browser control changed; retry after the handoff");
+    record.touched = Date.now();
+    var result;
+    try { result = await record.runtime.request(action, event, epoch, actor === "agent" ? { intent: intent || "", generation: generation } : null); }
+    catch (error) {
+      if (actor === "agent" && record.epoch === epoch && record.activity && record.activity.phase === "running") {
+        activityHistory.recordActivity(record, Object.assign({}, record.activity, { phase: "failed" })); broadcast(record);
+      }
+      throw error;
+    }
+    requireAccess(session);
+    if (actor === "agent" && Number(session._sdkQueryGeneration || 0) !== generation) throw new Error("Browser result belongs to an older query");
+    if (!recordAllowed(record) || records.get(record.id) !== record || record.epoch !== epoch) throw new Error("Browser control changed during the action");
+    return result;
+  }
+  async function tool(session, args) {
+    try {
+      requireAccess(session);
+      if (args.intent !== undefined && (typeof args.intent !== "string" || args.intent.length > 160)) throw new Error("Browser intent must be at most 160 characters");
+      var record = args.action === "status" || args.action === "open" ? null : selectRecord(session, args.browserId);
+      var value;
+      if (args.action === "status") value = { browsers: sessionRecords(session).map(projection) };
+      else if (args.action === "open") {
+        var url = args.url ? policy.browserUrl(args.url) : null;
+        record = args.browserId ? selectRecord(session, args.browserId) : create(session, "agent", args.newTab === true);
+        if (url) await run(session, record, "agent", "action", { kind: "navigate", url: url }, args.intent);
+        value = projection(record);
+      } else if (args.action === "finish") {
+        if (!record || record.control !== "agent") throw new Error("The Driver does not control this browser");
+        await changeControl(record, "user"); value = projection(record);
+      } else if (args.action === "inspect") {
+        value = await run(session, record, "agent", "inspect", null, args.intent);
+        value.browserId = record.id;
+        var image = value.image; delete value.image;
+        return { content: [{ type: "text", text: JSON.stringify(value) }, { type: "image", mimeType: "image/jpeg", data: image }] };
+      } else {
+        value = await run(session, record, "agent", "action", policy.validateAction(Object.assign({}, args, { kind: args.action })), args.intent);
+      }
+      return { content: [{ type: "text", text: JSON.stringify(value) }] };
+    } catch (e) { return { isError: true, content: [{ type: "text", text: e.message }] }; }
+  }
+  function handleMessage(ws, msg) {
+    if (!msg.type || msg.type.indexOf("shared_browser_") !== 0) return false;
+    var session = ctx.getSessionForWs(ws);
+    Promise.resolve().then(async function () {
+      requireAccess(session, ws);
+      if (String(msg.sessionId) !== String(session.localId)) throw new Error("Browser session changed");
+      var record;
+      if (msg.type === "shared_browser_state_request") { sendState(ws, session, sessionRecords(session)[0]); return; }
+      if (msg.type === "shared_browser_open") { record = create(session, "user", msg.newTab === true); sendState(ws, session, record, true, true); return; }
+      record = selectRecord(session, msg.browserId);
+      if (!record || !recordAllowed(record, ws) || msg.browserId !== record.id) throw new Error("Browser session expired");
+      if (msg.type === "shared_browser_view") {
+        if (msg.visible) { var previous = records.get(viewers.get(ws)); viewers.set(ws, record.id); if (previous && previous !== record) visibility(previous); if (record.frame) ctx.sendTo(ws, record.frame); }
+        else viewers.delete(ws);
+        visibility(record);
+      } else if (msg.type === "shared_browser_control") {
+        if (!["agent", "user"].includes(msg.control)) throw new Error("Invalid control mode");
+        await changeControl(record, msg.control);
+      } else if (msg.type === "shared_browser_close") {
+        end(record); records.delete(record.id);
+        sendState(ws, session, sessionRecords(session)[0]);
+        ctx.clients.forEach(function (peer) { if (peer !== ws && ctx.getSessionForWs(peer) === session) sendState(peer, session, sessionRecords(session)[0]); });
+      } else if (msg.type === "shared_browser_end") end(record);
+      else if (msg.type === "shared_browser_input") {
+        if (msg.epoch !== record.epoch) throw new Error("Browser control changed");
+        await run(session, record, "user", "action", policy.validateAction(msg.event));
+      }
+    }).catch(function (e) {
+      if (ws.readyState === 1) ctx.sendTo(ws, { type: "shared_browser_error", sessionId: msg.sessionId, error: e.message });
+    });
+    return true;
+  }
+  var sweep = setInterval(function () {
+    viewers.forEach(function (id, ws) { if (ws.readyState !== 1) viewers.delete(ws); });
+    records.forEach(function (record, key) {
+      if (!recordAllowed(record)) { end(record, "Browser session is no longer available"); records.delete(key); }
+      else if (Date.now() - record.touched > 30 * 60 * 1000) { end(record, "Browser expired after 30 minutes without activity"); records.delete(key); }
+      else visibility(record);
+    });
+  }, 15000);
+  sweep.unref();
+  function getToolDefs(session) {
+    var generation = Number(session && session._sdkQueryGeneration || 0);
+    return ctx.isMate ? [] : browserTools.getToolDefs(function (args) {
+      if (session && Number(session._sdkQueryGeneration || 0) !== generation) {
+        return Promise.resolve({ isError: true, content: [{ type: "text", text: "This browser tool belongs to an older query" }] });
+      }
+      return tool(session, args || {});
+    });
+  }
+  return {
+    handleMessage: handleMessage,
+    getToolDefs: getToolDefs,
+    getSystemPrompt: function () { return ctx.isMate ? "" : browserTools.PROMPT; },
+    createMcpServer: function (adapter, session) { return ctx.isMate || !adapter || typeof adapter.createToolServer !== "function" ? null : adapter.createToolServer({ name: "clay-shared-browser", version: "1.0.0", tools: getToolDefs(session) }); },
+    destroy: function () { destroyed = true; clearInterval(sweep); records.forEach(function (record) { end(record); }); records.clear(); viewers.clear(); },
+  };
+}
+module.exports = { attachSharedBrowser: attachSharedBrowser };

package/lib/project.js

@@ -62,6 +62,7 @@ var { attachDriverContinuation } = require("./project-driver-continuation");
 var driverContinuationAccess = require("./driver-continuation-access");
 var { attachSessionNotes, composeSystemPrompts } = require("./project-session-notes");
 var { attachSessionDocument } = require("./project-session-document");
+var { attachSharedBrowser } = require("./project-shared-browser");
 var { attachCapsuleCatalog } = require("./project-capsule-catalog");
 var { attachProjectWorkspaceQuery } = require("./project-workspace-query");
 var { attachProjectLogs } = require("./project-logs");
@@ -753,6 +754,15 @@ function createProjectContext(opts) {
       }
     },
   });
+  var _sharedBrowser = attachSharedBrowser({
+    slug: slug, isMate: isMate, sm: sm, clients: clients, sendTo: sendTo,
+    usersModule: usersModule, requestAccess: _requestAccess, osUsers: osUsers,
+    getSessionForWs: getSessionForWs,
+    getIdentity: function (session) {
+      var linuxUser = getLinuxUserForSession(session);
+      return linuxUser ? resolveOsUserInfo(linuxUser) : null;
+    },
+  });
   var _sessionDocument = attachSessionDocument({
     cwd: cwd,
     isMate: isMate,
@@ -832,6 +842,32 @@ function createProjectContext(opts) {
       return !usersModule.isMultiUser() || !!(ws._clayUser && ws._clayUser.id === session.ownerId);
     },
   });
+  var _sessionLinear = require("./project-session-linear").attachSessionLinear({
+    sm: sm, isMate: isMate, storage: opts.linearStorage, projectSlug: slug,
+    isMultiUser: usersModule.isMultiUser, sendTo: sendTo,
+    canAccess: function (ws) {
+      return !isMate && clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
+        !!(ws._clayUser && usersModule.findUserById(ws._clayUser.id) && opts.canAccessProjectSlug(ws._clayUser.id, slug)));
+    },
+    startWork: require('./project-linear-launch').attachLinearLaunch({
+      sm: sm, resolveDefaultAi: opts.resolveDefaultAi, getSdk: function () { return sdk; }, osUsers: osUsers,
+      getLinuxUserForSession: getLinuxUserForSession, ensureProjectAccessForSession: ensureProjectAccessForSession,
+      getProjectAccess: function () { return opts.getProjectAccess ? opts.getProjectAccess() : { visibility: 'public', ownerId: projectOwnerId || null }; },
+      onProcessingChanged: onProcessingChanged,
+    }),
+    canUse: function (session) {
+      if (session.hidden || session.delegated || session._pairDelegation || session._delegatedBy || require("./session-provenance").isWorker(session)) return false;
+      if (!usersModule.isMultiUser()) return true;
+      var owner = session.ownerId && usersModule.findUserById(session.ownerId);
+      return !!(owner && opts.canAccessProjectSlug && opts.canAccessProjectSlug(owner.id, slug));
+    },
+    canRead: function (caller, other) {
+      return !usersModule.isMultiUser() || usersModule.canAccessSession(caller.ownerId, other, opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public" });
+    },
+    canRefresh: function (ws, session) {
+      return !usersModule.isMultiUser() || !!(ws._clayUser && ws._clayUser.id === session.ownerId);
+    },
+  });
   var _mateKnowledge = attachProjectMateKnowledge({
     service: opts.mateKnowledgeService || null,
     sm: sm,
@@ -1014,6 +1050,8 @@ function createProjectContext(opts) {
     // get the read-only cross-project set only when the Mate registry confirms
     // authoritative builtin Clay.
     try {
+      var linearMcpConfig = _sessionLinear.createMcpServer(adapter, null);
+      if (linearMcpConfig) servers['clay-linear'] = linearMcpConfig;
       var githubMcpConfig = _sessionGithub.createMcpServer(adapter, null);
       if (githubMcpConfig) servers["clay-github"] = githubMcpConfig;
       var issuesMcpConfig = _issues.createMcpServer(adapter, null);
@@ -1045,6 +1083,9 @@ function createProjectContext(opts) {
       }
     }
 
+    var sharedBrowserConfig = _sharedBrowser.createMcpServer(adapter);
+    if (sharedBrowserConfig) servers["clay-shared-browser"] = sharedBrowserConfig;
+
     // Explicit agent signal for user-requested Markdown presentation.
     if (!isMate) {
       try {
@@ -1199,6 +1240,11 @@ function createProjectContext(opts) {
         }
         continue;
       }
+      if (name === "clay-linear" && forSession) {
+        var boundLinear = _sessionLinear.createMcpServer(adapter, forSession);
+        if (boundLinear) { filtered[name] = boundLinear; hasAny = true; }
+        continue;
+      }
       if (name === "clay-github" && forSession) {
         var boundGithub = _sessionGithub.createMcpServer(adapter, forSession);
         if (boundGithub) { filtered[name] = boundGithub; hasAny = true; }
@@ -1263,6 +1309,11 @@ function createProjectContext(opts) {
         }
         continue;
       }
+      if (name === "clay-shared-browser" && forSession) {
+        var boundBrowser = _sharedBrowser.createMcpServer(adapter, forSession);
+        if (boundBrowser) { filtered[name] = boundBrowser; hasAny = true; }
+        continue;
+      }
       if (name === "clay-documents" && forSession) {
         try {
           var boundDocuments = _sessionDocument.createMcpServer(adapter, forSession);
@@ -1374,10 +1425,12 @@ function createProjectContext(opts) {
         _sessionHandoff.getSystemPrompt(session),
         _driverContinuation.getSystemPrompt(session),
         _sessionDocument.getSystemPrompt(session),
+        _sharedBrowser.getSystemPrompt(session),
         _capsuleCatalog.getSystemPrompt(session),
         _projectLogs.getSystemPrompt(session),
         _issues.getSystemPrompt(session),
         _sessionGithub.getSystemPrompt(session),
+        _sessionLinear.getSystemPrompt(session),
         _scheduledTasks ? _scheduledTasks.getSystemPrompt(session) : "",
         _mateKnowledge.getSystemPrompt(session),
         _autonomousRun ? _autonomousRun.getSystemPrompt(session) : "",
@@ -1393,6 +1446,7 @@ function createProjectContext(opts) {
         .concat(_sessionHandoff.getToolDefs(session))
         .concat(_driverContinuation.getToolDefs(session, Number(session._sdkQueryGeneration || 0)))
         .concat(_sessionDocument.getToolDefs(session))
+        .concat(_sharedBrowser.getToolDefs(session))
         .concat(_debateProposal.getToolDefs(session))
         .concat(_mateCreationProposal.getToolDefs(session))
         .concat(_workspaceQuery.getDynamicToolDefs(session))
@@ -1400,6 +1454,7 @@ function createProjectContext(opts) {
         .concat(_projectLogs.getDynamicToolDefs(session))
         .concat(_issues.getDynamicToolDefs(session))
         .concat(_sessionGithub.getDynamicToolDefs(session))
+        .concat(_sessionLinear.getDynamicToolDefs(session))
         .concat(_mateKnowledge.getDynamicToolDefs(session))
         .concat(_loopInterview ? _loopInterview.getToolDefs(session) : [])
         .concat(_scheduledTasks ? _scheduledTasks.getToolDefs(session) : [])
@@ -1792,6 +1847,7 @@ function createProjectContext(opts) {
     if (_projectLogs.handleLogsMessage(ws, msg)) return;
     if (_issues.handleMessage(ws, msg)) return;
     if (_sessionGithub.handleMessage(ws, msg)) return;
+    if (_sessionLinear.handleMessage(ws, msg)) return;
 
     // --- Notifications (delegated to project-notifications.js) ---
     if (_notifications.handleNotificationMessage(ws, msg)) return;
@@ -1821,6 +1877,7 @@ function createProjectContext(opts) {
     if (_shellCommand.handleShellCommand(ws, msg)) return;
 
     // --- Vendor login flow (delegated to project-vendor-login.js) ---
+    if (_sharedBrowser.handleMessage(ws, msg)) return;
     if (_vendorLogin.handleVendorLoginMessage(ws, msg)) return;
 
     // --- Notes, terminals, context, user message (delegated to project-user-message.js) ---
@@ -2344,6 +2401,11 @@ function createProjectContext(opts) {
               inputSchema: normalizeToolSchema(continuationTools[cti].inputSchema),
             });
           }
+          var sharedTools = _sharedBrowser.getToolDefs(boundSession);
+          sharedTools.forEach(function (definition) {
+            tools.push({ server: "clay-shared-browser", name: definition.name, description: definition.description,
+              inputSchema: normalizeToolSchema(definition.inputSchema) });
+          });
           var documentTools = _sessionDocument.getToolDefs(boundSession);
           for (var dti = 0; dti < documentTools.length; dti++) {
             tools.push({
@@ -2363,6 +2425,7 @@ function createProjectContext(opts) {
           for (var cht = 0; cht < historyTools.length; cht++) tools.push(historyTools[cht]);
           tools = tools.concat(_issues.getBridgeTools(boundSession, normalizeToolSchema));
           tools = tools.concat(_sessionGithub.getBridgeTools(boundSession, normalizeToolSchema));
+          tools = tools.concat(_sessionLinear.getBridgeTools(boundSession, normalizeToolSchema));
           var logsTools = _projectLogs.getBridgeTools(boundSession, normalizeToolSchema);
           for (var plti = 0; plti < logsTools.length; plti++) tools.push(logsTools[plti]);
           var knowledgeTools = _mateKnowledge.getBridgeTools(boundSession, normalizeToolSchema);
@@ -2387,10 +2450,11 @@ function createProjectContext(opts) {
           var inAppNames = Object.keys(localMcp);
           for (var i = 0; i < inAppNames.length; i++) {
             if (inAppNames[i] === "clay-sessions" || inAppNames[i] === "clay-notes" || inAppNames[i] === "clay-handoff" || inAppNames[i] === "clay-documents") continue;
+            if (inAppNames[i] === "clay-shared-browser") continue;
             // Debate tools were added above only when this request had an
             // exact session. Never duplicate them or advertise the static,
             // intentionally unbound proposal server.
-            if (inAppNames[i] === "clay-debate" || inAppNames[i] === "clay-mate-creation" || inAppNames[i] === "clay-workspace" || inAppNames[i] === "clay-history" || inAppNames[i] === "clay-github" || inAppNames[i] === "clay-issues" || inAppNames[i] === "clay-logs" || inAppNames[i] === "clay-knowledge") continue;
+            if (inAppNames[i] === "clay-debate" || inAppNames[i] === "clay-mate-creation" || inAppNames[i] === "clay-workspace" || inAppNames[i] === "clay-history" || inAppNames[i] === "clay-github" || inAppNames[i] === "clay-linear" || inAppNames[i] === "clay-issues" || inAppNames[i] === "clay-logs" || inAppNames[i] === "clay-knowledge") continue;
             extractServerTools(inAppNames[i], localMcp[inAppNames[i]]);
           }
         }
@@ -2446,6 +2510,12 @@ function createProjectContext(opts) {
             }
           }
         }
+        if (boundSession && serverName === "clay-shared-browser") {
+          var sharedTools = _sharedBrowser.getToolDefs(boundSession);
+          for (var bti = 0; bti < sharedTools.length; bti++) {
+            if (sharedTools[bti].name === toolName) return Promise.resolve(sharedTools[bti].handler(args || {}));
+          }
+        }
         if (boundSession && serverName === "clay-documents") {
           var documentTools = _sessionDocument.getToolDefs(boundSession);
           for (var dti = 0; dti < documentTools.length; dti++) {
@@ -2476,6 +2546,7 @@ function createProjectContext(opts) {
         if (boundSession && serverName === "clay-history") {
           return _workspaceQuery.callHistoryBridgeTool(boundSession, toolName, args);
         }
+        if (boundSession && serverName === "clay-linear") return _sessionLinear.callBridgeTool(boundSession, toolName, args);
         if (boundSession && serverName === "clay-github") return _sessionGithub.callBridgeTool(boundSession, toolName, args);
         if (boundSession && serverName === "clay-issues") return _issues.callBridgeTool(boundSession, toolName, args);
         if (boundSession && serverName === "clay-logs") {
@@ -2484,7 +2555,7 @@ function createProjectContext(opts) {
         if (boundSession && serverName === "clay-knowledge") {
           return _mateKnowledge.callBridgeTool(boundSession, toolName, args);
         }
-        if (serverName === "clay-sessions" || serverName === "clay-notes" || serverName === "clay-handoff" || serverName === "clay-documents" || serverName === "clay-debate" || serverName === "clay-mate-creation" || serverName === "clay-workspace" || serverName === "clay-history" || serverName === "clay-github" || serverName === "clay-issues" || serverName === "clay-logs" || serverName === "clay-knowledge") {
+        if (serverName === "clay-sessions" || serverName === "clay-notes" || serverName === "clay-handoff" || serverName === "clay-documents" || serverName === "clay-shared-browser" || serverName === "clay-debate" || serverName === "clay-mate-creation" || serverName === "clay-workspace" || serverName === "clay-history" || serverName === "clay-github" || serverName === "clay-linear" || serverName === "clay-issues" || serverName === "clay-logs" || serverName === "clay-knowledge") {
           return Promise.reject(new Error("Session-bound tool requires a valid Clay session: " + serverName + "/" + toolName));
         }
         if (sessionOnly) return Promise.reject(new Error("Session tool not found: " + serverName + "/" + toolName));
@@ -2602,6 +2673,7 @@ function createProjectContext(opts) {
 
   // --- Destroy ---
   function destroy() {
+    _sharedBrowser.destroy();
     _vendorLogin.destroy();
     if (_scheduledMessages) _scheduledMessages.shutdown();
     if (_autonomousRun) _autonomousRun.shutdown();

package/lib/public/app.js

@@ -1,3 +1,4 @@
+import { initSharedBrowser } from './modules/shared-browser.js';
 import { initGenerationStop } from './modules/generation-stop.js';
 import { initIssueLinks } from './modules/clay-issue-links.js';
 import { initIssues, closeIssues } from './modules/issues.js';
@@ -269,6 +270,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   createStore({
     networkSettings: { loaded: false, busy: false, confirming: false, draft: "", saved: "", status: "", errorKind: "", requestId: 0 },
     vendorLoginBrowser: null,
+    sharedBrowser: null,
+    sharedBrowsers: [],
+    mcpSkillsWorkbench: {},
+    sharedBrowserOpen: false,
+    sharedBrowserUi: {},
     // session / routing
     basePath: basePath,
     wsPath: wsPath,
@@ -1175,6 +1181,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     fileViewerEl: $("file-viewer"),
   });
   initGitPanel();
+  initSharedBrowser();
   initWorkerPaneLock();
 
   // --- Terminal ---

package/lib/public/css/filebrowser.css

@@ -1054,12 +1054,6 @@
     flex-direction: column;
     overflow: hidden;
     flex-shrink: 0;
-    box-shadow:
-      4px 8px 18px rgba(var(--shadow-rgb), 0.14),
-      2px 2px 4px rgba(var(--shadow-rgb), 0.08),
-      inset 0 1px 0 rgba(255, 255, 255, 0.04);
-    animation: workbench-panel-in 0.18s cubic-bezier(0.2, 0.8, 0.2, 1);
-    transition: max-width 0.2s ease, width 0.2s ease, box-shadow 0.2s ease;
   }
   #file-viewer.hidden { display: none; }
   #file-viewer.file-viewer-wide {
@@ -1078,15 +1072,10 @@
     border: 0;
     border-radius: 0;
     background: var(--bg);
-    box-shadow: none;
-    animation: none;
   }
 }
 
-@keyframes workbench-panel-in {
-  from { opacity: 0; transform: translateX(10px) scale(0.995); }
-  to { opacity: 1; transform: translateX(0) scale(1); }
-}
+
 
 /* Narrow screens: full overlay */
 @media (max-width: 1023px) {
@@ -2026,11 +2015,6 @@
     flex-direction: column;
     overflow: hidden;
     flex-shrink: 0;
-    box-shadow:
-      4px 8px 18px rgba(var(--shadow-rgb), 0.14),
-      2px 2px 4px rgba(var(--shadow-rgb), 0.08),
-      inset 0 1px 0 rgba(255, 255, 255, 0.04);
-    animation: workbench-panel-in 0.18s cubic-bezier(0.2, 0.8, 0.2, 1);
   }
   #terminal-container.hidden { display: none; }
   #terminal-container.panel-fullscreen {
@@ -2041,17 +2025,10 @@
     margin: 0;
     border: 0;
     border-radius: 0;
-    box-shadow: none;
-    animation: none;
   }
 }
 
-@media (prefers-reduced-motion: reduce) {
-  #file-viewer,
-  #terminal-container {
-    animation: none;
-  }
-}
+
 
 /* Narrow screens: full overlay */
 @media (max-width: 1023px) {

package/lib/public/css/issues.css

@@ -1,20 +1,7 @@
 #issues-panel { position: relative; width: 50%; max-width: 720px; min-width: 360px; height: calc(100% - 16px); margin: 8px 8px 8px 10px; min-height: 0; align-self: center; display: flex; flex-direction: column; background: var(--bg); color: var(--text); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; flex-shrink: 0; }
-@media (min-width: 1024px) {
-  #issues-panel {
-    box-shadow:
-      4px 8px 18px rgba(var(--shadow-rgb), 0.14),
-      2px 2px 4px rgba(var(--shadow-rgb), 0.08),
-      inset 0 1px 0 rgba(255, 255, 255, 0.04);
-    animation: workbench-panel-in 0.18s cubic-bezier(0.2, 0.8, 0.2, 1);
-    transition: max-width 0.2s ease, width 0.2s ease, box-shadow 0.2s ease;
-  }
-}
-@media (prefers-reduced-motion: reduce) {
-  #issues-panel { animation: none; }
-}
 #issues-panel.hidden { display: none; }
 #issues-panel.issues-wide { width: 70%; max-width: 1200px; }
-#issues-panel.panel-fullscreen { width: 100%; max-width: none; min-width: 0; height: 100%; margin: 0; border: 0; border-radius: 0; box-shadow: none; animation: none; }
+#issues-panel.panel-fullscreen { width: 100%; max-width: none; min-width: 0; height: 100%; margin: 0; border: 0; border-radius: 0; }
 #issues-panel header { height: 48px; box-sizing: border-box; display: flex; align-items: center; gap: 12px; padding: 0 16px; border-bottom: 1px solid var(--border-subtle); flex: 0 0 auto; }
 #issues-panel .issues-title { display: inline-flex; align-items: center; gap: 7px; font-weight: 700; }
 #issues-panel .issues-title .lucide { width: 15px; color: var(--accent); }

package/lib/public/css/linear.css

@@ -0,0 +1,35 @@
+#linear-panel { width: 45%; max-width: 720px; min-width: 340px; min-height: 0; height: calc(100% - 16px); margin: 8px; align-self: center; display: flex; flex-direction: column; flex-shrink: 0; border: 1px solid var(--border); border-radius: 12px; background: var(--bg); color: var(--text); overflow: hidden; }
+#linear-panel.hidden { display: none; }
+.linear-topbar, .linear-search, .linear-actions { display: flex; align-items: center; gap: 8px; }
+.linear-topbar { padding: 10px 12px; border-bottom: 1px solid var(--border); }
+.linear-topbar strong { flex: 1; }
+#linear-panel button { font: inherit; color: var(--text-secondary); background: var(--bg-alt); border: 1px solid var(--border); border-radius: 6px; padding: 6px 9px; cursor: pointer; }
+#linear-panel button:hover { background: var(--input-bg); color: var(--text); }
+#linear-panel button:disabled { opacity: .5; cursor: wait; }
+#linear-panel button:focus-visible, #linear-panel input:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.linear-topbar svg { width: 16px; height: 16px; }
+.linear-search { padding: 12px; }
+.linear-search input { width: 100%; min-width: 0; padding: 8px; background: var(--input-bg); color: var(--text); border: 1px solid var(--border); border-radius: 6px; font: inherit; }
+.linear-notice { margin: 0; padding: 0 12px; color: var(--text-muted); font-size: 12px; }
+.linear-notice:not(:empty) { padding-bottom: 10px; }
+.linear-content { overflow: auto; min-height: 0; flex: 1; }
+.linear-empty { padding: 20px; color: var(--text-muted); }
+.linear-actions { flex-wrap: wrap; font-size: 12px; }
+#linear-panel a { color: var(--link); }
+#linear-panel .issue-row { width: 100%; text-align: left; }
+#linear-panel .issue-row small, #linear-panel .issue-row strong { display: block; }
+#linear-panel .issue-discussion article { padding: 14px 0; border-top: 1px solid var(--border-subtle); }
+#linear-panel .issue-doc-body { overflow-wrap: anywhere; }
+#linear-panel .issue-doc-body pre { overflow-x: auto; }
+.session-linear-link { max-width: 360px; min-width: 0; flex-shrink: 1; }
+.session-linear-link > span { white-space: nowrap; }
+.session-linear-link .linear-work-id, .session-linear-link .linear-work-state { flex-shrink: 0; }
+.session-linear-link .linear-work-title { overflow: hidden; text-overflow: ellipsis; min-width: 0; }
+.linear-work-state { color: var(--text-secondary); }
+#header-github-links:has(.session-linear-link) { max-width: min(440px, 40vw); }
+#header-github-links:has(.session-linear-link) > .session-github-links { display: flex; }
+@media (max-width: 767px) {
+  #header-github-links:has(.session-linear-link) { max-width: 170px; }
+  #header-github-links .linear-work-title, #header-github-links .linear-work-state { display: none; }
+}
+@media (max-width: 767px) { #linear-panel { position: fixed; inset: 8px; width: auto; max-width: none; min-width: 0; height: auto; z-index: 300; margin: 0; } }