clay-server 4.0.0-beta.5 → 4.0.0-beta.6

package/lib/public/modules/app-messages.js

@@ -1300,10 +1300,10 @@ export function processMessage(msg) {
         appendDelta((msg.text || "Authentication required.") + "\n");
         setStatus("connected");
         if (!store.get('loopActive')) enableMainInput();
-        // Open the login flow for this vendor. The server keeps exactly one
-        // login terminal per vendor, so repeat auth_required events (other
-        // sessions, split panes, a 401 retry burst) do not stack up.
-        autoStartLoginIfNeeded(msg);
+        // Open the login flow only for a live auth failure. Older Clay
+        // versions recorded this transient event in session history; replaying
+        // one must not reopen a login terminal after the user signed in.
+        if (!store.get('replayingHistory')) autoStartLoginIfNeeded(msg);
         break;
 
       case "vendor_login_ready":

package/lib/sdk-message-processor.js

@@ -70,7 +70,10 @@ function attachMessageProcessor(ctx) {
     var authTitle = ((vendorInfo && vendorInfo.displayName) || "Claude Code") + " is not logged in.";
     var loginCommand = (vendorInfo && vendorInfo.loginCommand) || "claude login";
     var _nmLogin = getNotificationsModule();
-    sendAndRecord(session, {
+    // Authentication recovery is transient UI state, not transcript content.
+    // Recording it makes history replay look like a fresh auth failure and
+    // re-opens the login terminal after a successful sign-in.
+    sendToSession(session, {
       type: "auth_required",
       text: authTitle,
       vendor: session.vendor || "claude",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "4.0.0-beta.5",
+  "version": "4.0.0-beta.6",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js",