Save & sync reliability — the customer release-gate hardening.
Product of a full code review of the save page, save/sync, and connectivity paths (extension + server). Fixes three functional bugs found during the review and hardens offline/connectivity behavior. Server-side companions ship in glassy-dash (CORP for /uploads/captures/*, honest 4xx error bodies).
Fixed
- Capture-rule pre-population now actually works — the
/api/capture-rules{ rules: [...] }envelope was never unwrapped (Array.isArray()on the wrapper object is never true), so Smart Save auto pre-fill had been silently inert since v2.2.0. New testedtoRulesArray()normalizer. - Transient server errors no longer log users out —
verifyToken()cleared the stored token/account/user on ANY non-2xx from/api/ext/me; a backend deploy blip logged every user out. Auth now clears only on a real401. - Offline-queue flush semantics — policy drops now report
ok:trueso the service worker actually removes them (previously retried 5× then lost); auth failures pause the flush and keep every item queued until re-login (previously lost after 5 attempts). - Popup saves now queue offline (parity with context-menu/keyboard saves) with a new amber Queued for Sync toast.
- Settings server-URL validation shows an inline error instead of hanging the Save button forever; toggles persist when the URL changes.
- Save-all-tabs stops at the 60 req/min rate limit instead of silently skipping the rest.
- Quota trim is a single read-modify-write preserving ids/attempts; response size cap measured in bytes; login/verify/ping have timeouts.
Changed
host_permissionsnow includeshttps://*.glassy.fyi/*(the apex-only pattern never matched the default base URLapp.glassy.fyi).
Install
- Chromium (Chrome, Edge, Brave, Arc, Opera):
glassy-companion-v2.17.1.zip— unzip →chrome://extensions→ Developer mode → Load unpacked. - Firefox 121+:
glassy-companion-v2.17.1-firefox.xpi—about:addons→ gear → Install Add-on From File.
Verification
- 184/184 extension tests pass (14 new regression tests). Pre-flight v2.17.1 passed. Chrome + Firefox builds clean; packaged manifests verified (version, balanced CSP, host_permissions).
- Full glassy-dash server suite green (1018 tests). Live probes confirm extension-origin CORS on
/api/ext/*+/api/keep/*, 401 enforcement, and CORP fixes.