clay-server 5.2.0-beta.8 → 5.2.0

package/lib/project-sessions.js

@@ -5,12 +5,16 @@ var { execFileSync } = require("child_process");
 var providerSettings = require("./yoke/settings");
 var updateSnooze = require("./update-snooze");
 var yoke = require("./yoke");
+var startProtocol = require("./project-start-protocol");
+var startReply = startProtocol.withRequestId;
+var browseMeta = startProtocol.browseMeta;
 var sessionVisibility = require("./session-visibility");
 var contextUsageModule = require("./context-usage");
 var sessionDeleteModule = require("./project-session-delete");
 var sessionFoldersModule = require("./project-session-folders");
 var elicitationResponse = require("./project-elicitation-response");
 var sessionCreationModule = require("./project-session-creation");
+var vendorUsageOverviewModule = require("./vendor-usage-overview");
 
 function vendorSupportsTui(vendor) {
   var info = yoke.getVendorInfo(vendor);
@@ -223,6 +227,10 @@ function attachSessions(ctx) {
     resolveSessionHome: resolveSessionHome, cancelPendingAskUser: cancelPendingAskUser,
   }));
 
+  function boundedRequestId(msg) {
+    return typeof msg.requestId === "string" ? msg.requestId.substring(0, 200) : undefined;
+  }
+
   function canAccessProjectSlug(ws, targetSlug) {
     if (!targetSlug) return false;
     if (!usersModule || typeof usersModule.isMultiUser !== "function" || !usersModule.isMultiUser()) return true;
@@ -361,6 +369,11 @@ function attachSessions(ctx) {
     getProjectAccess: getProjectAccess,
     getVendorAvailability: function (ws) { return ctx.getVendorAvailability(ws); },
   });
+  var vendorUsage = vendorUsageOverviewModule.attachVendorUsageOverview({
+    slug: slug, sm: sm, usersModule: usersModule, clients: clients, sendTo: sendTo, getProjectAccess: getProjectAccess,
+    getVendorAvailability: function (ws) { return ctx.getVendorAvailability(ws); },
+    adapters: ctx.adapters, osUsers: osUsers, getLinuxUserForWs: ctx.getLinuxUserForWs,
+  });
   // Kick off watchers for any TUI sessions already loaded from disk so
   // their titles refresh as soon as Claude Code rewrites the jsonl, even
   // before the user clicks them.
@@ -755,13 +768,15 @@ function attachSessions(ctx) {
     if (msg.type === "set_project_session_visibility_default") {
       sessionVisibility.handleDefaultChange({
         slug: slug, isMate: isMate, osUsers: osUsers, usersModule: usersModule, getProjectAccess: getProjectAccess,
-        opts: opts, sendTo: sendTo,
+        getTargetAccess: typeof opts.onGetProjectAccess === "function" ? opts.onGetProjectAccess : null,
+        canAccessProjectSlug: canAccessProjectSlug, opts: opts, sendTo: sendTo,
       }, ws, msg);
       return true;
     }
 
     if (sessionFolders.handleMessage(ws, msg)) return true;
     if (sessionCreation.handleMessage(ws, msg)) return true;
+    if (vendorUsage.handleMessage(ws, msg)) return true;
 
     if (msg.type === "bulk_delete_sessions") {
       sessionDelete.bulkDeleteSessions(ws, msg);
@@ -804,6 +819,8 @@ function attachSessions(ctx) {
     // adoptOrphanedCliSessions). Click a session in the sidebar instead.
 
     if (msg.type === "switch_session") {
+      var paneActivation = require('./pane-session-activation').begin(ctx, ws, msg);
+      if (paneActivation === false) return true;
       if (msg.id && sm.sessions.has(msg.id)) {
         // resolveSessionForView sets runtimeMode / runtimeTerminalId /
         // tuiSuspended (and hydrates the transcript) before sm.switchSession
@@ -817,6 +834,7 @@ function attachSessions(ctx) {
           resolveSessionForView(xmTarget, ws);
         }
         var switchTargetSess = sm.sessions.get(msg.id);
+        if (paneActivation && !paneActivation.validate()) return true;
         var switchTargetVendor = switchTargetSess && (switchTargetSess.vendor || sm.defaultVendor || "claude");
         if (switchTargetSess && !switchTargetSess.effort) {
           switchTargetSess.effort = yoke.clampEffort(
@@ -829,20 +847,20 @@ function attachSessions(ctx) {
         if (usersModule.isMultiUser() && ws._clayUser) {
           var switchTarget = sm.sessions.get(msg.id);
           if (!usersModule.canAccessSession(ws._clayUser.id, switchTarget, { visibility: "public" })) return true;
-          ws._clayActiveSession = msg.id;
-          sm.switchSession(msg.id, ws, hydrateImageRefs);
+          sm.switchSession(msg.id, ws, hydrateImageRefs, paneActivation && paneActivation.send, paneActivation && paneActivation.validate);
           if (!ws._clayPane) broadcastPresence();
         } else {
-          ws._clayActiveSession = msg.id;
-          sm.switchSession(msg.id, ws, hydrateImageRefs);
+          sm.switchSession(msg.id, ws, hydrateImageRefs, paneActivation && paneActivation.send, paneActivation && paneActivation.validate);
         }
         // Send per-session context sources
         if (typeof loadContextSources === "function") {
           var switchedSources = loadContextSources(slug, msg.id);
-          sendTo(ws, { type: "context_sources_state", active: switchedSources });
+          if (paneActivation) paneActivation.send({ type: "context_sources_state", active: switchedSources });
+          else sendTo(ws, { type: "context_sources_state", active: switchedSources });
         }
         var swPresKey = ws._clayUser ? ws._clayUser.id : "_default";
         if (!ws._clayPane) userPresence.setPresence(slug, swPresKey, userPresence.sessionIdForPersistence(switchTargetSess), null);
+        if (paneActivation) paneActivation.finish();
       }
       return true;
     }
@@ -1084,6 +1102,12 @@ function attachSessions(ctx) {
 
     if (msg.type === "stop") {
       var session = getSessionForWs(ws);
+      if (msg.sessionId != null || msg.sessionOriginId != null) {
+        session = sm.sessions.get(msg.sessionId);
+        if (!session || session.sessionOriginId !== msg.sessionOriginId ||
+            !usersModule.isMultiUser() && session.ownerId ||
+            usersModule.isMultiUser() && (!ws._clayUser || !usersModule.canAccessSession(ws._clayUser.id, session, getProjectAccess()))) return true;
+      }
       stopSession(session, ws && ws._clayUser);
       return true;
     }
@@ -1465,6 +1489,7 @@ function attachSessions(ctx) {
       var sessionId = sm.permissionRequestIndex[requestId];
       var session = sessionId ? sm.sessions.get(sessionId) : getSessionForWs(ws);
       if (!session) return true;
+      if (ws._clayPaneActivation && session.localId !== ws._clayPaneActivation.sessionId) return true;
       var pending = session.pendingPermissions[requestId];
       if (!pending) return true;
       delete sm.permissionRequestIndex[requestId];
@@ -1646,8 +1671,9 @@ function attachSessions(ctx) {
         parentDir = path.dirname(absTarget);
         prefix = path.basename(absTarget).toLowerCase();
       }
-      if (opts.canUsePath && !opts.canUsePath(ws._clayUser && ws._clayUser.id, parentDir)) {
-        sendTo(ws, { type: "browse_dir_result", entries: [], error: "Directory access is not permitted" });
+      var canList = function (candidate) { return !opts.canUsePath || opts.canUsePath(ws._clayUser && ws._clayUser.id, candidate); };
+      if (!canList(parentDir)) {
+        sendTo(ws, startReply(msg, { type: "browse_dir_result", path: msg.path, entries: [], error: "Directory access is not permitted" }));
         return true;
       }
       try {
@@ -1663,9 +1689,9 @@ function attachSessions(ctx) {
           dirEntries.push({ name: d.name, path: path.join(parentDir, d.name) });
         }
         dirEntries.sort(function (a, b) { return a.name.localeCompare(b.name); });
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: dirEntries });
+        sendTo(ws, Object.assign(browseMeta(msg, parentDir, prefix, canList), { type: "browse_dir_result", path: msg.path, entries: dirEntries }));
       } catch (e) {
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: [], error: e.message });
+        sendTo(ws, startReply(msg, { type: "browse_dir_result", path: msg.path, entries: [], error: e.message }));
       }
       return true;
     }
@@ -1675,24 +1701,24 @@ function attachSessions(ctx) {
       var addPath = (msg.path || "").replace(/^~/, require("./config").REAL_HOME);
       var addAbs = path.resolve(addPath);
       if (opts.canUsePath && !opts.canUsePath(ws._clayUser && ws._clayUser.id, addAbs)) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Directory access is not permitted" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Directory access is not permitted" }));
         return true;
       }
       try {
         var addStat = fs.statSync(addAbs);
         if (!addStat.isDirectory()) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "Not a directory" });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not a directory" }));
           return true;
         }
       } catch (e) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Directory not found" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Directory not found" }));
         return true;
       }
       if (typeof opts.onAddProject === "function") {
         var result = opts.onAddProject(addAbs, ws._clayUser);
-        sendTo(ws, Object.assign({}, result, { type: "add_project_result" }));
+        sendTo(ws, startReply(msg, Object.assign({}, result, { type: "add_project_result" })));
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1702,7 +1728,7 @@ function attachSessions(ctx) {
       if (ws._clayUser) {
         var cpPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
         if (!cpPerms.createProject) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "You do not have permission to create projects" });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "You do not have permission to create projects" }));
           return true;
         }
       }
@@ -1710,14 +1736,14 @@ function attachSessions(ctx) {
     if (msg.type === "create_project") {
       var createName = (msg.name || "").trim();
       if (!createName || !/^[a-zA-Z0-9_-]+$/.test(createName)) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid name. Use only letters, numbers, dashes, and underscores." });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Invalid name. Use only letters, numbers, dashes, and underscores." }));
         return true;
       }
       if (typeof opts.onCreateProject === "function") {
         var createResult = opts.onCreateProject(createName, ws._clayUser);
-        sendTo(ws, Object.assign({}, createResult, { type: "add_project_result" }));
+        sendTo(ws, startReply(msg, Object.assign({}, createResult, { type: "add_project_result" })));
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1726,16 +1752,16 @@ function attachSessions(ctx) {
     if (msg.type === "clone_project") {
       var cloneUrl = (msg.url || "").trim();
       if (!cloneUrl || (!/^https?:\/\//.test(cloneUrl) && !/^git@/.test(cloneUrl))) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid URL. Use https:// or git@ format." });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Invalid URL. Use https:// or git@ format." }));
         return true;
       }
-      sendTo(ws, { type: "clone_project_progress", status: "cloning" });
+      sendTo(ws, startReply(msg, { type: "clone_project_progress", status: "cloning" }));
       if (typeof opts.onCloneProject === "function") {
         opts.onCloneProject(cloneUrl, ws._clayUser, function (cloneResult) {
-          sendTo(ws, { type: "add_project_result", ok: cloneResult.ok, slug: cloneResult.slug, error: cloneResult.error });
+          sendTo(ws, startReply(msg, { type: "add_project_result", ok: cloneResult.ok, slug: cloneResult.slug, error: cloneResult.error }));
         });
       } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
+        sendTo(ws, startReply(msg, { type: "add_project_result", ok: false, error: "Not supported" }));
       }
       return true;
     }
@@ -1848,30 +1874,41 @@ function attachSessions(ctx) {
 
     // --- Set project title (rename) ---
     if (msg.type === "set_project_title") {
+      var titleRequestId = boundedRequestId(msg);
       if (!msg.slug) {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Missing slug" });
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Missing slug", requestId: titleRequestId });
+        return true;
+      }
+      // The target is named by the client; it must be a project this account can access.
+      if (!canAccessProjectSlug(ws, msg.slug)) {
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Project access is not permitted", slug: msg.slug, requestId: titleRequestId });
         return true;
       }
       if (typeof opts.onSetProjectTitle === "function") {
         var titleResult = opts.onSetProjectTitle(msg.slug, msg.title || null);
-        sendTo(ws, Object.assign({}, titleResult, { type: "set_project_title_result", slug: msg.slug }));
+        sendTo(ws, Object.assign({}, titleResult, { type: "set_project_title_result", slug: msg.slug, requestId: titleRequestId }));
       } else {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Not supported" });
+        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Not supported", requestId: titleRequestId });
       }
       return true;
     }
 
     // --- Set project icon (emoji) ---
     if (msg.type === "set_project_icon") {
+      var iconRequestId = boundedRequestId(msg);
       if (!msg.slug) {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Missing slug" });
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Missing slug", requestId: iconRequestId });
+        return true;
+      }
+      if (!canAccessProjectSlug(ws, msg.slug)) {
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Project access is not permitted", slug: msg.slug, requestId: iconRequestId });
         return true;
       }
       if (typeof opts.onSetProjectIcon === "function") {
         var iconResult = opts.onSetProjectIcon(msg.slug, msg.icon || null);
-        sendTo(ws, { type: "set_project_icon_result", ok: iconResult.ok, slug: msg.slug, error: iconResult.error });
+        sendTo(ws, { type: "set_project_icon_result", ok: iconResult.ok, slug: msg.slug, error: iconResult.error, requestId: iconRequestId });
       } else {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Not supported" });
+        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Not supported", requestId: iconRequestId });
       }
       return true;
     }
@@ -1997,6 +2034,18 @@ function attachSessions(ctx) {
   }
 
   return {
+    invalidateVendorUsage: function () { vendorUsage.invalidateAll(); },
+    // Canonical read-only inspection: the caller has already proven the owner and
+    // project access; the OS user is re-derived from the live user record.
+    readVendorUsage: function (request) {
+      var installed = null;
+      if (Array.isArray(sm.installedVendors)) {
+        installed = Object.create(null);
+        sm.installedVendors.forEach(function (vendor) { installed[vendor] = true; });
+      }
+      var linuxUser = osUsers && request.owner !== "default" ? ctx.getLinuxUserForSession({ ownerId: request.owner }) : null;
+      return vendorUsage.readForOwner({ owner: request.owner, linuxUser: linuxUser, installed: installed, isCurrent: request.isCurrent });
+    },
     handleSessionsMessage: handleSessionsMessage,
     resolveSessionForView: resolveSessionForView,
     sendSessionFoldersState: sessionFolders.sendStateTo,

package/lib/project-start-protocol.js

@@ -0,0 +1,29 @@
+// Shared reply helpers for the project-start dialog (browse_dir and add/create/clone results).
+// A string requestId on the request is echoed on its reply so the client can drop stale answers.
+
+var path = require("path");
+
+function requestIdOf(msg) {
+  return msg && typeof msg.requestId === "string" && msg.requestId.length <= 64 ? msg.requestId : undefined;
+}
+
+// Canonical listing metadata. `dir` is the directory whose children are listed, `prefix` is
+// non-empty when the requested path did not exist or was not a directory, and `parent` is set
+// only when the caller may list the parent as well.
+function browseMeta(msg, dir, prefix, canList) {
+  var parent = path.dirname(dir);
+  return {
+    requestId: requestIdOf(msg),
+    dir: dir,
+    prefix: prefix || "",
+    parent: parent !== dir && (!canList || canList(parent)) ? parent : null,
+  };
+}
+
+function withRequestId(msg, payload) {
+  var id = requestIdOf(msg);
+  if (id !== undefined) payload.requestId = id;
+  return payload;
+}
+
+module.exports = { requestIdOf: requestIdOf, browseMeta: browseMeta, withRequestId: withRequestId };

package/lib/project-vendor-login.js

@@ -171,6 +171,8 @@ function attachVendorLogin(ctx) {
   // reused by every project, so tearing one down here would kill unrelated
   // sessions; those runtimes pick up new credentials on their own.
   function refreshVendorAuth(vendor, linuxUser) {
+    // Cached account usage described the previous credentials.
+    if (typeof ctx.onVendorAuthChanged === "function") { try { ctx.onVendorAuthChanged(vendor, linuxUser || null); } catch (e) {} }
     var adapter = adapters[vendor];
     if (!adapter || typeof adapter.shutdown !== "function") return Promise.resolve(false);
     if (adapter.shared) {

package/lib/project.js

@@ -459,7 +459,8 @@ function createProjectContext(opts) {
       if (obj.type === "loop_registry_updated") payload.records = getHubSchedules(userId);
       else payload.schedules = getHubSchedules(userId);
     }
-    ws.send(JSON.stringify(payload));
+    payload = require('./pane-session-transport').outbound(ws, payload);
+    if (payload) ws.send(JSON.stringify(payload));
   }
 
   function sendToAdmins(obj) {
@@ -555,7 +556,8 @@ function createProjectContext(opts) {
     var data = JSON.stringify(obj), delivered = 0;
     for (var ws of clients) {
       if (ws.readyState === 1 && canReceiveMate(ws) && canReceiveYou(ws, sessionId) && ws._clayActiveSession === sessionId) {
-        ws.send(data); delivered++; if (onSent) onSent(ws);
+        var panePayload = require('./pane-session-transport').outbound(ws, obj, sessionId);
+        if (panePayload) { ws.send(JSON.stringify(panePayload)); delivered++; if (onSent) onSent(ws); }
       }
     }
     homeDebateClients.forEach(function (ws) {
@@ -569,7 +571,8 @@ function createProjectContext(opts) {
     var data = JSON.stringify(obj);
     for (var ws of clients) {
       if (ws !== sender && ws.readyState === 1 && canReceiveMate(ws) && canReceiveYou(ws, sessionId) && ws._clayActiveSession === sessionId) {
-        ws.send(data);
+        var panePayload = require('./pane-session-transport').outbound(ws, obj, sessionId);
+        if (panePayload) ws.send(JSON.stringify(panePayload));
       }
     }
   }
@@ -655,7 +658,8 @@ function createProjectContext(opts) {
           var access = opts.getProjectAccess ? opts.getProjectAccess() : { visibility: "public", ownerId: projectOwnerId || null };
           if (!viewer || (opts.canAccessProjectSlug && !opts.canAccessProjectSlug(viewer.id, slug)) || !usersModule.canAccessSession(viewer.id, session, access)) return;
         }
-        ws.send(data);
+        var panePayload = ws._clayPaneActivation ? require('./pane-session-transport').outbound(ws, message, session.localId) : message;
+        if (panePayload) ws.send(panePayload === message ? data : JSON.stringify(panePayload));
       });
     },
     authorize: function (session, actor) {
@@ -1827,6 +1831,10 @@ function createProjectContext(opts) {
   }
 
   function handleMessage(ws, msg) {
+    return require('./pane-session-transport').run(ws, msg, dispatchMessage);
+  }
+
+  function dispatchMessage(ws, msg) {
     if (!_requestAccess.permitMessage(ws, msg)) return;
     // --- Keep-alive (delegated to project-connection.js) ---
     // Answered before any routing so a ping can never be forwarded elsewhere.
@@ -2147,6 +2155,7 @@ function createProjectContext(opts) {
   });
   sm.setSessionHydrator(_sessionSkillCatalog.hydrate);
   var _sessions = attachSessions({
+    splitStore: _splitGroups.store,
     adapters: adapters,
     isPendingQueuePaused: function (session) { return _pendingMessageQueue.isPaused(session); },
     cwd: cwd,
@@ -2178,6 +2187,7 @@ function createProjectContext(opts) {
     resolveDefaultAi: opts.resolveDefaultAi,
     resolveMateSessionDefaults: opts.resolveMateSessionDefaults,
     getVendorAvailability: function (ws) { return _models.getVendorAvailability(ws); },
+    getLinuxUserForWs: getLinuxUserForWs,
     canCreateScheduledTaskInterview: function (ws, session) { return !!(_scheduledTasks && _scheduledTasks.canCreateInterview(ws, session)); },
     canStartScheduledTaskInterview: function (ws, session) { return !!(_scheduledTasks && _scheduledTasks.canStartInterview(ws, session)); },
     onHumanPairStop: function (session) {
@@ -2390,6 +2400,7 @@ function createProjectContext(opts) {
 
   // --- Vendor login flow (delegated to project-vendor-login.js) ---
   var _vendorLogin = attachVendorLogin({
+    onVendorAuthChanged: function () { _sessions.invalidateVendorUsage(); },
     requestAccess: _requestAccess,
     clients: clients,
     slug: slug,
@@ -3031,6 +3042,7 @@ function createProjectContext(opts) {
     requestProductControlReview: _productControl.requestProductControlReview,
     applyProductSessionAction: _productControl.applyProductSessionAction,
     inspectProductSessionQueue: _productControl.inspectProductSessionQueue,
+    readVendorUsage: function (request) { return _sessions.readVendorUsage(request); },
     inspectProductSessionRuntime: _sessions.sessionRuntimeActions.inspect,
     inspectMateLifecycleRuntime: _sessions.sessionRuntimeActions.inspectLifecycle,
     inspectDelegatedFollowUp: _delegatedFollowUp.inspectDelegatedFollowUp,

package/lib/public/app.js

@@ -31,10 +31,11 @@ import { initMateMemory, renderMemoryList, hideMemory } from './modules/mate-mem
 import { initRewind, setRewindMode, showRewindModal, clearPendingRewindUuid, addRewindButton, onRewindComplete, onRewindError } from './modules/rewind.js';
 import { initNotifications, showDoneNotification, playDoneSound, isNotifAlertEnabled, isNotifSoundEnabled } from './modules/notifications.js';
 import { initInput, clearPendingImages, handleInputSync, autoResize, builtinCommands, sendMessage, hasSendableContent, setScheduleBtnDisabled, setScheduleDelayMs, clearScheduleDelay } from './modules/input.js';
-import { initQrCode, triggerShare } from './modules/qrcode.js';
+import { initQrCode } from './modules/qrcode.js';
 import { initFileBrowser, loadRootDirectory, reopenFileViewer, refreshTree, handleFsList, handleFsRead, handleDirChanged, refreshIfOpen, handleFileChanged, handleFileHistory, handleGitDiff, handleFileAt, getPendingNavigate, closeFileViewer, resetFileBrowser } from './modules/filebrowser.js';
 import { initGitPanel } from './modules/git-panel.js';
 import { initWorkerPaneLock } from './modules/worker-pane-lock.js';
+import { initPaneActivation } from './modules/pane-activation.js';
 import { initAutonomousRun } from './modules/autonomous-run.js';
 import { initLoopInterview } from './modules/loop-interview.js';
 import { initTerminal, openTerminal, closeTerminal, resetTerminals, handleTermList, handleTermCreated, handleTermOutput, handleTermResized, handleTermExited, handleTermClosed, sendTerminalCommand } from './modules/terminal.js';
@@ -45,6 +46,7 @@ import { initTheme, getThemeColor, getComputedVar, onThemeChange, getCurrentThem
 import { initTools, resetToolState, saveToolState, restoreToolState, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionResolved, markPermissionCancelled, renderElicitationRequest, markElicitationResolved, renderPlanBanner, renderPlanCard, handleTodoWrite, handleTaskCreate, handleTaskUpdate, startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, addTurnMeta, resetTurnMetaCost, enableMainInput, getTools, getPlanContent, setPlanContent, isPlanFilePath, getTodoTools, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, updateSubagentProgress, initSubagentStop, closeToolGroup, removeToolFromGroup } from './modules/tools.js';
 import { initServerSettings, updateSettingsStats, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved } from './modules/server-settings.js';
 import { initProjectSettings } from './modules/project-settings.js';
+import { initSettingsShell, openSettings } from './modules/settings-shell.js';
 import { initSkills, handleSkillInstalled, handleSkillUninstalled } from './modules/skills.js';
 import { initMcp } from './modules/mcp-ui.js';
 import { initScheduler, resetScheduler, handleLoopRegistryUpdated, handleScheduleRunStarted, handleScheduleRunFinished, handleLoopScheduled, openSchedulerToTab, isSchedulerOpen, closeScheduler, enterCraftingMode, exitCraftingMode, handleLoopRegistryFiles, getUpcomingSchedules } from './modules/scheduler.js';
@@ -62,6 +64,7 @@ import { initProjectLogs, closeProjectLogs } from './modules/project-logs.js';
 import { initProjectSwitcher } from './modules/project-switcher.js';
 import { initSplitView } from './modules/split-view.js';
 import { initPaneBridge } from './modules/pane-bridge.js';
+import { initPaneAppearanceBridge } from './modules/pane-appearance-bridge.js';
 import { initAdmin, checkAdminAccess } from './modules/admin.js';
 import { initSessionSearch, toggleSearch, closeSearch, isSearchOpen, handleFindInSessionResults, onHistoryPrepended as onSessionSearchHistoryPrepended } from './modules/session-search.js';
 import { initTooltips, registerTooltip } from './modules/tooltip.js';
@@ -71,10 +74,15 @@ import { initShellCommand } from './modules/shell-command.js';
 import { initConnection, connect as _connConnect, setStatus as _connSetStatus, scheduleReconnect as _connScheduleReconnect, cancelReconnect as _connCancelReconnect } from './modules/app-connection.js';
 import { processMessage as _msgProcessMessage } from './modules/app-messages.js';
 import { getWs as _getWsRef, setWs as _setWsRef } from './modules/ws-ref.js';
+import { initialProjectStart } from './modules/project-start-state.js';
+import { emptyFolderState } from './modules/project-start-folder-state.js';
+import { openAddProjectModal, initProjectStart } from './modules/project-start-dialog.js';
 import { initProjectsHub, showProjectsHub, hideProjectsHub } from './modules/projects-hub.js';
 import { initHomeSurfaceBoot } from './modules/home-surface-boot.js';
 import { rememberHomePrimarySurface } from './modules/home-surface.js';
 import { initRateLimit, handleRateLimitEvent as _rlHandleRateLimitEvent, updateRateLimitUsage as _rlUpdateRateLimitUsage, handleFastModeState as _rlHandleFastModeState, resetRateLimitState } from './modules/app-rate-limit.js';
+import { initVendorUsageOverview } from './modules/vendor-usage-overview.js';
+import { initGithubStar } from './modules/github-star.js';
 import { initCursors, handleRemoteCursorMove as _curHandleRemoteCursorMove, handleRemoteCursorLeave as _curHandleRemoteCursorLeave, handleRemoteSelection as _curHandleRemoteSelection, clearRemoteCursors as _curClearRemoteCursors, initCursorToggle } from './modules/app-cursors.js';
 import { initDefaultAi } from './modules/default-ai.js';
 import { requestDefaultVendor } from './modules/default-vendor.js';
@@ -96,7 +104,7 @@ import { initProjectMateCreationWorkspace } from './modules/project-mate-creatio
 import { initProjectDebatePlanningWorkspace } from './modules/project-debate-planning-workspace.js';
 import { initProjectSessionNavigation } from './modules/project-session-navigation.js';
 import { initPanels, updateConfigChip as _panUpdateConfigChip, getModelEffortLevels as _panGetModelEffortLevels, accumulateUsage as _panAccumulateUsage, updateUsagePanel as _panUpdateUsagePanel, resetUsage as _panResetUsage, toggleUsagePanel as _panToggleUsagePanel, formatTokens as _panFormatTokens, updateStatusPanel as _panUpdateStatusPanel, requestProcessStats as _panRequestProcessStats, toggleStatusPanel as _panToggleStatusPanel, accumulateContext as _panAccumulateContext, updateContextPanel as _panUpdateContextPanel, resetContext as _panResetContext, resetContextData as _panResetContextData, minimizeContext as _panMinimizeContext, expandContext as _panExpandContext, toggleContextPanel as _panToggleContextPanel, getContextView as _panGetContextView, renderCtxPopover as _panRenderCtxPopover, hideCtxPopover as _panHideCtxPopover, formatBytes as _panFormatBytes, formatUptime as _panFormatUptime, getModelSupportsEffort as _panGetModelSupportsEffort, getSessionUsage, setSessionUsage, getContextData, setContextData, setContextView as _panSetContextView, applyContextView as _panApplyContextView } from './modules/app-panels.js';
-import { initProjects, updateProjectList as _projUpdateProjectList, renderProjectList as _projRenderProjectList, renderTopbarPresence as _projRenderTopbarPresence, switchProject as _projSwitchProject, resetClientState as _projResetClientState, confirmRemoveProject as _projConfirmRemoveProject, handleRemoveProjectCheckResult as _projHandleRemoveProjectCheckResult, handleRemoveProjectResult as _projHandleRemoveProjectResult, openAddProjectModal as _projOpenAddProjectModal, closeAddProjectModal as _projCloseAddProjectModal, handleBrowseDirResult as _projHandleBrowseDirResult, handleAddProjectResult as _projHandleAddProjectResult, handleCloneProgress as _projHandleCloneProgress, showUpdateAvailable as _projShowUpdateAvailable, getCachedProjects, setCachedProjects, getCachedProjectCount, getCachedRemovedProjects, setCachedRemovedProjects } from './modules/app-projects.js';
+import { updateProjectList as _projUpdateProjectList, renderProjectList as _projRenderProjectList, renderTopbarPresence as _projRenderTopbarPresence, switchProject as _projSwitchProject, resetClientState as _projResetClientState, confirmRemoveProject as _projConfirmRemoveProject, handleRemoveProjectCheckResult as _projHandleRemoveProjectCheckResult, handleRemoveProjectResult as _projHandleRemoveProjectResult, showUpdateAvailable as _projShowUpdateAvailable, getCachedProjects, setCachedProjects, getCachedProjectCount, getCachedRemovedProjects, setCachedRemovedProjects } from './modules/app-projects.js';
 import { initRendering, addToMessages as _renAddToMessages, scrollToBottom as _renScrollToBottom, forceScrollToBottom as _renForceScrollToBottom, addUserMessage as _renAddUserMessage, getMsgTime as _renGetMsgTime, shouldGroupMessage as _renShouldGroupMessage, ensureAssistantBlock as _renEnsureAssistantBlock, addCopyHandler as _renAddCopyHandler, appendDelta as _renAppendDelta, flushStreamBuffer as _renFlushStreamBuffer, finalizeAssistantBlock as _renFinalizeAssistantBlock, addSystemMessage as _renAddSystemMessage, addConflictMessage as _renAddConflictMessage, addContextOverflowMessage as _renAddContextOverflowMessage, showClaudePreThinking as _renShowClaudePreThinking, showMatePreThinking as _renShowMatePreThinking, removeMatePreThinking as _renRemoveMatePreThinking, showSuggestionChips as _renShowSuggestionChips, hideSuggestionChips as _renHideSuggestionChips, getGhostSuggestion as _renGetGhostSuggestion, getTurnCounter, setTurnCounter, getPrependAnchor, setPrependAnchor, getActivityEl, setActivityEl, getIsUserScrolledUp, setIsUserScrolledUp, getStickyBottom, armStickyBottom, disarmStickyBottom } from './modules/app-rendering.js';
 import { initDm, openDm as _dmOpenDm, enterDmMode as _dmEnterDmMode, exitDmMode as _dmExitDmMode, handleMateCreatedInApp as _dmHandleMateCreatedInApp, buildMateInterviewPrompt as _dmBuildMateInterviewPrompt, updateMateIconStatus as _dmUpdateMateIconStatus, connectMateProject as _dmConnectMateProject, disconnectMateProject as _dmDisconnectMateProject, appendDmMessage as _dmAppendDmMessage, showDmTypingIndicator as _dmShowDmTypingIndicator, handleDmSend as _dmHandleDmSend } from './modules/app-dm.js';
 import { initMention, handleMentionStart, handleMentionStream, handleMentionDone, handleMentionError, handleMentionActivity, renderMentionUser, renderMentionResponse } from './modules/mention.js';
@@ -191,7 +199,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   function updateProjectList(msg) { _projUpdateProjectList(msg); }
   function renderTopbarPresence(serverUsers) { _projRenderTopbarPresence(serverUsers); }
   function renderProjectList() { _projRenderProjectList(); }
-  // projectListAddBtn listener -> modules/app-projects.js (initProjects)
+  // projectListAddBtn listener -> modules/project-start-dialog.js (initProjectStart)
 
   // Prevent Cmd+Z / Cmd+Shift+Z from triggering browser back/forward (Arc, etc.)
   // Always block browser default for Cmd+Z and manually invoke undo/redo via execCommand
@@ -279,6 +287,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   createStore({
     networkSettings: { loaded: false, busy: false, confirming: false, draft: "", saved: "", status: "", errorKind: "", requestId: 0 },
     vendorLoginBrowser: null,
+    githubStarCount: null,
     sharedBrowser: null,
     sharedBrowsers: [],
     mcpSkillsWorkbench: {},
@@ -295,6 +304,16 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     paneMode: paneMode,
     paneSessionId: paneSessionId,
     panePinPending: paneMode && !!paneSessionId,
+    paneCommittedBinding: null, panePendingBinding: null, paneReady: false, paneSuspended: false,
+    paneActivationGeneration: 0, paneActivationTimer: null, panePointerBinding: null, paneRichDrafts: {},
+    sessionRichDrafts: {},
+    sessionActionEpoch: 0, composerUploadingCount: 0, deferredSessionSwitch: null,
+    paneCallbackBinding: null, paneActionEvents: [], paneHeldKeys: {}, rewindAction: null, handoffAction: null,
+    authIdentityLoaded: false,
+    splitIdentityBlockedSocket: null,
+    splitIdentityHydrated: false,
+    paneActivationUnsupported: false,
+    paneBindingSessions: [],
     splitPanes: null,
     splitGroups: [],
     sessionFolders: null,
@@ -320,6 +339,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     replayingHistory: false,
     historyReplayBatch: null,
     pendingSessionEntryNavigation: null,
+    sessionEntryHighlight: null,
     sessionNavigationRequestId: null,
     projectName: projectName,
     cwd: "",
@@ -408,7 +428,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     projectListLoaded: false,
     projectsAccessLoaded: false,
     projectsHubRestoreRequested: false,
-    projectsShowGuide: false,
+    projectStart: initialProjectStart(),
+    projectStartFolder: emptyFolderState(),
     onboardingStep: 'welcome',
     onboardingIntent: null,
     currentProjectOwnerId: null,
@@ -633,6 +654,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     vendorInfo: {},
     // Rate-limit data is projected only for the displayed session/vendor.
     rateLimitState: {},
+    vendorUsageOverview: null,
+    vendorUsageOpen: null,
     currentMode: "default",
     effectivePermissionMode: null,
     permissionCapabilities: { auto: false, mcpOverride: false },
@@ -686,6 +709,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
 
   // --- Theme (module) ---
   initTheme();
+  initPaneAppearanceBridge();
 
   // --- Tooltips ---
   initTooltips();
@@ -777,8 +801,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       switch (action) {
         case "createMate": startClayMateCreation(); break;
         case "openSettings":
-          var sb = document.getElementById("server-settings-btn");
-          if (sb) sb.click();
+          openSettings();
           break;
         case "showHome": showHomeHub(); break;
       }
@@ -1150,7 +1173,10 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     basePath: basePath,
   });
 
-  // --- User settings (full-screen overlay) ---
+  // --- Unified full-screen settings shell (Personal, Project, Server panes) ---
+  initSettingsShell();
+
+  // --- User settings (personal pane) ---
   initUserSettings({
     basePath: basePath,
   });
@@ -1169,6 +1195,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       if (document.body) document.body.classList.add('is-multi-user');
     }
     if (d.user && d.user.id) { store.set({ myUserId: d.user.id }); requestDefaultVendor(); }
+    store.set({ authIdentityLoaded: true });
     store.set({ permissions: d.permissions || null, projectsAccessLoaded: true });
     if (d.mustChangePin) showForceChangePinOverlay();
     // Single-user mode: clear user strip skeletons immediately (no presence message will arrive)
@@ -1217,11 +1244,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
       }
     }
   }).catch(function () {});
-  // Hide server settings and update controls for non-admin users in multi-user mode
+  // Hide update controls for non-admin users in multi-user mode. The settings
+  // gear stays for everyone: Personal and Project settings are not admin-only,
+  // and the shell only offers Server settings to administrators.
   checkAdminAccess().then(function (isAdmin) {
     if (store.get('isMultiUserMode') && !isAdmin) {
-      var settingsBtn = document.getElementById("server-settings-btn");
-      if (settingsBtn) settingsBtn.style.display = "none";
       var updatePill = document.getElementById("update-pill-wrap");
       if (updatePill) updatePill.style.display = "none";
     }
@@ -1249,8 +1276,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
 
   // --- QR code ---
   initQrCode();
-  var sharePill = document.getElementById("share-pill");
-  if (sharePill) sharePill.addEventListener("click", triggerShare);
 
   // --- File browser ---
   initFileBrowser({
@@ -1266,6 +1291,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   initSharedBrowser();
   initStudioBridge();
   initWorkerPaneLock();
+  initPaneActivation();
 
   // --- Terminal ---
   initTerminal({
@@ -1433,11 +1459,6 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   function confirmRemoveProject(slug, name) { _projConfirmRemoveProject(slug, name); }
   function handleRemoveProjectCheckResult(msg) { _projHandleRemoveProjectCheckResult(msg); }
   function handleRemoveProjectResult(msg) { _projHandleRemoveProjectResult(msg); }
-  function openAddProjectModal() { _projOpenAddProjectModal(); }
-  function closeAddProjectModal() { _projCloseAddProjectModal(); }
-  function handleBrowseDirResult(msg) { _projHandleBrowseDirResult(msg); }
-  function handleAddProjectResult(msg) { _projHandleAddProjectResult(msg); }
-  function handleCloneProgress(msg) { _projHandleCloneProgress(msg); }
 
   // --- PWA install prompt -> modules/app-misc.js (set up in initMisc)
 
@@ -1453,9 +1474,11 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
 
   // --- Rate Limit module ---
   initRateLimit();
+  initVendorUsageOverview();
+  initGithubStar();
 
   // --- Projects module ---
-  initProjects();
+  initProjectStart();
 
   // --- Home Hub module ---
   initProjectMateNavigation();

package/lib/public/css/contextual-clay.css

@@ -50,7 +50,7 @@ html.contextual-pane-boot #connect-overlay { display: none !important; }
 #contextual-clay [data-conversation-notice]:not([hidden]) { display: flex; align-items: center; gap: 8px; flex-shrink: 0; padding: 6px 12px; border-bottom: 1px solid var(--border-subtle); font-size: 12px; color: var(--text-secondary); }
 #contextual-clay [data-conversation-notice] span { flex: 1; }
 #contextual-clay [data-conversation-notice] button { color: var(--accent); white-space: nowrap; }
-#contextual-clay [data-clay-expand] span, #contextual-clay [data-mate-new] span { display: none; }
+#contextual-clay [data-clay-expand] span { display: none; }
 @media (pointer: coarse) { #contextual-clay [data-mate-history] summary, #contextual-clay [data-mate-session-list] button { min-width: 44px; min-height: 44px; } }
 @starting-style {
   #contextual-clay[data-mode="popover"]:not([hidden]) { opacity: 0; transform: translateX(-4px); }
@@ -81,7 +81,7 @@ html.contextual-pane-boot #connect-overlay { display: none !important; }
 #contextual-clay button:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; color: var(--text); }
 #contextual-clay button .lucide { width: 15px; height: 15px; }
 #contextual-clay iframe { border: 0; flex: 1; width: 100%; min-height: 0; background: var(--bg); }
-#contextual-clay [data-clay-loading]:not([hidden]) { position: absolute; inset: 0; margin: 0; padding: 18px 12px; display: block; color: var(--text-muted); font-size: 13px; background: var(--bg); pointer-events: none; }
+#contextual-clay [data-clay-loading]:not([hidden]) { position: absolute; inset: 0; margin: 0; padding: 18px 12px; display: flex; z-index: 1; color: var(--text-muted); font-size: 13px; background: var(--bg); pointer-events: none; }
 body:is(.contextual-chat-pane, .contextual-clay-native) { --content-width: 760px; }
 body:is(.contextual-chat-pane, .contextual-clay-native) #messages { padding-top: 14px; }
 body:is(.contextual-chat-pane, .contextual-clay-native) #messages .msg-assistant .md-content,