Support completing first-run setup after session restoration

2026-10-25 17:58:21 +01:00
parent 0c60409874
commit ad3648ca6c
2 changed files with 7 additions and 0 deletions
@@ -20,6 +20,11 @@ failures do not invalidate a successfully verified session.
 Restored sessions retain the server's mandatory credential-replacement state.
 An omitted replacement flag is treated conservatively as requiring setup rather
 than silently allowing the dashboard to consider setup complete.
+Dashboard loading and realtime connection wait until credential setup is complete;
+the server independently enforces the same operational-access restriction.
+The setup form includes a current-password field because restored keyring
+sessions intentionally do not restore the user's password. This lets setup
+continue after a client restart without storing the password on disk.

 Run `node --test src/session-recovery.test.js` for response classification and
 retry-schedule coverage. This is not a substitute for native AppImage acceptance.