4grayandClaude Fable 5 d2f28334de fix(stalker): bind the persisted session to its endpoint and carry it on Electron ...

Three review findings, all on the persisted-session work:

- `createSqliteFallbackPlaylist()` rebuilds the playlist field by field and did
  not copy `stalkerSessionIdentity`, `stalkerWatchdogTimeout` or
  `stalkerTimeslot`. Every cold Electron session therefore lost the cadence and
  could not run the identity-mismatch check at all — defeating the guard on the
  desktop app specifically.
- A persisted session was bound to the device identity only, so a playlist
  repointed at a different host kept its token, and `ensureToken()`
  re-presented it in a handshake — disclosing the previous portal's bearer
  token to an unrelated server. Sessions are now keyed by portal origin AND
  identity (`stalkerSessionFingerprint`); the in-run token cache keeps its
  identity-only key.
- The repair probe fingerprint ignored credentials, so a probe that failed on a
  wrong login stayed declined for the session even after the login was
  corrected — now that credentials are part of the discovery outcome, they
  belong in the fingerprint.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-03 18:41:55 +02:00

..

import/feature

fix(stalker): bind the persisted session to its endpoint and carry it on Electron

2026-08-03 18:41:55 +02:00

m3u/feature-player

fix(build): include shared UI stylesheets in Nx cache inputs (#1360)

2026-08-02 23:18:37 +02:00

shared

feat(stalker): add account info dialog for Stalker portals (#1330)

2026-08-02 09:58:03 +02:00