Address PR feedback: lock ordering, translate_ec comment, type-erasure assert

1. SetOptions: move HasBinaryMessageFragmentHandlers() before m_stateMutex
   acquisition to eliminate latent m_stateMutex -> m_eventCallbacksMutex
   nesting hazard.

2. wintls_socket translate_ec: add comment explaining that wintls::error_code
   resolves to the lib::error_code identity overload (same type via
   WINTLS_USE_STANDALONE_ASIO), so TLS errors propagate correctly.

3. websocketpp_client_base::impl<T>(): add debug-only type tag (typeid hash)
   set at construction and asserted on access, catching config-type dispatch
   mismatches at zero release cost.

Author: jhugard

Source/WebSocket/Websocketpp/websocketpp_websocket.cpp

@@ -1790,17 +1790,27 @@ struct wspp_websocket_impl : public hc_websocket_impl, public std::enable_shared
         template <typename WebsocketConfig>
         websocketpp::client<WebsocketConfig>& impl()
         {
+            ASSERT(m_typeTag == typeid(websocketpp::client<WebsocketConfig>).hash_code()
+                && "Config type mismatch in wspp client type erasure");
             return *reinterpret_cast<websocketpp::client<WebsocketConfig>*>(client_storage());
         }
 
         virtual void* client_storage() noexcept = 0;
         virtual bool is_tls_client() const = 0;
         virtual bool uses_compression() const = 0;
+
+    protected:
+        size_t m_typeTag{ 0 };
     };
 
     template<typename WebsocketConfig, bool IsTlsClient, bool UsesCompression>
     struct websocketpp_client_impl : websocketpp_client_base
     {
+        websocketpp_client_impl()
+        {
+            m_typeTag = typeid(websocketpp::client<WebsocketConfig>).hash_code();
+        }
+
         void* client_storage() noexcept override
         {
             return &m_client;

Source/WebSocket/Websocketpp/wintls_socket.hpp

@@ -215,6 +215,12 @@ class connection : public lib::enable_shared_from_this<connection> {
     }
 
 public:
+    // Overload resolution note: wintls::error_code is a typedef for std::error_code
+    // (via WINTLS_USE_STANDALONE_ASIO), which is the same type as lib::error_code.
+    // TLS handshake failures therefore resolve to the identity overload below, preserving
+    // the original SECURITY_STATUS value in system_category through to HResultFromConnectError.
+    // The generic template only fires for non-std::error_code types (e.g. boost error codes
+    // in non-standalone configurations).
     template <typename ErrorCodeType>
     static lib::error_code translate_ec(ErrorCodeType)
     {

Source/WebSocket/hcwebsocket.cpp

@@ -550,6 +550,11 @@ HRESULT WebSocket::SetOptions(HCWebSocketOptions options) noexcept
         E_INVALIDARG,
         HasNoContextTakeoverWebSocketOptions(options) && !RequestsWebSocketCompression(options));
 
+    // Check fragment handlers before acquiring m_stateMutex to avoid nesting
+    // m_stateMutex -> m_eventCallbacksMutex (which HasBinaryMessageFragmentHandlers acquires).
+    // Safe because SetOptions is only valid in State::Initial, before callbacks can fire.
+    bool const hasBinaryFragmentHandlers = HasBinaryMessageFragmentHandlers();
+
     std::lock_guard<DefaultUnnamedMutex> lock{ m_stateMutex };
     RETURN_HR_IF(E_HC_CONNECT_ALREADY_CALLED, m_state != State::Initial);
     if (RequestsLegacyWebSocketSemantics(options))
@@ -559,7 +564,7 @@ HRESULT WebSocket::SetOptions(HCWebSocketOptions options) noexcept
         return S_OK;
     }
 
-    RETURN_HR_IF(E_NOT_SUPPORTED, HasBinaryMessageFragmentHandlers());
+    RETURN_HR_IF(E_NOT_SUPPORTED, hasBinaryFragmentHandlers);
 
     HRESULT hr = m_provider.OptionsResult(options);
     RETURN_IF_FAILED(hr);