fix: close Human Gates review races

frontend/dashboard.js

@@ -7886,6 +7886,8 @@
     confirmedOwnerLogin = String(saved.user?.login || '').trim();
     restoreReleaseReceipt();
     planningOwnerLogin = confirmedOwnerLogin;
+    planningOwnerAccountKey = confirmedOwnerLogin && saved.user?.id ?
+      String(saved.user.id) + ':' + confirmedOwnerLogin : '';
     interruptionPrompt.restore();
     updatePlanningAvailability();
     syncPendingTomorrow();

frontend/human-gates.js

@@ -9,7 +9,9 @@ function createHumanGates(options = {}) {
   let queue = { pending_count: 0, items: [] };
   let reviewSnapshot = [];
   let reviewIndex = -1;
+  let loadedAccountKey = '';
   const decisionKeys = new Map();
+  let decisionFlight = null;
 
   const escape = value => String(value ?? '').replace(/[&<>"']/g, character => ({
     '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
@@ -78,6 +80,14 @@ function createHumanGates(options = {}) {
   }
 
   async function load() {
+    const accountKey = String(getAccountKey() || '').trim().toLowerCase();
+    if (accountKey !== loadedAccountKey) {
+      loadedAccountKey = accountKey;
+      queue = { pending_count: 0, items: [] };
+      reviewSnapshot = [];
+      reviewIndex = -1;
+      render();
+    }
     const cached = restore();
     if (cached) { queue = cached; render(); }
     try {
@@ -149,21 +159,30 @@ function createHumanGates(options = {}) {
       reason: String(values.reason || '').trim(),
       override_reason: String(values.override_reason || '').trim(), checklist,
     };
-    const decisionKey = idempotencyKey(item, decision, payload);
-    const receipt = await fetchJson('api/v1/human-gates/' + encodeURIComponent(item.id) + '/decision', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', 'Idempotency-Key': decisionKey.key },
-      body: JSON.stringify(payload),
-    });
-    decisionKeys.delete(decisionKey.operation);
-    queue.items = queue.items.filter(candidate => candidate.id !== item.id);
-    queue.pending_count = Math.max(0, queue.pending_count - 1);
-    save(queue); render();
-    reviewIndex += 1;
-    const next = current();
-    if (next) reviewNext(); else renderDetail(null);
-    setText(nodes.status, next ? (decision === 'release' ? 'Released. Reviewing next gate.' : 'Held. Reviewing next gate.') : 'Decision saved. Human Gates review snapshot complete.');
-    return { receipt, next };
+    if (decisionFlight) return decisionFlight;
+    const operation = (async () => {
+      const decisionKey = idempotencyKey(item, decision, payload);
+      const receipt = await fetchJson('api/v1/human-gates/' + encodeURIComponent(item.id) + '/decision', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'Idempotency-Key': decisionKey.key },
+        body: JSON.stringify(payload),
+      });
+      decisionKeys.delete(decisionKey.operation);
+      queue.items = queue.items.filter(candidate => candidate.id !== item.id);
+      queue.pending_count = Math.max(0, queue.pending_count - 1);
+      save(queue); render();
+      reviewIndex += 1;
+      const next = current();
+      if (next) reviewNext(); else renderDetail(null);
+      setText(nodes.status, next ? (decision === 'release' ? 'Released. Reviewing next gate.' : 'Held. Reviewing next gate.') : 'Decision saved. Human Gates review snapshot complete.');
+      return { receipt, next };
+    })();
+    decisionFlight = operation;
+    try {
+      return await operation;
+    } finally {
+      if (decisionFlight === operation) decisionFlight = null;
+    }
   }
 
   function open() {