clay-server 2.26.1-beta.1 → 2.27.0-beta.2

package/lib/project.js

@@ -8,7 +8,6 @@ var { createTerminalManager } = require("./terminal-manager");
 var { createNotesManager } = require("./notes");
 var { fetchLatestVersion, fetchVersion, isNewer } = require("./updater");
 var { execFileSync, spawn } = require("child_process");
-var { createLoopRegistry } = require("./scheduler");
 var usersModule = require("./users");
 var { resolveOsUserInfo, fsAsUser } = require("./os-users");
 var crisisSafety = require("./crisis-safety");
@@ -18,7 +17,15 @@ var userPresence = require("./user-presence");
 var { attachDebate } = require("./project-debate");
 var { attachMemory } = require("./project-memory");
 var { attachMateInteraction } = require("./project-mate-interaction");
-var MAX_UPLOAD_BYTES = 50 * 1024 * 1024; // 50 MB
+var { attachLoop } = require("./project-loop");
+var { attachFileWatch } = require("./project-file-watch");
+var { attachHTTP } = require("./project-http");
+var { attachImage } = require("./project-image");
+var { attachKnowledge } = require("./project-knowledge");
+var { attachFilesystem } = require("./project-filesystem");
+var { attachSessions } = require("./project-sessions");
+var { attachUserMessage } = require("./project-user-message");
+var { attachConnection } = require("./project-connection");
 
 // --- Context Sources persistence ---
 var _ctxSrcConfig = require("./config");
@@ -91,21 +98,6 @@ var BINARY_EXTS = new Set([
 ]);
 var IMAGE_EXTS = new Set([".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".bmp", ".ico"]);
 var FS_MAX_SIZE = 512 * 1024;
-var MIME_TYPES = {
-  ".html": "text/html",
-  ".css": "text/css",
-  ".js": "application/javascript",
-  ".json": "application/json",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".bmp": "image/bmp",
-  ".svg": "image/svg+xml",
-  ".ico": "image/x-icon",
-};
-
 function safePath(base, requested) {
   var resolved = path.resolve(base, requested);
   if (resolved !== base && !resolved.startsWith(base + path.sep)) return null;
@@ -168,77 +160,11 @@ function createProjectContext(opts) {
   // Browser MCP server runs in-process via createSdkMcpServer (no child process spawn).
   // Do NOT write to .claude-local/settings.json -- the SDK reads that too, causing duplicate spawns.
 
-  // --- Chat image storage ---
-  var _imgConfig = require("./config");
-  var _imgUtils = require("./utils");
-  var _imagesBaseDir = path.join(_imgConfig.CONFIG_DIR, "images");
-  var _imagesEncodedCwd = _imgUtils.encodeCwd(cwd);
-  var imagesDir = path.join(_imagesBaseDir, _imagesEncodedCwd);
-
-  // Convert imageRefs in history entries to images with URLs for the client
-  function hydrateImageRefs(entry) {
-    if (!entry) return entry;
-    // Hydrate context_preview: convert screenshotFile to screenshotUrl
-    if (entry.type === "context_preview" && entry.tab && entry.tab.screenshotFile) {
-      var hydrated = {};
-      for (var k in entry) hydrated[k] = entry[k];
-      hydrated.tab = {};
-      for (var tk in entry.tab) hydrated.tab[tk] = entry.tab[tk];
-      hydrated.tab.screenshotUrl = "/p/" + slug + "/images/" + entry.tab.screenshotFile;
-      delete hydrated.tab.screenshotFile;
-      return hydrated;
-    }
-    if (!entry.imageRefs) return entry;
-    if (entry.type !== "user_message" && entry.type !== "mention_user") return entry;
-    var images = [];
-    for (var ri = 0; ri < entry.imageRefs.length; ri++) {
-      var ref = entry.imageRefs[ri];
-      images.push({ mediaType: ref.mediaType, url: "/p/" + slug + "/images/" + ref.file });
-    }
-    var hydrated = {};
-    for (var k2 in entry) {
-      if (k2 !== "imageRefs") hydrated[k2] = entry[k2];
-    }
-    hydrated.images = images;
-    return hydrated;
-  }
-
-  function saveImageFile(mediaType, base64data, ownerLinuxUser) {
-    try { fs.mkdirSync(imagesDir, { recursive: true }); } catch (e) {}
-    var ext = mediaType === "image/png" ? ".png" : mediaType === "image/gif" ? ".gif" : mediaType === "image/webp" ? ".webp" : ".jpg";
-    var hash = crypto.createHash("sha256").update(base64data).digest("hex").substring(0, 16);
-    var fileName = Date.now() + "-" + hash + ext;
-    var filePath = path.join(imagesDir, fileName);
-    try {
-      fs.writeFileSync(filePath, Buffer.from(base64data, "base64"));
-      if (process.platform !== "win32") {
-        // 644 so all local users can read (needed for git, copy, etc.)
-        try { fs.chmodSync(filePath, 0o644); } catch (e) {}
-        // In OS-user mode the daemon runs as root, so chown the file
-        // (and parent dirs) to the session owner to avoid permission issues.
-        if (ownerLinuxUser) {
-          try {
-            var osUsersMod = require("./os-users");
-            var uid = osUsersMod.getLinuxUserUid(ownerLinuxUser);
-            if (uid != null) {
-              require("child_process").execSync("chown " + uid + " " + JSON.stringify(filePath));
-              // Also fix parent dirs if root-owned
-              try {
-                var dirStat = fs.statSync(imagesDir);
-                if (dirStat.uid !== uid) {
-                  require("child_process").execSync("chown " + uid + " " + JSON.stringify(imagesDir));
-                }
-              } catch (e2) {}
-            }
-          } catch (e) {}
-        }
-      }
-      return fileName;
-    } catch (e) {
-      console.error("[images] Failed to save image:", e.message);
-      return null;
-    }
-  }
+  // --- Image engine (delegated to project-image.js) ---
+  var _image = attachImage({ cwd: cwd, slug: slug });
+  var imagesDir = _image.imagesDir;
+  var hydrateImageRefs = _image.hydrateImageRefs;
+  var saveImageFile = _image.saveImageFile;
 
   // --- OS-level user isolation helper ---
   // Returns the Linux username for the session owner.
@@ -415,98 +341,29 @@ function createProjectContext(opts) {
     }
   }
 
-  // --- File watcher ---
-  var fileWatcher = null;
-  var watchedPath = null;
-  var watchDebounce = null;
-
-  function startFileWatch(relPath) {
-    var absPath = safePath(cwd, relPath);
-    if (!absPath) return;
-    if (watchedPath === relPath) return;
-    stopFileWatch();
-    watchedPath = relPath;
-    try {
-      fileWatcher = fs.watch(absPath, function () {
-        clearTimeout(watchDebounce);
-        watchDebounce = setTimeout(function () {
-          try {
-            var stat = fs.statSync(absPath);
-            var ext = path.extname(absPath).toLowerCase();
-            if (stat.size > FS_MAX_SIZE || BINARY_EXTS.has(ext)) return;
-            var content = fs.readFileSync(absPath, "utf8");
-            send({ type: "fs_file_changed", path: relPath, content: content, size: stat.size });
-          } catch (e) {
-            stopFileWatch();
-          }
-        }, 200);
-      });
-      fileWatcher.on("error", function () { stopFileWatch(); });
-    } catch (e) {
-      watchedPath = null;
-    }
-  }
-
-  function stopFileWatch() {
-    if (fileWatcher) {
-      try { fileWatcher.close(); } catch (e) {}
-      fileWatcher = null;
-    }
-    clearTimeout(watchDebounce);
-    watchDebounce = null;
-    watchedPath = null;
-  }
-
-  // --- Directory watcher ---
-  var dirWatchers = {};  // relPath -> { watcher, debounce }
-
-  function startDirWatch(relPath) {
-    if (dirWatchers[relPath]) return;
-    var absPath = safePath(cwd, relPath);
-    if (!absPath) return;
-    try {
-      var debounce = null;
-      var watcher = fs.watch(absPath, function () {
-        clearTimeout(debounce);
-        debounce = setTimeout(function () {
-          // Re-read directory and broadcast to all clients
-          try {
-            var items = fs.readdirSync(absPath, { withFileTypes: true });
-            var entries = [];
-            for (var i = 0; i < items.length; i++) {
-              if (items[i].isDirectory() && IGNORED_DIRS.has(items[i].name)) continue;
-              entries.push({
-                name: items[i].name,
-                type: items[i].isDirectory() ? "dir" : "file",
-                path: path.relative(cwd, path.join(absPath, items[i].name)).split(path.sep).join("/"),
-              });
-            }
-            send({ type: "fs_dir_changed", path: relPath, entries: entries });
-          } catch (e) {
-            stopDirWatch(relPath);
-          }
-        }, 300);
-      });
-      watcher.on("error", function () { stopDirWatch(relPath); });
-      dirWatchers[relPath] = { watcher: watcher, debounce: debounce };
-    } catch (e) {}
-  }
-
-  function stopDirWatch(relPath) {
-    var entry = dirWatchers[relPath];
-    if (entry) {
-      clearTimeout(entry.debounce);
-      try { entry.watcher.close(); } catch (e) {}
-      delete dirWatchers[relPath];
-    }
-  }
+  // --- Knowledge engine (delegated to project-knowledge.js) ---
+  var _knowledge = attachKnowledge({
+    cwd: cwd,
+    isMate: isMate,
+    sendTo: sendTo,
+    matesModule: matesModule,
+    getProjectOwnerId: function () { return projectOwnerId; },
+  });
 
-  function stopAllDirWatches() {
-    var paths = Object.keys(dirWatchers);
-    for (var i = 0; i < paths.length; i++) {
-      stopDirWatch(paths[i]);
-    }
-  }
+  // --- File/directory watcher engine (delegated to project-file-watch.js) ---
+  var _fileWatch = attachFileWatch({
+    cwd: cwd,
+    send: send,
+    safePath: safePath,
+    BINARY_EXTS: BINARY_EXTS,
+    FS_MAX_SIZE: FS_MAX_SIZE,
+    IGNORED_DIRS: IGNORED_DIRS,
+  });
+  var startFileWatch = _fileWatch.startFileWatch;
+  var stopFileWatch = _fileWatch.stopFileWatch;
+  var startDirWatch = _fileWatch.startDirWatch;
+  var stopDirWatch = _fileWatch.stopDirWatch;
+  var stopAllDirWatches = _fileWatch.stopAllDirWatches;
 
   // --- Session manager ---
   var sm = createSessionManager({
@@ -641,3665 +498,206 @@ function createProjectContext(opts) {
     },
   });
 
-  // --- Ralph Loop state ---
-  var loopState = {
-    active: false,
-    phase: "idle", // idle | crafting | approval | executing | done
-    promptText: "",
-    judgeText: "",
-    iteration: 0,
-    maxIterations: 20,
-    baseCommit: null,
-    currentSessionId: null,
-    judgeSessionId: null,
-    results: [],
-    stopping: false,
-    wizardData: null,
-    craftingSessionId: null,
-    startedAt: null,
-    loopId: null,
-    loopFilesId: null,
-  };
+  // --- Loop engine (delegated to project-loop.js) ---
+  var _loop = attachLoop({
+    cwd: cwd,
+    slug: slug,
+    sm: sm,
+    sdk: sdk,
+    send: send,
+    sendTo: sendTo,
+    sendToSession: sendToSession,
+    pushModule: pushModule,
+    getHubSchedules: getHubSchedules,
+    getLinuxUserForSession: getLinuxUserForSession,
+    onProcessingChanged: onProcessingChanged,
+    hydrateImageRefs: hydrateImageRefs,
+  });
+  var loopState = _loop.loopState;
+  var loopRegistry = _loop.loopRegistry;
+  var loopDir = _loop.loopDir;
+  var startLoop = _loop.startLoop;
+  var stopLoop = _loop.stopLoop;
+  var resumeLoop = _loop.resumeLoop;
 
-  function loopDir() {
-    var id = loopState.loopFilesId || loopState.loopId;
-    if (!id) return null;
-    return path.join(cwd, ".claude", "loops", id);
-  }
+  // Mate CLAUDE.md crisis safety watcher
+  var crisisWatcher = null;
+  var crisisDebounce = null;
 
-  function generateLoopId() {
-    return "loop_" + Date.now() + "_" + crypto.randomBytes(3).toString("hex");
-  }
 
-  // Loop state persistence
-  var _loopConfig = require("./config");
-  var _loopUtils = require("./utils");
-  var _loopDir = path.join(_loopConfig.CONFIG_DIR, "loops");
-  var _loopEncodedCwd = _loopUtils.resolveEncodedFile(_loopDir, cwd, ".json");
-  var _loopStatePath = path.join(_loopDir, _loopEncodedCwd + ".json");
 
-  function saveLoopState() {
-    try {
-      fs.mkdirSync(_loopDir, { recursive: true });
-      var data = {
-        phase: loopState.phase,
-        active: loopState.active,
-        iteration: loopState.iteration,
-        maxIterations: loopState.maxIterations,
-        baseCommit: loopState.baseCommit,
-        results: loopState.results,
-        wizardData: loopState.wizardData,
-        startedAt: loopState.startedAt,
-        loopId: loopState.loopId,
-        loopFilesId: loopState.loopFilesId || null,
-      };
-      var tmpPath = _loopStatePath + ".tmp";
-      fs.writeFileSync(tmpPath, JSON.stringify(data, null, 2));
-      fs.renameSync(tmpPath, _loopStatePath);
-    } catch (e) {
-      console.error("[ralph-loop] Failed to save state:", e.message);
-    }
-  }
+  // --- Terminal manager ---
+  var tm = createTerminalManager({ cwd: cwd, send: send, sendTo: sendTo });
+  var nm = createNotesManager({ cwd: cwd, send: send, sendTo: sendTo });
 
-  function loadLoopState() {
-    try {
-      var raw = fs.readFileSync(_loopStatePath, "utf8");
-      var data = JSON.parse(raw);
-      loopState.phase = data.phase || "idle";
-      loopState.active = data.active || false;
-      loopState.iteration = data.iteration || 0;
-      loopState.maxIterations = data.maxIterations || 20;
-      loopState.baseCommit = data.baseCommit || null;
-      loopState.results = data.results || [];
-      loopState.wizardData = data.wizardData || null;
-      loopState.startedAt = data.startedAt || null;
-      loopState.loopId = data.loopId || null;
-      loopState.loopFilesId = data.loopFilesId || null;
-      // SDK sessions cannot survive daemon restart
-      loopState.currentSessionId = null;
-      loopState.judgeSessionId = null;
-      loopState.craftingSessionId = null;
-      loopState.stopping = false;
-      // If was executing, schedule resume after SDK is ready
-      if (loopState.phase === "executing" && loopState.active) {
-        loopState._needsResume = true;
-      }
-      // If was crafting, check if files exist and move to approval
-      if (loopState.phase === "crafting") {
-        var hasFiles = checkLoopFilesExist();
-        if (hasFiles) {
-          loopState.phase = "approval";
-          saveLoopState();
-        } else {
-          loopState.phase = "idle";
-          saveLoopState();
-        }
-      }
-    } catch (e) {
-      // No saved state, use defaults
-    }
-    // Recover orphaned loops: if idle but completed loop files exist in .claude/loops/
-    if (loopState.phase === "idle") {
-      var _loopsBase = path.join(cwd, ".claude", "loops");
-      try {
-        var _loopDirs = fs.readdirSync(_loopsBase).filter(function (d) {
-          return d.indexOf("loop_") === 0;
-        });
-        for (var _li = 0; _li < _loopDirs.length; _li++) {
-          var _ld = path.join(_loopsBase, _loopDirs[_li]);
-          try {
-            fs.accessSync(path.join(_ld, "PROMPT.md"));
-            fs.accessSync(path.join(_ld, "JUDGE.md"));
-            fs.accessSync(path.join(_ld, "LOOP.json"));
-            // Found a completed loop — recover to approval phase
-            loopState.loopId = _loopDirs[_li];
-            loopState.phase = "approval";
-            var _loopCfg = JSON.parse(fs.readFileSync(path.join(_ld, "LOOP.json"), "utf8"));
-            loopState.maxIterations = _loopCfg.maxIterations || 20;
-            saveLoopState();
-            console.log("[ralph-loop] Recovered orphaned loop: " + _loopDirs[_li]);
-            break;
-          } catch (e) {}
-        }
-      } catch (e) {}
+  // Check for updates in background (admin only)
+  fetchVersion(updateChannel).then(function (v) {
+    if (v && isNewer(v, currentVersion)) {
+      latestVersion = v;
+      sendToAdmins({ type: "update_available", version: v });
     }
-  }
+  }).catch(function (e) {
+    console.error("[project] Background version check failed:", e.message || e);
+  });
 
-  function clearLoopState() {
-    loopState.active = false;
-    loopState.phase = "idle";
-    loopState.promptText = "";
-    loopState.judgeText = "";
-    loopState.iteration = 0;
-    loopState.maxIterations = 20;
-    loopState.baseCommit = null;
-    loopState.currentSessionId = null;
-    loopState.judgeSessionId = null;
-    loopState.results = [];
-    loopState.stopping = false;
-    loopState.wizardData = null;
-    loopState.craftingSessionId = null;
-    loopState.startedAt = null;
-    loopState.loopId = null;
-    loopState.loopFilesId = null;
-    saveLoopState();
+  // --- WS connection handler (delegated to project-connection.js) ---
+  function handleConnection(ws, wsUser) {
+    _connection.handleConnection(ws, wsUser, handleMessage, handleDisconnection);
   }
 
-  function checkLoopFilesExist() {
-    var dir = loopDir();
-    if (!dir) return false;
-    var hasPrompt = false;
-    var hasJudge = false;
-    try { fs.accessSync(path.join(dir, "PROMPT.md")); hasPrompt = true; } catch (e) {}
-    try { fs.accessSync(path.join(dir, "JUDGE.md")); hasJudge = true; } catch (e) {}
-    return hasPrompt && hasJudge;
+  // --- WS message handler ---
+  function getSessionForWs(ws) {
+    return sm.sessions.get(ws._clayActiveSession) || null;
   }
 
-  // .claude/ directory watcher for PROMPT.md / JUDGE.md
-  var claudeDirWatcher = null;
-  var claudeDirDebounce = null;
-
-  // Mate CLAUDE.md crisis safety watcher
-  var crisisWatcher = null;
-  var crisisDebounce = null;
-
-  function startClaudeDirWatch() {
-    if (claudeDirWatcher) return;
-    var watchDir = loopDir();
-    if (!watchDir) return;
-    try { fs.mkdirSync(watchDir, { recursive: true }); } catch (e) {}
-    try {
-      claudeDirWatcher = fs.watch(watchDir, function () {
-        if (claudeDirDebounce) clearTimeout(claudeDirDebounce);
-        claudeDirDebounce = setTimeout(function () {
-          broadcastLoopFilesStatus();
-        }, 300);
-      });
-      claudeDirWatcher.on("error", function () {});
-    } catch (e) {
-      console.error("[ralph-loop] Failed to watch .claude/:", e.message);
+  // --- Schedule / cancel a message (used by WS handler and auto-continue) ---
+  function scheduleMessage(session, text, resetsAt) {
+    if (!session || !text || !resetsAt) return;
+    // Cancel any existing scheduled message
+    if (session.scheduledMessage && session.scheduledMessage.timer) {
+      clearTimeout(session.scheduledMessage.timer);
     }
+    var isPastReset = resetsAt <= Date.now();
+    var schedDelay = isPastReset ? 5000 : Math.max(0, resetsAt - Date.now()) + 60000; // +1min buffer after reset, or 5s for immediate
+    var sendsAt = Date.now() + schedDelay;
+    var schedEntry = {
+      type: "scheduled_message_queued",
+      text: text,
+      resetsAt: sendsAt,
+      scheduledAt: Date.now(),
+    };
+    sm.sendAndRecord(session, schedEntry);
+    session.scheduledMessage = {
+      text: text,
+      resetsAt: resetsAt,
+      timer: setTimeout(function () {
+        session.scheduledMessage = null;
+        if (session.destroying) return;
+        console.log("[project] Scheduled message firing for session " + session.localId);
+        sm.sendAndRecord(session, { type: "scheduled_message_sent" });
+        var schedUserMsg = { type: "user_message", text: text };
+        session.history.push(schedUserMsg);
+        sm.appendToSessionFile(session, schedUserMsg);
+        sendToSession(session.localId, schedUserMsg);
+        session.isProcessing = true;
+        onProcessingChanged();
+        sendToSession(session.localId, { type: "status", status: "processing" });
+        sdk.startQuery(session, text, null, getLinuxUserForSession(session));
+        sm.broadcastSessionList();
+      }, schedDelay),
+    };
   }
 
-  function stopClaudeDirWatch() {
-    if (claudeDirWatcher) {
-      claudeDirWatcher.close();
-      claudeDirWatcher = null;
-    }
-    if (claudeDirDebounce) {
-      clearTimeout(claudeDirDebounce);
-      claudeDirDebounce = null;
+  function cancelScheduledMessage(session) {
+    if (!session) return;
+    if (session.scheduledMessage && session.scheduledMessage.timer) {
+      clearTimeout(session.scheduledMessage.timer);
+      session.scheduledMessage = null;
+      session.rateLimitAutoContinuePending = false;
+      sm.sendAndRecord(session, { type: "scheduled_message_cancelled" });
     }
   }
 
-  function broadcastLoopFilesStatus() {
-    var dir = loopDir();
-    var hasPrompt = false;
-    var hasJudge = false;
-    var hasLoopJson = false;
-    if (dir) {
-      try { fs.accessSync(path.join(dir, "PROMPT.md")); hasPrompt = true; } catch (e) {}
-      try { fs.accessSync(path.join(dir, "JUDGE.md")); hasJudge = true; } catch (e) {}
-      try { fs.accessSync(path.join(dir, "LOOP.json")); hasLoopJson = true; } catch (e) {}
-    }
-    send({
-      type: "ralph_files_status",
-      promptReady: hasPrompt,
-      judgeReady: hasJudge,
-      loopJsonReady: hasLoopJson,
-      bothReady: hasPrompt && hasJudge,
-      taskId: loopState.loopId,
-    });
-    // Auto-transition to approval phase when both files appear
-    if (hasPrompt && hasJudge && loopState.phase === "crafting") {
-      loopState.phase = "approval";
-      saveLoopState();
-
-      // Parse recommended title from crafting session conversation
-      if (loopState.craftingSessionId && loopState.loopId) {
-        var craftSess = sm.sessions.get(loopState.craftingSessionId);
-        if (craftSess && craftSess.history) {
-          for (var hi = craftSess.history.length - 1; hi >= 0; hi--) {
-            var entry = craftSess.history[hi];
-            var entryText = entry.text || "";
-            var titleMatch = entryText.match(/\[\[LOOP_TITLE:\s*(.+?)\]\]/);
-            if (titleMatch) {
-              var suggestedTitle = titleMatch[1].trim();
-              if (suggestedTitle) {
-                loopRegistry.updateRecord(loopState.loopId, { name: suggestedTitle });
-              }
-              break;
-            }
-          }
-        }
+  function handleMessage(ws, msg) {
+    // --- DM messages (delegated to server-level handler) ---
+    if (msg.type === "dm_open" || msg.type === "dm_send" || msg.type === "dm_list" || msg.type === "dm_typing" || msg.type === "dm_add_favorite" || msg.type === "dm_remove_favorite" || msg.type === "mate_create" || msg.type === "mate_list" || msg.type === "mate_delete" || msg.type === "mate_update" || msg.type === "mate_readd_builtin" || msg.type === "mate_list_available_builtins") {
+      if (typeof opts.onDmMessage === "function") {
+        opts.onDmMessage(ws, msg);
       }
+      return;
     }
-  }
-
-  // Load persisted state on startup
-  loadLoopState();
-
-  // --- Loop Registry (unified one-off + scheduled) ---
-  var activeRegistryId = null; // track which registry record triggered current loop
 
-  var loopRegistry = createLoopRegistry({
-    cwd: cwd,
-    onTrigger: function (record) {
-      // Skip trigger if a loop is already active and skipIfRunning is enabled
-      if (loopState.active || loopState.phase === "executing") {
-        if (record.skipIfRunning !== false) {
-          console.log("[loop-registry] Skipping trigger for " + record.name + " — loop already active (skipIfRunning)");
-          return;
-        }
-        console.log("[loop-registry] Loop active but skipIfRunning disabled for " + record.name + "; deferring");
-        return;
-      }
+    // --- @Mention: invoke another Mate inline ---
+    if (msg.type === "mention") {
+      handleMention(ws, msg);
+      return;
+    }
 
-      // For schedule records, resolve the linked task to get loop files
-      var loopFilesId = record.id;
-      if (record.source === "schedule") {
-        if (!record.linkedTaskId) {
-          console.error("[loop-registry] Schedule has no linked task: " + record.name);
-          return;
+    if (msg.type === "mention_stop") {
+      var session = getSessionForWs(ws);
+      if (session && session._mentionInProgress) {
+        // Abort the active mention session for this mate
+        var mateId = msg.mateId;
+        if (mateId && session._mentionSessions && session._mentionSessions[mateId]) {
+          session._mentionSessions[mateId].abort();
+          session._mentionSessions[mateId].close();
+          delete session._mentionSessions[mateId];
         }
-        loopFilesId = record.linkedTaskId;
-        console.log("[loop-registry] Schedule triggered: " + record.name + " → linked task " + loopFilesId);
-      }
-
-      // Verify the loop directory and PROMPT.md exist
-      var recDir = path.join(cwd, ".claude", "loops", loopFilesId);
-      try {
-        fs.accessSync(path.join(recDir, "PROMPT.md"));
-      } catch (e) {
-        console.error("[loop-registry] PROMPT.md missing for " + loopFilesId);
-        return;
+        session._mentionInProgress = false;
+        sendToSession(session.localId, { type: "mention_done", mateId: mateId, stopped: true });
+        send({ type: "mention_processing", mateId: mateId, active: false });
       }
-      // Set the loopId to the schedule's own id (not the linked task) so sidebar groups correctly
-      loopState.loopId = record.id;
-      loopState.loopFilesId = loopFilesId;
-      loopState.wizardData = null;
-      activeRegistryId = record.id;
-      console.log("[loop-registry] Auto-starting loop: " + record.name + " (" + loopState.loopId + ")");
-      send({ type: "schedule_run_started", recordId: record.id });
-      startLoop({ maxIterations: record.maxIterations, name: record.name });
-    },
-    onChange: function () {
-      send({ type: "loop_registry_updated", records: getHubSchedules() });
-    },
-  });
-  loopRegistry.load();
-  loopRegistry.startTimer();
-
-  // Wire loop info resolution for session list broadcasts
-  sm.setResolveLoopInfo(function (loopId) {
-    var rec = loopRegistry.getById(loopId);
-    if (!rec) return null;
-    return { name: rec.name || null, source: rec.source || null };
-  });
+      return;
+    }
 
-  function startLoop(opts) {
-    var loopOpts = opts || {};
-    var dir = loopDir();
-    if (!dir) {
-      send({ type: "loop_error", text: "No loop directory. Run the wizard first." });
+    // --- Debate ---
+    if (msg.type === "debate_start") {
+      handleDebateStart(ws, msg);
       return;
     }
-    var promptPath = path.join(dir, "PROMPT.md");
-    var judgePath = path.join(dir, "JUDGE.md");
-    var promptText, judgeText;
-    try {
-      promptText = fs.readFileSync(promptPath, "utf8");
-    } catch (e) {
-      send({ type: "loop_error", text: "Missing PROMPT.md in " + dir });
+    if (msg.type === "debate_hand_raise") {
+      handleDebateHandRaise(ws);
       return;
     }
-    try {
-      judgeText = fs.readFileSync(judgePath, "utf8");
-    } catch (e) {
-      judgeText = null;
+    if (msg.type === "debate_comment") {
+      handleDebateComment(ws, msg);
+      return;
     }
-
-    var baseCommit;
-    try {
-      baseCommit = execFileSync("git", ["rev-parse", "HEAD"], {
-        cwd: cwd, encoding: "utf8", timeout: 5000,
-      }).trim();
-    } catch (e) {
-      send({ type: "loop_error", text: "Failed to get git HEAD: " + e.message });
+    if (msg.type === "debate_stop") {
+      handleDebateStop(ws);
       return;
     }
-
-    // Read loop config from LOOP.json in loop directory
-    var loopConfig = {};
-    try {
-      loopConfig = JSON.parse(fs.readFileSync(path.join(dir, "LOOP.json"), "utf8"));
-    } catch (e) {}
-
-    loopState.active = true;
-    loopState.phase = "executing";
-    loopState.promptText = promptText;
-    loopState.judgeText = judgeText;
-    loopState.iteration = 0;
-    loopState.maxIterations = judgeText ? ((loopOpts.maxIterations >= 1 ? loopOpts.maxIterations : null) || loopConfig.maxIterations || 20) : 1;
-    loopState.baseCommit = baseCommit;
-    loopState.currentSessionId = null;
-    loopState.judgeSessionId = null;
-    loopState.results = [];
-    loopState.stopping = false;
-    loopState.name = loopOpts.name || null;
-    loopState.startedAt = Date.now();
-    saveLoopState();
-
-    stopClaudeDirWatch();
-
-    send({ type: "loop_started", maxIterations: loopState.maxIterations, name: loopState.name });
-    runNextIteration();
-  }
-
-  function runNextIteration() {
-    console.log("[ralph-loop] runNextIteration called, iteration: " + loopState.iteration + ", active: " + loopState.active + ", stopping: " + loopState.stopping);
-    if (!loopState.active || loopState.stopping) {
-      finishLoop("stopped");
+    if (msg.type === "debate_conclude_response") {
+      handleDebateConcludeResponse(ws, msg);
       return;
     }
-
-    loopState.iteration++;
-    if (loopState.iteration > loopState.maxIterations) {
-      finishLoop("max_iterations");
+    if (msg.type === "debate_confirm_brief") {
+      handleDebateConfirmBrief(ws);
       return;
     }
-
-    var session = sm.createSession();
-    var loopSource = loopRegistry.getById(loopState.loopId);
-    var loopName = (loopState.wizardData && loopState.wizardData.name) || (loopSource && loopSource.name) || "";
-    var loopSourceTag = (loopSource && loopSource.source) || null;
-    var isRalphLoop = loopSourceTag === "ralph";
-    session.loop = { active: true, iteration: loopState.iteration, role: "coder", loopId: loopState.loopId, name: loopName, source: loopSourceTag, startedAt: loopState.startedAt };
-    session.title = (isRalphLoop ? "Ralph" : "Task") + (loopName ? " " + loopName : "") + " #" + loopState.iteration;
-    sm.saveSessionFile(session);
-    sm.broadcastSessionList();
-
-    loopState.currentSessionId = session.localId;
-
-    send({
-      type: "loop_iteration",
-      iteration: loopState.iteration,
-      maxIterations: loopState.maxIterations,
-      sessionId: session.localId,
-    });
-
-    var coderCompleted = false;
-    session.onQueryComplete = function(completedSession) {
-      if (coderCompleted) return;
-      coderCompleted = true;
-      if (coderWatchdog) { clearTimeout(coderWatchdog); coderWatchdog = null; }
-      console.log("[ralph-loop] Coder #" + loopState.iteration + " onQueryComplete fired, history length: " + completedSession.history.length);
-      if (!loopState.active) { console.log("[ralph-loop] Coder: loopState.active is false, skipping"); return; }
-      // Check if session ended with error
-      var lastItems = completedSession.history.slice(-3);
-      var hadError = false;
-      for (var i = 0; i < lastItems.length; i++) {
-        if (lastItems[i].type === "error" || (lastItems[i].type === "done" && lastItems[i].code === 1)) {
-          hadError = true;
-          break;
+    if (msg.type === "debate_proposal_response") {
+      // Match the most recent pending proposal (proposalId may not be
+      // available on the client since it's not part of the tool input)
+      var _dpKeys = Object.keys(_pendingDebateProposals);
+      if (_dpKeys.length === 0) return;
+      var _dpKey = msg.proposalId || _dpKeys[_dpKeys.length - 1];
+      var pending = _pendingDebateProposals[_dpKey];
+      if (!pending) return;
+      delete _pendingDebateProposals[_dpKey];
+      if (msg.action === "start") {
+        // Set up debate state on the session, then transition to live
+        var _dpSession = getSessionForWs(ws);
+        if (_dpSession) {
+          var _dpMateId = isMate ? path.basename(cwd) : null;
+          handleMcpDebateApproval(_dpSession, pending.briefData, _dpMateId, ws);
         }
-      }
-      if (hadError) {
-        loopState.results.push({
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Iteration ended with error",
-        });
-        send({
-          type: "loop_verdict",
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Iteration ended with error, retrying...",
-        });
-        setTimeout(function() { runNextIteration(); }, 2000);
-        return;
-      }
-      if (loopState.judgeText && loopState.maxIterations > 1) {
-        runJudge();
+        pending.resolve({ action: "start" });
       } else {
-        finishLoop("pass");
-      }
-    };
-
-    // Watchdog: if onQueryComplete hasn't fired after 10 minutes, force error and retry
-    var coderWatchdog = setTimeout(function() {
-      if (!coderCompleted && loopState.active && !loopState.stopping) {
-        console.error("[ralph-loop] Coder #" + loopState.iteration + " watchdog triggered — onQueryComplete never fired");
-        coderCompleted = true;
-        loopState.results.push({
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Coder session timed out (no completion signal)",
-        });
-        send({
-          type: "loop_verdict",
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Coder session timed out, retrying...",
-        });
-        setTimeout(function() { runNextIteration(); }, 2000);
+        pending.resolve({ action: "cancel" });
       }
-    }, 10 * 60 * 1000);
-
-    var userMsg = { type: "user_message", text: loopState.promptText };
-    session.history.push(userMsg);
-    sm.appendToSessionFile(session, userMsg);
-
-    session.isProcessing = true;
-    onProcessingChanged();
-    session.sentToolResults = {};
-    sendToSession(session.localId, { type: "status", status: "processing" });
-    session.acceptEditsAfterStart = true;
-    session.singleTurn = true;
-    sdk.startQuery(session, loopState.promptText, undefined, getLinuxUserForSession(session));
-  }
-
-  function runJudge() {
-    if (!loopState.active || loopState.stopping) {
-      finishLoop("stopped");
+      return;
+    }
+    if (msg.type === "debate_user_floor_response") {
+      handleDebateUserFloorResponse(ws, msg);
       return;
     }
 
-    var diff;
-    try {
-      diff = execFileSync("git", ["diff", loopState.baseCommit], {
-        cwd: cwd, encoding: "utf8", timeout: 30000,
-        maxBuffer: 10 * 1024 * 1024,
-      });
-    } catch (e) {
-      send({ type: "loop_error", text: "Failed to generate git diff: " + e.message });
-      finishLoop("error");
-      return;
-    }
-
-    var gitLog = "";
-    try {
-      gitLog = execFileSync("git", ["log", "--oneline", loopState.baseCommit + "..HEAD"], {
-        cwd: cwd, encoding: "utf8", timeout: 10000,
-      }).trim();
-    } catch (e) {}
-
-    var judgePrompt = "You are a judge evaluating whether a coding task has been completed.\n\n" +
-      "## Original Task (PROMPT.md)\n\n" + loopState.promptText + "\n\n" +
-      "## Evaluation Criteria (JUDGE.md)\n\n" + loopState.judgeText + "\n\n" +
-      "## Commit History\n\n```\n" + (gitLog || "(no commits yet)") + "\n```\n\n" +
-      "## Changes Made (git diff)\n\n```diff\n" + diff + "\n```\n\n" +
-      "Based on the evaluation criteria, has the task been completed successfully?\n\n" +
-      "IMPORTANT: The git diff above may not show everything. If criteria involve checking whether " +
-      "specific files, classes, or features exist, use tools (Read, Glob, Grep, Bash) to verify " +
-      "directly in the codebase. Do NOT assume something is missing just because it is not in the diff.\n\n" +
-      "After your evaluation, respond with exactly one of:\n" +
-      "- PASS: [brief explanation]\n" +
-      "- FAIL: [brief explanation of what is still missing]";
-
-    var judgeSession = sm.createSession();
-    var judgeSource = loopRegistry.getById(loopState.loopId);
-    var judgeName = (loopState.wizardData && loopState.wizardData.name) || (judgeSource && judgeSource.name) || "";
-    var judgeSourceTag = (judgeSource && judgeSource.source) || null;
-    var isRalphJudge = judgeSourceTag === "ralph";
-    judgeSession.loop = { active: true, iteration: loopState.iteration, role: "judge", loopId: loopState.loopId, name: judgeName, source: judgeSourceTag, startedAt: loopState.startedAt };
-    judgeSession.title = (isRalphJudge ? "Ralph" : "Task") + (judgeName ? " " + judgeName : "") + " Judge #" + loopState.iteration;
-    sm.saveSessionFile(judgeSession);
-    sm.broadcastSessionList();
-    loopState.judgeSessionId = judgeSession.localId;
-
-    send({
-      type: "loop_judging",
-      iteration: loopState.iteration,
-      sessionId: judgeSession.localId,
-    });
-
-    var judgeCompleted = false;
-    judgeSession.onQueryComplete = function(completedSession) {
-      if (judgeCompleted) return;
-      judgeCompleted = true;
-      if (judgeWatchdog) { clearTimeout(judgeWatchdog); judgeWatchdog = null; }
-      console.log("[ralph-loop] Judge #" + loopState.iteration + " onQueryComplete fired, history length: " + completedSession.history.length);
-      var verdict = parseJudgeVerdict(completedSession);
-      console.log("[ralph-loop] Judge verdict: " + (verdict.pass ? "PASS" : "FAIL") + " - " + verdict.explanation);
-
-      loopState.results.push({
-        iteration: loopState.iteration,
-        verdict: verdict.pass ? "pass" : "fail",
-        summary: verdict.explanation,
-      });
-
-      send({
-        type: "loop_verdict",
-        iteration: loopState.iteration,
-        verdict: verdict.pass ? "pass" : "fail",
-        summary: verdict.explanation,
-      });
-
-      if (verdict.pass) {
-        finishLoop("pass");
-      } else {
-        setTimeout(function() { runNextIteration(); }, 1000);
-      }
-    };
-
-    // Watchdog: judge may use tools to verify, so allow more time
-    var judgeWatchdog = setTimeout(function() {
-      if (!judgeCompleted && loopState.active && !loopState.stopping) {
-        console.error("[ralph-loop] Judge #" + loopState.iteration + " watchdog triggered — onQueryComplete never fired");
-        judgeCompleted = true;
-        loopState.results.push({
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Judge session timed out (no completion signal)",
-        });
-        send({
-          type: "loop_verdict",
-          iteration: loopState.iteration,
-          verdict: "error",
-          summary: "Judge session timed out, retrying...",
-        });
-        setTimeout(function() { runNextIteration(); }, 2000);
-      }
-    }, 10 * 60 * 1000);
-
-    var userMsg = { type: "user_message", text: judgePrompt };
-    judgeSession.history.push(userMsg);
-    sm.appendToSessionFile(judgeSession, userMsg);
-
-    judgeSession.isProcessing = true;
-    onProcessingChanged();
-    judgeSession.sentToolResults = {};
-    judgeSession.acceptEditsAfterStart = true;
-    judgeSession.singleTurn = true;
-    sdk.startQuery(judgeSession, judgePrompt, undefined, getLinuxUserForSession(judgeSession));
-  }
-
-  function parseJudgeVerdict(session) {
-    var text = "";
-    for (var i = 0; i < session.history.length; i++) {
-      var h = session.history[i];
-      if (h.type === "delta" && h.text) text += h.text;
-      if (h.type === "text" && h.text) text += h.text;
-    }
-    console.log("[ralph-loop] Judge raw text (last 500 chars): " + text.slice(-500));
-    var upper = text.toUpperCase();
-    var passIdx = upper.indexOf("PASS");
-    var failIdx = upper.indexOf("FAIL");
-    if (passIdx !== -1 && (failIdx === -1 || passIdx < failIdx)) {
-      var explanation = text.substring(passIdx + 4).replace(/^[\s:]+/, "").split("\n")[0].trim();
-      return { pass: true, explanation: explanation || "Task completed" };
-    }
-    if (failIdx !== -1) {
-      var explanation = text.substring(failIdx + 4).replace(/^[\s:]+/, "").split("\n")[0].trim();
-      return { pass: false, explanation: explanation || "Task not yet complete" };
-    }
-    return { pass: false, explanation: "Could not parse judge verdict" };
-  }
-
-  function finishLoop(reason) {
-    console.log("[ralph-loop] finishLoop called, reason: " + reason + ", iteration: " + loopState.iteration);
-    loopState.active = false;
-    loopState.phase = "done";
-    loopState.stopping = false;
-    loopState.currentSessionId = null;
-    loopState.judgeSessionId = null;
-    saveLoopState();
-
-    send({
-      type: "loop_finished",
-      reason: reason,
-      iterations: loopState.iteration,
-      results: loopState.results,
-    });
-
-    // Record result in loop registry
-    if (loopState.loopId) {
-      loopRegistry.recordRun(loopState.loopId, {
-        reason: reason,
-        startedAt: loopState.startedAt,
-        iterations: loopState.iteration,
-      });
-    }
-    if (activeRegistryId) {
-      send({ type: "schedule_run_finished", recordId: activeRegistryId, reason: reason, iterations: loopState.iteration });
-      activeRegistryId = null;
-    }
-
-    if (pushModule) {
-      var body = reason === "pass"
-        ? "Task completed after " + loopState.iteration + " iteration(s)"
-        : reason === "max_iterations"
-          ? "Reached max iterations (" + loopState.maxIterations + ")"
-          : reason === "stopped"
-            ? "Loop stopped by user"
-            : "Loop ended due to error";
-      pushModule.sendPush({
-        type: "done",
-        slug: slug,
-        title: "Ralph Loop Complete",
-        body: body,
-        tag: "ralph-loop-done",
-      });
-    }
-  }
-
-  function resumeLoop() {
-    var dir = loopDir();
-    if (!dir) {
-      console.error("[ralph-loop] Cannot resume: no loop directory");
-      loopState.active = false;
-      loopState.phase = "idle";
-      saveLoopState();
-      return;
-    }
-    try {
-      loopState.promptText = fs.readFileSync(path.join(dir, "PROMPT.md"), "utf8");
-    } catch (e) {
-      console.error("[ralph-loop] Cannot resume: missing PROMPT.md");
-      loopState.active = false;
-      loopState.phase = "idle";
-      saveLoopState();
-      return;
-    }
-    try {
-      loopState.judgeText = fs.readFileSync(path.join(dir, "JUDGE.md"), "utf8");
-    } catch (e) {
-      console.error("[ralph-loop] Cannot resume: missing JUDGE.md");
-      loopState.active = false;
-      loopState.phase = "idle";
-      saveLoopState();
-      return;
-    }
-    // Retry the interrupted iteration (runNextIteration will increment)
-    if (loopState.iteration > 0) {
-      loopState.iteration--;
-    }
-    console.log("[ralph-loop] Resuming loop, next iteration will be " + (loopState.iteration + 1) + "/" + loopState.maxIterations);
-    send({ type: "loop_started", maxIterations: loopState.maxIterations });
-    runNextIteration();
-  }
-
-  function stopLoop() {
-    if (!loopState.active) return;
-    console.log("[ralph-loop] stopLoop called");
-    loopState.stopping = true;
-
-    // Abort all loop-related sessions (coder + judge)
-    var sessionIds = [loopState.currentSessionId, loopState.judgeSessionId];
-    for (var i = 0; i < sessionIds.length; i++) {
-      if (sessionIds[i] == null) continue;
-      var s = sm.sessions.get(sessionIds[i]);
-      if (!s) continue;
-      // End message queue so SDK exits prompt wait
-      if (s.messageQueue) { try { s.messageQueue.end(); } catch (e) {} }
-      // Abort active API call
-      if (s.abortController) { try { s.abortController.abort(); } catch (e) {} }
-    }
-
-    send({ type: "loop_stopping" });
-
-    // Fallback: force finish if onQueryComplete hasn't fired after 5s
-    setTimeout(function() {
-      if (loopState.active && loopState.stopping) {
-        console.log("[ralph-loop] Stop fallback triggered — forcing finishLoop");
-        finishLoop("stopped");
-      }
-    }, 5000);
-  }
-
-  // --- Terminal manager ---
-  var tm = createTerminalManager({ cwd: cwd, send: send, sendTo: sendTo });
-  var nm = createNotesManager({ cwd: cwd, send: send, sendTo: sendTo });
-
-  // Check for updates in background (admin only)
-  fetchVersion(updateChannel).then(function (v) {
-    if (v && isNewer(v, currentVersion)) {
-      latestVersion = v;
-      sendToAdmins({ type: "update_available", version: v });
-    }
-  }).catch(function (e) {
-    console.error("[project] Background version check failed:", e.message || e);
-  });
-
-  // --- WS connection handler ---
-  function handleConnection(ws, wsUser) {
-    ws._clayUser = wsUser || null;
-    clients.add(ws);
-    broadcastClientCount();
-
-    // Resume loop if server restarted mid-execution (deferred so client gets initial state first)
-    if (loopState._needsResume) {
-      delete loopState._needsResume;
-      setTimeout(function() { resumeLoop(); }, 500);
-    }
-
-    // Auto-assign owner if project has none and a user connects (e.g. IPC-added projects)
-    if (!projectOwnerId && ws._clayUser && ws._clayUser.id && !isMate) {
-      projectOwnerId = ws._clayUser.id;
-      if (opts.onProjectOwnerChanged) {
-        opts.onProjectOwnerChanged(slug, projectOwnerId);
-      }
-      console.log("[project] Auto-assigned owner for " + slug + ": " + projectOwnerId);
-    }
-
-    // Send cached state
-    var _userId = ws._clayUser ? ws._clayUser.id : null;
-    var _filteredProjects = getProjectList(_userId);
-    sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId });
-    if (latestVersion && ws._clayUser && ws._clayUser.role === "admin") {
-      sendTo(ws, { type: "update_available", version: latestVersion });
-    }
-    if (sm.slashCommands) {
-      sendTo(ws, { type: "slash_commands", commands: sm.slashCommands });
-    }
-    if (sm.currentModel) {
-      sendTo(ws, { type: "model_info", model: sm.currentModel, models: sm.availableModels || [] });
-    }
-    sendTo(ws, { type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-    sendTo(ws, { type: "term_list", terminals: tm.list() });
-    // Restore context sources (keep tab: sources — validated against _browserTabList at query time)
-    var restoredSources = loadContextSources(slug);
-    sendTo(ws, { type: "context_sources_state", active: restoredSources });
-    sendTo(ws, { type: "notes_list", notes: nm.list() });
-    sendTo(ws, { type: "loop_registry_updated", records: getHubSchedules() });
-
-    // Ralph Loop availability
-    var hasLoopFiles = false;
-    try {
-      fs.accessSync(path.join(cwd, ".claude", "PROMPT.md"));
-      fs.accessSync(path.join(cwd, ".claude", "JUDGE.md"));
-      hasLoopFiles = true;
-    } catch (e) {}
-    // Also check loop directory files
-    if (!hasLoopFiles && loopState.loopId) {
-      var _avDir = loopDir();
-      if (_avDir) {
-        try {
-          fs.accessSync(path.join(_avDir, "PROMPT.md"));
-          fs.accessSync(path.join(_avDir, "JUDGE.md"));
-          hasLoopFiles = true;
-        } catch (e) {}
-      }
-    }
-    sendTo(ws, {
-      type: "loop_available",
-      available: hasLoopFiles,
-      active: loopState.active,
-      iteration: loopState.iteration,
-      maxIterations: loopState.maxIterations,
-      name: loopState.name || null,
-    });
-
-    // Ralph phase state
-    sendTo(ws, {
-      type: "ralph_phase",
-      phase: loopState.phase,
-      wizardData: loopState.wizardData,
-      craftingSessionId: loopState.craftingSessionId || null,
-    });
-    if (loopState.phase === "crafting" || loopState.phase === "approval") {
-      var _hasPrompt = false;
-      var _hasJudge = false;
-      var _lDir = loopDir();
-      if (_lDir) {
-        try { fs.accessSync(path.join(_lDir, "PROMPT.md")); _hasPrompt = true; } catch (e) {}
-        try { fs.accessSync(path.join(_lDir, "JUDGE.md")); _hasJudge = true; } catch (e) {}
-      }
-      sendTo(ws, {
-        type: "ralph_files_status",
-        promptReady: _hasPrompt,
-        judgeReady: _hasJudge,
-        bothReady: _hasPrompt && _hasJudge,
-        taskId: loopState.loopId,
-      });
-    }
-
-    // Session list (filtered for access control)
-    var allSessions = [].concat(Array.from(sm.sessions.values())).filter(function (s) { return !s.hidden; });
-    if (usersModule.isMultiUser() && wsUser) {
-      allSessions = allSessions.filter(function (s) {
-        return usersModule.canAccessSession(wsUser.id, s, { visibility: "public" });
-      });
-    } else if (!usersModule.isMultiUser()) {
-      allSessions = allSessions.filter(function (s) { return !s.ownerId; });
-    }
-    sendTo(ws, {
-      type: "session_list",
-      sessions: allSessions.map(function (s) {
-        var loop = s.loop ? Object.assign({}, s.loop) : null;
-        if (loop && loop.loopId && loopRegistry) {
-          var rec = loopRegistry.getById(loop.loopId);
-          if (rec) {
-            if (rec.name) loop.name = rec.name;
-            if (rec.source) loop.source = rec.source;
-          }
-        }
-        return {
-          id: s.localId,
-          cliSessionId: s.cliSessionId || null,
-          title: s.title || "New Session",
-          active: s.localId === sm.activeSessionId,
-          isProcessing: s.isProcessing,
-          lastActivity: s.lastActivity || s.createdAt || 0,
-          loop: loop,
-          ownerId: s.ownerId || null,
-          sessionVisibility: s.sessionVisibility || "shared",
-        };
-      }),
-    });
-
-    // Restore active session for this client from server-side presence
-    var active = null;
-    var presenceKey = wsUser ? wsUser.id : "_default";
-    var storedPresence = userPresence.getPresence(slug, presenceKey);
-    if (storedPresence && storedPresence.sessionId) {
-      // Look up stored session by localId
-      if (sm.sessions.has(storedPresence.sessionId)) {
-        active = sm.sessions.get(storedPresence.sessionId);
-      } else {
-        // Try matching by cliSessionId (survives server restarts where localIds change)
-        sm.sessions.forEach(function (s) {
-          if (s.cliSessionId && s.cliSessionId === storedPresence.sessionId) active = s;
-        });
-      }
-      // Validate access
-      if (active && usersModule.isMultiUser() && wsUser) {
-        if (!usersModule.canAccessSession(wsUser.id, active, { visibility: "public" })) active = null;
-      } else if (active && !usersModule.isMultiUser() && active.ownerId) {
-        active = null;
-      }
-    }
-    // Fallback: pick the most recent accessible session
-    if (!active && allSessions.length > 0) {
-      active = allSessions[0];
-      for (var fi = 1; fi < allSessions.length; fi++) {
-        if ((allSessions[fi].lastActivity || 0) > (active.lastActivity || 0)) {
-          active = allSessions[fi];
-        }
-      }
-    }
-    // Auto-create a session if none exist for this client
-    var autoCreated = false;
-    if (!active) {
-      var autoOpts = {};
-      if (wsUser && usersModule.isMultiUser()) autoOpts.ownerId = wsUser.id;
-      active = sm.createSession(autoOpts, ws);
-      autoCreated = true;
-    }
-    if (active && !autoCreated) {
-      // Backfill ownerId for legacy sessions restored without one (multi-user only)
-      if (!active.ownerId && wsUser && usersModule.isMultiUser()) {
-        active.ownerId = wsUser.id;
-        sm.saveSessionFile(active);
-      }
-      ws._clayActiveSession = active.localId;
-      sendTo(ws, { type: "session_switched", id: active.localId, cliSessionId: active.cliSessionId || null, loop: active.loop || null });
-
-      var total = active.history.length;
-      var fromIndex = 0;
-      if (total > sm.HISTORY_PAGE_SIZE) {
-        fromIndex = sm.findTurnBoundary(active.history, Math.max(0, total - sm.HISTORY_PAGE_SIZE));
-      }
-      sendTo(ws, { type: "history_meta", total: total, from: fromIndex });
-      for (var i = fromIndex; i < total; i++) {
-        var _hitem = active.history[i];
-        if (_hitem && (_hitem.type === "mention_user" || _hitem.type === "mention_response")) {
-          console.log("[DEBUG handleConnection] sending mention at index=" + i + " from=" + fromIndex + " total=" + total + " type=" + _hitem.type + " mate=" + (_hitem.mateName || "") + " slug=" + slug);
-        }
-        sendTo(ws, hydrateImageRefs(_hitem));
-      }
-      // Include last result data + cached context usage for accurate restore
-      var _lastUsage = null, _lastModelUsage = null, _lastCost = null, _lastStreamInputTokens = null;
-      for (var _ri = total - 1; _ri >= 0; _ri--) {
-        if (active.history[_ri].type === "result") {
-          var _r = active.history[_ri];
-          _lastUsage = _r.usage || null;
-          _lastModelUsage = _r.modelUsage || null;
-          _lastCost = _r.cost != null ? _r.cost : null;
-          _lastStreamInputTokens = _r.lastStreamInputTokens || null;
-          break;
-        }
-      }
-      sendTo(ws, { type: "history_done", lastUsage: _lastUsage, lastModelUsage: _lastModelUsage, lastCost: _lastCost, lastStreamInputTokens: _lastStreamInputTokens, contextUsage: active.lastContextUsage || null });
-
-      if (active.isProcessing) {
-        sendTo(ws, { type: "status", status: "processing" });
-      }
-      var pendingIds = Object.keys(active.pendingPermissions);
-      for (var pi = 0; pi < pendingIds.length; pi++) {
-        var p = active.pendingPermissions[pendingIds[pi]];
-        sendTo(ws, {
-          type: "permission_request_pending",
-          requestId: p.requestId,
-          toolName: p.toolName,
-          toolInput: p.toolInput,
-          toolUseId: p.toolUseId,
-          decisionReason: p.decisionReason,
-          mateId: p.mateId || undefined,
-        });
-      }
-    }
-
-    // Record presence for this user + send mate DM restore hint if applicable
-    if (active) {
-      userPresence.setPresence(slug, presenceKey, active.localId, storedPresence ? storedPresence.mateDm : null);
-    }
-    if (storedPresence && storedPresence.mateDm && !isMate) {
-      sendTo(ws, { type: "restore_mate_dm", mateId: storedPresence.mateDm });
-    }
-
-    broadcastPresence();
-
-    // Restore debate state and brief watcher if a debate was in progress
-    restoreDebateState(ws);
-
-    ws.on("message", function (raw) {
-      var msg;
-      try { msg = JSON.parse(raw.toString()); } catch (e) { return; }
-      handleMessage(ws, msg);
-    });
-
-    ws.on("close", function () {
-      handleDisconnection(ws);
-    });
-  }
-
-  // --- WS message handler ---
-  function getSessionForWs(ws) {
-    return sm.sessions.get(ws._clayActiveSession) || null;
-  }
-
-  // --- Schedule / cancel a message (used by WS handler and auto-continue) ---
-  function scheduleMessage(session, text, resetsAt) {
-    if (!session || !text || !resetsAt) return;
-    // Cancel any existing scheduled message
-    if (session.scheduledMessage && session.scheduledMessage.timer) {
-      clearTimeout(session.scheduledMessage.timer);
-    }
-    var isPastReset = resetsAt <= Date.now();
-    var schedDelay = isPastReset ? 5000 : Math.max(0, resetsAt - Date.now()) + 60000; // +1min buffer after reset, or 5s for immediate
-    var sendsAt = Date.now() + schedDelay;
-    var schedEntry = {
-      type: "scheduled_message_queued",
-      text: text,
-      resetsAt: sendsAt,
-      scheduledAt: Date.now(),
-    };
-    sm.sendAndRecord(session, schedEntry);
-    session.scheduledMessage = {
-      text: text,
-      resetsAt: resetsAt,
-      timer: setTimeout(function () {
-        session.scheduledMessage = null;
-        if (session.destroying) return;
-        console.log("[project] Scheduled message firing for session " + session.localId);
-        sm.sendAndRecord(session, { type: "scheduled_message_sent" });
-        var schedUserMsg = { type: "user_message", text: text };
-        session.history.push(schedUserMsg);
-        sm.appendToSessionFile(session, schedUserMsg);
-        sendToSession(session.localId, schedUserMsg);
-        session.isProcessing = true;
-        onProcessingChanged();
-        sendToSession(session.localId, { type: "status", status: "processing" });
-        sdk.startQuery(session, text, null, getLinuxUserForSession(session));
-        sm.broadcastSessionList();
-      }, schedDelay),
-    };
-  }
-
-  function cancelScheduledMessage(session) {
-    if (!session) return;
-    if (session.scheduledMessage && session.scheduledMessage.timer) {
-      clearTimeout(session.scheduledMessage.timer);
-      session.scheduledMessage = null;
-      session.rateLimitAutoContinuePending = false;
-      sm.sendAndRecord(session, { type: "scheduled_message_cancelled" });
-    }
-  }
-
-  function handleMessage(ws, msg) {
-    // --- DM messages (delegated to server-level handler) ---
-    if (msg.type === "dm_open" || msg.type === "dm_send" || msg.type === "dm_list" || msg.type === "dm_typing" || msg.type === "dm_add_favorite" || msg.type === "dm_remove_favorite" || msg.type === "mate_create" || msg.type === "mate_list" || msg.type === "mate_delete" || msg.type === "mate_update" || msg.type === "mate_readd_builtin" || msg.type === "mate_list_available_builtins") {
-      if (typeof opts.onDmMessage === "function") {
-        opts.onDmMessage(ws, msg);
-      }
-      return;
-    }
-
-    // --- @Mention: invoke another Mate inline ---
-    if (msg.type === "mention") {
-      handleMention(ws, msg);
-      return;
-    }
-
-    if (msg.type === "mention_stop") {
-      var session = getSessionForWs(ws);
-      if (session && session._mentionInProgress) {
-        // Abort the active mention session for this mate
-        var mateId = msg.mateId;
-        if (mateId && session._mentionSessions && session._mentionSessions[mateId]) {
-          session._mentionSessions[mateId].abort();
-          session._mentionSessions[mateId].close();
-          delete session._mentionSessions[mateId];
-        }
-        session._mentionInProgress = false;
-        sendToSession(session.localId, { type: "mention_done", mateId: mateId, stopped: true });
-        send({ type: "mention_processing", mateId: mateId, active: false });
-      }
-      return;
-    }
-
-    // --- Debate ---
-    if (msg.type === "debate_start") {
-      handleDebateStart(ws, msg);
-      return;
-    }
-    if (msg.type === "debate_hand_raise") {
-      handleDebateHandRaise(ws);
-      return;
-    }
-    if (msg.type === "debate_comment") {
-      handleDebateComment(ws, msg);
-      return;
-    }
-    if (msg.type === "debate_stop") {
-      handleDebateStop(ws);
-      return;
-    }
-    if (msg.type === "debate_conclude_response") {
-      handleDebateConcludeResponse(ws, msg);
-      return;
-    }
-    if (msg.type === "debate_confirm_brief") {
-      handleDebateConfirmBrief(ws);
-      return;
-    }
-    if (msg.type === "debate_proposal_response") {
-      // Match the most recent pending proposal (proposalId may not be
-      // available on the client since it's not part of the tool input)
-      var _dpKeys = Object.keys(_pendingDebateProposals);
-      if (_dpKeys.length === 0) return;
-      var _dpKey = msg.proposalId || _dpKeys[_dpKeys.length - 1];
-      var pending = _pendingDebateProposals[_dpKey];
-      if (!pending) return;
-      delete _pendingDebateProposals[_dpKey];
-      if (msg.action === "start") {
-        // Set up debate state on the session, then transition to live
-        var _dpSession = getSessionForWs(ws);
-        if (_dpSession) {
-          var _dpMateId = isMate ? path.basename(cwd) : null;
-          handleMcpDebateApproval(_dpSession, pending.briefData, _dpMateId, ws);
-        }
-        pending.resolve({ action: "start" });
-      } else {
-        pending.resolve({ action: "cancel" });
-      }
-      return;
-    }
-    if (msg.type === "debate_user_floor_response") {
-      handleDebateUserFloorResponse(ws, msg);
-      return;
-    }
-
-    // --- Knowledge file management ---
-    if (msg.type === "knowledge_list") {
-      var knowledgeDir = path.join(cwd, "knowledge");
-      var files = [];
-      try {
-        var entries = fs.readdirSync(knowledgeDir);
-        for (var ki = 0; ki < entries.length; ki++) {
-          if (entries[ki] === "session-digests.jsonl") continue;
-          if (entries[ki] === "sticky-notes.md") continue;
-          if (entries[ki] === "memory-summary.md") continue;
-          if (entries[ki].endsWith(".md") || entries[ki].endsWith(".jsonl")) {
-            var stat = fs.statSync(path.join(knowledgeDir, entries[ki]));
-            files.push({ name: entries[ki], size: stat.size, mtime: stat.mtimeMs, common: false });
-          }
-        }
-      } catch (e) { /* dir may not exist */ }
-      files.sort(function (a, b) { return b.mtime - a.mtime; });
-
-      // For mate projects, check which files are promoted and include common files from other mates
-      if (isMate) {
-        var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-        var thisMateId = path.basename(cwd);
-        // Tag promoted files
-        for (var pi = 0; pi < files.length; pi++) {
-          files[pi].promoted = matesModule.isPromoted(mateCtx, thisMateId, files[pi].name);
-        }
-        // Get common files from other mates
-        var commonFiles = matesModule.getCommonKnowledgeForMate(mateCtx, thisMateId);
-        // Filter out entries that belong to THIS mate (those are already in the list as promoted)
-        for (var ci = 0; ci < commonFiles.length; ci++) {
-          if (commonFiles[ci].ownMateId !== thisMateId) {
-            files.push(commonFiles[ci]);
-          }
-        }
-      }
-
-      sendTo(ws, { type: "knowledge_list", files: files });
-      return;
-    }
-
-    if (msg.type === "knowledge_read") {
-      if (!msg.name) return;
-      var safeName = path.basename(msg.name);
-      var filePath;
-      if (msg.common && msg.ownMateId && isMate) {
-        // Reading a common file from another mate
-        var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-        try {
-          var content = matesModule.readCommonKnowledgeFile(mateCtx, msg.ownMateId, safeName);
-          sendTo(ws, { type: "knowledge_content", name: safeName, content: content, common: true, ownMateId: msg.ownMateId });
-        } catch (e) {
-          sendTo(ws, { type: "knowledge_content", name: safeName, content: "", error: "File not found", common: true });
-        }
-      } else {
-        filePath = path.join(cwd, "knowledge", safeName);
-        try {
-          var content = fs.readFileSync(filePath, "utf8");
-          sendTo(ws, { type: "knowledge_content", name: safeName, content: content });
-        } catch (e) {
-          sendTo(ws, { type: "knowledge_content", name: safeName, content: "", error: "File not found" });
-        }
-      }
-      return;
-    }
-
-    if (msg.type === "knowledge_save") {
-      if (!msg.name || typeof msg.content !== "string") return;
-      var safeName = path.basename(msg.name);
-      if (!safeName.endsWith(".md") && !safeName.endsWith(".jsonl")) safeName += ".md";
-      var knowledgeDir = path.join(cwd, "knowledge");
-      fs.mkdirSync(knowledgeDir, { recursive: true });
-      fs.writeFileSync(path.join(knowledgeDir, safeName), msg.content);
-      // Return updated list
-      var files = [];
-      try {
-        var entries = fs.readdirSync(knowledgeDir);
-        for (var ki = 0; ki < entries.length; ki++) {
-          if (entries[ki].endsWith(".md") || entries[ki].endsWith(".jsonl")) {
-            var stat = fs.statSync(path.join(knowledgeDir, entries[ki]));
-            files.push({ name: entries[ki], size: stat.size, mtime: stat.mtimeMs });
-          }
-        }
-      } catch (e) {}
-      files.sort(function (a, b) { return b.mtime - a.mtime; });
-      // Tag files for mate projects
-      if (isMate) {
-        var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-        var thisMateId = path.basename(cwd);
-        for (var pi = 0; pi < files.length; pi++) {
-          files[pi].common = false;
-          files[pi].promoted = matesModule.isPromoted(mateCtx, thisMateId, files[pi].name);
-        }
-        var commonFiles = matesModule.getCommonKnowledgeForMate(mateCtx, thisMateId);
-        for (var ci = 0; ci < commonFiles.length; ci++) {
-          if (commonFiles[ci].ownMateId !== thisMateId) files.push(commonFiles[ci]);
-        }
-      }
-      sendTo(ws, { type: "knowledge_saved", name: safeName });
-      sendTo(ws, { type: "knowledge_list", files: files });
-      return;
-    }
-
-    if (msg.type === "knowledge_delete") {
-      if (!msg.name) return;
-      var safeName = path.basename(msg.name);
-      var filePath = path.join(cwd, "knowledge", safeName);
-      try { fs.unlinkSync(filePath); } catch (e) {}
-      // Return updated list
-      var knowledgeDir = path.join(cwd, "knowledge");
-      var files = [];
-      try {
-        var entries = fs.readdirSync(knowledgeDir);
-        for (var ki = 0; ki < entries.length; ki++) {
-          if (entries[ki].endsWith(".md") || entries[ki].endsWith(".jsonl")) {
-            var stat = fs.statSync(path.join(knowledgeDir, entries[ki]));
-            files.push({ name: entries[ki], size: stat.size, mtime: stat.mtimeMs });
-          }
-        }
-      } catch (e) {}
-      files.sort(function (a, b) { return b.mtime - a.mtime; });
-      // Tag files for mate projects
-      if (isMate) {
-        var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-        var thisMateId = path.basename(cwd);
-        for (var pi = 0; pi < files.length; pi++) {
-          files[pi].common = false;
-          files[pi].promoted = matesModule.isPromoted(mateCtx, thisMateId, files[pi].name);
-        }
-        var commonFiles = matesModule.getCommonKnowledgeForMate(mateCtx, thisMateId);
-        for (var ci = 0; ci < commonFiles.length; ci++) {
-          if (commonFiles[ci].ownMateId !== thisMateId) files.push(commonFiles[ci]);
-        }
-      }
-      sendTo(ws, { type: "knowledge_deleted", name: safeName });
-      sendTo(ws, { type: "knowledge_list", files: files });
-      return;
-    }
-
-    if (msg.type === "knowledge_promote") {
-      if (!isMate || !msg.name) return;
-      var safeName = path.basename(msg.name);
-      var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-      var thisMateId = path.basename(cwd);
-      var mate = matesModule.getMate(mateCtx, thisMateId);
-      var mateName = (mate && mate.name) || null;
-      matesModule.promoteKnowledge(mateCtx, thisMateId, mateName, safeName);
-      sendTo(ws, { type: "knowledge_promoted", name: safeName });
-      // Re-send updated list (reuse knowledge_list logic)
-      handleMessage(ws, { type: "knowledge_list" });
-      return;
-    }
-
-    if (msg.type === "knowledge_depromote") {
-      if (!isMate || !msg.name) return;
-      var safeName = path.basename(msg.name);
-      var mateCtx = matesModule.buildMateCtx(projectOwnerId);
-      var thisMateId = path.basename(cwd);
-      matesModule.depromoteKnowledge(mateCtx, thisMateId, safeName);
-      sendTo(ws, { type: "knowledge_depromoted", name: safeName });
-      handleMessage(ws, { type: "knowledge_list" });
-      return;
-    }
-
-    // --- Memory (session digests) management (delegated to project-memory.js) ---
-    if (msg.type === "memory_list") { _memory.handleMemoryList(ws); return; }
-    if (msg.type === "memory_search") { _memory.handleMemorySearch(ws, msg); return; }
-    if (msg.type === "memory_delete") { _memory.handleMemoryDelete(ws, msg); return; }
-
-    if (msg.type === "push_subscribe") {
-      var _pushUserId = ws._clayUser ? ws._clayUser.id : null;
-      if (pushModule && msg.subscription) pushModule.addSubscription(msg.subscription, msg.replaceEndpoint, _pushUserId);
-      return;
-    }
-
-    if (msg.type === "load_more_history") {
-      var session = getSessionForWs(ws);
-      if (!session || typeof msg.before !== "number") return;
-      var before = msg.before;
-      var targetFrom = typeof msg.target === "number" ? msg.target : before - sm.HISTORY_PAGE_SIZE;
-      var from = sm.findTurnBoundary(session.history, Math.max(0, targetFrom));
-      var to = before;
-      var items = session.history.slice(from, to).map(hydrateImageRefs);
-      sendTo(ws, {
-        type: "history_prepend",
-        items: items,
-        meta: { from: from, to: to, hasMore: from > 0 },
-      });
-      return;
-    }
-
-    if (msg.type === "new_session") {
-      var sessionOpts = {};
-      if (ws._clayUser && usersModule.isMultiUser()) sessionOpts.ownerId = ws._clayUser.id;
-      if (msg.sessionVisibility) sessionOpts.sessionVisibility = msg.sessionVisibility;
-      var newSess = sm.createSession(sessionOpts, ws);
-      ws._clayActiveSession = newSess.localId;
-      var nsPresKey = ws._clayUser ? ws._clayUser.id : "_default";
-      userPresence.setPresence(slug, nsPresKey, newSess.localId, null);
-      if (usersModule.isMultiUser()) {
-        broadcastPresence();
-      }
-      return;
-    }
-
-    if (msg.type === "set_session_visibility") {
-      if (typeof msg.sessionId === "number" && (msg.visibility === "shared" || msg.visibility === "private")) {
-        sm.setSessionVisibility(msg.sessionId, msg.visibility);
-      }
-      return;
-    }
-
-    if (msg.type === "transfer_project_owner") {
-      var isAdmin = ws._clayUser && ws._clayUser.role === "admin";
-      var isProjectOwner = ws._clayUser && projectOwnerId && ws._clayUser.id === projectOwnerId;
-      if (!ws._clayUser || (!isAdmin && !isProjectOwner)) {
-        sendTo(ws, { type: "error", text: "Only project owners or admins can transfer ownership." });
-        return;
-      }
-      var targetUser = msg.userId ? usersModule.findUserById(msg.userId) : null;
-      if (!targetUser) {
-        sendTo(ws, { type: "error", text: "User not found." });
-        return;
-      }
-      projectOwnerId = targetUser.id;
-      // Persist via daemon callback
-      if (opts.onProjectOwnerChanged) {
-        opts.onProjectOwnerChanged(slug, projectOwnerId);
-      }
-      send({ type: "project_owner_changed", ownerId: projectOwnerId, ownerName: targetUser.displayName || targetUser.username });
-      return;
-    }
-
-    if (msg.type === "resume_session") {
-      if (!msg.cliSessionId) return;
-      var cliSess = require("./cli-sessions");
-      // Try SDK for title first, then fall back to manual parsing
-      var titlePromise = getSDK().then(function(sdkMod) {
-        return sdkMod.getSessionInfo(msg.cliSessionId, { dir: cwd });
-      }).then(function(info) {
-        return (info && info.summary) ? info.summary.substring(0, 100) : null;
-      }).catch(function() { return null; });
-
-      Promise.all([
-        cliSess.readCliSessionHistory(cwd, msg.cliSessionId),
-        titlePromise
-      ]).then(function(results) {
-        var history = results[0];
-        var sdkTitle = results[1];
-        var title = sdkTitle || "Resumed session";
-        if (!sdkTitle) {
-          for (var i = 0; i < history.length; i++) {
-            if (history[i].type === "user_message" && history[i].text) {
-              title = history[i].text.substring(0, 50);
-              break;
-            }
-          }
-        }
-        var resumed = sm.resumeSession(msg.cliSessionId, { history: history, title: title }, ws);
-        if (resumed) ws._clayActiveSession = resumed.localId;
-      }).catch(function() {
-        var resumed = sm.resumeSession(msg.cliSessionId, undefined, ws);
-        if (resumed) ws._clayActiveSession = resumed.localId;
-      });
-      return;
-    }
-
-    if (msg.type === "list_cli_sessions") {
-      var _fs = require("fs");
-      // Collect session IDs already in relay (in-memory + persisted on disk)
-      var relayIds = {};
-      sm.sessions.forEach(function (s) {
-        if (s.cliSessionId) relayIds[s.cliSessionId] = true;
-      });
-      try {
-        var sessDir = sm.sessionsDir;
-        var diskFiles = _fs.readdirSync(sessDir);
-        for (var fi = 0; fi < diskFiles.length; fi++) {
-          if (diskFiles[fi].endsWith(".jsonl")) {
-            relayIds[diskFiles[fi].replace(".jsonl", "")] = true;
-          }
-        }
-      } catch (e) {}
-
-      getSDK().then(function(sdkMod) {
-        return sdkMod.listSessions({ dir: cwd });
-      }).then(function(sdkSessions) {
-        var filtered = sdkSessions.filter(function(s) {
-          return !relayIds[s.sessionId];
-        }).map(function(s) {
-          return {
-            sessionId: s.sessionId,
-            firstPrompt: s.summary || s.firstPrompt || "",
-            model: null,
-            gitBranch: s.gitBranch || null,
-            startTime: s.createdAt ? new Date(s.createdAt).toISOString() : null,
-            lastActivity: s.lastModified ? new Date(s.lastModified).toISOString() : null,
-          };
-        });
-        sendTo(ws, { type: "cli_session_list", sessions: filtered });
-      }).catch(function() {
-        // Fallback to manual parsing if SDK fails
-        var cliSessions = require("./cli-sessions");
-        cliSessions.listCliSessions(cwd).then(function(sessions) {
-          var filtered = sessions.filter(function(s) {
-            return !relayIds[s.sessionId];
-          });
-          sendTo(ws, { type: "cli_session_list", sessions: filtered });
-        }).catch(function() {
-          sendTo(ws, { type: "cli_session_list", sessions: [] });
-        });
-      });
-      return;
-    }
-
-
-    if (msg.type === "switch_session") {
-      if (msg.id && sm.sessions.has(msg.id)) {
-        // Check access in multi-user mode
-        if (usersModule.isMultiUser() && ws._clayUser) {
-          var switchTarget = sm.sessions.get(msg.id);
-          if (!usersModule.canAccessSession(ws._clayUser.id, switchTarget, { visibility: "public" })) return;
-          ws._clayActiveSession = msg.id;
-          sm.switchSession(msg.id, ws, hydrateImageRefs);
-          broadcastPresence();
-        } else {
-          ws._clayActiveSession = msg.id;
-          sm.switchSession(msg.id, ws, hydrateImageRefs);
-        }
-        var swPresKey = ws._clayUser ? ws._clayUser.id : "_default";
-        userPresence.setPresence(slug, swPresKey, msg.id, null);
-      }
-      return;
-    }
-
-    if (msg.type === "set_mate_dm") {
-      // Only store mateDm on non-mate projects (main project presence).
-      // Mate projects should never hold mateDm to avoid circular restore loops.
-      if (!isMate) {
-        var dmPresKey = ws._clayUser ? ws._clayUser.id : "_default";
-        userPresence.setMateDm(slug, dmPresKey, msg.mateId || null);
-      }
-      return;
-    }
-
-    if (msg.type === "delete_session") {
-      if (ws._clayUser) {
-        var sdPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!sdPerms.sessionDelete) {
-          sendTo(ws, { type: "error", text: "You do not have permission to delete sessions" });
-          return;
-        }
-      }
-      if (msg.id && sm.sessions.has(msg.id)) {
-        sm.deleteSession(msg.id, ws);
-      }
-      return;
-    }
-
-    if (msg.type === "rename_session") {
-      if (msg.id && sm.sessions.has(msg.id) && msg.title) {
-        var s = sm.sessions.get(msg.id);
-        s.title = String(msg.title).substring(0, 100);
-        sm.saveSessionFile(s);
-        sm.broadcastSessionList();
-        // Sync title to SDK session
-        if (s.cliSessionId) {
-          getSDK().then(function(sdk) {
-            sdk.renameSession(s.cliSessionId, s.title, { dir: cwd }).catch(function(e) {
-              console.error("[project] SDK renameSession failed:", e.message);
-            });
-          }).catch(function() {});
-        }
-      }
-      return;
-    }
-
-    if (msg.type === "search_sessions") {
-      var results = sm.searchSessions(msg.query || "");
-      sendTo(ws, { type: "search_results", query: msg.query || "", results: results });
-      return;
-    }
-
-    if (msg.type === "search_session_content") {
-      var targetSession = msg.id ? sm.sessions.get(msg.id) : getSessionForWs(ws);
-      if (!targetSession) return;
-      var contentResults = sm.searchSessionContent(targetSession.localId, msg.query || "");
-      var searchResp = { type: "search_content_results", query: msg.query || "", sessionId: targetSession.localId, hits: contentResults.hits, total: contentResults.total };
-      if (msg.source) searchResp.source = msg.source;
-      sendTo(ws, searchResp);
-      return;
-    }
-
-    if (msg.type === "set_update_channel") {
-      if (usersModule.isMultiUser() && (!ws._clayUser || ws._clayUser.role !== "admin")) return;
-      var newChannel = msg.channel === "beta" ? "beta" : "stable";
-      updateChannel = newChannel;
-      latestVersion = null;
-      if (typeof opts.onSetUpdateChannel === "function") {
-        opts.onSetUpdateChannel(newChannel);
-      }
-      // Re-fetch with new channel and broadcast to admin clients
-      fetchVersion(updateChannel).then(function (v) {
-        if (v && isNewer(v, currentVersion)) {
-          latestVersion = v;
-          sendToAdmins({ type: "update_available", version: v });
-        }
-      }).catch(function () {});
-      return;
-    }
-
-    if (msg.type === "check_update") {
-      if (usersModule.isMultiUser() && (!ws._clayUser || ws._clayUser.role !== "admin")) return;
-      fetchVersion(updateChannel).then(function (v) {
-        if (v && isNewer(v, currentVersion)) {
-          latestVersion = v;
-          sendTo(ws, { type: "update_available", version: v });
-        } else {
-          sendTo(ws, { type: "up_to_date", version: currentVersion });
-        }
-      }).catch(function () {});
-      return;
-    }
-
-    if (msg.type === "update_now") {
-      if (usersModule.isMultiUser() && (!ws._clayUser || ws._clayUser.role !== "admin")) return;
-      send({ type: "update_started", version: latestVersion || "" });
-      var _ipc = require("./ipc");
-      var _config = require("./config");
-      _ipc.sendIPCCommand(_config.socketPath(), { cmd: "update" });
-      return;
-    }
-
-    if (msg.type === "process_stats") {
-      var sessionCount = sm.sessions.size;
-      var processingCount = 0;
-      sm.sessions.forEach(function (s) {
-        if (s.isProcessing) processingCount++;
-      });
-      var mem = process.memoryUsage();
-      sendTo(ws, {
-        type: "process_stats",
-        pid: process.pid,
-        uptime: process.uptime(),
-        memory: {
-          rss: mem.rss,
-          heapUsed: mem.heapUsed,
-          heapTotal: mem.heapTotal,
-          external: mem.external,
-        },
-        sessions: sessionCount,
-        processing: processingCount,
-        clients: clients.size,
-        terminals: tm.list().length,
-      });
-      return;
-    }
-
-    if (msg.type === "stop") {
-      var session = getSessionForWs(ws);
-      if (session && session.abortController && session.isProcessing) {
-        session.abortController.abort();
-      }
-      return;
-    }
-
-
-    if (msg.type === "stop_task") {
-      if (msg.taskId) {
-        sdk.stopTask(msg.taskId);
-      }
-      return;
-    }
-
-    if (msg.type === "kill_process") {
-      var pid = msg.pid;
-      if (!pid || typeof pid !== "number") return;
-      // Verify target is actually a claude process before killing
-      if (!sdk.isClaudeProcess(pid)) {
-        console.error("[project] Refused to kill PID " + pid + ": not a claude process");
-        sendTo(ws, { type: "error", text: "Process " + pid + " is not a Claude process." });
-        return;
-      }
-      try {
-        process.kill(pid, "SIGTERM");
-        console.log("[project] Sent SIGTERM to conflicting Claude process PID " + pid);
-        sendTo(ws, { type: "process_killed", pid: pid });
-      } catch (e) {
-        console.error("[project] Failed to kill PID " + pid + ":", e.message);
-        sendTo(ws, { type: "error", text: "Failed to kill process " + pid + ": " + (e.message || e) });
-      }
-      return;
-    }
-
-    if (msg.type === "set_model" && msg.model) {
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setModel(session, msg.model);
-      }
-      return;
-    }
-
-    if (msg.type === "set_server_default_model" && msg.model) {
-      if (typeof opts.onSetServerDefaultModel === "function") {
-        opts.onSetServerDefaultModel(msg.model);
-      }
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setModel(session, msg.model);
-      }
-      return;
-    }
-
-    if (msg.type === "set_project_default_model" && msg.model) {
-      if (typeof opts.onSetProjectDefaultModel === "function") {
-        opts.onSetProjectDefaultModel(slug, msg.model);
-      }
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setModel(session, msg.model);
-      }
-      return;
-    }
-
-    if (msg.type === "set_permission_mode" && msg.mode) {
-      sm.currentPermissionMode = msg.mode;
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setPermissionMode(session, msg.mode);
-      }
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode, effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_server_default_mode" && msg.mode) {
-      if (typeof opts.onSetServerDefaultMode === "function") {
-        opts.onSetServerDefaultMode(msg.mode);
-      }
-      sm.currentPermissionMode = msg.mode;
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setPermissionMode(session, msg.mode);
-      }
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode, effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_project_default_mode" && msg.mode) {
-      if (typeof opts.onSetProjectDefaultMode === "function") {
-        opts.onSetProjectDefaultMode(slug, msg.mode);
-      }
-      sm.currentPermissionMode = msg.mode;
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setPermissionMode(session, msg.mode);
-      }
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode, effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_effort" && msg.effort) {
-      sm.currentEffort = msg.effort;
-      var session = getSessionForWs(ws);
-      if (session) {
-        sdk.setEffort(session, msg.effort);
-      }
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort, betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_server_default_effort" && msg.effort) {
-      if (typeof opts.onSetServerDefaultEffort === "function") {
-        opts.onSetServerDefaultEffort(msg.effort);
-      }
-      sm.currentEffort = msg.effort;
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort, betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_project_default_effort" && msg.effort) {
-      if (typeof opts.onSetProjectDefaultEffort === "function") {
-        opts.onSetProjectDefaultEffort(slug, msg.effort);
-      }
-      sm.currentEffort = msg.effort;
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort, betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_betas") {
-      sm.currentBetas = msg.betas || [];
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort || "medium", betas: sm.currentBetas, thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "set_thinking") {
-      sm.currentThinking = msg.thinking || "adaptive";
-      if (msg.budgetTokens) sm.currentThinkingBudget = msg.budgetTokens;
-      send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode || "default", effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-      return;
-    }
-
-    if (msg.type === "rewind_preview") {
-      var session = getSessionForWs(ws);
-      if (!session || !session.cliSessionId || !msg.uuid) return;
-      // Reject preview requests while a rewind is executing
-      if (session._rewindInProgress) return;
-
-      (async function () {
-        var result;
-        try {
-          result = await sdk.getOrCreateRewindQuery(session);
-          var preview = await result.query.rewindFiles(msg.uuid, { dryRun: true });
-          var diffs = {};
-          var changedFiles = preview.filesChanged || [];
-          for (var f = 0; f < changedFiles.length; f++) {
-            try {
-              diffs[changedFiles[f]] = execFileSync(
-                "git", ["diff", "HEAD", "--", changedFiles[f]],
-                { cwd: cwd, encoding: "utf8", timeout: 5000 }
-              ) || "";
-            } catch (e) { diffs[changedFiles[f]] = ""; }
-          }
-          sendTo(ws, { type: "rewind_preview_result", preview: preview, diffs: diffs, uuid: msg.uuid });
-        } catch (err) {
-          sendTo(ws, { type: "rewind_error", text: "Failed to preview rewind: " + err.message });
-        } finally {
-          if (result && result.isTemp) result.cleanup();
-        }
-      })();
-      return;
-    }
-
-    if (msg.type === "rewind_execute") {
-      var session = getSessionForWs(ws);
-      if (!session || !session.cliSessionId || !msg.uuid) return;
-      // Guard against concurrent rewind executions
-      if (session._rewindInProgress) {
-        sendTo(ws, { type: "rewind_error", text: "Rewind already in progress." });
-        return;
-      }
-      session._rewindInProgress = true;
-      var mode = msg.mode || "both";
-
-      (async function () {
-        var result;
-        try {
-          // File restoration (skip for chat-only mode)
-          if (mode !== "chat") {
-            result = await sdk.getOrCreateRewindQuery(session);
-            await result.query.rewindFiles(msg.uuid, { dryRun: false });
-          }
-
-          // Conversation rollback (skip for files-only mode)
-          if (mode !== "files") {
-            var targetIdx = -1;
-            for (var i = 0; i < session.messageUUIDs.length; i++) {
-              if (session.messageUUIDs[i].uuid === msg.uuid) {
-                targetIdx = i;
-                break;
-              }
-            }
-
-            if (targetIdx >= 0) {
-              var trimTo = session.messageUUIDs[targetIdx].historyIndex;
-              for (var k = trimTo - 1; k >= 0; k--) {
-                if (session.history[k].type === "user_message") {
-                  trimTo = k;
-                  break;
-                }
-              }
-              session.history = session.history.slice(0, trimTo);
-              session.messageUUIDs = session.messageUUIDs.slice(0, targetIdx);
-            }
-
-            var kept = session.messageUUIDs;
-            session.lastRewindUuid = kept.length > 0 ? kept[kept.length - 1].uuid : null;
-          }
-
-          if (session.abortController) {
-            try { session.abortController.abort(); } catch (e) {}
-          }
-          if (session.messageQueue) {
-            try { session.messageQueue.end(); } catch (e) {}
-          }
-          session.queryInstance = null;
-          session.messageQueue = null;
-          session.abortController = null;
-          session.blocks = {};
-          session.sentToolResults = {};
-          session.pendingPermissions = {};
-          session.pendingAskUser = {};
-          session.isProcessing = false;
-          onProcessingChanged();
-
-          sm.saveSessionFile(session);
-          sm.switchSession(session.localId, ws, hydrateImageRefs);
-          sm.sendAndRecord(session, { type: "rewind_complete", mode: mode });
-          sm.broadcastSessionList();
-        } catch (err) {
-          sendTo(ws, { type: "rewind_error", text: "Rewind failed: " + err.message });
-        } finally {
-          session._rewindInProgress = false;
-          if (result && result.isTemp) result.cleanup();
-        }
-      })();
-      return;
-    }
-
-    if (msg.type === "fork_session" && msg.uuid) {
-      var session = getSessionForWs(ws);
-      if (!session || !session.cliSessionId) {
-        sendTo(ws, { type: "error", text: "Cannot fork: no CLI session" });
-        return;
-      }
-      var forkCliId = session.cliSessionId;
-      var forkTitle = (session.title || "New Session") + " (fork)";
-      getSDK().then(function(sdkMod) {
-        return sdkMod.forkSession(forkCliId, {
-          upToMessageId: msg.uuid,
-          dir: cwd,
-        });
-      }).then(function(result) {
-        var cliSess = require("./cli-sessions");
-        return cliSess.readCliSessionHistory(cwd, result.sessionId).then(function(history) {
-          var forked = sm.resumeSession(result.sessionId, { history: history, title: forkTitle }, ws);
-          if (forked) {
-            ws._clayActiveSession = forked.localId;
-            sendTo(ws, { type: "fork_complete", sessionId: forked.localId });
-          }
-        });
-      }).catch(function(e) {
-        sendTo(ws, { type: "error", text: "Fork failed: " + (e.message || e) });
-      });
-      return;
-    }
-
-    if (msg.type === "ask_user_response") {
-      var session = getSessionForWs(ws);
-      if (!session) return;
-      var toolId = msg.toolId;
-      var answers = msg.answers || {};
-      var pending = session.pendingAskUser[toolId];
-      if (!pending) return;
-      delete session.pendingAskUser[toolId];
-      sm.sendAndRecord(session, { type: "ask_user_answered", toolId: toolId, answers: answers });
-      pending.resolve({
-        behavior: "allow",
-        updatedInput: Object.assign({}, pending.input, { answers: answers }),
-      });
-      return;
-    }
-
-    if (msg.type === "input_sync") {
-      sendToSessionOthers(ws, ws._clayActiveSession, msg);
-      return;
-    }
-
-    if (msg.type === "cursor_move" || msg.type === "cursor_leave" || msg.type === "text_select") {
-      if (!usersModule.isMultiUser() || !ws._clayUser) return;
-      var u = ws._clayUser;
-      var p = u.profile || {};
-      var cursorMsg = {
-        type: msg.type,
-        userId: u.id,
-        displayName: p.name || u.displayName || u.username,
-        avatarStyle: p.avatarStyle || "thumbs",
-        avatarSeed: p.avatarSeed || u.username,
-        avatarCustom: p.avatarCustom || "",
-      };
-      if (msg.type === "cursor_move") {
-        cursorMsg.turn = msg.turn;
-        if (msg.rx != null) cursorMsg.rx = msg.rx;
-        if (msg.ry != null) cursorMsg.ry = msg.ry;
-      }
-      if (msg.type === "text_select") {
-        cursorMsg.ranges = msg.ranges || [];
-      }
-      sendToSessionOthers(ws, ws._clayActiveSession, cursorMsg);
-      return;
-    }
-
-    if (msg.type === "permission_response") {
-      var session = getSessionForWs(ws);
-      if (!session) return;
-      var requestId = msg.requestId;
-      var decision = msg.decision;
-      var pending = session.pendingPermissions[requestId];
-      if (!pending) return;
-      delete session.pendingPermissions[requestId];
-      onProcessingChanged(); // update cross-project permission badge
-
-      // --- Plan approval: "allow_accept_edits" — approve + switch to acceptEdits mode ---
-      if (decision === "allow_accept_edits") {
-        sdk.setPermissionMode(session, "acceptEdits");
-        sm.currentPermissionMode = "acceptEdits";
-        send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode, effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-        pending.resolve({ behavior: "allow", updatedInput: pending.toolInput });
-        sm.sendAndRecord(session, { type: "permission_resolved", requestId: requestId, decision: decision });
-        return;
-      }
-
-      // --- Plan approval: "allow_clear_context" — new session + plan as first message + acceptEdits ---
-      if (decision === "allow_clear_context") {
-        // Deny current plan to end the turn
-        pending.resolve({ behavior: "deny", message: "User chose to clear context and restart" });
-        sm.sendAndRecord(session, { type: "permission_resolved", requestId: requestId, decision: decision });
-
-        // Abort the old session's query — but defer to next tick so the SDK's
-        // deny write (scheduled as microtask by pending.resolve) completes first.
-        // Aborting synchronously would kill the subprocess before the write,
-        // causing an "Operation aborted" crash in the SDK.
-        session.isProcessing = false;
-        onProcessingChanged();
-        session.pendingPermissions = {};
-        session.pendingAskUser = {};
-        sm.broadcastSessionList();
-        setImmediate(function () {
-          if (session.abortController) {
-            session.abortController.abort();
-          }
-        });
-
-        // Update permission mode for the new session
-        sm.currentPermissionMode = "acceptEdits";
-        send({ type: "config_state", model: sm.currentModel || "", mode: sm.currentPermissionMode, effort: sm.currentEffort || "medium", betas: sm.currentBetas || [], thinking: sm.currentThinking || "adaptive", thinkingBudget: sm.currentThinkingBudget || 10000 });
-
-        // Build prompt from plan content (sent from client) or plan file path
-        var clientPlanContent = msg.planContent || "";
-        var planPrompt;
-        if (clientPlanContent) {
-          planPrompt = "Execute the following plan. Do NOT re-enter plan mode — just implement it step by step.\n\n" + clientPlanContent;
-        } else {
-          var planFilePath = (pending.toolInput && pending.toolInput.planFilePath) || "";
-          planPrompt = "Execute the plan in " + planFilePath + ". Do NOT re-enter plan mode — read the plan file and implement it step by step.";
-        }
-
-        // Wait for old query stream to fully terminate, then create new session + send plan
-        var oldStreamPromise = session.streamPromise || Promise.resolve();
-        Promise.race([
-          oldStreamPromise,
-          new Promise(function (resolve) { setTimeout(resolve, 3000); }),
-        ]).then(function () {
-          try {
-            var newSession = sm.createSession(null, ws);
-            // Send the plan as the first user message (with planContent for UI rendering)
-            var userMsg = { type: "user_message", text: planPrompt, planContent: clientPlanContent || null };
-            newSession.history.push(userMsg);
-            sm.appendToSessionFile(newSession, userMsg);
-            newSession.title = "Plan execution (cleared context)";
-            sm.saveSessionFile(newSession);
-            sm.broadcastSessionList();
-            sendToSession(newSession.localId, userMsg);
-
-            newSession.isProcessing = true;
-            onProcessingChanged();
-            newSession.sentToolResults = {};
-            sendToSession(newSession.localId, { type: "status", status: "processing" });
-            newSession.acceptEditsAfterStart = true;
-            sdk.startQuery(newSession, planPrompt, undefined, getLinuxUserForSession(newSession));
-          } catch (e) {
-            console.error("[project] Error starting plan execution:", e);
-            sendTo(ws, { type: "error", text: "Failed to start plan execution: " + (e.message || e) });
-          }
-        }).catch(function (e) {
-          console.error("[project] Plan execution stream wait failed:", e.message || e);
-        });
-        return;
-      }
-
-      // --- Plan approval: "deny_with_feedback" — deny + send feedback as follow-up message ---
-      if (decision === "deny_with_feedback") {
-        var feedback = msg.feedback || "";
-        pending.resolve({ behavior: "deny", message: feedback || "User provided feedback" });
-        sm.sendAndRecord(session, { type: "permission_resolved", requestId: requestId, decision: decision });
-
-        // Send feedback as next user message if there's text
-        if (feedback) {
-          setTimeout(function () {
-            var userMsg = { type: "user_message", text: feedback };
-            session.history.push(userMsg);
-            sm.appendToSessionFile(session, userMsg);
-            sendToSession(session.localId, userMsg);
-
-            if (!session.isProcessing) {
-              session.isProcessing = true;
-              onProcessingChanged();
-              session.sentToolResults = {};
-              sendToSession(session.localId, { type: "status", status: "processing" });
-              if (!session.queryInstance && !session.worker) {
-                sdk.startQuery(session, feedback, undefined, getLinuxUserForSession(session));
-              } else {
-                sdk.pushMessage(session, feedback);
-              }
-            } else {
-              sdk.pushMessage(session, feedback);
-            }
-          }, 200);
-        }
-        return;
-      }
-
-      if (decision === "allow" || decision === "allow_always") {
-        if (decision === "allow_always") {
-          if (!session.allowedTools) session.allowedTools = {};
-          session.allowedTools[pending.toolName] = true;
-        }
-        pending.resolve({ behavior: "allow", updatedInput: pending.toolInput });
-      } else {
-        pending.resolve({ behavior: "deny", message: "User denied permission" });
-      }
-
-      sm.sendAndRecord(session, {
-        type: "permission_resolved",
-        requestId: requestId,
-        decision: decision,
-      });
-      return;
-    }
-
-    // --- MCP elicitation response ---
-    if (msg.type === "elicitation_response") {
-      var session = getSessionForWs(ws);
-      if (!session) return;
-      var pending = session.pendingElicitations && session.pendingElicitations[msg.requestId];
-      if (!pending) return;
-      delete session.pendingElicitations[msg.requestId];
-      if (msg.action === "accept") {
-        pending.resolve({ action: "accept", content: msg.content || {} });
-      } else {
-        pending.resolve({ action: "reject" });
-      }
-      sm.sendAndRecord(session, {
-        type: "elicitation_resolved",
-        requestId: msg.requestId,
-        action: msg.action,
-      });
-      return;
-    }
-
-    // --- Browse directories (for add-project autocomplete) ---
-    if (msg.type === "browse_dir") {
-      var rawPath = (msg.path || "").replace(/^~/, require("./config").REAL_HOME);
-      var absTarget = path.resolve(rawPath);
-      var parentDir, prefix;
-      try {
-        var stat = fs.statSync(absTarget);
-        if (stat.isDirectory()) {
-          // Input is an existing directory — list its children
-          parentDir = absTarget;
-          prefix = "";
-        } else {
-          parentDir = path.dirname(absTarget);
-          prefix = path.basename(absTarget).toLowerCase();
-        }
-      } catch (e) {
-        // Path doesn't exist — list parent and filter by typed prefix
-        parentDir = path.dirname(absTarget);
-        prefix = path.basename(absTarget).toLowerCase();
-      }
-      try {
-        var dirItems = fs.readdirSync(parentDir, { withFileTypes: true });
-        var dirEntries = [];
-        for (var di = 0; di < dirItems.length; di++) {
-          var d = dirItems[di];
-          if (!d.isDirectory()) continue;
-          if (d.name.charAt(0) === ".") continue;
-          if (IGNORED_DIRS.has(d.name)) continue;
-          if (prefix && !d.name.toLowerCase().startsWith(prefix)) continue;
-          dirEntries.push({ name: d.name, path: path.join(parentDir, d.name) });
-        }
-        dirEntries.sort(function (a, b) { return a.name.localeCompare(b.name); });
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: dirEntries });
-      } catch (e) {
-        sendTo(ws, { type: "browse_dir_result", path: msg.path, entries: [], error: e.message });
-      }
-      return;
-    }
-
-    // --- Add project from web UI ---
-    if (msg.type === "add_project") {
-      var addPath = (msg.path || "").replace(/^~/, require("./config").REAL_HOME);
-      var addAbs = path.resolve(addPath);
-      try {
-        var addStat = fs.statSync(addAbs);
-        if (!addStat.isDirectory()) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "Not a directory" });
-          return;
-        }
-      } catch (e) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Directory not found" });
-        return;
-      }
-      if (typeof opts.onAddProject === "function") {
-        var result = opts.onAddProject(addAbs, ws._clayUser);
-        sendTo(ws, { type: "add_project_result", ok: result.ok, slug: result.slug, error: result.error, existing: result.existing });
-      } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Create new empty project ---
-    if (msg.type === "create_project" || msg.type === "clone_project") {
-      if (ws._clayUser) {
-        var cpPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!cpPerms.createProject) {
-          sendTo(ws, { type: "add_project_result", ok: false, error: "You do not have permission to create projects" });
-          return;
-        }
-      }
-    }
-    if (msg.type === "create_project") {
-      var createName = (msg.name || "").trim();
-      if (!createName || !/^[a-zA-Z0-9_-]+$/.test(createName)) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid name. Use only letters, numbers, dashes, and underscores." });
-        return;
-      }
-      if (typeof opts.onCreateProject === "function") {
-        var createResult = opts.onCreateProject(createName, ws._clayUser);
-        sendTo(ws, { type: "add_project_result", ok: createResult.ok, slug: createResult.slug, error: createResult.error });
-      } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Clone project from GitHub ---
-    if (msg.type === "clone_project") {
-      var cloneUrl = (msg.url || "").trim();
-      if (!cloneUrl || (!/^https?:\/\//.test(cloneUrl) && !/^git@/.test(cloneUrl))) {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Invalid URL. Use https:// or git@ format." });
-        return;
-      }
-      sendTo(ws, { type: "clone_project_progress", status: "cloning" });
-      if (typeof opts.onCloneProject === "function") {
-        opts.onCloneProject(cloneUrl, ws._clayUser, function (cloneResult) {
-          sendTo(ws, { type: "add_project_result", ok: cloneResult.ok, slug: cloneResult.slug, error: cloneResult.error });
-        });
-      } else {
-        sendTo(ws, { type: "add_project_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Create worktree from web UI ---
-    if (msg.type === "create_worktree") {
-      var wtBranch = (msg.branch || "").trim();
-      var wtDirName = (msg.dirName || "").trim() || wtBranch.replace(/\//g, "-");
-      var wtBase = (msg.baseBranch || "").trim() || null;
-      if (!wtBranch || !/^[a-zA-Z0-9_\/.@-]+$/.test(wtBranch)) {
-        sendTo(ws, { type: "create_worktree_result", ok: false, error: "Invalid branch name" });
-        return;
-      }
-      if (typeof onCreateWorktree === "function") {
-        var wtResult = onCreateWorktree(slug, wtBranch, wtDirName, wtBase);
-        sendTo(ws, { type: "create_worktree_result", ok: wtResult.ok, slug: wtResult.slug, error: wtResult.error });
-      } else {
-        sendTo(ws, { type: "create_worktree_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Pre-check: does the project have tasks/schedules? ---
-    if (msg.type === "remove_project_check") {
-      var checkSlug = msg.slug;
-      if (!checkSlug) {
-        sendTo(ws, { type: "remove_project_check_result", slug: checkSlug, name: msg.name || checkSlug, count: 0 });
-        return;
-      }
-      var schedCount = getScheduleCount(checkSlug);
-      sendTo(ws, { type: "remove_project_check_result", slug: checkSlug, name: msg.name || checkSlug, count: schedCount });
-      return;
-    }
-
-    // --- Remove project from web UI ---
-    if (msg.type === "remove_project") {
-      if (ws._clayUser) {
-        var dpPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!dpPerms.deleteProject) {
-          sendTo(ws, { type: "remove_project_result", ok: false, error: "You do not have permission to delete projects" });
-          return;
-        }
-      }
-      var removeSlug = msg.slug;
-      if (!removeSlug) {
-        sendTo(ws, { type: "remove_project_result", ok: false, error: "Missing slug" });
-        return;
-      }
-      // If client chose to move tasks to another project before removing
-      if (msg.moveTasksTo) {
-        moveAllSchedulesToProject(removeSlug, msg.moveTasksTo);
-      }
-      if (typeof opts.onRemoveProject === "function") {
-        // Send result before removing so the WS is still open
-        sendTo(ws, { type: "remove_project_result", ok: true, slug: removeSlug });
-        var removeUserId = ws._clayUser ? ws._clayUser.id : null;
-        opts.onRemoveProject(removeSlug, removeUserId);
-      } else {
-        sendTo(ws, { type: "remove_project_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Move a single schedule to another project ---
-    if (msg.type === "schedule_move") {
-      var moveResult = moveScheduleToProject(msg.recordId, msg.fromSlug, msg.toSlug);
-      if (moveResult.ok) {
-        // Re-broadcast updated records to this project's clients
-        send({ type: "loop_registry_updated", records: getHubSchedules() });
-      }
-      sendTo(ws, { type: "schedule_move_result", ok: moveResult.ok, error: moveResult.error });
-      return;
-    }
-
-    // --- Reorder projects ---
-    if (msg.type === "reorder_projects") {
-      var slugs = msg.slugs;
-      if (!Array.isArray(slugs) || slugs.length === 0) {
-        sendTo(ws, { type: "reorder_projects_result", ok: false, error: "Missing slugs" });
-        return;
-      }
-      if (typeof opts.onReorderProjects === "function") {
-        var reorderResult = opts.onReorderProjects(slugs);
-        sendTo(ws, { type: "reorder_projects_result", ok: reorderResult.ok, error: reorderResult.error });
-      } else {
-        sendTo(ws, { type: "reorder_projects_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Set project title (rename) ---
-    if (msg.type === "set_project_title") {
-      if (!msg.slug) {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Missing slug" });
-        return;
-      }
-      if (typeof opts.onSetProjectTitle === "function") {
-        var titleResult = opts.onSetProjectTitle(msg.slug, msg.title || null);
-        sendTo(ws, { type: "set_project_title_result", ok: titleResult.ok, slug: msg.slug, error: titleResult.error });
-      } else {
-        sendTo(ws, { type: "set_project_title_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Set project icon (emoji) ---
-    if (msg.type === "set_project_icon") {
-      if (!msg.slug) {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Missing slug" });
-        return;
-      }
-      if (typeof opts.onSetProjectIcon === "function") {
-        var iconResult = opts.onSetProjectIcon(msg.slug, msg.icon || null);
-        sendTo(ws, { type: "set_project_icon_result", ok: iconResult.ok, slug: msg.slug, error: iconResult.error });
-      } else {
-        sendTo(ws, { type: "set_project_icon_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Daemon config / server management (admin-only in multi-user mode) ---
-    if (msg.type === "get_daemon_config" || msg.type === "set_pin" || msg.type === "set_keep_awake" ||
-        msg.type === "set_auto_continue" || msg.type === "set_image_retention" || msg.type === "shutdown_server" || msg.type === "restart_server") {
-      if (usersModule.isMultiUser()) {
-        var _wsUser = ws._clayUser;
-        if (!_wsUser || _wsUser.role !== "admin") {
-          sendTo(ws, { type: "error", message: "Admin access required" });
-          return;
-        }
-      }
-    }
-
-    if (msg.type === "get_daemon_config") {
-      if (typeof opts.onGetDaemonConfig === "function") {
-        var daemonConfig = opts.onGetDaemonConfig();
-        sendTo(ws, { type: "daemon_config", config: daemonConfig });
-      }
-      return;
-    }
-
-    if (msg.type === "set_pin") {
-      if (typeof opts.onSetPin === "function") {
-        var pinResult = opts.onSetPin(msg.pin || null);
-        sendTo(ws, { type: "set_pin_result", ok: pinResult.ok, pinEnabled: pinResult.pinEnabled });
-      }
-      return;
-    }
-
-    if (msg.type === "set_keep_awake") {
-      if (typeof opts.onSetKeepAwake === "function") {
-        var kaResult = opts.onSetKeepAwake(msg.value);
-        sendTo(ws, { type: "set_keep_awake_result", ok: kaResult.ok, keepAwake: kaResult.keepAwake });
-        send({ type: "keep_awake_changed", keepAwake: kaResult.keepAwake });
-      }
-      return;
-    }
-
-    if (msg.type === "set_auto_continue") {
-      if (typeof opts.onSetAutoContinue === "function") {
-        var acResult = opts.onSetAutoContinue(msg.value);
-        sendTo(ws, { type: "set_auto_continue_result", ok: acResult.ok, autoContinueOnRateLimit: acResult.autoContinueOnRateLimit });
-        send({ type: "auto_continue_changed", autoContinueOnRateLimit: acResult.autoContinueOnRateLimit });
-      }
-      return;
-    }
-
-    if (msg.type === "set_image_retention") {
-      if (typeof opts.onSetImageRetention === "function") {
-        var irResult = opts.onSetImageRetention(msg.days);
-        sendTo(ws, { type: "set_image_retention_result", ok: irResult.ok, days: irResult.days });
-      }
-      return;
-    }
-
-    if (msg.type === "shutdown_server") {
-      if (typeof opts.onShutdown === "function") {
-        sendTo(ws, { type: "shutdown_server_result", ok: true });
-        send({ type: "toast", level: "warn", message: "Server is shutting down..." });
-        // Small delay so the response has time to reach clients
-        setTimeout(function () {
-          opts.onShutdown();
-        }, 500);
-      } else {
-        sendTo(ws, { type: "shutdown_server_result", ok: false, error: "Shutdown not supported" });
-      }
-      return;
-    }
-
-    if (msg.type === "restart_server") {
-      if (typeof opts.onRestart === "function") {
-        sendTo(ws, { type: "restart_server_result", ok: true });
-        send({ type: "toast", level: "info", message: "Server is restarting..." });
-        // Small delay so the response has time to reach clients
-        setTimeout(function () {
-          opts.onRestart();
-        }, 500);
-      } else {
-        sendTo(ws, { type: "restart_server_result", ok: false, error: "Restart not supported" });
-      }
-      return;
-    }
-
-    // --- File browser ---
-    if (msg.type === "fs_list" || msg.type === "fs_read" || msg.type === "fs_write" || msg.type === "fs_delete" || msg.type === "fs_rename" || msg.type === "fs_mkdir" || msg.type === "fs_upload") {
-      if (ws._clayUser) {
-        var fbPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!fbPerms.fileBrowser) {
-          sendTo(ws, { type: msg.type + "_result", error: "File browser access is not permitted" });
-          return;
-        }
-      }
-    }
-    if (msg.type === "fs_list") {
-      var fsDir = safePath(cwd, msg.path || ".");
-      // In OS user mode, fall back to absolute path resolution (ACL enforces access)
-      if (!fsDir && getOsUserInfoForWs(ws)) {
-        fsDir = safeAbsPath(msg.path);
-      }
-      if (!fsDir) {
-        sendTo(ws, { type: "fs_list_result", path: msg.path, entries: [], error: "Access denied" });
-        return;
-      }
-      try {
-        var fsListUserInfo = getOsUserInfoForWs(ws);
-        var entries = [];
-        if (fsListUserInfo) {
-          // Run as target OS user to respect Linux file permissions
-          var rawEntries = fsAsUser("list", { dir: fsDir }, fsListUserInfo);
-          for (var fi = 0; fi < rawEntries.length; fi++) {
-            var re = rawEntries[fi];
-            if (re.isDir && IGNORED_DIRS.has(re.name)) continue;
-            entries.push({
-              name: re.name,
-              type: re.isDir ? "dir" : "file",
-              path: path.relative(cwd, path.join(fsDir, re.name)).split(path.sep).join("/"),
-            });
-          }
-        } else {
-          var items = fs.readdirSync(fsDir, { withFileTypes: true });
-          for (var fi = 0; fi < items.length; fi++) {
-            var item = items[fi];
-            if (item.isDirectory() && IGNORED_DIRS.has(item.name)) continue;
-            entries.push({
-              name: item.name,
-              type: item.isDirectory() ? "dir" : "file",
-              path: path.relative(cwd, path.join(fsDir, item.name)).split(path.sep).join("/"),
-            });
-          }
-        }
-        sendTo(ws, { type: "fs_list_result", path: msg.path || ".", entries: entries });
-        // Auto-watch the directory for changes
-        startDirWatch(msg.path || ".");
-      } catch (e) {
-        sendTo(ws, { type: "fs_list_result", path: msg.path, entries: [], error: e.message });
-      }
-      return;
-    }
-
-    if (msg.type === "fs_read") {
-      var fsFile = safePath(cwd, msg.path);
-      if (!fsFile && getOsUserInfoForWs(ws)) {
-        fsFile = safeAbsPath(msg.path);
-      }
-      if (!fsFile) {
-        sendTo(ws, { type: "fs_read_result", path: msg.path, error: "Access denied" });
-        return;
-      }
-      try {
-        var fsReadUserInfo = getOsUserInfoForWs(ws);
-        var ext = path.extname(fsFile).toLowerCase();
-        if (fsReadUserInfo) {
-          // Run stat and read as target OS user
-          var statResult = fsAsUser("stat", { file: fsFile }, fsReadUserInfo);
-          if (statResult.size > FS_MAX_SIZE) {
-            sendTo(ws, { type: "fs_read_result", path: msg.path, binary: true, size: statResult.size, error: "File too large (" + (statResult.size / 1024 / 1024).toFixed(1) + " MB)" });
-            return;
-          }
-          if (BINARY_EXTS.has(ext)) {
-            var result = { type: "fs_read_result", path: msg.path, binary: true, size: statResult.size };
-            if (IMAGE_EXTS.has(ext)) result.imageUrl = "api/file?path=" + encodeURIComponent(msg.path);
-            sendTo(ws, result);
-            return;
-          }
-          var readResult = fsAsUser("read", { file: fsFile, readContent: true }, fsReadUserInfo);
-          sendTo(ws, { type: "fs_read_result", path: msg.path, content: readResult.content, size: statResult.size });
-        } else {
-          var stat = fs.statSync(fsFile);
-          if (stat.size > FS_MAX_SIZE) {
-            sendTo(ws, { type: "fs_read_result", path: msg.path, binary: true, size: stat.size, error: "File too large (" + (stat.size / 1024 / 1024).toFixed(1) + " MB)" });
-            return;
-          }
-          if (BINARY_EXTS.has(ext)) {
-            var result = { type: "fs_read_result", path: msg.path, binary: true, size: stat.size };
-            if (IMAGE_EXTS.has(ext)) result.imageUrl = "api/file?path=" + encodeURIComponent(msg.path);
-            sendTo(ws, result);
-            return;
-          }
-          var content = fs.readFileSync(fsFile, "utf8");
-          sendTo(ws, { type: "fs_read_result", path: msg.path, content: content, size: stat.size });
-        }
-      } catch (e) {
-        sendTo(ws, { type: "fs_read_result", path: msg.path, error: e.message });
-      }
-      return;
-    }
-
-    // --- File write ---
-    if (msg.type === "fs_write") {
-      var fsWriteFile = safePath(cwd, msg.path);
-      if (!fsWriteFile && getOsUserInfoForWs(ws)) {
-        fsWriteFile = safeAbsPath(msg.path);
-      }
-      if (!fsWriteFile) {
-        sendTo(ws, { type: "fs_write_result", path: msg.path, ok: false, error: "Access denied" });
-        return;
-      }
-      try {
-        var fsWriteUserInfo = getOsUserInfoForWs(ws);
-        if (fsWriteUserInfo) {
-          fsAsUser("write", { file: fsWriteFile, content: msg.content || "" }, fsWriteUserInfo);
-        } else {
-          fs.writeFileSync(fsWriteFile, msg.content || "", "utf8");
-        }
-        sendTo(ws, { type: "fs_write_result", path: msg.path, ok: true });
-      } catch (e) {
-        sendTo(ws, { type: "fs_write_result", path: msg.path, ok: false, error: e.message });
-      }
-      return;
-    }
-
-    // --- Project settings permission gate ---
-    if (msg.type === "get_project_env" || msg.type === "set_project_env" ||
-        msg.type === "read_global_claude_md" || msg.type === "write_global_claude_md" ||
-        msg.type === "get_shared_env" || msg.type === "set_shared_env" ||
-        msg.type === "transfer_project_owner") {
-      if (ws._clayUser) {
-        var psPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!psPerms.projectSettings) {
-          sendTo(ws, { type: "error", text: "Project settings access is not permitted" });
-          return;
-        }
-      }
-    }
-
-    // --- Project environment variables ---
-    if (msg.type === "get_project_env") {
-      var envrc = "";
-      var hasEnvrc = false;
-      if (typeof opts.onGetProjectEnv === "function") {
-        var envResult = opts.onGetProjectEnv(msg.slug);
-        envrc = envResult.envrc || "";
-      }
-      try {
-        var envrcPath = path.join(cwd, ".envrc");
-        hasEnvrc = fs.existsSync(envrcPath);
-      } catch (e) {}
-      sendTo(ws, { type: "project_env_result", slug: msg.slug, envrc: envrc, hasEnvrc: hasEnvrc });
-      return;
-    }
-
-    if (msg.type === "set_project_env") {
-      if (typeof opts.onSetProjectEnv === "function") {
-        var envError = validateEnvString(msg.envrc || "");
-        if (envError) {
-          sendTo(ws, { type: "set_project_env_result", ok: false, slug: msg.slug, error: envError });
-          return;
-        }
-        var setResult = opts.onSetProjectEnv(msg.slug, msg.envrc || "");
-        sendTo(ws, { type: "set_project_env_result", ok: setResult.ok, slug: msg.slug, error: setResult.error });
-      } else {
-        sendTo(ws, { type: "set_project_env_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- Global CLAUDE.md ---
-    if (msg.type === "read_global_claude_md") {
-      var globalMdPath = path.join(require("./config").REAL_HOME, ".claude", "CLAUDE.md");
-      try {
-        var globalMdContent = fs.readFileSync(globalMdPath, "utf8");
-        sendTo(ws, { type: "global_claude_md_result", content: globalMdContent });
-      } catch (e) {
-        sendTo(ws, { type: "global_claude_md_result", error: e.message });
-      }
-      return;
-    }
-
-    if (msg.type === "write_global_claude_md") {
-      var globalMdDir = path.join(require("./config").REAL_HOME, ".claude");
-      var globalMdWritePath = path.join(globalMdDir, "CLAUDE.md");
-      try {
-        if (!fs.existsSync(globalMdDir)) {
-          fs.mkdirSync(globalMdDir, { recursive: true });
-        }
-        fs.writeFileSync(globalMdWritePath, msg.content || "", "utf8");
-        sendTo(ws, { type: "write_global_claude_md_result", ok: true });
-      } catch (e) {
-        sendTo(ws, { type: "write_global_claude_md_result", ok: false, error: e.message });
-      }
-      return;
-    }
-
-    // --- Shared environment variables ---
-    if (msg.type === "get_shared_env") {
-      var sharedEnvrc = "";
-      if (typeof opts.onGetSharedEnv === "function") {
-        var sharedResult = opts.onGetSharedEnv();
-        sharedEnvrc = sharedResult.envrc || "";
-      }
-      sendTo(ws, { type: "shared_env_result", envrc: sharedEnvrc });
-      return;
-    }
-
-    if (msg.type === "set_shared_env") {
-      if (typeof opts.onSetSharedEnv === "function") {
-        var sharedEnvError = validateEnvString(msg.envrc || "");
-        if (sharedEnvError) {
-          sendTo(ws, { type: "set_shared_env_result", ok: false, error: sharedEnvError });
-          return;
-        }
-        var sharedSetResult = opts.onSetSharedEnv(msg.envrc || "");
-        sendTo(ws, { type: "set_shared_env_result", ok: sharedSetResult.ok, error: sharedSetResult.error });
-      } else {
-        sendTo(ws, { type: "set_shared_env_result", ok: false, error: "Not supported" });
-      }
-      return;
-    }
-
-    // --- File watcher ---
-    if (msg.type === "fs_watch") {
-      if (msg.path) startFileWatch(msg.path);
-      return;
-    }
-
-    if (msg.type === "fs_unwatch") {
-      stopFileWatch();
-      return;
-    }
-
-    // --- File edit history ---
-    if (msg.type === "fs_file_history") {
-      var histPath = msg.path;
-      if (!histPath) {
-        sendTo(ws, { type: "fs_file_history_result", path: histPath, entries: [] });
-        return;
-      }
-      var absHistPath = path.resolve(cwd, histPath);
-      var entries = [];
-
-      // Collect session edits
-      sm.sessions.forEach(function (session) {
-        var sessionLocalId = session.localId;
-        var sessionTitle = session.title || "Untitled";
-        var histLen = session.history.length || 1;
-
-        for (var hi = 0; hi < session.history.length; hi++) {
-          var entry = session.history[hi];
-          if (entry.type !== "tool_executing") continue;
-          if (entry.name !== "Edit" && entry.name !== "Write") continue;
-          if (!entry.input || !entry.input.file_path) continue;
-          if (entry.input.file_path !== absHistPath) continue;
-
-          // Find parent assistant UUID + message snippet by scanning backwards
-          var assistantUuid = null;
-          var uuidIndex = -1;
-          for (var hj = hi - 1; hj >= 0; hj--) {
-            if (session.history[hj].type === "message_uuid" && session.history[hj].messageType === "assistant") {
-              assistantUuid = session.history[hj].uuid;
-              uuidIndex = hj;
-              break;
-            }
-          }
-
-          // Find user prompt by scanning backwards from the assistant uuid
-          var messageSnippet = "";
-          var searchFrom = uuidIndex >= 0 ? uuidIndex : hi;
-          for (var hk = searchFrom - 1; hk >= 0; hk--) {
-            if (session.history[hk].type === "user_message" && session.history[hk].text) {
-              messageSnippet = session.history[hk].text.trim().substring(0, 100);
-              break;
-            }
-          }
-
-          // Collect Claude's explanation: scan backwards from tool_executing
-          // to find the nearest delta text block (skipping tool_start).
-          // If no delta found immediately before this tool, scan past
-          // intervening tool blocks to find the last delta text within
-          // the same assistant turn.
-          var assistantSnippet = "";
-          var deltaChunks = [];
-          for (var hd = hi - 1; hd >= 0; hd--) {
-            var hEntry = session.history[hd];
-            if (hEntry.type === "tool_start") continue;
-            if (hEntry.type === "delta" && hEntry.text) {
-              deltaChunks.unshift(hEntry.text);
-            } else {
-              break;
-            }
-          }
-          if (deltaChunks.length === 0) {
-            // No delta immediately before; scan past tool blocks
-            // to find the nearest preceding delta in the same turn
-            for (var hd2 = hi - 1; hd2 >= 0; hd2--) {
-              var hEntry2 = session.history[hd2];
-              if (hEntry2.type === "tool_start" || hEntry2.type === "tool_executing" || hEntry2.type === "tool_result") continue;
-              if (hEntry2.type === "delta" && hEntry2.text) {
-                // Found a delta before an earlier tool in the same turn.
-                // Collect this contiguous block of deltas.
-                for (var hd3 = hd2; hd3 >= 0; hd3--) {
-                  var hEntry3 = session.history[hd3];
-                  if (hEntry3.type === "tool_start") continue;
-                  if (hEntry3.type === "delta" && hEntry3.text) {
-                    deltaChunks.unshift(hEntry3.text);
-                  } else {
-                    break;
-                  }
-                }
-                break;
-              } else {
-                // Hit message_uuid, user_message, etc. Stop.
-                break;
-              }
-            }
-          }
-          assistantSnippet = deltaChunks.join("").trim().substring(0, 150);
-
-          // Approximate timestamp: interpolate between session creation and last activity
-          var tStart = session.createdAt || 0;
-          var tEnd = session.lastActivity || tStart;
-          var ts = tStart + Math.floor((hi / histLen) * (tEnd - tStart));
-
-          var editRecord = {
-            source: "session",
-            timestamp: ts,
-            sessionLocalId: sessionLocalId,
-            sessionTitle: sessionTitle,
-            assistantUuid: assistantUuid,
-            toolId: entry.id,
-            messageSnippet: messageSnippet,
-            assistantSnippet: assistantSnippet,
-            toolName: entry.name,
-          };
-
-          if (entry.name === "Edit") {
-            editRecord.old_string = entry.input.old_string || "";
-            editRecord.new_string = entry.input.new_string || "";
-          } else {
-            editRecord.isFullWrite = true;
-          }
-
-          entries.push(editRecord);
-        }
-      });
-
-      // Collect git commits
-      try {
-        var gitLog = execFileSync(
-          "git", ["log", "--format=%H|%at|%an|%s", "--follow", "--", histPath],
-          { cwd: cwd, encoding: "utf8", timeout: 5000 }
-        );
-        var gitLines = gitLog.trim().split("\n");
-        for (var gi = 0; gi < gitLines.length; gi++) {
-          if (!gitLines[gi]) continue;
-          var parts = gitLines[gi].split("|");
-          if (parts.length < 4) continue;
-          entries.push({
-            source: "git",
-            hash: parts[0],
-            timestamp: parseInt(parts[1], 10) * 1000,
-            author: parts[2],
-            message: parts.slice(3).join("|"),
-          });
-        }
-      } catch (e) {
-        // Not a git repo or file not tracked, that's fine
-      }
-
-      // Sort by timestamp descending (newest first)
-      entries.sort(function (a, b) { return b.timestamp - a.timestamp; });
-
-      sendTo(ws, { type: "fs_file_history_result", path: histPath, entries: entries });
-      return;
-    }
-
-    // --- Git diff for file history ---
-    if (msg.type === "fs_git_diff") {
-      var diffPath = msg.path;
-      var hash = msg.hash;
-      var hash2 = msg.hash2 || null;
-      if (!diffPath || !hash) {
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, path: diffPath, diff: "", error: "Missing params" });
-        return;
-      }
-      try {
-        var diff;
-        if (hash2) {
-          diff = execFileSync("git", ["diff", hash, hash2, "--", diffPath],
-            { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        } else {
-          diff = execFileSync("git", ["show", hash, "--format=", "--", diffPath],
-            { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        }
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, hash2: hash2, path: diffPath, diff: diff || "" });
-      } catch (e) {
-        sendTo(ws, { type: "fs_git_diff_result", hash: hash, hash2: hash2, path: diffPath, diff: "", error: e.message });
-      }
-      return;
-    }
-
-    // --- File content at a git commit ---
-    if (msg.type === "fs_file_at") {
-      var atPath = msg.path;
-      var atHash = msg.hash;
-      if (!atPath || !atHash) {
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: "", error: "Missing params" });
-        return;
-      }
-      try {
-        // Convert to repo-relative path (git show requires hash:relative/path)
-        var atAbsPath = path.resolve(cwd, atPath);
-        var atRelPath = path.relative(cwd, atAbsPath);
-        var content = execFileSync("git", ["show", atHash + ":" + atRelPath],
-          { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: content });
-      } catch (e) {
-        sendTo(ws, { type: "fs_file_at_result", hash: atHash, path: atPath, content: "", error: e.message });
-      }
-      return;
-    }
-
-    // --- Sticky notes ---
-    function syncNotesKnowledge() {
-      if (!isMate) return;
-      try {
-        var knDir = path.join(cwd, "knowledge");
-        var knFile = path.join(knDir, "sticky-notes.md");
-        var text = nm.getActiveNotesText();
-        if (text) {
-          fs.mkdirSync(knDir, { recursive: true });
-          fs.writeFileSync(knFile, text);
-        } else {
-          try { fs.unlinkSync(knFile); } catch (e) {}
-        }
-      } catch (e) {
-        console.error("[project] Failed to sync sticky-notes.md:", e.message);
-      }
-    }
-
-    if (msg.type === "note_create") {
-      var note = nm.create(msg);
-      if (note) {
-        send({ type: "note_created", note: note });
-        syncNotesKnowledge();
-      }
-      return;
-    }
-
-    if (msg.type === "note_update") {
-      if (!msg.id) return;
-      var updated = nm.update(msg.id, msg);
-      if (updated) {
-        send({ type: "note_updated", note: updated });
-        if (msg.text !== undefined || msg.hidden !== undefined) syncNotesKnowledge();
-      }
-      return;
-    }
-
-    if (msg.type === "note_delete") {
-      if (!msg.id) return;
-      if (nm.remove(msg.id)) {
-        send({ type: "note_deleted", id: msg.id });
-        syncNotesKnowledge();
-      }
-      return;
-    }
-
-    if (msg.type === "note_list_request") {
-      sendTo(ws, { type: "notes_list", notes: nm.list() });
-      return;
-    }
-
-    if (msg.type === "note_bring_front") {
-      if (!msg.id) return;
-      var front = nm.bringToFront(msg.id);
-      if (front) send({ type: "note_updated", note: front });
-      return;
-    }
-
-    // --- Web terminal ---
-    if (msg.type === "term_create") {
-      if (ws._clayUser) {
-        var termPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!termPerms.terminal) {
-          sendTo(ws, { type: "term_error", error: "Terminal access is not permitted" });
-          return;
-        }
-      }
-      var t = tm.create(msg.cols || 80, msg.rows || 24, getOsUserInfoForWs(ws), ws);
-      if (!t) {
-        sendTo(ws, { type: "term_error", error: "Cannot create terminal (node-pty not available or limit reached)" });
-        return;
-      }
-      tm.attach(t.id, ws);
-      send({ type: "term_list", terminals: tm.list() });
-      sendTo(ws, { type: "term_created", id: t.id });
-      return;
-    }
-
-    if (msg.type === "term_attach") {
-      if (msg.id) tm.attach(msg.id, ws);
-      return;
-    }
-
-    if (msg.type === "term_detach") {
-      if (msg.id) tm.detach(msg.id, ws);
-      return;
-    }
-
-    if (msg.type === "term_input") {
-      if (msg.id) tm.write(msg.id, msg.data);
-      return;
-    }
-
-    if (msg.type === "term_resize") {
-      if (msg.id && msg.cols > 0 && msg.rows > 0) {
-        tm.resize(msg.id, msg.cols, msg.rows, ws);
-      }
-      return;
-    }
-
-    if (msg.type === "term_close") {
-      if (msg.id) {
-        tm.close(msg.id);
-        send({ type: "term_list", terminals: tm.list() });
-        // Remove closed terminal from context sources
-        var saved = loadContextSources(slug);
-        var termKey = "term:" + msg.id;
-        var filtered = saved.filter(function(id) { return id !== termKey; });
-        if (filtered.length !== saved.length) {
-          saveContextSources(slug, filtered);
-          send({ type: "context_sources_state", active: filtered });
-        }
-      }
-      return;
-    }
-
-    if (msg.type === "term_rename") {
-      if (msg.id && msg.title) {
-        tm.rename(msg.id, msg.title);
-        send({ type: "term_list", terminals: tm.list() });
-      }
-      return;
-    }
-
-    // --- Context Sources ---
-    if (msg.type === "context_sources_save") {
-      var activeIds = msg.active || [];
-      saveContextSources(slug, activeIds);
-      return;
-    }
-
-    // --- Browser Extension ---
-    if (msg.type === "browser_tab_list") {
-      _extensionWs = ws; // Track which client has the extension
-      var tabs = msg.tabs || [];
-      _browserTabList = {};
-      for (var bti = 0; bti < tabs.length; bti++) {
-        _browserTabList[tabs[bti].id] = tabs[bti];
-      }
-      return;
-    }
-
-    if (msg.type === "extension_result") {
-      var pending = pendingExtensionRequests[msg.requestId];
-      if (pending) {
-        clearTimeout(pending.timer);
-        pending.resolve(msg.result);
-        delete pendingExtensionRequests[msg.requestId];
-      }
-      return;
-    }
-
-    // --- Scheduled tasks permission gate ---
-    if (msg.type === "loop_start" || msg.type === "loop_stop" || msg.type === "loop_registry_files" ||
-        msg.type === "loop_registry_list" || msg.type === "loop_registry_update" || msg.type === "loop_registry_rename" ||
-        msg.type === "loop_registry_remove" || msg.type === "loop_registry_convert" || msg.type === "loop_registry_toggle" ||
-        msg.type === "loop_registry_rerun" || msg.type === "schedule_create" || msg.type === "schedule_move") {
-      if (ws._clayUser) {
-        var schPerms = usersModule.getEffectivePermissions(ws._clayUser, osUsers);
-        if (!schPerms.scheduledTasks) {
-          sendTo(ws, { type: "error", text: "Scheduled tasks access is not permitted" });
-          return;
-        }
-      }
-    }
-
-    if (msg.type === "loop_start") {
-      // If this loop has a cron schedule, don't run immediately — just confirm registration
-      if (loopState.wizardData && loopState.wizardData.cron) {
-        loopState.active = false;
-        loopState.phase = "done";
-        saveLoopState();
-        send({ type: "loop_finished", reason: "scheduled", iterations: 0, results: [] });
-        send({ type: "ralph_phase", phase: "idle", wizardData: null });
-        send({ type: "loop_scheduled", recordId: loopState.loopId, cron: loopState.wizardData.cron });
-        return;
-      }
-      startLoop();
-      return;
-    }
-
-    if (msg.type === "loop_stop") {
-      stopLoop();
-      return;
-    }
-
-    if (msg.type === "ralph_wizard_complete") {
-      var wData = msg.data || {};
-      var maxIter = wData.maxIterations || 3;
-      var wizardCron = wData.cron || null;
-      var newLoopId = generateLoopId();
-      loopState.loopId = newLoopId;
-      loopState.wizardData = {
-        name: wData.name || wData.task || "Untitled",
-        task: wData.task || "",
-        maxIterations: maxIter,
-        cron: wizardCron,
-      };
-      loopState.phase = "crafting";
-      loopState.startedAt = Date.now();
-      saveLoopState();
-
-      // Register in loop registry
-      var recordSource = wData.source === "task" ? null : "ralph";
-      loopRegistry.register({
-        id: newLoopId,
-        name: loopState.wizardData.name,
-        task: wData.task || "",
-        cron: wizardCron,
-        enabled: wizardCron ? true : false,
-        maxIterations: maxIter,
-        source: recordSource,
-      });
-
-      // Create loop directory and write LOOP.json
-      var lDir = loopDir();
-      try { fs.mkdirSync(lDir, { recursive: true }); } catch (e) {}
-      var loopJsonPath = path.join(lDir, "LOOP.json");
-      var tmpLoopJson = loopJsonPath + ".tmp";
-      fs.writeFileSync(tmpLoopJson, JSON.stringify({ maxIterations: maxIter }, null, 2));
-      fs.renameSync(tmpLoopJson, loopJsonPath);
-
-      var craftName = (loopState.wizardData && loopState.wizardData.name) || "";
-      var isRalphCraft = recordSource === "ralph";
-
-      // User provided their own PROMPT.md (and optionally JUDGE.md)
-      if (wData.mode === "own" && wData.promptText) {
-        // Write PROMPT.md
-        var promptPath = path.join(lDir, "PROMPT.md");
-        var tmpPrompt = promptPath + ".tmp";
-        fs.writeFileSync(tmpPrompt, wData.promptText);
-        fs.renameSync(tmpPrompt, promptPath);
-
-        if (wData.judgeText) {
-          // Both provided: write JUDGE.md too
-          var judgePath = path.join(lDir, "JUDGE.md");
-          var tmpJudge = judgePath + ".tmp";
-          fs.writeFileSync(tmpJudge, wData.judgeText);
-          fs.renameSync(tmpJudge, judgePath);
-        } else if (!recordSource) {
-          // Scheduled task with no judge: force single iteration and go to approval
-          var singleJson = loopJsonPath + ".tmp2";
-          fs.writeFileSync(singleJson, JSON.stringify({ maxIterations: 1 }, null, 2));
-          fs.renameSync(singleJson, loopJsonPath);
-
-          loopState.phase = "approval";
-          saveLoopState();
-          send({ type: "ralph_phase", phase: "approval", source: recordSource, wizardData: loopState.wizardData });
-          send({ type: "ralph_files_status", promptReady: true, judgeReady: false, bothReady: true });
-          return;
-        } else {
-          // Ralph with no judge: start a crafting session to create JUDGE.md
-          loopState.phase = "crafting";
-          saveLoopState();
-
-          var judgeCraftPrompt = "Use the /clay-ralph skill to design ONLY a JUDGE.md for an existing Ralph Loop. " +
-            "The user has already provided PROMPT.md, so do NOT create or modify PROMPT.md. " +
-            "You MUST invoke the clay-ralph skill — do NOT execute the task yourself. " +
-            "Your job is to read the existing PROMPT.md and create a JUDGE.md " +
-            "that will evaluate whether the coder session completed the task successfully.\n\n" +
-            "## Task\n" + (wData.task || "") +
-            "\n\n## Loop Directory\n" + lDir;
-
-          var judgeCraftSession = sm.createSession();
-          judgeCraftSession.title = (isRalphCraft ? "Ralph" : "Task") + (craftName ? " " + craftName : "") + " Crafting";
-          judgeCraftSession.ralphCraftingMode = true;
-          judgeCraftSession.loop = { active: true, iteration: 0, role: "crafting", loopId: newLoopId, name: craftName, source: recordSource, startedAt: loopState.startedAt };
-          sm.saveSessionFile(judgeCraftSession);
-          sm.switchSession(judgeCraftSession.localId, null, hydrateImageRefs);
-          loopState.craftingSessionId = judgeCraftSession.localId;
-
-          loopRegistry.updateRecord(newLoopId, { craftingSessionId: judgeCraftSession.localId });
-
-          startClaudeDirWatch();
-
-          judgeCraftSession.history.push({ type: "user_message", text: judgeCraftPrompt });
-          sm.appendToSessionFile(judgeCraftSession, { type: "user_message", text: judgeCraftPrompt });
-          sendToSession(judgeCraftSession.localId, { type: "user_message", text: judgeCraftPrompt });
-          judgeCraftSession.isProcessing = true;
-          onProcessingChanged();
-          judgeCraftSession.sentToolResults = {};
-          sendToSession(judgeCraftSession.localId, { type: "status", status: "processing" });
-          sdk.startQuery(judgeCraftSession, judgeCraftPrompt, undefined, getLinuxUserForSession(judgeCraftSession));
-
-          send({ type: "ralph_crafting_started", sessionId: judgeCraftSession.localId, taskId: newLoopId, source: recordSource });
-          send({ type: "ralph_phase", phase: "crafting", wizardData: loopState.wizardData, craftingSessionId: judgeCraftSession.localId });
-          send({ type: "ralph_files_status", promptReady: true, judgeReady: false, bothReady: false });
-          return;
-        }
-
-        // Both prompt and judge provided: go straight to approval
-        loopState.phase = "approval";
-        saveLoopState();
-        send({ type: "ralph_phase", phase: "approval", source: recordSource, wizardData: loopState.wizardData });
-        send({ type: "ralph_files_status", promptReady: true, judgeReady: true, bothReady: true });
-        return;
-      }
-
-      // Default: "draft" mode — Clay crafts both PROMPT.md and JUDGE.md
-      var craftingPrompt = "Use the /clay-ralph skill to design a Ralph Loop for the following task. " +
-        "You MUST invoke the clay-ralph skill — do NOT execute the task yourself. " +
-        "Your job is to interview me, then create PROMPT.md and JUDGE.md files " +
-        "that a future autonomous session will execute.\n\n" +
-        "## Task\n" + (wData.task || "") +
-        "\n\n## Loop Directory\n" + lDir;
-
-      // Create a new session for crafting
-      var craftingSession = sm.createSession();
-      craftingSession.title = (isRalphCraft ? "Ralph" : "Task") + (craftName ? " " + craftName : "") + " Crafting";
-      craftingSession.ralphCraftingMode = true;
-      craftingSession.loop = { active: true, iteration: 0, role: "crafting", loopId: newLoopId, name: craftName, source: recordSource, startedAt: loopState.startedAt };
-      sm.saveSessionFile(craftingSession);
-      sm.switchSession(craftingSession.localId, null, hydrateImageRefs);
-      loopState.craftingSessionId = craftingSession.localId;
-
-      // Store crafting session ID in the registry record
-      loopRegistry.updateRecord(newLoopId, { craftingSessionId: craftingSession.localId });
-
-      // Start .claude/ directory watcher
-      startClaudeDirWatch();
-
-      // Send crafting prompt and start the conversation with Claude.
-      craftingSession.history.push({ type: "user_message", text: craftingPrompt });
-      sm.appendToSessionFile(craftingSession, { type: "user_message", text: craftingPrompt });
-      sendToSession(craftingSession.localId, { type: "user_message", text: craftingPrompt });
-      craftingSession.isProcessing = true;
-      onProcessingChanged();
-      craftingSession.sentToolResults = {};
-      sendToSession(craftingSession.localId, { type: "status", status: "processing" });
-      sdk.startQuery(craftingSession, craftingPrompt, undefined, getLinuxUserForSession(craftingSession));
-
-      send({ type: "ralph_crafting_started", sessionId: craftingSession.localId, taskId: newLoopId, source: recordSource });
-      send({ type: "ralph_phase", phase: "crafting", wizardData: loopState.wizardData, craftingSessionId: craftingSession.localId });
-      return;
-    }
-
-    if (msg.type === "loop_registry_files") {
-      var recId = msg.id;
-      var lDir = path.join(cwd, ".claude", "loops", recId);
-      var promptContent = "";
-      var judgeContent = "";
-      try { promptContent = fs.readFileSync(path.join(lDir, "PROMPT.md"), "utf8"); } catch (e) {}
-      try { judgeContent = fs.readFileSync(path.join(lDir, "JUDGE.md"), "utf8"); } catch (e) {}
-      send({
-        type: "loop_registry_files_content",
-        id: recId,
-        prompt: promptContent,
-        judge: judgeContent,
-      });
-      return;
-    }
-
-    if (msg.type === "ralph_preview_files") {
-      var promptContent = "";
-      var judgeContent = "";
-      var previewDir = loopDir();
-      if (previewDir) {
-        try { promptContent = fs.readFileSync(path.join(previewDir, "PROMPT.md"), "utf8"); } catch (e) {}
-        try { judgeContent = fs.readFileSync(path.join(previewDir, "JUDGE.md"), "utf8"); } catch (e) {}
-      }
-      sendTo(ws, {
-        type: "ralph_files_content",
-        prompt: promptContent,
-        judge: judgeContent,
-      });
-      return;
-    }
-
-    if (msg.type === "ralph_wizard_cancel") {
-      stopClaudeDirWatch();
-      // Clean up loop directory
-      var cancelDir = loopDir();
-      if (cancelDir) {
-        try { fs.rmSync(cancelDir, { recursive: true, force: true }); } catch (e) {}
-      }
-      clearLoopState();
-      send({ type: "ralph_phase", phase: "idle", wizardData: null });
-      return;
-    }
-
-    if (msg.type === "ralph_cancel_crafting") {
-      // Abort the crafting session if running
-      if (loopState.craftingSessionId != null) {
-        var craftSession = sm.sessions.get(loopState.craftingSessionId) || null;
-        if (craftSession && craftSession.abortController) {
-          craftSession.abortController.abort();
-        }
-      }
-      stopClaudeDirWatch();
-      // Clean up loop directory
-      var craftCancelDir = loopDir();
-      if (craftCancelDir) {
-        try { fs.rmSync(craftCancelDir, { recursive: true, force: true }); } catch (e) {}
-      }
-      clearLoopState();
-      send({ type: "ralph_phase", phase: "idle", wizardData: null });
-      return;
-    }
-
-    // --- Schedule create (from calendar click) ---
-    if (msg.type === "schedule_create") {
-      var sData = msg.data || {};
-      var newRec = loopRegistry.register({
-        name: sData.name || "Untitled",
-        task: sData.name || "",
-        description: sData.description || "",
-        date: sData.date || null,
-        time: sData.time || null,
-        allDay: sData.allDay !== undefined ? sData.allDay : true,
-        linkedTaskId: sData.taskId || null,
-        cron: sData.cron || null,
-        enabled: sData.cron ? (sData.enabled !== false) : false,
-        maxIterations: sData.maxIterations || 3,
-        source: "schedule",
-        color: sData.color || null,
-        recurrenceEnd: sData.recurrenceEnd || null,
-        skipIfRunning: sData.skipIfRunning !== undefined ? sData.skipIfRunning : true,
-        intervalEnd: sData.intervalEnd || null,
-      });
-      return;
-    }
-
-    // --- Hub: cross-project schedule aggregation ---
-    if (msg.type === "hub_schedules_list") {
-      sendTo(ws, { type: "hub_schedules", schedules: getHubSchedules() });
-      return;
-    }
-
-    // --- Loop Registry messages ---
-    if (msg.type === "loop_registry_list") {
-      sendTo(ws, { type: "loop_registry_updated", records: getHubSchedules() });
-      return;
-    }
-
-    if (msg.type === "loop_registry_update") {
-      var updatedRec = loopRegistry.update(msg.id, msg.data || {});
-      if (!updatedRec) {
-        sendTo(ws, { type: "loop_registry_error", text: "Record not found" });
-      }
-      return;
-    }
-
-    if (msg.type === "loop_registry_rename") {
-      if (msg.id && msg.name) {
-        loopRegistry.updateRecord(msg.id, { name: String(msg.name).substring(0, 100) });
-        sm.broadcastSessionList();
-      }
-      return;
-    }
-
-    if (msg.type === "loop_registry_remove") {
-      var removedRec = loopRegistry.remove(msg.id);
-      if (!removedRec) {
-        sendTo(ws, { type: "loop_registry_error", text: "Record not found" });
-      }
-      return;
-    }
-
-    if (msg.type === "loop_registry_convert") {
-      // Convert ralph source to regular task (remove source tag)
-      if (msg.id) {
-        loopRegistry.updateRecord(msg.id, { source: null });
-        sm.broadcastSessionList();
-      }
-      return;
-    }
-
-    if (msg.type === "delete_loop_group") {
-      // Delete all sessions belonging to this loopId, then remove registry record
-      var loopIdToDel = msg.loopId;
-      if (!loopIdToDel) return;
-      var sessionIds = [];
-      sm.sessions.forEach(function (s, lid) {
-        if (s.loop && s.loop.loopId === loopIdToDel) sessionIds.push(lid);
-      });
-      for (var di = 0; di < sessionIds.length; di++) {
-        sm.deleteSessionQuiet(sessionIds[di]);
-      }
-      loopRegistry.remove(loopIdToDel);
-      sm.broadcastSessionList();
-      return;
-    }
+    // --- Knowledge file management (delegated to project-knowledge.js) ---
+    if (_knowledge.handleKnowledgeMessage(ws, msg)) return;
 
-    if (msg.type === "loop_registry_toggle") {
-      var toggledRec = loopRegistry.toggleEnabled(msg.id);
-      if (!toggledRec) {
-        sendTo(ws, { type: "loop_registry_error", text: "Record not found or not scheduled" });
-      }
-      return;
-    }
-
-    if (msg.type === "loop_registry_rerun") {
-      // Re-run an existing job (one-off from library)
-      if (loopState.active || loopState.phase === "executing") {
-        sendTo(ws, { type: "loop_registry_error", text: "A loop is already running" });
-        return;
-      }
-      var rerunRec = loopRegistry.getById(msg.id);
-      if (!rerunRec) {
-        sendTo(ws, { type: "loop_registry_error", text: "Record not found" });
-        return;
-      }
-      var rerunDir = path.join(cwd, ".claude", "loops", rerunRec.id);
-      try {
-        fs.accessSync(path.join(rerunDir, "PROMPT.md"));
-      } catch (e) {
-        sendTo(ws, { type: "loop_registry_error", text: "PROMPT.md missing for " + rerunRec.id });
-        return;
-      }
-      loopState.loopId = rerunRec.id;
-      loopState.loopFilesId = null;
-      activeRegistryId = null; // not a scheduled trigger
-      send({ type: "loop_rerun_started", recordId: rerunRec.id });
-      startLoop();
-      return;
-    }
-
-    // --- Schedule message for after rate limit resets ---
-    if (msg.type === "schedule_message") {
-      var schedSession = getSessionForWs(ws);
-      if (!schedSession || !msg.text || !msg.resetsAt) return;
-      scheduleMessage(schedSession, msg.text, msg.resetsAt);
-      return;
-    }
-
-    if (msg.type === "cancel_scheduled_message") {
-      var cancelSession = getSessionForWs(ws);
-      if (!cancelSession) return;
-      cancelScheduledMessage(cancelSession);
-      return;
-    }
-
-    if (msg.type === "send_scheduled_now") {
-      var nowSession = getSessionForWs(ws);
-      if (!nowSession || !nowSession.scheduledMessage) return;
-      var schedText = nowSession.scheduledMessage.text;
-      clearTimeout(nowSession.scheduledMessage.timer);
-      nowSession.scheduledMessage = null;
-      console.log("[project] Scheduled message sent immediately for session " + nowSession.localId);
-      sm.sendAndRecord(nowSession, { type: "scheduled_message_sent" });
-      var userMsg = { type: "user_message", text: schedText };
-      nowSession.history.push(userMsg);
-      sm.appendToSessionFile(nowSession, userMsg);
-      sendToSession(nowSession.localId, userMsg);
-      nowSession.isProcessing = true;
-      onProcessingChanged();
-      sendToSession(nowSession.localId, { type: "status", status: "processing" });
-      sdk.startQuery(nowSession, schedText, null, getLinuxUserForSession(nowSession));
-      sm.broadcastSessionList();
-      return;
-    }
-
-    if (msg.type !== "message") return;
-    if (!msg.text && (!msg.images || msg.images.length === 0) && (!msg.pastes || msg.pastes.length === 0)) return;
-
-    var session = getSessionForWs(ws);
-    if (!session) return;
-
-    // Backfill ownerId for legacy sessions restored without one (multi-user only)
-    if (!session.ownerId && ws._clayUser && usersModule.isMultiUser()) {
-      session.ownerId = ws._clayUser.id;
-      sm.saveSessionFile(session);
-    }
-
-    // Keep any pending scheduled message alive when user sends a regular message
-
-    var userMsg = { type: "user_message", text: msg.text || "" };
-    // Attach sender info for multi-user attribution (backward-compatible: old clients ignore these)
-    if (ws._clayUser) {
-      userMsg.from = ws._clayUser.id;
-      userMsg.fromName = ws._clayUser.displayName || ws._clayUser.username || "";
-    }
-    var savedImagePaths = [];
-    if (msg.images && msg.images.length > 0) {
-      userMsg.imageCount = msg.images.length;
-      // Save images as files, store URL references in history
-      var imageRefs = [];
-      for (var imgIdx = 0; imgIdx < msg.images.length; imgIdx++) {
-        var img = msg.images[imgIdx];
-        var savedName = saveImageFile(img.mediaType, img.data, getLinuxUserForSession(session));
-        if (savedName) {
-          imageRefs.push({ mediaType: img.mediaType, file: savedName });
-          savedImagePaths.push(path.join(imagesDir, savedName));
-        }
-      }
-      if (imageRefs.length > 0) {
-        userMsg.imageRefs = imageRefs;
-      }
-    }
-    if (msg.pastes && msg.pastes.length > 0) {
-      userMsg.pastes = msg.pastes;
-    }
-    session.history.push(userMsg);
-    sm.appendToSessionFile(session, userMsg);
-    sendToSessionOthers(ws, session.localId, hydrateImageRefs(userMsg));
-
-    if (!session.title) {
-      session.title = (msg.text || "Image").substring(0, 50);
-      sm.saveSessionFile(session);
-      sm.broadcastSessionList();
-      // Sync auto-title to SDK
-      if (session.cliSessionId) {
-        getSDK().then(function(sdk) {
-          sdk.renameSession(session.cliSessionId, session.title, { dir: cwd }).catch(function(e) {
-            console.error("[project] SDK renameSession failed:", e.message);
-          });
-        }).catch(function() {});
-      }
-    }
-
-    var fullText = msg.text || "";
-    // Prepend saved image paths so Claude can copy/save them
-    if (savedImagePaths.length > 0) {
-      var imgPathLines = savedImagePaths.map(function (p) { return "[Uploaded image: " + p + "]"; }).join("\n");
-      fullText = imgPathLines + (fullText ? "\n" + fullText : "");
-    }
-    if (msg.pastes && msg.pastes.length > 0) {
-      for (var pi = 0; pi < msg.pastes.length; pi++) {
-        if (fullText) fullText += "\n\n";
-        fullText += msg.pastes[pi];
-      }
-    }
-
-    // Inject pending @mention context so the current agent sees the exchange
-    if (session.pendingMentionContexts && session.pendingMentionContexts.length > 0) {
-      var mentionPrefix = session.pendingMentionContexts.join("\n\n");
-      session.pendingMentionContexts = [];
-      fullText = mentionPrefix + "\n\n" + fullText;
-    }
-
-    // Inject active terminal context sources (delta only: send new output since last message)
-    var TERM_CONTEXT_MAX = 8192; // 8KB max per terminal per message
-    var TERM_HEAD_SIZE = 2048;   // keep first 2KB for error context
-    var TERM_TAIL_SIZE = 6144;   // keep last 6KB for recent state
-    var ctxSources = loadContextSources(slug);
-    if (ctxSources.length > 0) {
-      if (!session._termContextCursors) session._termContextCursors = {};
-      var termContextParts = [];
-      for (var ci = 0; ci < ctxSources.length; ci++) {
-        var srcId = ctxSources[ci];
-        if (srcId.startsWith("term:")) {
-          var termId = parseInt(srcId.split(":")[1], 10);
-          var sb = tm.getScrollback(termId);
-          if (sb) {
-            var lastCursor;
-            if (termId in session._termContextCursors) {
-              lastCursor = session._termContextCursors[termId];
-              // Terminal was recycled (closed and reopened with same ID) — reset cursor
-              if (lastCursor > sb.totalBytesWritten) lastCursor = 0;
-            } else {
-              // First time seeing this terminal — include last 8KB (what user can see now)
-              lastCursor = Math.max(0, sb.totalBytesWritten - TERM_CONTEXT_MAX);
-            }
-            var newBytes = sb.totalBytesWritten - lastCursor;
-            session._termContextCursors[termId] = sb.totalBytesWritten;
-            if (newBytes <= 0) continue;
-            // Build timestamped delta from chunks
-            var deltaChunks = [];
-            var bytePos = sb.bufferStart;
-            for (var chunkIdx = 0; chunkIdx < sb.chunks.length; chunkIdx++) {
-              var chunk = sb.chunks[chunkIdx];
-              var chunkEnd = bytePos + chunk.data.length;
-              if (chunkEnd > lastCursor) {
-                // This chunk has new content
-                var chunkData = chunk.data;
-                if (bytePos < lastCursor) {
-                  // Partial chunk: only the part after lastCursor
-                  chunkData = chunkData.slice(lastCursor - bytePos);
-                }
-                deltaChunks.push({ ts: chunk.ts, data: chunkData });
-              }
-              bytePos = chunkEnd;
-            }
-            if (deltaChunks.length === 0) continue;
-            // Format with timestamps: group by second to avoid excessive timestamps
-            var lines = [];
-            var lastTimeSec = 0;
-            for (var di = 0; di < deltaChunks.length; di++) {
-              var dc = deltaChunks[di];
-              var cleaned = dc.data.replace(/\x1b\[[0-9;]*[a-zA-Z]/g, "");
-              if (!cleaned) continue;
-              var timeSec = Math.floor(dc.ts / 1000);
-              if (timeSec !== lastTimeSec) {
-                var d = new Date(dc.ts);
-                var timeStr = d.toTimeString().slice(0, 8); // HH:MM:SS
-                lines.push("[" + timeStr + "] " + cleaned);
-                lastTimeSec = timeSec;
-              } else {
-                lines.push(cleaned);
-              }
-            }
-            var delta = lines.join("").trim();
-            if (!delta) continue;
-            var termInfo = tm.list().find(function(t) { return t.id === termId; });
-            var termTitle = termInfo ? termInfo.title : "Terminal " + termId;
-            var header;
-            if (delta.length > TERM_CONTEXT_MAX) {
-              var head = delta.slice(0, TERM_HEAD_SIZE);
-              var tail = delta.slice(-TERM_TAIL_SIZE);
-              var omittedBytes = delta.length - TERM_HEAD_SIZE - TERM_TAIL_SIZE;
-              var omittedLines = delta.slice(TERM_HEAD_SIZE, delta.length - TERM_TAIL_SIZE).split("\n").length;
-              delta = head + "\n\n... (" + omittedLines + " lines / " + Math.round(omittedBytes / 1024) + "KB omitted) ...\n\n" + tail;
-              header = "[New terminal output from " + termTitle + " (large output, head+tail shown)]";
-            } else {
-              header = "[New terminal output from " + termTitle + "]";
-            }
-            termContextParts.push(header + "\n```\n" + delta + "\n```");
-          }
-        }
-      }
-      if (termContextParts.length > 0) {
-        fullText = termContextParts.join("\n\n") + "\n\n" + fullText;
-      }
-    }
-
-    // Collect browser tab context (async: requires round-trip to client extension)
-    var tabSources = ctxSources.filter(function(id) {
-      if (!id.startsWith("tab:")) return false;
-      // Only include tabs that currently exist in the browser
-      var tid = parseInt(id.split(":")[1], 10);
-      return !!_browserTabList[tid];
-    });
-
-    function dispatchToSdk(finalText) {
-      if (!session.isProcessing) {
-        session.isProcessing = true;
-        onProcessingChanged();
-        session.sentToolResults = {};
-        sendToSession(session.localId, { type: "status", status: "processing" });
-        if (!session.queryInstance && (!session.worker || session.messageQueue !== "worker")) {
-          // No active query (or worker idle between queries): start a new query
-          session._queryStartTs = Date.now();
-          console.log("[PERF] project.js: startQuery called, localId=" + session.localId + " t=0ms");
-          sdk.startQuery(session, finalText, msg.images, getLinuxUserForSession(session));
-        } else {
-          sdk.pushMessage(session, finalText, msg.images);
-        }
-      } else {
-        sdk.pushMessage(session, finalText, msg.images);
-      }
-      sm.broadcastSessionList();
-    }
-
-    if (tabSources.length > 0) {
-      // Request tab context from all active browser tab sources
-      var tabPromises = tabSources.map(function(srcId) {
-        var tabId = parseInt(srcId.split(":")[1], 10);
-        return requestTabContext(ws, tabId);
-      });
-      Promise.all(tabPromises).then(function(results) {
-        var tabContextParts = [];
-        var screenshotImages = [];
-
-        for (var ti = 0; ti < results.length; ti++) {
-          if (!results[ti]) continue;
-          var tabId2 = parseInt(tabSources[ti].split(":")[1], 10);
-          var tabInfo = _browserTabList[tabId2];
-          var tabLabel = tabInfo ? (tabInfo.title || tabInfo.url || "Tab " + tabId2) : "Tab " + tabId2;
-          var r = results[ti];
-          var parts = [];
-
-          // Console logs
-          if (r.console && r.console.logs) {
-            try {
-              var logs = typeof r.console.logs === "string" ? JSON.parse(r.console.logs) : r.console.logs;
-              if (logs && logs.length > 0) {
-                var logLines = [];
-                var logSlice = logs.slice(-50);
-                for (var li = 0; li < logSlice.length; li++) {
-                  var entry = logSlice[li];
-                  var ts = entry.ts ? new Date(entry.ts).toTimeString().slice(0, 8) : "";
-                  var lvl = (entry.level || "log").toUpperCase();
-                  logLines.push("[" + ts + " " + lvl + "] " + (entry.text || ""));
-                }
-                parts.push("Console:\n" + logLines.join("\n"));
-              }
-            } catch (e) {
-              // ignore parse errors
-            }
-          }
-
-          // Network requests
-          if (r.network && r.network.network) {
-            try {
-              var netLog = typeof r.network.network === "string" ? JSON.parse(r.network.network) : r.network.network;
-              if (netLog && netLog.length > 0) {
-                var netLines = [];
-                var netSlice = netLog.slice(-30);
-                for (var ni = 0; ni < netSlice.length; ni++) {
-                  var req = netSlice[ni];
-                  var line = (req.method || "GET") + " " + (req.url || "") + " " + (req.status || 0) + " " + (req.duration || 0) + "ms";
-                  if (req.error) line += " [" + req.error + "]";
-                  netLines.push(line);
-                }
-                parts.push("Network (last " + netSlice.length + " requests):\n" + netLines.join("\n"));
-              }
-            } catch (e) {
-              // ignore parse errors
-            }
-          }
-
-          // Page text (from tab_page_text command)
-          if (r.pageText && (r.pageText.text || r.pageText.value)) {
-            var pageContent = r.pageText.text || r.pageText.value;
-            if (pageContent.length > 0) {
-              if (pageContent.length > 32768) {
-                pageContent = pageContent.substring(0, 32768) + "\n... (truncated)";
-              }
-              parts.push("Page text:\n" + pageContent);
-            }
-          }
-
-          // Screenshot — save to disk and add to images for SDK
-          if (r.screenshot && r.screenshot.image) {
-            try {
-              var screenshotData = r.screenshot.image;
-              var screenshotName = saveImageFile("image/png", screenshotData, getLinuxUserForSession(session));
-              if (screenshotName) {
-                var screenshotPath = path.join(imagesDir, screenshotName);
-                // Add to images array for SDK multimodal
-                screenshotImages.push({
-                  mediaType: "image/png",
-                  data: screenshotData,
-                  file: screenshotName,
-                  tabTitle: tabLabel,
-                  tabUrl: tabInfo ? tabInfo.url : "",
-                  tabFavIconUrl: tabInfo ? tabInfo.favIconUrl : ""
-                });
-                parts.push("[Screenshot saved: " + screenshotPath + "]");
-              }
-            } catch (e) {
-              // ignore screenshot save errors
-            }
-          }
-
-          if (r.console && r.console.error) {
-            parts.push("(Console error: " + r.console.error + ")");
-          }
-          if (r.network && r.network.error) {
-            parts.push("(Network error: " + r.network.error + ")");
-          }
-
-          if (parts.length > 0) {
-            tabContextParts.push("[Browser tab: " + tabLabel + "]\n" + parts.join("\n\n"));
-          }
-        }
+    // --- Memory (session digests) management (delegated to project-memory.js) ---
+    if (msg.type === "memory_list") { _memory.handleMemoryList(ws); return; }
+    if (msg.type === "memory_search") { _memory.handleMemorySearch(ws, msg); return; }
+    if (msg.type === "memory_delete") { _memory.handleMemoryDelete(ws, msg); return; }
 
-        if (tabContextParts.length > 0) {
-          fullText = "[The following browser tab data is automatically attached as context sources. Do NOT call browser_read_page, browser_console, browser_network, or browser_screenshot for these tabs — the data is already here.]\n\n" +
-            tabContextParts.join("\n\n---\n\n") + "\n\n" + fullText;
-        }
+    // --- Sessions, config, project mgmt (delegated to project-sessions.js) ---
+    if (_sessions.handleSessionsMessage(ws, msg)) return;
 
-        // If screenshots were captured, send context preview cards and add to SDK images
-        if (screenshotImages.length > 0) {
-          if (!msg.images) msg.images = [];
-          for (var si = 0; si < screenshotImages.length; si++) {
-            var ss = screenshotImages[si];
-            // Save context_preview to history so it restores on session load
-            var previewEntry = {
-              type: "context_preview",
-              tab: {
-                title: ss.tabTitle || "",
-                url: ss.tabUrl || "",
-                favIconUrl: ss.tabFavIconUrl || "",
-                screenshotFile: ss.file
-              }
-            };
-            session.history.push(previewEntry);
-            // Send context card to all clients
-            sendToSession(session.localId, {
-              type: "context_preview",
-              tab: {
-                title: ss.tabTitle || "",
-                url: ss.tabUrl || "",
-                favIconUrl: ss.tabFavIconUrl || "",
-                screenshotUrl: "/p/" + slug + "/images/" + ss.file
-              }
-            });
-            // Add to SDK images for multimodal
-            msg.images.push({ mediaType: ss.mediaType, data: ss.data });
-          }
-          sm.saveSessionFile(session);
-        }
+    // --- Filesystem, settings, env (delegated to project-filesystem.js) ---
+    if (_filesystem.handleFilesystemMessage(ws, msg)) return;
 
-        dispatchToSdk(fullText);
-      });
-    } else {
-      dispatchToSdk(fullText);
-    }
+    // --- Notes, terminals, context, user message (delegated to project-user-message.js) ---
+    if (_userMessage.handleUserMessage(ws, msg)) return;
   }
 
   // --- Shared helpers ---
@@ -4415,647 +813,179 @@ function createProjectContext(opts) {
     send({ type: "session_presence", presence: presence });
   }
 
-  // --- WS disconnection handler ---
+  // --- WS disconnection handler (delegated to project-connection.js) ---
   function handleDisconnection(ws) {
-    // Persist last active session for this user before cleanup
-    if (ws._clayActiveSession) {
-      var dcPresKey = ws._clayUser ? ws._clayUser.id : "_default";
-      var dcExisting = userPresence.getPresence(slug, dcPresKey);
-      userPresence.setPresence(slug, dcPresKey, ws._clayActiveSession, dcExisting ? dcExisting.mateDm : null);
-    }
-    tm.detachAll(ws);
-    clients.delete(ws);
-    if (clients.size === 0) {
-      stopFileWatch();
-      stopAllDirWatches();
-    }
-    broadcastClientCount();
-    broadcastPresence();
+    _connection.handleDisconnection(ws);
   }
 
-  // --- Handle project-scoped HTTP requests ---
-  function handleHTTP(req, res, urlPath) {
-    // Browser MCP extension bridge: forward commands to Chrome extension
-    if (req.method === "POST" && urlPath === "/ext-command") {
-      parseJsonBody(req).then(function (body) {
-        // Validate auth token
-        if (!body.token || body.token !== _extToken) {
-          res.writeHead(403, { "Content-Type": "application/json" });
-          res.end('{"error":"Invalid token"}');
-          return;
-        }
-        var command = body.command;
-        var args = body.args || {};
-        var timeout = Math.min(body.timeout || 5000, 30000); // max 30s
-
-        // Special command: list_tabs (no extension round-trip needed)
-        if (command === "list_tabs") {
-          var tabArr = [];
-          for (var tid in _browserTabList) {
-            tabArr.push(_browserTabList[tid]);
-          }
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ result: { tabs: tabArr } }));
-          return;
-        }
-
-        sendExtensionCommandAny(command, args, timeout).then(function (result) {
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ result: result || {} }));
-        }).catch(function (err) {
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: err.message || "Extension command failed" }));
-        });
-      }).catch(function () {
-        res.writeHead(400, { "Content-Type": "application/json" });
-        res.end('{"error":"Invalid JSON body"}');
-      });
-      return true;
-    }
-
-    // Serve chat images
-    if (req.method === "GET" && urlPath.indexOf("/images/") === 0) {
-      var imgName = path.basename(urlPath);
-      // Sanitize: only allow expected filename pattern
-      if (!/^\d+-[a-f0-9]+\.\w+$/.test(imgName)) {
-        res.writeHead(400);
-        res.end("Bad request");
-        return true;
-      }
-      var imgPath = path.join(imagesDir, imgName);
-      try {
-        var imgBuf = fs.readFileSync(imgPath);
-        var ext = path.extname(imgName).toLowerCase();
-        var mime = ext === ".png" ? "image/png" : ext === ".gif" ? "image/gif" : ext === ".webp" ? "image/webp" : "image/jpeg";
-        res.writeHead(200, { "Content-Type": mime, "Cache-Control": "public, max-age=86400" });
-        res.end(imgBuf);
-      } catch (e) {
-        res.writeHead(404);
-        res.end("Not found");
-      }
-      return true;
-    }
-
-    // File upload
-    if (req.method === "POST" && urlPath === "/api/upload") {
-      parseJsonBody(req).then(function (body) {
-        var fileName = body.name;
-        var fileData = body.data; // base64
-        if (!fileName || !fileData) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"missing name or data"}');
-          return;
-        }
-        // Sanitize filename — strip path separators
-        var safeName = path.basename(fileName).replace(/[\x00-\x1f\/\\:*?"<>|]/g, "_");
-        if (!safeName) safeName = "upload";
-
-        // Check size
-        var estimatedBytes = fileData.length * 0.75;
-        if (estimatedBytes > MAX_UPLOAD_BYTES) {
-          res.writeHead(413, { "Content-Type": "application/json" });
-          res.end('{"error":"file too large (max 50MB)"}');
-          return;
-        }
-
-        // Create tmp dir: os.tmpdir()/clay-{hash}/
-        var cwdHash = crypto.createHash("sha256").update(cwd).digest("hex").substring(0, 12);
-        var tmpDir = path.join(os.tmpdir(), "clay-" + cwdHash);
-        try { fs.mkdirSync(tmpDir, { recursive: true }); } catch (e) {}
-
-        // Add timestamp prefix to avoid collisions
-        var ts = Date.now();
-        var destName = ts + "-" + safeName;
-        var destPath = path.join(tmpDir, destName);
-
-        try {
-          var buf = Buffer.from(fileData, "base64");
-          fs.writeFileSync(destPath, buf);
-          // Make readable by all local users and chown to session owner
-          try { fs.chmodSync(destPath, 0o644); } catch (e2) {}
-          try { fs.chmodSync(tmpDir, 0o755); } catch (e2) {}
-          if (req._clayUser && req._clayUser.linuxUser) {
-            try {
-              var _osUM = require("./os-users");
-              var _uid = _osUM.getLinuxUserUid(req._clayUser.linuxUser);
-              if (_uid != null) {
-                require("child_process").execSync("chown " + _uid + " " + JSON.stringify(destPath));
-                require("child_process").execSync("chown " + _uid + " " + JSON.stringify(tmpDir));
-              }
-            } catch (e2) {}
-          }
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ path: destPath, name: safeName }));
-        } catch (e) {
-          res.writeHead(500, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: "failed to save: " + (e.message || e) }));
-        }
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
-
-    // Push subscribe
-    if (req.method === "POST" && urlPath === "/api/push-subscribe") {
-      parseJsonBody(req).then(function (body) {
-        var sub = body.subscription || body;
-        if (pushModule) pushModule.addSubscription(sub, body.replaceEndpoint);
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end('{"ok":true}');
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
-
-    // Permission response from push notification
-    if (req.method === "POST" && urlPath === "/api/permission-response") {
-      parseJsonBody(req).then(function (data) {
-        var requestId = data.requestId;
-        var decision = data.decision;
-        if (!requestId || !decision) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"missing requestId or decision"}');
-          return;
-        }
-        var found = false;
-        sm.sessions.forEach(function (session) {
-          var pending = session.pendingPermissions[requestId];
-          if (!pending) return;
-          found = true;
-          delete session.pendingPermissions[requestId];
-          if (decision === "allow") {
-            pending.resolve({ behavior: "allow", updatedInput: pending.toolInput });
-          } else {
-            pending.resolve({ behavior: "deny", message: "Denied via push notification" });
-          }
-          sm.sendAndRecord(session, {
-            type: "permission_resolved",
-            requestId: requestId,
-            decision: decision,
-          });
-        });
-        if (found) {
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end('{"ok":true}');
-        } else {
-          res.writeHead(404, { "Content-Type": "application/json" });
-          res.end('{"error":"permission request not found"}');
-        }
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
-
-    // VAPID public key
-    if (req.method === "GET" && urlPath === "/api/vapid-public-key") {
-      if (pushModule) {
-        res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-cache, no-store" });
-        res.end(JSON.stringify({ publicKey: pushModule.publicKey }));
-      } else {
-        res.writeHead(404, { "Content-Type": "application/json" });
-        res.end('{"error":"push not available"}');
-      }
-      return true;
-    }
-
-    // File browser: serve project images
-    if (req.method === "GET" && urlPath.startsWith("/api/file?")) {
-      var qIdx = urlPath.indexOf("?");
-      var params = new URLSearchParams(urlPath.substring(qIdx));
-      var reqFilePath = params.get("path");
-      if (!reqFilePath) { res.writeHead(400); res.end("Missing path"); return true; }
-      var absFile = safePath(cwd, reqFilePath);
-      if (!absFile && getOsUserInfoForReq(req)) {
-        absFile = safeAbsPath(reqFilePath);
-      }
-      if (!absFile) { res.writeHead(403); res.end("Access denied"); return true; }
-      var fileExt = path.extname(absFile).toLowerCase();
-      if (!IMAGE_EXTS.has(fileExt)) { res.writeHead(403); res.end("Only image files"); return true; }
-      try {
-        var fileServeUserInfo = getOsUserInfoForReq(req);
-        var fileContent;
-        if (fileServeUserInfo) {
-          var binResult = fsAsUser("read_binary", { file: absFile }, fileServeUserInfo);
-          fileContent = binResult.buffer;
-        } else {
-          fileContent = fs.readFileSync(absFile);
-        }
-        var fileMime = MIME_TYPES[fileExt] || "application/octet-stream";
-        res.writeHead(200, { "Content-Type": fileMime, "Cache-Control": "no-cache" });
-        res.end(fileContent);
-      } catch (e) {
-        res.writeHead(404); res.end("Not found");
-      }
-      return true;
-    }
-
-    // Skills permission gate
-    if (urlPath === "/api/install-skill" || urlPath === "/api/uninstall-skill" || urlPath === "/api/installed-skills") {
-      if (req._clayUser) {
-        var skPerms = usersModule.getEffectivePermissions(req._clayUser, osUsers);
-        if (!skPerms.skills) {
-          res.writeHead(403, { "Content-Type": "application/json" });
-          res.end('{"error":"Skills access is not permitted"}');
-          return true;
-        }
-      }
-    }
-
-    // Install a skill (background spawn)
-    if (req.method === "POST" && urlPath === "/api/install-skill") {
-      parseJsonBody(req).then(function (body) {
-        var url = body.url;
-        var skill = body.skill;
-        var scope = body.scope; // "global" or "project"
-        if (!url || !skill || !scope) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"missing url, skill, or scope"}');
-          return;
-        }
-        // Validate skill name: alphanumeric, hyphens, underscores only
-        if (!/^[a-zA-Z0-9_-]+$/.test(skill)) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"invalid skill name"}');
-          return;
-        }
-        // Validate URL: must be https://
-        if (!/^https:\/\//i.test(url)) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"only https:// URLs are allowed"}');
-          return;
-        }
-        var skillUserInfo = getOsUserInfoForReq(req);
-        var spawnCwd = scope === "global" ? (skillUserInfo ? skillUserInfo.home : require("./config").REAL_HOME) : cwd;
-        var scopeFlag = scope === "global" ? "--global" : "--project";
-        var skillSpawnOpts = {
-          cwd: spawnCwd,
-          stdio: ["ignore", "pipe", "pipe"],
-          detached: false,
-        };
-        if (skillUserInfo) {
-          skillSpawnOpts.uid = skillUserInfo.uid;
-          skillSpawnOpts.gid = skillUserInfo.gid;
-          skillSpawnOpts.env = Object.assign({}, process.env, {
-            HOME: skillUserInfo.home,
-            npm_config_cache: require("path").join(skillUserInfo.home, ".npm"),
-          });
-        }
-        console.log("[skill-install] spawning: npx skills add " + url + " --skill " + skill + " --yes " + scopeFlag + " (cwd: " + spawnCwd + ")");
-        var child = spawn("npx", ["skills", "add", url, "--skill", skill, "--yes", scopeFlag], skillSpawnOpts);
-        var stdoutBuf = "";
-        var stderrBuf = "";
-        child.stdout.on("data", function (chunk) {
-          stdoutBuf += chunk.toString();
-          console.log("[skill-install] " + skill + " stdout chunk: " + chunk.toString().trim().slice(0, 500));
-        });
-        child.stderr.on("data", function (chunk) {
-          stderrBuf += chunk.toString();
-          console.log("[skill-install] " + skill + " stderr chunk: " + chunk.toString().trim().slice(0, 500));
-        });
-        // Timeout after 60 seconds
-        var installTimeout = setTimeout(function () {
-          console.error("[skill-install] " + skill + " timed out after 60s, killing process");
-          try { child.kill("SIGTERM"); } catch (e) {}
-          try {
-            send({ type: "skill_installed", skill: skill, scope: scope, success: false, error: "Installation timed out after 60 seconds" });
-          } catch (e) {}
-        }, 60000);
-        child.on("close", function (code) {
-          clearTimeout(installTimeout);
-          console.log("[skill-install] " + skill + " exited with code " + code + " (stdout=" + stdoutBuf.length + "b, stderr=" + stderrBuf.length + "b)");
-          if (stdoutBuf) console.log("[skill-install] stdout: " + stdoutBuf.slice(0, 2000));
-          if (stderrBuf) console.log("[skill-install] stderr: " + stderrBuf.slice(0, 2000));
-          try {
-            var success = code === 0;
-            send({
-              type: "skill_installed",
-              skill: skill,
-              scope: scope,
-              success: success,
-              error: success ? null : "Process exited with code " + code,
-            });
-          } catch (e) {
-            console.error("[project] skill_installed send failed:", e.message || e);
-          }
-        });
-        child.on("error", function (err) {
-          clearTimeout(installTimeout);
-          console.error("[skill-install] " + skill + " spawn error:", err.message || err);
-          try {
-            send({
-              type: "skill_installed",
-              skill: skill,
-              scope: scope,
-              success: false,
-              error: err.message,
-            });
-          } catch (e) {
-            console.error("[skill-install] " + skill + " send failed:", e.message || e);
-          }
-        });
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end('{"ok":true}');
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
-
-    // Uninstall a skill (remove directory)
-    if (req.method === "POST" && urlPath === "/api/uninstall-skill") {
-      parseJsonBody(req).then(function (body) {
-        var skill = body.skill;
-        var scope = body.scope; // "global" or "project"
-        if (!skill || !scope) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"missing skill or scope"}');
-          return;
-        }
-        // Validate skill name
-        if (!/^[a-zA-Z0-9_-]+$/.test(skill)) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"invalid skill name"}');
-          return;
-        }
-        var uninstallUserInfo = getOsUserInfoForReq(req);
-        var baseDir = scope === "global" ? (uninstallUserInfo ? uninstallUserInfo.home : require("./config").REAL_HOME) : cwd;
-        var skillDir = path.join(baseDir, ".claude", "skills", skill);
-        // Safety: ensure skillDir is inside the expected .claude/skills directory
-        var expectedParent = path.join(baseDir, ".claude", "skills");
-        var resolved = path.resolve(skillDir);
-        if (!resolved.startsWith(expectedParent + path.sep)) {
-          res.writeHead(403, { "Content-Type": "application/json" });
-          res.end('{"error":"invalid skill path"}');
-          return;
-        }
-        try {
-          if (uninstallUserInfo) {
-            // Run rm as target user to respect permissions
-            var rmScript = "var fs = require('fs'); fs.rmSync(" + JSON.stringify(resolved) + ", { recursive: true, force: true });";
-            execFileSync(process.execPath, ["-e", rmScript], {
-              uid: uninstallUserInfo.uid,
-              gid: uninstallUserInfo.gid,
-              timeout: 10000,
-            });
-          } else {
-            fs.rmSync(resolved, { recursive: true, force: true });
-          }
-          send({
-            type: "skill_uninstalled",
-            skill: skill,
-            scope: scope,
-            success: true,
-          });
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end('{"ok":true}');
-        } catch (err) {
-          send({
-            type: "skill_uninstalled",
-            skill: skill,
-            scope: scope,
-            success: false,
-            error: err.message,
-          });
-          res.writeHead(500, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ error: err.message }));
-        }
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
-
-    // Installed skills (global + project)
-    if (req.method === "GET" && urlPath === "/api/installed-skills") {
-      var installed = {};
-      var globalDir = path.join(require("./config").REAL_HOME, ".claude", "skills");
-      var projectDir = path.join(cwd, ".claude", "skills");
-      var scanDirs = [
-        { dir: globalDir, scope: "global" },
-        { dir: projectDir, scope: "project" },
-      ];
-      for (var sd = 0; sd < scanDirs.length; sd++) {
-        var entries;
-        try { entries = fs.readdirSync(scanDirs[sd].dir, { withFileTypes: true }); } catch (e) { continue; }
-        for (var si = 0; si < entries.length; si++) {
-          var ent = entries[si];
-          if (!ent.isDirectory() && !ent.isSymbolicLink()) continue;
-          var mdPath = path.join(scanDirs[sd].dir, ent.name, "SKILL.md");
-          try {
-            var mdContent = fs.readFileSync(mdPath, "utf8");
-            var desc = "";
-            // Parse YAML frontmatter for description
-            var version = "";
-            if (mdContent.startsWith("---")) {
-              var endIdx = mdContent.indexOf("---", 3);
-              if (endIdx !== -1) {
-                var frontmatter = mdContent.substring(3, endIdx);
-                var descMatch = frontmatter.match(/^description:\s*(.+)/m);
-                if (descMatch) desc = descMatch[1].trim();
-                var verMatch = frontmatter.match(/version:\s*"?([^"\n]+)"?/m);
-                if (verMatch) version = verMatch[1].trim();
-              }
-            }
-            if (!installed[ent.name]) {
-              installed[ent.name] = { scope: scanDirs[sd].scope, description: desc, version: version, path: path.join(scanDirs[sd].dir, ent.name) };
-            } else {
-              // project-level adds to existing global entry
-              installed[ent.name].scope = "both";
-              if (desc && !installed[ent.name].description) installed[ent.name].description = desc;
-              if (version && !installed[ent.name].version) installed[ent.name].version = version;
-            }
-          } catch (e) {}
-        }
-      }
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ installed: installed }));
-      return true;
-    }
-
-    // Check skill updates (compare installed vs remote versions)
-    if (req.method === "POST" && urlPath === "/api/check-skill-updates") {
-      parseJsonBody(req).then(function (body) {
-        var skills = body.skills; // [{ name, url, scope }]
-        if (!Array.isArray(skills) || skills.length === 0) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          res.end('{"error":"missing skills array"}');
-          return;
-        }
-        // Read installed versions (use requesting user's home in multi-user setups)
-        var skillUserHome = (function () {
-          var sui = getOsUserInfoForReq(req);
-          return sui ? sui.home : require("./config").REAL_HOME;
-        })();
-        var globalSkillsDir = path.join(skillUserHome, ".claude", "skills");
-        var projectSkillsDir = path.join(cwd, ".claude", "skills");
-        var results = [];
-        var pending = skills.length;
-
-        function parseVersionFromSkillMd(content) {
-          if (!content || !content.startsWith("---")) return "";
-          var endIdx = content.indexOf("---", 3);
-          if (endIdx === -1) return "";
-          var fm = content.substring(3, endIdx);
-          var m = fm.match(/version:\s*"?([^"\n]+)"?/m);
-          return m ? m[1].trim() : "";
-        }
-
-        function getInstalledVersion(name) {
-          var dirs = [path.join(globalSkillsDir, name, "SKILL.md"), path.join(projectSkillsDir, name, "SKILL.md")];
-          for (var d = 0; d < dirs.length; d++) {
-            try {
-              var c = fs.readFileSync(dirs[d], "utf8");
-              var v = parseVersionFromSkillMd(c);
-              if (v) return v;
-            } catch (e) {}
-          }
-          return "";
-        }
-
-        function compareVersions(a, b) {
-          // returns -1 if a < b, 0 if equal, 1 if a > b
-          if (!a && !b) return 0;
-          if (!a) return -1;
-          if (!b) return 1;
-          var pa = a.split(".").map(Number);
-          var pb = b.split(".").map(Number);
-          for (var i = 0; i < Math.max(pa.length, pb.length); i++) {
-            var va = pa[i] || 0;
-            var vb = pb[i] || 0;
-            if (va < vb) return -1;
-            if (va > vb) return 1;
-          }
-          return 0;
-        }
-
-        function finishOne() {
-          pending--;
-          if (pending === 0) {
-            res.writeHead(200, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ results: results }));
-          }
-        }
-
-        for (var si = 0; si < skills.length; si++) {
-          (function (skill) {
-            var installedVer = getInstalledVersion(skill.name);
-            var installed = !!installedVer;
-            console.log("[skill-check] " + skill.name + " installed=" + installed + " localVersion=" + (installedVer || "none"));
-            // Convert GitHub repo URL to raw SKILL.md URL
-            var rawUrl = "";
-            var ghMatch = skill.url.match(/github\.com\/([^/]+)\/([^/]+)/);
-            if (ghMatch) {
-              rawUrl = "https://raw.githubusercontent.com/" + ghMatch[1] + "/" + ghMatch[2] + "/main/SKILL.md";
-            }
-            if (!rawUrl) {
-              console.log("[skill-check] " + skill.name + " no valid GitHub URL, skipping remote check");
-              results.push({ name: skill.name, installed: installed, installedVersion: installedVer, remoteVersion: "", status: installed ? "ok" : "missing" });
-              finishOne();
-              return;
-            }
-            console.log("[skill-check] " + skill.name + " fetching remote: " + rawUrl);
-            // Fetch remote SKILL.md
-            var https = require("https");
-            https.get(rawUrl, function (resp) {
-              console.log("[skill-check] " + skill.name + " remote response status=" + resp.statusCode);
-              var data = "";
-              resp.on("data", function (chunk) { data += chunk; });
-              resp.on("end", function () {
-                try {
-                  var remoteVer = parseVersionFromSkillMd(data);
-                  var status = "ok";
-                  if (!installed) {
-                    status = "missing";
-                  } else if (remoteVer && compareVersions(installedVer, remoteVer) < 0) {
-                    status = "outdated";
-                  }
-                  console.log("[skill-check] " + skill.name + " remoteVersion=" + remoteVer + " status=" + status);
-                  results.push({ name: skill.name, installed: installed, installedVersion: installedVer, remoteVersion: remoteVer, status: status });
-                  finishOne();
-                } catch (e) {
-                  console.error("[skill-check] " + skill.name + " version parse failed:", e.message || e);
-                  results.push({ name: skill.name, installed: installed, installedVersion: installedVer, remoteVersion: "", status: installed ? "ok" : "error" });
-                  finishOne();
-                }
-              });
-            }).on("error", function (err) {
-              console.error("[skill-check] " + skill.name + " fetch error:", err.message || err);
-              results.push({ name: skill.name, installed: installed, installedVersion: installedVer, remoteVersion: "", status: installed ? "ok" : "missing" });
-              finishOne();
-            });
-          })(skills[si]);
-        }
-      }).catch(function () {
-        res.writeHead(400);
-        res.end("Bad request");
-      });
-      return true;
-    }
+  // --- Sessions/config/project handler (delegated to project-sessions.js) ---
+  var _sessions = attachSessions({
+    cwd: cwd,
+    slug: slug,
+    isMate: isMate,
+    osUsers: osUsers,
+    debug: debug,
+    dangerouslySkipPermissions: dangerouslySkipPermissions,
+    currentVersion: currentVersion,
+    sm: sm,
+    sdk: sdk,
+    tm: tm,
+    clients: clients,
+    send: send,
+    sendTo: sendTo,
+    sendToAdmins: sendToAdmins,
+    sendToSession: sendToSession,
+    sendToSessionOthers: sendToSessionOthers,
+    opts: opts,
+    usersModule: usersModule,
+    userPresence: userPresence,
+    matesModule: matesModule,
+    pushModule: pushModule,
+    getSessionForWs: getSessionForWs,
+    getLinuxUserForSession: getLinuxUserForSession,
+    getOsUserInfoForWs: getOsUserInfoForWs,
+    hydrateImageRefs: hydrateImageRefs,
+    onProcessingChanged: onProcessingChanged,
+    broadcastPresence: broadcastPresence,
+    getSDK: getSDK,
+    getProjectList: getProjectList,
+    getProjectCount: getProjectCount,
+    getScheduleCount: getScheduleCount,
+    moveScheduleToProject: moveScheduleToProject,
+    moveAllSchedulesToProject: moveAllSchedulesToProject,
+    getHubSchedules: getHubSchedules,
+    fetchVersion: fetchVersion,
+    isNewer: isNewer,
+    scheduleMessage: scheduleMessage,
+    cancelScheduledMessage: cancelScheduledMessage,
+    getProjectOwnerId: function () { return projectOwnerId; },
+    setProjectOwnerId: function (id) { projectOwnerId = id; },
+    getUpdateChannel: function () { return updateChannel; },
+    setUpdateChannel: function (ch) { updateChannel = ch; },
+    getLatestVersion: function () { return latestVersion; },
+    setLatestVersion: function (v) { latestVersion = v; },
+  });
 
-    // Git dirty check
-    if (req.method === "GET" && urlPath === "/api/git-dirty") {
-      var execSync = require("child_process").execSync;
-      try {
-        var out = execSync("git status --porcelain", { cwd: cwd, encoding: "utf8", timeout: 5000 });
-        var dirty = out.trim().split("\n").some(function (line) {
-          return line.trim().length > 0 && !line.startsWith("??");
-        });
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ dirty: dirty }));
-      } catch (e) {
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ dirty: false }));
-      }
-      return true;
-    }
+  // --- User message handler (delegated to project-user-message.js) ---
+  var _userMessage = attachUserMessage({
+    cwd: cwd,
+    slug: slug,
+    isMate: isMate,
+    osUsers: osUsers,
+    sm: sm,
+    sdk: sdk,
+    nm: nm,
+    tm: tm,
+    clients: clients,
+    send: send,
+    sendTo: sendTo,
+    sendToSession: sendToSession,
+    sendToSessionOthers: sendToSessionOthers,
+    opts: opts,
+    usersModule: usersModule,
+    matesModule: matesModule,
+    getSessionForWs: getSessionForWs,
+    getLinuxUserForSession: getLinuxUserForSession,
+    getOsUserInfoForWs: getOsUserInfoForWs,
+    hydrateImageRefs: hydrateImageRefs,
+    saveImageFile: saveImageFile,
+    imagesDir: imagesDir,
+    onProcessingChanged: onProcessingChanged,
+    _loop: _loop,
+    browserState: { _browserTabList: _browserTabList, _extensionWs: _extensionWs, pendingExtensionRequests: pendingExtensionRequests },
+    sendExtensionCommandAny: sendExtensionCommandAny,
+    scheduleMessage: scheduleMessage,
+    cancelScheduledMessage: cancelScheduledMessage,
+    loadContextSources: loadContextSources,
+    saveContextSources: saveContextSources,
+    digestDmTurn: digestDmTurn,
+    gateMemory: gateMemory,
+    escapeRegex: escapeRegex,
+    getSDK: getSDK,
+    getHubSchedules: getHubSchedules,
+    getProjectOwnerId: function () { return projectOwnerId; },
+  });
 
-    // List branches for worktree modal
-    if (req.method === "GET" && urlPath === "/api/branches") {
-      try {
-        var brRaw = execFileSync("git", ["branch", "-a", "--format=%(refname:short)"], {
-          cwd: cwd, timeout: 5000, encoding: "utf8"
-        });
-        var brList = brRaw.trim().split("\n").filter(Boolean);
-        var defBr = "main";
-        try {
-          var hrRef = execFileSync("git", ["symbolic-ref", "refs/remotes/origin/HEAD", "--short"], {
-            cwd: cwd, timeout: 3000, encoding: "utf8"
-          }).trim();
-          defBr = hrRef.replace(/^origin\//, "");
-        } catch (e) {}
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ branches: brList, defaultBranch: defBr }));
-      } catch (e) {
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ branches: ["main"], defaultBranch: "main" }));
-      }
-      return true;
-    }
+  // --- Filesystem handler (delegated to project-filesystem.js) ---
+  var _filesystem = attachFilesystem({
+    cwd: cwd,
+    slug: slug,
+    osUsers: osUsers,
+    sm: sm,
+    send: send,
+    sendTo: sendTo,
+    safePath: safePath,
+    safeAbsPath: safeAbsPath,
+    getOsUserInfoForWs: getOsUserInfoForWs,
+    startFileWatch: startFileWatch,
+    stopFileWatch: stopFileWatch,
+    startDirWatch: startDirWatch,
+    usersModule: usersModule,
+    fsAsUser: fsAsUser,
+    validateEnvString: validateEnvString,
+    opts: opts,
+    IGNORED_DIRS: IGNORED_DIRS,
+    BINARY_EXTS: BINARY_EXTS,
+    IMAGE_EXTS: IMAGE_EXTS,
+    FS_MAX_SIZE: FS_MAX_SIZE,
+  });
 
-    // Info endpoint
-    if (req.method === "GET" && urlPath === "/info") {
-      res.writeHead(200, {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": "*",
-      });
-      res.end(JSON.stringify({ cwd: cwd, project: project, slug: slug }));
-      return true;
-    }
+  // --- HTTP handler (delegated to project-http.js) ---
+  var _http = attachHTTP({
+    cwd: cwd,
+    slug: slug,
+    project: title || project,
+    sm: sm,
+    send: send,
+    imagesDir: imagesDir,
+    osUsers: osUsers,
+    pushModule: pushModule,
+    safePath: safePath,
+    safeAbsPath: safeAbsPath,
+    getOsUserInfoForReq: getOsUserInfoForReq,
+    sendExtensionCommandAny: sendExtensionCommandAny,
+    _extToken: _extToken,
+    _browserTabList: _browserTabList,
+  });
+  var handleHTTP = _http.handleHTTP;
 
-    return false; // not handled
-  }
+  // --- Connection handler (delegated to project-connection.js) ---
+  var _connection = attachConnection({
+    cwd: cwd,
+    slug: slug,
+    isMate: isMate,
+    osUsers: osUsers,
+    debug: debug,
+    dangerouslySkipPermissions: dangerouslySkipPermissions,
+    currentVersion: currentVersion,
+    lanHost: lanHost,
+    sm: sm,
+    tm: tm,
+    nm: nm,
+    clients: clients,
+    send: send,
+    sendTo: sendTo,
+    opts: opts,
+    _loop: _loop,
+    hydrateImageRefs: hydrateImageRefs,
+    broadcastClientCount: broadcastClientCount,
+    broadcastPresence: broadcastPresence,
+    getProjectList: getProjectList,
+    getHubSchedules: getHubSchedules,
+    loadContextSources: loadContextSources,
+    restoreDebateState: restoreDebateState,
+    stopFileWatch: stopFileWatch,
+    stopAllDirWatches: stopAllDirWatches,
+    getProjectOwnerId: function () { return projectOwnerId; },
+    setProjectOwnerId: function (id) { projectOwnerId = id; },
+    getLatestVersion: function () { return latestVersion; },
+    getTitle: function () { return title; },
+    getProject: function () { return project; },
+  });
 
   // --- Destroy ---
   function destroy() {
-    loopRegistry.stopTimer();
+    _loop.stopTimer();
     stopFileWatch();
     stopAllDirWatches();
     // Abort all active sessions and clean up mention sessions
@@ -5232,9 +1162,9 @@ function createProjectContext(opts) {
     handleHTTP: handleHTTP,
     getStatus: getStatus,
     getSessionManager: function () { return sm; },
-    getSchedules: function () { return loopRegistry.getAll(); },
-    importSchedule: function (data) { return loopRegistry.register(data); },
-    removeSchedule: function (id) { return loopRegistry.remove(id); },
+    getSchedules: _loop.getSchedules,
+    importSchedule: _loop.importSchedule,
+    removeSchedule: _loop.removeSchedule,
     setTitle: setTitle,
     setIcon: setIcon,
     setProjectOwner: function (ownerId) { projectOwnerId = ownerId; },
@@ -5259,15 +1189,4 @@ function createProjectContext(opts) {
   };
 }
 
-function parseJsonBody(req) {
-  return new Promise(function (resolve, reject) {
-    var body = "";
-    req.on("data", function (chunk) { body += chunk; });
-    req.on("end", function () {
-      try { resolve(JSON.parse(body)); }
-      catch (e) { reject(e); }
-    });
-  });
-}
-
 module.exports = { createProjectContext: createProjectContext, safePath: safePath, validateEnvString: validateEnvString };