fix(client): ignore stale driver lists

[HandSonic]

Related issue

N/A - no matching issue was found.

Summary

Driver-list requests were not owned by the active connection render. Older responses could overwrite a newer database type and invoke onChange with the wrong default driver. Delayed download/save/delete callbacks could also start a stale refresh after a context switch, including A-B-A and same-type datasource changes. This change scopes requests to a unique activation token and validates it before starting and committing work.

Affected surfaces

• Frontend / Web
• Backend / API / Storage
• Database plugin / Driver
• JCEF / Desktop packaging
• CI / Build / Release
• Documentation only

Verification

• Commands and results:
  • Eight ownership/lifecycle tests passed for reverse completion, stale errors, invalidation, delayed mutation refresh, unmount, A-B-A, and same-type custom-driver changes.
  • Existing driver upload contracts: passed.
  • Targeted ESLint: passed.
  • Full Community prebuild, Umi/Webpack build, and production bundle verifier: passed.
  • Fork code and CodeQL checks: passed.
  • Three-pass adversarial review and repair-batch merge-tree: passed.
• Manual verification: N/A - deferred request/mutation promises reproduce every ordering without a browser.
• UI evidence: N/A

Risk and compatibility

• Public API or stored data: No API or saved driver format changes.
• Database or driver compatibility: Driver list data is unchanged; only stale callbacks are suppressed.
• Network, privacy, or security: Prevents a driver from a previous datasource context being written into the current connection form.
• Community / Local / Pro boundary: Shared Community connection editor.
• Backward compatibility: Current-scope loads and save/download/delete refreshes keep existing behavior.

Reviewer map

• Start here: DriverListRequestOwner, then the scope lifecycle in Driver/index.tsx.
• Failure condition: an old render starts/commits a refresh, invokes stale onChange, or survives unmount/ABA.
• Rollback or disable path: Revert commit 464dda9bc802d04337320f85c498ce36aaa65248; no migration is required.

Contributor declaration

• I linked the Issue that defines this change.
• I tested the affected behavior and reported the actual results above.
• I did not include credentials, private data, or generated build output.
• I disclosed substantial AI assistance below, or this PR contains no substantial AI-generated code.

AI assistance: OpenAI Codex assisted with diagnosis, implementation, automated tests, verification, and adversarial review.

Latest-main revalidation (2026-09-04)

• Rebased onto upstream 144a04e; current head 464dda9.
• Driver upload/list ownership tests and targeted ESLint passed.
• Included in the green combined Community production build and bundle verification.