fix(web): session-generation guards for the non-message stores (F38) - #22

Merged

Calmingstorm merged 45 commits into

mainfrom

fix/web-session-guards

Jul 14, 2026

Commits on Jul 13, 2026

fix(web): session-generation guards for server/dm/unread/permission stores (F38)
Calmingstorm
committed
7e43224
fix(web): make the auth operations obey the session generation too (F38 round 2)
Calmingstorm
committed
5a40154

Commits on Jul 14, 2026

fix(web): the auth operations obey the session generation too (F38 round 3)
Calmingstorm
committed
f954351
fix(web): close the last session-boundary gaps in the refresh machinery (F38 round 4)
Calmingstorm
committed
738c274
test(web): stop the queue-drain test leaking an unhandled rejection
Calmingstorm
committed
3c082b7
fix(web): drain a stale refresh's own waiters + route DM creation through the guard (F38 round 5)
Calmingstorm
committed
99ef0af
fix(web): settle waiters at the boundary, recheck queue continuations, own DM workflows end-to-end (F38 round 6)
Calmingstorm
committed
244c871
fix(web): settle the refresh leader at the boundary, reject superseded mutations, guard remaining workflows (F38 round 7)
Calmingstorm
committed
5db65df
fix(web): own account mutations and member/presence fetches, close the rejection-contract holes (F38 round 8)
Calmingstorm
committed
9dd5f1c
fix(web): tear down the superseded identity at login, own every account-op path, request-recency for member loading (F38 round 9)
Calmingstorm
committed
c0acf64
fix(web): auth 401s bypass the refresh path; deletion performs the identity transition (F38 round 10)
Calmingstorm
committed
6d44f08
fix(web): recency-order startup validations, make closeDM total, own secret-revealing workflows (F38 round 11)
Calmingstorm
committed
e2581b7
fix(web): entry-claimed startup recency + owned init, list-effect ownership, rotation ordering, visible closeDM failures (F38 round 12)
Calmingstorm
committed
041eaa6
fix(web): owning no-token startup clears provisional identity, total loadFromStorage, serialized bot rotation (F38 round 13)
Calmingstorm
committed
9eb8068
fix(web): no-token owner ENDS the session, owning failures tear down, full tab/dialog ownership sweep (F38 round 14)
Calmingstorm
committed
6959241
fix(web): own the channels tab, both searches, pins, and the gif picker (F38 round 15)
Calmingstorm
committed
3a1ab02
fix(web): query-tracking search ownership, pins lifecycle composition, owned profile card (F38 round 16)
Calmingstorm
committed
5fc3488
fix(web): server-scope search ownership, gif lineage, unpin commit supersession, moderation guards, categories/members recency (F38 round 17)
Calmingstorm
committed
428d686
fix(web): scope-owned timers, categories, members, unpins, and moderation targets (F38 round 18)
Calmingstorm
committed
cdb8004
fix(web): core-store scope recency, empty-scope claims, render-time mirrors, scope-owned local state (F38 round 19)
Calmingstorm
committed
69b77c9
fix(web): empty-scope selection ownership, per-resource lineages, mutation/realtime commit supersession, target-owned DM open (F38 round 20)
Calmingstorm
committed
ec0ecef
fix(web): full write/fetch composition, loading settlement, DM scope entry, list commit supersession (F38 round 21)
Calmingstorm
committed
eee7de6
web: reconcile fetches with journaled mutations instead of discarding
Calmingstorm
committed
df0edd1
web: cover failure/lifecycle ownership, selection, gaps, tombstones, reset
Calmingstorm
committed
69b2adf
web: tombstone cross-scope channel deletions; correct the cap rationale
Calmingstorm
committed
d4e83ac
web: tombstones retire, refresh holds scope, selection reconciles fully
Calmingstorm
committed
f1709b4
web: reconcile read states -- acks and mention badges survive a held fetch
Calmingstorm
committed
5e9bc6c
web: permissionStore reset invalidates held fetches (epoch guard)
Calmingstorm
committed
f9504bf
web: tombstone retirement requires evidence -- omission or assertion
Calmingstorm
committed
4b5c4e4
web: a message revives a channel whose delete broadcast failed
Calmingstorm
committed
346af3a
web: own-server tombstones, convergent mentions, relative acks, recency
Calmingstorm
committed
1ccb9b9
web: a late ack residual counts mention events, not a count delta
Calmingstorm
committed
39390c5
web: server-owned counts -- events trigger authoritative fetches
Calmingstorm
committed
eac595e
web+server: durable reopen evidence, reconciled selections and flags,
Calmingstorm
committed
909f8b1
web: aliveness journal guarantees presence, never overwrites content
Calmingstorm
committed
a3c01d8
web+server: per-member fanout; NOTIFICATION carries createdAt
Calmingstorm
committed
650423c
web+server: authorized-only channel fanout; non-overridable event times
Calmingstorm
committed
0e61b68
web+server: the full lifecycle invariants, not the named instances
Calmingstorm
committed
d4c1ef0
web+server: round-31 blockers plus the pre-review sweep's own findings
Calmingstorm
committed
c53e732
web+server: mention badge as a projection; subscription races closed structurally
Calmingstorm
committed
c0cd763
web+server: server-authoritative acks, contingent notifications, live-sub delivery
Calmingstorm
committed
6c0ee98
web+server: round-35 — monotonic acks, atomic mention+anchor, guarded best-effort delivery
Calmingstorm
committed
df34d67
web+server: round-36 — monotonic ack tie-break + subscription model rewrite
Calmingstorm
committed
cbd7873
fix: add authoritative projection and channel-event ordering
Calmingstorm
committed
859524f
fix: remove obsolete speculative unsubscribe helper
Calmingstorm
committed
791da4b