clay-server 5.5.0-beta.2 → 5.5.0-beta.3

package/lib/worktree-ref-transaction.js

@@ -0,0 +1,36 @@
+// Fixed prepared Git ref transaction; validation runs while Git owns the ref locks.
+var spawn = require('child_process').spawn;
+var wrap = require('./os-users').wrapSpawnAsUser;
+function remove(root, input, os, validate) {
+  return new Promise(function (resolve, reject) {
+    var env = Object.assign({}, process.env, { GIT_TERMINAL_PROMPT: '0' });
+    if (os && os.home) env.HOME = os.home;
+    if (os && os.user) { env.USER = os.user; env.LOGNAME = os.user; }
+    var options = { cwd: root, env: env, stdio: ['pipe', 'pipe', 'pipe'] };
+    if (os) { options.uid = os.uid; options.gid = os.gid; }
+    var wrapped = wrap('git', ['update-ref', '--stdin'], options);
+    var child = spawn(wrapped.command, wrapped.args, wrapped.options);
+    var output = '', detail = '', failure = null, prepared = false, committed = false;
+    var timer = setTimeout(function () { failure = new Error('Local branch transaction timed out; inspect the branch before recovery.'); child.kill('SIGTERM'); }, 15000);
+    child.on('error', function (error) { failure = error; });
+    child.stdin.on('error', function (error) { failure = failure || error; });
+    child.stderr.on('data', function (chunk) { detail = (detail + chunk).slice(-4096); });
+    child.stdout.on('data', function (chunk) {
+      output = (output + chunk).slice(-4096);
+      if (!prepared && output.indexOf('prepare: ok\n') >= 0) {
+        prepared = true;
+        if (failure) { child.stdin.end('abort\n'); return; }
+        try { validate(); child.stdin.end('commit\n'); }
+        catch (error) { failure = error; child.stdin.end('abort\n'); }
+      }
+      if (output.indexOf('commit: ok\n') >= 0) committed = true;
+    });
+    child.on('close', function (code) {
+      clearTimeout(timer);
+      if (failure || code !== 0 || !committed) reject(failure || new Error('Local branch transaction was not confirmed: ' + detail.trim()));
+      else resolve(true);
+    });
+    child.stdin.write(input);
+  });
+}
+module.exports = { remove: remove };

package/lib/yoke/adapters/antigravity.js

@@ -379,6 +379,9 @@ function createAntigravityQueryHandle(binaryPath, queryOpts, onFinished) {
       endEvents();
     },
   };
+  handle.forceStop = require('../process-force-termination').create(function () { return processHandle; }, function () { return processExited; }, function () {
+    inputEnded = true; messages = []; if (killTimer) clearTimeout(killTimer); endEvents();
+  }, queryOpts._forceTerminationOptions);
   removeAbort = bindAbort(queryOpts.abortController, function () { handle.abort(); });
   return handle;
 }

package/lib/yoke/force-termination.js

@@ -0,0 +1,26 @@
+// A declaration and an actual exact-query method are both required.
+var UNSUPPORTED = 'Force termination is not yet supported for this vendor';
+function support(provider, handle) {
+  var declared = require('./provider-contract').resolve(provider).forceTermination === true;
+  if (!declared) return { supported: false, reason: UNSUPPORTED };
+  if (!handle || typeof handle.forceStop !== 'function') return { supported: false, reason: 'Force termination is unavailable for this session runtime' };
+  return { supported: true, scope: 'query-runtime', externalEffects: 'unconfirmed' };
+}
+function operation(provider, handle) {
+  var state = support(provider, handle);
+  if (!state.supported) throw new Error(state.reason);
+  var method = handle.forceStop;
+  return function () {
+    var timer, effect;
+    try { effect = method.call(handle); } catch (error) { effect = Promise.reject(error); }
+    return Promise.race([Promise.resolve(effect), new Promise(function (resolve) {
+      timer = setTimeout(function () { resolve(null); }, 6000);
+    })]).then(function (result) {
+      if (!result || result.status !== 'terminated' || result.scope !== 'query-runtime') {
+        return { status: 'unconfirmed', scope: 'query-runtime', externalEffects: 'unconfirmed' };
+      }
+      return { status: 'terminated', scope: 'query-runtime', externalEffects: 'unconfirmed' };
+    }).finally(function () { clearTimeout(timer); });
+  };
+}
+module.exports = { support: support, operation: operation, UNSUPPORTED: UNSUPPORTED };

package/lib/yoke/interface.js

@@ -78,6 +78,20 @@ var INITIALIZE_TIMEOUT_MS = 90000;
  *   .createToolServer(def): ToolServer (opaque)
  *   .createQuery(opts): QueryHandle
  *
+ * Force termination (independent of ordinary abort/close):
+ *   providerContract.forceTermination === true (or registry declaration), AND
+ *   QueryHandle.forceStop(): Promise<{status: "terminated"|"unconfirmed",
+ *     scope: "query-runtime", externalEffects: "unconfirmed"}>.
+ * Missing/unknown declarations or missing methods mean unsupported. Never infer
+ * support from abort, close, stopAndWait, kill delivery or iterator completion.
+ * forceStop must synchronously fence new query input/startup, terminate only the
+ * runtime owned by this query, preserve sibling/shared provider processes, and
+ * settle within a bounded deadline. "terminated" requires observed exact runtime
+ * exit (or proof it never started/already exited); acknowledgements are not proof.
+ * Detached commands, descendants and external requests remain unconfirmed.
+ * Host authorization, all-target preflight, generation fencing, queue pause and
+ * explicit resumption still apply. No uncertain work may replay automatically.
+ *
  * Optional query orchestration contract (.queryContract):
  *   toolTransport: "sdk-mcp" | "dynamic" | "stdio-mcp" (absent: unsupported)
  *   catalogLifetime: "query" | "conversation"

package/lib/yoke/process-force-termination.js

@@ -0,0 +1,24 @@
+// Terminate only the child owned by this query; never a shared server or PID scan.
+function create(getProcess, hasExited, stopInput, options) {
+  var pending = null;
+  return function forceStop() {
+    if (pending) return pending;
+    stopInput();
+    pending = new Promise(function (resolve) {
+      var child = getProcess(), timer;
+      function finish(terminated) {
+        clearTimeout(timer);
+        if (child) child.removeListener('exit', exited);
+        resolve({ status: terminated ? 'terminated' : 'unconfirmed', scope: 'query-runtime', externalEffects: 'unconfirmed' });
+      }
+      function exited() { finish(true); }
+      if (!child || hasExited()) { finish(true); return; }
+      child.once('exit', exited);
+      timer = setTimeout(function () { finish(false); }, options && options.timeoutMs || 5000);
+      try { if (child.kill('SIGKILL') === false) finish(false); }
+      catch (error) { finish(false); }
+    });
+    return pending;
+  };
+}
+module.exports = { create: create };

package/lib/yoke/provider-install-recipes.js

@@ -0,0 +1,20 @@
+// Registry-owned installation contracts. Sources verified 2026-10-23.
+// No caller-supplied executable, package, URL, flags or shell input is accepted.
+var recipes = {
+  claude: Object.freeze({ revision: 'claude-native-1', source: 'https://code.claude.com/docs/en/setup',
+    command: 'curl -fsSL https://claude.ai/install.sh | bash',
+    effects: 'Downloads and runs the official native installer in your runtime account. Writes ~/.local/bin/claude and ~/.local/share/claude. Native installations auto-update.' }),
+  codex: Object.freeze({ revision: 'codex-npm-user-1', source: 'https://developers.openai.com/cookbook/examples/codex/using_goals_in_codex',
+    command: 'npm install --global --prefix "$HOME/.local" --cache "$HOME/.cache/clay-provider-npm" --userconfig /dev/null --globalconfig /dev/null --registry https://registry.npmjs.org @openai/codex@latest',
+    effects: 'Downloads the official npm package and runs its installation scripts as your runtime account. Requires Node.js and npm on the runtime PATH. Writes ~/.local and ~/.cache/clay-provider-npm; does not edit shell profiles. ~/.local/bin must be on the runtime PATH.',
+    configurationSource: 'https://docs.npmjs.com/cli/v11/using-npm/config/' })
+};
+function eligible(recipe, identity) {
+  var os = require('os');
+  if (!recipe || Object.keys(recipes).every(function (id) { return recipes[id] !== recipe; })) return 'No reviewed installation recipe is registered for this provider.';
+  if (['linux','darwin'].indexOf(process.platform) < 0 || ['x64','arm64'].indexOf(process.arch) < 0) return 'Reviewed installation supports only macOS or Linux on x64 or ARM64.';
+  if (process.platform === 'darwin' && Number(os.release().split('.')[0]) < 22) return 'Reviewed installation requires macOS 13 or later.';
+  if (!identity || !Number.isInteger(identity.uid) || identity.uid <= 0 || !Number.isInteger(identity.gid) || !identity.user || typeof identity.home !== 'string' || identity.home[0] !== '/' || identity.home === '/' || /[\r\n\0]/.test(identity.home)) return 'A non-root runtime OS account with an absolute HOME is required. Ask the server operator to complete setup.';
+  return '';
+}
+module.exports = { claude: recipes.claude, codex: recipes.codex, eligible: eligible };

package/lib/yoke/vendor-registry.js

@@ -10,6 +10,8 @@ var EFFORT_ORDER = ["minimal", "low", "medium", "high", "xhigh", "max", "ultra"]
 // sessionBoundTools gates whether per-session MCP tool mounting reaches a vendor's process.
 var VENDOR_REGISTRY = {
   claude: {
+    setupUrl: "https://code.claude.com/docs/en/setup",
+    installRecipe: require("./provider-install-recipes").claude,
     readSessionHistory: require("./cli-sessions").readCliSessionHistory,
     terminalResumeCommand: "claude --resume",
     planPathSegments: [".claude/plans/"],
@@ -47,6 +49,8 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: true,
   },
   codex: {
+    setupUrl: "https://learn.chatgpt.com/docs/codex/cli",
+    installRecipe: require("./provider-install-recipes").codex,
     credentialDirectories: [".codex"],
     preferredModelFamilies: ["astra", "sol", "gpt", "o"],
     classifyError: require("./providers/codex-errors").classify,
@@ -78,6 +82,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: true,
   },
   muse: {
+    setupUrl: "https://dev.meta.ai/docs/overview",
     displayName: "Muse Code",
     loginCommand: "muse",
     binaryName: "muse",
@@ -96,6 +101,8 @@ var VENDOR_REGISTRY = {
     configuration: { auto: true, permissionModes: [{ value: "default", label: "Ask" }] },
   },
   antigravity: {
+    setupUrl: "https://www.antigravity.google/docs/getting-started?tab=cli",
+    forceTermination: true,
     resolveExecutable: require("./providers/antigravity-executable").resolve,
     mapQueryOptions: require("./options/antigravity").map,
     displayName: "Antigravity CLI",
@@ -110,6 +117,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   opencode: {
+    setupUrl: "https://opencode.ai/docs/",
     resolveExecutable: require("./discovery").acpResolver("opencode"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "OpenCode",
@@ -124,6 +132,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   kimi: {
+    setupUrl: "https://www.kimi.com/code/docs/en/kimi-code-cli/guides/getting-started.html",
     resolveExecutable: require("./discovery").acpResolver("kimi"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "Kimi Code",
@@ -138,6 +147,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   grok: {
+    setupUrl: "https://docs.x.ai/build/overview",
     resolveExecutable: require("./discovery").acpResolver("grok"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "Grok Build",
@@ -152,6 +162,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   copilot: {
+    setupUrl: "https://docs.github.com/en/copilot/how-tos/copilot-cli/set-up-copilot-cli/install-copilot-cli",
     resolveExecutable: require("./discovery").acpResolver("copilot"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "GitHub Copilot CLI",
@@ -166,6 +177,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   qwen: {
+    setupUrl: "https://qwenlm.github.io/qwen-code-docs/en/users/quickstart/",
     resolveExecutable: require("./discovery").acpResolver("qwen"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "Qwen Code",
@@ -180,6 +192,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   junie: {
+    setupUrl: "https://junie.jetbrains.com/docs/junie-cli.html",
     resolveExecutable: require("./discovery").acpResolver("junie"),
     mapQueryOptions: require("./options/acp").map,
     displayName: "Junie CLI",
@@ -194,6 +207,7 @@ var VENDOR_REGISTRY = {
     rateLimitTracking: false,
   },
   kiro: {
+    setupUrl: "https://kiro.dev/docs/cli/",
     normalizeContext: require("./usage").tokenContext,
     resolveExecutable: require("./discovery").bundledResolver(function() { return require("./kiro-acp-server").findKiroPath(); }, "kiro-cli"),
     mapQueryOptions: require("./options/kiro").map,
@@ -210,6 +224,11 @@ var VENDOR_REGISTRY = {
   },
 };
 
+// No other adapter currently confirms exact-query hard termination.
+Object.keys(VENDOR_REGISTRY).forEach(function (vendor) {
+  if (VENDOR_REGISTRY[vendor].forceTermination !== true) VENDOR_REGISTRY[vendor].forceTermination = false;
+});
+
 function getVendorInfo(vendor) {
   return VENDOR_REGISTRY[vendor] || null;
 }
@@ -243,7 +262,7 @@ function publicInfo() {
   var result = {};
   Object.keys(VENDOR_REGISTRY).forEach(function(vendor) {
     var info = VENDOR_REGISTRY[vendor], entry = {};
-    ["displayName", "terminalResumeCommand", "planPathSegments", "loginCommand", "binaryName", "avatar", "sessionModes", "effortLevels", "osUserIsolation", "sessionBoundTools", "usageDashboard", "rateLimitTracking", "rateLimitScheduling", "acceptsUnstampedQuota", "configuration"].forEach(function(key) {
+    ["forceTermination", "displayName", "terminalResumeCommand", "planPathSegments", "loginCommand", "binaryName", "avatar", "sessionModes", "effortLevels", "osUserIsolation", "sessionBoundTools", "usageDashboard", "rateLimitTracking", "rateLimitScheduling", "acceptsUnstampedQuota", "configuration"].forEach(function(key) {
       if (info[key] !== undefined) entry[key] = info[key];
     });
     entry.browserLoginSupported = typeof info.browserLoginCommand === "string" && Array.isArray(info.oauthHosts) && info.oauthHosts.length > 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "5.5.0-beta.2",
+  "version": "5.5.0-beta.3",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js"

package/lib/public/pane-assets/chunk-6AGSOAOD.js

@@ -1 +0,0 @@
-import{l as a,m as b,n as c,o as d}from"./chunk-GKSLBGVE.js";import"./chunk-4YE4RU27.js";import"./chunk-JIV7O5GN.js";import"./chunk-YVVT3CTV.js";import"./chunk-BNNPJJVG.js";import"./chunk-K4PAN77B.js";import"./chunk-R7QVVFUG.js";import"./chunk-5UBN6GR7.js";import"./chunk-VZ2OKDAO.js";export{a as closeLinear,c as handleLinearResult,d as initLinearPanel,b as openLinear};

package/lib/public/pane-assets/chunk-AATAIAXL.js

@@ -1 +0,0 @@
-import{A as c,y as a,z as b}from"./chunk-GKSLBGVE.js";import"./chunk-4YE4RU27.js";import"./chunk-JIV7O5GN.js";import"./chunk-YVVT3CTV.js";import"./chunk-BNNPJJVG.js";import"./chunk-K4PAN77B.js";import"./chunk-R7QVVFUG.js";import"./chunk-5UBN6GR7.js";import"./chunk-VZ2OKDAO.js";export{a as closeLoginBrowser,c as handleLoginBrowserMessage,b as openLoginBrowser};

package/lib/public/pane-assets/chunk-D3CE5FZL.js

@@ -1 +0,0 @@
-import{hc as a,ic as b,jc as c,kc as d}from"./chunk-GKSLBGVE.js";import"./chunk-4YE4RU27.js";import"./chunk-JIV7O5GN.js";import"./chunk-YVVT3CTV.js";import"./chunk-BNNPJJVG.js";import"./chunk-K4PAN77B.js";import"./chunk-R7QVVFUG.js";import"./chunk-5UBN6GR7.js";import"./chunk-VZ2OKDAO.js";export{c as closeDebatesWorkbench,a as handleDebatesWorkbenchState,d as initDebatesWorkbench,b as openDebatesWorkbench};