Skip to content

fix(sync): renew sessions and preserve uploads through reauthentication - #45

Merged
VelvetAbyss merged 2 commits into
mainfrom
codex/sync-session-recovery-2026-11-09
Nov 9, 2026
Merged

VelvetAbyss merged 2 commits into
mainfrom
codex/sync-session-recovery-2026-11-09

Conversation

@VelvetAbyss

@VelvetAbyss VelvetAbyss commented Nov 9, 2026 •

Copy link
Copy Markdown
Owner

Login expiration currently causes each sync entity to repeat the same error while automatic retries continue. This change checks and renews valid sessions through Better Auth, makes one recovery attempt after an authentication rejection, then pauses all sync channels and offers “Sign in again” without clearing local edits. Reauthentication with the same business account resumes pending uploads; mismatched or stale-account recovery results are rejected.

The API enables Better Auth bearer session handling so cookie-unavailable clients use the same expiry and renewal rules. Offline account hints remain offline rather than being classified as expired. RxDB, real-time notifications and symbolic synchronization share the pause; network failures retain retry behavior.

The Verify runner is pinned to Ubuntu 24.04, which the locked Playwright version supports; Ubuntu latest now selects 26.04 and cannot install Chromium dependencies. All browser checks remain enabled.

Validation:

  • Web: 1,258 passed, 4 existing skips; API: 117 passed.
  • Core 5, database contracts 4, Obsidian plugin 57 passed.
  • Full lint, TypeScript, production/public-site/discovery verification passed.
  • Chromium: 5 data-safety scenarios passed, including server session revocation → pause → actual same-account login → preserved pending task uploaded; 3 production smoke tests passed.
  • Independent review: two offline/symbolic lifecycle findings fixed and re-reviewed, no remaining actionable findings.

Release from current main preserves the existing transactional sync state, account ownership, pending-write safety, cloud confirmation and policy consent behavior. The four theme-test failures from the older development workspace are fixed there; current main already contains their missing Labs fixture. Unrelated local work is excluded. Web and API deploy together through the existing production workflow; no desktop installer is included.

@vercel

vercel Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
focus-go Ready Ready Preview Nov 9, 2026 9:05am UTC

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-09T08:56:01.443044Z 79e5561 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@VelvetAbyss
VelvetAbyss merged commit 1b1696c into main Nov 9, 2026
3 checks passed

This branch was successfully deployed

1 active deployment
Preview — 07470c5c Deployed Nov 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant