weichen/Agent-System-Dev
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions 4 Packages Projects Releases Wiki Activity

Pin frontend with the password-session credential fix (feature/login-clear-stale-key) #362

Merged
weichen merged 11 commits from feature/login-clear-stale-key into main 2026-10-11 14:11:31 +00:00
Conversation 0 Commits 11 Files Changed 2
+321 -1
weichen commented 2026-10-11 13:59:07 +00:00
Owner
Copy Link
Copy Source

Why: password logins hand the browser an HttpOnly session cookie, but a stale Bearer key left in localStorage shadows it server-side (Bearer is checked first), so every request after login returns 401 and refreshes bounce back to the login page - reproduced at http://192.168.3.2:8788 on 2026-10-11.
Evidence: task card .task/feature-login-clear-stale-key.md carries the tool-written precheck / task-sync / make test receipts (post-sync make test exit=0, receipt 95d71cd8); CI (make test + make build) on this PR head is the authoritative gate.
Impact: dev-instance UIs reached by LAN IP or hostname log in cleanly with username+password; API-key flow unchanged. Frontend component pinned at 09310cb753192adea6f74dc73f3b9bf3a3ff64d0.
Refs: Agent-System-Frontend PR #55.

Why: password logins hand the browser an HttpOnly session cookie, but a stale Bearer key left in localStorage shadows it server-side (Bearer is checked first), so every request after login returns 401 and refreshes bounce back to the login page - reproduced at http://192.168.3.2:8788 on 2026-10-11. Evidence: task card .task/feature-login-clear-stale-key.md carries the tool-written precheck / task-sync / make test receipts (post-sync make test exit=0, receipt 95d71cd8); CI (make test + make build) on this PR head is the authoritative gate. Impact: dev-instance UIs reached by LAN IP or hostname log in cleanly with username+password; API-key flow unchanged. Frontend component pinned at 09310cb753192adea6f74dc73f3b9bf3a3ff64d0. Refs: Agent-System-Frontend PR #55.
weichen added 6 commits 2026-10-11 13:59:07 +00:00
Record the task card for feature-login-clear-stale-key 333e3030bc 
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-login-clear-stale-key.md; R0=259270b4e339132219490b95b42d12386f9abe1e.

Impact: task metadata only; the feature workspace starts at 259270b4e3.

Refs: .task/feature-login-clear-stale-key.md
Pin frontend with the password-session credential fix e49ce22946 
Why: password logins hand the browser an HttpOnly session cookie, but a stale Bearer key left in localStorage shadows it server-side (Bearer is checked first), so every request after login returns 401 and refreshes bounce back to the login page.
Evidence: frontend commit 09310cb (vitest 19 files / 88 tests green); combined make test in this worktree recorded via evidence into the task card.
Impact: dev-instance UIs reachable by LAN IP or hostname log in cleanly with username+password; API-key flow unchanged.
Refs: .task/feature-login-clear-stale-key.md
Record combined make test evidence in the task card db0a772ab2 
Why: the delivery gate requires precheck/task-sync/test outputs to be tool-written into the card before review and merge.
Evidence: evidence receipt 81973311 (make test, exit=0) appended to .task/feature-login-clear-stale-key.md; includes the earlier failed drift-check run exit=2 for honesty.
Impact: card only; no code changes.
Refs: feature/login-clear-stale-key
Merge authoritative main into the task branch ce93f5b28c 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=72e3d0c58dbd0268ecc59ec51e52f646fb6a0008.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint 2d419022a1 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=72e3d0c58dbd0268ecc59ec51e52f646fb6a0008; candidate=ce93f5b28c412d27aa3cb82a1f81b3a8a4977f03.

Impact: task metadata only.

Refs: .task/feature-login-clear-stale-key.md
Record post-sync make test evidence in the task card
ci / test-pg (pull_request) Successful in 1m44s
Details
ci / test (pull_request) Successful in 3m51s
Details
dc11073aa5 
Why: task-sync flagged that pre-merge receipts predate non-card changes; the delivery gate requires fresh evidence on the synced head.
Evidence: receipt 95d71cd8 (make test, exit=0) on the synced tree, appended via make evidence.
Impact: card only.
Refs: feature/login-clear-stale-key
weichen added 5 commits 2026-10-11 14:08:27 +00:00
Re-pin frontend to the post-merge task branch head 902c15d1e5 
Why: the frontend task branch merged latest main (PR #54 landed in parallel) to satisfy block_on_outdated_branch; the Dev pin must reference the exact combination that is tested.
Evidence: frontend vitest 20 files / 94 tests green at 482ba88; combined make test rerun via evidence after this pin.
Impact: gitlink only.
Refs: Agent-System-Frontend PR #55.
Record the re-pinned combined make test evidence eb5f395b1e 
Why: the gitlink moved to the post-merge frontend head, so the delivery gate needs fresh tool-written evidence on that combination.
Evidence: receipt 007543ab (make test, exit=0) with modules/frontend at 482ba88.
Impact: card only.
Refs: feature/login-clear-stale-key
Merge authoritative main into the task branch f060f9404c 
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=f9c6ccc263c00d95919c021cb2fe31cf2f0936d8.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
Record the sync checkpoint 5c5c3b8ebd 
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=f9c6ccc263c00d95919c021cb2fe31cf2f0936d8; candidate=f060f9404cc16f018e40e9507bd9947c900f21e0.

Impact: task metadata only.

Refs: .task/feature-login-clear-stale-key.md
Record post-sync verification on the final head
ci / test-pg (pull_request) Successful in 1m30s
Details
ci / test (pull_request) Successful in 2m59s
Details
5d2693405a 
Why: task-sync merged newer main (f9c6ccc2) after the last receipt; the gate requires evidence on the exact head proposed for merge.
Evidence: latest make test receipt exit=0 appended by make evidence.
Impact: card only.
Refs: feature/login-clear-stale-key
weichen merged commit 27fa4fda7a into main 2026-10-11 14:11:31 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
weichen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: weichen/Agent-System-Dev#362