clay-server 5.1.0-beta.1 → 5.1.0-beta.3

package/lib/mates.js

@@ -1,7 +1,9 @@
+var resolveMateIdentityFile = require('./mate-identity-file').resolveMateIdentityFile;
 var fs = require("fs");
 var path = require("path");
 var crypto = require("crypto");
 var config = require("./config");
+var workspaceColor = require("./mate-workspace-color");
 
 var crisisSafety = require("./crisis-safety");
 var matesPrompts = require("./mates-prompts");
@@ -160,7 +162,7 @@ function createMate(ctx, seedData) {
   yaml += "model: " + JSON.stringify(seedData.model || null) + "\n";
   fs.writeFileSync(path.join(mateDir, "mate.yaml"), yaml);
 
-  // Write initial CLAUDE.md (will be replaced by interview)
+  // Write initial AGENTS.md (will be replaced by interview)
   var claudeMd = "# Mate Identity\n\n";
   claudeMd += "This mate is currently being interviewed. Identity will be generated after the interview.\n\n";
   claudeMd += "## Seed Data\n\n";
@@ -175,7 +177,7 @@ function createMate(ctx, seedData) {
   claudeMd += TEAM_SECTION;
   claudeMd += SESSION_MEMORY_SECTION;
   claudeMd += crisisSafety.getSection();
-  fs.writeFileSync(path.join(mateDir, "CLAUDE.md"), claudeMd);
+  fs.writeFileSync(resolveMateIdentityFile(mateDir), claudeMd);
 
   // Log creation (identity is placeholder, will be replaced by interview)
   logIdentityChange(mateDir, "create_custom", initialIdentity, "");
@@ -192,9 +194,17 @@ function getMate(ctx, id) {
 }
 
 function updateMate(ctx, id, updates) {
+  updates = Object.assign({}, updates);
+  delete updates.id;
+  delete updates.createdBy;
+  delete updates.builtinKey;
   var data = loadMates(ctx);
   for (var i = 0; i < data.mates.length; i++) {
     if (data.mates[i].id === id) {
+      if (Object.prototype.hasOwnProperty.call(updates, "workspaceColor")) {
+        if (data.mates[i].primary || data.mates[i].builtinKey === "clay") delete updates.workspaceColor;
+        else if (!workspaceColor.valid(updates.workspaceColor)) return { error: "Choose a supported workspace color." };
+      }
       // Primary mates: protect name and core identity fields
       if (data.mates[i].primary) {
         delete updates.name;
@@ -206,6 +216,15 @@ function updateMate(ctx, id, updates) {
           delete updates.profile.displayName;
         }
       }
+      // Locked built-in artwork is server-managed. Preserve it even when a
+      // stale or crafted client submits a replacement profile object.
+      if (data.mates[i].profile && data.mates[i].profile.avatarLocked && updates.profile) {
+        updates.profile.avatarStyle = data.mates[i].profile.avatarStyle;
+        updates.profile.avatarSeed = data.mates[i].profile.avatarSeed;
+        updates.profile.avatarColor = data.mates[i].profile.avatarColor;
+        updates.profile.avatarCustom = data.mates[i].profile.avatarCustom;
+        updates.profile.avatarLocked = true;
+      }
       var keys = Object.keys(updates);
       for (var j = 0; j < keys.length; j++) {
         data.mates[i][keys[j]] = updates[keys[j]];
@@ -326,7 +345,7 @@ function migrateLegacyMates() {
 }
 
 /**
- * Strip all system sections from CLAUDE.md content, returning only identity.
+ * Strip all system sections from AGENTS.md content, returning only identity.
  */
 function stripAllSystemSections(content) {
   return extractIdentity(content);
@@ -336,10 +355,10 @@ function stripAllSystemSections(content) {
 var _warnedPaths = {};
 
 /**
- * Atomic enforce: read CLAUDE.md once, enforce all system sections, write once.
+ * Atomic enforce: read AGENTS.md once, enforce all system sections, write once.
  * Includes identity backup, validation, and change tracking.
  * Returns true if the file was modified, false if already correct.
- * @param {string} filePath - path to CLAUDE.md
+ * @param {string} filePath - path to AGENTS.md
  * @param {object} opts - optional { ctx, mateId } for dynamic team section
  */
 function enforceAllSections(filePath, opts) {
@@ -511,7 +530,7 @@ function createBuiltinMate(ctx, builtinKey) {
   yaml += "autonomy: " + (seedData.autonomy || "always_ask") + "\n";
   fs.writeFileSync(path.join(mateDir, "mate.yaml"), yaml);
 
-  // Write CLAUDE.md with full template + system sections
+  // Write AGENTS.md with full template + system sections
   var claudeMd = def.getClaudeMd();
   var builtinIdentity = claudeMd.trimEnd();
   claudeMd += TEAM_SECTION;
@@ -519,7 +538,7 @@ function createBuiltinMate(ctx, builtinKey) {
   claudeMd += STICKY_NOTES_SECTION;
   claudeMd += DEBATE_AWARENESS_SECTION;
   claudeMd += crisisSafety.getSection();
-  fs.writeFileSync(path.join(mateDir, "CLAUDE.md"), claudeMd);
+  fs.writeFileSync(resolveMateIdentityFile(mateDir), claudeMd);
 
   // Backup identity and log creation
   backupIdentity(mateDir, builtinIdentity);
@@ -603,7 +622,7 @@ function syncArchivedBuiltinMates(ctx) {
  *
  * What gets synced:
  * - Metadata: bio, name, profile, globalSearch, primary flag
- * - CLAUDE.md identity: re-applied when templateVersion changes
+ * - AGENTS.md identity: re-applied when templateVersion changes
  * - templateVersion is stored on the mate object to track updates
  *
  * What is NOT synced (regular builtin mates):
@@ -653,10 +672,10 @@ function syncPrimaryMates(ctx) {
       }
     }
 
-    // --- Sync CLAUDE.md identity (only when templateVersion changes) ---
+    // --- Sync AGENTS.md identity (only when templateVersion changes) ---
     // Uses 3-way comparison to preserve user/Ally modifications:
     // - base-template.md = the template that was last synced (what code wrote)
-    // - current identity = what's in CLAUDE.md now (may have been modified)
+    // - current identity = what's in AGENTS.md now (may have been modified)
     // - new template = latest code definition
     //
     // If current identity === old base → user didn't touch it → safe to replace
@@ -666,7 +685,7 @@ function syncPrimaryMates(ctx) {
 
     if (latestVersion > currentVersion) {
       var mateDir = getMateDir(ctx, mate.id);
-      var claudePath = path.join(mateDir, "CLAUDE.md");
+      var claudePath = resolveMateIdentityFile(mateDir);
       var basePath = path.join(mateDir, "knowledge", "base-template.md");
       var latestIdentity = def.getClaudeMd().trimEnd();
 

package/lib/os-users.js

@@ -17,20 +17,11 @@ function isSafeLinuxUsername(username) {
 // --- Supplementary group inheritance (issue #367) ---
 // Node's child_process { uid, gid } options call setuid/setgid but never
 // initgroups(), so spawned sessions drop all supplementary groups (docker,
-// video, wheel, ...). When inheritGroups is enabled we route the spawn through
+// video, wheel, ...). Route user-switched spawns through
 // `setpriv --init-groups` so the child gets the same groups as a normal login.
-var _inheritGroups = true; // default: behave like a normal login shell
 var _setprivAvail = null;
 var _warnedNoSetpriv = false;
 
-function setInheritGroups(value) {
-  _inheritGroups = !!value;
-}
-
-function getInheritGroups() {
-  return _inheritGroups;
-}
-
 function setprivAvailable() {
   if (_setprivAvail !== null) return _setprivAvail;
   try {
@@ -50,7 +41,7 @@ function setprivAvailable() {
  * spawn()/execFileSync()/pty.spawn().
  *
  * - Same-user spawns (no uid/gid in options) are returned unchanged.
- * - When inheritGroups is disabled, or setpriv is unavailable, falls back to
+ * - When setpriv is unavailable, falls back to
  *   Node's uid/gid options (primary group only) so behavior degrades safely.
  * Requires the parent process to be root, which is the case in os-users mode.
  */
@@ -62,7 +53,7 @@ function wrapSpawnAsUser(command, args, options, setprivCheck) {
   if (uid == null || gid == null) return { command: command, args: args, options: options };
 
   var hasSetpriv = typeof setprivCheck === "function" ? setprivCheck() : setprivAvailable();
-  if (_inheritGroups && hasSetpriv) {
+  if (hasSetpriv) {
     var wrappedArgs = ["--reuid", String(uid), "--regid", String(gid), "--init-groups", "--", command].concat(args);
     var newOpts = Object.assign({}, options);
     delete newOpts.uid;
@@ -70,9 +61,9 @@ function wrapSpawnAsUser(command, args, options, setprivCheck) {
     return { command: "setpriv", args: wrappedArgs, options: newOpts };
   }
 
-  if (_inheritGroups && !_warnedNoSetpriv) {
+  if (!_warnedNoSetpriv) {
     _warnedNoSetpriv = true;
-    console.warn("[os-users] inheritGroups enabled but `setpriv` not found; supplementary groups will be dropped. Install util-linux to restore them.");
+    console.warn("[os-users] `setpriv` not found; supplementary groups will be dropped. Install util-linux to restore them.");
   }
   return { command: command, args: args, options: options };
 }
@@ -673,8 +664,6 @@ module.exports = {
   grantAllUsersAccess: grantAllUsersAccess,
   installClaudeCli: installClaudeCli,
   claudeAvailableForUser: claudeAvailableForUser,
-  setInheritGroups: setInheritGroups,
-  getInheritGroups: getInheritGroups,
   wrapSpawnAsUser: wrapSpawnAsUser,
   deactivateLinuxUser: deactivateLinuxUser,
   ensureProjectsDir: ensureProjectsDir,

package/lib/project-connection.js

@@ -6,6 +6,7 @@ var emailAccounts = require("./email-accounts");
 var { getCodexConfig } = require("./codex-defaults");
 var yoke = require("./yoke");
 var permissionModes = require("./session-permission-mode");
+var sessionProvenance = require("./session-provenance");
 
 function dispatchMessageSafely(handleMessage, sendTo, slug, ws, msg) {
   try {
@@ -45,6 +46,36 @@ function buildInitialModelInfo(sm, initialVendor, initialModel, initialModels, s
   };
 }
 
+function buildRestoredSessionMessage(active, initialEffort, capabilities, permissionState) {
+  return {
+    type: "session_switched",
+    id: active.localId,
+    sessionOriginId: active.sessionOriginId || null,
+    sessionRole: sessionProvenance.isWorker(active) ? "worker" : "driver",
+    cliSessionId: active.cliSessionId || null,
+    loop: active.loop || null,
+    vendor: active.vendor || null,
+    model: active.model || null,
+    effort: active.effort || initialEffort || null,
+    hasHistory: !!(active.history && active.history.length > 0),
+    capabilities: capabilities,
+    isProcessing: !!active.isProcessing,
+    mateCreation: active.mateCreationMode === true,
+    mateCreationPhase: active.homeMateCreationPhase || null,
+    debatePlanning: active.debateSetupMode === true,
+    debatePhase: active.homeDebatePhase || null,
+    mode: active.mode || "gui",
+    terminalId: typeof active.terminalId === "number" ? active.terminalId : null,
+    runtimeMode: active.runtimeMode || null,
+    runtimeTerminalId: typeof active.runtimeTerminalId === "number" ? active.runtimeTerminalId : null,
+    tuiSuspended: !!active.tuiSuspended,
+    permissionMode: permissionState.requestedPermissionMode,
+    effectivePermissionMode: permissionState.effectivePermissionMode,
+    permissionCapabilities: permissionState.permissionCapabilities,
+    mcpPermissionModeOverrides: permissionState.mcpPermissionModeOverrides,
+  };
+}
+
 /**
  * Attach connection/disconnection handlers to a project context.
  *
@@ -63,6 +94,8 @@ function attachConnection(ctx) {
   var cwd = ctx.cwd;
   var slug = ctx.slug;
   var isMate = ctx.isMate;
+  var mateId = ctx.mateId || null;
+  var mateDisplayName = ctx.mateDisplayName || "";
   var osUsers = ctx.osUsers;
   var debug = ctx.debug;
   var dangerouslySkipPermissions = ctx.dangerouslySkipPermissions;
@@ -184,7 +217,7 @@ function attachConnection(ctx) {
       sm.saveSessionFile(restoredActive);
     }
     var initialModels = (sm.modelsByVendor && sm.modelsByVendor[initialVendor]) || sm.availableModels || [];
-    sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId, ownerLocked: ownerLocked, vendors: yoke.VENDOR_REGISTRY });
+    sendTo(ws, { type: "info", cwd: cwd, slug: slug, project: title || project, version: currentVersion, debug: !!debug, dangerouslySkipPermissions: dangerouslySkipPermissions, osUsers: osUsers, lanHost: lanHost, projectCount: _filteredProjects.length, projects: _filteredProjects, projectOwnerId: projectOwnerId, ownerLocked: ownerLocked, vendors: yoke.VENDOR_REGISTRY, isMate: isMate, mateId: isMate ? mateId : null, mateDisplayName: isMate ? (mateDisplayName || title || project || "Mate") : "" });
     if (typeof sendCursorSharingState === "function") sendCursorSharingState(ws);
     // Update notifications are pushed on a scheduled interval (see
     // scheduleUpdateBroadcast). We no longer push on connect to avoid
@@ -213,13 +246,6 @@ function attachConnection(ctx) {
     sendTo(ws, { type: "email_accounts_list", accounts: emailAccountsList, providers: emailAccounts.PROVIDER_PRESETS });
     sendTo(ws, { type: "notes_list", notes: nm.list() });
     sendTo(ws, { type: "loop_registry_updated", records: getHubSchedules() });
-    // Initial per-user preference: how to render Claude sessions.
-    if (usersModule && typeof usersModule.getClaudeOpenMode === "function") {
-      var _comUid = (wsUser && wsUser.id) || null;
-      var _comVal = _comUid ? usersModule.getClaudeOpenMode(_comUid) : "gui";
-      sendTo(ws, { type: "claude_open_mode_changed", claudeOpenMode: _comVal || "gui" });
-    }
-
     _loop.sendConnectionState(ws);
     if (_mcp) _mcp.sendConnectionState(ws);
     if (_notifications) _notifications.sendConnectionState(ws, sendTo);
@@ -262,7 +288,7 @@ function attachConnection(ctx) {
       }
       var _vendorCaps = (sm.capabilitiesByVendor && sm.capabilitiesByVendor[active.vendor || sm.defaultVendor || "claude"]) || {};
       var activePermissionState = permissionModes.clientState(active, sm.currentPermissionMode, sm.defaultVendor);
-      sendTo(ws, { type: "session_switched", id: active.localId, sessionOriginId: active.sessionOriginId || null, cliSessionId: active.cliSessionId || null, loop: active.loop || null, vendor: active.vendor || null, model: active.model || null, effort: active.effort || initialEffort || null, hasHistory: (active.history && active.history.length > 0), capabilities: _vendorCaps, isProcessing: !!active.isProcessing, mode: active.mode || "gui", terminalId: typeof active.terminalId === "number" ? active.terminalId : null, runtimeMode: active.runtimeMode || null, runtimeTerminalId: typeof active.runtimeTerminalId === "number" ? active.runtimeTerminalId : null, tuiSuspended: !!active.tuiSuspended, permissionMode: activePermissionState.requestedPermissionMode, effectivePermissionMode: activePermissionState.effectivePermissionMode, permissionCapabilities: activePermissionState.permissionCapabilities, mcpPermissionModeOverrides: activePermissionState.mcpPermissionModeOverrides });
+      sendTo(ws, buildRestoredSessionMessage(active, initialEffort, _vendorCaps, activePermissionState));
       if (ctx.autonomousRun) sendTo(ws, { type: "autonomous_run_state", sessionId: active.localId, run: ctx.autonomousRun.project(active.autonomousRun) });
       // Send per-session context sources
       var sessionSources = loadContextSources(slug, active.localId);
@@ -382,5 +408,6 @@ function attachConnection(ctx) {
 module.exports = {
   attachConnection: attachConnection,
   buildInitialModelInfo: buildInitialModelInfo,
+  buildRestoredSessionMessage: buildRestoredSessionMessage,
   dispatchMessageSafely: dispatchMessageSafely,
 };

package/lib/project-debate-proposal.js

@@ -227,6 +227,12 @@ function attachDebateProposal(ctx) {
 
     var found = findPendingProposal(ws, msg);
     if (!found) return true;
+    if (msg.sessionId != null && (String(found.pending.session.localId) !== String(msg.sessionId)
+        || String(ws._clayActiveSession) !== String(msg.sessionId)
+        || (found.pending.session.ownerId && (!ws._clayUser || ws._clayUser.id !== found.pending.session.ownerId)))) {
+      ctx.sendTo(ws, { type: "debate_error", error: "This proposal belongs to a different session." });
+      return true;
+    }
     startApprovedProposal(ws, msg, found).catch(function (error) {
       delete pendingProposals[found.key];
       rejectProposal(ws, found.pending, error && error.message ? error.message : "The selected debate models could not be verified.");

package/lib/project-debate-workspace.js

@@ -0,0 +1,43 @@
+// Project-bound access to the same participation actions used by Home debates.
+function handleProjectDebateControl(ws, msg, session, engine, sendTo) {
+  if (msg.type !== "project_debate_control" && msg.type !== "project_debate_state") return false;
+  var userId = ws && ws._clayUser && ws._clayUser.id;
+  var valid = session && msg.sessionId != null && String(session.localId) === String(msg.sessionId)
+    && (!session.ownerId || session.ownerId === userId);
+  if (msg.type === "project_debate_state") {
+    sendTo(ws, { type: "project_debate_state", sessionId: msg.sessionId, header: valid ? debateHeader(session) : null });
+    return true;
+  }
+  var ok = false;
+  if (valid) {
+    if (session.homeDebatePlanning) ok = engine.handleHomeControl(ws, msg, session);
+    else if (msg.action === "hand_raise") { engine.handleDebateHandRaise(ws, session); ok = true; }
+    else if (msg.action === "stop") ok = engine.handleDebateStop(ws, session);
+    else if (msg.action === "cancel_stop") ok = engine.handleDebateCancelStop(ws, session);
+    else if (msg.action === "user_floor") { engine.handleDebateUserFloorResponse(ws, msg, session); ok = true; }
+    else if (msg.action === "conclude" || msg.action === "resume") {
+      engine.handleDebateConcludeResponse(ws, { action: msg.action === "resume" ? "continue" : msg.response, text: msg.text || "" }, session);
+      ok = true;
+    }
+  }
+  sendTo(ws, { type: "project_debate_control_result", sessionId: msg.sessionId, ok: !!ok, error: ok ? null : "This debate action is no longer available. Reopen the debate and try again." });
+  return true;
+}
+function debateHeader(session) {
+  var header = null;
+  (session.history || []).forEach(function (event) {
+    if (event.type === "debate_started") header = Object.assign({}, event, { role: "debate_header", phase: "live", round: 1, interaction: null, handRaised: false });
+    if (!header) return;
+    if (event.round) header.round = event.round;
+    if (event.type === "debate_conclude_confirm") header.interaction = "conclude";
+    if (event.type === "debate_user_floor") header.interaction = "user_floor";
+    if (event.type === "debate_user_floor_done") { header.interaction = null; header.handRaised = false; }
+    if (event.type === "debate_hand_raised") header.handRaised = true;
+    if (event.type === "debate_stop_requested") header.stopping = true;
+    if (event.type === "debate_stop_cancelled") header.stopping = false;
+    if (event.type === "debate_turn" || event.type === "debate_resumed") { header.interaction = null; header.phase = "live"; }
+    if (event.type === "debate_ended") { header.phase = event.reason === "interrupted" ? "interrupted" : "ended"; header.reason = event.reason; header.interaction = null; header.stopping = false; }
+  });
+  return header;
+}
+module.exports = { handleProjectDebateControl: handleProjectDebateControl, debateHeader: debateHeader };

package/lib/project-debate.js

@@ -1,3 +1,4 @@
+var resolveMateIdentityFile = require('./mate-identity-file').resolveMateIdentityFile;
 var fs = require("fs");
 var path = require("path");
 var crypto = require("crypto");
@@ -15,10 +16,10 @@ var debateToolPolicy = require("./home-debate-tool-policy");
  */
 function attachDebate(ctx) {
 
-  // For mate projects, enforce latest debate awareness prompt in CLAUDE.md
+  // For mate projects, enforce latest debate awareness prompt in AGENTS.md
   // so mates use the propose_debate MCP tool instead of writing files.
   if (ctx.isMate) {
-    var _debateClaudeMdPath = path.join(ctx.cwd, "CLAUDE.md");
+    var _debateClaudeMdPath = resolveMateIdentityFile(ctx.cwd);
     try { matesModule.enforceDebateAwareness(_debateClaudeMdPath); } catch (e) {}
   }
 
@@ -1859,6 +1860,7 @@ function attachDebate(ctx) {
     handleDebateHandRaise: handleDebateHandRaise,
     handleDebateComment: handleDebateComment,
     handleDebateStop: handleDebateStop,
+    handleDebateCancelStop: handleDebateCancelStop,
     handleDebateConcludeResponse: handleDebateConcludeResponse,
     handleDebateConfirmBrief: handleDebateConfirmBrief,
     handleDebateUserFloorResponse: handleDebateUserFloorResponse,

package/lib/project-filesystem.js

@@ -204,26 +204,28 @@ function attachFilesystem(ctx) {
 
     // --- Project settings permission gate ---
     if (msg.type === "get_project_env" || msg.type === "set_project_env" ||
-        msg.type === "read_global_claude_md" || msg.type === "write_global_claude_md" ||
         msg.type === "get_shared_env" || msg.type === "set_shared_env" ||
         msg.type === "transfer_project_owner") {
-      var globalSetting = /^(read_global_claude_md|write_global_claude_md|get_shared_env|set_shared_env)$/.test(msg.type);
+      var globalSetting = /^(get_shared_env|set_shared_env)$/.test(msg.type);
       var targetSlug = msg.slug || slug;
       if (!access.hasPermission(ws, "projectSettings") ||
           (globalSetting ? !access.isAdmin(ws) : !access.canAccessProject(ws, targetSlug))) {
-        sendTo(ws, { type: "error", text: "Project settings access is not permitted" });
+        sendTo(ws, { type: globalSetting ? (msg.type === 'get_shared_env' ? 'shared_env_result' : 'set_shared_env_result') : (msg.type === 'get_project_env' ? 'project_env_result' : msg.type === 'set_project_env' ? 'set_project_env_result' : 'error'), slug: targetSlug, requestId: msg.requestId, ok: false, error: 'Project settings access is not permitted', text: "Project settings access is not permitted" });
         return true;
       }
     }
 
     // --- Project environment variables ---
     if (msg.type === "get_project_env") {
+      if (typeof opts.onGetProjectEnv !== "function") { sendTo(ws, { type: "project_env_result", slug: targetSlug, requestId: msg.requestId, error: "Project environment is unavailable in this runtime." }); return true; }
       var envrc = "";
       if (typeof opts.onGetProjectEnv === "function") {
-        var envResult = opts.onGetProjectEnv(targetSlug);
+        var envResult;
+        try { envResult = opts.onGetProjectEnv(targetSlug); }
+        catch (error) { sendTo(ws, { type: "project_env_result", slug: targetSlug, requestId: msg.requestId, error: error.message }); return true; }
         envrc = envResult.envrc || "";
       }
-      sendTo(ws, { type: "project_env_result", slug: msg.slug, envrc: envrc });
+      sendTo(ws, { type: "project_env_result", slug: targetSlug, requestId: msg.requestId, envrc: envrc });
       return true;
     }
 
@@ -231,41 +233,16 @@ function attachFilesystem(ctx) {
       if (typeof opts.onSetProjectEnv === "function") {
         var envError = validateEnvString(msg.envrc || "");
         if (envError) {
-          sendTo(ws, { type: "set_project_env_result", ok: false, slug: msg.slug, error: envError });
+          sendTo(ws, { type: "set_project_env_result", ok: false, slug: targetSlug, requestId: msg.requestId, error: envError });
           return true;
         }
-        var setResult = opts.onSetProjectEnv(targetSlug, msg.envrc || "");
+        var setResult;
+        try { setResult = opts.onSetProjectEnv(targetSlug, msg.envrc || ""); }
+        catch (error) { sendTo(ws, { type: "set_project_env_result", slug: targetSlug, requestId: msg.requestId, ok: false, error: error.message }); return true; }
         if (setResult.ok) onEnvironmentChanged();
-        sendTo(ws, { type: "set_project_env_result", ok: setResult.ok, slug: msg.slug, error: setResult.error, timing: setResult.ok ? "Applies to newly created coding-agent processes. Active processes keep their current environment." : undefined });
+        sendTo(ws, { type: "set_project_env_result", ok: setResult.ok, slug: targetSlug, requestId: msg.requestId, error: setResult.error, timing: setResult.ok ? "Applies to newly created coding-agent processes. Active processes keep their current environment." : undefined });
       } else {
-        sendTo(ws, { type: "set_project_env_result", ok: false, error: "Not supported" });
-      }
-      return true;
-    }
-
-    // --- Global CLAUDE.md ---
-    if (msg.type === "read_global_claude_md") {
-      var globalMdPath = path.join(require("./config").REAL_HOME, ".claude", "CLAUDE.md");
-      try {
-        var globalMdContent = fs.readFileSync(globalMdPath, "utf8");
-        sendTo(ws, { type: "global_claude_md_result", content: globalMdContent });
-      } catch (e) {
-        sendTo(ws, { type: "global_claude_md_result", error: e.message });
-      }
-      return true;
-    }
-
-    if (msg.type === "write_global_claude_md") {
-      var globalMdDir = path.join(require("./config").REAL_HOME, ".claude");
-      var globalMdWritePath = path.join(globalMdDir, "CLAUDE.md");
-      try {
-        if (!fs.existsSync(globalMdDir)) {
-          fs.mkdirSync(globalMdDir, { recursive: true });
-        }
-        fs.writeFileSync(globalMdWritePath, msg.content || "", "utf8");
-        sendTo(ws, { type: "write_global_claude_md_result", ok: true });
-      } catch (e) {
-        sendTo(ws, { type: "write_global_claude_md_result", ok: false, error: e.message });
+        sendTo(ws, { type: "set_project_env_result", slug: targetSlug, requestId: msg.requestId, ok: false, error: "Not supported" });
       }
       return true;
     }
@@ -274,9 +251,12 @@ function attachFilesystem(ctx) {
     if (msg.type === "get_shared_env") {
       var sharedEnvrc = "";
       if (typeof opts.onGetSharedEnv === "function") {
-        var sharedResult = opts.onGetSharedEnv();
-        sharedEnvrc = sharedResult.envrc || "";
+        try {
+          var sharedResult = opts.onGetSharedEnv();
+          sharedEnvrc = sharedResult.envrc || "";
+        } catch (error) { sendTo(ws, { type: "shared_env_result", error: error.message }); return true; }
       }
+      if (typeof opts.onGetSharedEnv !== "function") { sendTo(ws, { type: "shared_env_result", error: "Shared environment is unavailable in this runtime." }); return true; }
       sendTo(ws, { type: "shared_env_result", envrc: sharedEnvrc });
       return true;
     }
@@ -288,7 +268,9 @@ function attachFilesystem(ctx) {
           sendTo(ws, { type: "set_shared_env_result", ok: false, error: sharedEnvError });
           return true;
         }
-        var sharedSetResult = opts.onSetSharedEnv(msg.envrc || "");
+        var sharedSetResult;
+        try { sharedSetResult = opts.onSetSharedEnv(msg.envrc || ""); }
+        catch (error) { sendTo(ws, { type: "set_shared_env_result", ok: false, error: error.message }); return true; }
         if (sharedSetResult.ok) onEnvironmentChanged();
         sendTo(ws, { type: "set_shared_env_result", ok: sharedSetResult.ok, error: sharedSetResult.error, timing: sharedSetResult.ok ? "Applies to newly created coding-agent processes. Active processes keep their current environment." : undefined });
       } else {