clay-server 2.34.0-beta.6 → 2.34.0-beta.8

package/lib/os-users.js

@@ -4,6 +4,11 @@
 var fs = require("fs");
 var path = require("path");
 var execFileSync = require("child_process").execFileSync;
+var _aclGrantCache = Object.create(null);
+
+function aclCacheKey(projectPath, linuxUser) {
+  return path.resolve(projectPath) + "::" + linuxUser;
+}
 
 function isSafeLinuxUsername(username) {
   return typeof username === "string" && /^[a-z_][a-z0-9_-]*[$]?$/.test(username);
@@ -191,6 +196,10 @@ function grantProjectAccess(projectPath, linuxUser) {
     console.error("[os-users] Invalid Linux username for ACL grant: " + linuxUser);
     return;
   }
+  var cacheKey = aclCacheKey(projectPath, linuxUser);
+  if (_aclGrantCache[cacheKey]) {
+    return;
+  }
   try {
     // Recursive ACL for existing files
     execFileSync("setfacl", ["-R", "-m", "u:" + linuxUser + ":rwX", projectPath], {
@@ -204,8 +213,10 @@ function grantProjectAccess(projectPath, linuxUser) {
       timeout: 30000,
       stdio: "pipe",
     });
+    _aclGrantCache[cacheKey] = true;
     console.log("[os-users] Granted ACL access for " + linuxUser + " on " + projectPath);
   } catch (e) {
+    delete _aclGrantCache[cacheKey];
     var errMsg = (e.stderr || e.message || "").toString();
     if (errMsg.indexOf("not found") !== -1 || errMsg.indexOf("ENOENT") !== -1) {
       var cmd = getAclInstallCommand();
@@ -229,6 +240,7 @@ function revokeProjectAccess(projectPath, linuxUser) {
     console.error("[os-users] Invalid Linux username for ACL revoke: " + linuxUser);
     return;
   }
+  var cacheKey = aclCacheKey(projectPath, linuxUser);
   try {
     execFileSync("setfacl", ["-R", "-x", "u:" + linuxUser, projectPath], {
       encoding: "utf8",
@@ -240,6 +252,7 @@ function revokeProjectAccess(projectPath, linuxUser) {
       timeout: 30000,
       stdio: "pipe",
     });
+    delete _aclGrantCache[cacheKey];
     console.log("[os-users] Revoked ACL access for " + linuxUser + " on " + projectPath);
   } catch (e) {
     var errMsg = (e.stderr || e.message || "").toString();

package/lib/project.js

@@ -160,6 +160,7 @@ function createProjectContext(opts) {
   var serverTls = opts.tls || false;
   var serverAuthToken = opts.authToken || null;
   var latestVersion = null;
+  var sessionTitleMigrationScheduled = false;
 
   // --- YOKE adapters (multi-vendor, lazy init) ---
   var _yokeState = yoke.createAdapters({ cwd: cwd, slug: slug });
@@ -1380,7 +1381,16 @@ function createProjectContext(opts) {
     warmup: function () {
       sdk.warmup();
       sdk.startIdleReaper();
-      sm.migrateSessionTitles(adapter, cwd);
+      if (!osUsers && !sessionTitleMigrationScheduled) {
+        sessionTitleMigrationScheduled = true;
+        setTimeout(function () {
+          try {
+            sm.migrateSessionTitles(adapter, cwd);
+          } catch (e) {
+            console.error("[project] Session title migration failed for " + slug + ":", e && e.message ? e.message : e);
+          }
+        }, 5000);
+      }
     },
   });
 

package/lib/yoke/adapters/claude-worker.js

@@ -16,6 +16,7 @@ try { require("fs").writeSync(2, "[sdk-worker] BOOT pid=" + process.pid + " uid=
 var net = require("net");
 var crypto = require("crypto");
 var path = require("path");
+var fs = require("fs");
 
 var socketPath = process.argv[2];
 if (!socketPath) {
@@ -355,8 +356,11 @@ async function handleQueryStart(msg) {
     // This is needed because the CLI's Axios-based HTTP client ignores
     // NODE_OPTIONS dns flags and still attempts IPv6 connections via its
     // custom TLS agent, causing 5-10s timeouts on IPv6-less servers.
-    var preloadScript = require("path").join(__dirname, "ipv4-only.js");
-    var extraOpts = " --require " + JSON.stringify(preloadScript);
+    var preloadScript = path.join(__dirname, "..", "..", "ipv4-only.js");
+    var extraOpts = "";
+    if (fs.existsSync(preloadScript)) {
+      extraOpts += " --require " + JSON.stringify(preloadScript);
+    }
     extraOpts += " --dns-result-order=ipv4first --no-network-family-autoselection";
     spawnOpts.env.NODE_OPTIONS = (spawnOpts.env.NODE_OPTIONS || "") + extraOpts;
     console.log("[sdk-worker] spawnClaudeCodeProcess called, command=" + spawnOpts.command);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "2.34.0-beta.6",
+  "version": "2.34.0-beta.8",
   "description": "Self-hosted Claude Code in your browser. Multi-session, multi-user, push notifications.",
   "bin": {
     "clay-server": "./bin/cli.js",