frontend/dashboard.css

@@ -888,11 +888,8 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-sheet-panel { width:min(560px,100%); height:100%; overflow:auto; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
 .issue-sheet-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .issue-sheet-header button { min-height:44px; }
-.current-work-pin { display:none; }
 .mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav { display:none; }
 @media (max-width:600px) {
-  [data-current-work-pin] { display:inline-flex; align-items:center; justify-content:center; min-width:64px; min-height:44px; padding-inline:12px; }
-  [data-current-work-pin="unpin"] { border-color:#60a5fa; background:#17365a; color:#fff; }
   .issue-sheet-panel, .pull-sheet-panel, .update-sheet-panel, .review-sheet-panel { padding-top:max(12px,env(safe-area-inset-top)); }
   .mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav {
     position:sticky; top:env(safe-area-inset-top); z-index:6;
@@ -1558,7 +1555,6 @@ textarea { resize: vertical; min-height: 120px; }
   .mobile-queue-list .mobile-recent-work-row button { min-height:44px; width:auto; }
   .mobile-queue-list .mobile-recent-work-row [data-recent-work-route] { min-width:0; width:100%; min-height:56px; overflow-wrap:anywhere; }
   .mobile-queue-list .mobile-recent-work-row [data-recent-work-pin] { min-width:64px; justify-content:center; padding-inline:12px; }
-  .mobile-pinned-work-toggle { min-height:44px; width:100%; margin-top:8px; }
   .mobile-queue-list [data-mobile-queue-count] { min-width:28px; padding:3px 8px; border-radius:999px; text-align:center; background:#1d426d; }
   .mobile-queue-list [data-mobile-queue="agenda"][data-deadlines="true"] { border-color:#f59e0b; background:#30240f; box-shadow:inset 3px 0 #f59e0b; }
   .mobile-queue-list [data-recommended="true"] { border-color:#60a5fa; box-shadow:0 0 0 2px #60a5fa; }

frontend/dashboard.js

@@ -441,8 +441,6 @@
     list:qs('#mobile-recent-work-list'),
     pinnedSection:qs('#mobile-pinned-work'),
     pinnedList:qs('#mobile-pinned-work-list'),
-    pinnedToggle:qs('#mobile-pinned-work-toggle'),
-    detailPins:qsa('[data-current-work-pin]'),
     status:qs('#mobile-recent-work-status'),
     openRoute:fragment => {
       const sheet = qs('#mobile-queue-sheet');
@@ -2083,7 +2081,6 @@
       closeOpenWorkSheets();
       await openRoutedWorkSection(item);
       mobileRecentWork.record(item);
-      mobileRecentWork.setCurrent(item);
       const route = createWorkRoute.parse(window.location.hash);
       if (route?.section === item.section) navigateWorkSection(item.kind, item.section);
     },
@@ -2114,7 +2111,6 @@
   qs('#retry-work-route').addEventListener('click', () => workRoute.sync());
 
   function closeOpenWorkSheets() {
-    mobileRecentWork.setCurrent(null);
     issueVoiceReply.cancel();
     pullVoiceReply.cancel();
     updateVoiceReply.cancel();

frontend/index.html

@@ -1053,7 +1053,6 @@
         <div class="small" id="issue-sheet-key"></div>
         <h3 id="issue-sheet-title">Assigned issue</h3>
       </div>
-      <button class="current-work-pin" data-current-work-pin type="button" hidden>Pin</button>
       <button id="close-issue-sheet" type="button">Close sheet</button>
     </div>
     <nav class="mobile-issue-detail-nav" aria-label="Issue sections">
@@ -1554,7 +1553,6 @@
         <div class="small" id="update-sheet-key"></div>
         <h3 id="update-sheet-title">Unread update</h3>
       </div>
-      <button class="current-work-pin" data-current-work-pin type="button" hidden>Pin</button>
     </div>
     <div id="update-triage-progress" class="update-triage-progress small" aria-live="polite" hidden></div>
     <nav class="mobile-update-detail-nav" aria-label="Update sections">
@@ -1678,7 +1676,6 @@
   <section class="pull-sheet-panel">
     <div class="pull-sheet-header">
       <div><div class="small" id="pull-sheet-key"></div><h3 id="pull-sheet-title">Assigned pull request</h3></div>
-      <button class="current-work-pin" data-current-work-pin type="button" hidden>Pin</button>
       <button id="close-pull-sheet" type="button">Close</button>
     </div>
     <nav class="mobile-detail-nav mobile-pull-detail-nav" aria-label="Pull request sections">
@@ -1915,7 +1912,6 @@
         <div class="small" id="review-sheet-key"></div>
         <h3 id="review-sheet-title">Pull request review</h3>
       </div>
-      <button class="current-work-pin" data-current-work-pin type="button" hidden>Pin</button>
       <button class="review-action" id="close-review-sheet">Close</button>
     </div>
     <nav class="mobile-review-detail-nav" aria-label="Review sections">
@@ -2191,7 +2187,6 @@
     <section class="mobile-queue-group" id="mobile-pinned-work" aria-labelledby="mobile-pinned-work-heading" hidden>
       <h3 id="mobile-pinned-work-heading">Pinned work</h3>
       <div class="mobile-queue-list" id="mobile-pinned-work-list"></div>
-      <button class="mobile-pinned-work-toggle" id="mobile-pinned-work-toggle" type="button" aria-controls="mobile-pinned-work-list" aria-expanded="false" hidden>Show all</button>
     </section>
     <section class="mobile-queue-group" id="mobile-recent-work" aria-labelledby="mobile-recent-work-heading" hidden>
       <h3 id="mobile-recent-work-heading">Recent work</h3>

frontend/mobile-recent-work.js

@@ -15,57 +15,9 @@
   const setTimer = options.setTimeout || setTimeout;
   const clearTimer = options.clearTimeout || clearTimeout;
   const debounceMs = Number.isFinite(options.debounceMs) ? Math.max(0, options.debounceMs) : 150;
-  const retryMs = Number.isFinite(options.retryMs) ? Math.max(1, options.retryMs) : 1000;
-  const retryMaxMs = Number.isFinite(options.retryMaxMs) ? Math.max(retryMs, options.retryMaxMs) : 30000;
   let syncFlight = null;
   let syncAccount = '';
   let debounceTimer = null;
-  let retryTimer = null;
-  let retryAccount = '';
-  let retryAttempt = 0;
-  let operationSequence = 0;
-  let pinsExpanded = false;
-  let currentItem = null;
-
-  const detailPins = Array.from(options.detailPins || []);
-  detailPins.forEach(button => button.addEventListener?.('click', () => {
-    if (!currentItem) return;
-    const isPinned = pinned().some(item => item.route === currentItem.route);
-    if (isPinned) unpin(currentItem.route);
-    else pin(currentItem);
-  }));
-
-  options.pinnedToggle?.addEventListener?.('click', () => {
-    pinsExpanded = !pinsExpanded;
-    render();
-  });
-
-  function operationId() {
-    operationSequence += 1;
-    return Date.now().toString(36) + '-' + operationSequence.toString(36);
-  }
-
-  function clearRetry(resetAttempt = false) {
-    if (retryTimer) clearTimer(retryTimer);
-    retryTimer = null;
-    retryAccount = '';
-    if (resetAttempt) retryAttempt = 0;
-  }
-
-  function scheduleRetry(accountKey) {
-    if (retryTimer || key() !== accountKey || !hasPending(read())) return false;
-    retryAccount = accountKey;
-    const delay = Math.min(retryMaxMs, retryMs * (2 ** retryAttempt));
-    retryAttempt += 1;
-    retryTimer = setTimer(() => {
-      const timer = retryTimer;
-      retryTimer = null;
-      retryAccount = '';
-      if (timer) clearTimer(timer);
-      if (key() === accountKey && hasPending(read())) void sync();
-    }, delay);
-    return true;
-  }
 
   function login() {
     return String(getLogin?.() || '').trim().toLowerCase();
@@ -114,28 +66,13 @@
       const route = action === 'pin' ? item?.route : String(candidate?.route || '');
       if ((action !== 'pin' && action !== 'unpin') || !route || (action === 'pin' && !item)) continue;
       if (!unique.some(existing => (existing.item?.route || existing.route) === route)) {
-        const normalized = action === 'pin' ? {action, item} : {action, route};
+        unique.push(action === 'pin' ? {action, item} : {action, route});
-        if (typeof candidate.operationId === 'string' && candidate.operationId) normalized.operationId = candidate.operationId;
-        unique.push(normalized);
       }
       if (unique.length === pinnedLimit) break;
     }
     return unique;
   }
 
-  function normalizePending(value) {
-    if (!Array.isArray(value)) return [];
-    const unique = [];
-    for (const candidate of value) {
-      const item = normalize(candidate);
-      if (!item || unique.some(existing => existing.route === item.route)) continue;
-      if (typeof candidate.operationId === 'string' && candidate.operationId) item.operationId = candidate.operationId;
-      unique.push(item);
-      if (unique.length === limit) break;
-    }
-    return unique;
-  }
-
   function empty() {
     return {items:[], pinned:[], pending:[], pinOps:[]};
   }
@@ -149,7 +86,7 @@
       return {
         items:normalizeList(parsed?.items),
         pinned:normalizeList(parsed?.pinned, pinnedLimit),
-        pending:normalizePending(parsed?.pending),
+        pending:normalizeList(parsed?.pending),
         pinOps:normalizePinOps(parsed?.pinOps),
       };
     } catch (_) {
@@ -163,7 +100,7 @@
       storage.setItem(accountKey, JSON.stringify({
         items:normalizeList(value.items),
         pinned:normalizeList(value.pinned, pinnedLimit),
-        pending:normalizePending(value.pending),
+        pending:normalizeList(value.pending),
         pinOps:normalizePinOps(value.pinOps),
       }));
       return true;
@@ -211,10 +148,8 @@
     if (!accountKey || !normalized) return false;
     const current = read();
     current.items = [normalized, ...current.items.filter(existing => existing.route !== normalized.route)].slice(0, limit);
-    current.pinned = current.pinned.some(existing => existing.route === normalized.route)
+    current.pinned = current.pinned.map(existing => existing.route === normalized.route ? normalized : existing);
-      ? [normalized, ...current.pinned.filter(existing => existing.route !== normalized.route)]
+    current.pending = [normalized, ...current.pending.filter(existing => existing.route !== normalized.route)].slice(0, limit);
-      : current.pinned;
-    current.pending = [{...normalized, operationId:operationId()}, ...current.pending.filter(existing => existing.route !== normalized.route)].slice(0, limit);
     if (!persist(current, accountKey)) return false;
     announce(current);
     render();
@@ -224,7 +159,7 @@
 
   function queuePinOp(current, operation) {
     const route = operation.item?.route || operation.route;
-    current.pinOps = [{...operation, operationId:operationId()}, ...current.pinOps.filter(existing => (existing.item?.route || existing.route) !== route)];
+    current.pinOps = [operation, ...current.pinOps.filter(existing => (existing.item?.route || existing.route) !== route)];
   }
 
   function pin(item) {
@@ -271,7 +206,7 @@
     if (key() !== accountKey || !snapshot || !Array.isArray(snapshot.items)) return false;
     const remote = normalizeList(snapshot.items);
     const remotePinned = normalizeList(snapshot.pinned, pinnedLimit);
-    const unsent = normalizePending(pending);
+    const unsent = normalizeList(pending);
     const unsentPinOps = normalizePinOps(pinOps);
     const value = {
       items:normalizeList([...unsent, ...remote]),
@@ -296,7 +231,7 @@
         let snapshot;
         if (sending) {
           snapshot = await fetchJson('api/v1/recent-work', {
-            method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(normalize(sending)),
+            method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(sending),
           });
         } else {
           const isPin = pinOperation.action === 'pin';
@@ -309,21 +244,17 @@
         if (key() !== accountKey) return read();
         const latest = read();
         const pending = sending
-          ? latest.pending.filter(item => item.operationId !== sending.operationId)
+          ? latest.pending.filter(item => item.route !== sending.route)
           : latest.pending;
         const pinOps = pinOperation
           ? latest.pinOps.filter(operation => {
             const sameRoute = (operation.item?.route || operation.route) === (pinOperation.item?.route || pinOperation.route);
-            return !sameRoute || operation.action !== pinOperation.action || operation.operationId !== pinOperation.operationId;
+            return !sameRoute || operation.action !== pinOperation.action;
           })
           : latest.pinOps;
         if (!adopt(snapshot, accountKey, pending, pinOps)) throw new Error('Recent work response is invalid.');
-        retryAttempt = 0;
       } catch (_error) {
-        if (key() === accountKey) {
+        if (key() === accountKey) announce(read());
-          announce(read());
-          scheduleRetry(accountKey);
-        }
         return read();
       }
     }
@@ -333,8 +264,6 @@
   function sync() {
     if (debounceTimer) { clearTimer(debounceTimer); debounceTimer = null; }
     const accountKey = key();
-    if (retryTimer && retryAccount !== accountKey) clearRetry(true);
-    else if (retryTimer) clearRetry(false);
     if (!fetchJson || !accountKey || !hasPending(read())) return Promise.resolve(read());
     if (syncFlight && syncAccount === accountKey) return syncFlight;
     syncAccount = accountKey;
@@ -391,10 +320,7 @@
     button.setAttribute('type', 'button');
     button.setAttribute('data-recent-work-route', item.route);
     button.setAttribute('aria-label', 'Open ' + item.title + ', ' + itemDetail.toLowerCase().replace(' · ', ' '));
-    button.addEventListener('click', () => {
+    button.addEventListener('click', () => options.openRoute?.(item.route));
-      if (isPinned) record(item);
-      options.openRoute?.(item.route);
-    });
     action.textContent = isPinned ? 'Unpin' : 'Pin';
     action.setAttribute('type', 'button');
     action.setAttribute('data-recent-work-pin', isPinned ? 'unpin' : 'pin');
@@ -405,51 +331,23 @@
     return wrapper;
   }
 
-  function renderCurrent() {
-    const isPinned = currentItem && pinned().some(item => item.route === currentItem.route);
-    detailPins.forEach(button => {
-      button.hidden = !currentItem;
-      if (!currentItem) return;
-      button.textContent = isPinned ? 'Pinned' : 'Pin';
-      button.setAttribute('aria-pressed', isPinned ? 'true' : 'false');
-      button.setAttribute('aria-label', (isPinned ? 'Unpin ' : 'Pin ') + currentItem.title);
-      button.setAttribute('data-current-work-pin', isPinned ? 'unpin' : 'pin');
-    });
-  }
-
-  function setCurrent(item) {
-    currentItem = normalize(item);
-    renderCurrent();
-    return Boolean(currentItem);
-  }
-
   function render() {
     const recent = items();
     const fixed = pinned();
-    const fixedRoutes = new Set(fixed.map(item => item.route));
-    const visibleRecent = recent.filter(item => !fixedRoutes.has(item.route));
     const list = options.list;
     const section = options.section;
     if (list && section && options.document) {
-      const rows = visibleRecent.map(item => row(item, false));
+      const rows = recent.map(item => row(item, false));
       list.replaceChildren(...rows);
       section.hidden = rows.length === 0;
     }
     if (options.pinnedList && options.pinnedSection && options.document) {
-      const visiblePins = pinsExpanded ? fixed : fixed.slice(0, 3);
+      const rows = fixed.map(item => row(item, true));
-      const rows = visiblePins.map(item => row(item, true));
       options.pinnedList.replaceChildren(...rows);
       options.pinnedSection.hidden = rows.length === 0;
     }
-    if (options.pinnedToggle) {
+    return recent.length + fixed.length;
-      options.pinnedToggle.hidden = fixed.length <= 3;
-      options.pinnedToggle.textContent = pinsExpanded ? 'Show fewer' : 'Show all ' + fixed.length;
-      options.pinnedToggle.setAttribute('aria-expanded', pinsExpanded ? 'true' : 'false');
-      options.pinnedToggle.setAttribute('aria-controls', 'mobile-pinned-work-list');
-    }
-    renderCurrent();
-    return visibleRecent.length + fixed.length;
   }
 
-  return {items, pinned, record, pin, unpin, setCurrent, render, load, sync, startLifecycle, state};
+  return {items, pinned, record, pin, unpin, render, load, sync, startLifecycle, state};
 });

frontend/security-center.js

@@ -233,7 +233,6 @@
         issue_closed: 'Issue closed', pull_merged: 'Pull request merged',
         source_branch_deleted: 'Source branch deleted',
         release_rollback_prepared: 'Release rollback prepared',
-        ci_job_retried: 'CI job retried',
         comment_deleted: 'Comment deleted',
         pull_review_approved: 'Pull request approved',
         pull_review_changes_requested: 'Changes requested', gitea_time_logged: 'Gitea time logged',

frontend/today-week-reschedule.js

@@ -338,18 +338,8 @@ function mountTodayWeekReschedule({
   confirm.addEventListener('click',async()=>{
     if(!selectedDate)return;
     confirm.disabled=true;status.textContent='Moving Today into Week Ahead…';dialog.close();
-    let result;
-    try{
-      result=await controller.confirm(selectedDate,Number(estimate.value),{allowOverload});
-    }catch(error){
-      if(!dialog.open)dialog.showModal();
-      const overload=error.message.includes('Confirm overload');allowOverload=overload;
-      status.textContent=error.message;
-      confirm.textContent=overload?'Confirm overload & continue':'Move to Week Ahead & continue';
-      confirm.disabled=false;
-      return;
-    }
     try{
+      const result=await controller.confirm(selectedDate,Number(estimate.value),{allowOverload});
       if(result.sync_pending){
         announce('Moved locally. Saved on this device · sync pending.');warm();
       }else{
@@ -357,7 +347,11 @@ function mountTodayWeekReschedule({
       }
       await continueToday();
     }catch(error){
-      announce(`${error.message||'Refresh unavailable.'} Move completed; refresh to continue.`);
+      if(!dialog.open)dialog.showModal();
+      const overload=error.message.includes('Confirm overload');allowOverload=overload;
+      status.textContent=error.message;
+      confirm.textContent=overload?'Confirm overload & continue':'Move to Week Ahead & continue';
+      confirm.disabled=false;
     }
   });
   return {controller,close,flushPending,resumePending};

src/main.py

@@ -606,7 +606,6 @@ StepUpAction = Literal[
     "merge_pull",
     "delete_source_branch",
     "prepare_release_rollback",
-    "retry_ci_job",
     "submit_pull_review",
     "close_issue",
     "delete_comment",
@@ -7864,38 +7863,13 @@ async def pull_action_failure(
 )
 async def retry_pull_action_job(
     retry: PullReadyRequest,
-    request: Request,
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
     run_id: int = PathParam(gt=0),
     job_index: int = PathParam(ge=0),
-    step_up_grant: str | None = Header(
-        default=None, alias="X-Step-Up-Grant", max_length=128
-    ),
 ) -> JSONResponse:
     repository = f"{owner}/{repo}"
-    target = (
-        f"{repository}#{number}@{retry.expected_head_sha}:"
-        f"actions/{run_id}/jobs/{job_index}"
-    )
-    await _require_step_up(
-        request, step_up_grant, action="retry_ci_job", target=target
-    )
-    journal = _security_event_store()
-    try:
-        operation_id = await asyncio.to_thread(
-            journal.reserve,
-            "ci_job_retried",
-            principal_id=await _security_principal_id(request),
-            target=target,
-        )
-    except SecurityEventStoreError:
-        return JSONResponse(
-            {"error": "Security activity is temporarily unavailable. No job was retried."},
-            status_code=503,
-            headers={"Cache-Control": "no-store", "Retry-After": "1"},
-        )
 
     async def retry_job():
         if not _has_pull_workspace_access(
@@ -7911,26 +7885,14 @@ async def retry_pull_action_job(
             retry_job(), timeout=ISSUE_ACTION_TIMEOUT_SECONDS
         )
     except HTTPException:
-        try:
-            await asyncio.to_thread(journal.discard, operation_id)
-        except SecurityEventStoreError:
-            pass
         raise
     except gitea_proxy.StalePullError:
-        try:
-            await asyncio.to_thread(journal.discard, operation_id)
-        except SecurityEventStoreError:
-            pass
         return JSONResponse(
             {"error": "New commits arrived. Reload checks before retrying this job."},
             status_code=409,
             headers={"Cache-Control": "no-store"},
         )
     except ValueError:
-        try:
-            await asyncio.to_thread(journal.discard, operation_id)
-        except SecurityEventStoreError:
-            pass
         return JSONResponse(
             {"error": "This check is no longer failed or cannot be retried."},
             status_code=409,
@@ -7942,10 +7904,6 @@ async def retry_pull_action_job(
             status_code=503,
             headers={"Cache-Control": "no-store", "Retry-After": "1"},
         )
-    try:
-        await asyncio.to_thread(journal.finalize, operation_id)
-    except SecurityEventStoreError:
-        pass
     return JSONResponse(
         result, status_code=202, headers={"Cache-Control": "no-store"}
     )
@@ -8401,39 +8359,14 @@ async def release_action_failure(
     "/checks/{run_id}/jobs/{job_index}/retry"
 )
 async def retry_release_action_job(
-    request: Request,
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
     commit_sha: str = PathParam(min_length=7, max_length=64, pattern=r"^[A-Fa-f0-9]+$"),
     run_id: int = PathParam(gt=0),
     job_index: int = PathParam(ge=0),
-    step_up_grant: str | None = Header(
-        default=None, alias="X-Step-Up-Grant", max_length=128
-    ),
 ) -> JSONResponse:
     repository = f"{owner}/{repo}"
-    target = (
-        f"{repository}#{number}@{commit_sha}:"
-        f"actions/{run_id}/jobs/{job_index}"
-    )
-    await _require_step_up(
-        request, step_up_grant, action="retry_ci_job", target=target
-    )
-    journal = _security_event_store()
-    try:
-        operation_id = await asyncio.to_thread(
-            journal.reserve,
-            "ci_job_retried",
-            principal_id=await _security_principal_id(request),
-            target=target,
-        )
-    except SecurityEventStoreError:
-        return JSONResponse(
-            {"error": "Security activity is temporarily unavailable. No job was retried."},
-            status_code=503,
-            headers={"Cache-Control": "no-store", "Retry-After": "1"},
-        )
 
     async def retry_job():
         if not await gitea_proxy.can_recover_merged_release(
@@ -8449,16 +8382,8 @@ async def retry_release_action_job(
             retry_job(), timeout=ISSUE_ACTION_TIMEOUT_SECONDS
         )
     except HTTPException:
-        try:
-            await asyncio.to_thread(journal.discard, operation_id)
-        except SecurityEventStoreError:
-            pass
         raise
     except ValueError:
-        try:
-            await asyncio.to_thread(journal.discard, operation_id)
-        except SecurityEventStoreError:
-            pass
         return JSONResponse(
             {"error": "This release check is no longer failed or cannot be retried."},
             status_code=409,
@@ -8470,10 +8395,6 @@ async def retry_release_action_job(
             status_code=503,
             headers={"Cache-Control": "no-store", "Retry-After": "1"},
         )
-    try:
-        await asyncio.to_thread(journal.finalize, operation_id)
-    except SecurityEventStoreError:
-        pass
     return JSONResponse(
         result, status_code=202, headers={"Cache-Control": "no-store"}
     )

src/recent_work_store.py

@@ -141,9 +141,9 @@ class RecentWorkStore:
             state, _legacy = self._state(row, login)
             state["items"] = [normalized, *(entry for entry in state["items"] if entry["route"] != normalized["route"])][: self.limit]
             state["pinned"] = [
-                normalized,
+                normalized if entry["route"] == normalized["route"] else entry
-                *(entry for entry in state["pinned"] if entry["route"] != normalized["route"]),
+                for entry in state["pinned"]
-            ] if any(entry["route"] == normalized["route"] for entry in state["pinned"]) else state["pinned"]
+            ]
             self._write(connection, login, state)
         return state
 

tests/e2e/test_mobile_pinned_work_release.py

@@ -30,6 +30,10 @@ def test_operator_pins_and_reopens_frequent_work_without_phone_overflow(viewport
             getItem:key => values.get(key) || null,
             setItem:(key, value) => values.set(key, value),
           };
+          const item = {
+            kind:'issue', repository:'stackchain/stackchain-dashboard', number:1477,
+            title:'Pin frequent work across signed-in mobile devices',
+          };
           window.opened = [];
           window.recentWork = createMobileRecentWork({
             storage, getLogin:() => 'timmy', document,
@@ -37,71 +41,32 @@ def test_operator_pins_and_reopens_frequent_work_without_phone_overflow(viewport
             list:document.querySelector('#mobile-recent-work-list'),
             pinnedSection:document.querySelector('#mobile-pinned-work'),
             pinnedList:document.querySelector('#mobile-pinned-work-list'),
-            pinnedToggle:document.querySelector('#mobile-pinned-work-toggle'),
-            detailPins:document.querySelectorAll('[data-current-work-pin]'),
             status:document.querySelector('#mobile-recent-work-status'),
             openRoute:route => window.opened.push(route),
           });
-          for (let number=1; number<=20; number += 1) {
+          window.recentWork.record(item);
-            const item = {
+          window.recentWork.pin(item);
-              kind:'issue', repository:'stackchain/stackchain-dashboard', number,
-              title:'Pinned mobile work ' + number,
-            };
-            window.recentWork.record(item);
-            window.recentWork.pin(item);
-          }
           document.querySelector('#mobile-queue-sheet').showModal();
         }""")
 
         expect(page.locator("#mobile-pinned-work")).to_be_visible()
-        expect(page.locator("#mobile-recent-work")).to_be_hidden()
+        expect(page.locator("#mobile-recent-work")).to_be_visible()
-        expect(page.locator("#mobile-pinned-work-list .mobile-recent-work-row")).to_have_count(3)
         expect(page.locator("#mobile-recent-work-status")).to_have_text("Sync pending.")
-        toggle = page.locator("#mobile-pinned-work-toggle")
         open_button = page.get_by_role(
-            "button", name="Open Pinned mobile work 20, issue stackchain/stackchain-dashboard #20"
+            "button", name="Open Pin frequent work across signed-in mobile devices, issue stackchain/stackchain-dashboard #1477"
         ).first
         pin_button = page.get_by_role(
-            "button", name="Unpin Pinned mobile work 20"
+            "button", name="Unpin Pin frequent work across signed-in mobile devices"
         )
-        for control in (open_button, pin_button, toggle):
+        for control in (open_button, pin_button):
             bounds = control.bounding_box()
             assert bounds and bounds["height"] >= 44
             assert bounds["x"] >= 0 and bounds["x"] + bounds["width"] <= viewport["width"]
         assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
 
-        toggle.click()
-        expect(page.locator("#mobile-pinned-work-list .mobile-recent-work-row")).to_have_count(20)
-        expect(toggle).to_have_text("Show fewer")
-        assert toggle.get_attribute("aria-expanded") == "true"
-        toggle.click()
-        expect(page.locator("#mobile-pinned-work-list .mobile-recent-work-row")).to_have_count(3)
-
         open_button.focus()
         open_button.press("Enter")
         assert page.evaluate("window.opened") == [
-            "#/my-work/issue/stackchain/stackchain-dashboard/20"
+            "#/my-work/issue/stackchain/stackchain-dashboard/1477"
         ]
-
-        page.evaluate("""() => {
-          document.querySelector('#mobile-queue-sheet').close();
-          document.querySelector('#issue-sheet').classList.add('open');
-          window.recentWork.setCurrent({
-            kind:'issue', repository:'stackchain/stackchain-dashboard', number:1489,
-            title:'Pin the current item from mobile detail',
-          });
-        }""")
-        detail_pin = page.get_by_role(
-            "button", name="Pin Pin the current item from mobile detail"
-        )
-        expect(detail_pin).to_be_visible()
-        bounds = detail_pin.bounding_box()
-        assert bounds and bounds["height"] >= 44
-        assert bounds["x"] >= 0 and bounds["x"] + bounds["width"] <= viewport["width"]
-        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
-        detail_pin.focus()
-        detail_pin.press("Enter")
-        expect(detail_pin).to_have_text("Pinned")
-        expect(detail_pin).to_have_attribute("aria-pressed", "true")
-        assert page.evaluate("window.recentWork.pinned()[0].number") == 1489
         browser.close()

tests/test_dashboard_auth.py

@@ -18,10 +18,6 @@ def test_release_rollback_is_a_supported_step_up_action():
     assert "prepare_release_rollback" in get_args(main.StepUpAction)
 
 
-def test_ci_job_retry_is_a_supported_step_up_action():
-    assert "retry_ci_job" in get_args(main.StepUpAction)
-
-
 @pytest.fixture
 def access_control(monkeypatch, tmp_path):
     monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
@@ -129,158 +125,6 @@ async def fresh_grant(client, action: str, target: str) -> str:
     return response.json()["grant"]
 
 
-@pytest.mark.anyio
-async def test_ci_job_reruns_require_exact_one_time_authorization_and_audit_both_flows(
-    access_control, monkeypatch
-):
-    lifecycle = []
-
-    class Journal:
-        def record(self, *_args, **_kwargs):
-            pass
-
-        def reserve(self, kind, *, principal_id, target):
-            assert principal_id == 42
-            operation_id = f"operation-{len(lifecycle)}"
-            lifecycle.append(("reserve", kind, target, operation_id))
-            return operation_id
-
-        def finalize(self, operation_id):
-            lifecycle.append(("finalize", operation_id))
-
-        def discard(self, operation_id):
-            lifecycle.append(("discard", operation_id))
-
-    async def capabilities(repository, number):
-        return {"authored": True, "assigned": False}
-
-    async def retry_pull(repository, number, head_sha, run_id, job_index):
-        lifecycle.append(("retry-pull", repository, number, head_sha, run_id, job_index))
-        return {"status": "queued"}
-
-    async def release_access(repository, number, commit_sha):
-        return True
-
-    async def retry_release(repository, commit_sha, run_id, job_index):
-        lifecycle.append(("retry-release", repository, commit_sha, run_id, job_index))
-        return {"status": "queued"}
-
-    monkeypatch.setattr(main, "_security_event_store", lambda: Journal())
-    monkeypatch.setattr(main, "_pull_workspace_capabilities", capabilities)
-    monkeypatch.setattr(main.gitea_proxy, "retry_action_job", retry_pull)
-    monkeypatch.setattr(main.gitea_proxy, "can_recover_merged_release", release_access)
-    monkeypatch.setattr(main.gitea_proxy, "retry_release_action_job", retry_release)
-    transport = httpx.ASGITransport(app=main.app)
-    pull_path = "/api/v1/repos/stackchain/api/pulls/7/checks/91/jobs/3/retry"
-    release_path = (
-        "/api/v1/repos/stackchain/api/pulls/7/release-receipt/abc1234"
-        "/checks/91/jobs/3/retry"
-    )
-    pull_target = "stackchain/api#7@abc1234:actions/91/jobs/3"
-    release_target = "stackchain/api#7@abc1234:actions/91/jobs/3"
-    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
-        signed_in = await client.post(
-            "/api/v1/session",
-            json={"access_token": "correct horse battery staple"},
-        )
-        assert signed_in.status_code == 200
-        headers = {
-            "Origin": "https://test",
-            "X-CSRF-Token": client.cookies["stackchain_csrf"],
-        }
-
-        missing = await client.post(
-            pull_path, json={"expected_head_sha": "abc1234"}, headers=headers
-        )
-        wrong_grant = await fresh_grant(
-            client, "retry_ci_job", "stackchain/api#7@different:actions/91/jobs/3"
-        )
-        mismatched = await client.post(
-            pull_path,
-            json={"expected_head_sha": "abc1234"},
-            headers={**headers, "X-Step-Up-Grant": wrong_grant},
-        )
-        pull_grant = await fresh_grant(client, "retry_ci_job", pull_target)
-        retried_pull = await client.post(
-            pull_path,
-            json={"expected_head_sha": "abc1234"},
-            headers={**headers, "X-Step-Up-Grant": pull_grant},
-        )
-        replayed = await client.post(
-            pull_path,
-            json={"expected_head_sha": "abc1234"},
-            headers={**headers, "X-Step-Up-Grant": pull_grant},
-        )
-        release_grant = await fresh_grant(client, "retry_ci_job", release_target)
-        retried_release = await client.post(
-            release_path,
-            headers={**headers, "X-Step-Up-Grant": release_grant},
-        )
-
-    assert missing.status_code == 428
-    assert missing.json()["detail"] == {
-        "detail": "Fresh authorization required",
-        "code": "step_up_required",
-        "action": "retry_ci_job",
-        "target": pull_target,
-    }
-    assert mismatched.status_code == 428
-    assert retried_pull.status_code == 202
-    assert replayed.status_code == 428
-    assert retried_release.status_code == 202
-    assert lifecycle == [
-        ("reserve", "ci_job_retried", pull_target, "operation-0"),
-        ("retry-pull", "stackchain/api", 7, "abc1234", 91, 3),
-        ("finalize", "operation-0"),
-        ("reserve", "ci_job_retried", release_target, "operation-3"),
-        ("retry-release", "stackchain/api", "abc1234", 91, 3),
-        ("finalize", "operation-3"),
-    ]
-
-
-@pytest.mark.anyio
-async def test_ci_job_retry_fails_closed_when_security_activity_is_unavailable(
-    access_control, monkeypatch
-):
-    retry_calls = []
-
-    class UnavailableJournal:
-        def reserve(self, *_args, **_kwargs):
-            from src.security_event_store import SecurityEventStoreError
-
-            raise SecurityEventStoreError("unavailable")
-
-    async def retry(*args):
-        retry_calls.append(args)
-        return {"status": "queued"}
-
-    transport = httpx.ASGITransport(app=main.app)
-    path = "/api/v1/repos/stackchain/api/pulls/7/checks/91/jobs/3/retry"
-    target = "stackchain/api#7@abc1234:actions/91/jobs/3"
-    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
-        await client.post(
-            "/api/v1/session", json={"access_token": "correct horse battery staple"}
-        )
-        grant = await fresh_grant(client, "retry_ci_job", target)
-        monkeypatch.setattr(main, "_security_event_store", lambda: UnavailableJournal())
-        monkeypatch.setattr(main.gitea_proxy, "retry_action_job", retry)
-        response = await client.post(
-            path,
-            json={"expected_head_sha": "abc1234"},
-            headers={
-                "Origin": "https://test",
-                "X-CSRF-Token": client.cookies["stackchain_csrf"],
-                "X-Step-Up-Grant": grant,
-            },
-        )
-
-    assert response.status_code == 503
-    assert response.json() == {
-        "error": "Security activity is temporarily unavailable. No job was retried."
-    }
-    assert retry_calls == []
-
-
 @pytest.mark.anyio
 async def test_source_branch_deletion_accepts_exact_one_time_fresh_authorization(
     access_control, monkeypatch

tests/test_mobile_recent_work.py

@@ -159,118 +159,6 @@ process.stdout.write(JSON.stringify({{immediate,settled:recent.items(),status:st
     assert payload["calls"] == [["api/v1/recent-work", "POST"]]
 
 
-def test_recent_work_drains_a_newer_same_route_generation_after_an_inflight_response():
-    script = f"""
-const createRecentWork = require({json.dumps(str(RECENT_WORK))});
-(async()=>{{
-const values = new Map(); const calls=[];
-const storage={{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value)}};
-const oldItem={{kind:'issue',repository:'stackchain/dashboard',number:7,title:'Old title'}};
-const newItem={{kind:'issue',repository:'stackchain/dashboard',number:7,title:'New title'}};
-let releaseFirst;
-const firstResponse=new Promise(resolve=>{{releaseFirst=resolve;}});
-const recent=createRecentWork({{
-  storage,getLogin:()=>'alice',debounceMs:99999,
-  fetchJson:async (_url, options)=>{{
-    const sent=JSON.parse(options.body);
-    calls.push(sent.title);
-    if (calls.length === 1) return firstResponse;
-    return {{items:[{{...newItem,route:'#/my-work/issue/stackchain/dashboard/7'}}],pinned:[]}};
-  }},
-}});
-recent.record(oldItem);
-const syncing=recent.sync();
-await Promise.resolve();
-recent.record(newItem);
-releaseFirst({{items:[{{...oldItem,route:'#/my-work/issue/stackchain/dashboard/7'}}],pinned:[]}});
-await syncing;
-process.stdout.write(JSON.stringify({{calls,items:recent.items(),state:recent.state()}}));
-process.exit(0);
-}})().catch(error=>{{console.error(error);process.exit(1);}});
-"""
-    payload = run_node(script)
-
-    assert payload["calls"] == ["Old title", "New title"]
-    assert payload["items"][0]["title"] == "New title"
-    assert payload["state"] == {"pending": False, "pendingCount": 0}
-
-
-def test_recent_work_retries_a_transient_sync_failure_without_a_lifecycle_event():
-    script = f"""
-const createRecentWork = require({json.dumps(str(RECENT_WORK))});
-(async()=>{{
-const values=new Map(); const timers=[]; let calls=0;
-const recent=createRecentWork({{
-  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value)}},
-  getLogin:()=>'alice',debounceMs:99999,retryMs:25,
-  setTimeout:(callback,delay)=>{{const timer={{callback,delay,cleared:false}};timers.push(timer);return timer;}},
-  clearTimeout:timer=>{{timer.cleared=true;}},
-  fetchJson:async (_url,options)=>{{
-    calls += 1;
-    if (calls === 1) throw new Error('temporary outage');
-    return {{items:[JSON.parse(options.body)],pinned:[]}};
-  }},
-}});
-recent.record({{kind:'issue',repository:'stackchain/dashboard',number:7,title:'Keep me'}});
-await recent.sync();
-const afterFailure={{calls,state:recent.state(),active:timers.filter(timer=>!timer.cleared).map(timer=>timer.delay)}};
-const retryTimer=timers.find(timer=>!timer.cleared);
-retryTimer?.callback();
-await new Promise(resolve=>setImmediate(resolve));
-const settled={{calls,state:recent.state(),active:timers.filter(timer=>!timer.cleared).length}};
-process.stdout.write(JSON.stringify({{afterFailure,settled}}));
-}})().catch(error=>{{console.error(error);process.exit(1);}});
-"""
-    payload = run_node(script)
-
-    assert payload["afterFailure"] == {
-        "calls": 1,
-        "state": {"pending": True, "pendingCount": 1},
-        "active": [25],
-    }
-    assert payload["settled"] == {
-        "calls": 2,
-        "state": {"pending": False, "pendingCount": 0},
-        "active": 0,
-    }
-
-
-def test_recent_work_drains_a_newer_pin_generation_after_an_inflight_response():
-    script = f"""
-const createRecentWork = require({json.dumps(str(RECENT_WORK))});
-(async()=>{{
-const values=new Map(); const calls=[];
-const oldItem={{kind:'issue',repository:'stackchain/dashboard',number:7,title:'Old pin'}};
-const newItem={{kind:'issue',repository:'stackchain/dashboard',number:7,title:'New pin'}};
-const route='#/my-work/issue/stackchain/dashboard/7';
-let releaseFirst;
-const firstResponse=new Promise(resolve=>{{releaseFirst=resolve;}});
-const recent=createRecentWork({{
-  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value)}},
-  getLogin:()=>'alice',debounceMs:99999,
-  fetchJson:async (_url,options)=>{{
-    const sent=JSON.parse(options.body); calls.push(sent.title);
-    if (calls.length === 1) return firstResponse;
-    return {{items:[],pinned:[{{...newItem,route}}]}};
-  }},
-}});
-recent.pin(oldItem);
-const syncing=recent.sync();
-await Promise.resolve();
-recent.pin(newItem);
-releaseFirst({{items:[],pinned:[{{...oldItem,route}}]}});
-await syncing;
-process.stdout.write(JSON.stringify({{calls,pinned:recent.pinned(),state:recent.state()}}));
-process.exit(0);
-}})().catch(error=>{{console.error(error);process.exit(1);}});
-"""
-    payload = run_node(script)
-
-    assert payload["calls"] == ["Old pin", "New pin"]
-    assert payload["pinned"][0]["title"] == "New pin"
-    assert payload["state"] == {"pending": False, "pendingCount": 0}
-
-
 def test_recent_work_pins_offline_first_syncs_and_renders_separate_touch_actions():
     script = f"""
 const createRecentWork = require({json.dumps(str(RECENT_WORK))});
@@ -306,7 +194,7 @@ const recent=createRecentWork({{
 const pinnedImmediately=recent.pin(item);
 recent.render();
 const immediate={{pinned:recent.pinned(),status:status.textContent,recentHidden:recentSection.hidden,pinnedHidden:pinnedSection.hidden,
-  recentRows:recentList.children.length,
+  recentActions:recentList.children[0].children.map(child=>child.attributes),
   pinnedActions:pinnedList.children[0].children.map(child=>child.attributes)}};
 await recent.sync();
 pinnedList.children[0].children[0].click();
@@ -320,16 +208,16 @@ process.stdout.write(JSON.stringify({{pinnedImmediately,immediate,opened,unpinne
     assert payload["pinnedImmediately"] is True
     assert payload["immediate"]["pinned"][0]["number"] == 1477
     assert payload["immediate"]["status"] == "Sync pending."
-    assert payload["immediate"]["recentHidden"] is True
+    assert payload["immediate"]["recentHidden"] is False
     assert payload["immediate"]["pinnedHidden"] is False
-    assert payload["immediate"]["recentRows"] == 0
+    assert payload["immediate"]["recentActions"][0]["data-recent-work-route"].endswith("/1477")
+    assert payload["immediate"]["recentActions"][1]["data-recent-work-pin"] == "pin"
     assert payload["immediate"]["pinnedActions"][1]["data-recent-work-pin"] == "unpin"
     assert payload["opened"] == ["#/my-work/issue/stackchain/dashboard/1477"]
     assert payload["unpinnedImmediately"] is True
     assert payload["settled"] == []
     assert payload["calls"] == [
         ["api/v1/recent-work/pin", "PUT", payload["immediate"]["pinned"][0]],
-        ["api/v1/recent-work", "POST", payload["immediate"]["pinned"][0]],
         [
             "api/v1/recent-work/pin",
             "DELETE",
@@ -338,124 +226,6 @@ process.stdout.write(JSON.stringify({{pinnedImmediately,immediate,opened,unpinne
     ]
 
 
-def test_current_detail_pin_follows_route_and_toggles_offline_first():
-    script = f"""
-const createRecentWork = require({json.dumps(str(RECENT_WORK))});
-const values=new Map();
-function button() {{ return {{hidden:true,textContent:'',attributes:{{}},listeners:{{}},
-  setAttribute(name,value){{this.attributes[name]=String(value);}},
-  addEventListener(name,callback){{this.listeners[name]=callback;}},
-  click(){{this.listeners.click?.();}},
-}}; }}
-const detailPins=[button(),button(),button(),button()];
-const recent=createRecentWork({{
-  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value)}},
-  getLogin:()=>'alice',detailPins,debounceMs:99999,
-}});
-const issue={{kind:'issue',repository:'stackchain/dashboard',number:1489,title:'Pin current detail'}};
-const pull={{kind:'pull',repository:'stackchain/api',number:20,title:'Ship API'}};
-recent.setCurrent(issue);
-const issueReady=detailPins.map(pin=>({{hidden:pin.hidden,text:pin.textContent,
-  pressed:pin.attributes['aria-pressed'],label:pin.attributes['aria-label'],action:pin.attributes['data-current-work-pin']}}));
-detailPins[0].click();
-const pinned={{items:recent.pinned(),state:recent.state(),buttons:detailPins.map(pin=>({{text:pin.textContent,
-  pressed:pin.attributes['aria-pressed'],label:pin.attributes['aria-label'],action:pin.attributes['data-current-work-pin']}}))}};
-recent.setCurrent(pull);
-const pullReady={{text:detailPins[1].textContent,label:detailPins[1].attributes['aria-label'],pressed:detailPins[1].attributes['aria-pressed']}};
-recent.setCurrent(issue);
-detailPins[2].click();
-const unpinned={{items:recent.pinned(),recent:recent.items(),state:recent.state(),text:detailPins[0].textContent}};
-recent.setCurrent(null);
-process.stdout.write(JSON.stringify({{issueReady,pinned,pullReady,unpinned,hidden:detailPins.map(pin=>pin.hidden)}}));
-"""
-    payload = run_node(script)
-
-    assert payload["issueReady"] == [
-        {
-            "hidden": False,
-            "text": "Pin",
-            "pressed": "false",
-            "label": "Pin Pin current detail",
-            "action": "pin",
-        }
-    ] * 4
-    assert payload["pinned"]["items"][0]["route"] == "#/my-work/issue/stackchain/dashboard/1489"
-    assert payload["pinned"]["state"] == {"pending": True, "pendingCount": 1}
-    assert payload["pinned"]["buttons"] == [
-        {
-            "text": "Pinned",
-            "pressed": "true",
-            "label": "Unpin Pin current detail",
-            "action": "unpin",
-        }
-    ] * 4
-    assert payload["pullReady"] == {
-        "text": "Pin",
-        "label": "Pin Ship API",
-        "pressed": "false",
-    }
-    assert payload["unpinned"]["items"] == []
-    assert payload["unpinned"]["recent"] == []
-    assert payload["unpinned"]["state"] == {"pending": True, "pendingCount": 1}
-    assert payload["unpinned"]["text"] == "Pin"
-    assert payload["hidden"] == [True] * 4
-
-
-def test_pinned_work_is_compact_deduplicated_and_promotes_on_open():
-    script = f"""
-const createRecentWork = require({json.dumps(str(RECENT_WORK))});
-const makeItem=number=>({{kind:'issue',repository:'stackchain/dashboard',number,title:'Issue '+number}});
-const values=new Map([['stackchain.mobile-recent-work.v1.alice',JSON.stringify({{
-  items:[1,2,3,4,5].map(makeItem),pinned:[1,2,3,4,5].map(makeItem),pending:[],pinOps:[]
-}})]]);
-function node(tag) {{ return {{tag,children:[],attributes:{{}},listeners:{{}},hidden:false,textContent:'',
-  appendChild(child){{this.children.push(child);return child;}},
-  replaceChildren(...children){{this.children=children;}},
-  setAttribute(name,value){{this.attributes[name]=String(value);}},
-  addEventListener(name,callback){{this.listeners[name]=callback;}},
-  click(){{this.listeners.click?.();}}, focus(){{this.focused=true;}},
-}}; }}
-const recentList=node('div'), recentSection=node('section');
-const pinnedList=node('div'), pinnedSection=node('section'), pinnedToggle=node('button');
-const opened=[];
-const recent=createRecentWork({{
-  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value)}},
-  getLogin:()=>'alice',document:{{createElement:node}},debounceMs:99999,
-  list:recentList,section:recentSection,pinnedList,pinnedSection,pinnedToggle,
-  openRoute:route=>opened.push(route),
-}});
-recent.render();
-const collapsed={{pinnedRows:pinnedList.children.length,recentRows:recentList.children.length,
-  recentHidden:recentSection.hidden,toggleHidden:pinnedToggle.hidden,toggleText:pinnedToggle.textContent,
-  expanded:pinnedToggle.attributes['aria-expanded'],controls:pinnedToggle.attributes['aria-controls']}};
-pinnedList.children[2].children[0].click();
-const promoted=recent.pinned().map(item=>item.number);
-pinnedToggle.click();
-const expanded={{pinnedRows:pinnedList.children.length,toggleText:pinnedToggle.textContent,
-  ariaExpanded:pinnedToggle.attributes['aria-expanded']}};
-process.stdout.write(JSON.stringify({{collapsed,promoted,expanded,opened,state:recent.state()}}));
-"""
-    payload = run_node(script)
-
-    assert payload["collapsed"] == {
-        "pinnedRows": 3,
-        "recentRows": 0,
-        "recentHidden": True,
-        "toggleHidden": False,
-        "toggleText": "Show all 5",
-        "expanded": "false",
-        "controls": "mobile-pinned-work-list",
-    }
-    assert payload["promoted"] == [3, 1, 2, 4, 5]
-    assert payload["expanded"] == {
-        "pinnedRows": 5,
-        "toggleText": "Show fewer",
-        "ariaExpanded": "true",
-    }
-    assert payload["opened"] == ["#/my-work/issue/stackchain/dashboard/3"]
-    assert payload["state"] == {"pending": True, "pendingCount": 1}
-
-
 def test_mobile_queues_integrates_recent_work_with_canonical_detail_routes():
     html = INDEX.read_text()
     dashboard = DASHBOARD.read_text()
@@ -465,8 +235,6 @@ def test_mobile_queues_integrates_recent_work_with_canonical_detail_routes():
     assert 'id="mobile-recent-work-list"' in html
     assert 'id="mobile-pinned-work"' in html
     assert 'id="mobile-pinned-work-list"' in html
-    assert 'id="mobile-pinned-work-toggle"' in html
-    assert 'aria-controls="mobile-pinned-work-list"' in html
     assert 'id="mobile-recent-work-status" role="status" aria-live="polite"' in html
     assert '<script src="static/mobile-recent-work.js"></script>' in html
     assert "createMobileRecentWork({" in dashboard
@@ -474,18 +242,12 @@ def test_mobile_queues_integrates_recent_work_with_canonical_detail_routes():
     assert "status:qs('#mobile-recent-work-status')" in dashboard
     assert "pinnedList:qs('#mobile-pinned-work-list')" in dashboard
     assert "pinnedSection:qs('#mobile-pinned-work')" in dashboard
-    assert "pinnedToggle:qs('#mobile-pinned-work-toggle')" in dashboard
     assert "mobileRecentWork.startLifecycle({window, document})" in dashboard
     assert "void mobileRecentWork.load();" in dashboard
     assert "mobileRecentWork.record(item)" in dashboard
     assert "mobileRecentWork.render()" in dashboard
     assert "workRoute.sync()" in dashboard
-    assert html.count('data-current-work-pin') == 4
-    assert "detailPins:qsa('[data-current-work-pin]')" in dashboard
-    assert "mobileRecentWork.setCurrent(item)" in dashboard
-    assert "mobileRecentWork.setCurrent(null)" in dashboard
     assert "[data-recent-work-route]" in css
     assert "[data-recent-work-pin]" in css
-    assert "[data-current-work-pin]" in css
     assert "min-height:44px" in css
     assert "min-width:0" in css

tests/test_recent_work_store.py

@@ -60,21 +60,6 @@ def test_pinned_work_survives_recent_limit_and_unpin_keeps_recent_item(tmp_path)
     assert "#/my-work/issue" not in payload
 
 
-def test_reopening_pinned_work_promotes_it_for_every_device(tmp_path):
-    store = RecentWorkStore(
-        tmp_path / "recent-work.sqlite3",
-        encryption_key=b"r" * 32,
-    )
-    for number in range(1, 5):
-        store.pin("timmy", item(number))
-
-    reopened = store.record("timmy", item(1, title="Issue 1 current"))
-
-    assert [entry["number"] for entry in reopened["pinned"]] == [1, 4, 3, 2]
-    assert reopened["pinned"][0]["title"] == "Issue 1 current"
-    assert store.get("timmy")["pinned"] == reopened["pinned"]
-
-
 def test_recent_work_rejects_noncanonical_or_unsupported_items(tmp_path):
     store = RecentWorkStore(tmp_path / "recent-work.sqlite3", encryption_key=b"r" * 32)
 

tests/test_security_center.py

@@ -18,12 +18,6 @@ def test_release_rollback_has_a_specific_security_activity_label():
     assert "release_rollback_prepared: 'Release rollback prepared'" in source
 
 
-def test_ci_job_retry_has_a_specific_security_activity_label():
-    source = SECURITY_CENTER.read_text()
-
-    assert "ci_job_retried: 'CI job retried'" in source
-
-
 def test_open_security_center_loads_all_sections_concurrently_and_is_awaitable():
     harness = f"""
 const attachSecurityCenter=require({json.dumps(str(SECURITY_CENTER))});

tests/test_today_week_reschedule.py

@@ -326,9 +326,8 @@ console.log(JSON.stringify({message,adopted,pending:controller.pending(),remaini
     assert result["remaining"] == 1
 
 
-def run_mounted_confirmation(*, fail_move: bool = False, fail_refresh: bool = False) -> dict:
+def run_mounted_confirmation(*, fail_move: bool = False) -> dict:
     failure = "true" if fail_move else "false"
-    refresh_failure = "true" if fail_refresh else "false"
     scenario = """
 const mount=require('./frontend/today-week-reschedule.js').mount;
 class Element {
@@ -362,9 +361,7 @@ const week={load:async()=>weekState,review:()=>({days:[{
 }]}),adopt(){}};
 const api=async(url)=>url==='api/v1/today' ? today : move;
 mount({qs:selector=>selectors[selector],document,window,week,api,getToday:()=>today,
- adoptToday(){},currentTarget:()=>({identity:'active'}),closeActions(){},refresh:async()=>{
+ adoptToday(){},currentTarget:()=>({identity:'active'}),closeActions(){},refresh:async()=>{},warm(){},
-  if(__FAIL_REFRESH__)throw new Error('Refresh unavailable.');
- },warm(){},
  continueToday:async()=>{},announce(){},schedule:callback=>callback()});
 await selectors['[data-work-session-reschedule-week]'].emit('click');
 await selectors['#today-week-reschedule-days'].children[0].emit('click');
@@ -379,11 +376,7 @@ if(__FAIL_MOVE__){
 await confirming;
 console.log(JSON.stringify({openWhileSaving,openAfterSettled:selectors['#today-week-reschedule'].open}));
 """
-    return run_controller(
+    return run_controller(scenario.replace("__FAIL_MOVE__", failure))
-        scenario.replace("__FAIL_MOVE__", failure).replace(
-            "__FAIL_REFRESH__", refresh_failure
-        )
-    )
 
 
 def test_reschedule_dialog_closes_as_soon_as_a_valid_move_is_confirmed():
@@ -400,13 +393,6 @@ def test_reschedule_dialog_reopens_with_retry_state_when_confirm_fails():
     }
 
 
-def test_reschedule_dialog_stays_closed_when_refresh_fails_after_confirm_succeeds():
-    assert run_mounted_confirmation(fail_refresh=True) == {
-        "openWhileSaving": False,
-        "openAfterSettled": False,
-    }
-
-
 def test_mobile_active_today_reschedule_dialog_is_touch_safe_and_wired_into_release_bundle():
     index = INDEX.read_text()
     css = CSS.read_text()