clay-server 4.8.2 → 5.0.0-beta.1

package/lib/salt-tree.js

@@ -0,0 +1,45 @@
+// Adapted from PlantUML Salt ElementTree, GPL-3.0-or-later; see LICENSES/plantuml-salt.txt.
+function measure(node) {
+  node.columns = [];
+  node.heights = [];
+  node.rows.forEach(function (row) {
+    row.forEach(function (item, c) { node.columns[c] = Math.max(node.columns[c] || 0, item.width + (c ? 0 : (item.level || 0) * 10)); });
+    node.heights.push(Math.max(0, ...row.map(function (item) { return item.height; })));
+  });
+  node.width = node.columns.reduce(function (a, b) { return a + b; }, 0) + Math.max(0, node.columns.length - 1) * 10 + 2;
+  node.height = node.heights.reduce(function (a, b) { return a + b; }, 0);
+}
+function draw(node, x, y, s, drawChild) {
+  var cy = y;
+  var skeleton = [];
+  var rows = [y];
+  var cols = [x, x + (node.columns[0] || 0) + 5];
+  node.columns.slice(1).forEach(function (width) { cols.push(cols[cols.length - 1] + width + 10); });
+  node.rows.forEach(function (row, r) {
+    var cx = x;
+    row.forEach(function (item, c) {
+      drawChild(item, c ? cx : x + (item.level || 0) * 10, cy, item.width, item.height);
+      cx += node.columns[c] + 10;
+    });
+    skeleton.push({ x: x + (row[0].level || 0) * 10 - 7, y: cy + node.heights[r] / 2 - 1 });
+    cy += node.heights[r]; rows.push(cy);
+  });
+  skeleton.forEach(function (item, i) {
+    if (skeleton[i + 1] && skeleton[i + 1].x > item.x) s.rect(item.x, item.y, 2, 2, 'none', '#888');
+    var parent;
+    for (var j = 0; j < i; j++) if (skeleton[j].x < item.x) parent = skeleton[j];
+    if (parent) {
+      s.line(parent.x + 1, parent.y + 3, parent.x + 1, item.y + 1, '#888');
+      s.line(parent.x + 1, item.y + 1, item.x - 1, item.y + 1, '#888');
+    }
+  });
+  var mode = node.style.slice(1);
+  var right = cols[cols.length - 1];
+  if (mode === '+') {
+    s.line(x, y, right, y, '#888'); s.line(x, cy, right, cy, '#888');
+    s.line(x, y, x, cy, '#888'); s.line(right, y, right, cy, '#888');
+  }
+  if (/[#-]/.test(mode)) rows.forEach(function (yy) { s.line(x, yy, right, yy, '#888'); });
+  if (/[#!]/.test(mode)) cols.forEach(function (xx) { s.line(xx, y, xx, cy, '#888'); });
+}
+module.exports = { measure: measure, draw: draw };

package/lib/sdk-bridge.js

@@ -44,7 +44,7 @@ function callMcpToolHandler(mcpServers, serverName, toolName, args) {
 
 // Merge in-process MCP servers with remote (extension-bridged) MCP servers.
 // Returns the merged object, or null if no servers exist.
-function mergeMcpServers(localServers, getRemoteFn) {
+function mergeMcpServers(localServers, getRemoteFn, session) {
   var merged = {};
   var hasAny = false;
   if (localServers) {
@@ -58,7 +58,7 @@ function mergeMcpServers(localServers, getRemoteFn) {
     console.log("[mergeMcpServers] local servers: null");
   }
   if (typeof getRemoteFn === "function") {
-    var remote = getRemoteFn();
+    var remote = getRemoteFn(session);
     if (remote) {
       var rk = Object.keys(remote);
       console.log("[mergeMcpServers] remote servers:", rk.join(", ") || "(none)");
@@ -713,7 +713,8 @@ function createSDKBridge(opts) {
     // This tool only prepares a read-only UI projection for the document the
     // agent is about to edit. The subsequent Edit/Write keeps its own normal
     // permission behavior.
-    if (toolName.indexOf("mcp__clay-documents__present_markdown_edit") === 0 ||
+    if (toolName === "mcp__clay-documents__present_wireframe" || toolName === "clay-documents__present_wireframe" ||
+        toolName.indexOf("mcp__clay-documents__present_markdown_edit") === 0 ||
         toolName.indexOf("clay-documents__present_markdown_edit") !== -1) {
       return { behavior: "allow", updatedInput: input };
     }
@@ -751,19 +752,6 @@ function createSDKBridge(opts) {
       return { behavior: "allow", updatedInput: input };
     }
 
-    // Auto-approve remote MCP tools that the user explicitly enabled in project settings.
-    // These are user-owned local MCP servers, so no additional permission prompt needed.
-    if (toolName.indexOf("mcp__") === 0 && getRemoteMcpServers) {
-      var _rmcp = getRemoteMcpServers();
-      if (_rmcp) {
-        var _mcpParts = toolName.split("__");
-        var _mcpServerName = _mcpParts.length >= 2 ? _mcpParts[1] : "";
-        if (_rmcp[_mcpServerName]) {
-          return { behavior: "allow", updatedInput: input };
-        }
-      }
-    }
-
     // Auto-approve safe Bash commands (read-only, non-destructive)
     // Applies to ALL sessions (mates and regular projects alike).
     // These are purely read-only commands that cannot modify files, install
@@ -1896,7 +1884,7 @@ function createSDKBridge(opts) {
         localMcpServers[userInputServer.name || "yoke-user-input"] = userInputServer;
       }
     }
-    var mergedMcpServers = mergeMcpServers(localMcpServers, getRemoteMcpServers) || undefined;
+    var mergedMcpServers = mergeMcpServers(localMcpServers, getRemoteMcpServers, session) || undefined;
     if (selectedUserInputMode === "fallback") {
       sessionToolDefs = sessionToolDefs.concat(yoke.userInput.fallbackToolDefs(sessionUserInputHandler, { maxQuestions: scheduleQuestionLimit }));
     }

package/lib/sdk-mcp-descriptors.js

@@ -18,7 +18,8 @@ function extractMcpDescriptors(mcpServers) {
       var toolDef = server.instance._registeredTools[toolName];
       var inputSchema = { type: "object", properties: {} };
       try {
-        if (toolDef.inputSchema) inputSchema = toJSONSchema(toolDef.inputSchema);
+        if (toolDef._clayInputSchema) inputSchema = toolDef._clayInputSchema;
+        else if (toolDef.inputSchema) inputSchema = toJSONSchema(toolDef.inputSchema);
       } catch (e) {
         throw new Error("Cannot serialize MCP tool schema " + serverName + "/" + toolName + ": " + e.message);
       }

package/lib/session-document-mcp-server.js

@@ -10,6 +10,15 @@ function getToolDefs(handlers) {
       path: { type: "string", description: "Project-relative or absolute path to the Markdown document that will be edited." },
     }, ["path"]),
     handler: function (args) { return handlers.present(args || {}); },
+  }, {
+    name: "present_wireframe",
+    description: "Open or update the temporary clay-sketch viewer in the right panel when the user wants to revise or discuss a wireframe. Supports nested layouts and common UI controls, not general UML or preprocessor directives. Supply complete Salt diagram source, a stable id reused across revisions, and a short title. This displays only; it never saves or edits files. Include the same source in a fenced clay-sketch response so the diagram remains in chat history.",
+    inputSchema: buildShape({
+      source: { type: "string", description: "Complete @startsalt/@endsalt source, or @startuml with a salt body (100 KB maximum)." },
+      id: { type: "string", description: "Stable design id, using letters, digits, hyphens or underscores (80 characters maximum)." },
+      title: { type: "string", description: "Short title for the viewer." },
+    }, ["source", "id"]),
+    handler: function (args) { return handlers.presentWireframe(args || {}); },
   }];
 }
 

package/lib/vendor-login-browser-worker.js

@@ -3,6 +3,7 @@ var readline = require("readline");
 var spawn = require("child_process").spawn;
 var chromium = require("playwright").chromium;
 var browser = null;
+var loginProxy = null;
 var page = null;
 var installing = null;
 var viewing = true;
@@ -22,7 +23,7 @@ async function launch() {
   var channels = ["chrome", "msedge", null];
   for (var i = 0; i < channels.length; i++) {
     try {
-      return await chromium.launch({ channel: channels[i] || undefined, headless: true, chromiumSandbox: true, timeout: 20000 });
+      return await chromium.launch({ channel: channels[i] || undefined, headless: true, chromiumSandbox: true, timeout: 20000, proxy: loginProxy ? { server: loginProxy.server } : undefined, args: loginProxy ? ["--force-webrtc-ip-handling-policy=disable_non_proxied_udp"] : [] });
     } catch (e) {
       if (closing) throw e;
     }
@@ -39,7 +40,7 @@ async function launch() {
     });
   });
   if (closing) throw new Error("Closed");
-  return chromium.launch({ headless: true, chromiumSandbox: true, timeout: 20000 });
+  return chromium.launch({ headless: true, chromiumSandbox: true, timeout: 20000, proxy: loginProxy ? { server: loginProxy.server } : undefined, args: loginProxy ? ["--force-webrtc-ip-handling-policy=disable_non_proxied_udp"] : [] });
 }
 
 async function capture() {
@@ -55,7 +56,8 @@ async function capture() {
   if (!closing) captureTimer = setTimeout(capture, 250);
 }
 
-async function start(url) {
+async function start(url, restrictedNetwork) {
+  if (restrictedNetwork) loginProxy = await require("./mcp-browser-proxy").createBrowserProxy();
   browser = await launch();
   if (closing) { await browser.close(); return; }
   var session = await browser.newBrowserCDPSession();
@@ -64,12 +66,19 @@ async function start(url) {
   finally { await session.detach(); }
   // Preserve the native version/platform and replace only the headless product token.
   var userAgent = version.userAgent.replace("HeadlessChrome/", "Chrome/");
-  var context = await browser.newContext({ viewport: viewport, acceptDownloads: false, userAgent: userAgent });
+  var context = await browser.newContext({ viewport: viewport, acceptDownloads: false, serviceWorkers: "block", userAgent: userAgent });
+  if (restrictedNetwork) await context.routeWebSocket("**/*", function (socket) { socket.close(); });
   await context.addInitScript(require("./vendor-login-browser-passkeys").disableLoginPasskeys);
   var callback = new URL(new URL(url).searchParams.get("redirect_uri"));
-  await context.route("**/*", function (route) {
+  await context.route("**/*", async function (route) {
     var target = new URL(route.request().url());
-    if (target.protocol === "https:" || (target.origin === callback.origin && target.pathname === callback.pathname)) return route.continue();
+    if (target.origin === callback.origin && target.pathname === callback.pathname) return route.continue();
+    if (target.protocol === "https:") {
+      if (restrictedNetwork) {
+        try { await require("./mcp-network").assertPublicUrl(target.href); } catch (error) { return route.abort(); }
+      }
+      return route.continue();
+    }
     return route.abort();
   });
   context.on("page", function (opened) {
@@ -120,6 +129,7 @@ async function close() {
   clearTimeout(captureTimer);
   if (installing) installing.kill();
   if (browser) await browser.close().catch(function () {});
+  if (loginProxy) loginProxy.close();
   process.exit(0);
 }
 
@@ -131,8 +141,8 @@ lines.on("line", function (line) {
   try { message = JSON.parse(line); } catch (e) { return; }
   if (message.type === "start" && !started) {
     started = true;
-    start(message.url).catch(function () {
-      status("Unable to open the sign-in browser. The host may need browser libraries or sandbox support. Use terminal sign-in to continue.", "error");
+    start(message.url, message.restrictedNetwork).catch(function () {
+      status("Unable to open the sign-in browser. The host may need browser libraries or sandbox support." + (message.restrictedNetwork ? " Retry or use an access token." : " Use terminal sign-in to continue."), "error");
     });
   } else if (message.type === "viewing") {
     viewing = !!message.value;

package/lib/vendor-login-browser.js

@@ -20,6 +20,12 @@ function loginUrl(value, vendor) {
 }
 
 function createLoginBrowser(options) {
+  var initial = null;
+  if (options.initialUrl) {
+    initial = new URL(options.initialUrl);
+    var callback = new URL(initial.searchParams.get("redirect_uri"));
+    if (options.vendor !== "mcp" || !options.restrictedNetwork || initial.protocol !== "https:" || initial.username || initial.password || !initial.searchParams.get("state") || !initial.searchParams.get("code_challenge") || callback.protocol !== "http:" || callback.hostname !== "127.0.0.1" || callback.pathname !== "/callback") throw new Error("Invalid MCP sign-in URL");
+  }
   var id = crypto.randomUUID();
   var dir = fs.mkdtempSync(path.join(os.tmpdir(), "clay-login-"));
   fs.chmodSync(dir, 0o700);
@@ -98,17 +104,17 @@ function createLoginBrowser(options) {
     });
     child.on("error", function () {
       statusPhase = "error";
-      status = "The sign-in browser could not start. Use terminal sign-in to continue.";
+      status = "The sign-in browser could not start." + (options.vendor === "mcp" ? " Retry or use an access token." : " Use terminal sign-in to continue.");
       send({ type: "vendor_login_browser_status", text: status, phase: statusPhase });
     });
     child.on("exit", function () {
       if (closed) return;
       statusPhase = "error";
-      status = "The sign-in browser closed. You can retry or use terminal sign-in.";
+      status = "The sign-in browser closed. You can retry.";
       send({ type: "vendor_login_browser_status", text: status, phase: statusPhase });
     });
     child.stdin.on("error", function () {});
-    write({ type: "start", url: url });
+    write({ type: "start", url: url, restrictedNetwork: !!options.restrictedNetwork });
   }
   function acceptUrl(value) {
     var url = loginUrl(value, options.vendor);
@@ -123,6 +129,7 @@ function createLoginBrowser(options) {
     });
   }, 250);
   timer.unref();
+  if (initial) start(initial.href);
   return {
     id: id,
     env: { BROWSER: wrapper, CLAY_LOGIN_URL_FILE: urlFile },

package/lib/yoke/adapters/codex.js

@@ -1853,25 +1853,8 @@ function createCodexAdapter(opts) {
           if (co.config) serverOpts.config = Object.assign(serverOpts.config, co.config);
         }
 
-        // Track 1: Read local MCP server definitions from ~/.clay/mcp.json
-        // and inject into Codex config so Codex manages them natively.
+        // Clay-managed external MCP runs through the owner-bound bridge.
         var mcpServerConfig = Object.assign({}, serverOpts.config.mcp_servers || {});
-        try {
-          var mcpLocal = require("../../mcp-local");
-          var localMcpServers = mcpLocal.readMergedServers();
-          var mcpNames = Object.keys(localMcpServers);
-          for (var mi = 0; mi < mcpNames.length; mi++) {
-            var ms = localMcpServers[mcpNames[mi]];
-            if (ms.command) {
-              mcpServerConfig[mcpNames[mi]] = { command: ms.command, args: ms.args || [] };
-              if (ms.env && Object.keys(ms.env).length > 0) {
-                mcpServerConfig[mcpNames[mi]].env = ms.env;
-              }
-            }
-          }
-        } catch (e) {
-          console.error("[codex] Failed to read local MCP config:", e.message);
-        }
 
         // Track 2: Add clay-tools bridge server for in-app + remote MCP tools.
         var bridgePath = require("path").join(__dirname, "..", "mcp-bridge-server.js");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "4.8.2",
+  "version": "5.0.0-beta.1",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js"
@@ -49,14 +49,18 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.287",
     "@lydell/node-pty": "^1.2.0-beta.3",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "@openai/codex": "^0.160.0",
     "@seald-io/nedb": "^4.1.2",
     "imapflow": "^1.7.8",
+    "ipaddr.js": "^2.5.0",
     "nodemailer": "^9.1.1",
     "playwright": "1.63.0",
     "qrcode-terminal": "^0.12.0",
+    "undici": "^6.13.0",
     "web-push": "^3.6.7",
-    "ws": "^8.18.0"
+    "ws": "^8.18.0",
+    "zod": "^4.6.5"
   },
   "license": "AGPL-3.0-only",
   "engines": {