feat: reply and continue from mobile search (Closes #805)

tests/test_command_palette.py

@@ -86,6 +86,23 @@ def test_mobile_search_exposes_accessible_repository_scope_and_forwards_it():
     assert '#cmd-search-repository' in css
 
 
+def test_mobile_search_preview_exposes_a_keyboard_safe_reply_and_continue_composer():
+    html = dashboard_bundle_text()
+    css = (FRONTEND / "dashboard.css").read_text()
+    preview = SEARCH_PREVIEW.read_text()
+
+    assert '<section class="search-preview-reply"' in html
+    assert '<textarea id="search-preview-reply"' in html
+    assert '<button id="send-search-preview-reply"' in html
+    assert '<button id="send-search-preview-reply-next"' in html
+    assert "searchPreviewReplyOptions(fetchReviewJson" in html
+    assert "root.searchPreviewReplyPath(item)" in preview
+    assert "api.saveReplyDraft" in preview
+    assert "api.reply({ advance:true })" in preview
+    assert ".search-preview-reply textarea" in css
+    assert "scroll-margin-bottom:calc(190px + env(safe-area-inset-bottom))" in css
+
+
 def test_remote_command_search_repository_change_aborts_and_restarts_scoped_search():
     script = f"""
 const filterCommands = require({json.dumps(str(COMMANDS))});
@@ -327,6 +344,132 @@ process.stdout.write(JSON.stringify({{
     }
 
 
+def test_search_preview_reply_retry_keeps_draft_and_operation_until_server_confirmation():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const item = {{repository:'stackchain/api', number:42, kind:'pull'}};
+const values = new Map();
+const storage = {{
+  getItem:key => values.has(key) ? values.get(key) : null,
+  setItem:(key,value) => values.set(key,value),
+  removeItem:key => values.delete(key),
+}};
+const calls = [];
+const states = [];
+let attempt = 0;
+const preview = createSearchPreview({{
+  fetchJson: candidate => Promise.resolve({{...candidate, title:'Review reply'}}),
+  mutate: () => Promise.resolve(),
+  postReply: (candidate, body, operationId) => {{
+    calls.push([candidate.number, body, operationId]);
+    attempt += 1;
+    return attempt === 1 ? Promise.reject(new Error('offline')) : Promise.resolve({{
+      id:91, author:'timmy', body, created_at:'2026-08-14T12:30:00Z'
+    }});
+  }},
+  storage,
+  createOperationId: () => 'reply-operation-42',
+  onState: state => states.push(state),
+}});
+await preview.open(item);
+preview.saveReplyDraft('Ready to merge.');
+try {{ await preview.reply(); }} catch (_) {{}}
+const draftAfterFailure = preview.replyDraft();
+await preview.reply();
+process.stdout.write(JSON.stringify({{
+  calls,
+  draftAfterFailure,
+  draftAfterSuccess:preview.replyDraft(),
+  comments:states.filter(state => state.conversation).at(-1).conversation.comments,
+}}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "calls": [
+            [42, "Ready to merge.", "reply-operation-42"],
+            [42, "Ready to merge.", "reply-operation-42"],
+        ],
+        "draftAfterFailure": "Ready to merge.",
+        "draftAfterSuccess": "",
+        "comments": [{
+            "id": 91,
+            "author": "timmy",
+            "body": "Ready to merge.",
+            "created_at": "2026-08-14T12:30:00Z",
+        }],
+    }
+
+
+def test_search_preview_reply_and_next_advances_only_after_server_confirmation():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const items = [1, 2].map(number => ({{repository:'stackchain/api', number, kind:'issue'}}));
+const values = new Map();
+let confirm;
+const navigated = [];
+const preview = createSearchPreview({{
+  fetchJson:item => Promise.resolve(item), mutate:() => Promise.resolve(),
+  postReply:() => new Promise(resolve => {{ confirm = resolve; }}),
+  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}},
+  createOperationId:() => 'reply-next-1',
+  getSession:() => ({{items,more:false}}), loadMore:() => Promise.resolve(),
+  onNavigate:item => navigated.push(item.number), onState:() => {{}},
+}});
+await preview.open(items[0]);
+preview.saveReplyDraft('Done.');
+const pending = preview.reply({{advance:true}});
+await Promise.resolve();
+const before = [...navigated];
+confirm({{id:7,author:'timmy',body:'Done.'}});
+await pending;
+process.stdout.write(JSON.stringify({{before,after:navigated,draft:preview.replyDraft()}}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "before": [],
+        "after": [2],
+        "draft": "",
+    }
+
+
+def test_search_preview_keeps_confirmed_reply_when_earlier_conversation_load_finishes_late():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const values = new Map();
+let finishConversation;
+const states = [];
+const preview = createSearchPreview({{
+  fetchJson:item => Promise.resolve({{...item,title:'Race'}}),
+  fetchConversation:() => new Promise(resolve => {{ finishConversation = resolve; }}),
+  mutate:() => Promise.resolve(),
+  postReply:(_item,body) => Promise.resolve({{id:9,author:'timmy',body}}),
+  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}},
+  createOperationId:() => 'reply-race-9', onState:state => states.push(state),
+}});
+await preview.open({{repository:'stackchain/api',number:9,kind:'issue'}});
+preview.saveReplyDraft('Confirmed reply');
+await preview.reply();
+finishConversation({{comments:[{{id:3,author:'alex',body:'Earlier'}}],older_page:null}});
+await Promise.resolve();
+const comments = states.filter(state => state.conversation?.status === 'ready').at(-1).conversation.comments;
+process.stdout.write(JSON.stringify(comments.map(comment => comment.id)));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == [3, 9]
+
+
 def test_search_preview_next_loads_one_page_at_boundary_then_announces_completion():
     script = f"""
 const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});

tests/test_global_search.py

@@ -223,6 +223,84 @@ async def test_global_search_preview_conversation_returns_a_bounded_authorized_p
     assert requested == [("stackchain/api", 42, None, 20)]
 
 
+@pytest.mark.anyio
+async def test_global_search_preview_reply_is_idempotent_for_an_authorized_pull(monkeypatch):
+    main._idempotency_ledger.clear()
+    previews = []
+    comments = []
+
+    async def preview(repository, kind, number):
+        previews.append((repository, kind, number))
+        return {
+            "repository": repository,
+            "kind": "pull",
+            "number": number,
+            "title": "Review mobile reply",
+            "state": "open",
+        }
+
+    async def comment(repository, number, body):
+        comments.append((repository, number, body))
+        return {
+            "id": 91,
+            "author": "timmy",
+            "body": body,
+            "created_at": "2026-08-14T12:30:00Z",
+            "url": "https://forge.example/stackchain/api/pulls/42#issuecomment-91",
+        }
+
+    monkeypatch.setattr(main.gitea_proxy, "work_preview", preview)
+    monkeypatch.setattr(main.gitea_proxy, "comment_on_issue", comment)
+    transport = httpx.ASGITransport(app=main.app)
+    headers = {"Idempotency-Key": "search-reply-pull-42"}
+    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
+        first = await client.post(
+            "/api/v1/repos/stackchain/api/issues/42/preview/comments?kind=pull",
+            json={"body": "Ready to merge."},
+            headers=headers,
+        )
+        replay = await client.post(
+            "/api/v1/repos/stackchain/api/issues/42/preview/comments?kind=pull",
+            json={"body": "Ready to merge."},
+            headers=headers,
+        )
+
+    assert first.status_code == replay.status_code == 201
+    assert replay.json() == first.json()
+    assert previews == [("stackchain/api", "pull", 42)]
+    assert comments == [("stackchain/api", 42, "Ready to merge.")]
+
+
+@pytest.mark.anyio
+async def test_global_search_preview_reply_rejects_a_mismatched_target_before_commenting(monkeypatch):
+    main._idempotency_ledger.clear()
+    comments = []
+
+    async def preview(repository, kind, number):
+        return {
+            "repository": repository,
+            "kind": "issue",
+            "number": number,
+            "title": "Different target",
+        }
+
+    async def comment(*args):
+        comments.append(args)
+
+    monkeypatch.setattr(main.gitea_proxy, "work_preview", preview)
+    monkeypatch.setattr(main.gitea_proxy, "comment_on_issue", comment)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
+        response = await client.post(
+            "/api/v1/repos/stackchain/api/issues/42/preview/comments?kind=pull",
+            json={"body": "Do not misroute this."},
+            headers={"Idempotency-Key": "search-reply-mismatch-42"},
+        )
+
+    assert response.status_code == 404
+    assert comments == []
+
+
 @pytest.mark.anyio
 async def test_global_search_queries_issues_and_pulls_and_skips_unsafe_results():
     requests = []
@@ -420,6 +498,7 @@ async def test_work_preview_normalizes_details_and_only_allows_unassigned_open_i
         "reopenable": False,
         "assigned_to_me": False,
         "reviewable": False,
+        "commentable": True,
     }