clay-server 5.2.0-beta.1 → 5.2.0-beta.11

package/lib/public/modules/pane-binding.js

@@ -0,0 +1,82 @@
+import { store } from './store.js';
+import { getWs } from './ws-ref.js';
+
+export function captureSessionAction() {
+  var state = store.snap();
+  return { projectSlug: state.currentSlug, ownerId: state.myUserId, sessionId: state.activeSessionId,
+    origin: state.sessionOriginId, socket: getWs(), binding: state.paneCommittedBinding || null,
+    epoch: state.sessionActionEpoch || 0 };
+}
+
+export function sessionActionCurrent(action, draftCompletion) {
+  var state = store.snap();
+  return !!action && action.socket === getWs() && state.connected &&
+    action.projectSlug === state.currentSlug && action.ownerId === state.myUserId &&
+    action.sessionId === state.activeSessionId && action.origin === state.sessionOriginId &&
+    action.epoch === (state.sessionActionEpoch || 0) &&
+    (draftCompletion || !state.deferredSessionSwitch) && !state.panePendingBinding && !state.paneSuspended &&
+    (action.binding ? state.paneReady && samePaneBinding(action.binding, state.paneCommittedBinding) : !state.paneCommittedBinding);
+}
+
+// Capture at callback creation, never when an old callback eventually sends.
+export function sessionCallback(callback, draftCompletion) {
+  var action = captureSessionAction();
+  return function () {
+    if (!sessionActionCurrent(action, draftCompletion)) return;
+    var previous = store.get('paneCallbackBinding');
+    store.set({ paneCallbackBinding: action.binding });
+    try { return callback.apply(this, arguments); }
+    finally { store.set({ paneCallbackBinding: previous }); }
+  };
+}
+
+export function samePaneBinding(a, b) {
+  return !!a && !!b && ['requestId', 'generation', 'projectSlug', 'viewerId', 'ownerId', 'sessionId', 'sessionOriginId', 'role', 'workerGeneration', 'groupStamp', 'parentSessionOriginId'].every(function (key) { return a[key] === b[key]; });
+}
+
+export function samePaneTarget(a, b) {
+  return !!a && !!b && ['projectSlug', 'viewerId', 'ownerId', 'sessionId', 'sessionOriginId', 'role', 'workerGeneration', 'groupStamp', 'parentSessionOriginId'].every(function (key) { return a[key] === b[key]; });
+}
+
+export function paneTarget(state, sessions, id) {
+  var session = (sessions || []).find(function (item) { return item.id === id; });
+  if (!session || session.isMate || !session.sessionOriginId || (session.runtimeMode || session.mode || 'gui') !== 'gui' || session.tuiSuspended) return null;
+  var group = (state.splitGroups || []).find(function (item) { return item.members.indexOf(id) >= 0; });
+  var parent = session.sessionRole === 'worker' && sessions.find(function (item) { return item.id === session.parentSessionId; });
+  if (session.sessionRole === 'worker' && (!parent || !session.parentAvailable || !Number.isSafeInteger(session.workerGeneration) || !parent.sessionOriginId || parent.ownerId !== session.ownerId || !group || !group.pair || group.pair.driverId !== parent.id)) return null;
+  return {
+    projectSlug: state.currentSlug, viewerId: state.myUserId || null, ownerId: session.ownerId || null,
+    sessionId: session.id, sessionOriginId: session.sessionOriginId,
+    role: session.sessionRole === 'worker' ? 'worker' : 'driver', workerGeneration: session.workerGeneration || null,
+    parentSessionOriginId: parent ? parent.sessionOriginId : null,
+    groupStamp: group ? JSON.stringify({ id: group.id, members: group.members, pair: group.pair || null }) : null,
+  };
+}
+
+// Ordinary reusable panes have a live document binding; legacy/canonical frames
+// retain their existing URL and receipt checks in their own bridge paths.
+export function livePaneBinding(frame, message) {
+  if (!frame || !frame.clayPane) return false;
+  var api = frame.clayPane, live = api.identity();
+  var state = store.snap(), split = state.splitPanes;
+  var target = live && paneTarget(state, state.paneBindingSessions || [], live.sessionId);
+  return api.source === frame.contentWindow && api.document === frame.contentDocument && live && live.ready &&
+    samePaneTarget(target, live.binding) &&
+    live.ownerId === (state.myUserId || null) && live.projectSlug === state.currentSlug &&
+    split && split.panes.some(function (pane) { return pane.slug === live.projectSlug && pane.sessionId === live.sessionId; }) &&
+    (!message || samePaneBinding(live.binding, message.paneBinding));
+}
+
+export function paneMessageBinding() {
+  return store.get('paneReady') && !store.get('paneSuspended') ? store.get('paneCommittedBinding') : null;
+}
+
+export function currentPaneReview(container) {
+  if (!container || !container.paneBinding) return true;
+  return container.isConnected !== false && store.get('paneReady') && !store.get('paneSuspended') && samePaneBinding(container.paneBinding, store.get('paneCommittedBinding'));
+}
+
+export function paneCallbackCurrent(binding) {
+  var current = store.get('panePendingBinding') || store.get('paneCommittedBinding');
+  return current ? samePaneBinding(current, binding) : !binding;
+}

package/lib/public/modules/pane-bridge.js

@@ -1,9 +1,11 @@
+import { forwardStudioPresentation } from './clay-studio-render.js';
 // Pane-side postMessage bridge for the split-view shell. A chrome-less pane
 // iframe reports its context usage up to the parent (which renders a chip in
 // the pane header) and honors panel-toggle requests coming back down.
 // Same-origin messages only, both directions.
 
 import { store } from './store.js';
+import { paneMessageBinding, samePaneBinding } from './pane-binding.js';
 import { getEffectiveContextView } from './context-view-preference.js';
 import { forceExternalLinkToNewTab } from './pane-links.js';
 
@@ -11,6 +13,7 @@ export function reportPaneContext(data) {
   if (!store.get('paneMode') || window.parent === window) return;
   window.parent.postMessage({
     type: "clay-pane-context",
+    paneBinding: paneMessageBinding(),
     sessionId: store.get('activeSessionId'),
     pct: data.pct,
     used: data.used,
@@ -26,19 +29,18 @@ export function reportPaneContext(data) {
 // Hand the event to the parent shell, which owns the single flow.
 export function forwardPaneAuthRequired(message) {
   if (!store.get('paneMode') || window.parent === window) return false;
-  window.parent.postMessage({ type: "clay-pane-auth-required", message: message }, window.location.origin);
+  window.parent.postMessage({ type: "clay-pane-auth-required", paneBinding: paneMessageBinding(), message: message }, window.location.origin);
   return true;
 }
 
 export function forwardPaneMarkdownPresentation(message) {
   if (!store.get('paneMode') || window.parent === window) return false;
-  window.parent.postMessage({ type: "clay-pane-present-markdown", message: message }, window.location.origin);
-  return true;
+  return forwardStudioPresentation(message, "clay-pane-present-markdown");
 }
 
 export function forwardPaneIssueReference(ref, projectSlug) {
   if (!store.get('paneMode') || window.parent === window) return false;
-  window.parent.postMessage({ type: "clay-pane-open-issue", ref: ref, projectSlug: projectSlug || store.get('currentSlug') }, window.location.origin);
+  window.parent.postMessage({ type: "clay-pane-open-issue", paneBinding: paneMessageBinding(), ref: ref, projectSlug: projectSlug || store.get('currentSlug') }, window.location.origin);
   return true;
 }
 
@@ -70,6 +72,7 @@ export function initPaneBridge() {
     if (event.origin !== window.location.origin) return;
     var msg = event.data;
     if (!msg || msg.type !== "clay-pane-toggle-context") return;
+    if (event.source !== window.parent || store.get('paneCommittedBinding') && !samePaneBinding(paneMessageBinding(), msg.paneBinding)) return;
     togglePaneContextPanel();
   });
 }

package/lib/public/modules/pane-browser-bridge.js

@@ -0,0 +1,22 @@
+import { store } from './store.js';
+import { livePaneBinding, paneMessageBinding } from './pane-binding.js';
+import { showToast } from './utils.js';
+
+export function forwardPaneBrowserLink(url) {
+  if (!store.get('paneMode') || window.parent === window) return false;
+  window.parent.postMessage({ type: 'clay-pane-open-browser', paneBinding: paneMessageBinding(), url: url, projectSlug: store.get('currentSlug'), sessionId: String(store.get('activeSessionId')) }, window.location.origin);
+  return true;
+}
+export function handlePaneBrowserMessage(event, host) {
+  if (!event || event.origin !== window.location.origin || !host || !event.data || event.data.type !== 'clay-pane-open-browser') return false;
+  var msg = event.data, s = store.snap();
+  var frame = Array.from(host.querySelectorAll('.split-pane-frame')).find(function (item) { return item.contentWindow === event.source; });
+  var pane = frame && s.splitPanes && s.splitPanes.panes && s.splitPanes.panes.find(function (item) { return String(item.slug) === frame.dataset.projectSlug && String(item.sessionId) === frame.dataset.sessionId; });
+  if (!pane || msg.projectSlug !== s.currentSlug || msg.projectSlug !== frame.dataset.projectSlug || String(msg.sessionId) !== frame.dataset.sessionId) return true;
+  var expected = new URL('/p/' + encodeURIComponent(pane.slug) + '/?pane=1&session=' + encodeURIComponent(pane.sessionId), window.location.href).href;
+  if (frame.clayPane ? !livePaneBinding(frame, msg) : frame.src !== expected) return true;
+  // The authenticated host owns the browser; a live same-project pane supplies only a URL.
+  var binding = frame.clayPane && frame.clayPane.identity().binding;
+  import('./shared-browser.js').then(function (module) { if (binding && (!livePaneBinding(frame, msg) || frame.clayPane.identity().binding !== binding)) return; module.openSharedBrowserAt(msg.url); }).catch(function (error) { showToast(error.message || 'Could not open the browser.', 'warn'); });
+  return true;
+}

package/lib/public/modules/pane-file-bridge.js

@@ -1,4 +1,5 @@
 import { store } from './store.js';
+import { livePaneBinding, paneMessageBinding } from './pane-binding.js';
 
 function paneFrame(host, source) {
   if (!host || !source) return null;
@@ -19,6 +20,7 @@ function matchingPane(frame, split) {
 }
 
 function hasLivePaneSource(frame, pane) {
+  if (frame && frame.clayPane) return livePaneBinding(frame);
   if (!frame || !pane || typeof frame.src !== "string") return false;
   var expected = "/p/" + encodeURIComponent(pane.slug) + "/?pane=1&session=" + encodeURIComponent(pane.sessionId);
   try { return new URL(expected, window.location.href).href === frame.src; } catch (e) { return false; }
@@ -41,6 +43,7 @@ export function forwardPaneFileReference(path, opts) {
   if (!store.get('paneMode') || window.parent === window || typeof path !== "string" || !path) return false;
   window.parent.postMessage({
     type: "clay-pane-open-file",
+    paneBinding: paneMessageBinding(),
     path: path,
     line: opts && opts.line != null ? opts.line : null,
     column: opts && opts.column != null ? opts.column : null,
@@ -57,6 +60,7 @@ export function handlePaneFileMessage(event, host, openFile, openFiles) {
   var frame = paneFrame(host, event.source);
   var state = store.snap();
   var pane = matchingPane(frame, state.splitPanes);
+  if (frame && frame.clayPane && !livePaneBinding(frame, msg)) return true;
   if (!pane || !hasLivePaneSource(frame, pane) || String(pane.slug) !== String(state.currentSlug) || msg.projectSlug !== frame.dataset.projectSlug || String(msg.sessionId) !== String(frame.dataset.sessionId) || !validLocation(msg.line) || !validLocation(msg.column)) return true;
   if (typeof msg.path !== "string" || !msg.path) return true;
   if (!state.connected || typeof openFile !== "function") return true;

package/lib/public/modules/pane-issue-bridge.js

@@ -1,4 +1,5 @@
 import { store } from './store.js';
+import { livePaneBinding } from './pane-binding.js';
 import { openIssues } from './issues.js';
 
 function isIssueReference(ref) {
@@ -8,7 +9,7 @@ function isIssueReference(ref) {
 function isPaneSource(host, source) {
   var frames = host.querySelectorAll(".split-pane-frame");
   for (var i = 0; i < frames.length; i++) {
-    if (frames[i].contentWindow === source) return true;
+    if (frames[i].contentWindow === source) return !frames[i].clayPane || livePaneBinding(frames[i]);
   }
   return false;
 }
@@ -18,6 +19,8 @@ export function handlePaneIssueMessage(event, host) {
   var msg = event.data;
   if (!msg || msg.type !== "clay-pane-open-issue") return false;
   if (!isIssueReference(msg.ref) || !isPaneSource(host, event.source)) return true;
+  var frame = Array.from(host.querySelectorAll('.split-pane-frame')).find(function (item) { return item.contentWindow === event.source; });
+  if (frame && frame.clayPane && !livePaneBinding(frame, msg)) return true;
 
   var issueTarget = store.get('issuesCache') && store.get('issuesCache')[msg.ref];
   var projectSlug = (issueTarget && issueTarget.projectSlug) || msg.projectSlug || store.get('currentSlug');

package/lib/public/modules/pending-message-queue.js

@@ -330,6 +330,7 @@ function renderItem(item, index) {
   var disabled = controlsDisabled ? ' disabled aria-disabled="true"' : '';
   var text = (item.message && item.message.text || "").trim() || "Attachment-only message";
   var html = '<div class="pending-message-chip' + (item.state === "claimed" ? ' is-claimed' : '') + (scheduled ? ' is-scheduled' : '') + (futureScheduled ? ' is-future' : '') + '" data-pending-id="' + escapeHtml(item.id) + '">';
+  if (item.schedule && item.schedule.logicalScheduleId) html = html.replace('data-pending-id=', 'data-control-schedule-id="' + escapeHtml(item.schedule.logicalScheduleId) + '" data-control-revision="' + escapeHtml(item.schedule.logicalRevision || '') + '" data-control-runtime="' + escapeHtml(store.get('controlRuntimeId') || '') + '" data-pending-id=');
   html += '<span class="pending-message-number" aria-hidden="true">' + (index + 1) + '</span>';
   if (own && item.state === "pending") html += '<button class="pending-message-drag" type="button" data-action="drag" aria-label="Reorder queued message ' + (index + 1) + '" title="Drag, or use arrow keys to reorder"' + disabled + '>' + '<i data-lucide="grip-vertical"></i></button>';
   else html += '<span class="pending-message-drag is-static"><i data-lucide="' + (item.state === "claimed" ? "loader-circle" : "lock-keyhole") + '"></i></span>';

package/lib/public/modules/permission-control.js

@@ -66,7 +66,7 @@ export function permissionStatusText(state, pending, autoSupported, autoVisible)
   if (state.permissionMode === "plan") return "Plan workflow";
   if (state.permissionMode === "acceptEdits") return "Auto-accept edits workflow";
   if (state.permissionMode === "dontAsk") return "Don't ask workflow";
-  if (autoVisible && !autoSupported) return "Auto unavailable for this Claude session";
+  if (autoVisible && !autoSupported) return "Auto unavailable for this session";
   if (state.permissionMode === "auto" && !state.effectivePermissionMode) return "Auto selected · waiting for runtime";
   if (state.permissionMode === "auto" && state.effectivePermissionMode !== "auto") {
     return "Auto unavailable at runtime · using " + modeLabel(state.effectivePermissionMode);
@@ -91,7 +91,8 @@ export function renderPermissionControl(control, state) {
   var projectSlug = state.projectSlug || "";
   var sessionId = state.sessionId || null;
   var pending = permissionPendingFor(projectSlug, sessionId);
-  var autoVisible = state.vendor === "claude";
+  var description = ((store.get("vendorInfo") || {})[state.vendor] || {}).configuration || {};
+  var autoVisible = description.auto === true || !!(state.permissionCapabilities && state.permissionCapabilities.auto === true);
   var autoSupported = !!(state.permissionCapabilities && state.permissionCapabilities.auto === true);
   var globallyForced = state.globalPermissionModeForced === true;
   var connected = state.connected !== false && !!getWs() && getWs().readyState === 1;
@@ -114,7 +115,7 @@ export function renderPermissionControl(control, state) {
     buttons[i].classList.toggle("pending", requested);
     buttons[i].setAttribute("aria-pressed", selected ? "true" : "false");
     buttons[i].setAttribute("aria-busy", requested ? "true" : "false");
-    buttons[i].title = unsupported ? "Auto permissions are unavailable for this Claude session." : buttonTitles[mode];
+    buttons[i].title = unsupported ? "Auto permissions are unavailable for this session." : buttonTitles[mode];
   }
   var status = control.querySelector(".session-permission-status");
   if (status) {
@@ -138,7 +139,7 @@ export function bindPermissionControl(control, getState) {
     var autoSupported = !!(state.permissionCapabilities && state.permissionCapabilities.auto === true);
     if (state.visible === false || state.locked === true || state.globalPermissionModeForced === true || state.connected === false || store.get('connected') === false) return;
     if (!state.projectSlug || state.projectSlug !== store.get('currentSlug') || !state.sessionId) return;
-    if (mode === "auto" && (state.vendor !== "claude" || !autoSupported)) return;
+    if (mode === "auto" && !autoSupported) return;
     sendPermissionMode(state.projectSlug, state.sessionId, mode);
   });
 }

package/lib/public/modules/personal-settings-dialog.js

@@ -17,7 +17,13 @@ export function preparePersonalConnectionDialog(overlay, inline) {
     if (label && input) label.htmlFor = input.id;
   });
   enhanceSettingsSelects(overlay);
-  function markDirty() { dirty = true; if (inline) store.set({personalEmailDirty:true}); }
+  var fields = Array.from(overlay.querySelectorAll('input,select,textarea'));
+  function value(field) {return field.type === 'checkbox' ? field.checked : field.value;}
+  var baseline = fields.map(value);
+  function markDirty() {
+    dirty = fields.some(function (field, index) {return value(field) !== baseline[index];});
+    if (inline) store.set({personalEmailDirty:dirty});
+  }
   overlay.addEventListener('input', markDirty);
   overlay.addEventListener('change', markDirty);
   var unsubscribe = inline ? store.subscribe(function (state, previousState) {

package/lib/public/modules/product-review.js

@@ -0,0 +1,26 @@
+// Display-only metadata from a bound product service. The exact question and
+// authenticated response remain unchanged; this renderer grants no authority.
+export function renderProductReview(element, question) {
+  var review = question.review;
+  if (!review || review.kind !== 'product-control' || typeof review.action !== 'string' || typeof review.target !== 'string' || typeof review.context !== 'string' || typeof review.reason !== 'string') return false;
+  element.classList.add('product-review');
+  element.textContent = '';
+  function text(tag, className, value) {
+    var node = document.createElement(tag);
+    node.className = className;
+    node.textContent = value;
+    element.appendChild(node);
+  }
+  text('strong', 'product-review-action', review.action + ': ' + review.target);
+  text('p', 'product-review-context', review.context);
+  text('p', 'product-review-reason', review.reason);
+  var details = document.createElement('details');
+  var summary = document.createElement('summary');
+  summary.textContent = 'Exact request details';
+  var payload = document.createElement('pre');
+  payload.textContent = question.question;
+  details.appendChild(summary);
+  details.appendChild(payload);
+  element.appendChild(details);
+  return true;
+}

package/lib/public/modules/profile.js

@@ -4,7 +4,7 @@ import { setChatLayout } from './theme.js';
 // Generated identities use deterministic local pixel identicons.
 
 import { iconHtml, refreshIcons } from './icons.js';
-import { avatarUrl, mateAvatarUrl, mateMarkUrl, userAvatarSeed } from './avatar.js';
+import { avatarUrl, userAvatarSeed } from './avatar.js';
 import { store } from './store.js';
 import { applyTerminalFont } from './terminal-prefs.js';
 
@@ -135,9 +135,12 @@ export function uploadAvatarBlob(blob) {
 }
 
 // --- Avatar position picker ---
-export function showAvatarPositioner(img, objectUrl, onDone) {
+// With a host element the editor mounts inline as a settings subview instead
+// of a page-level overlay.
+export function showAvatarPositioner(img, objectUrl, onDone, host) {
   var outputSize = 256;
   var viewSize = 220;
+  var priorFocus = document.activeElement;
 
   // State
   var scale = 1;
@@ -169,7 +172,7 @@ export function showAvatarPositioner(img, objectUrl, onDone) {
 
   // Build overlay
   var overlay = document.createElement('div');
-  overlay.className = 'avatar-positioner-overlay';
+  overlay.className = host ? 'avatar-positioner-inline settings-subview' : 'avatar-positioner-overlay';
 
   var container = document.createElement('div');
   container.className = 'avatar-positioner-container';
@@ -225,8 +228,10 @@ export function showAvatarPositioner(img, objectUrl, onDone) {
   container.appendChild(btnRow);
 
   overlay.appendChild(container);
-  document.body.appendChild(overlay);
+  if (host) { host.classList.add('has-subview'); host.appendChild(overlay); overlay.setAttribute('role', 'region'); overlay.setAttribute('aria-label', 'Position your avatar'); }
+  else document.body.appendChild(overlay);
   updatePreview();
+  if (host) doneFocus();
 
   // Drag
   var dragging = false;
@@ -288,9 +293,12 @@ export function showAvatarPositioner(img, objectUrl, onDone) {
     updatePreview();
   }, { passive: false });
 
+  function doneFocus() { closeBtn.focus(); }
+
   function cleanup(revoke) {
     document.removeEventListener('keydown', onOverlayKeydown);
     overlay.remove();
+    if (host) { host.classList.remove('has-subview'); if (priorFocus && priorFocus.isConnected) priorFocus.focus(); }
     if (revoke) URL.revokeObjectURL(objectUrl);
   }
 
@@ -586,240 +594,3 @@ export function getProfile() {
 export function getProfileLang() {
   return profile.lang;
 }
-
-// --- Mate profile popover (reuses same UI minus language) ---
-var matePopoverEl = null;
-var mateSaveTimer = null;
-
-export function showMateProfilePopover(anchorEl, mateData, onUpdate) {
-  if (matePopoverEl) {
-    hideMatePopover();
-    return;
-  }
-
-  var mp = mateData.profile || {};
-  var mateName = mp.displayName || mateData.name || '';
-  var mateColor = mp.avatarColor || '#5857fc';
-  var mateStyle = mp.avatarStyle || 'imprint';
-  var mateSeed = mp.avatarSeed || mateData.id || 'mate';
-  var mateCustom = mp.avatarCustom || '';
-
-  matePopoverEl = document.createElement('div');
-  matePopoverEl.className = 'profile-popover mate-profile-popover';
-
-  var html = '';
-
-  // Banner + close
-  html += '<div class="profile-banner">';
-  html += '<button class="profile-close-btn">&times;</button>';
-  html += '</div>';
-
-  // Avatar row
-  var mateAvatarSrc = mateCustom ? mateCustom : mateMarkUrl(mateName || 'Mate', 80);
-  html += '<div class="profile-avatar-row">';
-  html += '<div class="profile-popover-avatar">';
-  html += '<img class="profile-popover-avatar-img" src="' + mateAvatarSrc + '" alt="' + escapeAttr(mateName || 'Clay Mate') + '">';
-  html += '</div>';
-  html += '<div class="profile-name-display">' + escapeAttr(mateName || 'New Mate') + '</div>';
-  html += '</div>';
-
-  // Body
-  html += '<div class="profile-popover-body">';
-
-  // Name
-  html += '<div class="profile-field">';
-  html += '<label class="profile-field-label">Display Name</label>';
-  html += '<input type="text" class="profile-field-input" id="mate-profile-name" value="' + escapeAttr(mateName) + '" placeholder="Name your mate..." maxlength="50" spellcheck="false" autocomplete="off">';
-  html += '</div>';
-
-  // Avatar picker (hidden if avatar is locked)
-  var mateAvatarLocked = mp.avatarLocked || false;
-  if (!mateAvatarLocked) {
-  html += '<div class="profile-field">';
-  html += '<label class="profile-field-label">Identity</label>';
-  html += '<div class="profile-imprint-panel">';
-  html += '<div class="profile-imprint-preview"><img src="' + mateMarkUrl(mateName || 'Mate', 72) + '" alt="Clay Mate initial"><span><strong>Mate initial</strong><small>Based on display name</small></span></div>';
-  html += '<div class="profile-imprint-actions profile-mate-mark-actions">';
-  html += '<button class="profile-use-imprint' + (!mateCustom ? ' is-active' : '') + '" type="button">Use initial</button>';
-  html += '<button class="profile-avatar-upload' + (mateCustom ? ' is-active' : '') + '" type="button">Upload image</button>';
-  html += '</div>';
-  html += '</div>';
-  html += '<input type="file" id="mate-profile-avatar-file" accept="image/*" style="display:none">';
-  html += '</div>';
-  }
-
-  html += '</div>'; // close body
-
-  matePopoverEl.innerHTML = html;
-
-  // State tracker
-  var mateProfile = {
-    displayName: mateName,
-    avatarStyle: mateStyle,
-    avatarSeed: mateSeed,
-    avatarColor: mateColor,
-    avatarCustom: mateCustom,
-  };
-
-  function refreshChatAvatars() {
-    var newUrl = mateAvatarUrl({ profile: mateProfile, id: mateData.id }, 64);
-    // Update all mate avatars in the chat area
-    var bubbles = document.querySelectorAll('.dm-bubble-avatar-mate');
-    for (var i = 0; i < bubbles.length; i++) {
-      bubbles[i].src = newUrl;
-    }
-    // Update body dataset so new messages use the updated URL
-    if (document.body.dataset.mateAvatarUrl) {
-      document.body.dataset.mateAvatarUrl = newUrl;
-    }
-    // Update mate sidebar avatar
-    var sidebarAvatar = document.querySelector('.mate-sidebar-avatar');
-    if (sidebarAvatar) sidebarAvatar.src = newUrl;
-  }
-
-  function debouncedMateUpdate() {
-    if (mateSaveTimer) clearTimeout(mateSaveTimer);
-    mateSaveTimer = setTimeout(function() {
-      if (onUpdate) onUpdate({
-        name: mateProfile.displayName,
-        profile: {
-          displayName: mateProfile.displayName,
-          avatarStyle: mateProfile.avatarStyle,
-          avatarSeed: mateProfile.avatarSeed,
-          avatarColor: mateProfile.avatarColor,
-          avatarCustom: mateProfile.avatarCustom,
-        },
-      });
-      refreshChatAvatars();
-      mateSaveTimer = null;
-    }, 400);
-  }
-
-  function updateMatePopoverHeader() {
-    if (!matePopoverEl) return;
-    var img = matePopoverEl.querySelector('.profile-popover-avatar-img');
-    var nd = matePopoverEl.querySelector('.profile-name-display');
-    if (img) img.src = mateProfile.avatarCustom
-      ? mateProfile.avatarCustom
-      : mateMarkUrl(mateProfile.displayName || 'Mate', 80);
-    var preview = matePopoverEl.querySelector('.profile-imprint-preview img');
-    if (preview) preview.src = mateMarkUrl(mateProfile.displayName || 'Mate', 72);
-    if (nd) nd.textContent = mateProfile.displayName || 'New Mate';
-  }
-
-  // Events
-  matePopoverEl.querySelector('.profile-close-btn').addEventListener('click', function(e) {
-    e.stopPropagation();
-    hideMatePopover();
-  });
-
-  var nameInput = matePopoverEl.querySelector('#mate-profile-name');
-  nameInput.addEventListener('input', function() {
-    mateProfile.displayName = nameInput.value.trim();
-    updateMatePopoverHeader();
-    debouncedMateUpdate();
-  });
-  nameInput.addEventListener('keydown', function(e) {
-    if (e.key === 'Enter') { e.preventDefault(); hideMatePopover(); }
-    e.stopPropagation();
-  });
-  nameInput.addEventListener('keyup', function(e) { e.stopPropagation(); });
-  nameInput.addEventListener('keypress', function(e) { e.stopPropagation(); });
-
-  // Avatar upload button
-  var mateUploadBtn = matePopoverEl.querySelector('.profile-avatar-upload');
-  var mateFileInput = matePopoverEl.querySelector('#mate-profile-avatar-file');
-  if (mateUploadBtn && mateFileInput) {
-    mateUploadBtn.addEventListener('click', function() {
-      mateFileInput.click();
-    });
-    mateFileInput.addEventListener('change', function() {
-      var file = mateFileInput.files[0];
-      if (!file) return;
-
-      function uploadMateBlob(blob) {
-        blob.arrayBuffer().then(function(ab) {
-          var buf = new Uint8Array(ab);
-          fetch('/api/mate-avatar/' + encodeURIComponent(mateData.id), {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/octet-stream' },
-            body: buf,
-          }).then(function(r) { return r.json(); }).then(function(data) {
-            if (data.ok) {
-              mateProfile.avatarCustom = data.avatar;
-              updateMatePopoverHeader();
-              if (mateUploadBtn) {
-                mateUploadBtn.classList.add('is-active');
-              }
-              var imprintButton = matePopoverEl && matePopoverEl.querySelector('.profile-use-imprint');
-              if (imprintButton) imprintButton.classList.remove('is-active');
-              debouncedMateUpdate();
-            }
-          });
-        });
-      }
-
-      // Load image and open position picker
-      var img = new Image();
-      var objectUrl = URL.createObjectURL(file);
-      img.onload = function() {
-        showAvatarPositioner(img, objectUrl, function(croppedBlob) {
-          URL.revokeObjectURL(objectUrl);
-          uploadMateBlob(croppedBlob);
-        });
-      };
-      img.src = objectUrl;
-    });
-  }
-
-  if (!mateAvatarLocked) {
-    matePopoverEl.querySelector('.profile-use-imprint').addEventListener('click', function() {
-      mateProfile.avatarCustom = '';
-      updateMatePopoverHeader();
-      matePopoverEl.querySelector('.profile-use-imprint').classList.add('is-active');
-      matePopoverEl.querySelector('.profile-avatar-upload').classList.remove('is-active');
-      debouncedMateUpdate();
-    });
-  }
-
-  matePopoverEl.addEventListener('click', function(e) { e.stopPropagation(); });
-
-  // Position near anchor
-  document.body.appendChild(matePopoverEl);
-  refreshIcons();
-
-  var rect = anchorEl.getBoundingClientRect();
-  matePopoverEl.style.position = 'fixed';
-  matePopoverEl.style.left = (rect.right + 8) + 'px';
-  matePopoverEl.style.zIndex = '9999';
-  // Align bottom of popover with bottom of anchor icon
-  var popHeight = matePopoverEl.offsetHeight;
-  var bottomAligned = rect.bottom - popHeight;
-  matePopoverEl.style.top = Math.max(8, bottomAligned) + 'px';
-
-  setTimeout(function() {
-    document.addEventListener('click', closeMateOnOutside);
-    document.addEventListener('keydown', closeMateOnEscape);
-  }, 0);
-}
-
-function closeMateOnOutside(e) {
-  if (matePopoverEl && !matePopoverEl.contains(e.target)) {
-    hideMatePopover();
-  }
-}
-
-function closeMateOnEscape(e) {
-  if (e.key === 'Escape' && matePopoverEl) {
-    hideMatePopover();
-  }
-}
-
-function hideMatePopover() {
-  if (matePopoverEl) {
-    matePopoverEl.remove();
-    matePopoverEl = null;
-  }
-  document.removeEventListener('click', closeMateOnOutside);
-  document.removeEventListener('keydown', closeMateOnEscape);
-}

package/lib/public/modules/project-access-recovery.js

@@ -0,0 +1,17 @@
+import { store } from './store.js';
+
+// Hard navigation destroys detached panels, cached transcripts and sockets.
+// Clear the rendered document first so revoked content cannot linger while the
+// replacement page is loading or when that request fails.
+export function leaveRevokedProject(url) {
+  store.set({ activeSessionId: null, activeProjectSlug: null, sessionActivatedProjectSlug: null, sessions: [], splitPanes: null });
+  document.body.replaceChildren();
+  window.location.replace(url || "/");
+}
+
+export function reconnectDestination(info, slug) {
+  if (!slug || !info || !Array.isArray(info.projects)) return null;
+  var project = info.projects.find(function (item) { return item.slug === slug; });
+  if (!project) return "/";
+  return project.contentAccess === false ? "/p/" + encodeURIComponent(slug) + "/" : null;
+}

package/lib/public/modules/project-admin-overview.js

@@ -0,0 +1,21 @@
+// This page never opens a project socket or loads project content modules.
+var tabs = Array.from(document.querySelectorAll('[role="tab"]'));
+function select(tab) {
+  tabs.forEach(function (item) {
+    var active = item === tab;
+    item.setAttribute("aria-selected", String(active));
+    item.tabIndex = active ? 0 : -1;
+    document.getElementById(item.getAttribute("aria-controls")).hidden = !active;
+  });
+}
+tabs.forEach(function (tab, index) {
+  tab.addEventListener("click", function () { select(tab); });
+  tab.addEventListener("keydown", function (event) {
+    if (["ArrowLeft", "ArrowRight", "Home", "End"].indexOf(event.key) === -1) return;
+    event.preventDefault();
+    var target = event.key === "Home" ? tabs[0] : event.key === "End" ? tabs[tabs.length - 1] : tabs[(index + (event.key === "ArrowRight" ? 1 : tabs.length - 1)) % tabs.length];
+    select(target);
+    target.focus();
+  });
+});
+select(tabs[0]);