infra/scripts/workstation/skel/start-claude.sh

#!/bin/bash
# Per-user Claude Code Workstation launcher (devvm). Lands the user in their OWN
# ~/code clone (NOT a hardcoded /home/wizard/code) and names the Claude session
# after the tmux session so /resume, the prompt box, and the terminal title line
# up. Deployed via /etc/skel by setup-devvm.sh, so new accounts get it on
# `useradd -m`. Existing users are repointed to this during their migration.
echo ""
echo "  Welcome, $(id -un)! 🚀"
echo ""
echo "  Starting Claude Code in $HOME/code ..."
echo "  (Right-click for tmux menu, or Ctrl+B then | or - to split)"
echo ""

name_args=()
if [ -n "${TMUX:-}" ]; then
  sess="$(tmux display-message -p '#{session_name}' 2>/dev/null)"
  [ -n "$sess" ] && name_args=(--name "$sess")
fi

cd "$HOME/code" 2>/dev/null || cd "$HOME"

# Freshen the user's clone(s) at session start so they begin on current upstream
# state (the hourly t3-provision-users reconcile does the same in the background).
# Single layout freshens ~/code itself; workspace layout freshens each repo under
# ~/code. Fast-forward only, and only when safe (on master + clean tree); hard
# 10s fetch cap per repo so an offline remote never stalls the launch.
freshen_repo() {
  GIT_TERMINAL_PROMPT=0 timeout 10 git -C "$1" fetch --all --prune --quiet 2>/dev/null || true
  # ff whatever branch is checked out (master, main, ...) when that is provably
  # safe: on a branch, clean tree, upstream configured. Never rebases/merges.
  if [ -n "$(git -C "$1" symbolic-ref --short -q HEAD)" ] \
     && [ -z "$(git -C "$1" status --porcelain 2>/dev/null)" ] \
     && git -C "$1" rev-parse --verify -q '@{upstream}' >/dev/null 2>&1; then
    git -C "$1" merge --ff-only '@{upstream}' >/dev/null 2>&1 || true
  fi
}
if [ -d "$HOME/code/.git" ]; then
  freshen_repo "$HOME/code"
else
  for repo_git in "$HOME"/code/*/.git; do
    [ -d "$repo_git" ] && freshen_repo "${repo_git%/.git}"
  done
fi

# Prefer the system-wide `claude` (installed by setup-devvm.sh); fall back to npx.
launch() {
  if command -v claude >/dev/null 2>&1; then
    claude "$@"
  else
    npx @anthropic-ai/claude-code "$@"
  fi
}

# Deliberately not `exec` so we can branch on the exit code: clean quit ends the
# pane (ttyd closes the terminal); a crash drops to a shell so the tmux session
# isn't destroyed-and-recreated in a ttyd auto-reconnect loop.
# No --model flag: inherit the org-wide default from /etc/claude-code/managed-settings.json
# (an explicit --model would override that managed default for every launched session).
launch --dangerously-skip-permissions "${name_args[@]}"
code=$?
[ "$code" -eq 0 ] && exit 0

echo ""
echo "  claude exited abnormally (status $code). Dropping to a shell — your tmux session is preserved."
echo "  Re-launch any time with: ~/start-claude.sh"
echo ""
exec "${SHELL:-/bin/bash}" -l