clay-server 5.4.0 → 5.5.0-beta.2

package/lib/public/style.css

@@ -93,6 +93,7 @@
 
 @import url("css/project-settings-modal.css");
 @import url("css/settings-shell.css");
+@import url("css/agent-behavior.css");
 
 @import url("css/clay-tool-activity.css");
 

package/lib/sdk-bridge.js

@@ -1721,7 +1721,8 @@ function createSDKBridge(opts) {
     function needsCatalogRecovery(family, version) {
       return yoke.sessionTools.needsRecovery(sessionAdapter, session, family, version);
     }
-    var hasYouCatalog = sessionToolDefs.some(function (tool) { return tool.name === "search_user_knowledge"; });
+    // Any User Knowledge tool counts: the Me read and report settings are independent.
+    var hasYouCatalog = sessionToolDefs.some(function (tool) { return tool.name === "search_user_knowledge" || tool.name === "read_user_knowledge" || tool.name === "report_user_observation"; });
     var recoverYouTools = needsCatalogRecovery("knowledge", 1) && hasYouCatalog;
     var hasLinearCatalog = sessionToolDefs.some(function (tool) { return tool.name === "link_session_linear"; });
     var recoverLinearTools = needsCatalogRecovery("linear", 1) && hasLinearCatalog && canUseSessionTools(session) === true;
@@ -1906,7 +1907,7 @@ function createSDKBridge(opts) {
       clayBridgeToken: clayBridgeToken,
       linuxUser: linuxUser || undefined,
       env: sessionRuntimeEnv,
-      skillOptions: require("./session-skill-scope").bind(session, sm.sessions, getSessionSkillOptions(session), queryContextAvailable, usersModule.isMultiUser()),
+      skillOptions: require("./session-skill-scope").bind(session, sm.sessions, getSessionSkillOptions(session), queryContextAvailable, usersModule.isMultiUser(), typeof opts.getExcludedSkills === "function" ? opts.getExcludedSkills(session) : undefined),
       // appendSystemPrompt, NOT systemPrompt: a plain-string systemPrompt
       // REPLACES the entire Claude Code system prompt (sdk.d.ts:2096), which
       // would strip the driver session down to the two-sentence pair preset.

package/lib/server-agent-behavior-settings.js

@@ -0,0 +1,72 @@
+// Authenticated Personal "Agent behavior" settings: GET returns the account's
+// policy with the catalog the page renders; PUT merges validated changes and
+// answers with the saved policy only after it is persisted.
+var schema = require("./agent-behavior-schema");
+var ROUTE = "/api/user/agent-behavior";
+var MAX_BODY = 8192;
+
+function attachAgentBehaviorSettings(ctx) {
+  var users = ctx.users;
+  var getMultiUserFromReq = ctx.getMultiUserFromReq;
+  var opts = ctx.opts || {};
+
+  function send(res, status, body) {
+    res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+  }
+
+  function owner(req) {
+    if (!users.isMultiUser()) return { id: "default" };
+    var mu = getMultiUserFromReq(req);
+    return mu ? { id: mu.id } : null;
+  }
+
+  function read(user) {
+    if (users.isMultiUser()) return users.getAgentBehavior(user.id);
+    var config = typeof opts.onGetDaemonConfig === "function" ? opts.onGetDaemonConfig() : {};
+    return schema.normalize(config && config.agentBehavior);
+  }
+
+  function reply(res, policy, extra) {
+    send(res, 200, Object.assign({ ok: true, policy: policy, effective: schema.effective(policy), catalog: schema.catalog() }, extra || {}));
+  }
+
+  function handleRequest(req, res, fullUrl) {
+    if (fullUrl !== ROUTE || (req.method !== "GET" && req.method !== "PUT")) return false;
+    var user = owner(req);
+    if (!user) { send(res, 401, { error: "unauthorized" }); return true; }
+    if (req.method === "GET") { reply(res, read(user)); return true; }
+    var startedMulti = users.isMultiUser();
+    var body = "";
+    var tooLarge = false;
+    req.on("data", function (chunk) {
+      if (tooLarge) return;
+      body += chunk;
+      if (body.length > MAX_BODY) tooLarge = true;
+    });
+    req.on("end", function () {
+      if (tooLarge) { send(res, 413, { error: "Request too large" }); return; }
+      // The body arrives asynchronously: authentication may have been revoked,
+      // replaced or the account mode changed since the request started.
+      var current = owner(req);
+      if (!current || current.id !== user.id || users.isMultiUser() !== startedMulti) { send(res, 401, { error: "unauthorized" }); return; }
+      var data;
+      try { data = JSON.parse(body); } catch (error) { send(res, 400, { error: "Invalid request" }); return; }
+      if (!data || typeof data !== "object") { send(res, 400, { error: "Invalid request" }); return; }
+      var result;
+      if (users.isMultiUser()) result = users.updateAgentBehavior(user.id, data.changes);
+      else if (typeof opts.onUpdateAgentBehavior === "function") result = opts.onUpdateAgentBehavior(data.changes);
+      else result = { error: "Agent behavior cannot be saved on this server" };
+      if (result.error) { send(res, /^Could not save/.test(result.error) ? 500 : 400, { error: result.error }); return; }
+      if (typeof ctx.onAgentBehaviorChanged === "function") {
+        try { ctx.onAgentBehaviorChanged(user.id, result.policy); } catch (error) { /* The setting is already saved. */ }
+      }
+      reply(res, result.policy, data.requestId ? { requestId: String(data.requestId).slice(0, 80) } : null);
+    });
+    return true;
+  }
+
+  return { handleRequest: handleRequest, ROUTE: ROUTE };
+}
+
+module.exports = { attachAgentBehaviorSettings: attachAgentBehaviorSettings };

package/lib/server-settings.js

@@ -17,6 +17,7 @@ function attachSettings(ctx) {
   var appearanceSettings = require('./server-appearance-settings').attachAppearanceSettings(ctx);
   var notificationSettings = require('./server-notification-settings').attachNotificationSettings(ctx);
   var experimentalSettings = attachExperimentalSettings(ctx);
+  var agentBehaviorSettings = require("./server-agent-behavior-settings").attachAgentBehaviorSettings(ctx);
 
   function handleRequest(req, res, fullUrl) {
     if (contextualClaySettings.handleRequest(req, res, fullUrl)) return true;
@@ -24,6 +25,7 @@ function attachSettings(ctx) {
     if (appearanceSettings.handleRequest(req, res, fullUrl)) return true;
     if (notificationSettings.handleRequest(req, res, fullUrl)) return true;
     if (experimentalSettings.handleRequest(req, res, fullUrl)) return true;
+    if (agentBehaviorSettings.handleRequest(req, res, fullUrl)) return true;
     // Render historical avatar styles locally so profile seeds never leave Clay.
     if (req.method === "GET" && fullUrl === "/api/generated-avatar") {
       var avatarParams = new URL(req.url || fullUrl, "http://localhost").searchParams;

package/lib/server.js

@@ -503,6 +503,15 @@ function createServer(opts) {
     onCapsulesPreferenceChanged: function (userId) {
       if (toolsHandler) toolsHandler.refreshMateCatalogs(userId);
     },
+    onAgentBehaviorChanged: function (userId) {
+      projects.forEach(function (projectContext) {
+        try {
+          if (projectContext && typeof projectContext.refreshAgentBehavior === "function") projectContext.refreshAgentBehavior(userId);
+        } catch (error) {
+          console.error("[agent-behavior] Could not refresh a project's sessions:", error && error.message ? error.message : error);
+        }
+      });
+    },
   });
 
   function injectAppearanceSeed(html, appearance) {

package/lib/session-notes-mcp-server.js

@@ -4,17 +4,34 @@ var buildShape = require("./session-spawn-mcp-server").buildShape;
 var z;
 try { z = require("zod"); } catch (e) { z = null; }
 
-var MEMORY_CONTRACT =
-  "The sticky-note board persists across sessions and is a user-facing artifact shared with people and Clay agents, not private agent scratch space. " +
-  "Except for confirmed Issue link notes described below, default to not writing. Create a note proactively only when the user explicitly asks to remember or track something, or when all of these are true: it will remain useful after the current task and session, it is not already adequately recorded in the repository, an Issue, or another note, and the user would likely be glad to find it on the board a week later. " +
-  "Use Sticky Notes for preferences, reminders, undeveloped ideas, or an explicit request to remember something; confirmed Issues also get short link notes as described below. For concrete actionable bugs, improvements, or deferred implementation, an authorized Project Driver should use Project Issues. If you lack Issues authority, route the work through an eligible Project Driver. Check active notes first when a duplicate is plausible. " +
-  require("./issues-filing-guidance").NOTE_GUIDANCE +
+var BOARD_INTRO = "The sticky-note board persists across sessions and is a user-facing artifact shared with people and Clay agents, not private agent scratch space. ";
+var NEVER_CREATE =
   "Never create a note merely because work is important, lengthy, spans agents or restarts, or might help another agent. Do not record completed work, implementation details, test results, investigation logs, transient blockers, conversation summaries, or announcements of your own activity. When uncertain, do not write. " +
   "One exception: when the user explicitly asks for a working checklist, keep that one native checklist note and check its items off as they are done; never start a checklist the user did not ask for. " +
   "Updates are visible too: update only when durable state materially changes. " +
   "A note is an attention item, so finishing it means closing it, never erasing it: call close_note once the thing it is asking for is done, and the note leaves the active board while the record stays and can be reopened. Do not turn a note into a completion log instead of closing it. " +
   "Put a concise plain-text title on the first line, stay focused on one topic, and include only the context needed for future action.";
 
+// options.linked: keep the confirmed-Issue link note exception (default true).
+// options.mode "request": write only when the user's message asks.
+function memoryContract(options) {
+  var linked = !options || options.linked !== false;
+  if (options && options.mode === "request") {
+    return BOARD_INTRO +
+      "The user has set Sticky Notes to On request: create, update or close a note only when the user's message asks you to remember, track, change or close something on the board. Do not add notes on your own initiative, including notes that link Issues. Check active notes first when a duplicate is plausible. " +
+      NEVER_CREATE;
+  }
+  return BOARD_INTRO +
+    (linked ? "Except for confirmed Issue link notes described below, default to not writing. " : "Default to not writing. ") +
+    "Create a note proactively only when the user explicitly asks to remember or track something, or when all of these are true: it will remain useful after the current task and session, it is not already adequately recorded in the repository, an Issue, or another note, and the user would likely be glad to find it on the board a week later. " +
+    "Use Sticky Notes for preferences, reminders, undeveloped ideas, or an explicit request to remember something; " + (linked ? "confirmed Issues also get short link notes as described below. " : "") +
+    "For concrete actionable bugs, improvements, or deferred implementation, an authorized Project Driver should use Project Issues. If you lack Issues authority, route the work through an eligible Project Driver. Check active notes first when a duplicate is plausible. " +
+    (linked ? require("./issues-filing-guidance").NOTE_GUIDANCE : "") +
+    NEVER_CREATE;
+}
+
+var MEMORY_CONTRACT = memoryContract();
+
 var CHECKLIST_USAGE =
   " Native checklists: pass checklist: true to create one. The first line is the title and every later non-empty, non-heading line is an item; write items as '- [ ] task' and '- [x] task' for items already done. " +
   "To check or uncheck items, call list_notes, then pass id, that note's current version and checks with the exact item keys it returned. " +
@@ -27,7 +44,9 @@ var CHECK_ENTRY = z ? z.object({
   checked: z.boolean().describe("true marks the item done; false marks it not done."),
 }) : null;
 
-function getToolDefs(handlers) {
+function getToolDefs(handlers, options) {
+  var MEMORY_CONTRACT = memoryContract(options);
+  var linked = !options || options.linked !== false;
   return [
     {
       name: "list_notes",
@@ -39,7 +58,7 @@ function getToolDefs(handlers) {
     },
     {
       name: "write_note",
-      description: MEMORY_CONTRACT + " Create a new note, or update an existing note by id. For notes other than confirmed Issue link notes and a working checklist the user explicitly asked for, apply this test: would the user likely choose to keep this visible on their board next week? If the answer is unclear, do not call this tool. The 20000-character limit is an abuse guard, not a target." + CHECKLIST_USAGE,
+      description: MEMORY_CONTRACT + " Create a new note, or update an existing note by id. For notes other than " + (linked ? "confirmed Issue link notes and " : "") + "a working checklist the user explicitly asked for, apply this test: would the user likely choose to keep this visible on their board next week? If the answer is unclear, do not call this tool. The 20000-character limit is an abuse guard, not a target." + CHECKLIST_USAGE,
       inputSchema: buildShape({
         id: { type: "string", description: "Existing note id to update. Omit to create a note." },
         text: { type: "string", description: "User-facing sticky-note text with a concise title on the first line and only durable, action-relevant context below it. Required when creating; omit on update to keep the current text." },
@@ -83,5 +102,6 @@ module.exports = {
   // receive the current schema through exact-query recovery.
   CATALOG_VERSION: 2,
   MEMORY_CONTRACT: MEMORY_CONTRACT,
+  memoryContract: memoryContract,
   getToolDefs: getToolDefs,
 };

package/lib/session-skill-scope.js

@@ -1,7 +1,7 @@
 // Bind personal instruction reads to the existing live session/query authority.
-function bind(session, sessions, options, valid, multiUser) {
+function bind(session, sessions, options, valid, multiUser, excludeSkills) {
   var owner = session.ownerId || null;
-  return Object.assign({}, options, { isAvailable: function() {
+  return Object.assign({}, options, excludeSkills && excludeSkills.length ? { excludeSkills: excludeSkills } : {}, { isAvailable: function() {
     if (!sessions || typeof sessions.get !== "function" || sessions.get(session.localId) !== session || !valid() || (session.ownerId || null) !== owner || session.youCurator || session.sessionVisibility === "shared" || session._mcpForeignInput) return false;
     if (owner) return require("./mcp-session-access").canUsePersonalConnections(session, sessions);
     return !multiUser && !session.delegated && !session._delegatedBy && !session._pairDelegation

package/lib/users-agent-behavior-preferences.js

@@ -0,0 +1,38 @@
+// Per-account storage for the Personal "Agent behavior" policy. Only explicit
+// choices are stored, so an account with no record keeps today's behavior.
+var schema = require("./agent-behavior-schema");
+
+function attachAgentBehaviorPreferences(deps) {
+  var loadUsers = deps.loadUsers;
+  var saveUsers = deps.saveUsers;
+
+  function find(data, userId) {
+    for (var i = 0; i < data.users.length; i++) {
+      if (data.users[i].id === userId) return data.users[i];
+    }
+    return null;
+  }
+
+  function getAgentBehavior(userId) {
+    var user = find(loadUsers(), userId);
+    return schema.normalize(user && user.agentBehavior);
+  }
+
+  // Merge into the stored explicit choices so two tabs changing different
+  // settings never overwrite each other.
+  function updateAgentBehavior(userId, changes) {
+    var checked = schema.validateChanges(changes);
+    if (checked.error) return { error: checked.error };
+    var data = loadUsers();
+    var user = find(data, userId);
+    if (!user) return { error: "User not found" };
+    var explicit = Object.assign({}, schema.explicit(user.agentBehavior), checked.value);
+    user.agentBehavior = explicit;
+    try { saveUsers(data); } catch (error) { return { error: "Could not save agent behavior" }; }
+    return { ok: true, policy: schema.normalize(explicit) };
+  }
+
+  return { getAgentBehavior: getAgentBehavior, updateAgentBehavior: updateAgentBehavior };
+}
+
+module.exports = { attachAgentBehaviorPreferences: attachAgentBehaviorPreferences };

package/lib/users.js

@@ -11,6 +11,7 @@ var { attachHomeDockPreferences } = require("./users-home-dock-preferences");
 var { attachHomeSurfacePreferences } = require("./users-home-surface-preferences");
 var { attachSessionFolderPreferences } = require("./users-session-folder-preferences");
 var { attachExperimentalPreferences } = require("./users-experimental-preferences");
+var { attachAgentBehaviorPreferences } = require("./users-agent-behavior-preferences");
 var { attachScheduledTaskPreferences } = require("./users-scheduled-task-preferences");
 var { attachDefaultAiPreferences } = require("./users-default-ai-preferences");
 var { attachDefaultVendorPreferences } = require("./users-default-vendor-preferences");
@@ -340,6 +341,7 @@ var homeDockPreferences = attachHomeDockPreferences({ loadUsers: loadUsers, save
 var homeSurfacePreferences = attachHomeSurfacePreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var sessionFolderPreferences = attachSessionFolderPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var experimentalPreferences = attachExperimentalPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
+var agentBehaviorPreferences = attachAgentBehaviorPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var scheduledTaskPreferences = attachScheduledTaskPreferences({ loadUsers: loadUsers, saveUsers: saveUsers });
 var defaultAiPreferences = attachDefaultAiPreferences({ loadUsers: loadUsers, saveUsers: saveUsers, isMultiUser: auth.isMultiUser });
 var defaultVendorPreferences = attachDefaultVendorPreferences({ loadUsers: loadUsers, saveUsers: saveUsers, isMultiUser: auth.isMultiUser });
@@ -394,6 +396,8 @@ var setTerminalFont = preferences.setTerminalFont;
 var setMateOnboarded = preferences.setMateOnboarded;
 var getCapsulesEnabled = experimentalPreferences.getCapsulesEnabled;
 var setCapsulesEnabled = experimentalPreferences.setCapsulesEnabled;
+var getAgentBehavior = agentBehaviorPreferences.getAgentBehavior;
+var updateAgentBehavior = agentBehaviorPreferences.updateAgentBehavior;
 var getHomeDockPreference = homeDockPreferences.getHomeDockPreference;
 var setHomeDockPreference = homeDockPreferences.setHomeDockPreference;
 var getHomeSurfacePreference = homeSurfacePreferences.getHomeSurfacePreference;
@@ -476,6 +480,8 @@ module.exports = {
   setMatesEnabled: setMatesEnabled,
   getCapsulesEnabled: getCapsulesEnabled,
   setCapsulesEnabled: setCapsulesEnabled,
+  getAgentBehavior: getAgentBehavior,
+  updateAgentBehavior: updateAgentBehavior,
   getToolPalettes: getToolPalettes,
   setToolPalette: setToolPalette,
   getTerminalFont: getTerminalFont,

package/lib/yoke/adapters/claude.js

@@ -93,7 +93,7 @@ function attachPreToolUsePolicy(options, policy) {
   }]);
 }
 
-function getSharedSkillPlugins(homeDir, existingPlugins, cwd, env) {
+function getSharedSkillPlugins(homeDir, existingPlugins, cwd, env, excludeSkills) {
   var plugins = Array.isArray(existingPlugins) ? existingPlugins.slice() : [];
   // undefined means normal in-process Claude and may use the configured
   // daemon home; null means a failed mapped-user resolution and must fail
@@ -112,7 +112,11 @@ function getSharedSkillPlugins(homeDir, existingPlugins, cwd, env) {
   for (var i = 0; i < roots.length; i++) {
     if (roots[i].source === "codex-user" || roots[i].source === "claude-user" || roots[i].source === "claude-project") continue;
     var rootId = crypto.createHash("sha256").update(roots[i].source + "\0" + path.resolve(roots[i].path)).digest("hex").slice(0, 12);
-    var sharedPath = skillDiscovery.ensureClaudeCodexPlugin({ homeDir: effectiveHome, source: roots[i].path, name: "shared-" + roots[i].source + "-" + rootId });
+    var bridgeOpts = { homeDir: effectiveHome, source: roots[i].path, name: "shared-" + roots[i].source + "-" + rootId };
+    // Per-query exclusions (Personal Agent behavior) apply only to bundled skills.
+    var sharedPath = roots[i].source === "clay-builtin" && Array.isArray(excludeSkills) && excludeSkills.length
+      ? skillDiscovery.ensureFilteredClaudePlugin(Object.assign({ exclude: excludeSkills }, bridgeOpts))
+      : skillDiscovery.ensureClaudeCodexPlugin(bridgeOpts);
     if (sharedPath) plugins.push({ type: "local", path: sharedPath, skipMcpDiscovery: true });
   }
   return plugins;
@@ -143,7 +147,7 @@ function buildWorkerQueryOptions(queryOpts, claudeOpts, workerCwd) {
       queryOpts.systemPromptSnapshot
     );
   }
-  queryOptions.plugins = queryOpts.skipSkills ? (claudeOpts.plugins || []) : getSharedSkillPlugins(claudeOpts.originalHome, claudeOpts.plugins, workerCwd, queryOpts.env);
+  queryOptions.plugins = queryOpts.skipSkills ? (claudeOpts.plugins || []) : getSharedSkillPlugins(claudeOpts.originalHome, claudeOpts.plugins, workerCwd, queryOpts.env, queryOpts.skillOptions && queryOpts.skillOptions.excludeSkills);
   if (queryOpts.toolServerDescriptors) queryOptions.mcpServerDescriptors = queryOpts.toolServerDescriptors;
   if (queryOpts.onUserDialog) queryOptions.supportedDialogKinds = SUPPORTED_DIALOG_KINDS;
   queryOptions.perTaskStopAffordance = PER_TASK_STOP_AFFORDANCE;
@@ -1832,7 +1836,7 @@ function createClaudeAdapter(opts) {
       if (co.allowDangerouslySkipPermissions) sdkOptions.allowDangerouslySkipPermissions = true;
       if (co.resumeSessionAt) sdkOptions.resumeSessionAt = co.resumeSessionAt;
       if (co.settings) sdkOptions.settings = co.settings;
-      sdkOptions.plugins = queryOpts.skipSkills ? (co.plugins || []) : getSharedSkillPlugins(co.originalHome, co.plugins, queryOpts.cwd || _cwd, queryOpts.env);
+      sdkOptions.plugins = queryOpts.skipSkills ? (co.plugins || []) : getSharedSkillPlugins(co.originalHome, co.plugins, queryOpts.cwd || _cwd, queryOpts.env, queryOpts.skillOptions && queryOpts.skillOptions.excludeSkills);
 
       claudeModelSwitch.attach(sdkOptions, queryOpts.onModelSwitch);
       var rawQuery = sdk.query({ prompt: mq, options: sdkOptions });

package/lib/yoke/skill-discovery.js

@@ -129,7 +129,10 @@ function discoverSkills(cwd, opts) {
     } catch (error) { console.error("[skills] Clay-only skill migration failed: " + error.message); }
   }
   for (var i = 0; i < roots.length; i++) scanRoot(roots[i].path, roots[i].source, merged, opts);
-  return Object.keys(merged).sort().map(function(name) { return merged[name]; });
+  // Per-session exclusions (Personal Agent behavior). Only names a caller lists
+  // are removed; nothing is excluded by default.
+  var excluded = opts && Array.isArray(opts.excludeSkills) ? opts.excludeSkills : [];
+  return Object.keys(merged).sort().filter(function(name) { return excluded.indexOf(name) === -1; }).map(function(name) { return merged[name]; });
 }
 
 function indexSkills(skills) {
@@ -244,7 +247,49 @@ function ensureClaudeCodexPlugin(opts) {
   return pluginDir;
 }
 
+// A per-exclusion plugin for the Claude provider: its skills directory is a real
+// directory of symlinks to every skill in source except the excluded names. The
+// unfiltered bridge is never modified; each distinct exclusion set gets its own
+// deterministic directory under the same bridge root.
+function ensureFilteredClaudePlugin(opts) {
+  var homeDir = opts.homeDir || defaultHomeDir();
+  var excluded = (opts.exclude || []).slice().sort();
+  var tag = require("crypto").createHash("sha256").update(excluded.join("\0")).digest("hex").slice(0, 10);
+  var bridgeName = (opts.name || "shared") + "-without-" + tag;
+  var entries;
+  try { entries = fs.readdirSync(opts.source, { withFileTypes: true }); } catch (e) { return null; }
+  var pluginDir = path.join(homeDir, ".clay", "skill-bridge", bridgeName);
+  var skillsDir = path.join(pluginDir, "skills");
+  try {
+    fs.mkdirSync(path.join(pluginDir, ".claude-plugin"), { recursive: true });
+    fs.writeFileSync(path.join(pluginDir, ".claude-plugin", "plugin.json"), JSON.stringify({ name: bridgeName, version: "1.0.0", description: "Shared skills provided by Clay (filtered)" }, null, 2) + "\n", { mode: 0o600 });
+    var skillsStat = lstatOrNull(skillsDir);
+    if (skillsStat && (!skillsStat.isDirectory() || skillsStat.isSymbolicLink())) return null;
+    if (!skillsStat) fs.mkdirSync(skillsDir);
+    var wanted = {};
+    entries.forEach(function (entry) {
+      if (excluded.indexOf(entry.name) !== -1 || !(entry.isDirectory() || entry.isSymbolicLink())) return;
+      wanted[entry.name] = path.join(opts.source, entry.name);
+    });
+    fs.readdirSync(skillsDir).forEach(function (name) {
+      var stale = lstatOrNull(path.join(skillsDir, name));
+      if (!wanted[name] && stale && stale.isSymbolicLink()) fs.unlinkSync(path.join(skillsDir, name));
+    });
+    Object.keys(wanted).forEach(function (name) {
+      var link = path.join(skillsDir, name);
+      var existing = lstatOrNull(link);
+      if (existing) { if (existing.isSymbolicLink() && path.resolve(skillsDir, fs.readlinkSync(link)) === path.resolve(wanted[name])) return; return; }
+      fs.symlinkSync(wanted[name], link, "dir");
+    });
+  } catch (e) {
+    console.error("[yoke/skills] Failed to create filtered Claude skill bridge:", e.message);
+    return null;
+  }
+  return pluginDir;
+}
+
 module.exports = {
+  ensureFilteredClaudePlugin: ensureFilteredClaudePlugin,
   buildSkillIndex: buildSkillIndex,
   discoverSkills: discoverSkills,
   ensureClaudeCodexPlugin: ensureClaudeCodexPlugin,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "5.4.0",
+  "version": "5.5.0-beta.2",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js"

package/lib/public/pane-assets/chunk-46OOGVHU.js

@@ -1 +0,0 @@
-import{hc as a,ic as b,jc as c,kc as d}from"./chunk-FQQMXMH7.js";import"./chunk-U5GH2UJM.js";import"./chunk-JIV7O5GN.js";import"./chunk-YE45RR7W.js";import"./chunk-42C2CZEP.js";import"./chunk-XI2DJM4H.js";import"./chunk-R7QVVFUG.js";import"./chunk-E6NRPGVH.js";import"./chunk-VZ2OKDAO.js";export{c as closeDebatesWorkbench,a as handleDebatesWorkbenchState,d as initDebatesWorkbench,b as openDebatesWorkbench};

package/lib/public/pane-assets/chunk-4OJW4FF4.js

@@ -1 +0,0 @@
-import{l as a,m as b,n as c,o as d}from"./chunk-FQQMXMH7.js";import"./chunk-U5GH2UJM.js";import"./chunk-JIV7O5GN.js";import"./chunk-YE45RR7W.js";import"./chunk-42C2CZEP.js";import"./chunk-XI2DJM4H.js";import"./chunk-R7QVVFUG.js";import"./chunk-E6NRPGVH.js";import"./chunk-VZ2OKDAO.js";export{a as closeLinear,c as handleLinearResult,d as initLinearPanel,b as openLinear};

package/lib/public/pane-assets/chunk-F7VIE6FJ.js

@@ -1 +0,0 @@
-import{g as a,h as b,i as c}from"./chunk-42C2CZEP.js";import"./chunk-XI2DJM4H.js";import"./chunk-R7QVVFUG.js";import"./chunk-E6NRPGVH.js";import"./chunk-VZ2OKDAO.js";export{a as closeWireframe,b as openWireframe,c as restoreWireframeWorkbench};

package/lib/public/pane-assets/chunk-FCJYJLVZ.js

@@ -1 +0,0 @@
-import{Ra as a,Sa as b,Ta as c,Ua as d,Va as e}from"./chunk-FQQMXMH7.js";import"./chunk-U5GH2UJM.js";import"./chunk-JIV7O5GN.js";import"./chunk-YE45RR7W.js";import"./chunk-42C2CZEP.js";import"./chunk-XI2DJM4H.js";import"./chunk-R7QVVFUG.js";import"./chunk-E6NRPGVH.js";import"./chunk-VZ2OKDAO.js";export{c as closeYou,d as handleYouMessage,e as initYou,b as openYou,a as sendYou};

package/lib/public/pane-assets/chunk-FEJDEXOW.js

@@ -1 +0,0 @@
-import{p as a,q as b,r as c,s as d,t as e,u as f}from"./chunk-FQQMXMH7.js";import"./chunk-U5GH2UJM.js";import"./chunk-JIV7O5GN.js";import"./chunk-YE45RR7W.js";import"./chunk-42C2CZEP.js";import"./chunk-XI2DJM4H.js";import"./chunk-R7QVVFUG.js";import"./chunk-E6NRPGVH.js";import"./chunk-VZ2OKDAO.js";export{c as closeIssues,f as handleIssuesMessage,e as initIssues,d as openIssues,b as refreshGithubIssue,a as requestIssue};