clay-server 5.2.0-beta.10 → 5.2.0-beta.11

package/lib/project-sessions.js

@@ -5,12 +5,16 @@ var { execFileSync } = require("child_process");
 var providerSettings = require("./yoke/settings");
 var updateSnooze = require("./update-snooze");
 var yoke = require("./yoke");
+var startProtocol = require("./project-start-protocol");
+var startReply = startProtocol.withRequestId;
+var browseMeta = startProtocol.browseMeta;
 var sessionVisibility = require("./session-visibility");
 var contextUsageModule = require("./context-usage");
 var sessionDeleteModule = require("./project-session-delete");
 var sessionFoldersModule = require("./project-session-folders");
 var elicitationResponse = require("./project-elicitation-response");
 var sessionCreationModule = require("./project-session-creation");
+var vendorUsageOverviewModule = require("./vendor-usage-overview");
 
 function vendorSupportsTui(vendor) {
   var info = yoke.getVendorInfo(vendor);
@@ -223,6 +227,10 @@ function attachSessions(ctx) {
     resolveSessionHome: resolveSessionHome, cancelPendingAskUser: cancelPendingAskUser,
   }));
 
+  function boundedRequestId(msg) {
+    return typeof msg.requestId === "string" ? msg.requestId.substring(0, 200) : undefined;
+  }
+
   function canAccessProjectSlug(ws, targetSlug) {
     if (!targetSlug) return false;
     if (!usersModule || typeof usersModule.isMultiUser !== "function" || !usersModule.isMultiUser()) return true;
@@ -361,6 +369,11 @@ function attachSessions(ctx) {
     getProjectAccess: getProjectAccess,
     getVendorAvailability: function (ws) { return ctx.getVendorAvailability(ws); },
   });
+  var vendorUsage = vendorUsageOverviewModule.attachVendorUsageOverview({
+    slug: slug, sm: sm, usersModule: usersModule, clients: clients, sendTo: sendTo, getProjectAccess: getProjectAccess,
+    getVendorAvailability: function (ws) { return ctx.getVendorAvailability(ws); },
+    adapters: ctx.adapters, osUsers: osUsers, getLinuxUserForWs: ctx.getLinuxUserForWs,
+  });
   // Kick off watchers for any TUI sessions already loaded from disk so
   // their titles refresh as soon as Claude Code rewrites the jsonl, even
   // before the user clicks them.
@@ -755,13 +768,15 @@ function attachSessions(ctx) {
     if (msg.type === "set_project_session_visibility_default") {
       sessionVisibility.handleDefaultChange({
         slug: slug, isMate: isMate, osUsers: osUsers, usersModule: usersModule, getProjectAccess: getProjectAccess,
-        opts: opts, sendTo: sendTo,
+        getTargetAccess: typeof opts.onGetProjectAccess === "function" ? opts.onGetProjectAccess : null,
+        canAccessProjectSlug: canAccessProjectSlug, opts: opts, sendTo: sendTo,
       }, ws, msg);
       return true;
     }
 
     if (sessionFolders.handleMessage(ws, msg)) return true;
     if (sessionCreation.handleMessage(ws, msg)) return true;
+    if (vendorUsage.handleMessage(ws, msg)) return true;
 
     if (msg.type === "bulk_delete_sessions") {
       sessionDelete.bulkDeleteSessions(ws, msg);
@@ -1656,8 +1671,9 @@ function attachSessions(ctx) {
         parentDir = path.dirname(absTarget);
         prefix = path.basename(absTarget).toLowerCase();
       }
-      if (opts.canUsePath && !opts.canUsePath(ws._clayUser && ws._clayUser.id, parentDir)) {
-        sendTo(ws, { type: "browse_dir_result", entries: [], error: "Directory access is not permitted" });
+      var canList = function (candidate) { return !opts.canUsePath || opts.canUsePath(ws._clayUser && ws._clayUser.id, candidate); };
+      if (!canList(parentDir)) {
+        sendTo(ws, startReply(msg, { type: "browse_dir_result", path: msg.path, entries: [], error: "Directory access is not permitted" }));
         return true;
       }
       try {
@@ -1673,9 +1689,9 @@ function attachSessions(ctx) {
           dirEntries.push({ name: d.name, path: path.join(parentDir, d.name) });
         }
         dirEntries.sort(function (a, b) { return a.name.localeCompare(b.name); });
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: dirEntries });
+        sendTo(ws, Object.assign(browseMeta(msg, parentDir, prefix, canList), { type: "browse_dir_result", path: msg.path, entries: dirEntries }));
       } catch (e) {
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: [], error: e.message });
+        sendTo(ws, startReply(msg, { type: "browse_dir_result", path: msg.path, entries: [], error: e.message }));
       }
       return true;
     }
@@ -1685,24 +1701,24 @@ function attachSessions(ctx) {
       var addPath = (msg.path || "").replace(/^~/, require("./config").REAL_HOME);
       var addAbs = path.resolve(addPath);
       if (opts.canUsePath && !opts.canUsePath(ws._clayUser && ws._clayUser.id, addAbs)) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Directory access is not permitted" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Directory access is not permitted" }));
         return true;
       }
       try {
         var addStat = fs.statSync(addAbs);
         if (!addStat.isDirectory()) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "Not a directory" });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not a directory" }));
           return true;
         }
       } catch (e) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Directory not found" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Directory not found" }));
         return true;
       }
       if (typeof opts.onAddProject === "function") {
         var result = opts.onAddProject(addAbs, ws._clayUser);
-        sendTo(ws, Object.assign({}, result, { type: "add_project_result" }));
+        sendTo(ws, startReply(msg, Object.assign({}, result, { type: "add_project_result" })));
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1712,7 +1728,7 @@ function attachSessions(ctx) {
       if (ws._clayUser) {
         var cpPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
         if (!cpPerms.createProject) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "You do not have permission to create projects" });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "You do not have permission to create projects" }));
           return true;
         }
       }
@@ -1720,14 +1736,14 @@ function attachSessions(ctx) {
     if (msg.type === "create_project") {
       var createName = (msg.name || "").trim();
       if (!createName || !/^[a-zA-Z0-9_-]+$/.test(createName)) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid name. Use only letters, numbers, dashes, and underscores." });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Invalid name. Use only letters, numbers, dashes, and underscores." }));
         return true;
       }
       if (typeof opts.onCreateProject === "function") {
         var createResult = opts.onCreateProject(createName, ws._clayUser);
-        sendTo(ws, Object.assign({}, createResult, { type: "add_project_result" }));
+        sendTo(ws, startReply(msg, Object.assign({}, createResult, { type: "add_project_result" })));
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1736,16 +1752,16 @@ function attachSessions(ctx) {
     if (msg.type === "clone_project") {
       var cloneUrl = (msg.url || "").trim();
       if (!cloneUrl || (!/^https?:\/\//.test(cloneUrl) && !/^git@/.test(cloneUrl))) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid URL. Use https:// or git@ format." });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Invalid URL. Use https:// or git@ format." }));
         return true;
       }
-      sendTo(ws, { type: "clone_project_progress", status: "cloning" });
+      sendTo(ws, startReply(msg, { type: "clone_project_progress", status: "cloning" }));
       if (typeof opts.onCloneProject === "function") {
         opts.onCloneProject(cloneUrl, ws._clayUser, function (cloneResult) {
-          sendTo(ws, { type: "add_project_result", ok: cloneResult.ok, slug: cloneResult.slug, error: cloneResult.error });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: cloneResult.ok, slug: cloneResult.slug, error: cloneResult.error }));
         });
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1858,30 +1874,41 @@ function attachSessions(ctx) {
 
     // --- Set project title (rename) ---
     if (msg.type === "set_project_title") {
+      var titleRequestId = boundedRequestId(msg);
       if (!msg.slug) {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Missing slug" });
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Missing slug", requestId: titleRequestId });
+        return true;
+      }
+      // The target is named by the client; it must be a project this account can access.
+      if (!canAccessProjectSlug(ws, msg.slug)) {
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Project access is not permitted", slug: msg.slug, requestId: titleRequestId });
         return true;
       }
       if (typeof opts.onSetProjectTitle === "function") {
         var titleResult = opts.onSetProjectTitle(msg.slug, msg.title || null);
-        sendTo(ws, Object.assign({}, titleResult, { type: "set_project_title_result", slug: msg.slug }));
+        sendTo(ws, Object.assign({}, titleResult, { type: "set_project_title_result", slug: msg.slug, requestId: titleRequestId }));
       } else {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Not supported" });
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Not supported", requestId: titleRequestId });
       }
       return true;
     }
 
     // --- Set project icon (emoji) ---
     if (msg.type === "set_project_icon") {
+      var iconRequestId = boundedRequestId(msg);
       if (!msg.slug) {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Missing slug" });
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Missing slug", requestId: iconRequestId });
+        return true;
+      }
+      if (!canAccessProjectSlug(ws, msg.slug)) {
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Project access is not permitted", slug: msg.slug, requestId: iconRequestId });
         return true;
       }
       if (typeof opts.onSetProjectIcon === "function") {
         var iconResult = opts.onSetProjectIcon(msg.slug, msg.icon || null);
-        sendTo(ws, { type: "set_project_icon_result", ok: iconResult.ok, slug: msg.slug, error: iconResult.error });
+        sendTo(ws, { type: "set_project_icon_result", ok: iconResult.ok, slug: msg.slug, error: iconResult.error, requestId: iconRequestId });
       } else {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Not supported" });
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Not supported", requestId: iconRequestId });
       }
       return true;
     }
@@ -2007,6 +2034,18 @@ function attachSessions(ctx) {
   }
 
   return {
+    invalidateVendorUsage: function () { vendorUsage.invalidateAll(); },
+    // Canonical read-only inspection: the caller has already proven the owner and
+    // project access; the OS user is re-derived from the live user record.
+    readVendorUsage: function (request) {
+      var installed = null;
+      if (Array.isArray(sm.installedVendors)) {
+        installed = Object.create(null);
+        sm.installedVendors.forEach(function (vendor) { installed[vendor] = true; });
+      }
+      var linuxUser = osUsers && request.owner !== "default" ? ctx.getLinuxUserForSession({ ownerId: request.owner }) : null;
+      return vendorUsage.readForOwner({ owner: request.owner, linuxUser: linuxUser, installed: installed, isCurrent: request.isCurrent });
+    },
     handleSessionsMessage: handleSessionsMessage,
     resolveSessionForView: resolveSessionForView,
     sendSessionFoldersState: sessionFolders.sendStateTo,

package/lib/project-start-protocol.js

@@ -0,0 +1,29 @@
+// Shared reply helpers for the project-start dialog (browse_dir and add/create/clone results).
+// A string requestId on the request is echoed on its reply so the client can drop stale answers.
+
+var path = require("path");
+
+function requestIdOf(msg) {
+  return msg && typeof msg.requestId === "string" && msg.requestId.length <= 64 ? msg.requestId : undefined;
+}
+
+// Canonical listing metadata. `dir` is the directory whose children are listed, `prefix` is
+// non-empty when the requested path did not exist or was not a directory, and `parent` is set
+// only when the caller may list the parent as well.
+function browseMeta(msg, dir, prefix, canList) {
+  var parent = path.dirname(dir);
+  return {
+    requestId: requestIdOf(msg),
+    dir: dir,
+    prefix: prefix || "",
+    parent: parent !== dir && (!canList || canList(parent)) ? parent : null,
+  };
+}
+
+function withRequestId(msg, payload) {
+  var id = requestIdOf(msg);
+  if (id !== undefined) payload.requestId = id;
+  return payload;
+}
+
+module.exports = { requestIdOf: requestIdOf, browseMeta: browseMeta, withRequestId: withRequestId };

package/lib/project-vendor-login.js

@@ -171,6 +171,8 @@ function attachVendorLogin(ctx) {
   // reused by every project, so tearing one down here would kill unrelated
   // sessions; those runtimes pick up new credentials on their own.
   function refreshVendorAuth(vendor, linuxUser) {
+    // Cached account usage described the previous credentials.
+    if (typeof ctx.onVendorAuthChanged === "function") { try { ctx.onVendorAuthChanged(vendor, linuxUser || null); } catch (e) {} }
     var adapter = adapters[vendor];
     if (!adapter || typeof adapter.shutdown !== "function") return Promise.resolve(false);
     if (adapter.shared) {

package/lib/project.js

@@ -2187,6 +2187,7 @@ function createProjectContext(opts) {
     resolveDefaultAi: opts.resolveDefaultAi,
     resolveMateSessionDefaults: opts.resolveMateSessionDefaults,
     getVendorAvailability: function (ws) { return _models.getVendorAvailability(ws); },
+    getLinuxUserForWs: getLinuxUserForWs,
     canCreateScheduledTaskInterview: function (ws, session) { return !!(_scheduledTasks && _scheduledTasks.canCreateInterview(ws, session)); },
     canStartScheduledTaskInterview: function (ws, session) { return !!(_scheduledTasks && _scheduledTasks.canStartInterview(ws, session)); },
     onHumanPairStop: function (session) {
@@ -2399,6 +2400,7 @@ function createProjectContext(opts) {
 
   // --- Vendor login flow (delegated to project-vendor-login.js) ---
   var _vendorLogin = attachVendorLogin({
+    onVendorAuthChanged: function () { _sessions.invalidateVendorUsage(); },
     requestAccess: _requestAccess,
     clients: clients,
     slug: slug,
@@ -3040,6 +3042,7 @@ function createProjectContext(opts) {
     requestProductControlReview: _productControl.requestProductControlReview,
     applyProductSessionAction: _productControl.applyProductSessionAction,
     inspectProductSessionQueue: _productControl.inspectProductSessionQueue,
+    readVendorUsage: function (request) { return _sessions.readVendorUsage(request); },
     inspectProductSessionRuntime: _sessions.sessionRuntimeActions.inspect,
     inspectMateLifecycleRuntime: _sessions.sessionRuntimeActions.inspectLifecycle,
     inspectDelegatedFollowUp: _delegatedFollowUp.inspectDelegatedFollowUp,

package/lib/public/app.js

@@ -31,7 +31,7 @@ import { initMateMemory, renderMemoryList, hideMemory } from './modules/mate-mem
 import { initRewind, setRewindMode, showRewindModal, clearPendingRewindUuid, addRewindButton, onRewindComplete, onRewindError } from './modules/rewind.js';
 import { initNotifications, showDoneNotification, playDoneSound, isNotifAlertEnabled, isNotifSoundEnabled } from './modules/notifications.js';
 import { initInput, clearPendingImages, handleInputSync, autoResize, builtinCommands, sendMessage, hasSendableContent, setScheduleBtnDisabled, setScheduleDelayMs, clearScheduleDelay } from './modules/input.js';
-import { initQrCode, triggerShare } from './modules/qrcode.js';
+import { initQrCode } from './modules/qrcode.js';
 import { initFileBrowser, loadRootDirectory, reopenFileViewer, refreshTree, handleFsList, handleFsRead, handleDirChanged, refreshIfOpen, handleFileChanged, handleFileHistory, handleGitDiff, handleFileAt, getPendingNavigate, closeFileViewer, resetFileBrowser } from './modules/filebrowser.js';
 import { initGitPanel } from './modules/git-panel.js';
 import { initWorkerPaneLock } from './modules/worker-pane-lock.js';
@@ -46,6 +46,7 @@ import { initTheme, getThemeColor, getComputedVar, onThemeChange, getCurrentThem
 import { initTools, resetToolState, saveToolState, restoreToolState, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionResolved, markPermissionCancelled, renderElicitationRequest, markElicitationResolved, renderPlanBanner, renderPlanCard, handleTodoWrite, handleTaskCreate, handleTaskUpdate, startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, addTurnMeta, resetTurnMetaCost, enableMainInput, getTools, getPlanContent, setPlanContent, isPlanFilePath, getTodoTools, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, updateSubagentProgress, initSubagentStop, closeToolGroup, removeToolFromGroup } from './modules/tools.js';
 import { initServerSettings, updateSettingsStats, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved } from './modules/server-settings.js';
 import { initProjectSettings } from './modules/project-settings.js';
+import { initSettingsShell, openSettings } from './modules/settings-shell.js';
 import { initSkills, handleSkillInstalled, handleSkillUninstalled } from './modules/skills.js';
 import { initMcp } from './modules/mcp-ui.js';
 import { initScheduler, resetScheduler, handleLoopRegistryUpdated, handleScheduleRunStarted, handleScheduleRunFinished, handleLoopScheduled, openSchedulerToTab, isSchedulerOpen, closeScheduler, enterCraftingMode, exitCraftingMode, handleLoopRegistryFiles, getUpcomingSchedules } from './modules/scheduler.js';
@@ -72,10 +73,15 @@ import { initShellCommand } from './modules/shell-command.js';
 import { initConnection, connect as _connConnect, setStatus as _connSetStatus, scheduleReconnect as _connScheduleReconnect, cancelReconnect as _connCancelReconnect } from './modules/app-connection.js';
 import { processMessage as _msgProcessMessage } from './modules/app-messages.js';
 import { getWs as _getWsRef, setWs as _setWsRef } from './modules/ws-ref.js';
+import { initialProjectStart } from './modules/project-start-state.js';
+import { emptyFolderState } from './modules/project-start-folder-state.js';
+import { openAddProjectModal, initProjectStart } from './modules/project-start-dialog.js';
 import { initProjectsHub, showProjectsHub, hideProjectsHub } from './modules/projects-hub.js';
 import { initHomeSurfaceBoot } from './modules/home-surface-boot.js';
 import { rememberHomePrimarySurface } from './modules/home-surface.js';
 import { initRateLimit, handleRateLimitEvent as _rlHandleRateLimitEvent, updateRateLimitUsage as _rlUpdateRateLimitUsage, handleFastModeState as _rlHandleFastModeState, resetRateLimitState } from './modules/app-rate-limit.js';
+import { initVendorUsageOverview } from './modules/vendor-usage-overview.js';
+import { initGithubStar } from './modules/github-star.js';
 import { initCursors, handleRemoteCursorMove as _curHandleRemoteCursorMove, handleRemoteCursorLeave as _curHandleRemoteCursorLeave, handleRemoteSelection as _curHandleRemoteSelection, clearRemoteCursors as _curClearRemoteCursors, initCursorToggle } from './modules/app-cursors.js';
 import { initDefaultAi } from './modules/default-ai.js';
 import { requestDefaultVendor } from './modules/default-vendor.js';
@@ -97,7 +103,7 @@ import { initProjectMateCreationWorkspace } from './modules/project-mate-creatio
 import { initProjectDebatePlanningWorkspace } from './modules/project-debate-planning-workspace.js';
 import { initProjectSessionNavigation } from './modules/project-session-navigation.js';
 import { initPanels, updateConfigChip as _panUpdateConfigChip, getModelEffortLevels as _panGetModelEffortLevels, accumulateUsage as _panAccumulateUsage, updateUsagePanel as _panUpdateUsagePanel, resetUsage as _panResetUsage, toggleUsagePanel as _panToggleUsagePanel, formatTokens as _panFormatTokens, updateStatusPanel as _panUpdateStatusPanel, requestProcessStats as _panRequestProcessStats, toggleStatusPanel as _panToggleStatusPanel, accumulateContext as _panAccumulateContext, updateContextPanel as _panUpdateContextPanel, resetContext as _panResetContext, resetContextData as _panResetContextData, minimizeContext as _panMinimizeContext, expandContext as _panExpandContext, toggleContextPanel as _panToggleContextPanel, getContextView as _panGetContextView, renderCtxPopover as _panRenderCtxPopover, hideCtxPopover as _panHideCtxPopover, formatBytes as _panFormatBytes, formatUptime as _panFormatUptime, getModelSupportsEffort as _panGetModelSupportsEffort, getSessionUsage, setSessionUsage, getContextData, setContextData, setContextView as _panSetContextView, applyContextView as _panApplyContextView } from './modules/app-panels.js';
-import { initProjects, updateProjectList as _projUpdateProjectList, renderProjectList as _projRenderProjectList, renderTopbarPresence as _projRenderTopbarPresence, switchProject as _projSwitchProject, resetClientState as _projResetClientState, confirmRemoveProject as _projConfirmRemoveProject, handleRemoveProjectCheckResult as _projHandleRemoveProjectCheckResult, handleRemoveProjectResult as _projHandleRemoveProjectResult, openAddProjectModal as _projOpenAddProjectModal, closeAddProjectModal as _projCloseAddProjectModal, handleBrowseDirResult as _projHandleBrowseDirResult, handleAddProjectResult as _projHandleAddProjectResult, handleCloneProgress as _projHandleCloneProgress, showUpdateAvailable as _projShowUpdateAvailable, getCachedProjects, setCachedProjects, getCachedProjectCount, getCachedRemovedProjects, setCachedRemovedProjects } from './modules/app-projects.js';
+import { updateProjectList as _projUpdateProjectList, renderProjectList as _projRenderProjectList, renderTopbarPresence as _projRenderTopbarPresence, switchProject as _projSwitchProject, resetClientState as _projResetClientState, confirmRemoveProject as _projConfirmRemoveProject, handleRemoveProjectCheckResult as _projHandleRemoveProjectCheckResult, handleRemoveProjectResult as _projHandleRemoveProjectResult, showUpdateAvailable as _projShowUpdateAvailable, getCachedProjects, setCachedProjects, getCachedProjectCount, getCachedRemovedProjects, setCachedRemovedProjects } from './modules/app-projects.js';
 import { initRendering, addToMessages as _renAddToMessages, scrollToBottom as _renScrollToBottom, forceScrollToBottom as _renForceScrollToBottom, addUserMessage as _renAddUserMessage, getMsgTime as _renGetMsgTime, shouldGroupMessage as _renShouldGroupMessage, ensureAssistantBlock as _renEnsureAssistantBlock, addCopyHandler as _renAddCopyHandler, appendDelta as _renAppendDelta, flushStreamBuffer as _renFlushStreamBuffer, finalizeAssistantBlock as _renFinalizeAssistantBlock, addSystemMessage as _renAddSystemMessage, addConflictMessage as _renAddConflictMessage, addContextOverflowMessage as _renAddContextOverflowMessage, showClaudePreThinking as _renShowClaudePreThinking, showMatePreThinking as _renShowMatePreThinking, removeMatePreThinking as _renRemoveMatePreThinking, showSuggestionChips as _renShowSuggestionChips, hideSuggestionChips as _renHideSuggestionChips, getGhostSuggestion as _renGetGhostSuggestion, getTurnCounter, setTurnCounter, getPrependAnchor, setPrependAnchor, getActivityEl, setActivityEl, getIsUserScrolledUp, setIsUserScrolledUp, getStickyBottom, armStickyBottom, disarmStickyBottom } from './modules/app-rendering.js';
 import { initDm, openDm as _dmOpenDm, enterDmMode as _dmEnterDmMode, exitDmMode as _dmExitDmMode, handleMateCreatedInApp as _dmHandleMateCreatedInApp, buildMateInterviewPrompt as _dmBuildMateInterviewPrompt, updateMateIconStatus as _dmUpdateMateIconStatus, connectMateProject as _dmConnectMateProject, disconnectMateProject as _dmDisconnectMateProject, appendDmMessage as _dmAppendDmMessage, showDmTypingIndicator as _dmShowDmTypingIndicator, handleDmSend as _dmHandleDmSend } from './modules/app-dm.js';
 import { initMention, handleMentionStart, handleMentionStream, handleMentionDone, handleMentionError, handleMentionActivity, renderMentionUser, renderMentionResponse } from './modules/mention.js';
@@ -192,7 +198,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   function updateProjectList(msg) { _projUpdateProjectList(msg); }
   function renderTopbarPresence(serverUsers) { _projRenderTopbarPresence(serverUsers); }
   function renderProjectList() { _projRenderProjectList(); }
-  // projectListAddBtn listener -> modules/app-projects.js (initProjects)
+  // projectListAddBtn listener -> modules/project-start-dialog.js (initProjectStart)
 
   // Prevent Cmd+Z / Cmd+Shift+Z from triggering browser back/forward (Arc, etc.)
   // Always block browser default for Cmd+Z and manually invoke undo/redo via execCommand
@@ -280,6 +286,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   createStore({
     networkSettings: { loaded: false, busy: false, confirming: false, draft: "", saved: "", status: "", errorKind: "", requestId: 0 },
     vendorLoginBrowser: null,
+    githubStarCount: null,
     sharedBrowser: null,
     sharedBrowsers: [],
     mcpSkillsWorkbench: {},
@@ -421,6 +428,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     projectsAccessLoaded: false,
     projectsHubRestoreRequested: false,
     projectsShowGuide: false,
+    projectStart: initialProjectStart(),
+    projectStartFolder: emptyFolderState(),
     onboardingStep: 'welcome',
     onboardingIntent: null,
     currentProjectOwnerId: null,
@@ -645,6 +654,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     vendorInfo: {},
     // Rate-limit data is projected only for the displayed session/vendor.
     rateLimitState: {},
+    vendorUsageOverview: null,
+    vendorUsageOpen: null,
     currentMode: "default",
     effectivePermissionMode: null,
     permissionCapabilities: { auto: false, mcpOverride: false },
@@ -789,8 +800,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       switch (action) {
         case "createMate": startClayMateCreation(); break;
         case "openSettings":
-          var sb = document.getElementById("server-settings-btn");
-          if (sb) sb.click();
+          openSettings();
           break;
         case "showHome": showHomeHub(); break;
       }
@@ -1162,7 +1172,10 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     basePath: basePath,
   });
 
-  // --- User settings (full-screen overlay) ---
+  // --- Unified full-screen settings shell (Personal, Project, Server panes) ---
+  initSettingsShell();
+
+  // --- User settings (personal pane) ---
   initUserSettings({
     basePath: basePath,
   });
@@ -1230,11 +1243,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       }
     }
   }).catch(function () {});
-  // Hide server settings and update controls for non-admin users in multi-user mode
+  // Hide update controls for non-admin users in multi-user mode. The settings
+  // gear stays for everyone: Personal and Project settings are not admin-only,
+  // and the shell only offers Server settings to administrators.
   checkAdminAccess().then(function (isAdmin) {
     if (store.get('isMultiUserMode') && !isAdmin) {
-      var settingsBtn = document.getElementById("server-settings-btn");
-      if (settingsBtn) settingsBtn.style.display = "none";
       var updatePill = document.getElementById("update-pill-wrap");
       if (updatePill) updatePill.style.display = "none";
     }
@@ -1262,8 +1275,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
 
   // --- QR code ---
   initQrCode();
-  var sharePill = document.getElementById("share-pill");
-  if (sharePill) sharePill.addEventListener("click", triggerShare);
 
   // --- File browser ---
   initFileBrowser({
@@ -1447,11 +1458,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   function confirmRemoveProject(slug, name) { _projConfirmRemoveProject(slug, name); }
   function handleRemoveProjectCheckResult(msg) { _projHandleRemoveProjectCheckResult(msg); }
   function handleRemoveProjectResult(msg) { _projHandleRemoveProjectResult(msg); }
-  function openAddProjectModal() { _projOpenAddProjectModal(); }
-  function closeAddProjectModal() { _projCloseAddProjectModal(); }
-  function handleBrowseDirResult(msg) { _projHandleBrowseDirResult(msg); }
-  function handleAddProjectResult(msg) { _projHandleAddProjectResult(msg); }
-  function handleCloneProgress(msg) { _projHandleCloneProgress(msg); }
 
   // --- PWA install prompt -> modules/app-misc.js (set up in initMisc)
 
@@ -1467,9 +1473,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
 
   // --- Rate Limit module ---
   initRateLimit();
+  initVendorUsageOverview();
+  initGithubStar();
 
   // --- Projects module ---
-  initProjects();
+  initProjectStart();
 
   // --- Home Hub module ---
   initProjectMateNavigation();

package/lib/public/css/contextual-clay.css

@@ -81,7 +81,7 @@ html.contextual-pane-boot #connect-overlay { display: none !important; }
 #contextual-clay button:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; color: var(--text); }
 #contextual-clay button .lucide { width: 15px; height: 15px; }
 #contextual-clay iframe { border: 0; flex: 1; width: 100%; min-height: 0; background: var(--bg); }
-#contextual-clay [data-clay-loading]:not([hidden]) { position: absolute; inset: 0; margin: 0; padding: 18px 12px; display: block; color: var(--text-muted); font-size: 13px; background: var(--bg); pointer-events: none; }
+#contextual-clay [data-clay-loading]:not([hidden]) { position: absolute; inset: 0; margin: 0; padding: 18px 12px; display: flex; z-index: 1; color: var(--text-muted); font-size: 13px; background: var(--bg); pointer-events: none; }
 body:is(.contextual-chat-pane, .contextual-clay-native) { --content-width: 760px; }
 body:is(.contextual-chat-pane, .contextual-clay-native) #messages { padding-top: 14px; }
 body:is(.contextual-chat-pane, .contextual-clay-native) #messages .msg-assistant .md-content,

package/lib/public/css/filebrowser.css

@@ -390,7 +390,7 @@
 
 /* --- Panel fullscreen --- */
 @media (min-width: 1024px) {
-  #main-column:has(.panel-fullscreen:not(.hidden)) > .title-bar-content { display: none; }
+  #main-column:has(.panel-fullscreen:not(.hidden):not(#shared-browser-panel)) > .title-bar-content { display: none; }
   #main-panels:has(.panel-fullscreen:not(.hidden)) > #app { display: none; }
 }
 @media (max-width: 1023px) {

package/lib/public/css/mate-loading-scene.css

@@ -0,0 +1,21 @@
+.mate-loading {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 12px;
+  color: var(--text-muted);
+  text-align: center;
+}
+.mate-loading[hidden] { display: none; }
+.mate-loading-scene { position: relative; width: 210px; height: 148px; flex-shrink: 0; }
+.mate-loading-avatar { position: absolute; width: 94px; height: 94px; object-fit: contain; left: 58px; top: 22px; }
+.mate-loading-desk { position: absolute; width: 210px; height: auto; left: 0; bottom: 0; }
+.mate-loading-label { margin: 0; max-width: 100%; font-size: 13px; line-height: 1.5; overflow-wrap: anywhere; }
+.mate-loading-dots { display: flex; gap: 6px; padding: 3px 0; }
+.mate-loading-dots span { width: 6px; height: 6px; border-radius: 45%; background: var(--text-muted); opacity: .45; animation: mate-loading-bob 1.5s ease-in-out infinite; }
+.mate-loading-dots span:nth-child(2) { animation-delay: .18s; }
+.mate-loading-dots span:nth-child(3) { animation-delay: .36s; }
+@keyframes mate-loading-bob { 0%, 60%, 100% { transform: translateY(0); opacity: .4; } 30% { transform: translateY(-4px); opacity: .8; } }
+@media (prefers-reduced-motion: reduce) { .mate-loading-dots span { animation: none; } }
+@media (max-height: 450px) { .mate-loading-scene { zoom: .7; } .mate-loading { gap: 8px; } }