Repository navigation

Hold WS session state through a reconnect grace window (fixes #1419, #1424) - #1427

Merged

Tim020 merged 17 commits into

devfrom

fix/ws-reconnect-session-reclaim

Oct 19, 2026

Merged

Hold WS session state through a reconnect grace window (fixes #1419, #1424)#1427
Tim020 merged 17 commits into
devfrom
fix/ws-reconnect-session-reclaim

Commits on Sep 24, 2026
- Add empirical repro tests for REFRESH_CLIENT session-loss (issue #1419)
  
  Tim020
  and
  claude
  committed
  1c1a5fd
- Hold WS session state through a reconnect grace window (#1419, #1424)
  
  Tim020
  and
  claude
  committed
  6456bbc
- Give short-grace reconnect tests headroom for slow CI runners
  
  Tim020
  and
  claude
  committed
  b307e62
- Address review of #1427: provisional reclaim, safe election, keyed timers
  
  Tim020
  and
  claude
  committed
  6d89aef
- Broadcast over a copy of the client list everywhere; widen real-timer margin
  
  Tim020
  and
  claude
  committed
  d5b95f3
- Resolve SonarCloud findings on the review follow-up
  
  Tim020
  and
  claude
  committed
  cd83324
Commits on Sep 25, 2026
- Add adversarial tests: a client uuid is not proof of ownership (#1427 round 2)
  
  Tim020
  and
  claude
  committed
  2096bbf
- Replace provisional reclaim with one ownership rule (#1427 review round 2)
  
  Tim020
  and
  claude
  committed
  2170fbf
- Split WebSocket op dispatch into per-op handlers (SonarCloud S3776, S1066)
  
  Tim020
  and
  claude
  committed
  d33edab
- Keep the client uuid per tab in both clients (sessionStorage)
  
  Tim020
  and
  claude
  committed
  d1c513f
- Merge remote-tracking branch 'origin/dev' into fix/ws-reconnect-session-reclaim
  Tim020
  committed
  05ddb2c
- A different user never inherits another user's client uuid (#1427 round 3)
  
  Tim020
  and
  claude
  committed
  5e60dea
- Clients store a server-assigned client id; move uuid E2E to 02-auth
  
  Tim020
  and
  claude
  committed
  836bead
- Commit a password change before the force-logout fan-out (#1427 round 4)
  
  Tim020
  and
  claude
  committed
  075f2bc
- client-v3: re-authenticate the WebSocket on an in-app login after logout
  
  Tim020
  and
  claude
  committed
  8b092c0
Commits on Oct 16, 2026
- Force-logout never raises after a committed password change (#1427 round 5)
  
  Tim020
  and
  claude
  committed
  ea5fe3c
Commits on Oct 19, 2026
- Force-logout: start grace deadlines when the client lookup fails (#1427 round 6)
  
  Tim020
  and
  claude
  committed
  960d7ce

Commits

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Oct 16, 2026

Commits on Oct 19, 2026