clay-server 5.1.0-beta.1 → 6.0.0-beta.1

package/LICENSES/README.md

@@ -6,6 +6,10 @@ Preexisting MIT-covered portions retain the grants and applicable copyright and
 
 Third-party components and assets retain their own licenses and notices. In particular, the bundled Source Serif 4 font remains under the [SIL Open Font License 1.1](../lib/public/fonts/source-serif-4/LICENSE.md).
 
+The locally generated historical avatar styles retain their DiceBear and
+original artist licenses and attributions, summarized in
+[dicebear-avatars.md](dicebear-avatars.md).
+
 The Salt layout, control geometry, text decoration, color map and diagram chrome
 in `lib/salt-*.js` and `lib/assets/salt-colors.json` are adapted from PlantUML
 1.2026.8, copyright 2009–2025 Arnaud Roques, under

package/LICENSES/dicebear-avatars.md

@@ -0,0 +1,16 @@
+# DiceBear avatar notices
+
+Clay locally generates its seven historical avatar choices with DiceBear 9.4.3.
+The generator code is MIT-licensed, copyright Florian Körner. Each design keeps
+its upstream license and attribution:
+
+- Thumbs — DiceBear, CC0 1.0.
+- Bottts — Pablo Stanley, free for personal and commercial use.
+- Pixel Art — DiceBear, CC0 1.0.
+- Adventurer — Lisa Wischofsky, CC BY 4.0.
+- Avatar Illustration System (Micah) — Micah Lanier, CC BY 4.0.
+- Fun Emoji Set — Davis Uche, CC BY 4.0.
+- Bootstrap Icons — The Bootstrap Authors, MIT.
+
+The complete notices and license links are distributed with their respective
+`@dicebear/*` packages. Upstream: https://www.dicebear.com/

package/bin/cli.js

@@ -37,6 +37,7 @@ var { generateAuthToken } = require("../lib/server");
 var { enableMultiUser, disableMultiUser, hasAdmin, isMultiUser, getSetupCode } = require("../lib/users");
 var clayStudioCert = require("../lib/clay-studio-cert");
 var cliWordmark = require("../lib/cli-wordmark");
+var buildStartupProjects = require("../lib/startup-projects").buildStartupProjects;
 
 function openUrl(url) {
   try {
@@ -446,9 +447,6 @@ async function restartDaemonFromConfig() {
   var newConfig = Object.assign({}, lastConfig, {
     pid: null,
     port: targetPort,
-    projects: (lastConfig.projects || []).filter(function (p) {
-      return fs.existsSync(p.path);
-    })
   });
 
   ensureConfigDir();
@@ -1445,56 +1443,15 @@ async function forkDaemon(mode, keepAwake, extraProjects, addCwd, wantOsUsers) {
     return;
   }
 
-  var allProjects = [];
-  var usedSlugs = [];
-
-  // Load previous config to preserve per-project settings (visibility, allowedUsers)
   var prevConfig = loadConfig();
-  var prevProjectMap = {};
-  if (prevConfig && prevConfig.projects) {
-    for (var pi = 0; pi < prevConfig.projects.length; pi++) {
-      prevProjectMap[prevConfig.projects[pi].path] = prevConfig.projects[pi];
-    }
-  }
-
-  // Only include cwd if explicitly requested
+  var recentProjects = extraProjects || [];
   if (addCwd) {
-    var slug = generateSlug(cwd, []);
-    var cwdEntry = { path: cwd, slug: slug, addedAt: Date.now() };
-    // Restore title/icon from .clayrc if available
-    var cwdRc = loadClayrc();
-    var cwdRecent = cwdRc.recentProjects || [];
-    for (var cr = 0; cr < cwdRecent.length; cr++) {
-      if (cwdRecent[cr].path === cwd) {
-        if (cwdRecent[cr].title) cwdEntry.title = cwdRecent[cr].title;
-        if (cwdRecent[cr].icon) cwdEntry.icon = cwdRecent[cr].icon;
-        break;
-      }
-    }
-    // Restore project-level settings from previous config
-    if (prevProjectMap[cwd]) {
-      cwdEntry = Object.assign({}, prevProjectMap[cwd], cwdEntry);
-    }
-    allProjects.push(cwdEntry);
-    usedSlugs.push(slug);
-  }
-
-  // Add restored projects (from ~/.clayrc)
-  if (extraProjects && extraProjects.length > 0) {
-    for (var ep = 0; ep < extraProjects.length; ep++) {
-      var rp = extraProjects[ep];
-      if (rp.path === cwd) continue; // skip if same as cwd
-      if (!fs.existsSync(rp.path)) continue; // skip missing directories
-      var rpSlug = generateSlug(rp.path, usedSlugs);
-      usedSlugs.push(rpSlug);
-      var rpEntry = { path: rp.path, slug: rpSlug, title: rp.title || undefined, icon: rp.icon || undefined, addedAt: rp.addedAt || Date.now() };
-      // Restore project-level settings from previous config
-      if (prevProjectMap[rp.path]) {
-        rpEntry = Object.assign({}, prevProjectMap[rp.path], rpEntry);
-      }
-      allProjects.push(rpEntry);
-    }
+    var cwdRecent = (loadClayrc().recentProjects || []).filter(function (p) { return p.path === cwd; });
+    recentProjects = cwdRecent.concat(recentProjects);
   }
+  var allProjects = buildStartupProjects(prevConfig, recentProjects, {
+    cwd: cwd, addCwd: addCwd, existsSync: fs.existsSync, generateSlug: generateSlug,
+  });
 
   var config = Object.assign({}, prevConfig || {}, {
     pid: null,
@@ -1629,49 +1586,10 @@ async function devMode(mode, keepAwake, existingPinHash, wantOsUsers) {
     return;
   }
 
-  var slug = generateSlug(cwd, []);
-  var cwdDevEntry = { path: cwd, slug: slug, addedAt: Date.now() };
-
-  // Load previous config to preserve per-project settings (visibility, allowedUsers)
   var prevDevConfig = loadConfig();
-  var prevDevProjectMap = {};
-  if (prevDevConfig && prevDevConfig.projects) {
-    for (var pdi = 0; pdi < prevDevConfig.projects.length; pdi++) {
-      prevDevProjectMap[prevDevConfig.projects[pdi].path] = prevDevConfig.projects[pdi];
-    }
-  }
-
-  // Restore previous projects
-  var rc = loadClayrc();
-  var restorable = (rc.recentProjects || []).filter(function (p) {
-    return p.path !== cwd && fs.existsSync(p.path);
+  var allProjects = buildStartupProjects(prevDevConfig, loadClayrc().recentProjects || [], {
+    cwd: cwd, addCwd: true, existsSync: fs.existsSync, generateSlug: generateSlug,
   });
-  // Restore title/icon for cwd from .clayrc
-  var rcAll = rc.recentProjects || [];
-  for (var ci = 0; ci < rcAll.length; ci++) {
-    if (rcAll[ci].path === cwd) {
-      if (rcAll[ci].title) cwdDevEntry.title = rcAll[ci].title;
-      if (rcAll[ci].icon) cwdDevEntry.icon = rcAll[ci].icon;
-      break;
-    }
-  }
-  // Restore access settings for cwd from previous config
-  if (prevDevProjectMap[cwd]) {
-    cwdDevEntry = Object.assign({}, prevDevProjectMap[cwd], cwdDevEntry);
-  }
-  var allProjects = [cwdDevEntry];
-  var usedSlugs = [slug];
-  for (var ri = 0; ri < restorable.length; ri++) {
-    var rp = restorable[ri];
-    var rpSlug = generateSlug(rp.path, usedSlugs);
-    usedSlugs.push(rpSlug);
-    var rpDevEntry = { path: rp.path, slug: rpSlug, title: rp.title || undefined, icon: rp.icon || undefined, addedAt: rp.addedAt || Date.now() };
-    // Restore project-level settings from previous config
-    if (prevDevProjectMap[rp.path]) {
-      rpDevEntry = Object.assign({}, prevDevProjectMap[rp.path], rpDevEntry);
-    }
-    allProjects.push(rpDevEntry);
-  }
 
   var config = Object.assign({}, prevDevConfig || {}, {
     pid: null,

package/lib/daemon-project-access.js

@@ -32,7 +32,11 @@ function getProjectAccess(config, slug, osUsers) {
   var project = findProject(config, parentSlug || slug);
   if (!project) return { error: "Project not found" };
 
-  var isMateProject = project.slug.indexOf("mate-") === 0;
+  var isMateProject = project.isMate === true || project.slug.indexOf("mate-") === 0;
+  if (isMateProject) {
+    return { slug: slug, isMate: true, visibility: "private", ownerId: project.ownerId || null,
+      allowedUsers: [], sessionVisibilityDefault: "private", isWorktree: !!parentSlug };
+  }
   var visibility = isMateProject ? "private" : (project.visibility || (osUsers ? "private" : "public"));
   var parentAllowedUsers = uniqueUsers(project.allowedUsers);
   if (!parentSlug) {
@@ -72,6 +76,7 @@ function setAllowedUsers(config, slug, allowedUsers) {
   var parentSlug = parentSlugFor(slug);
   var project = findProject(config, parentSlug || slug);
   if (!project) return { error: "Project not found" };
+  if (project.slug.indexOf("mate-") === 0 || project.isMate) return { error: "Clay and Mates cannot be shared." };
   var clean = uniqueUsers(allowedUsers);
   if (!parentSlug) {
     project.allowedUsers = clean;
@@ -92,6 +97,7 @@ function setSessionVisibilityDefault(config, slug, visibility) {
   if (parentSlugFor(slug)) return { error: "Worktrees inherit this setting from their parent project." };
   var project = findProject(config, slug);
   if (!project) return { error: "Project not found" };
+  if (project.slug.indexOf("mate-") === 0 || project.isMate) return { error: "Clay and Mates are always private." };
   if (visibility === "shared") project.sessionVisibilityDefault = "shared";
   else delete project.sessionVisibilityDefault;
   return { ok: true, visibility: visibility };

package/lib/daemon-settings.js

@@ -0,0 +1,11 @@
+// Persist before publishing a setting to live daemon state.
+function saveDaemonSetting(config, key, value, saveConfig) {
+  var overrides = {}; overrides[key] = value;
+  var next = Object.assign({}, config, overrides);
+  if (value === undefined) delete next[key];
+  saveConfig(next);
+  if (value === undefined) delete config[key];
+  Object.assign(config, next);
+  return next;
+}
+module.exports = { saveDaemonSetting: saveDaemonSetting };

package/lib/daemon.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+var saveDaemonSetting = require("./daemon-settings").saveDaemonSetting;
 
 // --- Node version check ---
 var nodeMajor = parseInt(process.versions.node.split(".")[0], 10);
@@ -72,9 +73,7 @@ if (projectLogContext.initializeProjectKnowledge(config)) {
 }
 
 // --- OS users mode: check required system dependencies ---
-// Supplementary-group inheritance (issue #367): default on so sessions behave
-// like a normal login; operators can disable via config / the settings toggle.
-osUsersMod.setInheritGroups(config.inheritGroups !== false);
+// User-switched processes inherit the account groups, like a normal login.
 if (config.osUsers) {
   var checkExec = require("child_process").execFileSync;
   var missing = [];
@@ -86,11 +85,7 @@ if (config.osUsers) {
     console.error("[daemon] Install with:  sudo apt install " + missing.map(function (m) { return m.split(" ")[0]; }).join(" "));
     process.exit(78); // EX_CONFIG
   }
-  if (config.inheritGroups !== false) {
-    console.log("[daemon] Sessions inherit each user's supplementary groups (docker, etc.); disable in Settings > User Groups.");
-  } else {
-    console.log("[daemon] Sessions run with primary group only (supplementary groups dropped); enable in Settings > User Groups.");
-  }
+  console.log("[daemon] Sessions inherit each user's supplementary groups when setpriv is available.");
 }
 
 // --- TLS ---
@@ -565,6 +560,7 @@ var relay = createServer({
     return result;
   },
   onProjectOwnerChanged: function (slug, ownerId) {
+    if (slug.indexOf("mate-") === 0) return {error:"Mate ownership cannot be transferred."};
     console.log("[daemon] onProjectOwnerChanged:", slug, "→", ownerId);
     var oldOwnerId = null;
     var projectIdx = -1;
@@ -636,12 +632,7 @@ var relay = createServer({
     return { envrc: config.sharedEnv || "" };
   },
   onSetSharedEnv: function (envrc) {
-    if (envrc) {
-      config.sharedEnv = envrc;
-    } else {
-      delete config.sharedEnv;
-    }
-    saveConfig(config);
+    saveDaemonSetting(config, "sharedEnv", envrc || undefined, saveConfig);
     return { ok: true };
   },
   onGetServerDefaultEffort: function () {
@@ -811,7 +802,6 @@ var relay = createServer({
       keepAwake: !!config.keepAwake,
       autoContinueOnRateLimit: !!config.autoContinueOnRateLimit,
       osUsers: !!config.osUsers,
-      inheritGroups: config.inheritGroups !== false,
       chatLayout: config.chatLayout || "channel",
       matesEnabled: config.matesEnabled === true,
       capsulesEnabled: config.capsulesEnabled === true,
@@ -826,25 +816,18 @@ var relay = createServer({
   onSetImageRetention: function (days) {
     var d = parseInt(days, 10);
     if (isNaN(d) || d < 0) d = 7;
-    config.imageRetentionDays = d;
-    saveConfig(config);
+    saveDaemonSetting(config, "imageRetentionDays", d, saveConfig);
     console.log("[daemon] Image retention:", d === 0 ? "forever" : d + " days");
     return { ok: true, days: d };
   },
   onSetUpdateChannel: function (channel) {
-    config.updateChannel = channel === "beta" ? "beta" : "stable";
-    saveConfig(config);
+    saveDaemonSetting(config, "updateChannel", channel === "beta" ? "beta" : "stable", saveConfig);
     console.log("[daemon] Update channel:", config.updateChannel, "(web)");
     return { ok: true, updateChannel: config.updateChannel };
   },
   onSetPin: function (pin) {
-    if (pin) {
-      config.pinHash = generateAuthToken(pin);
-    } else {
-      config.pinHash = null;
-    }
+    saveDaemonSetting(config, "pinHash", pin ? generateAuthToken(pin) : null, saveConfig);
     relay.setAuthToken(config.pinHash);
-    saveConfig(config);
     console.log("[daemon] PIN", pin ? "set" : "removed", "(web)");
     return { ok: true, pinEnabled: !!config.pinHash };
   },
@@ -920,8 +903,7 @@ var relay = createServer({
   },
   onSetKeepAwake: function (value) {
     var want = !!value;
-    config.keepAwake = want;
-    saveConfig(config);
+    saveDaemonSetting(config, "keepAwake", want, saveConfig);
     if (want && !caffeinateProc && process.platform === "darwin") {
       try {
         var { spawn: spawnCaff } = require("child_process");
@@ -935,16 +917,6 @@ var relay = createServer({
     console.log("[daemon] Keep awake:", want, "(web)");
     return { ok: true, keepAwake: want };
   },
-  onSetInheritGroups: function (value) {
-    var want = !!value;
-    config.inheritGroups = want;
-    saveConfig(config);
-    // Apply live so subsequent session/terminal spawns pick it up without a
-    // daemon restart; already-running sessions keep their current groups.
-    osUsersMod.setInheritGroups(want);
-    console.log("[daemon] Inherit supplementary groups:", want, "(web)");
-    return { ok: true, inheritGroups: want };
-  },
   onShutdown: function () {
     console.log("[daemon] Shutdown requested via web UI");
     gracefulShutdown();
@@ -954,6 +926,7 @@ var relay = createServer({
     spawnAndRestart();
   },
   onSetProjectVisibility: function (slug, visibility) {
+    if (slug.indexOf("mate-") === 0) return {error:"Mates cannot be shared."};
     for (var i = 0; i < config.projects.length; i++) {
       if (config.projects[i].slug === slug) {
         var prevVisibility = config.projects[i].visibility || "public";

package/lib/dicebear-avatar.js

@@ -0,0 +1,62 @@
+var STYLE_PACKAGES = {
+  thumbs: "@dicebear/thumbs",
+  bottts: "@dicebear/bottts",
+  "pixel-art": "@dicebear/pixel-art",
+  adventurer: "@dicebear/adventurer",
+  micah: "@dicebear/micah",
+  "fun-emoji": "@dicebear/fun-emoji",
+  icons: "@dicebear/icons",
+};
+
+var corePromise = null;
+var stylePromises = Object.create(null);
+var avatarCache = new Map();
+
+function normalizeRequest(style, seed, size) {
+  if (!Object.prototype.hasOwnProperty.call(STYLE_PACKAGES, style)) {
+    throw new Error("Unknown avatar style");
+  }
+  var normalizedSeed = typeof seed === "string" ? seed.substring(0, 80) : "";
+  if (!normalizedSeed) normalizedSeed = "anonymous";
+  var normalizedSize = Number(size);
+  if (!Number.isInteger(normalizedSize) || normalizedSize < 16 || normalizedSize > 256) normalizedSize = 64;
+  return { style: style, seed: normalizedSeed, size: normalizedSize };
+}
+
+function loadCore() {
+  if (!corePromise) corePromise = import("@dicebear/core");
+  return corePromise;
+}
+
+function loadStyle(style) {
+  if (!stylePromises[style]) stylePromises[style] = import(STYLE_PACKAGES[style]);
+  return stylePromises[style];
+}
+
+function renderAvatar(style, seed, size) {
+  var request = normalizeRequest(style, seed, size);
+  var cacheKey = [request.style, request.seed, request.size].join("|");
+  if (avatarCache.has(cacheKey)) return Promise.resolve(avatarCache.get(cacheKey));
+  return Promise.all([loadCore(), loadStyle(request.style)]).then(function (modules) {
+    var createAvatar = modules[0].createAvatar;
+    var styleDefinition = modules[1];
+    var svg = createAvatar(styleDefinition, {
+      seed: [request.seed],
+      size: request.size,
+    }).toString();
+    if (avatarCache.size >= 512) avatarCache.delete(avatarCache.keys().next().value);
+    avatarCache.set(cacheKey, svg);
+    return svg;
+  });
+}
+
+function isSupportedStyle(style) {
+  return Object.prototype.hasOwnProperty.call(STYLE_PACKAGES, style);
+}
+
+module.exports = {
+  isSupportedStyle: isSupportedStyle,
+  normalizeRequest: normalizeRequest,
+  renderAvatar: renderAvatar,
+  styles: Object.keys(STYLE_PACKAGES),
+};

package/lib/knowledge-db-service.js

@@ -0,0 +1,175 @@
+var crypto = require("crypto");
+var fs = require("fs");
+var path = require("path");
+var Datastore = require("@seald-io/nedb");
+var validation = require("./knowledge-db-validation");
+
+var MAX_HISTORY = 50;
+var MAX_RECEIPTS = 500;
+var MAX_PAGE = 100;
+var MAX_FILTERS = 20;
+var MAX_SORTS = 10;
+var MAX_AGGREGATE_BYTES = 8 * 1024 * 1024;
+var IDEMPOTENCY_WINDOW_MS = 24 * 60 * 60 * 1000;
+var STORE_REGISTRY = {};
+
+function clone(value) { return JSON.parse(JSON.stringify(value)); }
+function error(message, code, currentRevision) { return Object.assign(new Error(message), { code: code || "FAILED", currentRevision: currentRevision }); }
+function actor(input) { return { type: input && input.type === "system" ? "system" : "user", userId: input && input.userId || null, displayName: input && input.displayName || null }; }
+function now() { return Date.now(); }
+function newId(prefix) { return prefix + "_" + crypto.randomUUID(); }
+function mutationId(value) {
+  if (typeof value !== "string" || !/^[A-Za-z][A-Za-z0-9-]*_\d{13}_[A-Za-z0-9_-]{1,80}$/.test(value)) throw error("Operation id must include its creation time and a unique suffix.", "INVALID_OPERATION_ID");
+  var createdAt = Number(value.match(/_(\d{13})_/)[1]); var age = now() - createdAt;
+  if (age > IDEMPOTENCY_WINDOW_MS) throw error("Operation id is outside the retry window.", "OPERATION_EXPIRED");
+  if (age < -5 * 60 * 1000) throw error("Operation id creation time is in the future.", "INVALID_OPERATION_ID");
+  return value;
+}
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== "object") return value;
+  var out = {}; Object.keys(value).sort().forEach(function (key) { out[key] = canonical(value[key]); }); return out;
+}
+function fingerprint(label, args) { var envelope = Object.assign({}, args); delete envelope.actor; delete envelope.operationId; return crypto.createHash("sha256").update(label + ":" + JSON.stringify(canonical(envelope))).digest("hex"); }
+function ensureRevision(value, current, label) {
+  if (!Number.isInteger(value) || value < 1) throw error("A valid " + label + " revision is required.", "STALE", current);
+  if (value !== current) throw error("This " + label + " changed since it was opened.", "STALE", current);
+}
+function receipt(database, operationId, expectedFingerprint) {
+  var found = (database.receipts || []).filter(function (entry) { return entry.operationId === operationId; })[0];
+  if (found && found.fingerprint !== expectedFingerprint) throw error("Operation id was already used with a different payload.", "IDEMPOTENCY_MISMATCH");
+  return found ? clone(found.result) : null;
+}
+function remember(database, operationId, operationFingerprint, result) {
+  var cutoff = now() - IDEMPOTENCY_WINDOW_MS;
+  var active = (database.receipts || []).filter(function (entry) { return entry.at >= cutoff; });
+  if (active.length >= MAX_RECEIPTS) throw error("Knowledge database retry capacity is full until an operation receipt expires.", "IDEMPOTENCY_CAPACITY");
+  database.receipts = active.concat([{ operationId: operationId, fingerprint: operationFingerprint, at: now(), result: clone(result) }]);
+}
+function publicDatabase(database, includeRecords) {
+  var out = { id: database._id, itemType: "db", name: database.name, revision: database.revision, archivedAt: database.archivedAt || null,
+    createdAt: database.createdAt, updatedAt: database.updatedAt, createdBy: database.createdBy, updatedBy: database.updatedBy,
+    schema: clone(database.schema), views: clone((database.views || []).filter(function (view) { return !view.archived; })), recordCount: database.records.filter(function (record) { return !record.archivedAt; }).length,
+    projectionPending: database.projectionPending === true, projectionError: database.projectionError || null };
+  if (includeRecords) out.records = clone(database.records);
+  return out;
+}
+function publicRecord(record, references) { var out = clone(record); if (references && references.length) out.references = references; return out; }
+function titleValue(database, record) {
+  var field = database.schema.filter(function (entry) { return entry.type === "title" && !entry.archived; })[0];
+  return field && record.values[field.id] || "Untitled";
+}
+function compareValues(a, b) {
+  if (a === b) return 0; if (a === null || a === undefined) return 1; if (b === null || b === undefined) return -1;
+  if (typeof a === "boolean") return a === false ? -1 : 1;
+  if (typeof a === "number") return a < b ? -1 : 1;
+  var left = Array.isArray(a) ? a.join("\u0000") : typeof a === "object" ? (a.id || "") : String(a);
+  var right = Array.isArray(b) ? b.join("\u0000") : typeof b === "object" ? (b.id || "") : String(b);
+  return left === right ? 0 : left < right ? -1 : 1;
+}
+function matches(record, filter) {
+  var value = record.values[filter.fieldId]; var empty = value === null || value === undefined || value === "" || Array.isArray(value) && value.length === 0;
+  if (filter.op === "empty") return empty; if (filter.op === "not-empty") return !empty;
+  if (filter.op === "eq") return JSON.stringify(value) === JSON.stringify(filter.value);
+  if (filter.op === "neq") return JSON.stringify(value) !== JSON.stringify(filter.value);
+  if (filter.op === "contains") return Array.isArray(value) ? value.indexOf(filter.value) !== -1 : String(value || "").toLowerCase().indexOf(String(filter.value || "").toLowerCase()) !== -1;
+  if (empty || filter.value === null || filter.value === undefined) return false;
+  var comparison = compareValues(value, filter.value);
+  return filter.op === "gt" ? comparison > 0 : filter.op === "gte" ? comparison >= 0 : filter.op === "lt" ? comparison < 0 : comparison <= 0;
+}
+function cursor(signature, offset) { return Buffer.from(JSON.stringify({ signature: signature, offset: offset }), "utf8").toString("base64url"); }
+function decodeCursor(value, signature) {
+  if (!value) return 0;
+  try { var parsed = JSON.parse(Buffer.from(String(value), "base64url").toString("utf8")); if (parsed.signature !== signature || !Number.isInteger(parsed.offset) || parsed.offset < 0) throw new Error(); return parsed.offset; }
+  catch (cause) { throw error("Query cursor is invalid for this query.", "INVALID_CURSOR"); }
+}
+function referenceStates(database, record, databases, settings) { var states = []; database.schema.forEach(function (field) { var value = record.values[field.id]; if (field.type !== "reference" || !value) return; if (value.type === "text") { var exists = typeof settings.authorizeTextReference === "function" && settings.authorizeTextReference(value.id) === true; states.push({ fieldId: field.id, type: "text", id: value.id, status: exists ? "available" : "missing" }); return; } var targetDatabase = databases.filter(function (item) { return item._id === value.databaseId; })[0]; var targetRecord = targetDatabase && targetDatabase.records.filter(function (item) { return item.id === value.id; })[0]; var status = !targetDatabase || !targetRecord ? "missing" : targetDatabase.archivedAt || targetRecord.archivedAt ? "archived" : "available"; states.push({ fieldId: field.id, type: "record", id: value.id, databaseId: value.databaseId, status: status, label: targetRecord ? titleValue(targetDatabase, targetRecord) : null }); }); return states; }
+function queryRecords(database, args, databases, settings) {
+  var options = args || {}; var view = null;
+  if (options.viewId) { view = (database.views || []).filter(function (entry) { return entry.id === options.viewId && !entry.archived; })[0]; if (!view) throw error("Table view not found.", "NOT_FOUND"); }
+  if (options.filters && (!Array.isArray(options.filters) || options.filters.length > MAX_FILTERS)) throw error("Query has too many filters.", "LIMIT");
+  if (options.sorts && (!Array.isArray(options.sorts) || options.sorts.length > MAX_SORTS)) throw error("Query has too many sorts.", "LIMIT");
+  var filters = options.filters ? options.filters.map(function (entry) { return validation.normalizeFilter(entry, database.schema); }) : view ? view.filters : [];
+  var sorts = options.sorts ? options.sorts.map(function (entry) { return validation.normalizeSort(entry, database.schema); }) : view ? view.sorts : [];
+  var signature = crypto.createHash("sha256").update(JSON.stringify({ databaseId: database._id, revision: database.revision, filters: filters, sorts: sorts, archived: options.archived === true })).digest("hex").slice(0, 20);
+  var records = database.records.filter(function (record) { return options.archived === true ? !!record.archivedAt : !record.archivedAt; });
+  records = records.filter(function (record) { return filters.every(function (filter) { return matches(record, filter); }); });
+  records.sort(function (left, right) {
+    for (var i = 0; i < sorts.length; i++) { var order = compareValues(left.values[sorts[i].fieldId], right.values[sorts[i].fieldId]); if (order) return sorts[i].direction === "desc" ? -order : order; }
+    return left.id === right.id ? 0 : left.id < right.id ? -1 : 1;
+  });
+  var requestedLimit = options.limit === undefined ? 50 : options.limit;
+  if (!Number.isInteger(requestedLimit) || requestedLimit < 1 || requestedLimit > MAX_PAGE) throw error("Query limit must be an integer between 1 and " + MAX_PAGE + ".", "INVALID");
+  var count = requestedLimit; var offset = decodeCursor(options.cursor, signature); var page = records.slice(offset, offset + count);
+  var totals = { count: records.length, sums: {} };
+  database.schema.forEach(function (field) { if (field.type !== "number" || field.archived) return; var sum = 0; var has = false; records.forEach(function (record) { if (typeof record.values[field.id] === "number") { sum += record.values[field.id]; has = true; } }); if (has) totals.sums[field.id] = sum; });
+  return { databaseId: database._id, databaseRevision: database.revision, view: view ? clone(view) : null, records: page.map(function (record) { return publicRecord(record, referenceStates(database, record, databases, settings)); }), nextCursor: offset + count < records.length ? cursor(signature, offset + count) : null, totals: totals };
+}
+
+function createKnowledgeDbService(options) {
+  var settings = options || {}; var projectDir = path.resolve(settings.projectDir); var projectReal = null; var knowledgeDir = path.join(projectDir, "knowledge"); var dataDir = path.join(knowledgeDir, ".clay-db"); var filename = path.join(dataDir, "databases.db");
+  var aggregateLimit = Number.isInteger(settings.maxAggregateBytes) && settings.maxAggregateBytes > 1024 ? Math.min(MAX_AGGREGATE_BYTES, settings.maxAggregateBytes) : MAX_AGGREGATE_BYTES;
+  var entry = STORE_REGISTRY[filename];
+  if (!entry) { entry = { queues: {}, database: null, loading: null, ready: false }; STORE_REGISTRY[filename] = entry; }
+  function safeDirectory(target, create) {
+    var stat; try { stat = fs.lstatSync(target); } catch (cause) { if (!create || cause.code !== "ENOENT") throw cause; fs.mkdirSync(target, { recursive: true, mode: 0o700 }); stat = fs.lstatSync(target); }
+    if (!stat.isDirectory() || stat.isSymbolicLink()) throw error("Knowledge database path is unsafe.", "UNSAFE_PATH");
+    var real = fs.realpathSync(target); if (real !== projectReal && !real.startsWith(projectReal + path.sep)) throw error("Knowledge database path escapes the Mate project.", "UNSAFE_PATH");
+  }
+  function open() {
+    if (entry.loading) return entry.loading;
+    entry.loading = Promise.resolve().then(function () { projectReal = fs.realpathSync(projectDir); safeDirectory(knowledgeDir, true); safeDirectory(dataDir, true); var stat; try { stat = fs.lstatSync(filename); } catch (cause) { if (cause.code !== "ENOENT") throw cause; }
+      if (stat && (!stat.isFile() || stat.isSymbolicLink())) throw error("Knowledge database file is unsafe.", "UNSAFE_PATH"); entry.database = new Datastore({ filename: filename }); return entry.database.loadDatabaseAsync(); }).then(function () { return entry.database.ensureIndexAsync({ fieldName: "_id", unique: true }); }).then(function () { entry.ready = true; return entry.database; }).catch(function (cause) { entry.database = null; entry.loading = null; entry.ready = false; throw cause; });
+    return entry.loading;
+  }
+  function serialize(key, work) { var previous = entry.queues[key] || Promise.resolve(); var next = previous.catch(function () {}).then(work); entry.queues[key] = next.catch(function () {}); return next; }
+  function load(id) { return open().then(function (store) { return store.findOneAsync({ _id: validation.id(id, "database id") }); }).then(function (found) { if (!found) throw error("Knowledge database not found.", "NOT_FOUND"); return found; }); }
+  function all() { return open().then(function (store) { return store.findAsync({}); }); }
+  function listCached(args) { var items = entry.database ? entry.database.getAllData() : []; return { databases: items.filter(function (item) { return args && args.archived === true ? !!item.archivedAt : !item.archivedAt; }).sort(function (a, b) { return b.updatedAt - a.updatedAt || (a._id === b._id ? 0 : a._id < b._id ? -1 : 1); }).map(function (item) { return publicDatabase(item, false); }) }; }
+  function assertAggregate(next) { if (Buffer.byteLength(JSON.stringify(next), "utf8") > aggregateLimit) throw error("Knowledge database reached its storage limit.", "LIMIT"); }
+  function replace(current, next) { assertAggregate(next); return entry.database.updateAsync({ _id: current._id, revision: current.revision }, next, {}).then(function (result) { if (result.numAffected !== 1) throw error("This database changed during the operation.", "STALE", current.revision); return next; }); }
+  function projectionContent(value) { return JSON.stringify({ schemaVersion: 1, namespace: "knowledge-database-summary", databaseId: value._id, name: value.name, archived: !!value.archivedAt, revision: value.revision, fields: value.schema.filter(function (field) { return !field.archived; }).map(function (field) { return { id: field.id, name: field.name, type: field.type }; }), views: (value.views || []).filter(function (view) { return !view.archived; }).map(function (view) { return { id: view.id, name: view.name, type: "table" }; }), recordCount: value.records.filter(function (record) { return !record.archivedAt; }).length }); }
+  function project(value, actorValue) {
+    if (typeof settings.projectSummary !== "function") return Promise.resolve({ pending: false });
+    return Promise.resolve().then(function () { return settings.projectSummary({ databaseId: value._id, name: value.name, revision: value.revision, archived: !!value.archivedAt, content: projectionContent(value), actor: actorValue }); }).then(function () {
+      var clean = clone(value); clean.projectionPending = false; clean.projectionError = null; return entry.database.updateAsync({ _id: value._id, revision: value.revision }, clean, {}).then(function (result) { if (result.numAffected !== 1) return { pending: true, error: "A newer database revision still needs summary projection." }; return { pending: false }; });
+    }).catch(function (cause) { var message = cause.message || "Knowledge database summary projection failed."; var failed = clone(value); failed.projectionPending = true; failed.projectionError = message; return entry.database.updateAsync({ _id: value._id, revision: value.revision }, failed, {}).then(function () { return { pending: true, error: message }; }, function () { return { pending: true, error: message }; }); });
+  }
+  function finish(value, result, actorValue) { return project(value, actorValue).then(function (projection) { return Object.assign({}, result, { projectionPending: projection.pending, projectionError: projection.error || null }); }); }
+  function mutate(databaseId, args, label, fn) {
+    var operationId = mutationId(args.operationId); var operationFingerprint = fingerprint(label, args); return serialize(databaseId, function () { return load(databaseId).then(function (current) {
+      var duplicate = receipt(current, operationId, operationFingerprint); if (duplicate) return Object.assign({}, duplicate, { projectionPending: current.projectionPending === true, projectionError: current.projectionError || null });
+      if (current.archivedAt && label !== "database") throw error("Knowledge database is archived.", "ARCHIVED", current.revision);
+      var next = clone(current); var result = fn(next, current); next.projectionPending = true; next.projectionError = null; remember(next, operationId, operationFingerprint, result); return replace(current, next).then(function () { return finish(next, result, actor(args.actor)); });
+    }); });
+  }
+  function create(args) {
+    var input = args || {}; var operationId = mutationId(input.operationId); var operationFingerprint = fingerprint("create", input); return serialize("create:" + operationId, function () { return all().then(function (items) {
+      var duplicate; var duplicateDatabase; items.some(function (item) { duplicate = receipt(item, operationId, operationFingerprint); if (duplicate) duplicateDatabase = item; return !!duplicate; }); if (duplicate) return Object.assign({}, duplicate, { projectionPending: duplicateDatabase.projectionPending === true, projectionError: duplicateDatabase.projectionError || null });
+      var at = now(); var who = actor(input.actor); var titleId = newId("fld"); var schema = input.schema ? validation.normalizeSchema(input.schema) : validation.normalizeSchema([{ id: titleId, name: "Name", type: "title", required: true }]);
+      var viewId = newId("view"); var item = { _id: newId("db"), name: validation.text(input.name, "Database name", 120, false), revision: 1, archivedAt: null, schema: schema,
+        views: [{ id: viewId, name: "Table", type: "table", columns: schema.filter(function (field) { return !field.archived; }).map(function (field) { return field.id; }), filters: [], sorts: [], archived: false }], records: [], recordHistory: {}, databaseHistory: [], receipts: [], createdAt: at, updatedAt: at, createdBy: who, updatedBy: who, projectionPending: true, projectionError: null };
+      var result = { database: publicDatabase(item, false) }; remember(item, operationId, operationFingerprint, result); assertAggregate(item); return open().then(function (store) { return store.insertAsync(item); }).then(function () { return finish(item, result, who); });
+    }); });
+  }
+  function list(args) { return all().then(function (items) { return { databases: items.filter(function (item) { return args && args.archived === true ? !!item.archivedAt : !item.archivedAt; }).sort(function (a, b) { return b.updatedAt - a.updatedAt || (a._id === b._id ? 0 : a._id < b._id ? -1 : 1); }).map(function (item) { return publicDatabase(item, false); }) }; }); }
+  function read(args) { return load(args.databaseId).then(function (item) { if (item.archivedAt && args.includeArchived !== true) throw error("Knowledge database is archived.", "ARCHIVED", item.revision); return { database: publicDatabase(item, false) }; }); }
+  function rename(args) { return mutate(args.databaseId, args, "database", function (next, current) { ensureRevision(args.expectedRevision, current.revision, "database"); next.databaseHistory = next.databaseHistory.concat([{ revision: current.revision, at: now(), actor: actor(args.actor), action: "rename", name: current.name }]).slice(-MAX_HISTORY); next.name = validation.text(args.name, "Database name", 120, false); next.revision++; next.updatedAt = now(); next.updatedBy = actor(args.actor); return { database: publicDatabase(next, false) }; }); }
+  function archive(args) { return mutate(args.databaseId, args, "database", function (next, current) { ensureRevision(args.expectedRevision, current.revision, "database"); next.archivedAt = args.recover === true ? null : now(); next.revision++; next.updatedAt = now(); next.updatedBy = actor(args.actor); next.databaseHistory = next.databaseHistory.concat([{ revision: current.revision, at: next.updatedAt, actor: next.updatedBy, action: args.recover === true ? "recover" : "archive" }]).slice(-MAX_HISTORY); return { database: publicDatabase(next, false) }; }); }
+  function reconcileViews(views, schema) {
+    var active = {}; var titleId = null; schema.forEach(function (field) { if (!field.archived) { active[field.id] = true; if (field.type === "title") titleId = field.id; } });
+    return (views || []).map(function (view) { var clean = clone(view); clean.columns = clean.columns.filter(function (fieldId) { return active[fieldId]; }); if (!clean.columns.length && titleId) clean.columns = [titleId]; clean.filters = clean.filters.filter(function (filter) { return active[filter.fieldId]; }); clean.sorts = clean.sorts.filter(function (sort) { return active[sort.fieldId]; }); return clean; });
+  }
+  function updateSchema(args) { return mutate(args.databaseId, args, "schema", function (next, current) { ensureRevision(args.expectedRevision, current.revision, "database"); var schema = validation.normalizeSchema(args.schema); validation.assertCompatibleSchema(current.schema, schema, current.records); next.databaseHistory = next.databaseHistory.concat([{ revision: current.revision, at: now(), actor: actor(args.actor), action: "schema", schema: current.schema }]).slice(-MAX_HISTORY); next.schema = schema; next.views = reconcileViews(next.views, schema); next.revision++; next.updatedAt = now(); next.updatedBy = actor(args.actor); return { database: publicDatabase(next, false) }; }); }
+  function saveView(args) { return mutate(args.databaseId, args, "view", function (next, current) { ensureRevision(args.expectedRevision, current.revision, "database"); var view = validation.normalizeView(args.view, current.schema); var index = next.views.findIndex(function (entry) { return entry.id === view.id; }); if (index === -1 && next.views.length >= validation.MAX_VIEWS) throw error("Database has too many views.", "LIMIT"); if (index === -1) next.views.push(view); else next.views[index] = view; next.revision++; next.updatedAt = now(); next.updatedBy = actor(args.actor); return { database: publicDatabase(next, false), view: clone(view) }; }); }
+  function referenceContext(databases, current) { return { authorizeReference: function (reference) { if (reference.type === "text") return typeof settings.authorizeTextReference === "function" && settings.authorizeTextReference(reference.id) === true; var target = databases.filter(function (item) { return item._id === reference.databaseId; })[0]; return !!(target && target.records.some(function (record) { return record.id === reference.id; })); } }; }
+  function createRecord(args) { return all().then(function (databases) { return mutate(args.databaseId, args, "record", function (next, current) { ensureRevision(args.expectedDatabaseRevision, current.revision, "database"); if (next.records.length >= validation.MAX_RECORDS) throw error("Database reached the record limit.", "LIMIT"); var at = now(); var who = actor(args.actor); var record = { id: newId("rec"), revision: 1, values: validation.normalizeValues(args.values || {}, current.schema, referenceContext(databases, current), null), archivedAt: null, createdAt: at, updatedAt: at, createdBy: who, updatedBy: who }; next.records.push(record); next.recordHistory[record.id] = []; next.revision++; next.updatedAt = at; next.updatedBy = who; return { databaseRevision: next.revision, record: publicRecord(record) }; }); }); }
+  function updateRecord(args) { return all().then(function (databases) { return mutate(args.databaseId, args, "record", function (next, current) { var index = next.records.findIndex(function (record) { return record.id === validation.id(args.recordId, "record id"); }); if (index === -1) throw error("Knowledge database record not found.", "NOT_FOUND"); var before = next.records[index]; ensureRevision(args.expectedRevision, before.revision, "record"); if (before.archivedAt) throw error("Knowledge database record is archived.", "ARCHIVED", before.revision); next.recordHistory[before.id] = (next.recordHistory[before.id] || []).concat([{ revision: before.revision, at: now(), actor: actor(args.actor), action: "update", values: before.values }]).slice(-MAX_HISTORY); var record = clone(before); record.values = validation.normalizeValues(args.values || {}, current.schema, referenceContext(databases, current), record.values); record.revision++; record.updatedAt = now(); record.updatedBy = actor(args.actor); next.records[index] = record; next.revision++; next.updatedAt = record.updatedAt; next.updatedBy = record.updatedBy; return { databaseRevision: next.revision, record: publicRecord(record) }; }); }); }
+  function archiveRecord(args) { return mutate(args.databaseId, args, "record", function (next) { var index = next.records.findIndex(function (record) { return record.id === validation.id(args.recordId, "record id"); }); if (index === -1) throw error("Knowledge database record not found.", "NOT_FOUND"); var before = next.records[index]; ensureRevision(args.expectedRevision, before.revision, "record"); next.recordHistory[before.id] = (next.recordHistory[before.id] || []).concat([{ revision: before.revision, at: now(), actor: actor(args.actor), action: args.recover === true ? "recover" : "archive", values: before.values, archivedAt: before.archivedAt }]).slice(-MAX_HISTORY); var record = clone(before); record.archivedAt = args.recover === true ? null : now(); record.revision++; record.updatedAt = now(); record.updatedBy = actor(args.actor); next.records[index] = record; next.revision++; next.updatedAt = record.updatedAt; next.updatedBy = record.updatedBy; return { databaseRevision: next.revision, record: publicRecord(record) }; }); }
+  function readRecord(args) { return all().then(function (databases) { var item = databases.filter(function (entry) { return entry._id === validation.id(args.databaseId, "database id"); })[0]; if (!item) throw error("Knowledge database not found.", "NOT_FOUND"); var record = item.records.filter(function (entry) { return entry.id === validation.id(args.recordId, "record id"); })[0]; if (!record) throw error("Knowledge database record not found.", "NOT_FOUND"); return { database: publicDatabase(item, false), record: publicRecord(record, referenceStates(item, record, databases, settings)), title: titleValue(item, record), history: clone(item.recordHistory[record.id] || []) }; }); }
+  function query(args) { return all().then(function (databases) { var item = databases.filter(function (entry) { return entry._id === validation.id(args.databaseId, "database id"); })[0]; if (!item) throw error("Knowledge database not found.", "NOT_FOUND"); if (item.archivedAt) throw error("Knowledge database is archived.", "ARCHIVED", item.revision); return queryRecords(item, args, databases, settings); }); }
+  function retryProjection(args) { return serialize(args.databaseId, function () { return load(args.databaseId).then(function (item) { return finish(item, { database: publicDatabase(item, false) }, actor(args.actor)); }); }); }
+  return { filename: filename, hasStore: function () { try { return fs.lstatSync(filename).isFile(); } catch (cause) { return false; } }, isReady: function () { return entry.ready === true; }, initialize: open, listCached: listCached, create: create, list: list, read: read, rename: rename, archive: archive, recover: function (args) { return archive(Object.assign({}, args, { recover: true })); }, updateSchema: updateSchema, saveView: saveView, createRecord: createRecord, updateRecord: updateRecord, archiveRecord: archiveRecord, recoverRecord: function (args) { return archiveRecord(Object.assign({}, args, { recover: true })); }, readRecord: readRecord, query: query, retryProjection: retryProjection };
+}
+
+module.exports = { createKnowledgeDbService: createKnowledgeDbService, MAX_HISTORY: MAX_HISTORY, MAX_PAGE: MAX_PAGE, MAX_AGGREGATE_BYTES: MAX_AGGREGATE_BYTES, IDEMPOTENCY_WINDOW_MS: IDEMPOTENCY_WINDOW_MS };

package/lib/knowledge-document-index.js

@@ -0,0 +1,49 @@
+var crypto = require("crypto");
+var markdown = require("./knowledge-markdown");
+
+var MAX_INDEX_BYTES = 64 * 1024 * 1024;
+var MAX_RESULT_LIMIT = 100;
+
+function identity(file) {
+  return file.common ? "shared:" + encodeURIComponent(file.ownMateId || "unknown") + ":" + encodeURIComponent(file.id || file.name) : "local:" + encodeURIComponent(file.id || file.name);
+}
+
+function createKnowledgeDocumentIndex(options) {
+  var cache = {};
+
+  function reconcile() {
+    var listed = options.list(); var documents = []; var next = {}; var errors = []; var bytes = 0;
+    for (var i = 0; i < listed.length; i++) {
+      var file = listed[i]; var key = identity(file); var known = cache[key]; var content; var token = file.revision || null;
+      if (file.size > options.maxDocumentBytes) { errors.push({ name: file.name, code: "TOO_LARGE", error: "Document exceeds the safe read limit." }); continue; }
+      if (known && token && known.token === token) {
+        if (bytes + known.bytes > MAX_INDEX_BYTES) { errors.push({ name: file.name, code: "INDEX_LIMIT", error: "Workspace Knowledge exceeds the safe index limit." }); continue; }
+        next[key] = known; documents.push(known.document); bytes += known.bytes; continue;
+      }
+      try { content = options.read(file); } catch (error) { errors.push({ name: file.name, code: error.code || "READ_FAILED", error: error.message }); continue; }
+      var size = Buffer.byteLength(content, "utf8");
+      if (size > options.maxDocumentBytes) { errors.push({ name: file.name, code: "TOO_LARGE", error: "Document exceeds the safe read limit." }); continue; }
+      if (bytes + size > MAX_INDEX_BYTES) { errors.push({ name: file.name, code: "INDEX_LIMIT", error: "Workspace Knowledge exceeds the safe index limit." }); continue; }
+      token = token || crypto.createHash("sha256").update(content, "utf8").digest("hex");
+      var parsed = file.itemType === "db" ? { links: [], headings: [], tags: [], properties: {}, propertyErrors: [] } : markdown.parse(content);
+      var document = Object.assign({}, file, { key: key, content: content, parsed: parsed });
+      next[key] = { token: token, bytes: size, document: document }; documents.push(document); bytes += size;
+    }
+    cache = next;
+    return { documents: documents, errors: errors, complete: errors.length === 0, bytes: bytes };
+  }
+
+  function search(query, offset, limit) {
+    var indexed = reconcile(); var needle = String(query || "").trim().toLowerCase().slice(0, 200); var matches = [];
+    if (needle) for (var i = 0; i < indexed.documents.length; i++) {
+      var file = indexed.documents[i]; var at = file.content.toLowerCase().indexOf(needle);
+      if (file.name.toLowerCase().indexOf(needle) !== -1 || at !== -1) matches.push(Object.assign({}, file, { content: undefined, parsed: undefined, snippet: markdown.snippet(file.content, at === -1 ? 0 : at, needle) }));
+    }
+    var start = Math.max(0, Number(offset) || 0); var count = Math.max(1, Math.min(MAX_RESULT_LIMIT, Number(limit) || 50));
+    return { files: matches.slice(start, start + count), total: matches.length, offset: start, limit: count, complete: indexed.complete, errors: indexed.errors };
+  }
+
+  return { reconcile: reconcile, search: search, identity: identity };
+}
+
+module.exports = { createKnowledgeDocumentIndex: createKnowledgeDocumentIndex, identity: identity, MAX_INDEX_BYTES: MAX_INDEX_BYTES, MAX_RESULT_LIMIT: MAX_RESULT_LIMIT };