clay-server 5.2.0-beta.4 → 5.2.0-beta.5

package/lib/project-workspace-operations.js

@@ -0,0 +1,126 @@
+var fs = require('fs'), path = require('path'), crypto = require('crypto');
+var git = require('./git-cli');
+function digest(value) { return crypto.createHash('sha256').update(typeof value === 'string' || Buffer.isBuffer(value) ? value : JSON.stringify(value)).digest('hex'); }
+function inode(file) { var s = fs.statSync(file); return [s.dev, s.ino, s.mode, s.uid, s.gid]; }
+function attachWorkspaceOperations(ctx) {
+  var busy = false;
+  function authorize(principal, domain) {
+    var record = ctx.getAccess(), user = principal.userId && ctx.users.findUserById(principal.userId);
+    if (ctx.isMate || !record || record.lifecycleExecutionPaused || ctx.users.isMultiUser() && (!user || record.ownerId !== user.id || !ctx.users.canAccessProject(user.id, record))) throw new Error('Live selected-project ownership or access is unavailable.');
+    if (!ctx.users.isMultiUser() && record.ownerId && record.ownerId !== principal.singleUserOwnerId) throw new Error('Selected-project ownership changed.');
+    if (user && ctx.users.getEffectivePermissions(user, ctx.osUsers)[domain === 'terminal' ? 'terminal' : 'fileBrowser'] !== true) throw new Error('The account does not have permission for this product operation.');
+    var identity = null;
+    if (ctx.osUsers) {
+      if (!user || !user.linuxUser) throw new Error('A live mapped OS identity is required.');
+      identity = require('./os-users').resolveOsUserInfo(user.linuxUser);
+      if (!identity || !Number.isInteger(identity.uid) || identity.uid < 0 || !Number.isInteger(identity.gid) || identity.gid < 0 || identity.user !== user.linuxUser) throw new Error('The mapped OS identity is unavailable.');
+    }
+    return { identity: identity, projectBound: true, ownerId: user ? user.id : null };
+  }
+  function rootIdentity(principal, domain) {
+    var scope = authorize(principal, domain), root = fs.realpathSync(ctx.cwd);
+    return digest([root, inode(root), scope.ownerId, scope.identity && [scope.identity.user, scope.identity.uid, scope.identity.gid, scope.identity.home]]);
+  }
+  function bounded(requested, missing) {
+    if (typeof requested !== 'string' || !requested || path.isAbsolute(requested) || /[\u0000-\u001f\u007f]/.test(requested) || requested.split(/[\\/]/).some(function (part) { return part === '..' || ['.git', '.clay', '.claude', '.codex', '.envrc'].indexOf(part) >= 0; })) throw new Error('Use an in-project relative path outside managed settings and Git metadata.');
+    var root = fs.realpathSync(ctx.cwd), resolved = root;
+    var parts = requested.split('/').filter(function (part) { return part && part !== '.'; });
+    for (var i = 0; i < parts.length; i++) {
+      resolved = path.join(resolved, parts[i]);
+      var stat;
+      try { stat = fs.lstatSync(resolved); } catch (error) { if (missing && error.code === 'ENOENT' && i === parts.length - 1) return resolved; throw error; }
+      if (stat.isSymbolicLink() || stat.isFile() && stat.nlink !== 1) throw new Error('Symlinks and multiply linked files are unavailable in canonical project controls.');
+    }
+    if (path.relative(root, resolved).split(path.sep).indexOf('..') >= 0) throw new Error('The canonical project boundary changed.');
+    return resolved;
+  }
+  function repository(scope) {
+    var marker = fs.lstatSync(path.join(ctx.cwd, '.git'));
+    if (!marker.isDirectory() || marker.isSymbolicLink()) throw new Error('Canonical Git controls require a direct local .git directory; linked metadata and submodules are unavailable.');
+    var status = git.getStatus(ctx.cwd, scope.identity);
+    if (!status.isRepository || fs.realpathSync(status.root) !== fs.realpathSync(ctx.cwd)) throw new Error('Select the exact registered repository root, rather than a repository subdirectory.');
+    if (fs.realpathSync(status.gitDir) !== fs.realpathSync(path.join(ctx.cwd, '.git'))) throw new Error('The Git metadata directory escaped the selected project.');
+    return status;
+  }
+  function gitProjection(status) { return { isRepository: true, branch: status.branch, oid: status.oid, upstream: status.upstream, ahead: status.ahead, behind: status.behind, detached: status.detached, files: status.files.slice(0, 200), truncated: status.files.length > 200, dirty: status.dirty }; }
+  function terminal(scope, id) {
+    var item = ctx.tm.inspect(id);
+    var identity = scope.identity ? JSON.stringify([scope.identity.user, scope.identity.uid, scope.identity.gid, scope.identity.home]) : null;
+    if (!item || item.kind !== 'shell' || item.ownerId !== scope.ownerId || item.osIdentity !== identity) throw new Error('Select an exact same-owner shell terminal. Coding-agent, login and foreign terminals are excluded.');
+    return item;
+  }
+  function read(principal, op) {
+    var scope = authorize(principal, op.domain), before = rootIdentity(principal, op.domain), result;
+    if (op.domain === 'files') {
+      bounded(op.path || '.');
+      if (op.action === 'list') { var entries = ctx.files().list(scope, op.path || '.'); result = { entries: entries.slice(0, 200), truncated: entries.length > 200 }; }
+      else { result = ctx.files().read(scope, op.path); if (result.content && result.content.length > 65536) result = { error: 'Canonical text reads are limited to 64 KB.', size: result.size }; }
+    } else if (op.domain === 'git') {
+      var status = repository(scope);
+      if (op.action === 'status') result = gitProjection(status);
+      else { var working = bounded(op.path, true); if (fs.existsSync(working)) ctx.files().read(scope, op.path); result = git.getFileDiff(ctx.cwd, op.path, scope.identity); if ((result.oldContent.length + result.newContent.length) > 65536) throw new Error('Canonical diff reads are limited to 64 KB.'); }
+    } else if (op.action === 'list') result = { terminals: ctx.tm.list().filter(function (item) { try { terminal(scope, item.id); return true; } catch (error) { return false; } }).map(function (item) { return ctx.tm.inspect(item.id); }) };
+    else { var item = terminal(scope, op.id); result = Object.assign({}, item, ctx.tm.getScrollback(item.id)); }
+    if (rootIdentity(principal, op.domain) !== before) throw new Error('Project or OS identity changed during the read.');
+    return result;
+  }
+  function snapshot(principal, op) {
+    var scope = authorize(principal, op.domain);
+    if (op.domain === 'files') { bounded(op.path); return ctx.files().snapshot(scope, op.path); }
+    if (op.domain === 'git') {
+      var status = repository(scope);
+      if (!op.paths.length || !op.paths.every(function (name) { return status.files.some(function (item) { return item.path === name; }); })) throw new Error('Select exact currently changed Git paths.');
+      var entries = op.paths.map(function (name) {
+        var working = bounded(name, true);
+        if (fs.existsSync(working) && !fs.lstatSync(working).isFile()) throw new Error('Canonical staging requires individual regular file paths; recursive directory staging is unavailable.');
+        if (fs.existsSync(working)) ctx.files().read(scope, name);
+        var item = status.files.find(function (file) { return file.path === name; });
+        if (item.originalPath) bounded(item.originalPath, true);
+        var diff = git.getFileDiff(ctx.cwd, name, scope.identity);
+        if (diff.binary) throw new Error('Canonical staging of binary files is unavailable.');
+        return digest(diff);
+      });
+      var index = path.join(status.gitDir, 'index');
+      return { status: gitProjection(status), gitDirectory: [fs.realpathSync(status.gitDir), inode(status.gitDir)], index: fs.existsSync(index) ? digest(fs.readFileSync(index)) : null, files: entries,
+        configuration: digest(git.runGitSync(ctx.cwd, ['config', '--null', '--list', '--show-origin'], null, scope.identity)),
+        attributes: digest(git.runGitSync(ctx.cwd, ['check-attr', '-z', '--all', '--'].concat(op.paths), null, scope.identity)) };
+    }
+    return op.action === 'create' ? ctx.tm.list().map(function (item) { return ctx.tm.inspect(item.id); }) : terminal(scope, op.id);
+  }
+  async function apply(principal, op, expected, revalidate) {
+    if (busy) throw new Error('Another project file, Git or terminal change is applying. Inspect again after it settles.');
+    busy = true;
+    var attempted = false, result;
+    try {
+      var scope = authorize(principal, op.domain);
+      revalidate();
+      if (digest(snapshot(principal, op)) !== digest(expected)) throw new Error('The exact product revision changed.');
+      if (op.domain === 'files') return ctx.files().write(scope, op.path, op.content, { expected: expected, revalidate: function () { revalidate(); bounded(op.path); } });
+      attempted = true;
+      if (op.domain === 'git') {
+        await git.runAction(ctx.cwd, { action: op.action, paths: op.paths }, scope.identity);
+        result = { status: 'completed', runtimeEffect: 'index_updated', persisted: true };
+      } else if (op.action === 'create') {
+        var created = ctx.tm.create(op.cols, op.rows, scope.identity, null, { kind: 'shell', ownerId: scope.ownerId });
+        if (!created) throw new Error('The terminal transport is unavailable or its limit was reached.');
+        result = { status: 'completed', runtimeEffect: 'shell_created', terminalId: created.id, terminalIdentity: created.identity, commandSent: false, persisted: false };
+      } else if (op.action === 'rename') {
+        ctx.tm.rename(op.id, op.title); result = { status: 'completed', runtimeEffect: 'renamed', terminalId: op.id, terminalIdentity: expected.identity, persisted: false };
+      } else if (op.action === 'resize') {
+        ctx.tm.resizeExact(op.id, op.cols, op.rows, expected.identity, revalidate);
+        result = { status: 'completed', runtimeEffect: 'resized', terminalId: op.id, terminalIdentity: expected.identity, persisted: false };
+      } else {
+        await ctx.tm.closeAndWait(op.id, { identity: expected.identity, revalidate: function () { revalidate(); var live = terminal(authorize(principal, 'terminal'), op.id); if (live.identity !== expected.identity) throw new Error('Terminal identity changed during closure.'); } });
+        result = { status: 'completed', runtimeEffect: 'closed', terminalId: op.id, terminalIdentity: expected.identity, exitAcknowledged: true, persisted: false };
+      }
+      revalidate();
+      if (op.domain === 'terminal') ctx.publishTerminals();
+      return result;
+    } catch (error) {
+      error.productControlResult = Object.assign({ persisted: attempted ? 'unknown' : false, runtimeEffect: attempted ? 'unknown' : 'none', retrySafe: false }, result, error.productControlResult || {}, { status: 'failed', error: error.message });
+      throw error;
+    } finally { busy = false; }
+  }
+  return { rootIdentity: rootIdentity, read: read, snapshot: snapshot, apply: apply };
+}
+module.exports = { attachWorkspaceOperations: attachWorkspaceOperations };

package/lib/project-workspace-query.js

@@ -1,4 +1,5 @@
 var workspaceMcp = require("./workspace-query-mcp-server");
+var productTools = require("./clay-product-control-tools");
 var clayHistoryMcp = require("./clay-history-mcp-server");
 
 function attachProjectWorkspaceQuery(ctx) {
@@ -25,7 +26,12 @@ function attachProjectWorkspaceQuery(ctx) {
   function getToolDefs(session) {
     var bound = session ? binding(session) : null;
     if (session && !bound) return [];
-    return workspaceMcp.getToolDefs(bound, !!(bound && bound.isClay));
+    var tools = workspaceMcp.getToolDefs(bound, !!(bound && bound.isClay));
+    if (bound && bound.isClay && ctx.controlService) {
+      var controls = ctx.controlService.bind({ projectSlug: projectSlug, projectOwnerId: getProjectOwnerId(), isMate: true, mateId: mateId, session: session });
+      if (controls) tools = tools.concat(productTools.getToolDefs(controls));
+    }
+    return tools;
   }
 
   function createMcpServer(adapter, session) {
@@ -34,7 +40,8 @@ function attachProjectWorkspaceQuery(ctx) {
     if (session && !bound) return null;
     var projectBound = binding(null);
     if (!projectBound) return null;
-    return workspaceMcp.createMcpServer(adapter, bound, projectBound.isClay);
+    if (!adapter || typeof adapter.createToolServer !== "function") return null;
+    return adapter.createToolServer({ name: "clay-workspace", version: "2.0.0", tools: session ? getToolDefs(session) : workspaceMcp.getToolDefs(null, projectBound.isClay) });
   }
 
   function createHistoryMcpServer(adapter, session) {

package/lib/project.js

@@ -46,6 +46,8 @@ var { attachShellCommand } = require("./project-shell-command");
 var { attachVendorLogin } = require("./project-vendor-login");
 var { attachConnection } = require("./project-connection");
 var { attachProjectScheduledMessages } = require("./project-scheduled-messages");
+var { attachMateScheduling } = require("./mate-scheduling");
+var { attachMateScheduleLifecycle } = require("./mate-schedule-lifecycle");
 var { attachMcp } = require("./project-mcp");
 var { createSessionSkillCatalog } = require("./yoke/session-skill-catalog");
 var { attachEmail: attachEmailModule } = require("./project-email");
@@ -229,6 +231,8 @@ function createProjectContext(opts) {
   var getScheduleCount = opts.getScheduleCount || function () { return 0; };
   var notifyProcessingChanged = opts.onProcessingChanged || function () {};
   var _scheduledMessages = null;
+  var _mateScheduling = null;
+  var _mateLifecycle = null;
   var _scheduledTasks = null;
   var _scheduledTaskExecution = null;
   function onProcessingChanged() {
@@ -819,6 +823,7 @@ function createProjectContext(opts) {
   });
   var _workspaceQuery = attachProjectWorkspaceQuery({
     service: opts.workspaceQueryService || null,
+    controlService: opts.clayProductControl || null,
     sm: sm,
     projectSlug: slug,
     getProjectOwnerId: function () { return projectOwnerId; },
@@ -1047,6 +1052,7 @@ function createProjectContext(opts) {
     persistSession: function (session) { return sm.saveSessionFile(session); },
     getVendorModelCatalog: function (ws, vendor) { return _models.getVendorCatalog(ws, vendor); },
     createReadyMate: opts.createReadyMate,
+    isLive: function (session) { return sm.sessions.get(session.localId) === session; },
   });
   var _askUser = attachAskUser({
     record: function (session, event) { sm.sendAndRecord(session, event); },
@@ -1405,6 +1411,7 @@ function createProjectContext(opts) {
 
   // --- SDK bridge ---
   sdk = createSDKBridge({
+    isLifecycleExecutionPaused: function () { return !!(opts.getProjectAccess && opts.getProjectAccess().lifecycleExecutionPaused); },
     cwd: cwd,
     slug: slug,
     sessionManager: sm,
@@ -1480,6 +1487,7 @@ function createProjectContext(opts) {
         _sessionGithub.getSystemPrompt(session),
         _sessionLinear.getSystemPrompt(session),
         _scheduledTasks ? _scheduledTasks.getSystemPrompt(session) : "",
+        _mateScheduling ? _mateScheduling.getSystemPrompt(session) : "",
         _mateKnowledge.getSystemPrompt(session),
         _userKnowledge.getSystemPrompt(session),
         _autonomousRun ? _autonomousRun.getSystemPrompt(session) : "",
@@ -1509,6 +1517,7 @@ function createProjectContext(opts) {
         .concat(opts.userKnowledgeService ? _userKnowledge.getDynamicToolDefs(session) : [])
         .concat(_loopInterview ? _loopInterview.getToolDefs(session) : [])
         .concat(_scheduledTasks ? _scheduledTasks.getToolDefs(session) : [])
+        .concat(_mateScheduling ? _mateScheduling.getToolDefs(session) : [])
         .concat(_scheduledTaskExecution ? _scheduledTaskExecution.getToolDefs(session) : [])
         .concat(_autonomousRun ? _autonomousRun.getToolDefs(session) : []);
     },
@@ -1564,6 +1573,8 @@ function createProjectContext(opts) {
 
   _scheduledMessages = attachProjectScheduledMessages({
     scheduler: opts.durableScheduler,
+    mateLifecycle: function () { return _mateLifecycle; },
+    deferRehydrate: isMate,
     slug: slug,
     isMate: isMate,
     osUsers: osUsers,
@@ -1586,6 +1597,32 @@ function createProjectContext(opts) {
     consumePendingMessage: function (session) { return _userMessage && _userMessage.consumePendingMessage(session); },
   });
 
+  var _schedulingAccess = require('./project-scheduling-access').attachSchedulingAccess({ osUsers: osUsers, getLinuxUser: getLinuxUserForSession, resolveLinuxUser: getOsUserInfoForLinuxUser });
+  _mateLifecycle = attachMateScheduleLifecycle({
+    sm: sm, scheduler: opts.durableScheduler, slug: slug,
+    owner: function (session) { return _mateScheduling.owner(session); },
+    authorize: function (session, control) { return control ? _mateScheduling.authorizeControl(session, control) : _mateScheduling.authorize(session); },
+    authorizeRuntime: function (session) { return _mateScheduling.authorizeLifecycle(session); },
+    schedule: function () { return _scheduledMessages.schedule.apply(null, arguments); },
+    queueItem: function (session, job) { return _scheduledMessages.queueItem(session, job); },
+    cancelJob: function (session, job) {
+      return _scheduledMessages.cancel(session, { id: job.ownerId }, null, "cancelled_by_mate", { jobId: job.id, revision: job.payload.revision });
+    },
+  });
+  _mateScheduling = attachMateScheduling({
+    isMate: isMate, isHostAgent: isHostAgent, projectOwnerId: projectOwnerId, slug: slug, mateId: opts.mateId,
+    sm: sm, users: usersModule, lifecycle: _mateLifecycle,
+    authorizeAccess: function (session, ownerId) { _schedulingAccess.ownerIdentity(session); return _scheduledMessages.authorize(session, ownerId); },
+    userInput: function (session) { return _askUser.createHandler(session); },
+  });
+  if (isMate) {
+    sm.sessions.forEach(function (session) {
+      try { _mateLifecycle.reconcile(session); }
+      catch (error) { console.error("[mate-schedules] Recovery failed:", error.message); }
+    });
+    _scheduledMessages.rehydrate();
+  }
+
   // --- Loop engine (delegated to project-loop.js) ---
   // --- Notification center (global singleton from server.js) ---
   var _notifications = opts.notificationsModule || null;
@@ -1667,6 +1704,7 @@ function createProjectContext(opts) {
     cwd: cwd,
     projectSlug: slug,
     projectTitle: title || project,
+    validateOwnerIdentity: _schedulingAccess.ownerIdentity,
     isMate: isMate,
     sm: sm,
     sdk: sdk,
@@ -1765,8 +1803,8 @@ function createProjectContext(opts) {
   }
 
   // --- Schedule / cancel a message (used by WS handler and auto-continue) ---
-  function scheduleMessage(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) {
-    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId) : null;
+  function scheduleMessage(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId, options) {
+    return _scheduledMessages ? _scheduledMessages.schedule(session, text, resetsAt, actorUser, targetWs, attachments, requestId, transportAccountId, options) : null;
   }
 
   function cancelScheduledMessage(session, actorUser, targetWs, correlation) {
@@ -1800,7 +1838,7 @@ function createProjectContext(opts) {
     }
 
     // --- DM messages (delegated to server-level handler) ---
-    if (msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "default_vendor_get" || msg.type === "default_vendor_set" || msg.type === "context_view_get" || msg.type === "context_view_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
+    if (msg.type === "home_mate_question_response" || msg.type === "clay_ui_ready" || msg.type === "clay_navigation_claim" || msg.type === "clay_navigation_ack" || msg.type === "home_debate_question_response" || msg.type === "home_debate_control" || msg.type === "home_mate_creation_question_response" || msg.type === "default_ai_get" || msg.type === "default_ai_catalog_get" || msg.type === "default_ai_set" || msg.type === "default_vendor_get" || msg.type === "default_vendor_set" || msg.type === "context_view_get" || msg.type === "context_view_set" || msg.type === "cursor_sharing_get" || msg.type === "cursor_sharing_set") {
       if (typeof opts.onDmMessage === "function") opts.onDmMessage(ws, msg, slug);
       return;
     }
@@ -2096,6 +2134,8 @@ function createProjectContext(opts) {
   });
   sm.setSessionHydrator(_sessionSkillCatalog.hydrate);
   var _sessions = attachSessions({
+    adapters: adapters,
+    isPendingQueuePaused: function (session) { return _pendingMessageQueue.isPaused(session); },
     cwd: cwd,
     slug: slug,
     isMate: isMate,
@@ -2169,6 +2209,26 @@ function createProjectContext(opts) {
     _notifications: _notifications,
     _projectLogs: _projectLogs,
   });
+  var _productControl = require("./project-product-control").attachProjectProductControl({
+    sm: sm, users: usersModule, clients: clients, slug: slug, isMate: isMate, osUsers: osUsers,
+    getProjectAccess: opts.getProjectAccess || function () { return { visibility: "public", ownerId: projectOwnerId || null }; },
+    userInput: function (session) { return _askUser.createHandler(session); },
+    actions: _sessions.sessionActions, history: _sessions.sessionHistoryActions, selectModel: function (session, model, options) { return _models.selectSessionModel(session, model, null, options); },
+    isDriverOperatedSession: function (session) { return _sessionPair.workerPermission.isDriverOperated(session); },
+    deletePlan: _sessions.deleteProductControlPlan,
+    queue: _pendingMessageQueue,
+    requestQueueDrain: function (session) { if (_userMessage) _userMessage.consumePendingMessage(session); },
+    vendor: _sessions.sessionVendorActions,
+    runtime: _sessions.sessionRuntimeActions,
+  });
+  var _mateChatControl = require('./project-mate-chat-control').attachMateChatControl({
+    sm: sm, sdk: sdk, isMate: isMate, osUsers: osUsers, getLinuxUser: getLinuxUserForSession,
+    users: usersModule, getAccess: opts.getProjectAccess || function () { return { isMate: isMate, ownerId: projectOwnerId || null, visibility: 'private' }; },
+    actions: _sessions.sessionActions, vendor: _sessions.sessionVendorActions,
+    selectModel: function (session, model, options) { return _models.selectSessionModel(session, model, null, options); },
+  });
+
+
 
   var _models = attachModels({
     cwd: cwd,
@@ -2215,6 +2275,7 @@ function createProjectContext(opts) {
   });
   var _delegatedFollowUp = attachDelegatedFollowUp({
     sm: sm,
+    isPendingQueuePaused: function (session) { return _pendingMessageQueue.isPaused(session); },
     getSdk: function () { return sdk; },
     getLinuxUserForSession: getLinuxUserForSession,
     onProcessingChanged: onProcessingChanged,
@@ -2229,6 +2290,12 @@ function createProjectContext(opts) {
 
   // --- User message handler (delegated to project-user-message.js) ---
   var _userMessage = attachUserMessage({
+    isLifecycleExecutionPaused: function () { return !!(opts.getProjectAccess && opts.getProjectAccess().lifecycleExecutionPaused); },
+    resumeLifecycleProject: function (ws) {
+      if (!opts.getProjectAccess || !opts.getProjectAccess().lifecycleExecutionPaused) return true;
+      if (!clients.has(ws) || !ws._clayUser || !opts.resumeLifecycleProject) throw new Error('The current owner must explicitly resume recovered project execution.');
+      return opts.resumeLifecycleProject(ws._clayUser.id);
+    },
     // Exact live pair state decides whether a session is Driver-operated; the
     // handler never infers the role from the message.
     isDriverOperatedSession: function (session) {
@@ -2351,6 +2418,13 @@ function createProjectContext(opts) {
     FS_MAX_SIZE: FS_VIEWER_MAX_SIZE,
   });
 
+  var _workspaceOperations = require('./project-workspace-operations').attachWorkspaceOperations({
+    cwd: cwd, isMate: isMate, osUsers: osUsers, users: usersModule, tm: tm,
+    getAccess: opts.getProjectAccess || function () { return { ownerId: projectOwnerId || null, visibility: 'private' }; },
+    files: function () { return _filesystem.productOperations; },
+    publishTerminals: function () { send({ type: 'term_list', terminals: tm.list() }); },
+  });
+
   // --- MCP bridge handler for Codex and session-bound Kiro tools ---
   // Provides list_tools and call_tool operations over HTTP for mcp-bridge-server.js.
   // The normal Codex bridge excludes local MCP servers it manages natively;
@@ -2780,6 +2854,7 @@ function createProjectContext(opts) {
             return false;
           }));
         } catch (err) {
+          shutdowns.push(Promise.resolve(false));
           console.error("[project] " + vendor + " shutdown threw for " + slug + ":", err && err.message ? err.message : err);
         }
       });
@@ -2923,8 +2998,24 @@ function createProjectContext(opts) {
     },
     getYouLinuxUser: getLinuxUserForSession,
     getStatus: getStatus,
+    bindMateSchedule: function (session, intent, id) {
+      return _mateLifecycle.create(session, require("./mate-schedule-input").normalize(intent), id);
+    },
+    cancelMateSchedule: function (session, record) { return _mateLifecycle.cancel(session, record); },
     getSessionManager: function () { return sm; },
     createDelegatedSession: _delegatedSession.createDelegatedSession,
+    refreshEnvironmentRuntime: function () { return sdk.refreshEnvironmentRuntime(); },
+    getWorkspaceProductOperations: function () { return isMate ? null : _workspaceOperations; },
+    getMateChatControl: function () { return isMate ? _mateChatControl : null; },
+    getMateScheduleControl: function () { return isMate ? _mateLifecycle : null; },
+    getScheduledTaskControl: function () { return _scheduledTasks.productControl; },
+    notifyIssueUpdate: _issues.notify,
+    notifyLogUpdate: _projectLogs.broadcastUpdate,
+    requestProductControlReview: _productControl.requestProductControlReview,
+    applyProductSessionAction: _productControl.applyProductSessionAction,
+    inspectProductSessionQueue: _productControl.inspectProductSessionQueue,
+    inspectProductSessionRuntime: _sessions.sessionRuntimeActions.inspect,
+    inspectMateLifecycleRuntime: _sessions.sessionRuntimeActions.inspectLifecycle,
     inspectDelegatedFollowUp: _delegatedFollowUp.inspectDelegatedFollowUp,
     dispatchDelegatedFollowUp: _delegatedFollowUp.dispatchDelegatedFollowUp,
     deliverCapsuleTurn: _capsuleTurn.deliverCapsuleTurn,
@@ -2941,6 +3032,7 @@ function createProjectContext(opts) {
     getMemoryState: _memory.readMemoryState,
     listKnowledgeFiles: _knowledge.listKnowledgeFiles,
     getKnowledgeDbService: function () { return _knowledge.databases; },
+    getKnowledgeProductOperations: function () { return _knowledge.productOperations; },
     refreshCapsuleCatalog: _capsuleCatalog.refreshSessions,
     getNotificationsModule: function () { return _notifications; },
     refreshVendorAuth: _vendorLogin.refreshVendorAuth,

package/lib/public/css/clay-tool-activity.css

@@ -0,0 +1,51 @@
+/* Keep internal activity in the established compact tool disclosure rows. */
+.clay-tool-activity .tool-name {
+  flex-shrink: 1;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.clay-tool-activity .tool-desc {
+  font-family: var(--font-ui);
+  flex: 0 1 auto;
+}
+.clay-tool-activity .tool-status-icon { margin-left: auto; }
+.clay-tool-activity .tool-subtitle { display: none; }
+.tool-header[role="button"]:focus-visible,
+.tool-group-header[role="button"]:focus-visible {
+  outline: 2px solid var(--accent);
+  outline-offset: 2px;
+}
+.clay-tool-activity[data-activity-phase="running"] .tool-bullet {
+  animation: pulse 1.5s ease-in-out infinite;
+}
+.clay-tool-activity[data-activity-phase="pending"] .tool-bullet,
+.tool-group[data-activity-phase="pending"] .tool-group-bullet {
+  background: var(--text-muted);
+  animation: none;
+}
+.clay-tool-activity[data-activity-phase="error"] .tool-name,
+.clay-tool-activity[data-activity-phase="cancelled"] .tool-name,
+.tool-group[data-activity-phase="error"] .tool-group-label { color: var(--error); }
+.clay-tool-technical-name,
+.clay-tool-evidence-label {
+  padding: 8px 14px 0;
+  color: var(--text-muted);
+  font-size: 12px;
+  overflow-wrap: anywhere;
+}
+.clay-tool-technical-name { font-family: "Roboto Mono", monospace; }
+.clay-tool-evidence-label { font-weight: 600; }
+@media (prefers-reduced-motion: reduce) {
+  .clay-tool-activity .tool-bullet { animation: none; }
+}
+
+@media (max-width: 600px) {
+  .clay-tool-activity .tool-name {
+    white-space: normal;
+    overflow-wrap: anywhere;
+    line-height: 1.4;
+  }
+  .clay-tool-activity .tool-desc { max-width: 35%; }
+}

package/lib/public/css/home-mate-creation.css

@@ -32,3 +32,8 @@
   .home-mate-proposal-facts dd + dt { margin-top: 7px; }
   .home-mate-proposal-actions button { flex: 1; }
 }
+
+.home-mate-proposal-schedule-details { margin-top: 2px; color: var(--text-dimmer); }
+.home-mate-proposal-schedule-details summary { width: fit-content; padding-block: 3px; cursor: pointer; font-weight: 400; }
+.home-mate-proposal-schedule-details summary:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.home-mate-proposal-schedule-details[open] > div { padding-top: 3px; color: var(--text-muted); }

package/lib/public/css/overlays.css

@@ -1360,8 +1360,10 @@ button.top-bar-pill.pill-accent:hover { background: color-mix(in srgb, var(--acc
 .connect-wordmark {
   display: block;
   width: clamp(142px, 15vw, 184px);
-  height: auto;
-  filter: brightness(0);
+  aspect-ratio: 4742 / 1156;
+  background: var(--text-muted);
+  -webkit-mask: url("../clay-studio-wordmark-bold.svg") center / contain no-repeat;
+  mask: url("../clay-studio-wordmark-bold.svg") center / contain no-repeat;
 }
 
 #connect-overlay-msg {

package/lib/public/css/project-admin-overview.css

@@ -0,0 +1,13 @@
+.project-admin-overview { overflow: auto; padding: 8px; }
+.project-admin-canvas { width: 100%; min-height: 100%; padding: 24px; border: 1px solid var(--border); border-radius: 8px; background: var(--bg); }
+.project-admin-canvas h1 { font-size: 20px; margin: 0 0 16px; }
+.project-admin-canvas h2 { font-size: 16px; }
+.project-admin-canvas [role="tablist"] { display: flex; gap: 4px; border-bottom: 1px solid var(--border); padding-bottom: 8px; }
+.project-admin-canvas [role="tab"] { height: 32px; padding: 0 12px; border: 1px solid var(--border); border-radius: 8px; color: inherit; background: transparent; cursor: pointer; }
+.project-admin-canvas [aria-selected="true"] { background: #5857fc; color: white; }
+.project-admin-canvas :focus-visible { outline: 2px solid #5857fc; outline-offset: 2px; }
+.project-admin-canvas dl { display: grid; grid-template-columns: 110px 1fr; gap: 12px; margin: 24px 0; font-size: 13px; }
+.project-admin-canvas dd { margin: 0; }
+.project-admin-canvas p { max-width: 640px; line-height: 1.6; font-size: 14px; }
+.project-admin-secondary { opacity: .65; }
+@media (max-width: 600px) { .project-admin-canvas { padding: 16px; } }

package/lib/public/css/session-folders.css

@@ -158,6 +158,16 @@
 .session-folder-viewmenu .session-folder-radio-dot { width: 12px; height: 12px; }
 .session-folder-viewmenu .session-folder-radio-legend { margin: 2px 0 1px 6px; font-size: 10px; text-transform: uppercase; letter-spacing: 0.4px; }
 .session-folder-viewmenu .session-folder-view-note { padding: 2px 6px 4px; font-size: 11px; line-height: 1.35; }
+.session-folder-view-toggle {
+  display: flex; align-items: center; justify-content: space-between; gap: 10px; width: 100%; min-height: 30px; padding: 0 6px;
+  border: 0; border-radius: 6px; background: transparent; color: var(--text); font: inherit; font-size: 12.5px; text-align: left; cursor: pointer;
+}
+.session-folder-view-toggle:hover { background: rgba(var(--overlay-rgb), 0.08); }
+.session-folder-view-toggle-track { position: relative; flex: none; width: 28px; height: 16px; border-radius: 999px; background: var(--text-dimmer); transition: background 0.15s ease; }
+.session-folder-view-toggle-thumb { position: absolute; top: 2px; left: 2px; width: 12px; height: 12px; border-radius: 50%; background: var(--sidebar-bg); transition: transform 0.15s ease; }
+.session-folder-view-toggle[aria-checked="true"] .session-folder-view-toggle-track { background: var(--accent); }
+.session-folder-view-toggle[aria-checked="true"] .session-folder-view-toggle-thumb { transform: translateX(12px); }
+.session-folder-view-toggle:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
 .session-folder-viewmenu .session-folder-radio-group.segmented {
   display: flex; gap: 2px; padding: 2px; margin-top: 2px; border-radius: 8px; background: rgba(var(--overlay-rgb), 0.05);
 }
@@ -167,6 +177,7 @@
 .session-folder-viewmenu.is-mobile { padding: 6px; }
 .session-folder-viewmenu.is-mobile .session-folder-radio { min-height: 40px; font-size: 14px; }
 .session-folder-viewmenu.is-mobile .session-folder-radio-dot { width: 14px; height: 14px; }
+.session-folder-viewmenu.is-mobile .session-folder-view-toggle { min-height: 40px; font-size: 14px; }
 @media (pointer: coarse) {
   .session-folder-viewmenu .session-folder-radio { min-height: 40px; font-size: 14px; }
 }

package/lib/public/css/session-github.css

@@ -168,6 +168,9 @@
 .session-item:has(.session-work-column) > .session-work-links-slot { grid-column: 1 / 3; grid-row: 2; }
 
 .github-kind-pr.github-state-closed .github-work-status svg { color: #f85149; }
+.github-kind-pr.github-state-open .github-review-changes svg { color: var(--error); }
+.github-kind-pr.github-state-open .github-review-requested svg { color: var(--warning); }
+.github-kind-pr.github-state-open .github-review-approved svg { color: var(--success); }
 @media (max-width: 600px) {
   #header-github-links { flex: 0 0 auto; }
   #header-github-links .session-github-link { display: none; }

package/lib/public/css/sticky-notes.css

@@ -514,6 +514,20 @@
   background: color-mix(in srgb, var(--note-ink) 12%, transparent) !important;
   border-radius: 4px;
 }
+.sticky-note-checklist-btn.active {
+  opacity: 1 !important;
+  background: color-mix(in srgb, var(--note-ink) 12%, transparent) !important;
+  border-radius: 4px;
+}
+.sticky-note-checklist-btn .lucide { width: 13px; height: 13px; }
+.sticky-note-save-status {
+  color: var(--danger, #b42318);
+  font-size: 10px;
+  max-width: 90px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
 
 .sn-fmt-bold { font-weight: 800; }
 .sn-fmt-italic { font-style: italic; }
@@ -692,6 +706,7 @@
   overflow-y: auto;
   display: grid;
   grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
+  grid-auto-rows: max-content;
   gap: 10px;
   padding: 12px 12px 28px;
   align-content: start;
@@ -715,8 +730,23 @@
 .notes-browser-card:hover { box-shadow: 0 2px 10px rgba(var(--shadow-rgb), 0.12); }
 .notes-browser-card:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
 /* A closed note is calm, not crossed out: still fully readable. */
-.notes-browser-card.closed { opacity: 0.72; cursor: default; }
+.notes-browser-card.closed {
+  min-height: 150px;
+  align-self: start;
+  opacity: 0.88;
+  cursor: default;
+}
 .notes-browser-card.closed:hover { box-shadow: none; }
+.notes-browser-card.closed .notes-browser-card-header {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: start;
+}
+.notes-browser-card.closed .notes-browser-card-title {
+  flex: 0 0 100%;
+  display: block;
+  overflow-wrap: anywhere;
+}
 
 .notes-browser-card-title { color: var(--note-ink); }
 .notes-browser-card-body { color: var(--note-ink); }
@@ -791,6 +821,23 @@
   -webkit-line-clamp: 5;
   -webkit-box-orient: vertical;
 }
+.notes-browser-card.closed .notes-browser-card-body {
+  flex: 0 0 auto;
+  display: block;
+  min-width: 0;
+  overflow: visible;
+  overflow-wrap: anywhere;
+  word-break: break-word;
+}
+.notes-browser-card.closed .notes-browser-card-body a,
+.notes-browser-card.closed .notes-browser-card-body code,
+.notes-browser-card.closed .notes-browser-card-body pre {
+  overflow-wrap: anywhere;
+  word-break: break-word;
+}
+.notes-browser-card.closed .notes-browser-card-body pre {
+  white-space: pre-wrap;
+}
 .notes-browser-card-body code {
   padding: 1px 3px;
   border-radius: 3px;
@@ -879,3 +926,16 @@
   .sticky-note.sticky-note-flight-away,
   .sticky-note:not(.sticky-note-flight-away) { transition-duration: 0ms; }
 }
+
+/* Checklist inputs retain the card's compact reading rhythm. */
+.sn-task-form { display: grid; gap: 6px; }
+.sn-task-row { display: flex; align-items: center; gap: 6px; }
+.sn-task-form input { min-width: 0; width: 100%; box-sizing: border-box; border: 1px solid transparent; border-radius: 4px; background: transparent; color: inherit; font: inherit; padding: 3px 4px; }
+.sn-task-form input:hover, .sn-task-form input:focus { border-color: color-mix(in srgb, var(--note-ink) 25%, transparent); }
+.sn-task-title { font-weight: 600 !important; }
+.sn-task-form button { color: inherit; background: transparent; border: 0; font: inherit; cursor: pointer; }
+.sn-task-form .sn-check { flex-shrink: 0; }
+.sn-task-form .sn-task-save { justify-self: start; padding: 4px 8px; border: 1px solid color-mix(in srgb, var(--note-ink) 25%, transparent); border-radius: 4px; }
+.sn-task-form button:focus-visible, .sn-task-form input:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
+.sticky-note-header .sticky-note-md-btn[hidden] { display: none !important; }
+.sn-task-remove .lucide { width: 13px; height: 13px; }

package/lib/public/index.html

@@ -332,7 +332,7 @@ body { background: transparent; color: inherit; }
         <div id="connect-overlay">
       <div class="connect-brand">
         <img class="connect-symbol" src="clay-studio-symbol.png" alt="">
-        <img class="connect-wordmark" src="clay-studio-wordmark-bold.svg" alt="Clay Studio" width="4742" height="1156">
+        <span class="connect-wordmark" role="img" aria-label="Clay Studio"></span>
       </div>
       <p id="connect-overlay-msg">Connecting…</p>
     </div>

package/lib/public/modules/admin-settings-projects.js

@@ -16,7 +16,7 @@ export function loadProjectsTab(body) {
 
   var accessPromises = projectList.map(function (p) {
     return apiGet("/api/admin/projects/" + p.slug + "/access").then(function (access) {
-      return { slug: p.slug, title: p.title || p.project || p.slug, projectOwnerId: p.projectOwnerId || null, visibility: access.visibility || "public", allowedUsers: access.allowedUsers || [] };
+      return { slug: p.slug, title: p.title || p.project || p.slug, projectOwnerId: p.projectOwnerId || null, visibility: access.visibility || "public", allowedUsers: access.allowedUsers || [], readOnly: access.contentAccess === false || p.projectOwnerId !== store.get("myUserId") };
     });
   });
 
@@ -39,9 +39,13 @@ function renderProjectsTab(body, projectAccessList, allUsers) {
     html += '<div class="admin-project-slug">' + escapeHtml(p.slug) + '</div>';
     html += '</div>';
     html += '<div class="admin-project-controls">';
+    if (p.readOnly) {
+      html += '<span class="admin-project-access-readonly">Administrative metadata only</span></div></div>';
+      continue;
+    }
     // Owner select
     html += '<select aria-label="Project owner" class="admin-owner-select" data-slug="' + escapeHtml(p.slug) + '">';
-    html += '<option value=""' + (!p.projectOwnerId ? ' selected' : '') + '>No owner</option>';
+    if (!p.projectOwnerId) html += '<option value="" selected disabled>Ownership needs recovery</option>';
     for (var u = 0; u < allUsers.length; u++) {
       var user = allUsers[u];
       var sel = p.projectOwnerId === user.id ? ' selected' : '';