@hienlh/ppm 0.8.73 → 0.8.74

package/CHANGELOG.md

@@ -1,9 +1,10 @@
 # Changelog
 
-## [0.8.73] - 2026-04-01
+## [0.8.74] - 2026-04-01
 
 ### Fixed
-- **Cloud WS reconnect loop**: Stale WebSocket closure handlers from replaced connections no longer reset module state — prevents infinite reconnect cycle after upgrade/restart
+- **Cloud WS reconnect loop**: Stale WebSocket closure handlers from replaced connections no longer reset module state
+- **Cloud WS auth race**: Delay heartbeat/queue flush 500ms after auth to let server complete async DB auth — prevents 4002 rejection
 
 ## [0.8.72] - 2026-03-31
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hienlh/ppm",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Personal Project Manager — mobile-first web IDE with AI assistance",
   "author": "hienlh",
   "license": "MIT",

package/src/services/cloud-ws.service.ts

@@ -140,8 +140,10 @@ function doConnect(): void {
   sock.onopen = () => {
     if (ws !== sock) return; // stale — newer connection replaced us
     reconnecting = false;
+    reconnectAttempt = 0;
     log("INFO", "Cloud WS connected, sending auth");
 
+    // Send auth as first message — server must process this before any other msg
     sock.send(JSON.stringify({
       type: "auth",
       deviceId,
@@ -150,23 +152,28 @@ function doConnect(): void {
       version: 1,
     }));
 
-    connected = true;
-    reconnectAttempt = 0;
-
-    // Flush queued messages
-    while (outboundQueue.length > 0 && connected) {
-      const msg = outboundQueue.shift()!;
-      sock.send(JSON.stringify(msg));
-    }
+    // Delay setting connected + sending heartbeat to let server process auth.
+    // Server's authenticateDevice() is async (DB lookup), so messages sent
+    // immediately after auth arrive before authenticated=true → 4002 reject.
+    setTimeout(() => {
+      if (ws !== sock) return; // replaced during delay
+      connected = true;
+
+      // Flush queued messages
+      while (outboundQueue.length > 0 && connected) {
+        const msg = outboundQueue.shift()!;
+        sock.send(JSON.stringify(msg));
+      }
 
-    // Send immediate heartbeat
-    if (getHeartbeatData) send(getHeartbeatData());
+      // Send immediate heartbeat
+      if (getHeartbeatData) send(getHeartbeatData());
 
-    // Start periodic heartbeat
-    if (heartbeatTimer) clearInterval(heartbeatTimer);
-    heartbeatTimer = setInterval(() => {
-      if (getHeartbeatData && connected) send(getHeartbeatData());
-    }, HEARTBEAT_INTERVAL_MS);
+      // Start periodic heartbeat
+      if (heartbeatTimer) clearInterval(heartbeatTimer);
+      heartbeatTimer = setInterval(() => {
+        if (getHeartbeatData && connected) send(getHeartbeatData());
+      }, HEARTBEAT_INTERVAL_MS);
+    }, 500); // 500ms for DB auth round-trip
   };
 
   sock.onmessage = (event) => {