clay-server 5.1.1-beta.1 → 5.2.0-beta.10

package/lib/server.js

@@ -10,7 +10,7 @@ var dm = require("./dm");
 var mates = require("./mates");
 var serverAuth = require("./server-auth");
 var serverSkills = require("./server-skills");
-var claudeHookInstaller = require("./claude-hook-installer");
+var claudeHookInstaller = require("./yoke/claude-hook-installer");
 var serverDm = require("./server-dm");
 var serverMates = require("./server-mates");
 var serverHomeChat = require("./server-home-chat");
@@ -219,6 +219,14 @@ function createServer(opts) {
   var isRequestAuthed = auth.isRequestAuthed;
   var parseCookies = auth.parseCookies;
 
+  var projectAdminOverview = require("./project-admin-overview");
+
+  function administrativeMetadata(userId, slug) {
+    var user = userId && users.findUserById(userId);
+    var context = projects.get(slug);
+    return projectAdminOverview.metadataFor(user, context && context.getStatus(), onGetProjectAccess && onGetProjectAccess(slug), users);
+  }
+
   function canUserAccessSlug(userId, slug) {
     if (!userId || !slug) return false;
     var project = projects && projects.get(slug);
@@ -237,6 +245,13 @@ function createServer(opts) {
     return users.canAccessProject(userId, access) === true;
   }
 
+  var projects = new Map(); // slug → projectContext
+  var lifecycleRuntime = require("./project-lifecycle-runtime").attachLifecycleRuntime({ projects: projects });
+  var canUsePath = require("./server-path-access").attachPathAccess({
+    users: users, projects: projects, canAccess: canUserAccessSlug, osUsers: osUsers,
+    resolveIdentity: require("./os-users").resolveOsUserInfo,
+  });
+
   var realVersion = require("../package.json").version;
   var currentVersion = debug ? "0.0.9" : realVersion;
 
@@ -341,8 +356,13 @@ function createServer(opts) {
   var caContent = caPath ? (function () { try { return fs.readFileSync(caPath); } catch (e) { return null; } })() : null;
 
   // --- Project registry ---
-  var projects = new Map(); // slug → projectContext
   var assignmentService = attachWorkspaceAssignmentService({
+    getPresentation: function (principal) {
+      var project = projects.get(principal.sourceProjectSlug), manager = project && project.getSessionManager(), status = project && project.getStatus();
+      var session = manager && manager.sessions.get(principal.sourceSessionId);
+      var bound = clayProductControl && session && clayProductControl.bind({ projectSlug: principal.sourceProjectSlug, projectOwnerId: status.projectOwnerId, isMate: status.isMate, mateId: status.mateId, session: session });
+      return bound && bound._presentation;
+    },
     storageDir: path.join(CONFIG_DIR, "workspace-assignments"),
     getProjects: function () { return projects; },
     isMultiUser: function () { return users.isMultiUser(); },
@@ -363,6 +383,36 @@ function createServer(opts) {
     },
     assignmentService: assignmentService,
   });
+  var ownerUiService = require('./server-owner-ui').attachOwnerUi({
+    isMultiUser: users.isMultiUser, findUser: users.findUserById,
+    forEachClient: function (visit) {
+      if (globalWs) globalWs.forEachClient(function (ws) { visit(ws, null); });
+      projects.forEach(function (project, slug) { project.forEachClient(function (ws) { visit(ws, slug); }); });
+    }
+  });
+  var mateContextService = require('./mate-context-service').attachMateContextService({
+    getOwnerUi: function () { return ownerUiService; }, workspace: workspaceQueryService,
+    getProjects: function () { return projects; }, isMultiUser: users.isMultiUser,
+    findUser: users.findUserById, onGetProjectAccess: onGetProjectAccess,
+    canAccessProject: users.canAccessProject,
+    resolveMate: function (owner, id) { return mates.getMate(mates.buildMateCtx(users.isMultiUser() ? owner : null), id); }
+  });
+  var clayProductControl = require("./clay-product-control").attachClayProductControl({
+    getOwnerUi: function () { return ownerUiService; },
+    getNotifications: function () { return _globalNotifications; },
+    getRecordServices: function () { return { issues: issuesService, logs: projectLogsService }; },
+    projectLifecycle: opts.projectLifecycle || null,
+    getMateLifecycle: function () { return mateHandler && mateHandler.lifecycle; },
+    getMateDir: function (ownerId, mateId) { return mates.getMateDir(mates.buildMateCtx(users.isMultiUser() ? ownerId : null), mateId); },
+    lifecyclePermissions: function (user) { return users.getEffectivePermissions(user, osUsers); },
+    canUsePath: canUsePath,
+    getProjects: function () { return projects; },
+    isMultiUser: function () { return users.isMultiUser(); },
+    onGetProjectAccess: onGetProjectAccess,
+    canAccessProject: function (userId, access) { return users.canAccessProject(userId, access) === true; },
+    findUser: function (userId) { return users.findUserById(userId); },
+    resolveMate: function (userId, mateId) { return mates.getMate(mates.buildMateCtx(users.isMultiUser() ? userId : null), mateId); },
+  });
   // Project access is resolved from the authoritative project record, not from
   // getStatus(), which carries no visibility or allowedUsers fields.
   var projectLogsService = attachProjectLogsService({
@@ -409,6 +459,7 @@ function createServer(opts) {
   // Mate Knowledge reads the synchronized Knowledge records. The Mate list is
   // derived from the owning user alone, so a binding can never span users.
   var mateKnowledgeService = attachMateKnowledgeService({
+    findUser: function (userId) { return users.findUserById(userId); },
     getProjects: function () { return projects; },
     isMultiUser: function () { return users.isMultiUser(); },
     resolveMate: function (userId, mateId) {
@@ -491,6 +542,41 @@ function createServer(opts) {
     },
   });
 
+  function injectAppearanceSeed(html, appearance) {
+    var validId = function (value) {
+      return typeof value === "string" && /^[a-zA-Z0-9_-]{1,120}$/.test(value) ? value : null;
+    };
+    var mode = appearance && ["light", "dark"].indexOf(appearance.mode) >= 0 ? appearance.mode : null;
+    var seed = appearance && appearance.configured === true ? {
+      configured: true,
+      theme: validId(appearance.theme),
+      mode: mode,
+      lightTheme: validId(appearance.lightTheme),
+      darkTheme: validId(appearance.darkTheme),
+    } : null;
+    var payload = JSON.stringify(seed).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+    var script = '<script>window.__clayAppearanceSeed=' + payload + ';</script>';
+    return html.replace('<script src="appearance-bootstrap.js"></script>', script + '<script src="appearance-bootstrap.js"></script>');
+  }
+
+  function sendAppShell(req, res, slug) {
+    try {
+      var shell = fs.readFileSync(path.join(publicDir, "index.html"), "utf8");
+      if (slug) shell = injectRootProjectSlug(shell, slug);
+      var appearance = null;
+      try { appearance = settings.getInitialAppearance(req); } catch (e) {}
+      shell = injectAppearanceSeed(shell, appearance);
+      res.writeHead(200, {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "private, no-store",
+      });
+      res.end(shell);
+    } catch (e) {
+      res.writeHead(500, { "Content-Type": "text/plain" });
+      res.end("App shell missing.");
+    }
+  }
+
   var palette = serverPalette.attachPalette({
     users: users,
     projects: projects,
@@ -512,7 +598,28 @@ function createServer(opts) {
     broadcastAll: function (msg) { broadcastAll(msg); },
     sendToUser: function (userId, msg) { sendToUser(userId, msg); },
     pushModule: pushModule,
+    forEachClient: forEachAppClient,
+    getUsers: function () { return users.getAllUsers(); },
+    canView: function (ws, notification) { return canViewNotification(ws && ws._clayUser && ws._clayUser.id, notification); },
+    canViewPrincipal: function (principal, notification) { return canViewNotification(principal.userId, notification); },
   });
+  function canViewNotification(userId, notification) {
+      if (!users.isMultiUser()) return true;
+      if (!userId || !users.findUserById(userId)) return false;
+      if (notification.targetUserId && notification.targetUserId !== userId) return false;
+      if (notification.slug) {
+        if (!canUserAccessSlug(userId, notification.slug)) return false;
+        if (notification.sessionId) {
+          var project = projects.get(notification.slug);
+          var session = project && project.getSessionManager().sessions.get(notification.sessionId);
+          var status = project && project.getStatus();
+          var access = status && status.isMate ? { isMate: true, visibility: "private", ownerId: status.projectOwnerId } : onGetProjectAccess(notification.slug);
+          if (!session || !users.canAccessSession(userId, session, access)) return false;
+        }
+        return !notification.ownerId || notification.ownerId === userId || !!notification.sessionId;
+      }
+      return notification.targetUserId === userId || notification.ownerId === userId;
+  }
 
   // --- Security headers ---
   var securityHeaders = {
@@ -910,15 +1017,7 @@ function createServer(opts) {
           });
         }
         if (targetSlug) {
-          try {
-            var homeHtml = fs.readFileSync(path.join(publicDir, "index.html"), "utf8");
-            homeHtml = injectRootProjectSlug(homeHtml, targetSlug);
-            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-cache" });
-            res.end(homeHtml);
-          } catch (e) {
-            res.writeHead(500, { "Content-Type": "text/plain" });
-            res.end("App shell missing.");
-          }
+          sendAppShell(req, res, targetSlug);
           return;
         }
       }
@@ -936,9 +1035,7 @@ function createServer(opts) {
           return;
         }
       }
-      if (serveStatic("/index.html", res)) return;
-      res.writeHead(500, { "Content-Type": "text/plain" });
-      res.end("App shell missing.");
+      sendAppShell(req, res, null);
       return;
     }
 
@@ -955,8 +1052,8 @@ function createServer(opts) {
       var projectList = [];
       var infoUser = users.isMultiUser() ? getMultiUserFromReq(req) : null;
       projects.forEach(function (ctx, slug) {
-        if (users.isMultiUser() && (!infoUser || !canUserAccessSlug(infoUser.id, slug))) return;
-        projectList.push({ slug: slug, project: ctx.project });
+        if (users.isMultiUser() && (!infoUser || (!canUserAccessSlug(infoUser.id, slug) && !administrativeMetadata(infoUser.id, slug)))) return;
+        projectList.push({ slug: slug, project: ctx.project, contentAccess: !users.isMultiUser() || canUserAccessSlug(infoUser.id, slug) });
       });
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify({ projects: projectList, version: currentVersion, authenticated: true }));
@@ -965,6 +1062,10 @@ function createServer(opts) {
 
     // Static files (favicon, manifest, icons, sw.js, mate avatars, etc.)
     if (!fullUrl.includes("..") && !fullUrl.startsWith("/p/") && !fullUrl.startsWith("/api/")) {
+      if (fullUrl === "/index.html") {
+        sendAppShell(req, res, null);
+        return;
+      }
       if (serveStatic(fullUrl, res)) return;
     }
 
@@ -1028,8 +1129,14 @@ function createServer(opts) {
     if (users.isMultiUser() && !isMcpBridgeAuthenticated) {
       var httpUser = getMultiUserFromReq(req);
       if (!httpUser || !canUserAccessSlug(httpUser.id, slug)) {
-        res.writeHead(302, { "Location": "/" });
-        res.end();
+        var overview = httpUser && administrativeMetadata(httpUser.id, slug);
+        if (overview && req.method === "GET" && (projectUrlForAuth === "/" || projectUrlForAuth === "/index.html")) {
+          res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+          res.end(projectAdminOverview.page(overview, getVisibleProjects(httpUser.id)));
+          return;
+        }
+        res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+        res.end(JSON.stringify({ error: "Project content access is not permitted" }));
         return;
       }
     }
@@ -1054,6 +1161,10 @@ function createServer(opts) {
 
     // Static files (same assets for all projects)
     if (req.method === "GET") {
+      if (projectUrl === "/" || projectUrl === "/index.html") {
+        sendAppShell(req, res, slug);
+        return;
+      }
       if (serveStatic(projectUrl, res)) return;
     }
 
@@ -1134,6 +1245,7 @@ function createServer(opts) {
   var globalWs = serverGlobalWs.attachGlobalWs({
     osUsers: osUsers,
     usersModule: users,
+    canUsePath: canUsePath,
     onAddProject: onAddProject,
     onCreateProject: onCreateProject,
     onCloneProject: onCloneProject,
@@ -1182,8 +1294,10 @@ function createServer(opts) {
       }
       var globalUser = users.isMultiUser() ? getMultiUserFromReq(req) : null;
       wss.handleUpgrade(req, socket, head, function (ws) {
+        if (!require('./account-auth-socket').guardSocket(ws, req, isRequestAuthed, auth.touchSession)) return;
         ws._clayPane = wsRequest.pane;
         ws._clayPaneSession = wsRequest.paneSession;
+        ws._clayContextual = wsRequest.contextual;
         globalWs.handleConnection(ws, globalUser);
       });
       return;
@@ -1223,11 +1337,13 @@ function createServer(opts) {
     }
 
     wss.handleUpgrade(req, socket, head, function (ws) {
+      if (!require('./account-auth-socket').guardSocket(ws, req, isRequestAuthed, auth.touchSession)) return;
       // Apply rate limiting to WS messages
       applyWsRateLimit(ws, WS_RATE_LIMIT);
       ws._clayUser = wsUser; // attach user context
       ws._clayPane = wsRequest.pane;
       ws._clayPaneSession = wsRequest.paneSession;
+      ws._clayContextual = wsRequest.contextual;
       var remoteAddr = req.socket.remoteAddress || "";
       ws._clayLocal = (remoteAddr === "127.0.0.1" || remoteAddr === "::1" || remoteAddr === "::ffff:127.0.0.1");
       // Clear cross-project unread for this project when client connects
@@ -1272,17 +1388,10 @@ function createServer(opts) {
     if (processingUpdateTimer) clearTimeout(processingUpdateTimer);
     processingUpdateTimer = setTimeout(function () {
       processingUpdateTimer = null;
-      var allProjectsList = getProjects();
       // Always send per-client to include cross-project unread counts
       projects.forEach(function (ctx, projSlug) {
         ctx.forEachClient(function (ws) {
-          var filtered = allProjectsList;
-          if (users.isMultiUser() && onGetProjectAccess) {
-            var wsUser = ws._clayUser;
-            filtered = wsUser ? allProjectsList.filter(function (p) {
-              return canUserAccessSlug(wsUser.id, p.slug);
-            }) : [];
-          }
+          var filtered = getVisibleProjects(ws._clayUser ? ws._clayUser.id : null);
           // Attach per-project unread counts for this client
           var unreadMap = getCrossProjectUnread(ws);
           var projectsWithUnread = filtered.map(function (p) {
@@ -1332,6 +1441,10 @@ function createServer(opts) {
   function addProject(cwd, slug, title, icon, projectOwnerId, worktreeMeta, extraOpts) {
     if (projects.has(slug)) return false;
     var extra = extraOpts || {};
+    if (extra.isMate) {
+      var registeredMate = mates.getMate(mates.buildMateCtx(users.isMultiUser() ? projectOwnerId : null), extra.mateId || path.basename(cwd));
+      if (registeredMate && registeredMate.lifecycleDeletion) return false;
+    }
     var ctx = createProjectContext({
       cwd: cwd,
       slug: slug,
@@ -1351,6 +1464,9 @@ function createServer(opts) {
         return mateHandler.createReadyMateFromInterview(ws, userId, definition);
       },
       workspaceQueryService: workspaceQueryService,
+      clayProductControl: clayProductControl,
+      mateContextService: mateContextService,
+      resumeLifecycleProject: function (userId) { return opts.projectLifecycle ? opts.projectLifecycle.resumeRecovered(slug, userId) : true; },
       projectLogsService: projectLogsService,
       issuesService: issuesService,
       linearStorage: linear.storage,
@@ -1372,13 +1488,19 @@ function createServer(opts) {
         return !!(access && !access.error && users.canAccessProject(userId, access));
       },
       getProjectAccess: function () {
-        if (extra.isMate) return { isMate: true, visibility: "private", ownerId: projectOwnerId || null, allowedUsers: [] };
+        if (extra.isMate) {
+          var mate = mates.getMate(mates.buildMateCtx(users.isMultiUser() ? projectOwnerId : null), extra.mateId || path.basename(cwd));
+          return { isMate: true, visibility: "private", ownerId: projectOwnerId || null, allowedUsers: [], lifecycleExecutionPaused: !mate || !!mate.lifecycleDeletion };
+        }
         return onGetProjectAccess ? onGetProjectAccess(slug) : { visibility: "public", ownerId: projectOwnerId || null };
       },
       shouldSuppressResponseNotification: function (session) {
         return shouldSuppressHomeResponse(projects, slug, session);
       },
-      pushModule: pushModule,
+      pushModule: require("./project-push-access").scopedPush(pushModule, {
+        slug: slug, users: users, getProject: function (target) { return projects.get(target); },
+        canAccessProject: canUserAccessSlug, getAccess: onGetProjectAccess,
+      }),
       debug: debug,
       dangerouslySkipPermissions: dangerouslySkipPermissions,
       osUsers: osUsers,
@@ -1410,6 +1532,7 @@ function createServer(opts) {
           var status = ctx.getStatus();
           var recs = ctx.getSchedules();
           for (var i = 0; i < recs.length; i++) {
+            if (users.isMultiUser() && recs[i].ownerId !== userId) continue;
             // Shallow-copy full record and augment with project metadata
             var copy = {};
             var keys = Object.keys(recs[i]);
@@ -1467,6 +1590,7 @@ function createServer(opts) {
         return ctx.getSchedules().length;
       },
       canAccessProjectSlug: canUserAccessSlug,
+      canUsePath: canUsePath,
       onPresenceChange: broadcastPresenceChange,
       onProcessingChanged: broadcastProcessingChange,
       onSessionDone: function () { onSessionDone(slug); },
@@ -1620,6 +1744,8 @@ function createServer(opts) {
   }
 
   function handleDmMessage(ws, msg, routedProjectSlug) {
+    if (ownerUiService.handleMessage(ws, msg)) return true;
+    if (mateContextService.handleMessage(ws, msg)) return true;
     if (cursorSharingService && cursorSharingService.handleMessage(ws, msg)) return true;
     if (defaultVendorService && defaultVendorService.handleMessage(ws, msg, routedProjectSlug)) return true;
     if (contextViewService && contextViewService.handleMessage(ws, msg)) return true;
@@ -1628,25 +1754,14 @@ function createServer(opts) {
     if (dmHandler.handleMessage(ws, msg)) return true;
     if (mateHandler && mateHandler.handleMessage(ws, msg)) return true;
     if (emailHandler.handleMessage(ws, msg)) return true;
-    if (homeChatHandler.handleMessage(ws, msg)) return true;
+    if (homeChatHandler.handleMessage(ws, msg, routedProjectSlug)) return true;
     if (homePreferencesHandler.handleMessage(ws, msg)) return true;
     if (toolsHandler.handleMessage(ws, msg)) return true;
     return false;
   }
 
-  function removeProject(slug) {
-    var ctx = projects.get(slug);
-    if (!ctx) return false;
-    var wasMate = ctx.getStatus().isMate;
-    var shutdownResult = ctx.destroy();
-    projects.delete(slug);
-    if (shutdownResult && typeof shutdownResult.catch === "function") {
-      shutdownResult.catch(function(err) {
-        console.error("[server] Project destroy failed for " + slug + ":", err && err.message ? err.message : err);
-      });
-    }
-    if (!wasMate) scheduleRegistryRefresh();
-    return true;
+  function removeProject(slug, awaitCompletion) {
+    return require('./server-project-removal').removeProjectRuntime(projects, slug, awaitCompletion, scheduleRegistryRefresh);
   }
 
   // Now that addProject and removeProject are defined, initialize mateHandler
@@ -1732,7 +1847,11 @@ function createServer(opts) {
   function getVisibleProjects(userId) {
     var visible = [];
     projects.forEach(function (ctx, slug) {
-      if (users.isMultiUser() && (!userId || !canUserAccessSlug(userId, slug))) return;
+      if (users.isMultiUser() && (!userId || !canUserAccessSlug(userId, slug))) {
+        var metadata = administrativeMetadata(userId, slug);
+        if (metadata) visible.push(metadata);
+        return;
+      }
       var status = ctx.getStatus();
       if (!status.isMate && onGetProjectAccess) {
         var access = onGetProjectAccess(slug);
@@ -1931,6 +2050,7 @@ function createServer(opts) {
     speech.destroy();
     var shutdowns = [];
     shutdowns.push(durableSchedulerLifecycle.shutdown());
+    shutdowns.push(lifecycleRuntime.shutdown());
     projects.forEach(function (ctx, slug) {
       console.log("[server] Destroying project:", slug);
       var result = ctx.destroy();
@@ -1998,6 +2118,8 @@ function createServer(opts) {
     isTLS: !!tlsOptions,
     addProject: addProject,
     removeProject: removeProject,
+    getProjectLifecycleTargets: lifecycleRuntime.targets,
+    closeProjectLifecycle: lifecycleRuntime.close,
     getProjects: getProjects,
     reorderProjects: reorderProjects,
     setProjectTitle: setProjectTitle,

package/lib/session-config-transition.js

@@ -0,0 +1,45 @@
+// Guarded configuration commit shared by SDK setters and permission transitions.
+// Provider acknowledgement is distinct from local persistence. Once a request
+// has crossed that boundary, failures never imply the provider was rolled back.
+async function applySessionConfig(ctx) {
+  var session = ctx.session, sm = ctx.sm, handle = session.queryInstance;
+  var generation = Number(session._sdkQueryGeneration || 0), owner = session.ownerId;
+  var paused = !!session._pendingMessageDrainPaused, signal = session.abortController && session.abortController.signal;
+  var attempted = false, acknowledged = false, persisted = false, previous = {};
+  function current() {
+    ctx.revalidate();
+    if (sm.sessions.get(session.localId) !== session || session.ownerId !== owner || session.queryInstance !== handle ||
+        Number(session._sdkQueryGeneration || 0) !== generation || session.taskStopRequested ||
+        !!session._pendingMessageDrainPaused !== paused || signal && signal.aborted) throw new Error("Target ownership, runtime, or Stop state changed during the configuration request.");
+  }
+  try {
+    current();
+    if (handle) {
+      if (typeof handle[ctx.method] !== "function") throw new Error("This provider cannot apply this configuration to the active runtime.");
+      attempted = true;
+      var reply = await handle[ctx.method](ctx.nativeValue);
+      if (reply === false || reply && reply.ok === false) throw new Error(reply && reply.error || "The provider refused the configuration change.");
+      acknowledged = true;
+      current();
+    }
+    var changes = typeof ctx.changes === "function" ? ctx.changes() : ctx.changes;
+    Object.keys(changes).forEach(function (key) { previous[key] = { present: Object.prototype.hasOwnProperty.call(session, key), value: session[key] }; });
+    Object.assign(session, changes);
+    try {
+      if (sm.saveSessionFile(session) !== true) throw new Error("Could not persist the configuration change.");
+      persisted = true;
+    } catch (error) {
+      Object.keys(previous).forEach(function (key) { if (previous[key].present) session[key] = previous[key].value; else delete session[key]; });
+      throw error;
+    }
+    // There is no await between the last authorization check, disk commit and
+    // publication. Never broadcast a desired value before its save succeeds.
+    ctx.publish();
+    return Object.assign({ ok: true, status: "completed", persisted: true, runtimeEffect: acknowledged ? "applied" : "none" }, changes);
+  } catch (error) {
+    return { ok: false, status: "failed", outcome: persisted ? "partial" : attempted ? "uncertain" : "failed", persisted: persisted,
+      runtimeEffect: acknowledged ? "applied" : attempted ? "unknown" : "none", retrySafe: !attempted && !persisted,
+      error: (persisted ? "The configuration was saved, but publication did not complete. " : "") + (attempted ? "The provider may retain the requested change; no external rollback was attempted. " : "") + (error.message || String(error)) };
+  }
+}
+module.exports = { applySessionConfig: applySessionConfig };

package/lib/session-folders.js

@@ -9,7 +9,7 @@
 //                                          also keeps its folder (or Unfiled) assignment
 //   orders:      { containerKey: [keys] }  manual order per container ("unfiled", custom id, "all")
 //   collapsed:   { containerKey: true }
-//   view:        { group, sort, direction }
+//   view:        { group, sort, direction, showDateHeadings }
 // sessionKey is the session's opaque, durable sessionOriginId.
 
 var crypto = require("crypto");
@@ -35,7 +35,7 @@ function defaultState() {
     favorites: [],
     orders: {},
     collapsed: {},
-    view: { group: "folders", sort: "activity", direction: "desc" },
+    view: { group: "folders", sort: "activity", direction: "desc", showDateHeadings: true },
     legacyFavoritesMigrated: false,
   };
 }
@@ -147,6 +147,7 @@ function normalizeState(raw) {
   var view = isPlainObject(source.view) ? source.view : {};
   if (SORTS.indexOf(view.sort) !== -1) state.view.sort = view.sort;
   if (DIRECTIONS.indexOf(view.direction) !== -1) state.view.direction = view.direction;
+  if (typeof view.showDateHeadings === "boolean") state.view.showDateHeadings = view.showDateHeadings;
   state.legacyFavoritesMigrated = source.legacyFavoritesMigrated === true;
   return state;
 }
@@ -334,6 +335,10 @@ function applyRaw(input, op, env) {
       if (DIRECTIONS.indexOf(op.direction) === -1) return { error: "Invalid direction" };
       state.view.direction = op.direction;
     }
+    if (op.showDateHeadings !== undefined) {
+      if (typeof op.showDateHeadings !== "boolean") return { error: "Invalid date heading setting" };
+      state.view.showDateHeadings = op.showDateHeadings;
+    }
     return { state: state };
   }
 

package/lib/session-fork-history.js

@@ -0,0 +1,21 @@
+// Product transcript slicing for providers that include a completed turn.
+function endIndex(session, uuid, boundary) {
+  if (boundary === undefined) return undefined;
+  if (boundary !== "completed-turn-inclusive") throw new Error("Unsupported local fork history boundary");
+  var history = session.history || [];
+  var markers = (session.messageUUIDs || []).filter(function(marker) { return marker.uuid === uuid && marker.type === "user"; });
+  var marker = markers.length === 1 && markers[0];
+  var index = marker && marker.historyIndex;
+  var entry = Number.isInteger(index) && history[index];
+  if (!entry || entry.type !== "message_uuid" || entry.uuid !== uuid) throw new Error("Cannot safely represent this completed-turn fork boundary in local history");
+  for (var i = index + 1; i < history.length; i++) {
+    entry = history[i];
+    if (entry.type === "user_message" || entry.type === "message_uuid" && entry.messageType === "user") break;
+    if (entry.type === "done") {
+      if (entry.code === 0) return i + 1;
+      break;
+    }
+  }
+  throw new Error("Cannot safely represent this completed-turn fork boundary in local history");
+}
+module.exports = { endIndex: endIndex };

package/lib/session-github.js

@@ -33,22 +33,29 @@ function runGh(cwd, args, identity, input) {
 }
 async function readReference(cwd, url, identity, run, statusOnly) {
   var ref = parseReference(url);
-  var fields = "title,state,url" + (ref.kind === "pr" ? (statusOnly ? ",isDraft" : ",isDraft,headRefName,reviewDecision,statusCheckRollup") : "");
+  var fields = "title,state,url" + (ref.kind === "pr" ? (statusOnly ? ",isDraft,reviewDecision,reviewRequests" : ",isDraft,headRefName,reviewDecision,statusCheckRollup") : "");
   var data = await (run || runGh)(cwd, [ref.kind === "pr" ? "pr" : "issue", "view", String(ref.number), "--repo", ref.repository, "--json", fields], identity);
   var verified = parseReference(data.url);
   if (verified.url.toLowerCase() !== ref.url.toLowerCase()) throw new Error("GitHub returned a different reference.");
   ref.title = String(data.title || "").slice(0, 200);
   ref.state = data.state === "MERGED" ? "merged" : data.state === "CLOSED" ? "closed" : data.state === "OPEN" ? (data.isDraft ? "draft" : "open") : "unknown";
   ref.checkedAt = Date.now();
+  if (ref.kind === "pr") {
+    ref.review = ["APPROVED", "CHANGES_REQUESTED", "REVIEW_REQUIRED"].indexOf(data.reviewDecision) >= 0 ? data.reviewDecision : "";
+  }
   if (ref.kind === "pr" && !statusOnly) {
     ref.branch = String(data.headRefName || "").slice(0, 200);
-    ref.review = ["APPROVED", "CHANGES_REQUESTED", "REVIEW_REQUIRED"].indexOf(data.reviewDecision) >= 0 ? data.reviewDecision : "";
     ref.checks = (data.statusCheckRollup || []).slice(0, 30).map(function (check) {
       var target = check.detailsUrl || check.targetUrl || "";
       if (!/^https:\/\//i.test(target)) target = "";
       return { name: String(check.name || check.context || "Check").slice(0, 100), state: String(check.conclusion || check.state || check.status || "PENDING").slice(0, 40), url: target };
     });
   }
+  if (ref.kind === "pr" && statusOnly) {
+    ref.reviewRequests = Array.isArray(data.reviewRequests) ? data.reviewRequests.slice(0, 30).map(function (request) {
+      return String(request.login || "").trim().toLowerCase().slice(0, 100);
+    }).filter(Boolean) : [];
+  }
   return ref;
 }
 module.exports = { parseReference: parseReference, readReference: readReference, runGh: runGh };

package/lib/session-hygiene.js

@@ -5,7 +5,7 @@
 var sessionProvenance = require("./session-provenance");
 
 var BLANK_SESSION_MAX_AGE_MS = 24 * 60 * 60 * 1000;
-var CLAUDE_INTERRUPTED_TEXT = "[Request interrupted by user]";
+var transcriptHygiene = require("./yoke/claude-transcript-hygiene");
 
 // A session is "blank" when nothing has ever happened in it and nothing is
 // attached to it. Adopted external sessions are never blank (their transcript
@@ -61,43 +61,11 @@ function collectStaleBlankSessions(sessions, activeSessionId, now) {
   return stale;
 }
 
-function extractClaudeUserText(event) {
-  var content = event && event.message && event.message.content;
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  var parts = [];
-  for (var i = 0; i < content.length; i++) {
-    if (content[i] && content[i].type === "text" && typeof content[i].text === "string") {
-      parts.push(content[i].text);
-    }
-  }
-  return parts.join("");
-}
-
-// SDK capability probes create a real Claude transcript with a single "hi"
-// prompt. Newer Claude Code versions append an interruption record when Clay
-// aborts the probe, so that bookkeeping record must not make the transcript
-// look like a real two-turn conversation.
-function isClaudeWarmupTranscript(events) {
-  var promptCount = 0;
-  for (var i = 0; i < events.length; i++) {
-    var event = events[i];
-    if (!event || typeof event !== "object") continue;
-    if (event.type === "assistant") return false;
-    if (event.type !== "user" || !event.message || event.message.role !== "user") continue;
-    var text = extractClaudeUserText(event);
-    if (text === CLAUDE_INTERRUPTED_TEXT) continue;
-    if (text !== "hi") return false;
-    promptCount++;
-  }
-  return promptCount === 1;
-}
-
 module.exports = {
   isBlankSession: isBlankSession,
   findReusableBlankSession: findReusableBlankSession,
   collectStaleBlankSessions: collectStaleBlankSessions,
-  extractClaudeUserText: extractClaudeUserText,
-  isClaudeWarmupTranscript: isClaudeWarmupTranscript,
+  extractClaudeUserText: transcriptHygiene.extractClaudeUserText,
+  isClaudeWarmupTranscript: transcriptHygiene.isClaudeWarmupTranscript,
   BLANK_SESSION_MAX_AGE_MS: BLANK_SESSION_MAX_AGE_MS,
 };

package/lib/session-permission-mode.js

@@ -7,11 +7,12 @@ function normalize(mode) {
   return null;
 }
 
-function capabilities(session, defaultVendor) {
+function capabilities(session, defaultVendor, provider) {
   var vendor = session && session.vendor || defaultVendor || "claude";
+  var contract = require("./yoke/session-tool-transport").contract(provider || vendor);
   return {
-    auto: vendor === "claude",
-    mcpOverride: vendor === "claude" && !!(session && session.queryInstance &&
+    auto: Array.isArray(contract.permissionModes) && contract.permissionModes.indexOf("auto") !== -1,
+    mcpOverride: contract.mcpPermissionOverrides === true && !!(session && session.queryInstance &&
       typeof session.queryInstance.setMcpPermissionModeOverride === "function"),
   };
 }

package/lib/session-skill-scope.js

@@ -0,0 +1,11 @@
+// Bind personal instruction reads to the existing live session/query authority.
+function bind(session, sessions, options, valid, multiUser) {
+  var owner = session.ownerId || null;
+  return Object.assign({}, options, { isAvailable: function() {
+    if (!sessions || typeof sessions.get !== "function" || sessions.get(session.localId) !== session || !valid() || (session.ownerId || null) !== owner || session.youCurator || session.sessionVisibility === "shared" || session._mcpForeignInput) return false;
+    if (owner) return require("./mcp-session-access").canUsePersonalConnections(session, sessions);
+    return !multiUser && !session.delegated && !session._delegatedBy && !session._pairDelegation
+      && !(session.history || []).some(function(entry) { return entry.type === "user_message" && entry.from && entry.from !== "default"; });
+  } });
+}
+module.exports = { bind: bind };

package/lib/session-visibility.js

@@ -54,7 +54,7 @@ function handleDefaultChange(ctx, ws, msg) {
     ? ctx.usersModule.getEffectivePermissions(user, ctx.osUsers) : {};
   var isOwner = !!(user && access && access.ownerId && access.ownerId === user.id);
   var isAdmin = !!(user && user.role === "admin");
-  if (!user || !permissions.projectSettings || (!isOwner && !isAdmin)) {
+  if (!user || !permissions.projectSettings || !isOwner) {
     defaultChangeResult(ctx, ws, msg, { ok: false, error: "Project settings access is not permitted" });
     return true;
   }
@@ -98,7 +98,10 @@ function revokeViewers(ctx, session) {
       // Clear the server-side selection before reconnecting so no further
       // session events or input can cross the revoked access boundary.
       client._clayActiveSession = null;
-      if (client.readyState === 1) client.close(1008, "Session access changed");
+      if (client.readyState === 1) {
+        if (ctx.sendTo) ctx.sendTo(client, { type: "access_revoked", slug: ctx.slug });
+        client.close(1008, "Session access changed");
+      }
     });
   }
 }