fix: address three application issues

- Increase desktop bootstrap token TTL from 5 to 10 minutes to prevent
  expiration before the renderer can exchange it during slow startups
- Remove dead buildReconnectTitle function (unused _status param after refactor)
  and inline the constant string at the call site
- Scope cached session token in tests to a build generation counter so
  stale tokens from prior server instances cannot leak across tests

Author: cursoragent

apps/server/src/auth/Layers/BootstrapCredentialService.ts

@@ -22,7 +22,7 @@ type ConsumeResult =
       readonly grant: BootstrapGrant;
     };
 
-const DEFAULT_ONE_TIME_TOKEN_TTL_MINUTES = Duration.minutes(5);
+const DEFAULT_ONE_TIME_TOKEN_TTL_MINUTES = Duration.minutes(10);
 
 export const makeBootstrapCredentialService = Effect.gen(function* () {
   const config = yield* ServerConfig;

apps/server/src/server.test.ts

@@ -108,7 +108,8 @@ const testEnvironmentDescriptor = {
     repositoryIdentity: true,
   },
 };
-let cachedDefaultSessionToken: string | null = null;
+let serverBuildGeneration = 0;
+let cachedDefaultSessionToken: { token: string; generation: number } | null = null;
 
 const makeDefaultOrchestrationReadModel = () => {
   const now = new Date().toISOString();
@@ -293,7 +294,7 @@ const buildAppUnderTest = (options?: {
   };
 }) =>
   Effect.gen(function* () {
-    cachedDefaultSessionToken = null;
+    serverBuildGeneration += 1;
     const fileSystem = yield* FileSystem.FileSystem;
     const tempBaseDir = yield* fileSystem.makeTempDirectoryScoped({ prefix: "t3-router-test-" });
     const baseDir = options?.config?.baseDir ?? tempBaseDir;
@@ -521,8 +522,13 @@ const bootstrapBrowserSession = (credential = defaultDesktopBootstrapToken) =>
 
 const getAuthenticatedSessionToken = (credential = defaultDesktopBootstrapToken) =>
   Effect.gen(function* () {
-    if (credential === defaultDesktopBootstrapToken && cachedDefaultSessionToken) {
-      return cachedDefaultSessionToken;
+    const currentGeneration = serverBuildGeneration;
+    if (
+      credential === defaultDesktopBootstrapToken &&
+      cachedDefaultSessionToken &&
+      cachedDefaultSessionToken.generation === currentGeneration
+    ) {
+      return cachedDefaultSessionToken.token;
     }
 
     const { response, body } = yield* bootstrapBrowserSession(credential);
@@ -533,7 +539,7 @@ const getAuthenticatedSessionToken = (credential = defaultDesktopBootstrapToken)
     }
 
     if (credential === defaultDesktopBootstrapToken) {
-      cachedDefaultSessionToken = body.sessionToken;
+      cachedDefaultSessionToken = { token: body.sessionToken, generation: currentGeneration };
     }
 
     return body.sessionToken;

apps/web/src/components/WebSocketConnectionSurface.tsx

@@ -54,10 +54,6 @@ function describeExhaustedToast(): string {
   return "Retries exhausted trying to reconnect";
 }
 
-function buildReconnectTitle(_status: WsConnectionStatus): string {
-  return "Disconnected from T3 Server";
-}
-
 function describeRecoveredToast(
   previousDisconnectedAt: string | null,
   connectedAt: string | null,
@@ -270,7 +266,7 @@ export function WebSocketConnectionCoordinator() {
                   ? `Reconnecting... ${formatReconnectAttemptLabel(status)}`
                   : `Reconnecting in ${formatRetryCountdown(status.nextRetryAt, nowMs)}... ${formatReconnectAttemptLabel(status)}`,
               timeout: 0,
-              title: buildReconnectTitle(status),
+              title: "Disconnected from T3 Server",
               type: "loading" as const,
               data: {
                 hideCopyButton: true,