clay-server 5.2.0-beta.2 → 5.2.0-beta.4

package/lib/project-shared-browser.js

@@ -5,12 +5,14 @@ var browserTools = require("./shared-browser-tools");
 var createRuntime = require("./shared-browser-runtime").createRuntime;
 
 function attachSharedBrowser(ctx) {
+  var storageStore = ctx.storageStore || require("./shared-browser-storage").attachStorageStore(require("./config").CONFIG_DIR);
   var records = new Map();
   var viewers = new Map();
   var destroyed = false;
   function allowed(session, ws) {
     try {
-      if (ctx.isMate || !session || ctx.sm.sessions.get(session.localId) !== session) return false;
+      if (!session || ctx.sm.sessions.get(session.localId) !== session) return false;
+      if (ctx.isMate && ctx.usersModule.isMultiUser() && (!ctx.ownerId || session.ownerId !== ctx.ownerId)) return false;
       if (ctx.usersModule.isMultiUser()) {
         var user = ctx.usersModule.findUserById(session.ownerId);
         if (!user || (ws && (!ws._clayUser || String(ws._clayUser.id) !== String(user.id)))) return false;
@@ -35,7 +37,7 @@ function attachSharedBrowser(ctx) {
   function projection(record) {
     if (!record) return null;
     return { id: record.id, phase: record.phase, control: record.control, epoch: record.epoch, handoff: !!record.handoff,
-      url: record.url, width: record.width, height: record.height, activity: record.activity || null, activityHistory: record.activityHistory || [], pointer: record.pointer || null, error: record.error || "" };
+      browserLink: record.url ? "browser:" + record.url : null, incognito: record.incognito, personalCookiesAvailable: !!ctx.isMate, url: record.url, width: record.width, height: record.height, activity: record.activity || null, activityHistory: record.activityHistory || [], pointer: record.pointer || null, error: record.error || "" };
   }
   function sessionRecords(session) {
     return Array.from(records.values()).filter(function (record) { return record.session === session && recordAllowed(record); });
@@ -93,6 +95,13 @@ function attachSharedBrowser(ctx) {
     if ((record.activity || record.pointer) && record.activityGeneration !== Number(record.session._sdkQueryGeneration || 0)) {
       activityHistory.interruptActivity(record); record.pointer = null; broadcast(record);
     }
+    if (message.type === "navigation") {
+      try { record.navigationUrl = policy.browserUrl(message.navigationUrl || message.url); } catch (error) { record.navigationUrl = null; }
+    }
+    if (message.type === "navigation" && !record.incognito) {
+      try { storageStore.visit(record.cookieOwner, message.url); }
+      catch (error) { end(record, "Could not save personal browsing history"); return; }
+    }
     if (message.type === "ready") { record.phase = "live"; record.resolveReady(); }
     if (message.type === "error") { end(record, message.error); return; }
     if (message.url !== undefined) record.url = policy.visibleUrl(message.url);
@@ -108,10 +117,12 @@ function attachSharedBrowser(ctx) {
   }
   // Every new tab starts shared. Exclusive human mode is explicit, per tab, and only the human clears it,
   // so an agent open never reuses (or bypasses) an exclusive tab.
-  function create(session, actor, newTab) {
+  function create(session, actor, newTab, incognito) {
     requireAccess(session);
+    if (incognito !== undefined && typeof incognito !== "boolean") throw new Error("Invalid incognito mode");
+    var temporary = !ctx.isMate || incognito === true;
     var tabs = sessionRecords(session);
-    var previous = !newTab && tabs.find(function (record) { return record.runtime && (actor === "user" || record.control === "agent"); });
+    var previous = !newTab && tabs.find(function (record) { return record.runtime && (incognito === undefined || record.incognito === temporary) && (actor === "user" || record.control === "agent"); });
     if (previous) return previous;
     if (tabs.length >= 12) {
       var expired = tabs.find(function (record) { return !record.runtime; });
@@ -122,12 +133,15 @@ function attachSharedBrowser(ctx) {
     records.forEach(function (record) { if (record.runtime && record.ownerId === session.ownerId) active++; });
     if (active >= 4) throw new Error("End another browser before opening more than four active tabs");
     var record = { session: session, ownerId: session.ownerId, identity: identityKey(session), id: crypto.randomUUID(), phase: "starting", control: "agent", epoch: 0,
-      url: "", width: 1280, height: 800, touched: Date.now(), runtime: null, frame: null };
+      cookieOwner: ctx.isMate ? (ctx.ownerId || session.ownerId || "default") : null, incognito: temporary, url: "", width: 1280, height: 800, touched: Date.now(), runtime: null, frame: null };
     record.ready = new Promise(function (resolve, reject) { record.resolveReady = resolve; record.rejectReady = reject; });
     record.ready.catch(function () {});
     records.set(record.id, record);
     try {
-      record.runtime = (ctx.createRuntime || createRuntime)({ identity: ctx.getIdentity(session), onEvent: function (message) { receive(record, message); } });
+      record.runtime = (ctx.createRuntime || createRuntime)({ identity: ctx.getIdentity(session), storage: temporary ? null : {
+        read: function () { if (!recordAllowed(record)) throw new Error("Browser access was revoked"); return storageStore.read(record.cookieOwner); },
+        exchange: function (previous, current) { if (!recordAllowed(record)) throw new Error("Browser access was revoked"); return storageStore.exchange(record.cookieOwner, previous, current); },
+      }, onEvent: function (message) { receive(record, message); } });
     } catch (e) { end(record, e.message); }
     broadcast(record, true);
     return record;
@@ -186,6 +200,7 @@ function attachSharedBrowser(ctx) {
     requireAccess(session);
     if (actor === "agent" && Number(session._sdkQueryGeneration || 0) !== generation) throw new Error("Browser result belongs to an older query");
     if (!recordAllowed(record) || records.get(record.id) !== record || record.epoch !== epoch) throw new Error("Browser control changed during the action");
+    if (result && result.url !== undefined) record.url = policy.visibleUrl(result.url);
     return result;
   }
   async function tool(session, args) {
@@ -196,8 +211,10 @@ function attachSharedBrowser(ctx) {
       var value;
       if (args.action === "status") value = { browsers: sessionRecords(session).map(projection) };
       else if (args.action === "open") {
+        if (args.incognito !== undefined && typeof args.incognito !== "boolean") throw new Error("Invalid incognito mode");
         var url = args.url ? policy.browserUrl(args.url) : null;
-        record = args.browserId ? selectRecord(session, args.browserId) : create(session, "agent", args.newTab === true);
+        record = args.browserId ? selectRecord(session, args.browserId) : create(session, "agent", args.newTab === true, args.incognito);
+        if (args.incognito !== undefined && record.incognito !== (!ctx.isMate || args.incognito)) throw new Error("This tab has a different cookie mode. Open a new tab with the requested mode.");
         if (url) await run(session, record, "agent", "action", { kind: "navigate", url: url }, args.intent);
         value = projection(record);
       } else if (args.action === "finish") {
@@ -206,14 +223,27 @@ function attachSharedBrowser(ctx) {
       } else if (args.action === "inspect") {
         value = await run(session, record, "agent", "inspect", null, args.intent);
         value.browserId = record.id;
+        value.browserLink = record.url ? "browser:" + record.url : null;
         var image = value.image; delete value.image;
         return { content: [{ type: "text", text: JSON.stringify(value) }, { type: "image", mimeType: "image/jpeg", data: image }] };
       } else {
         value = await run(session, record, "agent", "action", policy.validateAction(Object.assign({}, args, { kind: args.action })), args.intent);
       }
+      if (value && value.url) value.browserLink = "browser:" + policy.visibleUrl(value.url);
       return { content: [{ type: "text", text: JSON.stringify(value) }] };
     } catch (e) { return { isError: true, content: [{ type: "text", text: e.message }] }; }
   }
+  async function openLinkedPage(session, url, incognito) {
+    var record = sessionRecords(session).find(function (tab) {
+      return tab.runtime && ((tab.phase === "live" && (tab.navigationUrl || tab.url) === url) || (tab.linkOpening && tab.linkOpening.url === url));
+    });
+    if (record) { if (record.linkOpening) await record.linkOpening.promise; return record; }
+    record = create(session, "user", true, incognito);
+    record.navigationUrl = url;
+    record.linkOpening = { url: url, promise: run(session, record, "user", "action", { kind: "navigate", url: url }) };
+    try { await record.linkOpening.promise; } finally { record.linkOpening = null; }
+    return record;
+  }
   function handleMessage(ws, msg) {
     if (!msg.type || msg.type.indexOf("shared_browser_") !== 0) return false;
     var session = ctx.getSessionForWs(ws);
@@ -221,8 +251,22 @@ function attachSharedBrowser(ctx) {
       requireAccess(session, ws);
       if (String(msg.sessionId) !== String(session.localId)) throw new Error("Browser session changed");
       var record;
+      if (msg.type === "shared_browser_settings") {
+        if (!ctx.isMate) throw new Error("Personal browser settings are available only in Mates");
+        if (typeof msg.requestId !== "string" || msg.requestId.length > 100) throw new Error("Invalid browser settings request");
+        var owner = ctx.ownerId || session.ownerId || "default";
+        var settings = storageStore.manage(owner, msg.operation, msg.target);
+        requireAccess(session, ws);
+        ctx.sendTo(ws, { type: "shared_browser_settings", sessionId: session.localId, requestId: msg.requestId, settings: settings });
+        return;
+      }
       if (msg.type === "shared_browser_state_request") { sendState(ws, session, sessionRecords(session)[0]); return; }
-      if (msg.type === "shared_browser_open") { record = create(session, "user", msg.newTab === true); sendState(ws, session, record, true, true); return; }
+      if (msg.type === "shared_browser_open") {
+        var targetUrl = msg.url === undefined ? null : policy.browserUrl(msg.url);
+        if (targetUrl) record = await openLinkedPage(session, targetUrl, msg.incognito);
+        else record = create(session, "user", msg.newTab === true, msg.incognito);
+        sendState(ws, session, record, true, true); return;
+      }
       record = selectRecord(session, msg.browserId);
       if (!record || !recordAllowed(record, ws) || msg.browserId !== record.id) throw new Error("Browser session expired");
       if (msg.type === "shared_browser_view") {
@@ -242,7 +286,7 @@ function attachSharedBrowser(ctx) {
         await run(session, record, "user", "action", policy.validateAction(msg.event));
       }
     }).catch(function (e) {
-      if (ws.readyState === 1) ctx.sendTo(ws, { type: "shared_browser_error", sessionId: msg.sessionId, error: e.message });
+      if (ws.readyState === 1) ctx.sendTo(ws, { type: "shared_browser_error", sessionId: msg.sessionId, error: e.message, requestId: msg.requestId });
     });
     return true;
   }
@@ -257,7 +301,7 @@ function attachSharedBrowser(ctx) {
   sweep.unref();
   function getToolDefs(session) {
     var generation = Number(session && session._sdkQueryGeneration || 0);
-    return ctx.isMate ? [] : browserTools.getToolDefs(function (args) {
+    return browserTools.getToolDefs(function (args) {
       if (session && Number(session._sdkQueryGeneration || 0) !== generation) {
         return Promise.resolve({ isError: true, content: [{ type: "text", text: "This browser tool belongs to an older query" }] });
       }
@@ -267,8 +311,8 @@ function attachSharedBrowser(ctx) {
   return {
     handleMessage: handleMessage,
     getToolDefs: getToolDefs,
-    getSystemPrompt: function () { return ctx.isMate ? "" : browserTools.PROMPT; },
-    createMcpServer: function (adapter, session) { return ctx.isMate || !adapter || typeof adapter.createToolServer !== "function" ? null : adapter.createToolServer({ name: "clay-shared-browser", version: "1.0.0", tools: getToolDefs(session) }); },
+    getSystemPrompt: function () { return browserTools.PROMPT; },
+    createMcpServer: function (adapter, session) { return !adapter || typeof adapter.createToolServer !== "function" ? null : adapter.createToolServer({ name: "clay-shared-browser", version: "1.0.0", tools: getToolDefs(session) }); },
     destroy: function () { destroyed = true; clearInterval(sweep); records.forEach(function (record) { end(record); }); records.clear(); viewers.clear(); },
   };
 }

package/lib/project.js

@@ -348,6 +348,10 @@ function createProjectContext(opts) {
   function getRuntimeEnvForSession(session) {
     var linuxUser = (session && session.linuxUser) || getLinuxUserForSession(session);
     var osUserInfo = getOsUserInfoForLinuxUser(linuxUser);
+    return resolveOwnerRuntimeEnv(osUserInfo);
+  }
+
+  function resolveOwnerRuntimeEnv(osUserInfo) {
     var baseEnv = osUserInfo ? buildUserEnv(osUserInfo) : process.env;
     var shared = typeof opts.onGetSharedEnv === "function" ? opts.onGetSharedEnv() : null;
     var projectEnv = typeof opts.onGetProjectEnv === "function" ? opts.onGetProjectEnv(slug) : null;
@@ -709,7 +713,22 @@ function createProjectContext(opts) {
 
   // Personal computer tools use the extension; remote URLs are owner-bound.
   var _mcp = attachMcp({
-    sendTo: sendTo, slug: slug, clients: clients,
+    sendTo: sendTo, slug: slug, clients: clients, cwd: cwd,
+    userInput: function (session) { return _askUser.createHandler(session); },
+    runtimeEnvForSession: getRuntimeEnvForSession,
+    canDiscoverSession: function (session) { var scope = _requestAccess.fileScope({ _clayUser: session.ownerId && usersModule.findUserById(session.ownerId) }); return !!scope.identity || !scope.projectBound; },
+    sessionVendor: function (session) { return session.vendor || sm.defaultVendor || "claude"; },
+    runtimeEnv: function (owner, ws) { return resolveOwnerRuntimeEnv(_requestAccess.fileScope(ws).identity); },
+    canDiscover: function (ws) { var scope = _requestAccess.fileScope(ws); return !!scope.identity || !scope.projectBound; },
+    ownerIdentity: function (owner) {
+      if (!osUsers) {
+        if (usersModule.isMultiUser() && (usersModule.getAllUsers().length !== 1 || !usersModule.findUserById(owner))) throw new Error('Local MCP requires OS user mapping in a shared installation.');
+        return null;
+      }
+      var user = usersModule.findUserById(owner);
+      if (!user || !user.linuxUser) throw new Error('OS user identity is unavailable.');
+      return getOsUserInfoForWs({ _clayUser: user });
+    },
     root: require("./config").CONFIG_DIR,
     isMultiUser: function () { return usersModule.isMultiUser(); },
     canAccess: function (ws) { return _requestAccess.canAccessProject(ws, slug); },
@@ -769,7 +788,7 @@ function createProjectContext(opts) {
     },
   });
   var _sharedBrowser = attachSharedBrowser({
-    slug: slug, isMate: isMate, sm: sm, clients: clients, sendTo: sendTo,
+    slug: slug, isMate: isMate, ownerId: projectOwnerId, sm: sm, clients: clients, sendTo: sendTo,
     usersModule: usersModule, requestAccess: _requestAccess, osUsers: osUsers,
     getSessionForWs: getSessionForWs,
     getIdentity: function (session) {
@@ -780,6 +799,7 @@ function createProjectContext(opts) {
   var _sessionDocument = attachSessionDocument({
     cwd: cwd,
     isMate: isMate,
+    canUseSession: _sessionNotes.canUseSession,
     sendToSession: sendToSession,
     FS_MAX_SIZE: FS_MAX_SIZE,
     getOsUserInfoForSession: function (session) {
@@ -839,7 +859,12 @@ function createProjectContext(opts) {
     sendTo: sendTo, getClients: function () { return clients; }, startWork: _issueWork,
   });
   var _sessionGithub = require("./project-session-github").attachSessionGithub({
-    cwd: cwd, sm: sm, isMate: isMate, osUsers: osUsers,
+    cwd: cwd, sm: sm, isMate: isMate, osUsers: osUsers, projectSlug: slug, sendTo: sendTo,
+    userInput: function (session) { return _askUser.createHandler(session); },
+    canAccess: function (ws) {
+      return !isMate && clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
+        !!(ws._clayUser && usersModule.findUserById(ws._clayUser.id) && opts.canAccessProjectSlug(ws._clayUser.id, slug)));
+    },
     canUse: function (session) {
       if (session.hidden || session.delegated || session._pairDelegation || session._delegatedBy || require("./session-provenance").isWorker(session)) return false;
       if (!usersModule.isMultiUser()) return true;
@@ -858,9 +883,10 @@ function createProjectContext(opts) {
   });
   var _sessionLinear = require("./project-session-linear").attachSessionLinear({
     sm: sm, isMate: isMate, storage: opts.linearStorage, projectSlug: slug,
+    userInput: function (session) { return _askUser.createHandler(session); },
     isMultiUser: usersModule.isMultiUser, sendTo: sendTo,
     canAccess: function (ws) {
-      return !isMate && clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
+      return clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
         !!(ws._clayUser && usersModule.findUserById(ws._clayUser.id) && opts.canAccessProjectSlug(ws._clayUser.id, slug)));
     },
     startWork: require('./project-linear-launch').attachLinearLaunch({
@@ -1055,14 +1081,12 @@ function createProjectContext(opts) {
       }
     }
 
-    // Shared sticky-note memory (main projects only).
-    if (!isMate) {
-      try {
-        var sessionNotesMcpConfig = _sessionNotes.createMcpServer(adapter);
-        if (sessionNotesMcpConfig) servers[sessionNotesMcpConfig.name || "clay-notes"] = sessionNotesMcpConfig;
-      } catch (e) {
-        console.error("[project] Failed to create session notes MCP server:", e.message);
-      }
+    // Shared sticky-note memory is available in both owner-private projects and Mates.
+    try {
+      var sessionNotesMcpConfig = _sessionNotes.createMcpServer(adapter);
+      if (sessionNotesMcpConfig) servers[sessionNotesMcpConfig.name || "clay-notes"] = sessionNotesMcpConfig;
+    } catch (e) {
+      console.error("[project] Failed to create session notes MCP server:", e.message);
     }
 
     // Project Logs. Project sessions get the project-scoped set; Mate projects
@@ -1107,13 +1131,11 @@ function createProjectContext(opts) {
     if (sharedBrowserConfig) servers["clay-shared-browser"] = sharedBrowserConfig;
 
     // Explicit agent signal for user-requested Markdown presentation.
-    if (!isMate) {
-      try {
-        var sessionDocumentMcpConfig = _sessionDocument.createMcpServer(adapter);
-        if (sessionDocumentMcpConfig) servers[sessionDocumentMcpConfig.name || "clay-documents"] = sessionDocumentMcpConfig;
-      } catch (e) {
-        console.error("[project] Failed to create session document MCP server:", e.message);
-      }
+    try {
+      var sessionDocumentMcpConfig = _sessionDocument.createMcpServer(adapter);
+      if (sessionDocumentMcpConfig) servers[sessionDocumentMcpConfig.name || "clay-documents"] = sessionDocumentMcpConfig;
+    } catch (e) {
+      console.error("[project] Failed to create session document MCP server:", e.message);
     }
 
     // Debate MCP server (available to both mates and main project)
@@ -2336,6 +2358,8 @@ function createProjectContext(opts) {
   function getMcpBridgeHandler(sessionId, sessionOnly, queryGeneration) {
     var boundSession = Number.isInteger(sessionId) ? sm.sessions.get(sessionId) : null;
     var queryToolBridge = createSessionQueryToolBridge({ session: boundSession, sdk: sdk });
+    var externalQueryBridge = require('./mcp-query-bridge').createQueryBridge({ valid: sessionQueryValid,
+      getServers: function () { return _mcp.getMcpServers(boundSession, sessionQueryValid()); } });
     function sessionQueryValid() {
       return !!boundSession
         && Number.isInteger(queryGeneration)
@@ -2460,7 +2484,7 @@ function createProjectContext(opts) {
           }
         }
 
-        if (sessionOnly) return Promise.resolve(tools);
+        if (sessionOnly) return Promise.resolve(tools.concat(externalQueryBridge.list()));
 
         // In-app MCP servers (debate, browser, email).
         // Use getLocalMcpServers() so clay-browser is hidden unless the
@@ -2480,7 +2504,7 @@ function createProjectContext(opts) {
         }
 
         // Personal computer and remote URL connections.
-        var remoteServers = _mcp.getMcpServers(boundSession);
+        var remoteServers = sessionQueryValid() ? _mcp.getMcpServers(boundSession, sessionQueryValid()) : {};
         if (remoteServers) {
           var remoteNames = Object.keys(remoteServers);
           for (var ri = 0; ri < remoteNames.length; ri++) {
@@ -2578,7 +2602,7 @@ function createProjectContext(opts) {
         if (serverName === "clay-sessions" || serverName === "clay-notes" || serverName === "clay-handoff" || serverName === "clay-documents" || serverName === "clay-shared-browser" || serverName === "clay-debate" || serverName === "clay-mate-creation" || serverName === "clay-workspace" || serverName === "clay-history" || serverName === "clay-github" || serverName === "clay-linear" || serverName === "clay-issues" || serverName === "clay-logs" || serverName === "clay-knowledge" || serverName === "clay-you") {
           return Promise.reject(new Error("Session-bound tool requires a valid Clay session: " + serverName + "/" + toolName));
         }
-        if (sessionOnly) return Promise.reject(new Error("Session tool not found: " + serverName + "/" + toolName));
+        if (sessionOnly) return externalQueryBridge.call(serverName, toolName, args);
         // Try in-app servers first (gated by extension connectivity for clay-browser).
         var localMcp = getLocalMcpServers(boundSession);
         if (localMcp && localMcp[serverName]) {
@@ -2590,17 +2614,7 @@ function createProjectContext(opts) {
             }
           }
         }
-        // Try remote/local proxy servers
-        var remoteServers = _mcp.getMcpServers(boundSession);
-        if (remoteServers && remoteServers[serverName]) {
-          var rServer = remoteServers[serverName];
-          if (rServer.instance && rServer.instance._registeredTools && rServer.instance._registeredTools[toolName]) {
-            var rHandler = rServer.instance._registeredTools[toolName].handler;
-            if (typeof rHandler === "function") {
-              return Promise.resolve(rHandler(args));
-            }
-          }
-        }
+        if (externalQueryBridge.list().some(function (tool) { return tool.server === serverName && tool.name === toolName; })) return externalQueryBridge.call(serverName, toolName, args);
         return Promise.reject(new Error("Tool not found: " + serverName + "/" + toolName));
       },
     };
@@ -2917,7 +2931,8 @@ function createProjectContext(opts) {
     unregisterHomeDebateClient: function (ws) { homeDebateClients.delete(ws); },
     handleHomeDebateProposalResponse: function (ws, msg, session) { return _debateProposal.handleHomeMessage(ws, msg, session); },
     handleHomeMateCreationProposalResponse: function (ws, msg, session) { return _mateCreationProposal.handleHomeMessage(ws, msg, session); },
-    handleHomeAskUserResponse: function (msg, session) { return _sessions.respondToAskUser(session, msg); },
+    registerMcpConsentViewer: _mcp.registerConsentViewer,
+    handleHomeAskUserResponse: function (msg, session, ws) { return _sessions.respondToAskUser(session, msg, ws); },
     handleHomePermissionResponse: function (ws, msg, session) { return _sessions.respondToHomePermission(ws, msg, session); },
     stopHomeSession: function (session) { return _sessions.stopHomeSession(session); },
     handleHomeDebateControl: function (ws, msg, session) { return _debate.handleHomeControl(ws, msg, session); },

package/lib/public/app.js

@@ -285,6 +285,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     mcpConnections: { screen: "list", servers: [], search: "", loaded: false },
     sharedBrowserOpen: false,
     sharedBrowserUi: {},
+    sharedBrowserSettings: {},
+    browserLinksBound: false,
     // session / routing
     basePath: basePath,
     wsPath: wsPath,
@@ -324,9 +326,12 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     githubWorkSessions: [],
     githubWorkProject: null,
     githubWorkRefresh: null,
+    workPrimaryPending: null,
     activeProjectSlug: null,
     activeProjectMateId: null,
     activeProjectMateName: '',
+    clayReturnTarget: null,
+    clayReturnPendingProjectSlug: null,
     activeSessionMateId: null,
     activeSessionMateName: '',
     sessionActivatedProjectSlug: null,

package/lib/public/appearance-bootstrap.js

@@ -0,0 +1,14 @@
+(function () {
+  var root = document.documentElement;
+  var light = window.matchMedia && window.matchMedia("(prefers-color-scheme: light)").matches;
+  var seed = window.__clayAppearanceSeed;
+
+  function applyMode(mode) {
+    if (mode !== "light" && mode !== "dark") return;
+    root.classList.toggle("light-theme", mode === "light");
+    root.classList.toggle("dark-theme", mode !== "light");
+  }
+
+  var savedMode = seed && seed.configured && (seed.mode === "light" || seed.mode === "dark") ? seed.mode : null;
+  applyMode(savedMode || (light ? "light" : "dark"));
+}());

package/lib/public/css/clay-workspace.css

@@ -4,6 +4,35 @@
   padding: 0;
   cursor: pointer;
 }
+.clay-brand-flip {
+  position: relative;
+  display: block;
+  width: 38px;
+  height: 38px;
+  transform-style: preserve-3d;
+  transition: transform 220ms cubic-bezier(.2,.75,.25,1);
+}
+.clay-brand-face {
+  position: absolute;
+  inset: 0;
+  width: 38px;
+  height: 38px;
+  object-fit: contain;
+  backface-visibility: hidden;
+  transition: opacity 120ms ease;
+}
+.clay-brand-avatar { transform: rotateY(180deg); border-radius: 11px; }
+.icon-strip-brand[data-clay-mode="mate"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand:hover .clay-brand-flip,
+.icon-strip-brand:focus-visible .clay-brand-flip,
+.icon-strip-brand.clay-speaking[data-clay-mode="project"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand[data-clay-mode="mate"]:hover .clay-brand-flip,
+.icon-strip-brand[data-clay-mode="mate"]:focus-visible .clay-brand-flip { transform: rotateY(0deg); }
+.icon-strip-brand.clay-speaking[data-clay-mode="mate"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand.clay-speaking .clay-brand-face { transition-duration: 80ms; }
+@media (prefers-reduced-motion: reduce) {
+  .clay-brand-flip, .clay-brand-face { transition: none; }
+}
 .icon-strip-brand:hover::before {
   background: var(--bg-alt);
   box-shadow: 0 1px 2px rgba(var(--shadow-rgb), 0.08);

package/lib/public/css/home-debate-planning.css

@@ -87,6 +87,8 @@
 }
 
 .home-debate-question-text { margin: 0 0 14px; font-size: 15px; }
+.mcp-import-consent .home-debate-question-text,
+.mcp-import-consent .ask-user-question-text { white-space: pre-line; font-size: 13px; line-height: 1.6; }
 .home-debate-question-form { display: grid; gap: 8px; }
 .home-debate-question-option {
   display: grid;

package/lib/public/css/mate-avatar-gallery.css

@@ -0,0 +1,12 @@
+/* Coin-size portraits in an explicit, compact visual catalog. */
+.home-mate-avatar-selection { display: flex; align-items: center; gap: 10px; margin-bottom: 14px; }
+.home-mate-avatar-selection p { color: var(--text-secondary); font-size: 12px; }
+.home-mate-avatar-editor h4 { margin: 16px 0 8px; font-size: 13px; color: var(--text); }
+.home-mate-avatar-choices { grid-template-columns: repeat(auto-fill, minmax(54px, 1fr)); gap: 5px; }
+.home-mate-avatar-choice img { width: 42px; height: 42px; }
+.home-mate-avatar-choice[aria-pressed="true"] { border: 2px solid var(--brand-indigo); padding: 4px 2px 5px; }
+.home-mate-avatar-choice:disabled { cursor: default; opacity: .65; }
+.home-mate-avatar-actions { position: sticky; bottom: 0; padding: 10px 0; background: var(--bg); z-index: 1; }
+.home-mate-avatar-actions button.primary { background: var(--brand-indigo); color: white; border-color: var(--brand-indigo); }
+@media (pointer: coarse) { .home-mate-avatar-choice { min-height: 62px; } }
+.home-mate-avatar-actions .home-mate-avatar-status { flex: 0 0 100%; margin: 0; padding-top: 0; }

package/lib/public/css/mate-conversation.css

@@ -1,11 +1,16 @@
 /* Restore the Home conversation's reading measure inside Mate projects.
    The existing project renderer, queue and composer still own behavior. */
-body.mate-workspace-active { --content-width: 720px; }
-body.mate-workspace-active #messages { padding-inline: max(0px, calc((100% - 720px) / 2)); }
+body.mate-workspace-active {
+  --mate-content-width: 860px;
+  --content-width: var(--mate-content-width);
+}
+body.mate-workspace-active #messages {
+  padding-inline: max(12px, calc((100% - var(--mate-content-width)) / 2));
+}
 body.mate-workspace-active #messages > .msg-assistant,
 body.mate-workspace-active #messages > .msg-user {
   width: 100%;
-  max-width: 720px;
+  max-width: var(--mate-content-width);
   box-sizing: border-box;
   margin: 0 auto 12px;
   padding: 4px 20px;
@@ -66,7 +71,7 @@ body.mate-workspace-active .msg-user:not(.msg-user-other):not(.msg-user-delegate
 
 /* One writing row, with secondary tools and model selection underneath.
    Display contents preserves the live controls and their event handlers. */
-body.mate-workspace-active #input-wrapper { max-width: 720px; }
+body.mate-workspace-active #input-wrapper { max-width: var(--mate-content-width); }
 body.mate-workspace-active #input-row,
 body.mate-workspace-active #input-row:focus-within {
   display: grid;
@@ -144,7 +149,7 @@ body.mate-workspace-active #messages > .mate-thinking,
 body.mate-workspace-active #messages > .mate-permission,
 body.mate-workspace-active #messages > .mate-ask-user {
   box-sizing: border-box;
-  max-width: 720px;
+  max-width: var(--mate-content-width);
   margin: 0 auto 12px;
   padding: 4px 20px;
   gap: 9px;

package/lib/public/css/session-github.css

@@ -114,9 +114,29 @@
 .github-state-merged .github-work-status svg, .github-state-closed .github-work-status svg { color: #a371f7; }
 .github-state-draft .github-work-status svg, .github-state-unknown .github-work-status svg { color: var(--text-muted, #888); }
 #header-github-links { min-width: 0; max-width: 200px; flex: 0 0 auto; margin-left: 4px; }
-.github-work-details { flex-wrap: wrap; padding: 8px 0; gap: 8px 12px; }
+.github-work-details { flex-wrap: wrap; padding: 8px 0; gap: 8px 12px; align-items: flex-start; }
 .github-work-action { color: var(--text-muted, #888); text-decoration: none; font-size: 11px; }
 .github-work-action:hover { text-decoration: underline; }
+.github-work-pr-group {
+  display: grid;
+  grid-template-columns: minmax(0, auto) minmax(0, 1fr);
+  gap: 3px 10px;
+  flex: 1 1 100%;
+  min-width: 0;
+  padding-top: 7px;
+  border-top: 1px solid color-mix(in srgb, var(--text, #888) 14%, transparent);
+}
+.github-work-pr-header,
+.github-work-pr-actions,
+.github-work-pr-checks { min-width: 0; }
+.github-work-pr-header { grid-row: span 2; }
+.github-work-pr-actions,
+.github-work-pr-checks { display: flex; flex-wrap: wrap; align-items: baseline; gap: 3px 10px; }
+.github-work-pr-checks { grid-column: 2; }
+.github-work-check { display: inline-flex; min-width: 0; max-width: min(100%, 220px); align-items: baseline; gap: 4px; }
+.github-work-check-name { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.github-work-check-state { flex: 0 0 auto; white-space: nowrap; }
+.github-work-pr-group .session-github-link { max-width: 100%; }
 @media (max-width: 600px) {
   #header-github-links { max-width: 82px; }
   .mobile-session-item .session-github-link { min-height: 28px; padding-right: 4px; }
@@ -210,3 +230,25 @@
   .mobile-session-item .session-row-github-links .github-work-more { padding-inline: 2px; }
   .mobile-session-item .session-row-github-links { min-height: 28px; }
 }
+
+.work-primary-group + .work-primary-group { margin-top: 10px; padding-top: 8px; border-top: 1px solid var(--border, #444); }
+.work-primary-group h3 { margin: 0 0 4px; color: var(--text-muted, #888); font-size: 11px; font-weight: 500; }
+.work-primary-row { display: grid; grid-template-columns: minmax(0, 1fr) 22px; gap: 5px; align-items: start; padding: 5px 0; }
+.work-primary-row .github-work-entry { padding: 0; }
+.work-primary-row .session-linear-link { min-width: 0; max-width: 100%; box-sizing: border-box; }
+.work-primary-row .linear-work-title { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; }
+.work-primary-choice { display: inline-flex; align-items: center; justify-content: center; width: 22px; height: 22px; padding: 0; border: 0; border-radius: 4px; background: transparent; color: var(--accent, #5857fc); opacity: .65; cursor: pointer; touch-action: manipulation; }
+.work-primary-choice svg { width: 13px; height: 13px; transform: rotate(35deg); }
+.work-primary-choice[aria-pressed="true"] .work-primary-pin-head { fill: currentColor; }
+.work-primary-choice:hover:not(:disabled) { opacity: 1; background: color-mix(in srgb, var(--accent, #5857fc) 10%, transparent); }
+.work-primary-choice:focus-visible { opacity: 1; outline: 2px solid var(--accent, #5857fc); outline-offset: 2px; }
+.work-primary-choice[aria-pressed="true"] { color: var(--accent, #5857fc); opacity: 1; cursor: default; }
+.work-primary-choice:disabled:not([aria-pressed="true"]) { opacity: .5; cursor: wait; }
+.work-primary-feedback { margin: 6px 0 0; color: var(--text-muted, #888); font-size: 11px; }
+.work-primary-feedback:empty { display: none; }
+@media (max-width: 600px), (pointer: coarse) {
+  .work-primary-row { grid-template-columns: minmax(0, 1fr) 28px; }
+  .work-primary-choice { width: 28px; height: 28px; }
+}
+.work-primary-row .linear-work-id, .work-primary-row .linear-work-state { flex: none; white-space: nowrap; }
+.work-primary-row .linear-work-state { max-width: 62px; overflow: hidden; text-overflow: ellipsis; }

package/lib/public/css/shared-browser.css

@@ -29,7 +29,7 @@
 .shared-browser-monitor-stand::before { content: ""; position: absolute; top: 0; bottom: 3px; left: 30%; right: 30%; background: linear-gradient(#aaa69c, #d2cdbf); clip-path: polygon(18% 0, 82% 0, 100% 100%, 0 100%); }
 .shared-browser-monitor-stand::after { content: ""; position: absolute; inset: auto 0 0; height: 4px; background: #d8d3c6; border-radius: 2px; box-shadow: 0 1px 0 #9b978d, 0 6px 10px rgba(0,0,0,.22); }
 .shared-browser-monitor-label { color: #a5aaaf; font-size: 10px; font-variant-numeric: tabular-nums; letter-spacing: .04em; }
-.shared-browser-monitor .shared-browser-empty { color: #a5aaaf; }
+.shared-browser-monitor .shared-browser-empty { color: #a5aaaf; background: #111315; }
 .shared-browser-monitor .shared-browser-empty h3 { color: #eceeef; }
 .shared-browser-viewport canvas { display: block; width: 100%; height: 100%; object-fit: contain; touch-action: none; }
 .shared-browser-keyboard { position: absolute; bottom: 0; left: 50%; width: 1px; height: 1px; opacity: 0; padding: 0; border: 0; }
@@ -96,3 +96,37 @@
 .shared-browser-tab > button:last-child { padding: 5px; font-size: 15px; color: var(--text-muted); }
 
 #shared-browser-toggle-btn[aria-expanded="true"] { color: var(--text); background: rgba(var(--overlay-rgb), .06); }
+
+.shared-browser-cookie-mode { font-size: 11px; color: var(--text-muted); margin-right: auto; white-space: nowrap; }
+
+/* Personal browser data uses the compact settings anatomy inside the browser panel. */
+.shared-browser-settings { flex: 1; min-height: 0; overflow: auto; padding: 16px 20px; background: var(--bg); color: var(--text); font-size: 13px; }
+.shared-browser-settings[hidden] { display: none; }
+.browser-settings-open > .shared-browser-viewport, .browser-settings-open > .shared-browser-address, .browser-settings-open > .shared-browser-tabs, .browser-settings-open > .shared-browser-footer { display: none; }
+.browser-settings-heading { display: flex; align-items: center; gap: 16px; }
+.browser-settings-heading h3 { font-size: 16px; margin: 0; }
+.shared-browser-settings button { min-height: 28px; border: 1px solid var(--border); border-radius: 6px; background: var(--bg-alt); color: var(--text); padding: 4px 8px; font: inherit; cursor: pointer; }
+.shared-browser-settings button:disabled { opacity: .5; cursor: default; }
+.shared-browser-settings button:hover:not(:disabled) { background: var(--accent-bg); }
+.shared-browser-settings button:focus-visible, .shared-browser-settings input:focus-visible, .shared-browser-settings summary:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.browser-settings-muted, .browser-settings-row small, .browser-settings-origin small, .shared-browser-settings summary small { color: var(--text-muted); font-size: 12px; line-height: 1.5; }
+.shared-browser-settings nav { display: flex; gap: 8px; margin: 18px 0 12px; }
+.shared-browser-settings nav [aria-current] { border-color: var(--accent); color: var(--accent); }
+.browser-settings-tools { display: flex; gap: 8px; flex-wrap: wrap; }
+.browser-settings-tools input { flex: 1; min-width: 140px; height: 32px; border: 1px solid var(--border); border-radius: 6px; background: var(--bg-alt); color: var(--text); padding: 0 8px; font: inherit; }
+.browser-settings-feedback { font-size: 12px; min-height: 18px; }
+.browser-settings-review { border: 1px solid var(--border); border-radius: 8px; padding: 12px; margin-bottom: 12px; }
+.browser-settings-review p { font-size: 12px; line-height: 1.5; }
+.browser-settings-review button + button { margin-left: 8px; }
+.browser-settings-row { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 10px 0; border-bottom: 1px solid var(--border); }
+.browser-settings-row > div { min-width: 0; overflow-wrap: anywhere; }
+.browser-settings-row button { flex-shrink: 0; }
+.browser-settings-row small, .browser-settings-origin small, .shared-browser-settings summary small { display: block; }
+.shared-browser-settings details { border-bottom: 1px solid var(--border); }
+.shared-browser-settings summary { cursor: pointer; padding: 10px 0; overflow-wrap: anywhere; }
+.browser-settings-origin { font-size: 12px; overflow-wrap: anywhere; }
+
+.clay-browser-link { max-width: 100%; }
+.clay-browser-link::before { display: none; }
+.clay-browser-link > svg, .clay-browser-link > i { width: 14px; height: 14px; flex-shrink: 0; color: var(--accent); }
+.clay-browser-link > small { max-width: 24em; }

package/lib/public/index.html

@@ -27,9 +27,12 @@
      is lazy-loaded by terminal-prefs.js the first time the user selects
      it (or boots with it already saved). See ensureD2CodingWebfont(). -->
 <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@xterm/xterm@5/css/xterm.min.css">
-<script>
-(function(){var light=window.matchMedia&&window.matchMedia("(prefers-color-scheme: light)").matches;document.documentElement.classList.add(light?"light-theme":"dark-theme");})();
-</script>
+<script src="appearance-bootstrap.js"></script>
+<style>
+html { background: #171715; color: #e8e8e2; }
+html.light-theme { background: #f7f7f3; color: #252522; }
+body { background: transparent; color: inherit; }
+</style>
 <script>if(window.navigator.standalone||window.matchMedia("(display-mode:standalone)").matches){document.documentElement.classList.add("pwa-standalone")}</script>
   <link rel="stylesheet" href="style.css?v=20260913-scheduled-tasks4">
   <link rel="stylesheet" href="css/default-ai.css">
@@ -83,7 +86,10 @@
   <!-- === Icon Strip === -->
   <div id="icon-strip">
     <button type="button" class="icon-strip-home icon-strip-brand" aria-label="Open Clay" disabled>
-      <img class="icon-strip-logo" src="clay-studio-symbol.png" width="38" height="38" alt="">
+      <span class="clay-brand-flip" aria-hidden="true">
+        <img class="icon-strip-logo clay-brand-face clay-brand-logo" src="clay-studio-symbol.png" width="38" height="38" alt="">
+        <img class="clay-brand-face clay-brand-avatar" width="38" height="38" alt="">
+      </span>
     </button>
     <div class="icon-strip-separator"></div>
     <button type="button" class="icon-strip-hint" id="icon-strip-hint-project" data-switcher-mode="project" aria-label="Switch project"></button>