Connecting to another session's socket now verifies the process id and owner first.
What's wrong with this entry?
Before connecting to another session's socket, Claude now verifies the peer's process id and that the socket is owned by an expected user id, rather than trusting the path alone.
- Messaging state gained fields for the accepted owner user ids, an in-flight start marker, and the last start-failure detail.
peerDirOwnerUids
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.234
Messages injected by a host are classified separately from peer messages
Both mention cross
-
v2.1.234
Cross-session control requests check ids more carefully
Both mention cross
-
v2.1.234
Notice acks now wait for the record to persist
Both mention cross