Astra Shell DocumentationDownload for macOS
Documentation Current: Input lease

Documentation / Core concepts / Input lease

CORE · INPUT

Many devices can view; input still has one owner.

An input lease makes PTY write access a short-lived, server-verified right and fences old connections, late keys, and competing resize operations.

Controller and Viewer

RoleInputPTY resize
ControllerAllowedSole owner
ViewerRead-onlyRejected

TTL and renewal

Device recovery authority is separate from the active lease. Lease expiry does not let a tokenless connection replace an existing owner; another device must explicitly take over.

A writable Attachment uses a 15-second TTL and renews at roughly one-third of that interval. If the connection disappears, the active lease expires within a bounded time; device recovery authority is validated separately by the server.

Takeover and fencing

Takeover creates a new lease ID. The server uses it to reject late input, resize, and cleanup from an older Attachment, so the most recent controller is the only valid writer.

Terminal size

Only the current Controller publishes PTY geometry. Viewers can render within their local windows but do not change the rows and columns seen by the remote application.