deploy(S4): Blender headless pipeline + WebAR client + backend fixes

backend/ws/agent_ws.py

@@ -274,8 +274,17 @@ class ConnectionManager:
                         "payload": {"ok": True,
                                     "queued": len(self.pending_commands)},
                     })
-                    # The PC is back: run whatever was sent while it was away.
-                    replayed = await self.flush_pending_commands(websocket)
+                    # Release the queue ONLY if this desktop is already known to
+                    # be unlocked. A PC that reconnects locked (the normal state
+                    # after a reboot) would refuse every replayed command and
+                    # destroy the backlog, so those are held until it reports
+                    # unlocked — see the relay:status branch.
+                    if self.last_pc_status.get("unlocked"):
+                        replayed = await self.flush_pending_commands(websocket)
+                    elif self.pending_commands:
+                        logging.info(
+                            "PC online but not known-unlocked; holding %d command(s)",
+                            len(self.pending_commands))
                 except Exception as exc:
                     logging.warning("PC registration follow-up failed: %s", exc)
                 if replayed:
@@ -296,8 +305,25 @@ class ConnectionManager:
         if data.get("event") == "relay:status":
             payload = data.get("payload")
             if isinstance(payload, dict):
+                was_unlocked = bool(self.last_pc_status.get("unlocked"))
                 self.last_pc_status = payload
                 self.last_pc_status_at = time.time()
+                # FLUSH ON UNLOCK, not merely on connect.
+                #
+                # The queue used to drain the instant a PC registered — which is
+                # BEFORE anyone knows whether that PC will accept commands. After
+                # a reboot the desktop reconnects locked, so every queued command
+                # was replayed into a locked session, refused, and lost. The user
+                # had been promised those would run when the PC came back, and
+                # instead a restart silently destroyed them.
+                #
+                # Waiting for the desktop's own "unlocked" report means the queue
+                # survives the reboot and runs the moment the session is opened.
+                if payload.get("unlocked") and not was_unlocked and self.pending_commands:
+                    if websocket is not None:
+                        logging.info("PC reported unlocked — releasing %d held command(s)",
+                                     len(self.pending_commands))
+                        await self.flush_pending_commands(websocket)
             return
 
         if data.get("event") == "relay:result":

dist/app-release.apk

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:5706a878f23fa24ffa79b70dd7700521315c9bba6ba784df823fbed781579d07
+oid sha256:4901f695b82214a34b316e1c13503a39c50af8b798d4060306757995f3c29f89
 size 116554783