- Shipped
- September 3, 2026 at 9:10 PM UTC
- Author
- Kamo
- Commit
- 9a7cde7
GET **************** DELETE and PATCH on /terminals/{id}. Every one of them resolves the Linux account from the CALLER'S OWN SESSION and passes no account name to the agent that came from the request. A member can therefore only ever see, rename or end their own terminals — there is no id they could supply that would reach somebody else's, because the account is not part of what they supply. An unreachable machine answers 200 with an empty list and `unreachable: true` rather than an error: "the dev machine is down" is a fact about the machine, not a failure of the question, and the console can say so where an error page could only say nothing. That is the same rule DesktopSsoController follows. Renaming a session that has ended is a 404 with a sentence — the honest status for "you renamed something that is not there any more", which after a reboot is every terminal the member had.