[bifrost0x]

Follow-up to #336.

Changes

Connection dialog

• "Manage SOCKS5 proxies" opened the proxy view behind the still open connection dialog, so the click appeared to do nothing and focus was lost. Opening any connection resource now leaves the dialog first; this also covers the "Review SOCKS5 proxy" action in SSH errors.
• The button label is a short action instead of a hint sentence (all locales).
• Reconnect and history set routes in code without updating the route controls. Applying a jump route now clears and locks the SOCKS selector, and vice versa.
• A rejected proxy save showed the server error twice.

Persistent sessions

• Reattaching a persistent tmux session requires its original proxy. Deleting that proxy left the session permanently unresumable. Deletion is now refused while a persistent session of the same user references the proxy; the error names up to 20 sessions.
• The reattach mismatch message now says what to do. The route rule itself is unchanged: a session is only resumed over its original route.

Server

• list_socks_proxies no longer consumes the connection mutation budget (same as list_jump_hosts). A throttled list made every routed host show "SOCKS5 proxy missing".
• A proxy endpoint blocked by network policy is reported as SOCKS5 proxy: …, distinguishable from a blocked target.
• SOCKS failure replies are evaluated before reading the bound address. Proxies that close after a short failure reply now report the actual reason instead of a protocol error or timeout. The socket is closed on every failure, as before.

Docs

• Downgrading to a release without SOCKS support connects routed hosts directly. Saved passwords stay unusable through their route binding, but SSH keys and passwords entered at connect time would bypass the proxy. The storage docs now describe this and how to downgrade safely.
• Proxy deletion rules include persistent sessions.

Security notes

No change to routing, DNS policy, credential binding or fail-closed behaviour. The deletion check only adds a refusal. A session created concurrently with a deletion ends in the same fail-closed state as before.

Tests

• New Python tests for the deletion guard (persistent vs. ordinary vs. foreign sessions), the unthrottled list, proxy vs. target policy errors and truncated failure replies.
• New JS tests for the single save error and session usage messages.
• New Playwright tests for the dialog handoff and programmatic route switching.
• All new tests fail against main.
• Locally: full pytest suite, JS unit tests, ESLint, and the 35 Playwright specs that touch the connection dialog, resource views and routes (349 tests).

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-14T14:40:53.746918Z	0052472	PR opened
🔒 Security Review	✅ Completed 2026-11-14T14:43:31.469658Z	0052472	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.