Let direct ephemeral setup-code replay reach the existing node-host saved-token recovery owner after bootstrap expiry. Keep manual enrollment, join URLs, endpoint matching, and token revocation checks intact.
Replace the regression fixture polling deadline with connection publication and early-failure propagation. Six reconnect and refusal cases pass in CI.
Co-authored-by: jalehman [email protected]