clay-server 2.26.0-beta.1 → 2.26.0-beta.3

package/bin/cli.js

@@ -1507,6 +1507,7 @@ async function forkDaemon(mode, keepAwake, extraProjects, addCwd, wantOsUsers) {
     if (prevProjectMap[cwd]) {
       if (prevProjectMap[cwd].visibility) cwdEntry.visibility = prevProjectMap[cwd].visibility;
       if (prevProjectMap[cwd].allowedUsers) cwdEntry.allowedUsers = prevProjectMap[cwd].allowedUsers;
+      if (prevProjectMap[cwd].ownerId) cwdEntry.ownerId = prevProjectMap[cwd].ownerId;
     }
     allProjects.push(cwdEntry);
     usedSlugs.push(slug);
@@ -1525,6 +1526,7 @@ async function forkDaemon(mode, keepAwake, extraProjects, addCwd, wantOsUsers) {
       if (prevProjectMap[rp.path]) {
         if (prevProjectMap[rp.path].visibility) rpEntry.visibility = prevProjectMap[rp.path].visibility;
         if (prevProjectMap[rp.path].allowedUsers) rpEntry.allowedUsers = prevProjectMap[rp.path].allowedUsers;
+        if (prevProjectMap[rp.path].ownerId) rpEntry.ownerId = prevProjectMap[rp.path].ownerId;
       }
       allProjects.push(rpEntry);
     }
@@ -1879,19 +1881,13 @@ async function restartDaemonWithTLS(config, callback) {
   }
   clearStaleConfig();
 
-  // Re-fork with TLS
-  var newConfig = {
+  // Re-fork with TLS (preserve all existing config fields)
+  var newConfig = Object.assign({}, config, {
     pid: null,
-    port: config.port,
-    pinHash: config.pinHash || null,
     tls: true,
     builtinCert: hasBuiltinCert,
     mkcertDetected: mkcertDetected,
-    debug: config.debug || false,
-    keepAwake: config.keepAwake || false,
-    dangerouslySkipPermissions: config.dangerouslySkipPermissions || false,
-    projects: config.projects || [],
-  };
+  });
 
   ensureConfigDir();
   saveConfig(newConfig);

package/lib/os-users.js

@@ -254,6 +254,26 @@ function toLinuxUsername(clayUsername) {
   return name;
 }
 
+/**
+ * Ensure linger is enabled for a Linux user so systemd creates /run/user/<uid>.
+ * Required for CLI tools like gcloud and gh that need XDG_RUNTIME_DIR.
+ */
+function ensureLinger(username) {
+  try {
+    var uid = execSync("id -u " + username, { encoding: "utf8", timeout: 5000, stdio: "pipe" }).trim();
+    var lingerFile = "/var/lib/systemd/linger/" + username;
+    if (fs.existsSync(lingerFile)) return;
+    execSync("loginctl enable-linger " + username, {
+      encoding: "utf8",
+      timeout: 10000,
+      stdio: "pipe",
+    });
+    console.log("[os-users] Enabled linger for " + username + " (uid " + uid + ")");
+  } catch (e) {
+    console.warn("[os-users] Failed to enable linger for " + username + ": " + (e.stderr || e.message || "").trim());
+  }
+}
+
 /**
  * Check if a Linux user already exists.
  */
@@ -353,6 +373,7 @@ function provisionLinuxUser(clayUsername) {
       timeout: 15000,
       stdio: "pipe",
     });
+    ensureLinger(linuxName);
     console.log("[os-users] Provisioned Linux user: " + linuxName + " (Clay user: " + clayUsername + ")");
     installClaudeCli(linuxName);
     return { ok: true, linuxUser: linuxName };
@@ -383,6 +404,8 @@ function provisionAllUsers(usersModule) {
           console.log("[os-users] Claude CLI missing for " + user.linuxUser + ", installing...");
           installClaudeCli(user.linuxUser);
         }
+        // Ensure linger is enabled for existing users
+        ensureLinger(user.linuxUser);
         result.skipped.push({ id: user.id, username: user.username, linuxUser: user.linuxUser });
         continue;
       }

package/lib/project.js

@@ -2204,6 +2204,8 @@ function createProjectContext(opts) {
     if (msg.type === "rewind_preview") {
       var session = getSessionForWs(ws);
       if (!session || !session.cliSessionId || !msg.uuid) return;
+      // Reject preview requests while a rewind is executing
+      if (session._rewindInProgress) return;
 
       (async function () {
         var result;
@@ -2233,6 +2235,12 @@ function createProjectContext(opts) {
     if (msg.type === "rewind_execute") {
       var session = getSessionForWs(ws);
       if (!session || !session.cliSessionId || !msg.uuid) return;
+      // Guard against concurrent rewind executions
+      if (session._rewindInProgress) {
+        sendTo(ws, { type: "rewind_error", text: "Rewind already in progress." });
+        return;
+      }
+      session._rewindInProgress = true;
       var mode = msg.mode || "both";
 
       (async function () {
@@ -2293,6 +2301,7 @@ function createProjectContext(opts) {
         } catch (err) {
           sendTo(ws, { type: "rewind_error", text: "Rewind failed: " + err.message });
         } finally {
+          session._rewindInProgress = false;
           if (result && result.isTemp) result.cleanup();
         }
       })();
@@ -3328,7 +3337,7 @@ function createProjectContext(opts) {
           return;
         }
       }
-      var t = tm.create(msg.cols || 80, msg.rows || 24, getOsUserInfoForWs(ws));
+      var t = tm.create(msg.cols || 80, msg.rows || 24, getOsUserInfoForWs(ws), ws);
       if (!t) {
         sendTo(ws, { type: "term_error", error: "Cannot create terminal (node-pty not available or limit reached)" });
         return;
@@ -3356,7 +3365,7 @@ function createProjectContext(opts) {
 
     if (msg.type === "term_resize") {
       if (msg.id && msg.cols > 0 && msg.rows > 0) {
-        tm.resize(msg.id, msg.cols, msg.rows);
+        tm.resize(msg.id, msg.cols, msg.rows, ws);
       }
       return;
     }

package/lib/public/app.js

@@ -6,15 +6,15 @@ import { initSidebar, renderSessionList, handleSearchResults, updateSessionPrese
 import { initMateSidebar, showMateSidebar, hideMateSidebar, renderMateSessionList, updateMateSidebarProfile, handleMateSearchResults } from './modules/mate-sidebar.js';
 import { initMateKnowledge, requestKnowledgeList, renderKnowledgeList, handleKnowledgeContent, hideKnowledge } from './modules/mate-knowledge.js';
 import { initMateMemory, renderMemoryList, hideMemory } from './modules/mate-memory.js';
-import { initRewind, setRewindMode, showRewindModal, clearPendingRewindUuid, addRewindButton } from './modules/rewind.js';
+import { initRewind, setRewindMode, showRewindModal, clearPendingRewindUuid, addRewindButton, onRewindComplete, onRewindError } from './modules/rewind.js';
 import { initNotifications, showDoneNotification, playDoneSound, isNotifAlertEnabled, isNotifSoundEnabled } from './modules/notifications.js';
 import { initInput, clearPendingImages, handleInputSync, autoResize, builtinCommands, sendMessage, hasSendableContent, setScheduleBtnDisabled, setScheduleDelayMs, clearScheduleDelay } from './modules/input.js';
 import { initQrCode, triggerShare } from './modules/qrcode.js';
 import { initFileBrowser, loadRootDirectory, refreshTree, handleFsList, handleFsRead, handleDirChanged, refreshIfOpen, handleFileChanged, handleFileHistory, handleGitDiff, handleFileAt, getPendingNavigate, closeFileViewer, resetFileBrowser } from './modules/filebrowser.js';
-import { initTerminal, openTerminal, closeTerminal, resetTerminals, handleTermList, handleTermCreated, handleTermOutput, handleTermExited, handleTermClosed, sendTerminalCommand } from './modules/terminal.js';
+import { initTerminal, openTerminal, closeTerminal, resetTerminals, handleTermList, handleTermCreated, handleTermOutput, handleTermResized, handleTermExited, handleTermClosed, sendTerminalCommand } from './modules/terminal.js';
 import { initStickyNotes, handleNotesList, handleNoteCreated, handleNoteUpdated, handleNoteDeleted, openArchive, closeArchive, isArchiveOpen, hideNotes, showNotes, isNotesVisible } from './modules/sticky-notes.js';
 import { initTheme, getThemeColor, getComputedVar, onThemeChange, getCurrentTheme } from './modules/theme.js';
-import { initTools, resetToolState, saveToolState, restoreToolState, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionResolved, markPermissionCancelled, renderElicitationRequest, markElicitationResolved, renderPlanBanner, renderPlanCard, handleTodoWrite, handleTaskCreate, handleTaskUpdate, startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, addTurnMeta, enableMainInput, getTools, getPlanContent, setPlanContent, isPlanFilePath, getTodoTools, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, updateSubagentProgress, initSubagentStop, closeToolGroup, removeToolFromGroup } from './modules/tools.js';
+import { initTools, resetToolState, saveToolState, restoreToolState, renderAskUserQuestion, markAskUserAnswered, renderPermissionRequest, markPermissionResolved, markPermissionCancelled, renderElicitationRequest, markElicitationResolved, renderPlanBanner, renderPlanCard, handleTodoWrite, handleTaskCreate, handleTaskUpdate, startThinking, appendThinking, stopThinking, resetThinkingGroup, createToolItem, updateToolExecuting, updateToolResult, markAllToolsDone, addTurnMeta, resetTurnMetaCost, enableMainInput, getTools, getPlanContent, setPlanContent, isPlanFilePath, getTodoTools, updateSubagentActivity, addSubagentToolEntry, markSubagentDone, updateSubagentProgress, initSubagentStop, closeToolGroup, removeToolFromGroup } from './modules/tools.js';
 import { initServerSettings, updateSettingsStats, updateSettingsModels, updateDaemonConfig, handleSetPinResult, handleKeepAwakeChanged, handleAutoContinueChanged, handleRestartResult, handleShutdownResult, handleSharedEnv, handleSharedEnvSaved, handleGlobalClaudeMdRead, handleGlobalClaudeMdWrite } from './modules/server-settings.js';
 import { initProjectSettings, handleInstructionsRead, handleInstructionsWrite, handleProjectEnv, handleProjectEnvSaved, isProjectSettingsOpen, handleProjectSharedEnv, handleProjectSharedEnvSaved, handleProjectOwnerChanged } from './modules/project-settings.js';
 import { initSkills, handleSkillInstalled, handleSkillUninstalled } from './modules/skills.js';
@@ -2468,7 +2468,9 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   }
 
   function accumulateUsage(cost, usage) {
-    if (cost != null) sessionUsage.cost += cost;
+    // cost is the SDK's total_cost_usd — a cumulative running total, not a delta.
+    // Assign directly instead of summing to avoid overcounting.
+    if (cost != null) sessionUsage.cost = cost;
     if (usage) {
       sessionUsage.input += usage.input_tokens || usage.inputTokens || 0;
       sessionUsage.output += usage.output_tokens || usage.outputTokens || 0;
@@ -2666,7 +2668,8 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
   }
 
   function accumulateContext(cost, usage, modelUsage, lastStreamInputTokens) {
-    if (cost != null) contextData.cost += cost;
+    // cost is the SDK's total_cost_usd — a cumulative running total, not a delta.
+    if (cost != null) contextData.cost = cost;
     // Use latest turn values (not cumulative) since each turn's input_tokens
     // already includes the full conversation context up to that point
     if (usage) {
@@ -3718,6 +3721,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
     setStatus("connected");
     if (!loopActive) enableMainInput();
     resetUsage();
+    resetTurnMetaCost();
     resetContext();
     // Clear header indicators
     clearRateLimitIndicator();
@@ -4711,6 +4715,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
           break;
 
         case "rewind_complete":
+          onRewindComplete();
           setRewindMode(false);
           var rewindText = "Rewound to earlier point. Files have been restored.";
           if (msg.mode === "chat") rewindText = "Conversation rewound to earlier point.";
@@ -4719,6 +4724,7 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
           break;
 
         case "rewind_error":
+          onRewindError();
           clearPendingRewindUuid();
           addSystemMessage(msg.text || "Rewind failed.", true);
           break;
@@ -4809,6 +4815,10 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
           handleTermOutput(msg);
           break;
 
+        case "term_resized":
+          handleTermResized(msg);
+          break;
+
         case "term_exited":
           handleTermExited(msg);
           break;
@@ -4976,6 +4986,22 @@ import { initDebate, handleDebatePreparing, handleDebateStarted, handleDebateRes
             // Update mate sidebar if currently viewing this mate
             if (dmMode && dmTargetUser && dmTargetUser.isMate && dmTargetUser.id === msg.mate.id) {
               updateMateSidebarProfile(msg.mate);
+              // Sync dmTargetUser so subsequent renders use fresh data
+              var mp2 = msg.mate.profile || {};
+              dmTargetUser.displayName = mp2.displayName || msg.mate.name || dmTargetUser.displayName;
+              dmTargetUser.avatarStyle = mp2.avatarStyle || dmTargetUser.avatarStyle;
+              dmTargetUser.avatarSeed = mp2.avatarSeed || dmTargetUser.avatarSeed;
+              dmTargetUser.avatarColor = mp2.avatarColor || dmTargetUser.avatarColor;
+              dmTargetUser.avatarCustom = mp2.avatarCustom || "";
+              dmTargetUser.profile = mp2;
+              // Refresh body dataset so new chat bubbles use the updated avatar
+              document.body.dataset.mateAvatarUrl = mateAvatarUrl(dmTargetUser, 36);
+              document.body.dataset.mateName = mp2.displayName || msg.mate.name || "";
+              // Update existing chat bubble avatars
+              var mateAvis = document.querySelectorAll(".dm-bubble-avatar-mate");
+              for (var mbi = 0; mbi < mateAvis.length; mbi++) {
+                mateAvis[mbi].src = document.body.dataset.mateAvatarUrl;
+              }
             }
             // Update DM header if currently chatting with this mate
             if (dmMode && dmTargetUser && dmTargetUser.id === msg.mate.id) {

package/lib/public/modules/rewind.js

@@ -4,6 +4,8 @@ import { iconHtml, refreshIcons } from './icons.js';
 var ctx;
 var rewindMode = false;
 var pendingRewindUuid = null;
+var rewindPreviewInFlight = false;
+var rewindExecuting = false;
 var rewindBannerEl = null;
 var rewindScrollHandler = null;
 var rewindModal, rewindSummary, rewindFilesList, rewindConfirmBtn, rewindCancelBtn, rewindModeOptions;
@@ -50,6 +52,17 @@ export function clearPendingRewindUuid() {
   pendingRewindUuid = null;
 }
 
+export function onRewindComplete() {
+  rewindExecuting = false;
+  rewindPreviewInFlight = false;
+  pendingRewindUuid = null;
+}
+
+export function onRewindError() {
+  rewindExecuting = false;
+  rewindPreviewInFlight = false;
+}
+
 function initiateRewind(uuid) {
   if (ctx.processing) {
     ctx.addSystemMessage("Cannot rewind while processing. Stop the current operation first.", true);
@@ -59,7 +72,16 @@ function initiateRewind(uuid) {
     ctx.addSystemMessage("No rewind point found for this turn.", true);
     return;
   }
+  if (rewindPreviewInFlight) {
+    // Debounce: ignore clicks while a preview is already in flight
+    return;
+  }
+  if (rewindExecuting) {
+    ctx.addSystemMessage("Rewind already in progress.", true);
+    return;
+  }
   pendingRewindUuid = uuid;
+  rewindPreviewInFlight = true;
   if (ctx.ws && ctx.connected) {
     ctx.ws.send(JSON.stringify({ type: "rewind_preview", uuid: uuid }));
   }
@@ -98,6 +120,17 @@ function updateSummaryForMode() {
 }
 
 export function showRewindModal(data) {
+  rewindPreviewInFlight = false;
+
+  // Ignore stale preview results that don't match current pending UUID
+  if (data.uuid && pendingRewindUuid && data.uuid !== pendingRewindUuid) {
+    return;
+  }
+  // Ignore if a rewind is already executing
+  if (rewindExecuting) {
+    return;
+  }
+
   var p = data.preview || data;
   var filePaths = p.filesChanged || p.filePaths || p.files || [];
   var fileCount = filePaths.length;
@@ -171,6 +204,7 @@ export function showRewindModal(data) {
 export function hideRewindModal() {
   rewindModal.classList.add("hidden");
   pendingRewindUuid = null;
+  rewindPreviewInFlight = false;
 }
 
 export function renderDiffPre(text) {
@@ -333,7 +367,9 @@ export function initRewind(_ctx) {
   });
 
   rewindConfirmBtn.addEventListener("click", function() {
+    if (rewindExecuting) return;
     if (pendingRewindUuid && ctx.ws && ctx.connected) {
+      rewindExecuting = true;
       var mode = getSelectedMode();
       ctx.ws.send(JSON.stringify({ type: "rewind_execute", uuid: pendingRewindUuid, mode: mode }));
     }

package/lib/public/modules/terminal.js

@@ -653,6 +653,14 @@ export function handleTermOutput(msg) {
   }
 }
 
+export function handleTermResized(msg) {
+  if (!msg.id) return;
+  var tab = tabs.get(msg.id);
+  if (tab && tab.xterm && msg.cols > 0 && msg.rows > 0) {
+    tab.xterm.resize(msg.cols, msg.rows);
+  }
+}
+
 export function handleTermExited(msg) {
   if (!msg.id) return;
   var tab = tabs.get(msg.id);

package/lib/public/modules/tools.js

@@ -2063,13 +2063,29 @@ export function markSubagentDone(parentToolId, status, summary, usage) {
   if (usage) updateSubagentProgress(parentToolId, usage, null);
 }
 
+var _lastCumulativeCost = 0;
+
+export function resetTurnMetaCost() {
+  _lastCumulativeCost = 0;
+}
+
 export function addTurnMeta(cost, duration) {
   closeToolGroup();
   var div = document.createElement("div");
   div.className = "turn-meta";
   div.dataset.turn = ctx.turnCounter;
   var parts = [];
-  if (cost != null) parts.push("$" + cost.toFixed(4));
+  if (cost != null) {
+    // cost is cumulative total_cost_usd from the SDK.
+    // When the SDK session restarts, total_cost_usd resets to 0 so cost
+    // can drop below _lastCumulativeCost.  In that case the entire cost
+    // value IS the delta for this turn (fresh SDK session).
+    var delta = cost - _lastCumulativeCost;
+    if (delta < 0) delta = cost;
+    _lastCumulativeCost = cost;
+    var deltaStr = delta > 0 ? "+$" + delta.toFixed(4) : "$0.0000";
+    parts.push(deltaStr + " \u2192 $" + cost.toFixed(4));
+  }
   if (duration != null) parts.push((duration / 1000).toFixed(1) + "s");
   if (parts.length) {
     div.textContent = parts.join(" \u00b7 ");
@@ -2114,6 +2130,7 @@ export function saveToolState() {
     currentToolGroup: currentToolGroup,
     toolGroupCounter: toolGroupCounter,
     toolGroups: toolGroups,
+    lastCumulativeCost: _lastCumulativeCost,
   };
 }
 
@@ -2126,6 +2143,7 @@ export function restoreToolState(saved) {
   currentToolGroup = saved.currentToolGroup;
   toolGroupCounter = saved.toolGroupCounter;
   toolGroups = saved.toolGroups;
+  _lastCumulativeCost = saved.lastCumulativeCost || 0;
   if (todoWidgetEl) {
     setupTodoObserver();
   }
@@ -2146,6 +2164,9 @@ export function resetToolState() {
   currentToolGroup = null;
   toolGroupCounter = 0;
   toolGroups = {};
+  // NOTE: do NOT reset _lastCumulativeCost here — it must persist across
+  // turns so addTurnMeta can compute per-turn deltas.  It is only cleared
+  // on new conversation via resetTurnMetaCost().
   var stickyEl = document.getElementById("todo-sticky");
   if (stickyEl) { stickyEl.classList.add("hidden"); stickyEl.innerHTML = ""; }
 }

package/lib/sdk-bridge.js

@@ -1138,6 +1138,8 @@ function createSDKBridge(opts) {
       if (session.lastRewindUuid) {
         queryOptions.resumeSessionAt = session.lastRewindUuid;
         delete session.lastRewindUuid;
+        // Persist the deletion so server restarts don't re-use a stale UUID
+        sm.saveSessionFile(session);
       }
     }
 
@@ -1687,8 +1689,13 @@ function createSDKBridge(opts) {
   }
 
   async function processQueryStream(session) {
+    // Capture references at start so we only clean up OUR resources in finally,
+    // not resources from a newer query that may have been created after an abort.
+    var myQueryInstance = session.queryInstance;
+    var myMessageQueue = session.messageQueue;
+    var myAbortController = session.abortController;
     try {
-      for await (var msg of session.queryInstance) {
+      for await (var msg of myQueryInstance) {
         processSDKMessage(session, msg);
       }
       // Stream ended normally after a task stop — no "result" message was sent,
@@ -1704,7 +1711,7 @@ function createSDKBridge(opts) {
       if (session.isProcessing) {
         session.isProcessing = false;
         onProcessingChanged();
-        if (err.name === "AbortError" || (session.abortController && session.abortController.signal.aborted) || session.taskStopRequested) {
+        if (err.name === "AbortError" || (myAbortController && myAbortController.signal.aborted) || session.taskStopRequested) {
           if (!session.destroying) {
             sendAndRecord(session, { type: "info", text: "Interrupted \u00b7 What should Claude do instead?" });
             sendAndRecord(session, { type: "done", code: 0 });
@@ -1777,16 +1784,19 @@ function createSDKBridge(opts) {
     } finally {
       // Close the SDK query to terminate the underlying claude child process.
       // Without this, the process stays alive indefinitely (single-user mode).
-      if (session.queryInstance) {
+      // Only clean up if the session still references OUR resources.
+      // A rewind + new startQuery may have already replaced these with
+      // a newer query — clobbering them would kill the new query.
+      if (session.queryInstance === myQueryInstance) {
         try {
           if (typeof session.queryInstance.close === "function") {
             session.queryInstance.close();
           }
         } catch (e) {}
+        session.queryInstance = null;
       }
-      session.queryInstance = null;
-      session.messageQueue = null;
-      session.abortController = null;
+      if (session.messageQueue === myMessageQueue) session.messageQueue = null;
+      if (session.abortController === myAbortController) session.abortController = null;
       session.taskStopRequested = false;
       session.pendingPermissions = {};
       session.pendingAskUser = {};
@@ -1952,6 +1962,8 @@ function createSDKBridge(opts) {
       if (session.lastRewindUuid) {
         queryOptions.resumeSessionAt = session.lastRewindUuid;
         delete session.lastRewindUuid;
+        // Persist the deletion so server restarts don't re-use a stale UUID
+        sm.saveSessionFile(session);
       }
     }
 

package/lib/sessions.js

@@ -96,10 +96,14 @@ function createSessionManager(opts) {
         lines.push(JSON.stringify(session.history[i]));
       }
       var sfPath = sessionFilePath(session.cliSessionId);
-      fs.writeFileSync(sfPath, lines.join("\n") + "\n");
+      // Atomic write: write to temp file then rename, so a crash mid-write
+      // cannot leave a truncated/corrupted session file.
+      var tmpPath = sfPath + ".tmp." + process.pid;
+      fs.writeFileSync(tmpPath, lines.join("\n") + "\n");
       if (process.platform !== "win32") {
-        try { fs.chmodSync(sfPath, 0o600); } catch (chmodErr) {}
+        try { fs.chmodSync(tmpPath, 0o600); } catch (chmodErr) {}
       }
+      fs.renameSync(tmpPath, sfPath);
     } catch(e) {
       console.error("[session] Failed to save session file:", e.message);
     }
@@ -123,6 +127,13 @@ function createSessionManager(opts) {
     var files;
     try { files = fs.readdirSync(sessionsDir); } catch { return; }
 
+    // Clean up stale temp files from interrupted atomic writes
+    for (var ti = 0; ti < files.length; ti++) {
+      if (files[ti].indexOf(".tmp.") !== -1) {
+        try { fs.unlinkSync(path.join(sessionsDir, files[ti])); } catch (e) {}
+      }
+    }
+
     var loaded = [];
     for (var i = 0; i < files.length; i++) {
       if (!files[i].endsWith(".jsonl")) continue;

package/lib/terminal-manager.js

@@ -16,7 +16,7 @@ function createTerminalManager(opts) {
   var nextId = 1;
   var terminals = new Map(); // id -> terminal session
 
-  function create(cols, rows, osUserInfo) {
+  function create(cols, rows, osUserInfo, ownerWs) {
     if (terminals.size >= MAX_TERMINALS) return null;
 
     var pty = createTerminal(cwd, cols, rows, osUserInfo);
@@ -34,6 +34,7 @@ function createTerminalManager(opts) {
       exited: false,
       exitCode: null,
       subscribers: new Set(),
+      ownerWs: ownerWs || null,
     };
 
     pty.onData(function (data) {
@@ -84,6 +85,11 @@ function createTerminalManager(opts) {
       sendTo(ws, { type: "term_output", id: id, data: replay });
     }
 
+    // Send current terminal dimensions so the client renders at the correct size
+    if (!alreadySubscribed && session.cols && session.rows) {
+      sendTo(ws, { type: "term_resized", id: id, cols: session.cols, rows: session.rows });
+    }
+
     // If already exited, notify
     if (session.exited) {
       sendTo(ws, { type: "term_exited", id: id });
@@ -111,14 +117,22 @@ function createTerminalManager(opts) {
     }
   }
 
-  function resize(id, cols, rows) {
+  function resize(id, cols, rows, sourceWs) {
     var session = terminals.get(id);
     if (!session || !session.pty) return;
+    // Only the terminal owner can resize the PTY.
+    // Observers resizing would cause SIGWINCH and flood the owner with escape sequences.
+    if (session.ownerWs && sourceWs && sourceWs !== session.ownerWs) return;
     if (cols > 0 && rows > 0) {
       try {
         session.pty.resize(cols, rows);
         session.cols = cols;
         session.rows = rows;
+        // Notify other subscribers about the resize so their xterm stays in sync
+        var msg = JSON.stringify({ type: "term_resized", id: id, cols: cols, rows: rows });
+        for (var ws of session.subscribers) {
+          if (ws.readyState === 1 && ws !== sourceWs) ws.send(msg);
+        }
       } catch (e) {}
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "2.26.0-beta.1",
+  "version": "2.26.0-beta.3",
   "description": "Self-hosted Claude Code in your browser. Multi-session, multi-user, push notifications.",
   "bin": {
     "clay-server": "./bin/cli.js",