fix(ui): show ACL waits on the connection overlay and disconnect instead of failing

i18n/locales/en.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "Open session",
     "Connected": "Connected",
     "OpenAgain": "Open again",
-    "BackToForm": "Back to form"
+    "BackToForm": "Back to form",
+    "StartFaceVerify": "Start verification"
   },
   "ConnectionGuide": {
     "TokenCommand": "Connect command (token)",

i18n/locales/es.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "Abrir sesión",
     "Connected": "Conectado",
     "OpenAgain": "Abrir de nuevo",
-    "BackToForm": "Volver al formulario"
+    "BackToForm": "Volver al formulario",
+    "StartFaceVerify": "Iniciar verificación"
   },
   "ConnectionGuide": {
     "TokenCommand": "Comando de conexión (token)",

i18n/locales/ja.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "セッションを開く",
     "Connected": "接続完了",
     "OpenAgain": "もう一度開く",
-    "BackToForm": "フォームに戻る"
+    "BackToForm": "フォームに戻る",
+    "StartFaceVerify": "認証を開始"
   },
   "ConnectionGuide": {
     "TokenCommand": "接続コマンド（トークン）",

i18n/locales/ko.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "세션 열기",
     "Connected": "연결됨",
     "OpenAgain": "다시 열기",
-    "BackToForm": "연결 설정으로 돌아가기"
+    "BackToForm": "연결 설정으로 돌아가기",
+    "StartFaceVerify": "인증 시작"
   },
   "ConnectionGuide": {
     "TokenCommand": "연결 명령 (토큰)",

i18n/locales/pt_br.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "Abrir sessão",
     "Connected": "Conectado",
     "OpenAgain": "Abrir novamente",
-    "BackToForm": "Voltar ao formulário"
+    "BackToForm": "Voltar ao formulário",
+    "StartFaceVerify": "Iniciar verificação"
   },
   "ConnectionGuide": {
     "TokenCommand": "Comando de conexão (token)",

i18n/locales/ru.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "Открытие сеанса",
     "Connected": "Подключено",
     "OpenAgain": "Открыть снова",
-    "BackToForm": "Вернуться к форме"
+    "BackToForm": "Вернуться к форме",
+    "StartFaceVerify": "Начать проверку"
   },
   "ConnectionGuide": {
     "TokenCommand": "Команда подключения (токен)",

i18n/locales/vi.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "Mở phiên",
     "Connected": "Đã kết nối",
     "OpenAgain": "Mở lại",
-    "BackToForm": "Quay lại biểu mẫu"
+    "BackToForm": "Quay lại biểu mẫu",
+    "StartFaceVerify": "Bắt đầu xác minh"
   },
   "ConnectionGuide": {
     "TokenCommand": "Lệnh kết nối (token)",

i18n/locales/zh.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "建立会话连接",
     "Connected": "连接完成",
     "OpenAgain": "再次打开",
-    "BackToForm": "返回修改"
+    "BackToForm": "返回修改",
+    "StartFaceVerify": "开始核验"
   },
   "ConnectionGuide": {
     "TokenCommand": "连接命令（使用 Token）",

i18n/locales/zh_hant.json

@@ -1162,7 +1162,8 @@
     "OpenSession": "建立工作階段連線",
     "Connected": "連線完成",
     "OpenAgain": "再次開啟",
-    "BackToForm": "返回修改"
+    "BackToForm": "返回修改",
+    "StartFaceVerify": "開始核驗"
   },
   "ConnectionGuide": {
     "TokenCommand": "連線命令（使用 Token）",

ui/chen/composables/useChenSession.test.ts

@@ -6,7 +6,6 @@ function createSession() {
     authenticate: async () => "token",
     markConnected: vi.fn(),
     markDisconnected: vi.fn(),
-    markFailed: vi.fn(),
     onBeforeReady: async () => {},
     onAfterReady: async () => {},
     onDisconnected: vi.fn(),
@@ -49,7 +48,6 @@ describe("chen session dialogs", () => {
       authenticate: async () => "token",
       markConnected: vi.fn(),
       markDisconnected: vi.fn(),
-      markFailed: vi.fn(),
       onBeforeReady: async () => {},
       onAfterReady: async () => {},
       onDisconnected: vi.fn(),
@@ -66,7 +64,6 @@ describe("chen session dialogs", () => {
 
   it("marks a ready session as disconnected when its socket closes", async () => {
     const markDisconnected = vi.fn();
-    const markFailed = vi.fn();
     const socket = {
       readyState: 0,
       onopen: null as ((event: Event) => void) | null,
@@ -80,7 +77,6 @@ describe("chen session dialogs", () => {
       authenticate: async () => "token",
       markConnected: vi.fn(),
       markDisconnected,
-      markFailed,
       onBeforeReady: async () => {},
       onAfterReady: async () => {},
       onDisconnected: vi.fn(),
@@ -97,7 +93,37 @@ describe("chen session dialogs", () => {
     socket.onclose?.({ code: 1006, reason: "" } as CloseEvent);
 
     expect(markDisconnected).toHaveBeenCalled();
-    expect(markFailed).not.toHaveBeenCalled();
+  });
+
+  it("marks a session as disconnected when its socket closes before ready", async () => {
+    const markDisconnected = vi.fn();
+    const socket = {
+      readyState: 0,
+      onopen: null as ((event: Event) => void) | null,
+      onmessage: null as ((event: MessageEvent) => void) | null,
+      onerror: null,
+      onclose: null as ((event: CloseEvent) => void) | null,
+      send: vi.fn(),
+      close: vi.fn()
+    };
+    const session = useChenSession({
+      authenticate: async () => "token",
+      markConnected: vi.fn(),
+      markDisconnected,
+      onBeforeReady: async () => {},
+      onAfterReady: async () => {},
+      onDisconnected: vi.fn(),
+      showMessage: vi.fn(),
+      resolveUrl: () => "ws://chen.test/ws/session",
+      createSocket: () => socket as unknown as WebSocket
+    });
+
+    await session.bootstrapSession();
+    socket.readyState = 1;
+    socket.onopen?.({} as Event);
+    socket.onclose?.({ code: 1006, reason: "" } as CloseEvent);
+
+    expect(markDisconnected).toHaveBeenCalled();
   });
 
   it("forwards MCP frames received before the main session is ready", async () => {
@@ -115,7 +141,6 @@ describe("chen session dialogs", () => {
       authenticate: async () => "token",
       markConnected: vi.fn(),
       markDisconnected: vi.fn(),
-      markFailed: vi.fn(),
       onBeforeReady: async () => {},
       onAfterReady: async () => {},
       onDisconnected: vi.fn(),

ui/chen/composables/useChenSession.ts

@@ -10,7 +10,6 @@ interface UseChenSessionOptions {
   authenticate: () => Promise<string>;
   markConnected: () => void;
   markDisconnected: (reason: string) => void;
-  markFailed: (reason: string) => void;
   onBeforeReady: () => Promise<void>;
   onAfterReady: () => Promise<void>;
   onDisconnected: () => void;
@@ -71,7 +70,6 @@ export function useChenSession(options: UseChenSessionOptions) {
 
   function handleFatal(cause: unknown, reason = "") {
     if (fatalNotified) return;
-    const wasReady = ready.value;
     const message = normalizeError(cause);
     fatalNotified = true;
     bootstrapGeneration += 1;
@@ -80,8 +78,7 @@ export function useChenSession(options: UseChenSessionOptions) {
     loading.value = false;
     error.value = message;
     errorReason.value = reason;
-    if (wasReady) options.markDisconnected(message);
-    else options.markFailed(message);
+    options.markDisconnected(message);
 
     // A Chen session owns all of its consoles. Close dependent consoles first
     // so their backend close handlers can still resolve the active session.

ui/chen/workspaces/DatabaseSessionSurface.vue

@@ -101,7 +101,7 @@ const { t } = useI18n();
 const { openAi } = useAiPanel();
 const { addErrorToast } = useErrorToast();
 const userInfoStore = useUserInfoStore();
-const { markSessionConnected, markSessionDisconnected, markSessionFailed } = useWorkspaceTabs();
+const { markSessionConnected, markSessionDisconnected } = useWorkspaceTabs();
 const tabRef = toRef(props, "tab");
 const endpointUrl = computed(() => {
   const explicit = String(props.tab.payload?.endpointUrl || "").trim();
@@ -360,16 +360,6 @@ const session = useChenSession({
   translate: t,
   markConnected: () => markSessionConnected(props.tab.id),
   markDisconnected: (reason) => markSessionDisconnected(props.tab.id, reason),
-  markFailed: (reason) =>
-    markSessionFailed(
-      {
-        tabId: props.tab.id,
-        assetId: props.tab.assetId,
-        protocol: props.tab.protocol,
-        account: props.tab.account
-      },
-      reason
-    ),
   onBeforeReady: async () => {
     await auth.loadProfile();
     await tree.loadNodeChildren(null);