clay-server 5.1.0-beta.1 → 5.1.0-beta.2

package/lib/sessions.js

@@ -13,6 +13,7 @@ var projectAutonomousRun = require("./project-autonomous-run").projectAutonomous
 var restoreStoredRun = require("./project-autonomous-run").restoreStoredRun;
 
 function createSessionManager(opts) {
+  var privateMate = opts.isMate === true;
   var cwd = opts.cwd;
   var send = opts.send;          // function(obj) - broadcast to all clients
   var sendTo = opts.sendTo || null; // function(ws, obj) - send to specific client
@@ -182,6 +183,8 @@ function createSessionManager(opts) {
       if (session.vendor) metaObj.vendor = session.vendor;
       if (session.codexDynamicToolCatalogVersion) metaObj.codexDynamicToolCatalogVersion = session.codexDynamicToolCatalogVersion;
       if (session.codexUserInputToolCatalogVersion) metaObj.codexUserInputToolCatalogVersion = session.codexUserInputToolCatalogVersion;
+      if (session.userKnowledgeOwnerId) metaObj.userKnowledgeOwnerId = session.userKnowledgeOwnerId;
+      if (session.codexYouToolCatalogVersion) metaObj.codexYouToolCatalogVersion = session.codexYouToolCatalogVersion;
       if (session.codexLinearToolCatalogVersion) metaObj.codexLinearToolCatalogVersion = session.codexLinearToolCatalogVersion;
       if (session.codexSharedBrowserToolCatalogVersion) metaObj.codexSharedBrowserToolCatalogVersion = session.codexSharedBrowserToolCatalogVersion;
       if (session.codexIssuesToolCatalogVersion) metaObj.codexIssuesToolCatalogVersion = session.codexIssuesToolCatalogVersion;
@@ -206,6 +209,7 @@ function createSessionManager(opts) {
       if (session.scheduledTaskDraft) metaObj.scheduledTaskDraft = session.scheduledTaskDraft;
       if (session.scheduledTaskRun) metaObj.scheduledTaskRun = session.scheduledTaskRun;
       if (session.hidden) metaObj.hidden = true;
+      if (session.youCurator) metaObj.youCurator = true;
       metaObj.sessionVisibility = sessionVisibility.normalize(session.sessionVisibility);
       if (session.sessionVisibilityExplicit) metaObj.sessionVisibilityExplicit = true;
       if (session.bookmarked) metaObj.bookmarked = true;
@@ -222,6 +226,8 @@ function createSessionManager(opts) {
       if (session.homeDebatePlanning) metaObj.homeDebatePlanning = true;
       if (session.homeDebatePhase) metaObj.homeDebatePhase = session.homeDebatePhase;
       if (session.homeDebateInitialTopic) metaObj.homeDebateInitialTopic = session.homeDebateInitialTopic;
+      if (session.mateCreationMode) metaObj.mateCreationMode = true;
+      if (session.homeMateCreationPhase) metaObj.homeMateCreationPhase = session.homeMateCreationPhase;
       if (session.homeClayEntryRequestId) metaObj.homeClayEntryRequestId = session.homeClayEntryRequestId;
       if (session.homeClayEntryMode) metaObj.homeClayEntryMode = session.homeClayEntryMode;
       metaObj.sessionOriginId = provenanceMeta.sessionOriginId;
@@ -360,6 +366,8 @@ function createSessionManager(opts) {
       if (m.vendor) session.vendor = m.vendor;
       session.codexDynamicToolCatalogVersion = Number(m.codexDynamicToolCatalogVersion || 0);
       session.codexUserInputToolCatalogVersion = Number(m.codexUserInputToolCatalogVersion || 0);
+      session.userKnowledgeOwnerId = m.userKnowledgeOwnerId || null;
+      session.codexYouToolCatalogVersion = Number(m.codexYouToolCatalogVersion || 0);
       session.codexLinearToolCatalogVersion = Number(m.codexLinearToolCatalogVersion || 0);
       session.codexSharedBrowserToolCatalogVersion = Number(m.codexSharedBrowserToolCatalogVersion || 0);
       session.codexIssuesToolCatalogVersion = Number(m.codexIssuesToolCatalogVersion || 0);
@@ -376,6 +384,8 @@ function createSessionManager(opts) {
       if (m.homeDebatePlanning) session.homeDebatePlanning = true;
       if (m.homeDebatePhase) session.homeDebatePhase = m.homeDebatePhase;
       if (m.homeDebateInitialTopic) session.homeDebateInitialTopic = m.homeDebateInitialTopic;
+      if (m.mateCreationMode) session.mateCreationMode = true;
+      if (m.homeMateCreationPhase) session.homeMateCreationPhase = m.homeMateCreationPhase;
       if (m.homeClayEntryRequestId) session.homeClayEntryRequestId = m.homeClayEntryRequestId;
       if (m.homeClayEntryMode) session.homeClayEntryMode = m.homeClayEntryMode;
       if (m.ownerId) session.ownerId = m.ownerId;
@@ -404,10 +414,12 @@ function createSessionManager(opts) {
       session.scheduledTaskDraft = m.scheduledTaskDraft && typeof m.scheduledTaskDraft === "object" ? m.scheduledTaskDraft : null;
       session.scheduledTaskRun = m.scheduledTaskRun && typeof m.scheduledTaskRun === "object" ? m.scheduledTaskRun : null;
       session.hidden = m.hidden === true || !!session.scheduledTaskRun;
+      session.youCurator = m.youCurator === true;
       session.terminalId = null;
       session.runtimeMode = null;
       session.runtimeTerminalId = null;
-      session.sessionVisibility = sessionVisibility.restore(m);
+      session.isMate = privateMate;
+      session.sessionVisibility = privateMate ? "private" : sessionVisibility.restore(m);
       session.sessionVisibilityExplicit = m.sessionVisibilityExplicit === true;
       session.bookmarked = !!m.bookmarked;
       session.favoriteOrder = typeof m.favoriteOrder === "number" ? m.favoriteOrder : null;
@@ -534,6 +546,7 @@ function createSessionManager(opts) {
         terminalId: null,
         runtimeMode: null,
         runtimeTerminalId: null,
+        isMate: privateMate,
         sessionVisibility: "private",
         bookmarked: false,
         favoriteOrder: null,
@@ -624,9 +637,12 @@ function createSessionManager(opts) {
       backgroundTaskCount: backgroundTaskTiming.countUserTasks(s.activeBackgroundTasks),
       lastActivity: s.lastActivity || s.createdAt || 0,
       loop: loop,
+      homeDebatePlanning: s.homeDebatePlanning === true,
+      homeDebatePhase: s.homeDebatePhase || null,
       spawn: s.spawn || null,
       ownerId: s.ownerId || null,
-      sessionVisibility: sessionVisibility.normalize(s.sessionVisibility),
+      isMate: privateMate,
+      sessionVisibility: privateMate ? "private" : sessionVisibility.normalize(s.sessionVisibility),
       bookmarked: !!s.bookmarked,
       favoriteOrder: typeof s.favoriteOrder === "number" ? s.favoriteOrder : null,
       unread: unreadMap[s.localId] || 0,
@@ -735,7 +751,9 @@ function createSessionManager(opts) {
       history: [],
       messageUUIDs: [],
       ownerId: (sessionOpts && sessionOpts.ownerId) || null,
-      sessionVisibility: sessionVisibility.normalize(sessionOpts && sessionOpts.sessionVisibility),
+      userKnowledgeOwnerId: (sessionOpts && sessionOpts.userKnowledgeOwnerId) || null,
+      isMate: privateMate,
+      sessionVisibility: privateMate ? "private" : sessionVisibility.normalize(sessionOpts && sessionOpts.sessionVisibility),
       sessionVisibilityExplicit: !!(sessionOpts && sessionOpts.sessionVisibility === "shared"),
       bookmarked: false,
       favoriteOrder: null,
@@ -786,7 +804,9 @@ function createSessionManager(opts) {
       history: [],
       messageUUIDs: [],
       ownerId: (sessionOpts && sessionOpts.ownerId) || null,
-      sessionVisibility: sessionVisibility.normalize(sessionOpts && sessionOpts.sessionVisibility),
+      userKnowledgeOwnerId: (sessionOpts && sessionOpts.userKnowledgeOwnerId) || null,
+      isMate: privateMate,
+      sessionVisibility: privateMate ? "private" : sessionVisibility.normalize(sessionOpts && sessionOpts.sessionVisibility),
       sessionVisibilityExplicit: !!(sessionOpts && sessionOpts.sessionVisibility === "shared"),
       bookmarked: false,
       favoriteOrder: null,
@@ -900,7 +920,7 @@ function createSessionManager(opts) {
     var _sessionVendor = session.vendor || defaultVendor || "claude";
     var _vendorCaps = _capsByVendor[_sessionVendor] || {};
     var _permissionState = require("./session-permission-mode").clientState(session, "default", defaultVendor);
-    _send({ type: "session_switched", id: localId, sessionOriginId: session.sessionOriginId || null, cliSessionId: session.cliSessionId || null, loop: session.loop || null, vendor: session.vendor || null, model: session.model || null, effort: session.effort || null, hasHistory: (session.history && session.history.length > 0), capabilities: _vendorCaps, isProcessing: !!session.isProcessing, mode: session.mode || "gui", terminalId: typeof session.terminalId === "number" ? session.terminalId : null, runtimeMode: session.runtimeMode || null, runtimeTerminalId: typeof session.runtimeTerminalId === "number" ? session.runtimeTerminalId : null, tuiSuspended: !!session.tuiSuspended, dangerouslySkipPermissions: !!session.dangerouslySkipPermissions, permissionMode: _permissionState.requestedPermissionMode, effectivePermissionMode: _permissionState.effectivePermissionMode, permissionCapabilities: _permissionState.permissionCapabilities, mcpPermissionModeOverrides: _permissionState.mcpPermissionModeOverrides, autonomousRun: projectAutonomousRun(session.autonomousRun), loopInterviewBrief: session.loopInterviewBrief || null, loopInterviewHandoff: session.loopInterviewHandoff || null, scheduledTaskDraft: session.scheduledTaskDraft || null });
+    _send({ type: "session_switched", id: localId, sessionOriginId: session.sessionOriginId || null, sessionRole: sessionProvenance.isWorker(session) ? "worker" : "driver", cliSessionId: session.cliSessionId || null, loop: session.loop || null, vendor: session.vendor || null, model: session.model || null, effort: session.effort || null, hasHistory: (session.history && session.history.length > 0), capabilities: _vendorCaps, isProcessing: !!session.isProcessing, mateCreation: session.mateCreationMode === true, mateCreationPhase: session.homeMateCreationPhase || null, debatePlanning: session.debateSetupMode === true, debatePhase: session.homeDebatePhase || null, mode: session.mode || "gui", terminalId: typeof session.terminalId === "number" ? session.terminalId : null, runtimeMode: session.runtimeMode || null, runtimeTerminalId: typeof session.runtimeTerminalId === "number" ? session.runtimeTerminalId : null, tuiSuspended: !!session.tuiSuspended, dangerouslySkipPermissions: !!session.dangerouslySkipPermissions, permissionMode: _permissionState.requestedPermissionMode, effectivePermissionMode: _permissionState.effectivePermissionMode, permissionCapabilities: _permissionState.permissionCapabilities, mcpPermissionModeOverrides: _permissionState.mcpPermissionModeOverrides, autonomousRun: projectAutonomousRun(session.autonomousRun), loopInterviewBrief: session.loopInterviewBrief || null, loopInterviewHandoff: session.loopInterviewHandoff || null, scheduledTaskDraft: session.scheduledTaskDraft || null });
     // Send vendor-specific slash commands
     var _vendorCmds = (session.slashCommandsByVendor && session.slashCommandsByVendor[_sessionVendor])
       || session.slashCommands
@@ -1201,13 +1221,15 @@ function createSessionManager(opts) {
       lastActivity: Date.now(),
       history: cliHistory,
       messageUUIDs: [],
-      sessionVisibility: sessionVisibility.normalize(opts && opts.sessionVisibility),
+      isMate: privateMate,
+      sessionVisibility: privateMate ? "private" : sessionVisibility.normalize(opts && opts.sessionVisibility),
       sessionVisibilityExplicit: !!(opts && opts.sessionVisibilityExplicit === true),
       bookmarked: false,
       favoriteOrder: null,
     };
     if (opts && opts.vendor) session.vendor = opts.vendor;
     if (opts && opts.ownerId) session.ownerId = opts.ownerId;
+    if (opts && opts.userKnowledgeOwnerId) session.userKnowledgeOwnerId = opts.userKnowledgeOwnerId;
     sessions.set(localId, session);
     saveSessionFile(session);
     switchSession(localId, targetWs);
@@ -1490,6 +1512,8 @@ function createSessionManager(opts) {
     setSessionVisibility: function (localId, visibility) {
       var session = sessions.get(localId);
       if (!session) return { error: "Session not found" };
+      if (session.userKnowledgeOwnerId && visibility === "shared") return { error: "Conversations containing private User Knowledge cannot be shared." };
+      if (privateMate || session.isMate) return { error: "Clay and Mate conversations are always private." };
       if (visibility !== "shared" && visibility !== "private") return { error: "Invalid session visibility" };
       session.sessionVisibility = visibility;
       session.sessionVisibilityExplicit = true;
@@ -1559,6 +1583,8 @@ function createSessionManager(opts) {
     setSessionOwner: function (localId, ownerId) {
       var session = sessions.get(localId);
       if (!session) return { error: "Session not found" };
+      if (session.userKnowledgeOwnerId && session.ownerId !== ownerId) return { error: "Private User Knowledge ownership cannot be transferred." };
+      if (privateMate && session.ownerId !== ownerId) return { error: "Mate conversation ownership cannot be transferred." };
       session.ownerId = ownerId;
       saveSessionFile(session);
       return { ok: true };

package/lib/user-knowledge-service.js

@@ -0,0 +1,167 @@
+// Owner-private user knowledge. Only canonical Clay sessions curate records.
+var crypto = require('crypto');
+var canUsePersonalConnections = require('./mcp-session-access').canUsePersonalConnections;
+var createRecordStore = require('./knowledge-record-store').createRecordStore;
+
+function attachUserKnowledgeService(deps) {
+  var stores = new Map();
+  function owner(id) {
+    if (deps.isMultiUser() && (!id || !deps.findUser(id))) throw new Error('User knowledge requires an authenticated owner.');
+    return deps.isMultiUser() ? id : 'default';
+  }
+  function storage(id) {
+    var key = crypto.createHash('sha256').update(owner(id)).digest('hex');
+    if (!stores.has(key)) stores.set(key, createRecordStore({scopeId:'user/' + key + '/you',baseDir:deps.baseDir}));
+    return stores.get(key);
+  }
+  function snapshot(id) {
+    var result = {entries:{},reports:{},activity:[],seen:{},version:0};
+    storage(id).all().forEach(function (record) {
+      if (record.kind !== 'user-knowledge') return;
+      result.version++;
+      if (record.seen) result.seen[record.seen.ref] = Math.max(result.seen[record.seen.ref] || 0, record.seen.revision);
+      if (record.entry) result.entries[record.entry.ref] = record.entry;
+      if (record.report) result.reports[record.report.ref] = record.report;
+      if (record.activity) result.activity.push(record.activity);
+    });
+    return result;
+  }
+  function text(value, max, required) {
+    if (typeof value !== 'string' || value.length > max || (required && !value.trim())) throw new Error('Invalid or oversized knowledge text.');
+    return value.trim();
+  }
+  function page(items, args) {
+    args = args || {};
+    var offset = Math.max(0, Number(args.offset) || 0);
+    offset = Number.isFinite(offset) ? Math.floor(offset) : 0;
+    var limit = Math.min(50, Math.max(1, Number(args.limit) || 30));
+    return {items:items.slice(offset,offset+limit),total:items.length,nextOffset:offset+limit < items.length ? offset+limit:null};
+  }
+  function unread(entry,state) { return !entry.archived && entry.revisions > (state.seen[entry.ref] || 0); }
+  function attention(id) {
+    var state = snapshot(id);
+    return { unread: Object.values(state.entries).filter(function (entry) { return unread(entry,state); }).length, version: state.version };
+  }
+  function acknowledge(id,args) {
+    var state = snapshot(id);
+    var entry = state.entries[args.ref];
+    if (!entry || entry.archived) throw new Error('User knowledge not found.');
+    if (!Number.isInteger(args.revision) || args.revision < 1 || args.revision > entry.revisions) throw new Error('Invalid memory revision.');
+    if ((state.seen[args.ref] || 0) < args.revision) {
+      storage(id).append({kind:'user-knowledge',seen:{ref:args.ref,revision:args.revision,at:Date.now()}});
+      try { deps.onChange(owner(id),{seen:true}); } catch (error) { /* Acknowledgement survives notification failures. */ }
+    }
+    return attention(id);
+  }
+  function list(id,args) {
+    var state = snapshot(id);
+    args = args || {};
+    var query = String(args.query || '').toLowerCase().slice(0,300);
+    var entries = Object.values(state.entries).filter(function (entry) {
+      return !entry.archived && (!args.category || entry.category === args.category) &&
+        (!query || (entry.title+' '+entry.summary+' '+entry.body).toLowerCase().indexOf(query)!==-1);
+    }).map(function(entry){return Object.assign({},entry,{unread:unread(entry,state)});}).sort(function (a,b) {return Number(b.unread)-Number(a.unread) || b.updatedAt-a.updatedAt;});
+    return Object.assign(page(entries,args),{categories:Array.from(new Set(Object.values(state.entries).filter(function (e) {return !e.archived;}).map(function(e){return e.category;}))).sort(),pending:Object.values(state.reports).filter(function(r){return r.status==='pending';}).length});
+  }
+  function read(id,ref) {
+    var entry = snapshot(id).entries[ref];
+    if (!entry || entry.archived) throw new Error('User knowledge not found.');
+    var comments = Object.values(snapshot(id).reports).filter(function (item) { return item.commentEntryRef === ref; }).map(function (item) {
+      return { id: item.ref, body: item.observation, at: item.createdAt, author: { type: 'user', displayName: 'You' },
+        status: item.status === 'accepted' ? 'incorporated' : item.status,
+        review: item.reviewedAt ? { response: item.reason, at: item.reviewedAt, author: { displayName: 'Clay' } } : null };
+    });
+    return Object.assign({}, entry, { comments: comments, commentCount: comments.length });
+  }
+  function comment(id,args,source) {
+    var entry = read(id,args.ref);
+    return report(id,{observation:args.body,evidence:'Comment on '+entry.ref+': '+args.body,evidenceType:'explicit'},source,entry.ref);
+  }
+  function report(id,args,source,commentEntryRef) {
+    var state = snapshot(id);
+    var observation = text(args.observation,4000,true);
+    var evidence = text(args.evidence,4000,true);
+    var evidenceType = args.evidenceType || 'explicit';
+    if (['explicit','inferred'].indexOf(evidenceType)===-1) throw new Error('Invalid evidence type.');
+    var existing = Object.values(state.reports).find(function (r) {return r.observation===observation && r.evidence===evidence && r.source.session===source.session && r.source.project===source.project && r.status==='pending';});
+    if (existing) return existing;
+    if (Object.values(state.reports).filter(function (r) {return r.status==='pending';}).length>=200) throw new Error('Clay has 200 pending observations. Review those before reporting more.');
+    var record = {ref:'observation:'+crypto.randomBytes(12).toString('hex'),observation:observation,evidence:evidence,evidenceType:evidenceType,source:source,commentEntryRef:commentEntryRef || null,status:'pending',createdAt:Date.now()};
+    storage(id).append({kind:'user-knowledge',report:record});
+    try {deps.onReport(owner(id));} catch (error) { /* Durable pending report remains available for retry. */ }
+    return record;
+  }
+  function bind(binding) {
+    var originalOwner = binding.session && binding.session.ownerId;
+    function principal() {
+      var project = deps.getProject(binding.projectSlug);
+      var session = binding.session;
+      if (!project || !session || project.sm.sessions.get(session.localId)!==session || session.destroying) throw new Error('A live owner-bound session is required.');
+      if (session.ownerId !== originalOwner) throw new Error('Session ownership changed.');
+      if (deps.isMultiUser() && session.sessionVisibility === 'shared') throw new Error('Private User Knowledge is unavailable in shared conversations.');
+      if (deps.isMultiUser() && !canUsePersonalConnections(session, project.sm.sessions)) throw new Error('User Knowledge requires an owner-only conversation and Driver.');
+      var id = owner(session.ownerId);
+      var status = project.getStatus();
+      if (deps.isMultiUser() && !deps.canAccess(id,binding.projectSlug)) throw new Error('Project access was revoked.');
+      var mate = status.isMate && deps.resolveMate(id,status.mateId);
+      var clay = !!(mate && mate.builtinKey==='clay' && (!deps.isMultiUser() || mate.createdBy===id));
+      return {id:id,clay:clay,source:{project:binding.projectSlug,session:session.cliSessionId || 'local:'+session.localId,mateId:status.mateId || null}};
+    }
+    function protect(p) {
+      if (!deps.isMultiUser()) return;
+      var session = binding.session;
+      var manager = deps.getProject(binding.projectSlug).sm;
+      function mark(target) {
+        if (target.userKnowledgeOwnerId === p.id) return;
+        var previous = target.userKnowledgeOwnerId;
+        target.userKnowledgeOwnerId = p.id;
+        try { manager.saveSessionFile(target); } catch (error) { target.userKnowledgeOwnerId = previous; throw error; }
+      }
+      var provenance = session.sessionProvenance;
+      if (provenance && provenance.kind === 'worker') manager.sessions.forEach(function (parent) {
+        if (parent.sessionOriginId === provenance.parentSessionOriginId) mark(parent);
+      });
+      mark(session);
+    }
+    function curator() {var p=principal();if(!p.clay) throw new Error('Only your canonical Clay can curate User Knowledge.');return p;}
+    return {
+      isClay:function () {return principal().clay;},
+      list:function(args){var p=principal();var result=list(p.id,args);if(result.items.length)protect(p);return result;},
+      read:function(args){var p=principal();var result=read(p.id,args.ref);protect(p);return result;},
+      report:function(args){var p=principal();return report(p.id,args,p.source);},
+      pending:function(args){var p=curator();return page(Object.values(snapshot(p.id).reports).filter(function(r){return r.status==='pending';}),args);},
+      curate:function(args) {
+        var p=curator();
+        var state=snapshot(p.id);
+        var observation=state.reports[args.reportRef];
+        if (!observation) throw new Error('Observation not found.');
+        if (observation.status!=='pending') return {report:observation,entry:observation.entryRef ? state.entries[observation.entryRef]:null};
+        var action=args.action;
+        if (['save','decline','archive'].indexOf(action)===-1) throw new Error('Invalid curation action.');
+        var reason=text(args.reason,2000,true);
+        var previous=args.ref ? state.entries[args.ref]:null;
+        if (args.ref && !previous) throw new Error('User knowledge not found.');
+        if (previous && args.expectedRevision!==previous.revisions) throw new Error('Knowledge changed. Read it again before updating.');
+        var entry=null;
+        var now=Date.now();
+        if (action!=='decline') {
+          if(action==='archive' && !previous) throw new Error('Choose an existing entry to archive.');
+          var category=action==='archive' ? previous.category:text(args.category,32,true);
+          if(!/^[a-z][a-z0-9-]*$/.test(category)) throw new Error('Use a lowercase category.');
+          entry=Object.assign({},previous || {},{ref:previous ? previous.ref:'you:'+crypto.randomBytes(12).toString('hex'),category:category,kind:category,
+            title:action==='archive' ? previous.title:text(args.title,160,true),summary:action==='archive' ? previous.summary:text(args.summary,600,true),
+            body:action==='archive' ? previous.body:text(args.body,8000,true),archived:action==='archive',
+            createdAt:previous ? previous.createdAt:now,updatedAt:now,revisions:previous ? previous.revisions+1:1,
+            updatedBy:{type:'system',displayName:'Clay'},source:observation.source,evidence:observation.evidence,evidenceType:observation.evidenceType,reason:reason});
+        }
+        var reviewed=Object.assign({},observation,{status:action==='decline'?'declined':'accepted',reviewedAt:now,reason:reason,entryRef:entry && entry.ref});
+        var activity=entry ? {id:crypto.randomBytes(12).toString('hex'),ref:entry.ref,title:entry.title,summary:entry.summary,at:now,action:action==='archive'?'archive':(previous?'update':'create'),revision:entry.revisions}:null;
+        storage(p.id).append({kind:'user-knowledge',entry:entry,report:reviewed,activity:activity});
+        if(activity) {try {deps.onChange(p.id,activity);} catch(error) { /* Saved record survives notification failures. */ }}
+        return {entry:entry,report:reviewed};
+      }
+    };
+  }
+  return {bind:bind,list:list,read:read,report:report,comment:comment,attention:attention,acknowledge:acknowledge,activity:function(id,args){return page(snapshot(id).activity.slice().reverse(),args);},pendingCount:function(id){return Object.values(snapshot(id).reports).filter(function(r){return r.status==='pending';}).length;}};
+}
+module.exports={attachUserKnowledgeService:attachUserKnowledgeService};

package/lib/users-permissions.js

@@ -65,6 +65,9 @@ function attachPermissions(deps) {
 
   function canAccessProject(userId, project) {
     if (!project) return false;
+    if (project.isMate === true || (typeof project.slug === "string" && project.slug.indexOf("mate-") === 0)) {
+      return !!userId && !!project.ownerId && project.ownerId === userId;
+    }
     // Public projects are accessible to all authenticated users
     if (!project.visibility || project.visibility === "public") return true;
     // Admin always has access
@@ -89,6 +92,10 @@ function attachPermissions(deps) {
   function canAccessSession(userId, session, project) {
     // Must have project access first
     if (!canAccessProject(userId, project)) return false;
+    if (session.isMate === true || project.isMate === true || (typeof project.slug === "string" && project.slug.indexOf("mate-") === 0)) {
+      return !!userId && !!session.ownerId && session.ownerId === userId;
+    }
+    if (session.userKnowledgeOwnerId) return !!userId && session.userKnowledgeOwnerId === userId && session.ownerId === userId;
     // Resolve the stored user record so client-supplied roles cannot elevate access.
     var user = findUserById(userId);
     if (user && user.role === "admin") return true;

package/lib/users-project-mate-filter-preferences.js

@@ -0,0 +1,39 @@
+function attachProjectMateFilterPreferences(deps) {
+  var loadUsers = deps.loadUsers;
+  var saveUsers = deps.saveUsers;
+  var configModule = deps.config || require("./config");
+
+  function normalize(mode) {
+    return mode === "projects" || mode === "mates" ? mode : "all";
+  }
+
+  function get(userId) {
+    var data = loadUsers();
+    for (var i = 0; i < data.users.length; i++) {
+      if (data.users[i].id === userId) return normalize(data.users[i].projectMateFilterMode);
+    }
+    var current = configModule.loadConfig() || {};
+    return normalize(current.projectMateFilterMode);
+  }
+
+  function set(userId, mode) {
+    if (mode !== "all" && mode !== "projects" && mode !== "mates") {
+      return { error: "Invalid project and Mate filter mode" };
+    }
+    var data = loadUsers();
+    for (var i = 0; i < data.users.length; i++) {
+      if (data.users[i].id === userId) {
+        data.users[i].projectMateFilterMode = mode;
+        saveUsers(data);
+        return { ok: true, projectMateFilterMode: mode };
+      }
+    }
+    var current = configModule.loadConfig() || {};
+    configModule.saveConfig(Object.assign({}, current, { projectMateFilterMode: mode }));
+    return { ok: true, projectMateFilterMode: mode };
+  }
+
+  return { get: get, set: set };
+}
+
+module.exports = { attachProjectMateFilterPreferences: attachProjectMateFilterPreferences };

package/lib/users.js

@@ -6,6 +6,7 @@ var { CONFIG_DIR } = require("./config");
 var { attachAuth } = require("./users-auth");
 var { DEFAULT_PERMISSIONS, ALL_PERMISSIONS, attachPermissions } = require("./users-permissions");
 var { attachPreferences } = require("./users-preferences");
+var { attachProjectMateFilterPreferences } = require("./users-project-mate-filter-preferences");
 var { attachHomeDockPreferences } = require("./users-home-dock-preferences");
 var { attachHomeSurfacePreferences } = require("./users-home-surface-preferences");
 var { attachSessionFolderPreferences } = require("./users-session-folder-preferences");
@@ -402,6 +403,7 @@ function removeExpiredInvites() {
 var auth = attachAuth({ loadUsers: loadUsers, saveUsers: saveUsers, findAdmin: findAdmin });
 var permissions = attachPermissions({ loadUsers: loadUsers, saveUsers: saveUsers, findUserById: findUserById });
 var preferences = attachPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
+var projectMateFilterPreferences = attachProjectMateFilterPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var homeDockPreferences = attachHomeDockPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var homeSurfacePreferences = attachHomeSurfacePreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var sessionFolderPreferences = attachSessionFolderPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
@@ -445,6 +447,8 @@ var getChatLayout = preferences.getChatLayout;
 var setChatLayout = preferences.setChatLayout;
 var getAutoContinue = preferences.getAutoContinue;
 var setAutoContinue = preferences.setAutoContinue;
+var getProjectMateFilterMode = projectMateFilterPreferences.get;
+var setProjectMateFilterMode = projectMateFilterPreferences.set;
 var getClaudeOpenMode = preferences.getClaudeOpenMode;
 var setClaudeOpenMode = preferences.setClaudeOpenMode;
 var getCursorSharing = preferences.getCursorSharing;
@@ -531,6 +535,8 @@ module.exports = {
   setMateOnboarded: setMateOnboarded,
   getAutoContinue: getAutoContinue,
   setAutoContinue: setAutoContinue,
+  getProjectMateFilterMode: getProjectMateFilterMode,
+  setProjectMateFilterMode: setProjectMateFilterMode,
   getClaudeOpenMode: getClaudeOpenMode,
   setClaudeOpenMode: setClaudeOpenMode,
   getCursorSharing: getCursorSharing,

package/lib/workspace-query-access.js

@@ -87,7 +87,10 @@ function attachWorkspaceQueryAccess(deps) {
       return { owned: owned, accessible: owned };
     }
     if (!principal.userId) return denied;
-    if (ownsMateProject(principal, status)) return { owned: true, accessible: true };
+    if (status.isMate === true) {
+      var ownsMate = ownsMateProject(principal, status);
+      return { owned: ownsMate, accessible: ownsMate };
+    }
     // status.projectOwnerId is never trusted on its own in multi-user mode: it
     // is a snapshot that can outlive a transfer or a revocation, so treating it
     // as ownership would let a stale status skip the authoritative record.

package/lib/ws-schema.js

@@ -572,6 +572,9 @@ var schema = {
   "mate_delete":              { direction: "c2s", handler: "lib/server-mates.js", description: "Delete a mate" },
   "mate_deleted":             { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Mate was deleted" },
   "mate_update":              { direction: "c2s", handler: "lib/server-mates.js", description: "Update a mate's properties" },
+  "mate_instructions_get":   { direction: "c2s", handler: "lib/server-mate-instructions.js", description: "Read the owner-scoped Mate identity prompt" },
+  "mate_instructions_set":   { direction: "c2s", handler: "lib/server-mate-instructions.js", description: "Save a Mate identity prompt with revision checking" },
+  "mate_instructions_result": { direction: "s2c", handler: "lib/public/modules/home-mate-instructions.js", description: "Correlated prompt read or save result" },
   "mate_updated":             { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Mate was updated" },
   "mate_readd_builtin":       { direction: "c2s", handler: "lib/server-mates.js", description: "Re-add a previously deleted built-in mate" },
   "mate_list_available_builtins": { direction: "c2s", handler: "lib/server-mates.js", description: "List built-in mates available for re-adding" },
@@ -658,16 +661,63 @@ var schema = {
   // Knowledge (mate knowledge files)
   // -----------------------------------------------------------------------
   "knowledge_list":           { direction: "both", handler: "lib/project-knowledge.js", description: "Request (c2s) or receive (s2c) knowledge file list" },
+  "knowledge_search":         { direction: "c2s", handler: "lib/project-knowledge.js", description: "Search bounded project Knowledge filenames and document content" },
+  "knowledge_search_results": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Correlated bounded Knowledge document search results" },
   "knowledge_read":           { direction: "c2s", handler: "lib/project-knowledge.js", description: "Read a knowledge file" },
   "knowledge_content":        { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Knowledge file content" },
   "knowledge_save":           { direction: "c2s", handler: "lib/project-knowledge.js", description: "Save a knowledge file" },
   "knowledge_saved":          { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Knowledge file was saved" },
+  "knowledge_rename":         { direction: "c2s", handler: "lib/project-knowledge.js", description: "Rename a knowledge Markdown document with a revision precondition" },
+  "knowledge_renamed":        { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge document was renamed" },
+  "knowledge_error":          { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Correlated Knowledge operation error or stale-write conflict" },
+  "knowledge_sync":           { direction: "c2s", handler: "lib/project-knowledge.js", description: "Retry common Knowledge record synchronization after a canonical file mutation" },
+  "knowledge_synced":         { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge record synchronization retry completed" },
   "knowledge_delete":         { direction: "c2s", handler: "lib/project-knowledge.js", description: "Delete a knowledge file" },
   "knowledge_deleted":        { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Knowledge file was deleted" },
+  "knowledge_draft_save":     { direction: "c2s", handler: "lib/project-knowledge.js", description: "Persist a versioned user- and workspace-bound Knowledge draft" },
+  "knowledge_draft_saved":    { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge draft persistence acknowledgement" },
+  "knowledge_draft_delete":   { direction: "c2s", handler: "lib/project-knowledge.js", description: "Remove a Knowledge draft through a submitted client version" },
+  "knowledge_draft_deleted":  { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge draft removal acknowledgement" },
+  "knowledge_discard_draft":  { direction: "c2s", handler: "lib/project-knowledge.js", description: "Discard a bounded draft version and read a guarded disk revision" },
+  "knowledge_draft_discarded":{ direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Guarded disk content returned after draft discard" },
+  "knowledge_history":        { direction: "both", handler: "lib/project-knowledge.js", description: "Request or receive bounded document history" },
+  "knowledge_history_read":   { direction: "c2s", handler: "lib/project-knowledge.js", description: "Read one explicit bounded document history version" },
+  "knowledge_history_version":{ direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Content for one explicit document history version" },
+  "knowledge_restore":        { direction: "c2s", handler: "lib/project-knowledge.js", description: "Restore an explicit history version with a revision precondition" },
+  "knowledge_restored":       { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge history version was restored" },
+  "knowledge_deleted_list":   { direction: "both", handler: "lib/project-knowledge.js", description: "Request or receive recoverable deleted Knowledge documents" },
   "knowledge_promote":        { direction: "c2s", handler: "lib/project-knowledge.js", description: "Promote a knowledge file to always-active" },
   "knowledge_promoted":       { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Knowledge file was promoted" },
   "knowledge_depromote":      { direction: "c2s", handler: "lib/project-knowledge.js", description: "Depromote a knowledge file from always-active" },
   "knowledge_depromoted":     { direction: "s2c", handler: "lib/public/modules/app-messages.js", description: "Knowledge file was depromoted" },
+  "knowledge_db_create":      { direction: "c2s", handler: "lib/project-knowledge.js", description: "Create a first-class Mate Knowledge database" },
+  "knowledge_db_created":     { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database creation result" },
+  "knowledge_db_read":        { direction: "c2s", handler: "lib/project-knowledge.js", description: "Read Knowledge database schema and views" },
+  "knowledge_db_content":     { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database schema and views" },
+  "knowledge_db_rename":      { direction: "c2s", handler: "lib/project-knowledge.js", description: "Rename a Knowledge database with a revision precondition" },
+  "knowledge_db_renamed":     { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database rename result" },
+  "knowledge_db_archive":     { direction: "c2s", handler: "lib/project-knowledge.js", description: "Recoverably archive a Knowledge database" },
+  "knowledge_db_archived":    { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database archive result" },
+  "knowledge_db_recover":     { direction: "c2s", handler: "lib/project-knowledge.js", description: "Recover an archived Knowledge database" },
+  "knowledge_db_recovered":   { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database recovery result" },
+  "knowledge_db_schema_save": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Save a validated Knowledge database schema" },
+  "knowledge_db_schema_saved":{ direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database schema result" },
+  "knowledge_db_view_save":   { direction: "c2s", handler: "lib/project-knowledge.js", description: "Save a validated table view" },
+  "knowledge_db_view_saved":  { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database table view result" },
+  "knowledge_db_record_create": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Create a typed Knowledge database record" },
+  "knowledge_db_record_created": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database record creation result" },
+  "knowledge_db_record_read": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Read one Knowledge database record and history" },
+  "knowledge_db_record_content": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database record detail" },
+  "knowledge_db_record_update": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Update a typed Knowledge database record" },
+  "knowledge_db_record_updated": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database record update result" },
+  "knowledge_db_record_archive": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Recoverably archive a Knowledge database record" },
+  "knowledge_db_record_archived": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database record archive result" },
+  "knowledge_db_record_recover": { direction: "c2s", handler: "lib/project-knowledge.js", description: "Recover an archived Knowledge database record" },
+  "knowledge_db_record_recovered": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database record recovery result" },
+  "knowledge_db_query":       { direction: "c2s", handler: "lib/project-knowledge.js", description: "Run a bounded validated deterministic Knowledge database query" },
+  "knowledge_db_query_results": { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database query page and totals" },
+  "knowledge_db_sync":        { direction: "c2s", handler: "lib/project-knowledge.js", description: "Retry Knowledge database summary projection" },
+  "knowledge_db_synced":      { direction: "s2c", handler: "lib/public/modules/mate-knowledge-workbench.js", description: "Knowledge database summary projection retry result" },
 
   // -----------------------------------------------------------------------
   // Memory (mate memory)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "5.1.0-beta.1",
+  "version": "5.1.0-beta.2",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js"
@@ -48,10 +48,19 @@
   "author": "Chad",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.287",
+    "@dicebear/adventurer": "9.4.3",
+    "@dicebear/bottts": "9.4.3",
+    "@dicebear/core": "9.4.3",
+    "@dicebear/fun-emoji": "9.4.3",
+    "@dicebear/icons": "9.4.3",
+    "@dicebear/micah": "9.4.3",
+    "@dicebear/pixel-art": "9.4.3",
+    "@dicebear/thumbs": "9.4.3",
     "@lydell/node-pty": "^1.2.0-beta.3",
     "@modelcontextprotocol/sdk": "^1.32.1",
     "@openai/codex": "^0.160.0",
     "@seald-io/nedb": "^4.1.2",
+    "codemirror": "^5.65.21",
     "imapflow": "^1.7.8",
     "ipaddr.js": "^2.5.0",
     "nodemailer": "^9.1.1",