Skip to content

fix(queue): bind cache operations to request and credential lifetimes - #3349

Open
Chris0Jeky wants to merge 13 commits into
mainfrom
audit/3348-queue-operation-ownership
Open

Chris0Jeky wants to merge 13 commits into
mainfrom
audit/3348-queue-operation-ownership

Conversation

@Chris0Jeky

@Chris0Jeky Chris0Jeky commented Sep 21, 2026

Copy link
Copy Markdown
Owner

Closes #3348. Related residual: #3352.

Summary

Binds queue request-list, stats, mutations, loading, errors and session settlement to explicit owners:

  • request-list queries share one latest owner; stats use an independent read lane;
  • confirmed submit/cancel/non-empty processNext advances a mutation generation and invalidates older snapshots;
  • loading derives from active operation tokens;
  • error receipts are scoped to request-list, stats or mutation work, so unrelated operations cannot erase current failures;
  • identity/auth/demo replacement clears queue data and retires all work;
  • same-user token rotation preserves settled request/stat caches and suppresses old-token settlement;
  • active empty request/stat reads restart under the new token, retaining the exact user/status query;
  • submit, cancel and process mutations are never replayed.

Same-target mutation serialization and backend/cross-device concurrency remain outside this parent.

Test-first evidence

Initial test-only head 1a21444f8a29c160bce124e3c3372142854f67bd ran canonical Ubuntu/Windows frontend qualification and produced exactly ten intended ownership failures. Cross-lane error review-regression head 5c39c1c92c8e5792a8461228fd33a561683559e7 passed lint, typecheck, build and PWA validation before JUnit recorded 7,161 tests, exactly 1 failure, 0 errors: a stats refresh erased the current request-list failure.

Issue #3352 added test-only head 9d67a15d8e8a41dd253328344afcd435b339c3e5, covering token rotation while a Failed request query and stats read are still empty. A dependency-free actual-module runner changed from one call per lane with loading false to two calls per lane, exact Failed filter replay, old settlement suppression and fresh results installed.

Supplemental execution does not replace hosted qualification.

Current head and remaining gates

Exact final head: 89da656b592e4e2c1c8f6065c36e55647b8ae168

Keep draft until this exact head passes Smart CI, Extended and the complete Required CI matrix on Ubuntu and Windows, followed by fresh-context review.

No backend, route, DTO, schema, migration, dependency, workflow or control-plane change. Green CI is qualification evidence, not merge authorization.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 21, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-22T00:18:49.418793Z ff2bdf8 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Chris0Jeky
Chris0Jeky force-pushed the audit/3348-queue-operation-ownership branch from 89da656 to 4db70b5 Compare September 21, 2026 19:02

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 89da656b59

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread frontend/taskdeck-web/src/store/queueStore.ts Outdated
Comment thread frontend/taskdeck-web/src/store/queueStore.ts Outdated
@Chris0Jeky
Chris0Jeky force-pushed the audit/3348-queue-operation-ownership branch from 4db70b5 to 43dfb6f Compare September 21, 2026 20:16
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

Please review exact current head 43dfb6f against base fb830ed. This is the one current-head review request after the main-base requalification. Focus on the PR's changed ownership and stale-settlement behavior, and report only merge-blocking correctness or security defects.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 43dfb6f61c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review Please review the exact current head 4aa8a83, including active-filter retry and joined replacement-read behavior after token rotation, plus the failure-path regression test. Treat prior review threads as triaged; report only merge-blocking correctness or security defects at this exact head.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: 4aa8a83cae

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Chris0Jeky
Chris0Jeky force-pushed the audit/3348-queue-operation-ownership branch from 4aa8a83 to 6a0b600 Compare September 21, 2026 22:06
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6a0b60003d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread frontend/taskdeck-web/src/store/queueStore.ts Outdated
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4527e2c573

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread frontend/taskdeck-web/src/store/queueStore.ts
Comment thread frontend/taskdeck-web/src/store/queueStore.ts
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: dcbbc38f21

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread frontend/taskdeck-web/src/store/queueStore.ts Outdated
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 67280f2fc6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread frontend/taskdeck-web/src/store/queueStore.ts
@Chris0Jeky
Chris0Jeky force-pushed the audit/3348-queue-operation-ownership branch from 67280f2 to 2bf7f83 Compare September 21, 2026 23:24
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: 2bf7f83487

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Chris0Jeky
Chris0Jeky force-pushed the audit/3348-queue-operation-ownership branch from 2bf7f83 to ff2bdf8 Compare September 22, 2026 00:06
@Chris0Jeky

Copy link
Copy Markdown
Owner Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: ff2bdf89ea

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Pending

Development

Successfully merging this pull request may close these issues.

Queue cache reads and mutations lack operation and credential ownership

1 participant