Auto Logout Module

Architecture overview

• useAutoLogout drives timers, warnings, and logout.
• multi-tab-sync propagates activity/warning/logout messages.
• operation-queue blocks timeout during active operations.
• work-preservation stores and restores draft state.

Hook API

useAutoLogout({ enabled, timeoutMinutes, warningSeconds, onLogout })

Returns warning visibility, expiry timestamp, last activity, and actions (stayLoggedIn, logoutNow).

Integration guide

• Mount AutoLogoutProvider once in app shell.
• Surface AutoLogoutSettings under account security; the preferences page may also link to the same security controls.
• Track long-running operations with trackOperationStart/trackOperationComplete.
• Route changes auto-reset activity via pathname watcher.

Multi-tab protocol

Message types: activity, warning, stay-alive, logout. Transport: BroadcastChannel with localStorage fallback.

Work preservation contract

Persist safe UI draft data only. TTL is 24h. Corrupt payloads are purged.

Testing

• Hook unit tests in src/hooks/__tests__/useAutoLogout.test.ts.
• Work preservation tests in src/lib/session/__tests__/work-preservation.test.ts.
• Integration checks in tests/integration/auto-logout.test.ts.