clay-server 4.3.0-beta.8 → 4.3.0-beta.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -989,6 +989,8 @@ function attachSessions(ctx) {
989
989
  // TUI session: kill the underlying PTY before deleting the session
990
990
  // record so the `claude` process is reaped and not left orphaned.
991
991
  var dsTarget = sm.sessions.get(msg.id);
992
+ if (usersModule.isMultiUser() && (!ws._clayUser ||
993
+ !usersModule.canAccessSession(ws._clayUser.id, dsTarget, getProjectAccess()))) return true;
992
994
  if (dsTarget && dsTarget.mode === "tui" && typeof dsTarget.terminalId === "number" && tm) {
993
995
  try { tm.close(dsTarget.terminalId); } catch (e) {}
994
996
  }
@@ -1001,6 +1003,8 @@ function attachSessions(ctx) {
1001
1003
  if (msg.type === "rename_session") {
1002
1004
  if (msg.id && sm.sessions.has(msg.id) && msg.title) {
1003
1005
  var s = sm.sessions.get(msg.id);
1006
+ if (usersModule.isMultiUser() && (!ws._clayUser ||
1007
+ !usersModule.canAccessSession(ws._clayUser.id, s, getProjectAccess()))) return true;
1004
1008
  s.title = String(msg.title).substring(0, 100);
1005
1009
  s.titleProvisional = false;
1006
1010
  s.titleAutoGenerated = false;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "clay-server",
3
- "version": "4.3.0-beta.8",
3
+ "version": "4.3.0-beta.9",
4
4
  "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
5
5
  "bin": {
6
6
  "clay-server": "./bin/cli.js"