clay-server 5.2.0-beta.1 → 5.2.0-beta.11

package/lib/public/mate-avatars/catalog.json

@@ -0,0 +1,482 @@
+[
+  {
+    "id": "B01",
+    "family": "B",
+    "name": "Indigo Cyclops"
+  },
+  {
+    "id": "B02",
+    "family": "B",
+    "name": "Coral Sentinel"
+  },
+  {
+    "id": "B03",
+    "family": "B",
+    "name": "Golden Visor"
+  },
+  {
+    "id": "B04",
+    "family": "B",
+    "name": "Mint Wide Eyes"
+  },
+  {
+    "id": "B05",
+    "family": "B",
+    "name": "Ivory Grin"
+  },
+  {
+    "id": "B06",
+    "family": "B",
+    "name": "Blue Teardrop"
+  },
+  {
+    "id": "B07",
+    "family": "B",
+    "name": "Peach Orbit"
+  },
+  {
+    "id": "B08",
+    "family": "B",
+    "name": "Lilac Sleeper"
+  },
+  {
+    "id": "B09",
+    "family": "B",
+    "name": "Coral Prism"
+  },
+  {
+    "id": "B10",
+    "family": "B",
+    "name": "Mint Spring"
+  },
+  {
+    "id": "B11",
+    "family": "B",
+    "name": "Golden Pebbles"
+  },
+  {
+    "id": "B12",
+    "family": "B",
+    "name": "Periwinkle Orbit"
+  },
+  {
+    "id": "B13",
+    "family": "B",
+    "name": "Coral Horizon"
+  },
+  {
+    "id": "B14",
+    "family": "B",
+    "name": "Indigo Stack"
+  },
+  {
+    "id": "B15",
+    "family": "B",
+    "name": "Mint Button Box"
+  },
+  {
+    "id": "B16",
+    "family": "B",
+    "name": "Golden Curve"
+  },
+  {
+    "id": "B17",
+    "family": "B",
+    "name": "Loop Listener"
+  },
+  {
+    "id": "B18",
+    "family": "B",
+    "name": "Blue Twin Antenna"
+  },
+  {
+    "id": "B19",
+    "family": "B",
+    "name": "Lilac Daydream"
+  },
+  {
+    "id": "B20",
+    "family": "B",
+    "name": "Coral Toothsome"
+  },
+  {
+    "id": "B21",
+    "family": "B",
+    "name": "Ivory Satellite"
+  },
+  {
+    "id": "B22",
+    "family": "B",
+    "name": "Mint Coil"
+  },
+  {
+    "id": "B23",
+    "family": "B",
+    "name": "Golden Wonder"
+  },
+  {
+    "id": "B24",
+    "family": "B",
+    "name": "Slate Smile"
+  },
+  {
+    "id": "B25",
+    "family": "B",
+    "name": "Lilac Shield"
+  },
+  {
+    "id": "B26",
+    "family": "B",
+    "name": "Mint Diamond"
+  },
+  {
+    "id": "B27",
+    "family": "B",
+    "name": "Coral Pebble"
+  },
+  {
+    "id": "B28",
+    "family": "B",
+    "name": "Golden Horns"
+  },
+  {
+    "id": "B29",
+    "family": "B",
+    "name": "Blue Trio"
+  },
+  {
+    "id": "B30",
+    "family": "B",
+    "name": "Ivory Tower"
+  },
+  {
+    "id": "B31",
+    "family": "B",
+    "name": "Charcoal Grin"
+  },
+  {
+    "id": "B32",
+    "family": "B",
+    "name": "Teal Cheer"
+  },
+  {
+    "id": "B33",
+    "family": "B",
+    "name": "Rose Satellite"
+  },
+  {
+    "id": "B34",
+    "family": "B",
+    "name": "Blue Spool"
+  },
+  {
+    "id": "B35",
+    "family": "B",
+    "name": "Golden Band"
+  },
+  {
+    "id": "B36",
+    "family": "B",
+    "name": "Mint Beacon"
+  },
+  {
+    "id": "B37",
+    "family": "B",
+    "name": "Charcoal Crescent"
+  },
+  {
+    "id": "B38",
+    "family": "B",
+    "name": "Coral Cyclops"
+  },
+  {
+    "id": "B39",
+    "family": "B",
+    "name": "Blue Scout"
+  },
+  {
+    "id": "B40",
+    "family": "B",
+    "name": "Ivory Navigator"
+  },
+  {
+    "id": "B41",
+    "family": "B",
+    "name": "Golden Porthole"
+  },
+  {
+    "id": "B42",
+    "family": "B",
+    "name": "Lilac Windup"
+  },
+  {
+    "id": "B43",
+    "family": "B",
+    "name": "Mint Receiver"
+  },
+  {
+    "id": "B44",
+    "family": "B",
+    "name": "Coral Stack"
+  },
+  {
+    "id": "B45",
+    "family": "B",
+    "name": "Indigo Porthole"
+  },
+  {
+    "id": "B46",
+    "family": "B",
+    "name": "Stone Sprout"
+  },
+  {
+    "id": "B47",
+    "family": "B",
+    "name": "Mint Sunbeam"
+  },
+  {
+    "id": "B48",
+    "family": "B",
+    "name": "Golden Cubby"
+  },
+  {
+    "id": "C01",
+    "family": "C",
+    "name": "Violet Smile"
+  },
+  {
+    "id": "C02",
+    "family": "C",
+    "name": "Apricot Joy"
+  },
+  {
+    "id": "C03",
+    "family": "C",
+    "name": "Sage Curious"
+  },
+  {
+    "id": "C04",
+    "family": "C",
+    "name": "Golden Wink"
+  },
+  {
+    "id": "C05",
+    "family": "C",
+    "name": "Blue Sideglance"
+  },
+  {
+    "id": "C06",
+    "family": "C",
+    "name": "Charcoal Wonder"
+  },
+  {
+    "id": "C07",
+    "family": "C",
+    "name": "Lilac Specs"
+  },
+  {
+    "id": "C08",
+    "family": "C",
+    "name": "Coral Giggle"
+  },
+  {
+    "id": "C09",
+    "family": "C",
+    "name": "Mint Blush"
+  },
+  {
+    "id": "C10",
+    "family": "C",
+    "name": "Golden Button"
+  },
+  {
+    "id": "C11",
+    "family": "C",
+    "name": "Sky Smile"
+  },
+  {
+    "id": "C12",
+    "family": "C",
+    "name": "Plum Joy"
+  },
+  {
+    "id": "C13",
+    "family": "C",
+    "name": "Teal Diamond"
+  },
+  {
+    "id": "C14",
+    "family": "C",
+    "name": "Peach Dimple"
+  },
+  {
+    "id": "C15",
+    "family": "C",
+    "name": "Indigo Delight"
+  },
+  {
+    "id": "C16",
+    "family": "C",
+    "name": "Sage Sprout"
+  },
+  {
+    "id": "C17",
+    "family": "C",
+    "name": "Golden Specs"
+  },
+  {
+    "id": "C18",
+    "family": "C",
+    "name": "Lilac Stargaze"
+  },
+  {
+    "id": "C19",
+    "family": "C",
+    "name": "Blue Curiosity"
+  },
+  {
+    "id": "C20",
+    "family": "C",
+    "name": "Coral Heart"
+  },
+  {
+    "id": "C21",
+    "family": "C",
+    "name": "Mint Bud"
+  },
+  {
+    "id": "C22",
+    "family": "C",
+    "name": "Ivory Surprise"
+  },
+  {
+    "id": "C23",
+    "family": "C",
+    "name": "Rose Wink"
+  },
+  {
+    "id": "C24",
+    "family": "C",
+    "name": "Sky Giggle"
+  },
+  {
+    "id": "C25",
+    "family": "C",
+    "name": "Ivory Dreamer"
+  },
+  {
+    "id": "C26",
+    "family": "C",
+    "name": "Mint Loop"
+  },
+  {
+    "id": "C27",
+    "family": "C",
+    "name": "Violet Glasses"
+  },
+  {
+    "id": "C28",
+    "family": "C",
+    "name": "Coral Sunshine"
+  },
+  {
+    "id": "C29",
+    "family": "C",
+    "name": "Slate Sideglance"
+  },
+  {
+    "id": "C30",
+    "family": "C",
+    "name": "Golden Dimple"
+  },
+  {
+    "id": "C31",
+    "family": "C",
+    "name": "Teal Listener"
+  },
+  {
+    "id": "C32",
+    "family": "C",
+    "name": "Peach Cheer"
+  },
+  {
+    "id": "C33",
+    "family": "C",
+    "name": "Indigo Blush"
+  },
+  {
+    "id": "C34",
+    "family": "C",
+    "name": "Sage Daydream"
+  },
+  {
+    "id": "C35",
+    "family": "C",
+    "name": "Rose Wonder"
+  },
+  {
+    "id": "C36",
+    "family": "C",
+    "name": "Sky Blush"
+  },
+  {
+    "id": "C37",
+    "family": "C",
+    "name": "Peach Heart"
+  },
+  {
+    "id": "C38",
+    "family": "C",
+    "name": "Blue Button"
+  },
+  {
+    "id": "C39",
+    "family": "C",
+    "name": "Lilac Wink"
+  },
+  {
+    "id": "C40",
+    "family": "C",
+    "name": "Mint Dish"
+  },
+  {
+    "id": "C41",
+    "family": "C",
+    "name": "Ivory Wonder"
+  },
+  {
+    "id": "C42",
+    "family": "C",
+    "name": "Violet Cheer"
+  },
+  {
+    "id": "C43",
+    "family": "C",
+    "name": "Rose Specs"
+  },
+  {
+    "id": "C44",
+    "family": "C",
+    "name": "Teal Delight"
+  },
+  {
+    "id": "C45",
+    "family": "C",
+    "name": "Golden Diamond"
+  },
+  {
+    "id": "C46",
+    "family": "C",
+    "name": "Lilac Surprise"
+  },
+  {
+    "id": "C47",
+    "family": "C",
+    "name": "Sage Listener"
+  },
+  {
+    "id": "C48",
+    "family": "C",
+    "name": "Coral Crown"
+  }
+]

package/lib/public/modules/admin-settings-invitations.js

@@ -1,7 +1,7 @@
 import { store } from './store.js';
 import { iconHtml, refreshIcons } from './icons.js';
 import { showToast, copyToClipboard, escapeHtml } from './utils.js';
-import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal } from './admin-settings-ui.js';
+import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal, mountAdminSubview } from './admin-settings-ui.js';
 // --- Invites ---
 export function loadInvitesTab(body) {
   apiGet("/api/admin/invites").then(function (data) {
@@ -138,7 +138,7 @@ function showEmailInvitePrompt(body) {
     '<button class="admin-modal-cancel">Cancel</button>' +
     '</div></div>';
   modal.innerHTML = html;
-  document.body.appendChild(modal);
+  mountAdminSubview(modal);
   prepareAdminModal(modal);
   refreshIcons(modal);
 

package/lib/public/modules/admin-settings-projects.js

@@ -1,7 +1,7 @@
 import { store } from './store.js';
 import { iconHtml, refreshIcons } from './icons.js';
 import { showToast, copyToClipboard, escapeHtml } from './utils.js';
-import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal } from './admin-settings-ui.js';
+import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal, mountAdminSubview } from './admin-settings-ui.js';
 // --- Projects ---
 export function loadProjectsTab(body) {
   var projectList = store.get('projectsHubList') || [];
@@ -16,7 +16,7 @@ export function loadProjectsTab(body) {
 
   var accessPromises = projectList.map(function (p) {
     return apiGet("/api/admin/projects/" + p.slug + "/access").then(function (access) {
-      return { slug: p.slug, title: p.title || p.project || p.slug, projectOwnerId: p.projectOwnerId || null, visibility: access.visibility || "public", allowedUsers: access.allowedUsers || [] };
+      return { slug: p.slug, title: p.title || p.project || p.slug, projectOwnerId: p.projectOwnerId || null, visibility: access.visibility || "public", allowedUsers: access.allowedUsers || [], readOnly: access.contentAccess === false || p.projectOwnerId !== store.get("myUserId") };
     });
   });
 
@@ -39,9 +39,13 @@ function renderProjectsTab(body, projectAccessList, allUsers) {
     html += '<div class="admin-project-slug">' + escapeHtml(p.slug) + '</div>';
     html += '</div>';
     html += '<div class="admin-project-controls">';
+    if (p.readOnly) {
+      html += '<span class="admin-project-access-readonly">Administrative metadata only</span></div></div>';
+      continue;
+    }
     // Owner select
     html += '<select aria-label="Project owner" class="admin-owner-select" data-slug="' + escapeHtml(p.slug) + '">';
-    html += '<option value=""' + (!p.projectOwnerId ? ' selected' : '') + '>No owner</option>';
+    if (!p.projectOwnerId) html += '<option value="" selected disabled>Ownership needs recovery</option>';
     for (var u = 0; u < allUsers.length; u++) {
       var user = allUsers[u];
       var sel = p.projectOwnerId === user.id ? ' selected' : '';
@@ -164,7 +168,7 @@ function showProjectUsersModal(slug, parentBody) {
     html += '</div>';
 
     modal.innerHTML = html;
-    document.body.appendChild(modal);
+    mountAdminSubview(modal);
   prepareAdminModal(modal);
     refreshIcons(modal);
 

package/lib/public/modules/admin-settings-ui.js

@@ -14,13 +14,29 @@ export function apiPost(url, body) { return request(url, 'POST', body || {}); }
 export function apiPut(url, body) { return request(url, 'PUT', body); }
 export function apiDelete(url) { return request(url, 'DELETE'); }
 
+// Editors open inline in the active Server settings page (a subview with its
+// own Back/Cancel path) instead of over the page. Only destructive
+// confirmations remain overlay dialogs.
+export function mountAdminSubview(modal) {
+  var host = document.querySelector('#server-settings .server-settings-section.active');
+  if (!host) { document.body.appendChild(modal); return; }
+  modal.className = 'admin-subview settings-subview';
+  host.classList.add('has-subview');
+  host.appendChild(modal);
+  var observer = new MutationObserver(function () {
+    if (!host.querySelector('.settings-subview')) { host.classList.remove('has-subview'); observer.disconnect(); }
+  });
+  observer.observe(host, { childList: true });
+}
+
 export function prepareAdminModal(modal) {
   if (modal.dataset.prepared) return;
   modal.dataset.prepared = 'true';
   var previous = document.activeElement;
-  var restore = isolateSettingsDialog(modal);
+  var inline = modal.classList.contains('settings-subview');
+  var restore = inline ? function () {} : isolateSettingsDialog(modal);
   var dialog = modal.querySelector('.admin-modal');
-  dialog.setAttribute('role', 'dialog'); dialog.setAttribute('aria-modal', 'true');
+  dialog.setAttribute('role', inline ? 'region' : 'dialog'); if (!inline) dialog.setAttribute('aria-modal', 'true');
   var title = dialog.querySelector('h3'); dialog.setAttribute('aria-label', title ? title.textContent : 'Confirm action');
   var dirty = false;
   modal.addEventListener('input', function () { dirty = true; });
@@ -37,7 +53,7 @@ export function prepareAdminModal(modal) {
   modal.addEventListener('keydown', function (event) {
     event.stopPropagation();
     if (event.key === 'Escape') { event.preventDefault(); if (dirty) cancel(event); else modal.remove(); }
-    trapSettingsFocus(event, modal);
+    if (!inline) trapSettingsFocus(event, modal);
   });
   modal.querySelectorAll('.admin-smtp-row').forEach(function (row) {
     var label = row.querySelector('label'); var input = row.querySelector('input, select');
@@ -49,7 +65,7 @@ export function prepareAdminModal(modal) {
   var closeObserver = new MutationObserver(function () {
     if (!modal.isConnected) { closeObserver.disconnect(); restore(); if (previous && previous.isConnected) previous.focus(); }
   });
-  closeObserver.observe(document.body, { childList: true });
+  closeObserver.observe(inline ? modal.parentElement : document.body, { childList: true });
   var focus = modal.querySelector('input:not([type=hidden]), .admin-modal-cancel, button');
   if (focus) focus.focus();
 }

package/lib/public/modules/admin-settings-users.js

@@ -1,7 +1,7 @@
 import { store } from './store.js';
 import { iconHtml, refreshIcons } from './icons.js';
 import { showToast, copyToClipboard, escapeHtml } from './utils.js';
-import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal } from './admin-settings-ui.js';
+import { apiGet, apiPost, apiPut, apiDelete, showConfirmDialog, showConfirmResetPin, prepareAdminModal, mountAdminSubview } from './admin-settings-ui.js';
 // --- Users ---
 export function loadUsersTab(body) {
   apiGet("/api/admin/users").then(function (data) {
@@ -163,7 +163,7 @@ function showPermissionsModal(user, body) {
     '</div></div>';
 
   modal.innerHTML = html;
-  document.body.appendChild(modal);
+  mountAdminSubview(modal);
   prepareAdminModal(modal);
   refreshIcons(modal);
 
@@ -222,7 +222,7 @@ function showAddUserModal(body) {
     '<button class="admin-modal-cancel">Cancel</button>' +
     '</div></div>';
   modal.innerHTML = html;
-  document.body.appendChild(modal);
+  mountAdminSubview(modal);
   prepareAdminModal(modal);
   refreshIcons(modal);
 
@@ -299,7 +299,7 @@ function showTempPinModal(user, tempPin) {
     '<button class="admin-modal-cancel">Close</button>' +
     '</div></div>';
   modal.innerHTML = html;
-  document.body.appendChild(modal);
+  mountAdminSubview(modal);
   prepareAdminModal(modal);
   refreshIcons(modal);
 

package/lib/public/modules/app-connection.js

@@ -1,3 +1,4 @@
+import { leaveRevokedProject, reconnectDestination } from './project-access-recovery.js';
 // app-connection.js - WebSocket connection, reconnect, status
 // Extracted from app.js (PR-22)
 
@@ -25,6 +26,7 @@ import { clearMcpPermissionModePending } from './mcp-ui.js';
 import { createWebSocketLifecycle } from './websocket-lifecycle.js';
 import { createWebSocketWatchdog } from './websocket-watchdog.js';
 import { resetHistoryReplayBatch } from './history-replay-batch.js';
+import { paneOutgoing } from './pane-activation.js';
 
 var connectOverlay = null;
 var hasConnectedOnce = false;
@@ -355,6 +357,7 @@ export function connect() {
       console.log("[clay] WebSocket reconnected after " + (Date.now() - disconnectedAt) + "ms");
     }
     disconnectedAt = 0;
+    newWs.send(JSON.stringify({ type: "clay_ui_ready", version: 1 }));
     setStatus("connected");
     startHeartbeat(newWs, attemptEpoch);
     lifecycle.clearRetry();
@@ -369,6 +372,8 @@ export function connect() {
     var currentWs = getWs();
     var _origSend = currentWs.send.bind(currentWs);
     currentWs.send = function (data) {
+      data = paneOutgoing(data);
+      if (data === null) return false;
       blinkIO();
       return _origSend(data);
     };
@@ -460,7 +465,12 @@ export function scheduleReconnect(reason) {
         location.reload();
         return;
       }
-      connect();
+      return res.json().then(function (info) {
+        if (!lifecycle.canProceed(authEpoch)) return;
+        var destination = reconnectDestination(info, store.get('currentSlug'));
+        if (destination) { leaveRevokedProject(destination); return; }
+        connect();
+      });
     }).catch(function () {
       var authFinished = lifecycle.finishAuth(authEpoch, authToken);
       if (authFinished && lifecycle.canProceed(authEpoch)) connect();