Saved Task List — Session Resilience Epic

Snapshot taken 2026-06-16, before switching to the dashboard disable-login feature. This is the in-flight epic from docs/plans/2026-06-15-session-resilience.md.

How to resume

/superpowers-extended-cc:executing-plans docs/plans/2026-06-15-session-resilience.md

The authoritative resume state lives in docs/plans/2026-06-15-session-resilience.md.tasks.json (tasks 1–12 completed, 13–28 pending). This file is just a human-readable mirror.

Status

12 of 28 tasks complete (Phases 1–2 + reconnect core of Phase 3). All completed work is merged to main (commit c446bef, pushed to origin).

Completed — Phase 1 (Foundation)

✅ Task 1 (#108): Add OwnerKeyId to the session
✅ Task 2 (#109): SessionEventDistributor skeleton
✅ Task 3 (#110): Bounded replay ring buffer
✅ Task 4 (#111): Rewire AttachEventSubscriber + EventStreamService onto distributor
✅ Task 5 (#112): Per-subscriber backpressure isolation
✅ Task 6 (#113): Dashboard broadcaster becomes a distributor subscriber

Completed — Phase 2 (Multi-subscriber fan-out)

✅ Task 7 (#114): Remove validator block + add subscriber cap option
✅ Task 8 (#115): Subscriber-lease collection + cap enforcement
✅ Task 9 (#116): Multi-subscriber end-to-end test (FakeWorkerHarness)

Completed — Phase 3 (Reconnect core)

✅ Task 10 (#117): Proto — ReplayGap signal
✅ Task 11 (#118): Detach-grace session retention
✅ Task 12 (#119): Replay-on-reconnect + emit ReplayGap

Pending — Phase 3 finish

⏳ Task 13 (#120): Owner re-validation on reconnect — blockedBy 12, 1
⏳ Task 14 (#121): Client ReplayGap handling — all 5 clients — blockedBy 10
- Carry the per-language presence-check idiom note for optional message fields.
⏳ Task 15 (#122): Reconnect integration test (fake worker) — blockedBy 12

Pending — Phase 4 (Per-session dashboard ACL)

⏳ Task 16 (#123): gRPC session-owner gate + all-sessions admin scope — blockedBy 9, 1
⏳ Task 17 (#124): Session Tag + dashboard group-to-tag config — blockedBy 9
⏳ Task 18 (#125): EventsHub per-session ACL + hub-token tag claim — blockedBy 17
- Open decision: Viewer default (admin-sees-all vs strict per-session).
⏳ Task 19 (#126): ACL tests incl. live LDAP users — blockedBy 18

Pending — Phase 5 (Orphan-worker reattach)

⏳ Task 20 (#127): Stable gateway-instance id + stable pipe naming — blockedBy 19
⏳ Task 21 (#128): Adoption manifest store (SQLite) — blockedBy 20
⏳ Task 22 (#129): Proto — worker adopt/reconnect frame — blockedBy 21
⏳ Task 23 (#130): Worker phone-home reconnect loop + self-terminate — blockedBy 22 (net48/x86, windev)
⏳ Task 24 (#131): Gateway adoption — re-open pipes, nonce-validate, reject impostors — blockedBy 23
⏳ Task 25 (#132): Resync adopted worker + ReplayGap to subscribers — blockedBy 24, 12
⏳ Task 26 (#133): EnableOrphanReattach flag (default off) + terminator fallback — blockedBy 24
⏳ Task 27 (#134): Gateway-restart reattach round-trip (WINDEV + live worker) — blockedBy 25, 26
⏳ Task 28 (#135): Documented-rule reversals + stillpending refresh — blockedBy 27

Notes

Phase 5 reverses the documented "Gateway restart does not reattach orphan workers" rule (CLAUDE.md) — this was explicitly approved during design.
Two deferred follow-ups noted earlier: dashboard visibility of DetachedAtUtc on DashboardSessionSummary.
Worker (net48/x86) tasks build/test on windev; everything else builds on macOS.

3.5 KiB Raw Blame History Unescape Escape