Merge pull request 'Commit bounded review feedback fixes from mobile' (#1377) from timmy/1376-mobile-review-feedback-fix into main

Closes #1368

.gitea/workflows/ci.yml

@@ -57,7 +57,7 @@ jobs:
           pip install -r requirements-e2e.txt
           python3 -m playwright install --with-deps chromium
       - name: Exercise packaged mobile work journeys
-        run: python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py tests/e2e/test_mobile_search_preview_navigation.py tests/e2e/test_mobile_find_work_release.py tests/e2e/test_mobile_home_bootstrap_release.py tests/e2e/test_mobile_today_handoff_release.py tests/e2e/test_mobile_today_wrap_up_release.py tests/e2e/test_mobile_today_summary_release.py tests/e2e/test_mobile_wrap_up_handoff_release.py -q
+        run: python3 -m pytest tests/e2e -q
 
   release-candidate:
     runs-on: ubuntu-latest

README.md

@@ -19,6 +19,12 @@ threads, create and self-assign issues, discover, claim, and release issue assig
 list repository labels and open milestones, set or clear due dates on assigned issues, create issue comments, close assigned issues,
 inspect/comment on assigned pull
 requests, merge assigned pull requests, and submit pull-request reviews.
+After an exact merged commit fails release checks, its mobile release receipt can load the
+failed job evidence and prepare a draft rollback pull request. The server revalidates the
+operator's participation and push access, reverses only bounded UTF-8 files whose current
+default-branch content still matches the failed merge, and creates one atomic commit on a
+stable operator-owned branch. Conflicts, renames, binary files, and oversized changes fail
+closed; retrying converges on the same draft PR, which opens in the existing review workspace.
 Assigned-issue, assigned-pull-request, and unread-update conversation composers accept an ordered bundle of up to five PNG, JPEG, or WebP photos. Repeated camera captures append to the bundle, the gallery picker accepts multiple images, and each composer automatically optimizes oversized screenshots on-device to fit the 2 MB upload boundary. Before sending, the selected conversation photo can use the same touch editor as New issue evidence to crop, privacy-redact, highlight, or add an arrow; Apply replaces only that flattened derivative while preserving its caption and bundle position, and Cancel leaves the original unchanged.
 For online delivery, every photo uploads before the comment is posted to the exact conversation target, producing one ordered Markdown comment or reply; validation or upload failures keep the typed text and removable preview available for retry. Offline photo conversations admit every image Blob to IndexedDB before confirmation, keep only bounded metadata in localStorage, and checkpoint each upload separately so reconnect resumes at the first unconfirmed photo without duplicating an upload, comment, reply, or reply-and-read transition. The mobile **New issue** capture-first stage accepts an ordered evidence bundle of up to
 five PNG, JPEG, or WebP screenshots before a repository is chosen, optimizing each image independently
@@ -75,6 +81,23 @@ Today or interrupting active work. Cancel and browser Back preserve the Search p
 confirmation claims only when needed, syncs the Later plan across devices, and returns to the preserved
 query, filters, results, and scroll position. If assignment succeeds but Later storage fails, the issue
 remains recoverable in My Work and the dashboard reports the partial outcome instead of claiming success.
+Eligible open issue previews also expose **Plan ahead**: choose one of the next seven local dates, review
+that day's current load and capacity, and enter a required estimate without leaving Search. Existing Week
+Ahead placement is moved only after an explicit day change, never duplicated; full days are blocked and
+over-capacity admission requires a second confirmation. The action claims unassigned work only after these
+checks, stages the canonical issue through the account-bound Week Ahead outbox, and preserves the Search
+preview through cancel or browser Back. Offline saves report **sync pending**; if assignment succeeds but
+local planning fails, the dashboard reports **Assigned, not planned** and leaves the issue recoverable in My Work.
+The live mobile Week Ahead overview also offers **Remove from week** for active planned work. It removes only the
+private planning placement—not assignment, issue state, or Gitea content—and immediately recalculates the day's
+load. A 10-second **Undo** receipt restores the exact day, list position, and estimate. Both transitions use the
+account-bound Week Ahead outbox, remain **sync pending** after delivery failure, and stay unavailable in a read-only
+offline snapshot.
+Search selection mode extends that flow across several open issues with **Plan Week Ahead**. One phone-safe
+review assigns each issue a future day and estimate, validates five-item limits and daily capacity before any
+claim, and requires a second confirmation for overload. Confirmed rows are staged into one canonical Week
+Ahead update and flushed together; partial assignment or offline sync is reported without discarding the
+selection, so claimed work remains recoverable from My Work.
 Commentable mobile Search previews support camera capture and gallery selection for up to five ordered
 photos, including captions, crop/annotation/redaction review, and metadata-stripping re-encoding. Operators
 can queue photo-only, text-only, or mixed replies without leaving their Search pass, including while offline.
@@ -90,11 +113,40 @@ device can reopen the exact Search with one tap while stale writes surface a con
 overwriting newer views. Rename and delete affect only the saved view, never Gitea work; an unavailable
 sync service leaves ad-hoc Search usable. Set `STACKCHAIN_SAVED_SEARCH_DB` to override the default
 `.stackchain-state/saved-searches.sqlite3` path.
+
+Confirmed **Watch issue** and **Watch pull request** actions on open Search results and assigned My Work
+issue/pull-request details feed the mobile **Following** queue, including work already assigned to you or a teammate.
+The detail control loads authoritative Gitea state, remains single-flight while changing it, and refreshes Following only
+after the account-scoped collection confirms the same mutation. This completes the read → watch → revisit flow without
+changing ownership, review assignment, or scheduling work.
+Following is a read-first, account-scoped collection: it is encrypted at rest, revisioned, bounded to
+50 typed items, and synchronized across signed-in devices. Opening a row reuses the correct issue or
+pull-request Search Preview; confirmed **Stop watching** removes an open item. When watched work
+closes or merges, the sequential review exposes **Stop watching & next** so the completed item can be
+retired without leaving the preview; the next captured change opens immediately, and retiring the
+final item completes the Following phase. Changed cards explain whether work closed, reopened, changed title, or
+received other activity. During review, conversation messages newer than the prior reviewed revision are highlighted,
+and the revision is acknowledged only after both detail and conversation context load; a failed conversation load keeps
+that exact change unseen for Retry or **Keep for later & next**. For open work that still needs thought, **Keep for later & next**
+restores only the loaded revision to the unseen queue and continues the captured pass without changing
+Gitea state, ownership, planning, or watch status. Failed or unconfirmed Gitea mutations leave the collection
+and current review position unchanged. Following counts never influence the recommended Work queue. Set
+`STACKCHAIN_FOLLOWING_DB` to override `.stackchain-state/following.sqlite3`.
+
+Each device can explicitly opt in to **Notify me when Following changes**. Stackchain polls that
+channel independently, validates the device session immediately before delivery, and checkpoints
+the exact unseen revision set so unchanged work stays silent across workers. Lock-screen payloads
+contain only a bounded count and the `#/my-work/following` route—never repository names, titles,
+bodies, or comments. Disabling Following alerts leaves Updates, deadlines, and start-day reminders
+unchanged.
+
 Completed delegated issues remain in the mobile **Filed** queue until their latest outcome is acknowledged.
-The mobile queue sheet begins with **Prepare Today**, a live briefing that totals Agenda, Attention, Updates, and
-Filed work and opens the highest-priority non-empty review queue. Starting it saves a confirmed-account, local-day
-checkpoint: finishing Agenda, Updates, or the final Filed review returns to a focused handoff using fresh queue
-counts, while reopening the queue sheet resumes the next live phase. **Finish for now** removes only that local
+The mobile queue sheet begins with **Prepare Today**, a live briefing that totals Agenda, Attention, Updates, Filed,
+and unseen Following activity, then opens the highest-priority non-empty review queue. Following refreshes only when
+Prepare Today is opened; selecting that phase starts its changed-first sequential review directly. Starting the pass
+saves a confirmed-account, local-day checkpoint: finishing Agenda, Updates, the final Filed review, or the final
+Following revision returns to a focused handoff using fresh queue counts, while reopening the queue sheet resumes the
+next live phase. **Finish for now** removes only that local
 checkpoint. Once urgent review is clear the pass continues the existing Today plan, or opens Find Work when Today
 is empty; the briefing and checkpoint never change Gitea state.
 Filed separates actionable **Needs review** from a browsable **Reviewed** history, so acknowledgement clears the
@@ -120,8 +172,11 @@ explicit **Add blocked item anyway** override, while an unavailable dependency l
 as unknown rather than unblocked. Completing any Today item now exposes a 10-second, touch-safe
 **Undo** receipt. Undo restores the item's original order and estimate, queues the inverse cross-device
 plan changes, and leaves the already-advanced work session on its current item; expiry, capacity, or a
-concurrently changed plan is reported without overwriting newer work. Starting a Today work session also
-stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. An opt-in, privacy-safe lock-screen notification mirrors the current pause/resume control and adds **Finish current**: its opaque one-shot action is bound to the exact active item, reuses **Done & next** or recap, and never changes the underlying Gitea issue or pull request. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan without changing Gitea time entries. Eligible non-zero rows also offer an unchecked **Log Xm to Gitea** control. **Log selected time to Gitea** saves the recap and sends only those corrected durations to each canonical issue or pull request; confirmed account-scoped receipts prevent a completed row from being posted again, while definite failures retain the draft for an explicit retry. If the upstream response is lost after sending, Stackchain marks the row for verification in Gitea instead of risking an automatic duplicate. Actual time appears in planning as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. After the recap is confirmed, this recommendation handoff remains account-bound on the device through reloads, app restarts, planner cancellation, and failed plan admission. Opening **Plan Today** resumes it without reposting the recap; a successful plan save clears it, while **Discard recap feedback** removes only the handoff and leaves recap history unchanged. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
+concurrently changed plan is reported without overwriting newer work. Rescheduling Today work into
+Week Ahead uses a bounded account-scoped FIFO on the device: multiple offline moves survive reload,
+deliver oldest-first with stable operation IDs, and rebase each later move on the confirmed plan revisions
+without concurrent requests. Starting a Today work session also
+stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. An opt-in, privacy-safe lock-screen notification mirrors the current pause/resume control and adds **Finish current**: its opaque one-shot action is bound to the exact active item, reuses **Done & next** or recap, and never changes the underlying Gitea issue or pull request. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. Cross-device **Continue here** handoff transfers the bounded per-item timing ledger—not only the active item—so the receiving phone keeps the complete recap and optional time-log durations; legacy single-item sessions migrate automatically. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan without changing Gitea time entries. Eligible non-zero rows also offer an unchecked **Log Xm to Gitea** control. **Log selected time to Gitea** saves the recap and sends only those corrected durations to each canonical issue or pull request; confirmed account-scoped receipts prevent a completed row from being posted again, while definite failures retain the draft for an explicit retry. If the upstream response is lost after sending, Stackchain marks the row for verification in Gitea instead of risking an automatic duplicate. Actual time appears in planning as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. After the recap is confirmed, this recommendation handoff remains account-bound on the device through reloads, app restarts, planner cancellation, and failed plan admission. Opening **Plan Today** resumes it without reposting the recap; a successful plan save clears it, while **Discard recap feedback** removes only the handoff and leaves recap history unchanged. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
 After wrap-up, **Share day summary** opens a private review of the exact worked-on and tomorrow selections. Every row is opt-in adjustable, actual time is excluded by default, and an optional bounded note is previewed before the native share sheet or clipboard fallback. Canceling or closing keeps the account-scoped device draft; successful sharing or **Discard draft** removes it.
 
 A running issue or pull request also exposes **Add update** without advancing Today. The operator can type or dictate a progress note, review and explicitly append, replace, or discard the transcript, add up to five photo-evidence items, then save privately or admit the exact comment to durable delivery. When work is blocked, **Post blocker & move on** requires a future return time, admits the comment before any planning change, defers the item to Later, and continues the existing Today session. An admitted planning transition remains checkpointed for retry, so a storage or Today-removal failure cannot post the blocker twice. Final transcripts—not audio—are bounded to 2,000 characters and isolated by confirmed account and Today item; closing the sheet aborts listening while leaving text and photos usable.
@@ -149,7 +204,46 @@ failure preserves both the reply draft and checkpoint. Finishing or choosing **E
 unchanged. Another or unconfirmed account cannot see or resume it. Server revisions prevent delayed
 responses from replacing a newer plan; same-account browser tabs exchange fresh snapshots,
 and reconnecting or returning to the dashboard refreshes server truth after replaying queued
-offline operations. Planning edits can remain offline for up to 30 days. After that, the
+offline operations. **Plan Tomorrow** remains independent from active Today work and durably admits the exact
+ordered plan, capacity, estimates, next local date, timezone, and server revision to account-bound browser
+storage before closing on a phone. The Queues summary marks it **sync pending** while offline; reconnect,
+foreground, and midnight lifecycle checks share one delivery flight. A successful account receipt removes
+the pending copy, while a revision conflict preserves both the phone plan and fresh server snapshot for
+review. Unsynced Tomorrow work is never promoted into Today.
+**Week Ahead** opens as a read-first seven-day mobile overview, so operators can inspect the next planned day,
+work titles and references, load versus capacity, overloads, and pending sync without staging a change. When Today
+is empty and no work session is active, **Start this day early** confirms the next planned date, item count, minutes,
+and capacity before atomically moving only that day into Today; offline, pending, stale, or non-empty plans remain
+unchanged. **Edit day** enters one date and returns to the refreshed overview; **Edit week** starts the continuous
+planning pass. Closing an issue from its Week Ahead detail retires that identity and estimate from every future
+week day in one durable update while preserving sibling order and daily capacity. The open overview recalculates
+immediately; an unavailable save remains visibly **sync pending** and retries through the existing lifecycle.
+**Plan Week Ahead** continues through seven local dates and now finishes on a mobile review step instead of
+closing after the seventh save. The review shows planned minutes against each day’s capacity, marks overloads,
+and flags work assigned to more than one date. Operators can move an item to another date without copying it;
+the estimate follows the item and the server rejects duplicate cross-day assignments without advancing the
+week revision. When capacity changes create overload, **Reflow remaining week** previews a deterministic,
+order-preserving redistribution across the seven visible dates. No day exceeds its capacity or five-item limit;
+work that cannot fit is named and remains in My Work, while missing estimates block apply. Cancel performs no
+write, and apply stages one durable whole-week transition through the existing conflict-safe sync path.
+Confirmation remains disabled while duplicates exist or the account-bound week is still syncing.
+Rapid saves and review moves use one network flight plus a coalesced latest-state delivery, so later staged days
+are not stranded behind an earlier request. From the same review, **Refresh from calendar** reads a local
+`.ics` file on-device, unions overlapping busy periods within chosen working hours, and compares every current
+capacity with refreshed availability and planned load. If refreshed availability creates an overload, the review
+previews the deterministic destination of moved work and reports anything that cannot fit. One explicit
+**Apply capacities & reflow** action stages the complete seven-day plan once—there is no transient overloaded
+save—and preserves consented free windows alongside the redistributed work. A refresh that already fits keeps
+the direct one-write capacity path. IANA `TZID` values from Google and Outlook calendars are converted
+to the device's local workday, including daylight-saving transitions. Daily and weekly recurrence (`COUNT`,
+`UNTIL`, `INTERVAL`, and weekly `BYDAY`), `RDATE`/`EXDATE`, and all-day events are evaluated with work bounded
+to the seven review dates; cancelled and transparent events do not consume capacity. If a time zone is unknown,
+or a recurring event that could affect the week uses another frequency or unsupported rule part, the review
+reports only an affected-event count and disables apply rather than understating busy time. Export a simpler
+seven-day calendar to proceed. Raw calendar data and event
+metadata are never persisted, rendered in diagnostics, or sent; only the reviewed capacity-minute totals use
+the existing encrypted, account-bound Week Ahead sync.
+Planning edits can remain offline for up to 30 days. After that, the
 expired edit is discarded visibly and the account plan is kept rather than replaying stale
 intent. The server retains no more than 4,096 operation receipts per account and removes
 receipts older than the same 30-day window; client base revisions keep a pruned replay from
@@ -193,11 +287,20 @@ filesystem boundary independently of the service umask: the database directory i
 owner-only `0700`, database and SQLite sidecar files are owner-only `0600`, and symlinked database
 paths are rejected before access. Worker-shared live and Find Work snapshots add AES-256-GCM
 envelopes authenticated to their store identity (and live generation), so copied databases do not
-expose issue bodies, titles, notification metadata, or repository context. Existing plaintext
-snapshot rows migrate on their first read without changing freshness, revisions, ordering, or claim
-filters. Synchronized unfiled Draft collections use a separate AES-256-GCM key and authenticate the
-account and revision; existing plaintext rows likewise migrate on first read. Other private stores
-are not encrypted at the application layer. Web Push subscriptions use a third, independent
+expose issue bodies, titles, notification metadata, or repository context. The authored-action
+idempotency ledger encrypts both request fingerprints and confirmed upstream responses, authenticating
+each envelope to its operation key and field purpose so rows and fields cannot be substituted.
+Existing plaintext snapshot and ledger rows migrate atomically on their first read without changing
+freshness, revisions, ordering, replay, or conflict semantics. Synchronized unfiled Draft collections
+use a separate AES-256-GCM key and authenticate the account and revision; existing plaintext rows
+likewise migrate on first read. Synchronized Saved Search collections and completed Filed review
+receipts use the private-state key and authenticate each envelope to its normalized account, preventing
+rows from being substituted between operators. Existing plaintext Saved Searches migrate atomically on
+first read without advancing their revision; existing completed Filed receipts migrate transactionally at
+startup without changing order or acknowledgement state. Missing, wrong, or modified key material
+returns no saved-view or receipt content. Other private stores
+are not encrypted at the application layer. Web
+Push subscriptions use a third, independent
 AES-256-GCM key authenticated to the device session, with keyed endpoint indexes preserving
 single-device enrollment without retaining capability URLs. Existing plaintext subscriptions
 migrate atomically at startup without resetting delivery checkpoints or reminder schedules. Secure
@@ -267,11 +370,25 @@ export STACKCHAIN_PASSKEY_MAX_CHALLENGES_PER_SOURCE=10
 export STACKCHAIN_PASSKEY_MAX_CHALLENGES=10000
 # Optional; defaults to STACKCHAIN_STATE_DIR/login-attempts.sqlite3.
 export STACKCHAIN_LOGIN_ATTEMPT_DB='/var/lib/stackchain-dashboard/login-attempts.sqlite3'
-# Required for worker-shared live and Find Work snapshots. Keep this key
-# independent from the Draft key and inject the base64 encoding of exactly 32
-# random bytes from a secret manager. Never commit it. Missing, malformed,
-# wrong-key, or modified snapshot state fails closed without returning content.
+# Required for worker-shared live/Find Work snapshots, synchronized Today/Later
+# planning, Saved Search state, completed Filed review receipts, and the Security activity journal. Keep this key independent
+# from the Draft key and inject the
+# base64 encoding of exactly 32 random bytes from a secret manager. Never commit
+# it. Missing, malformed, wrong-key, or modified state fails closed without
+# returning content. Legacy Today/Later, Saved Search, and Security activity rows
+# migrate atomically on first use without changing logical revisions or journal IDs.
+# The single-key setting remains the compatible first deployment and writes v1 envelopes.
 export STACKCHAIN_PRIVATE_STATE_ENCRYPTION_KEY='<base64-encoded-32-byte-key>'
+# After all workers run keyring-capable code, configure at most four named keys and
+# select the active write key. Keep the old key present during the rolling deployment.
+# Key IDs use 1-32 letters, digits, underscores, or hyphens.
+export STACKCHAIN_PRIVATE_STATE_ENCRYPTION_KEYS='{"legacy":"<old-base64-key>","2026-08":"<new-base64-key>"}'
+export STACKCHAIN_PRIVATE_STATE_ACTIVE_KEY_ID='2026-08'
+# New writes use authenticated v2 envelopes carrying the active key ID. Rewrap every
+# shared store with the restart-safe command; output contains store-level counts only.
+# Run it again until every store reports failed=0, migrated=0, and current=total,
+# then remove the old key from every worker. Retain all keys and investigate if it exits 1.
+python3 scripts/rotate_private_state.py
 # Required for cross-device unfiled Draft sync. The single-key setting remains
 # supported for the first deployment of keyring-capable code and writes v1 envelopes.
 # Inject the base64 encoding of exactly 32 random bytes from a secret manager.
@@ -299,7 +416,8 @@ export STACKCHAIN_TRUSTED_PROXY_CIDRS='127.0.0.0/8'
 # 09:00 in the device's local timezone without opening the dashboard. Bursts send
 # three individual alerts followed by one private digest that opens Updates. A later
 # comment on an already-delivered thread triggers a fresh alert when Gitea advances
-# that thread's updated_at revision; unchanged and older snapshots remain silent.
+# that thread's updated_at revision; unchanged and older snapshots remain silent. Opt-in
+# Following alerts use generic copy and deep-link to the changed-first Following review.
 # Browser push services must resolve exclusively to public IP addresses. Stackchain
 # validates endpoints at enrollment and again before delivery, rejects redirects,
 # and removes legacy subscriptions that resolve to private or reserved networks.
@@ -384,8 +502,13 @@ place, their live sessions remain valid, and their idle clock starts at migratio
 The same sheet includes **Security activity**, a reverse-chronological journal of
 successful token/passkey sign-ins, passkey enrollments, sign-outs, remote device
 revocations, issue closures, and pull-request merges. The separate SQLite journal
-retains at most 10,000 events for 90 days and stores only bounded device labels and
-action targets. It never stores access tokens, cookies, session/CSRF values,
+retains at most 10,000 events for 90 days. Its bounded event kind, authentication
+method, device label, and action target are sealed at rest with the private-state
+encryption key and authenticated against the immutable event ID. Legacy plaintext
+journals migrate atomically without changing IDs, timestamps, order, or pending
+operations. Missing or wrong key material and modified ciphertext fail closed with
+no partial activity response. The journal never stores access tokens, cookies,
+session/CSRF values,
 credential IDs, public keys, challenges, attestation data, raw network addresses,
 request bodies, or comment content. Keep its database on the same class of persistent,
 writable storage as the session registry. Before passkey credential creation, session
@@ -453,6 +576,11 @@ is assembled in source order into one content-addressed JavaScript response. Das
 HTML and the offline worker reference that exact fingerprint, while the runtime receives
 immutable caching and HTML/worker responses remain revalidated. The stylesheet and
 fingerprinted runtime are same-origin assets included atomically in the offline PWA shell.
+Device Setup also checks whether the browser has granted persistent storage without prompting.
+Choose **Protect offline work** to request protection from automatic storage-pressure eviction;
+Stackchain reports **Protected**, **Best effort**, **Denied**, or an unavailable/retryable state
+truthfully. Offline work continues when protection is unavailable or denied, but the browser may
+remove best-effort data, so persistence does not replace backups or device security.
 Use **Sign out & clear this device** on shared devices; it clears Stackchain's
 offline snapshots, drafts, outboxes, background IndexedDB, and PWA caches without
 removing unrelated forge preferences. Rotate either dashboard secret by replacing

docs/ops-fundamentals.md

@@ -23,3 +23,20 @@
 - API contracts + versioning
 - independent deployability
 - observability: metrics, traces, structured logs
+
+# Disk capacity incident
+
+Root filesystem usage at or above 85% is an operations incident.
+
+1. Capture the initial state with `df -h / /var/lib/gitea`.
+2. Inspect directory sizes and active processes before cleanup. Reclaim only
+   disposable caches and abandoned temporary environments. Responders must not
+   delete Gitea data, repositories, databases, secrets, or active release
+   artifacts.
+3. Re-run `df -h / /var/lib/gitea`; usage must be below 85%.
+4. Confirm the release path with `systemctl is-active gitea act_runner`, then run
+   the repository test suite.
+
+Record the before and after usage in the incident ticket. If safe cleanup cannot
+restore capacity below 85%, keep the incident open and escalate storage
+expansion rather than removing durable data.

frontend/create-pull-sheet.js

@@ -0,0 +1,203 @@
+function createController({request, storage, login, createId = () => globalThis.crypto?.randomUUID?.() || String(Date.now())}) {
+  const storageKey = 'stackchain.create-pull.v1.' + String(login || '').toLowerCase();
+  let operationId = createId();
+  let current = {
+    repository:'', branches:[], head:'', base:'', expected_head_sha:'',
+    title:'', body:'', draft:true,
+  };
+  try {
+    const saved = JSON.parse(storage?.getItem?.(storageKey) || 'null');
+    if (saved && typeof saved === 'object') {
+      for (const field of ['repository', 'head', 'base', 'title', 'body']) {
+        if (typeof saved[field] === 'string') current[field] = saved[field];
+      }
+      if (typeof saved.draft === 'boolean') current.draft = saved.draft;
+    }
+  } catch (_) {}
+
+  function snapshot() {
+    return JSON.parse(JSON.stringify(current));
+  }
+
+  function persist() {
+    storage?.setItem?.(storageKey, JSON.stringify({
+      repository:current.repository, head:current.head, base:current.base,
+      title:current.title, body:current.body, draft:current.draft,
+    }));
+  }
+
+  async function selectRepository(repository) {
+    const options = await request('api/v1/repos/' + repository + '/pull-creation-options');
+    const branches = Array.isArray(options?.branches) ? options.branches : [];
+    const base = branches.some(branch => branch.name === options.default_branch) ? options.default_branch : (branches[0]?.name || '');
+    const headBranch = branches.find(branch => branch.name !== base) || branches[0] || {};
+    current = {
+      ...current, repository, branches, base,
+      head:headBranch.name || '', expected_head_sha:headBranch.sha || '',
+    };
+    persist();
+    return snapshot();
+  }
+
+  function update(values) {
+    current = {...current, ...values};
+    if (Object.prototype.hasOwnProperty.call(values, 'head')) {
+      current.expected_head_sha = current.branches.find(branch => branch.name === values.head)?.sha || '';
+    }
+    persist();
+    return snapshot();
+  }
+
+  async function submit() {
+    const result = await request('api/v1/repos/' + current.repository + '/pulls', {
+      method:'POST',
+      headers:{'Idempotency-Key':operationId},
+      body:{
+        head:current.head, base:current.base, title:current.title, body:current.body,
+        draft:current.draft, expected_head_sha:current.expected_head_sha,
+      },
+    });
+    operationId = createId();
+    return result;
+  }
+
+  return {
+    state:snapshot,
+    selectRepository,
+    update,
+    submit,
+  };
+}
+
+function createBinding({controller, render, status, onCreated}) {
+  return {
+    async repositoryChanged(repository) {
+      status('Loading branches…');
+      try {
+        const state = await controller.selectRepository(repository);
+        render(state);
+        status(state.branches.length ? 'Choose the source and base branches.' : 'No branches are available.');
+        return state;
+      } catch (error) {
+        status(error.message || 'Branches could not be loaded.');
+        throw error;
+      }
+    },
+    changed(values) {
+      const state = controller.update(values);
+      render(state);
+      return state;
+    },
+    async submit() {
+      status('Creating pull request…');
+      try {
+        const result = await controller.submit();
+        status(result.existing ? `Pull request #${result.number} is already open.` : `Pull request #${result.number} created.`);
+        onCreated(result);
+        return result;
+      } catch (error) {
+        status(error.message || 'The pull request could not be created. Your draft is safe.');
+        throw error;
+      }
+    },
+  };
+}
+
+async function bindDashboard() {
+  const qs = selector => document.querySelector(selector);
+  const switchButton = qs('#switch-to-create-pull');
+  switchButton.disabled = true;
+  const identityResponse = await fetch('api/v1/background-identity').catch(()=>null);
+  const identity = await identityResponse?.json().catch(()=>({}));
+  if (!identityResponse?.ok || !identity?.login) {
+    switchButton.title = 'Account identity is unavailable.';
+    return null;
+  }
+  const login = identity.login;
+  const root = qs('#create-pull-sheet');
+  const repository = qs('#create-pull-repository');
+  const head = qs('#create-pull-head');
+  const base = qs('#create-pull-base');
+  const title = qs('#create-pull-title');
+  const body = qs('#create-pull-body');
+  const submit = qs('#submit-create-pull');
+  const request = async (url, options) => {
+    const response = await fetch(url, options ? {
+      method:options.method,
+      headers:{'Content-Type':'application/json', ...options.headers},
+      body:JSON.stringify(options.body),
+    } : undefined);
+    const payload = await response.json().catch(()=>({}));
+    if (!response.ok) throw new Error(payload.error || payload.detail || 'Request failed.');
+    return payload;
+  };
+  const controller = createController({request, storage:localStorage, login});
+  const setOptions = (select, branches) => {
+    select.replaceChildren(...branches.map(branch => {
+      const option = document.createElement('option');
+      option.value = option.textContent = branch.name;
+      return option;
+    }));
+  };
+  const render = state => {
+    setOptions(head, state.branches);
+    setOptions(base, state.branches);
+    head.value = state.head;
+    base.value = state.base;
+    head.disabled = base.disabled = !state.branches.length;
+    qs('#create-pull-head-receipt').textContent = state.expected_head_sha ? 'Source at ' + state.expected_head_sha.slice(0, 12) : '';
+    submit.disabled = !(state.repository && state.head && state.base && state.head !== state.base && title.value.trim());
+  };
+  const binding = createBinding({
+    controller, render,
+    status:message=>{ qs('#create-pull-status').textContent = message; },
+    onCreated:result=>{
+      root.hidden = true;
+      qs('main').inert = false;
+      location.hash = '#/my-work/pull/' + result.repository + '/' + result.number;
+      location.reload();
+    },
+  });
+  const update = () => binding.changed({
+    head:head.value, base:base.value, title:title.value, body:body.value,
+    draft:document.querySelector('input[name="create-pull-mode"]:checked')?.value !== 'ready',
+  });
+  repository.addEventListener('change', () => binding.repositoryChanged(repository.value).catch(()=>{}));
+  [head,base,title,body].forEach(field => field.addEventListener('input', update));
+  document.querySelectorAll('input[name="create-pull-mode"]').forEach(field => field.addEventListener('change', () => {
+    update();
+    submit.textContent = field.value === 'ready' && field.checked ? 'Create ready pull request' : 'Create draft pull request';
+  }));
+  qs('#create-pull-form').addEventListener('submit', event => {
+    event.preventDefault();
+    update();
+    binding.submit().catch(()=>{});
+  });
+  const close = () => {
+    root.hidden = true;
+    qs('main').inert = false;
+    qs('#new-issue').focus();
+  };
+  qs('#cancel-create-pull').addEventListener('click', close);
+  switchButton.addEventListener('click', () => {
+    qs('#cancel-new-issue').click();
+    repository.replaceChildren(...Array.from(qs('#create-issue-repository').options).map(source => {
+      const option = document.createElement('option');
+      option.value = source.value;
+      option.textContent = source.textContent;
+      return option;
+    }));
+    root.hidden = false;
+    qs('main').inert = true;
+    qs('#cancel-create-pull').focus();
+  });
+  root.addEventListener('keydown', event => {
+    if (event.key === 'Escape') { event.preventDefault(); close(); }
+  });
+  switchButton.disabled = false;
+  return binding;
+}
+
+const cp = {createController, createBinding, b:bindDashboard};
+if (typeof module !== 'undefined') module.exports = cp;
+else cp.b();

frontend/dashboard.css

@@ -6,12 +6,22 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .toolbar { display:flex; gap:10px; align-items:center; flex-wrap:wrap; }
 .app-brand { display:flex; align-items:center; gap:6px; white-space:nowrap; }
 .app-live-status { display:inline-flex; gap:6px; align-items:center; min-height:44px; padding:6px 10px; background:transparent; border-color:transparent; }
+.sign-out-review-sheet { position:fixed; inset:0; z-index:112; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.sign-out-review-sheet[hidden] { display:none; }
+.sign-out-review-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #b45309; border-radius:18px 18px 0 0; background:#0b1526; overflow-wrap:anywhere; }
+.sign-out-review-panel h2 { margin:.25rem 0; }
+.sign-out-review-warning { color:#fbbf24; }
+.sign-out-review-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; margin-top:16px; }
+.sign-out-review-actions button { min-height:44px; width:100%; }
+#confirm-sign-out { border-color:#b45309; }
+@media (max-width:359px) { .sign-out-review-actions { grid-template-columns:1fr; } }
 .live-data-status-sheet { position:fixed; inset:0; z-index:96; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .live-data-status-sheet[hidden] { display:none; }
 .live-data-status-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #31577f; border-radius:18px 18px 0 0; background:#0b1526; }
 .live-data-status-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .live-data-status-header h2, .live-data-status-header p { margin-top:0; }
 .live-data-status-header button, .live-data-status-actions button { min-height:44px; }
+.live-data-status-today-paused { padding:10px 12px; border:1px solid #4ade80; border-radius:10px; color:#bbf7d0; background:#10291e; }
 .issue-filing-receipt { position:fixed; inset:0; z-index:108; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .issue-filing-receipt[hidden] { display:none; }
 .release-receipt-sheet { position:fixed; inset:0; width:100%; max-width:none; height:100%; max-height:none; margin:0; padding:0; border:0; background:rgba(5,12,21,.82); color:#e5e7eb; }
@@ -25,7 +35,20 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .release-watchlist-item { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:10px; padding:10px; border:1px solid #334155; border-radius:10px; }
 .release-watchlist-item > div { display:grid; min-width:0; gap:3px; overflow-wrap:anywhere; }
 .release-watchlist-item > button { width:auto; min-width:88px; }
-@media (max-width:359px) { .release-receipt-actions { grid-template-columns:1fr; } }
+.release-watchlist-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; min-width:min(240px,46vw); }
+.release-watchlist-actions > button { min-height:44px; width:100%; }
+.release-branch-cleanup-status { color:#cbd5e1; }
+.release-failure-summary { display:grid; gap:8px; min-width:0; margin-top:8px; padding-top:8px; border-top:1px solid #334155; overflow-x:hidden; }
+.release-failure-summary > button { min-height:44px; }
+.release-failure-recovery { display:grid; gap:8px; min-width:0; padding:10px; border:1px solid #7f1d1d; border-radius:8px; background:#180f17; overflow-x:hidden; }
+.release-failure-recovery pre { box-sizing:border-box; max-width:100%; max-height:32dvh; margin:0; padding:10px; overflow:auto; white-space:pre-wrap; overflow-wrap:anywhere; background:#07101d; }
+.release-failure-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; min-width:0; }
+.release-failure-actions > button, .release-failure-actions > a { min-height:44px; width:100%; }
+@media (max-width:359px) {
+  .release-receipt-actions, .release-watchlist-actions, .release-failure-actions { grid-template-columns:1fr; }
+  .release-watchlist-item { grid-template-columns:1fr; }
+  .release-watchlist-actions { min-width:0; width:100%; }
+}
 .issue-filing-receipt-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #4ade80; border-radius:18px 18px 0 0; background:#0b1526; overflow-wrap:anywhere; }
 .issue-filing-receipt-panel h2, .issue-filing-receipt-panel h3 { margin:.25rem 0; }
 .issue-filing-receipt-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; margin-top:16px; }
@@ -40,6 +63,20 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .app-menu-panel { display:flex; gap:10px; align-items:center; flex-wrap:wrap; }
 #open-insights { display:none; }
 button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #2a496e; color:#e5e7eb; padding:8px 12px; border-radius:10px; cursor:pointer; }
+.search-week-plan-sheet { position:fixed; inset:0; z-index:118; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.search-week-plan-sheet[hidden] { display:none; }
+.search-week-plan-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #60a5fa; border-radius:18px 18px 0 0; background:#0b1526; }
+.search-week-plan-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.search-week-plan-panel h2 { margin:.2rem 0; }
+.search-week-plan-panel fieldset { min-width:0; margin:12px 0; padding:0; border:0; }
+.search-week-plan-days { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.search-week-plan-days button { display:grid; min-width:0; min-height:44px; text-align:left; overflow-wrap:anywhere; }
+.search-week-plan-days button[aria-pressed="true"] { border-color:#60a5fa; box-shadow:0 0 0 1px #60a5fa inset; }
+.search-week-plan-days small { color:#9fb3c8; }
+.search-week-plan-estimate { display:grid; gap:6px; }
+.search-week-plan-estimate input, #confirm-search-week-plan, #cancel-search-week-plan { box-sizing:border-box; min-height:44px; }
+#confirm-search-week-plan { width:100%; }
+@media (max-width:359px) { .search-week-plan-days { grid-template-columns:1fr; } }
 .notification-undo { position:fixed; }
 .notification-undo button { min-height:44px; }
 .notification-undo, .today-completion-undo { position:fixed; z-index:110; left:50%; bottom:calc(88px + env(safe-area-inset-bottom)); transform:translateX(-50%); box-sizing:border-box; width:min(520px,calc(100vw - 24px)); display:flex; align-items:center; justify-content:space-between; gap:12px; padding:10px 12px; border:1px solid #60a5fa; border-radius:12px; background:#10233d; box-shadow:0 12px 36px rgba(0,0,0,.5); overflow-wrap:anywhere; }
@@ -188,6 +225,13 @@ textarea { resize: vertical; min-height: 120px; }
 .search-batch-estimate-review input { min-height:44px; width:76px; }
 .search-batch-estimate-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding-bottom:env(safe-area-inset-bottom); background:#101f36; }
 .search-batch-estimate-actions button { min-height:44px; }
+.search-week-batch-review { display:grid; gap:12px; max-height:calc(100dvh - 48px); overflow:auto; overflow-x:hidden; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; }
+.search-week-batch-review[hidden] { display:none; }
+.search-week-batch-review > div:first-child, #search-week-batch-list { display:grid; gap:10px; }
+.search-week-batch-row { display:grid; gap:8px; padding:10px 0; border-bottom:1px solid #2a496e; overflow-wrap:anywhere; }
+.search-week-batch-row-controls { display:grid; grid-template-columns:minmax(0,1fr) minmax(96px,.45fr); gap:8px; }
+.search-week-batch-row select, .search-week-batch-row input, .search-week-batch-actions button { min-height:44px; width:100%; }
+.search-week-batch-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding-bottom:env(safe-area-inset-bottom); background:#101f36; }
 .search-release-review { display:grid; gap:12px; max-height:calc(100dvh - 48px); overflow:auto; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; overflow-wrap:anywhere; }
 .search-release-review[hidden] { display:none; }
 .search-release-review > div:first-child, #search-release-list, .search-release-row { display:grid; gap:6px; }
@@ -210,6 +254,8 @@ textarea { resize: vertical; min-height: 120px; }
 .offline-status[hidden] { display:none; }
 .offline-work-controls { display:flex; gap:10px; align-items:center; flex-wrap:wrap; width:100%; padding-top:2px; }
 .offline-work-controls label { display:flex; gap:8px; align-items:center; min-height:44px; }
+.app-badge-setting { display:flex; gap:8px; align-items:center; flex-wrap:wrap; }
+.app-badge-control { min-height:44px; }
 .push-update-control { min-height:44px; }
 .offline-work-controls input { width:20px; height:20px; }
 .offline-work-controls button { min-height:44px; }
@@ -231,6 +277,179 @@ textarea { resize: vertical; min-height: 120px; }
 .plan-today-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .plan-today-header h2, .plan-today-header p { margin-top:0; }
 .plan-today-header button { min-width:44px; min-height:44px; }
+.week-plan-progress { margin:8px 0 4px; color:#bfdbfe; font-weight:700; }
+.week-plan-dates { display:flex; gap:8px; margin:8px 0 12px; padding:2px 0 8px; overflow-x:auto; overscroll-behavior-inline:contain; }
+.week-plan-dates[hidden] { display:none; }
+.week-plan-dates button { min-height:44px; min-width:86px; flex:0 0 auto; padding:6px 10px; }
+.week-plan-dates button[aria-current="date"] { color:#bfdbfe; background:#17365a; border-color:#60a5fa; }
+.today-week-reschedule { box-sizing:border-box; width:100%; max-width:none; height:100%; max-height:none; margin:0; padding:0; border:0; background:rgba(5,12,21,.82); color:inherit; }
+.today-week-reschedule::backdrop { background:rgba(5,12,21,.82); }
+.today-week-reschedule-panel { width:min(100%,560px); box-sizing:border-box; min-height:100%; margin-left:auto; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; overflow-x:hidden; }
+.today-week-reschedule-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.today-week-reschedule-panel h2, .today-week-reschedule-panel header p { margin-top:0; }
+.today-week-reschedule-panel input { box-sizing:border-box; width:100%; min-height:44px; margin:6px 0 10px; font-size:16px; }
+.today-week-reschedule-days { display:grid; gap:8px; margin:14px 0; }
+.today-week-reschedule-days button { min-height:44px; display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; text-align:left; overflow-wrap:anywhere; }
+.today-week-reschedule-days button[aria-checked="true"] { border-color:#60a5fa; background:#17365a; color:#eff6ff; }
+.today-week-reschedule-days button:disabled { opacity:.58; }
+#cancel-today-week-reschedule { min-height:44px; }
+#confirm-today-week-reschedule { position:sticky; bottom:0; width:100%; min-height:48px; }
+#today-week-reschedule-status { min-height:1.4em; color:#fde68a; }
+.back-to-week-review { width:100%; min-height:44px; margin:4px 0 12px; }
+.tomorrow-conflict-review { margin-top:14px; }
+.tomorrow-conflict-plans { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:12px; }
+.tomorrow-conflict-plans > section { min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.tomorrow-conflict-plans h4 { margin:0 0 8px; }
+.tomorrow-conflict-plan-summary { margin:0 0 8px; color:#bfdbfe; }
+.tomorrow-conflict-plan-list { margin:0; padding-left:22px; overflow-wrap:anywhere; }
+.tomorrow-conflict-plan-list li + li { margin-top:6px; }
+.tomorrow-conflict-actions { display:flex; gap:8px; margin-top:14px; }
+.tomorrow-conflict-actions button { min-height:44px; flex:1 1 0; }
+.tomorrow-conflict-status { min-height:1.4em; margin-top:8px; }
+.plan-today-sheet.tomorrow-conflict-mode .mobile-plan-today-nav,
+.plan-today-sheet.tomorrow-conflict-mode #plan-today-fit,
+.plan-today-sheet.tomorrow-conflict-mode #plan-today-selected,
+.plan-today-sheet.tomorrow-conflict-mode #plan-today-available-work,
+.plan-today-sheet.tomorrow-conflict-mode .plan-today-actions { display:none; }
+@media (max-width:480px) {
+  .tomorrow-conflict-plans { grid-template-columns:1fr; }
+  .tomorrow-conflict-actions { flex-direction:column; }
+}
+.week-conflict-review { margin-top:14px; }
+.week-conflict-plans { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:12px; }
+.week-conflict-plans > section { min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.week-conflict-plans h4 { margin:0 0 8px; }
+.week-conflict-day { margin:0 0 10px; padding-bottom:10px; border-bottom:1px solid #31577f; }
+.week-conflict-day:last-child { margin-bottom:0; padding-bottom:0; border-bottom:0; }
+.week-conflict-day strong { display:block; color:#bfdbfe; }
+.week-conflict-actions { display:flex; gap:8px; margin-top:14px; }
+.week-conflict-actions button { min-height:44px; flex:1 1 0; }
+.week-conflict-days { display:grid; gap:12px; }
+.week-conflict-date { min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.week-conflict-date h4 { margin:0 0 8px; color:#bfdbfe; }
+.week-conflict-choice { min-height:44px; display:flex; align-items:center; gap:10px; padding:8px; border-radius:8px; }
+.week-conflict-choice:has(input:checked) { background:#17365a; outline:1px solid #60a5fa; }
+.week-conflict-choice input { min-width:20px; min-height:20px; }
+.week-conflict-choice span { display:grid; min-width:0; }
+.week-conflict-choice small { color:#a9bdd3; }
+#save-merged-week { width:100%; min-height:44px; margin-top:14px; }
+.week-conflict-status { min-height:1.4em; margin-top:8px; }
+.plan-today-sheet.week-conflict-mode .week-plan-dates,
+.plan-today-sheet.week-conflict-mode .mobile-plan-today-nav,
+.plan-today-sheet.week-conflict-mode #plan-today-fit,
+.plan-today-sheet.week-conflict-mode #plan-today-selected,
+.plan-today-sheet.week-conflict-mode #plan-today-available-work,
+.plan-today-sheet.week-conflict-mode .plan-today-actions { display:none; }
+@media (max-width:480px) {
+  .week-conflict-plans { grid-template-columns:1fr; }
+  .week-conflict-actions { flex-direction:column; }
+}
+.week-pull-conflict-review { min-width:0; margin-top:14px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); overflow-wrap:anywhere; }
+.week-pull-conflict-item { margin-bottom:6px; color:#eff6ff; font-weight:700; }
+.week-pull-conflict-actions { display:flex; gap:8px; margin-top:14px; }
+.week-pull-conflict-actions button { min-height:44px; flex:1 1 0; }
+.week-pull-conflict-status { min-height:1.4em; margin-top:8px; }
+@media (max-width:480px) { .week-pull-conflict-actions { flex-direction:column; } }
+.week-review { margin-top:14px; }
+.week-review h2 { margin-bottom:6px; }
+.week-review-days { display:grid; gap:12px; }
+.week-review-day { padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.week-review-day.is-overloaded { border-color:#f59e0b; background:#2a1c12; }
+.week-review-day.is-next-up { border-color:#60a5fa; box-shadow:0 0 0 1px #60a5fa inset; }
+.week-next-up { display:inline-block; margin-left:6px; padding:2px 7px; border-radius:999px; background:#1d4f7a; color:#dbeafe; font-size:11px; vertical-align:middle; }
+.week-review-day header { display:flex; align-items:center; justify-content:space-between; gap:8px; }
+.week-review-day header button { flex:0 0 auto; min-height:44px; }
+.week-review-day h3, .week-review-day p { margin:0 0 8px; }
+.week-review-load { color:#bfdbfe; font-weight:700; }
+.week-review-day ul { display:grid; gap:10px; margin:0; padding:0; list-style:none; }
+.week-review-day li { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; align-items:end; padding-top:8px; border-top:1px solid #31577f; overflow-wrap:anywhere; }
+.week-review-item-copy { display:grid; min-width:0; gap:3px; }
+.week-review-item-open { display:block; width:100%; min-width:0; min-height:44px; padding:8px; border:0; border-radius:8px; background:transparent; color:inherit; text-align:left; }
+.week-review-item-open:hover { background:#173453; }
+.week-review-item-open:focus-visible { outline:3px solid #93c5fd; outline-offset:2px; }
+.week-review-unplan { width:100%; min-height:44px; border-color:#6b87a6; background:transparent; color:#d7e5f5; }
+.week-review-pull { grid-column:1/-1; width:100%; min-height:44px; border-color:#60a5fa; background:#1d4f7a; color:#eff6ff; font-weight:800; }
+.week-review-unplan { grid-column:1/-1; }
+.week-unplan-receipt { margin:12px 0 6px; padding:10px 12px; border:1px solid #60a5fa; border-radius:10px; background:#112d4d; color:#dbeafe; }
+#undo-week-unplan { width:100%; min-height:44px; margin-bottom:8px; border-color:#60a5fa; background:#1d4f7a; color:#eff6ff; font-weight:800; }
+.week-start-early { display:block; width:100%; min-height:44px; margin-top:12px; border-color:#60a5fa; background:#1d4f7a; color:#eff6ff; font-weight:800; }
+.week-start-early:focus-visible { outline:3px solid #bfdbfe; outline-offset:2px; }
+.week-review-item-copy strong, .week-review-item-copy small { overflow-wrap:anywhere; }
+.week-review-item-copy small { color:#a9bdd3; }
+.week-review-move { display:flex; align-items:end; gap:8px; }
+.week-review-day label { display:grid; gap:4px; font-size:12px; }
+.week-review-day select, .week-review-day button { min-height:44px; }
+.week-review-day button { min-height:44px; }
+.week-review-duplicates { margin:12px 0; padding:12px; border:1px solid #f59e0b; border-radius:10px; background:#2a1c12; }
+.week-review-status { min-height:1.4em; margin:10px 0; }
+.week-offline-snapshot { margin:10px 0 8px; padding:10px 12px; border:1px solid #f59e0b; border-radius:10px; background:#2a1c12; color:#fde68a; overflow-wrap:anywhere; }
+#retry-week-live { min-height:44px; width:100%; margin-bottom:8px; border-color:#f59e0b; }
+#confirm-week-plan { width:100%; min-height:48px; position:sticky; bottom:0; }
+#edit-week-plan { width:100%; min-height:48px; position:sticky; bottom:0; }
+#export-saved-week-calendar { width:100%; min-height:48px; margin:0 0 8px; }
+#open-week-capacity-import { width:100%; min-height:44px; margin:8px 0 12px; }
+#open-week-reflow { width:100%; min-height:48px; margin:0 0 12px; border-color:#60a5fa; }
+.week-reflow-review { box-sizing:border-box; width:100%; margin:0 0 14px; padding:14px; border:1px solid #60a5fa; border-radius:12px; background:#10233d; overflow-x:hidden; }
+.week-reflow-review h3 { margin:.25rem 0; }
+.week-reflow-days { display:grid; gap:6px; margin:12px 0; }
+.week-reflow-day { display:flex; justify-content:space-between; gap:10px; min-width:0; padding:8px; border-radius:8px; background:#0b1526; overflow-wrap:anywhere; }
+.week-reflow-unscheduled { min-height:1.4em; color:#fde68a; overflow-wrap:anywhere; }
+.week-reflow-actions { display:grid; grid-template-columns:1fr 2fr; gap:8px; margin-top:12px; }
+.week-reflow-actions button { min-width:0; min-height:48px; }
+.week-capacity-import { position:fixed; z-index:121; inset:0; box-sizing:border-box; width:100%; max-width:560px; margin-inline:auto; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; overflow:auto; overflow-x:hidden; }
+.week-capacity-import[hidden] { display:none; }
+.week-capacity-import > header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.week-capacity-import h2 { margin:.2rem 0; }
+.week-capacity-import > label, .week-capacity-hours label { display:grid; min-width:0; gap:6px; margin:12px 0; }
+.week-capacity-import input, .week-capacity-import button { box-sizing:border-box; min-width:0; min-height:44px; max-width:100%; }
+.week-capacity-hours { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:10px; }
+.week-capacity-days { display:grid; gap:8px; margin:10px 0 14px; }
+.week-capacity-day { display:grid; min-width:0; gap:3px; padding:10px; border:1px solid #31577f; border-radius:10px; background:#10233a; overflow-wrap:anywhere; }
+.week-capacity-day span { color:#bfdbfe; font-weight:700; }
+.week-capacity-day small { color:#a9bdd3; }
+.week-capacity-day.is-overloaded { border-color:#f59e0b; background:#2a1c12; }
+.week-capacity-day .week-capacity-over { color:#fde68a; font-weight:700; }
+.week-free-times-consent { display:flex; align-items:flex-start; gap:10px; min-width:0; margin:12px 0; padding:10px; border:1px solid #31577f; border-radius:10px; }
+.week-free-times-consent input { flex:0 0 44px; width:44px; margin:0; }
+.week-free-times-consent span { display:grid; min-width:0; gap:4px; overflow-wrap:anywhere; }
+.week-free-times-consent small { color:#a9bdd3; }
+#apply-week-capacities { width:100%; min-height:48px; position:sticky; bottom:0; }
+.week-availability-editor { margin:12px 0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+#open-week-availability { min-height:44px; }
+.week-availability-editor h3 { margin-top:0; }
+.week-availability-grid { display:grid; grid-template-columns:1fr; gap:8px; }
+.week-availability-grid label { display:grid; grid-template-columns:minmax(0,1fr) minmax(92px,120px); gap:10px; align-items:center; }
+.week-availability-grid input { min-height:44px; min-width:0; box-sizing:border-box; }
+.week-availability-actions { display:grid; grid-template-columns:1fr; gap:8px; margin-top:12px; }
+.week-availability-actions button { min-height:44px; }
+@media (min-width:600px) { .week-availability-grid { grid-template-columns:repeat(2,minmax(0,1fr)); } .week-availability-actions { grid-template-columns:repeat(3,minmax(0,1fr)); } }
+@media (max-width:359px) { .week-capacity-hours { grid-template-columns:1fr; } }
+.week-calendar-handoff h2 { margin-bottom:6px; }
+.week-calendar-days { display:grid; gap:12px; margin:14px 0; }
+.week-calendar-day { min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.week-calendar-day header { display:flex; align-items:center; justify-content:space-between; gap:12px; }
+.week-calendar-day h3 { margin:0; }
+.week-calendar-day input[type="time"] { min-height:44px; font-size:16px; }
+.week-calendar-item { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:10px; align-items:center; min-width:0; padding:8px 0; overflow-wrap:anywhere; }
+.week-calendar-choice { display:grid; grid-template-columns:auto minmax(0,1fr); gap:10px; align-items:center; min-height:44px; }
+.week-calendar-choice input { width:22px; height:22px; }
+.week-calendar-choice span { display:grid; gap:3px; }
+.week-calendar-time { display:grid; gap:2px; font-size:12px; font-weight:700; }
+.week-calendar-time input { box-sizing:border-box; width:7.5rem; min-height:44px; font-size:16px; }
+.week-calendar-item small { color:#a9bdd3; }
+.week-calendar-status { min-height:1.4em; margin:10px 0; }
+.week-calendar-actions { position:sticky; bottom:0; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; padding-bottom:env(safe-area-inset-bottom); background:#0b1526; }
+.week-calendar-actions button { min-width:0; min-height:48px; }
+@media(max-width:359px) { .week-calendar-item, .week-calendar-actions { grid-template-columns:1fr; } .week-calendar-time input { width:100%; } }
+.plan-today-sheet.week-review-mode .week-plan-dates,
+.plan-today-sheet.week-review-mode .mobile-plan-today-nav,
+.plan-today-sheet.week-review-mode #plan-today-fit,
+.plan-today-sheet.week-review-mode #plan-today-selected,
+.plan-today-sheet.week-review-mode #plan-today-available-work,
+.plan-today-sheet.week-review-mode .plan-today-actions { display:none; }
+@media (max-width:480px) {
+  .week-review-day li { grid-template-columns:1fr; }
+}
 .mobile-plan-today-nav { position:sticky; top:0; z-index:5; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:4px; margin:0 -18px 10px; padding:4px 18px; background:rgba(11,21,38,.98); border-block:1px solid #2a496e; }
 .mobile-plan-today-nav button { min-width:0; min-height:44px; padding:4px; border-color:transparent; font-size:12px; }
 .mobile-plan-today-nav button[aria-current="location"] { color:#bfdbfe; background:#17365a; border-color:#31577f; }
@@ -367,8 +586,14 @@ textarea { resize: vertical; min-height: 120px; }
 .today-summary-note { display:grid; gap:6px; margin:14px 0; font-weight:700; }
 .today-summary-note textarea { box-sizing:border-box; width:100%; min-height:88px; resize:vertical; }
 .today-summary-preview { min-height:72px; white-space:pre-wrap; overflow-wrap:anywhere; padding:12px; border:1px solid #31577f; border-radius:10px; background:#07101e; color:#e8f1ff; }
-.today-summary-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
+.today-summary-destination { margin-top:14px; overflow-wrap:anywhere; padding:12px; border:1px solid #31577f; border-radius:10px; background:#0d1c31; }
+.today-summary-destination h3 { margin-top:0; }
+.today-summary-destination-controls { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; }
+.today-summary-destination-controls input, .today-summary-destination-controls button { box-sizing:border-box; min-width:0; min-height:44px; }
+.today-summary-target { min-height:1.4em; margin-top:8px; }
+.today-summary-actions { position:sticky; bottom:0; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .today-summary-actions button { min-height:44px; width:100%; }
+@media (max-width:420px) { .today-summary-destination-controls, .today-summary-actions { grid-template-columns:1fr; } }
 .today-handoff-dialog { box-sizing:border-box; width:min(620px,100%); max-width:none; max-height:100dvh; margin:auto auto 0; padding:0; color:#e8f1ff; border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
 .today-handoff-dialog::backdrop { background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .today-handoff-panel { max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); }
@@ -580,6 +805,17 @@ textarea { resize: vertical; min-height: 120px; }
 .ci-check-copy { min-width:0; display:grid; gap:3px; overflow-wrap:anywhere; }
 .ci-check-copy strong, .ci-check-copy span { min-width:0; overflow-wrap:anywhere; }
 .ci-check-link { min-height:44px; display:flex; align-items:center; justify-content:center; padding:0 10px; border:1px solid #60a5fa; border-radius:8px; white-space:nowrap; }
+.ci-check-actions { display:flex; flex-wrap:wrap; align-items:center; justify-content:flex-end; gap:6px; min-height:44px; }
+.ci-check-inspect { min-height:44px; white-space:nowrap; }
+.ci-check-recovery { max-width:100%; min-width:0; margin:0 8px 8px; padding:10px; border:1px solid #dc2626; border-radius:8px; background:#101b2e; }
+.ci-check-recovery[hidden] { display:none; }
+.ci-check-recovery h3 { margin:0 0 6px; overflow-wrap:anywhere; }
+.ci-check-log { max-width:100%; max-height:42vh; margin:8px 0; padding:10px; overflow-x:auto; overflow-y:auto; border:1px solid #2a496e; border-radius:6px; background:#07101d; color:#dbeafe; font-size:.78rem; white-space:pre; }
+.ci-check-recovery-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding-top:6px; background:#101b2e; }
+.ci-check-recovery-actions button { min-height:44px; }
+.pull-branch-update { max-width:100%; min-width:0; margin:10px 0; padding:12px; border:1px solid #60a5fa; border-radius:10px; overflow-wrap:anywhere; }
+.pull-branch-update h3 { margin:0 0 6px; }
+.pull-branch-update button { width:100%; min-height:44px; }
 .update-sheet { position:fixed; inset:0; z-index:55; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .update-sheet.open { display:flex; }
 .update-sheet-panel { width:min(560px,100%); height:100%; overflow:auto; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
@@ -614,6 +850,7 @@ textarea { resize: vertical; min-height: 120px; }
 .update-decision-bar button, .update-decision-bar summary { min-height:44px; min-width:0; padding-inline:6px; }
 .update-retry { min-height:44px; width:100%; margin-top:10px; }
 .issue-sheet { position:fixed; inset:0; z-index:56; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
+.task-overlay-open .issue-sheet.open, .task-overlay-open .pull-sheet.open { z-index:76; }
 .issue-sheet.open { display:flex; }
 .issue-sheet-panel { width:min(560px,100%); height:100%; overflow:auto; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
 .issue-sheet-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
@@ -742,16 +979,25 @@ textarea { resize: vertical; min-height: 120px; }
 .filed-claim-actions button { min-width:0; min-height:44px; }
 .issue-sheet-actions { position:sticky; bottom:0; z-index:3; display:grid; gap:8px; margin-top:14px; padding:10px 4px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .issue-sheet-actions button, .issue-sheet-actions a { min-height:44px; display:flex; align-items:center; justify-content:center; }
+.issue-sheet-actions #watch-issue-detail, .pull-sheet-actions #watch-pull-detail { min-width:0; min-height:44px; }
+.detail-watch-status:not(:empty) { margin-top:8px; overflow-wrap:anywhere; }
 .issue-sheet-actions a { border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
-.issue-handoff, .pull-ownership { margin-top:14px; padding:12px; border:1px solid #2a496e; border-radius:12px; }
-.issue-handoff > div, .pull-ownership > div { display:grid; gap:8px; margin-top:10px; }
-.issue-handoff select, .pull-ownership select { width:100%; max-width:100%; padding:8px; border:1px solid #1f3a5f; border-radius:8px; background:#0b1526; color:var(--text); }
+.issue-handoff, .pull-ownership, .pull-review-request, .pull-lifecycle { margin-top:14px; padding:12px; border:1px solid #2a496e; border-radius:12px; }
+.issue-handoff > div, .pull-ownership > div, .pull-review-request > div, .pull-lifecycle > div { display:grid; gap:8px; margin-top:10px; }
+.pull-lifecycle { border-color:#b45353; }
+.pull-lifecycle button { min-height:44px; border-color:#ef4444; background:#5f1d24; color:#fff; }
+.pull-close-receipt { margin-top:14px; padding:12px; border:1px solid #4ade80; border-radius:12px; background:#10291e; }
+.pull-close-receipt h3 { margin-top:0; }
+.pull-close-receipt button { width:100%; min-height:44px; border-color:#4ade80; }
+.issue-handoff select, .pull-ownership select, .pull-review-request select { width:100%; max-width:100%; padding:8px; border:1px solid #1f3a5f; border-radius:8px; background:#0b1526; color:var(--text); }
 .issue-handoff select, .issue-handoff button { min-height:44px; }
 .pull-ownership select, .pull-ownership button { min-height:44px; }
+.pull-review-request select, .pull-review-request button { min-height:44px; }
 .issue-retry { min-height:44px; width:100%; margin-top:10px; }
 .new-issue { min-height:44px; }
 .find-work-action { min-height:44px; }
 .my-work-actions { display:flex; flex-wrap:wrap; gap:8px; }
+.plan-tomorrow { min-height:44px; }
 .start-work-session { min-height:44px; }
 .resume-today-session, .end-today-session { min-height:44px; }
 .work-session-nav { position:sticky; bottom:0; z-index:5; display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin-top:12px; padding:10px 4px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
@@ -824,7 +1070,14 @@ textarea { resize: vertical; min-height: 120px; }
 .search-preview-conversation { display:grid; gap:8px; padding-top:8px; border-top:1px solid #2a496e; }
 .search-preview-conversation h2 { margin:0; font-size:1rem; }
 .search-preview-comment { min-width:0; padding:10px 0; border-bottom:1px solid #1b2d45; overflow-wrap:anywhere; }
+.search-preview-comment.new-since-review { padding-left:10px; border-left:3px solid var(--accent); background:#10233a; }
 .search-preview-conversation button { min-height:44px; width:100%; }
+.search-preview-review { display:grid; gap:8px; min-width:0; padding-top:8px; border-top:1px solid #2a496e; }
+.search-preview-review[hidden] { display:none; }
+.search-preview-review h2 { margin:0; font-size:1rem; }
+.search-preview-review button { min-height:44px; width:100%; }
+.search-preview-file { min-width:0; margin:8px 0; padding:10px; border:1px solid #203a5c; border-radius:10px; overflow:hidden; }
+.search-preview-file > strong, .search-preview-file > .small { display:block; overflow-wrap:anywhere; }
 .search-preview-reply { display:grid; gap:8px; padding-top:8px; border-top:1px solid #2a496e; }
 .search-preview-reply[hidden] { display:none; }
 .search-preview-reply h2 { margin:0; font-size:1rem; }
@@ -836,10 +1089,13 @@ textarea { resize: vertical; min-height: 120px; }
 .search-preview-reply .conversation-photo-actions { max-width:100%; }
 .search-preview-navigation { display:grid; grid-template-columns:minmax(0,1fr) auto minmax(0,1fr); align-items:center; gap:8px; }
 .search-preview-actions { position:sticky; bottom:0; display:grid; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
+#keep-following-status { display:block; min-height:20px; overflow-wrap:anywhere; }
 .search-preview-actions button, .search-preview-actions a { min-height:44px; box-sizing:border-box; display:flex; align-items:center; justify-content:center; }
 .search-preview-primary-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.search-preview-primary-actions.following-disposition-mode { grid-template-columns:repeat(3,minmax(0,1fr)); }
 @media (max-width:420px) {
   .search-preview-primary-actions { grid-template-columns:1fr; }
+  .search-preview-primary-actions.following-disposition-mode { grid-template-columns:1fr; }
 }
 @media (max-width:600px) {
   .search-preview-panel { width:100%; border-left:0; padding:14px; padding-top:max(12px,env(safe-area-inset-top)); }
@@ -863,12 +1119,25 @@ textarea { resize: vertical; min-height: 120px; }
     padding-bottom:calc(6px + env(safe-area-inset-bottom));
     background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
   }
-  #search-preview-overview, #search-preview-conversation,
+  #search-preview-overview, #search-preview-conversation, #search-preview-review,
   #search-preview-reply-workspace, #search-preview-actions { scroll-margin-top:72px; }
   #search-preview-actions { position:static; }
 }
 @media (min-width:601px) { .mobile-search-preview-nav { display:none; } }
 .search-preview-actions a { display:flex; align-items:center; justify-content:center; border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
+.following-sheet { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; margin:auto 0 0 auto; padding:0; border:1px solid #2a496e; color:var(--text); background:#102641; }
+.following-sheet::backdrop { background:rgba(3,9,18,.74); }
+.following-panel { box-sizing:border-box; display:grid; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); overflow-wrap:anywhere; }
+.following-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.following-panel h2, .following-panel p { margin:0; }
+.following-panel header button, #retry-following { min-height:44px; }
+.following-review-action { box-sizing:border-box; width:100%; min-height:44px; }
+.following-list { display:grid; gap:8px; min-width:0; max-height:70dvh; overflow:auto; }
+.following-card { box-sizing:border-box; display:flex; align-items:center; justify-content:space-between; gap:12px; width:100%; min-width:0; min-height:52px; padding:10px 12px; text-align:left; }
+.following-card span:first-child { min-width:0; display:grid; gap:3px; }
+.following-card em { color:var(--accent); font-size:.75rem; font-style:normal; font-weight:700; text-transform:uppercase; letter-spacing:.04em; }
+.following-card.has-unseen-change { border-color:var(--accent); }
+.following-card strong, .following-card small { overflow-wrap:anywhere; }
 .markdown-content { min-width:0; max-width:100%; overflow-wrap:anywhere; white-space:normal; }
 .markdown-content > :first-child { margin-top:0; }
 .markdown-content > :last-child { margin-bottom:0; }
@@ -1019,6 +1288,42 @@ textarea { resize: vertical; min-height: 120px; }
 .pull-diff-empty { margin:8px 0; padding:10px; border:1px dashed #4e6b8a; border-radius:8px; }
 .pull-review-tools { display:flex; align-items:center; justify-content:space-between; gap:8px; margin:8px 0; }
 .pull-review-tools button { min-height:44px; }
+.pull-reviewer-summary { margin:10px 0; padding:10px; border:1px solid #203a5c; border-radius:10px; }
+.pull-reviewer-summary h3 { margin:0 0 6px; font-size:14px; }
+.pull-reviewer-status { padding:8px 0; border-top:1px solid #203a5c; overflow-wrap:anywhere; }
+.pull-reviewer-status:first-child { border-top:0; }
+.pull-reviewer-status-heading { display:flex; justify-content:space-between; gap:10px; }
+.pull-reviewer-status-heading span { text-align:right; }
+.cancel-review-request { min-height:44px; width:100%; margin-top:8px; }
+.pull-review-feedback { margin-top:8px; border:1px solid #2a496e; border-radius:8px; padding:0 8px 8px; }
+.pull-review-feedback > summary { min-height:44px; display:flex; align-items:center; cursor:pointer; }
+.pull-review-feedback-summary { margin:4px 0 10px; white-space:pre-wrap; }
+.pull-review-feedback-file { margin-top:8px; padding-top:8px; border-top:1px solid #203a5c; }
+.pull-review-feedback-file h4 { margin:0 0 4px; overflow-wrap:anywhere; }
+.pull-review-feedback-file ul { margin:0; padding-left:20px; }
+.pull-review-feedback-file li { margin:6px 0; }
+.pull-review-feedback-file small { display:block; color:#93c5fd; }
+.pull-review-feedback-file button { min-height:44px; width:100%; margin-top:4px; }
+.address-review-feedback, [data-load-review-feedback] { min-height:44px; width:100%; margin-top:8px; }
+.pull-feedback-pass { margin-top:10px; padding:10px; border:1px solid #3b82f6; border-radius:10px; overflow-wrap:anywhere; }
+.pull-feedback-pass-heading { display:flex; align-items:start; justify-content:space-between; gap:8px; }
+.pull-feedback-pass-heading h4 { margin:2px 0 8px; }
+.pull-feedback-pass p { white-space:pre-wrap; }
+.pull-feedback-pass textarea { width:100%; min-height:88px; box-sizing:border-box; }
+#make-pull-feedback-fix { width:100%; margin-top:8px; border-color:#4ade80; }
+.pull-feedback-file-editor { display:grid; min-width:0; gap:8px; margin-top:10px; padding:10px; border:1px solid #4ade80; border-radius:10px; overflow-x:hidden; }
+.pull-feedback-file-editor[hidden] { display:none; }
+.pull-feedback-file-editor h5 { margin:0; overflow-wrap:anywhere; }
+#pull-feedback-file-content { min-height:36dvh; resize:vertical; font:13px/1.45 ui-monospace, SFMono-Regular, Consolas, monospace; tab-size:2; white-space:pre; overflow:auto; }
+#pull-feedback-commit-message { box-sizing:border-box; width:100%; min-width:0; }
+.pull-feedback-file-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; min-width:0; }
+@media (max-width:359px) { .pull-feedback-file-actions { grid-template-columns:1fr; } }
+.pull-feedback-dispositions { display:grid; grid-template-columns:1fr; gap:6px; margin:10px 0; padding:8px; }
+.pull-feedback-dispositions button[aria-pressed="true"] { border-color:#60a5fa; background:#173b63; }
+.pull-feedback-navigation { display:grid; grid-template-columns:1fr 1fr; gap:8px; margin-top:8px; }
+.pull-feedback-pass button { min-height:44px; }
+#finish-pull-feedback, #request-feedback-review { width:100%; margin-top:8px; }
+#request-updated-pull-review { min-height:44px; width:100%; margin-top:8px; }
 .pull-review { margin-top:14px; overflow:hidden; border:1px solid #2a496e; border-radius:10px; padding:0 10px 10px; }
 .pull-review summary { min-height:44px; display:flex; align-items:center; cursor:pointer; }
 .pull-review summary h2 { margin:0; font-size:16px; }
@@ -1056,6 +1361,7 @@ textarea { resize: vertical; min-height: 120px; }
 @media (max-width: 600px) {
   body { padding-bottom:calc(66px + env(safe-area-inset-bottom)); }
   body.mobile-today-active { padding-bottom:calc(var(--mobile-today-clearance, 166px) + env(safe-area-inset-bottom)); }
+  body:has(.mobile-today-hud:not([hidden]):not([data-overlay-hidden="true"])) { padding-bottom:calc(var(--mobile-today-clearance, 166px) + env(safe-area-inset-bottom)); }
   header { min-height:56px; max-height:64px; padding:6px 10px; align-items:center; gap:8px; background:rgba(11,21,38,.98); }
   .app-brand .muted, #clock { display:none; }
   .app-live-status { margin-left:auto; }
@@ -1152,6 +1458,16 @@ textarea { resize: vertical; min-height: 120px; }
   .composer-keyboard-active .update-reply { scroll-margin-block:12px; padding-bottom:env(safe-area-inset-bottom); }
   .mobile-task-dock { position:fixed; inset:auto 0 0; z-index:45; display:grid; grid-template-columns:repeat(5,minmax(0,1fr)); gap:2px; padding:6px 8px; padding-bottom:env(safe-area-inset-bottom); border-top:1px solid #2a496e; background:rgba(11,21,38,.98); backdrop-filter:blur(12px); }
   .mobile-queue-sheet { width:100%; max-width:none; margin:auto 0 0; padding:0; border:0; border-radius:18px 18px 0 0; color:var(--text); background:#102641; }
+  .following-sheet { width:100%; max-width:none; border:0; border-radius:18px 18px 0 0; }
+
+  .mobile-first-task { box-sizing:border-box; width:100%; max-width:none; max-height:100dvh; margin:auto 0 0; padding:0; border:0; border-radius:18px 18px 0 0; color:var(--text); background:#102641; }
+  .mobile-first-task::backdrop { background:rgba(3,9,18,.78); }
+  .mobile-first-task-panel { display:grid; gap:14px; padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); }
+  .mobile-first-task-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+  .mobile-first-task-panel h2, .mobile-first-task-panel p { margin:0; }
+  .mobile-first-task-actions { display:grid; gap:10px; }
+  .mobile-first-task-actions button { min-height:48px; width:100%; }
+  .mobile-first-task-actions button:disabled { opacity:.55; }
 
   .mobile-queue-sheet::backdrop { background:rgba(3,9,18,.7); }
   .mobile-queue-panel { padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); }
@@ -1181,6 +1497,10 @@ textarea { resize: vertical; min-height: 120px; }
   .mobile-update-outcome p { margin:0 0 10px; }
   .mobile-update-outcome button { width:100%; min-height:44px; }
   .mobile-today-hud { position:fixed; left:8px; right:8px; bottom:calc(56px + env(safe-area-inset-bottom)); z-index:44; display:grid; grid-template-columns:repeat(6,minmax(0,1fr)); gap:4px; max-width:100%; padding:8px; border:1px solid #31577f; border-radius:12px 12px 0 0; background:rgba(16,38,65,.98); box-shadow:0 -8px 24px rgba(0,0,0,.28); }
+  .mobile-first-task-coach { grid-column:1 / -1; display:grid; gap:2px; padding:8px 10px; border-left:3px solid #60a5fa; border-radius:6px; background:#172f4d; }
+  .mobile-first-task-coach[hidden] { display:none; }
+  .mobile-first-task-receipt { position:fixed; left:12px; right:12px; bottom:calc(var(--mobile-today-clearance, 166px) + 8px + env(safe-area-inset-bottom)); z-index:46; padding:12px; border:1px solid #34d399; border-radius:10px; background:#0d3b35; font-weight:700; }
+  .mobile-first-task-receipt[hidden] { display:none; }
   .mobile-today-summary { grid-column:1 / 4; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; text-align:left; font-weight:700; }
   .mobile-today-hud [data-work-session-progress] { grid-column:4 / 7; align-self:center; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
   .mobile-today-hud [data-mobile-today-complete] { grid-column:1 / 3; }
@@ -1240,3 +1560,16 @@ textarea { resize: vertical; min-height: 120px; }
     transition: transform 120ms ease, border-color 120ms ease;
   }
 }
+
+.create-pull-sheet{position:fixed;inset:0;z-index:75;background:rgba(3,7,18,.72);display:grid;place-items:end center;padding:16px}
+.create-pull-sheet[hidden]{display:none}
+.create-pull-panel{width:min(100%,680px);max-height:calc(100dvh - 32px);overflow:auto;background:var(--panel);border:1px solid var(--border);border-radius:20px;padding:20px;padding-bottom:max(20px,env(safe-area-inset-bottom))}
+.create-pull-header{display:flex;align-items:center;justify-content:space-between;gap:12px}
+.create-pull-header h3{margin:2px 0 0}
+.create-pull-panel form,.create-pull-panel label{display:grid;gap:6px}
+.create-pull-panel form{gap:14px}
+.create-pull-branches{display:grid;grid-template-columns:1fr 1fr;gap:12px}
+.create-pull-mode{display:flex;gap:18px;border:1px solid var(--border);border-radius:12px;padding:10px 12px}
+.create-pull-mode label{display:flex;align-items:center;gap:7px}
+.create-pull-panel button,.create-pull-panel select,.create-pull-panel input{min-height:44px}
+@media(max-width:600px){.create-pull-sheet{padding:0}.create-pull-panel{width:100%;max-height:100dvh;border-radius:18px 18px 0 0}.create-pull-branches{grid-template-columns:1fr}}

frontend/device-storage.js

@@ -21,6 +21,7 @@
   let privateRecordCount = 0;
   let inventoryUnavailable = false;
   let fullClearArmed = false;
+  let persistence = { state:'unavailable', detail:'Storage protection is unavailable in this browser.', label:'Unavailable' };
   const ownedCaches = async () => (await options.caches?.keys?.() || [])
     .filter(name => name.startsWith('stackchain-dashboard-'));
 
@@ -37,10 +38,48 @@
     return Math.round((Number(value) || 0) / (1024 * 1024));
   }
 
+  async function inspectPersistence() {
+    if (typeof options.storageManager?.persisted !== 'function' || typeof options.storageManager?.persist !== 'function') {
+      persistence = {state:'unavailable', detail:'Storage protection is unavailable in this browser.', label:'Unavailable'};
+      return persistence;
+    }
+    try {
+      const protectedStorage = await options.storageManager.persisted();
+      persistence = protectedStorage
+        ? {state:'complete', detail:'Offline work is protected from automatic browser storage cleanup.', label:'Protected'}
+        : {state:'incomplete', detail:'Offline work uses best-effort browser storage and may be removed under storage pressure.', label:'Best effort'};
+    } catch (_error) {
+      persistence = {state:'incomplete', detail:'Storage protection could not be checked. Retry to protect offline work.', label:'Check failed'};
+    }
+    return persistence;
+  }
+
+  function persistenceReadiness() {
+    return {state:persistence.state, detail:persistence.detail};
+  }
+
+  async function requestPersistence() {
+    if (typeof options.storageManager?.persist !== 'function') return persistenceReadiness();
+    let granted = false;
+    try { granted = await options.storageManager.persist(); }
+    catch (_error) {
+      persistence = {state:'incomplete', detail:'Storage protection request failed. Offline work still uses best-effort storage; retry when ready.', label:'Request failed'};
+      options.detail.textContent = options.detail.textContent.replace(/Storage protection: [^·]+/, 'Storage protection: Request failed ');
+      return persistenceReadiness();
+    }
+    await refresh();
+    if (!granted && persistence.state !== 'complete') {
+      persistence = {state:'incomplete', detail:'The browser did not grant storage protection. Offline work still works but may be removed under storage pressure.', label:'Denied'};
+      options.detail.textContent = options.detail.textContent.replace(/Storage protection: [^·]+/, 'Storage protection: Denied ');
+    }
+    return persistenceReadiness();
+  }
+
   async function refresh() {
     let estimate = null;
     try { estimate = await options.storageManager?.estimate?.(); }
     catch (_error) { /* Storage estimates are optional. */ }
+    await inspectPersistence();
     options.summary.textContent = estimate?.quota
       ? `${megabytes(estimate.usage)} MB of ${megabytes(estimate.quota)} MB browser storage used.`
       : 'Browser storage usage is unavailable.';
@@ -52,7 +91,7 @@
     privateRecordCount = inventory.recordCount;
     inventoryUnavailable = inventory.unavailable;
     const cacheCount = (await ownedCaches()).length;
-    options.detail.textContent = `${itemCount} private browser item${itemCount === 1 ? '' : 's'} · `
+    options.detail.textContent = `Storage protection: ${persistence.label} · ${itemCount} private browser item${itemCount === 1 ? '' : 's'} · `
       + `${inventoryUnavailable ? 'private work status unknown' : `${privateRecordCount} private work record${privateRecordCount === 1 ? '' : 's'}`} · `
       + `${cacheCount} cached app cop${cacheCount === 1 ? 'y' : 'ies'}`;
     return { itemCount, privateRecordCount, inventoryUnavailable, cacheCount };
@@ -84,7 +123,7 @@
       privateItemCount = 0;
       fullClearArmed = false;
       options.clearAllButton.textContent = 'Clear all private data';
-      options.detail.textContent = '0 private browser items · 0 private work records · 0 cached app copies';
+      options.detail.textContent = `Storage protection: ${persistence.label} · 0 private browser items · 0 private work records · 0 cached app copies`;
       options.summary.textContent = 'All Stackchain private data was cleared from this device.';
     } catch (error) {
       options.summary.textContent = `Private data was not fully cleared: ${error.message}`;
@@ -99,5 +138,5 @@
     return refresh();
   }
 
-  return { refresh, start };
+  return { refresh, start, persistenceReadiness, requestPersistence };
 });

frontend/following.js

@@ -0,0 +1,292 @@
+(function (root, factory) {
+  const exports = factory();
+  if (typeof module === 'object' && module.exports) {
+    module.exports = exports.createFollowing;
+    module.exports.attachFollowing = exports.attachFollowing;
+    module.exports.planningDisposition = exports.planningDisposition;
+  } else {
+    root.createFollowing = exports.createFollowing;
+    root.attachFollowing = exports.attachFollowing;
+    root.followingPlanningDisposition = exports.planningDisposition;
+  }
+})(typeof self !== 'undefined' ? self : this, function () {
+  function planningDisposition(detail, controls) {
+    const active = detail?.following === true && detail.kind === 'issue' && detail.state === 'open' &&
+      Boolean(detail.claimable || detail.assigned_to_me);
+    const result = active ? {active:true,today:'Add to Today & next',later:'Later & next',week:'Week Ahead & next'} : {active:false};
+    if (!controls && globalThis.document) {
+      const query = selector => globalThis.document.querySelector(selector);
+      controls = {root:query('.search-preview-primary-actions'),claim:query('#claim-search-result'),
+        today:query('#queue-search-result'),later:query('#defer-search-result'),week:query('#plan-search-result'),
+        start:query('#start-search-result'),watch:query('#watch-search-result')};
+    }
+    controls?.root?.classList.toggle('following-disposition-mode', active);
+    if (active && controls) {
+      controls.claim.hidden = controls.start.hidden = controls.watch.hidden = true;
+      controls.today.textContent = result.today;
+      controls.later.textContent = result.later;
+      controls.week.textContent = result.week;
+    }
+    return result;
+  }
+
+  function createFollowing(options) {
+    let generation = 0;
+    let snapshot = {revision:0, items:[]};
+    let review = null;
+
+    function sameItem(left, right) {
+      return (left?.kind || 'issue') === (right?.kind || 'issue') &&
+        left?.repository === right?.repository && Number(left?.number) === Number(right?.number);
+    }
+
+    function publish(status, error) {
+      const state = {status, revision:snapshot.revision, items:[...snapshot.items]};
+      state.degraded = snapshot.degraded === true;
+      state.refreshFailures = Number(snapshot.refreshFailures) || 0;
+      if (review?.acknowledged.size) state.reviewSummary = {
+          reviewed:review.acknowledged.size,
+          remaining:snapshot.items.filter(item => item.has_unseen_change === true).length,
+      };
+      if (error) state.error = error;
+      options.render?.(state);
+      if (status === 'ready') options.onCount?.(
+        snapshot.items.filter(item => item.has_unseen_change === true).length);
+      return state;
+    }
+
+    async function load() {
+      const requestGeneration = ++generation;
+      publish('loading');
+      try {
+        const result = await options.fetchJson('api/v1/following', {headers:{Accept:'application/json'}});
+        if (requestGeneration !== generation) return snapshot;
+        snapshot = {
+          revision:Number(result?.revision) || 0,
+          items:Array.isArray(result?.items) ? result.items.slice(0, 50)
+            .map(item => ({...item, kind:item.kind === 'pull' ? 'pull' : 'issue'})) : [],
+          degraded:result?.degraded === true,
+          refreshFailures:Number(result?.refresh_failures) || 0,
+        };
+        publish('ready');
+        return snapshot;
+      } catch (error) {
+        if (requestGeneration === generation) publish('error', error);
+        throw error;
+      }
+    }
+
+    async function acknowledge(item) {
+      const current = snapshot.items.find(candidate => sameItem(candidate, item) &&
+        candidate.updated_at === item?.updated_at);
+      if (!current || current.has_unseen_change !== true || typeof options.onAcknowledge !== 'function') return false;
+      await options.onAcknowledge(current);
+      current.has_unseen_change = false;
+      review?.acknowledged.add(current.kind + ':' + current.repository + '#' + current.number + '@' + current.updated_at);
+      publish('ready');
+      return true;
+    }
+
+    async function keepForLater(item) {
+      const exact = candidate => sameItem(candidate, item) && candidate.updated_at === item?.updated_at;
+      const current = snapshot.items.find(exact);
+      const index = review?.active ? review.items.findIndex(exact) : -1;
+      if (!current || index < 0 || typeof options.onKeep !== 'function') return null;
+      await options.onKeep(current);
+      current.has_unseen_change = true;
+      review.acknowledged.delete(current.kind + ':' + current.repository + '#' +
+        current.number + '@' + current.updated_at);
+      review.items.splice(index, 1);
+      const next = review.items[index] || null;
+      if (!next) review.active = false;
+      publish('ready');
+      if (next) await open(snapshot.items.findIndex(candidate => sameItem(candidate, next)));
+      return next;
+    }
+
+    async function open(index) {
+      const item = snapshot.items[Number(index)];
+      if (!item) return false;
+      await options.onOpen?.({...item, following:true});
+      await acknowledge(item);
+      return true;
+    }
+
+    async function startReview() {
+      const items = snapshot.items
+        .filter(item => item.has_unseen_change === true)
+        .map(item => ({...item, following:true}));
+      if (!items.length) return false;
+      review = {items, more:false, active:true, acknowledged:new Set()};
+      await open(snapshot.items.indexOf(snapshot.items.find(item => sameItem(item, items[0]))));
+      return true;
+    }
+
+    function finishReview() {
+      const completed = Boolean(review?.completed || (review?.active &&
+        !snapshot.items.some(item => item.has_unseen_change === true)));
+      if (review) review.active = false;
+      if (completed && !review.completed) {
+        review.completed = true;
+        options.onReviewComplete?.();
+      }
+      publish('ready');
+      return completed;
+    }
+
+    function retire(item) {
+      const same = candidate => sameItem(candidate, item);
+      const index = review?.active ? review.items.findIndex(same) : -1;
+      snapshot.items = snapshot.items.filter(candidate => !same(candidate));
+      if (index < 0) {
+        publish('ready');
+        return null;
+      }
+      review.items.splice(index, 1);
+      const next = review.items[index] || null;
+      if (!next) {
+        review.active = false;
+        if (!review.completed) {
+          review.completed = true;
+          options.onReviewComplete?.();
+        }
+      }
+      publish('ready');
+      return next ? {...next} : null;
+    }
+
+    return {
+      load, open, startReview, previewLoaded:acknowledge, keepForLater, finishReview, retire,
+      session:() => review?.active ? {items:[...review.items], more:false} : null,
+      items:() => snapshot.items.map(item => ({...item})),
+      count:() => snapshot.items.length,
+    };
+  }
+
+  function attachFollowing(onOpen, hooks = {}) {
+    const document = globalThis.document;
+    const query = selector => document.querySelector(selector);
+    const escapeHtml = value => String(value ?? '').replace(/[&<>"']/g, character =>
+      ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'})[character]);
+    const formatTime = value => new Date(value).toLocaleString();
+    const fetchJson = async (url, options) => {
+      const response = await fetch(url, options);
+      const payload = await response.json().catch(() => ({}));
+      if (!response.ok) throw new Error(payload.detail || payload.error || 'Following is temporarily unavailable.');
+      return payload;
+    };
+    const changeRevision = (item, action) => {
+      const [owner, repo] = item.repository.split('/');
+      return fetchJson('api/v1/following/' + encodeURIComponent(owner) + '/' +
+        encodeURIComponent(repo) + '/issues/' + item.number + '/' + action +
+        '?kind=' + encodeURIComponent(item.kind), {
+          method:'PUT', headers:{'Content-Type':'application/json', Accept:'application/json'},
+          body:JSON.stringify({updated_at:item.updated_at}),
+        });
+    };
+    let feature;
+    let activeReviewItem = null;
+    const show = () => query('#following-sheet').open || query('#following-sheet').showModal();
+    function render(state) {
+      hooks.onStatus?.(state.status);
+      const list = query('#following-list');
+      const status = query('#following-status');
+      const reviewButton = query('#review-following');
+      query('#retry-following').hidden = state.status !== 'error';
+      if (state.status === 'loading') return void (status.textContent = 'Loading watched items…');
+      if (state.status === 'error') return void (status.textContent = state.error?.message || 'Following is temporarily unavailable.');
+      const unseen = state.items.filter(item => item.has_unseen_change === true).length;
+      reviewButton.hidden = unseen === 0;
+      reviewButton.textContent = unseen === 1 ? 'Review new activity' : 'Review ' + unseen + ' new changes';
+      status.textContent = (state.reviewSummary
+        ? 'Reviewed ' + state.reviewSummary.reviewed + ' changes · ' + state.reviewSummary.remaining + ' still need review. '
+        : '') + (state.degraded ? 'Some watched items could not be refreshed. Showing last known details. ' : '') + (state.items.length
+        ? state.items.length + (state.items.length === 1 ? ' watched item.' : ' watched items.')
+        : 'No watched items yet. Watch an issue or pull request from Search to keep it here.');
+      list.innerHTML = state.items.map((item, index) =>
+        '<button class="following-card' + (item.has_unseen_change ? ' has-unseen-change' : '') +
+        '" type="button" data-following-index="' + index + '"><span>' +
+        (item.has_unseen_change ? '<em>' + escapeHtml(item.change_summary || 'New activity') + '</em>' : '') + '<strong>' +
+        escapeHtml(item.title) + '</strong><small>' + escapeHtml(
+        (item.kind === 'pull' ? 'Pull request' : 'Issue') + ' · ' + item.repository + ' #' + item.number +
+        ' · ' + item.state + ' · ' + formatTime(item.updated_at)) +
+        '</small></span><span aria-hidden="true">›</span></button>').join('');
+      list.querySelectorAll('[data-following-index]').forEach(button => button.addEventListener('click', () => {
+        query('#following-sheet').close();
+        feature.open(Number(button.dataset.followingIndex)).catch(() => {});
+      }));
+    }
+    feature = createFollowing({
+      fetchJson, render,
+      onCount:count => {
+        const value = query('[data-mobile-queue-count="following"]');
+        value.textContent = count;
+        value.closest('button').setAttribute('aria-label', 'Following, ' + count +
+          (count === 1 ? ' unseen change' : ' unseen changes'));
+        hooks.onCount?.(count, feature.items());
+      },
+      onOpen:item => {
+        activeReviewItem = item;
+        return onOpen(item);
+      },
+      onReviewComplete:hooks.onReviewComplete,
+      onAcknowledge:item => changeRevision(item, 'seen'),
+      onKeep:item => changeRevision(item, 'keep'),
+    });
+    query('#close-following').addEventListener('click', () => query('#following-sheet').close());
+    query('#review-following').addEventListener('click', () => {
+      query('#following-sheet').close();
+      feature.startReview().catch(() => {
+        show();
+      });
+    });
+    query('#retry-following').addEventListener('click', () => feature.load().catch(() => {}));
+    const keepButton = query('#keep-following-for-later');
+    keepButton.addEventListener('click', async () => {
+      const status = query('#keep-following-status');
+      keepButton.disabled = true;
+      status.textContent = 'Keeping this change for later…';
+      try {
+        if (!await feature.keepForLater(activeReviewItem)) query('#close-search-preview').click();
+        status.textContent = 'Kept for later.';
+      } catch (_) {
+        status.textContent = 'Could not keep this change for later. Retry when ready.';
+        keepButton.disabled = false;
+      }
+    });
+    return {
+      load:feature.load,
+      review:feature.startReview,
+      async route() {
+        await feature.load().then(feature.startReview).catch(() => false) || show();
+      },
+      open() {
+        show();
+        feature.load().catch(() => {});
+        return 'opened-following';
+      },
+      session:feature.session,
+      previewLoaded:feature.previewLoaded,
+      keepForLater:feature.keepForLater,
+      retire:feature.retire,
+      preview(state) {
+        const disposition = planningDisposition(state?.detail || state?.item);
+        keepButton.hidden = state?.item?.following !== true || disposition.active;
+        keepButton.disabled = false;
+        if (keepButton.hidden || state.status === 'loading') query('#keep-following-status').textContent = '';
+      },
+      returnToFollowing() {
+        const completed = feature.finishReview();
+        if (completed) return 'completed-following';
+        show();
+        globalThis.requestAnimationFrame?.(() => {
+          const target = query('#review-following:not([hidden])') || query('.following-card') || query('#close-following');
+          target?.focus();
+        });
+        return 'returned-following';
+      },
+    };
+  }
+
+  return {createFollowing, attachFollowing, planningDisposition};
+});

frontend/index.html

@@ -27,16 +27,29 @@
     </div>
   </details>
 </header>
+<div id="sign-out-review-sheet" class="sign-out-review-sheet" hidden>
+  <section class="sign-out-review-panel" role="dialog" aria-modal="true" aria-labelledby="sign-out-review-heading">
+    <h2 id="sign-out-review-heading">Review sign out</h2>
+    <p id="sign-out-review-summary" class="small" role="status" aria-live="polite">Checking private work…</p>
+    <p id="sign-out-review-warning" class="sign-out-review-warning"></p>
+    <div class="sign-out-review-actions">
+      <button id="cancel-sign-out" type="button">Cancel</button>
+      <button id="confirm-sign-out" type="button">Sign out</button>
+    </div>
+  </section>
+</div>
 <div id="live-data-status-sheet" class="live-data-status-sheet" hidden>
   <section class="live-data-status-panel" role="dialog" aria-modal="true" aria-labelledby="live-data-status-heading">
     <div class="live-data-status-header">
       <div><h2 id="live-data-status-heading">Live data status</h2><p class="small muted">Check which dashboard feeds are current before acting.</p></div>
       <button id="close-live-data-status" type="button" aria-label="Close live data status">Close</button>
     </div>
+    <p id="live-data-status-today-paused" class="live-data-status-today-paused" role="status" hidden>Today paused while you check live data.</p>
     <div id="live-data-status-feeds" class="live-data-status-feeds"></div>
     <p id="live-data-status-retry" class="small muted"></p>
     <div class="live-data-status-actions">
       <button id="refresh-live-data" type="button">Refresh now</button>
+      <button id="return-from-live-data-status" type="button">Return to Today</button>
       <span id="live-data-status-result" class="small" role="status" aria-live="polite"></span>
     </div>
   </section>
@@ -112,10 +125,18 @@
         <div><strong>Keep work available offline</strong><p class="small" id="device-setup-offline-status" role="status"></p></div>
         <button class="device-setup-action" id="device-setup-offline" type="button">Enable</button>
       </li>
+      <li class="device-setup-step">
+        <div><strong>Protect offline work</strong><p class="small" id="device-setup-protection-status" role="status"></p></div>
+        <button class="device-setup-action" id="device-setup-protection" type="button">Protect</button>
+      </li>
       <li class="device-setup-step">
         <div><strong>Notify me about new updates</strong><p class="small" id="device-setup-push-status" role="status"></p></div>
         <button class="device-setup-action" id="device-setup-push" type="button">Enable</button>
       </li>
+      <li class="device-setup-step" id="device-setup-app-badge-step">
+        <div><strong>Show unread Updates on the app icon</strong><p class="small" id="device-setup-app-badge-status" role="status"></p></div>
+        <button class="device-setup-action" id="device-setup-app-badge" type="button">Enable</button>
+      </li>
       <li class="device-setup-step">
         <div><strong>Remind me about deadlines</strong><p class="small" id="device-setup-deadline-status" role="status"></p></div>
         <div class="device-setup-deadline-controls">
@@ -126,6 +147,14 @@
           <button class="device-setup-action" id="device-setup-deadline" type="button">Enable</button>
         </div>
       </li>
+      <li class="device-setup-step">
+        <div><strong>Start my planned day</strong><p class="small" id="device-setup-start-day-status" role="status">Get one private reminder when Tomorrow is ready.</p></div>
+        <div class="device-setup-deadline-controls">
+          <label for="device-setup-start-day-hour">Local hour</label>
+          <select id="device-setup-start-day-hour" aria-label="Start-day reminder local hour"></select>
+          <button class="device-setup-action" id="device-setup-start-day" type="button">Enable</button>
+        </div>
+      </li>
     </ol>
     <section class="device-storage" aria-labelledby="device-storage-heading">
       <div>
@@ -168,6 +197,7 @@
             <button class="work-filter" data-work-filter="agenda" aria-pressed="false">Agenda <span data-work-count="agenda">0</span></button>
             <button class="work-filter" data-work-filter="attention" aria-pressed="false">Attention <span data-work-count="attention">0</span></button>
             <button class="work-filter" data-work-filter="filed" aria-pressed="false">Filed <span data-work-count="filed">0</span></button>
+            <button class="work-filter" data-work-filter="authored" aria-pressed="false">My PRs <span data-work-count="authored">0</span></button>
             <button class="work-filter" data-work-filter="issue" aria-pressed="false">Issues <span data-work-count="issue">0</span></button>
             <button class="work-filter" data-work-filter="pull" aria-pressed="false">PRs <span data-work-count="pull">0</span></button>
             <button class="work-filter" data-work-filter="review" aria-pressed="false">Reviews <span data-work-count="review">0</span></button>
@@ -175,6 +205,7 @@
             <button class="work-filter" data-work-filter="later" aria-pressed="false">Later <span data-work-count="later">0</span></button>
             <button class="work-filter" data-work-filter="draft" aria-pressed="false">Drafts <span data-work-count="draft">0</span></button>
           </div>
+          <button class="plan-tomorrow" id="plan-tomorrow" type="button">Plan Tomorrow</button>
           <label class="milestone-lane" for="work-milestone-filter"><span class="small">Release lane</span>
             <select class="work-milestone-filter" id="work-milestone-filter">
               <option value="all">All milestones</option>
@@ -184,12 +215,22 @@
           <div class="offline-work-controls">
             <label for="keep-work-offline"><input id="keep-work-offline" type="checkbox" /> Keep My Work available offline</label>
             <label for="delivery-receipts"><input id="delivery-receipts" type="checkbox" /> Notify me when queued work finishes</label>
+            <span class="app-badge-setting" id="app-badge-setting">
+              <label class="app-badge-control" for="app-badge-control"><input id="app-badge-control" type="checkbox" /> Show review attention on the app icon</label>
+              <span class="small" id="app-badge-status" role="status" aria-live="polite"></span>
+            </span>
             <label class="push-update-control" for="push-updates"><input id="push-updates" type="checkbox" /> Notify me about new updates</label>
             <span class="small" id="push-update-status" role="status" aria-live="polite"></span>
+            <button class="secondary" id="push-test" type="button" hidden>Send test notification</button>
+            <label class="push-update-control" for="push-following"><input id="push-following" type="checkbox" /> Notify me when Following changes</label>
+            <span class="small" id="push-following-status" role="status" aria-live="polite"></span>
             <label class="push-update-control" for="push-deadlines"><input id="push-deadlines" type="checkbox" /> Notify me about deadlines</label>
             <label for="push-deadline-hour">Reminder hour <select id="push-deadline-hour" aria-label="Deadline reminder local hour"></select></label>
             <label for="push-deadline-days">Warn me <select id="push-deadline-days" aria-label="Deadline reminder horizon"><option value="0">Due today</option><option value="2" selected>Next 2 days</option><option value="7">Next 7 days</option></select></label>
             <span class="small" id="push-deadline-status" role="status" aria-live="polite"></span>
+            <label class="push-update-control" for="push-start-day"><input id="push-start-day" type="checkbox" /> Remind me when my planned day is ready</label>
+            <label for="push-start-day-hour">Start-day hour <select id="push-start-day-hour" aria-label="Start-day reminder local hour"></select></label>
+            <span class="small" id="push-start-day-status" role="status" aria-live="polite"></span>
             <label class="push-update-control" for="today-lock-screen"><input id="today-lock-screen" type="checkbox" /> Show active Today controls on my lock screen</label>
             <span class="small" id="today-lock-screen-status" role="status" aria-live="polite"></span>
             <button id="clear-offline-work" type="button">Clear offline work data</button>
@@ -309,6 +350,7 @@
     <div class="small" id="notification-page-status" aria-live="polite"></div>
     <button class="load-more-notifications" id="load-more-notifications" type="button" hidden>Load older updates</button>
     <div class="small" id="my-work-action-status" aria-live="assertive"></div>
+    <button class="retry-work-route" id="retry-workspace" type="button" hidden>Retry workspace</button>
     <button class="release-receipt-launcher" id="release-receipt-launcher" type="button" hidden>Merged · tracking release</button>
     <button class="retry-work-route" id="retry-unfiled-draft-sync" type="button" hidden>Retry Draft sync</button>
     <div class="small" id="today-sync-status" aria-live="polite">Today is saved on this device.</div>
@@ -429,6 +471,143 @@
       <div><h2 id="plan-today-title">Plan Today</h2><p class="small muted">Choose and order the work you want to finish next.</p></div>
       <button id="cancel-plan-today" type="button">Cancel</button>
     </div>
+    <p class="week-plan-progress" id="week-plan-progress" aria-live="polite" hidden></p>
+    <nav class="week-plan-dates" id="week-plan-dates" aria-label="Week Ahead dates" hidden></nav>
+    <button class="back-to-week-review" id="back-to-week-review" type="button" hidden>Back to week review</button>
+    <section class="tomorrow-conflict-review" id="tomorrow-conflict-review" aria-labelledby="tomorrow-conflict-title" hidden>
+      <div class="small">Cross-device change</div>
+      <h3 id="tomorrow-conflict-title">Choose which Tomorrow plan to keep</h3>
+      <p class="small muted">Both plans are preserved until one choice succeeds. Today will not change.</p>
+      <div class="tomorrow-conflict-plans">
+        <section aria-labelledby="tomorrow-conflict-phone-title">
+          <h4 id="tomorrow-conflict-phone-title">This phone</h4>
+          <div id="tomorrow-conflict-phone-plan"></div>
+        </section>
+        <section aria-labelledby="tomorrow-conflict-server-title">
+          <h4 id="tomorrow-conflict-server-title">Saved on your account</h4>
+          <div id="tomorrow-conflict-server-plan"></div>
+        </section>
+      </div>
+      <div class="tomorrow-conflict-actions">
+        <button id="keep-phone-tomorrow" type="button">Keep this phone’s plan</button>
+        <button id="use-server-tomorrow" type="button">Use saved account plan</button>
+      </div>
+      <div class="small tomorrow-conflict-status" id="tomorrow-conflict-status" role="status" aria-live="assertive"></div>
+    </section>
+    <section class="week-conflict-review" id="week-conflict-review" aria-labelledby="week-conflict-title" hidden>
+      <div class="small">Cross-device change</div>
+      <h3 id="week-conflict-title">Resolve Week Ahead changes</h3>
+      <p class="small muted">Changes on different days are combined automatically. Choose only where both devices changed the same day.</p>
+      <div class="week-conflict-days" id="week-conflict-days" hidden></div>
+      <button id="save-merged-week" type="button" hidden disabled>Save combined week</button>
+      <div class="week-conflict-plans" id="week-conflict-legacy-plans">
+        <section aria-labelledby="week-conflict-phone-title">
+          <h4 id="week-conflict-phone-title">This phone</h4>
+          <div id="week-conflict-phone-plan"></div>
+        </section>
+        <section aria-labelledby="week-conflict-server-title">
+          <h4 id="week-conflict-server-title">Saved on your account</h4>
+          <div id="week-conflict-server-plan"></div>
+        </section>
+      </div>
+      <div class="week-conflict-actions" id="week-conflict-legacy-actions">
+        <button id="keep-phone-week" type="button">Keep this phone’s week</button>
+        <button id="use-server-week" type="button">Use saved account week</button>
+      </div>
+      <div class="small week-conflict-status" id="week-conflict-status" role="status" aria-live="assertive"></div>
+    </section>
+    <section class="week-pull-conflict-review" id="week-pull-conflict-review" aria-labelledby="week-pull-conflict-title" tabindex="-1" hidden>
+      <div class="small">Saved transfer needs review</div>
+      <h3 id="week-pull-conflict-title">Resolve Today transfer</h3>
+      <p id="week-pull-conflict-item" class="week-pull-conflict-item"></p>
+      <p id="week-pull-conflict-context" class="small muted"></p>
+      <div class="week-pull-conflict-actions">
+        <button id="rebase-week-pull" type="button">Add using current plans</button>
+        <button id="keep-week-pull" type="button">Keep in Week Ahead</button>
+      </div>
+      <div class="small week-pull-conflict-status" id="week-pull-conflict-status" role="status" aria-live="assertive"></div>
+    </section>
+    <section class="week-review" id="week-review" aria-labelledby="week-review-title" hidden>
+      <div class="small">Seven-day overview</div>
+      <h2 id="week-review-title">Week Ahead</h2>
+      <p class="small muted">See what is next and check each day’s load. Edit only when you are ready.</p>
+      <p class="week-offline-snapshot" id="week-offline-snapshot" role="status" aria-live="polite" hidden></p>
+      <button id="retry-week-live" type="button" hidden>Retry live Week Ahead</button>
+      <button id="open-week-capacity-import" type="button">Refresh from calendar</button>
+      <button id="open-week-availability" type="button">Set weekly availability</button>
+      <section class="week-availability-editor" id="week-availability-editor" aria-labelledby="week-availability-title" hidden>
+        <h3 id="week-availability-title">Weekly availability</h3>
+        <p class="small muted">New Week Ahead dates use these defaults. Capacity set on a specific date remains an override.</p>
+        <div class="week-availability-grid">
+          <label>Monday <input data-weekday-capacity="0" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Tuesday <input data-weekday-capacity="1" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Wednesday <input data-weekday-capacity="2" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Thursday <input data-weekday-capacity="3" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Friday <input data-weekday-capacity="4" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Saturday <input data-weekday-capacity="5" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+          <label>Sunday <input data-weekday-capacity="6" type="number" inputmode="numeric" min="0" max="1440" step="15" /></label>
+        </div>
+        <div class="week-availability-actions">
+          <button id="cancel-week-availability" type="button">Cancel</button>
+          <button id="disable-week-availability" type="button">Disable defaults</button>
+          <button id="save-week-availability" type="button">Save weekly availability</button>
+        </div>
+        <div id="week-availability-status" class="small" role="status" aria-live="assertive"></div>
+      </section>
+      <button id="open-week-reflow" type="button" hidden>Reflow remaining week</button>
+      <section class="week-reflow-review" id="week-reflow-review" aria-labelledby="week-reflow-title" hidden>
+        <div class="small">Capacity-safe preview</div>
+        <h3 id="week-reflow-title">Reflow remaining week?</h3>
+        <p class="small muted">Work keeps its current order. Anything that cannot fit stays unscheduled in My Work.</p>
+        <div class="week-reflow-days" id="week-reflow-days"></div>
+        <div class="week-reflow-unscheduled" id="week-reflow-unscheduled" role="status"></div>
+        <div class="week-reflow-actions">
+          <button id="cancel-week-reflow" type="button">Cancel</button>
+          <button id="apply-week-reflow" type="button">Apply reflow</button>
+        </div>
+      </section>
+      <div class="week-review-duplicates" id="week-review-duplicates" role="alert" hidden></div>
+      <div class="week-review-days" id="week-review-days"></div>
+      <div class="week-unplan-receipt" id="week-unplan-receipt" role="status" aria-live="polite" hidden></div>
+      <button id="undo-week-unplan" type="button" hidden>Undo</button>
+      <div class="small week-review-status" id="week-review-status" role="status" aria-live="polite"></div>
+      <button id="export-saved-week-calendar" type="button" hidden>Add saved week to calendar</button>
+      <button id="edit-week-plan" type="button" hidden>Edit week</button>
+      <button id="confirm-week-plan" type="button">Confirm Week Ahead</button>
+    </section>
+    <section class="week-capacity-import" id="week-capacity-import" aria-labelledby="week-capacity-title" hidden>
+      <header><div><div class="small">Private calendar refresh</div><h2 id="week-capacity-title">Refresh Week Ahead availability</h2></div>
+        <button id="cancel-week-capacity-import" type="button">Cancel</button></header>
+      <p class="small muted">Compare refreshed availability with planned load before anything changes. Your calendar is read only on this device; event titles, people, locations, and the file are never saved or uploaded.</p>
+      <label>Calendar file
+        <input id="week-capacity-file" type="file" accept=".ics,text/calendar" />
+      </label>
+      <div class="week-capacity-hours">
+        <label>Workday starts <input id="week-capacity-start" type="time" value="09:00" required /></label>
+        <label>Workday ends <input id="week-capacity-end" type="time" value="17:00" required /></label>
+      </div>
+      <div id="week-capacity-status" class="small" role="status" aria-live="assertive"></div>
+      <section id="week-capacity-review" aria-labelledby="week-capacity-review-title" hidden>
+        <h3 id="week-capacity-review-title">Review available time</h3>
+        <div id="week-capacity-days" class="week-capacity-days"></div>
+        <label class="week-free-times-consent"><input id="keep-week-free-times" type="checkbox" />
+          <span><strong>Keep these free times with Week Ahead</strong><small>Only seven days of start/end times are encrypted and synced. Calendar events and the file stay on this device.</small></span>
+        </label>
+        <button id="apply-week-capacities" type="button">Apply seven capacities</button>
+      </section>
+    </section>
+    <section class="week-calendar-handoff" id="week-calendar-handoff" aria-labelledby="week-calendar-title" hidden>
+      <div class="small">Calendar handoff</div>
+      <h2 id="week-calendar-title">Add Week Ahead to calendar</h2>
+      <p class="small muted">Titles, references, dates, and times are included in a local calendar file; nothing is uploaded. Imported busy time is used only until this page reloads unless you consent to keep free times with the encrypted Week Ahead plan.</p>
+      <div class="week-calendar-days" id="week-calendar-days"></div>
+      <div class="small week-calendar-status" id="week-calendar-status" role="status" aria-live="assertive"></div>
+      <div class="week-calendar-actions">
+        <button id="back-to-week-review-from-calendar" type="button">Back to review</button>
+        <button id="save-week-calendar-times" type="button">Save exact times</button>
+        <button id="share-week-calendar" type="button">Share calendar blocks</button>
+      </div>
+    </section>
     <nav class="mobile-plan-today-nav" aria-label="Plan Today sections">
       <button type="button" data-plan-today-section="fit" aria-current="location">Fit</button>
       <button type="button" data-plan-today-section="today">Today</button>
@@ -516,7 +695,7 @@
       <div><div class="small">End your day intentionally</div><h2 id="today-wrap-up-title">Wrap up Today</h2></div>
       <button id="close-today-wrap-up" type="button">Not now</button>
     </div>
-    <p class="small muted">Choose unfinished work to schedule for tomorrow at 09:00. Unchecked work stays in Today.</p>
+    <p class="small muted">Carry selected work into the ordered Tomorrow plan. Unselected work stays in Today.</p>
     <div id="today-wrap-up-status" class="small" role="status" aria-live="polite"></div>
     <div id="today-wrap-up-items" class="today-wrap-up-items"></div>
     <div class="today-wrap-up-actions">
@@ -541,7 +720,18 @@
     <label class="today-summary-note">Optional note<textarea id="today-summary-note" maxlength="1000" rows="3"></textarea></label>
     <h3>Preview</h3>
     <pre id="today-summary-preview" class="today-summary-preview"></pre>
+    <section class="today-summary-destination" aria-labelledby="today-summary-destination-title">
+      <h3 id="today-summary-destination-title">Post to Gitea</h3>
+      <p class="small muted">Enter the exact issue or pull request that should receive this reviewed comment.</p>
+      <label for="today-summary-destination">Destination</label>
+      <div class="today-summary-destination-controls">
+        <input id="today-summary-destination" type="text" inputmode="text" autocomplete="off" maxlength="260" placeholder="owner/repo#42">
+        <button id="validate-today-summary-destination" type="button">Review destination</button>
+      </div>
+      <div id="today-summary-target" class="today-summary-target small" aria-live="polite"></div>
+    </section>
     <div class="today-summary-actions">
+      <button id="post-today-summary" type="button" disabled>Post to Gitea</button>
       <button id="share-today-summary" type="button">Share summary</button>
       <button id="discard-today-summary" type="button">Discard draft</button>
     </div>
@@ -642,6 +832,7 @@
     <span id="search-selection-status" class="small" aria-live="polite">No issues selected.</span>
     <button id="cancel-search-selection" type="button">Cancel</button>
     <button id="defer-selected-search-results" type="button" disabled>Defer</button>
+    <button id="week-selected-search-results" type="button" disabled>Plan Week Ahead</button>
     <button id="plan-selected-search-results" type="button" disabled>Plan release</button>
     <button id="queue-selected-search-results" type="button" disabled>Assign &amp; add to Today</button>
   </div>
@@ -655,6 +846,16 @@
       <button id="confirm-search-batch-estimates" type="button">Confirm &amp; assign</button>
     </div>
   </section>
+  <section class="search-week-batch-review" id="search-week-batch-review" role="dialog" aria-modal="true"
+    aria-labelledby="search-week-batch-heading" hidden>
+    <div><strong id="search-week-batch-heading">Plan selected issues into Week Ahead</strong>
+      <span class="small" id="search-week-batch-summary" aria-live="polite"></span></div>
+    <div id="search-week-batch-list"></div>
+    <div class="search-week-batch-actions">
+      <button id="cancel-search-week-batch" type="button">Back</button>
+      <button id="confirm-search-week-batch" type="button">Assign &amp; plan</button>
+    </div>
+  </section>
   <section class="search-release-review" id="search-release-review"
     aria-labelledby="search-release-heading" hidden>
     <div><strong id="search-release-heading">Plan selected issues into a release</strong>
@@ -686,6 +887,7 @@
     <nav class="mobile-search-preview-nav" aria-label="Search preview sections">
       <button type="button" data-search-preview-section="overview">Overview</button>
       <button type="button" data-search-preview-section="conversation">Conversation</button>
+      <button type="button" data-search-preview-section="changes" hidden>Changes</button>
       <button type="button" data-search-preview-section="reply">Reply</button>
       <button type="button" data-search-preview-section="actions">Act</button>
     </nav>
@@ -701,6 +903,12 @@
       <button id="retry-search-preview-conversation" type="button" hidden>Retry conversation</button>
       <button id="load-older-search-preview-comments" type="button" hidden>Load older messages</button>
     </section>
+    <section id="search-preview-review" class="search-preview-review" aria-labelledby="search-preview-review-title" hidden>
+      <h2 id="search-preview-review-title">Changes</h2>
+      <div id="search-preview-review-status" class="small" aria-live="polite"></div>
+      <div id="search-preview-files"></div>
+      <button id="retry-search-preview-review" type="button" hidden>Retry changes</button>
+    </section>
     <section class="search-preview-reply" id="search-preview-reply-workspace" aria-labelledby="search-preview-reply-title" hidden>
       <h2 id="search-preview-reply-title">Reply</h2>
       <textarea id="search-preview-reply" maxlength="10000" placeholder="Write a reply"></textarea>
@@ -757,15 +965,35 @@
         <button id="claim-search-result" type="button" hidden>Assign to me</button>
         <button id="defer-search-result" type="button" hidden>Assign &amp; defer</button>
         <button id="queue-search-result" type="button" hidden>Assign &amp; add to Today</button>
+        <button id="plan-search-result" type="button" hidden>Plan ahead</button>
         <button id="start-search-result" type="button" hidden>Assign &amp; start</button>
-
+        <button id="watch-search-result" type="button" hidden>Watch issue</button>
+        <button id="keep-following-for-later" type="button" hidden>Keep for later &amp; next</button>
       </div>
+      <span id="keep-following-status" class="small" role="status" aria-live="polite"></span>
       <button id="share-search-result" type="button" disabled>Share result</button>
       <a id="open-search-result-gitea" href="#" target="_blank" rel="noopener noreferrer">Open in Gitea</a>
     </div>
   </section>
 </div>
 
+<section class="search-week-plan-sheet" id="search-week-plan-sheet" role="dialog" aria-modal="true"
+  aria-labelledby="search-week-plan-title" hidden>
+  <div class="search-week-plan-panel">
+    <header>
+      <div><div class="small">Week Ahead</div><h2 id="search-week-plan-title">Plan this issue</h2></div>
+      <button id="cancel-search-week-plan" type="button">Cancel</button>
+    </header>
+    <p id="search-week-plan-copy" class="muted"></p>
+    <fieldset><legend>Choose a day</legend><div class="search-week-plan-days" id="search-week-plan-days"></div></fieldset>
+    <label class="search-week-plan-estimate" for="search-week-plan-estimate">Estimate in minutes
+      <input id="search-week-plan-estimate" type="number" inputmode="numeric" min="1" max="1440" step="5" required />
+    </label>
+    <p id="search-week-plan-status" class="small" aria-live="polite"></p>
+    <button id="confirm-search-week-plan" type="button">Plan</button>
+  </div>
+</section>
+
 <div id="whiteboard-modal">
   <div class="modal">
     <div class="modal-actions">
@@ -965,11 +1193,13 @@
     </section>
     <div class="issue-sheet-actions">
       <button class="share-work-route" type="button">Share</button>
+      <button id="watch-issue-detail" type="button">Watch issue</button>
       <button id="release-issue" type="button">Release assignment</button>
       <button id="close-issue" type="button">Close issue</button>
       <a id="open-issue-gitea" href="#" target="_blank" rel="noopener noreferrer">Open in Gitea</a>
       <details class="detail-defer"><summary>Defer</summary><div class="detail-defer-options"><button type="button" data-detail-defer-preset="today" disabled data-planning-disabled>Later today</button><button type="button" data-detail-defer-preset="tomorrow" disabled data-planning-disabled>Tomorrow</button><button type="button" data-detail-defer-custom disabled data-planning-disabled>Choose date &amp; time</button><button type="button" data-detail-defer-cancel>Cancel</button></div></details>
     </div>
+    <div id="issue-watch-status" class="detail-watch-status small" aria-live="polite"></div>
     <nav class="work-session-nav" aria-label="Work session" hidden>
       <span class="small" aria-live="polite" data-work-session-progress></span>
       <button type="button" data-work-session-previous>Previous</button>
@@ -1051,6 +1281,7 @@
   <section class="create-issue-panel">
     <div class="create-issue-header">
       <h3 id="create-issue-heading">Capture work</h3>
+      <button id="switch-to-create-pull" type="button">Pull request</button>
       <button id="cancel-new-issue" type="button">Cancel</button>
     </div>
     <aside class="today-capture-interruption" id="today-capture-interruption" role="status" hidden>
@@ -1422,6 +1653,16 @@
       <div id="pull-sheet-status" class="small" aria-live="polite">Choose a pull request.</div>
       <button class="pull-retry" id="retry-pull-load" type="button" hidden>Retry loading pull request</button>
       <div class="pull-sheet-content markdown-content" id="pull-sheet-body"></div>
+      <button id="edit-pull-content" type="button" hidden>Edit review context</button>
+      <form class="issue-edit-form" id="pull-edit-form" hidden>
+        <label>Title<input id="pull-edit-title" maxlength="255" required /></label>
+        <label>Description<textarea id="pull-edit-body" maxlength="10000"></textarea></label>
+        <div class="issue-edit-actions">
+          <button id="save-pull-content" type="submit">Save context</button>
+          <button id="cancel-pull-edit" type="button">Cancel</button>
+        </div>
+        <div id="pull-edit-status" class="small" role="status" aria-live="assertive"></div>
+      </form>
     </div>
     <section id="pull-conversation" tabindex="-1">
       <h2>Full conversation</h2><div id="pull-comments"></div>
@@ -1482,15 +1723,83 @@
       <div id="pull-review-status" class="small" aria-live="polite">Expand to load changed files and merge readiness.</div>
       <button class="pull-retry" id="pull-review-retry" type="button" hidden>Retry review data</button>
       <div class="row"><span class="pill" id="pull-ci-state">CI unknown</span><span class="pill" id="pull-merge-state">Review data not loaded</span></div>
+      <section class="pull-branch-update" id="pull-branch-update" aria-labelledby="pull-branch-update-heading" hidden>
+        <h3 id="pull-branch-update-heading">Bring branch up to date</h3>
+        <p class="small" id="pull-branch-update-status" role="status" aria-live="assertive"></p>
+        <button id="update-pull-branch" type="button">Update branch</button>
+      </section>
+      <section class="pull-reviewer-summary" aria-labelledby="pull-reviewer-heading">
+        <h3 id="pull-reviewer-heading">Reviewer status</h3>
+        <div id="pull-reviewer-status" class="small" aria-live="polite">Reviewer status not loaded.</div>
+        <div id="pull-reviewer-statuses"></div>
+        <button id="request-updated-pull-review" type="button" hidden>Request updated review</button>
+        <section class="pull-feedback-pass" id="pull-feedback-pass" aria-labelledby="pull-feedback-heading" hidden>
+          <div class="pull-feedback-pass-heading">
+            <div><span class="small" id="pull-feedback-progress"></span><h4 id="pull-feedback-heading">Address review feedback</h4></div>
+            <button id="close-pull-feedback" type="button">Close</button>
+          </div>
+          <p class="small" id="pull-feedback-location"></p>
+          <p id="pull-feedback-body"></p>
+          <div class="small" id="pull-feedback-context" aria-live="polite"></div>
+          <button id="make-pull-feedback-fix" type="button" hidden>Make code change</button>
+          <section class="pull-feedback-file-editor" id="pull-feedback-file-editor" hidden>
+            <h5>Edit <span id="pull-feedback-file-path"></span></h5>
+            <label for="pull-feedback-file-content">File content</label>
+            <textarea id="pull-feedback-file-content" spellcheck="false" maxlength="131072"></textarea>
+            <label for="pull-feedback-commit-message">Commit message</label>
+            <input id="pull-feedback-commit-message" maxlength="120" placeholder="fix: address review feedback">
+            <div class="pull-feedback-file-actions">
+              <button id="cancel-pull-feedback-fix" type="button" hidden>Cancel change</button>
+              <button id="commit-pull-feedback-fix" type="button" hidden>Commit to pull branch</button>
+            </div>
+          </section>
+          <fieldset class="pull-feedback-dispositions">
+            <legend>Disposition</legend>
+            <button type="button" data-feedback-disposition="addressed">Addressed</button>
+            <button type="button" data-feedback-disposition="discussion">Needs discussion</button>
+            <button type="button" data-feedback-disposition="skipped">Skip for now</button>
+          </fieldset>
+          <label for="pull-feedback-note">Response note (optional)</label>
+          <textarea id="pull-feedback-note" maxlength="1000" placeholder="What changed or needs discussion?"></textarea>
+          <div class="pull-feedback-navigation">
+            <button id="previous-pull-feedback" type="button">Previous</button>
+            <button id="next-pull-feedback" type="button">Next</button>
+          </div>
+          <button id="finish-pull-feedback" type="button" disabled>Post feedback response</button>
+          <button id="request-feedback-review" type="button" hidden>Request updated review from this reviewer</button>
+          <div id="pull-feedback-status" class="small" role="status" aria-live="assertive"></div>
+        </section>
+      </section>
       <details class="ci-checks" id="pull-checks">
         <summary><span>Checks</span><span class="small" id="pull-checks-summary">Not loaded</span></summary>
         <button class="ci-check-refresh" id="refresh-pull-checks" type="button">Refresh checks</button>
         <div class="ci-check-list" id="pull-check-list"></div>
+        <section class="ci-check-recovery" id="pull-check-recovery" aria-labelledby="pull-check-recovery-title" hidden>
+          <h3 id="pull-check-recovery-title" tabindex="-1">Failed check</h3>
+          <div id="pull-check-recovery-status" class="small" role="status" aria-live="assertive"></div>
+          <pre class="ci-check-log" id="pull-check-log" tabindex="0"></pre>
+          <div class="ci-check-recovery-actions">
+            <button id="retry-pull-check" type="button" disabled>Retry failed job</button>
+            <button id="close-pull-check-recovery" type="button">Close details</button>
+          </div>
+        </section>
       </details>
       <div class="pull-review-tools"><span id="pull-review-progress" class="small" aria-live="polite">Review progress unavailable.</span><button id="next-unreviewed-pull-file" type="button" disabled>Next unreviewed</button></div>
       <div id="pull-files"></div>
       <button id="merge-pull" type="button" disabled>Merge</button>
     </details>
+    <details class="pull-review-request" id="pull-review-request">
+      <summary>Request review</summary>
+      <div>
+        <button id="publish-draft-pull" type="button" hidden>Ready for review</button>
+        <div id="publish-draft-pull-status" class="small" aria-live="assertive"></div>
+        <button id="load-pull-reviewers" type="button">Choose reviewer</button>
+        <label for="pull-review-recipient" class="small">Eligible repository reviewer</label>
+        <select id="pull-review-recipient" disabled><option value="">Select a teammate</option></select>
+        <button id="confirm-pull-review" type="button" disabled>Request review</button>
+        <div id="pull-review-request-status" class="small" aria-live="assertive">Load teammates to request a review.</div>
+      </div>
+    </details>
     <details class="pull-ownership" id="pull-ownership">
       <summary>Ownership</summary>
       <div>
@@ -1501,12 +1810,28 @@
         <div id="pull-handoff-status" class="small" aria-live="assertive">Load teammates to transfer ownership.</div>
       </div>
     </details>
+    <details class="pull-lifecycle" id="pull-lifecycle" hidden>
+      <summary>Close pull request</summary>
+      <div>
+        <p class="small">Close an obsolete pull request without deleting its branch or discussion.</p>
+        <button id="close-authored-pull" type="button" hidden>Close pull request</button>
+        <div id="pull-lifecycle-status" class="small" role="status" aria-live="assertive"></div>
+      </div>
+    </details>
+    <section class="pull-close-receipt" id="pull-close-receipt" aria-labelledby="pull-close-receipt-title" hidden>
+      <h3 id="pull-close-receipt-title" tabindex="-1">Pull request closed.</h3>
+      <p class="small">This pull request was removed from active work. Reopen it if the close was accidental.</p>
+      <button id="reopen-authored-pull" type="button">Reopen pull request</button>
+      <div id="pull-reopen-status" class="small" role="status" aria-live="assertive"></div>
+    </section>
     <div class="pull-sheet-actions">
       <button class="share-work-route" type="button">Share</button>
+      <button id="watch-pull-detail" type="button">Watch pull request</button>
       <button id="release-pull" type="button">Release assignment</button>
       <a id="open-pull-gitea" href="#" target="_blank" rel="noopener noreferrer">Open in Gitea</a>
       <details class="detail-defer"><summary>Defer</summary><div class="detail-defer-options"><button type="button" data-detail-defer-preset="today" disabled data-planning-disabled>Later today</button><button type="button" data-detail-defer-preset="tomorrow" disabled data-planning-disabled>Tomorrow</button><button type="button" data-detail-defer-custom disabled data-planning-disabled>Choose date &amp; time</button><button type="button" data-detail-defer-cancel>Cancel</button></div></details>
     </div>
+    <div id="pull-watch-status" class="detail-watch-status small" aria-live="polite"></div>
     <nav class="work-session-nav" aria-label="Work session" hidden>
       <span class="small" aria-live="polite" data-work-session-progress></span>
       <button type="button" data-work-session-previous>Previous</button>
@@ -1625,12 +1950,19 @@
 </section>
 
 <section class="mobile-today-hud" data-mobile-today-hud aria-label="Active Today session" hidden>
+  <div class="mobile-first-task-coach small" data-mobile-first-task-coach hidden>
+    <strong>Complete your first task</strong>
+    <span>Open it, then use Done &amp; next after a real outcome.</span>
+  </div>
   <button class="mobile-today-summary" data-mobile-today-open type="button" aria-label="Open current Today item"></button>
   <div class="small" data-work-session-progress aria-live="polite"></div>
   <button data-mobile-today-complete type="button" hidden>Done &amp; next</button>
   <button data-mobile-today-toggle data-work-session-timer-toggle type="button">Pause timer</button>
   <button data-mobile-today-more type="button" aria-controls="mobile-today-actions" aria-haspopup="dialog">More</button>
 </section>
+<div class="mobile-first-task-receipt" id="mobile-first-task-receipt" role="status" aria-live="polite" hidden>
+  First task completed · continue Today
+</div>
 <dialog class="mobile-today-actions" id="mobile-today-actions" aria-modal="true" aria-labelledby="mobile-today-actions-title">
   <section class="mobile-today-actions-panel">
     <header><h2 id="mobile-today-actions-title">Today session</h2><button data-mobile-today-actions-close type="button">Close</button></header>
@@ -1643,10 +1975,25 @@
       <button class="mobile-today-blocked" data-mobile-today-blocked type="button" hidden>Report blocker</button>
       <button data-today-break-open type="button">Take break</button>
       <button data-work-session-adjust-plan type="button" hidden>Adjust remaining plan</button>
+      <button data-work-session-reschedule-week type="button">Reschedule to Week Ahead</button>
       <button data-mobile-today-end type="button">End session</button>
     </div>
   </section>
 </dialog>
+<dialog class="today-week-reschedule" id="today-week-reschedule" aria-labelledby="today-week-reschedule-title">
+  <section class="today-week-reschedule-panel">
+    <header>
+      <div><p class="small muted">Active Today item</p><h2 id="today-week-reschedule-title">Reschedule to Week Ahead</h2></div>
+      <button id="cancel-today-week-reschedule" type="button">Cancel</button>
+    </header>
+    <p class="small">Choose a future day after reviewing its current planned load. Today will continue with the next ready item.</p>
+    <div class="today-week-reschedule-days" id="today-week-reschedule-days" role="radiogroup" aria-label="Week Ahead destination"></div>
+    <label for="today-week-reschedule-estimate">Estimate in minutes</label>
+    <input id="today-week-reschedule-estimate" type="number" inputmode="numeric" min="5" max="1440" step="5" required />
+    <p id="today-week-reschedule-status" class="small" role="status" aria-live="assertive"></p>
+    <button id="confirm-today-week-reschedule" type="button" disabled>Move to Week Ahead &amp; continue</button>
+  </section>
+</dialog>
 <dialog class="today-progress-sheet" id="today-progress-sheet" aria-labelledby="today-progress-title">
   <section class="today-progress-panel">
     <header><div><p class="small muted">Active Today item</p><h2 id="today-progress-title">Add progress update</h2></div><button id="cancel-today-progress" type="button">Cancel</button></header>
@@ -1765,18 +2112,22 @@
       <div>
         <h3 id="mobile-start-day-heading">Prepare Today</h3>
         <p id="mobile-start-day-summary" class="small" aria-live="polite">Reviewing urgent queues…</p>
-        <p id="mobile-start-day-phases" class="small muted">Checking Agenda, Attention, Updates, and Filed</p>
+        <p id="mobile-start-day-phases" class="small muted">Checking Agenda, Attention, Updates, Filed, and Following</p>
       </div>
       <button class="mobile-start-day-action" id="mobile-start-day-action" type="button">Prepare Today</button>
       <button class="mobile-start-day-finish" id="finish-mobile-start-day" type="button" hidden>Finish for now</button>
     </section>
     <div class="mobile-queue-list">
       <button data-mobile-queue="today" type="button"><span><strong>Today</strong><small>Planned work</small></span><span data-mobile-queue-count="today">0</span></button>
+      <button data-mobile-queue="tomorrow" type="button"><span><strong>Tomorrow</strong><small id="mobile-tomorrow-summary" aria-live="polite">Nothing planned</small></span></button>
+      <button data-mobile-queue="week" type="button"><span><strong>Week Ahead</strong><small id="mobile-week-summary" aria-live="polite">Nothing planned</small></span></button>
       <button data-mobile-queue="agenda" type="button"><span><strong>Agenda</strong><small>Upcoming deadlines</small></span><span data-mobile-queue-count="agenda">0</span></button>
       <button data-mobile-queue="delivery" type="button"><span><strong>Delivery</strong><small>Needs recovery</small></span><span data-mobile-queue-count="delivery">0</span></button>
       <button data-mobile-queue="attention" type="button"><span><strong>Attention</strong><small>Needs a response</small></span><span data-mobile-queue-count="attention">0</span></button>
       <button data-mobile-queue="update" type="button" aria-label="Updates, 0 unread conversations"><span><strong>Updates</strong><small>Unread conversations</small></span><span data-mobile-queue-count="update">0</span></button>
+      <button data-mobile-queue="following" type="button" aria-label="Following, 0 unseen changes"><span><strong>Following</strong><small>Issues and pull requests you watch</small></span><span data-mobile-queue-count="following">0</span></button>
       <button data-mobile-queue="filed" type="button"><span><strong>Filed</strong><small>Issues you delegated</small></span><span data-mobile-queue-count="filed">0</span></button>
+      <button data-mobile-queue="authored" type="button"><span><strong>My PRs</strong><small>Pull requests you authored</small></span><span data-mobile-queue-count="authored">0</span></button>
       <button data-mobile-queue="later" type="button"><span><strong>Later</strong><small>Deferred work</small></span><span data-mobile-queue-count="later">0</span></button>
       <button data-mobile-queue="draft" type="button"><span><strong>Drafts</strong><small>Unfiled captures</small></span><span data-mobile-queue-count="draft">0</span></button>
       <button data-mobile-queue="find" type="button"><span><strong>Find Work</strong><small>Claim something new</small></span></button>
@@ -1785,6 +2136,16 @@
   </section>
 </dialog>
 
+<dialog class="following-sheet" id="following-sheet" aria-labelledby="following-title">
+  <section class="following-panel">
+    <header><div><p class="small muted">Read without taking ownership</p><h2 id="following-title">Following</h2></div><button id="close-following" type="button">Close</button></header>
+    <p id="following-status" class="small" role="status" aria-live="polite"></p>
+    <button id="review-following" class="following-review-action" type="button" hidden>Review new activity</button>
+    <div id="following-list" class="following-list"></div>
+    <button id="retry-following" type="button" hidden>Retry</button>
+  </section>
+</dialog>
+
 <dialog id="mobile-delivery-recovery" class="mobile-delivery-recovery" aria-labelledby="mobile-delivery-recovery-title">
   <section class="mobile-delivery-recovery-panel">
     <header>
@@ -1799,6 +2160,22 @@
   </section>
 </dialog>
 
+<dialog class="mobile-first-task" id="mobile-first-task" aria-labelledby="mobile-first-task-title">
+  <section class="mobile-first-task-panel">
+    <header>
+      <div><p class="small muted">Welcome to Work</p><h2 id="mobile-first-task-title">Start your first task</h2></div>
+      <button id="close-mobile-first-task" type="button">Close</button>
+    </header>
+    <p class="small">Choose work, start it, then return to Work whenever you want to continue.</p>
+    <p id="mobile-first-task-status" class="small" role="status" aria-live="polite"></p>
+    <div class="mobile-first-task-actions">
+      <button id="mobile-first-task-find" type="button">Find &amp; start</button>
+      <button id="mobile-first-task-create" type="button">Create &amp; start</button>
+      <button id="mobile-first-task-setup" type="button">Make this phone work-ready</button>
+    </div>
+  </section>
+</dialog>
+
 <nav class="mobile-task-dock" id="mobile-task-dock" aria-label="Primary tasks">
   <button class="mobile-task-action" data-mobile-task="work" type="button" aria-current="page"><span id="mobile-work-label">Work</span></button>
   <button class="mobile-task-action" data-mobile-task="find" type="button">Find</button>
@@ -1807,9 +2184,39 @@
   <button class="mobile-task-action" data-mobile-task="queues" type="button" aria-label="Queues: no active queues; no upcoming deadlines"><span>Queues <span class="mobile-task-count" id="mobile-queue-count" hidden>0 active</span></span><span class="mobile-task-deadline" id="mobile-deadline-count" hidden>0 due</span></button>
 </nav>
 
+<div class="create-pull-sheet" id="create-pull-sheet" role="dialog" aria-modal="true" aria-labelledby="create-pull-heading" hidden>
+  <section class="create-pull-panel">
+    <header class="create-pull-header">
+      <div><span class="eyebrow">New</span><h3 id="create-pull-heading">Pull request</h3></div>
+      <button id="cancel-create-pull" type="button">Cancel</button>
+    </header>
+    <p class="small">Open a pull request from a branch already pushed to Gitea.</p>
+    <form id="create-pull-form">
+      <label for="create-pull-repository">Repository
+        <select id="create-pull-repository" required><option value="">Choose repository</option></select>
+      </label>
+      <div class="create-pull-branches">
+        <label for="create-pull-head">Source branch<select id="create-pull-head" required disabled></select></label>
+        <label for="create-pull-base">Base branch<select id="create-pull-base" required disabled></select></label>
+      </div>
+      <output id="create-pull-head-receipt" class="small" aria-live="polite"></output>
+      <label for="create-pull-title">Title<input id="create-pull-title" maxlength="255" required autocomplete="off" /></label>
+      <label for="create-pull-body">Context <span class="small">Optional · Markdown</span><textarea id="create-pull-body" maxlength="10000" rows="5"></textarea></label>
+      <fieldset class="create-pull-mode"><legend>Start as</legend>
+        <label><input type="radio" name="create-pull-mode" value="draft" checked /> Draft</label>
+        <label><input type="radio" name="create-pull-mode" value="ready" /> Ready for review</label>
+      </fieldset>
+      <p id="create-pull-status" role="status" aria-live="polite"></p>
+      <button id="submit-create-pull" type="submit" disabled>Create draft pull request</button>
+    </form>
+  </section>
+</div>
+
 <div class="footer">Creative AI-imbued UI • stackchain-dashboard</div>
 
 <script src="static/private-data-registry.js"></script>
+<script src="static/private-data-inventory.js"></script>
+<script src="static/sign-out-review.js"></script>
 <script src="static/session.js"></script>
 <script src="static/feature-loader.js"></script>
 <script src="static/conversation-action-hydrator.js"></script>
@@ -1818,6 +2225,7 @@
 <script src="static/commands.js"></script>
 <script src="static/saved-searches.js"></script>
 <script src="static/search-preview.js"></script>
+<script src="static/following.js"></script>
 <script src="static/search-reply-draft-store.js"></script>
 <script src="static/conversation-reply-draft-store.js"></script>
 <script src="static/conversation-photo-drafts.js"></script>
@@ -1863,6 +2271,12 @@
 <script src="static/plan-today.js"></script>
 <script src="static/plan-today-readiness.js"></script>
 <script src="static/plan-today-preview.js"></script>
+<script src="static/tomorrow-plan.js"></script>
+<script src="static/week-calendar.js"></script>
+<script src="static/week-calendar-import.js"></script>
+<script src="static/week-plan.js"></script>
+<script src="static/today-week-reschedule.js"></script>
+<script src="static/search-week-plan.js"></script>
 <script src="static/today-sync.js"></script>
 <script src="static/today-rollover.js"></script>
 <script src="static/update-ownership.js"></script>
@@ -1886,6 +2300,7 @@
 <script src="static/voice-issue-capture.js"></script>
 <script src="static/voice-conversation-capture.js"></script>
 <script src="static/create-issue-sheet.js"></script>
+<script src="static/create-pull-sheet.js"></script>
 <script src="static/mobile-create-issue-nav.js"></script>
 <script src="static/create-and-start.js"></script>
 <script src="static/assign-and-start.js"></script>
@@ -1901,6 +2316,7 @@
 <script src="static/mobile-today-command-bar.js"></script>
 <script src="static/mobile-task-dock.js"></script>
 <script src="static/mobile-pull-refresh.js"></script>
+<script src="static/mobile-first-task.js"></script>
 <script src="static/mobile-work-entry.js"></script>
 <script src="static/mobile-queue-launcher.js"></script>
 <script src="static/mobile-delivery-recovery.js"></script>
@@ -1916,8 +2332,8 @@
 <script src="static/mobile-launch.js"></script>
 <script src="static/mobile-insights.js"></script>
 <script src="static/mobile-app-shortcuts.js"></script>
+<script src="static/mobile-app-badge.js"></script>
 <script src="static/install-app.js"></script>
-<script src="static/private-data-inventory.js"></script>
 <script src="static/private-device-data.js"></script>
 <script src="static/device-storage.js"></script>
 <script src="static/mobile-device-setup.js"></script>

frontend/issue-sheet.js

@@ -572,6 +572,7 @@ function createIssueSheet({ fetchJson, storage, renderMarkdown = globalThis.rend
         headers: { Accept: 'application/json' },
       }).then(result => {
         if (result?.state !== 'closed') throw new Error('Issue closure was not confirmed.');
+        globalThis.dispatchEvent?.(new CustomEvent('stackchain:issue-closed',{detail:item}));
         return result;
       }).finally(() => { closeRequest = null; });
       return closeRequest;

frontend/live-data-status.js

@@ -74,5 +74,112 @@
     return { run };
   }
 
-  return { describe, createRefreshController };
+  function createSheetController(options) {
+    let ownsDetour = false;
+    let backgroundState = null;
+
+    function focusableControls() {
+      return [...options.sheet.querySelectorAll('button:not([disabled]), [tabindex]:not([tabindex="-1"])')]
+        .filter(control => !control.hidden);
+    }
+
+    function containBackground() {
+      if (backgroundState) return;
+      backgroundState = new Map((options.backgroundElements || []).map(element => [element, element.inert]));
+      backgroundState.forEach((_wasInert, element) => { element.inert = true; });
+    }
+
+    function releaseBackground() {
+      if (!backgroundState) return;
+      backgroundState.forEach((wasInert, element) => { element.inert = wasInert; });
+      backgroundState = null;
+    }
+
+    function finishClose() {
+      if (options.sheet.hidden) return;
+      options.sheet.hidden = true;
+      options.trigger.setAttribute('aria-expanded', 'false');
+      if (options.pausedStatus) options.pausedStatus.hidden = true;
+      releaseBackground();
+      if (ownsDetour) options.timerView?.finishDetour?.();
+      ownsDetour = false;
+      options.trigger.focus?.();
+    }
+
+    function close() {
+      if (options.history?.state?.liveDataStatus) {
+        options.history.back();
+        return;
+      }
+      finishClose();
+    }
+
+    function open() {
+      if (!options.sheet.hidden) return;
+      ownsDetour = options.timerView?.beginDetour?.('live-data-status')?.reason === 'live-data-status';
+      if (options.pausedStatus) options.pausedStatus.hidden = !ownsDetour;
+      if (options.returnButton) options.returnButton.hidden = !ownsDetour;
+      containBackground();
+      options.sheet.hidden = false;
+      options.trigger.setAttribute('aria-expanded', 'true');
+      if (options.history && !options.history.state?.liveDataStatus) {
+        options.history.pushState({ ...options.history.state, liveDataStatus:true }, '');
+      }
+      options.closeButton.focus();
+    }
+
+    function start() {
+      options.trigger.addEventListener('click', open);
+      options.closeButton.addEventListener('click', close);
+      options.returnButton?.addEventListener('click', close);
+      options.sheet.addEventListener('click', event => {
+        if (event.target === options.sheet) close();
+      });
+      options.escapeTarget?.addEventListener('keydown', event => {
+        if (options.sheet.hidden) return;
+        if (event.key === 'Escape') {
+          event.preventDefault?.();
+          close();
+          return;
+        }
+        if (event.key !== 'Tab') return;
+        const controls = focusableControls();
+        if (!controls.length) return;
+        const first = controls[0];
+        const last = controls[controls.length - 1];
+        if (event.shiftKey && event.target === first) {
+          event.preventDefault();
+          last.focus();
+        } else if (!event.shiftKey && event.target === last) {
+          event.preventDefault();
+          first.focus();
+        }
+      });
+      options.historyTarget?.addEventListener('popstate', event => {
+        if (!options.sheet.hidden && !event.state?.liveDataStatus) finishClose();
+      });
+    }
+
+    return { start, open, close };
+  }
+
+  function mount(options) {
+    const document = options.document;
+    const qs = selector => document.querySelector(selector);
+    const trigger = qs('#open-live-data-status');
+    trigger.addEventListener('click', options.onOpen);
+    return createSheetController({
+      sheet:qs('#live-data-status-sheet'), trigger,
+      closeButton:qs('#close-live-data-status'),
+      returnButton:qs('#return-from-live-data-status'),
+      pausedStatus:qs('#live-data-status-today-paused'),
+      timerView:options.timerView,
+      history:options.window.history,
+      historyTarget:options.window,
+      escapeTarget:document,
+      backgroundElements:[qs('header'), qs('main'), qs('#mobile-task-dock')].filter(Boolean),
+    });
+  }
+
+  return { describe, createRefreshController, createSheetController, mount };
 });

frontend/login.js

@@ -119,7 +119,7 @@
       return;
     }
     if (reason === 'session-idle') {
-      status.textContent = 'Stackchain locked after inactivity. Your drafts and queued work are still on this device. Sign in to resume.';
+      status.textContent = 'Stackchain locked. Your drafts and queued work are still on this device. Sign in to resume.';
       return;
     }
     if (reason !== 'session-revoked') return;

frontend/mobile-app-badge.js

@@ -0,0 +1,121 @@
+(function(root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileAppBadge = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileAppBadge({
+  control,
+  status,
+  container,
+  navigator,
+  storage,
+  serviceWorker,
+}) {
+  const ENABLED_KEY = 'stackchain.app-badge.enabled.v1';
+  let enabled = false;
+  const confirmedCounts = {updates:0, following:0};
+  let renderedCount = null;
+
+
+  function available() {
+    return typeof navigator?.setAppBadge === 'function'
+      && typeof navigator?.clearAppBadge === 'function';
+  }
+
+  async function syncPreference() {
+    try {
+      const registration = await serviceWorker?.ready;
+      registration?.active?.postMessage({type:'stackchain-app-badge-preference', enabled});
+      return Boolean(registration?.active);
+    } catch (_error) {
+      return false;
+    }
+  }
+
+  async function syncCount(channel, count) {
+    if (!enabled) return;
+    try {
+      const registration = await serviceWorker?.ready;
+      registration?.active?.postMessage({type:'stackchain-app-badge-count', channel, count});
+    } catch (_error) { /* A later refresh can retry. */ }
+  }
+
+  async function render() {
+    const confirmedCount = Math.min(9999, confirmedCounts.updates + confirmedCounts.following);
+    if (!enabled || !available() || renderedCount === confirmedCount) return true;
+    try {
+      if (confirmedCount > 0) await navigator.setAppBadge(confirmedCount);
+      else await navigator.clearAppBadge();
+      renderedCount = confirmedCount;
+      if (status) status.textContent = 'App icon badge is on and up to date.';
+      return true;
+    } catch (_error) {
+      if (status) status.textContent = 'Could not update the app icon badge. Stackchain still has the confirmed count.';
+      return false;
+    }
+  }
+
+  async function change() {
+    enabled = Boolean(control?.checked);
+    if (enabled) storage?.setItem(ENABLED_KEY, 'true');
+    else storage?.removeItem(ENABLED_KEY);
+    await syncPreference();
+    if (enabled) {
+      if (confirmedCounts.updates > 0) await syncCount('updates', confirmedCounts.updates);
+      if (confirmedCounts.following > 0) await syncCount('following', confirmedCounts.following);
+    }
+    if (!enabled && available()) {
+      confirmedCounts.updates = 0;
+      confirmedCounts.following = 0;
+      try {
+        await navigator.clearAppBadge();
+        renderedCount = null;
+        if (status) status.textContent = 'App icon badge is off.';
+        return true;
+      } catch (_error) {
+        if (status) status.textContent = 'App icon badge is off, but the browser could not clear the old count.';
+        return false;
+      }
+    }
+    return render();
+  }
+
+  function start() {
+    if (!available()) {
+      if (container) container.hidden = true;
+      if (control) control.disabled = true;
+      if (status) status.textContent = 'App icon badges are unavailable in this browser.';
+      return false;
+    }
+    enabled = storage?.getItem(ENABLED_KEY) === 'true';
+    if (enabled) void syncPreference();
+    if (control) {
+      control.checked = enabled;
+      control.addEventListener('change', change);
+    }
+    if (status) status.textContent = enabled ? 'App icon badge is on.' : 'App icon badge is off.';
+    return true;
+  }
+
+  function readiness() {
+    if (!available()) return {state:'unavailable', detail:'App icon badges are unavailable in this browser.'};
+    return enabled
+      ? {state:'complete', detail:'The app icon shows review attention.'}
+      : {state:'incomplete', detail:'Show review attention without opening Stackchain.'};
+  }
+
+  async function enable() {
+    if (!available()) return false;
+    if (control) control.checked = true;
+    await change();
+    return true;
+  }
+
+  async function reconcile(channel, count, authoritative = false) {
+    if (!Object.hasOwn(confirmedCounts, channel)
+        || authoritative !== true || !Number.isSafeInteger(count) || count < 0 || count > 9999) return false;
+    confirmedCounts[channel] = count;
+    await syncCount(channel, count);
+    return render();
+  }
+
+  return {start, change, reconcile, readiness, enable};
+});

frontend/mobile-device-setup.js

@@ -5,13 +5,35 @@
   const promptDismissKey = 'stackchain.device-setup-prompt-dismissed-until';
   const promptDismissMs = 7 * 24 * 60 * 60 * 1000;
   const steps = [
-    ['install', options.installButton, options.installStatus, options.install],
-    ['offline', options.offlineButton, options.offlineStatus, options.enableOffline],
-    ['push', options.pushButton, options.pushStatus, options.enablePush],
-    ['deadline', options.deadlineButton, options.deadlineStatus, options.enableDeadline],
-  ];
+    ['install', options.installButton, options.installStatus, options.install, 'Install'],
+    ['offline', options.offlineButton, options.offlineStatus, options.enableOffline, 'Enable'],
+    ['protection', options.protectionButton, options.protectionStatus, options.protectStorage, 'Protect'],
+    ['push', options.pushButton, options.pushStatus, options.enablePush, 'Enable'],
+    ['appBadge', options.appBadgeButton, options.appBadgeStatus, options.enableAppBadge, 'Enable'],
+    ['deadline', options.deadlineButton, options.deadlineStatus, options.enableDeadline, 'Enable'],
+  ].filter(([_name, button, status, action]) => button && status && action);
   let trigger = options.launcher;
   let ownsDetour = false;
+  let backgroundInert = null;
+  let pendingResume = true;
+
+  function focusableControls() {
+    return [...options.sheet.querySelectorAll(
+      'button:not([disabled]), select:not([disabled]), input:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex="-1"])'
+    )].filter(control => !control.hidden);
+  }
+
+  function containBackground() {
+    if (backgroundInert) return;
+    backgroundInert = new Map((options.backgroundElements || []).map(element => [element, element.inert]));
+    backgroundInert.forEach((_wasInert, element) => { element.inert = true; });
+  }
+
+  function releaseBackground() {
+    if (!backgroundInert) return;
+    backgroundInert.forEach((wasInert, element) => { element.inert = wasInert; });
+    backgroundInert = null;
+  }
 
   function readinessCounts(readiness) {
     const available = steps.filter(([name]) => readiness[name].state !== 'unavailable').length;
@@ -34,9 +56,10 @@
     const readiness = await options.getReadiness();
     let available = 0;
     let complete = 0;
-    steps.forEach(([name, button, status]) => {
+    steps.forEach(([name, button, status, _action, defaultActionLabel]) => {
       const step = readiness[name];
       status.textContent = step.detail;
+      button.textContent = step.actionLabel || defaultActionLabel;
       button.hidden = step.state === 'complete' || step.state === 'unavailable';
       button.disabled = step.state === 'pending';
       if (step.state !== 'unavailable') available += 1;
@@ -55,17 +78,31 @@
       ownsDetour = options.timerView?.beginDetour?.('device-setup')?.reason === 'device-setup';
     }
     await render();
+    containBackground();
     options.sheet.hidden = false;
+    if (options.history && !options.history.state?.deviceSetup) {
+      options.history.pushState({...options.history.state, deviceSetup:true}, '');
+    }
     options.closeButton.focus();
   }
 
-  function close(resume = true) {
+  function finishClose(resume = true) {
     options.sheet.hidden = true;
+    releaseBackground();
     if (resume && ownsDetour) options.timerView?.finishDetour?.();
     ownsDetour = false;
     trigger?.focus?.();
   }
 
+  function close(resume = true) {
+    if (options.history?.state?.deviceSetup) {
+      pendingResume = resume;
+      options.history.back();
+      return;
+    }
+    finishClose(resume);
+  }
+
   async function start() {
     options.launcher.addEventListener('click', open);
     options.promptLauncher?.addEventListener('click', open);
@@ -81,7 +118,28 @@
       if (event.target === options.sheet) close();
     });
     options.escapeTarget.addEventListener('keydown', event => {
-      if (event.key === 'Escape' && !options.sheet.hidden) close();
+      if (event.key === 'Escape' && !options.sheet.hidden) {
+        event.preventDefault?.();
+        close();
+      }
+      if (event.key !== 'Tab' || options.sheet.hidden) return;
+      const controls = focusableControls();
+      if (!controls.length) return;
+      const first = controls[0];
+      const last = controls[controls.length - 1];
+      if (event.shiftKey && event.target === first) {
+        event.preventDefault();
+        last.focus();
+      } else if (!event.shiftKey && event.target === last) {
+        event.preventDefault();
+        first.focus();
+      }
+    });
+    options.historyTarget?.addEventListener('popstate', event => {
+      if (!options.sheet.hidden && !event.state?.deviceSetup) {
+        finishClose(pendingResume);
+        pendingResume = true;
+      }
     });
     steps.forEach(([_name, button, _status, action]) => {
       button.addEventListener('click', async () => {
@@ -104,13 +162,18 @@ if (typeof module === 'object' && module.exports) {
 
 function mountMobileDeviceSetup(options) {
   const qs = selector => options.document.querySelector(selector);
+  const window = options.window || options.document.defaultView;
   return createMobileDeviceSetup({
     launcher:qs('#open-device-setup'), closeButton:qs('#close-device-setup'),
     sheet:qs('#device-setup-sheet'), installButton:qs('#device-setup-install'),
     offlineButton:qs('#device-setup-offline'), pushButton:qs('#device-setup-push'),
+    protectionButton:qs('#device-setup-protection'),
+    appBadgeButton:qs('#device-setup-app-badge'),
     deadlineButton:qs('#device-setup-deadline'),
     installStatus:qs('#device-setup-install-status'), offlineStatus:qs('#device-setup-offline-status'),
+    protectionStatus:qs('#device-setup-protection-status'),
     pushStatus:qs('#device-setup-push-status'), deadlineStatus:qs('#device-setup-deadline-status'),
+    appBadgeStatus:qs('#device-setup-app-badge-status'),
     readyStatus:qs('#device-setup-ready-status'),
     promptCard:qs('#device-readiness-card'), promptSummary:qs('#device-readiness-summary'),
     promptLauncher:qs('#finish-device-setup'), promptDismiss:qs('#dismiss-device-readiness'),
@@ -119,6 +182,11 @@ function mountMobileDeviceSetup(options) {
     timerView:options.timerView,
     isMobile:options.isMobile || (() => innerWidth <= 600),
     escapeTarget:options.document,
+    history:window?.history,
+    historyTarget:window,
+    backgroundElements:[
+      qs('header'), qs('main'), qs('#mobile-task-dock'),
+    ].filter(Boolean),
     getReadiness:() => ({
       install:options.installApp.state(),
       offline:!options.offlineAvailable()
@@ -126,16 +194,16 @@ function mountMobileDeviceSetup(options) {
         : options.offlineEnabled()
           ? {state:'complete', detail:qs('#offline-work-status').textContent || 'Offline work is saved.'}
           : {state:'incomplete', detail:'Private My Work and Today data are not saved offline.'},
-      push:qs('#push-updates').disabled
-        ? {state:'unavailable', detail:qs('#push-update-status').textContent || 'Update notifications are unavailable.'}
-        : qs('#push-updates').checked
-          ? {state:'complete', detail:'New update notifications are enabled.'}
-          : {state:'incomplete', detail:qs('#push-update-status').textContent || 'New update notifications are off.'},
+      protection:options.storageProtectionReadiness(),
+      push:options.notificationReadiness(),
+      appBadge:options.appBadgeReadiness(),
       deadline:options.deadlineReadiness(),
     }),
     install:() => options.installApp.install(),
     enableOffline:options.enableOffline,
+    protectStorage:options.protectStorage,
     enablePush:options.enablePush,
+    enableAppBadge:options.enableAppBadge,
     enableDeadline:options.enableDeadline,
   });
 }

frontend/mobile-first-task.js

@@ -0,0 +1,136 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileFirstTask = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileFirstTask(options) {
+  const doc = typeof document !== 'undefined' ? document : null;
+  const win = typeof window !== 'undefined' ? window : null;
+  options = Object.assign({
+    storage: typeof localStorage !== 'undefined' ? localStorage : null,
+    isOnline: () => typeof navigator === 'undefined' || navigator.onLine,
+    mediaQuery: win?.matchMedia('(max-width: 600px)') || {matches:false},
+    eventTarget: win,
+    setTimer: (...args) => globalThis.setTimeout(...args),
+    sheet: doc?.querySelector('#mobile-first-task'),
+    title: doc?.querySelector('#mobile-first-task-title'),
+    findButton: doc?.querySelector('#mobile-first-task-find'),
+    createButton: doc?.querySelector('#mobile-first-task-create'),
+    setupButton: doc?.querySelector('#mobile-first-task-setup'),
+    closeButton: doc?.querySelector('#close-mobile-first-task'),
+    status: doc?.querySelector('#mobile-first-task-status'),
+    coach: doc?.querySelector('[data-mobile-first-task-coach]'),
+    receipt: doc?.querySelector('#mobile-first-task-receipt'),
+    isTodayActive: () => false,
+    onFind: () => doc?.querySelector('#find-work')?.click(),
+    onCreate: () => doc?.querySelector('#new-issue')?.click(),
+    onSetup: () => doc?.querySelector('#open-device-setup')?.click(),
+  }, options);
+  const prefix = 'stackchain.first-task.v1:';
+
+  function account() {
+    return String(options.getLogin?.() || '').trim().toLowerCase();
+  }
+
+  function key() {
+    const login = account();
+    return login ? prefix + login : '';
+  }
+
+  function state() {
+    const currentKey = key();
+    if (!currentKey) return '';
+    try { return options.storage.getItem(currentKey) || ''; }
+    catch (_error) { return ''; }
+  }
+
+  function store(value) {
+    const currentKey = key();
+    const current = state();
+    if (!currentKey || current === value || current === 'complete') return false;
+    try {
+      options.storage.setItem(currentKey, value);
+      return true;
+    } catch (_error) { return false; }
+  }
+
+  function adoptRemote(value) {
+    return ['coaching', 'complete'].includes(value) && store(value);
+  }
+
+  function required() {
+    return Boolean(options.mediaQuery.matches && account() && !options.isTodayActive() && !state());
+  }
+
+  function renderCoach() {
+    if (!options.coach) return;
+    const visible = options.mediaQuery.matches && state() === 'coaching' && options.isTodayActive();
+    options.coach.hidden = !visible;
+    const host = options.coach.closest?.('[data-mobile-today-hud]');
+    if (visible && host) host.hidden = false;
+  }
+
+  function render() {
+    const online = options.isOnline();
+    const awaitingStart = options.hasWork();
+    options.findButton.disabled = !online;
+    if (options.title) options.title.textContent = awaitingStart ? 'Finish starting your first task' : 'Start your first task';
+    options.findButton.textContent = 'Find & start';
+    options.createButton.textContent = 'Create & start';
+    options.status.textContent = awaitingStart ?
+      'Your task is ready. Start it from Find or create and start another task.' : online ?
+      'Choose a task to claim and start, or create and start one of your own.' :
+      'You are offline. Create a task now and it will stay in Drafts until you reconnect.';
+  }
+
+  function open() {
+    if (!required()) return false;
+    render();
+    if (!options.sheet.open) options.sheet.showModal();
+    (options.findButton.disabled ? options.createButton : options.findButton).focus();
+    return true;
+  }
+
+  function refresh() {
+    if (account() && options.isTodayActive() && state() !== 'complete') {
+      store('coaching');
+      if (options.sheet.open) options.sheet.close();
+      renderCoach();
+      return 'coaching';
+    }
+    renderCoach();
+    if (options.sheet.open) render();
+    if (required() && options.hasWork()) return 'awaiting-start';
+    return required() ? 'required' : 'inactive';
+  }
+
+  function completeOutcome() {
+    if (state() !== 'coaching') return false;
+    store('complete');
+    options.eventTarget?.dispatchEvent?.(new CustomEvent('stackchain:first-task-complete'));
+    renderCoach();
+    if (options.receipt) {
+      options.receipt.hidden = false;
+      options.setTimer?.(() => { options.receipt.hidden = true; }, 6000);
+    }
+    return true;
+  }
+
+  function handoff(callback, requiresOnline = false) {
+    if (requiresOnline && !options.isOnline()) return;
+    if (options.sheet.open) options.sheet.close();
+    callback();
+  }
+
+  function start() {
+    options.findButton.addEventListener('click', () => handoff(options.onFind, true));
+    options.createButton.addEventListener('click', () => handoff(options.onCreate));
+    options.setupButton.addEventListener('click', () => handoff(options.onSetup));
+    options.closeButton.addEventListener('click', () => {
+      if (options.sheet.open) options.sheet.close();
+    });
+    options.eventTarget?.addEventListener('online', render);
+    options.eventTarget?.addEventListener('offline', render);
+  }
+
+  globalThis.stackchainFirstTaskCompleting = () => state() === 'coaching';
+  return {required, open, refresh, render, start, completeOutcome, adoptRemote};
+});

frontend/mobile-insights.js

@@ -8,12 +8,25 @@
   let active = false;
   let previous = '#/my-work';
   let retries = 0;
+  let backgroundInert = null;
 
   function attr(element, name, value) {
     if (value === null) element.removeAttribute(name);
     else element.setAttribute(name, value);
   }
 
+  function containBackground() {
+    if (backgroundInert) return;
+    backgroundInert = new Map(o.backgrounds.map(element => [element, element.inert]));
+    backgroundInert.forEach((_wasInert, element) => { element.inert = true; });
+  }
+
+  function releaseBackground() {
+    if (!backgroundInert) return;
+    backgroundInert.forEach((wasInert, element) => { element.inert = wasInert; });
+    backgroundInert = null;
+  }
+
   function render(open, focus = false) {
     const wasActive = active;
     active = Boolean(open && o.mediaQuery.matches);
@@ -28,7 +41,8 @@
     attr(o.root, 'aria-modal', active ? 'true' : null);
     attr(o.root, 'aria-hidden', active || !o.mediaQuery.matches ? null : 'true');
     o.root.inert = !active && o.mediaQuery.matches;
-    o.backgrounds.forEach(element => { element.inert = active; });
+    if (active) containBackground();
+    else releaseBackground();
     o.dock.hidden = active;
     attr(o.hud, 'data-overlay-hidden', active ? 'true' : null);
     if (active) o.closeButton.focus();

frontend/mobile-queue-launcher.js

@@ -33,6 +33,7 @@
     if (name === 'today') return options.openToday();
     if (name === 'agenda') return options.openAgenda();
     if (name === 'update' && options.openUpdates) return options.openUpdates();
+    if (name === 'following' && options.openFollowing) return options.openFollowing();
     if (name === 'filed' && options.openFiled) return options.openFiled();
     options.selectFilter(name);
     const action = options.firstAction(name);

frontend/mobile-search-preview-nav.js

@@ -98,12 +98,14 @@ function attachMobileSearchPreviewNavigation({document, window}) {
     buttons:{
       overview:bySection('overview'),
       conversation:bySection('conversation'),
+      changes:bySection('changes'),
       reply:bySection('reply'),
       actions:bySection('actions'),
     },
     targets:{
       overview:document.getElementById('search-preview-overview'),
       conversation:document.getElementById('search-preview-conversation'),
+      changes:document.getElementById('search-preview-review'),
       reply,
       actions:document.getElementById('search-preview-actions'),
     },

frontend/mobile-start-day.js

@@ -10,6 +10,7 @@
     ['attention', 'Attention'],
     ['update', 'Updates'],
     ['filed', 'Filed'],
+    ['following', 'Following'],
   ];
   const anonymousItems = new WeakMap();
   let anonymousItemSequence = 0;
@@ -102,19 +103,27 @@
 
   function briefing() {
     const counts = options.getCounts ? options.getCounts() : {};
-    const phases = reviewPhases(counts);
+    let phases = reviewPhases(counts);
+    const followingUnavailable = counts.followingUnavailable === true;
+    if (followingUnavailable) {
+      phases = phases.filter(phase => phase.name !== 'following');
+      phases.push({name:'following', label:'Following unavailable', count:count(counts.following)});
+    }
     const total = phases.reduce((sum, phase) => sum + phase.count, 0);
     const today = count(counts.today);
     const delivery = phases.find(phase => phase.name === 'delivery')?.count || 0;
     const other = total - delivery;
     const next = phases.length ? phases[0].name : (today ? 'today' : 'find');
     const nextLabel = next === 'delivery' ? 'Review Delivery' :
-      (phases.length ? 'Review ' + phases[0].label : (today ? 'Continue Today' : 'Find Work'));
+      (next === 'following' && followingUnavailable ? 'Retry Following' :
+      (phases.length ? 'Review ' + phases[0].label : (today ? 'Continue Today' : 'Find Work')));
+    const followingRetry = next === 'following' && followingUnavailable;
     return {
       total,
       next,
       label: nextLabel,
-      summary: delivery ? delivery + (delivery === 1 ? ' delivery needs' : ' deliveries need') +
+      summary: followingRetry ? 'Following needs retry before Today · ' + today + ' planned' :
+        delivery ? delivery + (delivery === 1 ? ' delivery needs' : ' deliveries need') +
         ' action before Today' + (other ? ' · ' + other + ' other ' + (other === 1 ? 'item' : 'items') : '') +
         ' · ' + today + ' planned' :
         total ? total + ' items before Today · ' + today + ' planned' :

frontend/mobile-work-entry.js

@@ -12,6 +12,7 @@
     if (options.getTodayCount() > 0 && options.isTodayResumable()) return 'resume';
     if (options.getTodayCount() > 0) return 'start';
     if (options.getEligibleCount() > 0) return 'plan';
+    if (options.shouldActivate?.()) return 'activate';
     return 'find';
   }
 
@@ -22,6 +23,7 @@
     else if (current === 'resume') options.resumeToday();
     else if (current === 'start') options.startToday();
     else if (current === 'plan') options.planToday();
+    else if (current === 'activate') options.openActivation();
     else if (current === 'find') options.findWork();
     else options.queueLauncher.open(current);
     return current;

frontend/my-work.js

@@ -71,6 +71,7 @@ function buildMyWork(data, now = new Date()) {
     const assigned = (item.assignees || []).includes(login);
     const isReview = (item.work_reasons || []).includes('review_requested');
     const isFiled = (item.work_reasons || []).includes('created_by_me');
+    const isAuthored = (item.work_reasons || []).includes('authored_by_me');
     const isCompleted = isFiled && item.state === 'closed';
     const due = item.kind === 'issue' ? issueDueState(item.due_date, now) : null;
     const normalized = {
@@ -78,6 +79,7 @@ function buildMyWork(data, now = new Date()) {
       key: (item.repository || 'unknown') + '#' + item.number,
       is_review: isReview,
       is_filed: isFiled,
+      is_authored: isAuthored,
       is_completed: isCompleted,
       is_assigned: assigned,
       has_update: false,
@@ -85,7 +87,8 @@ function buildMyWork(data, now = new Date()) {
       reason: priorityLabel ? priorityLabel + ' priority' :
         (due && due.priority < 4 ? due.label :
           (isReview ? 'Needs your review' : (isCompleted ? 'Completed · review outcome' :
-            (assigned ? 'Assigned to you' : (isFiled ? 'Filed by you' : 'Open work'))))),
+            (assigned ? 'Assigned to you' : (isFiled ? 'Filed by you' :
+              (isAuthored ? 'Authored by you' : 'Open work')))))),
       _priority: priorityLabel ? 0 :
         (due && due.priority < 4 ? due.priority : (isReview ? 3 : (isCompleted ? 3.5 : (assigned ? 4 : 5)))),
     };
@@ -657,6 +660,7 @@ function filterMyWork(items, selectedFilter, selectedMilestone = 'all') {
   let filtered = items;
   if (selectedFilter === 'attention') filtered = items.filter(needsAttention);
   else if (selectedFilter === 'filed') filtered = items.filter((item) => item.is_filed);
+  else if (selectedFilter === 'authored') filtered = items.filter((item) => item.is_authored);
   else if (selectedFilter === 'review') filtered = items.filter((item) => item.is_review);
   else if (selectedFilter === 'update') filtered = items.filter((item) => item.has_update);
   else if (selectedFilter !== 'all') filtered = items.filter((item) => item.kind === selectedFilter);
@@ -1080,6 +1084,7 @@ function countMyWork(items) {
     all: items.length,
     attention: items.filter(needsAttention).length,
     filed: items.filter((item) => item.is_filed).length,
+    authored: items.filter((item) => item.is_authored).length,
     issue: items.filter((item) => item.kind === 'issue').length,
     pull: items.filter((item) => item.kind === 'pull' && !item.is_review).length,
     review: items.filter((item) => item.is_review).length,

frontend/private-data-registry.js

@@ -6,6 +6,8 @@
     'stackchain-voice-transcripts-v1',
     'stackchain-search-reply-drafts-v1',
     'stackchain-conversation-reply-drafts-v1',
+    'stackchain-today-action-mailbox-v1',
+    'stackchain-app-badge-preference-v1',
   ]);
   if (typeof module !== 'undefined' && module.exports) module.exports = databases;
   else root.stackchainPrivateDatabases = databases;

frontend/push-notifications.js

@@ -2,11 +2,70 @@
   if (typeof module === 'object' && module.exports) module.exports = factory;
   else root.createPushNotifications = factory;
 })(typeof self !== 'undefined' ? self : this, function createPushNotifications({
-  control, status, deadlineControl, deadlineStatus, deadlineHour, deadlineDays,
+  control, status, testControl, deadlineControl, deadlineStatus, deadlineHour, deadlineDays,
+  startDayControl, startDayStatus, startDayHour,
+  followingControl, followingStatus,
   deadlineSnooze, deadlineSnoozeStatus, deadlineSnoozeReview, onReviewDeadlines,
   notification, serviceWorker, fetchJson,
 }) {
   let configuration = null;
+  let pendingIntent = null;
+  let recoveryPromise = null;
+
+  function blockedReadiness() {
+    return {
+      state:'blocked',
+      detail:'Notifications are blocked. Allow them in browser settings, then check again.',
+      actionLabel:'Check again',
+    };
+  }
+
+  function pendingRecoveryReadiness() {
+    return notification.permission === 'granted'
+      ? {state:'blocked', detail:'Notification permission changed. Check again to finish setup.', actionLabel:'Check again'}
+      : blockedReadiness();
+  }
+
+  function notificationReadiness() {
+    if (!configuration?.available || control?.disabled) {
+      return {state:'unavailable', detail:status?.textContent || 'Update notifications are unavailable.'};
+    }
+    if (configuration.subscribed) {
+      return {state:'complete', detail:'New update notifications are enabled.'};
+    }
+    if (pendingIntent === 'updates') return pendingRecoveryReadiness();
+    if (notification.permission === 'denied') return blockedReadiness();
+    return {state:'incomplete', detail:status?.textContent || 'New update notifications are off.'};
+  }
+
+  function renderDeliveryHealth() {
+    const health = Object.values(configuration?.delivery_health || {});
+    const degraded = health.find(item => item?.state === 'degraded');
+    if (testControl) testControl.hidden = !configuration?.subscribed;
+    if (configuration?.subscribed && degraded) {
+      const count = Number(degraded.consecutive_failures || 1);
+      status.textContent = `Update notifications need attention after ${count} failed ${count === 1 ? 'delivery' : 'deliveries'}. Send a test notification.`;
+      return;
+    }
+    status.textContent = configuration?.subscribed
+      ? 'New update notifications enabled for this device.'
+      : 'New update notifications are off for this device.';
+  }
+
+  async function testDelivery() {
+    if (!testControl) return;
+    testControl.disabled = true;
+    status.textContent = 'Sending a test notification…';
+    try {
+      await fetchJson('api/v1/push-subscription/test', {method:'POST'});
+      configuration.delivery_health = {unread:{state:'healthy',consecutive_failures:0}};
+      status.textContent = 'Test delivered. Update notifications are working on this device.';
+    } catch (error) {
+      status.textContent = 'Test delivery failed. Check your connection, then try again.';
+    } finally {
+      testControl.disabled = false;
+    }
+  }
 
   function formattedHour(value) {
     return `${String(Number(value)).padStart(2, '0')}:00`;
@@ -48,6 +107,7 @@
     if (!configuration?.available || deadlineControl?.disabled) {
       return {state:'unavailable', detail:deadlineStatus?.textContent || 'Deadline reminders are unavailable.'};
     }
+    if (pendingIntent === 'deadline') return pendingRecoveryReadiness();
     return configuration.deadline_enabled
       ? {state:'complete', detail:enabledDeadlineText(configuration.reminder_hour, configuration.reminder_days)}
       : {state:'incomplete', detail:deadlineStatus?.textContent || 'Choose when to receive deadline reminders.'};
@@ -67,16 +127,27 @@
     await fetchJson('api/v1/push-subscription', {method:'DELETE'});
     await subscription?.unsubscribe?.();
     control.checked = false;
+    if (testControl) testControl.hidden = true;
     if (deadlineControl) deadlineControl.checked = false;
+    if (startDayControl) startDayControl.checked = false;
+    if (followingControl) followingControl.checked = false;
+    configuration.subscribed = false;
+    configuration.deadline_enabled = false;
+    configuration.start_day_enabled = false;
+    configuration.following_enabled = false;
+    pendingIntent = null;
     status.textContent = 'New update notifications are off for this device.';
     if (deadlineStatus) deadlineStatus.textContent = 'Deadline reminders are off for this device.';
+    if (followingStatus) followingStatus.textContent = 'Following change alerts are off for this device.';
   }
 
   async function ensureSubscription() {
-    const permission = await notification.requestPermission();
+    const permission = notification.permission === 'granted'
+      ? 'granted'
+      : await notification.requestPermission();
     if (permission !== 'granted') {
       control.checked = false;
-      status.textContent = 'Notifications are blocked. Allow them in your browser settings to enable updates.';
+      status.textContent = blockedReadiness().detail;
       return null;
     }
     const registration = await serviceWorker.ready;
@@ -95,11 +166,15 @@
     control.checked = true;
     status.textContent = 'New update notifications enabled for this device.';
     configuration.subscribed = true;
+    if (testControl) testControl.hidden = false;
     return subscription;
   }
 
   async function enable() {
-    await ensureSubscription();
+    pendingIntent = 'updates';
+    const subscription = await ensureSubscription();
+    if (subscription) pendingIntent = null;
+    return subscription;
   }
 
   async function change() {
@@ -122,6 +197,7 @@
     try {
       const registration = await serviceWorker.ready;
       let subscription = await registration.pushManager.getSubscription();
+      if (deadlineControl.checked) pendingIntent = 'deadline';
       if (deadlineControl.checked && !subscription) subscription = await ensureSubscription();
       if (deadlineControl.checked && !subscription) {
         deadlineControl.checked = false;
@@ -140,6 +216,7 @@
       configuration.reminder_hour = reminderHour;
       configuration.reminder_days = reminderDays;
       configuration.timezone = timezone;
+      pendingIntent = null;
       deadlineStatus.textContent = deadlineControl.checked
         ? enabledDeadlineText(reminderHour, reminderDays)
         : 'Deadline reminders are off for this device.';
@@ -155,35 +232,143 @@
     }
   }
 
+  async function changeStartDay() {
+    startDayControl.disabled = true;
+    if (startDayHour) startDayHour.disabled = true;
+    try {
+      const registration = await serviceWorker.ready;
+      let subscription = await registration.pushManager.getSubscription();
+      if (startDayControl.checked) pendingIntent = 'start-day';
+      if (startDayControl.checked && !subscription) subscription = await ensureSubscription();
+      if (startDayControl.checked && !subscription) {
+        startDayControl.checked = false;
+        startDayStatus.textContent = status.textContent;
+        return false;
+      }
+      const timezone = Intl.DateTimeFormat().resolvedOptions().timeZone || 'UTC';
+      const reminderHour = Number(startDayHour?.value ?? configuration?.start_day_reminder_hour ?? 9);
+      await fetchJson('api/v1/push-subscription/start-day', {
+        method:'PUT',
+        headers:{'Content-Type':'application/json'},
+        body:JSON.stringify({enabled:startDayControl.checked, timezone, reminder_hour:reminderHour}),
+      });
+      configuration.start_day_enabled = startDayControl.checked;
+      configuration.start_day_timezone = timezone;
+      configuration.start_day_reminder_hour = reminderHour;
+      pendingIntent = null;
+      startDayStatus.textContent = startDayControl.checked
+        ? `Start-day reminder enabled for ${formattedHour(reminderHour)} local time.`
+        : 'Start-day reminders are off for this device.';
+      return true;
+    } catch (_error) {
+      startDayControl.checked = !startDayControl.checked;
+      startDayStatus.textContent = 'Could not change start-day reminders. Check your connection and try again.';
+      return false;
+    } finally {
+      startDayControl.disabled = false;
+      if (startDayHour) startDayHour.disabled = false;
+    }
+  }
+
+  async function changeFollowing() {
+    followingControl.disabled = true;
+    try {
+      const registration = await serviceWorker.ready;
+      let subscription = await registration.pushManager.getSubscription();
+      if (followingControl.checked) pendingIntent = 'following';
+      if (followingControl.checked && !subscription) subscription = await ensureSubscription();
+      if (followingControl.checked && !subscription) {
+        followingControl.checked = false;
+        followingStatus.textContent = status.textContent;
+        return false;
+      }
+      await fetchJson('api/v1/push-subscription/following', {
+        method:'PUT',
+        headers:{'Content-Type':'application/json'},
+        body:JSON.stringify({enabled:followingControl.checked}),
+      });
+      configuration.following_enabled = followingControl.checked;
+      pendingIntent = null;
+      followingStatus.textContent = followingControl.checked
+        ? 'Following change alerts enabled for this device.'
+        : 'Following change alerts are off for this device.';
+      return true;
+    } catch (_error) {
+      followingControl.checked = !followingControl.checked;
+      followingStatus.textContent = 'Could not change Following alerts. Check your connection and try again.';
+      return false;
+    } finally {
+      followingControl.disabled = false;
+    }
+  }
+
   async function enableDeadline() {
     deadlineControl.checked = true;
     return changeDeadline();
   }
 
+  async function recoverPermission(intent = null) {
+    if (!pendingIntent && ['updates', 'deadline', 'start-day', 'following'].includes(intent)) pendingIntent = intent;
+    if (!pendingIntent || notification.permission !== 'granted') return false;
+    if (recoveryPromise) return recoveryPromise;
+    recoveryPromise = (async () => {
+      if (pendingIntent === 'deadline') {
+        deadlineControl.checked = true;
+        return changeDeadline();
+      }
+      if (pendingIntent === 'start-day') {
+        startDayControl.checked = true;
+        return changeStartDay();
+      }
+      if (pendingIntent === 'following') {
+        followingControl.checked = true;
+        return changeFollowing();
+      }
+      return Boolean(await enable());
+    })();
+    try {
+      return await recoveryPromise;
+    } finally {
+      recoveryPromise = null;
+    }
+  }
+
   async function init() {
     if (!control || !notification || !serviceWorker) return;
     control.addEventListener('change', change);
+    testControl?.addEventListener('click', testDelivery);
     deadlineControl?.addEventListener('change', changeDeadline);
+    startDayControl?.addEventListener('change', changeStartDay);
+    followingControl?.addEventListener('change', changeFollowing);
     deadlineSnoozeReview?.addEventListener('click', reviewSnoozedDeadlines);
     configuration = await fetchJson('api/v1/push-subscription');
     if (!configuration.available) {
       control.disabled = true;
       if (deadlineControl) deadlineControl.disabled = true;
+      if (startDayControl) startDayControl.disabled = true;
+      if (followingControl) followingControl.disabled = true;
       status.textContent = 'New update notifications are not available on this server.';
       return;
     }
     control.checked = Boolean(configuration.subscribed);
     if (deadlineControl) deadlineControl.checked = Boolean(configuration.deadline_enabled);
+    if (startDayControl) startDayControl.checked = Boolean(configuration.start_day_enabled);
+    if (followingControl) followingControl.checked = Boolean(configuration.following_enabled);
     if (deadlineHour) deadlineHour.value = String(configuration.reminder_hour ?? 9);
     if (deadlineDays) deadlineDays.value = String(configuration.reminder_days ?? 2);
-    status.textContent = configuration.subscribed
-      ? 'New update notifications enabled for this device.'
-      : 'New update notifications are off for this device.';
+    if (startDayHour) startDayHour.value = String(configuration.start_day_reminder_hour ?? 9);
+    renderDeliveryHealth();
     if (deadlineStatus) deadlineStatus.textContent = configuration.deadline_enabled
       ? enabledDeadlineText(configuration.reminder_hour, configuration.reminder_days)
       : 'Deadline reminders are off for this device.';
+    if (startDayStatus) startDayStatus.textContent = configuration.start_day_enabled
+      ? `Start-day reminder enabled for ${formattedHour(configuration.start_day_reminder_hour)} local time.`
+      : 'Start-day reminders are off for this device.';
+    if (followingStatus) followingStatus.textContent = configuration.following_enabled
+      ? 'Following change alerts enabled for this device.'
+      : 'Following change alerts are off for this device.';
     renderDeadlineSnooze();
   }
 
-  return {init, change, changeDeadline, enableDeadline, deadlineReadiness};
+  return {init, change, changeDeadline, changeStartDay, changeFollowing, enableDeadline, deadlineReadiness, notificationReadiness, recoverPermission};
 });

frontend/release-receipt.js

@@ -1,8 +1,11 @@
-function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, dialog = null, statusNode = null, checksNode = null, releaseNode = null, listNode = null, documentRef = null, windowRef = null, setTimer = setTimeout, clearTimer = clearTimeout, pollMs = 30000 }) {
+function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, dialog = null, statusNode = null, checksNode = null, releaseNode = null, listNode = null, documentRef = null, windowRef = null, confirmAction = null, openPull = null, setTimer = setTimeout, clearTimer = clearTimeout, pollMs = 30000 }) {
   const prefix = 'stackchain.release-receipt.v1:';
   const limit = 12;
   let entries = [];
   let refreshing = null;
+  const recoveries = new Map();
+  const retrying = new Map();
+  const rollingBack = new Map();
   let timer = null;
   let bound = false;
   documentRef ||= typeof document !== 'undefined' ? document : null;
@@ -62,6 +65,17 @@ function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, d
       number: Number(item.number),
       key: item.key || item.repository + '#' + item.number,
       commit_sha: commitSha,
+      ...(
+        mergeResult?.source_repository === item.repository
+        && mergeResult?.source_branch
+        && mergeResult?.source_head_sha
+          ? {
+              source_branch: String(mergeResult.source_branch),
+              source_head_sha: String(mergeResult.source_head_sha),
+              cleanup: { state: 'available', message: 'Merged branch retained.' },
+            }
+          : {}
+      ),
       status: null,
       captured_at: new Date().toISOString(),
     };
@@ -81,10 +95,17 @@ function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, d
 
   function summarize(payload) {
     const checks = Array.isArray(payload?.checks) ? payload.checks : [];
-    const failing = checks.filter(check => ['failure', 'error'].includes(check.state)).map(check => check.name).filter(Boolean);
+    const failedChecks = checks.filter(check => ['failure', 'error'].includes(check.state));
+    const failing = failedChecks.map(check => check.name).filter(Boolean);
+    const failures = failedChecks.filter(check => check?.recovery).map(check => ({
+      name: check.name || 'Failed check',
+      description: check.description || '',
+      url: check.url || '',
+      recovery: check.recovery,
+    }));
     const pending = checks.filter(check => check.state === 'pending').map(check => check.name).filter(Boolean);
     if (payload?.release) return { ...payload, label: 'Released · ' + payload.release.tag, checks: [] };
-    if (failing.length) return { ...payload, label: 'Checks failed', checks: failing };
+    if (failing.length) return { ...payload, label: 'Checks failed', checks: failing, failures };
     if (payload?.ci_state === 'success') return { ...payload, label: 'Checks passed · waiting for release', checks: [] };
     return { ...payload, label: 'Checks running', checks: pending };
   }
@@ -121,18 +142,117 @@ function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, d
         state.className = 'small';
         state.textContent = entry.status?.label || 'Checking the exact merge commit…';
         copy.append(title, state);
+        if (entry.source_branch && entry.source_head_sha) {
+          const branch = document.createElement('span');
+          branch.className = 'small release-branch-cleanup-status';
+          branch.textContent = entry.cleanup?.state === 'deleted'
+            ? 'Branch ' + entry.source_branch + ' · deleted'
+            : 'Branch ' + entry.source_branch + ' · ' + entry.source_head_sha.slice(0, 8);
+          copy.append(branch);
+        }
+        if (entry.rollback?.state === 'prepared') {
+          const rollbackStatus = document.createElement('span');
+          rollbackStatus.className = 'small release-rollback-status';
+          rollbackStatus.textContent = entry.rollback.message;
+          copy.append(rollbackStatus);
+        }
         if (entry.status?.release?.url) {
           const link = document.createElement('a');
           link.href = entry.status.release.url;
           link.textContent = 'Open release ' + entry.status.release.tag;
           copy.append(link);
         }
+        for (const failure of (entry.status?.failures || [])) {
+          const runId = failure.recovery?.run_id;
+          const jobIndex = failure.recovery?.job_index;
+          if (!Number.isInteger(runId) || !Number.isInteger(jobIndex)) continue;
+          const key = identity(entry) + '@' + runId + ':' + jobIndex;
+          const summary = document.createElement('section');
+          summary.className = 'release-failure-summary';
+          const failureName = document.createElement('span');
+          failureName.className = 'small';
+          failureName.textContent = failure.name + (failure.description ? ' · ' + failure.description : '');
+          const review = document.createElement('button');
+          review.type = 'button';
+          review.textContent = 'Review failure';
+          review.setAttribute('aria-label', 'Review failed check ' + failure.name + ' for ' + entry.commit_sha.slice(0, 8));
+          review.addEventListener('click', () => reviewFailure(
+            entry.repository, entry.commit_sha, runId, jobIndex
+          ).catch(error => {
+            if (statusNode) statusNode.textContent = String(error?.message || error) + ' Release evidence retained.';
+          }));
+          summary.append(failureName, review);
+          const detail = recoveries.get(key);
+          if (detail) {
+            const recovery = document.createElement('div');
+            recovery.className = 'release-failure-recovery';
+            const sha = document.createElement('strong');
+            sha.textContent = 'Merge ' + entry.commit_sha.slice(0, 8);
+            const excerpt = document.createElement('pre');
+            excerpt.textContent = detail.excerpt || 'No log excerpt was returned.';
+            const actions = document.createElement('div');
+            actions.className = 'release-failure-actions';
+            if (failure.url) {
+              const job = document.createElement('a');
+              job.href = failure.url;
+              job.textContent = 'Open job';
+              actions.append(job);
+            }
+            const retry = document.createElement('button');
+            retry.type = 'button';
+            retry.textContent = retrying.has(key) ? 'Retrying…' : 'Retry failed check';
+            retry.disabled = retrying.has(key);
+            retry.addEventListener('click', () => retryFailure(
+              entry.repository, entry.commit_sha, runId, jobIndex
+            ).catch(error => {
+              if (statusNode) statusNode.textContent = String(error?.message || error) + ' Release evidence retained.';
+              render();
+            }));
+            actions.append(retry);
+            const rollback = document.createElement('button');
+            rollback.type = 'button';
+            rollback.textContent = entry.rollback?.state === 'prepared'
+              ? 'Open rollback #' + entry.rollback.number
+              : (rollingBack.has(identity(entry)) ? 'Preparing rollback…' : 'Prepare rollback PR');
+            rollback.disabled = rollingBack.has(identity(entry));
+            rollback.setAttribute(
+              'aria-label',
+              'Prepare rollback pull request for ' + entry.key + ' at ' + entry.commit_sha.slice(0, 8),
+            );
+            rollback.addEventListener('click', () => prepareRollback(entry.repository, entry.commit_sha).catch(error => {
+              if (statusNode) statusNode.textContent = String(error?.message || error) + ' Release evidence retained.';
+              render();
+            }));
+            actions.append(rollback);
+            recovery.append(sha, excerpt, actions);
+            summary.append(recovery);
+          }
+          copy.append(summary);
+        }
         const button = document.createElement('button');
         button.type = 'button';
         button.textContent = 'Dismiss';
         button.setAttribute('aria-label', 'Dismiss ' + entry.key + ' from release tracking');
         button.addEventListener('click', () => dismiss(entry.repository, entry.commit_sha));
-        row.append(copy, button);
+        if (entry.source_branch && entry.cleanup?.state !== 'deleted') {
+          const actions = document.createElement('div');
+          actions.className = 'release-watchlist-actions';
+          const cleanup = document.createElement('button');
+          cleanup.type = 'button';
+          cleanup.textContent = entry.cleanup?.state === 'deleting' ? 'Deleting…' : 'Delete source branch';
+          cleanup.disabled = entry.cleanup?.state === 'deleting' || entry.cleanup?.state === 'advanced';
+          cleanup.setAttribute(
+            'aria-label',
+            'Delete merged source branch ' + entry.source_branch + ' at ' + entry.source_head_sha.slice(0, 8),
+          );
+          cleanup.addEventListener('click', () => deleteBranch(entry.repository, entry.commit_sha).catch(error => {
+            if (statusNode) statusNode.textContent = String(error?.message || error);
+          }));
+          actions.append(cleanup, button);
+          row.append(copy, actions);
+        } else {
+          row.append(copy, button);
+        }
         return row;
       });
       listNode.replaceChildren(...rows);
@@ -168,6 +288,149 @@ function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, d
     finally { refreshing = null; }
   }
 
+  function recoveryPath(entry, runId, jobIndex) {
+    return 'api/v1/repos/' + entry.repository.split('/').map(encodeURIComponent).join('/')
+      + '/pulls/' + encodeURIComponent(entry.number)
+      + '/release-receipt/' + encodeURIComponent(entry.commit_sha)
+      + '/checks/' + encodeURIComponent(runId) + '/jobs/' + encodeURIComponent(jobIndex);
+  }
+
+  async function reviewFailure(repository, commitSha, runId, jobIndex) {
+    const entry = entries.find(value => identity(value) === repository + '@' + commitSha);
+    if (!entry) throw new Error('Tracked release is unavailable.');
+    const key = identity(entry) + '@' + runId + ':' + jobIndex;
+    const detail = await fetchJson(recoveryPath(entry, runId, jobIndex) + '/failure', {
+      headers: { Accept: 'application/json' },
+    });
+    if (detail?.commit_sha !== entry.commit_sha) {
+      throw new Error('Release failure evidence did not match the merged commit.');
+    }
+    recoveries.set(key, detail);
+    render();
+    return detail;
+  }
+
+  function retryFailure(repository, commitSha, runId, jobIndex) {
+    const entry = entries.find(value => identity(value) === repository + '@' + commitSha);
+    if (!entry) return Promise.reject(new Error('Tracked release is unavailable.'));
+    const key = identity(entry) + '@' + runId + ':' + jobIndex;
+    if (retrying.has(key)) return retrying.get(key);
+    const approve = confirmAction || (windowRef?.confirm ? message => windowRef.confirm(message) : () => false);
+    const failure = entry.status?.failures?.find(value =>
+      value.recovery?.run_id === runId && value.recovery?.job_index === jobIndex
+    );
+    if (!approve('Retry ' + (failure?.name || 'failed release check') + ' for ' + commitSha.slice(0, 8) + '?')) {
+      return Promise.resolve(false);
+    }
+    const operation = fetchJson(recoveryPath(entry, runId, jobIndex) + '/retry', {
+      method: 'POST',
+      headers: { Accept: 'application/json' },
+    }).then(result => {
+      if (result?.commit_sha !== entry.commit_sha) {
+        throw new Error('Release retry did not match the merged commit.');
+      }
+      entry.status = { ...entry.status, ci_state: 'pending', label: 'Checks running', checks: [], failures: [] };
+      recoveries.delete(key);
+      persist();
+      render();
+      schedule(0);
+      return true;
+    }).finally(() => retrying.delete(key));
+    retrying.set(key, operation);
+    return operation;
+  }
+
+  function prepareRollback(repository, commitSha) {
+    const entry = entries.find(value => identity(value) === repository + '@' + commitSha);
+    if (!entry) return Promise.reject(new Error('Tracked release is unavailable.'));
+    if (entry.rollback?.state === 'prepared') {
+      openPull?.(entry.rollback.pull);
+      return Promise.resolve(entry.rollback.pull);
+    }
+    const key = identity(entry);
+    if (rollingBack.has(key)) return rollingBack.get(key);
+    const approve = confirmAction || (windowRef?.confirm ? message => windowRef.confirm(message) : () => false);
+    if (!approve('Prepare a draft rollback PR for ' + entry.key + ' at ' + commitSha.slice(0, 8) + '?')) {
+      return Promise.resolve(false);
+    }
+    const operation = fetchJson(
+      'api/v1/repos/' + entry.repository.split('/').map(encodeURIComponent).join('/')
+        + '/pulls/' + encodeURIComponent(entry.number)
+        + '/release-receipt/' + encodeURIComponent(entry.commit_sha) + '/rollback',
+      {
+        method: 'POST',
+        headers: {
+          Accept: 'application/json',
+          'Idempotency-Key': 'release-rollback-' + entry.number + '-' + entry.commit_sha,
+        },
+      },
+    ).then(result => {
+      if (result?.rollback_of !== entry.commit_sha || !Number.isInteger(result?.number)) {
+        throw new Error('Rollback preparation did not match the failed release.');
+      }
+      const pull = {
+        ...result,
+        kind: 'pull',
+        key: result.repository + '#' + result.number,
+        state: 'open',
+      };
+      entry.rollback = {
+        state: 'prepared',
+        number: result.number,
+        message: 'Draft rollback #' + result.number + ' is ready for review.',
+        pull,
+      };
+      persist();
+      render();
+      if (dialog?.open) dialog.close();
+      openPull?.(pull);
+      return result;
+    }).finally(() => rollingBack.delete(key));
+    rollingBack.set(key, operation);
+    render();
+    return operation;
+  }
+
+  async function deleteBranch(repository, commitSha) {
+    const entry = entries.find(value => identity(value) === repository + '@' + commitSha);
+    if (!entry?.source_branch || !entry?.source_head_sha || entry.cleanup?.state === 'deleted') {
+      throw new Error('Source branch cleanup is unavailable.');
+    }
+    const approve = confirmAction || (windowRef?.confirm ? message => windowRef.confirm(message) : () => false);
+    if (!approve('Delete ' + entry.source_branch + ' at ' + entry.source_head_sha.slice(0, 8) + '?')) return false;
+    entry.cleanup = { state: 'deleting', message: 'Deleting source branch…' };
+    persist();
+    render();
+    try {
+      await fetchJson(
+        'api/v1/repos/' + entry.repository.split('/').map(encodeURIComponent).join('/')
+          + '/pulls/' + encodeURIComponent(entry.number) + '/source-branch',
+        {
+          method: 'DELETE',
+          headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+          body: JSON.stringify({
+            source_branch: entry.source_branch,
+            expected_head_sha: entry.source_head_sha,
+          }),
+        },
+      );
+      entry.cleanup = { state: 'deleted', message: 'Source branch deleted.' };
+      persist();
+      render();
+      return true;
+    } catch (error) {
+      entry.cleanup = {
+        state: error?.status === 409 ? 'advanced' : 'available',
+        message: error?.status === 409
+          ? 'Source branch has newer commits and was retained.'
+          : 'Branch retained. Retry when connected.',
+      };
+      persist();
+      render();
+      throw error;
+    }
+  }
+
   function dismiss(repository, commitSha) {
     if (repository && commitSha) entries = entries.filter(entry => identity(entry) !== repository + '@' + commitSha);
     else entries = [];
@@ -195,7 +458,7 @@ function createReleaseReceipt({ storage, getLogin, fetchJson, launcher = null, d
     schedule();
   }
 
-  return { capture, restore, refresh, dismiss, bind, fetchJson };
+  return { capture, restore, refresh, reviewFailure, retryFailure, prepareRollback, deleteBranch, dismiss, bind, fetchJson };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createReleaseReceipt;

frontend/review-sheet.js

@@ -384,10 +384,20 @@ function renderChecks(checks, escapeHtml, { offline = false } = {}) {
     const url = typeof check.url === 'string' ? check.url : '';
     const link = url ? '<a class="ci-check-link" href="' + escapeHtml(url) +
       '" target="_blank" rel="noopener noreferrer">Open job</a>' : '';
+    const recovery = check.recovery;
+    const inspect = !offline && ['failure', 'error'].includes(check.state) &&
+      Number.isInteger(recovery?.run_id) && recovery.run_id > 0 &&
+      Number.isInteger(recovery?.job_index) && recovery.job_index >= 0
+      ? '<button type="button" class="ci-check-inspect" data-run-id="' + recovery.run_id +
+        '" data-job-index="' + recovery.job_index + '">Inspect failure</button>'
+      : '';
+    const actions = inspect || link
+      ? '<div class="ci-check-actions">' + inspect + link + '</div>'
+      : '';
     return '<article class="ci-check ci-check-' + escapeHtml(check.state || 'unknown') + '">' +
       '<div class="ci-check-copy"><strong>' + escapeHtml(check.name) + '</strong>' +
       '<span class="small">' + escapeHtml(check.state || 'unknown') +
-      (check.description ? ' · ' + escapeHtml(check.description) : '') + '</span></div>' + link + '</article>';
+      (check.description ? ' · ' + escapeHtml(check.description) : '') + '</span></div>' + actions + '</article>';
   }).join('');
   return { summary, html, expanded: failed > 0 };
 }

frontend/search-batch-plan.js

@@ -64,10 +64,100 @@
     return { identity, eligible, start, cancel, toggle, snapshot, prepare, releaseRepository, limit:maximum };
   }
 
+  function createWeekBatchPlan({
+    week,
+    prepare = item => Promise.resolve(item),
+    accept = item => item,
+    identity = item => String(item?.repository || '') + '#' + String(item?.number || ''),
+    maxItems = 5,
+    onProgress = () => {},
+  } = {}) {
+    let running = null;
+    const load = async () => {
+      await week.load();
+      return week.dates().map(day => ({ ...day, ...week.day(day.date) }));
+    };
+    function validate(items, assignments, days, confirmOverload = false) {
+      const allowed = new Set(days.map(day => day.date));
+      const errors = [];
+      const simulated = new Map(days.map(day => [day.date, {
+        ids:[...(day.ids || [])], estimates:{...(day.estimates || {})},
+        capacity_minutes:Number(day.capacity_minutes) || 0,
+      }]));
+      items.forEach(item => {
+        const id = identity(item), choice = assignments?.[id] || {};
+        const estimate = Number(choice.estimate);
+        if (!allowed.has(choice.date)) errors.push({ id, reason:'date-required' });
+        if (!Number.isFinite(estimate) || estimate <= 0) errors.push({ id, reason:'estimate-required' });
+        if (!allowed.has(choice.date) || !Number.isFinite(estimate) || estimate <= 0) return;
+        simulated.forEach((day, date) => {
+          if (day.ids.includes(id) && choice.date !== date) {
+            day.ids = day.ids.filter(value => value !== id); delete day.estimates[id];
+          }
+        });
+        const destination = simulated.get(choice.date);
+        if (!destination.ids.includes(id) && destination.ids.length >= maxItems) {
+          errors.push({ id, reason:'day-full', date:choice.date, limit:maxItems }); return;
+        }
+        if (!destination.ids.includes(id)) destination.ids.push(id);
+        destination.estimates[id] = estimate;
+      });
+      const overloads = [];
+      simulated.forEach((day, date) => {
+        const planned = day.ids.reduce((sum, id) => sum + (Number(day.estimates[id]) || 0), 0);
+        if (day.capacity_minutes > 0 && planned > day.capacity_minutes) {
+          overloads.push({ date, planned_minutes:planned, capacity_minutes:day.capacity_minutes });
+        }
+      });
+      if (errors.length) return { status:'invalid', errors, overloads:[] };
+      if (overloads.length && !confirmOverload) return { status:'overload-confirmation-required', errors:[], overloads };
+      return { status:'ready', errors:[], overloads };
+    }
+    async function preview(items) {
+      const days = await load();
+      return { days, placements:Object.fromEntries(items.map(item => [identity(item), week.placement(identity(item))])) };
+    }
+    function run(items, assignments, { confirmOverload = false } = {}) {
+      if (running) return running;
+      running = (async () => {
+        const selected = Array.isArray(items) ? items.slice() : [];
+        const days = await load();
+        const checked = validate(selected, assignments, days, confirmOverload);
+        if (checked.status !== 'ready') return checked;
+        const failed = [], planned = [];
+        for (let index = 0; index < selected.length; index += 1) {
+          const source = selected[index], originalId = identity(source), choice = assignments[originalId];
+          try {
+            const confirmed = accept(await prepare(source)) || source;
+            const id = identity(confirmed);
+            const existing = week.placement(id);
+            if (!week.place(id, choice.date, Number(choice.estimate), {move:Boolean(existing && existing.date !== choice.date)})) {
+              failed.push({id:originalId, reason:'assigned-not-planned'});
+            } else {
+              week.rememberPendingItem?.(id, confirmed);
+              planned.push(id);
+            }
+          } catch (error) {
+            failed.push({id:originalId, reason:error?.message || 'assignment failed'});
+          }
+          onProgress({status:'running',processed:index + 1,selected:selected.length});
+        }
+        if (planned.length) {
+          try { await week.flush(); }
+          catch (_error) { return {status:'planned-pending',planned:planned.length,failed}; }
+        }
+        return {status:failed.length?'partial':'planned',planned:planned.length,failed};
+      })().finally(() => { running = null; });
+      return running;
+    }
+    return { preview, validate, run, pending:() => Boolean(running) };
+  }
+  createSearchBatchPlan.createWeekBatchPlan = createWeekBatchPlan;
+
   createSearchBatchPlan.mount = function mountSearchBatchPlanning(
     document, batchFactory, todayWork, getOwner, fetchJson, previewPath, queueToday,
     todaySync, acceptIssue, lookup, render, escapeHtml, escapeAttribute,
-    laterWork = null, laterPicker = null
+    laterWork = null, laterPicker = null, weekPlan = null, storage = null
   ) {
     const get = selector => document.querySelector(selector);
     let processor;
@@ -87,6 +177,7 @@
         get('#queue-selected-search-results').disabled = state.count === 0;
         get('#defer-selected-search-results').disabled = state.count === 0;
         get('#plan-selected-search-results').disabled = state.count === 0;
+        if (get('#week-selected-search-results')) get('#week-selected-search-results').disabled = state.count === 0;
         get('#search-selection-status').textContent = state.count ?
           state.count + ' issue' + (state.count === 1 ? '' : 's') + ' selected.' : 'No issues selected.';
         render();
@@ -194,6 +285,81 @@
         }
       },
     });
+    const weekProcessor = weekPlan ? createWeekBatchPlan({
+      week:weekPlan,prepare:item=>plan.prepare(item),accept:acceptIssue,
+      identity:item=>todayWork.identity(item),
+      onProgress:progress=>{
+        if (progress.status === 'running') get('#search-week-batch-summary').textContent =
+          'Planning ' + progress.processed + ' of ' + progress.selected + '…';
+      },
+      storage,
+    }) : null;
+    let weekOverload = false;
+    function weekAssignments() {
+      const values = {};
+      document.querySelectorAll('[data-search-week-batch-date]').forEach(select => {
+        const id = select.dataset.searchWeekBatchDate;
+        const estimate = document.querySelector('[data-search-week-batch-estimate="' + id + '"]');
+        values[id] = {date:select.value,estimate:Number(estimate?.value)};
+      });
+      return values;
+    }
+    function closeWeekReview() {
+      if (!get('#search-week-batch-review')) return;
+      get('#search-week-batch-review').hidden = true;
+      get('#search-batch-actions').hidden = !plan.snapshot().active;
+      weekOverload = false;
+      get('#confirm-search-week-batch').textContent = 'Assign & plan';
+    }
+    async function openWeekReview() {
+      const items = plan.snapshot().items;
+      if (!weekProcessor || !items.length) return;
+      const button = get('#week-selected-search-results');
+      button.disabled = true;
+      get('#search-selection-status').textContent = 'Loading Week Ahead…';
+      try {
+        const preview = await weekProcessor.preview(items);
+        const options = selected => preview.days.map(day => '<option value="' + escapeAttribute(day.date) + '"' +
+          (day.date === selected ? ' selected' : '') + '>' + escapeHtml(day.label + ' · ' + (day.ids || []).length + ' planned') + '</option>').join('');
+        get('#search-week-batch-list').innerHTML = items.map(item => {
+          const id = todayWork.identity(item), existing = preview.placements[id];
+          return '<div class="search-week-batch-row"><div><span class="small">' + escapeHtml(id) + '</span><strong>' +
+            escapeHtml(item.title || 'Untitled work') + '</strong></div><div class="search-week-batch-row-controls"><label>Day<select data-search-week-batch-date="' +
+            escapeAttribute(id) + '">' + options(existing?.date || preview.days[0]?.date) + '</select></label><label>Minutes<input type="number" inputmode="numeric" min="5" max="1440" step="5" value="' +
+            escapeAttribute(existing?.estimate || '') + '" data-search-week-batch-estimate="' + escapeAttribute(id) +
+            '" aria-label="Estimate for ' + escapeAttribute(item.title || id) + ' in minutes"></label></div></div>';
+        }).join('');
+        get('#search-week-batch-summary').textContent = items.length + ' selected · review every day and estimate before assignment.';
+        get('#search-batch-actions').hidden = true;
+        get('#search-week-batch-review').hidden = false;
+        document.querySelector('[data-search-week-batch-date]')?.focus();
+      } catch (error) {
+        get('#search-selection-status').textContent = error?.message || 'Week Ahead is unavailable. Retry when connected.';
+      } finally { button.disabled = false; }
+    }
+    async function confirmWeekReview() {
+      if (!weekProcessor || weekProcessor.pending()) return;
+      const button = get('#confirm-search-week-batch');
+      button.disabled = true;
+      const outcome = await weekProcessor.run(plan.snapshot().items, weekAssignments(), {confirmOverload:weekOverload});
+      if (outcome.status === 'invalid') {
+        const reasons = [...new Set(outcome.errors.map(error => error.reason))];
+        get('#search-week-batch-summary').textContent = reasons.includes('day-full') ?
+          'A day already has five items. Choose another day.' : 'Choose a valid day and estimate for every issue.';
+      } else if (outcome.status === 'overload-confirmation-required') {
+        weekOverload = true;
+        button.textContent = 'Confirm over capacity';
+        get('#search-week-batch-summary').textContent = outcome.overloads.map(day =>
+          day.planned_minutes + ' of ' + day.capacity_minutes + ' min on ' + day.date).join(' · ') + '. Confirm to plan anyway.';
+      } else {
+        const pending = outcome.status === 'planned-pending';
+        get('#cmd-search-action-status').textContent = outcome.planned + ' planned' +
+          (pending ? ' · sync pending' : '') + (outcome.failed.length ? ' · ' + outcome.failed.length + ' need attention.' : '.');
+        closeWeekReview();
+        if (!outcome.failed.length) plan.cancel();
+      }
+      button.disabled = false;
+    }
     function estimateValues() {
       return Object.fromEntries(Array.from(document.querySelectorAll('[data-search-batch-estimate]')).map(input =>
         [input.dataset.searchBatchEstimate, Number(input.value)]
@@ -274,6 +440,9 @@
       ) }, event.currentTarget, 'search-batch');
     });
     get('#plan-selected-search-results').addEventListener('click', openReleaseReview);
+    get('#week-selected-search-results')?.addEventListener('click', openWeekReview);
+    get('#cancel-search-week-batch')?.addEventListener('click', closeWeekReview);
+    get('#confirm-search-week-batch')?.addEventListener('click', confirmWeekReview);
     get('#cancel-search-release').addEventListener('click', closeReleaseReview);
     get('#confirm-search-release').addEventListener('click', () => {
       const milestoneSelect = get('#search-release-milestone');
@@ -322,7 +491,7 @@
         escapeHtml(result.repository) + ' #' + escapeHtml(result.number) + ' · ' +
         (allowed ? 'Open issue' : 'Not eligible') + '</span></label>';
     }
-    return { plan, processor, laterProcessor, releaseProcessor, restore, resultHtml };
+    return { plan, processor, laterProcessor, releaseProcessor, weekProcessor, restore, resultHtml };
   };
 
   return createSearchBatchPlan;

frontend/search-preview.js

@@ -30,8 +30,116 @@
       return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) +
         '/preview/conversation?' + query.toString();
     };
+    root.followingPullReviewPath = item => {
+      const repository = String(item.repository || '').split('/').map(encodeURIComponent).join('/');
+      return 'api/v1/following/' + repository + '/pulls/' + encodeURIComponent(item.number) + '/review-data';
+    };
     root.searchPreviewReplyPath = item => root.searchPreviewPath(item).replace(/\?.*$/, '') +
       '/comments?kind=' + encodeURIComponent(item.kind);
+    root.searchPreviewMutation = fetchJson => (detail, action) => {
+      if (action === 'reopen-pull') {
+        const path = root.searchPreviewPath(detail).replace('/issues/', '/pulls/').replace(/\/preview.*$/, '/reopen');
+        return fetchJson(path, {
+          method:'PATCH', headers:{'Content-Type':'application/json'},
+          body:JSON.stringify({expected_head_sha:detail.head_sha}),
+        });
+      }
+      return fetchJson(root.searchPreviewPath(detail).replace(/\?.*$/, '') + '/' + action, {method:'PATCH'});
+    };
+    root.searchPreviewSubscriptionPath = item => root.searchPreviewPath(item).replace(/\?.*$/, '') +
+      '/subscription?kind=' + encodeURIComponent(item.kind);
+    root.searchPreviewSubscriptionOptions = fetchJson => {
+      const options = {
+      load:async detail => {
+        if (['issue', 'pull'].includes(detail.kind) && detail.state === 'closed' && detail.following === true) {
+          return {...detail, watching:true};
+        }
+        if (!(['issue', 'pull'].includes(detail.kind) && detail.state === 'open')) return detail;
+        const result = await fetchJson(root.searchPreviewSubscriptionPath(detail), {headers:{Accept:'application/json'}});
+        return {...detail, watching:result.watching === true};
+      },
+      watch:(detail,watching) => fetchJson(root.searchPreviewSubscriptionPath(detail), {
+        method:watching ? 'PUT' : 'DELETE', headers:{Accept:'application/json'},
+      }),
+      review:item => fetchJson(root.followingPullReviewPath(item)),
+      };
+      options.preview = async item => options.load({...item, ...await fetchJson(root.searchPreviewPath(item), {
+        headers:{Accept:'application/json'},
+      })});
+      return options;
+    };
+    root.createDetailWatch = ({fetchJson,refreshFollowing,onState}) => {
+      const api=root.searchPreviewSubscriptionOptions(fetchJson);
+      let item,watching=false,mutation;
+      return {
+        async open(next) {
+          item=next; onState('loading',watching);
+          const result=await api.load(next).catch(error=>{
+            if(item===next)onState('error',watching,error);throw error;
+          });
+          if (item !== next) return;
+          watching=result.watching === true; onState('ready',watching);
+        },
+        toggle() {
+          if (mutation) return mutation;
+          const next=!watching;
+          onState(next?'watching':'unwatching',watching);
+          mutation=api.watch(item,next).then(async result => {
+            if (result?.watching !== next || result?.following_synced !== true)
+              throw new Error(result?.error || 'Unconfirmed.');
+            watching=next; await refreshFollowing();
+            onState(watching?'watched':'unwatched',watching);
+          }).catch(error => {onState('error',watching,error);throw error;})
+            .finally(()=>{mutation=null;});
+          return mutation;
+        },
+      };
+    };
+    root.searchPreviewWatchStatus = state => ({
+      watching:'Starting watch…', unwatching:'Stopping watch…',
+      watched:'Watching · available in Following. Future activity will appear in Updates.',
+      unwatched:'Stopped watching · removed from Following. Assignment and planning are unchanged.',
+      'watch-partial':'Watching in Gitea, but Following could not sync. Tap Stop watching, then Watch ' +
+        (state.detail?.kind === 'pull' ? 'pull request' : 'issue') + ' to repair.',
+      'watch-error':(state.error?.message || 'Watch status was not changed.') + ' Retry.',
+    })[state.status] || '';
+    root.renderSearchPreviewWatch = (detail, state, button) => {
+      const watchableKind = ['issue', 'pull'].includes(detail.kind);
+      const retiring = watchableKind && detail.state === 'closed' &&
+        detail.following === true && detail.watching === true;
+      button.hidden = !(watchableKind && detail.state === 'open') && !retiring;
+      button.textContent = retiring ? 'Stop watching & next' :
+        (detail.watching ? 'Stop watching' : 'Watch ' + (detail.kind === 'pull' ? 'pull request' : 'issue'));
+      button.disabled = state.status === 'watching' || state.status === 'unwatching';
+    };
+    root.renderSearchPreviewStart = (detail, state, button) => {
+      const pull = detail.kind === 'pull' && detail.state === 'closed' &&
+        detail.authored_pull_reopenable === true;
+      const issue = detail.kind === 'issue' &&
+        (detail.reopenable || (detail.state === 'open' && (detail.claimable || detail.assigned_to_me)));
+      button.hidden = !(detail.reviewable || pull || issue);
+      button.textContent = detail.reviewable ? 'Review now' : pull ? 'Reopen in My Work' :
+        detail.reopenable ? 'Reopen & resume' :
+          (detail.assigned_to_me ? 'Start in Today' : 'Assign & start');
+      button.disabled = state.status === 'claiming' || state.status === 'reopening';
+    };
+    root.createSearchAuthoredPullRecovery = o =>
+      async d => {
+        if (!o.confirm('Reopen ' + d.repository + ' #' + d.number + '?')) return 'canceled';
+        await o.reopen(d);
+        await o.refresh();
+        const item = o.find(d);
+        if (!item) {
+          o.unavailable('Reopened. Refresh My Work.');
+          return 'unavailable';
+        }
+        o.open(item);
+        return 'opened';
+      };
+    root.wireSearchPreviewWatch = (button, preview, getDetail) => button.addEventListener('click', () => {
+      const detail = getDetail();
+      if (detail) preview.setWatching(detail.watching !== true).catch(() => {});
+    });
     root.searchPreviewReplyOptions = (fetchJson, storage, crypto) => ({
       storage,
       createOperationId:() => crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random(),
@@ -50,10 +158,15 @@
         retry.hidden = older.hidden = true;
         return;
       }
+      const isNew = comment => Boolean(conversation.reviewedAt && comment.created_at &&
+        new Date(comment.created_at).getTime() > new Date(conversation.reviewedAt).getTime());
+      const newCount = (conversation.comments || []).filter(isNew).length;
       comments.innerHTML = (conversation.comments || []).map(comment =>
-        '<article class="search-preview-comment" data-comment-id="' + Number(comment.id || 0) + '">' +
+        '<article class="search-preview-comment' + (isNew(comment) ? ' new-since-review' : '') +
+        '" data-comment-id="' + Number(comment.id || 0) + '">' +
         '<div class="small">' + escapeHtml(comment.author || 'Unknown author') +
-        (comment.created_at ? ' · ' + escapeHtml(formatTime(comment.created_at)) : '') + '</div>' +
+        (comment.created_at ? ' · ' + escapeHtml(formatTime(comment.created_at)) : '') +
+        (isNew(comment) ? ' · <strong>New since last review</strong>' : '') + '</div>' +
         '<div class="markdown-content">' + renderMarkdown(comment.body || '') + '</div></article>'
       ).join('');
       retry.hidden = conversation.status !== 'error';
@@ -65,7 +178,8 @@
         'Conversation unavailable. Preview and planning actions still work.';
       else if (!conversation.comments?.length) status.textContent = 'No conversation yet.';
       else status.textContent = conversation.comments.length +
-        (conversation.comments.length === 1 ? ' message.' : ' messages.');
+        (conversation.comments.length === 1 ? ' message' : ' messages') +
+        (newCount ? ' · ' + newCount + ' new since last review' : '') + '.';
     };
     root.renderSearchPreviewReply = (state, detail, preview, document) => {
       const section = document.querySelector('.search-preview-reply');
@@ -90,9 +204,58 @@
       else if (state.status === 'reply-error') status.textContent =
         state.error?.message || 'Reply failed. Your draft is safe; retry when ready.';
     };
+    root.renderSearchPreviewReview = (review, document, escapeHtml) => {
+      const section = document.querySelector('#search-preview-review');
+      const status = document.querySelector('#search-preview-review-status');
+      const files = document.querySelector('#search-preview-files');
+      const retry = document.querySelector('#retry-search-preview-review');
+      section.hidden = !review;
+      retry.hidden = review?.status !== 'error';
+      files.innerHTML = '';
+      if (!review) {
+        status.textContent = '';
+        return;
+      }
+      if (review.status === 'loading') {
+        status.textContent = 'Loading CI and changed files…';
+        return;
+      }
+      if (review.status === 'error') {
+        status.textContent = 'Changes unavailable. This revision has not been marked reviewed.';
+        return;
+      }
+      const data = review.data || {};
+      const changed = Array.isArray(data.files) ? data.files : [];
+      const ci = ({success:'CI passed', failure:'CI failed', error:'CI failed', pending:'CI pending'})[
+        data.ci_state
+      ] || 'CI status unavailable';
+      status.textContent = ci + ' · ' + changed.length + ' changed ' +
+        (changed.length === 1 ? 'file.' : 'files.');
+      files.innerHTML = changed.map(file => {
+        const lines = (Array.isArray(file.diff_lines) ? file.diff_lines : []).map(raw => {
+          const line = String(raw);
+          const kind = line.startsWith('@@') ? 'hunk' : line.startsWith('+') ? 'added' :
+            line.startsWith('-') ? 'removed' : 'context';
+          return '<span class="pull-diff-line ' + kind + '">' + escapeHtml(line) + '</span>';
+        }).join('');
+        const diff = file.diff_available
+          ? '<pre class="pull-diff">' + lines +
+            (file.diff_truncated ? '<span class="pull-diff-note">Preview truncated · open in Gitea for the full diff.</span>' : '') + '</pre>'
+          : '<div class="pull-diff-empty">' +
+            (file.diff_binary ? 'Binary file · preview unavailable.' : 'Diff preview unavailable.') + '</div>';
+        return '<article class="search-preview-file"><strong>' + escapeHtml(file.filename || 'Unknown file') +
+          '</strong><span class="small">' + escapeHtml(file.status || 'changed') + ' · +' +
+          Number(file.additions || 0) + ' / −' + Number(file.deletions || 0) + '</span>' + diff + '</article>';
+      }).join('');
+    };
+    root.renderSearchPreviewWorkspaces = (state, detail, preview, document, escapeHtml) => {
+      root.renderSearchPreviewReply(state, detail, preview, document);
+      root.renderSearchPreviewReview(state.review, document, escapeHtml);
+      document.querySelector('[data-search-preview-section="changes"]').hidden = !state.review;
+    };
   }
 })(typeof globalThis !== 'undefined' ? globalThis : this, function () {
-  return function createSearchPreview({ fetchJson, fetchConversation, mutate, share, postReply, queueReply, prepareReply, afterReply, hasAttachments, clearAttachments, storage, createOperationId, session, getSession, loadMore, onNavigate, navigationRoot, onState }) {
+  return function createSearchPreview({ fetchJson, fetchConversation, fetchReview, mutate, watch, share, postReply, queueReply, prepareReply, afterReply, afterUnwatch, hasAttachments, clearAttachments, storage, createOperationId, session, getSession, loadMore, onNavigate, onOpened, navigationRoot, onState }) {
     if (Array.isArray(session)) {
       getSession = session[0];
       loadMore = () => session[1].loadMore();
@@ -105,13 +268,24 @@
     let shareRequest = null;
     let moveRequest = null;
     let replyRequest = null;
+    let watchRequest = null;
     let conversation = null;
+    let review = null;
+    let openedRevision = null;
 
     function sameItem(left, right) {
       return left && right && left.kind === right.kind && left.repository === right.repository &&
         Number(left.number) === Number(right.number);
     }
 
+    async function notifyOpened(item, requestGeneration) {
+      const revision = [item?.kind, item?.repository, item?.number, item?.updated_at].join(':');
+      if (requestGeneration !== generation || openedRevision === revision) return false;
+      await onOpened?.({...item});
+      if (requestGeneration === generation) openedRevision = revision;
+      return true;
+    }
+
     function replyKey(item, suffix) {
       return 'stackchain.search-reply.' + [item?.kind, item?.repository, item?.number]
         .map(value => encodeURIComponent(String(value || ''))).join('.') + '.' + suffix;
@@ -143,6 +317,10 @@
     }
 
     function publish(state) {
+      if (conversation && !Object.prototype.hasOwnProperty.call(state, 'conversation')) {
+        state = {...state, conversation};
+      }
+      if (review && !Object.prototype.hasOwnProperty.call(state, 'review')) state = {...state, review};
       const position = navigation(state.item || current);
       if (navigationRoot) {
         const bar = navigationRoot.querySelector('.search-preview-navigation');
@@ -176,7 +354,10 @@
       if (typeof fetchConversation !== 'function') return Promise.resolve(null);
       const previousComments = page && Array.isArray(conversation?.comments)
         ? conversation.comments : [];
-      conversation = { status:'loading', comments:previousComments, olderPage:page ?? null };
+      conversation = {
+        status:'loading', comments:previousComments, olderPage:page ?? null,
+        reviewedAt:detail?.following === true ? detail.reviewed_at : null,
+      };
       publish({ status:'ready', item:current, detail, conversation });
       return fetchConversation(detail, page).then(result => {
         if (requestGeneration !== generation) return result;
@@ -188,6 +369,7 @@
           status:'ready',
           comments,
           olderPage:result?.older_page ?? null,
+          reviewedAt:detail?.following === true ? detail.reviewed_at : null,
         };
         publish({ status:'ready', item:current, detail:current, conversation });
         return result;
@@ -196,6 +378,7 @@
           conversation = {
             status:'error', comments:previousComments,
             olderPage:page ?? conversation?.olderPage ?? null, error,
+            reviewedAt:detail?.following === true ? detail.reviewed_at : null,
           };
           publish({ status:'ready', item:current, detail:current, conversation });
         }
@@ -203,6 +386,37 @@
       });
     }
 
+    function loadReview(detail, requestGeneration) {
+      if (!(detail?.following === true && detail?.kind === 'pull' && typeof fetchReview === 'function')) {
+        review = null;
+        return Promise.resolve(null);
+      }
+      review = {status:'loading', data:null};
+      publish({status:'ready', item:current, detail:current, conversation, review});
+      return fetchReview(detail).then(data => {
+        if (requestGeneration === generation) {
+          review = {status:'ready', data};
+          publish({status:'ready', item:current, detail:current, conversation, review});
+        }
+        return data;
+      }).catch(error => {
+        if (requestGeneration === generation) {
+          review = {status:'error', data:null, error};
+          publish({status:'ready', item:current, detail:current, conversation, review});
+        }
+        return null;
+      });
+    }
+
+    async function acknowledgeWhenContextReady(requestGeneration) {
+      const conversationReady = typeof fetchConversation !== 'function' || conversation?.status === 'ready';
+      const reviewRequired = current?.following === true && current?.kind === 'pull' &&
+        typeof fetchReview === 'function';
+      if (conversationReady && (!reviewRequired || review?.status === 'ready')) {
+        await notifyOpened(current, requestGeneration);
+      }
+    }
+
     const api = {
       hasReplyAttachments() {
         return Boolean(hasAttachments?.());
@@ -213,14 +427,24 @@
         const requestGeneration = generation;
         current = { ...item };
         conversation = null;
+        review = null;
+        openedRevision = null;
         publish({ status: 'loading', item: current });
-        return fetchJson(current).then(detail => {
+        return fetchJson(current).then(async detail => {
           if (requestGeneration === generation) {
             current = { ...current, ...detail };
             if (typeof fetchConversation === 'function') {
-              loadConversation(current, requestGeneration);
+              const context = loadConversation(current, requestGeneration);
+              if (current.following === true) {
+                const reviewContext = loadReview(current, requestGeneration);
+                await Promise.all([context, reviewContext]);
+                await acknowledgeWhenContextReady(requestGeneration);
+              } else {
+                await notifyOpened(current, requestGeneration);
+              }
             } else {
               publish({ status: 'ready', item: current, detail });
+              await notifyOpened(current, requestGeneration);
             }
           }
           return detail;
@@ -269,9 +493,19 @@
         })().finally(() => { moveRequest = null; });
         return moveRequest;
       },
-      retryConversation() {
-        if (!current) return Promise.resolve(null);
-        return loadConversation(current, generation);
+      async retryConversation() {
+        if (!current) return null;
+        const requestGeneration = generation;
+        const result = await loadConversation(current, requestGeneration);
+        if (current?.following === true) await acknowledgeWhenContextReady(requestGeneration);
+        return result;
+      },
+      async retryReview() {
+        if (!current) return null;
+        const requestGeneration = generation;
+        const result = await loadReview(current, requestGeneration);
+        await acknowledgeWhenContextReady(requestGeneration);
+        return result;
       },
       loadOlderConversation() {
         if (!current || !conversation?.olderPage) return Promise.resolve(null);
@@ -348,11 +582,41 @@
       reopen(detail) {
         return run('reopen', 'reopening', 'reopened', detail);
       },
+      reopenPull(detail) {
+        return run('reopen-pull', 'reopening', 'reopened', detail);
+      },
+      setWatching(watching) {
+        if (watchRequest) return watchRequest;
+        if (!current || typeof watch !== 'function') {
+          return Promise.reject(new Error('Watching is unavailable.'));
+        }
+        const detail = current;
+        publish({ status:watching ? 'watching' : 'unwatching', item:current, detail });
+        watchRequest = watch(detail, watching).then(async result => {
+          current = { ...current, watching:result?.watching === true };
+          const status = result?.following_synced === false
+            ? 'watch-partial' : (watching ? 'watched' : 'unwatched');
+          publish({ status, item:current, detail:current, result });
+          if (!watching && result?.watching === false && typeof afterUnwatch === 'function') {
+            const next = await afterUnwatch({...current});
+            if (next) {
+              onNavigate?.(next);
+              await api.open(next);
+            }
+          }
+          return result;
+        }).catch(error => {
+          publish({ status:'watch-error', item:current, detail, error });
+          throw error;
+        }).finally(() => { watchRequest = null; });
+        return watchRequest;
+      },
     };
     if (navigationRoot) {
       navigationRoot.querySelector('#previous-search-result').addEventListener('click', () => api.previous().catch(() => {}));
       navigationRoot.querySelector('#next-search-result').addEventListener('click', () => api.next().catch(() => {}));
       navigationRoot.querySelector('#retry-search-preview-conversation').addEventListener('click', () => api.retryConversation());
+      navigationRoot.querySelector('#retry-search-preview-review').addEventListener('click', () => api.retryReview());
       navigationRoot.querySelector('#load-older-search-preview-comments').addEventListener('click', () => api.loadOlderConversation());
       const reply = navigationRoot.querySelector('#search-preview-reply');
       reply?.addEventListener('input', event => {

frontend/search-week-plan.js

@@ -0,0 +1,116 @@
+function createSearchWeekPlan({week,claim,accept=item=>item,identity,maxItems=5}={}) {
+  let running=null;
+  const eligible=detail=>Boolean(detail&&detail.kind==='issue'&&detail.state==='open'&&
+    (detail.claimable||detail.assigned_to_me));
+  const loadDay=date=>{
+    const value=week.day(date),estimates=value.estimates||{};
+    return {...value,planned_minutes:(value.ids||[]).reduce((total,id)=>total+(Number(estimates[id])||0),0)};
+  };
+  async function preview(detail) {
+    if(!eligible(detail))return {eligible:false,days:[]};
+    await week.load();
+    const id=identity(detail),existing=week.placement(id);
+    return {eligible:true,existing,days:week.dates().map(item=>({...item,...loadDay(item.date)}))};
+  }
+  function plan(detail,options={}) {
+    if(running)return running;
+    const perform=async()=>{
+      if(!eligible(detail))return {status:'ineligible'};
+      const estimate=Number(options.estimate);
+      if(!Number.isFinite(estimate)||estimate<=0)return {status:'estimate-required'};
+      await week.load();
+      if(!week.dates().some(item=>item.date===options.date))return {status:'date-required'};
+      const originalId=identity(detail),existing=week.placement(originalId);
+      if(existing&&existing.date!==options.date&&!options.move)
+        return {status:'already-planned',date:existing.date,estimate:existing.estimate};
+      const destination=loadDay(options.date);
+      const alreadyThere=(destination.ids||[]).includes(originalId);
+      if(!alreadyThere&&(destination.ids||[]).length>=maxItems)return {status:'day-full',limit:maxItems};
+      const previous=alreadyThere?(Number(destination.estimates?.[originalId])||0):0;
+      const plannedMinutes=destination.planned_minutes-previous+estimate;
+      if(Number(destination.capacity_minutes)>0&&plannedMinutes>Number(destination.capacity_minutes)&&!options.confirmOverload)
+        return {status:'overload-confirmation-required',planned_minutes:plannedMinutes,
+          capacity_minutes:Number(destination.capacity_minutes)};
+      let item=detail,assigned=false;
+      if(detail.claimable){item=await claim(detail);assigned=true;}
+      item=accept(item)||item;
+      const id=identity(item);
+      if(!week.place(id,options.date,estimate,{move:Boolean(options.move)}))
+        return {status:assigned?'assigned-not-planned':'not-planned',item};
+      week.rememberPendingItem?.(id,item);
+      try {
+        await week.flush();
+        return {status:'planned',date:options.date,estimate,item};
+      } catch(_error) {
+        return {status:'planned-pending',date:options.date,estimate,item};
+      }
+    };
+    running=perform().finally(()=>{running=null;});
+    return running;
+  }
+  return {eligible,preview,plan,pending:()=>Boolean(running)};
+}
+function createSearchWeekPlanUI({planner,document,window,getDetail,onPlanned=()=>{},announce=()=>{},escapeHtml,escapeAttribute}={}) {
+  const qs=selector=>document.querySelector(selector);
+  let trigger=null,detail=null,preview=null,overload=false;
+  function close(navigate=false) {
+    if(navigate&&window.history.state?.searchWeekPlan){window.history.back();return;}
+    qs('#search-week-plan-sheet').hidden=true;
+    detail=null;preview=null;overload=false;trigger?.focus?.();trigger=null;
+  }
+  function selectDate(date) {
+    qs('#search-week-plan-days').querySelectorAll('[data-search-week-date]').forEach(button=>
+      button.setAttribute('aria-pressed',String(button.dataset.searchWeekDate===date)));
+    qs('#search-week-plan-days').dataset.selected=date;
+    overload=false;qs('#confirm-search-week-plan').textContent='Plan';
+  }
+  async function open(button) {
+    const selected=getDetail();
+    if(!selected||planner.pending())return false;
+    trigger=button;detail=selected;overload=false;
+    const sheet=qs('#search-week-plan-sheet'),status=qs('#search-week-plan-status');
+    sheet.hidden=false;status.textContent='Loading Week Ahead…';qs('#confirm-search-week-plan').disabled=true;
+    window.history.pushState({...window.history.state,searchWeekPlan:true},'',window.location.href);
+    qs('#search-week-plan-copy').textContent=detail.title||'Untitled issue';
+    try {
+      preview=await planner.preview(detail);
+      const existing=preview.existing;
+      qs('#search-week-plan-days').innerHTML=preview.days.map((day,index)=>
+        '<button type="button" data-search-week-date="'+escapeAttribute(day.date)+'" aria-pressed="'+String(index===0)+'"><strong>'+escapeHtml(day.label)+
+        '</strong><small>'+escapeHtml(day.planned_minutes+(day.capacity_minutes?' of '+day.capacity_minutes:'')+' min · '+day.ids.length+' planned')+'</small></button>').join('');
+      qs('#search-week-plan-days').querySelectorAll('[data-search-week-date]').forEach(dayButton=>
+        dayButton.addEventListener('click',()=>selectDate(dayButton.dataset.searchWeekDate)));
+      selectDate(existing?.date||preview.days[0].date);
+      qs('#search-week-plan-estimate').value=existing?.estimate||'';
+      status.textContent=existing?'Already planned for '+existing.date+'. Choose another day to move it.':'Choose a day and add an estimate.';
+      qs('#confirm-search-week-plan').disabled=false;qs('#search-week-plan-estimate').focus();return true;
+    } catch(error) {status.textContent=(error.message||'Week Ahead is unavailable.')+' Retry when connected.';return false;}
+  }
+  async function confirm() {
+    if(!detail||planner.pending())return;
+    const date=qs('#search-week-plan-days').dataset.selected,estimate=Number(qs('#search-week-plan-estimate').value);
+    const existing=preview?.existing,move=Boolean(existing&&existing.date!==date);
+    const button=qs('#confirm-search-week-plan'),status=qs('#search-week-plan-status');button.disabled=true;
+    const outcome=await planner.plan(detail,{date,estimate,move,confirmOverload:overload});
+    if(outcome.status==='overload-confirmation-required'){
+      overload=true;button.textContent='Confirm over capacity';
+      status.textContent=outcome.planned_minutes+' min exceeds '+outcome.capacity_minutes+' min capacity. Confirm to plan anyway.';
+    } else if(outcome.status==='estimate-required')status.textContent='Enter an estimate in minutes.';
+    else if(outcome.status==='day-full')status.textContent='That day already has '+outcome.limit+' items. Choose another day.';
+    else if(outcome.status==='already-planned')status.textContent='Already planned for '+outcome.date+'. Choose Move to change the day.';
+    else if(outcome.status==='assigned-not-planned')status.textContent='Assigned, not planned. Find it in My Work and retry.';
+    else if(outcome.status==='planned-pending'){announce('Planned for '+date+' · sync pending.');await onPlanned(outcome.item||detail,true,outcome);close(true);}
+    else if(outcome.status==='planned'){announce('Planned for '+date+'.');await onPlanned(outcome.item||detail,false,outcome);close(true);}
+    else status.textContent='Could not plan this issue. Retry.';
+    button.disabled=false;
+  }
+  qs('#plan-search-result').addEventListener('click',event=>open(event.currentTarget));
+  qs('#cancel-search-week-plan').addEventListener('click',()=>close(true));
+  qs('#confirm-search-week-plan').addEventListener('click',confirm);
+  window.addEventListener('popstate',()=>{if(!qs('#search-week-plan-sheet').hidden)close();});
+  document.addEventListener('keydown',event=>{
+    if(event.key==='Escape'&&!qs('#search-week-plan-sheet').hidden){event.preventDefault();close(true);}
+  });
+  return {open,close,confirm};
+}
+if(typeof module!=='undefined'&&module.exports){module.exports=createSearchWeekPlan;module.exports.UI=createSearchWeekPlanUI;}

frontend/security-center.js

@@ -19,6 +19,31 @@
     section, root.document.getElementById(`security-${section}-section`),
   ]));
   let activityCursor = null;
+  let backgroundInert = null;
+
+  const backgroundElements = ['header', 'main', '#mobile-task-dock']
+    .map(selector => root.document.querySelector?.(selector))
+    .filter(Boolean);
+  const focusableControls = () => [...(devicesSheet?.querySelectorAll?.(
+    'button:not([disabled]), select:not([disabled]), input:not([disabled]), textarea:not([disabled]), a[href], [tabindex]:not([tabindex="-1"])'
+  ) || [])].filter(control => !control.hidden && !control.disabled);
+  const containBackground = () => {
+    if (!backgroundInert) {
+      backgroundInert = new Map(backgroundElements.map(element => [element, element.inert]));
+    }
+    backgroundInert.forEach((_wasInert, element) => { element.inert = true; });
+  };
+  const releaseBackground = () => {
+    if (!backgroundInert) return;
+    backgroundInert.forEach((wasInert, element) => { element.inert = wasInert; });
+    backgroundInert = null;
+  };
+  const finishClose = () => {
+    devicesSheet.hidden = true;
+    releaseBackground();
+    devicesButton?.focus();
+    onClose();
+  };
 
   const navigate = (section, { history = true } = {}) => {
     if (!sections[section]) section = 'activity';
@@ -43,16 +68,41 @@
   root.document.getElementById('close-active-devices')?.addEventListener('click', () => {
     if (root.history?.state?.stackchainSecuritySection) root.history.back();
   });
-  root.addEventListener?.('popstate', event => {
-    const section = event.state?.stackchainSecuritySection;
+  const handleRouteChange = section => {
     if (section && !devicesSheet.hidden) {
+      containBackground();
       navigate(section, { history: false });
       return;
     }
     if (!devicesSheet.hidden) {
-      devicesSheet.hidden = true;
-      devicesButton?.focus();
-      onClose();
+      finishClose();
+    }
+  };
+  root.addEventListener?.('popstate', event => {
+    handleRouteChange(event.state?.stackchainSecuritySection);
+  });
+  root.addEventListener?.('hashchange', () => {
+    handleRouteChange(root.history?.state?.stackchainSecuritySection);
+  });
+  root.document.addEventListener?.('keydown', event => {
+    if (devicesSheet.hidden) return;
+    if (event.key === 'Escape') {
+      event.preventDefault();
+      if (root.history?.state?.stackchainSecuritySection) root.history.back();
+      else finishClose();
+      return;
+    }
+    if (event.key !== 'Tab') return;
+    const controls = focusableControls();
+    if (!controls.length) return;
+    const first = controls[0];
+    const last = controls[controls.length - 1];
+    if (event.shiftKey && event.target === first) {
+      event.preventDefault();
+      last.focus();
+    } else if (!event.shiftKey && event.target === last) {
+      event.preventDefault();
+      first.focus();
     }
   });
 
@@ -81,7 +131,8 @@
         revoke.type = 'button';
         revoke.textContent = device.current ? 'Sign out' : 'Revoke';
         revoke.addEventListener('click', async () => {
-          if (device.current) await boundary.signOut();
+          if (device.current && boundary.requestSignOut) await boundary.requestSignOut(revoke);
+          else if (device.current) await boundary.signOut();
           else if (await boundary.revokeActiveDevice(device)) {
             await Promise.all([renderDevices(), renderSecurityActivity()]);
           }
@@ -180,6 +231,8 @@
         passkey_counter_anomaly: 'Passkey counter anomaly',
         device_revoked: 'Device access revoked', all_sessions_revoked: 'All device access revoked',
         issue_closed: 'Issue closed', pull_merged: 'Pull request merged',
+        source_branch_deleted: 'Source branch deleted',
+        release_rollback_prepared: 'Release rollback prepared',
         comment_deleted: 'Comment deleted',
         pull_review_approved: 'Pull request approved',
         pull_review_changes_requested: 'Changes requested', gitea_time_logged: 'Gitea time logged',
@@ -224,6 +277,7 @@
   const open = () => {
     if (!devicesSheet) return;
     onOpen();
+    containBackground();
     devicesSheet.hidden = false;
     root.document.getElementById('close-active-devices')?.focus();
     navigate('activity', { history: root.history?.state?.stackchainSecuritySection !== 'activity' });

frontend/service-worker.js

@@ -1,12 +1,151 @@
 const BASE = new URL('./', self.location.href).pathname;
 importScripts(BASE + 'static/private-data-registry.js');
 importScripts(BASE + 'static/background-issue-sync.js');
-const CACHE = 'stackchain-dashboard-shell-v121';
+const CACHE = 'stackchain-dashboard-shell-v139';
 const OFFLINE_LEASE_URL = new URL(BASE + '__offline-session-lease', self.location.origin).href;
 const OUTAGE_STATUSES = new Set([500, 502, 503, 504]);
 const NAVIGATION_TIMEOUT_MS = self.__STACKCHAIN_NAVIGATION_TIMEOUT_MS || 4000;
 const PUSH_ACTION_TIMEOUT_MS = self.__STACKCHAIN_PUSH_ACTION_TIMEOUT_MS || 8000;
+const TODAY_ACTION_TTL_MS = 2 * 60 * 1000;
 const PRIVATE_DATABASES = self.stackchainPrivateDatabases;
+
+function createAppBadgePreference() {
+  const dbName = 'stackchain-app-badge-preference-v1';
+  const storeName = 'preferences';
+  const open = () => new Promise((resolve, reject) => {
+    const request = indexedDB.open(dbName, 1);
+    request.onupgradeneeded = () => request.result.createObjectStore(storeName);
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => reject(request.error || new Error('App badge preference unavailable.'));
+  });
+  return {
+    async get() {
+      const database = await open();
+      const enabled = await new Promise((resolve, reject) => {
+        const request = database.transaction(storeName, 'readonly').objectStore(storeName).get('enabled');
+        request.onsuccess = () => resolve(request.result === true);
+        request.onerror = () => reject(request.error || new Error('App badge preference unavailable.'));
+      });
+      database.close();
+      return enabled;
+    },
+    async set(enabled) {
+      const database = await open();
+      await new Promise((resolve, reject) => {
+        const transaction = database.transaction(storeName, 'readwrite');
+        transaction.objectStore(storeName).put(enabled === true, 'enabled');
+        transaction.oncomplete = resolve;
+        transaction.onerror = () => reject(transaction.error || new Error('App badge preference could not be saved.'));
+        transaction.onabort = transaction.onerror;
+      });
+      database.close();
+    },
+    async getCounts() {
+      const database = await open();
+      const counts = {};
+      for (const channel of ['updates', 'following']) {
+        counts[channel] = await new Promise((resolve, reject) => {
+          const request = database.transaction(storeName, 'readonly').objectStore(storeName).get('count:' + channel);
+          request.onsuccess = () => resolve(Number.isSafeInteger(request.result) ? request.result : 0);
+          request.onerror = () => reject(request.error || new Error('App badge count unavailable.'));
+        });
+      }
+      database.close();
+      return counts;
+    },
+    async setCount(channel, count) {
+      const database = await open();
+      await new Promise((resolve, reject) => {
+        const transaction = database.transaction(storeName, 'readwrite');
+        transaction.objectStore(storeName).put(count, 'count:' + channel);
+        transaction.oncomplete = resolve;
+        transaction.onerror = () => reject(transaction.error || new Error('App badge count could not be saved.'));
+        transaction.onabort = transaction.onerror;
+      });
+      database.close();
+    },
+    async clearCounts() {
+      await this.setCount('updates', 0);
+      await this.setCount('following', 0);
+    },
+  };
+}
+const appBadgePreference = self.__STACKCHAIN_APP_BADGE_PREFERENCE || createAppBadgePreference();
+let renderedBackgroundBadgeCount = null;
+
+async function reconcileBackgroundAppBadge(channel, count) {
+  if (!['updates', 'following'].includes(channel)
+      || !Number.isSafeInteger(count) || count < 0 || count > 9999
+      || typeof self.registration.setAppBadge !== 'function'
+      || typeof self.registration.clearAppBadge !== 'function') return false;
+  let enabled = false;
+  try { enabled = await appBadgePreference.get(); } catch (_error) { return false; }
+  if (!enabled) return false;
+  try {
+    await appBadgePreference.setCount(channel, count);
+    const counts = await appBadgePreference.getCounts();
+    const total = Math.min(9999, counts.updates + counts.following);
+    if (renderedBackgroundBadgeCount === total) return false;
+    if (total > 0) await self.registration.setAppBadge(total);
+    else await self.registration.clearAppBadge();
+    renderedBackgroundBadgeCount = total;
+    return true;
+  } catch (_error) { return false; }
+}
+
+function createTodayActionStore() {
+  const dbName = 'stackchain-today-action-mailbox-v1';
+  const storeName = 'commands';
+  const open = () => new Promise((resolve, reject) => {
+    const request = indexedDB.open(dbName, 1);
+    request.onupgradeneeded = () => request.result.createObjectStore(storeName, {keyPath:'clientId'});
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => reject(request.error || new Error('Today action mailbox unavailable.'));
+  });
+  return {
+    async put(clientId, command) {
+      const database = await open();
+      await new Promise((resolve, reject) => {
+        const transaction = database.transaction(storeName, 'readwrite');
+        transaction.objectStore(storeName).put({...command, clientId});
+        transaction.oncomplete = resolve;
+        transaction.onerror = () => reject(transaction.error || new Error('Today action could not be saved.'));
+        transaction.onabort = transaction.onerror;
+      });
+      database.close();
+    },
+    async claim(clientId, now) {
+      const database = await open();
+      let command = null;
+      await new Promise((resolve, reject) => {
+        const transaction = database.transaction(storeName, 'readwrite');
+        const store = transaction.objectStore(storeName);
+        const request = store.get(clientId);
+        request.onsuccess = () => {
+          command = request.result || null;
+          if (command) store.delete(clientId);
+        };
+        transaction.oncomplete = resolve;
+        transaction.onerror = () => reject(transaction.error || new Error('Today action could not be claimed.'));
+        transaction.onabort = transaction.onerror;
+      });
+      database.close();
+      return command && command.expiresAt > now ? command : null;
+    },
+    async purge() {
+      const database = await open();
+      await new Promise((resolve, reject) => {
+        const transaction = database.transaction(storeName, 'readwrite');
+        transaction.objectStore(storeName).clear();
+        transaction.oncomplete = resolve;
+        transaction.onerror = () => reject(transaction.error || new Error('Today actions could not be purged.'));
+        transaction.onabort = transaction.onerror;
+      });
+      database.close();
+    },
+  };
+}
+const todayActionStore = self.__STACKCHAIN_TODAY_ACTION_STORE || createTodayActionStore();
 const SHELL = [
   BASE,
   BASE + 'manifest.webmanifest',
@@ -15,6 +154,7 @@ const SHELL = [
   BASE + 'static/icons/stackchain-192.png',
   BASE + 'static/icons/stackchain-512.png',
   BASE + 'static/session.js',
+  BASE + 'static/sign-out-review.js',
   BASE + 'static/feature-loader.js',
   BASE + 'static/workspace-bootstrap.js',
   BASE + 'static/conversation-action-hydrator.js',
@@ -23,6 +163,7 @@ const SHELL = [
   BASE + 'static/commands.js',
   BASE + 'static/saved-searches.js',
   BASE + 'static/search-preview.js',
+  BASE + 'static/following.js',
   BASE + 'static/search-reply-draft-store.js',
   BASE + 'static/conversation-reply-draft-store.js',
   BASE + 'static/conversation-photo-drafts.js',
@@ -67,6 +208,12 @@ const SHELL = [
   BASE + 'static/plan-today.js',
   BASE + 'static/plan-today-readiness.js',
   BASE + 'static/plan-today-preview.js',
+  BASE + 'static/tomorrow-plan.js',
+  BASE + 'static/week-calendar.js',
+  BASE + 'static/week-calendar-import.js',
+  BASE + 'static/week-plan.js',
+  BASE + 'static/today-week-reschedule.js',
+  BASE + 'static/search-week-plan.js',
   BASE + 'static/today-sync.js',
   BASE + 'static/today-rollover.js',
   BASE + 'static/update-ownership.js',
@@ -98,6 +245,7 @@ const SHELL = [
   BASE + 'static/voice-issue-capture.js',
   BASE + 'static/voice-conversation-capture.js',
   BASE + 'static/create-issue-sheet.js',
+  BASE + 'static/create-pull-sheet.js',
   BASE + 'static/mobile-create-issue-nav.js',
   BASE + 'static/create-and-start.js',
   BASE + 'static/assign-and-start.js',
@@ -112,6 +260,7 @@ const SHELL = [
   BASE + 'static/live-data-status.js',
   BASE + 'static/mobile-today-command-bar.js',
   BASE + 'static/mobile-task-dock.js',
+  BASE + 'static/mobile-first-task.js',
   BASE + 'static/mobile-work-entry.js',
   BASE + 'static/mobile-queue-launcher.js',
   BASE + 'static/mobile-delivery-recovery.js',
@@ -127,6 +276,7 @@ const SHELL = [
   BASE + 'static/mobile-launch.js',
   BASE + 'static/mobile-insights.js',
   BASE + 'static/mobile-app-shortcuts.js',
+  BASE + 'static/mobile-app-badge.js',
   BASE + 'static/install-app.js',
   BASE + 'static/private-data-inventory.js',
   BASE + 'static/private-device-data.js',
@@ -460,6 +610,35 @@ async function updateTodayLockScreen(active, running, rawActionToken = '', rawBr
 }
 
 self.addEventListener('message', event => {
+  if (event.data?.type === 'stackchain-app-badge-count') {
+    event.waitUntil((async () => {
+      if (!String(event.source?.url || '').startsWith(self.location.origin + BASE)) return;
+      const channel = event.data.channel;
+      const count = event.data.count;
+      if (!['updates', 'following'].includes(channel)
+          || !Number.isSafeInteger(count) || count < 0 || count > 9999) return;
+      try {
+        if (await appBadgePreference.get()) {
+          await appBadgePreference.setCount(channel, count);
+          renderedBackgroundBadgeCount = null;
+        }
+      } catch (_error) { /* A later authoritative refresh can restore the count. */ }
+    })());
+  }
+  if (event.data?.type === 'stackchain-app-badge-preference') {
+    event.waitUntil((async () => {
+      if (!String(event.source?.url || '').startsWith(self.location.origin + BASE)) return;
+      const enabled = event.data.enabled === true;
+      try {
+        await appBadgePreference.set(enabled);
+        renderedBackgroundBadgeCount = null;
+        if (!enabled && typeof self.registration.clearAppBadge === 'function') {
+          await appBadgePreference.clearCounts();
+          await self.registration.clearAppBadge();
+        }
+      } catch (_error) { /* Page preference remains authoritative on next launch. */ }
+    })());
+  }
   if (event.data?.type === 'stackchain-resume-outbox') event.waitUntil((async () => {
     await issueSync.resume();
     await flushAndNotify();
@@ -470,6 +649,7 @@ self.addEventListener('message', event => {
   if (event.data?.type === 'stackchain-purge-outbox') event.waitUntil((async () => {
     try {
       await issueSync.purge();
+      await todayActionStore.purge();
       await deletePrivateDatabases();
       await updateTodayLockScreen(false, false);
       event.ports?.[0]?.postMessage({ ok: true });
@@ -478,12 +658,33 @@ self.addEventListener('message', event => {
     }
   })());
   if (event.data?.type === 'stackchain-today-lock-screen') {
-    event.waitUntil(updateTodayLockScreen(
-      event.data.active === true,
-      event.data.running === true,
-      String(event.data.actionToken || ''),
-      Number(event.data.breakDeadlineAt || 0)
-    ));
+    event.waitUntil((async () => {
+      const active = event.data.active === true;
+      if (!active) await todayActionStore.purge();
+      await updateTodayLockScreen(
+        active,
+        event.data.running === true,
+        String(event.data.actionToken || ''),
+        Number(event.data.breakDeadlineAt || 0)
+      );
+    })());
+  }
+  if (event.data?.type === 'stackchain-claim-today-action') {
+    event.waitUntil((async () => {
+      const source = event.source;
+      if (!source?.id || !String(source.url || '').startsWith(self.location.origin + BASE)) return;
+      let command;
+      try { command = await todayActionStore.claim(source.id, Date.now()); }
+      catch (_error) { return; }
+      if (!command || !['pause', 'resume', 'complete'].includes(command.action)) return;
+      if (command.actionToken && !/^[A-Za-z0-9_-]{16,128}$/.test(command.actionToken)) return;
+      if (command.action === 'complete' && !command.actionToken) return;
+      source.postMessage?.({
+        type:'stackchain-today-timer-action',
+        action:command.action,
+        ...(command.actionToken ? {actionToken:command.actionToken} : {}),
+      });
+    })());
   }
 });
 
@@ -496,7 +697,23 @@ self.addEventListener('push', event => {
   const tag = String(payload.tag || '');
   const notificationId = Number(payload.notification_id);
   const updateCount = Number(payload.update_count);
+  const unreadCount = typeof payload.unread_count === 'number' ? payload.unread_count : NaN;
   const deadlineCount = Number(payload.deadline_count);
+  const followingCount = Number(payload.following_count);
+  const planDate = String(payload.plan_date || '');
+  if (
+    route === '#/my-work/start-day'
+    && /^\d{4}-\d{2}-\d{2}$/.test(planDate)
+    && tag === 'stackchain-start-day-' + planDate
+  ) {
+    event.waitUntil(self.registration.showNotification('Your planned day is ready', {
+      body: 'Open Stackchain to prepare Today.',
+      tag,
+      actions: [{ action: 'prepare-today', title: 'Prepare Today' }],
+      data: {route},
+    }));
+    return;
+  }
   if (
     route === '#/my-work/agenda'
     && protectRoute === '#/my-work/agenda/protect-today'
@@ -519,6 +736,24 @@ self.addEventListener('push', event => {
     ));
     return;
   }
+  if (
+    route === '#/my-work/following'
+    && /^stackchain-following-[0-9a-f]{16}$/.test(tag)
+    && Number.isSafeInteger(followingCount)
+    && followingCount > 0
+    && followingCount <= 50
+  ) {
+    event.waitUntil(Promise.all([
+      reconcileBackgroundAppBadge('following', followingCount),
+      self.registration.showNotification(
+        followingCount + ' watched item' + (followingCount === 1 ? '' : 's') + ' changed', {
+        body: 'Open Following to review the latest activity.',
+        tag,
+        data: {route},
+      }),
+    ]));
+    return;
+  }
   if (
     route === '#/my-work/updates'
     && tag === 'stackchain-update-digest'
@@ -526,11 +761,12 @@ self.addEventListener('push', event => {
     && updateCount > 0
     && updateCount <= 50
   ) {
-    event.waitUntil(self.registration.showNotification(updateCount + ' new work updates', {
-      body: 'Tap to review them in Stackchain.',
-      tag,
-      data: {route},
-    }));
+    event.waitUntil(Promise.all([
+      reconcileBackgroundAppBadge('updates', unreadCount),
+      self.registration.showNotification(updateCount + ' new work updates', {
+        body: 'Tap to review them in Stackchain.', tag, data: {route},
+      }),
+    ]));
     return;
   }
   if (!/^#\/my-work\/update\/\d+$/.test(route) || !/^stackchain-update-\d+$/.test(tag)) return;
@@ -550,7 +786,10 @@ self.addEventListener('push', event => {
     ];
     options.data.notificationId = notificationId;
   }
-  event.waitUntil(self.registration.showNotification('New work update', options));
+  event.waitUntil(Promise.all([
+    reconcileBackgroundAppBadge('updates', unreadCount),
+    self.registration.showNotification('New work update', options),
+  ]));
 });
 
 async function openWorkRoute(route) {
@@ -591,10 +830,17 @@ async function applyTodayTimerAction(action, actionToken = '') {
     });
     return client.focus?.();
   }
-  const query = '?today_timer_action=' + action +
-    (actionToken ? '&today_action_token=' + encodeURIComponent(actionToken) : '');
-  const target = new URL(BASE + query + route, self.location.origin).href;
-  return self.clients.openWindow(target);
+  const target = new URL(BASE + route, self.location.origin).href;
+  const opened = await self.clients.openWindow(target);
+  if (!opened?.id) return opened;
+  try {
+    await todayActionStore.put(opened.id, {
+      action,
+      ...(actionToken ? {actionToken} : {}),
+      expiresAt:Date.now() + TODAY_ACTION_TTL_MS,
+    });
+  } catch (_error) { /* The clean Today route remains safe; fail the action closed. */ }
+  return opened;
 }
 
 self.addEventListener('notificationclick', event => {

frontend/session.js

@@ -38,9 +38,25 @@
       boundary.startActivityHeartbeat();
       boundary.startReconnectResume();
       const button = root.document.getElementById('sign-out');
-      if (button) button.addEventListener('click', () => boundary.signOut());
-      const allDevicesButton = root.document.getElementById('sign-out-all');
-      if (allDevicesButton) allDevicesButton.addEventListener('click', () => boundary.signOutAllDevices());
+      const allButton = root.document.getElementById('sign-out-all');
+      let review;
+      const features = root.createFeatureLoader({
+        document: root.document,
+        urls: {
+          'sign-out': root.document.querySelector('meta[name="stackchain-feature-sign-out"]')?.content || '',
+          'security-center': root.document.querySelector('meta[name="stackchain-feature-security-center"]')?.content || '',
+        },
+      });
+      const openReview = (mode, source) => features.run(
+        'sign-out', { trigger: source }, () => {
+          if (!review) review = root.createSignOutReview.mount(boundary);
+          review.show(mode, source);
+        },
+      );
+      [[button, 'current'], [allButton, 'all']].forEach(([source, mode]) =>
+        source?.addEventListener('click', () => openReview(mode, source))
+      );
+      boundary.requestSignOut = source => openReview('current', source || button);
       const devicesButton = root.document.getElementById('active-devices');
       const devicesSheet = root.document.getElementById('active-devices-sheet');
       const devicesStatus = root.document.getElementById('active-devices-status');
@@ -51,14 +67,6 @@
           root.stackchainTodayTimerView?.beginDetour?.('security-center');
         }
       };
-      const securityFeatures = root.createFeatureLoader({
-        document: root.document,
-        urls: {
-          'security-center': root.document.querySelector(
-            'meta[name="stackchain-feature-security-center"]'
-          )?.content || '',
-        },
-      });
       let loadingSecurityCenter = false;
       const openSecurityCenter = async () => {
         if (loadingSecurityCenter) return;
@@ -67,7 +75,7 @@
         devicesSheet.hidden = false;
         closeDevices?.focus();
         try {
-          await securityFeatures.run('security-center', {
+          await features.run('security-center', {
             trigger: devicesButton,
             status: devicesStatus,
             retryLabel: 'Tap Active devices to retry.',
@@ -607,8 +615,8 @@
     }
   }
 
-  async function signOutAllDevices() {
-    const confirmed = confirmAction?.('Sign out every device? You will need to sign in again everywhere.');
+  async function signOutAllDevices({ reviewed = false } = {}) {
+    const confirmed = reviewed || confirmAction?.('Sign out every device? You will need to sign in again everywhere.');
     if (!confirmed) return false;
     const response = await sessionFetch(base + 'api/v1/sessions', { method: 'DELETE' });
     if (!response.ok) throw new Error('Could not sign out all devices');

frontend/sign-out-review.js

@@ -0,0 +1,131 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else {
+    root.createSignOutReview = factory;
+    root.createSignOutReview.mount = boundary => {
+      const document = root.document;
+      const review = factory({
+        sheet: document.getElementById('sign-out-review-sheet'),
+        heading: document.getElementById('sign-out-review-heading'),
+        summary: document.getElementById('sign-out-review-summary'),
+        warning: document.getElementById('sign-out-review-warning'),
+        cancelButton: document.getElementById('cancel-sign-out'),
+        confirmButton: document.getElementById('confirm-sign-out'),
+        escapeTarget: document,
+        historyTarget: root,
+        history: root.history,
+        backgroundTargets: Array.from(document.querySelectorAll('body > :not(#sign-out-review-sheet)')),
+        getActiveElement: () => document.activeElement,
+        localStorage: root.localStorage,
+        sessionStorage: root.sessionStorage,
+        privateDatabases: root.stackchainPrivateDatabases,
+        inspectPrivateDatabases: root.inspectStackchainPrivateDatabases,
+        onConfirm: mode => mode === 'all'
+          ? boundary.signOutAllDevices({ reviewed: true })
+          : boundary.signOut(),
+      });
+      review.start();
+      return review;
+    };
+  }
+})(typeof globalThis !== 'undefined' ? globalThis : this, function createSignOutReview(options) {
+  let mode = 'current';
+  let launcher = null;
+  let open = false;
+  let historyEntry = false;
+
+  function ownedItemCount(storage) {
+    if (!storage) return 0;
+    let count = 0;
+    for (let index = 0; index < storage.length; index += 1) {
+      if (storage.key(index)?.startsWith('stackchain.')) count += 1;
+    }
+    return count;
+  }
+
+  async function show(nextMode, source) {
+    mode = nextMode;
+    launcher = source;
+    const itemCount = ownedItemCount(options.localStorage)
+      + (options.sessionStorage === options.localStorage ? 0 : ownedItemCount(options.sessionStorage));
+    let inventory = { recordCount: 0, unavailable: true };
+    try {
+      inventory = await options.inspectPrivateDatabases?.(options.privateDatabases) || inventory;
+    } catch (_error) { /* Unknown private work must use the guarded confirmation path. */ }
+    const recordCount = Math.max(0, Number(inventory.recordCount) || 0);
+    options.heading.textContent = mode === 'all' ? 'Review sign out on every device' : 'Review sign out';
+    options.summary.textContent = inventory.unavailable
+      ? `This device has ${itemCount} private browser item${itemCount === 1 ? '' : 's'}; private work status is unknown.`
+      : `This device has ${itemCount} private browser item${itemCount === 1 ? '' : 's'} and ${recordCount} private work record${recordCount === 1 ? '' : 's'}.`;
+    const atRisk = itemCount > 0 || recordCount > 0 || inventory.unavailable;
+    if (mode === 'all') {
+      options.warning.textContent = atRisk
+        ? 'Every device will need to sign in again. Private drafts or queued work on this device may not be synced and will be erased.'
+        : 'Every device will need to sign in again. This device will be cleared after its session is revoked.';
+    } else {
+      options.warning.textContent = atRisk
+        ? 'Private drafts or queued work may not be synced. Signing out erases them from this device.'
+        : 'Signing out clears this device after the session is revoked.';
+    }
+    options.confirmButton.textContent = atRisk
+      ? 'Sign out and erase private work'
+      : (mode === 'all' ? 'Sign out all devices' : 'Sign out');
+    options.sheet.hidden = false;
+    (options.backgroundTargets || []).forEach(target => { target.inert = true; });
+    open = true;
+    options.history?.pushState?.({ stackchainSignOutReview: true }, '');
+    historyEntry = Boolean(options.history?.back);
+    options.cancelButton.focus();
+  }
+
+  function close({ restoreFocus = true } = {}) {
+    if (!open) return;
+    options.sheet.hidden = true;
+    (options.backgroundTargets || []).forEach(target => { target.inert = false; });
+    open = false;
+    if (restoreFocus) launcher?.focus?.();
+  }
+
+  function dismiss() {
+    if (historyEntry) {
+      historyEntry = false;
+      options.history.back();
+    } else close();
+  }
+
+  async function confirm() {
+    options.confirmButton.disabled = true;
+    try {
+      await options.onConfirm(mode);
+      close({ restoreFocus: false });
+    } catch (_error) {
+      options.warning.textContent = 'Sign out could not finish clearing private work. Close other Stackchain tabs, then retry.';
+    } finally {
+      options.confirmButton.disabled = false;
+    }
+  }
+
+  function start() {
+    options.launcher?.addEventListener('click', event => show('current', event.currentTarget || options.launcher));
+    options.allLauncher?.addEventListener('click', event => show('all', event.currentTarget || options.allLauncher));
+    options.cancelButton?.addEventListener('click', dismiss);
+    options.confirmButton?.addEventListener('click', confirm);
+    options.escapeTarget?.addEventListener('keydown', event => {
+      if (!open) return;
+      if (event.key === 'Escape') { event.preventDefault(); dismiss(); return; }
+      if (event.key !== 'Tab') return;
+      const focusable = Array.from(options.sheet.querySelectorAll('button:not([disabled])'));
+      const first = focusable[0];
+      const last = focusable[focusable.length - 1];
+      const active = options.getActiveElement?.();
+      if (!event.shiftKey && active === last) { event.preventDefault(); first?.focus(); }
+      if (event.shiftKey && active === first) { event.preventDefault(); last?.focus(); }
+    });
+    options.historyTarget?.addEventListener('popstate', () => {
+      historyEntry = false;
+      close();
+    });
+  }
+
+  return { start, show, close };
+});

frontend/today-completion.js

@@ -1,4 +1,5 @@
 function createTodayCompletion({ todayWork, todaySync, workSession, refresh, warm, announce, advance = null,
+  completeActivation = () => globalThis.stackchainFirstTaskCompleting?.(),
   now = Date.now, ttlMs = 10000, onOffer = null, onClear = null,
   setTimer = globalThis.setTimeout, clearTimer = globalThis.clearTimeout,
   undo = [globalThis.document?.getElementById('today-completion-undo'),
@@ -23,7 +24,18 @@ function createTodayCompletion({ todayWork, todaySync, workSession, refresh, war
       announce(options.failureMessage || 'Could not update Today on this device. Try again.');
       return false;
     }
-    todaySync.enqueue('remove', todayWork.identity(item));
+    const operations = [
+      {action:'remove', item_id:identity},
+      ...(completeActivation() ? [{action:'activate', item_id:'first-task', activation_state:'complete'}] : []),
+    ];
+    const admitted = todaySync.enqueueBatch ? todaySync.enqueueBatch(operations) :
+      todaySync.enqueue('remove', identity);
+    if (!admitted) {
+      todayWork.restore?.(snapshot);
+      announce(options.admissionFailureMessage ||
+        'Device storage is full. Free space and try again.');
+      return false;
+    }
     todaySync.flush();
     refresh();
     warm();

frontend/today-lock-screen.js

@@ -149,16 +149,9 @@ function createTodayLockScreen({
     },
     consumeAction,
     async consumeLaunchAction() {
-      let url;
-      try { url = new URL(locationRef?.href || ''); }
-      catch (_error) { return false; }
-      const action = url.searchParams.get('today_timer_action');
-      if (!['pause', 'resume', 'complete'].includes(action)) return false;
-      const token = url.searchParams.get('today_action_token') || '';
-      url.searchParams.delete('today_timer_action');
-      url.searchParams.delete('today_action_token');
-      historyRef?.replaceState?.(null, '', url.pathname + url.search + url.hash);
-      return await consumeAction(action, token);
+      if (!enabled()) return false;
+      await post({type:'stackchain-claim-today-action'});
+      return true;
     },
     render,
   };

frontend/today-rollover.js

@@ -4,7 +4,13 @@ function createTodayRollover(options = {}) {
     Intl.DateTimeFormat().resolvedOptions().timeZone || 'UTC');
 
   function timeZone() {
-    return options.timeZone?.() || resolvedTimeZone();
+    const candidate = options.timeZone?.() || resolvedTimeZone();
+    try {
+      new Intl.DateTimeFormat('en', { timeZone: candidate }).format(now());
+      return candidate;
+    } catch (_error) {
+      return 'UTC';
+    }
   }
 
   function localDate() {

frontend/today-session-sync.js

@@ -1,5 +1,6 @@
 function createTodaySessionSync({
   fetchJson, getDeviceId, timer, onRemote = () => {}, onTransferred = () => {}, onStatus = () => {},
+  onOwnedRestore = () => {},
   setInterval = globalThis.setInterval, clearInterval = globalThis.clearInterval,
 }) {
   let current = null;
@@ -25,6 +26,8 @@ function createTodaySessionSync({
     current = session;
     if (session.device_id === deviceId()) {
       ownedRevision = session.revision;
+      if (Number.isFinite(session.break_deadline_at) &&
+          timer?.restoreBreak?.(session.identity, session.break_deadline_at)) onOwnedRestore(session);
       onRemote(null);
     } else if ((session.running || Number.isFinite(session.break_deadline_at)) && session.identity) {
       if (previousOwned) {
@@ -60,7 +63,7 @@ function createTodaySessionSync({
         onStatus('syncing');
         const body = {
           base_revision:current.revision, device_id:deviceId(), identity:current.identity,
-          elapsed_ms:current.elapsed_ms, running:true,
+          elapsed_ms:current.elapsed_ms, entries:current.entries, running:true,
         };
         if (Object.hasOwn(current, 'break_deadline_at')) body.break_deadline_at = null;
         const session = await fetchJson(endpoint, {
@@ -68,7 +71,7 @@ function createTodaySessionSync({
           body:JSON.stringify(body),
         });
         adopt(session);
-        timer?.adopt?.(session.identity, session.elapsed_ms, session.running);
+        timer?.adopt?.(session.identity, session.elapsed_ms, session.running, session.entries);
         return session;
       } catch (error) {
         if (error?.status === 409 || error?.code === 'session_changed') {
@@ -89,6 +92,7 @@ function createTodaySessionSync({
       const body = {
         base_revision:ownedRevision, device_id:deviceId(), identity:snapshot.identity,
         elapsed_ms:Math.max(0, Math.floor(Number(snapshot.elapsed_ms) || 0)),
+        entries:Array.isArray(snapshot.entries) ? snapshot.entries : undefined,
         running:Boolean(snapshot.running),
       };
       if (Object.hasOwn(snapshot, 'break_deadline_at') || Object.hasOwn(current || {}, 'break_deadline_at')) {
@@ -112,7 +116,7 @@ function createTodaySessionSync({
     }
   }
 
-  function publish(snapshot = timer?.snapshot?.()) {
+  function publish(snapshot = timer?.sessionSnapshot?.() || timer?.snapshot?.()) {
     snapshot = snapshot?.identity ? snapshot : latestSnapshot;
     if (!snapshot?.identity || !deviceId()) return Promise.resolve(null);
     latestSnapshot = snapshot;
@@ -163,6 +167,10 @@ function todaySessionHandoffSummary(session, item) {
     return `On break until ${end} · ready to resume here`;
   }
   const minutes = Math.max(0, Math.floor(Number(session?.elapsed_ms || 0) / 60000));
+  if (Array.isArray(session?.entries) && session.entries.length > 1) {
+    const total = session.entries.reduce((sum, entry) => sum + Math.max(0, Number(entry?.elapsed_ms) || 0), 0);
+    return `${session.entries.length} tracked items · ${Math.floor(total / 60000)} min total`;
+  }
   return `${item?.title || 'Current Today item'} · ${minutes} min elapsed`;
 }
 
@@ -186,6 +194,7 @@ function attachTodaySessionHandoff({
   };
   const sync = createTodaySessionSync({
     fetchJson, getDeviceId, timer,
+    onOwnedRestore:renderTimer,
     onStatus:state => showSessionStatus(
       state === 'syncing' ? 'Session syncing…' :
         (state === 'offline' ? 'Session offline · will retry.' : '')

frontend/today-summary.js

@@ -1,6 +1,11 @@
-function createTodaySummary({ storage = null, getLogin = () => '', share = null, copy = null } = {}) {
+function createTodaySummary({
+  storage = null, getLogin = () => '', share = null, copy = null,
+  resolveTarget = null, enqueueDurably = null,
+  createOperationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random().toString(16).slice(2),
+} = {}) {
   let draft = null;
   let draftKey = '';
+  let postPromise = null;
 
   const storageKey = () => {
     const login = String(getLogin() || '').trim().toLowerCase();
@@ -20,6 +25,7 @@ function createTodaySummary({ storage = null, getLogin = () => '', share = null,
       ...draft,
       worked:copyRows(draft.worked),
       tomorrow:copyRows(draft.tomorrow),
+      target:draft.target ? { ...draft.target } : null,
     } : null;
   };
   const persist = () => {
@@ -37,8 +43,15 @@ function createTodaySummary({ storage = null, getLogin = () => '', share = null,
     if (!storage || !key) return null;
     try {
       const saved = JSON.parse(storage.getItem(key) || 'null');
+      const validTarget = Boolean(saved) && (saved.target === null || saved.target === undefined || (saved.target &&
+        typeof saved.target.repository === 'string' && /^[a-z0-9_.-]+\/[a-z0-9_.-]+$/.test(saved.target.repository) &&
+        Number.isInteger(saved.target.number) && saved.target.number > 0 &&
+        ['issue', 'pull'].includes(saved.target.kind) && typeof saved.target.title === 'string' &&
+        typeof saved.target.state === 'string'));
       if (!saved || !validRows(saved.worked, true) || !validRows(saved.tomorrow, false) ||
-          typeof saved.include_actuals !== 'boolean' || typeof saved.note !== 'string' || saved.note.length > 1000) {
+          typeof saved.include_actuals !== 'boolean' || typeof saved.note !== 'string' || saved.note.length > 1000 ||
+          !['string', 'undefined'].includes(typeof saved.destination) || !validTarget ||
+          !['string', 'undefined'].includes(typeof saved.operation_id)) {
         if (saved !== null) storage.removeItem(key);
         return null;
       }
@@ -75,6 +88,9 @@ function createTodaySummary({ storage = null, getLogin = () => '', share = null,
         tomorrow:(tomorrow || []).filter(row => row?.identity).slice(0, 20).map(row => cleanRow(row, false)),
         include_actuals:false,
         note:'',
+        destination:'',
+        target:null,
+        operation_id:'',
       };
       persist();
       return snapshot();
@@ -107,6 +123,57 @@ function createTodaySummary({ storage = null, getLogin = () => '', share = null,
       persist();
       return true;
     },
+    setDestination(value) {
+      syncAccount();
+      if (!draft) return null;
+      const match = String(value || '').trim().match(/^([a-z0-9_.-]+)\s*\/\s*([a-z0-9_.-]+)\s*#\s*([1-9][0-9]*)$/i);
+      draft.destination = String(value || '').trim().slice(0, 260);
+      draft.target = null;
+      draft.operation_id = '';
+      persist();
+      if (!match) return null;
+      const repository = (match[1] + '/' + match[2]).toLowerCase();
+      return { repository, number:Number(match[3]), label:repository + '#' + Number(match[3]) };
+    },
+    async validateDestination() {
+      syncAccount();
+      const parsed = this.setDestination(draft?.destination || '');
+      if (!parsed) throw new Error('Enter a destination like owner/repo#42.');
+      if (typeof resolveTarget !== 'function') throw new Error('Destination validation is unavailable.');
+      const resolved = await resolveTarget({ repository:parsed.repository, number:parsed.number });
+      if (!resolved || resolved.repository !== parsed.repository || Number(resolved.number) !== parsed.number ||
+          !['issue', 'pull'].includes(resolved.kind)) throw new Error('Choose an exact visible issue or pull request.');
+      draft.target = {
+        repository:parsed.repository, number:parsed.number, kind:resolved.kind,
+        title:String(resolved.title || '').slice(0, 180), state:String(resolved.state || ''),
+      };
+      draft.operation_id = String(createOperationId()).slice(0, 128);
+      persist();
+      return { ...draft.target };
+    },
+    postSummary() {
+      if (postPromise) return postPromise;
+      syncAccount();
+      const body = this.text();
+      if (!body) throw new Error('Select at least one summary item or add a note.');
+      if (!draft?.target || !draft.operation_id) throw new Error('Validate an exact Gitea destination first.');
+      if (typeof enqueueDurably !== 'function') throw new Error('Gitea posting is unavailable.');
+      const target = { ...draft.target };
+      const message = {
+        kind:'search-reply', repository:target.repository, number:target.number,
+        targetKind:target.kind, body, operationId:draft.operation_id,
+      };
+      postPromise = (async () => {
+        try {
+          const admission = await enqueueDurably(message);
+          discard();
+          return { status:'queued', durability:admission?.durability || 'foreground-only', target };
+        } finally {
+          postPromise = null;
+        }
+      })();
+      return postPromise;
+    },
     discard,
     text() {
       syncAccount();
@@ -162,6 +229,10 @@ function createTodaySummaryView({ summary, qs, escapeHtml }) {
     qs('#today-summary-include-actuals').checked = draft.include_actuals;
     qs('#today-summary-note').value = draft.note;
     qs('#today-summary-preview').textContent = summary.text();
+    qs('#today-summary-destination').value = draft.destination || '';
+    qs('#today-summary-target').textContent = draft.target ?
+      (draft.target.repository + '#' + draft.target.number + ' · ' + draft.target.kind + ' · ' + draft.target.title) : '';
+    qs('#post-today-summary').disabled = !draft.target;
     qs('#today-summary-sheet').querySelectorAll('[data-summary-identity]').forEach(input => {
       input.addEventListener('change', () => {
         summary.choose(input.dataset.summarySection, input.dataset.summaryIdentity, input.checked);
@@ -202,6 +273,34 @@ function createTodaySummaryView({ summary, qs, escapeHtml }) {
     }
   }
 
+  async function validateDestination(button) {
+    button.disabled = true;
+    qs('#today-summary-status').textContent = 'Checking destination…';
+    try {
+      await summary.validateDestination();
+      render();
+      qs('#today-summary-status').textContent = 'Destination confirmed. Review it, then post once.';
+    } catch (error) {
+      qs('#today-summary-status').textContent = error.message || 'Destination could not be confirmed.';
+    } finally {
+      button.disabled = false;
+    }
+  }
+
+  async function postDraft(button) {
+    button.disabled = true;
+    qs('#today-summary-status').textContent = 'Saving comment for delivery…';
+    try {
+      const result = await summary.postSummary();
+      qs('#my-work-action-status').textContent = 'Today summary queued for ' +
+        result.target.repository + '#' + result.target.number + '.';
+      close();
+    } catch (error) {
+      qs('#today-summary-status').textContent = error.message || 'Summary could not be queued. Your review is unchanged.';
+      button.disabled = false;
+    }
+  }
+
   function bind() {
     qs('#close-today-summary').addEventListener('click', close);
     qs('#discard-today-summary').addEventListener('click', () => { summary.discard(); close(); });
@@ -212,21 +311,41 @@ function createTodaySummaryView({ summary, qs, escapeHtml }) {
       summary.setNote(event.currentTarget.value);
       qs('#today-summary-preview').textContent = summary.text();
     });
+    qs('#today-summary-destination').addEventListener('input', event => {
+      summary.setDestination(event.currentTarget.value);
+      qs('#today-summary-target').textContent = '';
+      qs('#post-today-summary').disabled = true;
+    });
+    qs('#validate-today-summary-destination').addEventListener('click', event => validateDestination(event.currentTarget));
+    qs('#post-today-summary').addEventListener('click', event => postDraft(event.currentTarget));
     qs('#share-today-summary').addEventListener('click', event => shareDraft(event.currentTarget));
   }
 
   return {
-    open, close, render, bind, shareDraft,
+    open, close, render, bind, shareDraft, validateDestination, postDraft,
     resume() { if (summary.restore()) show(); },
   };
 }
 
-function setupTodaySummary({ qs, escapeHtml, getLogin }) {
+function setupTodaySummary({ qs, escapeHtml, getLogin, resolveTarget, enqueueDurably, fetchJson }) {
+  const targetResolver = resolveTarget || (async target => {
+    if (typeof fetchJson !== 'function') throw new Error('Destination validation is unavailable.');
+    const item = await fetchJson('api/v1/repos/' + target.repository + '/issues/' + target.number +
+      '/preview?kind=issue');
+    if (String(item.repository || '').toLowerCase() !== target.repository ||
+        Number(item.number) !== target.number || !['issue', 'pull'].includes(item.kind)) {
+      throw new Error('That exact issue or pull request is not visible to this account.');
+    }
+    return { repository:target.repository, number:target.number, kind:item.kind,
+      title:item.title || '', state:item.state || '' };
+  });
   const summary = createTodaySummary({
     storage:localStorage,
     getLogin,
     share:typeof navigator.share === 'function' ? payload => navigator.share(payload) : null,
     copy:typeof navigator.clipboard?.writeText === 'function' ? text => navigator.clipboard.writeText(text) : null,
+    resolveTarget:targetResolver,
+    enqueueDurably,
   });
   const view = createTodaySummaryView({ summary, qs, escapeHtml });
   view.bind();

frontend/today-sync.js

@@ -61,12 +61,22 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
       revision: plan.revision, ids: plan.ids,
       capacity_minutes: plan.capacity_minutes ?? null, estimates: plan.estimates || {},
     };
+    if (['coaching', 'complete'].includes(plan.first_task_state)) {
+      snapshot.first_task_state = plan.first_task_state;
+    }
     if (plan.plan_date) {
       snapshot.plan_date = plan.plan_date;
       snapshot.timezone = plan.timezone || null;
     }
     try {
       storage?.setItem(snapshotKey(), JSON.stringify(snapshot));
+      const login = String(getLogin?.() || '').trim().toLowerCase();
+      const activationKey = login && 'stackchain.first-task.v1:' + login;
+      const current = activationKey && storage?.getItem(activationKey);
+      const rank = {'': 0, coaching: 1, complete: 2};
+      if (activationKey && rank[snapshot.first_task_state] > (rank[current] || 0)) {
+        storage?.setItem(activationKey, snapshot.first_task_state);
+      }
     } catch (_error) {
       // A storage quota failure must not prevent the current tab from using server truth.
     }
@@ -121,11 +131,14 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
           discardedCount += 1;
           continue;
         }
-        const operation = record?.operation;
-        const valid = operation && typeof operation.operation_id === 'string' &&
-          ['add', 'remove', 'move', 'configure', 'rollover'].includes(operation.action) &&
-          typeof operation.item_id === 'string' && Number.isFinite(Number(record.queued_at));
-        if (valid) records.push({ ...record, recordKey });
+        const operations = Array.isArray(record?.operations) ? record.operations : [record?.operation];
+        const valid = operations.length && operations.every(operation => operation &&
+          typeof operation.operation_id === 'string' &&
+          ['add', 'remove', 'move', 'configure', 'rollover', 'activate'].includes(operation.action) &&
+          typeof operation.item_id === 'string') && Number.isFinite(Number(record.queued_at));
+        if (valid) operations.forEach((operation, index) => {
+          records.push({operation, queued_at:Number(record.queued_at) + index / 1000, recordKey});
+        });
         else {
           storage.removeItem(recordKey);
           knownOperationKeys.delete(recordKey);
@@ -151,7 +164,7 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
             ? record.operation.base_revision : Math.max(0, savedRevision()),
         }))
         .filter(operation => operation && typeof operation.operation_id === 'string' &&
-          ['add', 'remove', 'move', 'configure', 'rollover'].includes(operation.action) && typeof operation.item_id === 'string');
+          ['add', 'remove', 'move', 'configure', 'rollover', 'activate'].includes(operation.action) && typeof operation.item_id === 'string');
     } catch (_error) {
       return [];
     }
@@ -176,7 +189,25 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
     return Date.now().toString(36) + '-' + Math.random().toString(36).slice(2);
   }
 
-  function enqueue(action, itemId, direction = null) {
+  function saveOperations(operations, queuedAt = now()) {
+    const storageKey = key();
+    if (!storageKey || !storage) return false;
+    const batched = operations.length > 1;
+    const recordKey = storageKey + '.operation.' + encodeURIComponent(operations[0].operation_id);
+    try {
+      storage.setItem(recordKey, JSON.stringify(batched ?
+        {operations, queued_at:queuedAt} : {operation:operations[0], queued_at:queuedAt}));
+      knownOperationKeys.add(recordKey);
+      coordinator?.notify('today');
+      onStatus?.('pending');
+      return true;
+    } catch (_error) {
+      onStatus?.('error');
+      return false;
+    }
+  }
+
+  function enqueue(action, itemId, direction = null, fields = {}) {
     const operations = pending();
     if (action === 'remove' && operations.some(operation =>
       operation.action === 'remove' && operation.item_id === itemId
@@ -186,20 +217,17 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
     }
     const operation = {
       operation_id: operationId(), action, item_id: itemId, direction,
-      base_revision: Math.max(0, savedRevision()),
+      base_revision: Math.max(0, savedRevision()), ...fields,
     };
-    const storageKey = key();
-    if (!storageKey || !storage) return false;
-    const recordKey = storageKey + '.operation.' + encodeURIComponent(operation.operation_id);
-    let saved = false;
-    try {
-      storage.setItem(recordKey, JSON.stringify({ operation, queued_at: now() + operations.length }));
-      knownOperationKeys.add(recordKey);
-      saved = true;
-      coordinator?.notify('today');
-    } catch (_error) { /* Report the persistence failure below. */ }
-    onStatus?.(saved ? 'pending' : 'error');
-    return saved;
+    return saveOperations([operation], now() + operations.length);
+  }
+
+  function enqueueBatch(specifications) {
+    const operations = specifications.map(specification => ({
+      operation_id: operationId(), direction: specification.direction ?? null,
+      base_revision: Math.max(0, savedRevision()), ...specification,
+    }));
+    return saveOperations(operations);
   }
 
   function enqueueConfiguration(capacityMinutes, estimates) {
@@ -223,6 +251,15 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
     }
   }
 
+  function enqueueActivation(state) {
+    if (!['coaching', 'complete'].includes(state)) return false;
+    const rank = {coaching: 1, complete: 2};
+    const queued = pending().filter(operation => operation.action === 'activate');
+    if (queued.some(operation => rank[operation.activation_state] >= rank[state])) return true;
+    queued.forEach(operation => removeOperation(operation.operation_id));
+    return enqueue('activate', 'first-task', null, {activation_state: state});
+  }
+
   function enqueueRollover(proposed) {
     if (!proposed || proposed.action !== 'rollover') return false;
     const operation = {
@@ -266,7 +303,10 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
       let operations = pending();
       let plan;
       let hadConflict = false;
-      if (!operations.length) plan = await fetchJson('api/v1/today');
+      if (!operations.length) {
+        plan = await fetchJson('api/v1/today');
+        operations = pending();
+      }
       while (operations.length) {
         if (key() !== ownerKey) return false;
         const batch = operations.slice(0, 50);
@@ -323,6 +363,9 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
 
   function startLifecycle({ window: windowObject, document: documentObject }) {
     windowObject?.addEventListener?.('online', flush);
+    windowObject?.addEventListener?.('stackchain:first-task-complete', () => {
+      if (enqueueActivation('complete')) flush();
+    });
     documentObject?.addEventListener?.('visibilitychange', () =>
       documentObject.hidden ? false : flush()
     );
@@ -332,7 +375,7 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
     if (change.queue === 'today' && pending().length) flush();
   });
 
-  return { enqueue, enqueueConfiguration, enqueueRollover, migrate, flush, pending, startLifecycle };
+  return { enqueue, enqueueBatch, enqueueConfiguration, enqueueActivation, enqueueRollover, migrate, flush, pending, startLifecycle };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createTodaySync;

frontend/today-timer.js

@@ -57,7 +57,7 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
   const validDetour = state => {
     const pending = state.detour_interruption;
     return pending && typeof pending.identity === 'string' && pending.identity &&
-      typeof pending.resume === 'boolean' && ['find', 'queues', 'insights', 'device-setup', 'security-center'].includes(pending.reason) ?
+      typeof pending.resume === 'boolean' && ['find', 'queues', 'insights', 'device-setup', 'security-center', 'live-data-status'].includes(pending.reason) ?
       { identity:pending.identity, resume:pending.resume, reason:pending.reason } : null;
   };
   const validBreak = state => {
@@ -75,8 +75,9 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
     entry.running = false;
     return state;
   };
-  const snapshot = (identity = '') => {
+  const snapshot = (identity = '', includeEntries = false) => {
     const state = read();
+    const sampledAt = now();
     const selected = identity || state.active_identity;
     const entry = state.entries[selected];
     const result = !selected || !entry ?
@@ -84,37 +85,55 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
       {
         identity:selected,
         elapsed_ms:Math.max(0, Number(entry.elapsed_ms) || 0) + (entry.running ?
-          Math.max(0, now() - Number(entry.started_at ?? now())) : 0),
+          Math.max(0, sampledAt - Number(entry.started_at ?? sampledAt)) : 0),
         running:Boolean(entry.running),
       };
     const timedBreak = validBreak(state);
     if (timedBreak?.identity === selected) result.break_deadline_at = timedBreak.deadline_at;
+    if (includeEntries) {
+      result.entries = Object.entries(state.entries).slice(0, 20).map(([entryIdentity, value]) => ({
+        identity:entryIdentity,
+        elapsed_ms:Math.max(0, Math.floor(Number(value.elapsed_ms) || 0) + (value.running ?
+          Math.max(0, sampledAt - Number(value.started_at ?? sampledAt)) : 0)),
+      }));
+    }
     return result;
   };
   return {
-    adopt(identity, elapsedMs, running) {
+    adopt(identity, elapsedMs, running, entries = null) {
       if (!key() || typeof identity !== 'string' || !identity ||
           !Number.isFinite(Number(elapsedMs)) || Number(elapsedMs) < 0) return false;
+      const incoming = entries === null ? [{identity, elapsed_ms:elapsedMs}] : entries;
+      if (!Array.isArray(incoming) || incoming.length > 20) return false;
+      const seen = new Set();
+      const ledger = {};
+      for (const entry of incoming) {
+        if (typeof entry?.identity !== 'string' || !entry.identity || entry.identity.length > 500 ||
+            seen.has(entry.identity) || !Number.isFinite(Number(entry.elapsed_ms)) || Number(entry.elapsed_ms) < 0) return false;
+        seen.add(entry.identity);
+        ledger[entry.identity] = {
+          elapsed_ms:Math.floor(Number(entry.elapsed_ms)), started_at:null, running:false,
+        };
+      }
+      if (!ledger[identity] || ledger[identity].elapsed_ms !== Math.floor(Number(elapsedMs))) return false;
       const state = read();
-      settle(state);
       state.active_identity = identity;
-      state.entries[identity] = {
-        elapsed_ms:Math.floor(Number(elapsedMs)),
-        started_at:running ? now() : null,
-        running:Boolean(running),
-      };
+      state.entries = ledger;
+      state.entries[identity].started_at = running ? now() : null;
+      state.entries[identity].running = Boolean(running);
       state.away_at = null;
       state.pending_interruption = null;
       state.attention_interruption = null;
       state.search_interruption = null;
       state.detour_interruption = null;
-      state.timed_break = null;
+      if(running || validBreak(state)?.identity !== identity) state.timed_break=null;
       return write(state);
     },
     activate(identity) {
       if (!key() || typeof identity !== 'string' || !identity) return false;
       const state = read();
-      if (state.active_identity === identity && state.entries[identity]?.running) return true;
+      if (state.active_identity === identity &&
+          (state.entries[identity]?.running || validBreak(state)?.identity === identity)) return true;
       settle(state);
       state.active_identity = identity;
       const entry = state.entries[identity] || { elapsed_ms:0, started_at:null, running:false };
@@ -158,6 +177,15 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
       state.timed_break = { identity, deadline_at:now() + duration * 60000 };
       return write(state) ? validBreak(state) : false;
     },
+    restoreBreak(identity, deadlineAt) {
+      const deadline = Number(deadlineAt);
+      if (typeof identity !== 'string' || !identity || !Number.isFinite(deadline) || deadline <= now()) return false;
+      const state = read();
+      const entry = state.entries[identity];
+      if (state.active_identity !== identity || !entry || entry.running || validBreak(state)) return false;
+      state.timed_break = { identity, deadline_at:Math.floor(deadline) };
+      return write(state);
+    },
     breakSnapshot() {
       return validBreak(read());
     },
@@ -289,7 +317,7 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
       return write(state) ? { identity:pending.identity, resumed } : null;
     },
     beginDetour(reason) {
-      if (!['find', 'queues', 'insights', 'device-setup', 'security-center'].includes(reason)) return null;
+      if (!['find', 'queues', 'insights', 'device-setup', 'security-center', 'live-data-status'].includes(reason)) return null;
       const state = read();
       const existing = validDetour(state);
       if (existing) return existing;
@@ -387,6 +415,7 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now(), onChange
       }, 0);
     },
     snapshot,
+    sessionSnapshot:(identity = '') => snapshot(identity, true),
   };
 }
 
@@ -541,6 +570,10 @@ function createTodayTimerView({ timer, isActive, queryAll, formatEstimate, getRu
     },
     finishCapture() { return captureView.finish(); },
     transferCapture() { return captureView.transfer(); },
+    restore(recovery) {
+      render();
+      return Promise.resolve(recovery).catch(() => false).then(() => { render(); return !!timer.breakSnapshot?.(); });
+    },
     render,
   };
   queryAll('#new-issue').forEach(button => button.addEventListener('click', () => {

frontend/today-week-reschedule.js

@@ -0,0 +1,363 @@
+function createTodayWeekReschedule({
+  week,
+  api,
+  getToday,
+  adoptToday = () => {},
+  operationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()),
+  storage = null,
+  getLogin = () => '',
+  now = () => Date.now(),
+} = {}) {
+  let current = null;
+  let flushing = null;
+  const storagePrefix = 'stackchain.today-week-reschedule.v1.';
+
+  function storageKey() {
+    const login = String(getLogin?.() || '').trim().toLowerCase();
+    return login ? storagePrefix + encodeURIComponent(login) : '';
+  }
+
+  function validRecord(value) {
+    return typeof value?.body?.operation_id === 'string' &&
+      Array.isArray(value?.today?.ids) && Array.isArray(value?.week?.days);
+  }
+
+  function readQueue() {
+    const key = storageKey();
+    if (!key || !storage) return [];
+    try {
+      const value = JSON.parse(storage.getItem(key) || 'null');
+      if (Array.isArray(value?.records)) return value.records.filter(validRecord);
+      return validRecord(value) ? [value] : [];
+    } catch (_error) { return []; }
+  }
+
+  function saveQueue(records) {
+    const key = storageKey();
+    if (!key || !storage) return false;
+    try {
+      if (!records.length) storage.removeItem(key);
+      else storage.setItem(key, JSON.stringify({version:2, records}));
+      return true;
+    }
+    catch (_error) { return false; }
+  }
+
+  function persist(record) { return saveQueue([...readQueue(), record]); }
+
+  function pending() {
+    const key = storageKey();
+    if (!key || !storage) return null;
+    return readQueue()[0] || null;
+  }
+
+  function resume() {
+    const records = readQueue();
+    const record = records[records.length - 1];
+    if (!record) return null;
+    adoptToday(record.today);
+    week.adopt(record.week);
+    return {...record, sync_pending:true, pending_count:records.length};
+  }
+
+  async function restoreConflict(error) {
+    if (error?.status !== 409) throw error;
+    const [today, weekState] = await Promise.all([api('api/v1/today'), api('api/v1/week')]);
+    adoptToday(today);
+    week.adopt(weekState);
+    const conflict = new Error('Plans changed on another device. Review and retry this saved move.');
+    conflict.status = 409;
+    throw conflict;
+  }
+
+  function flush(retryConflict = false) {
+    if (flushing) return flushing;
+    if (!pending()) return Promise.resolve(false);
+    flushing = (async () => {
+      let result = null;
+      let conflictRetried = false;
+      while (true) {
+        const records = readQueue();
+        const record = records[0];
+        if (!record) return result ? {...result, sync_pending:false, pending_count:0} : false;
+        try {
+          result = await api('api/v1/week/reschedule', {
+            method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(record.body),
+          });
+        } catch (error) {
+          if (error?.status === 409 && retryConflict && !conflictRetried) {
+            const [today, weekState] = await Promise.all([api('api/v1/today'), api('api/v1/week')]);
+            adoptToday(today); week.adopt(weekState);
+            const latest = readQueue();
+            if (today?.ids?.includes(record.body.identity) &&
+                latest[0]?.body?.operation_id === record.body.operation_id) {
+              latest[0] = {...latest[0], body:{
+                ...latest[0].body,
+                today_revision:today.revision,
+                week_revision:weekState.revision,
+              }};
+              if (!saveQueue(latest)) throw new Error('Could not update this saved move after plans changed.');
+              conflictRetried = true;
+              continue;
+            }
+          }
+          await restoreConflict(error);
+        }
+        adoptToday(result.today);
+        week.adopt(result.week);
+        const latest = readQueue();
+        if (latest[0]?.body?.operation_id !== record.body.operation_id) continue;
+        const remaining = latest.slice(1).map((entry, index) => index ? entry : ({
+          ...entry,
+          body:{...entry.body, today_revision:result.today.revision, week_revision:result.week.revision},
+        }));
+        if (!saveQueue(remaining)) throw new Error('Move synced, but its local queue could not be updated.');
+      }
+    })().finally(() => { flushing = null; });
+    return flushing;
+  }
+
+  function optimisticSnapshots(planDate, estimate) {
+    const today = {
+      ...current.today,
+      ids: current.today.ids.filter(id => id !== current.identity),
+      estimates: {...(current.today.estimates || {})},
+    };
+    delete today.estimates[current.identity];
+    const days = (current.week.days || []).map(day => {
+      const estimates = {...(day.estimates || {})}; delete estimates[current.identity];
+      return {...day, ids:(day.ids || []).filter(id => id !== current.identity), estimates};
+    });
+    let destination = days.find(day => day.plan_date === planDate);
+    if (!destination) {
+      destination = {plan_date:planDate, ids:[], capacity_minutes:null, estimates:{}};
+      days.push(destination);
+    }
+    destination.ids.push(current.identity);
+    destination.estimates[current.identity] = estimate;
+    return {today, week:{revision:current.week_revision, timezone:current.week.timezone || null, days}};
+  }
+
+  async function open(identity) {
+    let today;
+    const queued = readQueue().length;
+    let offline = Boolean(queued);
+    if (queued) {
+      today = getToday?.();
+    } else {
+      try { today = await api('api/v1/today'); }
+      catch (error) {
+        if (error?.status === 401 || error?.status === 403) throw error;
+        today = getToday?.(); offline = true;
+      }
+    }
+    if (!identity || !today?.ids?.includes(identity)) {
+      throw new Error('The active Today item changed. Reopen rescheduling.');
+    }
+    const loaded = queued ? week.state?.() : await week.load();
+    if (!loaded) throw new Error('Reload Today before rescheduling another saved move.');
+    if (loaded?.sync_pending) {
+      throw new Error('Reconnect before rescheduling Today into Week Ahead.');
+    }
+    offline = offline || Boolean(loaded?.offline_snapshot);
+    const estimate = Number(today.estimates?.[identity]);
+    const estimateMinutes = Number.isFinite(estimate) && estimate > 0 ? estimate : null;
+    const days = week.review().days.map(day => {
+      const ids = (day.ids || []).filter(id => id !== identity);
+      const planned = Number(day.planned_minutes) || 0;
+      const existing = Number(day.estimates?.[identity]) || 0;
+      return {
+        ...day,
+        ids,
+        planned_minutes: Math.max(0, planned - existing),
+        load: `${Math.max(0, planned - existing)} / ${Number(day.capacity_minutes) || 0} min`,
+        eligible: ids.length < 5,
+      };
+    });
+    current = {
+      identity,
+      today_revision: today.revision,
+      week_revision: loaded.revision,
+      operation_id: operationId(),
+      estimate_minutes: estimateMinutes,
+      days,
+      today,
+      week: loaded,
+      offline,
+    };
+    return {...current, days:days.map(day => ({...day, ids:[...day.ids]}))};
+  }
+
+  async function confirm(planDate, estimateMinutes, {allowOverload = false} = {}) {
+    if (!current) throw new Error('Open rescheduling before choosing a day.');
+    const day = current.days.find(value => value.plan_date === planDate);
+    if (!day) throw new Error('Choose one of the next seven days.');
+    const estimate = Number(estimateMinutes);
+    if (!Number.isFinite(estimate) || estimate < 5 || estimate > 1440) {
+      throw new Error('Estimate must be between 5 and 1440 minutes.');
+    }
+    if (!day.eligible) throw new Error('That Week Ahead day already has five items.');
+    const capacity = Number(day.capacity_minutes) || 0;
+    if (capacity && day.planned_minutes + estimate > capacity && !allowOverload) {
+      throw new Error("That move exceeds the day's capacity. Confirm overload before rescheduling.");
+    }
+    const body = {
+      operation_id:current.operation_id,
+      identity:current.identity,
+      estimate_minutes:estimate,
+      plan_date:planDate,
+      today_revision:current.today_revision,
+      week_revision:current.week_revision,
+      allow_over_capacity:allowOverload,
+    };
+    const optimistic = optimisticSnapshots(planDate, estimate);
+    const durable = Boolean(storageKey() && storage);
+    const admitted = durable && persist({body, ...optimistic, queued_at:now()});
+    if (durable && !admitted) {
+      throw new Error('Could not save this move on this device. Nothing changed.');
+    }
+    if (admitted) {
+      adoptToday(optimistic.today);
+      week.adopt(optimistic.week);
+    }
+    if (current.offline) {
+      current = null;
+      return {...optimistic, sync_pending:true, pending_count:readQueue().length};
+    }
+    let result;
+    try {
+      if (admitted) {
+        result = await flush(true);
+      } else {
+        try {
+          result = await api('api/v1/week/reschedule', {
+            method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(body),
+          });
+        } catch (error) {
+          if (error?.status !== 409) throw error;
+          const [today, weekState] = await Promise.all([api('api/v1/today'), api('api/v1/week')]);
+          adoptToday(today); week.adopt(weekState);
+          if (!today?.ids?.includes(body.identity)) throw error;
+          body.today_revision = today.revision; body.week_revision = weekState.revision;
+          result = await api('api/v1/week/reschedule', {
+            method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(body),
+          });
+        }
+      }
+    } catch(error) {
+      if (admitted && error?.status === 409) await restoreConflict(error);
+      if (admitted && error?.status !== 401 && error?.status !== 403) {
+        current = null;
+        return {...optimistic, sync_pending:true};
+      }
+      throw error;
+    }
+    adoptToday(result.today);
+    week.adopt(result.week);
+    current = null;
+    return result;
+  }
+
+  function cancel() { current = null; }
+  return {open, confirm, cancel, state:() => current, pending, resume, flush};
+}
+
+function mountTodayWeekReschedule({
+  qs, document=globalThis.document, window=globalThis.window, week, api, getToday, adoptToday, currentTarget, closeActions,
+  refresh, warm, continueToday, announce, storage=null, getLogin=()=>'', schedule=callback=>requestAnimationFrame(callback),
+}={}) {
+  const dialog=qs('#today-week-reschedule'),daysRoot=qs('#today-week-reschedule-days');
+  const estimate=qs('#today-week-reschedule-estimate'),status=qs('#today-week-reschedule-status');
+  const confirm=qs('#confirm-today-week-reschedule'),launcher=qs('[data-work-session-reschedule-week]');
+  let selectedDate=null,allowOverload=false;
+  const controller=createTodayWeekReschedule({week,api,getToday,adoptToday,storage,getLogin});
+  async function flushPending() {
+    if(!controller.pending())return false;
+    try {
+      const result=await controller.flush();
+      announce('Today-to-Week move synced to your account.');
+      await refresh();warm();
+      return result;
+    } catch(error) {
+      announce(`${error.message||'Sync unavailable.'} Move saved on this device · sync pending.`);
+      return false;
+    }
+  }
+  function resumePending() {
+    const restored=controller.resume();
+    if(!restored)return false;
+    announce('Today-to-Week move saved on this device · sync pending.');
+    flushPending();
+    return restored;
+  }
+  window?.addEventListener('online', flushPending);
+  document?.addEventListener('visibilitychange',()=>document.hidden?false:flushPending());
+  let restoreAttempts=0;
+  function restoreWhenOwned(){
+    if(resumePending()||getLogin()||restoreAttempts++>=20)return;
+    window?.setTimeout(restoreWhenOwned,250);
+  }
+  restoreWhenOwned();
+  function close() {
+    controller.cancel();selectedDate=null;allowOverload=false;
+    if(dialog.open)dialog.close();schedule(()=>{
+      qs('[data-mobile-today-more]').click();launcher.focus();
+    });
+  }
+  function render(opened) {
+    daysRoot.replaceChildren(...opened.days.map(day=>{
+      const button=document.createElement('button');
+      button.type='button';button.dataset.planDate=day.plan_date;button.setAttribute('role','radio');
+      button.setAttribute('aria-checked','false');button.disabled=!day.eligible;
+      const label=document.createElement('strong');label.textContent=day.label;
+      const load=document.createElement('span');load.className='small';
+      load.textContent=day.eligible?day.load:'5 items · full';button.append(label,load);
+      button.addEventListener('click',()=>{
+        selectedDate=day.plan_date;allowOverload=false;
+        daysRoot.querySelectorAll('button').forEach(choice=>choice.setAttribute(
+          'aria-checked',String(choice===button)
+        ));
+        status.textContent='';confirm.disabled=false;confirm.textContent='Move to Week Ahead & continue';
+      });
+      return button;
+    }));
+  }
+  launcher.addEventListener('click',async()=>{
+    const target=currentTarget();
+    if(!target){announce('Start or resume a checkpointed Today item before rescheduling.');return;}
+    closeActions();status.textContent='Loading Week Ahead…';confirm.disabled=true;dialog.showModal();
+    try{
+      const opened=await controller.open(target.identity);render(opened);
+      estimate.value=opened.estimate_minutes||'';
+      status.textContent=opened.estimate_minutes?'Choose a future day.':'Add an estimate, then choose a future day.';
+      schedule(()=>daysRoot.querySelector('button:not(:disabled)')?.focus());
+    }catch(error){status.textContent=error.message;}
+  });
+  qs('#cancel-today-week-reschedule').addEventListener('click',close);
+  dialog.addEventListener('cancel',event=>{event.preventDefault();close();});
+  confirm.addEventListener('click',async()=>{
+    if(!selectedDate)return;
+    confirm.disabled=true;status.textContent='Moving Today into Week Ahead…';
+    try{
+      const result=await controller.confirm(selectedDate,Number(estimate.value),{allowOverload});
+      dialog.close();
+      if(result.sync_pending){
+        announce('Moved locally. Saved on this device · sync pending.');warm();
+      }else{
+        await refresh();warm();announce('Moved to Week Ahead. Continuing Today.');
+      }
+      await continueToday();
+    }catch(error){
+      const overload=error.message.includes('Confirm overload');allowOverload=overload;
+      status.textContent=error.message;
+      confirm.textContent=overload?'Confirm overload & continue':'Move to Week Ahead & continue';
+      confirm.disabled=false;
+    }
+  });
+  return {controller,close,flushPending,resumePending};
+}
+
+if (typeof module !== 'undefined' && module.exports) {
+  module.exports = createTodayWeekReschedule;
+  module.exports.mount = mountTodayWeekReschedule;
+}

frontend/today-wrap-up.js

@@ -1,4 +1,4 @@
-function createTodayWrapUp({ todayWork, laterWork, todaySync }) {
+function createTodayWrapUp({ todayWork, tomorrowPlan, todaySync, limit = 5 }) {
   let items = [];
   const selected = new Set();
 
@@ -28,16 +28,39 @@ function createTodayWrapUp({ todayWork, laterWork, todaySync }) {
   }
 
   async function finish() {
-    const wake = laterWork.presetUntil('tomorrow');
-    let scheduled = 0;
-    for (const item of items) {
+    const loaded = await tomorrowPlan.load();
+    const currentIds = Array.isArray(loaded?.ids) ? [...loaded.ids] : [];
+    const carried = items.filter(item => selected.has(todayWork.identity(item)) && todayWork.contains(item));
+    if (!carried.length) {
+      return {
+        scheduled:0,
+        left:items.filter(item => todayWork.contains(item)).length,
+        plan_count:currentIds.length,
+        plan_date:loaded?.plan_date,
+        sync_pending:Boolean(loaded?.sync_pending),
+      };
+    }
+    const combinedIds = [...currentIds];
+    for (const item of carried) {
+      const identity = todayWork.identity(item);
+      if (!combinedIds.includes(identity)) combinedIds.push(identity);
+    }
+    if (combinedIds.length > limit) {
+      throw new Error(`Tomorrow can hold ${limit} items. Keep ${combinedIds.length - limit} in Today or edit Tomorrow first.`);
+    }
+    const estimates = {...(loaded?.estimates || {})};
+    const capacityMinutes = loaded?.capacity_minutes ?? null;
+    const plannedMinutes = combinedIds.reduce((total, identity) => total + (Number(estimates[identity]) || 0), 0);
+    if (capacityMinutes !== null && plannedMinutes > capacityMinutes) {
+      throw new Error('Tomorrow is over capacity. Edit the plan before finishing wrap-up.');
+    }
+    const staged = tomorrowPlan.stage({ids:combinedIds, capacity_minutes:capacityMinutes, estimates});
+    if (!staged) throw new Error('Tomorrow could not be saved on this device. Your Today plan is unchanged.');
+    let scheduled = 0;
+    for (const item of carried) {
       const identity = todayWork.identity(item);
-      if (!selected.has(identity) || !todayWork.contains(item)) continue;
-      const deferred = laterWork.defer(item, wake, {handoff:'today'});
-      if (deferred !== 'deferred') throw new Error('Tomorrow could not be saved. Your Today plan is unchanged.');
       if (!todaySync.enqueue('remove', identity)) {
-        laterWork.restore?.(item);
-        throw new Error('Today sync could not be queued. Your Today plan is unchanged.');
+        throw new Error('Today sync could not be queued. The item remains in Today.');
       }
       if (todayWork.contains(item) && !todayWork.remove(item)) {
         throw new Error('Today could not be updated. Retry wrap-up.');
@@ -45,7 +68,13 @@ function createTodayWrapUp({ todayWork, laterWork, todaySync }) {
       scheduled += 1;
     }
     await todaySync.flush();
-    return { scheduled, left:items.length - scheduled, wake_at:wake.toISOString() };
+    return {
+      scheduled,
+      left:items.length - scheduled,
+      plan_count:combinedIds.length,
+      plan_date:staged.plan_date,
+      sync_pending:Boolean(staged.sync_pending),
+    };
   }
 
   return { open, choose, snapshot, finish };
@@ -69,7 +98,7 @@ function createTodayWrapUpView({ controller, qs, escapeHtml, onComplete = () =>
       return '<div class="today-wrap-up-item"><span><strong>' + escapeHtml(title) + '</strong>' +
         '<span class="small muted">' + escapeHtml(context) + '</span></span><label><input type="checkbox" ' +
         'data-wrap-up-identity="' + escapeHtml(row.identity) + '"' + (row.schedule ? ' checked' : '') +
-        '> Tomorrow 09:00</label></div>';
+        '> Carry to Tomorrow</label></div>';
     }).join('') || '<p class="small">Nothing unfinished remains in Today.</p>';
     qs('#today-wrap-up-items').querySelectorAll('[data-wrap-up-identity]').forEach(input => {
       input.addEventListener('change', () => controller.choose(input.dataset.wrapUpIdentity, input.checked));
@@ -97,7 +126,8 @@ function createTodayWrapUpView({ controller, qs, escapeHtml, onComplete = () =>
         context:String(row.item.key || row.item.repository || 'Work item').slice(0, 180),
       }));
       const result = await controller.finish();
-      qs('#my-work-action-status').textContent = result.scheduled + ' scheduled for tomorrow · ' + result.left + ' left in Today.';
+      qs('#my-work-action-status').textContent = result.scheduled + ' carried to Tomorrow · ' + result.left +
+        ' left in Today' + (result.sync_pending ? ' · sync pending.' : '.');
       close();
       onComplete(result, actualMinutes, workedItems, tomorrowItems);
     } catch (error) {

frontend/tomorrow-plan.js

@@ -0,0 +1,171 @@
+function createTomorrowPlan({fetchJson,localDate,timeZone,storage,getLogin}={}) {
+  let plan={revision:0,ids:[],capacity_minutes:null,estimates:{}};
+  let flushing=null;
+  let lastConflict=null;
+  const storagePrefix='stackchain.tomorrow-sync.v1.';
+  const state=()=>({...plan,ids:[...plan.ids],estimates:{...plan.estimates}});
+  function storageKey() {
+    const login=String(getLogin?.()||'').trim().toLowerCase();
+    return login?storagePrefix+encodeURIComponent(login):'';
+  }
+  function pending() {
+    const key=storageKey();
+    if(!key||!storage) return false;
+    try {
+      const value=JSON.parse(storage.getItem(key)||'null');
+      return Number.isInteger(value?.base_revision)&&Array.isArray(value?.ids)?
+        {...value,ids:[...value.ids],estimates:{...(value.estimates||{})},sync_pending:true}:false;
+    } catch (_error) { return false; }
+  }
+  function adopt(value) {
+    if (!Number.isInteger(value?.revision)||!Array.isArray(value?.ids)) return false;
+    plan={revision:value.revision,ids:[...value.ids],capacity_minutes:value.capacity_minutes??null,
+      estimates:{...(value.estimates||{})},...(value.plan_date?{plan_date:value.plan_date,timezone:value.timezone||null}:{})};
+    return state();
+  }
+  function nextLocalDate() {
+    const [y,m,d]=localDate().split('-').map(Number);
+    return new Date(Date.UTC(y,m-1,d+1)).toISOString().slice(0,10);
+  }
+  async function load(){
+    const queued=pending();
+    return queued?(plan={...queued},state()):adopt(await fetchJson('api/v1/tomorrow'));
+  }
+  function stage(value) {
+    const key=storageKey();
+    if(!key||!storage) return false;
+    const queued={base_revision:plan.revision,revision:plan.revision,ids:[...(value.ids||[])],
+      capacity_minutes:value.capacity_minutes??null,estimates:{...(value.estimates||{})},
+      plan_date:nextLocalDate(),timezone:timeZone(),sync_pending:true};
+    try { storage.setItem(key,JSON.stringify(queued)); }
+    catch (_error) { return false; }
+    lastConflict=null;
+    plan=queued;
+    return state();
+  }
+  function deliveryBody(value) {
+    return {base_revision:value.base_revision,ids:[...value.ids],
+      capacity_minutes:value.capacity_minutes??null,estimates:{...(value.estimates||{})},
+      plan_date:value.plan_date,timezone:value.timezone};
+  }
+  function flush() {
+    if(flushing) return flushing;
+    const queued=pending();
+    const key=storageKey();
+    if(!queued||!key) return Promise.resolve(false);
+    const body=deliveryBody(queued);
+    flushing=fetchJson('api/v1/tomorrow',{method:'PUT',headers:{'Content-Type':'application/json'},
+      body:JSON.stringify(body)}).then(saved=>{
+      const current=pending();
+      if(current&&JSON.stringify(deliveryBody(current))===JSON.stringify(body)) storage.removeItem(key);
+      if(!pending()) adopt(saved);
+      return saved;
+    }).catch(async error=>{
+      if(error?.status===409) {
+        const remote=await fetchJson('api/v1/tomorrow');
+        lastConflict={key,local:pending(),remote:{...remote,ids:[...remote.ids],estimates:{...(remote.estimates||{})}}};
+      }
+      throw error;
+    }).finally(()=>{flushing=null;});
+    return flushing;
+  }
+  async function keepLocal() {
+    if(!lastConflict||lastConflict.key!==storageKey()) return false;
+    const conflictKey=lastConflict.key;
+    const local={...lastConflict.local,ids:[...lastConflict.local.ids],estimates:{...lastConflict.local.estimates}};
+    const body=deliveryBody({...local,base_revision:lastConflict.remote.revision});
+    try {
+      const saved=await fetchJson('api/v1/tomorrow',{method:'PUT',headers:{'Content-Type':'application/json'},
+        body:JSON.stringify(body)});
+      const current=pending();
+      if(current&&JSON.stringify(deliveryBody(current))===JSON.stringify(deliveryBody(local))) storage.removeItem(storageKey());
+      if(!pending()) adopt(saved);
+      lastConflict=null;
+      return saved;
+    } catch(error) {
+      if(error?.status===409) {
+        const remote=await fetchJson('api/v1/tomorrow');
+        lastConflict={key:conflictKey,local,remote:{...remote,ids:[...remote.ids],estimates:{...(remote.estimates||{})}}};
+      }
+      throw error;
+    }
+  }
+  function useRemote() {
+    if(!lastConflict||lastConflict.key!==storageKey()) return false;
+    const remote=lastConflict.remote;
+    const key=storageKey();
+    if(key&&storage) storage.removeItem(key);
+    const adopted=adopt(remote);
+    lastConflict=null;
+    return adopted;
+  }
+  async function save(value) {
+    const body={base_revision:plan.revision,ids:[...(value.ids||[])],
+      capacity_minutes:value.capacity_minutes??null,estimates:{...(value.estimates||{})},
+      plan_date:nextLocalDate(),timezone:timeZone()};
+    return adopt(await fetchJson('api/v1/tomorrow',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)}));
+  }
+  async function promote(today_revision) {
+    if (pending()||!plan.plan_date||plan.plan_date>localDate()||!plan.ids.length) return false;
+    const promotion_id=`tomorrow-${plan.plan_date}-r${plan.revision}`;
+    return fetchJson('api/v1/tomorrow/promote',{method:'POST',headers:{'Content-Type':'application/json'},
+      body:JSON.stringify({promotion_id,tomorrow_revision:plan.revision,today_revision})});
+  }
+  function millisecondsUntilNextDay() {
+    const now=Date.now();
+    const zone=timeZone();
+    let formatter;
+    try {
+      formatter=new Intl.DateTimeFormat('en-CA',{timeZone:zone,year:'numeric',month:'2-digit',day:'2-digit',
+        hour:'2-digit',minute:'2-digit',second:'2-digit',hourCycle:'h23'});
+    } catch (_error) {
+      const next=new Date(now);
+      next.setHours(24,0,0,250);
+      return Math.max(1,next.getTime()-now);
+    }
+    const zoned=value=>Object.fromEntries(formatter.formatToParts(new Date(value))
+      .filter(part=>part.type!=='literal').map(part=>[part.type,Number(part.value)]));
+    const current=zoned(now);
+    const targetWall=Date.UTC(current.year,current.month-1,current.day+1);
+    let candidate=targetWall;
+    for(let attempt=0;attempt<2;attempt+=1){
+      const parts=zoned(candidate);
+      const offset=Date.UTC(parts.year,parts.month-1,parts.day,parts.hour,parts.minute,parts.second)-candidate;
+      candidate=targetWall-offset;
+    }
+    return Math.max(1,candidate-now+250);
+  }
+  function summary(value=plan) {
+    const ids=Array.isArray(value?.ids)?value.ids:[];
+    const suffix=value?.sync_pending?' · sync pending':'';
+    if(!ids.length) return 'Nothing planned'+suffix;
+    const label=`${ids.length} planned`;
+    const estimates=value.estimates||{};
+    const estimated=ids.reduce((total,id)=>total+(Number(estimates[id])||0),0);
+    const capacity=Number(value.capacity_minutes)||0;
+    return (estimated&&capacity?`${label} · ${estimated} of ${capacity} min`:label)+suffix;
+  }
+  function startLifecycle({windowObject,documentObject,check,setTimer=setTimeout,clearTimer=clearTimeout,
+    nextDelay=millisecondsUntilNextDay}={}) {
+    let flight=null;
+    let timer=null;
+    const schedule=()=>{
+      if(timer!==null) clearTimer(timer);
+      timer=setTimer(run,nextDelay());
+    };
+    function run(){
+      if(!flight) flight=Promise.resolve().then(check).finally(()=>{flight=null;schedule();});
+      return flight;
+    }
+    windowObject?.addEventListener?.('online',run);
+    documentObject?.addEventListener?.('visibilitychange',()=>documentObject.hidden?false:run());
+    run();
+    return {run,stop(){if(timer!==null)clearTimer(timer);timer=null;}};
+  }
+  function conflict() {
+    return lastConflict?.key===storageKey()?{local:{...lastConflict.local,ids:[...lastConflict.local.ids],estimates:{...lastConflict.local.estimates}},
+      remote:{...lastConflict.remote,ids:[...lastConflict.remote.ids],estimates:{...lastConflict.remote.estimates}}}:null;
+  }
+  return {adopt,load,save,stage,pending,flush,conflict,keepLocal,useRemote,promote,state,summary,nextLocalDate,startLifecycle};
+}
+if(typeof module!=='undefined'&&module.exports)module.exports=createTomorrowPlan;

frontend/week-calendar-import.js

@@ -0,0 +1,298 @@
+function createWeekCalendarImport() {
+  const maxBytes=1024*1024;
+  const zonedInstantFormatters=new Map(),zonePartFormatters=new Map(),supportedTimeZones=new Map();
+  function clock(value) {
+    const match=/^(\d{2}):(\d{2})$/.exec(String(value||''));
+    if(!match)return null;
+    const minutes=Number(match[1])*60+Number(match[2]);
+    return Number(match[1])<24&&Number(match[2])<60?minutes:null;
+  }
+  function instant(value) {
+    const match=/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})(Z?)$/.exec(value||'');
+    if(!match)return null;
+    const parts=match.slice(1,7).map(Number);
+    const milliseconds=match[7]?Date.UTC(parts[0],parts[1]-1,parts[2],parts[3],parts[4],parts[5]):
+      new Date(parts[0],parts[1]-1,parts[2],parts[3],parts[4],parts[5]).getTime();
+    return Number.isFinite(milliseconds)?milliseconds:null;
+  }
+  function zonedInstant(value,timeZone) {
+    if(!timeZone)return instant(value);
+    const match=/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})$/.exec(value||'');
+    if(!match)return null;
+    try {
+      const wanted=match.slice(1).map(Number);
+      if(!zonedInstantFormatters.has(timeZone))zonedInstantFormatters.set(timeZone,new Intl.DateTimeFormat('en-CA',{
+        timeZone,year:'numeric',month:'2-digit',day:'2-digit',hour:'2-digit',minute:'2-digit',second:'2-digit',hourCycle:'h23',
+      }));
+      const formatter=zonedInstantFormatters.get(timeZone);
+      let result=Date.UTC(wanted[0],wanted[1]-1,wanted[2],wanted[3],wanted[4],wanted[5]);
+      for(let attempt=0;attempt<2;attempt+=1) {
+        const shown=Object.fromEntries(formatter.formatToParts(new Date(result)).map(part=>[part.type,part.value]));
+        const represented=Date.UTC(Number(shown.year),Number(shown.month)-1,Number(shown.day),Number(shown.hour),Number(shown.minute),Number(shown.second));
+        result+=Date.UTC(wanted[0],wanted[1]-1,wanted[2],wanted[3],wanted[4],wanted[5])-represented;
+      }
+      return result;
+    } catch(error) { return null; }
+  }
+  function supportedTimeZone(timeZone) {
+    if(!timeZone)return true;
+    if(supportedTimeZones.has(timeZone))return supportedTimeZones.get(timeZone);
+    try {new Intl.DateTimeFormat('en-US',{timeZone}).format(0);supportedTimeZones.set(timeZone,true);return true;}
+    catch(error) {supportedTimeZones.set(timeZone,false);return false;}
+  }
+  function zoneParts(value,timeZone) {
+    const date=new Date(value);
+    if(!timeZone)return {year:date.getFullYear(),month:date.getMonth()+1,day:date.getDate(),weekday:date.getDay(),
+      hour:date.getHours(),minute:date.getMinutes(),second:date.getSeconds()};
+    if(!zonePartFormatters.has(timeZone))zonePartFormatters.set(timeZone,new Intl.DateTimeFormat('en-US',{
+      timeZone,year:'numeric',month:'2-digit',day:'2-digit',hour:'2-digit',minute:'2-digit',second:'2-digit',weekday:'short',hourCycle:'h23',
+    }));
+    const formatter=zonePartFormatters.get(timeZone);
+    const parts=Object.fromEntries(formatter.formatToParts(date).map(part=>[part.type,part.value]));
+    return {year:Number(parts.year),month:Number(parts.month),day:Number(parts.day),
+      weekday:['Sun','Mon','Tue','Wed','Thu','Fri','Sat'].indexOf(parts.weekday),hour:Number(parts.hour),
+      minute:Number(parts.minute),second:Number(parts.second)};
+  }
+  function addCalendarDays(value,days,timeZone) {
+    if(!timeZone) {const date=new Date(value);date.setDate(date.getDate()+days);return date.getTime();}
+    const parts=zoneParts(value,timeZone),day=new Date(Date.UTC(parts.year,parts.month-1,parts.day+days));
+    const wall=[day.getUTCFullYear(),String(day.getUTCMonth()+1).padStart(2,'0'),String(day.getUTCDate()).padStart(2,'0')].join('')+
+      'T'+[parts.hour,parts.minute,parts.second].map(part=>String(part).padStart(2,'0')).join('');
+    return zonedInstant(wall,timeZone);
+  }
+  function dateInstant(value) {
+    const match=/^(\d{4})(\d{2})(\d{2})$/.exec(value||'');
+    return match?new Date(Number(match[1]),Number(match[2])-1,Number(match[3])).getTime():null;
+  }
+  function events(source) {
+    if(typeof source!=='string'||!source.includes('BEGIN:VCALENDAR'))throw new Error('Choose a valid .ics calendar file.');
+    if(new TextEncoder().encode(source).length>maxBytes)throw new Error('Calendar files must be 1 MB or smaller.');
+    const lines=source.replace(/\r\n[ \t]/g,'').split(/\r?\n/);
+    const result=[];let current=null;
+    lines.forEach(line=>{
+      if(line==='BEGIN:VEVENT'){current={};return;}
+      if(line==='END:VEVENT'){
+        if((current?.unsupportedTimezone||(current?.start!=null&&current?.end>current.start))&&
+          current.status!=='CANCELLED'&&current.transparency!=='TRANSPARENT')result.push(current);
+        current=null;return;
+      }
+      if(!current)return;
+      const separator=line.indexOf(':');if(separator<0)return;
+      const property=line.slice(0,separator),parts=property.split(';'),name=parts[0],value=line.slice(separator+1);
+      const parameters=Object.fromEntries(parts.slice(1).map(part=>part.split('=')));
+      if(parameters.TZID&&!supportedTimeZone(parameters.TZID))current.unsupportedTimezone=true;
+      const allDay=parameters.VALUE==='DATE',parsed=allDay?dateInstant(value):zonedInstant(value,parameters.TZID);
+      if(name==='DTSTART'){current.start=parsed;current.timeZone=parameters.TZID||null;}
+      if(name==='DTEND')current.end=parsed;
+      if(name==='RRULE')current.rule=value;
+      if(name==='RDATE')current.rdates=(current.rdates||[]).concat(value.split(',').map(item=>allDay?dateInstant(item):zonedInstant(item,parameters.TZID)).filter(value=>value!=null));
+      if(name==='EXDATE')current.exdates=(current.exdates||[]).concat(value.split(',').map(item=>allDay?dateInstant(item):zonedInstant(item,parameters.TZID)).filter(value=>value!=null));
+      if(name==='STATUS')current.status=value.toUpperCase();
+      if(name==='TRANSP')current.transparency=value.toUpperCase();
+    });
+    return result;
+  }
+  function recurrenceRule(value) {
+    return Object.fromEntries(String(value||'').split(';').filter(Boolean).map(part=>part.split('=')));
+  }
+  function supportedRecurrence(value) {
+    const rule=recurrenceRule(value),keys=Object.keys(rule);
+    if(!['DAILY','WEEKLY'].includes(rule.FREQ))return false;
+    const allowed=new Set(['FREQ','COUNT','INTERVAL','UNTIL',...(rule.FREQ==='WEEKLY'?['BYDAY']:[])]);
+    if(keys.some(key=>!allowed.has(key)))return false;
+    if(rule.COUNT&&(!/^\d+$/.test(rule.COUNT)||Number(rule.COUNT)<1))return false;
+    if(rule.INTERVAL&&(!/^\d+$/.test(rule.INTERVAL)||Number(rule.INTERVAL)<1))return false;
+    if(rule.COUNT&&rule.UNTIL)return false;
+    if(rule.UNTIL&&instant(rule.UNTIL)==null&&dateInstant(rule.UNTIL)==null)return false;
+    return !rule.BYDAY||rule.BYDAY.split(',').every(day=>/^(MO|TU|WE|TH|FR|SA|SU)$/.test(day));
+  }
+  function occurrences(event,rangeStart,rangeEnd) {
+    const duration=event.end-event.start,excluded=new Set(event.exdates||[]);
+    if(!event.rule) {
+      return [event.start,...(event.rdates||[])].filter((start,index,all)=>start<rangeEnd&&!excluded.has(start)&&all.indexOf(start)===index)
+        .map(start=>({start,end:start+duration}));
+    }
+    const rule=recurrenceRule(event.rule);
+    if(!['DAILY','WEEKLY'].includes(rule.FREQ))return [event];
+    const count=Math.max(1,Math.min(Number(rule.COUNT)||10000,10000));
+    const result=[];
+    const weekdays={SU:0,MO:1,TU:2,WE:3,TH:4,FR:5,SA:6};
+    const selected=new Set((rule.BYDAY||'').split(',').map(day=>weekdays[day]).filter(day=>day!=null));
+    if(rule.FREQ==='WEEKLY'&&!selected.size)selected.add(zoneParts(event.start,event.timeZone).weekday);
+    const interval=Math.max(1,Number(rule.INTERVAL)||1),origin=zoneParts(event.start,event.timeZone);
+    const until=rule.UNTIL?(rule.UNTIL.endsWith('Z')?instant(rule.UNTIL):
+      (zonedInstant(rule.UNTIL,event.timeZone)??dateInstant(rule.UNTIL))):null;
+    const originDay=Date.UTC(origin.year,origin.month-1,origin.day);
+    let start=event.start,matched=0;
+    if(rule.FREQ==='DAILY'&&start+duration<=rangeStart) {
+      const target=zoneParts(rangeStart-duration,event.timeZone);
+      const targetDay=Date.UTC(target.year,target.month-1,target.day);
+      const elapsed=Math.max(0,Math.floor((targetDay-originDay)/(24*60*60*1000)));
+      const jumps=Math.floor(elapsed/interval);
+      if(jumps) {start=addCalendarDays(start,jumps*interval,event.timeZone);matched=jumps;}
+      while(start+duration<=rangeStart&&matched<count) {start=addCalendarDays(start,interval,event.timeZone);matched+=1;}
+    }
+    if(rule.FREQ==='WEEKLY'&&start+duration<=rangeStart) {
+      const target=zoneParts(rangeStart-duration,event.timeZone);
+      const targetDay=Date.UTC(target.year,target.month-1,target.day);
+      const elapsed=Math.max(0,Math.floor((targetDay-originDay)/(24*60*60*1000)));
+      const cycleDays=7*interval,cycles=Math.floor(elapsed/cycleDays),offset=elapsed-cycles*cycleDays;
+      matched=cycles*selected.size;
+      start=addCalendarDays(event.start,cycles*cycleDays+(offset>=7?offset:0),event.timeZone);
+      while(start+duration<=rangeStart&&matched<count) {
+        const cursor=zoneParts(start,event.timeZone),cursorDay=Date.UTC(cursor.year,cursor.month-1,cursor.day);
+        const weeks=Math.floor((cursorDay-originDay)/(7*24*60*60*1000));
+        if(weeks%interval===0&&selected.has(cursor.weekday))matched+=1;
+        start=addCalendarDays(start,1,event.timeZone);
+      }
+    }
+    while(start<rangeEnd&&matched<count&&(until==null||start<=until)) {
+      const cursor=zoneParts(start,event.timeZone),cursorDay=Date.UTC(cursor.year,cursor.month-1,cursor.day);
+      const weeks=Math.floor((cursorDay-originDay)/(7*24*60*60*1000));
+      const matches=rule.FREQ==='DAILY'||(weeks%interval===0&&selected.has(cursor.weekday));
+      if(matches) {
+        matched+=1;
+        if(!excluded.has(start))result.push({start,end:start+duration});
+      }
+      start=addCalendarDays(start,rule.FREQ==='DAILY'?interval:1,event.timeZone);
+    }
+    (event.rdates||[]).forEach(extra=>{
+      if(extra<rangeEnd&&!excluded.has(extra)&&!result.some(item=>item.start===extra))result.push({start:extra,end:extra+duration});
+    });
+    return result;
+  }
+  function dayBoundary(date,minutes) {
+    const [year,month,day]=date.split('-').map(Number);
+    return new Date(year,month-1,day,Math.floor(minutes/60),minutes%60).getTime();
+  }
+  function localClock(value) {
+    const date=new Date(value);
+    return String(date.getHours()).padStart(2,'0')+':'+String(date.getMinutes()).padStart(2,'0');
+  }
+  function review(source,{dates,workdayStart='09:00',workdayEnd='17:00'}={}) {
+    if(!Array.isArray(dates)||dates.length!==7)throw new Error('Week Ahead must contain seven dates.');
+    const startMinute=clock(workdayStart),endMinute=clock(workdayEnd);
+    if(startMinute==null||endMinute==null||endMinute<=startMinute)throw new Error('Working hours must end after they start.');
+    const parsedEvents=events(source),rangeStart=dayBoundary(dates[0],0),rangeEnd=dayBoundary(dates[6],24*60);
+    const unsupportedRecurrence=parsedEvents.filter(event=>event.rule&&!supportedRecurrence(event.rule)&&
+      event.start<rangeEnd&&(event.end>rangeStart||event.rule)).length;
+    const unsupportedTimezone=parsedEvents.filter(event=>event.unsupportedTimezone).length;
+    const unsupported_count=unsupportedRecurrence+unsupportedTimezone;
+    const calendarEvents=parsedEvents.filter(event=>!event.unsupportedTimezone).flatMap(event=>occurrences(event,rangeStart,rangeEnd));
+    const days=dates.map(plan_date=>{
+      const start=dayBoundary(plan_date,startMinute),end=dayBoundary(plan_date,endMinute);
+      const ranges=calendarEvents.map(event=>[Math.max(start,event.start),Math.min(end,event.end)])
+        .filter(range=>range[1]>range[0]).sort((left,right)=>left[0]-right[0]);
+      const merged=[];
+      ranges.forEach(range=>{
+        const previous=merged[merged.length-1];
+        if(previous&&range[0]<=previous[1])previous[1]=Math.max(previous[1],range[1]);
+        else merged.push([...range]);
+      });
+      const busy_minutes=Math.round(merged.reduce((total,range)=>total+range[1]-range[0],0)/60000);
+      const free_windows=[];let cursor=start;
+      merged.forEach(range=>{
+        if(range[0]>cursor)free_windows.push({start_time:localClock(cursor),end_time:localClock(range[0])});
+        cursor=Math.max(cursor,range[1]);
+      });
+      if(cursor<end)free_windows.push({start_time:localClock(cursor),end_time:localClock(end)});
+      return {plan_date,busy_minutes,capacity_minutes:endMinute-startMinute-busy_minutes,free_windows};
+    });
+    days.unsupported_count=unsupported_count;
+    days.unsupported_timezone_count=unsupportedTimezone;
+    return days;
+  }
+  function createWorkflow({controller,qs,onApplied=()=>{}}={}) {
+    let reviewed=null,activeAvailability=null,needsReflow=false,reflowPreview=null;
+    const root=()=>qs('#week-capacity-import');
+    function clear() {
+      reviewed=null;needsReflow=false;reflowPreview=null;
+      qs('#week-capacity-file').value='';
+      qs('#week-capacity-review').hidden=true;
+      qs('#week-capacity-days').innerHTML='';
+      qs('#apply-week-capacities').disabled=false;
+      qs('#apply-week-capacities').textContent='Apply seven capacities';
+    }
+    function open() {
+      clear();root().hidden=false;qs('#week-capacity-status').textContent='';
+      qs('#week-capacity-file').focus?.();return true;
+    }
+    function cancel() {clear();root().hidden=true;return true;}
+    function reviewSource(source) {
+      const display=controller.dates();
+      reviewed=review(source,{dates:display.map(item=>item.date),workdayStart:qs('#week-capacity-start').value,
+        workdayEnd:qs('#week-capacity-end').value});
+      const current=controller.review?.().days||[];
+      needsReflow=reviewed.some((day,index)=>Number(current[index]?.planned_minutes)>day.capacity_minutes);
+      const previewValues=reviewed.map(day=>({plan_date:day.plan_date,capacity_minutes:day.capacity_minutes,
+        free_windows:day.free_windows.map(window=>({...window}))}));
+      reflowPreview=needsReflow?controller.previewCapacityReflow?.(previewValues):null;
+      const destinations=new Map();
+      (reflowPreview?.days||[]).forEach(day=>(day.ids||[]).forEach(id=>destinations.set(id,day.plan_date)));
+      qs('#week-capacity-days').innerHTML=reviewed.map((day,index)=>{
+        const previous=current[index]||{},planned=Number(previous.planned_minutes)||0,over=Math.max(0,planned-day.capacity_minutes);
+        const moved=[...new Set((previous.ids||[]).map(id=>destinations.get(id)).filter(date=>date&&date!==day.plan_date))]
+          .map(date=>display.find(item=>item.date===date)?.label||date);
+        return '<article class="week-capacity-day'+(over?' is-overloaded':'')+'"><strong>'+display[index].label+'</strong><span>'+
+          (Number.isInteger(previous.capacity_minutes)?previous.capacity_minutes+' → ':'')+day.capacity_minutes+' min available</span><small>'+
+          planned+' min planned · '+day.busy_minutes+' min busy</small>'+(over?'<small class="week-capacity-over">'+over+
+          ' min over refreshed capacity</small>':'')+(moved.length?'<small>Moves to '+moved.join(', ')+'</small>':'')+'</article>';
+      }).join('');
+      qs('#week-capacity-review').hidden=false;
+      const unsupported=reviewed.unsupported_count||0;
+      const reflowBlocked=Boolean(reflowPreview?.blockers?.length);
+      qs('#apply-week-capacities').disabled=unsupported>0||reflowBlocked;
+      qs('#apply-week-capacities').textContent=needsReflow?'Apply capacities & reflow':'Apply seven capacities';
+      const kind=reviewed.unsupported_timezone_count?'calendar event':'recurring event';
+      qs('#week-capacity-status').textContent=unsupported?
+        unsupported+' '+kind+(unsupported===1?'':'s')+' could not be counted. Apply is unavailable; export a simpler seven-day calendar and try again.':
+        (reflowBlocked?'Reflow needs an estimate for every planned item before refreshed capacity can be applied.':
+          (reflowPreview?.unscheduled?.length?reflowPreview.unscheduled.length+' planned item'+
+            (reflowPreview.unscheduled.length===1?'':'s')+' will return to My Work. Review before applying.':
+            'Review seven capacity totals. Calendar details stay on this device.'));
+      return reviewed.map(day=>({...day}));
+    }
+    async function apply() {
+      if(!reviewed||reviewed.unsupported_count)return false;
+      const keep=Boolean(qs('#keep-week-free-times')?.checked);
+      const values=reviewed.map(day=>({
+        plan_date:day.plan_date,capacity_minutes:day.capacity_minutes,
+        ...(keep?{free_windows:day.free_windows.map(window=>({...window}))}:{}),
+      }));
+      const staged=needsReflow?controller.applyCapacityReflow?.(values):controller.stageCapacities(values);
+      if(!staged)return false;
+      qs('#apply-week-capacities').disabled=true;
+      try {await controller.flush();activeAvailability=reviewed.map(day=>({plan_date:day.plan_date,
+        free_windows:day.free_windows.map(window=>({...window}))}));cancel();onApplied();return true;}
+      finally {qs('#apply-week-capacities').disabled=false;}
+    }
+    qs('#week-capacity-file')?.addEventListener('change',async event=>{
+      const file=event.currentTarget.files?.[0];if(!file)return;
+      try {
+        if(file.size>maxBytes)throw new Error('Calendar files must be 1 MB or smaller.');
+        reviewSource(await file.text());
+      } catch(error) {clear();qs('#week-capacity-status').textContent=error.message||'Calendar could not be read.';}
+    });
+    qs('#cancel-week-capacity-import')?.addEventListener('click',cancel);
+    qs('#apply-week-capacities')?.addEventListener('click',()=>apply().catch(error=>{
+      qs('#week-capacity-status').textContent=(error.message||'Week Ahead sync is unavailable.')+' Capacities remain saved on this phone.';
+    }));
+    function availability() {
+      const saved=(controller.state?.().days||[]).filter(day=>Array.isArray(day.free_windows));
+      const source=activeAvailability||saved;
+      return source.length?source.map(day=>({plan_date:day.plan_date,
+        free_windows:day.free_windows.map(window=>({...window}))})):null;
+    }
+    return {open,cancel,review:reviewSource,apply,state:()=>reviewed?reviewed.map(day=>({...day})):null,
+      availability};
+  }
+  function mount(controller,weekWorkflow,qs) {
+    const workflow=createWorkflow({controller,qs,onApplied:weekWorkflow.renderReview});
+    StackchainWeekCalendar.setAvailabilityProvider(workflow.availability);
+    qs('#open-week-capacity-import').addEventListener('click',workflow.open);
+    return workflow;
+  }
+  return {review,createWorkflow,mount};
+}
+const weekCalendarImport=createWeekCalendarImport();
+if(typeof module!=='undefined'&&module.exports)module.exports=weekCalendarImport;

frontend/week-calendar.js

@@ -0,0 +1,161 @@
+(function(root){
+  'use strict';
+  let availabilityProvider=()=>null;
+  function escapeText(value){
+    return String(value||'').replace(/\\/g,'\\\\').replace(/\r?\n/g,'\\n').replace(/,/g,'\\,').replace(/;/g,'\\;');
+  }
+  function compact(value){return String(value||'').replace(/[-:]/g,'');}
+  function addMinutes(value,minutes){
+    const [hours,mins]=String(value).split(':').map(Number),total=hours*60+mins+Number(minutes);
+    return String(Math.floor(total/60)%24).padStart(2,'0')+':'+String(total%60).padStart(2,'0');
+  }
+  function clockMinutes(value){const [hours,minutes]=String(value).split(':').map(Number);return hours*60+minutes;}
+  function stableId(value){return String(value||'work').replace(/[^a-z0-9]+/gi,'-').replace(/^-|-$/g,'').toLowerCase();}
+  function foldLine(line){
+    const encoder=new TextEncoder(),chunks=[];let chunk='',bytes=0,limit=75;
+    for(const character of String(line)){
+      const width=encoder.encode(character).length;
+      if(chunk&&bytes+width>limit){chunks.push(chunk);chunk=character;bytes=width;limit=74;}
+      else {chunk+=character;bytes+=width;}
+    }
+    chunks.push(chunk);return chunks.join('\r\n ');
+  }
+  function buildWeekSchedule(plan,startTimes,getItem,selected,availability){
+    const blocks=[],blockers=[],availableByDate=new Map((availability||[]).map(day=>[day.plan_date,day.free_windows||[]]));
+    (plan?.days||[]).slice().sort((a,b)=>a.plan_date.localeCompare(b.plan_date)).forEach(day=>{
+      let cursor=startTimes?.[day.plan_date]||'09:00';
+      const windows=availableByDate.has(day.plan_date)?availableByDate.get(day.plan_date):(day.free_windows||null);
+      const candidates=[];
+      (day.ids||[]).forEach(id=>{
+        if(selected&&!selected.has(id))return;
+        const minutes=Number(day.estimates?.[id]),item=getItem?.(id);
+        if(!item||!Number.isFinite(minutes)||minutes<=0)return;
+        const exact=startTimes?.[id]||day.start_times?.[id];
+        let start=exact||cursor;
+        if(!exact&&windows){
+          const fit=windows.find(window=>{
+            const candidate=Math.max(clockMinutes(cursor),clockMinutes(window.start_time));
+            if(candidate+minutes>clockMinutes(window.end_time))return false;
+            start=addMinutes('00:00',candidate);return true;
+          });
+          if(!fit){blockers.push({id,title:item.title||'Untitled work',plan_date:day.plan_date,minutes});return;}
+        }
+        const startMinute=clockMinutes(start),endMinute=startMinute+minutes;
+        candidates.push({item,id,minutes,start,startMinute,endMinute,exact:Boolean(exact)});
+        if(!exact)cursor=addMinutes('00:00',endMinute);
+      });
+      const invalid=new Set();
+      candidates.forEach(candidate=>{
+        if(candidate.endMinute>1440||windows&&!windows.some(window=>clockMinutes(window.start_time)<=candidate.startMinute&&candidate.endMinute<=clockMinutes(window.end_time)))invalid.add(candidate.id);
+      });
+      candidates.forEach((left,index)=>candidates.slice(index+1).forEach(right=>{
+        if(left.startMinute<right.endMinute&&left.endMinute>right.startMinute){invalid.add(left.id);invalid.add(right.id);}
+      }));
+      candidates.forEach(candidate=>{
+        if(invalid.has(candidate.id)){
+          blockers.push({id:candidate.id,title:candidate.item.title||'Untitled work',plan_date:day.plan_date,minutes:candidate.minutes,reason:'invalid-exact-time'});return;
+        }
+        blocks.push({...candidate.item,id:candidate.id,plan_date:day.plan_date,start_time:candidate.start,
+          end_time:addMinutes('00:00',candidate.endMinute),minutes:candidate.minutes});
+      });
+    });
+    return {blocks,blockers};
+  }
+  function buildWeekBlocks(plan,startTimes,getItem,selected,availability){
+    return buildWeekSchedule(plan,startTimes,getItem,selected,availability).blocks;
+  }
+  function serializeWeekCalendar(blocks,{timezone='UTC',revision=0,generatedAt}={}){
+    const stamp=generatedAt||new Date().toISOString().replace(/[-:]/g,'').replace(/\.\d{3}/,'');
+    const lines=['BEGIN:VCALENDAR','VERSION:2.0','PRODID:-//Stackchain//Week Ahead//EN','CALSCALE:GREGORIAN','METHOD:PUBLISH','X-WR-CALNAME:Stackchain Week Ahead',`X-WR-TIMEZONE:${timezone}`,'BEGIN:VTIMEZONE',`TZID:${timezone}`,'END:VTIMEZONE'];
+    (blocks||[]).forEach(block=>{
+      const day=compact(block.plan_date),reference=block.repository+(block.number!=null?' #'+block.number:'');
+      lines.push('BEGIN:VEVENT',`UID:week-${stableId(block.id)}@stackchain`,`SEQUENCE:${Math.max(0,Math.floor(Number(revision)||0))}`,`DTSTAMP:${stamp}`,
+        `DTSTART;TZID=${timezone}:${day}T${compact(block.start_time)}00`,`DTEND;TZID=${timezone}:${day}T${compact(block.end_time)}00`,
+        `SUMMARY:${escapeText(block.title||'Untitled work')}`,`DESCRIPTION:${escapeText(reference+' · Stackchain Week Ahead')}`,
+        `URL:${String(block.url||'')}`,'TRANSP:OPAQUE','END:VEVENT');
+    });
+    lines.push('END:VCALENDAR');return lines.map(foldLine).join('\r\n')+'\r\n';
+  }
+  async function deliverWeekCalendar({text,filename,navigator,document,urlApi,FileCtor}){
+    const file=new FileCtor([text],filename,{type:'text/calendar;charset=utf-8'});
+    const payload={files:[file],title:'Stackchain Week Ahead',text:'Timed Week Ahead calendar blocks'};
+    if(typeof navigator?.share==='function'&&typeof navigator?.canShare==='function'&&navigator.canShare(payload)){
+      await navigator.share(payload);return 'shared';
+    }
+    const href=urlApi.createObjectURL(file);
+    try{const anchor=document.createElement('a');anchor.href=href;anchor.download=filename;anchor.click();}
+    finally{urlApi.revokeObjectURL(href);}
+    return 'downloaded';
+  }
+  function mountWeekCalendarHandoff({qs,getItem,getAvailability=availabilityProvider,escapeHtml,escapeAttribute,onSave,onDone,windowObject=root,navigatorObject=root.navigator,
+    documentObject=root.document,urlApi=root.URL,FileCtor=root.File}={}){
+    const handoff=qs('#week-calendar-handoff'),review=qs('#week-review'),daysRoot=qs('#week-calendar-days');
+    let plan=null,focusReturn=null;
+    const selected=()=>new Set(Array.from(daysRoot.querySelectorAll('[data-week-calendar-item]')).filter(input=>input.checked).map(input=>input.value));
+    const starts=()=>Object.fromEntries([
+      ...Array.from(daysRoot.querySelectorAll('[data-week-calendar-start]')).map(input=>[input.dataset.weekCalendarStart,input.value]),
+      ...Array.from(daysRoot.querySelectorAll('[data-week-calendar-exact]')).filter(input=>input.value).map(input=>[input.dataset.weekCalendarExact,input.value]),
+    ]);
+    const schedule=()=>buildWeekSchedule(plan,starts(),getItem,selected(),getAvailability?.());
+    const blocks=()=>schedule().blocks;
+    function update(){
+      const current=schedule(),byId=new Map(current.blocks.map(block=>[block.id,block])),blockedById=new Map(current.blockers.map(blocker=>[blocker.id,blocker]));
+      daysRoot.querySelectorAll('[data-week-calendar-preview]').forEach(node=>{
+        const id=node.dataset.weekCalendarPreview,block=byId.get(id),blocker=blockedById.get(id);
+        node.textContent=block?block.start_time+'–'+block.end_time+' · '+block.minutes+' min':
+          (blocker?'Does not fit imported free time':'Excluded from calendar');
+      });
+      qs('#share-week-calendar').disabled=!current.blocks.length||current.blockers.length>0;
+      qs('#save-week-calendar-times').disabled=!current.blocks.length||current.blockers.length>0;
+      if(current.blockers.length){
+        const blocker=current.blockers[0];
+        qs('#week-calendar-status').textContent=blocker.title+' does not fit free time on '+blocker.plan_date+'. Adjust the start, estimate, or calendar import.';
+      }else qs('#week-calendar-status').textContent=(getAvailability?.()?'Planning around imported busy time · ':'Manual timing · ')+
+        current.blocks.length+' calendar block'+(current.blocks.length===1?'':'s')+' selected.';
+    }
+    function close({back=false}={}){
+      handoff.hidden=true;
+      if(back){review.hidden=false;const target=focusReturn||qs('#confirm-week-plan');focusReturn=null;target.focus?.();}
+    }
+    function open(value,{returnFocus=null}={}){
+      plan=value;if(returnFocus)focusReturn=returnFocus;review.hidden=true;handoff.hidden=false;
+      const labels=new Map((value.days||[]).map(day=>[day.plan_date,new Intl.DateTimeFormat('en',{weekday:'short',month:'short',day:'numeric',timeZone:'UTC'}).format(new Date(day.plan_date+'T12:00:00Z'))]));
+      daysRoot.innerHTML=(value.days||[]).filter(day=>day.ids?.length).map(day=>'<article class="week-calendar-day"><header><h3>'+escapeHtml(labels.get(day.plan_date)||day.plan_date)+
+        '</h3><label>Start <input type="time" value="09:00" data-week-calendar-start="'+escapeAttribute(day.plan_date)+'"></label></header>'+
+        day.ids.map(id=>{const item=getItem(id),reference=item?(item.repository+' #'+item.number):String(id).slice(0,96),saved=day.start_times?.[id]||'';
+          return '<div class="week-calendar-item"><label class="week-calendar-choice"><input type="checkbox" data-week-calendar-item value="'+escapeAttribute(id)+'" checked><span><strong>'+escapeHtml(item?.title||'Work details unavailable')+
+            '</strong><small>'+escapeHtml(reference)+'</small><small data-week-calendar-preview="'+escapeAttribute(id)+'"></small></span></label><label class="week-calendar-time">Start<input type="time" value="'+escapeAttribute(saved)+'" data-week-calendar-exact="'+escapeAttribute(id)+'" aria-label="Exact start for '+escapeAttribute(item?.title||'work')+'"></label></div>';}).join('')+'</article>').join('');
+      daysRoot.querySelectorAll('input').forEach(input=>input.addEventListener('change',update));
+      update();qs('#back-to-week-review-from-calendar').focus?.();return true;
+    }
+    qs('#back-to-week-review-from-calendar').addEventListener('click',()=>close({back:true}));
+    qs('#save-week-calendar-times').addEventListener('click',async()=>{
+      const button=qs('#save-week-calendar-times'),current=schedule();if(!current.blocks.length||current.blockers.length)return;
+      button.disabled=true;qs('#week-calendar-status').textContent='Saving exact task times…';
+      const byDate={};current.blocks.forEach(block=>(byDate[block.plan_date]||(byDate[block.plan_date]={}))[block.id]=block.start_time);
+      try{await onSave?.(byDate);plan={...plan,days:(plan.days||[]).map(day=>({...day,start_times:{...(byDate[day.plan_date]||{})}}))};
+        qs('#week-calendar-status').textContent='Exact task times saved to Week Ahead.';}
+      catch(error){qs('#week-calendar-status').textContent=(error?.message||'Exact times could not be saved.')+' Retry when connected.';}
+      finally{button.disabled=false;}
+    });
+    qs('#export-saved-week-calendar')?.addEventListener('click',event=>{focusReturn=event.currentTarget;qs('#confirm-week-plan').click();});
+    qs('#share-week-calendar').addEventListener('click',async()=>{
+      const button=qs('#share-week-calendar'),current=blocks();if(!current.length)return;
+      button.disabled=true;qs('#week-calendar-status').textContent='Preparing calendar blocks…';
+      const day=new Date().toISOString().slice(0,10);
+      try{
+        const text=serializeWeekCalendar(current,{timezone:plan.timezone||Intl.DateTimeFormat().resolvedOptions().timeZone,revision:plan.revision});
+        const result=await deliverWeekCalendar({text,filename:'stackchain-week-ahead-'+day+'.ics',navigator:navigatorObject,
+          document:documentObject,urlApi,FileCtor});
+        close();onDone?.(result);
+      }catch(error){
+        qs('#week-calendar-status').textContent=error?.name==='AbortError'?'Share cancelled. Your Week Ahead is still ready.':'Calendar export failed. Retry without leaving Week Ahead.';
+        button.disabled=false;
+      }
+    });
+    return {open,close,blocks};
+  }
+  function setAvailabilityProvider(value){availabilityProvider=typeof value==='function'?value:()=>null;}
+  const api={buildWeekBlocks,buildWeekSchedule,deliverWeekCalendar,escapeText,foldLine,mountWeekCalendarHandoff,serializeWeekCalendar,setAvailabilityProvider};
+  if(typeof module!=='undefined'&&module.exports)module.exports=api;else root.StackchainWeekCalendar=api;
+})(typeof window!=='undefined'?window:globalThis);

frontend/work-route.js

@@ -6,7 +6,7 @@
   'use strict';
 
   const repositoryPart = /^[A-Za-z0-9_.-]+$/;
-  const queueFilters = ['today', 'agenda', 'attention', 'filed', 'update', 'later', 'draft'];
+  const queueFilters = ['today', 'agenda', 'attention', 'filed', 'authored', 'update', 'later', 'draft', 'following'];
   const sections = {
     issue: ['overview', 'conversation', 'reply', 'actions'],
     filed: ['overview', 'conversation', 'reply', 'actions'],

frontend/workspace-bootstrap.js

@@ -1,41 +1,77 @@
-async function loadWorkspace({ document, window = null, createLoader = createFeatureLoader }) {
+async function loadWorkspace({
+  document,
+  window = null,
+  createLoader = createFeatureLoader,
+  schedule = callback => setTimeout(callback,750),
+}) {
   let cameOnline = false;
   let replayed = false;
+  let retryInFlight = null;
   const captureOnline = () => { cameOnline = true; };
   window?.addEventListener('online', captureOnline);
   const status = document.querySelector('#my-work-action-status');
-  const url = document.querySelector(
-    'meta[name="stackchain-feature-today-timer"]'
-  )?.content || '';
-  const loader = createLoader({
-    document,
-    urls: { 'today-timer': url },
-  });
-  if (status) status.textContent = 'Starting workspace…';
-  try {
-    await loader.load('today-timer');
-    if (status) status.textContent = '';
-    return {
-      replayOnline(callback) {
-        if (replayed) return;
-        replayed = true;
-        window?.removeEventListener('online', captureOnline);
-        if (cameOnline) callback();
-      },
+  const retryButton = document.querySelector('#retry-workspace');
+  const urls = Object.fromEntries(['today-timer', 'planning'].map(name => [name,
+    document.querySelector(`meta[name="stackchain-feature-${name}"]`)?.content || ''
+  ]));
+  const originalUrls = {...urls};
+  const loader = createLoader({document, urls});
+
+  let attempts = 0;
+  const load = () => {
+    if (attempts++) Object.keys(urls).forEach(name => {
+      urls[name] = originalUrls[name] + '?retry=' + attempts;
+    });
+    return Promise.all(Object.keys(urls).map(name => loader.load(name)));
+  };
+  const waitForRecovery = () => new Promise(resolve => {
+    if (status) status.textContent = 'Workspace unavailable. Reconnect or retry.';
+    if (retryButton) {
+      retryButton.hidden = retryButton.disabled = false;
+    }
+
+    const recover = () => {
+      if (retryInFlight) return retryInFlight;
+      if (retryButton) retryButton.disabled = true;
+      retryInFlight = load().then(() => {
+        window?.removeEventListener('online', recover);
+        resolve();
+      }).catch(() => {
+        if (status) status.textContent = 'Workspace unavailable. Reconnect or retry.';
+        if (retryButton) retryButton.disabled = false;
+      }).finally(() => {
+        retryInFlight = null;
+      });
+      return retryInFlight;
     };
-  } catch (error) {
+
     window?.removeEventListener('online', captureOnline);
-    if (window?.location?.reload) {
-      if (cameOnline) window.location.reload();
-      else window.addEventListener('online', () => window.location.reload(), { once: true });
+    window?.addEventListener('online', recover);
+    retryButton?.addEventListener('click', recover);
+  });
+
+  try {
+    await load();
+  } catch {
+    await new Promise(resolve => schedule(resolve));
+    try {
+      await load();
+    } catch {
+      await waitForRecovery();
     }
-    if (status) {
-      status.textContent = window
-        ? 'Workspace could not load. Reconnect to retry automatically, or reload now.'
-        : 'Workspace could not load. Check your connection, then reload to retry.';
-    }
-    throw error;
   }
+
+  window?.removeEventListener('online', captureOnline);
+  if (retryButton) retryButton.hidden = true;
+  if (status) status.textContent = '';
+  return {
+    replayOnline(callback) {
+      if (replayed) return;
+      replayed = true;
+      window?.removeEventListener('online', captureOnline);
+      if (cameOnline) callback();
+    },
+  };
 }
 
-if (typeof module !== 'undefined' && module.exports) module.exports = loadWorkspace;
+if (typeof module !== 'undefined' && module.exports) module.exports = loadWorkspace;

scripts/build_release.py

@@ -19,6 +19,7 @@ RUNTIME_DIRECTORIES = ("docs", "frontend", "src")
 RUNTIME_FILES = (
     "README.md",
     "requirements.txt",
+    "scripts/rotate_private_state.py",
     "scripts/rotate_unfiled_drafts.py",
 )
 EXCLUDED_PARTS = {"__pycache__", ".pytest_cache"}

scripts/rotate_private_state.py

@@ -0,0 +1,189 @@
+#!/usr/bin/env python3
+"""Rewrap shared private-state envelopes under the configured active key."""
+
+from __future__ import annotations
+
+import json
+import os
+import sqlite3
+import sys
+from dataclasses import dataclass
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+if str(ROOT) not in sys.path:
+    sys.path.insert(0, str(ROOT))
+
+from src.private_state import connect_private_sqlite  # noqa: E402
+from src.state_encryption import (  # noqa: E402
+    PrivateStateCipher,
+    PrivateStateEncryptionError,
+    private_state_encryption_config,
+)
+
+
+@dataclass(frozen=True)
+class Field:
+    column: str
+    binding: str
+    alias: str | None = None
+    plaintext_string: bool = False
+
+
+@dataclass(frozen=True)
+class Table:
+    name: str
+    context_columns: tuple[str, ...]
+    fields: tuple[Field, ...]
+
+
+@dataclass(frozen=True)
+class Store:
+    name: str
+    identity: str
+    env: str
+    filename: str
+    tables: tuple[Table, ...]
+
+
+STORES = (
+    Store("today", "today", "STACKCHAIN_TODAY_DB", "today.sqlite3", (
+        Table("today_plans", ("login",), (Field("ids", "plan:{login}"),)),
+        Table("tomorrow_plans", ("login",), (Field("payload", "tomorrow:{login}"),)),
+        Table("tomorrow_promotions", ("login", "promotion_id"), (Field("result", "tomorrow-promotion:{login}:{promotion_id}"),)),
+        Table("week_plans", ("login",), (Field("payload", "week:{login}"),)),
+        Table("week_promotions", ("login", "promotion_id"), (Field("result", "week-promotion:{login}:{promotion_id}"),)),
+        Table("week_reschedules", ("login", "operation_id"), (Field("result", "week-reschedule:{login}:{operation_id}"),)),
+        Table("today_sessions", ("login",), (Field("device_id", "session:{login}"),)),
+        Table("today_recaps", ("login",), (
+            Field("session_id", "recap-id:{login}", "session_id", True),
+            Field("items", "recap-items:{login}:{session_id}"),
+        )),
+        Table("today_time_logs", ("login",), (
+            Field("session_id", "time-log-session:{login}", "session_id", True),
+            Field("identity", "time-log-identity:{login}:{session_id}", "identity", True),
+            Field("actual_minutes", "time-log-payload:{login}:{session_id}:{identity}"),
+        )),
+    )),
+    Store("later", "later", "STACKCHAIN_LATER_DB", "later.sqlite3", (
+        Table("later_plans", ("login",), (Field("records", "plan:{login}"),)),
+        Table("later_item_revisions", ("login",), (Field("item_id", "item-revision:{login}", plaintext_string=True),)),
+    )),
+    Store("live-snapshot", "live-snapshot", "STACKCHAIN_LIVE_SNAPSHOT_DB", "live-snapshot.sqlite3", (
+        Table("live_snapshot", ("generation",), (Field("value_json", "{generation}"),)),
+    )),
+    Store("available-issue-snapshot", "available-issue-snapshot", "STACKCHAIN_AVAILABLE_ISSUE_SNAPSHOT_DB", "available-issue-snapshot.sqlite3", (
+        Table("available_issue_snapshot", (), (Field("items_json", "singleton"),)),
+    )),
+    Store("saved-searches", "saved-searches", "STACKCHAIN_SAVED_SEARCH_DB", "saved-searches.sqlite3", (
+        Table("saved_searches", ("login",), (Field("views", "views:{login}"),)),
+    )),
+    Store(
+        "completed-filed-reviews",
+        "completed-filed-reviews",
+        "STACKCHAIN_COMPLETED_FILED_REVIEW_DB",
+        "completed-filed-reviews.sqlite3",
+        (
+            Table(
+                "completed_filed_review_collections",
+                ("login",),
+                (Field("receipts", "receipts:{login}"),),
+            ),
+        ),
+    ),
+    Store("security-events", "security-events", "STACKCHAIN_SECURITY_EVENT_DB", "security-events.sqlite3", (
+        Table("security_events", ("id",), (Field("payload", "event:{id}"),)),
+    )),
+    Store("idempotency-ledger", "idempotency-ledger", "STACKCHAIN_IDEMPOTENCY_DB", "idempotency.sqlite3", (
+        Table("idempotency_operations", ("key",), (
+            Field("fingerprint", "{key}:fingerprint"),
+            Field("response_json", "{key}:response"),
+        )),
+    )),
+)
+
+
+def _tables(connection: sqlite3.Connection) -> set[str]:
+    return {
+        row[0]
+        for row in connection.execute(
+            "SELECT name FROM sqlite_master WHERE type = 'table'"
+        )
+    }
+
+
+def rotate_store(path: Path, spec: Store, config) -> dict[str, int]:
+    counts = {"current": 0, "failed": 0, "migrated": 0, "total": 0}
+    if not path.exists():
+        return counts
+    cipher = PrivateStateCipher(config, store=spec.identity)
+    with connect_private_sqlite(path, timeout=1.0) as connection:
+        connection.row_factory = sqlite3.Row
+        available = _tables(connection)
+        for table in spec.tables:
+            if table.name not in available:
+                continue
+            columns = (*table.context_columns, *(field.column for field in table.fields))
+            query = f"SELECT rowid AS _rotation_rowid, {', '.join(columns)} FROM {table.name}"
+            for row in connection.execute(query).fetchall():
+                context = {name: row[name] for name in table.context_columns}
+                updates: dict[str, str] = {}
+                row_failed = False
+                row_counts = {"current": 0, "migrated": 0, "total": 0}
+                for field in table.fields:
+                    payload = row[field.column]
+                    if payload is None:
+                        continue
+                    row_counts["total"] += 1
+                    try:
+                        binding = field.binding.format(**context)
+                        if isinstance(payload, str) and not payload.startswith(("v1:", "v2:")) and field.plaintext_string:
+                            value, stale = payload, True
+                        else:
+                            value, stale = cipher.open(str(payload), binding=binding)
+                        if field.alias:
+                            context[field.alias] = value
+                        if stale:
+                            updates[field.column] = cipher.seal(value, binding=binding)
+                            row_counts["migrated"] += 1
+                        else:
+                            row_counts["current"] += 1
+                    except (KeyError, PrivateStateEncryptionError, ValueError):
+                        row_failed = True
+                        break
+                counts["total"] += row_counts["total"]
+                if row_failed:
+                    counts["failed"] += 1
+                    continue
+                if updates:
+                    assignments = ", ".join(f"{name} = ?" for name in updates)
+                    connection.execute(
+                        f"UPDATE {table.name} SET {assignments} WHERE rowid = ?",
+                        (*updates.values(), row["_rotation_rowid"]),
+                    )
+                counts["migrated"] += row_counts["migrated"]
+                counts["current"] += row_counts["current"]
+    return counts
+
+
+def main() -> int:
+    try:
+        config = private_state_encryption_config()
+        if isinstance(config, bytes):
+            raise PrivateStateEncryptionError("rotation requires a keyring")
+        state = Path(os.getenv("STACKCHAIN_STATE_DIR", ".stackchain-state"))
+        report = {
+            spec.name: rotate_store(
+                Path(os.getenv(spec.env, str(state / spec.filename))), spec, config
+            )
+            for spec in STORES
+        }
+    except (OSError, sqlite3.Error, PrivateStateEncryptionError):
+        print(json.dumps({"error": "Private-state rotation configuration is unavailable"}, sort_keys=True))
+        return 2
+    print(json.dumps(report, sort_keys=True))
+    return 1 if any(item["failed"] for item in report.values()) else 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

src/available_issue_snapshot_store.py

@@ -12,7 +12,7 @@ from src.private_state import connect_private_sqlite
 from src.state_encryption import (
     PrivateStateCipher,
     PrivateStateEncryptionError,
-    private_state_encryption_key,
+    private_state_encryption_config,
 )
 
 
@@ -34,7 +34,7 @@ class AvailableIssueSnapshotStore:
         self.path = Path(path)
         self.clock = clock or time.time
         self._cipher = PrivateStateCipher(
-            encryption_key if encryption_key is not None else private_state_encryption_key(),
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
             store="available-issue-snapshot",
         )
         with self._connect() as connection:

src/completed_filed_review_store.py

@@ -1,4 +1,4 @@
-"""Durable, account-scoped completed Filed review receipts."""
+"""Durable, encrypted, account-scoped completed Filed review receipts."""
 
 import re
 import sqlite3
@@ -6,33 +6,68 @@ from datetime import datetime
 from pathlib import Path
 
 from src.private_state import connect_private_sqlite
+from src.state_encryption import PrivateStateCipher, PrivateStateEncryptionError, private_state_encryption_config
 
 
 _REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
 
 
 class CompletedFiledReviewStore:
-    def __init__(self, path: str | Path, *, limit: int = 200, timeout: float = 1.0):
+    def __init__(
+        self,
+        path: str | Path,
+        *,
+        limit: int = 200,
+        timeout: float = 1.0,
+        encryption_key: bytes | None = None,
+    ):
         self.path = Path(path)
         self.limit = limit
         self.timeout = timeout
+        self._cipher = PrivateStateCipher(
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
+            store="completed-filed-reviews",
+        )
         self._initialize()
 
     def _initialize(self) -> None:
         with self._connect() as connection:
             connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute("PRAGMA secure_delete=ON")
             connection.execute(
                 """
-                CREATE TABLE IF NOT EXISTS completed_filed_reviews (
-                    login TEXT NOT NULL,
-                    repository TEXT NOT NULL,
-                    issue_number INTEGER NOT NULL,
-                    updated_at TEXT NOT NULL,
-                    touched_at INTEGER NOT NULL,
-                    PRIMARY KEY (login, repository, issue_number)
+                CREATE TABLE IF NOT EXISTS completed_filed_review_collections (
+                    login TEXT PRIMARY KEY,
+                    receipts TEXT NOT NULL
                 )
                 """
             )
+            legacy = connection.execute(
+                "SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'completed_filed_reviews'"
+            ).fetchone()
+            if legacy:
+                connection.execute("BEGIN IMMEDIATE")
+                rows = connection.execute(
+                    "SELECT login, repository, issue_number, updated_at "
+                    "FROM completed_filed_reviews ORDER BY login, touched_at"
+                ).fetchall()
+                grouped: dict[str, list[dict]] = {}
+                for login, repository, number, updated_at in rows:
+                    grouped.setdefault(login, []).append({
+                        "repository": repository,
+                        "number": int(number),
+                        "updated_at": updated_at,
+                    })
+                for login, receipts in grouped.items():
+                    normalized = [self._receipt(item) for item in receipts][-self.limit:]
+                    connection.execute(
+                        "INSERT INTO completed_filed_review_collections(login, receipts) VALUES (?, ?) "
+                        "ON CONFLICT(login) DO UPDATE SET receipts=excluded.receipts",
+                        (login, self._seal(login, normalized)),
+                    )
+                connection.execute("DROP TABLE completed_filed_reviews")
+        with self._connect() as connection:
+            connection.execute("PRAGMA wal_checkpoint(TRUNCATE)")
 
     def _connect(self) -> sqlite3.Connection:
         return connect_private_sqlite(self.path, timeout=self.timeout)
@@ -45,7 +80,7 @@ class CompletedFiledReviewStore:
         return normalized
 
     @staticmethod
-    def _receipt(raw: dict) -> tuple[str, int, str]:
+    def _receipt(raw: dict) -> dict:
         if not isinstance(raw, dict):
             raise ValueError("receipt must be an object")
         repository = raw.get("repository")
@@ -63,23 +98,41 @@ class CompletedFiledReviewStore:
             raise ValueError("updated_at is invalid") from error
         if parsed.tzinfo is None:
             raise ValueError("updated_at is invalid")
-        return repository, number, updated_at
+        return {"repository": repository, "number": number, "updated_at": updated_at}
+
+    def _open(self, login: str, payload: str | None) -> tuple[list[dict], bool]:
+        if payload is None:
+            return [], False
+        value, stale = self._cipher.open(payload, binding=f"receipts:{login}")
+        if not isinstance(value, list):
+            raise PrivateStateEncryptionError("private state could not be decrypted")
+        try:
+            return [self._receipt(item) for item in value], stale
+        except ValueError as error:
+            raise PrivateStateEncryptionError("private state could not be decrypted") from error
+
+    def _seal(self, login: str, receipts: list[dict]) -> str:
+        return self._cipher.seal(receipts, binding=f"receipts:{login}")
 
     @staticmethod
-    def _snapshot(rows) -> dict:
-        return {"receipts": [
-            {"repository": row[0], "number": int(row[1]), "updated_at": row[2]}
-            for row in rows
-        ]}
+    def _snapshot(receipts: list[dict]) -> dict:
+        return {"receipts": receipts}
 
     def get(self, login: str) -> dict:
+        login = self._login(login)
         with self._connect() as connection:
-            rows = connection.execute(
-                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
-                "WHERE login = ? ORDER BY touched_at",
-                (self._login(login),),
-            ).fetchall()
-        return self._snapshot(rows)
+            row = connection.execute(
+                "SELECT receipts FROM completed_filed_review_collections WHERE login = ?",
+                (login,),
+            ).fetchone()
+            receipts, stale = self._open(login, row[0] if row else None)
+            if row is not None and stale:
+                connection.execute(
+                    "UPDATE completed_filed_review_collections SET receipts = ? "
+                    "WHERE login = ? AND receipts = ?",
+                    (self._seal(login, receipts), login, row[0]),
+                )
+        return self._snapshot(receipts)
 
     def merge(self, login: str, receipts: list[dict]) -> dict:
         login = self._login(login)
@@ -88,35 +141,25 @@ class CompletedFiledReviewStore:
         normalized = [self._receipt(receipt) for receipt in receipts]
         with self._connect() as connection:
             connection.execute("BEGIN IMMEDIATE")
-            touched = int(connection.execute(
-                "SELECT COALESCE(MAX(touched_at), 0) FROM completed_filed_reviews WHERE login = ?",
+            row = connection.execute(
+                "SELECT receipts FROM completed_filed_review_collections WHERE login = ?",
                 (login,),
-            ).fetchone()[0])
-            for repository, number, updated_at in normalized:
-                current = connection.execute(
-                    "SELECT updated_at FROM completed_filed_reviews "
-                    "WHERE login = ? AND repository = ? AND issue_number = ?",
-                    (login, repository, number),
-                ).fetchone()
-                if current is not None and current[0] >= updated_at:
+            ).fetchone()
+            current, _stale = self._open(login, row[0] if row else None)
+            for incoming in normalized:
+                match = next((
+                    item for item in current
+                    if item["repository"] == incoming["repository"] and item["number"] == incoming["number"]
+                ), None)
+                if match is not None and match["updated_at"] >= incoming["updated_at"]:
                     continue
-                touched += 1
-                connection.execute(
-                    "INSERT INTO completed_filed_reviews "
-                    "(login, repository, issue_number, updated_at, touched_at) VALUES (?, ?, ?, ?, ?) "
-                    "ON CONFLICT(login, repository, issue_number) DO UPDATE SET "
-                    "updated_at=excluded.updated_at, touched_at=excluded.touched_at",
-                    (login, repository, number, updated_at, touched),
-                )
+                if match is not None:
+                    current.remove(match)
+                current.append(incoming)
+            current = current[-self.limit:]
             connection.execute(
-                "DELETE FROM completed_filed_reviews WHERE login = ? AND rowid NOT IN ("
-                "SELECT rowid FROM completed_filed_reviews WHERE login = ? "
-                "ORDER BY touched_at DESC LIMIT ?)",
-                (login, login, self.limit),
+                "INSERT INTO completed_filed_review_collections(login, receipts) VALUES (?, ?) "
+                "ON CONFLICT(login) DO UPDATE SET receipts=excluded.receipts",
+                (login, self._seal(login, current)),
             )
-            rows = connection.execute(
-                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
-                "WHERE login = ? ORDER BY touched_at",
-                (login,),
-            ).fetchall()
-        return self._snapshot(rows)
+        return self._snapshot(current)

src/dashboard_auth.py

@@ -32,6 +32,8 @@ class Session:
     csrf: str
     expires_at: int
     idle_expires_at: int | None = None
+    principal_id: int | None = None
+    principal_login: str | None = None
 
 
 @dataclass(frozen=True)
@@ -145,6 +147,8 @@ def issue_session(
     *,
     device_label: str = "This device",
     management_id: str | None = None,
+    principal_id: int | None = None,
+    principal_login: str | None = None,
 ) -> tuple[str, Session]:
     issued_at = int(time.time() if now is None else now)
     ttl = int(os.getenv("STACKCHAIN_DASHBOARD_SESSION_TTL_SECONDS", str(DEFAULT_TTL_SECONDS)))
@@ -165,6 +169,8 @@ def issue_session(
         session.expires_at,
         device_label=device_label,
         management_id=management_id,
+        principal_id=principal_id,
+        principal_login=principal_login,
     )
     return f"{encoded}.{signature}", session
 
@@ -211,6 +217,8 @@ def verify_session_with_reason(
             csrf=session.csrf,
             expires_at=session.expires_at,
             idle_expires_at=getattr(status, "idle_expires_at", None),
+            principal_id=getattr(status, "principal_id", None),
+            principal_login=getattr(status, "principal_login", None),
         )
     )
 
@@ -244,11 +252,14 @@ async def managed_session_active(management_id: str) -> bool:
     return status == "active"
 
 
-async def managed_session_statuses(management_ids) -> dict[str, str]:
+async def managed_session_statuses(
+    management_ids, *, expected_principal_id: int | None = None
+) -> dict[str, str]:
+    options = {"idle_timeout_seconds": idle_timeout_seconds()}
+    if expected_principal_id is not None:
+        options["expected_principal_id"] = expected_principal_id
     return await asyncio.to_thread(
-        _session_store().managed_statuses,
-        management_ids,
-        idle_timeout_seconds=idle_timeout_seconds(),
+        _session_store().managed_statuses, management_ids, **options
     )
 
 

src/following_store.py

@@ -0,0 +1,344 @@
+"""Encrypted, account-scoped registry of explicitly followed Gitea issues."""
+
+import re
+import sqlite3
+from pathlib import Path
+
+from src.private_state import connect_private_sqlite
+from src.state_encryption import PrivateStateCipher, PrivateStateEncryptionError, private_state_encryption_config
+
+
+_REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
+_STATES = {"open", "closed"}
+_KINDS = {"issue", "pull"}
+
+
+class FollowingStore:
+    def __init__(
+        self,
+        path: str | Path,
+        *,
+        limit: int = 50,
+        timeout: float = 1.0,
+        encryption_key: bytes | None = None,
+    ):
+        self.path = Path(path)
+        self.limit = limit
+        self.timeout = timeout
+        self._cipher = PrivateStateCipher(
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
+            store="following",
+        )
+        self._initialize()
+
+    def _connect(self) -> sqlite3.Connection:
+        return connect_private_sqlite(self.path, timeout=self.timeout)
+
+    def _initialize(self) -> None:
+        with self._connect() as connection:
+            connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute(
+                """
+                CREATE TABLE IF NOT EXISTS following_issues (
+                    login TEXT PRIMARY KEY,
+                    revision INTEGER NOT NULL,
+                    items TEXT NOT NULL
+                )
+                """
+            )
+
+    @staticmethod
+    def _login(login: str) -> str:
+        normalized = str(login).strip().lower()
+        if not normalized:
+            raise ValueError("login is required")
+        return normalized
+
+    def _snapshot(self, row, login: str) -> tuple[dict, bool]:
+        if row is None:
+            return {"revision": 0, "items": []}, False
+        items, legacy = self._cipher.open(row[1], binding=f"items:{login}")
+        if not isinstance(items, list):
+            raise PrivateStateEncryptionError("private state could not be decrypted")
+        return {"revision": int(row[0]), "items": items}, legacy
+
+    def _seal(self, login: str, items: list[dict]) -> str:
+        return self._cipher.seal(items, binding=f"items:{login}")
+
+    @staticmethod
+    def _normalize_item(raw: dict) -> dict:
+        if not isinstance(raw, dict):
+            raise ValueError("following item must be an object")
+        repository = raw.get("repository")
+        if not isinstance(repository, str) or not _REPOSITORY.fullmatch(repository):
+            raise ValueError("repository is invalid")
+        number = raw.get("number")
+        if not isinstance(number, int) or isinstance(number, bool) or number < 1:
+            raise ValueError("number is invalid")
+        kind = raw.get("kind", "issue")
+        if kind not in _KINDS:
+            raise ValueError("kind is invalid")
+        title = raw.get("title")
+        if not isinstance(title, str) or not title.strip() or len(title.strip()) > 300:
+            raise ValueError("title is invalid")
+        state = raw.get("state")
+        if state not in _STATES:
+            raise ValueError("state is invalid")
+        updated_at = raw.get("updated_at")
+        if not isinstance(updated_at, str) or not updated_at or len(updated_at) > 64:
+            raise ValueError("updated_at is invalid")
+        url = raw.get("url")
+        if not isinstance(url, str) or not url.startswith(("http://", "https://")) or len(url) > 2048:
+            raise ValueError("url is invalid")
+        last_seen_updated_at = raw.get("last_seen_updated_at", updated_at)
+        if (
+            not isinstance(last_seen_updated_at, str)
+            or not last_seen_updated_at
+            or len(last_seen_updated_at) > 64
+        ):
+            raise ValueError("last seen update is invalid")
+        item = {
+            "repository": repository,
+            "kind": kind,
+            "number": number,
+            "title": title.strip(),
+            "state": state,
+            "updated_at": updated_at,
+            "url": url,
+            "last_seen_updated_at": last_seen_updated_at,
+        }
+        kept_updated_at = raw.get("kept_updated_at")
+        if kept_updated_at is not None:
+            if not isinstance(kept_updated_at, str) or not kept_updated_at or len(kept_updated_at) > 64:
+                raise ValueError("kept update is invalid")
+            item["kept_updated_at"] = kept_updated_at
+        reviewed_title = raw.get("reviewed_title")
+        if reviewed_title is not None:
+            if not isinstance(reviewed_title, str) or not reviewed_title.strip() or len(reviewed_title.strip()) > 300:
+                raise ValueError("reviewed title is invalid")
+            item["reviewed_title"] = reviewed_title.strip()
+        reviewed_state = raw.get("reviewed_state")
+        if reviewed_state is not None:
+            if reviewed_state not in _STATES:
+                raise ValueError("reviewed state is invalid")
+            item["reviewed_state"] = reviewed_state
+        return item
+
+    @classmethod
+    def _present(cls, snapshot: dict) -> dict:
+        changed = []
+        unchanged = []
+        for raw in snapshot["items"]:
+            stored = cls._normalize_item(raw)
+            unseen = (stored["updated_at"] != stored["last_seen_updated_at"] or
+                      stored.get("kept_updated_at") == stored["updated_at"])
+            item = {key: value for key, value in stored.items()
+                    if key not in {"last_seen_updated_at", "kept_updated_at",
+                                   "reviewed_title", "reviewed_state"}}
+            item["has_unseen_change"] = unseen
+            if unseen:
+                item["reviewed_at"] = stored["last_seen_updated_at"]
+                if stored.get("reviewed_state") == "open" and stored["state"] == "closed":
+                    item["change_summary"] = "Closed since last review"
+                elif stored.get("reviewed_state") == "closed" and stored["state"] == "open":
+                    item["change_summary"] = "Reopened since last review"
+                elif stored.get("reviewed_title") not in {None, stored["title"]}:
+                    item["change_summary"] = "Title changed since last review"
+                else:
+                    item["change_summary"] = "New activity"
+            (changed if unseen else unchanged).append(item)
+        changed.sort(key=lambda item: item["updated_at"], reverse=True)
+        return {"revision": snapshot["revision"], "items": changed + unchanged}
+
+    @staticmethod
+    def _identity(item: dict) -> tuple[str, str, int]:
+        return item.get("kind", "issue"), item["repository"].lower(), item["number"]
+
+    def get(self, login: str) -> dict:
+        login = self._login(login)
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            snapshot, legacy = self._snapshot(row, login)
+            snapshot["items"] = [self._normalize_item(item) for item in snapshot["items"]]
+            if row is not None and legacy:
+                connection.execute(
+                    "UPDATE following_issues SET items = ? WHERE login = ? AND items = ?",
+                    (self._seal(login, snapshot["items"]), login, row[1]),
+                )
+        return self._present(snapshot)
+
+    def preflight(self, login: str, raw_item: dict, watching: bool) -> dict:
+        """Validate a requested change and capacity without mutating the registry."""
+        login = self._login(login)
+        item = self._normalize_item(raw_item)
+        if not isinstance(watching, bool):
+            raise ValueError("watching is invalid")
+        if not watching:
+            return item
+        identity = self._identity(item)
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            current, _legacy = self._snapshot(row, login)
+        if (
+            len(current["items"]) >= self.limit
+            and not any(self._identity(candidate) == identity for candidate in current["items"])
+        ):
+            raise ValueError(f"following is limited to {self.limit} issues")
+        return item
+
+    def set_watching(self, login: str, raw_item: dict, watching: bool) -> dict:
+        login = self._login(login)
+        item = self._normalize_item(raw_item)
+        if not isinstance(watching, bool):
+            raise ValueError("watching is invalid")
+        identity = self._identity(item)
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            current, _legacy = self._snapshot(row, login)
+            items = [self._normalize_item(candidate) for candidate in current["items"]]
+            index = next(
+                (position for position, candidate in enumerate(items)
+                 if self._identity(candidate) == identity),
+                None,
+            )
+            if watching:
+                if index is None:
+                    if len(items) >= self.limit:
+                        raise ValueError(f"following is limited to {self.limit} issues")
+                    items.insert(0, item)
+                else:
+                    item["last_seen_updated_at"] = items[index]["last_seen_updated_at"]
+                    for key in ("kept_updated_at", "reviewed_title", "reviewed_state"):
+                        if key in items[index]:
+                            item[key] = items[index][key]
+                    if items[index] == item:
+                        return self._present({"revision": current["revision"], "items": items})
+                    items.pop(index)
+                    items.insert(0, item)
+            elif index is None:
+                return self._present({"revision": current["revision"], "items": items})
+            else:
+                items.pop(index)
+            revision = current["revision"] + 1
+            connection.execute(
+                "INSERT INTO following_issues(login, revision, items) VALUES (?, ?, ?) "
+                "ON CONFLICT(login) DO UPDATE SET revision=excluded.revision, items=excluded.items",
+                (login, revision, self._seal(login, items)),
+            )
+        return self._present({"revision": revision, "items": items})
+
+    def refresh(self, login: str, raw_items: list[dict]) -> dict:
+        """Merge successful upstream snapshots while preserving seen revisions."""
+        login = self._login(login)
+        fresh = {self._identity(item): self._normalize_item(item) for item in raw_items}
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            current, _legacy = self._snapshot(row, login)
+            items = [self._normalize_item(candidate) for candidate in current["items"]]
+            changed = False
+            for index, item in enumerate(items):
+                update = fresh.get(self._identity(item))
+                if update is None:
+                    continue
+                update["last_seen_updated_at"] = item["last_seen_updated_at"]
+                for key in ("kept_updated_at", "reviewed_title", "reviewed_state"):
+                    if key in item:
+                        update[key] = item[key]
+                if update["updated_at"] != item["updated_at"]:
+                    update.setdefault("reviewed_title", item["title"])
+                    update.setdefault("reviewed_state", item["state"])
+                if update != item:
+                    items[index] = update
+                    changed = True
+            revision = current["revision"]
+            if changed:
+                revision += 1
+                connection.execute(
+                    "UPDATE following_issues SET revision = ?, items = ? WHERE login = ?",
+                    (revision, self._seal(login, items), login),
+                )
+        return self._present({"revision": revision, "items": items})
+
+    def acknowledge(
+        self,
+        login: str,
+        repository: str,
+        number: int,
+        updated_at: str,
+        *,
+        kind: str = "issue",
+    ) -> dict:
+        """Mark only the exact upstream revision successfully opened by the operator."""
+        login = self._login(login)
+        if kind not in _KINDS:
+            raise ValueError("kind is invalid")
+        identity = (kind, str(repository).lower(), number)
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            current, _legacy = self._snapshot(row, login)
+            items = [self._normalize_item(candidate) for candidate in current["items"]]
+            revision = current["revision"]
+            for item in items:
+                if self._identity(item) != identity or item["updated_at"] != updated_at:
+                    continue
+                if (item["last_seen_updated_at"] != updated_at or
+                        item.get("kept_updated_at") == updated_at):
+                    item["last_seen_updated_at"] = updated_at
+                    item.pop("kept_updated_at", None)
+                    item.pop("reviewed_title", None)
+                    item.pop("reviewed_state", None)
+                    revision += 1
+                    connection.execute(
+                        "UPDATE following_issues SET revision = ?, items = ? WHERE login = ?",
+                        (revision, self._seal(login, items), login),
+                    )
+                break
+        return self._present({"revision": revision, "items": items})
+
+    def keep_unseen(
+        self,
+        login: str,
+        repository: str,
+        number: int,
+        updated_at: str,
+        *,
+        kind: str = "issue",
+    ) -> dict:
+        """Restore only the exact loaded revision to the unseen review queue."""
+        login = self._login(login)
+        if kind not in _KINDS:
+            raise ValueError("kind is invalid")
+        identity = (kind, str(repository).lower(), number)
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, items FROM following_issues WHERE login = ?", (login,)
+            ).fetchone()
+            current, _legacy = self._snapshot(row, login)
+            items = [self._normalize_item(candidate) for candidate in current["items"]]
+            revision = current["revision"]
+            for item in items:
+                if self._identity(item) != identity or item["updated_at"] != updated_at:
+                    continue
+                if item.get("kept_updated_at") != updated_at:
+                    item["kept_updated_at"] = updated_at
+                    revision += 1
+                    connection.execute(
+                        "UPDATE following_issues SET revision = ?, items = ? WHERE login = ?",
+                        (revision, self._seal(login, items), login),
+                    )
+                break
+        return self._present({"revision": revision, "items": items})

src/frontend_bundle.py

@@ -23,23 +23,29 @@ WORKER_RUNTIME_SOURCE = "static/background-issue-sync.js"
 FEATURE_SOURCES = {
     "comment-actions": ("static/comment-actions.js",),
     "issue-capture": (
-        "static/voice-transcript-store.js", "static/voice-issue-capture.js", "static/create-issue-sheet.js", "static/mobile-create-issue-nav.js", "static/update-follow-up.js", "static/shared-image-capture.js",
+        "static/voice-transcript-store.js", "static/voice-issue-capture.js", "static/create-issue-sheet.js", "static/create-pull-sheet.js", "static/mobile-create-issue-nav.js", "static/update-follow-up.js", "static/shared-image-capture.js",
     ),
     "pull-workflow": ("static/pull-sheet.js", "static/review-sheet.js", "static/release-receipt.js"),
     "push-notifications": ("static/push-notifications.js",),
+    "sign-out": ("static/private-data-inventory.js", "static/sign-out-review.js"),
     "device-setup": (
         "static/install-app.js", "static/private-data-inventory.js", "static/private-device-data.js",
         "static/device-storage.js", "static/mobile-device-setup.js",
     ),
     "security-center": ("static/security-center.js",),
+    "planning": (
+        "static/plan-today.js", "static/plan-today-readiness.js",
+        "static/plan-today-preview.js", "static/today-rollover.js", "static/today-readiness.js", "static/following.js",
+        "static/tomorrow-plan.js", "static/week-calendar.js", "static/week-calendar-import.js", "static/week-plan.js", "static/today-week-reschedule.js", "static/search-week-plan.js", "static/search-batch-plan.js", "static/agenda-session-launcher.js", "static/mobile-plan-today-nav.js",
+    ),
     "today-timer": (
-        "static/conversation.js", "static/voice-transcript-store.js", "static/voice-conversation-capture.js", "static/mobile-launch.js", "static/mobile-insights.js", "static/mobile-app-shortcuts.js", "static/mobile-plan-today-nav.js", "static/mobile-find-work-nav.js", "static/mobile-pull-refresh.js", "static/live-data-status.js",
-        "static/today-completion.js", "static/card-planning.js", "static/work-detail-position.js", "static/work-route.js", "static/commands.js", "static/saved-searches.js", "static/task-overlay-history.js", "static/search-preview.js", "static/mobile-search-preview-nav.js", "static/search-reply-draft-store.js", "static/conversation-reply-draft-store.js", "static/conversation-photo-drafts.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/agenda-replan.js", "static/agenda-calendar.js", "static/my-work.js", "static/protect-today.js", "static/mobile-today-command-bar.js", "static/mobile-task-dock.js", "static/mobile-work-entry.js", "static/mobile-queue-launcher.js", "static/mobile-delivery-recovery.js", "static/mobile-start-day.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-break.js", "static/today-progress.js", "static/today-lock-screen.js", "static/today-session-sync.js", "static/today-recap.js", "static/today-wrap-up.js", "static/today-summary.js", "static/today-handoff.js",
-        "static/today-rollover.js", "static/later-work.js", "static/detail-defer.js", "static/later-picker.js", "static/drafts.js", "static/unfiled-captures.js", "static/unfiled-draft-sync.js",
+        "static/mobile-app-badge.js", "static/conversation.js", "static/widgets.js", "static/voice-transcript-store.js", "static/voice-conversation-capture.js", "static/mobile-launch.js", "static/mobile-insights.js", "static/mobile-app-shortcuts.js", "static/mobile-find-work-nav.js", "static/mobile-pull-refresh.js", "static/live-data-status.js", "static/mobile-composer-viewport.js",
+        "static/today-completion.js", "static/card-planning.js", "static/work-detail-position.js", "static/work-route.js", "static/commands.js", "static/saved-searches.js", "static/task-overlay-history.js", "static/search-preview.js", "static/mobile-search-preview-nav.js", "static/search-reply-draft-store.js", "static/conversation-reply-draft-store.js", "static/conversation-photo-drafts.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/agenda-replan.js", "static/agenda-calendar.js", "static/my-work.js", "static/protect-today.js", "static/mobile-today-command-bar.js", "static/mobile-task-dock.js", "static/mobile-first-task.js", "static/mobile-work-entry.js", "static/mobile-queue-launcher.js", "static/mobile-delivery-recovery.js", "static/mobile-start-day.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-break.js", "static/today-progress.js", "static/today-lock-screen.js", "static/today-session-sync.js", "static/today-recap.js", "static/today-wrap-up.js", "static/today-summary.js", "static/today-handoff.js",
+        "static/later-work.js", "static/detail-defer.js", "static/later-picker.js", "static/drafts.js", "static/unfiled-captures.js", "static/unfiled-draft-sync.js",
         "static/assign-and-start.js", "static/filed-claim.js", "static/queue-today.js", "static/create-and-start.js",
         "static/draft-filing-session.js", "static/draft-capacity-dialog.js", "static/work-selection.js",
         "static/today-work.js", "static/today-sync.js", "static/pick-work.js", "static/batch-find-work.js",
-        "static/search-batch-plan.js", "static/mention-composer.js", "static/issue-evidence-review.js", "static/issue-evidence-editor.js",
+        "static/mention-composer.js", "static/issue-evidence-review.js", "static/issue-evidence-editor.js",
         "static/issue-attachment.js", "static/checklist-conflict.js", "static/issue-outbox.js", "static/authored-outbox.js", "static/issue-sheet.js", "static/mobile-issue-detail-nav.js", "static/issue-filing-review.js", "static/issue-filing-receipt.js",
     ),
 }
@@ -89,7 +95,7 @@ def _runtime(frontend_dir: Path, sources: tuple[str, ...], prefix: str) -> Runti
     digest = hashlib.sha256(content).hexdigest()[:16]
     return RuntimeBundle(
         runtime_bytes=content,
-        runtime_gzip_bytes=gzip.compress(content, compresslevel=6, mtime=0),
+        runtime_gzip_bytes=gzip.compress(content, compresslevel=9, mtime=0),
         runtime_digest=digest,
         runtime_name=f"{prefix}-{digest}.js",
     )
@@ -114,7 +120,13 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
         f'<meta name="stackchain-feature-{name}" content="{bundle.runtime_name}">'
         for name, bundle in feature_bundles.items()
     )
-    dashboard_html = dashboard_html.replace("</head>", feature_metadata + "\n</head>")
+    workspace_preload = (
+        f'<link rel="preload" as="script" '
+        f'href="{feature_bundles["today-timer"].runtime_name}">'
+    )
+    dashboard_html = dashboard_html.replace(
+        "</head>", feature_metadata + "\n" + workspace_preload + "\n</head>"
+    )
     dashboard_html = dashboard_html.replace(
         "</body>",
         f'<script src="{core.runtime_name}"></script>\n</body>',

src/idempotency.py

@@ -6,6 +6,7 @@ from pathlib import Path
 from typing import Any, Callable
 
 from src.private_state import connect_private_sqlite
+from src.state_encryption import PrivateStateCipher, private_state_encryption_config
 
 
 @dataclass(frozen=True)
@@ -29,12 +30,17 @@ class IdempotencyLedger:
         max_entries: int,
         lock_timeout_seconds: float = 0.1,
         clock: Callable[[], float] = time.time,
+        encryption_key: bytes | None = None,
     ) -> None:
         self.path = Path(path)
         self.ttl_seconds = ttl_seconds
         self.max_entries = max_entries
         self.lock_timeout_seconds = lock_timeout_seconds
         self.clock = clock
+        self._cipher = PrivateStateCipher(
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
+            store="idempotency-ledger",
+        )
         self._initialize()
 
     def _connect(self) -> sqlite3.Connection:
@@ -67,6 +73,17 @@ class IdempotencyLedger:
     def _fingerprint(value: tuple[Any, ...]) -> str:
         return json.dumps(value, separators=(",", ":"), sort_keys=True)
 
+    def _seal(self, value: str, *, key: str, field: str) -> str:
+        return self._cipher.seal(value, binding=f"{key}:{field}")
+
+    def _open(self, payload: str, *, key: str, field: str) -> tuple[str, bool]:
+        value, legacy = self._cipher.open(payload, binding=f"{key}:{field}")
+        if legacy:
+            return json.dumps(value, separators=(",", ":"), sort_keys=True), True
+        if not isinstance(value, str):
+            raise RuntimeError("idempotency ledger payload is invalid")
+        return value, legacy
+
     def reserve(self, key: str, fingerprint: tuple[Any, ...]) -> Reservation:
         encoded = self._fingerprint(fingerprint)
         now = self.clock()
@@ -84,10 +101,40 @@ class IdempotencyLedger:
                     (key,),
                 ).fetchone()
                 if row is not None:
-                    if row[0] != encoded:
+                    stored_fingerprint, legacy_fingerprint = self._open(
+                        row[0], key=key, field="fingerprint"
+                    )
+                    if legacy_fingerprint:
+                        connection.execute(
+                            "UPDATE idempotency_operations SET fingerprint = ? "
+                            "WHERE key = ? AND fingerprint = ?",
+                            (
+                                self._seal(
+                                    stored_fingerprint, key=key, field="fingerprint"
+                                ),
+                                key,
+                                row[0],
+                            ),
+                        )
+                    if stored_fingerprint != encoded:
                         return Reservation("conflict")
                     if row[1] == "completed":
-                        return Reservation("completed", json.loads(row[2]))
+                        stored_response, legacy_response = self._open(
+                            row[2], key=key, field="response"
+                        )
+                        if legacy_response:
+                            connection.execute(
+                                "UPDATE idempotency_operations SET response_json = ? "
+                                "WHERE key = ? AND response_json = ?",
+                                (
+                                    self._seal(
+                                        stored_response, key=key, field="response"
+                                    ),
+                                    key,
+                                    row[2],
+                                ),
+                            )
+                        return Reservation("completed", json.loads(stored_response))
                     if row[3] <= now - self.ttl_seconds:
                         return Reservation("uncertain")
                     return Reservation("pending")
@@ -110,7 +157,7 @@ class IdempotencyLedger:
                 connection.execute(
                     "INSERT INTO idempotency_operations "
                     "(key, fingerprint, status, created_at) VALUES (?, ?, 'pending', ?)",
-                    (key, encoded, now),
+                    (key, self._seal(encoded, key=key, field="fingerprint"), now),
                 )
         except sqlite3.OperationalError as exc:
             if "locked" in str(exc).lower() or "busy" in str(exc).lower():
@@ -129,7 +176,7 @@ class IdempotencyLedger:
                 connection.execute(
                     "UPDATE idempotency_operations SET status = 'completed', "
                     "response_json = ?, completed_at = ? WHERE key = ?",
-                    (encoded, self.clock(), key),
+                    (self._seal(encoded, key=key, field="response"), self.clock(), key),
                 )
         except sqlite3.OperationalError as exc:
             if "locked" in str(exc).lower() or "busy" in str(exc).lower():

src/later_store.py

@@ -1,12 +1,12 @@
 """Durable, account-scoped Later deferrals."""
 
-import json
 import sqlite3
 import time
 from datetime import datetime
 from pathlib import Path
 
 from src.private_state import connect_private_sqlite
+from src.state_encryption import PrivateStateCipher, PrivateStateEncryptionError, private_state_encryption_config
 
 
 class LaterStore:
@@ -17,6 +17,7 @@ class LaterStore:
         timeout: float = 1.0,
         operation_limit: int = 4096,
         operation_retention_seconds: float = 30 * 24 * 60 * 60,
+        encryption_key: bytes | None = None,
         clock=time.time,
     ):
         self.path = Path(path)
@@ -24,6 +25,10 @@ class LaterStore:
         self.operation_limit = operation_limit
         self.operation_retention_seconds = operation_retention_seconds
         self.clock = clock
+        self._cipher = PrivateStateCipher(
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
+            store="later",
+        )
         self._initialize()
 
     def _initialize(self) -> None:
@@ -99,11 +104,55 @@ class LaterStore:
             raise ValueError("login is required")
         return normalized
 
-    @staticmethod
-    def _snapshot(row) -> dict:
+    def _snapshot(self, row, login: str) -> tuple[dict, bool]:
         if row is None:
-            return {"revision": 0, "records": {}}
-        return {"revision": int(row[0]), "records": json.loads(row[1])}
+            return {"revision": 0, "records": {}}, False
+        records, legacy = self._cipher.open(row[1], binding=f"plan:{login}")
+        if not isinstance(records, dict):
+            raise PrivateStateEncryptionError("private state could not be decrypted")
+        return {"revision": int(row[0]), "records": records}, legacy
+
+    def _sealed_records(self, login: str, records: dict) -> str:
+        return self._cipher.seal(records, binding=f"plan:{login}")
+
+    def _item_revisions(
+        self, connection: sqlite3.Connection, login: str
+    ) -> tuple[dict[str, int], dict[str, str]]:
+        revisions: dict[str, int] = {}
+        stored_ids: dict[str, str] = {}
+        for stored_item_id, revision in connection.execute(
+            "SELECT item_id, revision FROM later_item_revisions WHERE login = ?",
+            (login,),
+        ):
+            if stored_item_id.startswith(("v1:", "v2:")):
+                item_id, _legacy = self._cipher.open(
+                    stored_item_id, binding=f"item-revision:{login}"
+                )
+            else:
+                item_id = stored_item_id
+            if not isinstance(item_id, str) or not item_id:
+                raise PrivateStateEncryptionError("private state could not be decrypted")
+            revisions[item_id] = int(revision)
+            stored_ids[item_id] = stored_item_id
+        return revisions, stored_ids
+
+    def _migrate_item_ids(
+        self, connection: sqlite3.Connection, login: str, stored_ids: dict[str, str]
+    ) -> dict[str, str]:
+        migrated = dict(stored_ids)
+        for item_id, stored_item_id in stored_ids.items():
+            if stored_item_id.startswith(("v1:", "v2:")):
+                continue
+            sealed_item_id = self._cipher.seal(
+                item_id, binding=f"item-revision:{login}"
+            )
+            connection.execute(
+                "UPDATE later_item_revisions SET item_id = ? "
+                "WHERE login = ? AND item_id = ?",
+                (sealed_item_id, login, stored_item_id),
+            )
+            migrated[item_id] = sealed_item_id
+        return migrated
 
     @staticmethod
     def _validate_wake_at(wake_at: str | None) -> str:
@@ -116,12 +165,21 @@ class LaterStore:
         return wake_at
 
     def get(self, login: str) -> dict:
+        login = self._normalize_login(login)
         with self._connect() as connection:
             row = connection.execute(
                 "SELECT revision, records FROM later_plans WHERE login = ?",
-                (self._normalize_login(login),),
+                (login,),
             ).fetchone()
-        return self._snapshot(row)
+            snapshot, legacy_plan = self._snapshot(row, login)
+            _revisions, stored_item_ids = self._item_revisions(connection, login)
+            if row is not None and legacy_plan:
+                connection.execute(
+                    "UPDATE later_plans SET records = ? WHERE login = ? AND records = ?",
+                    (self._sealed_records(login, snapshot["records"]), login, row[1]),
+                )
+            self._migrate_item_ids(connection, login, stored_item_ids)
+        return snapshot
 
     def apply(
         self,
@@ -152,7 +210,7 @@ class LaterStore:
             row = connection.execute(
                 "SELECT revision, records FROM later_plans WHERE login = ?", (login,)
             ).fetchone()
-            snapshot = self._snapshot(row)
+            snapshot, legacy_plan = self._snapshot(row, login)
             records = dict(snapshot["records"])
             revision = snapshot["revision"]
             accepted: list[str] = []
@@ -161,15 +219,19 @@ class LaterStore:
 
             # Existing databases predate per-item revisions. Conservatively mark
             # active deferrals as changed at the latest known plan revision.
+            item_revisions, stored_item_ids = self._item_revisions(connection, login)
+            stored_item_ids = self._migrate_item_ids(connection, login, stored_item_ids)
             for item_id in records:
-                connection.execute(
-                    "INSERT OR IGNORE INTO later_item_revisions(login, item_id, revision) VALUES (?, ?, ?)",
-                    (login, item_id, revision),
-                )
-            item_revisions = dict(connection.execute(
-                "SELECT item_id, revision FROM later_item_revisions WHERE login = ?",
-                (login,),
-            ).fetchall())
+                if item_id not in item_revisions:
+                    stored_item_id = self._cipher.seal(
+                        item_id, binding=f"item-revision:{login}"
+                    )
+                    connection.execute(
+                        "INSERT INTO later_item_revisions(login, item_id, revision) VALUES (?, ?, ?)",
+                        (login, stored_item_id, revision),
+                    )
+                    item_revisions[item_id] = revision
+                    stored_item_ids[item_id] = stored_item_id
             batch_start_item_revisions = dict(item_revisions)
 
             for operation in operations:
@@ -218,21 +280,32 @@ class LaterStore:
                 revision += 1 if changed else 0
                 if changed:
                     item_revisions[item_id] = revision
-                    connection.execute(
-                        "INSERT INTO later_item_revisions(login, item_id, revision) VALUES (?, ?, ?) "
-                        "ON CONFLICT(login, item_id) DO UPDATE SET revision = excluded.revision",
-                        (login, item_id, revision),
-                    )
+                    stored_item_id = stored_item_ids.get(item_id)
+                    if stored_item_id is None:
+                        stored_item_id = self._cipher.seal(
+                            item_id, binding=f"item-revision:{login}"
+                        )
+                        stored_item_ids[item_id] = stored_item_id
+                        connection.execute(
+                            "INSERT INTO later_item_revisions(login, item_id, revision) VALUES (?, ?, ?)",
+                            (login, stored_item_id, revision),
+                        )
+                    else:
+                        connection.execute(
+                            "UPDATE later_item_revisions SET revision = ? "
+                            "WHERE login = ? AND item_id = ?",
+                            (revision, login, stored_item_id),
+                        )
                 self._record_operation(connection, login, operation_id)
                 accepted.append(operation_id)
 
-            serialized = json.dumps(records, separators=(",", ":"), sort_keys=True)
+            serialized = self._sealed_records(login, records)
             if row is None:
                 connection.execute(
                     "INSERT INTO later_plans(login, revision, records) VALUES (?, ?, ?)",
                     (login, revision, serialized),
                 )
-            elif accepted:
+            elif accepted or legacy_plan:
                 connection.execute(
                     "UPDATE later_plans SET revision = ?, records = ? WHERE login = ?",
                     (revision, serialized, login),

src/live_snapshot_store.py

@@ -15,7 +15,7 @@ from src.private_state import connect_private_sqlite
 from src.state_encryption import (
     PrivateStateCipher,
     PrivateStateEncryptionError,
-    private_state_encryption_key,
+    private_state_encryption_config,
 )
 
 SECTIONS = ("context", "events", "notifications")
@@ -63,7 +63,7 @@ class LiveSnapshotStore:
         self.path = Path(path)
         self.clock = clock or time.time
         self._cipher = PrivateStateCipher(
-            encryption_key if encryption_key is not None else private_state_encryption_key(),
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
             store="live-snapshot",
         )
         self._initialize()

src/push_notifications.py

@@ -1,4 +1,5 @@
 import asyncio
+import hashlib
 import json
 import secrets
 import time
@@ -57,6 +58,12 @@ class _PinnedHTTPSAdapter(requests.adapters.HTTPAdapter):
         return host, tls
 
 
+def _delivery_failure_reason(error: Exception) -> str:
+    if isinstance(error, (asyncio.TimeoutError, TimeoutError)):
+        return "timeout"
+    return "provider"
+
+
 async def send_web_push(
     subscription: dict,
     payload: str,
@@ -93,6 +100,135 @@ async def send_web_push(
     )
 
 
+async def dispatch_following_changes(
+    store: PushSubscriptionStore,
+    configuration: PushConfiguration,
+    following: Callable[[], Awaitable[dict]],
+    send: Callable[[dict, str], Awaitable[None]] | None = None,
+    *,
+    session_statuses: Callable[[list[str]], Awaitable[dict[str, str]]] | None = None,
+    lease_seconds: float = 60.0,
+    send_timeout_seconds: float = 10.0,
+    max_concurrency: int = 8,
+) -> int:
+    """Notify opted-in devices once for each privacy-safe Following change set."""
+    if not configuration.enabled:
+        return 0
+    owner = secrets.token_urlsafe(18)
+    acquired = await asyncio.to_thread(
+        store.acquire_dispatch_lease,
+        owner,
+        channel="following",
+        now=time.time(),
+        lease_seconds=max(15.0, lease_seconds, send_timeout_seconds + 5.0),
+    )
+    if not acquired:
+        return 0
+    try:
+        devices = await asyncio.to_thread(store.following_notification_devices)
+        if not devices:
+            return 0
+        snapshot = await following()
+        if not isinstance(snapshot, dict) or snapshot.get("complete") is False:
+            return 0
+        changed = []
+        for item in snapshot.get("items", []):
+            if not isinstance(item, dict) or item.get("has_unseen_change") is not True:
+                continue
+            repository = item.get("repository")
+            kind = item.get("kind")
+            number = item.get("number")
+            updated_at = item.get("updated_at")
+            if (
+                isinstance(repository, str)
+                and kind in {"issue", "pull"}
+                and isinstance(number, int)
+                and not isinstance(number, bool)
+                and number > 0
+                and isinstance(updated_at, str)
+                and updated_at
+            ):
+                changed.append((repository.lower(), kind, number, updated_at))
+        changed.sort()
+        fingerprint = hashlib.sha256(
+            json.dumps(changed, separators=(",", ":")).encode()
+        ).hexdigest()
+        if not changed:
+            await asyncio.gather(*(
+                asyncio.to_thread(store.mark_following_delivered, device.session_id, fingerprint)
+                for device in devices
+            ))
+            return 0
+        pending = [device for device in devices if device.delivered_fingerprint != fingerprint]
+        if not pending:
+            return 0
+        if session_statuses is not None:
+            try:
+                statuses = await session_statuses([device.session_id for device in pending])
+            except Exception:
+                return 0
+            for device in pending:
+                if statuses.get(device.session_id) != "active":
+                    await asyncio.to_thread(store.delete_session, device.session_id)
+            pending = [
+                device for device in pending if statuses.get(device.session_id) == "active"
+            ]
+        count = min(len(changed), 50)
+        payload = json.dumps({
+            "title": f"{count} watched item{'s' if count != 1 else ''} changed",
+            "body": "Open Following to review the latest activity.",
+            "route": "#/my-work/following",
+            "tag": f"stackchain-following-{fingerprint[:16]}",
+            "following_count": count,
+        }, separators=(",", ":"))
+        semaphore = asyncio.Semaphore(max(1, max_concurrency))
+
+        async def dispatch_device(device) -> int:
+            async with semaphore:
+                still_owner = await asyncio.to_thread(
+                    store.acquire_dispatch_lease,
+                    owner,
+                    channel="following",
+                    now=time.time(),
+                    lease_seconds=max(15.0, lease_seconds, send_timeout_seconds + 5.0),
+                )
+                if not still_owner:
+                    return 0
+                try:
+                    operation = (
+                        send(device.subscription, payload)
+                        if send is not None
+                        else send_web_push(device.subscription, payload, configuration)
+                    )
+                    await asyncio.wait_for(operation, timeout=send_timeout_seconds)
+                except Exception as error:
+                    status = getattr(getattr(error, "response", None), "status_code", None)
+                    if isinstance(error, UnsafePushEndpoint) or status in {404, 410}:
+                        await asyncio.to_thread(store.delete_session, device.session_id)
+                    else:
+                        await asyncio.to_thread(
+                            store.mark_delivery_failed,
+                            device.session_id,
+                            "following",
+                            _delivery_failure_reason(error),
+                        )
+                    return 0
+                await asyncio.to_thread(
+                    store.mark_delivery_succeeded, device.session_id, "following"
+                )
+                await asyncio.to_thread(
+                    store.mark_following_delivered, device.session_id, fingerprint
+                )
+                return 1
+
+        results = await asyncio.gather(
+            *(dispatch_device(device) for device in pending), return_exceptions=True
+        )
+        return sum(result for result in results if isinstance(result, int))
+    finally:
+        await asyncio.to_thread(store.release_dispatch_lease, owner, channel="following")
+
+
 async def dispatch_unread_updates(
     store: PushSubscriptionStore,
     configuration: PushConfiguration,
@@ -127,6 +263,7 @@ async def dispatch_unread_updates(
             for item in page.get("items", [])
             if isinstance(item, dict) and str(item.get("id", "")).isdigit()
         }
+        unread_count = min(len(thread_revisions), 9999)
         await asyncio.to_thread(store.reconcile_unread, thread_revisions)
         deliveries = await asyncio.to_thread(store.claim_unseen, thread_revisions)
         if session_statuses is not None:
@@ -195,6 +332,7 @@ async def dispatch_unread_updates(
                             "route": f"#/my-work/update/{thread_id}",
                             "tag": f"stackchain-update-{thread_id}",
                             "notification_id": thread_id,
+                            "unread_count": unread_count,
                         },
                         separators=(",", ":"),
                     )
@@ -214,10 +352,20 @@ async def dispatch_unread_updates(
                             await asyncio.to_thread(
                                 store.delete_session, delivery.session_id
                             )
+                        else:
+                            await asyncio.to_thread(
+                                store.mark_delivery_failed,
+                                delivery.session_id,
+                                "unread",
+                                _delivery_failure_reason(error),
+                            )
                         can_send_digest = False
                         # Leave this device's transient failures unseen for a later
                         # poll instead of paying the endpoint deadline repeatedly.
                         break
+                    await asyncio.to_thread(
+                        store.mark_delivery_succeeded, delivery.session_id, "unread"
+                    )
                     await asyncio.to_thread(
                         store.mark_delivered,
                         delivery.session_id,
@@ -242,6 +390,7 @@ async def dispatch_unread_updates(
                             "route": "#/my-work/updates",
                             "tag": "stackchain-update-digest",
                             "update_count": len(overflow_revisions),
+                            "unread_count": unread_count,
                         },
                         separators=(",", ":"),
                     )
@@ -262,12 +411,21 @@ async def dispatch_unread_updates(
                                 store.delete_session, delivery.session_id
                             )
                         else:
+                            await asyncio.to_thread(
+                                store.mark_delivery_failed,
+                                delivery.session_id,
+                                "unread",
+                                _delivery_failure_reason(error),
+                            )
                             await asyncio.to_thread(
                                 store.mark_digest_pending,
                                 delivery.session_id,
                                 overflow_revisions,
                             )
                         return count
+                    await asyncio.to_thread(
+                        store.mark_delivery_succeeded, delivery.session_id, "unread"
+                    )
                     await asyncio.to_thread(
                         store.mark_delivered,
                         delivery.session_id,
@@ -279,10 +437,19 @@ async def dispatch_unread_updates(
         async def dispatch_device_safely(delivery) -> int:
             try:
                 return await dispatch_device(delivery)
-            except Exception:
+            except Exception as error:
                 # Device-specific validation, persistence, or provider failures
                 # must not cancel healthy siblings. Leave any uncheckpointed
                 # revisions unseen so a later poll can retry them.
+                try:
+                    await asyncio.to_thread(
+                        store.mark_delivery_failed,
+                        delivery.session_id,
+                        "unread",
+                        _delivery_failure_reason(error),
+                    )
+                except Exception:
+                    pass
                 return 0
 
         counts = await asyncio.gather(
@@ -322,6 +489,125 @@ async def dispatch_deadline_reminders(
         await asyncio.to_thread(store.release_dispatch_lease, owner, channel="deadline")
 
 
+async def dispatch_start_day_reminders(
+    store: PushSubscriptionStore,
+    configuration: PushConfiguration,
+    tomorrow: Callable[[], Awaitable[dict]],
+    send: Callable[[dict, str], Awaitable[None]] | None = None,
+    *,
+    now: datetime | None = None,
+    session_statuses: Callable[[list[str]], Awaitable[dict[str, str]]] | None = None,
+    send_timeout_seconds: float = 10.0,
+    lease_seconds: float = 60.0,
+    max_concurrency: int = 8,
+) -> int:
+    if not configuration.enabled:
+        return 0
+    owner = secrets.token_urlsafe(18)
+    acquired = await asyncio.to_thread(
+        store.acquire_dispatch_lease,
+        owner,
+        channel="start-day",
+        now=time.time(),
+        lease_seconds=max(15.0, lease_seconds, send_timeout_seconds + 5.0),
+    )
+    if not acquired:
+        return 0
+    try:
+        devices = await asyncio.to_thread(store.start_day_reminder_devices)
+        if not devices:
+            return 0
+        current = now or datetime.now(timezone.utc)
+        due_devices = []
+        for device in devices:
+            try:
+                local_now = current.astimezone(ZoneInfo(device.timezone))
+            except ZoneInfoNotFoundError:
+                continue
+            if local_now.hour >= device.reminder_hour:
+                due_devices.append((device, local_now.date().isoformat()))
+        if not due_devices:
+            return 0
+        plan = await tomorrow()
+        ids = plan.get("ids") if isinstance(plan, dict) else None
+        plan_date = plan.get("plan_date") if isinstance(plan, dict) else None
+        if not isinstance(ids, list) or not ids or not isinstance(plan_date, str):
+            return 0
+        due_devices = [
+            (device, local_day) for device, local_day in due_devices
+            if local_day >= plan_date and device.delivered_plan_date != plan_date
+        ]
+        if not due_devices:
+            return 0
+        if session_statuses is not None:
+            try:
+                statuses = await session_statuses(
+                    [device.session_id for device, _local_day in due_devices]
+                )
+            except Exception:
+                return 0
+            for device, _local_day in due_devices:
+                if statuses.get(device.session_id) != "active":
+                    await asyncio.to_thread(store.delete_session, device.session_id)
+            due_devices = [
+                pair for pair in due_devices
+                if statuses.get(pair[0].session_id) == "active"
+            ]
+        payload = json.dumps({
+            "title": "Your planned day is ready",
+            "body": "Open Stackchain to prepare Today.",
+            "route": "#/my-work/start-day",
+            "tag": f"stackchain-start-day-{plan_date}",
+            "plan_date": plan_date,
+        }, separators=(",", ":"))
+        semaphore = asyncio.Semaphore(max(1, max_concurrency))
+
+        async def dispatch_device(device) -> int:
+            async with semaphore:
+                still_owner = await asyncio.to_thread(
+                    store.acquire_dispatch_lease,
+                    owner,
+                    channel="start-day",
+                    now=time.time(),
+                    lease_seconds=max(15.0, lease_seconds, send_timeout_seconds + 5.0),
+                )
+                if not still_owner:
+                    return 0
+                try:
+                    operation = (
+                        send(device.subscription, payload) if send is not None
+                        else send_web_push(device.subscription, payload, configuration)
+                    )
+                    await asyncio.wait_for(operation, timeout=send_timeout_seconds)
+                except Exception as error:
+                    status = getattr(getattr(error, "response", None), "status_code", None)
+                    if isinstance(error, UnsafePushEndpoint) or status in {404, 410}:
+                        await asyncio.to_thread(store.delete_session, device.session_id)
+                    else:
+                        await asyncio.to_thread(
+                            store.mark_delivery_failed,
+                            device.session_id,
+                            "start-day",
+                            _delivery_failure_reason(error),
+                        )
+                    return 0
+                await asyncio.to_thread(
+                    store.mark_delivery_succeeded, device.session_id, "start-day"
+                )
+                await asyncio.to_thread(
+                    store.mark_start_day_reminder_delivered, device.session_id, plan_date
+                )
+                return 1
+
+        results = await asyncio.gather(
+            *(dispatch_device(device) for device, _local_day in due_devices),
+            return_exceptions=True,
+        )
+        return sum(result for result in results if isinstance(result, int))
+    finally:
+        await asyncio.to_thread(store.release_dispatch_lease, owner, channel="start-day")
+
+
 async def _dispatch_deadline_reminders_unlocked(
     store: PushSubscriptionStore,
     configuration: PushConfiguration,
@@ -461,9 +747,20 @@ async def _dispatch_deadline_reminders_unlocked(
                 )
                 await asyncio.wait_for(operation, timeout=send_timeout_seconds)
             except Exception as error:
-                if isinstance(error, UnsafePushEndpoint):
+                status = getattr(getattr(error, "response", None), "status_code", None)
+                if isinstance(error, UnsafePushEndpoint) or status in {404, 410}:
                     await asyncio.to_thread(store.delete_session, device.session_id)
+                else:
+                    await asyncio.to_thread(
+                        store.mark_delivery_failed,
+                        device.session_id,
+                        "deadline",
+                        _delivery_failure_reason(error),
+                    )
                 return 0
+            await asyncio.to_thread(
+                store.mark_delivery_succeeded, device.session_id, "deadline"
+            )
             await asyncio.to_thread(
                 store.mark_deadline_reminder_delivered, device.session_id, local_day
             )

src/push_subscription_store.py

@@ -43,12 +43,31 @@ class DeadlineReminderDevice:
     snoozed_until: float | None
 
 
+@dataclass(frozen=True)
+class StartDayReminderDevice:
+    session_id: str
+    subscription: dict
+    timezone: str
+    reminder_hour: int
+    delivered_plan_date: str | None
+
+
+@dataclass(frozen=True)
+class FollowingNotificationDevice:
+    session_id: str
+    subscription: dict
+    delivered_fingerprint: str | None
+
+
 class DisabledPushSubscriptionStore:
     """No-persistence store used when Web Push is not configured."""
 
     def is_subscribed(self, session_id: str) -> bool:
         return False
 
+    def subscription_for_session(self, session_id: str) -> dict | None:
+        return None
+
     def deadline_preferences(
         self, session_id: str, *, now: float | None = None
     ) -> dict:
@@ -63,6 +82,18 @@ class DisabledPushSubscriptionStore:
     def deadline_reminder_devices(self) -> list[DeadlineReminderDevice]:
         return []
 
+    def start_day_preferences(self, session_id: str) -> dict:
+        return {"enabled": False, "timezone": "UTC", "reminder_hour": 9}
+
+    def start_day_reminder_devices(self) -> list[StartDayReminderDevice]:
+        return []
+
+    def following_preferences(self, session_id: str) -> dict:
+        return {"enabled": False}
+
+    def following_notification_devices(self) -> list[FollowingNotificationDevice]:
+        return []
+
     def claim_unseen(self, thread_revisions) -> list[PushDelivery]:
         return []
 
@@ -93,6 +124,18 @@ class DisabledPushSubscriptionStore:
     def mark_deadline_reminder_delivered(self, *args, **kwargs) -> None:
         return None
 
+    def set_start_day_preferences(self, *args, **kwargs) -> None:
+        return None
+
+    def mark_start_day_reminder_delivered(self, *args, **kwargs) -> None:
+        return None
+
+    def set_following_preferences(self, *args, **kwargs) -> None:
+        return None
+
+    def mark_following_delivered(self, *args, **kwargs) -> None:
+        return None
+
     def reconcile_unread(self, *args, **kwargs) -> None:
         return None
 
@@ -102,6 +145,15 @@ class DisabledPushSubscriptionStore:
     def mark_delivered(self, *args, **kwargs) -> None:
         return None
 
+    def delivery_health(self, *args, **kwargs) -> dict:
+        return {}
+
+    def mark_delivery_failed(self, *args, **kwargs) -> None:
+        return None
+
+    def mark_delivery_succeeded(self, *args, **kwargs) -> None:
+        return None
+
 
 def build_push_subscription_store(
     path: str | Path, *, push_enabled: bool
@@ -183,6 +235,33 @@ class PushSubscriptionStore:
                     FOREIGN KEY (session_id) REFERENCES push_subscriptions(session_id)
                         ON DELETE CASCADE
                 );
+                CREATE TABLE IF NOT EXISTS push_delivery_health (
+                    session_id TEXT NOT NULL,
+                    channel TEXT NOT NULL,
+                    consecutive_failures INTEGER NOT NULL DEFAULT 0,
+                    last_attempted_at REAL NOT NULL,
+                    last_succeeded_at REAL,
+                    reason TEXT,
+                    PRIMARY KEY (session_id, channel),
+                    FOREIGN KEY (session_id) REFERENCES push_subscriptions(session_id)
+                        ON DELETE CASCADE
+                );
+                CREATE TABLE IF NOT EXISTS push_start_day_preferences (
+                    session_id TEXT PRIMARY KEY,
+                    enabled INTEGER NOT NULL DEFAULT 0,
+                    timezone TEXT NOT NULL DEFAULT 'UTC',
+                    reminder_hour INTEGER NOT NULL DEFAULT 9,
+                    delivered_plan_date TEXT,
+                    FOREIGN KEY (session_id) REFERENCES push_subscriptions(session_id)
+                        ON DELETE CASCADE
+                );
+                CREATE TABLE IF NOT EXISTS push_following_preferences (
+                    session_id TEXT PRIMARY KEY,
+                    enabled INTEGER NOT NULL DEFAULT 0,
+                    delivered_fingerprint TEXT,
+                    FOREIGN KEY (session_id) REFERENCES push_subscriptions(session_id)
+                        ON DELETE CASCADE
+                );
                 """
             )
             delivery_columns = {
@@ -316,6 +395,67 @@ class PushSubscriptionStore:
                 "SELECT 1 FROM push_subscriptions WHERE session_id = ?", (session_id,)
             ).fetchone() is not None
 
+    def subscription_for_session(self, session_id: str) -> dict | None:
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT subscription_json FROM push_subscriptions WHERE session_id = ?",
+                (session_id,),
+            ).fetchone()
+        return self._open_subscription(session_id, row[0]) if row else None
+
+    def delivery_health(self, session_id: str) -> dict:
+        with self._connect() as connection:
+            rows = connection.execute(
+                """SELECT channel, consecutive_failures, last_attempted_at,
+                          last_succeeded_at, reason
+                   FROM push_delivery_health WHERE session_id = ? ORDER BY channel""",
+                (session_id,),
+            ).fetchall()
+        return {
+            row[0]: {
+                "state": "degraded" if row[1] else "healthy",
+                "consecutive_failures": row[1],
+                "last_attempted_at": row[2],
+                "last_succeeded_at": row[3],
+                "reason": row[4],
+            }
+            for row in rows
+        }
+
+    def mark_delivery_failed(
+        self, session_id: str, channel: str, reason: str, *, now: float | None = None
+    ) -> None:
+        attempted_at = time.time() if now is None else now
+        with self._connect() as connection:
+            connection.execute(
+                """INSERT INTO push_delivery_health(
+                       session_id, channel, consecutive_failures, last_attempted_at, reason
+                   ) VALUES (?, ?, 1, ?, ?)
+                   ON CONFLICT(session_id, channel) DO UPDATE SET
+                       consecutive_failures = consecutive_failures + 1,
+                       last_attempted_at = excluded.last_attempted_at,
+                       reason = excluded.reason""",
+                (session_id, channel, attempted_at, reason),
+            )
+
+    def mark_delivery_succeeded(
+        self, session_id: str, channel: str, *, now: float | None = None
+    ) -> None:
+        attempted_at = time.time() if now is None else now
+        with self._connect() as connection:
+            connection.execute(
+                """INSERT INTO push_delivery_health(
+                       session_id, channel, consecutive_failures, last_attempted_at,
+                       last_succeeded_at, reason
+                   ) VALUES (?, ?, 0, ?, ?, NULL)
+                   ON CONFLICT(session_id, channel) DO UPDATE SET
+                       consecutive_failures = 0,
+                       last_attempted_at = excluded.last_attempted_at,
+                       last_succeeded_at = excluded.last_succeeded_at,
+                       reason = NULL""",
+                (session_id, channel, attempted_at, attempted_at),
+            )
+
     def set_deadline_preferences(
         self, session_id: str, *, enabled: bool, timezone: str, reminder_hour: int,
         reminder_days: int = 2,
@@ -401,6 +541,100 @@ class PushSubscriptionStore:
                 (local_day, session_id),
             )
 
+    def set_start_day_preferences(
+        self, session_id: str, *, enabled: bool, timezone: str, reminder_hour: int
+    ) -> None:
+        with self._connect() as connection:
+            connection.execute(
+                """INSERT INTO push_start_day_preferences(
+                       session_id, enabled, timezone, reminder_hour
+                   ) VALUES (?, ?, ?, ?)
+                   ON CONFLICT(session_id) DO UPDATE SET
+                       enabled = excluded.enabled,
+                       timezone = excluded.timezone,
+                       reminder_hour = excluded.reminder_hour""",
+                (session_id, int(enabled), timezone, reminder_hour),
+            )
+
+    def start_day_preferences(self, session_id: str) -> dict:
+        with self._connect() as connection:
+            row = connection.execute(
+                """SELECT enabled, timezone, reminder_hour
+                   FROM push_start_day_preferences WHERE session_id = ?""",
+                (session_id,),
+            ).fetchone()
+        return {
+            "enabled": bool(row[0]) if row else False,
+            "timezone": row[1] if row else "UTC",
+            "reminder_hour": row[2] if row else 9,
+        }
+
+    def start_day_reminder_devices(self) -> list[StartDayReminderDevice]:
+        with self._connect() as connection:
+            rows = connection.execute(
+                """SELECT s.session_id, s.subscription_json, p.timezone,
+                          p.reminder_hour, p.delivered_plan_date
+                   FROM push_subscriptions s
+                   JOIN push_start_day_preferences p ON p.session_id = s.session_id
+                   WHERE p.enabled = 1 ORDER BY s.session_id"""
+            ).fetchall()
+        return [
+            StartDayReminderDevice(
+                row[0], self._open_subscription(row[0], row[1]), row[2], row[3], row[4]
+            )
+            for row in rows
+        ]
+
+    def mark_start_day_reminder_delivered(
+        self, session_id: str, plan_date: str
+    ) -> None:
+        with self._connect() as connection:
+            connection.execute(
+                """UPDATE push_start_day_preferences SET delivered_plan_date = ?
+                   WHERE session_id = ? AND enabled = 1""",
+                (plan_date, session_id),
+            )
+
+    def set_following_preferences(self, session_id: str, *, enabled: bool) -> None:
+        with self._connect() as connection:
+            connection.execute(
+                """INSERT INTO push_following_preferences(session_id, enabled)
+                   VALUES (?, ?)
+                   ON CONFLICT(session_id) DO UPDATE SET enabled = excluded.enabled""",
+                (session_id, int(enabled)),
+            )
+
+    def following_preferences(self, session_id: str) -> dict:
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT enabled FROM push_following_preferences WHERE session_id = ?",
+                (session_id,),
+            ).fetchone()
+        return {"enabled": bool(row[0]) if row else False}
+
+    def following_notification_devices(self) -> list[FollowingNotificationDevice]:
+        with self._connect() as connection:
+            rows = connection.execute(
+                """SELECT s.session_id, s.subscription_json, p.delivered_fingerprint
+                   FROM push_subscriptions s
+                   JOIN push_following_preferences p ON p.session_id = s.session_id
+                   WHERE p.enabled = 1 ORDER BY s.session_id"""
+            ).fetchall()
+        return [
+            FollowingNotificationDevice(
+                row[0], self._open_subscription(row[0], row[1]), row[2]
+            )
+            for row in rows
+        ]
+
+    def mark_following_delivered(self, session_id: str, fingerprint: str) -> None:
+        with self._connect() as connection:
+            connection.execute(
+                """UPDATE push_following_preferences SET delivered_fingerprint = ?
+                   WHERE session_id = ? AND enabled = 1""",
+                (fingerprint, session_id),
+            )
+
     def claim_unseen(
         self, thread_revisions: Mapping[int, str] | Iterable[int | tuple[int, str]]
     ) -> list[PushDelivery]:

src/request_boundary.py

@@ -8,7 +8,7 @@ API_MUTATION_BODY_LIMIT = 64 * 1024
 ISSUE_ATTACHMENT_BODY_LIMIT = 2 * 1024 * 1024 + 64 * 1024
 LEGACY_JSON_ATTACHMENT_BODY_LIMIT = 3 * 1024 * 1024
 UNFILED_DRAFT_SYNC_BODY_LIMIT = 17 * 1024 * 1024
-MUTATION_METHODS = frozenset({"POST", "PUT", "PATCH"})
+MUTATION_METHODS = frozenset({"POST", "PUT", "PATCH", "DELETE"})
 
 
 def request_body_limit(method: str, path: str) -> int | None:

src/saved_search_store.py

@@ -1,11 +1,11 @@
 """Durable, account-scoped saved Search views."""
 
-import json
 import re
 import sqlite3
 from pathlib import Path
 
 from src.private_state import connect_private_sqlite
+from src.state_encryption import PrivateStateCipher, PrivateStateEncryptionError, private_state_encryption_config
 
 
 _REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
@@ -21,10 +21,21 @@ class SavedSearchConflict(ValueError):
 
 
 class SavedSearchStore:
-    def __init__(self, path: str | Path, *, limit: int = 20, timeout: float = 1.0):
+    def __init__(
+        self,
+        path: str | Path,
+        *,
+        limit: int = 20,
+        timeout: float = 1.0,
+        encryption_key: bytes | None = None,
+    ):
         self.path = Path(path)
         self.limit = limit
         self.timeout = timeout
+        self._cipher = PrivateStateCipher(
+            encryption_key if encryption_key is not None else private_state_encryption_config(),
+            store="saved-searches",
+        )
         self._initialize()
 
     def _initialize(self) -> None:
@@ -50,19 +61,31 @@ class SavedSearchStore:
             raise ValueError("login is required")
         return normalized
 
-    @staticmethod
-    def _snapshot(row) -> dict:
-        return {"revision": 0, "views": []} if row is None else {
-            "revision": int(row[0]), "views": json.loads(row[1])
-        }
+    def _snapshot(self, row, login: str) -> tuple[dict, bool]:
+        if row is None:
+            return {"revision": 0, "views": []}, False
+        views, legacy = self._cipher.open(row[1], binding=f"views:{login}")
+        if not isinstance(views, list):
+            raise PrivateStateEncryptionError("private state could not be decrypted")
+        return {"revision": int(row[0]), "views": views}, legacy
+
+    def _sealed_views(self, login: str, views: list[dict]) -> str:
+        return self._cipher.seal(views, binding=f"views:{login}")
 
     def get(self, login: str) -> dict:
+        login = self._login(login)
         with self._connect() as connection:
             row = connection.execute(
                 "SELECT revision, views FROM saved_searches WHERE login = ?",
-                (self._login(login),),
+                (login,),
             ).fetchone()
-        return self._snapshot(row)
+            snapshot, legacy = self._snapshot(row, login)
+            if row is not None and legacy:
+                connection.execute(
+                    "UPDATE saved_searches SET views = ? WHERE login = ? AND views = ?",
+                    (self._sealed_views(login, snapshot["views"]), login, row[1]),
+                )
+        return snapshot
 
     def _normalize(self, views: list[dict]) -> list[dict]:
         if not isinstance(views, list):
@@ -113,13 +136,13 @@ class SavedSearchStore:
         if not isinstance(expected_revision, int) or isinstance(expected_revision, bool) or expected_revision < 0:
             raise ValueError("revision is invalid")
         normalized = self._normalize(views)
-        serialized = json.dumps(normalized, separators=(",", ":"))
+        serialized = self._sealed_views(login, normalized)
         with self._connect() as connection:
             connection.execute("BEGIN IMMEDIATE")
             row = connection.execute(
                 "SELECT revision, views FROM saved_searches WHERE login = ?", (login,)
             ).fetchone()
-            current = self._snapshot(row)
+            current, _legacy = self._snapshot(row, login)
             if current["revision"] != expected_revision:
                 raise SavedSearchConflict(current)
             revision = expected_revision + 1

src/security_event_store.py

@@ -7,6 +7,11 @@ from pathlib import Path
 from typing import Callable
 
 from src.private_state import connect_private_sqlite
+from src.state_encryption import (
+    PrivateStateCipher,
+    PrivateStateEncryptionError,
+    private_state_encryption_config,
+)
 
 
 class SecurityEventStoreError(RuntimeError):
@@ -39,12 +44,22 @@ class SecurityEventStore:
         max_events: int = 10_000,
         retention_seconds: int = 90 * 24 * 60 * 60,
         lock_timeout_seconds: float = 0.1,
+        encryption_key: bytes | None = None,
     ) -> None:
         self.path = Path(path)
         self.clock = clock
         self.max_events = max(1, max_events)
         self.retention_seconds = max(1, retention_seconds)
         self.lock_timeout_seconds = lock_timeout_seconds
+        try:
+            self._cipher = PrivateStateCipher(
+                encryption_key if encryption_key is not None else private_state_encryption_config(),
+                store="security-events",
+            )
+        except PrivateStateEncryptionError as exc:
+            raise SecurityEventStoreError(
+                "Security activity is temporarily unavailable"
+            ) from exc
 
     @staticmethod
     def _bounded(value: str | None, limit: int) -> str | None:
@@ -60,10 +75,7 @@ class SecurityEventStore:
                 """
                 CREATE TABLE IF NOT EXISTS security_events (
                     id INTEGER PRIMARY KEY AUTOINCREMENT,
-                    kind TEXT NOT NULL,
-                    method TEXT,
-                    device_label TEXT,
-                    target TEXT,
+                    payload TEXT,
                     created_at INTEGER NOT NULL,
                     status TEXT NOT NULL DEFAULT 'completed',
                     operation_id TEXT
@@ -81,6 +93,11 @@ class SecurityEventStore:
                 connection.execute(
                     "ALTER TABLE security_events ADD COLUMN operation_id TEXT"
                 )
+            plaintext_columns = {"kind", "method", "device_label", "target"}
+            if "payload" not in columns or plaintext_columns.intersection(columns):
+                self._migrate_plaintext(
+                    connection, has_payload="payload" in columns
+                )
             connection.execute(
                 "CREATE INDEX IF NOT EXISTS security_events_created "
                 "ON security_events(created_at DESC, id DESC)"
@@ -95,6 +112,56 @@ class SecurityEventStore:
                 "Security activity is temporarily unavailable"
             ) from exc
 
+    def _migrate_plaintext(
+        self, connection: sqlite3.Connection, *, has_payload: bool
+    ) -> None:
+        connection.execute("PRAGMA secure_delete = ON")
+        payload_column = "payload," if has_payload else "NULL AS payload,"
+        rows = connection.execute(
+            f"SELECT id, {payload_column} kind, method, device_label, target, "
+            "created_at, status, operation_id FROM security_events ORDER BY id"
+        ).fetchall()
+        connection.execute(
+            """
+            CREATE TABLE security_events_encrypted (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                payload TEXT,
+                created_at INTEGER NOT NULL,
+                status TEXT NOT NULL DEFAULT 'completed',
+                operation_id TEXT
+            )
+            """
+        )
+        for (
+            event_id,
+            payload,
+            kind,
+            method,
+            device_label,
+            target,
+            created_at,
+            status,
+            operation_id,
+        ) in rows:
+            connection.execute(
+                "INSERT INTO security_events_encrypted "
+                "(id, payload, created_at, status, operation_id) VALUES (?, ?, ?, ?, ?)",
+                (
+                    event_id,
+                    payload
+                    or self._seal_event(
+                        event_id, kind, method, device_label, target
+                    ),
+                    created_at,
+                    status,
+                    operation_id,
+                ),
+            )
+        connection.execute("DROP TABLE security_events")
+        connection.execute(
+            "ALTER TABLE security_events_encrypted RENAME TO security_events"
+        )
+
     def _prune(self, connection: sqlite3.Connection, now: int) -> None:
         connection.execute(
             "DELETE FROM security_events WHERE created_at < ?",
@@ -106,6 +173,24 @@ class SecurityEventStore:
             (self.max_events,),
         )
 
+    def _seal_event(
+        self,
+        event_id: int,
+        kind: str,
+        method: str | None,
+        device_label: str | None,
+        target: str | None,
+    ) -> str:
+        return self._cipher.seal(
+            {
+                "kind": self._bounded(kind, 48) or "security_event",
+                "method": self._bounded(method, 32),
+                "device_label": self._bounded(device_label, 64),
+                "target": self._bounded(target, 255),
+            },
+            binding=f"event:{event_id}",
+        )
+
     def record(
         self,
         kind: str,
@@ -117,16 +202,17 @@ class SecurityEventStore:
         now = int(self.clock())
         try:
             with self._connect() as connection:
+                cursor = connection.execute(
+                    "INSERT INTO security_events(created_at, status) VALUES (?, 'completed')",
+                    (now,),
+                )
+                event_id = cursor.lastrowid
+                payload = self._seal_event(
+                    event_id, kind, method, device_label, target
+                )
                 connection.execute(
-                    "INSERT INTO security_events(kind, method, device_label, target, created_at, status) "
-                    "VALUES (?, ?, ?, ?, ?, 'completed')",
-                    (
-                        self._bounded(kind, 48) or "security_event",
-                        self._bounded(method, 32),
-                        self._bounded(device_label, 64),
-                        self._bounded(target, 255),
-                        now,
-                    ),
+                    "UPDATE security_events SET payload = ? WHERE id = ?",
+                    (payload, event_id),
                 )
                 self._prune(connection, now)
         except (OSError, sqlite3.Error) as exc:
@@ -146,16 +232,19 @@ class SecurityEventStore:
         operation_id = secrets.token_urlsafe(24)
         try:
             with self._connect() as connection:
+                cursor = connection.execute(
+                    "INSERT INTO security_events(created_at, status, operation_id) "
+                    "VALUES (?, 'pending', ?)",
+                    (now, operation_id),
+                )
+                event_id = cursor.lastrowid
                 connection.execute(
-                    "INSERT INTO security_events(kind, method, device_label, target, created_at, status, operation_id) "
-                    "VALUES (?, ?, ?, ?, ?, 'pending', ?)",
+                    "UPDATE security_events SET payload = ? WHERE id = ?",
                     (
-                        self._bounded(kind, 48) or "security_event",
-                        self._bounded(method, 32),
-                        self._bounded(device_label, 64),
-                        self._bounded(target, 255),
-                        now,
-                        operation_id,
+                        self._seal_event(
+                            event_id, kind, method, device_label, target
+                        ),
+                        event_id,
                     ),
                 )
                 self._prune(connection, now)
@@ -204,7 +293,7 @@ class SecurityEventStore:
         try:
             with self._connect() as connection:
                 rows = connection.execute(
-                    "SELECT id, kind, method, device_label, target, created_at, status "
+                    "SELECT id, payload, created_at, status "
                     f"FROM security_events {where} ORDER BY id DESC LIMIT ?",
                     parameters,
                 ).fetchall()
@@ -214,7 +303,32 @@ class SecurityEventStore:
             ) from exc
         has_more = len(rows) > bounded_limit
         visible = rows[:bounded_limit]
+        events = []
+        try:
+            for event_id, payload, created_at, status in visible:
+                value, _legacy = self._cipher.open(
+                    payload, binding=f"event:{event_id}"
+                )
+                if not isinstance(value, dict) or not isinstance(value.get("kind"), str):
+                    raise PrivateStateEncryptionError(
+                        "private state could not be decrypted"
+                    )
+                events.append(
+                    SecurityEvent(
+                        event_id,
+                        value["kind"],
+                        value.get("method"),
+                        value.get("device_label"),
+                        value.get("target"),
+                        created_at,
+                        status,
+                    )
+                )
+        except PrivateStateEncryptionError as exc:
+            raise SecurityEventStoreError(
+                "Security activity is temporarily unavailable"
+            ) from exc
         return SecurityEventPage(
-            events=[SecurityEvent(*row) for row in visible],
+            events=events,
             next_cursor=visible[-1][0] if has_more else None,
         )

src/session_store.py

@@ -18,10 +18,20 @@ class SessionStatus(str):
     """String-compatible status carrying the server-confirmed idle deadline."""
 
     idle_expires_at: int | None
+    principal_id: int | None
+    principal_login: str | None
 
-    def __new__(cls, value: str, idle_expires_at: int | None = None):
+    def __new__(
+        cls,
+        value: str,
+        idle_expires_at: int | None = None,
+        principal_id: int | None = None,
+        principal_login: str | None = None,
+    ):
         instance = super().__new__(cls, value)
         instance.idle_expires_at = idle_expires_at
+        instance.principal_id = principal_id
+        instance.principal_login = principal_login
         return instance
 
 
@@ -71,7 +81,9 @@ class SessionStore:
                         management_id TEXT,
                         device_label TEXT,
                         created_at INTEGER,
-                        last_active_at INTEGER
+                        last_active_at INTEGER,
+                        principal_id INTEGER,
+                        principal_login TEXT
                     )
                     """
                 )
@@ -98,6 +110,8 @@ class SessionStore:
                     "device_label": "TEXT",
                     "created_at": "INTEGER",
                     "last_active_at": "INTEGER",
+                    "principal_id": "INTEGER",
+                    "principal_login": "TEXT",
                 }
                 for name, column_type in additions.items():
                     if name not in columns:
@@ -135,6 +149,8 @@ class SessionStore:
         *,
         device_label: str = "This device",
         management_id: str | None = None,
+        principal_id: int | None = None,
+        principal_login: str | None = None,
     ) -> None:
         label = " ".join(str(device_label).split())[:64] or "This device"
         now = int(self.clock())
@@ -145,8 +161,9 @@ class SessionStore:
                 )
                 connection.execute(
                     "INSERT INTO active_sessions("
-                    "session_hash, expires_at, management_id, device_label, created_at, last_active_at"
-                    ") VALUES (?, ?, ?, ?, ?, ?)",
+                    "session_hash, expires_at, management_id, device_label, created_at, last_active_at, "
+                    "principal_id, principal_login"
+                    ") VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
                     (
                         self._digest(session_id),
                         expires_at,
@@ -154,6 +171,8 @@ class SessionStore:
                         label,
                         now,
                         now,
+                        principal_id,
+                        principal_login,
                     ),
                 )
         except (OSError, sqlite3.Error) as exc:
@@ -176,7 +195,8 @@ class SessionStore:
     ) -> str:
         now = int(self.clock())
         query = (
-            "SELECT expires_at, last_active_at FROM active_sessions "
+            "SELECT expires_at, last_active_at, principal_id, principal_login "
+            "FROM active_sessions "
             "WHERE session_hash = ?"
         )
         parameters = (self._digest(session_id),)
@@ -185,7 +205,11 @@ class SessionStore:
                 with self._connect() as connection:
                     row = connection.execute(query, parameters).fetchone()
             except sqlite3.OperationalError as exc:
-                if "no such column: last_active_at" not in str(exc):
+                missing_migrated_column = any(
+                    f"no such column: {name}" in str(exc)
+                    for name in ("last_active_at", "principal_id", "principal_login")
+                )
+                if not missing_migrated_column:
                     raise
                 with self._connect(initialize=True) as connection:
                     row = connection.execute(query, parameters).fetchone()
@@ -196,7 +220,7 @@ class SessionStore:
         idle_expires_at = min(row[0], row[1] + max(1, idle_timeout_seconds))
         if idle_expires_at <= now:
             return SessionStatus("idle", idle_expires_at)
-        return SessionStatus("active", idle_expires_at)
+        return SessionStatus("active", idle_expires_at, row[2], row[3])
 
     def touch(
         self, session_id: str, expires_at: int, *, idle_timeout_seconds: int
@@ -279,7 +303,11 @@ class SessionStore:
         )[management_id]
 
     def managed_statuses(
-        self, management_ids, *, idle_timeout_seconds: int
+        self,
+        management_ids,
+        *,
+        idle_timeout_seconds: int,
+        expected_principal_id: int | None = None,
     ) -> dict[str, str]:
         """Return authorization states for durable device identifiers in one read."""
         requested = set(management_ids)
@@ -290,7 +318,7 @@ class SessionStore:
             with self._connect() as connection:
                 placeholders = ",".join("?" for _ in requested)
                 rows = connection.execute(
-                    "SELECT management_id, expires_at, last_active_at "
+                    "SELECT management_id, expires_at, last_active_at, principal_id "
                     f"FROM active_sessions WHERE management_id IN ({placeholders})",
                     tuple(requested),
                 ).fetchall()
@@ -305,6 +333,8 @@ class SessionStore:
                 statuses[management_id] = "revoked"
             elif row[1] + idle_timeout <= now:
                 statuses[management_id] = "idle"
+            elif expected_principal_id is not None and row[2] != expected_principal_id:
+                statuses[management_id] = "principal_mismatch"
             else:
                 statuses[management_id] = "active"
         return statuses

src/state_encryption.py

@@ -6,6 +6,8 @@ import base64
 import binascii
 import json
 import os
+import re
+from collections.abc import Mapping
 
 from cryptography.exceptions import InvalidTag
 from cryptography.hazmat.primitives.ciphers.aead import AESGCM
@@ -16,7 +18,7 @@ class PrivateStateEncryptionError(RuntimeError):
 
 
 def decode_private_state_encryption_key(encoded: str) -> bytes:
-    """Decode the independently injected 256-bit private-state key."""
+    """Decode an independently injected 256-bit private-state key."""
     try:
         key = base64.b64decode(encoded, validate=True)
     except (binascii.Error, ValueError) as error:
@@ -31,38 +33,130 @@ def decode_private_state_encryption_key(encoded: str) -> bytes:
 
 
 def private_state_encryption_key() -> bytes:
+    """Load the legacy single key setting."""
     return decode_private_state_encryption_key(
         os.getenv("STACKCHAIN_PRIVATE_STATE_ENCRYPTION_KEY", "")
     )
 
 
+_KEY_ID = re.compile(r"^[A-Za-z0-9_-]{1,32}$")
+_MAX_KEYS = 4
+
+
+def decode_private_state_encryption_keyring(
+    encoded: str, active_key_id: str
+) -> tuple[dict[str, bytes], str]:
+    """Decode a bounded key-ID-to-key JSON object and validate its active key."""
+    try:
+        raw = json.loads(encoded)
+    except (TypeError, json.JSONDecodeError) as error:
+        raise PrivateStateEncryptionError(
+            "private state encryption keyring is invalid"
+        ) from error
+    if not isinstance(raw, dict) or not raw:
+        raise PrivateStateEncryptionError("private state encryption keyring is invalid")
+    if len(raw) > _MAX_KEYS:
+        raise PrivateStateEncryptionError(
+            f"private state encryption keyring supports at most {_MAX_KEYS} keys"
+        )
+    keys: dict[str, bytes] = {}
+    for key_id, value in raw.items():
+        if not isinstance(key_id, str) or not _KEY_ID.fullmatch(key_id):
+            raise PrivateStateEncryptionError("private state encryption key ID is invalid")
+        if not isinstance(value, str):
+            raise PrivateStateEncryptionError("private state encryption keyring is invalid")
+        keys[key_id] = decode_private_state_encryption_key(value)
+    if active_key_id not in keys:
+        raise PrivateStateEncryptionError(
+            "private state active key is missing from the keyring"
+        )
+    return keys, active_key_id
+
+
+def private_state_encryption_config() -> bytes | tuple[dict[str, bytes], str]:
+    """Load a rotation keyring when configured, otherwise the legacy single key."""
+    encoded = os.getenv("STACKCHAIN_PRIVATE_STATE_ENCRYPTION_KEYS", "")
+    active = os.getenv("STACKCHAIN_PRIVATE_STATE_ACTIVE_KEY_ID", "")
+    if encoded or active:
+        return decode_private_state_encryption_keyring(encoded, active)
+    return private_state_encryption_key()
+
+
 class PrivateStateCipher:
     """Seal JSON values with store-specific authenticated context."""
 
-    def __init__(self, key: bytes, *, store: str):
-        if not isinstance(key, bytes) or len(key) != 32:
-            raise PrivateStateEncryptionError(
-                "private state encryption requires exactly 32 key bytes"
-            )
+    def __init__(
+        self,
+        key: bytes | Mapping[str, bytes] | tuple[dict[str, bytes], str],
+        *,
+        store: str,
+        active_key_id: str | None = None,
+    ):
+        if isinstance(key, tuple):
+            key, active_key_id = key
+        if isinstance(key, Mapping):
+            if not key or len(key) > _MAX_KEYS or active_key_id not in key:
+                raise PrivateStateEncryptionError(
+                    "private state encryption keyring configuration is invalid"
+                )
+            ciphers: dict[str, AESGCM] = {}
+            for key_id, raw_key in key.items():
+                if not isinstance(key_id, str) or not _KEY_ID.fullmatch(key_id):
+                    raise PrivateStateEncryptionError(
+                        "private state encryption key ID is invalid"
+                    )
+                if not isinstance(raw_key, bytes) or len(raw_key) != 32:
+                    raise PrivateStateEncryptionError(
+                        "private state encryption requires exactly 32 key bytes"
+                    )
+                ciphers[key_id] = AESGCM(raw_key)
+            self._ciphers = ciphers
+            self._active_key_id = active_key_id
+            self._legacy_cipher = None
+        else:
+            if not isinstance(key, bytes) or len(key) != 32:
+                raise PrivateStateEncryptionError(
+                    "private state encryption requires exactly 32 key bytes"
+                )
+            self._ciphers = {}
+            self._active_key_id = None
+            self._legacy_cipher = AESGCM(key)
         if not store or "\0" in store:
             raise ValueError("private state store identity is invalid")
-        self._cipher = AESGCM(key)
         self._store = store
 
-    def _aad(self, binding: str) -> bytes:
-        return f"stackchain:private-state:v1\0{self._store}\0{binding}".encode()
+    def _aad(self, binding: str, *, version: str = "v1", key_id: str = "") -> bytes:
+        prefix = f"stackchain:private-state:{version}\0{self._store}\0{binding}"
+        if version == "v2":
+            prefix += f"\0{key_id}"
+        return prefix.encode()
 
     def seal(self, value: object, *, binding: str = "singleton") -> str:
         plaintext = json.dumps(value, separators=(",", ":")).encode()
         nonce = os.urandom(12)
-        sealed = nonce + self._cipher.encrypt(nonce, plaintext, self._aad(binding))
+        if self._active_key_id is not None:
+            key_id = self._active_key_id
+            sealed = nonce + self._ciphers[key_id].encrypt(
+                nonce, plaintext, self._aad(binding, version="v2", key_id=key_id)
+            )
+            return f"v2:{key_id}:" + base64.urlsafe_b64encode(sealed).decode()
+        sealed = nonce + self._legacy_cipher.encrypt(
+            nonce, plaintext, self._aad(binding)
+        )
         return "v1:" + base64.urlsafe_b64encode(sealed).decode()
 
+    @staticmethod
+    def _decode_sealed(payload: str) -> bytes:
+        sealed = base64.b64decode(payload, altchars=b"-_", validate=True)
+        if len(sealed) < 28:
+            raise ValueError("encrypted payload is too short")
+        return sealed
+
     def open(self, payload: str, *, binding: str = "singleton") -> tuple[object, bool]:
-        """Return the decoded value and whether plaintext migration is required."""
+        """Return the decoded value and whether active-key rewrapping is required."""
         if not isinstance(payload, str):
             raise PrivateStateEncryptionError("private state could not be decrypted")
-        if not payload.startswith("v1:"):
+        if not payload.startswith(("v1:", "v2:")):
             try:
                 return json.loads(payload), True
             except (TypeError, json.JSONDecodeError) as error:
@@ -70,13 +164,37 @@ class PrivateStateCipher:
                     "private state could not be decrypted"
                 ) from error
         try:
-            sealed = base64.b64decode(payload[3:], altchars=b"-_", validate=True)
-            if len(sealed) < 28:
-                raise ValueError("encrypted payload is too short")
-            plaintext = self._cipher.decrypt(
-                sealed[:12], sealed[12:], self._aad(binding)
+            if payload.startswith("v2:"):
+                _, key_id, encoded = payload.split(":", 2)
+                cipher = self._ciphers.get(key_id)
+                if cipher is None:
+                    raise ValueError("encrypted payload uses an unavailable key")
+                sealed = self._decode_sealed(encoded)
+                plaintext = cipher.decrypt(
+                    sealed[:12],
+                    sealed[12:],
+                    self._aad(binding, version="v2", key_id=key_id),
+                )
+                return json.loads(plaintext), key_id != self._active_key_id
+
+            sealed = self._decode_sealed(payload[3:])
+            candidates = (
+                [self._legacy_cipher]
+                if self._legacy_cipher is not None
+                else list(self._ciphers.values())
             )
-            return json.loads(plaintext), False
+            plaintext = None
+            for cipher in candidates:
+                try:
+                    plaintext = cipher.decrypt(
+                        sealed[:12], sealed[12:], self._aad(binding)
+                    )
+                    break
+                except InvalidTag:
+                    continue
+            if plaintext is None:
+                raise InvalidTag
+            return json.loads(plaintext), self._active_key_id is not None
         except (
             binascii.Error,
             InvalidTag,

tests/e2e/fake_gitea.py

@@ -125,6 +125,8 @@ class FakeGiteaHandler(BaseHTTPRequestHandler):
                 number = 0
             comments = self.server.activity_comments.get(number, [])
             self._json(200, comments, **{"X-Total-Count": str(len(comments))})
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/subscriptions/check"):
+            self._json(200, {"subscribed": False, "ignored": False})
         elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/dependencies"):
             self._json(200, [])
         elif path.startswith("/api/v1/repos/acme/mobile/issues/"):

tests/e2e/test_mobile_address_review_feedback_release.py

@@ -0,0 +1,133 @@
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_author_addresses_every_review_comment_and_requests_updated_review(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "state": "open",
+        "draft": False,
+        "mergeable": True,
+        "merged": False,
+        "ci_state": "success",
+        "head_sha": "current-head",
+        "reviewers": [{
+            "review_id": 42,
+            "login": "sam",
+            "status": "changes_requested",
+            "head_sha": "current-head",
+            "blocking": True,
+            "comments": [
+                {"id": 99, "path": "src/api.py", "body": "Handle the empty state.", "line": 12},
+                {"id": 100, "path": "frontend/app.js", "body": "Explain the retry.", "line": 8},
+            ],
+        }],
+        "files": [
+            {"filename": "src/api.py", "status": "modified", "diff_available": True,
+             "diff_lines": ["@@ -11 +11 @@", "+return empty"]},
+            {"filename": "frontend/app.js", "status": "modified", "diff_available": True,
+             "diff_lines": ["@@ -7 +7 @@", "+showRetry()"]},
+        ],
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                globalThis.confirm = () => true;
+                globalThis.feedbackCalls = [];
+                globalThis.feedbackStored = new Map();
+                globalThis.feedbackStorage = {
+                    getItem:key => feedbackStored.has(key) ? feedbackStored.get(key) : null,
+                    setItem:(key, value) => feedbackStored.set(key, String(value)),
+                    removeItem:key => feedbackStored.delete(key),
+                };
+                globalThis.feedbackItem = {repository:'stackchain/api', number:7, key:'stackchain/api#7'};
+                globalThis.feedbackDetail = detail;
+                globalThis.feedbackController = createPullSheet({
+                    storage: feedbackStorage,
+                    createOperationId: () => 'feedback-operation',
+                    fetchJson: async (path, options = {}) => {
+                        feedbackCalls.push({path, options});
+                        if (path.endsWith('/comments')) return {id: 501, body:JSON.parse(options.body).body};
+                        if (path.endsWith('/request-review')) return {
+                            number:7, reviewer:'sam', head_sha:'current-head', requested_reviewers:['sam']
+                        };
+                        throw new Error('unexpected request');
+                    },
+                });
+                document.querySelector('#pull-sheet').classList.add('open');
+                document.querySelector('#pull-review').open = true;
+                document.querySelector('#pull-files').innerHTML = detail.files.map((file, index) =>
+                    createPullSheet.renderFile(file, index, false, value => String(value)
+                        .replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;'))
+                ).join('');
+                createPullSheet.bindFeedbackControls(document, feedbackController,
+                    () => feedbackItem, () => feedbackDetail, () => 'timmy');
+                createPullSheet.review(detail, null, document);
+            }""",
+            detail,
+        )
+
+        page.locator(".pull-review-feedback summary").click()
+        page.locator('[data-address-review-feedback="42"]').click()
+        assert page.locator("#pull-feedback-progress").text_content() == "Comment 1 of 2"
+        assert page.locator("#finish-pull-feedback").is_disabled()
+        page.locator('[data-feedback-disposition="addressed"]').click()
+        page.locator("#next-pull-feedback").click()
+        page.locator("#pull-feedback-note").fill("Added a visible retry message.")
+        page.locator('[data-feedback-disposition="discussion"]').click()
+        assert not page.locator("#finish-pull-feedback").is_disabled()
+        page.locator("#finish-pull-feedback").click()
+        page.locator("#request-feedback-review").click()
+
+        page.wait_for_function("feedbackCalls.length === 2")
+        result = page.evaluate(
+            """() => ({
+                calls:feedbackCalls,
+                scrollWidth:document.documentElement.scrollWidth,
+                clientWidth:document.documentElement.clientWidth,
+                controlHeights:Array.from(document.querySelectorAll('#pull-feedback-pass button'))
+                    .filter(button => !button.hidden).map(button => button.getBoundingClientRect().height),
+                status:document.querySelector('#pull-feedback-status').textContent,
+                secondExpanded:document.querySelector('[data-pull-filename="frontend/app.js"] .pull-file-toggle')
+                    .getAttribute('aria-expanded'),
+                persisted:Array.from(feedbackStored.keys()).some(key => key.includes('feedback-pass')),
+            })"""
+        )
+        result["resetHidden"] = page.evaluate(
+            """() => {
+                createPullSheet.resetReviewRequestControls(document, feedbackDetail);
+                return document.querySelector('#pull-feedback-pass').hidden;
+            }"""
+        )
+        browser.close()
+
+    assert result["scrollWidth"] <= result["clientWidth"]
+    assert min(result["controlHeights"]) >= 44
+    assert result["secondExpanded"] == "true"
+    assert result["persisted"] is True
+    assert result["resetHidden"] is True
+    assert result["calls"][0]["path"].endswith("/comments")
+    assert result["calls"][0]["options"]["headers"]["Idempotency-Key"] == "feedback-operation"
+    summary = result["calls"][0]["options"]["body"]
+    assert "Handle the empty state" in summary
+    assert "Addressed" in summary
+    assert "Needs discussion" in summary
+    assert "Added a visible retry message" in summary
+    assert result["calls"][1]["path"].endswith("/request-review")
+    assert '"reviewer":"sam"' in result["calls"][1]["options"]["body"]
+    assert result["status"] == "Response posted; updated review requested from @sam."

tests/e2e/test_mobile_apply_pull_feedback_fix_release.py

@@ -0,0 +1,85 @@
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_author_commits_one_review_feedback_fix(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "state": "open", "merged": False, "head_sha": "abc1234",
+        "capabilities": {"authored": True},
+        "reviewers": [{
+            "review_id": 42, "login": "sam", "status": "changes_requested",
+            "head_sha": "abc1234", "blocking": True, "feedback_state": "loaded",
+            "comments": [{"id": 99, "path": "src/api.py", "body": "Handle empty state.", "line": 12}],
+        }],
+        "files": [{"filename": "src/api.py", "status": "modified", "diff_available": True,
+                   "diff_lines": ["@@ -12 +12 @@", "+return empty"]}],
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                globalThis.confirm = () => true;
+                globalThis.fixCalls = [];
+                globalThis.fixItem = {repository:'stackchain/api', number:7, key:'stackchain/api#7'};
+                globalThis.fixDetail = detail;
+                globalThis.fixController = createPullSheet({fetchJson: async (path, options = {}) => {
+                    fixCalls.push({path, options});
+                    if ((options.method || 'GET') === 'GET') return {
+                        path:'src/api.py', head_sha:'abc1234', blob_sha:'blob123', content:'return empty\\n'
+                    };
+                    return {path:'src/api.py', previous_head_sha:'abc1234', head_sha:'def5678', blob_sha:'blob456'};
+                }});
+                document.querySelector('#pull-sheet').classList.add('open');
+                document.querySelector('#pull-review').open = true;
+                document.querySelector('#pull-files').innerHTML = detail.files.map((file, index) =>
+                    createPullSheet.renderFile(file, index, false, value => String(value))
+                ).join('');
+                createPullSheet.bindFeedbackControls(document, fixController,
+                    () => fixItem, () => fixDetail, () => 'alex');
+                createPullSheet.review(detail, null, document);
+            }""",
+            detail,
+        )
+
+        page.locator(".pull-review-feedback summary").click()
+        page.locator('[data-address-review-feedback="42"]').click()
+        page.locator("#make-pull-feedback-fix").click()
+        page.locator("#pull-feedback-file-content").fill("return handled\n")
+        page.locator("#pull-feedback-commit-message").fill("fix: handle empty state")
+        page.locator("#commit-pull-feedback-fix").click()
+        page.wait_for_function("fixCalls.length === 2")
+        result = page.evaluate("""() => ({
+            calls:fixCalls, head:fixDetail.head_sha,
+            editorHidden:document.querySelector('#pull-feedback-file-editor').hidden,
+            status:document.querySelector('#pull-feedback-status').textContent,
+            scrollWidth:document.documentElement.scrollWidth,
+            clientWidth:document.documentElement.clientWidth,
+            heights:Array.from(document.querySelectorAll('#pull-feedback-pass button'))
+                .filter(button => button.getClientRects().length > 0).map(button => button.getBoundingClientRect().height),
+        })""")
+        browser.close()
+
+    assert result["scrollWidth"] <= result["clientWidth"]
+    assert min(result["heights"]) >= 44
+    assert result["head"] == "def5678"
+    assert result["editorHidden"] is True
+    assert "committed" in result["status"].lower()
+    assert "path=src%2Fapi.py" in result["calls"][0]["path"]
+    body = result["calls"][1]["options"]["body"]
+    assert '"expected_blob_sha":"blob123"' in body
+    assert '"content":"return handled\\n"' in body

tests/e2e/test_mobile_authored_pull_queue_release.py

@@ -0,0 +1,109 @@
+import os
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile My PRs journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_authored_pull_queue_is_phone_usable_and_opens_the_existing_pull_route(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "my-work.js")
+        page.add_script_tag(path=FRONTEND / "work-route.js")
+        page.add_script_tag(path=FRONTEND / "mobile-queue-launcher.js")
+        page.add_script_tag(path=FRONTEND / "pull-sheet.js")
+        page.evaluate("document.querySelector('#mobile-queue-sheet').showModal()")
+
+        row = page.locator('[data-mobile-queue="authored"]')
+        expect(row).to_have_count(1)
+        expect(row).to_contain_text("My PRs")
+        expect(row).to_contain_text("Pull requests you authored")
+        assert row.bounding_box()["height"] >= 44
+
+        result = page.evaluate("""() => {
+          const work = buildMyWork({
+            user:{login:'timmy'},
+            pull_requests:[{
+              number:41,title:'Ship the authored mobile flow',repository:'stackchain/dashboard',
+              state:'open',user:'timmy',assignees:[],work_reasons:['authored_by_me'],
+              url:'https://forge.example/git/stackchain/dashboard/pulls/41'
+            }]
+          });
+          const authored = filterMyWork(work, 'authored');
+          let selected = '';
+          let route = '';
+          const action = document.createElement('button');
+          action.className = 'my-work-card-main';
+          action.addEventListener('click', () => { route = createWorkRoute.serialize(authored[0]); });
+          const launcher = createMobileQueueLauncher({
+            selectFilter:name => { selected = name; },
+            firstAction:() => action,
+            announce:() => {},
+          });
+          const opened = launcher.open('authored');
+          return {selected, route, opened, count:authored.length};
+        }""")
+        assert result == {
+            "selected": "authored",
+            "route": "#/my-work/pull/stackchain/dashboard/41",
+            "opened": "opened",
+            "count": 1,
+        }
+        capabilities = page.evaluate("""() => {
+          const item = {key:'stackchain/dashboard#41'};
+          createPullSheet.resetOwnershipControls(
+            document, item, () => false, {authored:true, assigned:false}
+          );
+          const ownership = document.querySelector('#pull-ownership');
+          return {
+            hidden: ownership.hidden,
+            inert: ownership.inert,
+            releaseDisabled: document.querySelector('#release-pull').disabled,
+            handoffDisabled: document.querySelector('#load-pull-handoff').disabled,
+          };
+        }""")
+        assert capabilities == {
+            "hidden": True,
+            "inert": True,
+            "releaseDisabled": True,
+            "handoffDisabled": True,
+        }
+        assert page.evaluate(
+            "document.documentElement.scrollWidth > document.documentElement.clientWidth"
+        ) is False
+        browser.close()
+
+
+def test_empty_authored_queue_announces_the_standard_empty_message():
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport={"width": 320, "height": 568})
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_script_tag(path=FRONTEND / "mobile-queue-launcher.js")
+
+        message = page.evaluate("""() => {
+          let announcement = '';
+          const launcher = createMobileQueueLauncher({
+            selectFilter:() => {}, firstAction:() => null,
+            announce:value => { announcement = value; },
+          });
+          launcher.open('authored');
+          return announcement;
+        }""")
+        assert message == "No work is ready to open."
+        browser.close()

tests/e2e/test_mobile_cancel_pull_review_request_release.py

@@ -0,0 +1,88 @@
+import os
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+if os.environ.get("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("release browser journey is opt-in", allow_module_level=True)
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_author_cancels_pending_review_and_opens_replacement_picker(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """() => {
+              globalThis.confirm = () => true;
+              globalThis.cancelCalls = [];
+              globalThis.cancelItem = {
+                repository:'stackchain/api', number:7, key:'stackchain/api#7'
+              };
+              globalThis.cancelDetail = {
+                state:'open', draft:false, mergeable:true, merged:false,
+                ci_state:'success', head_sha:'abc1234', files:[],
+                reviewers:[{
+                  login:'sam', status:'waiting', head_sha:'abc1234', blocking:true
+                }],
+              };
+              globalThis.cancelController = createPullSheet({
+                storage:null,
+                fetchJson:async (path, options={}) => {
+                  cancelCalls.push({path, options});
+                  return {
+                    repository:'stackchain/api', number:7, reviewer:'sam',
+                    head_sha:'abc1234', requested_reviewers:[],
+                  };
+                },
+              });
+              createPullSheet.bindReviewRequestControls(
+                document, cancelController, () => cancelItem, () => cancelDetail
+              );
+              createPullSheet.review(cancelDetail, null, document);
+              document.querySelector('#pull-sheet').classList.add('open');
+              document.querySelector('#pull-review').open = true;
+            }"""
+        )
+
+        cancel = page.locator('[data-cancel-review-request="sam"]')
+        bounds = cancel.bounding_box()
+        assert bounds and bounds["height"] >= 44
+        cancel.click()
+        page.wait_for_function("cancelCalls.length === 1")
+        page.wait_for_function(
+            "document.querySelector('#pull-review-request-status').textContent.includes('Choose a replacement reviewer')"
+        )
+        result = page.evaluate(
+            """() => ({
+              calls:cancelCalls,
+              waitingRows:document.querySelectorAll('[data-reviewer-status="waiting"]').length,
+              pickerOpen:document.querySelector('#pull-review-request').open,
+              focused:document.activeElement?.id,
+              scrollWidth:document.documentElement.scrollWidth,
+              clientWidth:document.documentElement.clientWidth,
+            })"""
+        )
+        browser.close()
+
+    assert result["scrollWidth"] <= result["clientWidth"]
+    assert result["waitingRows"] == 0
+    assert result["pickerOpen"] is True
+    assert result["focused"] == "load-pull-reviewers"
+    assert len(result["calls"]) == 1
+    assert result["calls"][0]["options"]["method"] == "DELETE"
+    assert result["calls"][0]["options"]["body"] == (
+        '{"reviewer":"sam","expected_head_sha":"abc1234"}'
+    )

tests/e2e/test_mobile_close_authored_pull_release.py

@@ -0,0 +1,87 @@
+import os
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+pytestmark = pytest.mark.skipif(
+    os.environ.get("STACKCHAIN_RUN_RELEASE_E2E") != "1",
+    reason="release browser journey is opt-in",
+)
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_author_closes_obsolete_pull_then_recovers_it(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.on("dialog", lambda dialog: dialog.accept())
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """() => {
+                window.lifecycleCalls = [];
+                window.lifecycleItem = {repository:'stackchain/api', number:7, key:'stackchain/api#7'};
+                window.lifecycleDetail = {
+                  number:7, title:'Obsolete experiment', author:'timmy', state:'open',
+                  merged:false, head_sha:'abc1234', capabilities:{authored:true, assigned:false},
+                };
+                const controller = createPullSheet({
+                  storage:null,
+                  fetchJson:async (path, options) => {
+                    lifecycleCalls.push({path, method:options.method, body:JSON.parse(options.body)});
+                    const state = path.endsWith('/close') ? 'closed' : 'open';
+                    return {repository:'stackchain/api', number:7, title:'Obsolete experiment',
+                      head_sha:'abc1234', state, merged:false};
+                  },
+                });
+                createPullSheet.bindLifecycleControls(
+                  document, controller, () => lifecycleItem, () => lifecycleDetail,
+                  result => { lifecycleDetail = {...lifecycleDetail, ...result}; }
+                );
+                createPullSheet.resetLifecycleControls(document, lifecycleDetail);
+                document.querySelector('#pull-sheet').classList.add('open');
+            }"""
+        )
+
+        page.locator("#pull-lifecycle summary").click()
+        close = page.get_by_role("button", name="Close pull request")
+        before = close.evaluate("button => ({height:button.getBoundingClientRect().height, hidden:button.hidden})")
+        close.click()
+        page.get_by_text("Pull request closed.").wait_for()
+        reopen = page.get_by_role("button", name="Reopen pull request")
+        receipt = reopen.evaluate("button => ({height:button.getBoundingClientRect().height, hidden:button.closest('[hidden]') !== null})")
+        reopen.click()
+        page.get_by_text("Pull request reopened.").wait_for()
+        metrics = page.evaluate(
+            """() => ({
+              calls:lifecycleCalls,
+              state:lifecycleDetail.state,
+              closeHidden:document.querySelector('#close-authored-pull').hidden,
+              receiptHidden:document.querySelector('#pull-close-receipt').hidden,
+              focused:document.activeElement === document.querySelector('#close-authored-pull'),
+              scrollWidth:document.documentElement.scrollWidth,
+              clientWidth:document.documentElement.clientWidth,
+            })"""
+        )
+        browser.close()
+
+    assert before["hidden"] is False
+    assert before["height"] >= 44
+    assert receipt["height"] >= 44
+    assert receipt["hidden"] is False
+    assert [call["path"].rsplit("/", 1)[-1] for call in metrics["calls"]] == ["close", "reopen"]
+    assert all(call["body"] == {"expected_head_sha": "abc1234"} for call in metrics["calls"])
+    assert metrics["state"] == "open"
+    assert metrics["closeHidden"] is False
+    assert metrics["receiptHidden"] is True
+    assert metrics["focused"] is True
+    assert metrics["scrollWidth"] <= metrics["clientWidth"]

tests/e2e/test_mobile_detail_watch_release.py

@@ -0,0 +1,44 @@
+import os
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile detail-watch journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_issue_and_pull_detail_watch_controls_are_phone_usable(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "search-preview.js")
+
+        for sheet, button, expected in [
+            ("#issue-sheet", "#watch-issue-detail", "Watch issue"),
+            ("#pull-sheet", "#watch-pull-detail", "Watch pull request"),
+        ]:
+            page.locator(sheet).evaluate("node => node.classList.add('open')")
+            control = page.locator(button)
+            expect(control).to_be_visible()
+            expect(control).to_have_text(expected)
+            assert control.bounding_box()["height"] >= 44
+            control.focus()
+            expect(control).to_be_focused()
+            page.locator(sheet).evaluate("node => node.classList.remove('open')")
+
+        assert page.evaluate(
+            "document.documentElement.scrollWidth > document.documentElement.clientWidth"
+        ) is False
+        browser.close()

tests/e2e/test_mobile_following_release.py

@@ -0,0 +1,146 @@
+import os
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile Following journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_following_queue_is_phone_usable_at_narrow_viewport(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "search-preview.js")
+        page.add_script_tag(path=FRONTEND / "following.js")
+
+        row = page.locator('[data-mobile-queue="following"]')
+        expect(row).to_have_count(1)
+        expect(row).to_contain_text("Issues and pull requests you watch")
+        following_alert = page.locator('label[for="push-following"]')
+        expect(following_alert).to_have_count(1)
+        expect(following_alert).to_contain_text("Notify me when Following changes")
+        page.locator("#work-settings-toggle").click()
+        expect(following_alert).to_be_visible()
+        assert following_alert.bounding_box()["height"] >= 44
+        page.evaluate("""() => {
+          globalThis.fetch = async () => ({
+            ok:true,
+            json:async () => ({revision:1,items:[{
+              repository:'stackchain/api', kind:'pull', number:42,
+              title:'Changed pull request with a long mobile title', state:'open',
+              updated_at:'2026-08-23T05:00:00Z', has_unseen_change:true,
+              change_summary:'Closed since last review'
+            }]})
+          });
+          globalThis.followingReleaseQueue = attachFollowing(() => {});
+          globalThis.followingReleaseQueue.open();
+        }""")
+
+        expect(page.locator("#following-sheet")).to_be_visible()
+        expect(page.locator(".following-card")).to_be_visible()
+        expect(page.locator(".following-card")).to_contain_text("Closed since last review")
+        expect(page.locator(".following-card")).to_contain_text("Pull request")
+        expect(page.locator("#review-following")).to_have_text("Review new activity")
+        assert page.locator("#review-following").bounding_box()["height"] >= 44
+        assert page.locator(".following-card").bounding_box()["height"] >= 44
+        assert page.locator("#close-following").bounding_box()["height"] >= 44
+
+        page.evaluate("""() => {
+          document.querySelector('#following-sheet').close();
+          document.querySelector('#search-preview').classList.add('open');
+          renderSearchPreviewReview({status:'ready',data:{ci_state:'success',files:[{
+            filename:'src/a/very/long/mobile/path/that-must-wrap/review.py',status:'modified',
+            additions:1,deletions:1,diff_available:true,
+            diff_lines:['@@ -1 +1 @@','-unsafe long line that scrolls inside the diff only',
+              '+safe long line that scrolls inside the diff only']
+          }]}},document,value=>String(value));
+          document.querySelector('[data-search-preview-section="changes"]').hidden=false;
+        }""")
+        changes = page.locator("#search-preview-review")
+        expect(changes).to_be_visible()
+        expect(changes).to_contain_text("CI passed · 1 changed file.")
+        expect(changes).to_contain_text("review.py")
+        assert page.locator('[data-search-preview-section="changes"]').bounding_box()["height"] >= 44
+        assert page.locator("#search-preview-review .pull-diff").evaluate(
+            "node => node.scrollWidth >= node.clientWidth"
+        ) is True
+        assert page.evaluate(
+            "document.documentElement.scrollWidth > document.documentElement.clientWidth"
+        ) is False
+
+        retire = page.locator("#watch-search-result")
+        page.evaluate("""() => {
+          document.querySelector('#following-sheet').close();
+          document.querySelector('#search-preview').classList.add('open');
+          const button = document.querySelector('#watch-search-result');
+          renderSearchPreviewWatch(
+            {repository:'stackchain/api', number:42, kind:'issue', state:'closed',
+             following:true, watching:true},
+            {status:'ready'},
+            button
+          );
+        }""")
+        expect(retire).to_be_visible()
+        expect(retire).to_have_text("Stop watching & next")
+        assert retire.bounding_box()["height"] >= 44
+        page.evaluate("""() => renderSearchPreviewWatch(
+          {repository:'stackchain/api', number:42, kind:'pull', state:'open', watching:false},
+          {status:'ready'}, document.querySelector('#watch-search-result'))""")
+        expect(retire).to_have_text("Watch pull request")
+        assert retire.bounding_box()["height"] >= 44
+        keep = page.locator("#keep-following-for-later")
+        page.evaluate("document.querySelector('#keep-following-for-later').hidden = false")
+        expect(keep).to_be_visible()
+        expect(keep).to_have_text("Keep for later & next")
+        assert keep.bounding_box()["height"] >= 44
+        assert page.locator("#keep-following-status").evaluate(
+            "node => getComputedStyle(node).overflowWrap"
+        ) == "anywhere"
+        assert page.locator("#keep-following-status").bounding_box()["height"] >= 20
+        overflow = page.evaluate("document.documentElement.scrollWidth > document.documentElement.clientWidth")
+        assert overflow is False
+        browser.close()
+
+
+def test_following_alert_route_opens_truthful_empty_state_with_one_refresh():
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport={"width": 390, "height": 844})
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "following.js")
+
+        result = page.evaluate("""async () => {
+          let requests=0;
+          globalThis.fetch=async () => {
+            requests += 1;
+            return {ok:true,json:async () => ({revision:2,items:[]})};
+          };
+          const queue=attachFollowing(() => {});
+          await queue.route();
+          return {requests,open:document.querySelector('#following-sheet').open,
+            status:document.querySelector('#following-status').textContent};
+        }""")
+
+        assert result == {
+            "requests": 1,
+
+            "open": True,
+            "status": "No watched items yet. Watch an issue or pull request from Search to keep it here.",
+        }
+        expect(page.locator("#following-sheet")).to_be_visible()
+        assert page.locator("#close-following").bounding_box()["height"] >= 44
+        browser.close()

tests/e2e/test_mobile_home_bootstrap_release.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import os
+import re
 import threading
 from pathlib import Path
 
@@ -15,6 +16,104 @@ from fake_gitea import AVAILABLE_ISSUES, FakeGiteaServer
 from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
 
 
+@pytest.mark.parametrize(("width", "height"), [(390, 844)])
+def test_release_artifact_guides_an_empty_mobile_account_to_first_work(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake.assigned_issue_numbers = []
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("First task release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            expect(page.locator("#my-work-status")).to_contain_text("No assigned work")
+
+            page.locator('[data-mobile-task="work"]').click()
+            sheet = page.locator("#mobile-first-task")
+            expect(sheet).to_be_visible()
+            expect(page.locator("#mobile-first-task-find")).to_be_focused()
+            for selector in ("#mobile-first-task-find", "#mobile-first-task-create", "#mobile-first-task-setup"):
+                bounds = page.locator(selector).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator("#mobile-first-task-find").click()
+            expect(sheet).to_be_hidden()
+            expect(page.locator("#find-work-sheet")).to_be_visible()
+            page.locator("#close-find-work").click()
+
+            context.set_offline(True)
+            page.locator('[data-mobile-task="work"]').click()
+            expect(sheet).to_be_visible()
+            expect(page.locator("#mobile-first-task-find")).to_be_disabled()
+            expect(page.locator("#mobile-first-task-status")).to_contain_text("Create a task now")
+            expect(page.locator("#mobile-first-task-create")).to_be_enabled()
+            expect(page.locator("#mobile-first-task-create")).to_be_focused()
+
+            page.locator("#close-mobile-first-task").click()
+            context.set_offline(False)
+            page.evaluate(
+                """() => {
+                  document.querySelector('[data-mobile-today-hud]').hidden = false;
+                  localStorage.setItem('stackchain.first-task.v1:timmy', 'coaching');
+                  const productionCoach = document.querySelector('[data-mobile-first-task-coach]');
+                  const isolatedCoach = productionCoach.cloneNode(true);
+                  productionCoach.replaceWith(isolatedCoach);
+                  window.firstTaskOutcomeProbe = createMobileFirstTask({
+                    getLogin: () => 'timmy', hasWork: () => true, isTodayActive: () => true,
+                    coach: isolatedCoach,
+                  });
+                  return window.firstTaskOutcomeProbe.refresh();
+                }"""
+            )
+            coach = page.locator("[data-mobile-first-task-coach]")
+            expect(coach).to_be_visible()
+            expect(coach).to_contain_text("Complete your first task")
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert page.evaluate("window.firstTaskOutcomeProbe.completeOutcome()") is True
+            expect(page.locator("#mobile-first-task-receipt")).to_be_visible()
+            expect(coach).to_be_hidden()
+            expect(page.locator("#today-sync-status")).to_contain_text("Today saved to account")
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            fresh_context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            fresh_page = fresh_context.new_page()
+            fresh_page.goto(origin + "/", wait_until="networkidle")
+            fresh_page.locator('input[name="device_label"]').fill("Replacement release phone")
+            fresh_page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            fresh_page.locator("#submit-sign-in").click()
+            fresh_page.wait_for_url(origin + "/", wait_until="networkidle")
+            expect(fresh_page.locator("#my-work-status")).to_contain_text("No assigned work")
+            assert fresh_page.evaluate(
+                "localStorage.getItem('stackchain.first-task.v1:timmy')"
+            ) == "complete"
+            fresh_page.locator('[data-mobile-task="work"]').click()
+            expect(fresh_page.locator("#mobile-first-task")).to_be_hidden()
+            fresh_context.close()
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)
+
+
 @pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
 def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
     tmp_path: Path, width: int, height: int
@@ -29,6 +128,7 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
     browser_errors: list[str] = []
     failed_responses: list[str] = []
     workspace_requests: list[str] = []
+    launch_transfer_events: list[str] = []
     live_requests: list[str] = []
 
     try:
@@ -38,6 +138,18 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
                 viewport={"width": width, "height": height}, ignore_https_errors=True
             )
             page = context.new_page()
+            cdp = context.new_cdp_session(page)
+            cdp.send("Network.enable")
+            cdp.send(
+                "Network.emulateNetworkConditions",
+                {
+                    "offline": False,
+                    "latency": 100,
+                    "downloadThroughput": 48 * 1024,
+                    "uploadThroughput": 48 * 1024,
+                    "connectionType": "cellular3g",
+                },
+            )
             page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
             page.on(
                 "console",
@@ -53,9 +165,16 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
             )
             page.on(
                 "request",
-                lambda request: workspace_requests.append(request.url)
-                if "feature-today-timer-" in request.url
-                else None,
+                lambda request: (
+                    workspace_requests.append(request.url),
+                    launch_transfer_events.append("workspace-requested"),
+                )
+                if "feature-today-timer-" in request.url else None,
+            )
+            page.on(
+                "requestfinished",
+                lambda request: launch_transfer_events.append("core-finished")
+                if "/runtime-" in request.url else None,
             )
             page.on(
                 "request",
@@ -69,6 +188,9 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
             page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
             page.locator("#submit-sign-in").click()
             page.wait_for_url(origin + "/", wait_until="networkidle")
+            assert launch_transfer_events.index("workspace-requested") < (
+                launch_transfer_events.index("core-finished")
+            ), launch_transfer_events
 
             expect(page.locator("#my-work-status")).to_contain_text("2")
             initial_live_requests = len(live_requests)
@@ -101,6 +223,18 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
                 bounds = control.bounding_box()
                 assert bounds and bounds["height"] >= 44
 
+            page.locator("#work-settings-toggle").click()
+            tomorrow = page.locator("#plan-tomorrow")
+            expect(tomorrow).to_be_visible()
+            tomorrow_bounds = tomorrow.bounding_box()
+            assert tomorrow_bounds and tomorrow_bounds["height"] >= 44
+            tomorrow.click()
+            expect(page.locator("#plan-today-sheet")).to_be_visible()
+            expect(page.locator("#plan-today-title")).to_have_text("Plan Tomorrow")
+            expect(page.locator("#save-and-start-today")).to_be_hidden()
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#cancel-plan-today").click()
+
             page.locator('[data-mobile-task="queues"]').click()
             delivery_queue = page.locator('[data-mobile-queue="delivery"]')
             expect(delivery_queue).to_be_visible()
@@ -124,16 +258,47 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
             expect(page.locator("#device-setup-sheet")).to_be_visible()
             expect(page.locator("#device-storage-heading")).to_have_text("Private device storage")
             expect(page.locator("#device-storage-detail")).to_contain_text("private work records")
+            expect(page.locator("body > header")).to_have_attribute("inert", "")
+            expect(page.locator("main")).to_have_attribute("inert", "")
+            expect(dock).to_have_attribute("inert", "")
+            expect(page.locator("#close-device-setup")).to_be_focused()
+            page.keyboard.press("Shift+Tab")
+            expect(page.locator("#clear-private-device-data")).to_be_focused()
+            page.keyboard.press("Tab")
+            expect(page.locator("#close-device-setup")).to_be_focused()
             for selector in ("#clear-device-caches", "#clear-private-device-data"):
                 bounds = page.locator(selector).bounding_box()
                 assert bounds and bounds["height"] >= 44
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
-            page.locator("#close-device-setup").click()
+            page.go_back()
             expect(page.locator("#device-setup-sheet")).to_be_hidden()
+            expect(page.locator("#open-device-setup")).to_be_focused()
+            expect(page.locator("body > header")).not_to_have_attribute("inert", "")
+            expect(page.locator("main")).not_to_have_attribute("inert", "")
+            expect(dock).not_to_have_attribute("inert", "")
 
             page.locator("#active-devices").click()
             expect(page.locator("#active-devices-sheet")).to_be_visible()
             expect(page.locator("#security-activity-section")).to_be_visible()
+            expect(page.locator("body > header")).to_have_attribute("inert", "")
+            expect(page.locator("main")).to_have_attribute("inert", "")
+            expect(dock).to_have_attribute("inert", "")
+            expect(page.locator("#close-active-devices")).to_be_focused()
+            expect(page.locator("#active-devices-status")).to_contain_text("active device")
+            expect(page.locator("#enrolled-passkeys-status")).not_to_contain_text("Loading")
+            page.keyboard.press("Shift+Tab")
+            assert page.evaluate(
+                """
+                () => {
+                  const controls = [...document.querySelector('#active-devices-sheet').querySelectorAll(
+                    'button:not([disabled]), select:not([disabled]), input:not([disabled]), textarea:not([disabled]), a[href], [tabindex]:not([tabindex="-1"])'
+                  )].filter(control => !control.hidden);
+                  return document.activeElement === controls.at(-1);
+                }
+                """
+            )
+            page.keyboard.press("Tab")
+            expect(page.locator("#close-active-devices")).to_be_focused()
             security_nav = page.locator(".security-section-nav")
             expect(security_nav).to_be_visible()
             for control in security_nav.locator("button").all():
@@ -143,9 +308,15 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
             expect(page.locator("#security-section-devices")).to_have_attribute("aria-current", "page")
             page.go_back()
             expect(page.locator("#security-section-activity")).to_have_attribute("aria-current", "page")
+            expect(page.locator("body > header")).to_have_attribute("inert", "")
+            expect(page.locator("main")).to_have_attribute("inert", "")
+            expect(dock).to_have_attribute("inert", "")
             page.go_back()
             expect(page.locator("#active-devices-sheet")).to_be_hidden()
             expect(page.locator("#active-devices")).to_be_focused()
+            expect(page.locator("body > header")).not_to_have_attribute("inert", "")
+            expect(page.locator("main")).not_to_have_attribute("inert", "")
+            expect(dock).not_to_have_attribute("inert", "")
 
             assert len(workspace_requests) == 1, workspace_requests
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
@@ -158,6 +329,59 @@ def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
         fake_thread.join(timeout=5)
 
 
+def test_release_artifact_recovers_a_transient_workspace_request_in_place(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    attempts: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": 390, "height": 844})
+            page.goto(origin + "/", wait_until="networkidle")
+
+            def interrupt_once(route):
+                attempts.append(route.request.url)
+                if len(attempts) == 1:
+                    route.abort("failed")
+                else:
+                    route.continue_()
+
+            page.route(re.compile(r"/feature-today-timer-[^/?]+\.js(?:\?.*)?$"), interrupt_once)
+            page.locator('input[name="device_label"]').fill("Workspace recovery release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.wait_for_timeout(1500)
+            resources = page.evaluate(
+                "performance.getEntriesByType('resource').map(entry => entry.name)"
+            )
+            state = {
+                "attempts": attempts,
+                "resources": resources,
+                "action": page.locator("#my-work-action-status").text_content(),
+                "retry_hidden": page.locator("#retry-workspace").is_hidden(),
+                "work": page.locator("#my-work-status").text_content(),
+            }
+            assert len(attempts) == 2, state
+            assert "2" in (state["work"] or ""), state
+            expect(page.locator("#retry-workspace")).to_be_hidden()
+            expect(page.locator("#my-work-action-status")).not_to_contain_text("Workspace unavailable")
+            assert any("feature-today-timer-" in url and "retry=" in url for url in resources), state
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)
+
+
 def test_release_artifact_keeps_mobile_delivery_recovery_single_flight(tmp_path: Path):
     archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
     assert len(archives) == 1, "browser job must download exactly one assembled release archive"

tests/e2e/test_mobile_publish_draft_pull_release.py

@@ -0,0 +1,87 @@
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_author_publishes_draft_and_continues_to_reviewer_picker(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "number": 7,
+        "title": "WIP: Ship mobile flow",
+        "author": "timmy",
+        "state": "open",
+        "draft": True,
+        "merged": False,
+        "head_sha": "abc1234",
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.on("dialog", lambda dialog: dialog.accept())
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                window.publishDetail = detail;
+                window.publishItem = {repository:'stackchain/api', number:7, key:'stackchain/api#7'};
+                const controller = createPullSheet({
+                    storage:null,
+                    fetchJson:(path, options) => {
+                        if (!path.endsWith('/ready') || options.method !== 'PATCH') {
+                            return Promise.reject(new Error('unexpected request'));
+                        }
+                        const payload = JSON.parse(options.body);
+                        if (payload.expected_head_sha !== detail.head_sha) {
+                            return Promise.reject(new Error('wrong head'));
+                        }
+                        return Promise.resolve({
+                            repository:'stackchain/api', number:7, title:'Ship mobile flow',
+                            head_sha:detail.head_sha, state:'open', draft:false,
+                        });
+                    },
+                });
+                createPullSheet.bindOwnershipControls(
+                    document, controller, () => window.publishItem, async () => false,
+                    () => window.publishDetail, () => 'timmy'
+                );
+                document.querySelector('#pull-sheet').classList.add('open');
+                controller.setReviewDetail(detail);
+            }""",
+            detail,
+        )
+
+        ready = page.get_by_role("button", name="Ready for review")
+        before = ready.evaluate("button => ({height:button.getBoundingClientRect().height, hidden:button.hidden})")
+        ready.click()
+        page.get_by_text("Published and ready for review.").wait_for()
+        metrics = page.evaluate(
+            """() => ({
+                scrollWidth:document.documentElement.scrollWidth,
+                clientWidth:document.documentElement.clientWidth,
+                readyHidden:document.querySelector('#publish-draft-pull').hidden,
+                requestOpen:document.querySelector('#pull-review-request').open,
+                reviewerFocused:document.activeElement === document.querySelector('#load-pull-reviewers'),
+                title:window.publishDetail.title,
+                draft:window.publishDetail.draft,
+            })"""
+        )
+        browser.close()
+
+    assert before["hidden"] is False
+    assert before["height"] >= 44
+    assert metrics["scrollWidth"] <= metrics["clientWidth"]
+    assert metrics["readyHidden"] is True
+    assert metrics["requestOpen"] is True
+    assert metrics["reviewerFocused"] is True
+    assert metrics["title"] == "Ship mobile flow"
+    assert metrics["draft"] is False

tests/e2e/test_mobile_pull_reviewer_feedback_release.py

@@ -0,0 +1,172 @@
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_received_review_feedback_opens_matching_change(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "state": "open",
+        "draft": False,
+        "mergeable": True,
+        "merged": False,
+        "ci_state": "success",
+        "head_sha": "current-head",
+        "reviewers": [{
+            "login": "sam",
+            "status": "outdated",
+            "head_sha": "old-head-123456",
+            "blocking": True,
+            "summary": "Please handle the narrow empty state before merging.",
+            "comments": [{
+                "path": "src/a/very/long/mobile/path/review_target.py",
+                "body": "Return before parsing when the payload is empty.",
+                "line": 12,
+            }],
+        }],
+        "files": [{
+            "filename": "src/a/very/long/mobile/path/review_target.py",
+            "status": "modified",
+            "additions": 2,
+            "deletions": 1,
+            "diff_available": True,
+            "diff_lines": ["@@ -10,2 +10,3 @@", "-parse(payload)", "+if not payload: return", "+parse(payload)"],
+        }],
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                document.querySelector('#pull-sheet').classList.add('open');
+                document.querySelector('#pull-review').open = true;
+                createPullSheet.review(detail, null, document);
+                document.querySelector('#pull-files').innerHTML = detail.files.map((file, index) =>
+                    createPullSheet.renderFile(file, index, false, value => String(value)
+                        .replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;'))
+                ).join('');
+            }""",
+            detail,
+        )
+
+        page.locator(".pull-review-feedback summary").click()
+        jump = page.locator('[data-review-feedback-file]')
+        jump.click()
+        metrics = page.evaluate(
+            """() => {
+                const jump = document.querySelector('[data-review-feedback-file]');
+                const toggle = document.querySelector('.pull-file-toggle');
+                const panel = document.getElementById(toggle.getAttribute('aria-controls'));
+                return {
+                    scrollWidth: document.documentElement.scrollWidth,
+                    clientWidth: document.documentElement.clientWidth,
+                    jumpHeight: jump.getBoundingClientRect().height,
+                    expanded: toggle.getAttribute('aria-expanded'),
+                    panelHidden: panel.hidden,
+                    focused: document.activeElement === toggle,
+                    reviewedHead: document.querySelector('.pull-review-feedback').textContent,
+                    updatedReviewVisible: !document.querySelector('#request-updated-pull-review').hidden,
+                };
+            }"""
+        )
+        browser.close()
+
+    assert metrics["scrollWidth"] <= metrics["clientWidth"]
+    assert metrics["jumpHeight"] >= 44
+    assert metrics["expanded"] == "true"
+    assert metrics["panelHidden"] is False
+    assert metrics["focused"] is True
+    assert "Reviewed head old-head" in metrics["reviewedHead"]
+    assert metrics["updatedReviewVisible"] is True
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_pull_review_retries_inline_feedback_without_losing_core_review(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "state": "open", "draft": False, "mergeable": True, "merged": False,
+        "ci_state": "success", "head_sha": "abc1234",
+        "reviewers": [{
+            "login": "sam", "review_id": 8, "status": "changes_requested",
+            "head_sha": "abc1234", "blocking": True,
+            "summary": "Please handle the empty state.",
+        }],
+        "files": [],
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                window.lazyFeedbackDetail = detail;
+                window.lazyFeedbackItem = {repository:'stackchain/api', number:7, key:'stackchain/api#7'};
+                let attempts = 0;
+                const controller = createPullSheet({
+                    storage:null,
+                    fetchJson:() => {
+                        attempts += 1;
+                        if (attempts === 1) return Promise.reject(new Error('feedback unavailable'));
+                        return Promise.resolve({
+                            review_id:8, head_sha:'abc1234', reviewed_head_sha:'abc1234',
+                            comments:[{id:99, path:'src/api.py', body:'Return before parsing.', line:12}],
+                        });
+                    },
+                });
+                createPullSheet.bindFeedbackControls(
+                    document, controller, () => window.lazyFeedbackItem,
+                    () => window.lazyFeedbackDetail, () => 'timmy'
+                );
+                document.querySelector('#pull-sheet').classList.add('open');
+                document.querySelector('#pull-review').open = true;
+                const eligibility = createPullSheet.review(detail, null, document);
+                document.querySelector('#pull-merge-state').textContent = eligibility.reason;
+            }""",
+            detail,
+        )
+
+        page.locator(".pull-review-feedback summary").click()
+        load = page.get_by_role("button", name="Load inline feedback")
+        load.click()
+        retry = page.get_by_role("button", name="Retry feedback")
+        retry.wait_for()
+        retry.click()
+        page.get_by_text("Return before parsing.").wait_for()
+        metrics = page.evaluate(
+            """() => {
+                const details = document.querySelector('.pull-review-feedback');
+                const address = document.querySelector('[data-address-review-feedback]');
+                return {
+                    scrollWidth: document.documentElement.scrollWidth,
+                    clientWidth: document.documentElement.clientWidth,
+                    blocker: document.querySelector('#pull-merge-state').textContent,
+                    feedback: details.textContent,
+                    addressHeight: address.getBoundingClientRect().height,
+                };
+            }"""
+        )
+        browser.close()
+
+    assert metrics["scrollWidth"] <= metrics["clientWidth"]
+    assert "requested changes" in metrics["blocker"]
+    assert "Return before parsing." in metrics["feedback"]
+    assert metrics["addressHeight"] >= 44

tests/e2e/test_mobile_pull_reviewer_status_release.py

@@ -0,0 +1,87 @@
+from pathlib import Path
+
+import pytest
+
+
+ROOT = Path(__file__).parents[2]
+
+
+@pytest.mark.parametrize("viewport", [(320, 568), (390, 844)])
+def test_mobile_pull_reviewer_status_wraps_and_keeps_updated_review_reachable(viewport):
+    playwright = pytest.importorskip("playwright.sync_api")
+    html = (ROOT / "frontend" / "index.html").read_text()
+    detail = {
+        "state": "open",
+        "draft": False,
+        "mergeable": True,
+        "merged": False,
+        "ci_state": "success",
+        "head_sha": "current-head",
+        "reviewers": [
+            {
+                "login": "casey-with-a-very-long-mobile-login",
+                "status": "waiting",
+                "head_sha": "current-head",
+                "blocking": True,
+            },
+            {
+                "login": "sam",
+                "status": "changes_requested",
+                "head_sha": "current-head",
+                "blocking": True,
+            },
+            {
+                "login": "lee",
+                "status": "outdated",
+                "head_sha": "old-head",
+                "blocking": True,
+            },
+            {
+                "login": "pat",
+                "status": "approved",
+                "head_sha": "current-head",
+                "blocking": False,
+            },
+        ],
+    }
+
+    with playwright.sync_playwright() as runtime:
+        try:
+            browser = runtime.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium is not installed: {error}")
+        page = browser.new_page(viewport={"width": viewport[0], "height": viewport[1]})
+        page.set_content(html, wait_until="domcontentloaded")
+        page.add_style_tag(path=ROOT / "frontend" / "dashboard.css")
+        page.add_script_tag(path=ROOT / "frontend" / "pull-sheet.js")
+        page.evaluate(
+            """detail => {
+                document.querySelector('#pull-sheet').classList.add('open');
+                document.querySelector('#pull-review').open = true;
+                createPullSheet.review(detail, null, document);
+            }""",
+            detail,
+        )
+
+        metrics = page.evaluate(
+            """() => ({
+                scrollWidth: document.documentElement.scrollWidth,
+                clientWidth: document.documentElement.clientWidth,
+                updatedReviewHeight: document.querySelector('#request-updated-pull-review')
+                    .getBoundingClientRect().height,
+                updatedReviewVisible: !document.querySelector('#request-updated-pull-review').hidden,
+                statuses: Array.from(document.querySelectorAll('.pull-reviewer-status span'))
+                    .map(node => node.textContent),
+            })"""
+        )
+        browser.close()
+
+    assert metrics["scrollWidth"] <= metrics["clientWidth"]
+    assert metrics["updatedReviewHeight"] >= 44
+    assert metrics["updatedReviewVisible"] is True
+    assert metrics["statuses"] == [
+        "Waiting for review",
+        "Changes requested",
+        "Outdated after new commits",
+        "Approved current head",
+    ]

tests/e2e/test_mobile_release_failure_recovery.py

@@ -0,0 +1,135 @@
+import os
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged release-failure recovery runs only in the browser gate", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_failed_release_check_is_diagnosable_and_retryable_on_phone(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "release-receipt.js")
+        result = page.evaluate("""async () => {
+          const calls=[];
+          const values=new Map();
+          const storage={
+            getItem:key=>values.get(key)||null,
+            setItem:(key,value)=>values.set(key,value),
+            removeItem:key=>values.delete(key),
+          };
+          const receipt=createReleaseReceipt({
+            storage,
+            getLogin:()=> 'timmy',
+            listNode:document.querySelector('#release-watchlist'),
+            confirmAction:()=>true,
+            fetchJson:async(path, options={})=>{
+              calls.push({path, method:options.method || 'GET'});
+              if (path.endsWith('/failure')) return {
+                commit_sha:'abc1234', run_id:91, job_index:3,
+                name:'CI / browser', excerpt:'AssertionError: mobile viewport overflow',
+              };
+              if (path.endsWith('/retry')) return {commit_sha:'abc1234', status:'queued'};
+              return {
+                commit_sha:'abc1234', ci_state:'failure', release:null,
+                checks:[{
+                  name:'CI / browser with a deliberately long workflow name',
+                  state:'failure', description:'Playwright failed at the narrow viewport',
+                  url:'https://forge.example/git/stackchain/api/actions/runs/91/jobs/3',
+                  recovery:{run_id:91, job_index:3},
+                }],
+              };
+            },
+          });
+          receipt.capture(
+            {repository:'stackchain/api-with-a-long-mobile-name', number:7, key:'stackchain/api-with-a-long-mobile-name#7'},
+            {merge_commit_sha:'abc1234'},
+          );
+          document.querySelector('#release-receipt-sheet').showModal();
+          await receipt.refresh();
+          const review=document.querySelector('.release-failure-summary button');
+          const reviewHeight=review.getBoundingClientRect().height;
+          review.click();
+          await new Promise(resolve=>setTimeout(resolve, 0));
+          const recovery=document.querySelector('.release-failure-recovery');
+          const retry=recovery.querySelector('button');
+          const retryHeight=retry.getBoundingClientRect().height;
+          const excerpt=recovery.querySelector('pre').textContent;
+          const sha=recovery.querySelector('strong').textContent;
+          const job=recovery.querySelector('a').href;
+          const overflow=document.documentElement.scrollWidth > document.documentElement.clientWidth;
+          retry.click();
+          await new Promise(resolve=>setTimeout(resolve, 0));
+          return {
+            calls, reviewHeight, retryHeight, excerpt, sha, job, overflow,
+            state:receipt.restore()[0].status.label,
+          };
+        }""")
+        expect(page.locator("#release-receipt-sheet")).to_be_visible()
+        assert result["reviewHeight"] >= 44
+        assert result["retryHeight"] >= 44
+        assert result["excerpt"] == "AssertionError: mobile viewport overflow"
+        assert result["sha"] == "Merge abc1234"
+        assert result["job"].endswith("/actions/runs/91/jobs/3")
+        assert result["overflow"] is False
+        assert result["state"] == "Checks running"
+        assert [call["method"] for call in result["calls"]] == ["GET", "GET", "POST"]
+        browser.close()
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_failed_release_prepares_a_visible_draft_rollback_receipt_on_phone(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "release-receipt.js")
+        result = page.evaluate("""async () => {
+          const values=new Map(), calls=[], opened=[];
+          const receipt=createReleaseReceipt({
+            storage:{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)},
+            getLogin:()=> 'timmy', listNode:document.querySelector('#release-watchlist'),
+            confirmAction:()=>true, openPull:pull=>opened.push(pull),
+            fetchJson:async(path, options={})=>{
+              calls.push({path,method:options.method||'GET'});
+              if(path.endsWith('/failure')) return {commit_sha:'abc1234',run_id:91,job_index:3,name:'CI / browser',excerpt:'failed'};
+              if(path.endsWith('/rollback')) return {repository:'stackchain/api',number:9,draft:true,rollback_of:'abc1234',url:'https://forge.example/git/stackchain/api/pulls/9'};
+              return {commit_sha:'abc1234',ci_state:'failure',release:null,checks:[{name:'CI / browser',state:'failure',recovery:{run_id:91,job_index:3}}]};
+            },
+          });
+          receipt.capture({repository:'stackchain/api',number:7,key:'stackchain/api#7'},{merge_commit_sha:'abc1234'});
+          document.querySelector('#release-receipt-sheet').showModal();
+          await receipt.refresh();
+          document.querySelector('.release-failure-summary button').click();
+          await new Promise(resolve=>setTimeout(resolve,0));
+          const rollback=[...document.querySelectorAll('.release-failure-actions button')].find(button=>button.textContent==='Prepare rollback PR');
+          const actionHeight=rollback.getBoundingClientRect().height;
+          rollback.click();
+          await new Promise(resolve=>setTimeout(resolve,0));
+          const status=document.querySelector('.release-rollback-status');
+          return {calls,opened,actionHeight,status:status?.textContent||'',overflow:document.documentElement.scrollWidth>document.documentElement.clientWidth};
+        }""")
+        assert result["actionHeight"] >= 44
+        assert result["status"] == "Draft rollback #9 is ready for review."
+        assert result["opened"][0]["number"] == 9
+        assert result["calls"][-1]["path"].endswith("/release-receipt/abc1234/rollback")
+        assert result["overflow"] is False
+        browser.close()

tests/e2e/test_mobile_search_authored_pull_recovery_release.py

@@ -0,0 +1,79 @@
+from __future__ import annotations
+
+import json
+import os
+import re
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("rendered authored-pull recovery checks run only in the browser gate", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).resolve().parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_mobile_search_reopens_closed_authored_pull_into_my_work(width, height):
+    html = re.sub(r'<script src="static/[^"]+"></script>', "", (FRONTEND / "index.html").read_text())
+
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch()
+        page = browser.new_page(viewport={"width": width, "height": height})
+        page.set_content(html)
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "search-preview.js")
+        page.locator("#search-preview").evaluate("node => node.classList.add('open')")
+        page.evaluate("""() => {
+          const detail = {
+            repository:'stackchain/web', number:9, kind:'pull', state:'closed',
+            authored_pull_reopenable:true, head_sha:'abc1234',
+          };
+          const button = document.querySelector('#start-search-result');
+          globalThis.renderSearchPreviewStart(detail, {status:'ready'}, button);
+          globalThis.recoveryMetrics = {calls:[], history:['search']};
+          const mutate = globalThis.searchPreviewMutation((path, options) => {
+            globalThis.recoveryMetrics.calls.push({path, body:JSON.parse(options.body)});
+            return Promise.resolve({...detail, state:'open'});
+          });
+          const preview = globalThis.createSearchPreview({
+            fetchJson:async () => detail,
+            mutate,
+            onState:() => {},
+          });
+          preview.open(detail);
+          const recover = globalThis.createSearchAuthoredPullRecovery({
+            confirm:message => window.confirm(message),
+            reopen:target => preview.reopenPull(target),
+            refresh:async () => { globalThis.recoveryMetrics.refreshed = true; },
+            find:() => ({repository:'stackchain/web',number:9,kind:'pull',key:'stackchain/web#9'}),
+            open:item => globalThis.recoveryMetrics.history.push(item.kind),
+            unavailable:message => { globalThis.recoveryMetrics.unavailable = message; },
+          });
+          button.addEventListener('click', () => recover(detail));
+        }""")
+
+        action = page.locator("#start-search-result")
+        expect(action).to_be_visible()
+        expect(action).to_have_text("Reopen in My Work")
+        bounds = action.bounding_box()
+        assert bounds and bounds["height"] >= 44
+        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+        page.once("dialog", lambda dialog: dialog.accept())
+        action.click()
+        page.wait_for_function("globalThis.recoveryMetrics.history.length === 2")
+        metrics = page.evaluate("globalThis.recoveryMetrics")
+
+        assert metrics["calls"] == [{
+            "path": "api/v1/repos/stackchain/web/pulls/9/reopen",
+            "body": {"expected_head_sha": "abc1234"},
+        }]
+        assert metrics["refreshed"] is True
+        assert metrics["history"] == ["search", "pull"]
+        assert "unavailable" not in metrics
+        browser.close()

tests/e2e/test_mobile_search_preview_navigation.py

@@ -32,12 +32,29 @@ def test_rendered_mobile_search_preview_navigation_preserves_reading_space_and_d
         page.locator("#search-preview-conversation").evaluate("node => node.style.minHeight = '500px'")
         page.locator("#search-preview-reply-workspace").evaluate("node => node.style.minHeight = '500px'")
         page.locator("#search-preview-actions").evaluate("node => node.style.minHeight = '300px'")
+        page.add_script_tag(path=FRONTEND / "search-preview.js")
+        page.evaluate("""() => {
+          const assignedIssue = {
+            kind:'issue', state:'open', claimable:false, assigned_to_me:false,
+            assignees:['alexander'], watching:false,
+          };
+          globalThis.renderSearchPreviewWatch(
+            assignedIssue, {status:'ready'}, document.querySelector('#watch-search-result')
+          );
+        }""")
         page.add_script_tag(path=FRONTEND / "mobile-search-preview-nav.js")
 
+        watch = page.locator("#watch-search-result")
+        expect(watch).to_be_visible()
+        expect(watch).to_have_text("Watch issue")
+        watch_bounds = watch.bounding_box()
+        assert watch_bounds and watch_bounds["height"] >= 44
         navigation = page.locator(".mobile-search-preview-nav")
         expect(navigation).to_be_visible()
-        buttons = navigation.locator("button")
+        buttons = navigation.locator("button:visible")
+        assert navigation.locator("button").count() == 5
         assert buttons.count() == 4
+        expect(navigation.locator('[data-search-preview-section="changes"]')).to_be_hidden()
         for button in buttons.all():
             bounds = button.bounding_box()
             assert bounds and bounds["height"] >= 44

tests/e2e/test_mobile_search_week_plan.py

@@ -0,0 +1,77 @@
+from pathlib import Path
+
+import pytest
+
+
+sync_api = pytest.importorskip("playwright.sync_api")
+
+FRONTEND = Path(__file__).parents[2] / "frontend"
+
+
+@pytest.mark.parametrize("width,height", [(320, 568), (390, 844)])
+def test_search_week_plan_sheet_fits_small_phones_with_touch_safe_controls(width, height):
+    html = (FRONTEND / "index.html").read_text()
+    with sync_api.sync_playwright() as playwright:
+        try:
+            browser = playwright.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium unavailable: {error}")
+        page = browser.new_page(viewport={"width": width, "height": height})
+        page.set_content(html)
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.locator("#search-week-plan-days").evaluate(
+            """node => node.innerHTML = Array.from({length:7}, (_, index) =>
+              `<button type="button" data-search-week-date="2026-08-${21+index}" aria-pressed="${index===0}">
+                <strong>Day ${index+1}</strong><small>${index*30} of 120 min · ${index} planned</small>
+              </button>`).join('')"""
+        )
+        page.locator("#search-week-plan-sheet").evaluate("node => node.hidden = false")
+        page.locator("#search-week-plan-estimate").fill("45")
+
+        expect = sync_api.expect
+        expect(page.locator("#search-week-plan-sheet")).to_be_visible()
+        expect(page.locator("#confirm-search-week-plan")).to_be_visible()
+        for button in page.locator("#search-week-plan-days button").all():
+            bounds = button.bounding_box()
+            assert bounds and bounds["height"] >= 44
+        assert page.locator("#confirm-search-week-plan").bounding_box()["height"] >= 44
+        assert page.locator("#cancel-search-week-plan").bounding_box()["height"] >= 44
+        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+        assert page.locator(".search-week-plan-panel").evaluate(
+            "node => node.scrollWidth <= node.clientWidth"
+        )
+        browser.close()
+
+
+@pytest.mark.parametrize("width,height", [(320, 568), (390, 844)])
+def test_search_week_batch_review_fits_small_phones_without_horizontal_overflow(width, height):
+    html = (FRONTEND / "index.html").read_text()
+    with sync_api.sync_playwright() as playwright:
+        try:
+            browser = playwright.chromium.launch(headless=True)
+        except Exception as error:
+            pytest.skip(f"Chromium unavailable: {error}")
+        page = browser.new_page(viewport={"width": width, "height": height})
+        page.set_content(html)
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.locator("#search-week-batch-list").evaluate(
+            """node => node.innerHTML = Array.from({length:4}, (_, index) =>
+              `<div class="search-week-batch-row"><div><span class="small">stackchain/dashboard#${1196+index}</span>
+                <strong>Substantial mobile planning issue ${index+1}</strong></div>
+                <div class="search-week-batch-row-controls"><label>Day<select><option>Fri, Aug 21 · 2 planned</option></select></label>
+                <label>Minutes<input type="number" value="45"></label></div></div>`).join('')"""
+        )
+        page.locator("#search-week-batch-review").evaluate("node => node.hidden = false")
+        page.locator("#cmd-palette").evaluate("node => node.classList.add('open')")
+
+        expect = sync_api.expect
+        expect(page.locator("#search-week-batch-review")).to_be_visible()
+        expect(page.locator("#confirm-search-week-batch")).to_be_visible()
+        for control in page.locator("#search-week-batch-review select, #search-week-batch-review input, #search-week-batch-review button").all():
+            bounds = control.bounding_box()
+            assert bounds and bounds["height"] >= 44
+        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+        assert page.locator("#search-week-batch-review").evaluate(
+            "node => node.scrollWidth <= node.clientWidth"
+        )
+        browser.close()

tests/e2e/test_mobile_sign_out_release.py

@@ -0,0 +1,76 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile sign-out journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_reviews_private_work_before_mobile_sign_out(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    delete_requests: list[str] = []
+    browser_errors: list[str] = []
+    try:
+        with release_server(archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}") as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": 390, "height": 844}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on(
+                "request",
+                lambda request: delete_requests.append(request.url)
+                if request.method == "DELETE" and "/api/v1/session" in request.url
+                else None,
+            )
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Sign-out review phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            page.evaluate("localStorage.setItem('stackchain.release-test-draft', 'unsynced')")
+
+            launcher = page.locator("#sign-out")
+            page.locator("#app-menu-toggle").click()
+            launcher.click()
+            sheet = page.locator("#sign-out-review-sheet")
+            expect(sheet).to_be_visible()
+            expect(page.locator("#sign-out-review-summary")).to_contain_text("private browser item")
+            expect(page.locator("#sign-out-review-warning")).to_contain_text("may not be synced")
+            expect(page.locator("#confirm-sign-out")).to_have_text("Sign out and erase private work")
+            assert page.evaluate("document.querySelector('main').inert") is True
+            panel = page.locator(".sign-out-review-panel").bounding_box()
+            assert panel and panel["height"] <= 844
+            for selector in ("#cancel-sign-out", "#confirm-sign-out"):
+                bounds = page.locator(selector).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert delete_requests == []
+
+            page.keyboard.press("Escape")
+            expect(sheet).to_be_hidden()
+            expect(launcher).to_be_focused()
+            assert page.evaluate("document.querySelector('main').inert") is False
+            assert page.evaluate("localStorage.getItem('stackchain.release-test-draft')") == "unsynced"
+            assert delete_requests == []
+            assert browser_errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=5)

tests/e2e/test_mobile_source_branch_cleanup_release.py

@@ -0,0 +1,67 @@
+import os
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged branch-cleanup journey runs only in the browser gate", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize("viewport", [
+    {"width": 320, "height": 568},
+    {"width": 390, "height": 844},
+])
+def test_merged_source_branch_cleanup_is_phone_openable_and_exact(viewport):
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch(headless=True)
+        page = browser.new_page(viewport=viewport)
+        page.set_content((FRONTEND / "index.html").read_text())
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.add_script_tag(path=FRONTEND / "release-receipt.js")
+        result = page.evaluate("""async () => {
+          const calls=[];
+          const values=new Map();
+          const storage={
+            getItem:key=>values.get(key)||null,
+            setItem:(key,value)=>values.set(key,value),
+            removeItem:key=>values.delete(key),
+          };
+          const receipt=createReleaseReceipt({
+            storage,
+            getLogin:()=> 'timmy',
+            listNode:document.querySelector('#release-watchlist'),
+            confirmAction:()=>true,
+            fetchJson:async(path, options={})=>{
+              calls.push({path, method:options.method, body:options.body});
+              return {deleted:true, source_branch:'timmy/feature', source_head_sha:'abc1234'};
+            },
+          });
+          receipt.capture(
+            {repository:'stackchain/api', number:7, key:'stackchain/api#7'},
+            {merge_commit_sha:'merge456', source_branch:'timmy/feature', source_head_sha:'abc1234', source_repository:'stackchain/api'},
+          );
+          document.querySelector('#release-receipt-sheet').showModal();
+          const button=document.querySelector('.release-watchlist-actions button');
+          const box=button.getBoundingClientRect();
+          const label=button.getAttribute('aria-label');
+          button.click();
+          await new Promise(resolve=>setTimeout(resolve, 0));
+          return {
+            calls, label, height:box.height,
+            branch:document.querySelector('.release-branch-cleanup-status').textContent,
+            overflow:document.documentElement.scrollWidth > document.documentElement.clientWidth,
+          };
+        }""")
+        expect(page.locator("#release-receipt-sheet")).to_be_visible()
+        assert result["height"] >= 44
+        assert result["label"] == "Delete merged source branch timmy/feature at abc1234"
+        assert result["calls"][0]["method"] == "DELETE"
+        assert result["branch"] == "Branch timmy/feature · deleted"
+        assert result["overflow"] is False
+        browser.close()

tests/e2e/test_mobile_today_handoff_release.py

@@ -88,7 +88,16 @@ def test_release_artifact_plans_hands_off_and_opens_next_mobile_issue(tmp_path:
             expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
             expect(page.locator("#send-issue-comment-next")).to_be_visible()
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
-            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+            try:
+                expect(page.locator("#plan-today-sheet")).to_be_hidden()
+            except AssertionError as error:
+                raise AssertionError(page.evaluate("""() => ({
+                  hidden:document.querySelector('#plan-today-sheet').hidden,
+                  state:history.state,
+                  bodyClass:document.body.className,
+                  status:document.querySelector('#my-work-action-status').textContent,
+                  error:document.querySelector('#plan-today-error').textContent,
+                })""")) from error
 
             page.locator("#close-issue-sheet").click()
             if page.locator("#plan-today-sheet").is_visible():
@@ -530,11 +539,20 @@ def test_release_artifact_recovers_admitted_blocker_after_reload_and_opens_next_
             expect(page.locator("#resume-today-break")).to_be_visible()
 
             page.evaluate("""() => {
+              const outbox = JSON.parse(localStorage.getItem('stackchain.authored-outbox.v1') ||
+                '{"version":2,"items":[]}');
+              outbox.items.push({
+                id: 'already-admitted-blocker', operationId: 'already-admitted-blocker',
+                kind: 'issue-comment', repository: 'acme/mobile', number: 41,
+                body: 'Blocked after reload waiting for the design owner', ownerLogin: 'timmy',
+                status: 'queued', queuedAt: Date.now()
+              });
+              localStorage.setItem('stackchain.authored-outbox.v1', JSON.stringify(outbox));
               localStorage.setItem('stackchain.today-progress.v1.timmy', JSON.stringify({
                 version: 1,
                 drafts: {
                   'issue:acme/mobile:41:': {
-                    body: 'Blocked waiting for the design owner',
+                    body: 'Blocked after reload waiting for the design owner',
                     operation_id: 'already-admitted-blocker',
                     blocker_pending: true,
                     blocker_until: '2000-01-02T03:04:00.000Z'
@@ -574,10 +592,23 @@ def test_release_artifact_recovers_admitted_blocker_after_reload_and_opens_next_
             })""")
             assert state["today"] == ["issue:acme/mobile:42:"]
             assert state["later"]["issue:acme/mobile:41:"].startswith("2099-08-19T09:00")
-            comments = [item for item in state["outbox"]["items"] if item["kind"] == "issue-comment"]
-            assert len(comments) == 1
-            assert comments[0]["number"] == 41
-            assert comments[0]["body"] == "Blocked waiting for the design owner"
+            queued_comments = [
+                item for item in state["outbox"]["items"]
+                if item["kind"] == "issue-comment"
+                and item["number"] == 41
+                and item["body"] == "Blocked after reload waiting for the design owner"
+            ]
+            delivered_comments = [
+                {"number": number, "body": body}
+                for number, body in fake.comments
+                if number == 41 and body == "Blocked after reload waiting for the design owner"
+            ]
+            assert len(queued_comments) <= 1
+            assert len(delivered_comments) <= 1
+            assert queued_comments or delivered_comments
+            receipt = (delivered_comments or queued_comments)[0]
+            assert receipt["number"] == 41
+            assert receipt["body"] == "Blocked after reload waiting for the design owner"
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
             assert browser_errors == []
             browser.close()

tests/e2e/test_mobile_today_summary_release.py

@@ -58,6 +58,9 @@ def test_release_artifact_reviews_and_shares_a_private_mobile_today_summary(
                     storage:localStorage,getLogin:()=> 'timmy',
                     share:payload=>navigator.share(payload),
                     copy:text=>navigator.clipboard.writeText(text),
+                    createOperationId:()=> 'release-summary-op',
+                    resolveTarget:async target=>({...target,kind:'issue',title:'Daily status',state:'open'}),
+                    enqueueDurably:async message=>{ window.__queuedSummary=message; return {item:message,durability:'background'}; },
                   });
                   const view=createTodaySummaryView({summary,qs:selector=>document.querySelector(selector),escapeHtml:value=>String(value)});
                   window.__summaryTest={summary,view};
@@ -80,6 +83,42 @@ def test_release_artifact_reviews_and_shares_a_private_mobile_today_summary(
                 assert bounds and bounds["height"] >= 44
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
 
+            page.locator("#today-summary-destination").fill("acme/mobile#41")
+            page.evaluate(
+                """
+                () => {
+                  window.__summaryTest.summary.setDestination(document.querySelector('#today-summary-destination').value);
+                  return window.__summaryTest.view.validateDestination(document.querySelector('#validate-today-summary-destination'));
+                }
+                """
+            )
+            expect(page.locator("#today-summary-target")).to_contain_text(
+                "acme/mobile#41 · issue · Daily status"
+            )
+            expect(page.locator("#post-today-summary")).to_be_enabled()
+            page.evaluate(
+                "window.__summaryTest.view.postDraft(document.querySelector('#post-today-summary'))"
+            )
+            expect(sheet).to_be_hidden()
+            assert page.evaluate("window.__queuedSummary") == {
+                "kind": "search-reply",
+                "repository": "acme/mobile",
+                "number": 41,
+                "targetKind": "issue",
+                "body": "Today\n- Ship mobile capture\n\nTomorrow\n- Review release",
+                "operationId": "release-summary-op",
+            }
+
+            page.evaluate(
+                """
+                window.__summaryTest.view.open(
+                  [{identity:'issue:acme/mobile:41:',title:'Ship mobile capture',context:'acme/mobile#41',actual_minutes:42}],
+                  [{identity:'issue:acme/mobile:42:',title:'Review release',context:'acme/mobile#42'}]
+                )
+                """
+            )
+            expect(sheet).to_be_visible()
+
             page.evaluate(
                 """
                 () => {

tests/e2e/test_mobile_today_week_reschedule_release.py

@@ -0,0 +1,125 @@
+from __future__ import annotations
+
+import os
+import threading
+from datetime import date, timedelta
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Today to Week Ahead journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_reschedules_active_today_into_week_ahead(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    try:
+        with release_server(
+            archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}"
+        ) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(
+                viewport={"width": width, "height": height}, timezone_id="UTC"
+            )
+            page_errors: list[str] = []
+            page.on("pageerror", lambda error: page_errors.append(str(error)))
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Reschedule release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            plan_date = (date.today() + timedelta(days=2)).isoformat()
+            saved_week = page.evaluate(
+                """async ({planDate}) => {
+                  const response=await fetch('api/v1/week',{method:'PUT',headers:{'Content-Type':'application/json'},
+                    body:JSON.stringify({base_revision:0,timezone:'UTC',days:[{
+                      plan_date:planDate,ids:[],capacity_minutes:90,estimates:{}
+                    }]})});
+                  return {status:response.status,body:await response.json()};
+                }""",
+                {"planDate": plan_date},
+            )
+            assert saved_week["status"] == 200
+
+            page.locator('[data-mobile-task="work"]').click()
+            page.locator("#plan-today-available").fill("90")
+            page.locator("#plan-today-available").press("Tab")
+            page.locator("#build-today-plan").click()
+            missing = page.locator("[data-plan-missing-estimate]")
+            for _ in range(2):
+                missing.nth(0).fill("30")
+                missing.nth(0).press("Tab")
+            save_and_start = page.locator("#save-and-start-today")
+            expect(save_and_start).to_be_enabled()
+            save_and_start.click()
+            expect(page.locator("#plan-today-sheet")).to_be_hidden(timeout=10_000)
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
+            if page.locator("#plan-today-sheet").is_visible():
+                page.locator("#cancel-plan-today").click()
+            issue_sheet = page.locator("#issue-sheet")
+            if issue_sheet.is_visible():
+                page.locator("#close-issue-sheet").click()
+            expect(issue_sheet).to_be_hidden()
+            if page.locator("#plan-today-sheet").is_visible():
+                page.locator("#cancel-plan-today").click()
+
+            launcher = page.locator("[data-work-session-reschedule-week]")
+            page.locator("[data-mobile-today-more]").click()
+            expect(launcher).to_be_visible()
+            launcher_bounds = launcher.bounding_box()
+            assert launcher_bounds and launcher_bounds["height"] >= 44
+            launcher.click()
+            dialog = page.locator("#today-week-reschedule")
+            expect(dialog).to_be_visible()
+            days = page.locator("#today-week-reschedule-days button")
+            try:
+                expect(days).to_have_count(7)
+            except AssertionError as error:
+                raise AssertionError({
+                    "status": page.locator("#today-week-reschedule-status").text_content(),
+                    "page_errors": page_errors,
+                    "today": page.evaluate("async()=>await (await fetch('api/v1/today')).json()"),
+                    "week": page.evaluate("async()=>await (await fetch('api/v1/week')).json()"),
+                }) from error
+            for control in [*days.all(), page.locator("#cancel-today-week-reschedule"), page.locator("#confirm-today-week-reschedule")]:
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator("#cancel-today-week-reschedule").click()
+            expect(dialog).to_be_hidden()
+            expect(launcher).to_be_focused()
+
+            launcher.click()
+            destination = page.locator(
+                f'#today-week-reschedule-days button[data-plan-date="{plan_date}"]'
+            )
+            destination.click()
+            page.locator("#confirm-today-week-reschedule").click()
+            expect(dialog).to_be_hidden()
+            expect(page.locator("#issue-sheet-title")).to_have_text("Polish desktop filters")
+            week = page.evaluate("async()=>await (await fetch('api/v1/week')).json()")
+            today = page.evaluate("async()=>await (await fetch('api/v1/today')).json()")
+            assert week["days"][0]["plan_date"] == plan_date
+            assert len(week["days"][0]["ids"]) == 1
+            assert len(today["ids"]) == 1
+            assert not page_errors
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=2)

tests/e2e/test_mobile_today_wrap_up_release.py

@@ -56,17 +56,19 @@ def test_release_artifact_renders_and_applies_mobile_today_wrap_up(
                     {kind:'issue',repository:'acme/mobile',number:42,title:'Polish desktop filters',key:'acme/mobile#42'},
                   ];
                   const identity=item => `${item.kind}:${item.repository}:${item.number}:`;
-                  const today=items.map(identity); const later={}; const operations=[];
+                  const today=items.map(identity); const operations=[];
+                  let tomorrow={revision:4,ids:['issue:acme/mobile:42:'],capacity_minutes:120,
+                    estimates:{'issue:acme/mobile:42:':45},plan_date:'2026-08-18'};
                   const todayWork={identity,read:()=>[...today],contains:item=>today.includes(identity(item)),remove:item=>{
                     const index=today.indexOf(identity(item)); if(index<0)return false; today.splice(index,1); return true;
                   }};
-                  const laterWork={presetUntil:()=>new Date('2026-08-17T09:00:00Z'),defer:(item,wake)=>{
-                    later[identity(item)]=wake.toISOString(); return 'deferred';
+                  const tomorrowPlan={load:async()=>tomorrow,stage:value=>{
+                    tomorrow={...tomorrow,...value,sync_pending:true}; return tomorrow;
                   }};
                   const todaySync={enqueue:(action,id)=>{operations.push([action,id]);return true;},flush:()=>Promise.resolve(true)};
-                  const controller=createTodayWrapUp({todayWork,laterWork,todaySync});
+                  const controller=createTodayWrapUp({todayWork,tomorrowPlan,todaySync});
                   const view=createTodayWrapUpView({controller,qs:selector=>document.querySelector(selector),escapeHtml:value=>String(value)});
-                  window.__wrapTest={view,today,later,operations};
+                  window.__wrapTest={view,today,getTomorrow:()=>tomorrow,operations};
                   view.open(items,{});
                 }
                 """
@@ -84,11 +86,18 @@ def test_release_artifact_renders_and_applies_mobile_today_wrap_up(
             page.evaluate("window.__wrapTest.view.finish(document.querySelector('#finish-today-wrap-up'))")
             expect(sheet).to_be_hidden()
             result = page.evaluate(
-                "({today:window.__wrapTest.today,later:window.__wrapTest.later,operations:window.__wrapTest.operations})"
+                "({today:window.__wrapTest.today,tomorrow:window.__wrapTest.getTomorrow(),operations:window.__wrapTest.operations})"
             )
             assert result == {
                 "today": ["issue:acme/mobile:42:"],
-                "later": {"issue:acme/mobile:41:": "2026-08-17T09:00:00.000Z"},
+                "tomorrow": {
+                    "revision": 4,
+                    "ids": ["issue:acme/mobile:42:", "issue:acme/mobile:41:"],
+                    "capacity_minutes": 120,
+                    "estimates": {"issue:acme/mobile:42:": 45},
+                    "plan_date": "2026-08-18",
+                    "sync_pending": True,
+                },
                 "operations": [["remove", "issue:acme/mobile:41:"]],
             }
             assert browser_errors == []

tests/e2e/test_mobile_tomorrow_conflict_release.py

@@ -0,0 +1,142 @@
+from __future__ import annotations
+
+import json
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Tomorrow conflict journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_resolves_cross_device_tomorrow_conflicts_on_mobile(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    put_bodies: list[dict] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+
+            def tomorrow_route(route):
+                if route.request.method == "PUT":
+                    body = json.loads(route.request.post_data or "{}")
+                    put_bodies.append(body)
+                    if body.get("base_revision") != 12:
+                        route.fulfill(status=409, content_type="application/json", body='{"detail":"changed elsewhere"}')
+                        return
+                    route.fulfill(
+                        status=200,
+                        content_type="application/json",
+                        body=json.dumps({"revision": 13, **body}),
+                    )
+                    return
+                route.fulfill(
+                    status=200,
+                    content_type="application/json",
+                    body=json.dumps(
+                        {
+                            "revision": 12,
+                            "ids": ["issue:acme/mobile:server:"],
+                            "capacity_minutes": 60,
+                            "estimates": {"issue:acme/mobile:server:": 30},
+                            "plan_date": "2026-08-21",
+                            "timezone": "UTC",
+                        }
+                    ),
+                )
+
+            page.route("**/api/v1/tomorrow", tomorrow_route)
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Tomorrow conflict release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            def stage_phone_plan():
+                page.evaluate(
+                    """() => {
+                      localStorage.setItem('stackchain.tomorrow-sync.v1.timmy', JSON.stringify({
+                        base_revision:11, revision:11,
+                        ids:['issue:acme/mobile:phone:'], capacity_minutes:90,
+                        estimates:{'issue:acme/mobile:phone:':45},
+                        plan_date:'2026-08-21', timezone:'UTC', sync_pending:true,
+                      }));
+                      window.dispatchEvent(new Event('online'));
+                    }"""
+                )
+                expect(page.locator("#mobile-tomorrow-summary")).to_have_text(
+                    "Conflict · review required"
+                )
+
+            def open_conflict():
+                queue_sheet = page.locator("#mobile-queue-sheet")
+                if not queue_sheet.evaluate("element => element.open"):
+                    page.locator('[data-mobile-task="queues"]').click()
+                page.locator('[data-mobile-queue="tomorrow"]').click()
+                review = page.locator("#tomorrow-conflict-review")
+                expect(review).to_be_visible()
+                expect(page.locator("#plan-today-title")).to_have_text(
+                    "Resolve Tomorrow conflict"
+                )
+                expect(page.locator("#tomorrow-conflict-phone-plan")).to_contain_text(
+                    "issue:acme/mobile:phone:"
+                )
+                expect(page.locator("#tomorrow-conflict-phone-plan")).to_contain_text(
+                    "45 min"
+                )
+                expect(page.locator("#tomorrow-conflict-server-plan")).to_contain_text(
+                    "issue:acme/mobile:server:"
+                )
+                expect(page.locator("#tomorrow-conflict-server-plan")).to_contain_text(
+                    "30 min"
+                )
+                expect(page.locator("#keep-phone-tomorrow")).to_be_focused()
+                for selector in ("#keep-phone-tomorrow", "#use-server-tomorrow"):
+                    bounds = page.locator(selector).bounding_box()
+                    assert bounds and bounds["height"] >= 44
+                assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            stage_phone_plan()
+            open_conflict()
+            initial_puts = len(put_bodies)
+            page.locator("#use-server-tomorrow").click()
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+            expect(page.locator("#mobile-tomorrow-summary")).to_contain_text("1 planned")
+            assert len(put_bodies) == initial_puts
+
+            stage_phone_plan()
+            open_conflict()
+            page.locator("#keep-phone-tomorrow").click()
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+            expect(page.locator("#mobile-tomorrow-summary")).to_contain_text("1 planned · 45 of 90 min")
+            assert put_bodies[-1]["base_revision"] == 12
+            assert put_bodies[-1]["ids"] == ["issue:acme/mobile:phone:"]
+            assert page.evaluate(
+                "localStorage.getItem('stackchain.tomorrow-sync.v1.timmy')"
+            ) is None
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_week_ahead_release.py

@@ -0,0 +1,546 @@
+from __future__ import annotations
+
+import json
+import os
+import re
+import threading
+from datetime import date, timedelta
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Week Ahead journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_plans_seven_touch_safe_mobile_dates(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    saved: list[dict] = []
+    try:
+        with release_server(archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}") as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": width, "height": height}, timezone_id="UTC")
+            page_errors: list[str] = []
+            page.on("pageerror", lambda error: page_errors.append(str(error)))
+            pulled: list[dict] = []
+
+            page.route("**/api/v1/today", lambda route: route.fulfill(
+                status=200, content_type="application/json", body=json.dumps({
+                    "revision": 3, "ids": ["issue:acme/mobile:99:"],
+                    "capacity_minutes": 60, "estimates": {"issue:acme/mobile:99:": 30},
+                }),
+            ))
+
+            def pull_item_route(route):
+                body = json.loads(route.request.post_data or "{}")
+                pulled.append(body)
+                route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                    "today": {"revision": 4, "ids": ["issue:acme/mobile:99:", body["identity"]],
+                              "capacity_minutes": 60,
+                              "estimates": {"issue:acme/mobile:99:": 30, body["identity"]: 45}},
+                    "week": {"revision": 99, "timezone": "UTC", "days": [{
+                        "plan_date": (date.today() + timedelta(days=1)).isoformat(),
+                        "ids": [], "capacity_minutes": 60, "estimates": {},
+                    }]},
+                }))
+
+            page.route("**/api/v1/week/pull-item", pull_item_route)
+
+            def week_route(route):
+                if route.request.method == "PUT":
+                    body = json.loads(route.request.post_data or "{}")
+                    saved.append(body)
+                    route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                        "revision": body["base_revision"] + 1,
+                        "timezone": body["timezone"], "days": body["days"],
+                        **({"availability_defaults": body["availability_defaults"]}
+                           if "availability_defaults" in body else {}),
+                    }))
+                    return
+                route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                    "revision": 0, "timezone": None, "days": [{
+                        "plan_date": (date.today() + timedelta(days=1)).isoformat(),
+                        "ids": ["issue:acme/mobile:41:", "issue:acme/mobile:42:"], "capacity_minutes": 60,
+                        "estimates": {"issue:acme/mobile:41:": 45, "issue:acme/mobile:42:": 45},
+                    }],
+                }))
+
+            page.route("**/api/v1/week", week_route)
+            page.route(
+                "**/api/v1/repos/acme/mobile/issues/41/close",
+                lambda route: route.fulfill(
+                    status=200,
+                    content_type="application/json",
+                    body='{"number":41,"state":"closed","updated_at":"2026-08-21T12:00:00Z"}',
+                ),
+            )
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Week Ahead release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            if page.locator("#plan-today-sheet").is_visible():
+                page.locator("#cancel-plan-today").click()
+            page.locator('[data-mobile-task="queues"]').click()
+            page.locator('[data-mobile-queue="week"]').click()
+            page.wait_for_timeout(100)
+
+            assert not page_errors, f"Week Ahead launch raised: {page_errors}"
+            expect(page.locator("#plan-today-title")).to_have_text("Week Ahead")
+            overview = page.locator("#week-review")
+            expect(overview).to_be_visible()
+            cards = page.locator("#week-review-days .week-review-day")
+            expect(cards).to_have_count(7)
+            expect(cards.first).to_contain_text("Next up")
+            expect(cards.first).to_contain_text("Ship mobile capture")
+            expect(page.locator("#week-review-status")).to_contain_text("30 min over capacity")
+            expect(page.locator("#confirm-week-plan")).to_be_hidden()
+            blocked_export = page.locator("#export-saved-week-calendar")
+            expect(blocked_export).to_be_visible()
+            expect(blocked_export).to_be_disabled()
+            availability = page.locator("#open-week-availability")
+            expect(availability).to_be_visible()
+            availability_bounds = availability.bounding_box()
+            assert availability_bounds and availability_bounds["height"] >= 44
+            availability.click()
+            editor = page.locator("#week-availability-editor")
+            expect(editor).to_be_visible()
+            capacities = editor.locator("[data-weekday-capacity]")
+            expect(capacities).to_have_count(7)
+            for index, minutes in enumerate((480, 480, 480, 480, 360, 0, 0)):
+                capacities.nth(index).fill(str(minutes))
+                bounds = capacities.nth(index).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#save-week-availability").click()
+            expect(editor).to_be_hidden()
+            expect(page.locator("#week-review-status")).to_have_text("Weekly availability saved.")
+            assert saved[-1]["availability_defaults"] == [480, 480, 480, 480, 360, 0, 0]
+            availability.click()
+            page.locator("#disable-week-availability").click()
+            expect(editor).to_be_hidden()
+            expect(page.locator("#week-review-status")).to_have_text("Weekly availability disabled.")
+            assert "availability_defaults" not in saved[-1]
+            edit_week = page.locator("#edit-week-plan")
+            expect(edit_week).to_be_visible()
+            remove_actions = cards.first.locator("[data-week-unplan]")
+            expect(remove_actions).to_have_count(2)
+            remove_bounds = remove_actions.nth(1).bounding_box()
+            assert remove_bounds and remove_bounds["height"] >= 44
+            remove_actions.nth(1).click()
+            expect(cards.first).not_to_contain_text("Polish desktop filters")
+            expect(page.locator("#week-unplan-receipt")).to_have_text(
+                "Polish desktop filters removed from Week Ahead."
+            )
+            undo = page.locator("#undo-week-unplan")
+            expect(undo).to_be_visible()
+            undo_bounds = undo.bounding_box()
+            assert undo_bounds and undo_bounds["height"] >= 44
+            undo.click()
+            expect(cards.first).to_contain_text("Polish desktop filters")
+            expect(page.locator("#week-unplan-receipt")).to_be_hidden()
+            assert saved[-2]["days"][0]["ids"] == ["issue:acme/mobile:41:"]
+            assert saved[-1]["days"][0]["ids"] == [
+                "issue:acme/mobile:41:", "issue:acme/mobile:42:"
+            ]
+            writes_before_reflow = len(saved)
+            reflow = page.locator("#open-week-reflow")
+            expect(reflow).to_be_visible()
+            bounds = reflow.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            reflow.click()
+            preview = page.locator("#week-reflow-review")
+            expect(preview).to_be_visible()
+            expect(page.locator("#week-reflow-days")).to_contain_text("1 item · 45 of 60 min")
+            expect(page.locator("#week-reflow-unscheduled")).to_have_text(
+                "1 item cannot fit: Polish desktop filters. It will remain in My Work."
+            )
+            for control in (page.locator("#cancel-week-reflow"), page.locator("#apply-week-reflow")):
+                control_bounds = control.bounding_box()
+                assert control_bounds and control_bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#cancel-week-reflow").click()
+            expect(preview).to_be_hidden()
+            assert len(saved) == writes_before_reflow, "cancelling reflow must not write"
+            reflow.click()
+            page.locator("#apply-week-reflow").click()
+            expect(page.locator("#week-review-status")).to_have_text("Week Ahead reflowed and saved.")
+            expect(preview).to_be_hidden()
+            assert len(saved) == writes_before_reflow + 1
+            assert [day["ids"] for day in saved[-1]["days"]][:2] == [["issue:acme/mobile:41:"], []]
+            planned_item = cards.first.locator("[data-week-open-item]")
+            expect(planned_item).to_have_count(1)
+            planned_bounds = planned_item.bounding_box()
+            assert planned_bounds and planned_bounds["height"] >= 44
+            planned_item.click()
+            expect(page.locator("#issue-sheet")).to_have_class(re.compile(r"\bopen\b"))
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
+            expect(overview).to_be_visible()
+            page.locator("#close-issue-sheet").click()
+            expect(page.locator("#issue-sheet")).not_to_have_class(re.compile(r"\bopen\b"))
+            expect(overview).to_be_visible()
+            expect(planned_item).to_be_focused()
+            assert len(saved) == writes_before_reflow + 1, "opening and inspecting Week Ahead must not add a write"
+            export_saved = page.locator("#export-saved-week-calendar")
+            expect(export_saved).to_be_visible()
+            expect(export_saved).to_be_enabled()
+            export_bounds = export_saved.bounding_box()
+            assert export_bounds and export_bounds["height"] >= 44
+            writes_before_export = len(saved)
+            export_saved.click()
+            expect(page.locator("#week-calendar-handoff")).to_be_visible()
+            expect(overview).to_be_hidden()
+            expect(page.locator('[data-week-calendar-preview="issue:acme/mobile:41:"]')).to_have_text(
+                "09:00–09:45 · 45 min"
+            )
+            assert len(saved) == writes_before_export, "exporting a saved week must not add a write"
+            page.locator("#back-to-week-review-from-calendar").click()
+            expect(overview).to_be_visible()
+            expect(export_saved).to_be_focused()
+            for control in (cards.first.locator("[data-week-edit-day]"), edit_week):
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            edit_week.click()
+            expect(overview).to_be_hidden()
+            expect(page.locator("#plan-today-title")).to_have_text("Plan Week Ahead")
+            dates = page.locator("#week-plan-dates button")
+            expect(dates).to_have_count(7)
+            expect(dates.first).to_have_attribute("aria-current", "date")
+            for index in range(7):
+                bounds = dates.nth(index).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            dates.nth(2).click()
+            expect(dates.nth(2)).to_have_attribute("aria-current", "date")
+            expect(page.locator("#week-plan-progress")).to_have_text("Day 3 of 7 · 1 planned")
+            expect(page.locator("#save-today-plan")).to_have_text("Save & next")
+            page.locator("#save-today-plan").click()
+            expect(page.locator("#plan-today-sheet")).to_be_visible()
+            expect(dates.nth(3)).to_have_attribute("aria-current", "date")
+            expect(page.locator("#week-plan-progress")).to_have_text("Day 4 of 7 · 1 planned")
+            dates.nth(6).click()
+            expect(page.locator("#save-today-plan")).to_have_text("Save week")
+            page.locator("#save-today-plan").click()
+            expect(page.locator("#plan-today-sheet")).to_be_visible()
+            expect(page.locator("#week-review")).to_be_visible()
+            expect(page.locator("#week-review-days .week-review-day")).to_have_count(7)
+            first_day = page.locator("#week-review-days .week-review-day").first
+            expect(first_day).to_contain_text("Ship mobile capture")
+            expect(first_day).to_contain_text("acme/mobile #41 · Issue · 45 min")
+            expect(first_day.locator("code")).to_have_count(0)
+            edit = first_day.locator("[data-week-edit-day]")
+            bounds = edit.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            edit.click()
+            expect(page.locator("#week-review")).to_be_hidden()
+            expect(page.locator("#back-to-week-review")).to_be_visible()
+            expect(page.locator("#save-today-plan")).to_have_text("Save & review")
+            page.locator("#back-to-week-review").click()
+            expect(page.locator("#week-review")).to_be_visible()
+            expect(first_day).to_contain_text("Ship mobile capture")
+
+            page.locator("#open-week-capacity-import").click()
+            capacity_import = page.locator("#week-capacity-import")
+            expect(capacity_import).to_be_visible()
+            private_title = "Private customer planning"
+            tomorrow = (date.today() + timedelta(days=1)).strftime("%Y%m%d")
+            excluded = (date.today() + timedelta(days=2)).strftime("%Y%m%d")
+            added = (date.today() + timedelta(days=4)).strftime("%Y%m%d")
+            calendar = (
+                "BEGIN:VCALENDAR\r\nVERSION:2.0\r\nBEGIN:VEVENT\r\n"
+                f"SUMMARY:{private_title}\r\nDTSTART;TZID=America/New_York:{tomorrow}T050000\r\n"
+                f"DTEND;TZID=America/New_York:{tomorrow}T060000\r\nRRULE:FREQ=DAILY;COUNT=3\r\n"
+                f"EXDATE;TZID=America/New_York:{excluded}T050000\r\n"
+                f"RDATE;TZID=America/New_York:{added}T050000\r\nEND:VEVENT\r\nEND:VCALENDAR"
+            )
+            unsupported_title = "Private monthly board review"
+            unsupported_calendar = (
+                "BEGIN:VCALENDAR\r\nVERSION:2.0\r\nBEGIN:VEVENT\r\n"
+                f"SUMMARY:{unsupported_title}\r\nDTSTART:{tomorrow}T100000\r\n"
+                f"DTEND:{tomorrow}T110000\r\nRRULE:FREQ=MONTHLY;BYDAY=1FR\r\n"
+                "END:VEVENT\r\nEND:VCALENDAR"
+            )
+            page.locator("#week-capacity-file").set_input_files({
+                "name": "unsupported.ics", "mimeType": "text/calendar", "buffer": unsupported_calendar.encode()
+            })
+            expect(page.locator("#week-capacity-status")).to_contain_text(
+                "1 recurring event could not be counted"
+            )
+            expect(page.locator("#apply-week-capacities")).to_be_disabled()
+            expect(capacity_import).not_to_contain_text(unsupported_title)
+            page.locator("#week-capacity-file").set_input_files({
+                "name": "availability.ics", "mimeType": "text/calendar", "buffer": calendar.encode()
+            })
+            expect(page.locator("#week-capacity-days .week-capacity-day")).to_have_count(7)
+            expect(page.locator("#week-capacity-days .week-capacity-day").first).to_contain_text(
+                "420 min available"
+            )
+            expect(page.locator("#week-capacity-days .week-capacity-day").nth(1)).to_contain_text(
+                "480 min available"
+            )
+            expect(page.locator("#week-capacity-days .week-capacity-day").nth(2)).to_contain_text(
+                "420 min available"
+            )
+            expect(page.locator("#week-capacity-days .week-capacity-day").nth(3)).to_contain_text(
+                "420 min available"
+            )
+            expect(capacity_import).not_to_contain_text(private_title)
+            for control in (
+                page.locator("#cancel-week-capacity-import"),
+                page.locator("#week-capacity-file"),
+                page.locator("#week-capacity-start"),
+                page.locator("#week-capacity-end"),
+                page.locator("#keep-week-free-times"),
+                page.locator("#apply-week-capacities"),
+            ):
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#keep-week-free-times").check()
+            page.locator("#apply-week-capacities").click()
+            expect(capacity_import).to_be_hidden()
+            expect(page.locator("#week-review")).to_be_visible()
+            expect(first_day).to_contain_text("45 of 420 min")
+            assert saved[-1]["days"][0]["free_windows"] == [
+                {"start_time": "10:00", "end_time": "17:00"}
+            ]
+
+            page.wait_for_function("() => !document.querySelector('#confirm-week-plan').disabled")
+            confirm = page.locator("#confirm-week-plan")
+            bounds = confirm.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            confirm.click()
+            expect(page.locator("#week-calendar-handoff")).to_be_visible()
+            expect(page.locator("#week-review")).to_be_hidden()
+            start = page.locator("[data-week-calendar-start]").first
+            expect(start).to_have_value("09:00")
+            expect(page.locator('[data-week-calendar-preview="issue:acme/mobile:41:"]')).to_have_text("10:00–10:45 · 45 min")
+            expect(page.locator("#week-calendar-status")).to_contain_text("Planning around imported busy time")
+            exact = page.locator('[data-week-calendar-exact="issue:acme/mobile:41:"]')
+            expect(exact).to_have_value("")
+            exact.fill("14:00")
+            expect(page.locator('[data-week-calendar-preview="issue:acme/mobile:41:"]')).to_have_text("14:00–14:45 · 45 min")
+            save_times = page.locator("#save-week-calendar-times")
+            for control in (start, exact, page.locator("#back-to-week-review-from-calendar"), save_times, page.locator("#share-week-calendar")):
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            save_times.click()
+            expect(page.locator("#week-calendar-status")).to_have_text("Exact task times saved to Week Ahead.")
+            assert saved[-1]["days"][0]["start_times"] == {"issue:acme/mobile:41:": "14:00"}
+            page.locator("#back-to-week-review-from-calendar").click()
+            expect(page.locator("#week-review")).to_be_visible()
+            confirm.click()
+            with page.expect_download() as download_info:
+                page.locator("#share-week-calendar").click()
+            assert download_info.value.suggested_filename.startswith("stackchain-week-ahead-")
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+            page.wait_for_function("() => document.querySelector('#mobile-week-summary').textContent !== 'Loading Week Ahead…'")
+            assert saved and len(saved[-1]["days"]) == 7
+            assert [day["plan_date"] for day in saved[-1]["days"]] == sorted(
+                day["plan_date"] for day in saved[-1]["days"]
+            )
+
+            before_retirement = len(saved)
+            page.locator('[data-mobile-task="queues"]').click()
+            page.locator('[data-mobile-queue="week"]').click()
+            expect(overview).to_be_visible()
+            planned_item = cards.first.locator(
+                '[data-week-open-item="issue:acme/mobile:41:"]'
+            )
+            planned_item.click()
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
+            page.once("dialog", lambda dialog: dialog.accept())
+            page.locator("#close-issue").click()
+            expect(page.locator("#issue-sheet")).not_to_have_class(re.compile(r"\bopen\b"))
+            expect(cards.first).not_to_contain_text("Ship mobile capture")
+            expect(cards.first).to_contain_text("Polish desktop filters")
+            expect(cards.first).to_contain_text("45 of 60 min")
+            expect(page.locator("#week-review-status")).to_have_text(
+                "Ship mobile capture removed and Week Ahead saved."
+            )
+            expect(edit_week).to_be_focused()
+            assert len(saved) == before_retirement + 1
+            assert saved[-1]["days"][0]["ids"] == ["issue:acme/mobile:42:"]
+            assert saved[-1]["days"][0]["capacity_minutes"] == 60
+            pull = cards.first.locator('[data-week-pull-item="issue:acme/mobile:42:"]')
+            expect(pull).to_have_text("Review Today · 75 of 60 min")
+            pull_bounds = pull.bounding_box()
+            assert pull_bounds and pull_bounds["height"] >= 44
+            page.once("dialog", lambda dialog: dialog.dismiss())
+            pull.click()
+            expect(cards.first).to_contain_text("Polish desktop filters")
+            assert pulled == [], "cancelling the overload review must not submit"
+            expect(pull).to_have_text("Review Today · 75 of 60 min")
+            page.once("dialog", lambda dialog: dialog.accept())
+            pull.click()
+            expect(cards.first).not_to_contain_text("Polish desktop filters")
+            expect(page.locator("#week-review-status")).to_have_text(
+                "Polish desktop filters added to Today."
+            )
+            assert pulled and pulled[-1]["identity"] == "issue:acme/mobile:42:"
+            assert pulled[-1]["today_revision"] == 3
+            assert pulled[-1]["allow_over_capacity"] is True
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=5)
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_reconciles_only_the_week_day_changed_on_both_devices(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    puts: list[dict] = []
+    try:
+        with release_server(archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}") as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": width, "height": height})
+            page_errors: list[str] = []
+            page.on("pageerror", lambda error: page_errors.append(str(error)))
+
+            def week_route(route):
+                if route.request.method == "PUT":
+                    body = json.loads(route.request.post_data or "{}")
+                    puts.append(body)
+                    if len(puts) == 1:
+                        route.fulfill(status=409, content_type="application/json", body='{"message":"changed"}')
+                        return
+                    route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                        "revision": 6, "timezone": body["timezone"], "days": body["days"],
+                    }))
+                    return
+                if puts:
+                    changed_date = puts[0]["days"][0]["plan_date"]
+                    following_date = (date.fromisoformat(changed_date) + timedelta(days=1)).isoformat()
+                    route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                        "revision": 5, "timezone": puts[0]["timezone"], "days": [
+                            {"plan_date": changed_date, "ids": [], "capacity_minutes": 90, "estimates": {}},
+                            {"plan_date": following_date, "ids": [], "capacity_minutes": 30, "estimates": {}},
+                        ],
+                    }))
+                    return
+                route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                    "revision": 4, "timezone": None, "days": [],
+                }))
+
+            page.route("**/api/v1/week", week_route)
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Week conflict release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            page.locator('[data-mobile-task="queues"]').click()
+            page.locator('[data-mobile-queue="week"]').click()
+            page.locator("#edit-week-plan").click()
+            page.locator("#plan-today-available").fill("60")
+            page.locator("#save-today-plan").click()
+            page.wait_for_function("() => document.querySelector('#mobile-week-summary').textContent.includes('Conflict')")
+
+            choices = page.locator("[data-week-conflict-choice]")
+            expect(choices).to_have_count(2)
+            for index in range(2):
+                bounds = choices.nth(index).locator("xpath=..").bounding_box()
+                assert bounds and bounds["height"] >= 44
+            page.locator('[data-week-conflict-choice="phone"]').check()
+            expect(page.locator("#save-merged-week")).to_be_enabled()
+            page.locator("#save-merged-week").click()
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+
+            assert len(puts) == 2
+            assert [day["capacity_minutes"] for day in puts[-1]["days"]] == [60, 30]
+            assert not page_errors, f"Week conflict recovery raised: {page_errors}"
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=5)
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_reads_the_confirmed_week_offline_then_retries_live(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    online = True
+    try:
+        with release_server(archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}") as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": width, "height": height}, timezone_id="UTC")
+            page_errors: list[str] = []
+            page.on("pageerror", lambda error: page_errors.append(str(error)))
+
+            def week_route(route):
+                if not online:
+                    route.fulfill(status=503, content_type="application/json", body='{"message":"offline"}')
+                    return
+                route.fulfill(status=200, content_type="application/json", body=json.dumps({
+                    "revision": 7, "timezone": "UTC", "days": [{
+                        "plan_date": (date.today() + timedelta(days=1)).isoformat(),
+                        "ids": ["issue:acme/mobile:41:"], "capacity_minutes": 60,
+                        "estimates": {"issue:acme/mobile:41:": 30},
+                    }],
+                }))
+
+            page.route("**/api/v1/week", week_route)
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Offline Week Ahead phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            page.locator('[data-mobile-task="queues"]').click()
+            page.locator('[data-mobile-queue="week"]').click()
+            expect(page.locator("#week-review-days")).to_contain_text("Ship mobile capture")
+            page.locator("#cancel-plan-today").click()
+
+            online = False
+            page.locator('[data-mobile-task="queues"]').click()
+            page.locator('[data-mobile-queue="week"]').click()
+            notice = page.locator("#week-offline-snapshot")
+            expect(notice).to_be_visible()
+            expect(notice).to_contain_text("Offline snapshot")
+            expect(page.locator("#week-review-days")).to_contain_text("Ship mobile capture")
+            expect(page.locator("[data-week-edit-day]")).to_have_count(0)
+            expect(page.locator("#edit-week-plan")).to_be_hidden()
+            expect(page.locator("#open-week-capacity-import")).to_be_hidden()
+            retry = page.locator("#retry-week-live")
+            expect(retry).to_be_visible()
+            bounds = retry.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            online = True
+            retry.click()
+            expect(notice).to_be_hidden()
+            expect(page.locator("#edit-week-plan")).to_be_visible()
+            expect(page.locator("[data-week-edit-day]")).to_have_count(7)
+            assert not page_errors, f"offline Week Ahead recovery raised: {page_errors}"
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=5)

tests/test_authored_idempotency.py

@@ -419,11 +419,12 @@ async def test_slow_ledger_completion_does_not_block_health_requests(monkeypatch
         return {"id": 249, "body": body}
 
     started = threading.Event()
+    release = threading.Event()
     original_complete = main._idempotency_ledger.complete
 
     def slow_complete(key, response):
         started.set()
-        time.sleep(0.2)
+        assert release.wait(1)
         return original_complete(key, response)
 
     monkeypatch.setattr(main._idempotency_ledger, "complete", slow_complete)
@@ -432,15 +433,16 @@ async def test_slow_ledger_completion_does_not_block_health_requests(monkeypatch
     transport = httpx.ASGITransport(app=main.app)
 
     async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
-        started_at = asyncio.get_running_loop().time()
         authored = asyncio.create_task(client.post(
             "/api/v1/repos/stackchain/api/issues/248/comments",
             json={"body": "Persist without freezing"},
             headers={"Idempotency-Key": "slow-completion-248"},
         ))
         assert await asyncio.to_thread(started.wait, 1)
+        started_at = asyncio.get_running_loop().time()
         health = await client.get("/healthz")
         health_elapsed = asyncio.get_running_loop().time() - started_at
+        release.set()
         authored_response = await authored
 
     assert health.status_code == 200

tests/test_ci_workflow.py

@@ -48,7 +48,7 @@ def test_release_promotion_waits_for_tests_and_bundle():
     assert release.index("sha256sum -c") < release.index("curl --fail-with-body")
 
 
-def test_release_promotion_waits_for_artifact_mobile_offline_journey():
+def test_release_promotion_waits_for_every_packaged_mobile_journey():
     text = WORKFLOW.read_text()
     browser = text[text.index("  browser-journey:") : text.index("  release-candidate:")]
     release = text[text.index("  release-candidate:") :]
@@ -58,14 +58,6 @@ def test_release_promotion_waits_for_artifact_mobile_offline_journey():
     assert "pip install -r requirements-e2e.txt" in browser
     assert "python3 -m playwright install --with-deps chromium" in browser
     assert 'STACKCHAIN_RUN_RELEASE_E2E: "1"' in browser
-    assert (
-        "python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py "
-        "tests/e2e/test_mobile_search_preview_navigation.py "
-        "tests/e2e/test_mobile_find_work_release.py "
-        "tests/e2e/test_mobile_home_bootstrap_release.py "
-        "tests/e2e/test_mobile_today_handoff_release.py "
-        "tests/e2e/test_mobile_today_wrap_up_release.py "
-        "tests/e2e/test_mobile_today_summary_release.py "
-        "tests/e2e/test_mobile_wrap_up_handoff_release.py -q"
-    ) in browser
+    assert "python3 -m pytest tests/e2e -q" in browser
+    assert "test_mobile_" not in browser
     assert "needs: [lint, build-release, browser-journey]" in release

tests/test_command_palette.py

@@ -389,6 +389,27 @@ process.stdout.write(JSON.stringify({{
     }
 
 
+def test_search_preview_reports_only_successfully_loaded_revisions_to_its_source_queue():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const loaded=[];
+const preview=createSearchPreview({{
+  fetchJson:item => item.number === 9 ? Promise.reject(new Error('preview failed')) :
+    Promise.resolve({{...item,title:'Loaded'}}),
+  mutate:async()=>{{}}, onOpened:item=>loaded.push([item.number,item.updated_at]), onState:()=>{{}},
+}});
+await preview.open({{repository:'stackchain/api',number:42,kind:'issue',updated_at:'rev-1'}});
+await preview.open({{repository:'stackchain/api',number:9,kind:'issue',updated_at:'rev-2'}}).catch(()=>{{}});
+process.stdout.write(JSON.stringify(loaded));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == [[42, "rev-1"]]
+
+
 def test_search_preview_queue_and_next_advances_only_after_durable_admission():
     script = f"""
 const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
@@ -631,7 +652,7 @@ def test_mobile_search_preview_renders_session_navigation_and_advances_after_pla
     assert 'aria-label="Search result navigation"' in html
     assert ".search-preview-navigation" in css
     assert ".search-preview-header button, .search-preview-actions button" in css
-    assert "session:[()=>commandSearchState, commandSearch, item=>taskOverlayHistory.update({preview:item})]" in html
+    assert "getSession:() => followingQueue.session() || commandSearchState" in html
     preview_source = SEARCH_PREVIEW.read_text()
     assert "api.previous()" in preview_source
     assert "api.next()" in preview_source
@@ -806,6 +827,356 @@ if (!states.some(state => state.status === 'reopened')) throw new Error('reopen
     subprocess.run(["node", "-e", script], check=True, capture_output=True, text=True)
 
 
+def test_search_preview_closed_authored_pull_reopen_sends_head_guard_to_pull_api():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const calls = [];
+const mutate = globalThis.searchPreviewMutation(async (path, options) => {{
+  calls.push({{path, options}});
+  return {{repository:'stackchain/web',number:9,state:'open',head_sha:'abc1234'}};
+}});
+const detail = {{
+  repository:'stackchain/web',number:9,kind:'pull',state:'closed',
+  authored_pull_reopenable:true,head_sha:'abc1234',
+}};
+const result = await mutate(detail, 'reopen-pull');
+process.stdout.write(JSON.stringify({{calls,result}}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "calls": [{
+            "path": "api/v1/repos/stackchain/web/pulls/9/reopen",
+            "options": {
+                "method": "PATCH",
+                "headers": {"Content-Type": "application/json"},
+                "body": '{"expected_head_sha":"abc1234"}',
+            },
+        }],
+        "result": {
+            "repository": "stackchain/web",
+            "number": 9,
+            "state": "open",
+            "head_sha": "abc1234",
+        },
+    }
+
+
+def test_search_preview_closed_authored_pull_exposes_reopen_in_my_work_action():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+const detail = {{
+  repository:'stackchain/web',number:9,kind:'pull',state:'closed',
+  authored_pull_reopenable:true,head_sha:'abc1234',
+}};
+const ready = {{hidden:true,textContent:'',disabled:false}};
+globalThis.renderSearchPreviewStart(detail, {{status:'ready'}}, ready);
+const pending = {{hidden:true,textContent:'',disabled:false}};
+globalThis.renderSearchPreviewStart(detail, {{status:'reopening'}}, pending);
+process.stdout.write(JSON.stringify({{ready,pending}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "ready": {
+            "hidden": False,
+            "textContent": "Reopen in My Work",
+            "disabled": False,
+        },
+        "pending": {
+            "hidden": False,
+            "textContent": "Reopen in My Work",
+            "disabled": True,
+        },
+    }
+
+
+def test_search_preview_closed_authored_pull_reopen_is_single_flight():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+let calls = 0;
+let resolveMutation;
+const states = [];
+const detail = {{
+  repository:'stackchain/web',number:9,kind:'pull',state:'closed',
+  authored_pull_reopenable:true,head_sha:'abc1234',
+}};
+const preview = createSearchPreview({{
+  fetchJson:async () => detail,
+  mutate:(_detail, action) => {{
+    if (action !== 'reopen-pull') throw new Error('wrong action');
+    calls += 1;
+    return new Promise(resolve => {{ resolveMutation = resolve; }});
+  }},
+  onState:state => states.push(state),
+}});
+await preview.open(detail);
+const first = preview.reopenPull(detail);
+const second = preview.reopenPull(detail);
+if (first !== second || calls !== 1) throw new Error('pull recovery was not single-flight');
+resolveMutation({{...detail,state:'open'}});
+await first;
+process.stdout.write(JSON.stringify({{calls,status:states.at(-1).status}}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {"calls": 1, "status": "reopened"}
+
+
+def test_authored_pull_recovery_confirms_refreshes_and_opens_above_search_history():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const events = [];
+const history = ['search'];
+const detail = {{repository:'stackchain/web',number:9,kind:'pull',head_sha:'abc1234'}};
+const item = {{repository:'stackchain/web',number:9,kind:'pull',key:'stackchain/web#9'}};
+const recover = globalThis.createSearchAuthoredPullRecovery({{
+  confirm:message => {{ events.push(['confirm',message]); return true; }},
+  reopen:target => {{ events.push(['reopen',target.head_sha]); return Promise.resolve({{...target,state:'open'}}); }},
+  refresh:() => {{ events.push(['refresh']); return Promise.resolve(); }},
+  find:target => target.number === 9 ? item : null,
+  open:opened => {{ events.push(['open',opened.key]); history.push('pull'); }},
+  unavailable:message => events.push(['unavailable',message]),
+}});
+const outcome = await recover(detail);
+process.stdout.write(JSON.stringify({{events,history,outcome}}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    payload = json.loads(result.stdout)
+    assert payload["events"] == [
+        ["confirm", "Reopen stackchain/web #9?"],
+        ["reopen", "abc1234"],
+        ["refresh"],
+        ["open", "stackchain/web#9"],
+    ]
+    assert payload["history"] == ["search", "pull"]
+    assert payload["outcome"] == "opened"
+
+
+def test_search_preview_watch_is_single_flight_and_keeps_visible_context_on_failure():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+let calls = 0; let rejectWatch; const states = [];
+const detail = {{repository:'stackchain/api',number:42,kind:'issue',claimable:true,watching:false}};
+const preview = createSearchPreview({{
+  fetchJson:async()=>detail, mutate:async()=>{{}},
+  watch:()=>{{calls+=1;return new Promise((_resolve,reject)=>rejectWatch=reject);}},
+  onState:state=>states.push(state),
+}});
+await preview.open(detail);
+const first=preview.setWatching(true); const second=preview.setWatching(true);
+if (calls !== 1 || first !== second) throw new Error('watch mutation was not single-flight');
+rejectWatch(new Error('offline')); await Promise.allSettled([first,second]);
+const final=states.at(-1);
+process.stdout.write(JSON.stringify({{calls,status:final.status,number:final.detail.number,
+  watching:final.detail.watching,error:final.error.message}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "calls": 1,
+        "status": "watch-error",
+        "number": 42,
+        "watching": False,
+        "error": "offline",
+    }
+
+
+def test_search_preview_preserves_authoritative_watch_and_offers_following_repair():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const states = [];
+const detail = {{repository:'stackchain/api',number:42,kind:'pull',state:'open',claimable:true,watching:false}};
+const preview = createSearchPreview({{
+  fetchJson:async()=>detail,
+  watch:async()=>({{watching:true,following_synced:false,error:'Watching in Gitea, but Following could not sync. Retry this action.'}}),
+  onState:state=>states.push(state),
+}});
+await preview.open(detail);
+await preview.setWatching(true);
+const final=states.at(-1);
+process.stdout.write(JSON.stringify({{
+  status:final.status,
+  watching:final.detail.watching,
+  message:globalThis.searchPreviewWatchStatus(final),
+}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "status": "watch-partial",
+        "watching": True,
+        "message": "Watching in Gitea, but Following could not sync. Tap Stop watching, then Watch pull request to repair.",
+    }
+
+
+def test_mobile_search_preview_exposes_touch_safe_watch_action():
+    html = dashboard_bundle_text()
+    css = (FRONTEND / "dashboard.css").read_text()
+    dashboard = (FRONTEND / "dashboard.js").read_text()
+
+    assert '<button id="watch-search-result" type="button" hidden>Watch issue</button>' in html
+    assert "wireSearchPreviewWatch" in dashboard
+    assert "preview.setWatching" in SEARCH_PREVIEW.read_text()
+    assert ".search-preview-actions button" in css and "min-height:44px" in css
+
+
+def test_search_preview_watch_is_available_for_open_issues_pulls_and_closed_following_retirement():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const loaded = [];
+const options = globalThis.searchPreviewSubscriptionOptions(async path => {{
+  loaded.push(path);
+  return {{watching:true}};
+}});
+const assigned = {{repository:'stackchain/api',number:42,kind:'issue',state:'open',
+  claimable:false,assignees:['alexander']}};
+const hydrated = await options.load(assigned);
+const button = {{hidden:true,textContent:'',disabled:false}};
+globalThis.renderSearchPreviewWatch(hydrated, {{status:'ready'}}, button);
+const excluded = [];
+for (const detail of [
+  {{...assigned,state:'closed'}},
+  {{...assigned,kind:'pull'}},
+]) {{
+  await options.load(detail);
+  const candidate = {{hidden:false,textContent:'',disabled:false}};
+  globalThis.renderSearchPreviewWatch(detail, {{status:'ready'}}, candidate);
+  excluded.push(candidate.hidden);
+}}
+const closedFollowing = await options.load({{...assigned,state:'closed',following:true}});
+const retire = {{hidden:true,textContent:'',disabled:false}};
+globalThis.renderSearchPreviewWatch(closedFollowing, {{status:'ready'}}, retire);
+process.stdout.write(JSON.stringify({{loaded,watching:hydrated.watching,button,excluded,closedFollowing,retire}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    payload = json.loads(result.stdout)
+    assert payload["loaded"] == [
+        "api/v1/repos/stackchain/api/issues/42/preview/subscription?kind=issue",
+        "api/v1/repos/stackchain/api/issues/42/preview/subscription?kind=pull",
+    ]
+    assert payload["watching"] is True
+    assert payload["button"] == {
+        "hidden": False,
+        "textContent": "Stop watching",
+        "disabled": False,
+    }
+    assert payload["excluded"] == [True, False]
+    assert payload["closedFollowing"]["watching"] is True
+    assert payload["retire"] == {
+        "hidden": False,
+        "textContent": "Stop watching & next",
+        "disabled": False,
+    }
+
+
+def test_closed_following_unwatch_is_single_flight_and_advances_only_after_confirmation():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+let finish;
+const states=[]; const retired=[]; const opened=[]; let calls=0;
+const next={{repository:'stackchain/web',number:9,kind:'issue',state:'open'}};
+const preview=createSearchPreview({{
+  fetchJson:item => Promise.resolve(item), mutate:()=>Promise.resolve(),
+  watch:() => {{ calls += 1; return new Promise(resolve => finish=resolve); }},
+  afterUnwatch:item => {{ retired.push(item.number); return next; }},
+  onNavigate:item => opened.push(item.number), onState:state => states.push(state),
+}});
+await preview.open({{repository:'stackchain/api',number:42,kind:'issue',state:'closed',following:true,watching:true}});
+const first=preview.setWatching(false); const second=preview.setWatching(false);
+await new Promise(resolve => setImmediate(resolve));
+const before={{calls,retired:[...retired],opened:[...opened]}};
+finish({{watching:false,following_synced:true}});
+await Promise.all([first,second]);
+process.stdout.write(JSON.stringify({{before,calls,same:first===second,retired,opened,last:states.at(-1)}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    payload = json.loads(result.stdout)
+    assert payload["before"] == {"calls": 1, "retired": [], "opened": []}
+    assert payload["same"] is True
+    assert payload["retired"] == [42]
+    assert payload["opened"] == [9]
+    assert payload["last"]["detail"]["number"] == 9
+
+
+def test_search_subscription_preview_hydrates_detail_before_watch_state():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const calls=[];
+const options=globalThis.searchPreviewSubscriptionOptions(async path => {{
+  calls.push(path);
+  if (path.includes('/subscription')) return {{watching:true}};
+  return {{repository:'stackchain/api',number:42,kind:'issue',state:'open',title:'Hydrated'}};
+}});
+const detail=await options.preview({{repository:'stackchain/api',number:42,kind:'issue'}});
+process.stdout.write(JSON.stringify({{calls,detail}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "calls": [
+            "api/v1/repos/stackchain/api/issues/42/preview?kind=issue",
+            "api/v1/repos/stackchain/api/issues/42/preview/subscription?kind=issue",
+        ],
+        "detail": {
+            "repository": "stackchain/api", "number": 42, "kind": "issue",
+            "state": "open", "title": "Hydrated", "watching": True,
+        },
+    }
+
+
+def test_closed_following_preview_preserves_origin_and_skips_status_lookup():
+    script = f"""
+require({json.dumps(str(SEARCH_PREVIEW))});
+(async () => {{
+const calls=[];
+const options=globalThis.searchPreviewSubscriptionOptions(async path => {{
+  calls.push(path);
+  return {{repository:'stackchain/api',number:42,kind:'issue',state:'closed',title:'Finished'}};
+}});
+const detail=await options.preview({{repository:'stackchain/api',number:42,kind:'issue',following:true}});
+process.stdout.write(JSON.stringify({{calls,detail}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    payload = json.loads(result.stdout)
+    assert payload["calls"] == [
+        "api/v1/repos/stackchain/api/issues/42/preview?kind=issue"
+    ]
+    assert payload["detail"]["following"] is True
+    assert payload["detail"]["watching"] is True
+
+
 def test_search_preview_shares_canonical_url_without_closing_the_preview():
     script = f"""
 const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
@@ -925,9 +1296,11 @@ def test_assigned_pull_preview_hands_off_to_existing_my_work_sheet_without_claim
 def test_requested_pull_preview_opens_native_review_without_assignment_mutation():
     html = dashboard_bundle_text()
     css = (FRONTEND / "dashboard.css").read_text()
+    preview = SEARCH_PREVIEW.read_text()
 
-    assert "startButton.hidden = !(detail.reviewable" in html
-    assert "detail.reviewable ? 'Review now'" in html
+    assert "renderSearchPreviewStart(detail, state, startButton)" in html
+    assert "button.hidden = !(detail.reviewable" in preview
+    assert "detail.reviewable ? 'Review now'" in preview
     handler = html.split(
         "qs('#start-search-result').addEventListener('click'", 1
     )[1].split("qs('#close-whiteboard')", 1)[0]
@@ -942,9 +1315,10 @@ def test_requested_pull_preview_opens_native_review_without_assignment_mutation(
 def test_search_preview_offers_assign_and_start_for_eligible_issues():
     html = dashboard_bundle_text()
     css = (FRONTEND / "dashboard.css").read_text()
+    preview = SEARCH_PREVIEW.read_text()
 
     assert 'id="start-search-result"' in html
-    assert "(detail.assigned_to_me ? 'Start in Today' : 'Assign & start')" in html
+    assert "(detail.assigned_to_me ? 'Start in Today' : 'Assign & start')" in preview
     assert "const searchAssignAndStart = createSearchStart(detail => searchPreview.claim(detail))" in html
     assert "searchAssignAndStart.run(detail, { alreadyOwned: detail.assigned_to_me })" in html
     assert ".search-preview-primary-actions" in css
@@ -1098,9 +1472,10 @@ process.stdout.write(JSON.stringify({{outcome, refreshes, messages}}));
 
 def test_closed_issue_preview_reopens_then_resumes_through_capacity_guard():
     html = dashboard_bundle_text()
+    preview = SEARCH_PREVIEW.read_text()
 
-    assert "detail.reopenable ? 'Reopen & resume'" in html
-    assert "mutate: (detail, action) => fetchReviewJson(" in html
+    assert "detail.reopenable ? 'Reopen & resume'" in preview
+    assert "mutate:searchPreviewMutation(fetchReviewJson)" in html
     handler = html.split("qs('#start-search-result').addEventListener('click'", 1)[1].split(
         "qs('#close-whiteboard')", 1
     )[0]

tests/test_comment_next.py

@@ -303,4 +303,4 @@ async def test_unread_update_offers_reply_mark_read_and_next_independent_of_toda
     assert '.update-reply-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr));' in html
     assert '.update-reply-actions button { min-height:44px;' in html
     worker = (Path(__file__).parents[1] / "frontend" / "service-worker.js").read_text()
-    assert "stackchain-dashboard-shell-v121" in worker
+    assert "stackchain-dashboard-shell-v139" in worker

tests/test_completed_filed_review_store.py

@@ -1,3 +1,5 @@
+import sqlite3
+
 import httpx
 import pytest
 
@@ -21,6 +23,30 @@ def test_receipts_merge_without_lost_updates_and_remain_account_scoped(tmp_path)
     assert store.get("alexander") == {"receipts": []}
 
 
+def test_receipt_history_is_encrypted_and_bound_to_its_account(tmp_path):
+    database = tmp_path / "completed-filed.sqlite3"
+    store = CompletedFiledReviewStore(database, encryption_key=b"f" * 32)
+    timmy = receipt("private-timmy/repository", 912)
+    alexander = receipt("private-alexander/repository", 427)
+
+    store.merge("timmy-private-login", [timmy])
+    store.merge("alexander-private-login", [alexander])
+
+    raw = database.read_bytes()
+    assert b"private-timmy/repository" not in raw
+    assert b"private-alexander/repository" not in raw
+    with sqlite3.connect(database) as connection:
+        rows = connection.execute(
+            "SELECT login, receipts FROM completed_filed_review_collections ORDER BY login"
+        ).fetchall()
+        connection.execute(
+            "UPDATE completed_filed_review_collections SET receipts = ? WHERE login = ?",
+            (rows[1][1], rows[0][0]),
+        )
+    with pytest.raises(RuntimeError, match="private state could not be decrypted"):
+        store.get("alexander-private-login")
+
+
 def test_receipts_keep_newest_revision_and_bound_each_account(tmp_path):
     store = CompletedFiledReviewStore(tmp_path / "completed-filed.sqlite3", limit=2)
     newer = receipt(updated_at="2026-08-16T12:00:00Z")
@@ -32,6 +58,42 @@ def test_receipts_keep_newest_revision_and_bound_each_account(tmp_path):
     assert bounded == {"receipts": [receipt("stackchain/web", 2), receipt("stackchain/docs", 3)]}
 
 
+def test_legacy_plaintext_receipts_migrate_for_every_account_without_loss(tmp_path):
+    database = tmp_path / "completed-filed.sqlite3"
+    with sqlite3.connect(database) as connection:
+        connection.execute(
+            "CREATE TABLE completed_filed_reviews ("
+            "login TEXT NOT NULL, repository TEXT NOT NULL, issue_number INTEGER NOT NULL, "
+            "updated_at TEXT NOT NULL, touched_at INTEGER NOT NULL, "
+            "PRIMARY KEY (login, repository, issue_number))"
+        )
+        connection.executemany(
+            "INSERT INTO completed_filed_reviews VALUES (?, ?, ?, ?, ?)",
+            [
+                ("timmy", "legacy-private/first", 1, "2026-08-14T12:00:00Z", 1),
+                ("timmy", "legacy-private/second", 2, "2026-08-15T12:00:00Z", 2),
+                ("alexander", "legacy-private/other", 3, "2026-08-16T12:00:00Z", 1),
+            ],
+        )
+
+    store = CompletedFiledReviewStore(database, encryption_key=b"m" * 32)
+
+    assert store.get("timmy") == {"receipts": [
+        receipt("legacy-private/first", 1, "2026-08-14T12:00:00Z"),
+        receipt("legacy-private/second", 2, "2026-08-15T12:00:00Z"),
+    ]}
+    assert store.get("alexander") == {"receipts": [
+        receipt("legacy-private/other", 3, "2026-08-16T12:00:00Z")
+    ]}
+    raw = database.read_bytes()
+    assert b"legacy-private/first" not in raw
+    assert b"legacy-private/other" not in raw
+    with sqlite3.connect(database) as connection:
+        assert connection.execute(
+            "SELECT count(*) FROM sqlite_master WHERE name = 'completed_filed_reviews'"
+        ).fetchone()[0] == 0
+
+
 @pytest.mark.parametrize("candidate", [
     {"repository": "bad", "number": 1, "updated_at": "2026-08-15T12:00:00Z"},
     {"repository": "stackchain/api", "number": 0, "updated_at": "2026-08-15T12:00:00Z"},

tests/test_create_pull_api.py

@@ -0,0 +1,203 @@
+import httpx
+import pytest
+
+from src import gitea_proxy
+from src import main
+
+
+@pytest.fixture(autouse=True)
+def clear_pull_creation_operations():
+    main._authored_action_operations.clear()
+    main._idempotency_ledger.clear()
+    yield
+    main._authored_action_operations.clear()
+    main._idempotency_ledger.clear()
+
+
+@pytest.mark.anyio
+async def test_pull_creation_options_return_visible_repository_branches(monkeypatch):
+    async def access(repository):
+        assert repository == "stackchain/api"
+        return {"full_name": repository, "default_branch": "main", "permissions": {"push": True}}
+
+    async def branches(repository):
+        assert repository == "stackchain/api"
+        return [
+            {"name": "feature/mobile", "commit": {"id": "abc1234"}},
+            {"name": "main", "commit": {"id": "def5678"}},
+        ]
+
+    monkeypatch.setattr(main.gitea_proxy, "repository_access", access)
+    monkeypatch.setattr(main.gitea_proxy, "repo_branches", branches, raising=False)
+
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
+        response = await client.get("/api/v1/repos/stackchain/api/pull-creation-options")
+
+    assert response.status_code == 200
+    assert response.headers["cache-control"] == "no-store"
+    assert response.json() == {
+        "default_branch": "main",
+        "branches": [
+            {"name": "feature/mobile", "sha": "abc1234"},
+            {"name": "main", "sha": "def5678"},
+        ],
+    }
+
+
+@pytest.mark.anyio
+async def test_create_pull_endpoint_returns_confirmed_mobile_pull(monkeypatch):
+    calls = []
+
+    async def access(repository):
+        return {"full_name": repository, "permissions": {"push": True}}
+
+    async def create(repository, *, head, base, title, body, draft, expected_head_sha):
+        calls.append((repository, head, base, title, body, draft, expected_head_sha))
+        return {
+            "number": 42,
+            "repository": repository,
+            "title": title,
+            "body": body,
+            "head": {"ref": head, "sha": expected_head_sha},
+            "base": {"ref": base},
+            "draft": draft,
+            "state": "open",
+            "url": "https://forge.example/stackchain/api/pulls/42",
+            "existing": False,
+        }
+
+    monkeypatch.setattr(main.gitea_proxy, "repository_access", access)
+    monkeypatch.setattr(main.gitea_proxy, "create_pull", create, raising=False)
+
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
+        response = await client.post(
+            "/api/v1/repos/stackchain/api/pulls",
+            headers={"Idempotency-Key": "mobile-create-42"},
+            json={
+                "head": "feature/mobile",
+                "base": "main",
+                "title": "  Ship mobile create  ",
+                "body": "  Context  ",
+                "draft": True,
+                "expected_head_sha": "abc1234",
+            },
+        )
+
+    assert response.status_code == 201
+    assert response.headers["cache-control"] == "no-store"
+    assert response.json()["number"] == 42
+    assert calls == [
+        ("stackchain/api", "feature/mobile", "main", "Ship mobile create", "Context", True, "abc1234")
+    ]
+
+
+@pytest.mark.anyio
+async def test_gitea_create_pull_revalidates_head_and_confirms_created_pull():
+    requests = []
+
+    async def handler(request):
+        requests.append(request)
+        if request.method == "GET" and request.url.path.endswith("/branches/feature/mobile"):
+            return httpx.Response(200, json={"name": "feature/mobile", "commit": {"id": "abc1234"}})
+        if request.method == "GET" and request.url.path.endswith("/pulls"):
+            return httpx.Response(200, json=[])
+        if request.method == "POST" and request.url.path.endswith("/pulls"):
+            return httpx.Response(201, json={
+                "number": 42,
+                "title": "Ship mobile create",
+                "body": "Context",
+                "state": "open",
+                "draft": True,
+                "head": {"ref": "feature/mobile", "sha": "abc1234"},
+                "base": {"ref": "main"},
+                "user": {"login": "timmy"},
+                "html_url": "https://forge.alexanderwhitestone.com/git/stackchain/api/pulls/42",
+            })
+        return httpx.Response(404)
+
+    gitea_proxy.start_client(transport=httpx.MockTransport(handler))
+    try:
+        result = await gitea_proxy.create_pull(
+            "stackchain/api",
+            head="feature/mobile",
+            base="main",
+            title="Ship mobile create",
+            body="Context",
+            draft=True,
+            expected_head_sha="abc1234",
+        )
+    finally:
+        await gitea_proxy.stop_client()
+
+    assert result["number"] == 42
+    assert result["head"] == {"ref": "feature/mobile", "sha": "abc1234"}
+    assert result["author"] == "timmy"
+    assert result["existing"] is False
+    mutation = next(request for request in requests if request.method == "POST")
+    assert mutation.read() == b'{"head":"feature/mobile","base":"main","title":"Ship mobile create","body":"Context","draft":true}'
+
+
+@pytest.mark.anyio
+async def test_gitea_create_pull_returns_existing_source_base_without_mutation():
+    requests = []
+    existing = {
+        "number": 41,
+        "title": "Already open",
+        "body": "Existing context",
+        "state": "open",
+        "draft": False,
+        "head": {"ref": "feature/mobile", "sha": "abc1234"},
+        "base": {"ref": "main"},
+        "user": {"login": "timmy"},
+        "html_url": "https://forge.alexanderwhitestone.com/git/stackchain/api/pulls/41",
+    }
+
+    async def handler(request):
+        requests.append(request)
+        if "/branches/" in request.url.path:
+            return httpx.Response(200, json={"name": "feature/mobile", "commit": {"id": "abc1234"}})
+        if request.method == "GET" and request.url.path.endswith("/pulls"):
+            return httpx.Response(200, json=[existing])
+        return httpx.Response(500)
+
+    gitea_proxy.start_client(transport=httpx.MockTransport(handler))
+    try:
+        result = await gitea_proxy.create_pull(
+            "stackchain/api", head="feature/mobile", base="main",
+            title="Duplicate attempt", body="", draft=True,
+            expected_head_sha="abc1234",
+        )
+    finally:
+        await gitea_proxy.stop_client()
+
+    assert result["number"] == 41
+    assert result["existing"] is True
+    assert all(request.method != "POST" for request in requests)
+
+
+@pytest.mark.anyio
+async def test_create_pull_endpoint_reports_stale_source_without_retrying(monkeypatch):
+    async def access(repository):
+        return {"full_name": repository, "permissions": {"push": True}}
+
+    async def stale(*args, **kwargs):
+        raise gitea_proxy.PullCreateConflictError("Source branch changed before pull creation")
+
+    monkeypatch.setattr(main.gitea_proxy, "repository_access", access)
+    monkeypatch.setattr(main.gitea_proxy, "create_pull", stale)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
+        response = await client.post(
+            "/api/v1/repos/stackchain/api/pulls",
+            json={
+                "head": "feature/mobile", "base": "main", "title": "Ship it",
+                "expected_head_sha": "abc1234",
+            },
+        )
+
+    assert response.status_code == 409
+    assert response.json() == {
+        "error": "The source branch changed. Refresh branches before creating the pull request."
+    }

tests/test_create_pull_frontend.py

@@ -0,0 +1,142 @@
+import json
+import subprocess
+from pathlib import Path
+
+
+ROOT = Path(__file__).parents[1]
+MODULE = ROOT / "frontend" / "create-pull-sheet.js"
+
+
+def run_node(scenario: str) -> dict:
+    script = f"""
+const createPullSheet = require({json.dumps(str(MODULE))});
+{scenario}
+"""
+    result = subprocess.run(["node", "-e", script], text=True, capture_output=True, cwd=ROOT)
+    assert result.returncode == 0, result.stderr
+    return json.loads(result.stdout)
+
+
+def test_create_pull_controller_loads_branches_and_defaults_base():
+    result = run_node("""
+const calls=[];
+const controller=createPullSheet.createController({
+  request:async (url) => {
+    calls.push(url);
+    return {default_branch:'main',branches:[
+      {name:'feature/mobile',sha:'abc1234'},
+      {name:'main',sha:'def5678'}
+    ]};
+  },
+  storage:{getItem:()=>null,setItem:()=>{}},
+  login:'timmy'
+});
+controller.selectRepository('stackchain/api').then(value => {
+  process.stdout.write(JSON.stringify({value,calls,state:controller.state()}));
+}).catch(error=>{console.error(error);process.exit(1)});
+""")
+    assert result["calls"] == ["api/v1/repos/stackchain/api/pull-creation-options"]
+    assert result["state"]["base"] == "main"
+    assert result["state"]["head"] == "feature/mobile"
+    assert result["state"]["expected_head_sha"] == "abc1234"
+
+
+def test_create_pull_controller_submits_idempotently_and_keeps_draft_on_failure():
+    result = run_node("""
+const calls=[]; const saved=[]; let fail=true;
+const controller=createPullSheet.createController({
+  request:async (url, options) => {
+    calls.push([url,options]);
+    if (!options) return {default_branch:'main',branches:[{name:'topic',sha:'abc1234'},{name:'main',sha:'def5678'}]};
+    if (fail) { fail=false; throw new Error('offline'); }
+    return {number:9,repository:'acme/app',head:{ref:'topic',sha:'abc1234'},base:{ref:'main'},draft:true};
+  },
+  storage:{getItem:()=>null,setItem:(key,value)=>saved.push([key,JSON.parse(value)])},
+  login:'timmy', createId:()=> 'stable-id'
+});
+(async()=>{
+  await controller.selectRepository('acme/app');
+  controller.update({title:'Ship it',body:'Context'});
+  let error=''; try { await controller.submit(); } catch (caught) { error=caught.message; }
+  const retained=controller.state();
+  const confirmed=await controller.submit();
+  process.stdout.write(JSON.stringify({calls,error,retained,confirmed,saved}));
+})().catch(error=>{console.error(error);process.exit(1)});
+""")
+    assert result["error"] == "offline"
+    assert result["retained"]["title"] == "Ship it"
+    posts = [call for call in result["calls"] if call[1]]
+    assert len(posts) == 2
+    assert posts[0][1]["headers"]["Idempotency-Key"] == "stable-id"
+    assert posts[1][1]["headers"]["Idempotency-Key"] == "stable-id"
+    assert posts[0][1]["body"]["expected_head_sha"] == "abc1234"
+    assert result["confirmed"]["number"] == 9
+
+
+def test_create_pull_controller_restores_only_the_current_accounts_draft():
+    result = run_node("""
+const values={
+  'stackchain.create-pull.v1.timmy':JSON.stringify({repository:'acme/app',head:'topic',base:'main',title:'Saved title',body:'Saved body',draft:false}),
+  'stackchain.create-pull.v1.alexander':JSON.stringify({repository:'private/repo',title:'Other account'})
+};
+const controller=createPullSheet.createController({
+  request:async()=>({}), storage:{getItem:key=>values[key] || null,setItem:()=>{}}, login:'Timmy'
+});
+process.stdout.write(JSON.stringify(controller.state()));
+""")
+    assert result == {
+        "repository": "acme/app",
+        "branches": [],
+        "head": "topic",
+        "base": "main",
+        "expected_head_sha": "",
+        "title": "Saved title",
+        "body": "Saved body",
+        "draft": False,
+    }
+
+
+def test_mobile_pull_creation_sheet_is_packaged_and_touch_safe():
+    html = (ROOT / "frontend" / "index.html").read_text()
+    css = (ROOT / "frontend" / "dashboard.css").read_text()
+    bundle = (ROOT / "src" / "frontend_bundle.py").read_text()
+
+    assert 'id="create-pull-sheet" role="dialog" aria-modal="true"' in html
+    assert 'id="create-pull-form"' in html
+    assert 'id="create-pull-repository"' in html
+    assert 'id="create-pull-head"' in html
+    assert 'id="create-pull-base"' in html
+    assert 'id="submit-create-pull"' in html
+    assert 'static/create-pull-sheet.js' in bundle
+    assert ".create-pull-panel button" in css
+    assert "min-height:44px" in css.replace(" ", "")
+
+
+def test_create_pull_binding_renders_branch_receipt_and_created_pull():
+    result = run_node("""
+const rendered=[]; const statuses=[]; const opened=[];
+const controller={
+  selectRepository:async repository=>({repository,branches:[{name:'topic',sha:'abc1234'},{name:'main',sha:'def5678'}],head:'topic',base:'main',expected_head_sha:'abc1234'}),
+  update:values=>values,
+  submit:async()=>({number:12,repository:'acme/app',existing:false})
+};
+const binding=createPullSheet.createBinding({controller,
+  render:state=>rendered.push(state), status:value=>statuses.push(value),
+  onCreated:value=>opened.push(value)
+});
+(async()=>{
+  await binding.repositoryChanged('acme/app');
+  await binding.submit();
+  process.stdout.write(JSON.stringify({rendered,statuses,opened}));
+})().catch(error=>{console.error(error);process.exit(1)});
+""")
+    assert result["rendered"][0]["expected_head_sha"] == "abc1234"
+    assert result["statuses"][-1] == "Pull request #12 created."
+    assert result["opened"][0]["number"] == 12
+
+
+def test_dashboard_wires_create_pull_inside_lazy_issue_capture_chunk():
+    dashboard = (ROOT / "frontend" / "dashboard.js").read_text()
+    module = MODULE.read_text()
+    assert "cp.b();" not in dashboard
+    assert "else cp.b();" in module

tests/test_dashboard_auth.py

@@ -2,6 +2,7 @@ import asyncio
 import sqlite3
 import threading
 import time
+from typing import get_args
 from urllib.parse import parse_qs, urlsplit
 
 import httpx
@@ -9,10 +10,14 @@ import pytest
 from fastapi import Request
 
 from src import main
-from src.session_store import SessionStoreError
+from src.session_store import SessionStatus, SessionStoreError
 from src.views import FRONTEND_BUILD
 
 
+def test_release_rollback_is_a_supported_step_up_action():
+    assert "prepare_release_rollback" in get_args(main.StepUpAction)
+
+
 @pytest.fixture
 def access_control(monkeypatch, tmp_path):
     monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
@@ -24,6 +29,83 @@ def access_control(monkeypatch, tmp_path):
     monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login-attempts.sqlite3"))
     monkeypatch.setenv("STACKCHAIN_LOGIN_MAX_FAILURES", "3")
     monkeypatch.setenv("STACKCHAIN_LOGIN_WINDOW_SECONDS", "60")
+    async def upstream_user():
+        return {"id": 42, "login": "timmy"}
+
+    monkeypatch.setattr(main, "current_user", upstream_user)
+
+
+def test_signed_session_carries_bound_upstream_identity(access_control):
+    signed, _ = main.dashboard_auth.issue_session(
+        now=1_000,
+        principal_id=42,
+        principal_login="timmy",
+    )
+
+    verification = main.dashboard_auth.verify_session_with_reason(signed, now=1_001)
+
+    assert verification.session is not None
+    assert verification.session.principal_id == 42
+    assert verification.session.principal_login == "timmy"
+
+
+@pytest.mark.anyio
+async def test_session_is_blocked_when_upstream_account_changes(
+    access_control, monkeypatch
+):
+    identity = {"id": 42, "login": "timmy"}
+
+    async def upstream_user():
+        return dict(identity)
+
+    monkeypatch.setattr(main, "current_user", upstream_user)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        signed_in = await client.post(
+            "/api/v1/session",
+            json={"access_token": "correct horse battery staple"},
+        )
+        identity.update(login="renamed-timmy")
+        same_principal = await client.get("/api/v1/security-events")
+        identity.update(id=84, login="other-operator")
+        protected = await client.get("/api/v1/security-events")
+
+    assert signed_in.status_code == 200
+    assert same_principal.status_code == 200
+    assert protected.status_code == 401
+    assert protected.json() == {
+        "detail": "Connected Gitea account changed; sign in again",
+        "code": "session_idle",
+        "reason": "upstream_identity_changed",
+        "previous_login": "timmy",
+        "current_login": "other-operator",
+    }
+
+
+@pytest.mark.anyio
+async def test_session_identity_lookup_outage_is_retryable(access_control, monkeypatch):
+    available = True
+
+    async def upstream_user():
+        if not available:
+            raise RuntimeError("credential lookup details")
+        return {"id": 42, "login": "timmy"}
+
+    monkeypatch.setattr(main, "current_user", upstream_user)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        signed_in = await client.post(
+            "/api/v1/session",
+            json={"access_token": "correct horse battery staple"},
+        )
+        available = False
+        protected = await client.get("/api/v1/security-events")
+
+    assert signed_in.status_code == 200
+    assert protected.status_code == 503
+    assert protected.json() == {"detail": "Gitea identity is temporarily unavailable"}
+    assert protected.headers["retry-after"] == "5"
+    assert "credential lookup" not in protected.text
 
 
 async def fresh_grant(client, action: str, target: str) -> str:
@@ -43,6 +125,84 @@ async def fresh_grant(client, action: str, target: str) -> str:
     return response.json()["grant"]
 
 
+@pytest.mark.anyio
+async def test_source_branch_deletion_accepts_exact_one_time_fresh_authorization(
+    access_control, monkeypatch
+):
+    lifecycle = []
+
+    class Journal:
+        def record(self, *_args, **_kwargs):
+            pass
+
+        def reserve(self, kind, *, target):
+            lifecycle.append(("reserve", kind, target))
+            return "cleanup-operation"
+
+        def finalize(self, operation_id):
+            lifecycle.append(("finalize", operation_id))
+
+        def discard(self, operation_id):
+            lifecycle.append(("discard", operation_id))
+
+    async def cleanup(repository, number, source_branch, expected_head_sha):
+        lifecycle.append(
+            ("delete", repository, number, source_branch, expected_head_sha)
+        )
+        return {"number": number, "deleted": True}
+
+    monkeypatch.setattr(main, "_security_event_store", lambda: Journal())
+    monkeypatch.setattr(main.gitea_proxy, "delete_merged_source_branch", cleanup)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        signed_in = await client.post(
+            "/api/v1/session",
+            json={"access_token": "correct horse battery staple", "device_label": "Phone"},
+        )
+        assert signed_in.status_code == 200
+        headers = {
+            "Origin": "https://test",
+            "X-CSRF-Token": client.cookies["stackchain_csrf"],
+        }
+        request = {
+            "source_branch": "timmy/feature",
+            "expected_head_sha": "abc1234",
+        }
+        path = "/api/v1/repos/stackchain/api/pulls/7/source-branch"
+
+        challenged = await client.request("DELETE", path, json=request, headers=headers)
+        grant = await fresh_grant(
+            client, "delete_source_branch", "stackchain/api#7@abc1234"
+        )
+        deleted = await client.request(
+            "DELETE",
+            path,
+            json=request,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+        replayed = await client.request(
+            "DELETE",
+            path,
+            json=request,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+
+    assert challenged.status_code == 428
+    assert challenged.json()["detail"] == {
+        "detail": "Fresh authorization required",
+        "code": "step_up_required",
+        "action": "delete_source_branch",
+        "target": "stackchain/api#7@abc1234",
+    }
+    assert deleted.status_code == 200
+    assert replayed.status_code == 428
+    assert lifecycle == [
+        ("reserve", "source_branch_deleted", "stackchain/api#7@abc1234"),
+        ("delete", "stackchain/api", 7, "timmy/feature", "abc1234"),
+        ("finalize", "cleanup-operation"),
+    ]
+
+
 @pytest.mark.anyio
 async def test_passkey_enrollment_options_require_fresh_authorization_and_are_one_time(
     access_control,
@@ -1821,7 +1981,7 @@ async def test_logout_revokes_a_captured_cookie_before_gitea(access_control, mon
     assert before.status_code == 200
     assert after.status_code == 401
     assert after.headers["cache-control"] == "no-store"
-    assert calls == 1
+    assert calls == 4
 
 
 @pytest.mark.anyio
@@ -1835,7 +1995,9 @@ async def test_session_registry_latency_does_not_block_the_event_loop(access_con
         class SlowStore:
             def status(self, session_id, expires_at, *, idle_timeout_seconds):
                 time.sleep(0.15)
-                return "active"
+                return SessionStatus(
+                    "active", principal_id=42, principal_login="timmy"
+                )
 
         monkeypatch.setattr(main.dashboard_auth, "_session_store", lambda now=None: SlowStore())
         private_request = asyncio.create_task(client.get("/api/v1/session"))
@@ -2001,7 +2163,9 @@ async def test_single_session_revocation_does_not_block_the_event_loop(
         class SlowStore:
             def status(self, session_id, expires_at, *, idle_timeout_seconds):
                 time.sleep(0.02)
-                return "active"
+                return SessionStatus(
+                    "active", principal_id=42, principal_login="timmy"
+                )
 
             def revoke(self, session_id):
                 time.sleep(0.15)
@@ -2043,6 +2207,7 @@ async def test_session_registry_read_failure_fails_closed_before_gitea(
         await client.post(
             "/api/v1/session", json={"access_token": "correct horse battery staple"}
         )
+        called = False
 
         class BrokenStore:
             def status(self, session_id, expires_at, *, idle_timeout_seconds):
@@ -2091,7 +2256,9 @@ async def test_logout_registry_failure_does_not_claim_revocation(access_control,
 
         class BrokenStore:
             def status(self, session_id, expires_at, *, idle_timeout_seconds):
-                return "active"
+                return SessionStatus(
+                    "active", principal_id=42, principal_login="timmy"
+                )
 
             def revoke(self, session_id):
                 raise SessionStoreError("database path and secret details")