fix: strict RDG 302/303 IP pairing keeps break button visible (0.3.6)

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/app/services/rdg_session_flap.py

@@ -47,6 +47,15 @@ def _internal_ips_compatible(end_event: Event, success_event: Event) -> bool:
     return end_ip == success_ip
 
 
+def _internal_ips_match_strict(end_event: Event, success_event: Event) -> bool:
+    """Для «сессия завершена» — только при совпадении целевого ПК (оба IP заданы)."""
+    end_ip = _event_internal_ip(end_event)
+    success_ip = _event_internal_ip(success_event)
+    if not end_ip or not success_ip:
+        return False
+    return end_ip == success_ip
+
+
 def _as_utc(dt: datetime) -> datetime:
     if dt.tzinfo is None:
         return dt.replace(tzinfo=timezone.utc)
@@ -195,7 +204,7 @@ def find_normal_rdg_end_after_success(db: Session, success_event: Event) -> Even
     for end in candidates:
         if not _users_match(end, success_event):
             continue
-        if not _internal_ips_compatible(end, success_event):
+        if not _internal_ips_match_strict(end, success_event):
             continue
         return end
     return None

backend/app/version.py

@@ -1,5 +1,5 @@
 """Единый источник версии SAC (API, health, логи, OpenAPI)."""
 
 APP_NAME = "Security Alert Center"
-APP_VERSION = "0.3.5"
+APP_VERSION = "0.3.6"
 APP_VERSION_LABEL = f"{APP_NAME} v.{APP_VERSION}"