Preserve full idle session interval after editing activity #13

Merged
severus-snape merged 1 commit from fix/session-last-activity into main 2026-11-09 12:35:15 +00:00
Collaborator

Floating idle-session correction

Trusted input/editing now counts alongside keyboard, pointer and wheel activity. A single trailing renewal flushes actual activity suppressed by the minute throttle, preserving the full inactivity interval after the last interaction. No periodic keepalive; synthetic activity and polling do not count. Logout cancels pending activity; hidden pages do not flush it. Activity during in-flight renewals is retained, errors retry only for additional recorded activity after backoff.

Evidence

Both new requirement regressions failed against unchanged main before correction. Build, all 14 Node tests and both Playwright browser suites now pass. Coverage includes trusted input, trailing idle interval, hidden page, in-flight activity, failed renewal/backoff, logout with pending timer and late completion after logout. Independent actual source review (a3360eb0): no P0/P1; its optional edge-coverage findings are covered. diff --check clean.

No deployment in this PR. Backend renewal endpoint already merged. Dashboard delivery PR overlays#260 must use this correction's merged revision before building; its failed CI must not be bypassed and package-write verification remains required. No live acceptance claimed.

## Floating idle-session correction Trusted input/editing now counts alongside keyboard, pointer and wheel activity. A single trailing renewal flushes actual activity suppressed by the minute throttle, preserving the full inactivity interval after the last interaction. No periodic keepalive; synthetic activity and polling do not count. Logout cancels pending activity; hidden pages do not flush it. Activity during in-flight renewals is retained, errors retry only for additional recorded activity after backoff. ## Evidence Both new requirement regressions failed against unchanged main before correction. Build, all 14 Node tests and both Playwright browser suites now pass. Coverage includes trusted input, trailing idle interval, hidden page, in-flight activity, failed renewal/backoff, logout with pending timer and late completion after logout. Independent actual source review (a3360eb0): no P0/P1; its optional edge-coverage findings are covered. diff --check clean. No deployment in this PR. Backend renewal endpoint already merged. Dashboard delivery PR overlays#260 must use this correction's merged revision before building; its failed CI must not be bypassed and package-write verification remains required. No live acceptance claimed.
fix(auth): renew idle sessions after last editing activity
All checks were successful
dashboard-ci / check (push) Successful in 33s
191a31b176
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
harness/webui!13
No description provided.