@zeniai/client-epic-state 5.0.14 → 5.0.15

package/lib/entity/tenant/SessionManager.js

@@ -22,10 +22,13 @@ const ACTIVITY_EVENTS = [
     'touchstart',
     'click',
 ];
-/** Debounce interval for activity events (ms). Also reused as the cadence
- *  for idle checks and the countdown ticker — all are 1-second taps. */
+/** Debounce interval for activity events. Also reused as the cadence for
+ *  idle checks and the countdown ticker — all are 1-second taps. */
 const ACTIVITY_DEBOUNCE_MS = 1000;
-const MS_PER_MINUTE = 60 * ACTIVITY_DEBOUNCE_MS;
+/** Pure unit-conversion constants. Kept separate from ACTIVITY_DEBOUNCE_MS
+ *  so changing the debounce cadence cannot silently change time math. */
+const MS_PER_SECOND = 1000;
+const MS_PER_MINUTE = 60 * MS_PER_SECOND;
 /** Name of the BroadcastChannel used for cross-tab activity sync. */
 const BROADCAST_CHANNEL_NAME = 'zeni-session-activity';
 class SessionManager {
@@ -160,9 +163,21 @@ class SessionManager {
             return;
         }
         if (document.visibilityState === 'visible') {
+            // Sleep/wake case: before resetting activity for the "user switched
+            // tabs" path, check whether the full grace period has already elapsed.
+            // If so, log out immediately rather than handing back another window.
+            const idleMs = Date.now() - this.lastActivityTime;
+            const fullGracePeriodMs = this.config.idleTimeoutMinutes * MS_PER_MINUTE +
+                this.config.warningDurationSeconds * MS_PER_SECOND;
+            if (idleMs >= fullGracePeriodMs) {
+                this.secondsRemaining = 0;
+                this.stop();
+                this.callbacks?.onAutoLogout();
+                return;
+            }
             if (this.warningActive) {
                 // Tab was hidden while countdown was running — check if it already expired.
-                const elapsed = Math.floor((Date.now() - this.warningStartTime) / ACTIVITY_DEBOUNCE_MS);
+                const elapsed = Math.floor((Date.now() - this.warningStartTime) / MS_PER_SECOND);
                 if (elapsed >= this.config.warningDurationSeconds) {
                     this.secondsRemaining = 0;
                     this.stop();
@@ -186,6 +201,18 @@ class SessionManager {
         }
         const idleMs = Date.now() - this.lastActivityTime;
         const idleTimeoutMs = this.config.idleTimeoutMinutes * MS_PER_MINUTE;
+        const warningDurationMs = this.config.warningDurationSeconds * MS_PER_SECOND;
+        const fullGracePeriodMs = idleTimeoutMs + warningDurationMs;
+        // System-sleep / long-idle case: if the full grace period (idle timeout +
+        // warning countdown) has already elapsed, skip the popup and log out
+        // immediately. This catches the wake-from-sleep case where JS was paused
+        // long enough that the user has effectively missed both windows.
+        if (idleMs >= fullGracePeriodMs) {
+            this.secondsRemaining = 0;
+            this.stop();
+            this.callbacks?.onAutoLogout();
+            return;
+        }
         if (idleMs >= idleTimeoutMs) {
             this.startWarning();
         }
@@ -201,7 +228,7 @@ class SessionManager {
         // Browsers throttle setInterval when the tab is hidden, but each tick
         // recomputes from the real start time so no seconds are "lost".
         this.countdownInterval = setInterval(() => {
-            const elapsed = Math.floor((Date.now() - this.warningStartTime) / ACTIVITY_DEBOUNCE_MS);
+            const elapsed = Math.floor((Date.now() - this.warningStartTime) / MS_PER_SECOND);
             const remaining = this.config.warningDurationSeconds - elapsed;
             if (remaining <= 0) {
                 this.secondsRemaining = 0;

package/lib/entity/tenant/sessionTypes.d.ts

@@ -4,7 +4,7 @@
 export interface SessionConfig {
     /** Minutes between heartbeat API calls while user is active. Default: 10 */
     heartbeatIntervalMinutes: number;
-    /** Minutes of inactivity before the warning popup appears. Default: 30 */
+    /** Minutes of inactivity before the warning popup appears. Default: 60 */
     idleTimeoutMinutes: number;
     /** Whether auto-logout is enabled. Default: true */
     isAutoLogoutEnabled: boolean;

package/lib/entity/tenant/sessionTypes.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_SESSION_CONFIG = void 0;
 exports.DEFAULT_SESSION_CONFIG = {
     heartbeatIntervalMinutes: 10,
-    idleTimeoutMinutes: 30,
+    idleTimeoutMinutes: 60,
     isAutoLogoutEnabled: true,
     warningDurationSeconds: 60,
 };

package/lib/esm/entity/tenant/SessionManager.js

@@ -19,10 +19,13 @@ const ACTIVITY_EVENTS = [
     'touchstart',
     'click',
 ];
-/** Debounce interval for activity events (ms). Also reused as the cadence
- *  for idle checks and the countdown ticker — all are 1-second taps. */
+/** Debounce interval for activity events. Also reused as the cadence for
+ *  idle checks and the countdown ticker — all are 1-second taps. */
 const ACTIVITY_DEBOUNCE_MS = 1000;
-const MS_PER_MINUTE = 60 * ACTIVITY_DEBOUNCE_MS;
+/** Pure unit-conversion constants. Kept separate from ACTIVITY_DEBOUNCE_MS
+ *  so changing the debounce cadence cannot silently change time math. */
+const MS_PER_SECOND = 1000;
+const MS_PER_MINUTE = 60 * MS_PER_SECOND;
 /** Name of the BroadcastChannel used for cross-tab activity sync. */
 const BROADCAST_CHANNEL_NAME = 'zeni-session-activity';
 export class SessionManager {
@@ -157,9 +160,21 @@ export class SessionManager {
             return;
         }
         if (document.visibilityState === 'visible') {
+            // Sleep/wake case: before resetting activity for the "user switched
+            // tabs" path, check whether the full grace period has already elapsed.
+            // If so, log out immediately rather than handing back another window.
+            const idleMs = Date.now() - this.lastActivityTime;
+            const fullGracePeriodMs = this.config.idleTimeoutMinutes * MS_PER_MINUTE +
+                this.config.warningDurationSeconds * MS_PER_SECOND;
+            if (idleMs >= fullGracePeriodMs) {
+                this.secondsRemaining = 0;
+                this.stop();
+                this.callbacks?.onAutoLogout();
+                return;
+            }
             if (this.warningActive) {
                 // Tab was hidden while countdown was running — check if it already expired.
-                const elapsed = Math.floor((Date.now() - this.warningStartTime) / ACTIVITY_DEBOUNCE_MS);
+                const elapsed = Math.floor((Date.now() - this.warningStartTime) / MS_PER_SECOND);
                 if (elapsed >= this.config.warningDurationSeconds) {
                     this.secondsRemaining = 0;
                     this.stop();
@@ -183,6 +198,18 @@ export class SessionManager {
         }
         const idleMs = Date.now() - this.lastActivityTime;
         const idleTimeoutMs = this.config.idleTimeoutMinutes * MS_PER_MINUTE;
+        const warningDurationMs = this.config.warningDurationSeconds * MS_PER_SECOND;
+        const fullGracePeriodMs = idleTimeoutMs + warningDurationMs;
+        // System-sleep / long-idle case: if the full grace period (idle timeout +
+        // warning countdown) has already elapsed, skip the popup and log out
+        // immediately. This catches the wake-from-sleep case where JS was paused
+        // long enough that the user has effectively missed both windows.
+        if (idleMs >= fullGracePeriodMs) {
+            this.secondsRemaining = 0;
+            this.stop();
+            this.callbacks?.onAutoLogout();
+            return;
+        }
         if (idleMs >= idleTimeoutMs) {
             this.startWarning();
         }
@@ -198,7 +225,7 @@ export class SessionManager {
         // Browsers throttle setInterval when the tab is hidden, but each tick
         // recomputes from the real start time so no seconds are "lost".
         this.countdownInterval = setInterval(() => {
-            const elapsed = Math.floor((Date.now() - this.warningStartTime) / ACTIVITY_DEBOUNCE_MS);
+            const elapsed = Math.floor((Date.now() - this.warningStartTime) / MS_PER_SECOND);
             const remaining = this.config.warningDurationSeconds - elapsed;
             if (remaining <= 0) {
                 this.secondsRemaining = 0;

package/lib/esm/entity/tenant/sessionTypes.js

@@ -3,7 +3,7 @@
  */
 export const DEFAULT_SESSION_CONFIG = {
     heartbeatIntervalMinutes: 10,
-    idleTimeoutMinutes: 30,
+    idleTimeoutMinutes: 60,
     isAutoLogoutEnabled: true,
     warningDurationSeconds: 60,
 };