Files
pad/web/src
xarmian 4b5daad5a5 fix(web): three identity leaks found by sweeping the item pane's unmodelled post-suspension calls, and the guard now enumerates them (BUG-3130) (#1438)
* fix(web): an identity change now moves the reset generation of every workspace, and every post-await call outside a fence is classified (BUG-3130)

localIndex.resetAll, the identity-change listener, reset only the workspaces
it held state for. A caller that captured resetGenerationFor(ws) while ws had
no state saw no drop across a sign-out, so FieldEditor.createRelationTarget
wrote the previous identity's new row into a fresh index. resetAll now bumps a
counter folded into resetGenerationFor.

The child-population guard now fails on any post-await call that is neither a
modelled send nor a fence call and has no fence before it, unless it is
classified in KNOWN_OUTSIDE_FENCE (26 rows, each with its reason). Two-way:
an unlisted call fails, and so does a stale row.

* fix(web): decision chips no longer paint the previous identity's answer, and promise continuations in the item pane are enumerated (BUG-3130)

DecisionChips' .then checked only its item token, which a sign-out does not
move. It now also checks an identity fence captured in the effect.

It was invisible because the guard does not model promise continuations
(gap (f)) and the hand list of them predated the component. The guard now
enumerates every function handed to .then/.catch/.finally in the population,
inline or by name, into a two-way KNOWN_CONTINUATIONS table (12 rows), so a
new continuation fails until it is read. Codex round 1 found the component and
the by-name callback the first enumerator missed.

* docs(web): the child-population guard's gap (e) instance has been fixed; say so (BUG-3130)

* test(web): table keys carry an occurrence count, ['then'] is a continuation, and other deferrals are a declared gap (BUG-3130)

* docs(web): the child-population guard names generator resumption, what a table row pins, and where fail-closed stops (BUG-3130)

* fix(web): a field edit typed under one identity is not sent as the next one's (BUG-3130)
2026-09-22 19:19:07 -04:00
..