clay-server 5.2.0-beta.3 → 5.2.0-beta.5

package/lib/project.js

@@ -46,6 +46,8 @@ var { attachShellCommand } = require("./project-shell-command");
 var { attachVendorLogin } = require("./project-vendor-login");
 var { attachConnection } = require("./project-connection");
 var { attachProjectScheduledMessages } = require("./project-scheduled-messages");
+var { attachMateScheduling } = require("./mate-scheduling");
+var { attachMateScheduleLifecycle } = require("./mate-schedule-lifecycle");
 var { attachMcp } = require("./project-mcp");
 var { createSessionSkillCatalog } = require("./yoke/session-skill-catalog");
 var { attachEmail: attachEmailModule } = require("./project-email");
@@ -229,6 +231,8 @@ function createProjectContext(opts) {
   var getScheduleCount = opts.getScheduleCount || function () { return 0; };
   var notifyProcessingChanged = opts.onProcessingChanged || function () {};
   var _scheduledMessages = null;
+  var _mateScheduling = null;
+  var _mateLifecycle = null;
   var _scheduledTasks = null;
   var _scheduledTaskExecution = null;
   function onProcessingChanged() {
@@ -348,6 +352,10 @@ function createProjectContext(opts) {
   function getRuntimeEnvForSession(session) {
     var linuxUser = (session && session.linuxUser) || getLinuxUserForSession(session);
     var osUserInfo = getOsUserInfoForLinuxUser(linuxUser);
+    return resolveOwnerRuntimeEnv(osUserInfo);
+  }
+
+  function resolveOwnerRuntimeEnv(osUserInfo) {
     var baseEnv = osUserInfo ? buildUserEnv(osUserInfo) : process.env;
     var shared = typeof opts.onGetSharedEnv === "function" ? opts.onGetSharedEnv() : null;
     var projectEnv = typeof opts.onGetProjectEnv === "function" ? opts.onGetProjectEnv(slug) : null;
@@ -709,7 +717,22 @@ function createProjectContext(opts) {
 
   // Personal computer tools use the extension; remote URLs are owner-bound.
   var _mcp = attachMcp({
-    sendTo: sendTo, slug: slug, clients: clients,
+    sendTo: sendTo, slug: slug, clients: clients, cwd: cwd,
+    userInput: function (session) { return _askUser.createHandler(session); },
+    runtimeEnvForSession: getRuntimeEnvForSession,
+    canDiscoverSession: function (session) { var scope = _requestAccess.fileScope({ _clayUser: session.ownerId && usersModule.findUserById(session.ownerId) }); return !!scope.identity || !scope.projectBound; },
+    sessionVendor: function (session) { return session.vendor || sm.defaultVendor || "claude"; },
+    runtimeEnv: function (owner, ws) { return resolveOwnerRuntimeEnv(_requestAccess.fileScope(ws).identity); },
+    canDiscover: function (ws) { var scope = _requestAccess.fileScope(ws); return !!scope.identity || !scope.projectBound; },
+    ownerIdentity: function (owner) {
+      if (!osUsers) {
+        if (usersModule.isMultiUser() && (usersModule.getAllUsers().length !== 1 || !usersModule.findUserById(owner))) throw new Error('Local MCP requires OS user mapping in a shared installation.');
+        return null;
+      }
+      var user = usersModule.findUserById(owner);
+      if (!user || !user.linuxUser) throw new Error('OS user identity is unavailable.');
+      return getOsUserInfoForWs({ _clayUser: user });
+    },
     root: require("./config").CONFIG_DIR,
     isMultiUser: function () { return usersModule.isMultiUser(); },
     canAccess: function (ws) { return _requestAccess.canAccessProject(ws, slug); },
@@ -769,7 +792,7 @@ function createProjectContext(opts) {
     },
   });
   var _sharedBrowser = attachSharedBrowser({
-    slug: slug, isMate: isMate, sm: sm, clients: clients, sendTo: sendTo,
+    slug: slug, isMate: isMate, ownerId: projectOwnerId, sm: sm, clients: clients, sendTo: sendTo,
     usersModule: usersModule, requestAccess: _requestAccess, osUsers: osUsers,
     getSessionForWs: getSessionForWs,
     getIdentity: function (session) {
@@ -780,6 +803,7 @@ function createProjectContext(opts) {
   var _sessionDocument = attachSessionDocument({
     cwd: cwd,
     isMate: isMate,
+    canUseSession: _sessionNotes.canUseSession,
     sendToSession: sendToSession,
     FS_MAX_SIZE: FS_MAX_SIZE,
     getOsUserInfoForSession: function (session) {
@@ -799,6 +823,7 @@ function createProjectContext(opts) {
   });
   var _workspaceQuery = attachProjectWorkspaceQuery({
     service: opts.workspaceQueryService || null,
+    controlService: opts.clayProductControl || null,
     sm: sm,
     projectSlug: slug,
     getProjectOwnerId: function () { return projectOwnerId; },
@@ -839,7 +864,12 @@ function createProjectContext(opts) {
     sendTo: sendTo, getClients: function () { return clients; }, startWork: _issueWork,
   });
   var _sessionGithub = require("./project-session-github").attachSessionGithub({
-    cwd: cwd, sm: sm, isMate: isMate, osUsers: osUsers,
+    cwd: cwd, sm: sm, isMate: isMate, osUsers: osUsers, projectSlug: slug, sendTo: sendTo,
+    userInput: function (session) { return _askUser.createHandler(session); },
+    canAccess: function (ws) {
+      return !isMate && clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
+        !!(ws._clayUser && usersModule.findUserById(ws._clayUser.id) && opts.canAccessProjectSlug(ws._clayUser.id, slug)));
+    },
     canUse: function (session) {
       if (session.hidden || session.delegated || session._pairDelegation || session._delegatedBy || require("./session-provenance").isWorker(session)) return false;
       if (!usersModule.isMultiUser()) return true;
@@ -858,9 +888,10 @@ function createProjectContext(opts) {
   });
   var _sessionLinear = require("./project-session-linear").attachSessionLinear({
     sm: sm, isMate: isMate, storage: opts.linearStorage, projectSlug: slug,
+    userInput: function (session) { return _askUser.createHandler(session); },
     isMultiUser: usersModule.isMultiUser, sendTo: sendTo,
     canAccess: function (ws) {
-      return !isMate && clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
+      return clients.has(ws) && ws.readyState === 1 && (!usersModule.isMultiUser() ||
         !!(ws._clayUser && usersModule.findUserById(ws._clayUser.id) && opts.canAccessProjectSlug(ws._clayUser.id, slug)));
     },
     startWork: require('./project-linear-launch').attachLinearLaunch({
@@ -1021,6 +1052,7 @@ function createProjectContext(opts) {
     persistSession: function (session) { return sm.saveSessionFile(session); },
     getVendorModelCatalog: function (ws, vendor) { return _models.getVendorCatalog(ws, vendor); },
     createReadyMate: opts.createReadyMate,
+    isLive: function (session) { return sm.sessions.get(session.localId) === session; },
   });
   var _askUser = attachAskUser({
     record: function (session, event) { sm.sendAndRecord(session, event); },
@@ -1055,14 +1087,12 @@ function createProjectContext(opts) {
       }
     }
 
-    // Shared sticky-note memory (main projects only).
-    if (!isMate) {
-      try {
-        var sessionNotesMcpConfig = _sessionNotes.createMcpServer(adapter);
-        if (sessionNotesMcpConfig) servers[sessionNotesMcpConfig.name || "clay-notes"] = sessionNotesMcpConfig;
-      } catch (e) {
-        console.error("[project] Failed to create session notes MCP server:", e.message);
-      }
+    // Shared sticky-note memory is available in both owner-private projects and Mates.
+    try {
+      var sessionNotesMcpConfig = _sessionNotes.createMcpServer(adapter);
+      if (sessionNotesMcpConfig) servers[sessionNotesMcpConfig.name || "clay-notes"] = sessionNotesMcpConfig;
+    } catch (e) {
+      console.error("[project] Failed to create session notes MCP server:", e.message);
     }
 
     // Project Logs. Project sessions get the project-scoped set; Mate projects
@@ -1107,13 +1137,11 @@ function createProjectContext(opts) {
     if (sharedBrowserConfig) servers["clay-shared-browser"] = sharedBrowserConfig;
 
     // Explicit agent signal for user-requested Markdown presentation.
-    if (!isMate) {
-      try {
-        var sessionDocumentMcpConfig = _sessionDocument.createMcpServer(adapter);
-        if (sessionDocumentMcpConfig) servers[sessionDocumentMcpConfig.name || "clay-documents"] = sessionDocumentMcpConfig;
-      } catch (e) {
-        console.error("[project] Failed to create session document MCP server:", e.message);
-      }
+    try {
+      var sessionDocumentMcpConfig = _sessionDocument.createMcpServer(adapter);
+      if (sessionDocumentMcpConfig) servers[sessionDocumentMcpConfig.name || "clay-documents"] = sessionDocumentMcpConfig;
+    } catch (e) {
+      console.error("[project] Failed to create session document MCP server:", e.message);
     }
 
     // Debate MCP server (available to both mates and main project)
@@ -1383,6 +1411,7 @@ function createProjectContext(opts) {
 
   // --- SDK bridge ---
   sdk = createSDKBridge({
+    isLifecycleExecutionPaused: function () { return !!(opts.getProjectAccess && opts.getProjectAccess().lifecycleExecutionPaused); },
     cwd: cwd,
     slug: slug,
     sessionManager: sm,
@@ -1458,6 +1487,7 @@ function createProjectContext(opts) {
         _sessionGithub.getSystemPrompt(session),
         _sessionLinear.getSystemPrompt(session),
         _scheduledTasks ? _scheduledTasks.getSystemPrompt(session) : "",
+        _mateScheduling ? _mateScheduling.getSystemPrompt(session) : "",
         _mateKnowledge.getSystemPrompt(session),
         _userKnowledge.getSystemPrompt(session),
         _autonomousRun ? _autonomousRun.getSystemPrompt(session) : "",
@@ -1487,6 +1517,7 @@ function createProjectContext(opts) {
         .concat(opts.userKnowledgeService ? _userKnowledge.getDynamicToolDefs(session) : [])
         .concat(_loopInterview ? _loopInterview.getToolDefs(session) : [])
         .concat(_scheduledTasks ? _scheduledTasks.getToolDefs(session) : [])
+        .concat(_mateScheduling ? _mateScheduling.getToolDefs(session) : [])
         .concat(_scheduledTaskExecution ? _scheduledTaskExecution.getToolDefs(session) : [])
         .concat(_autonomousRun ? _autonomousRun.getToolDefs(session) : []);
     },
@@ -1542,6 +1573,8 @@ function createProjectContext(opts) {
 
   _scheduledMessages = attachProjectScheduledMessages({
     scheduler: opts.durableScheduler,
+    mateLifecycle: function () { return _mateLifecycle; },
+    deferRehydrate: isMate,
     slug: slug,
     isMate: isMate,
     osUsers: osUsers,
@@ -1564,6 +1597,32 @@ function createProjectContext(opts) {
     consumePendingMessage: function (session) { return _userMessage && _userMessage.consumePendingMessage(session); },
   });
 
+  var _schedulingAccess = require('./project-scheduling-access').attachSchedulingAccess({ osUsers: osUsers, getLinuxUser: getLinuxUserForSession, resolveLinuxUser: getOsUserInfoForLinuxUser });
+  _mateLifecycle = attachMateScheduleLifecycle({
+    sm: sm, scheduler: opts.durableScheduler, slug: slug,
+    owner: function (session) { return _mateScheduling.owner(session); },
+    authorize: function (session, control) { return control ? _mateScheduling.authorizeControl(session, control) : _mateScheduling.authorize(session); },
+    authorizeRuntime: function (session) { return _mateScheduling.authorizeLifecycle(session); },
+    schedule: function () { return _scheduledMessages.schedule.apply(null, arguments); },
+    queueItem: function (session, job) { return _scheduledMessages.queueItem(session, job); },
+    cancelJob: function (session, job) {
+      return _scheduledMessages.cancel(session, { id: job.ownerId }, null, "cancelled_by_mate", { jobId: job.id, revision: job.payload.revision });
+    },
+  });
+  _mateScheduling = attachMateScheduling({
+    isMate: isMate, isHostAgent: isHostAgent, projectOwnerId: projectOwnerId, slug: slug, mateId: opts.mateId,
+    sm: sm, users: usersModule, lifecycle: _mateLifecycle,
+    authorizeAccess: function (session, ownerId) { _schedulingAccess.ownerIdentity(session); return _scheduledMessages.authorize(session, ownerId); },
+    userInput: function (session) { return _askUser.createHandler(session); },
+  });
+  if (isMate) {
+    sm.sessions.forEach(function (session) {
+      try { _mateLifecycle.reconcile(session); }
+      catch (error) { console.error("[mate-schedules] Recovery failed:", error.message); }
+    });
+    _scheduledMessages.rehydrate();
+  }
+
   // --- Loop engine (delegated to project-loop.js) ---
   // --- Notification center (global singleton from server.js) ---
   var _notifications = opts.notificationsModule || null;
@@ -1645,6 +1704,7 @@ function createProjectContext(opts) {
     cwd: cwd,
     projectSlug: slug,
     projectTitle: title || project,
+    validateOwnerIdentity: _schedulingAccess.ownerIdentity,
     isMate: isMate,
     sm: sm,
     sdk: sdk,
@@ -1743,8 +1803,8 @@ function createProjectContext(opts) {
   }
 
   // --- Schedule / cancel a message (used by WS handler and auto-continue) ---
-  function scheduleMessage(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) {
-    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) : null;
+  function scheduleMessage(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId, options) {
+    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId, options) : null;
   }
 
   function cancelScheduledMessage(session, actorUser, targetWs, correlation) {
@@ -1778,7 +1838,7 @@ function createProjectContext(opts) {
     }
 
     // --- DM messages (delegated to server-level handler) ---
-    if (msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "default_vendor_get" || msg.type === "default_vendor_set" || msg.type === "context_view_get" || msg.type === "context_view_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
+    if (msg.type === "home_mate_question_response" || msg.type === "clay_ui_ready" || msg.type === "clay_navigation_claim" || msg.type === "clay_navigation_ack" || msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "default_vendor_get" || msg.type === "default_vendor_set" || msg.type === "context_view_get" || msg.type === "context_view_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
       if (typeof opts.onDmMessage === "function") opts.onDmMessage(ws, msg, slug);
       return;
     }
@@ -2074,6 +2134,8 @@ function createProjectContext(opts) {
   });
   sm.setSessionHydrator(_sessionSkillCatalog.hydrate);
   var _sessions = attachSessions({
+    adapters: adapters,
+    isPendingQueuePaused: function (session) { return _pendingMessageQueue.isPaused(session); },
     cwd: cwd,
     slug: slug,
     isMate: isMate,
@@ -2147,6 +2209,26 @@ function createProjectContext(opts) {
     _notifications: _notifications,
     _projectLogs: _projectLogs,
   });
+  var _productControl = require("./project-product-control").attachProjectProductControl({
+    sm: sm, users: usersModule, clients: clients, slug: slug, isMate: isMate, osUsers: osUsers,
+    getProjectAccess: opts.getProjectAccess || function () { return { visibility: "public", ownerId: projectOwnerId || null }; },
+    userInput: function (session) { return _askUser.createHandler(session); },
+    actions: _sessions.sessionActions, history: _sessions.sessionHistoryActions, selectModel: function (session, model, options) { return _models.selectSessionModel(session, model, null, options); },
+    isDriverOperatedSession: function (session) { return _sessionPair.workerPermission.isDriverOperated(session); },
+    deletePlan: _sessions.deleteProductControlPlan,
+    queue: _pendingMessageQueue,
+    requestQueueDrain: function (session) { if (_userMessage) _userMessage.consumePendingMessage(session); },
+    vendor: _sessions.sessionVendorActions,
+    runtime: _sessions.sessionRuntimeActions,
+  });
+  var _mateChatControl = require('./project-mate-chat-control').attachMateChatControl({
+    sm: sm, sdk: sdk, isMate: isMate, osUsers: osUsers, getLinuxUser: getLinuxUserForSession,
+    users: usersModule, getAccess: opts.getProjectAccess || function () { return { isMate: isMate, ownerId: projectOwnerId || null, visibility: 'private' }; },
+    actions: _sessions.sessionActions, vendor: _sessions.sessionVendorActions,
+    selectModel: function (session, model, options) { return _models.selectSessionModel(session, model, null, options); },
+  });
+
+
 
   var _models = attachModels({
     cwd: cwd,
@@ -2193,6 +2275,7 @@ function createProjectContext(opts) {
   });
   var _delegatedFollowUp = attachDelegatedFollowUp({
     sm: sm,
+    isPendingQueuePaused: function (session) { return _pendingMessageQueue.isPaused(session); },
     getSdk: function () { return sdk; },
     getLinuxUserForSession: getLinuxUserForSession,
     onProcessingChanged: onProcessingChanged,
@@ -2207,6 +2290,12 @@ function createProjectContext(opts) {
 
   // --- User message handler (delegated to project-user-message.js) ---
   var _userMessage = attachUserMessage({
+    isLifecycleExecutionPaused: function () { return !!(opts.getProjectAccess && opts.getProjectAccess().lifecycleExecutionPaused); },
+    resumeLifecycleProject: function (ws) {
+      if (!opts.getProjectAccess || !opts.getProjectAccess().lifecycleExecutionPaused) return true;
+      if (!clients.has(ws) || !ws._clayUser || !opts.resumeLifecycleProject) throw new Error('The current owner must explicitly resume recovered project execution.');
+      return opts.resumeLifecycleProject(ws._clayUser.id);
+    },
     // Exact live pair state decides whether a session is Driver-operated; the
     // handler never infers the role from the message.
     isDriverOperatedSession: function (session) {
@@ -2329,6 +2418,13 @@ function createProjectContext(opts) {
     FS_MAX_SIZE: FS_VIEWER_MAX_SIZE,
   });
 
+  var _workspaceOperations = require('./project-workspace-operations').attachWorkspaceOperations({
+    cwd: cwd, isMate: isMate, osUsers: osUsers, users: usersModule, tm: tm,
+    getAccess: opts.getProjectAccess || function () { return { ownerId: projectOwnerId || null, visibility: 'private' }; },
+    files: function () { return _filesystem.productOperations; },
+    publishTerminals: function () { send({ type: 'term_list', terminals: tm.list() }); },
+  });
+
   // --- MCP bridge handler for Codex and session-bound Kiro tools ---
   // Provides list_tools and call_tool operations over HTTP for mcp-bridge-server.js.
   // The normal Codex bridge excludes local MCP servers it manages natively;
@@ -2336,6 +2432,8 @@ function createProjectContext(opts) {
   function getMcpBridgeHandler(sessionId, sessionOnly, queryGeneration) {
     var boundSession = Number.isInteger(sessionId) ? sm.sessions.get(sessionId) : null;
     var queryToolBridge = createSessionQueryToolBridge({ session: boundSession, sdk: sdk });
+    var externalQueryBridge = require('./mcp-query-bridge').createQueryBridge({ valid: sessionQueryValid,
+      getServers: function () { return _mcp.getMcpServers(boundSession, sessionQueryValid()); } });
     function sessionQueryValid() {
       return !!boundSession
         && Number.isInteger(queryGeneration)
@@ -2460,7 +2558,7 @@ function createProjectContext(opts) {
           }
         }
 
-        if (sessionOnly) return Promise.resolve(tools);
+        if (sessionOnly) return Promise.resolve(tools.concat(externalQueryBridge.list()));
 
         // In-app MCP servers (debate, browser, email).
         // Use getLocalMcpServers() so clay-browser is hidden unless the
@@ -2480,7 +2578,7 @@ function createProjectContext(opts) {
         }
 
         // Personal computer and remote URL connections.
-        var remoteServers = _mcp.getMcpServers(boundSession);
+        var remoteServers = sessionQueryValid() ? _mcp.getMcpServers(boundSession, sessionQueryValid()) : {};
         if (remoteServers) {
           var remoteNames = Object.keys(remoteServers);
           for (var ri = 0; ri < remoteNames.length; ri++) {
@@ -2578,7 +2676,7 @@ function createProjectContext(opts) {
         if (serverName === "clay-sessions" || serverName === "clay-notes" || serverName === "clay-handoff" || serverName === "clay-documents" || serverName === "clay-shared-browser" || serverName === "clay-debate" || serverName === "clay-mate-creation" || serverName === "clay-workspace" || serverName === "clay-history" || serverName === "clay-github" || serverName === "clay-linear" || serverName === "clay-issues" || serverName === "clay-logs" || serverName === "clay-knowledge" || serverName === "clay-you") {
           return Promise.reject(new Error("Session-bound tool requires a valid Clay session: " + serverName + "/" + toolName));
         }
-        if (sessionOnly) return Promise.reject(new Error("Session tool not found: " + serverName + "/" + toolName));
+        if (sessionOnly) return externalQueryBridge.call(serverName, toolName, args);
         // Try in-app servers first (gated by extension connectivity for clay-browser).
         var localMcp = getLocalMcpServers(boundSession);
         if (localMcp && localMcp[serverName]) {
@@ -2590,17 +2688,7 @@ function createProjectContext(opts) {
             }
           }
         }
-        // Try remote/local proxy servers
-        var remoteServers = _mcp.getMcpServers(boundSession);
-        if (remoteServers && remoteServers[serverName]) {
-          var rServer = remoteServers[serverName];
-          if (rServer.instance && rServer.instance._registeredTools && rServer.instance._registeredTools[toolName]) {
-            var rHandler = rServer.instance._registeredTools[toolName].handler;
-            if (typeof rHandler === "function") {
-              return Promise.resolve(rHandler(args));
-            }
-          }
-        }
+        if (externalQueryBridge.list().some(function (tool) { return tool.server === serverName && tool.name === toolName; })) return externalQueryBridge.call(serverName, toolName, args);
         return Promise.reject(new Error("Tool not found: " + serverName + "/" + toolName));
       },
     };
@@ -2766,6 +2854,7 @@ function createProjectContext(opts) {
             return false;
           }));
         } catch (err) {
+          shutdowns.push(Promise.resolve(false));
           console.error("[project] " + vendor + " shutdown threw for " + slug + ":", err && err.message ? err.message : err);
         }
       });
@@ -2909,15 +2998,32 @@ function createProjectContext(opts) {
     },
     getYouLinuxUser: getLinuxUserForSession,
     getStatus: getStatus,
+    bindMateSchedule: function (session, intent, id) {
+      return _mateLifecycle.create(session, require("./mate-schedule-input").normalize(intent), id);
+    },
+    cancelMateSchedule: function (session, record) { return _mateLifecycle.cancel(session, record); },
     getSessionManager: function () { return sm; },
     createDelegatedSession: _delegatedSession.createDelegatedSession,
+    refreshEnvironmentRuntime: function () { return sdk.refreshEnvironmentRuntime(); },
+    getWorkspaceProductOperations: function () { return isMate ? null : _workspaceOperations; },
+    getMateChatControl: function () { return isMate ? _mateChatControl : null; },
+    getMateScheduleControl: function () { return isMate ? _mateLifecycle : null; },
+    getScheduledTaskControl: function () { return _scheduledTasks.productControl; },
+    notifyIssueUpdate: _issues.notify,
+    notifyLogUpdate: _projectLogs.broadcastUpdate,
+    requestProductControlReview: _productControl.requestProductControlReview,
+    applyProductSessionAction: _productControl.applyProductSessionAction,
+    inspectProductSessionQueue: _productControl.inspectProductSessionQueue,
+    inspectProductSessionRuntime: _sessions.sessionRuntimeActions.inspect,
+    inspectMateLifecycleRuntime: _sessions.sessionRuntimeActions.inspectLifecycle,
     inspectDelegatedFollowUp: _delegatedFollowUp.inspectDelegatedFollowUp,
     dispatchDelegatedFollowUp: _delegatedFollowUp.dispatchDelegatedFollowUp,
     deliverCapsuleTurn: _capsuleTurn.deliverCapsuleTurn,
     unregisterHomeDebateClient: function (ws) { homeDebateClients.delete(ws); },
     handleHomeDebateProposalResponse: function (ws, msg, session) { return _debateProposal.handleHomeMessage(ws, msg, session); },
     handleHomeMateCreationProposalResponse: function (ws, msg, session) { return _mateCreationProposal.handleHomeMessage(ws, msg, session); },
-    handleHomeAskUserResponse: function (msg, session) { return _sessions.respondToAskUser(session, msg); },
+    registerMcpConsentViewer: _mcp.registerConsentViewer,
+    handleHomeAskUserResponse: function (msg, session, ws) { return _sessions.respondToAskUser(session, msg, ws); },
     handleHomePermissionResponse: function (ws, msg, session) { return _sessions.respondToHomePermission(ws, msg, session); },
     stopHomeSession: function (session) { return _sessions.stopHomeSession(session); },
     handleHomeDebateControl: function (ws, msg, session) { return _debate.handleHomeControl(ws, msg, session); },
@@ -2926,6 +3032,7 @@ function createProjectContext(opts) {
     getMemoryState: _memory.readMemoryState,
     listKnowledgeFiles: _knowledge.listKnowledgeFiles,
     getKnowledgeDbService: function () { return _knowledge.databases; },
+    getKnowledgeProductOperations: function () { return _knowledge.productOperations; },
     refreshCapsuleCatalog: _capsuleCatalog.refreshSessions,
     getNotificationsModule: function () { return _notifications; },
     refreshVendorAuth: _vendorLogin.refreshVendorAuth,

package/lib/public/app.js

@@ -285,6 +285,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     mcpConnections: { screen: "list", servers: [], search: "", loaded: false },
     sharedBrowserOpen: false,
     sharedBrowserUi: {},
+    sharedBrowserSettings: {},
+    browserLinksBound: false,
     // session / routing
     basePath: basePath,
     wsPath: wsPath,
@@ -324,9 +326,12 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     githubWorkSessions: [],
     githubWorkProject: null,
     githubWorkRefresh: null,
+    workPrimaryPending: null,
     activeProjectSlug: null,
     activeProjectMateId: null,
     activeProjectMateName: '',
+    clayReturnTarget: null,
+    clayReturnPendingProjectSlug: null,
     activeSessionMateId: null,
     activeSessionMateName: '',
     sessionActivatedProjectSlug: null,

package/lib/public/appearance-bootstrap.js

@@ -0,0 +1,14 @@
+(function () {
+  var root = document.documentElement;
+  var light = window.matchMedia && window.matchMedia("(prefers-color-scheme: light)").matches;
+  var seed = window.__clayAppearanceSeed;
+
+  function applyMode(mode) {
+    if (mode !== "light" && mode !== "dark") return;
+    root.classList.toggle("light-theme", mode === "light");
+    root.classList.toggle("dark-theme", mode !== "light");
+  }
+
+  var savedMode = seed && seed.configured && (seed.mode === "light" || seed.mode === "dark") ? seed.mode : null;
+  applyMode(savedMode || (light ? "light" : "dark"));
+}());

package/lib/public/css/clay-tool-activity.css

@@ -0,0 +1,51 @@
+/* Keep internal activity in the established compact tool disclosure rows. */
+.clay-tool-activity .tool-name {
+  flex-shrink: 1;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.clay-tool-activity .tool-desc {
+  font-family: var(--font-ui);
+  flex: 0 1 auto;
+}
+.clay-tool-activity .tool-status-icon { margin-left: auto; }
+.clay-tool-activity .tool-subtitle { display: none; }
+.tool-header[role="button"]:focus-visible,
+.tool-group-header[role="button"]:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: 2px;
+}
+.clay-tool-activity[data-activity-phase="running"] .tool-bullet {
+  animation: pulse 1.5s ease-in-out infinite;
+}
+.clay-tool-activity[data-activity-phase="pending"] .tool-bullet,
+.tool-group[data-activity-phase="pending"] .tool-group-bullet {
+  background: var(--text-muted);
+  animation: none;
+}
+.clay-tool-activity[data-activity-phase="error"] .tool-name,
+.clay-tool-activity[data-activity-phase="cancelled"] .tool-name,
+.tool-group[data-activity-phase="error"] .tool-group-label { color: var(--error); }
+.clay-tool-technical-name,
+.clay-tool-evidence-label {
+  padding: 8px 14px 0;
+  color: var(--text-muted);
+  font-size: 12px;
+  overflow-wrap: anywhere;
+}
+.clay-tool-technical-name { font-family: "Roboto Mono", monospace; }
+.clay-tool-evidence-label { font-weight: 600; }
+@media (prefers-reduced-motion: reduce) {
+  .clay-tool-activity .tool-bullet { animation: none; }
+}
+
+@media (max-width: 600px) {
+  .clay-tool-activity .tool-name {
+    white-space: normal;
+    overflow-wrap: anywhere;
+    line-height: 1.4;
+  }
+  .clay-tool-activity .tool-desc { max-width: 35%; }
+}

package/lib/public/css/clay-workspace.css

@@ -4,6 +4,35 @@
   padding: 0;
   cursor: pointer;
 }
+.clay-brand-flip {
+  position: relative;
+  display: block;
+  width: 38px;
+  height: 38px;
+  transform-style: preserve-3d;
+  transition: transform 220ms cubic-bezier(.2,.75,.25,1);
+}
+.clay-brand-face {
+  position: absolute;
+  inset: 0;
+  width: 38px;
+  height: 38px;
+  object-fit: contain;
+  backface-visibility: hidden;
+  transition: opacity 120ms ease;
+}
+.clay-brand-avatar { transform: rotateY(180deg); border-radius: 11px; }
+.icon-strip-brand[data-clay-mode="mate"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand:hover .clay-brand-flip,
+.icon-strip-brand:focus-visible .clay-brand-flip,
+.icon-strip-brand.clay-speaking[data-clay-mode="project"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand[data-clay-mode="mate"]:hover .clay-brand-flip,
+.icon-strip-brand[data-clay-mode="mate"]:focus-visible .clay-brand-flip { transform: rotateY(0deg); }
+.icon-strip-brand.clay-speaking[data-clay-mode="mate"] .clay-brand-flip { transform: rotateY(180deg); }
+.icon-strip-brand.clay-speaking .clay-brand-face { transition-duration: 80ms; }
+@media (prefers-reduced-motion: reduce) {
+  .clay-brand-flip, .clay-brand-face { transition: none; }
+}
 .icon-strip-brand:hover::before {
   background: var(--bg-alt);
   box-shadow: 0 1px 2px rgba(var(--shadow-rgb), 0.08);

package/lib/public/css/home-debate-planning.css

@@ -87,6 +87,8 @@
 }
 
 .home-debate-question-text { margin: 0 0 14px; font-size: 15px; }
+.mcp-import-consent .home-debate-question-text,
+.mcp-import-consent .ask-user-question-text { white-space: pre-line; font-size: 13px; line-height: 1.6; }
 .home-debate-question-form { display: grid; gap: 8px; }
 .home-debate-question-option {
   display: grid;

package/lib/public/css/home-mate-creation.css

@@ -32,3 +32,8 @@
   .home-mate-proposal-facts dd + dt { margin-top: 7px; }
   .home-mate-proposal-actions button { flex: 1; }
 }
+
+.home-mate-proposal-schedule-details { margin-top: 2px; color: var(--text-dimmer); }
+.home-mate-proposal-schedule-details summary { width: fit-content; padding-block: 3px; cursor: pointer; font-weight: 400; }
+.home-mate-proposal-schedule-details summary:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.home-mate-proposal-schedule-details[open] > div { padding-top: 3px; color: var(--text-muted); }

package/lib/public/css/mate-avatar-gallery.css

@@ -0,0 +1,12 @@
+/* Coin-size portraits in an explicit, compact visual catalog. */
+.home-mate-avatar-selection { display: flex; align-items: center; gap: 10px; margin-bottom: 14px; }
+.home-mate-avatar-selection p { color: var(--text-secondary); font-size: 12px; }
+.home-mate-avatar-editor h4 { margin: 16px 0 8px; font-size: 13px; color: var(--text); }
+.home-mate-avatar-choices { grid-template-columns: repeat(auto-fill, minmax(54px, 1fr)); gap: 5px; }
+.home-mate-avatar-choice img { width: 42px; height: 42px; }
+.home-mate-avatar-choice[aria-pressed="true"] { border: 2px solid var(--brand-indigo); padding: 4px 2px 5px; }
+.home-mate-avatar-choice:disabled { cursor: default; opacity: .65; }
+.home-mate-avatar-actions { position: sticky; bottom: 0; padding: 10px 0; background: var(--bg); z-index: 1; }
+.home-mate-avatar-actions button.primary { background: var(--brand-indigo); color: white; border-color: var(--brand-indigo); }
+@media (pointer: coarse) { .home-mate-avatar-choice { min-height: 62px; } }
+.home-mate-avatar-actions .home-mate-avatar-status { flex: 0 0 100%; margin: 0; padding-top: 0; }

package/lib/public/css/mate-conversation.css

@@ -1,11 +1,16 @@
 /* Restore the Home conversation's reading measure inside Mate projects.
    The existing project renderer, queue and composer still own behavior. */
-body.mate-workspace-active { --content-width: 720px; }
-body.mate-workspace-active #messages { padding-inline: max(0px, calc((100% - 720px) / 2)); }
+body.mate-workspace-active {
+  --mate-content-width: 860px;
+  --content-width: var(--mate-content-width);
+}
+body.mate-workspace-active #messages {
+  padding-inline: max(12px, calc((100% - var(--mate-content-width)) / 2));
+}
 body.mate-workspace-active #messages > .msg-assistant,
 body.mate-workspace-active #messages > .msg-user {
   width: 100%;
-  max-width: 720px;
+  max-width: var(--mate-content-width);
   box-sizing: border-box;
   margin: 0 auto 12px;
   padding: 4px 20px;
@@ -66,7 +71,7 @@ body.mate-workspace-active .msg-user:not(.msg-user-other):not(.msg-user-delegate
 
 /* One writing row, with secondary tools and model selection underneath.
    Display contents preserves the live controls and their event handlers. */
-body.mate-workspace-active #input-wrapper { max-width: 720px; }
+body.mate-workspace-active #input-wrapper { max-width: var(--mate-content-width); }
 body.mate-workspace-active #input-row,
 body.mate-workspace-active #input-row:focus-within {
   display: grid;
@@ -144,7 +149,7 @@ body.mate-workspace-active #messages > .mate-thinking,
 body.mate-workspace-active #messages > .mate-permission,
 body.mate-workspace-active #messages > .mate-ask-user {
   box-sizing: border-box;
-  max-width: 720px;
+  max-width: var(--mate-content-width);
   margin: 0 auto 12px;
   padding: 4px 20px;
   gap: 9px;

package/lib/public/css/overlays.css

@@ -1360,8 +1360,10 @@ button.top-bar-pill.pill-accent:hover { background: color-mix(in srgb, var(--acc
 .connect-wordmark {
   display: block;
   width: clamp(142px, 15vw, 184px);
-  height: auto;
-  filter: brightness(0);
+  aspect-ratio: 4742 / 1156;
+  background: var(--text-muted);
+  -webkit-mask: url("../clay-studio-wordmark-bold.svg") center / contain no-repeat;
+  mask: url("../clay-studio-wordmark-bold.svg") center / contain no-repeat;
 }
 
 #connect-overlay-msg {

package/lib/public/css/project-admin-overview.css

@@ -0,0 +1,13 @@
+.project-admin-overview { overflow: auto; padding: 8px; }
+.project-admin-canvas { width: 100%; min-height: 100%; padding: 24px; border: 1px solid var(--border); border-radius: 8px; background: var(--bg); }
+.project-admin-canvas h1 { font-size: 20px; margin: 0 0 16px; }
+.project-admin-canvas h2 { font-size: 16px; }
+.project-admin-canvas [role="tablist"] { display: flex; gap: 4px; border-bottom: 1px solid var(--border); padding-bottom: 8px; }
+.project-admin-canvas [role="tab"] { height: 32px; padding: 0 12px; border: 1px solid var(--border); border-radius: 8px; color: inherit; background: transparent; cursor: pointer; }
+.project-admin-canvas [aria-selected="true"] { background: #5857fc; color: white; }
+.project-admin-canvas :focus-visible { outline: 2px solid #5857fc; outline-offset: 2px; }
+.project-admin-canvas dl { display: grid; grid-template-columns: 110px 1fr; gap: 12px; margin: 24px 0; font-size: 13px; }
+.project-admin-canvas dd { margin: 0; }
+.project-admin-canvas p { max-width: 640px; line-height: 1.6; font-size: 14px; }
+.project-admin-secondary { opacity: .65; }
+@media (max-width: 600px) { .project-admin-canvas { padding: 16px; } }