feat: pause Today during mobile Security Center (Closes #1086)

tests/e2e/test_mobile_today_handoff_release.py

@@ -446,6 +446,37 @@ def test_release_artifact_pauses_today_across_mobile_work_and_insights_detours(t
               const timer = JSON.parse(localStorage.getItem(key));
               return timer.entries[timer.active_identity].running === true && !timer.detour_interruption;
             }""")
+
+            page.locator("#close-issue-sheet").click()
+            page.locator("#app-menu-toggle").click()
+            page.locator("#active-devices").click()
+            security_pause = page.locator("#security-center-today-detour")
+            expect(security_pause).to_be_visible()
+            expect(security_pause).to_contain_text("Today paused · Ship mobile capture")
+            bounds = page.locator("#return-from-security-center").bounding_box()
+            assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert page.evaluate("""() => {
+              const key = Object.keys(localStorage).find(value => value.startsWith('stackchain.today-timer.v1.'));
+              const timer = JSON.parse(localStorage.getItem(key));
+              return timer.entries[timer.active_identity].running === false && timer.detour_interruption?.reason === 'security-center';
+            }""")
+            page.locator("#security-section-devices").click()
+            page.go_back()
+            expect(security_pause).to_be_visible()
+            page.go_back()
+            expect(page.locator("#active-devices-sheet")).to_be_hidden()
+            assert page.evaluate("""() => {
+              const key = Object.keys(localStorage).find(value => value.startsWith('stackchain.today-timer.v1.'));
+              const timer = JSON.parse(localStorage.getItem(key));
+              return timer.entries[timer.active_identity].running === true && !timer.detour_interruption;
+            }""")
+
+            page.locator("#active-devices").click()
+            expect(security_pause).to_be_visible()
+            page.locator("#return-from-security-center").click()
+            expect(page.locator("#active-devices-sheet")).to_be_hidden()
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
             browser.close()
     finally:
         fake.shutdown()