fix(stalker): reject replaced late edit targets

apps/web/src/app/services/stalker-playlist-connection-editor.service.spec.ts

@@ -87,13 +87,28 @@ describe('AppStalkerPlaylistConnectionEditorService', () => {
     });
 
     it('resolves a simple portal and clears the previous full session', async () => {
+        const sourcePlaylist = {
+            ...draft,
+            portalUrl: 'https://old.example.com/server/load.php',
+        };
         discovery.discover.mockResolvedValue({
             status: 'resolved',
             portalUrl: 'https://portal.example.com/portal.php',
             isFullStalkerPortal: false,
         });
 
-        const result = await service.resolveConnection(draft);
+        const result = await service.resolveConnection(draft, sourcePlaylist);
+
+        expect(stalkerSession.beginEditDiscovery).toHaveBeenCalledWith(
+            expect.objectContaining({
+                portalUrl: draft.portalUrl,
+                stalkerSerialNumber: 'SERIAL',
+            }),
+            expect.objectContaining({
+                portalUrl: sourcePlaylist.portalUrl,
+                stalkerSerialNumber: sourcePlaylist.stalkerSerialNumber,
+            })
+        );
 
         expect(discovery.discover).toHaveBeenCalledWith(
             draft.portalUrl,

apps/web/src/app/services/stalker-playlist-connection-editor.service.ts

@@ -88,7 +88,8 @@ export class AppStalkerPlaylistConnectionEditorService implements StalkerPlaylis
     }
 
     async resolveConnection(
-        playlist: PlaylistMeta
+        playlist: PlaylistMeta,
+        sourcePlaylist: PlaylistMeta = playlist
     ): Promise<StalkerPlaylistConnectionResult> {
         const identity = normalizeStalkerPortalIdentity({
             serialNumber: playlist.stalkerSerialNumber,
@@ -106,7 +107,8 @@ export class AppStalkerPlaylistConnectionEditorService implements StalkerPlaylis
             stalkerSignature2: identity.signature2 ?? '',
         };
         const fence = await this.beginEditFence(
-            this.toRuntimePlaylist(normalizedPlaylist)
+            this.toRuntimePlaylist(normalizedPlaylist),
+            this.toRuntimePlaylist(sourcePlaylist)
         );
         let outcome: Awaited<
             ReturnType<StalkerPortalDiscoveryService['discover']>
@@ -207,7 +209,8 @@ export class AppStalkerPlaylistConnectionEditorService implements StalkerPlaylis
     }
 
     private async beginEditFence(
-        playlist: Playlist
+        playlist: Playlist,
+        sourcePlaylist: Playlist = playlist
     ): Promise<StalkerEditFence> {
         // Both fences are installed synchronously before either drain is
         // awaited. No new authentication or lazy repair can start while the
@@ -217,7 +220,10 @@ export class AppStalkerPlaylistConnectionEditorService implements StalkerPlaylis
         );
         let fence: StalkerEditFence | undefined;
         try {
-            fence = await this.stalkerSession.beginEditDiscovery(playlist);
+            fence = await this.stalkerSession.beginEditDiscovery(
+                playlist,
+                sourcePlaylist
+            );
             await repairDrain;
             this.editFences.set(playlist._id, fence);
             return fence;