clay-server 5.2.0-beta.3 → 5.2.0-beta.5

package/lib/server-mates.js

@@ -74,12 +74,26 @@ function attachMates(ctx) {
     var mateSlug = "mate-" + mate.id;
     var mateName = (mate.profile && mate.profile.displayName) || mate.name || "Mate";
     var registered = false;
+    var boundScheduleJob = null;
     var favorites;
     try {
       registered = addProject(mateDir, mateSlug, mateName, null, mate.createdBy || effectiveUserId, null, { isMate: true, mateDisplayName: mateName }) !== false;
       if (!registered) throw new Error("The Mate project could not be registered.");
+      var intent = mate.seedData && mate.seedData.scheduleIntent;
+      if (intent && intent.message && intent.scheduleRule) {
+        var targetProject = projects.get(mateSlug);
+        var targetManager = targetProject && targetProject.getSessionManager();
+        if (!targetProject || !targetManager || typeof targetProject.bindMateSchedule !== "function") throw new Error("The Mate schedule could not be bound to the new Mate.");
+        var targetSession = targetManager.createSessionRaw({ ownerId: users.isMultiUser() ? effectiveUserId : null, vendor: mate.vendor, model: mate.model });
+        boundScheduleJob = targetProject.bindMateSchedule(targetSession, intent, "creation-" + mate.id);
+        if (!boundScheduleJob) throw new Error("The Mate schedule could not be persisted.");
+        mates.updateMate(mateCtx, mate.id, { seedData: Object.assign({}, mate.seedData, { scheduleIntent: null }) });
+      }
       favorites = users.addDmFavorite(effectiveUserId, mate.id);
     } catch (error) {
+      if (targetSession && targetSession.mateSchedules && targetProject && typeof targetProject.cancelMateSchedule === "function") {
+        try { targetSession.mateSchedules.forEach(function (record) { targetProject.cancelMateSchedule(targetSession, record); }); } catch (cancelError) {}
+      }
       if (registered) try { removeProject(mateSlug); } catch (removeError) {}
       try { mates.deleteMate(mateCtx, mate.id); } catch (deleteError) {}
       throw error;
@@ -97,6 +111,10 @@ function attachMates(ctx) {
     return mate;
   }
 
+  var lifecycle = require("./mate-lifecycle-service").attachMateLifecycleService({
+    users: users, mates: mates, projects: projects, removeProject: removeProject, refresh: refreshTeamSections,
+  });
+
   // --- Mate message handlers ---
 
   function handleMessage(ws, msg) {
@@ -168,7 +186,7 @@ function attachMates(ctx) {
       for (var mi = 0; mi < mateList.length; mi++) {
         var m = mateList[mi];
         var mSlug = "mate-" + m.id;
-        if (!projects.has(mSlug)) {
+        if (!m.lifecycleDeletion && !projects.has(mSlug)) {
           var mDir = mates.getMateDir(mateCtx5, m.id);
           fs.mkdirSync(mDir, { recursive: true });
           var mName = (m.profile && m.profile.displayName) || m.name || "New Mate";
@@ -200,45 +218,9 @@ function attachMates(ctx) {
 
     if (msg.type === "mate_delete") {
       if (!msg.mateId) return true;
-      var mateCtx6 = mates.buildMateCtx(userId);
-      // Track deleted built-in mate key so it doesn't auto-recreate
-      var mateToDelete = mates.getMate(mateCtx6, msg.mateId);
-      if (mateToDelete && mateToDelete.builtinKey) {
-        users.addDeletedBuiltinKey(userId, mateToDelete.builtinKey);
-      }
-      var result = mates.deleteMate(mateCtx6, msg.mateId);
-      if (result.error) {
-        ws.send(JSON.stringify({ type: "mate_error", error: result.error }));
-      } else {
-        removeProject("mate-" + msg.mateId);
-        // Build updated available builtins list
-        var builtinDefs3 = require("./builtin-mates");
-        var missingKeys3 = mates.getMissingBuiltinKeys(mateCtx6);
-        var availableBuiltins3 = [];
-        for (var abk3 = 0; abk3 < missingKeys3.length; abk3++) {
-          var bDef3 = builtinDefs3.getBuiltinByKey(missingKeys3[abk3]);
-          if (bDef3) {
-            availableBuiltins3.push({
-              key: bDef3.key,
-              displayName: bDef3.displayName,
-              bio: bDef3.bio,
-              avatarCustom: bDef3.avatarCustom || "",
-              avatarStyle: bDef3.avatarStyle || "imprint",
-              avatarColor: bDef3.avatarColor || "",
-            });
-          }
-        }
-        ws.send(JSON.stringify({ type: "mate_deleted", mateId: msg.mateId, availableBuiltins: availableBuiltins3 }));
-        // Broadcast to all clients so strips update
-        projects.forEach(function (pCtx) {
-          pCtx.forEachClient(function (otherWs) {
-            if (otherWs === ws) return;
-            if (users.isMultiUser() && (!otherWs._clayUser || otherWs._clayUser.id !== userId)) return;
-            if (otherWs.readyState !== 1) return;
-            otherWs.send(JSON.stringify({ type: "mate_deleted", mateId: msg.mateId, availableBuiltins: availableBuiltins3 }));
-          });
-        });
-      }
+      lifecycle.remove(userId, msg.mateId, null, ws).then(function () {}, function (error) {
+        ws.send(JSON.stringify({ type: "mate_error", mateId: msg.mateId, error: error.message }));
+      });
       return true;
     }
 
@@ -303,28 +285,8 @@ function attachMates(ctx) {
         ws.send(JSON.stringify({ type: "mate_error", mateId: msg.mateId, error: "Use the Mate model selector to change this setting." }));
         return true;
       }
-      var mateCtx7 = mates.buildMateCtx(userId);
-      var updated = mates.updateMate(mateCtx7, msg.mateId, msg.updates);
-      if (updated && updated.error) {
-        ws.send(JSON.stringify({ type: "mate_error", mateId: msg.mateId, requestId: msg.requestId, error: updated.error }));
-        return true;
-      }
-      if (updated) {
-        ws.send(JSON.stringify({ type: "mate_updated", mate: updated, requestId: msg.requestId }));
-        // Broadcast update
-        projects.forEach(function (pCtx) {
-          pCtx.forEachClient(function (otherWs) {
-            if (otherWs === ws) return;
-            if (users.isMultiUser() && (!otherWs._clayUser || otherWs._clayUser.id !== userId)) return;
-            if (otherWs.readyState !== 1) return;
-            otherWs.send(JSON.stringify({ type: "mate_updated", mate: updated }));
-          });
-        });
-        // Re-enforce team sections across all mate projects so roster stays current
-        refreshTeamSections(mateCtx7);
-      } else {
-        ws.send(JSON.stringify({ type: "mate_error", mateId: msg.mateId, requestId: msg.requestId, error: "Mate not found" }));
-      }
+      try { lifecycle.update(userId, msg.mateId, msg.updates, ws, msg.requestId); }
+      catch (error) { ws.send(JSON.stringify({ type: "mate_error", mateId: msg.mateId, requestId: msg.requestId, error: error.message })); }
       return true;
     }
 
@@ -333,6 +295,7 @@ function attachMates(ctx) {
 
   return {
     handleMessage: handleMessage,
+    lifecycle: lifecycle,
     scheduleRegistryRefresh: scheduleRegistryRefresh,
     createReadyMateFromInterview: createReadyMateFromInterview,
   };

package/lib/server-owner-ui.js

@@ -0,0 +1,77 @@
+var crypto = require('crypto');
+// Only authenticated application sockets enumerated by the server are targets.
+function attachOwnerUi(ctx) {
+  var identities = new WeakMap(), capabilities = new WeakMap(), deliveries = new Map();
+  function alive(ws, owner) {
+    return ws && ws.readyState === 1 && (!ws._clayAuthCheck || ws._clayAuthCheck()) &&
+      (ctx.isMultiUser() ? !!owner && ws._clayUser && ws._clayUser.id === owner && !!ctx.findUser(owner) : !ws._clayUser);
+  }
+  function sockets(owner) {
+    var all = new Map();
+    ctx.forEachClient(function (ws, slug) {
+      if (!alive(ws, owner) || all.has(ws)) return;
+      if (!identities.has(ws)) identities.set(ws, 'viewer:' + crypto.randomUUID());
+      all.set(ws, { ws: ws, ref: identities.get(ws), slug: slug || null, sessionId: ws._clayActiveSession || null,
+        supported: capabilities.get(ws) === 1 && !ws._clayPane });
+    });
+    return Array.from(all.values());
+  }
+  function get(owner, ref) { return sockets(owner).find(function (item) { return item.ref === ref; }); }
+  function inspect(owner, ref) {
+    var viewer = get(owner, ref);
+    if (!viewer) throw new Error('The exact owner UI connection is absent or revoked.');
+    return viewer;
+  }
+  function check(owner, original) {
+    var live = inspect(owner, original.ref);
+    if (live.ws !== original.ws || live.slug !== original.slug || live.sessionId !== original.sessionId || live.supported !== original.supported) throw new Error('The selected viewer context changed. Inspect again.');
+    return live;
+  }
+  function deliver(owner, original, target, revalidate) {
+    revalidate(); var viewer = check(owner, original);
+    if (!viewer.supported) return { status: 'unsupported', delivered: false, acknowledged: false, visible: 'unknown' };
+    if (deliveries.size >= 100) {
+      deliveries.forEach(function (item, key) { if (Date.now() - item.created > 300000) deliveries.delete(key); });
+      if (deliveries.size >= 100) throw new Error('UI delivery capacity is full; wait for earlier attempts to expire.');
+    }
+    var id = 'navigation:' + crypto.randomUUID();
+    var record = { owner: owner, viewer: viewer, target: target, revalidate: revalidate, created: Date.now(), claimed: false,
+      result: { status: 'delivered', deliveryId: id, delivered: false, acknowledged: false, visible: 'unknown' } };
+    deliveries.set(id, record);
+    try {
+      viewer.ws.send(JSON.stringify({ type: 'clay_navigation_offer', deliveryId: id }));
+      if (!alive(viewer.ws, owner)) throw new Error('Viewer authorization or connection ended during delivery.');
+      record.result.delivered = true;
+    } catch (error) { record.result.status = 'failed'; record.result.error = error.message; record.result.retrySafe = false; }
+    return Object.assign({}, record.result);
+  }
+  function read(owner, id) {
+    var record = deliveries.get(id);
+    if (!record || record.owner !== owner) throw new Error('No delivery exists for this owner.');
+    record.revalidate();
+    return Object.assign({}, record.result);
+  }
+  function handleMessage(ws, msg) {
+    if (['clay_ui_ready', 'clay_navigation_claim', 'clay_navigation_ack'].indexOf(msg.type) < 0) return false;
+    var owner = ctx.isMultiUser() ? ws._clayUser && ws._clayUser.id : null;
+    if (!sockets(owner).some(function (item) { return item.ws === ws; })) return true;
+    if (msg.type === 'clay_ui_ready') { if (msg.version === 1) capabilities.set(ws, 1); return true; }
+    var record = deliveries.get(msg.deliveryId);
+    if (!record || record.viewer.ws !== ws || record.owner !== owner || Date.now() - record.created > 30000) return true;
+    try {
+      record.revalidate();
+      if (msg.type === 'clay_navigation_claim') {
+        if (record.claimed) return true;
+        check(owner, record.viewer); record.claimed = true;
+        ws.send(JSON.stringify({ type: 'clay_navigation_apply', deliveryId: msg.deliveryId, target: record.target }));
+      } else if (record.claimed && !record.result.acknowledged && ['accepted', 'refused', 'failed'].indexOf(msg.status) >= 0) {
+        record.result.acknowledged = true;
+        // Accepted only confirms invocation of the existing navigator, never rendering.
+        record.result.clientStatus = msg.status;
+      }
+    } catch (error) { record.result.status = 'failed'; record.result.error = error.message; record.result.retrySafe = false; }
+    return true;
+  }
+  return { list: sockets, inspect: inspect, check: check, deliver: deliver, read: read, handleMessage: handleMessage };
+}
+module.exports = { attachOwnerUi: attachOwnerUi };

package/lib/server-path-access.js

@@ -0,0 +1,38 @@
+// Directory pickers and project registration must not become content-access
+// bypasses through another spelling, symlink or nested directory.
+var fs = require("fs");
+var path = require("path");
+function inside(root, target) {
+  var relative = path.relative(root, target);
+  return relative !== ".." && relative.indexOf(".." + path.sep) !== 0 && !path.isAbsolute(relative);
+}
+function attachPathAccess(ctx) {
+  return function (userId, requested) {
+    if (!ctx.users.isMultiUser()) return true;
+    var user = userId && ctx.users.findUserById(userId);
+    if (!user) return false;
+    var target;
+    try { target = fs.realpathSync(requested); } catch (error) { return false; }
+    var allowed = false;
+    var denied = false;
+    ctx.projects.forEach(function (project, slug) {
+      var status = project.getStatus();
+      var root;
+      try { root = fs.realpathSync(status.path); } catch (error) { return; }
+      if (inside(root, target) || inside(target, root)) {
+        if (!ctx.canAccess(userId, slug)) denied = true;
+        else if (inside(root, target)) allowed = true;
+      }
+    });
+    if (denied) return false;
+    if (ctx.osUsers) {
+      if (!user.linuxUser) return false;
+      try {
+        var identity = ctx.resolveIdentity(user.linuxUser);
+        return inside(fs.realpathSync(identity.home), target);
+      } catch (error) { return false; }
+    }
+    return allowed || ctx.users.getAllUsers().length === 1;
+  };
+}
+module.exports = { attachPathAccess: attachPathAccess };

package/lib/server-project-removal.js

@@ -0,0 +1,22 @@
+// Shared runtime removal used by the server callback and lifecycle controls.
+function removeProjectRuntime(projects, slug, awaitCompletion, registryRefresh) {
+  var project = projects.get(slug);
+  if (!project) return false;
+  var wasMate = project.getStatus().isMate;
+  var shutdownResult = project.destroy();
+  if (!awaitCompletion) projects.delete(slug);
+  if (shutdownResult && typeof shutdownResult.catch === 'function') {
+    shutdownResult.catch(function (error) {
+      console.error('[server] Project destroy failed for ' + slug + ':', error && error.message ? error.message : error);
+    });
+  }
+  if (!wasMate && registryRefresh) registryRefresh();
+  if (awaitCompletion) return Promise.resolve(shutdownResult).then(function (result) {
+    if (result !== true) throw new Error('Project runtime shutdown did not complete successfully: ' + slug);
+    if (projects.get(slug) !== project) throw new Error('Project runtime was replaced during shutdown: ' + slug);
+    projects.delete(slug);
+    return true;
+  });
+  return true;
+}
+module.exports = { removeProjectRuntime: removeProjectRuntime };

package/lib/server-settings.js

@@ -755,7 +755,10 @@ function attachSettings(ctx) {
     return false;
   }
 
-  return { handleRequest: handleRequest };
+  return {
+    handleRequest: handleRequest,
+    getInitialAppearance: appearanceSettings.getInitialAppearance
+  };
 }
 
 module.exports = { attachSettings: attachSettings };

package/lib/server.js

@@ -219,6 +219,14 @@ function createServer(opts) {
   var isRequestAuthed = auth.isRequestAuthed;
   var parseCookies = auth.parseCookies;
 
+  var projectAdminOverview = require("./project-admin-overview");
+
+  function administrativeMetadata(userId, slug) {
+    var user = userId && users.findUserById(userId);
+    var context = projects.get(slug);
+    return projectAdminOverview.metadataFor(user, context && context.getStatus(), onGetProjectAccess && onGetProjectAccess(slug), users);
+  }
+
   function canUserAccessSlug(userId, slug) {
     if (!userId || !slug) return false;
     var project = projects && projects.get(slug);
@@ -237,6 +245,13 @@ function createServer(opts) {
     return users.canAccessProject(userId, access) === true;
   }
 
+  var projects = new Map(); // slug → projectContext
+  var lifecycleRuntime = require("./project-lifecycle-runtime").attachLifecycleRuntime({ projects: projects });
+  var canUsePath = require("./server-path-access").attachPathAccess({
+    users: users, projects: projects, canAccess: canUserAccessSlug, osUsers: osUsers,
+    resolveIdentity: require("./os-users").resolveOsUserInfo,
+  });
+
   var realVersion = require("../package.json").version;
   var currentVersion = debug ? "0.0.9" : realVersion;
 
@@ -341,7 +356,6 @@ function createServer(opts) {
   var caContent = caPath ? (function () { try { return fs.readFileSync(caPath); } catch (e) { return null; } })() : null;
 
   // --- Project registry ---
-  var projects = new Map(); // slug → projectContext
   var assignmentService = attachWorkspaceAssignmentService({
     storageDir: path.join(CONFIG_DIR, "workspace-assignments"),
     getProjects: function () { return projects; },
@@ -363,6 +377,29 @@ function createServer(opts) {
     },
     assignmentService: assignmentService,
   });
+  var ownerUiService = require('./server-owner-ui').attachOwnerUi({
+    isMultiUser: users.isMultiUser, findUser: users.findUserById,
+    forEachClient: function (visit) {
+      if (globalWs) globalWs.forEachClient(function (ws) { visit(ws, null); });
+      projects.forEach(function (project, slug) { project.forEachClient(function (ws) { visit(ws, slug); }); });
+    }
+  });
+  var clayProductControl = require("./clay-product-control").attachClayProductControl({
+    getOwnerUi: function () { return ownerUiService; },
+    getNotifications: function () { return _globalNotifications; },
+    getRecordServices: function () { return { issues: issuesService, logs: projectLogsService }; },
+    projectLifecycle: opts.projectLifecycle || null,
+    getMateLifecycle: function () { return mateHandler && mateHandler.lifecycle; },
+    getMateDir: function (ownerId, mateId) { return mates.getMateDir(mates.buildMateCtx(users.isMultiUser() ? ownerId : null), mateId); },
+    lifecyclePermissions: function (user) { return users.getEffectivePermissions(user, osUsers); },
+    canUsePath: canUsePath,
+    getProjects: function () { return projects; },
+    isMultiUser: function () { return users.isMultiUser(); },
+    onGetProjectAccess: onGetProjectAccess,
+    canAccessProject: function (userId, access) { return users.canAccessProject(userId, access) === true; },
+    findUser: function (userId) { return users.findUserById(userId); },
+    resolveMate: function (userId, mateId) { return mates.getMate(mates.buildMateCtx(users.isMultiUser() ? userId : null), mateId); },
+  });
   // Project access is resolved from the authoritative project record, not from
   // getStatus(), which carries no visibility or allowedUsers fields.
   var projectLogsService = attachProjectLogsService({
@@ -409,6 +446,7 @@ function createServer(opts) {
   // Mate Knowledge reads the synchronized Knowledge records. The Mate list is
   // derived from the owning user alone, so a binding can never span users.
   var mateKnowledgeService = attachMateKnowledgeService({
+    findUser: function (userId) { return users.findUserById(userId); },
     getProjects: function () { return projects; },
     isMultiUser: function () { return users.isMultiUser(); },
     resolveMate: function (userId, mateId) {
@@ -491,6 +529,41 @@ function createServer(opts) {
     },
   });
 
+  function injectAppearanceSeed(html, appearance) {
+    var validId = function (value) {
+      return typeof value === "string" && /^[a-zA-Z0-9_-]{1,120}$/.test(value) ? value : null;
+    };
+    var mode = appearance && ["light", "dark"].indexOf(appearance.mode) >= 0 ? appearance.mode : null;
+    var seed = appearance && appearance.configured === true ? {
+      configured: true,
+      theme: validId(appearance.theme),
+      mode: mode,
+      lightTheme: validId(appearance.lightTheme),
+      darkTheme: validId(appearance.darkTheme),
+    } : null;
+    var payload = JSON.stringify(seed).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+    var script = '<script>window.__clayAppearanceSeed=' + payload + ';</script>';
+    return html.replace('<script src="appearance-bootstrap.js"></script>', script + '<script src="appearance-bootstrap.js"></script>');
+  }
+
+  function sendAppShell(req, res, slug) {
+    try {
+      var shell = fs.readFileSync(path.join(publicDir, "index.html"), "utf8");
+      if (slug) shell = injectRootProjectSlug(shell, slug);
+      var appearance = null;
+      try { appearance = settings.getInitialAppearance(req); } catch (e) {}
+      shell = injectAppearanceSeed(shell, appearance);
+      res.writeHead(200, {
+        "Content-Type": "text/html; charset=utf-8",
+        "Cache-Control": "private, no-store",
+      });
+      res.end(shell);
+    } catch (e) {
+      res.writeHead(500, { "Content-Type": "text/plain" });
+      res.end("App shell missing.");
+    }
+  }
+
   var palette = serverPalette.attachPalette({
     users: users,
     projects: projects,
@@ -512,7 +585,28 @@ function createServer(opts) {
     broadcastAll: function (msg) { broadcastAll(msg); },
     sendToUser: function (userId, msg) { sendToUser(userId, msg); },
     pushModule: pushModule,
+    forEachClient: forEachAppClient,
+    getUsers: function () { return users.getAllUsers(); },
+    canView: function (ws, notification) { return canViewNotification(ws && ws._clayUser && ws._clayUser.id, notification); },
+    canViewPrincipal: function (principal, notification) { return canViewNotification(principal.userId, notification); },
   });
+  function canViewNotification(userId, notification) {
+      if (!users.isMultiUser()) return true;
+      if (!userId || !users.findUserById(userId)) return false;
+      if (notification.targetUserId && notification.targetUserId !== userId) return false;
+      if (notification.slug) {
+        if (!canUserAccessSlug(userId, notification.slug)) return false;
+        if (notification.sessionId) {
+          var project = projects.get(notification.slug);
+          var session = project && project.getSessionManager().sessions.get(notification.sessionId);
+          var status = project && project.getStatus();
+          var access = status && status.isMate ? { isMate: true, visibility: "private", ownerId: status.projectOwnerId } : onGetProjectAccess(notification.slug);
+          if (!session || !users.canAccessSession(userId, session, access)) return false;
+        }
+        return !notification.ownerId || notification.ownerId === userId || !!notification.sessionId;
+      }
+      return notification.targetUserId === userId || notification.ownerId === userId;
+  }
 
   // --- Security headers ---
   var securityHeaders = {
@@ -910,15 +1004,7 @@ function createServer(opts) {
           });
         }
         if (targetSlug) {
-          try {
-            var homeHtml = fs.readFileSync(path.join(publicDir, "index.html"), "utf8");
-            homeHtml = injectRootProjectSlug(homeHtml, targetSlug);
-            res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-cache" });
-            res.end(homeHtml);
-          } catch (e) {
-            res.writeHead(500, { "Content-Type": "text/plain" });
-            res.end("App shell missing.");
-          }
+          sendAppShell(req, res, targetSlug);
           return;
         }
       }
@@ -936,9 +1022,7 @@ function createServer(opts) {
           return;
         }
       }
-      if (serveStatic("/index.html", res)) return;
-      res.writeHead(500, { "Content-Type": "text/plain" });
-      res.end("App shell missing.");
+      sendAppShell(req, res, null);
       return;
     }
 
@@ -955,8 +1039,8 @@ function createServer(opts) {
       var projectList = [];
       var infoUser = users.isMultiUser() ? getMultiUserFromReq(req) : null;
       projects.forEach(function (ctx, slug) {
-        if (users.isMultiUser() && (!infoUser || !canUserAccessSlug(infoUser.id, slug))) return;
-        projectList.push({ slug: slug, project: ctx.project });
+        if (users.isMultiUser() && (!infoUser || (!canUserAccessSlug(infoUser.id, slug) && !administrativeMetadata(infoUser.id, slug)))) return;
+        projectList.push({ slug: slug, project: ctx.project, contentAccess: !users.isMultiUser() || canUserAccessSlug(infoUser.id, slug) });
       });
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify({ projects: projectList, version: currentVersion, authenticated: true }));
@@ -965,6 +1049,10 @@ function createServer(opts) {
 
     // Static files (favicon, manifest, icons, sw.js, mate avatars, etc.)
     if (!fullUrl.includes("..") && !fullUrl.startsWith("/p/") && !fullUrl.startsWith("/api/")) {
+      if (fullUrl === "/index.html") {
+        sendAppShell(req, res, null);
+        return;
+      }
       if (serveStatic(fullUrl, res)) return;
     }
 
@@ -1028,8 +1116,14 @@ function createServer(opts) {
     if (users.isMultiUser() && !isMcpBridgeAuthenticated) {
       var httpUser = getMultiUserFromReq(req);
       if (!httpUser || !canUserAccessSlug(httpUser.id, slug)) {
-        res.writeHead(302, { "Location": "/" });
-        res.end();
+        var overview = httpUser && administrativeMetadata(httpUser.id, slug);
+        if (overview && req.method === "GET" && (projectUrlForAuth === "/" || projectUrlForAuth === "/index.html")) {
+          res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+          res.end(projectAdminOverview.page(overview, getVisibleProjects(httpUser.id)));
+          return;
+        }
+        res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+        res.end(JSON.stringify({ error: "Project content access is not permitted" }));
         return;
       }
     }
@@ -1054,6 +1148,10 @@ function createServer(opts) {
 
     // Static files (same assets for all projects)
     if (req.method === "GET") {
+      if (projectUrl === "/" || projectUrl === "/index.html") {
+        sendAppShell(req, res, slug);
+        return;
+      }
       if (serveStatic(projectUrl, res)) return;
     }
 
@@ -1134,6 +1232,7 @@ function createServer(opts) {
   var globalWs = serverGlobalWs.attachGlobalWs({
     osUsers: osUsers,
     usersModule: users,
+    canUsePath: canUsePath,
     onAddProject: onAddProject,
     onCreateProject: onCreateProject,
     onCloneProject: onCloneProject,
@@ -1274,17 +1373,10 @@ function createServer(opts) {
     if (processingUpdateTimer) clearTimeout(processingUpdateTimer);
     processingUpdateTimer = setTimeout(function () {
       processingUpdateTimer = null;
-      var allProjectsList = getProjects();
       // Always send per-client to include cross-project unread counts
       projects.forEach(function (ctx, projSlug) {
         ctx.forEachClient(function (ws) {
-          var filtered = allProjectsList;
-          if (users.isMultiUser() && onGetProjectAccess) {
-            var wsUser = ws._clayUser;
-            filtered = wsUser ? allProjectsList.filter(function (p) {
-              return canUserAccessSlug(wsUser.id, p.slug);
-            }) : [];
-          }
+          var filtered = getVisibleProjects(ws._clayUser ? ws._clayUser.id : null);
           // Attach per-project unread counts for this client
           var unreadMap = getCrossProjectUnread(ws);
           var projectsWithUnread = filtered.map(function (p) {
@@ -1334,6 +1426,10 @@ function createServer(opts) {
   function addProject(cwd, slug, title, icon, projectOwnerId, worktreeMeta, extraOpts) {
     if (projects.has(slug)) return false;
     var extra = extraOpts || {};
+    if (extra.isMate) {
+      var registeredMate = mates.getMate(mates.buildMateCtx(users.isMultiUser() ? projectOwnerId : null), extra.mateId || path.basename(cwd));
+      if (registeredMate && registeredMate.lifecycleDeletion) return false;
+    }
     var ctx = createProjectContext({
       cwd: cwd,
       slug: slug,
@@ -1353,6 +1449,8 @@ function createServer(opts) {
         return mateHandler.createReadyMateFromInterview(ws, userId, definition);
       },
       workspaceQueryService: workspaceQueryService,
+      clayProductControl: clayProductControl,
+      resumeLifecycleProject: function (userId) { return opts.projectLifecycle ? opts.projectLifecycle.resumeRecovered(slug, userId) : true; },
       projectLogsService: projectLogsService,
       issuesService: issuesService,
       linearStorage: linear.storage,
@@ -1374,13 +1472,19 @@ function createServer(opts) {
         return !!(access && !access.error && users.canAccessProject(userId, access));
       },
       getProjectAccess: function () {
-        if (extra.isMate) return { isMate: true, visibility: "private", ownerId: projectOwnerId || null, allowedUsers: [] };
+        if (extra.isMate) {
+          var mate = mates.getMate(mates.buildMateCtx(users.isMultiUser() ? projectOwnerId : null), extra.mateId || path.basename(cwd));
+          return { isMate: true, visibility: "private", ownerId: projectOwnerId || null, allowedUsers: [], lifecycleExecutionPaused: !mate || !!mate.lifecycleDeletion };
+        }
         return onGetProjectAccess ? onGetProjectAccess(slug) : { visibility: "public", ownerId: projectOwnerId || null };
       },
       shouldSuppressResponseNotification: function (session) {
         return shouldSuppressHomeResponse(projects, slug, session);
       },
-      pushModule: pushModule,
+      pushModule: require("./project-push-access").scopedPush(pushModule, {
+        slug: slug, users: users, getProject: function (target) { return projects.get(target); },
+        canAccessProject: canUserAccessSlug, getAccess: onGetProjectAccess,
+      }),
       debug: debug,
       dangerouslySkipPermissions: dangerouslySkipPermissions,
       osUsers: osUsers,
@@ -1412,6 +1516,7 @@ function createServer(opts) {
           var status = ctx.getStatus();
           var recs = ctx.getSchedules();
           for (var i = 0; i < recs.length; i++) {
+            if (users.isMultiUser() && recs[i].ownerId !== userId) continue;
             // Shallow-copy full record and augment with project metadata
             var copy = {};
             var keys = Object.keys(recs[i]);
@@ -1469,6 +1574,7 @@ function createServer(opts) {
         return ctx.getSchedules().length;
       },
       canAccessProjectSlug: canUserAccessSlug,
+      canUsePath: canUsePath,
       onPresenceChange: broadcastPresenceChange,
       onProcessingChanged: broadcastProcessingChange,
       onSessionDone: function () { onSessionDone(slug); },
@@ -1622,6 +1728,7 @@ function createServer(opts) {
   }
 
   function handleDmMessage(ws, msg, routedProjectSlug) {
+    if (ownerUiService.handleMessage(ws, msg)) return true;
     if (cursorSharingService && cursorSharingService.handleMessage(ws, msg)) return true;
     if (defaultVendorService && defaultVendorService.handleMessage(ws, msg, routedProjectSlug)) return true;
     if (contextViewService && contextViewService.handleMessage(ws, msg)) return true;
@@ -1636,19 +1743,8 @@ function createServer(opts) {
     return false;
   }
 
-  function removeProject(slug) {
-    var ctx = projects.get(slug);
-    if (!ctx) return false;
-    var wasMate = ctx.getStatus().isMate;
-    var shutdownResult = ctx.destroy();
-    projects.delete(slug);
-    if (shutdownResult && typeof shutdownResult.catch === "function") {
-      shutdownResult.catch(function(err) {
-        console.error("[server] Project destroy failed for " + slug + ":", err && err.message ? err.message : err);
-      });
-    }
-    if (!wasMate) scheduleRegistryRefresh();
-    return true;
+  function removeProject(slug, awaitCompletion) {
+    return require('./server-project-removal').removeProjectRuntime(projects, slug, awaitCompletion, scheduleRegistryRefresh);
   }
 
   // Now that addProject and removeProject are defined, initialize mateHandler
@@ -1734,7 +1830,11 @@ function createServer(opts) {
   function getVisibleProjects(userId) {
     var visible = [];
     projects.forEach(function (ctx, slug) {
-      if (users.isMultiUser() && (!userId || !canUserAccessSlug(userId, slug))) return;
+      if (users.isMultiUser() && (!userId || !canUserAccessSlug(userId, slug))) {
+        var metadata = administrativeMetadata(userId, slug);
+        if (metadata) visible.push(metadata);
+        return;
+      }
       var status = ctx.getStatus();
       if (!status.isMate && onGetProjectAccess) {
         var access = onGetProjectAccess(slug);
@@ -1933,6 +2033,7 @@ function createServer(opts) {
     speech.destroy();
     var shutdowns = [];
     shutdowns.push(durableSchedulerLifecycle.shutdown());
+    shutdowns.push(lifecycleRuntime.shutdown());
     projects.forEach(function (ctx, slug) {
       console.log("[server] Destroying project:", slug);
       var result = ctx.destroy();
@@ -2000,6 +2101,8 @@ function createServer(opts) {
     isTLS: !!tlsOptions,
     addProject: addProject,
     removeProject: removeProject,
+    getProjectLifecycleTargets: lifecycleRuntime.targets,
+    closeProjectLifecycle: lifecycleRuntime.close,
     getProjects: getProjects,
     reorderProjects: reorderProjects,
     setProjectTitle: setProjectTitle,