Merge pull request 'Make Security Center a Back-safe mobile investigation flow' (#1021) from timmy/1020-mobile-security-center-flow into main

Closes #1004

.gitea/workflows/ci.yml

@@ -15,6 +15,8 @@ jobs:
       - uses: actions/setup-python@v5
         with: { python-version: "3.11" }
       - run: pip install -r requirements.txt
+      - run: pip install -r requirements-audit.txt
+      - run: python3 -m pip_audit -r requirements.txt --strict
       - run: python3 -m pytest tests/ -q
 
   build-release:
@@ -36,9 +38,30 @@ jobs:
           name: release-bundle
           path: dist/
 
+  browser-journey:
+    runs-on: ubuntu-latest
+    needs: build-release
+    env:
+      STACKCHAIN_RUN_RELEASE_E2E: "1"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.11" }
+      - name: Download assembled release bundle
+        uses: actions/download-artifact@v3
+        with:
+          name: release-bundle
+          path: dist
+      - name: Install browser test dependencies
+        run: |
+          pip install -r requirements-e2e.txt
+          python3 -m playwright install --with-deps chromium
+      - name: Exercise packaged mobile work journeys
+        run: python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py tests/e2e/test_mobile_search_preview_navigation.py tests/e2e/test_mobile_find_work_release.py tests/e2e/test_mobile_home_bootstrap_release.py tests/e2e/test_mobile_today_handoff_release.py tests/e2e/test_mobile_today_wrap_up_release.py tests/e2e/test_mobile_wrap_up_handoff_release.py -q
+
   release-candidate:
     runs-on: ubuntu-latest
-    needs: [lint, build-release]
+    needs: [lint, build-release, browser-journey]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     permissions:
       contents: write

README.md

@@ -19,24 +19,26 @@ threads, create and self-assign issues, discover, claim, and release issue assig
 list repository labels and open milestones, set or clear due dates on assigned issues, create issue comments, close assigned issues,
 inspect/comment on assigned pull
 requests, merge assigned pull requests, and submit pull-request reviews.
-Assigned-issue and assigned-pull-request comments can include one PNG, JPEG, or WebP screenshot; each mobile composer automatically optimizes oversized screenshots on-device to fit the 2 MB upload boundary while leaving already-valid files unchanged.
-For online delivery, the screenshot uploads before the comment is posted—to the exact assigned issue or pull request—and produces one Markdown comment; validation or upload
-failures keep both the typed comment and removable preview available for retry. Offline screenshot comments
-admit their text and image bytes to IndexedDB before confirmation, keep only bounded metadata in
-localStorage, and use checkpointed upload/comment identities so reconnect retries cannot duplicate
-either stage. The mobile **New issue** capture-first stage accepts the same image formats before a
-repository is chosen. **Save to Drafts** durably writes the optimized Blob to IndexedDB before
-confirmation, keeps only account-bound attachment metadata in localStorage, and restores the exact
-preview when the operator later chooses a repository. The source Draft remains available until its
-screenshot has safely transferred to the issue outbox; discard and bounded pruning remove the Blob.
-Repository-aware durable admission likewise stores the screenshot with its account-bound outbox
+Assigned-issue, assigned-pull-request, and unread-update conversation composers accept an ordered bundle of up to five PNG, JPEG, or WebP photos. Repeated camera captures append to the bundle, the gallery picker accepts multiple images, and each composer automatically optimizes oversized screenshots on-device to fit the 2 MB upload boundary. Before sending, the selected conversation photo can use the same touch editor as New issue evidence to crop, privacy-redact, highlight, or add an arrow; Apply replaces only that flattened derivative while preserving its caption and bundle position, and Cancel leaves the original unchanged.
+For online delivery, every photo uploads before the comment is posted to the exact conversation target, producing one ordered Markdown comment or reply; validation or upload failures keep the typed text and removable preview available for retry. Offline photo conversations admit every image Blob to IndexedDB before confirmation, keep only bounded metadata in localStorage, and checkpoint each upload separately so reconnect resumes at the first unconfirmed photo without duplicating an upload, comment, reply, or reply-and-read transition. The mobile **New issue** capture-first stage accepts an ordered evidence bundle of up to
+five PNG, JPEG, or WebP screenshots before a repository is chosen, optimizing each image independently
+to the 2 MB boundary. **Save to Drafts** durably writes every optimized Blob to IndexedDB before
+confirmation, keeps only account-bound attachment metadata in localStorage, and restores the ordered
+bundle when the operator later chooses a repository. A scrollable thumbnail tray lets the operator
+review every restored image before filing; **Move earlier**, **Move later**, and **Remove selected**
+change the durable evidence order without changing the issue title or note. The active screenshot's
+optional **Evidence note** stays paired with that image through reorder, Draft restore, offline delivery,
+and retry, then appears as a Markdown-safe caption immediately before its uploaded image. The selected screenshot can be cropped, privacy-redacted, highlighted, and marked with touch-drawn arrows before a flattened derivative replaces it; undo, reset, and cancel keep editing reversible without changing its note or bundle position. The source Draft remains
+available until its evidence has safely transferred to the issue outbox; discard and bounded pruning remove every Blob.
+Repository-aware durable admission likewise stores the evidence bundle with its account-bound outbox
 capture, avoiding base64 quota pressure and synchronous multi-megabyte writes. Online and background
 delivery send the original bytes as multipart form data, avoiding the roughly 33% base64 wire
 expansion. Existing queued base64 screenshot payloads remain readable and are converted only at
 delivery time.
-Delivery creates the issue exactly once, then uploads and comments with
-the image; after a partial failure, retry resumes with the confirmed issue instead of
-creating a duplicate.
+Delivery creates the issue exactly once, then uploads each image under a checkpointed per-image
+identity and posts one ordered Markdown evidence comment. After a partial failure, retry resumes with the confirmed issue and from
+the first unconfirmed image instead of duplicating the issue or earlier uploads. The installed PWA
+Share Target accepts the same bounded multi-image bundle through sign-in continuation.
 Pull-request replies and mobile My Work issue and PR comments use Gitea's
 issue-comment API. In issue, pull-request, and unread-update conversations, typing
 at least two characters after `@` offers repository-scoped teammate suggestions;
@@ -56,9 +58,14 @@ repository milestone and due date; the dashboard validates both and sends them w
 self-assignment in the single create request, so planned work appears in its release
 lane immediately. On a cold offline launch, **Save for filing** stores up to 20
 account-bound title/description captures without selecting a repository or entering the
-mutation outbox. Drafts marks them **Needs filing**; after a fresh reconnect confirms
-the same Gitea login, **Choose repository** restores the capture to the normal planning
-and durable delivery flow. A different or unconfirmed account can only copy or discard
+mutation outbox. Drafts marks them **Needs filing** and saves locally first. After a fresh
+reconnect confirms the same Gitea login, a bounded, revisioned collection synchronizes the title,
+description, blockers, and ordered screenshot evidence; another signed-in device can then use
+**Choose repository** to continue the normal planning and durable delivery flow. Draft cards report
+whether they are synced or still pending locally. Concurrent changes surface a conflict, and
+successful discard or outbox admission propagates deletion so a stale device cannot resurrect the
+draft. Synchronization is limited to 20 drafts and 12 MiB of decoded evidence per account; failure
+never blocks local capture. A different or unconfirmed account can only copy or discard
 the private content. Issue capture and authored mobile actions (issue
 comments, pull-request comments, notification replies, and reviews) persist per-draft
 idempotency keys, so retrying after a timeout, reload, process restart, or handoff to
@@ -68,6 +75,37 @@ Today or interrupting active work. Cancel and browser Back preserve the Search p
 confirmation claims only when needed, syncs the Later plan across devices, and returns to the preserved
 query, filters, results, and scroll position. If assignment succeeds but Later storage fails, the issue
 remains recoverable in My Work and the dashboard reports the partial outcome instead of claiming success.
+Commentable mobile Search previews support camera capture and gallery selection for up to five ordered
+photos, including captions, crop/annotation/redaction review, and metadata-stripping re-encoding. Operators
+can queue photo-only, text-only, or mixed replies without leaving their Search pass, including while offline.
+Durable admission account-binds the exact issue/pull kind and stores image bytes in IndexedDB before the UI
+clears or advances. Reconnect revalidates the visible Search target through the narrower preview attachment
+and comment routes instead of assigned-work routes. Existing per-photo upload operation IDs and confirmed
+Markdown checkpoints survive handoff, so retry resumes from the first unfinished photo and the final comment
+posts once. **Send & next** advances only after durable admission; a storage failure keeps the current result,
+text, evidence, and Search position unchanged.
+Named mobile Search views preserve the query, type, status, and optional repository scope. They are
+bounded to 20 per confirmed account and synchronize through a revisioned SQLite collection, so another
+device can reopen the exact Search with one tap while stale writes surface a conflict instead of silently
+overwriting newer views. Rename and delete affect only the saved view, never Gitea work; an unavailable
+sync service leaves ad-hoc Search usable. Set `STACKCHAIN_SAVED_SEARCH_DB` to override the default
+`.stackchain-state/saved-searches.sqlite3` path.
+Completed delegated issues remain in the mobile **Filed** queue until their latest outcome is acknowledged.
+The mobile queue sheet begins with **Prepare Today**, a live briefing that totals Agenda, Attention, Updates, and
+Filed work and opens the highest-priority non-empty review queue. Starting it saves a confirmed-account, local-day
+checkpoint: finishing Agenda, Updates, or the final Filed review returns to a focused handoff using fresh queue
+counts, while reopening the queue sheet resumes the next live phase. **Finish for now** removes only that local
+checkpoint. Once urgent review is clear the pass continues the existing Today plan, or opens Find Work when Today
+is empty; the briefing and checkpoint never change Gitea state.
+Filed separates actionable **Needs review** from a browsable **Reviewed** history, so acknowledgement clears the
+queue without erasing the delegated-work record. Reviewed cards reopen the existing read-only issue detail and
+conversation, while the Filed badge continues to count actionable outcomes only. A later Gitea update moves that
+issue back to Needs review automatically. Acknowledgements synchronize the exact Gitea `updated_at` revision in
+bounded batches to the confirmed account and preserve the same Reviewed state on other signed-in devices. Offline
+or failed synchronization keeps the local acknowledgement and retries on the next healthy dashboard refresh
+without blocking **Acknowledge & next**. Set
+`STACKCHAIN_COMPLETED_FILED_REVIEW_DB` to override the default
+`.stackchain-state/completed-filed-reviews.sqlite3` path.
 Search previews also
 let operators assign an eligible issue and add it to Today without starting or replacing active work.
 The queue action keeps the Search query, filters, results, and scroll position available for continued
@@ -82,7 +120,12 @@ explicit **Add blocked item anyway** override, while an unavailable dependency l
 as unknown rather than unblocked. Starting a Today work session also
 stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan without changing Gitea time entries. Eligible non-zero rows also offer an unchecked **Log Xm to Gitea** control. **Log selected time to Gitea** saves the recap and sends only those corrected durations to each canonical issue or pull request; confirmed account-scoped receipts prevent a completed row from being posted again, while definite failures retain the draft for an explicit retry. If the upstream response is lost after sending, Stackchain marks the row for verification in Gitea instead of risking an automatic duplicate. Actual time appears in planning as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. After the recap is confirmed, this recommendation handoff remains account-bound on the device through reloads, app restarts, planner cancellation, and failed plan admission. Opening **Plan Today** resumes it without reposting the recap; a successful plan save clears it, while **Discard recap feedback** removes only the handoff and leaves recap history unchanged. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
 After a reload or installed-app
-restart, **Resume Today** reopens the saved item (or the next surviving item if work changed);
+restart, **Resume Today** reopens the saved item (or the next surviving item if work changed). In an open
+assigned issue, the mobile detail sheet renders Markdown checklist items as touch-safe controls and keeps
+**Add step** directly beside the plan. A new step is normalized, checked for duplicates, and appended without
+exposing or replacing the full issue description. Offline additions enter the same account-bound durable
+issue-content queue as checklist toggles; reconnect conflict review applies unique local additions to the
+latest remote body while preserving remote prose and task-state changes.
 **Comment & next** on that current issue or pull request posts the handoff online or admits it
 to durable account-bound delivery, then removes the item only from Today and opens the next
 one without closing or merging it. **Reply & next** provides the same one-action continuation
@@ -139,7 +182,12 @@ and runs up to three deliveries concurrently, but claims a record only when a de
 is ready. Claims have unique fencing tokens and are renewed before every network stage;
 completion, release, failure, and delivery checkpoints are token-fenced so an expired worker
 cannot alter a newer crash-recovery claim. Device purge cancels an active drain before closing
-private outbox storage. Results are coordinated through a bounded SQLite ledger. Set `STACKCHAIN_STATE_DIR` to a
+private outbox storage. Results are coordinated through a bounded SQLite ledger. All private SQLite stores enforce a
+filesystem boundary independently of the service umask: the database directory is repaired to
+owner-only `0700`, database and SQLite sidecar files are owner-only `0600`, and symlinked database
+paths are rejected before access. This protects state from unrelated local accounts, but it is not
+encryption at rest; secure host access, encrypted volumes, and private backups are still required.
+Set `STACKCHAIN_STATE_DIR` to a
 persistent, writable service directory (or set `STACKCHAIN_IDEMPOTENCY_DB` to an explicit
 SQLite path); the local default is `.stackchain-state/idempotency.sqlite3`. Ledger reads and
 writes run outside the request event loop, and lock admission is bounded to 100 ms by

frontend/authored-outbox.js

@@ -1,10 +1,50 @@
-function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync, getOwnerLogin = () => '', createOperationId, now = () => Date.now(), maxItems = 50 }) {
+function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync, getOwnerLogin = () => '', createOperationId, mergeChecklistConflict, now = () => Date.now(), maxItems = 50 }) {
   const storageKey = 'stackchain.authored-outbox.v1';
   const makeId = createOperationId || (() =>
     globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random().toString(16).slice(2)
   );
   const pending = new Map();
-  const supportedKinds = new Set(['issue-comment', 'pull-comment', 'update-reply', 'update-reply-read', 'pull-review', 'issue-close', 'issue-blocker']);
+  const supportedKinds = new Set(['issue-comment', 'pull-comment', 'search-reply', 'update-reply', 'update-reply-read', 'pull-review', 'issue-close', 'issue-blocker', 'issue-content']);
+
+  function messageAttachments(message) {
+    const values = Array.isArray(message?.attachments) ? message.attachments :
+      (Array.isArray(message?.attachment) ? message.attachment : (message?.attachment ? [message.attachment] : []));
+    return values.filter(Boolean).slice(0, 5);
+  }
+
+  function attachmentMetadata(value) {
+    const note = String(value.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    return {
+      filename: String(value.filename || ''),
+      contentType: String(value.contentType || ''),
+      stored: true,
+      ...(note ? { note } : {}),
+      ...(value.operationId ? { operationId:String(value.operationId).slice(0, 128) } : {}),
+      ...(value.confirmed?.markdown ? { confirmed:{ markdown:String(value.confirmed.markdown) } } : {}),
+    };
+  }
+
+  function durableAttachment(value) {
+    const note = String(value.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    return {
+      filename: String(value.filename || ''),
+      contentType: String(value.contentType || ''),
+      ...(note ? { note } : {}),
+      ...(value.operationId ? { operationId:String(value.operationId).slice(0, 128) } : {}),
+      ...(value.confirmed?.markdown ? { confirmed:{ markdown:String(value.confirmed.markdown) } } : {}),
+      ...(value.blob ? { blob:value.blob } : { data:String(value.data || '') }),
+    };
+  }
+
+  function checklistOperation(value) {
+    const action = String(value?.action || '');
+    if (!['rename', 'remove', 'move-earlier', 'move-later'].includes(action)) return null;
+    return {
+      action,
+      index:Number(value.index),
+      ...(action === 'rename' ? { label:String(value.label || '') } : {}),
+    };
+  }
 
   function reviewFingerprint(message) {
     return JSON.stringify({
@@ -45,6 +85,9 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
 
   function enqueue(message, mirror = true) {
     if (!supportedKinds.has(message?.kind)) throw new Error('This action cannot be queued.');
+    if (message.kind === 'search-reply' && !['issue', 'pull'].includes(message.targetKind)) {
+      throw new Error('Choose an exact Search result before queueing a reply.');
+    }
     const ownerLogin = String(getOwnerLogin() || '').trim();
     if (!ownerLogin) throw new Error('Confirm your Gitea account before queueing a message.');
     const items = read();
@@ -61,8 +104,26 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
         throw new Error('A review for this saved head is already queued. Open Drafts to inspect or discard it first.');
       }
     }
+    if (message.kind === 'issue-content') {
+      const queuedContent = items.find(item => item.kind === 'issue-content' && item.status === 'queued' &&
+        item.ownerLogin === ownerLogin && item.repository === String(message.repository || '') &&
+        item.number === Number(message.number || 0));
+      if (queuedContent) {
+        const operation = checklistOperation(message.checklistOperation);
+        const replacement = {
+          ...queuedContent,
+          operationId: String(requestedOperationId || makeId()).slice(0, 128),
+          title: String(message.title || ''),
+          body: String(message.body || ''),
+          ...(operation ? { checklistOperations:[...(queuedContent.checklistOperations || []), operation] } : {}),
+        };
+        write(items.map(item => item.id === queuedContent.id ? replacement : item), mirror);
+        return replacement;
+      }
+    }
     if (items.length >= maxItems) throw new Error('Message outbox is full. Send or discard a queued message first.');
     const id = String(requestedOperationId || makeId()).slice(0, 128);
+    const attachments = messageAttachments(message);
     const item = {
       id,
       operationId: requestedOperationId || id,
@@ -74,14 +135,11 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
       ownerLogin,
       status: 'queued',
       queuedAt: Number(now()),
+      ...(message.kind === 'search-reply' ? { targetKind:String(message.targetKind) } : {}),
       ...(message.kind === 'update-reply-read' ? { replyConfirmed: message.replyConfirmed === true } : {}),
-      ...(['issue-comment', 'pull-comment', 'update-reply', 'update-reply-read'].includes(message.kind) && message.attachment ? {
-        attachment: {
-          filename: String(message.attachment.filename || ''),
-          contentType: String(message.attachment.contentType || ''),
-          stored: true,
-        },
-      } : {}),
+      ...(['issue-comment', 'pull-comment', 'search-reply', 'update-reply', 'update-reply-read'].includes(message.kind) && attachments.length ?
+        (attachments.length === 1 ? { attachment:attachmentMetadata(attachments[0]) } :
+          { attachments:attachments.map(attachmentMetadata) }) : {}),
       ...(message.kind === 'pull-review' ? {
         decision: String(message.decision || 'comment'),
         expectedHeadSha: String(message.expectedHeadSha || ''),
@@ -96,6 +154,14 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
         blockerNumber: Number(message.blockerNumber || 0),
         present: message.present === true,
       } : {}),
+      ...(message.kind === 'issue-content' ? {
+        title: String(message.title || ''),
+        baseBody: String(message.baseBody ?? message.body ?? ''),
+        expectedUpdatedAt: String(message.expectedUpdatedAt || ''),
+        ...(checklistOperation(message.checklistOperation) ? {
+          checklistOperations:[checklistOperation(message.checklistOperation)],
+        } : {}),
+      } : {}),
     };
     items.push(item);
     write(items, mirror);
@@ -103,8 +169,10 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
   }
 
   async function enqueueDurably(message) {
+    const previousItems = read();
     const item = enqueue(message, false);
-    if (message.attachment && ['update-reply', 'update-reply-read'].includes(message.kind) &&
+    const attachments = messageAttachments(message);
+    if (attachments.length && ['search-reply', 'update-reply', 'update-reply-read'].includes(message.kind) &&
         (!backgroundSync?.reconcile || !backgroundSync?.requestSync)) {
       write(read().filter(candidate => candidate.id !== item.id), false);
       throw new Error('Screenshot delivery needs IndexedDB. Your reply and screenshot are still here; retry.');
@@ -112,19 +180,15 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     if (!backgroundSync?.reconcile || !backgroundSync?.requestSync) {
       return { item, background: false, durability: 'foreground-only' };
     }
-    const durableItems = read().map(candidate => candidate.id === item.id && message.attachment ? {
+    const durableItems = read().map(candidate => candidate.id === item.id && attachments.length ? {
       ...candidate,
-      attachment: {
-        filename: String(message.attachment.filename || ''),
-        contentType: String(message.attachment.contentType || ''),
-        ...(message.attachment.blob ? { blob: message.attachment.blob } :
-          { data: String(message.attachment.data || '') }),
-      },
+      ...(attachments.length === 1 ? { attachment:durableAttachment(attachments[0]) } :
+        { attachments:attachments.map(durableAttachment) }),
     } : candidate);
     try {
       await backgroundSync.reconcile(durableItems, 'authored');
     } catch (error) {
-      write(read().filter(candidate => candidate.id !== item.id), false);
+      write(previousItems, false);
       throw error;
     }
     try {
@@ -171,9 +235,16 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     if (item.kind === 'issue-blocker') {
       return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/blockers';
     }
+    if (item.kind === 'issue-content') {
+      return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/content';
+    }
     if (item.kind === 'pull-review') {
       return 'api/v1/repos/' + repository + '/pulls/' + encodeURIComponent(item.number) + '/review';
     }
+    if (item.kind === 'search-reply') {
+      return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) +
+        '/preview/comments?kind=' + encodeURIComponent(item.targetKind);
+    }
     const resource = item.kind === 'pull-comment' ? 'pulls' : 'issues';
     return 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/comments';
   }
@@ -246,9 +317,11 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
               decision: item.decision,
               expected_head_sha: item.expectedHeadSha,
               comments: item.comments,
+            } : item.kind === 'issue-content' ? {
+              title:item.title, body:item.body, expected_updated_at:item.expectedUpdatedAt,
             } : { body: item.body };
             result = await fetchJson(endpoint(item), {
-              method: 'POST',
+              method: item.kind === 'issue-content' ? 'PATCH' : 'POST',
               headers: {
                 Accept: 'application/json',
                 'Content-Type': 'application/json',
@@ -256,6 +329,10 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
               },
               body: JSON.stringify(body),
             });
+            if (item.kind === 'issue-content' &&
+                (result?.number !== item.number || result?.title !== item.title || result?.body !== item.body)) {
+              throw new Error('Checklist update was not confirmed.');
+            }
           }
         }
         if (!result) return { blocked: true };
@@ -334,6 +411,51 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     return retryItem(id, currentLogin);
   }
 
+  async function resolveIssueContentConflict(id, latest, currentLogin) {
+    const previousItems = read();
+    const item = previousItems.find(candidate => candidate.id === id);
+    currentLogin = String(currentLogin || '').trim();
+    if (!item || item.kind !== 'issue-content' || item.status !== 'attention') {
+      throw new Error('This checklist conflict is no longer available.');
+    }
+    if (!currentLogin || item.ownerLogin !== currentLogin) {
+      throw new Error('Confirm the account that queued this checklist update.');
+    }
+    if (typeof mergeChecklistConflict !== 'function') {
+      throw new Error('Checklist conflict review is unavailable.');
+    }
+    const merged = mergeChecklistConflict({
+      baseBody: String(item.baseBody ?? item.body ?? ''),
+      localBody: String(item.body || ''),
+      remoteBody: String(latest?.body || ''),
+    });
+    if (merged.conflicts?.length) return merged;
+    if (!String(latest?.updated_at || '')) throw new Error('Latest issue revision is unavailable.');
+    const rebased = {
+      ...item,
+      operationId: String(makeId()).slice(0, 128),
+      title: String(latest?.title || ''),
+      baseBody: String(latest?.body || ''),
+      body: merged.body,
+      expectedUpdatedAt: String(latest.updated_at),
+      status: 'queued',
+    };
+    delete rebased.error;
+    delete rebased.deliveryState;
+    const nextItems = previousItems.map(candidate => candidate.id === id ? rebased : candidate);
+    write(nextItems, false);
+    if (backgroundSync?.reconcile) {
+      try { await backgroundSync.reconcile(nextItems, 'authored'); }
+      catch (error) {
+        write(previousItems, false);
+        throw error;
+      }
+      try { await backgroundSync.requestSync?.(); }
+      catch (_error) { /* Foreground retry remains available. */ }
+    }
+    return { ...merged, item: rebased };
+  }
+
   function reconcileBackground(records) {
     const statuses = new Map((records || []).map(item => [item.id, item]));
     const items = read().flatMap(item => {
@@ -359,7 +481,8 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     return items;
   }
 
-  return { enqueue, enqueueDurably, update, discard, flush, retry, reconcileBackground, list: () => read().map(item => ({ ...item })) };
+  return { enqueue, enqueueDurably, update, discard, flush, retry, resolveIssueContentConflict,
+    reconcileBackground, list: () => read().map(item => ({ ...item })) };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createAuthoredOutbox;

frontend/background-issue-sync.js

@@ -91,13 +91,25 @@ function createIssueSyncStore({
           }
           continue;
         }
+        const preservedBundle = current.operationId === replacement.operationId &&
+          current.attachments?.every(value => value?.data || value?.blob) &&
+          replacement.attachments?.every(value => value?.stored && !value.data && !value.blob)
+          ? current.attachments : null;
         if (current.operationId === replacement.operationId &&
             (current.attachment?.data || current.attachment?.blob) &&
             replacement.attachment?.stored &&
-            !replacement.attachment.data && !replacement.attachment.blob) {
-          replacement = { ...replacement, attachment: current.attachment };
+            !replacement.attachment.data && !replacement.attachment.blob || preservedBundle) {
+          replacement = {
+            ...replacement,
+            ...(preservedBundle ? {attachments:preservedBundle} : {attachment:current.attachment}),
+          };
           incoming.set(current.id, replacement);
         }
+        if (current.kind === 'issue-content' && replacement.kind === 'issue-content' &&
+            current.operationId !== replacement.operationId && current.status === 'sending' &&
+            Number(current.claimUntil) > Number(now())) {
+          throw new Error('Checklist sync is already delivering. Retry this change.');
+        }
         if ((current.status === 'sending' && Number(current.claimUntil) > Number(now())) ||
             (['attention', 'authorization'].includes(current.status) &&
               replacement.status === current.status) ||
@@ -174,10 +186,15 @@ function createIssueSyncStore({
       const preservedAttachment = (current?.attachment?.data || current?.attachment?.blob) &&
         item?.attachment?.stored && !item.attachment.data && !item.attachment.blob
         ? { attachment: current.attachment } : {};
+      const preservedAttachments = current?.operationId === item?.operationId &&
+        current?.attachments?.every(value => value?.data || value?.blob) &&
+        item?.attachments?.every(value => value?.stored && !value.data && !value.blob)
+        ? { attachments:current.attachments } : {};
       const next = current && current.operationId === item.operationId ? {
-        ...item, ...preservedAttachment,
+        ...item, ...preservedAttachment, ...preservedAttachments,
         ...(current.deliveredIssue ? { deliveredIssue: current.deliveredIssue } : {}),
         ...(current.attachmentMarkdown ? { attachmentMarkdown: current.attachmentMarkdown } : {}),
+        ...(current.attachmentMarkdowns ? { attachmentMarkdowns:current.attachmentMarkdowns } : {}),
       } : { ...item };
       await records.put(next);
       return next;
@@ -353,6 +370,9 @@ function createBackgroundIssueSync({
       const resource = item.kind === 'pull-comment' ? 'pull' : 'issue';
       return { id: item.id, status, kind: 'message', route: '#/my-work/' + resource + '/' + repository + '/' + encodeURIComponent(item.number) };
     }
+    if (typeof delivered.url === 'string' && /^https?:\/\//.test(delivered.url)) {
+      return { id: item.id, status, kind: 'issue', url: delivered.url };
+    }
     return { id: item.id, status, kind: 'issue', route: '#/my-work/issue/' + repository + '/' + encodeURIComponent(delivered.number) };
   }
 
@@ -400,6 +420,24 @@ function createBackgroundIssueSync({
         },
       };
     }
+    if (item.kind === 'issue-content') {
+      return {
+        url: base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/content',
+        options: {
+          method: 'PATCH',
+          headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/json',
+            'Idempotency-Key': item.operationId,
+          },
+          body: JSON.stringify({
+            title: item.title,
+            body: item.body,
+            expected_updated_at: item.expectedUpdatedAt,
+          }),
+        },
+      };
+    }
     if (item.kind === 'pull-review') {
       return {
         url: base + 'api/v1/repos/' + repository + '/pulls/' + encodeURIComponent(item.number) + '/review',
@@ -426,6 +464,13 @@ function createBackgroundIssueSync({
         item,
       );
     }
+    if (item.kind === 'search-reply') {
+      return authoredRequest(
+        'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) +
+          '/preview/comments?kind=' + encodeURIComponent(item.targetKind),
+        item,
+      );
+    }
     return {
       url: base + 'api/v1/repos/' + repository + '/issues',
       options: {
@@ -439,6 +484,8 @@ function createBackgroundIssueSync({
           title: item.title,
           body: item.body,
           label_ids: item.labelIds,
+          ...(item.unassigned ? { unassigned: true } : {}),
+          ...(item.assignee ? { assignee: item.assignee } : {}),
           ...(item.milestoneId ? { milestone_id: item.milestoneId } : {}),
           ...(item.dueDate ? { due_date: item.dueDate + 'T23:59:59Z' } : {}),
         }),
@@ -466,31 +513,75 @@ function createBackgroundIssueSync({
     return String(operationId || '').slice(0, 128 - suffix.length) + suffix;
   }
 
+  function evidenceMarkdown(attachment, markdown, index) {
+    const note = String(attachment?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    if (!note) return markdown;
+    const escaped = note.replace(/([\\`*_[\]{}()<>#+\-.!|])/g, '\\$1');
+    return '**Screenshot ' + (index + 1) + ' — ' + escaped + '**\n\n' + markdown;
+  }
+
+  function conversationAttachments(item) {
+    return (Array.isArray(item?.attachments) ? item.attachments : [item?.attachment]).filter(Boolean);
+  }
+
+  async function uploadConversationAttachments(item, url) {
+    let current = item;
+    const attachments = conversationAttachments(current);
+    const confirmedMarkdowns = attachments.map(value => String(value?.confirmed?.markdown || ''));
+    const firstMissing = confirmedMarkdowns.findIndex(value => !value);
+    const leadingConfirmed = confirmedMarkdowns.slice(0, firstMissing < 0 ? confirmedMarkdowns.length : firstMissing);
+    const markdowns = Array.isArray(current.attachmentMarkdowns) ?
+      current.attachmentMarkdowns.slice(0, attachments.length) :
+      (current.attachmentMarkdown ? [current.attachmentMarkdown] : leadingConfirmed);
+    for (let index = markdowns.length; index < attachments.length; index += 1) {
+      const uploaded = await requestStage(current, url, {
+        method:'POST',
+        headers:{
+          Accept:'application/json',
+          'Idempotency-Key':String(attachments[index]?.operationId || stageOperationId(
+            current.operationId, attachments.length === 1 ? 'attachment' : 'attachment-' + index,
+          )).slice(0, 128),
+        },
+        body:attachmentMultipart(attachments[index]),
+      });
+      const markdown = String(uploaded?.markdown || '');
+      if (!markdown) {
+        const error = new Error('The server did not confirm the screenshot upload.');
+        error.status = 422;
+        throw error;
+      }
+      markdowns.push(markdown);
+      await checkpointClaim(current, stored => ({
+        ...stored, attachmentMarkdowns:markdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      }));
+      current = {
+        ...current, attachmentMarkdowns:markdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      };
+    }
+    return {
+      current,
+      markdown:markdowns.map((value, index) =>
+        evidenceMarkdown(attachments[index], value, index)).join('\n\n'),
+    };
+  }
+
   async function deliverReplyRead(item) {
     let current = item;
     if (!current.replyConfirmed) {
-      let attachmentMarkdown = current.attachmentMarkdown;
-      if (current.attachment && !attachmentMarkdown) {
-        const uploaded = await requestStage(current,
-          base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments', {
-            method:'POST',
-            headers:{ Accept:'application/json', 'Idempotency-Key':stageOperationId(current.operationId, 'attachment') },
-            body:attachmentMultipart(current.attachment),
-          });
-        attachmentMarkdown = String(uploaded?.markdown || '');
-        if (!attachmentMarkdown) {
-          const error = new Error('The server did not confirm the screenshot upload.');
-          error.status = 422;
-          throw error;
-        }
-        await checkpointClaim(current, stored => ({ ...stored, attachmentMarkdown }));
-        current = { ...current, attachmentMarkdown };
+      let attachmentMarkdown = '';
+      if (conversationAttachments(current).length) {
+        const uploaded = await uploadConversationAttachments(current,
+          base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments');
+        current = uploaded.current;
+        attachmentMarkdown = uploaded.markdown;
       }
       const text = String(current.body || '').trim();
       const replyBody = attachmentMarkdown ?
         (text ? text + '\n\n' + attachmentMarkdown : attachmentMarkdown) : text;
       const options = authoredRequest('', { ...current, body:replyBody }).options;
-      if (current.attachment) options.headers['Idempotency-Key'] = stageOperationId(current.operationId, 'reply');
+      if (conversationAttachments(current).length) options.headers['Idempotency-Key'] = stageOperationId(current.operationId, 'reply');
       await requestStage(
         current,
         base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/reply',
@@ -525,8 +616,31 @@ function createBackgroundIssueSync({
       deliveredIssue = await requestStage(item, request.url, request.options);
       await checkpointClaim(item, current => ({ ...current, deliveredIssue }));
     }
-    let attachmentMarkdown = item.attachmentMarkdown;
-    if (!attachmentMarkdown) {
+    const blockers = Array.isArray(item.blockers) ? item.blockers : [];
+    let deliveredBlockers = Math.min(Number(item.deliveredBlockers) || 0, blockers.length);
+    for (let index = deliveredBlockers; index < blockers.length; index += 1) {
+      const blocker = blockers[index];
+      await requestStage(
+        item,
+        base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(deliveredIssue.number) + '/blockers',
+        {
+          method:'PATCH',
+          headers:{
+            Accept:'application/json', 'Content-Type':'application/json',
+            'Idempotency-Key':stageOperationId(item.operationId, 'blocker-' + index),
+          },
+          body:JSON.stringify({repository:blocker.repository, number:blocker.number, present:true}),
+        },
+      );
+      deliveredBlockers = index + 1;
+      await checkpointClaim(item, current => ({ ...current, deliveredIssue, deliveredBlockers }));
+    }
+    const attachments = (Array.isArray(item.attachments) ? item.attachments : [item.attachment]).filter(Boolean);
+    if (!attachments.length) return deliveredIssue;
+    const attachmentMarkdowns = Array.isArray(item.attachmentMarkdowns)
+      ? item.attachmentMarkdowns.slice(0, attachments.length)
+      : (item.attachmentMarkdown ? [item.attachmentMarkdown] : []);
+    for (let index = attachmentMarkdowns.length; index < attachments.length; index += 1) {
       const uploaded = await requestStage(
         item,
         base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(deliveredIssue.number) + '/attachments',
@@ -534,19 +648,27 @@ function createBackgroundIssueSync({
           method: 'POST',
           headers: {
             Accept: 'application/json',
-            'Idempotency-Key': stageOperationId(item.operationId, 'attachment'),
+            'Idempotency-Key': stageOperationId(
+              item.operationId, attachments.length === 1 ? 'attachment' : 'attachment-' + index,
+            ),
           },
-          body: attachmentMultipart(item.attachment),
+          body: attachmentMultipart(attachments[index]),
         },
       );
-      attachmentMarkdown = String(uploaded?.markdown || '');
-      if (!attachmentMarkdown) {
+      const markdown = String(uploaded?.markdown || '');
+      if (!markdown) {
         const error = new Error('The server did not confirm the screenshot upload.');
         error.status = 422;
         throw error;
       }
-      await checkpointClaim(item, current => ({ ...current, deliveredIssue, attachmentMarkdown }));
+      attachmentMarkdowns.push(markdown);
+      await checkpointClaim(item, current => ({
+        ...current, deliveredIssue, attachmentMarkdowns:attachmentMarkdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      }));
     }
+    const attachmentMarkdown = attachmentMarkdowns.map((markdown, index) =>
+      evidenceMarkdown(attachments[index], markdown, index)).join('\n\n');
     await requestStage(
       item,
       base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(deliveredIssue.number) + '/comments',
@@ -565,28 +687,9 @@ function createBackgroundIssueSync({
   async function deliverScreenshotComment(item) {
     const repository = String(item.repository || '').split('/').map(encodeURIComponent).join('/');
     const resource = item.kind === 'pull-comment' ? 'pulls' : 'issues';
-    let attachmentMarkdown = item.attachmentMarkdown;
-    if (!attachmentMarkdown) {
-      const uploaded = await requestStage(
-        item,
-        base + 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/attachments',
-        {
-          method: 'POST',
-          headers: {
-            Accept: 'application/json',
-            'Idempotency-Key': stageOperationId(item.operationId, 'attachment'),
-          },
-          body: attachmentMultipart(item.attachment),
-        },
-      );
-      attachmentMarkdown = String(uploaded?.markdown || '');
-      if (!attachmentMarkdown) {
-        const error = new Error('The server did not confirm the screenshot upload.');
-        error.status = 422;
-        throw error;
-      }
-      await checkpointClaim(item, current => ({ ...current, attachmentMarkdown }));
-    }
+    const uploaded = await uploadConversationAttachments(item,
+      base + 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/attachments');
+    const attachmentMarkdown = uploaded.markdown;
     const text = String(item.body || '').trim();
     return requestStage(
       item,
@@ -602,26 +705,35 @@ function createBackgroundIssueSync({
     );
   }
 
-  async function deliverUpdateScreenshotReply(item) {
+  async function deliverSearchReply(item) {
+    const repository = String(item.repository || '').split('/').map(encodeURIComponent).join('/');
     let current = item;
-    let attachmentMarkdown = current.attachmentMarkdown;
-    if (!attachmentMarkdown) {
-      const uploaded = await requestStage(current,
-        base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments', {
-          method:'POST',
-          headers:{ Accept:'application/json', 'Idempotency-Key':stageOperationId(current.operationId, 'attachment') },
-          body:attachmentMultipart(current.attachment),
-        });
-      attachmentMarkdown = String(uploaded?.markdown || '');
-      if (!attachmentMarkdown) {
-        const error = new Error('The server did not confirm the screenshot upload.');
-        error.status = 422;
-        throw error;
-      }
-      await checkpointClaim(current, stored => ({ ...stored, attachmentMarkdown }));
-      current = { ...current, attachmentMarkdown };
+    let attachmentMarkdown = '';
+    if (conversationAttachments(current).length) {
+      const uploaded = await uploadConversationAttachments(current,
+        base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(current.number) +
+          '/preview/attachments?kind=' + encodeURIComponent(current.targetKind));
+      current = uploaded.current;
+      attachmentMarkdown = uploaded.markdown;
     }
     const text = String(current.body || '').trim();
+    return requestStage(current,
+      base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(current.number) +
+        '/preview/comments?kind=' + encodeURIComponent(current.targetKind), {
+        method:'POST',
+        headers:{Accept:'application/json','Content-Type':'application/json',
+          'Idempotency-Key':stageOperationId(current.operationId, 'comment')},
+        body:JSON.stringify({body:attachmentMarkdown ?
+          (text ? text + '\n\n' + attachmentMarkdown : attachmentMarkdown) : text}),
+      });
+  }
+
+  async function deliverUpdateScreenshotReply(item) {
+    const uploaded = await uploadConversationAttachments(item,
+      base + 'api/v1/notifications/' + encodeURIComponent(item.notificationId) + '/attachments');
+    const current = uploaded.current;
+    const attachmentMarkdown = uploaded.markdown;
+    const text = String(current.body || '').trim();
     return requestStage(current,
       base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/reply', {
         method:'POST',
@@ -635,10 +747,13 @@ function createBackgroundIssueSync({
     const request = deliveryRequest(item);
     try {
       const delivered = item.kind === 'update-reply-read' ? await deliverReplyRead(item) :
-        item.kind === 'update-reply' && item.attachment ? await deliverUpdateScreenshotReply(item) :
-        item.attachment && ['issue-comment', 'pull-comment'].includes(item.kind) ?
+        item.kind === 'search-reply' ? await deliverSearchReply(item) :
+        item.kind === 'update-reply' && conversationAttachments(item).length ? await deliverUpdateScreenshotReply(item) :
+        conversationAttachments(item).length && ['issue-comment', 'pull-comment'].includes(item.kind) ?
         await deliverScreenshotComment(item) : item.attachment && !item.kind ?
-          await deliverIssueCapture(item) : await requestStage(item, request.url, request.options);
+          await deliverIssueCapture(item) : item.attachments?.length && !item.kind ?
+            await deliverIssueCapture(item) : item.blockers?.length && !item.kind ?
+              await deliverIssueCapture(item) : await requestStage(item, request.url, request.options);
       if (item.kind === 'issue-close' && delivered?.state !== 'closed') {
         const error = new Error('Issue closure was not confirmed.');
         error.status = 422;
@@ -654,6 +769,12 @@ function createBackgroundIssueSync({
           throw error;
         }
       }
+      if (item.kind === 'issue-content' &&
+          (delivered?.number !== item.number || delivered?.title !== item.title || delivered?.body !== item.body)) {
+        const error = new Error('Checklist update was not confirmed.');
+        error.status = 422;
+        throw error;
+      }
       await completeClaim(item, delivered);
       const receipt = receiptFor(item, 'confirmed', delivered);
       return item.kind ? { message: delivered, receipt } : { issue: delivered, receipt };

frontend/batch-find-work.js

@@ -8,6 +8,7 @@ function createBatchFindWork({
   storage = typeof localStorage === 'undefined' ? null : localStorage,
   owner = () => '',
   journalName = 'find-work-batch',
+  queueFailureReason = 'assigned but Today sync is unavailable',
   autoMount = true,
 }) {
   let request = null;
@@ -58,7 +59,7 @@ function createBatchFindWork({
           entry.state = 'assigned';
           writeJournal(journal);
         }
-        const queueResult = await queue(confirmed);
+        const queueResult = await queue(confirmed, journal.context);
         if (queueResult === 'queued' || queueResult === 'exists') {
           queued.push(key(item));
           entry.state = 'queued';
@@ -67,7 +68,7 @@ function createBatchFindWork({
           }
           writeJournal(journal);
         } else {
-          failed.push({ key: key(item), reason: 'assigned but Today sync is unavailable', assigned: true });
+          failed.push({ key: key(item), reason: queueFailureReason, assigned: true });
         }
       } catch (error) {
         failed.push({ key: key(item), reason: error?.message || 'assignment failed' });
@@ -81,7 +82,7 @@ function createBatchFindWork({
     return outcome;
   }
 
-  function run(items, estimates = {}) {
+  function run(items, estimates = {}, context = null) {
     if (request) return request;
     const selected = Array.isArray(items) ? items.slice() : [];
     const available = Math.max(0, Number(capacity()) || 0);
@@ -112,7 +113,7 @@ function createBatchFindWork({
       }
     }
     const journal = {
-      owner: String(owner() || ''), available,
+      owner: String(owner() || ''), available, context,
       items: selected.map(item => ({ item, estimate: estimates[key(item)] || null, state: 'pending' })),
     };
     writeJournal(journal);

frontend/checklist-conflict.js

@@ -0,0 +1,141 @@
+function mergeChecklistConflict({ baseBody, localBody, remoteBody, operations = [] }) {
+  const taskPattern = /^(\s*[-*+]\s+\[)([ xX])(\]\s+)(.*)$/;
+
+  function tasks(body) {
+    const entries = [];
+    String(body || '').split('\n').forEach((line, lineIndex) => {
+      const match = line.match(taskPattern);
+      if (!match) return;
+      const label = match[4].trim();
+      const key = label.replace(/\s+/g, ' ').toLocaleLowerCase();
+      if (!key) return;
+      entries.push({ key, label, checked: match[2].toLowerCase() === 'x', lineIndex, match });
+    });
+    return entries;
+  }
+
+  function grouped(entries) {
+    const result = new Map();
+    entries.forEach(entry => result.set(entry.key, [...(result.get(entry.key) || []), entry]));
+    return result;
+  }
+
+  function replayOperations(body, requested, reportChanges) {
+    let lines = String(body || '').split('\n');
+    const visibleTasks = value => tasks(value).filter(entry => /^[-*+]/.test(entry.match[1]));
+    const logical = visibleTasks(baseBody).map(entry => ({ key:entry.key, label:entry.label }));
+    const replayed = [];
+    for (const operation of requested) {
+      const index = Number(operation?.index);
+      const target = logical[index];
+      if (!target) return { body:null, changes:replayed, conflict:{ label:'Checklist step', reason:'missing' } };
+      let entries = visibleTasks(lines.join('\n'));
+      const matches = entries.filter(entry => entry.key === target.key);
+      if (matches.length !== 1) {
+        return { body:null, changes:replayed, conflict:{
+          label:target.label, reason:matches.length ? 'ambiguous' : 'missing',
+        } };
+      }
+      const match = matches[0];
+      if (operation.action === 'rename') {
+        const label = String(operation.label || '').trim().replace(/\s+/g, ' ');
+        const key = label.toLocaleLowerCase();
+        if (!label || entries.some(entry => entry.key === key && entry.lineIndex !== match.lineIndex)) {
+          return { body:null, changes:replayed, conflict:{ label:target.label, reason:'ambiguous' } };
+        }
+        lines[match.lineIndex] = match.match[1] + match.match[2] + match.match[3] + label;
+        if (reportChanges) replayed.push({ label:target.label, renamed:label });
+        target.label = label;
+        target.key = key;
+      } else if (operation.action === 'remove') {
+        lines.splice(match.lineIndex, 1);
+        logical.splice(index, 1);
+        if (reportChanges) replayed.push({ label:target.label, removed:true });
+      } else if (operation.action === 'move-earlier' || operation.action === 'move-later') {
+        const neighborIndex = operation.action === 'move-earlier' ? index - 1 : index + 1;
+        const neighbor = logical[neighborIndex];
+        const neighborMatches = neighbor ? entries.filter(entry => entry.key === neighbor.key) : [];
+        if (neighborMatches.length !== 1 || Math.abs(neighborMatches[0].lineIndex - match.lineIndex) !== 1) {
+          return { body:null, changes:replayed, conflict:{ label:target.label, reason:'order-changed' } };
+        }
+        const neighborLine = neighborMatches[0].lineIndex;
+        [lines[match.lineIndex], lines[neighborLine]] = [lines[neighborLine], lines[match.lineIndex]];
+        [logical[index], logical[neighborIndex]] = [logical[neighborIndex], logical[index]];
+        if (reportChanges) replayed.push({
+          label:target.label, moved:operation.action === 'move-earlier' ? 'earlier' : 'later',
+        });
+      }
+    }
+    return { body:lines.join('\n'), changes:replayed, conflict:null };
+  }
+
+  if (Array.isArray(operations) && operations.length) {
+    const baseReplay = replayOperations(baseBody, operations, false);
+    const remoteReplay = replayOperations(remoteBody, operations, true);
+    const conflict = baseReplay.conflict || remoteReplay.conflict;
+    if (conflict) return { body:null, changes:remoteReplay.changes || [], conflicts:[conflict] };
+    const residual = mergeChecklistConflict({
+      baseBody:baseReplay.body, localBody, remoteBody:remoteReplay.body,
+    });
+    return {
+      body:residual.body,
+      changes:[...remoteReplay.changes, ...residual.changes],
+      conflicts:residual.conflicts,
+    };
+  }
+
+  const base = grouped(tasks(baseBody));
+  const local = grouped(tasks(localBody));
+  const remoteEntries = tasks(remoteBody);
+  const remote = grouped(remoteEntries);
+  const changes = [];
+  const conflicts = [];
+
+  for (const [key, baseMatches] of base) {
+    const localMatches = local.get(key) || [];
+    if (baseMatches.length !== 1 || localMatches.length !== 1) continue;
+    if (baseMatches[0].checked === localMatches[0].checked) continue;
+    const remoteMatches = remote.get(key) || [];
+    if (remoteMatches.length !== 1) {
+      conflicts.push({
+        label: baseMatches[0].label,
+        reason: remoteMatches.length ? 'ambiguous' : 'missing',
+      });
+      continue;
+    }
+    changes.push({ label: remoteMatches[0].label, checked: localMatches[0].checked });
+  }
+
+  for (const [key, localMatches] of local) {
+    if (base.has(key)) continue;
+    if (localMatches.length !== 1) {
+      conflicts.push({ label:localMatches[0].label, reason:'ambiguous' });
+      continue;
+    }
+    const remoteMatches = remote.get(key) || [];
+    if (remoteMatches.length > 1) {
+      conflicts.push({ label: localMatches[0].label, reason: 'ambiguous' });
+      continue;
+    }
+    if (remoteMatches.length === 0) {
+      changes.push({ label: localMatches[0].label, checked:localMatches[0].checked, added:true });
+    }
+  }
+
+  if (conflicts.length) return { body: null, changes, conflicts };
+  const desired = new Map(changes.map(change => [
+    change.label.replace(/\s+/g, ' ').toLocaleLowerCase(), change.checked,
+  ]));
+  const lines = String(remoteBody || '').split('\n');
+  remoteEntries.forEach(entry => {
+    if (!desired.has(entry.key)) return;
+    const marker = desired.get(entry.key) ? 'x' : ' ';
+    lines[entry.lineIndex] = entry.match[1] + marker + entry.match[3] + entry.match[4];
+  });
+  changes.filter(change => change.added).forEach(change => {
+    lines.push('- [' + (change.checked ? 'x' : ' ') + '] ' + change.label);
+  });
+  return { body: lines.join('\n'), changes, conflicts: [] };
+}
+
+if (typeof module !== 'undefined') module.exports = mergeChecklistConflict;

frontend/conversation-action-hydrator.js

@@ -0,0 +1,49 @@
+function createConversationActionHydrator({ load, activate }) {
+  let actions = null;
+  let pending = null;
+  const wiredRoots = new WeakSet();
+
+  function ensure() {
+    if (actions) return Promise.resolve(actions);
+    if (!pending) {
+      pending = load().then(() => {
+        actions = activate();
+        return actions;
+      }).catch(error => {
+        pending = null;
+        throw error;
+      });
+    }
+    return pending;
+  }
+
+  function show({ root, state, paint, wire, retry }) {
+    if (actions) {
+      retry.hidden = true;
+      if (!wiredRoots.has(root)) {
+        wire(actions);
+        wiredRoots.add(root);
+      }
+      paint(state, actions);
+      return Promise.resolve(true);
+    }
+
+    paint(state, null);
+    retry.hidden = true;
+    return ensure().then(controller => {
+      if (!wiredRoots.has(root)) {
+        wire(controller);
+        wiredRoots.add(root);
+      }
+      paint(state, controller);
+      return true;
+    }).catch(() => {
+      retry.hidden = false;
+      return false;
+    });
+  }
+
+  return { show, ready: () => Boolean(actions) };
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = createConversationActionHydrator;

frontend/conversation-photo-drafts.js

@@ -0,0 +1,81 @@
+(function (root, factory) {
+  const createConversationPhotoDrafts = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createConversationPhotoDrafts;
+  else root.createConversationPhotoDrafts = createConversationPhotoDrafts;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  return function createConversationPhotoDrafts({ store, lanes }) {
+    const states = {};
+    Object.entries(lanes || {}).forEach(([kind, lane]) => {
+      states[kind] = { ...lane, target:null, generation:0, restoring:false, pending:Promise.resolve() };
+    });
+
+    function state(kind) {
+      const value = states[kind];
+      if (!value) throw new Error('Unknown conversation photo draft lane.');
+      return value;
+    }
+
+    async function checkpoint(kind) {
+      const current = state(kind);
+      if (!current.target || current.restoring) return null;
+      const target = { ...current.target };
+      const attachments = await current.controller.serialize();
+      const save = current.pending.then(() => store.save(target, attachments));
+      current.pending = save.catch(() => null);
+      try { return await save; }
+      catch (error) { current.onError?.(error); throw error; }
+    }
+
+    async function open(kind, target) {
+      const current = state(kind);
+      const generation = ++current.generation;
+      current.target = { ...target };
+      await current.pending;
+      const attachments = await store.load(target);
+      if (generation !== current.generation) return false;
+      current.controller.clear();
+      if (attachments?.length) {
+        current.restoring = true;
+        try { current.controller.restore(attachments); }
+        finally { current.restoring = false; }
+      }
+      return Boolean(attachments?.length);
+    }
+
+    async function leave(kind) {
+      const current = state(kind);
+      const generation = current.generation;
+      if (!current.target) return true;
+      try { await checkpoint(kind); }
+      catch (_error) { return false; }
+      if (generation === current.generation) {
+        current.controller.clear();
+        current.target = null;
+        current.generation += 1;
+      }
+      return true;
+    }
+
+    async function complete(kind) {
+      const current = state(kind);
+      if (!current.target) return false;
+      const target = { ...current.target };
+      await current.pending;
+      await store.remove(target);
+      current.controller.clear();
+      current.target = null;
+      current.generation += 1;
+      return true;
+    }
+
+    async function switchTo(kind, target, isCurrent = () => true) {
+      if (!await leave(kind) || !isCurrent()) return false;
+      return open(kind, target);
+    }
+
+    function hasTarget(kind) { return Boolean(state(kind).target); }
+    return { checkpoint, open, switchTo, leave, complete, hasTarget };
+  };
+});

frontend/conversation-reply-draft-store.js

@@ -0,0 +1,122 @@
+(function (root, factory) {
+  const createConversationReplyDraftStore = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createConversationReplyDraftStore;
+  else root.createConversationReplyDraftStore = createConversationReplyDraftStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const dbName = 'stackchain-conversation-reply-drafts-v1';
+  const storeName = 'drafts';
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result ?? null);
+      request.onerror = () => reject(request.error || new Error('Conversation photo draft storage failed.'));
+    });
+  }
+
+  function createTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise;
+    function database() {
+      if (!databasePromise) databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(storeName)) {
+            request.result.createObjectStore(storeName, { keyPath:'id' });
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Conversation photo draft storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (operation, key, value) => {
+      const db = await database();
+      const transaction = db.transaction(storeName, operation === 'get' ? 'readonly' : 'readwrite');
+      const records = transaction.objectStore(storeName);
+      if (operation === 'put') return requestResult(records.put(value));
+      if (operation === 'delete') return requestResult(records.delete(key));
+      return requestResult(records.get(key));
+    };
+  }
+
+  function normalizedTarget(target) {
+    const kind = String(target?.kind || '');
+    if (kind === 'update') {
+      const notificationId = Number(target?.notificationId || target?.notification_id || 0);
+      if (!Number.isInteger(notificationId) || notificationId < 1) {
+        throw new Error('Open an unread update before saving photo evidence.');
+      }
+      return { kind, notificationId };
+    }
+    const repository = String(target?.repository || '');
+    const number = Number(target?.number || 0);
+    if (!['issue', 'pull'].includes(kind) || !repository || !Number.isInteger(number) || number < 1) {
+      throw new Error('Open a conversation before saving photo evidence.');
+    }
+    return { kind, repository, number };
+  }
+
+  function attachment(value) {
+    const blob = value?.blob;
+    const data = String(value?.data || '');
+    if (!blob && !data) throw new Error('A saved conversation photo is unavailable.');
+    const note = String(value?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    const operationId = String(value?.operationId || '').slice(0, 128);
+    const markdown = String(value?.confirmed?.markdown || '');
+    return {
+      filename:String(value?.filename || ''), contentType:String(value?.contentType || ''),
+      ...(blob ? { blob } : { data }), ...(note ? { note } : {}),
+      ...(operationId ? { operationId } : {}), ...(markdown ? { confirmed:{ markdown } } : {}),
+    };
+  }
+
+  return function createConversationReplyDraftStore({
+    indexedDB = globalThis.indexedDB, transaction, getOwnerLogin = () => '',
+  } = {}) {
+    const transact = transaction || createTransaction(indexedDB);
+
+    function identity(target) {
+      const ownerLogin = String(getOwnerLogin() || '').trim();
+      if (!ownerLogin) throw new Error('Confirm your Gitea account before saving conversation photos.');
+      const normalized = normalizedTarget(target);
+      const targetKey = normalized.kind === 'update' ? normalized.notificationId :
+        normalized.repository + ':' + normalized.number;
+      return {
+        ownerLogin, target:normalized,
+        id:[ownerLogin, normalized.kind, targetKey].map(value => encodeURIComponent(String(value))).join(':'),
+      };
+    }
+
+    async function save(target, values) {
+      if (!transact) throw new Error('Photo draft storage needs IndexedDB. Your current photos are still here.');
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const list = (Array.isArray(values) ? values : [values]).filter(Boolean).slice(0, 5).map(attachment);
+      if (!list.length) { await transact('delete', id); return null; }
+      await transact('put', id, { id, version:1, ownerLogin, ...normalized, attachments:list });
+      return list;
+    }
+
+    async function load(target) {
+      if (!transact) return null;
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const record = await transact('get', id);
+      const same = record?.version === 1 && record.ownerLogin === ownerLogin &&
+        record.kind === normalized.kind && (normalized.kind === 'update' ?
+          Number(record.notificationId) === normalized.notificationId :
+          record.repository === normalized.repository && Number(record.number) === normalized.number);
+      if (!same || !Array.isArray(record.attachments) || !record.attachments.length) return null;
+      return record.attachments.slice(0, 5).map(attachment);
+    }
+
+    async function remove(target) {
+      if (!transact) return false;
+      const { id } = identity(target);
+      await transact('delete', id);
+      return true;
+    }
+
+    return { save, load, remove };
+  };
+});

frontend/create-and-start.js

@@ -5,7 +5,40 @@ function createCreateAndStart({ todayWork, todaySync, refresh, warm, start, anno
     return todayWork.read().length < todayWork.limit;
   }
 
-  function complete(issue) {
+  function capacity(value) {
+    if (String(value ?? '').trim() === '') return { valid: false, reason: 'required' };
+    const minutes = Number(value);
+    if (!Number.isInteger(minutes) || minutes < 5 || minutes > 1440) {
+      return { valid: false, reason: 'range' };
+    }
+    const plan = todayWork.planning();
+    const capacityMinutes = plan.capacity_minutes;
+    if (!Number.isInteger(capacityMinutes)) {
+      return { valid: true, minutes, capacityMinutes: null, plannedMinutes: null,
+        remainingMinutes: null, projectedMinutes: null, fits: true };
+    }
+    const plannedMinutes = todayWork.read().reduce(
+      (total, identity) => total + (Number.isInteger(plan.estimates[identity]) ? plan.estimates[identity] : 0), 0
+    );
+    const remainingMinutes = capacityMinutes - plannedMinutes;
+    const projectedMinutes = remainingMinutes - minutes;
+    return { valid: true, minutes, capacityMinutes, plannedMinutes, remainingMinutes,
+      projectedMinutes, fits: projectedMinutes >= 0 };
+  }
+
+  function capacityMessage(result) {
+    if (!result.valid) return result.reason === 'required'
+      ? 'Required only for Create & start.'
+      : 'Use a whole number from 5 to 1440 minutes.';
+    if (result.capacityMinutes === null) {
+      return result.minutes + ' min · Set a Today budget to see remaining time.';
+    }
+    return result.fits
+      ? result.minutes + ' min · ' + result.projectedMinutes + ' min will remain in Today.'
+      : result.minutes + ' min · ' + Math.abs(result.projectedMinutes) + ' min over Today capacity.';
+  }
+
+  function complete(issue, estimateMinutes) {
     const identity = todayWork.identity(issue);
     if (!identity || completed.has(identity)) return 'exists';
     const added = todayWork.add(issue);
@@ -17,10 +50,25 @@ function createCreateAndStart({ todayWork, todaySync, refresh, warm, start, anno
       announce('Created, but Today could not be saved on this device.');
       return 'unavailable';
     }
+    let estimatedPlan = null;
+    if (Number.isInteger(estimateMinutes)) {
+      estimatedPlan = todayWork.planning();
+      estimatedPlan.estimates[identity] = estimateMinutes;
+      if (!todayWork.replacePlanning(estimatedPlan)) {
+        announce('Created and added to Today, but its estimate could not be saved on this device.');
+        return 'estimate-unavailable';
+      }
+    }
     if (!todaySync.enqueue('add', identity)) {
       announce('Created and saved to Today on this device, but account sync is unavailable.');
       return 'sync-unavailable';
     }
+    if (estimatedPlan) {
+      if (!todaySync.enqueueConfiguration(estimatedPlan.capacity_minutes, estimatedPlan.estimates)) {
+        announce('Created and estimated on this device, but Today plan sync is unavailable.');
+        return 'sync-unavailable';
+      }
+    }
     completed.add(identity);
     refresh();
     todaySync.flush();
@@ -30,7 +78,7 @@ function createCreateAndStart({ todayWork, todaySync, refresh, warm, start, anno
     return 'started';
   }
 
-  return { available, complete };
+  return { available, capacity, capacityMessage, complete };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createCreateAndStart;

frontend/create-issue-sheet.js

@@ -19,22 +19,244 @@ function normalizeSharedContent(value = {}) {
   return { title, body };
 }
 
+function buildRelatedDraft(value = {}, template = null) {
+  const repository = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(String(value.repository || ''))
+    ? String(value.repository) : '';
+  const labelIds = Array.from(new Set((Array.isArray(value.labelIds) ? value.labelIds : [])
+    .filter(id => Number.isInteger(id) && id > 0))).slice(0, 20);
+  const draft = {repository, title:'', body:'', labelIds};
+  const milestoneId = Number(value.milestoneId);
+  if (Number.isInteger(milestoneId) && milestoneId > 0) draft.milestoneId = milestoneId;
+  if (/^\d{4}-\d{2}-\d{2}$/.test(String(value.dueDate || ''))) draft.dueDate = String(value.dueDate);
+  if (value.unassigned === true) draft.unassigned = true;
+  else if (/^[A-Za-z0-9_.-]+$/.test(String(value.assignee || ''))) {
+    draft.assignee = String(value.assignee);
+    draft.assigneeName = String(value.assigneeName || value.assignee).replace(/\s+/g, ' ').trim().slice(0, 255);
+  }
+  const templateId = String(value.templateId || '').slice(0, 80);
+  if (templateId && template && String(template.id || '') === templateId) {
+    draft.templateId = templateId;
+    draft.templateName = String(value.templateName || template.name || 'Issue template').trim().slice(0, 80);
+    draft.capturedBody = '';
+    draft.body = String(template.body || '').trim().slice(0, 9000);
+  }
+  return draft;
+}
+
+function relatedChecklistDraft(item, label) {
+  const title = String(label || '').trim().replace(/\s+/g, ' ').slice(0, 240);
+  if (!title) throw new Error('Choose a checklist step to file.');
+  const repository = String(item?.repository || '');
+  const number = Number(item?.number);
+  const url = String(item?.url || '');
+  if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository) ||
+      !Number.isInteger(number) || number < 1 || !/^https:\/\//.test(url)) {
+    throw new Error('The parent issue link is unavailable.');
+  }
+  return {repository, title,
+    body:'Related to [' + repository + '#' + number + '](' + url + ').', labelIds:[]};
+}
+
+function linkChecklistTask(raw, targetIndex, child) {
+  const url = String(child?.url || '');
+  if (!/^https:\/\//.test(url)) throw new Error('The related issue link is unavailable.');
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^(\s*[-*+]\s+\[[ xX]\]\s+)(.*)$/);
+    if (!task) continue;
+    if (taskIndex === Number(targetIndex)) {
+      if (/^\s*\[[^\]]+\]\([^)]+\)\s*$/.test(task[2])) throw new Error('That checklist step is already linked.');
+      const label = task[2].trim().replace(/\s+/g, ' ');
+      parts[index] = task[1] + '[' + label + '](' + url + ')';
+      return parts.join('');
+    }
+    taskIndex += 1;
+  }
+  throw new Error('The checklist step is no longer available.');
+}
+
+function createChecklistPromotion({ issueController, issueCapture, clearAttachments, onLinked, onStatus }) {
+  let pending = null;
+  const persistedPromotion = value => ({
+    item:{repository:value.repository, number:value.number, url:value.url},
+    detail:{title:value.title, body:value.body, updated_at:value.updatedAt}, taskIndex:value.taskIndex,
+  });
+  return {
+    pending:() => Boolean(pending),
+    start(context) {
+      pending = {item:{...context.item}, detail:{...context.detail}, taskIndex:Number(context.taskIndex)};
+      const draft = issueController.relatedTaskDraft(context.item, context.detail, context.taskIndex, context.label);
+      issueCapture.saveDraft(draft);
+      clearAttachments();
+      return draft;
+    },
+    cancel() { if (!pending) return false; pending = null; issueCapture.clearDraft(); return true; },
+    deliveryContext() {
+      if (!pending) return null;
+      return {repository:pending.item.repository, number:pending.item.number, url:pending.item.url,
+        title:pending.detail.title, body:pending.detail.body, updatedAt:pending.detail.updated_at,
+        taskIndex:pending.taskIndex};
+    },
+    async finish(child, persisted = null) {
+      const promotion = pending || (persisted ? persistedPromotion(persisted) : null);
+      if (!promotion || !child) return false;
+      pending = null;
+      try {
+        const confirmed = await issueController.linkRelatedTask(
+          promotion.item, promotion.detail, promotion.taskIndex, child
+        );
+        onLinked(promotion, confirmed);
+        onStatus('Related issue created and linked from its parent checklist.');
+        return true;
+      } catch (error) {
+        onStatus('Related issue created, but the parent link needs attention.' +
+          (child.url ? ' ' + child.url : '') + ' ' + error.message);
+        return false;
+      }
+    },
+  };
+}
+
+function createIssueOwnerPicker(issueCapture, documentRef, onChange) {
+  const NO_OWNER = '__unassigned__';
+  const select = documentRef.querySelector('#create-issue-assignee');
+  const status = documentRef.querySelector('#create-issue-assignee-status');
+  const getRepository = () => documentRef.querySelector('#create-issue-repository').value;
+  const loadOwners = repository => issueCapture.loadOwners(repository);
+  let ownerRequest = 0;
+  function reset(repository, selected = {}) {
+    select.replaceChildren();
+    const me = documentRef.createElement('option');
+    me.value = '';
+    me.textContent = 'Me';
+    select.appendChild(me);
+    const noOwner = documentRef.createElement('option');
+    noOwner.value = NO_OWNER;
+    noOwner.textContent = 'No owner';
+    select.appendChild(noOwner);
+    if (selected.unassigned === true) select.value = NO_OWNER;
+    if (selected.assignee) {
+      const option = documentRef.createElement('option');
+      option.value = selected.assignee;
+      option.textContent = (selected.assigneeName || selected.assignee) + ' (@' + selected.assignee + ')';
+      option.dataset.name = selected.assigneeName || selected.assignee;
+      select.appendChild(option);
+      select.value = selected.assignee;
+    }
+    select.dataset.repository = '';
+    status.textContent = repository ? 'Open the owner picker to load eligible teammates.' : 'Choose a repository first.';
+  }
+
+  async function load(repository) {
+    if (!repository || select.dataset.repository === repository) return;
+    const request = ++ownerRequest;
+    const selected = select.value;
+    const selectedName = select.selectedOptions?.[0]?.dataset.name || '';
+    status.textContent = 'Loading eligible teammates…';
+    try {
+      const owners = await loadOwners(repository);
+      if (request !== ownerRequest || getRepository() !== repository) return;
+      const selectedStillEligible = owners.some(owner => owner?.login === selected);
+      reset(repository, selected === NO_OWNER ? {unassigned:true} :
+        (selectedStillEligible ? {assignee:selected, assigneeName:selectedName} : {}));
+      owners.forEach(owner => {
+        if (!owner?.login || owner.login === selected) return;
+        const option = documentRef.createElement('option');
+        option.value = owner.login;
+        option.textContent = (owner.name || owner.login) + ' (@' + owner.login + ')';
+        option.dataset.name = owner.name || owner.login;
+        select.appendChild(option);
+      });
+      select.dataset.repository = repository;
+      status.textContent = owners.length ? 'Choose yourself, no owner, or an eligible teammate.' :
+        'Choose yourself or no owner; no eligible teammates are available.';
+    } catch (_error) {
+      if (request !== ownerRequest || getRepository() !== repository) return;
+      status.textContent = 'Teammates could not be loaded. The issue will stay assigned to you.';
+    }
+  }
+  function updateActions(hasRepository, hasBlockers, canStart) {
+    const submit = documentRef.querySelector('#submit-new-issue');
+    const start = documentRef.querySelector('#create-and-start-issue');
+    const hasNoOwner = select.value === NO_OWNER;
+    const hasTeammateOwner = Boolean(select.value) && !hasNoOwner;
+    submit.disabled = !hasRepository;
+    submit.textContent = hasNoOwner ? 'Create unassigned' :
+      (hasTeammateOwner ? 'Create & assign' : 'Create & assign to me');
+    start.disabled = !hasRepository || hasBlockers || hasTeammateOwner || hasNoOwner || !canStart;
+    start.title = hasBlockers ? 'Blocked work cannot start until its blockers are complete.' :
+      (hasNoOwner ? 'No owner work cannot be added to your Today queue.' :
+        (hasTeammateOwner ? 'Work assigned to a teammate cannot be added to your Today queue.' : ''));
+  }
+  function fields() {
+    return {
+      assignee: select.value === NO_OWNER ? '' : select.value,
+      assigneeName: select.value === NO_OWNER ? '' : (select.selectedOptions?.[0]?.dataset.name || ''),
+      unassigned: select.value === NO_OWNER,
+    };
+  }
+  function draft(labelIds, blockers, trim = false) {
+    const value = id => documentRef.querySelector(id).value;
+    const clean = input => trim ? input.trim() : input;
+    return {
+      repository:value('#create-issue-repository'),
+      title:clean(value('#create-issue-title')), body:clean(value('#create-issue-body')),
+      labelIds, milestoneId:Number(value('#create-issue-milestone')) || null,
+      dueDate:value('#create-issue-due-date'), ...fields(), blockers,
+    };
+  }
+  select.addEventListener('focus', () => {
+    const repository = getRepository();
+    if (repository) load(repository);
+  });
+  select.addEventListener('change', onChange);
+  return { reset, load, updateActions, fields, draft };
+}
+
 function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOperationId }) {
   const storageKey = 'stackchain.issue-capture.v1';
   const sharedStorageKey = 'stackchain.issue-share.v1';
   const followUpStorageKey = 'stackchain.issue-follow-up.v1';
   let pending = null;
+  let issueTemplates = [];
+  let activeTemplate = null;
+  let templateRequest = 0;
   let duplicateRequest = 0;
   let repositorySearchRequest = 0;
+  let filingMetadataRequest = 0;
+  let blockerSearchRequest = 0;
   let duplicateState = {status: 'idle', key: '', candidates: []};
   let acknowledgedDuplicateKey = '';
   const repositoryPageRequests = new Map();
   const safeLabelIds = value => Array.from(new Set(
     (Array.isArray(value) ? value : []).filter(id => Number.isInteger(id) && id > 0)
   )).slice(0, 20);
+  const safeBlockers = value => {
+    const seen = new Set();
+    return (Array.isArray(value) ? value : []).reduce((items, blocker) => {
+      const repository = String(blocker?.repository || '').trim();
+      const number = Number(blocker?.number);
+      const key = repository + '#' + number;
+      if (items.length >= 5 || seen.has(key) ||
+          !/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository) ||
+          !Number.isInteger(number) || number < 1) return items;
+      seen.add(key);
+      items.push({repository, number,
+        title:String(blocker?.title || '').replace(/\s+/g, ' ').trim().slice(0, 255)});
+      return items;
+    }, []);
+  };
   const emptyDraft = () => ({ repository: '', title: '', body: '', labelIds: [] });
   const safeMilestoneId = value => Number.isInteger(Number(value)) && Number(value) > 0 ? Number(value) : null;
   const safeDueDate = value => /^\d{4}-\d{2}-\d{2}$/.test(String(value || '')) ? String(value) : '';
+  const safeAssignee = value => /^[A-Za-z0-9_.-]+$/.test(String(value || '')) ? String(value) : '';
+  const safeEstimate = value => Number.isInteger(Number(value)) && Number(value) >= 5 && Number(value) <= 1440 ?
+    Number(value) : null;
 
   function loadStored() {
     try {
@@ -47,10 +269,28 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
         labelIds: safeLabelIds(parsed.labelIds),
         operationId: String(parsed.operationId || '').slice(0, 128),
       };
+      if (parsed.unassigned === true) draft.unassigned = true;
+      if (typeof parsed.templateName === 'string' && parsed.templateName.trim()) {
+        draft.templateName = parsed.templateName.trim().slice(0, 80);
+        draft.templateId = String(parsed.templateId || '').slice(0, 80);
+        draft.capturedBody = String(parsed.capturedBody || '').slice(0, 10000);
+      }
+      const assignee = safeAssignee(parsed.assignee);
+      if (assignee) {
+        draft.assignee = assignee;
+        draft.assigneeName = String(parsed.assigneeName || assignee).replace(/\s+/g, ' ').trim().slice(0, 255);
+      }
       const milestoneId = safeMilestoneId(parsed.milestoneId);
       const dueDate = safeDueDate(parsed.dueDate);
       if (milestoneId !== null) draft.milestoneId = milestoneId;
       if (dueDate) draft.dueDate = dueDate;
+      const estimateMinutes = safeEstimate(parsed.estimateMinutes);
+      if (estimateMinutes !== null) draft.estimateMinutes = estimateMinutes;
+      if (['create', 'create-and-start'].includes(parsed.completionIntent)) {
+        draft.completionIntent = parsed.completionIntent;
+      }
+      const blockers = safeBlockers(parsed.blockers);
+      if (blockers.length) draft.blockers = blockers;
       return draft;
     } catch (_error) {
       return {...emptyDraft(), operationId: ''};
@@ -70,13 +310,33 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
       body: String(draft?.body || ''),
       labelIds: safeLabelIds(draft?.labelIds),
     };
+    if (draft?.unassigned === true) safe.unassigned = true;
+    if (typeof draft?.templateName === 'string' && draft.templateName.trim()) {
+      safe.templateName = draft.templateName.trim().slice(0, 80);
+      safe.templateId = String(draft.templateId || '').slice(0, 80);
+      safe.capturedBody = String(draft.capturedBody || '').slice(0, 10000);
+    }
+    const assignee = safe.unassigned ? '' : safeAssignee(draft?.assignee);
+    if (assignee) {
+      safe.assignee = assignee;
+      safe.assigneeName = String(draft?.assigneeName || assignee).replace(/\s+/g, ' ').trim().slice(0, 255);
+    }
     const milestoneId = safeMilestoneId(draft?.milestoneId);
     const dueDate = safeDueDate(draft?.dueDate);
     if (milestoneId !== null) safe.milestoneId = milestoneId;
     if (dueDate) safe.dueDate = dueDate;
-    const unchanged = ['repository', 'title', 'body', 'milestoneId', 'dueDate']
+    const estimateMinutes = safeEstimate(draft?.estimateMinutes);
+    if (estimateMinutes !== null) safe.estimateMinutes = estimateMinutes;
+    if (['create', 'create-and-start'].includes(draft?.completionIntent)) {
+      safe.completionIntent = draft.completionIntent;
+    }
+    const blockers = safeBlockers(draft?.blockers);
+    if (blockers.length) safe.blockers = blockers;
+    const unchanged = ['repository', 'title', 'body', 'milestoneId', 'dueDate', 'assignee', 'assigneeName', 'unassigned',
+      'templateName', 'templateId', 'capturedBody', 'estimateMinutes', 'completionIntent']
       .every(key => (previous[key] || '') === (safe[key] || '')) &&
-      JSON.stringify(previous.labelIds) === JSON.stringify(safe.labelIds);
+      JSON.stringify(previous.labelIds) === JSON.stringify(safe.labelIds) &&
+      JSON.stringify(previous.blockers || []) === JSON.stringify(safe.blockers || []);
     writeStored({...safe, operationId: unchanged ? previous.operationId : ''});
     return safe;
   }
@@ -182,6 +442,266 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
     );
   }
 
+  function loadOwners(repository) {
+    const encoded = String(repository || '').split('/').map(encodeURIComponent).join('/');
+    return fetchJson('api/v1/repos/' + encoded + '/issue-assignees').then(owners =>
+      Array.isArray(owners) ? owners : []
+    );
+  }
+
+  function loadTemplates(repository) {
+    const encoded = String(repository || '').split('/').map(encodeURIComponent).join('/');
+    return fetchJson('api/v1/repos/' + encoded + '/issue-templates').then(templates =>
+      Array.isArray(templates) ? templates.slice(0, 20) : []
+    );
+  }
+
+  async function loadFilingMetadata(repository) {
+    const selectedRepository = String(repository || '');
+    const encoded = selectedRepository.split('/').map(encodeURIComponent).join('/');
+    const request = ++filingMetadataRequest;
+    const payload = await fetchJson(
+      'api/v1/repos/' + encoded + '/issue-filing-metadata'
+    );
+    if (request !== filingMetadataRequest) {
+      return {status:'stale', repository:selectedRepository};
+    }
+    const section = name => {
+      const value = payload?.[name];
+      const available = value?.available === true;
+      return {
+        available,
+        items:available && Array.isArray(value?.items) ? value.items : [],
+        ...(!available && typeof value?.error === 'string' ? {error:value.error} : {}),
+      };
+    };
+    return {
+      status:'ready', repository:selectedRepository,
+      labels:section('labels'), milestones:section('milestones'),
+      templates:section('templates'),
+    };
+  }
+
+  function applyTemplate(draft, template, availableLabels = []) {
+    const source = {...(draft || {})};
+    const capturedBody = source.templateName ? String(source.capturedBody || '') : String(source.body || '');
+    if (!template) {
+      delete source.templateName;
+      delete source.templateId;
+      delete source.capturedBody;
+      return {...source, body: capturedBody};
+    }
+    const scaffold = String(template.body || '').trim().slice(0, 9000);
+    const body = [capturedBody.trim(), scaffold].filter(Boolean).join('\n\n---\n\n').slice(0, 10000);
+    const validByName = new Map((Array.isArray(availableLabels) ? availableLabels : [])
+      .filter(label => Number.isInteger(label?.id) && typeof label?.name === 'string')
+      .map(label => [label.name.toLowerCase(), label.id]));
+    const templateLabelIds = (Array.isArray(template.labels) ? template.labels : [])
+      .map(name => validByName.get(String(name).toLowerCase())).filter(Boolean);
+    return {
+      ...source,
+      title: source.title || String(template.title || '').trim().slice(0, 255),
+      body,
+      labelIds: safeLabelIds([...(source.labelIds || []), ...templateLabelIds]),
+      templateId: String(template.id || '').slice(0, 80),
+      templateName: String(template.name || 'Issue template').trim().slice(0, 80),
+      capturedBody,
+    };
+  }
+
+  function setTemplateState(draft) {
+    activeTemplate = draft?.templateName ? {
+      templateName:draft.templateName, templateId:draft.templateId,
+      capturedBody:draft.capturedBody || '',
+    } : null;
+  }
+
+  function templateFields(draft) {
+    return activeTemplate ? {...draft, ...activeTemplate} : draft;
+  }
+
+  function restoreTemplate(draft, availableLabels) {
+    const restored = applyTemplate(templateFields(draft), null, availableLabels);
+    activeTemplate = null;
+    return restored;
+  }
+
+  async function loadTemplateOptions(repository, elements, selectedId = '') {
+    const request = ++templateRequest;
+    issueTemplates = [];
+    elements.select.innerHTML = '<option value="">Blank issue</option>';
+    elements.field.hidden = true;
+    if (!repository) return;
+    elements.status.textContent = 'Loading issue types…';
+    try {
+      const templates = await loadTemplates(repository);
+      if (request !== templateRequest || elements.getRepository() !== repository) return;
+      issueTemplates = templates;
+      templates.forEach(template => {
+        const option = elements.document.createElement('option');
+        option.value = template.id;
+        option.textContent = template.name;
+        elements.select.appendChild(option);
+      });
+      elements.field.hidden = templates.length === 0;
+      elements.select.value = templates.some(template => template.id === selectedId) ? selectedId : '';
+      elements.status.textContent = templates.length ?
+        'Choose a repository guide or keep a blank issue.' : 'Blank issue selected.';
+    } catch (_error) {
+      if (request !== templateRequest || elements.getRepository() !== repository) return;
+      elements.status.textContent = 'Issue types could not be loaded. Blank issue filing is still available.';
+    }
+  }
+
+  function selectTemplate(identifier, draft, availableLabels) {
+    const template = issueTemplates.find(item => item.id === identifier) || null;
+    const applied = applyTemplate(templateFields(draft), template, availableLabels);
+    activeTemplate = template ? {
+      templateId:applied.templateId, templateName:applied.templateName,
+      capturedBody:applied.capturedBody,
+    } : null;
+    return {draft: applied, template};
+  }
+
+  function relatedDraft(draft) {
+    const template = issueTemplates.find(item => String(item?.id || '') === String(draft?.templateId || '')) || null;
+    return buildRelatedDraft(draft, template);
+  }
+
+  function bindTemplatePicker(elements, callbacks) {
+    let labels = [];
+    elements.select.addEventListener('change', event => {
+      const {draft, template} = selectTemplate(event.target.value, callbacks.getDraft(), labels);
+      callbacks.setDraft(draft);
+      const selected = new Set(draft.labelIds || []);
+      elements.labelInputs().forEach(input => { input.checked = selected.has(Number(input.value)); });
+      elements.status.textContent = template ?
+        template.name + (template.about ? ' — ' + template.about : '') : 'Blank issue selected.';
+      callbacks.changed();
+    });
+    return {
+      fields:templateFields,
+      reset:setTemplateState,
+      setLabels(value) { labels = Array.isArray(value) ? value : []; },
+      load(repository, selectedId) {
+        return loadTemplateOptions(repository, elements, selectedId);
+      },
+      render(repository, section, selectedId = '') {
+        ++templateRequest;
+        issueTemplates = [];
+        elements.select.innerHTML = '<option value="">Blank issue</option>';
+        elements.field.hidden = true;
+        if (!repository || elements.getRepository() !== repository) return;
+        if (section?.available !== true) {
+          elements.status.textContent = 'Issue types could not be loaded. Blank issue filing is still available.';
+          return;
+        }
+        issueTemplates = Array.isArray(section.items) ? section.items.slice(0, 20) : [];
+        issueTemplates.forEach(template => {
+          const option = elements.document.createElement('option');
+          option.value = template.id;
+          option.textContent = template.name;
+          elements.select.appendChild(option);
+        });
+        elements.field.hidden = issueTemplates.length === 0;
+        elements.select.value = issueTemplates.some(template => template.id === selectedId) ? selectedId : '';
+        elements.status.textContent = issueTemplates.length ?
+          'Choose a repository guide or keep a blank issue.' : 'Blank issue selected.';
+      },
+      changeRepository(draft) {
+        const restored = restoreTemplate(draft, labels);
+        callbacks.setDraft(restored);
+        return restored;
+      },
+    };
+  }
+
+  function bindFilingMetadata(elements, templatePicker) {
+    function renderLabels(repository, section, selectedIds = []) {
+      elements.labelList.replaceChildren();
+      if (!repository) {
+        elements.labelStatus.textContent = 'Choose a repository to load labels.';
+        return;
+      }
+      if (section?.available !== true) {
+        templatePicker.setLabels([]);
+        elements.labelStatus.textContent = 'Labels could not be loaded. You can still create the issue without labels.';
+        return;
+      }
+      const priorities = new Set(['p0', 'priority-high', 'critical']);
+      const labels = (Array.isArray(section.items) ? section.items : []).slice().sort((left, right) =>
+        Number(priorities.has(String(right?.name || '').toLowerCase())) -
+        Number(priorities.has(String(left?.name || '').toLowerCase()))
+      );
+      templatePicker.setLabels(labels);
+      const selected = new Set(selectedIds.map(Number));
+      labels.forEach(label => {
+        const option = elements.document.createElement('label');
+        option.className = 'create-issue-label-option';
+        const input = elements.document.createElement('input');
+        input.type = 'checkbox';
+        input.name = 'create-issue-label';
+        input.value = String(Number(label.id));
+        input.checked = selected.has(Number(label.id));
+        const name = elements.document.createElement('span');
+        name.textContent = label.name;
+        option.append(input, name);
+        elements.labelList.appendChild(option);
+      });
+      elements.labelStatus.textContent = labels.length ?
+        'Select labels to triage this issue.' : 'This repository has no labels.';
+    }
+
+    function renderMilestones(repository, section, selectedId = null) {
+      elements.milestoneSelect.replaceChildren();
+      const blank = elements.document.createElement('option');
+      blank.value = '';
+      blank.textContent = 'No milestone';
+      elements.milestoneSelect.appendChild(blank);
+      if (!repository) {
+        elements.milestoneStatus.textContent = 'Choose a repository to load milestones.';
+        return;
+      }
+      if (section?.available !== true) {
+        elements.milestoneStatus.textContent = 'Milestones could not be loaded. You can still create an unplanned issue.';
+        return;
+      }
+      const milestones = Array.isArray(section.items) ? section.items : [];
+      milestones.forEach(milestone => {
+        const option = elements.document.createElement('option');
+        option.value = String(Number(milestone.id));
+        option.textContent = milestone.title;
+        elements.milestoneSelect.appendChild(option);
+      });
+      if (selectedId) elements.milestoneSelect.value = String(selectedId);
+      elements.milestoneStatus.textContent = milestones.length ?
+        'Choose the release lane for this issue.' : 'This repository has no open milestones.';
+    }
+
+    async function load(repository, selected = {}) {
+      renderLabels(repository, null, selected.labelIds || []);
+      renderMilestones(repository, null, selected.milestoneId);
+      templatePicker.render(repository, null, selected.templateId);
+      if (!repository) return;
+      elements.labelStatus.textContent = 'Loading labels…';
+      elements.milestoneStatus.textContent = 'Loading milestones…';
+      elements.templateStatus.textContent = 'Loading issue types…';
+      try {
+        const metadata = await loadFilingMetadata(repository);
+        if (metadata.status !== 'ready' || elements.getRepository() !== repository) return;
+        renderLabels(repository, metadata.labels, selected.labelIds || []);
+        renderMilestones(repository, metadata.milestones, selected.milestoneId);
+        templatePicker.render(repository, metadata.templates, selected.templateId);
+      } catch (_error) {
+        if (elements.getRepository() !== repository) return;
+        renderLabels(repository, {available:false}, selected.labelIds || []);
+        renderMilestones(repository, {available:false}, selected.milestoneId);
+        templatePicker.render(repository, {available:false}, selected.templateId);
+      }
+    }
+    return {load};
+  }
+
   function loadRepositoryPage(page) {
     const safePage = Math.max(1, Math.floor(Number(page) || 1));
     if (repositoryPageRequests.has(safePage)) return repositoryPageRequests.get(safePage);
@@ -216,6 +736,21 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
     }
   }
 
+  async function searchBlockers(value) {
+    const query = String(value || '').trim().slice(0, 80);
+    const request = ++blockerSearchRequest;
+    if (query.length < 2) return {status:'idle', items:[]};
+    try {
+      const payload = await fetchJson('api/v1/search?q=' + encodeURIComponent(query) + '&limit=20');
+      if (request !== blockerSearchRequest) return {status:'stale', items:[]};
+      return {status:'ready', items:(Array.isArray(payload?.items) ? payload.items : [])
+        .filter(item => item?.kind === 'issue' && item?.state === 'open').slice(0, 20)};
+    } catch (error) {
+      if (request !== blockerSearchRequest) return {status:'stale', items:[]};
+      return {status:'failed', items:[], error};
+    }
+  }
+
   function duplicateKey(draft) {
     const repository = String(draft?.repository || '').trim();
     const title = String(draft?.title || '').replace(/\s+/g, ' ').trim();
@@ -276,6 +811,8 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
       },
       body: JSON.stringify({
         title: saved.title, body: saved.body, label_ids: saved.labelIds,
+        ...(saved.unassigned ? {unassigned:true} : {}),
+        ...(saved.assignee ? {assignee: saved.assignee} : {}),
         ...(saved.milestoneId ? {milestone_id: saved.milestoneId} : {}),
         ...(saved.dueDate ? {due_date: saved.dueDate + 'T23:59:59Z'} : {}),
       }),
@@ -287,8 +824,10 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
   }
 
   return {
-    saveDraft, loadDraft, clearDraft, loadLabels, loadMilestones, loadRepositoryPage,
-    searchRepositories, findDuplicates,
+    saveDraft, loadDraft, clearDraft, loadLabels, loadMilestones, loadOwners, loadTemplates,
+    loadFilingMetadata, applyTemplate, setTemplateState, templateFields, restoreTemplate, loadTemplateOptions,
+    selectTemplate, buildRelatedDraft:relatedDraft, bindTemplatePicker, bindFilingMetadata, loadRepositoryPage,
+    searchRepositories, searchBlockers, findDuplicates,
     needsDuplicateAcknowledgement, acknowledgeDuplicates, submit,
     stageSharedContent, pendingSharedContent, acceptSharedContent, discardSharedContent,
     stageFollowUp, pendingFollowUp, acceptFollowUp, discardFollowUp,
@@ -296,5 +835,10 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
 }
 
 createIssueCapture.normalizeSharedContent = normalizeSharedContent;
+createIssueCapture.createOwnerPicker = createIssueOwnerPicker;
+createIssueCapture.buildRelatedDraft = buildRelatedDraft;
+createIssueCapture.relatedChecklistDraft = relatedChecklistDraft;
+createIssueCapture.linkChecklistTask = linkChecklistTask;
+createIssueCapture.createChecklistPromotion = createChecklistPromotion;
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createIssueCapture;

frontend/dashboard.css

@@ -12,6 +12,13 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .live-data-status-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .live-data-status-header h2, .live-data-status-header p { margin-top:0; }
 .live-data-status-header button, .live-data-status-actions button { min-height:44px; }
+.issue-filing-receipt { position:fixed; inset:0; z-index:108; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.issue-filing-receipt[hidden] { display:none; }
+.issue-filing-receipt-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #4ade80; border-radius:18px 18px 0 0; background:#0b1526; overflow-wrap:anywhere; }
+.issue-filing-receipt-panel h2, .issue-filing-receipt-panel h3 { margin:.25rem 0; }
+.issue-filing-receipt-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; margin-top:16px; }
+.issue-filing-receipt-actions button, .issue-filing-receipt-actions .button-link { box-sizing:border-box; display:flex; align-items:center; justify-content:center; min-width:0; min-height:44px; width:100%; text-align:center; }
+@media (max-width:359px) { .issue-filing-receipt-actions { grid-template-columns:1fr; } }
 .live-data-status-feeds { display:grid; gap:8px; margin:14px 0; }
 .live-data-status-feed { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#0f2237; }
 .live-data-status-feed strong, .live-data-status-feed span { overflow-wrap:anywhere; }
@@ -19,6 +26,7 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .app-menu { margin-left:auto; }
 .app-menu > summary { display:none; }
 .app-menu-panel { display:flex; gap:10px; align-items:center; flex-wrap:wrap; }
+#open-insights { display:none; }
 button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #2a496e; color:#e5e7eb; padding:8px 12px; border-radius:10px; cursor:pointer; }
 .notification-undo { position:fixed; z-index:110; left:50%; bottom:calc(88px + env(safe-area-inset-bottom)); transform:translateX(-50%); box-sizing:border-box; width:min(520px,calc(100vw - 24px)); display:flex; align-items:center; justify-content:space-between; gap:12px; padding:10px 12px; border:1px solid #60a5fa; border-radius:12px; background:#10233d; box-shadow:0 12px 36px rgba(0,0,0,.5); overflow-wrap:anywhere; }
 .notification-undo[hidden] { display:none; }
@@ -38,6 +46,11 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .active-devices-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .active-devices-header h2, .active-devices-header p { margin-top:0; }
 .active-devices-header button, .active-device button, .enrolled-passkey button { min-height:44px; }
+.security-section-nav { position:sticky; top:-18px; z-index:2; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; margin:0 -2px; padding:10px 2px; background:#0b1526; }
+.security-section-nav button { min-height:44px; min-width:0; }
+.security-section-nav button[aria-current="page"] { border-color:#55d6be; color:#55d6be; }
+.security-activity, .security-devices, .enrolled-passkeys { scroll-margin-top:64px; }
+.security-devices { margin-top:24px; padding-top:18px; border-top:1px solid #2a496e; }
 .active-devices-list { display:grid; gap:10px; margin-top:16px; }
 .device-setup-sheet { position:fixed; inset:0; z-index:95; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .device-setup-sheet[hidden] { display:none; }
@@ -52,6 +65,10 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .device-setup-deadline-controls label { font-size:12px; color:#bfdbfe; }
 .device-setup-deadline-controls select, .device-setup-deadline-controls button, #push-deadline-hour, #push-deadline-days { min-height:44px; }
 .device-setup-ready { margin:0; padding:12px; border-radius:10px; background:#0f2237; color:#bfdbfe; font-weight:700; }
+.device-storage { display:grid; gap:12px; margin:14px 0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#0d1d31; }
+.device-storage h3, .device-storage p { margin:0 0 5px; }
+.device-storage-actions { display:flex; gap:8px; flex-wrap:wrap; }
+.device-storage-actions button { min-height:44px; flex:1 1 180px; }
 .device-readiness-card { display:none; min-width:0; margin:10px 0; padding:12px; border:1px solid #3b82b8; border-radius:12px; background:#102b46; overflow-x:hidden; }
 .device-readiness-card p { margin:5px 0 0; overflow-wrap:anywhere; }
 .device-readiness-summary { color:#bfdbfe; font-weight:700; }
@@ -69,6 +86,7 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .security-activity-header h3, .security-activity-header p { margin:0 0 6px; }
 .security-activity-list { display:grid; gap:8px; margin:12px 0; }
 .security-event { padding:12px; border:1px solid #243d5d; border-radius:12px; background:#0d1c30; }
+.security-event button { min-height:44px; margin-top:10px; }
 .authentication-alert { border-color:#d69e2e; background:#241b09; }
 .authentication-alert strong { color:#f6c453; }
 .security-event strong, .security-event span { display:block; overflow-wrap:anywhere; }
@@ -84,6 +102,8 @@ button:hover { filter: brightness(1.15); }
 .panel[open] > summary { margin-bottom: 8px; }
 aside, section { position: relative; z-index: 1; }
 main { position: relative; z-index: 1; display: grid; grid-template-columns: 300px 1fr 340px; gap: 14px; padding: 14px; }
+.insights-shell { display:contents; }
+.insights-header { display:none; }
 @media (max-width: 1100px) { main { grid-template-columns: 1fr; } }
 .sidebar { display:flex; flex-direction:column; gap: 12px; }
 .stack { display:flex; flex-direction:column; gap:10px; }
@@ -121,6 +141,15 @@ textarea { resize: vertical; min-height: 120px; }
 .cmd-search-scope select { min-width:0; padding:7px; border-radius:8px; border:1px solid #31577f; background:#0b1526; color:#e5e7eb; }
 .cmd-search-scope input { min-width:0; padding:7px; border-radius:8px; border:1px solid #31577f; background:#0b1526; color:#e5e7eb; }
 .cmd-repository-status { grid-column:2 / -1; min-height:16px; color:#93a4b8; font-size:12px; }
+.saved-searches { margin-top:8px; padding:8px; border:1px solid #1f3a5f; border-radius:8px; }
+.saved-search-header, .saved-search-create, .saved-search-row, .saved-search-row-actions { display:flex; align-items:center; gap:8px; }
+.saved-search-header { justify-content:space-between; }
+.saved-search-create { margin-top:6px; }
+.saved-search-create input { flex:1; min-width:0; }
+.saved-search-list { display:grid; gap:4px; margin-top:6px; }
+.saved-search-row { justify-content:space-between; border-top:1px solid #1f3a5f; padding-top:4px; }
+.saved-search-open { flex:1; min-width:0; text-align:left; }
+.saved-search-action { min-height:44px; }
 #cmd-results { margin-top:8px; max-height:min(65vh,520px); overflow-y:auto; }
 .cmd-item { padding: 10px; min-height:44px; cursor: pointer; border-radius: 10px; color:#e5e7eb; display:flex; gap:10px; align-items:center; justify-content:space-between; }
 .cmd-item:hover, .cmd-item.selected { background: #10233a; outline:1px solid #31577f; }
@@ -129,11 +158,27 @@ textarea { resize: vertical; min-height: 120px; }
 .cmd-select-result { min-height:44px; width:100%; display:grid; grid-template-columns:28px 1fr auto; gap:10px; align-items:center; text-align:left; }
 .cmd-select-result input { width:22px; height:22px; }
 .cmd-select-result[disabled] { cursor:not-allowed; opacity:.62; }
-.search-batch-actions { position:sticky; bottom:0; z-index:3; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0 calc(10px + env(safe-area-inset-bottom)); background:#0b1526; border-top:1px solid #2a496e; }
+.search-batch-actions { position:sticky; bottom:0; z-index:3; display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; padding:10px 0 calc(10px + env(safe-area-inset-bottom)); background:#0b1526; border-top:1px solid #2a496e; }
 .search-batch-actions[hidden] { display:none; }
 .search-batch-actions span { grid-column:1 / -1; }
 .search-batch-actions button, .search-batch-recovery { min-height:44px; }
 .search-batch-recovery { width:100%; font-weight:700; }
+.search-batch-estimate-review { display:grid; gap:12px; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; }
+.search-batch-estimate-review[hidden] { display:none; }
+.search-batch-estimate-review > div:first-child, #search-batch-estimate-list { display:grid; gap:8px; }
+.search-batch-estimate-row { display:grid; grid-template-columns:minmax(0,1fr) minmax(92px,auto); gap:10px; align-items:center; overflow-wrap:anywhere; }
+.search-batch-estimate-row label { display:flex; align-items:center; gap:6px; }
+.search-batch-estimate-review input { min-height:44px; width:76px; }
+.search-batch-estimate-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding-bottom:env(safe-area-inset-bottom); background:#101f36; }
+.search-batch-estimate-actions button { min-height:44px; }
+.search-release-review { display:grid; gap:12px; max-height:calc(100dvh - 48px); overflow:auto; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; overflow-wrap:anywhere; }
+.search-release-review[hidden] { display:none; }
+.search-release-review > div:first-child, #search-release-list, .search-release-row { display:grid; gap:6px; }
+.search-release-review label { display:grid; gap:6px; }
+.search-release-review select, .search-release-review input { min-height:44px; width:100%; }
+.search-release-row { padding:8px 0; border-bottom:1px solid #2a496e; }
+.search-release-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding-bottom:env(safe-area-inset-bottom); background:#101f36; }
+.search-release-actions button { min-height:44px; }
 
 .cmd-group { padding:8px 10px 3px; color:#60a5fa; font-size:11px; font-weight:700; letter-spacing:.08em; text-transform:uppercase; }
 #whiteboard-modal, #markdown-modal { position: fixed; inset: 0; background: rgba(5,12,21,.55); display: none; align-items: center; justify-content: center; z-index: 40; backdrop-filter: blur(6px); }
@@ -169,6 +214,11 @@ textarea { resize: vertical; min-height: 120px; }
 .plan-today-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .plan-today-header h2, .plan-today-header p { margin-top:0; }
 .plan-today-header button { min-width:44px; min-height:44px; }
+.mobile-plan-today-nav { position:sticky; top:0; z-index:5; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:4px; margin:0 -18px 10px; padding:4px 18px; background:rgba(11,21,38,.98); border-block:1px solid #2a496e; }
+.mobile-plan-today-nav button { min-width:0; min-height:44px; padding:4px; border-color:transparent; font-size:12px; }
+.mobile-plan-today-nav button[aria-current="location"] { color:#bfdbfe; background:#17365a; border-color:#31577f; }
+#plan-today-fit, #plan-today-selected, #plan-today-available-work { scroll-margin-top:54px; }
+@media (min-width:601px) { .mobile-plan-today-nav { display:none; } }
 .plan-today-list button, .plan-today-candidates button { min-height:44px; }
 .plan-today-capacity { position:sticky; top:0; z-index:2; margin:8px 0; padding:10px 12px; border:1px solid #31577f; border-radius:10px; background:#10233a; font-weight:700; }
 .plan-today-available { display:flex; align-items:center; justify-content:space-between; gap:12px; margin:10px 0; font-weight:700; }
@@ -221,12 +271,39 @@ textarea { resize: vertical; min-height: 120px; }
 .today-recap-totals { margin:12px 0; padding:12px; border-radius:10px; background:#10233d; font-weight:700; }
 .today-recap-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .today-recap-actions button { min-height:44px; width:100%; }
+.today-wrap-up-sheet { position:fixed; inset:0; z-index:89; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.today-wrap-up-sheet[hidden] { display:none; }
+.today-wrap-up-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
+.today-wrap-up-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.today-wrap-up-header h2 { margin:.2rem 0; }
+.today-wrap-up-header button { min-height:44px; min-width:44px; }
+.today-wrap-up-items { display:grid; gap:8px; margin:14px 0; }
+.today-wrap-up-item { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:12px; min-width:0; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#10233d; overflow-wrap:anywhere; }
+.today-wrap-up-item span { display:block; }
+.today-wrap-up-item label { display:flex; align-items:center; min-height:44px; gap:8px; font-weight:700; }
+.today-wrap-up-item input { width:24px; min-height:24px; }
+.today-wrap-up-actions { position:sticky; bottom:0; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
+.today-wrap-up-actions button { min-height:44px; width:100%; }
+.today-handoff-dialog { box-sizing:border-box; width:min(620px,100%); max-width:none; max-height:100dvh; margin:auto auto 0; padding:0; color:#e8f1ff; border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
+.today-handoff-dialog::backdrop { background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.today-handoff-panel { max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); }
+.today-handoff-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.today-handoff-panel h2 { margin:.2rem 0; }
+.today-handoff-panel header button { min-height:44px; min-width:44px; }
+.today-handoff-items { display:grid; gap:8px; margin:14px 0; }
+.today-handoff-item { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:12px; padding:12px; border:1px solid #29486c; border-radius:12px; background:#101f35; }
+.today-handoff-item span { display:block; }
+.today-handoff-item label { display:flex; align-items:center; min-height:44px; gap:8px; font-weight:700; }
+.today-handoff-item input { width:24px; min-height:24px; }
+.today-handoff-actions { position:sticky; bottom:0; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
+.today-handoff-actions button { min-height:44px; width:100%; }
 @media (max-width:420px) {
   .today-interruption-actions { grid-template-columns:1fr; }
   .today-recap-actions { grid-template-columns:1fr; }
   .today-recap-row { grid-template-columns:1fr; }
   .today-recap-row input { width:min(100%,8rem); }
   .today-recap-variance { grid-column:1; }
+  .today-wrap-up-item { grid-template-columns:1fr; }
 }
 .today-readiness-sheet { position:fixed; inset:0; z-index:90; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .today-readiness-sheet[hidden] { display:none; }
@@ -253,11 +330,15 @@ textarea { resize: vertical; min-height: 120px; }
 .queue-finder button { padding-inline:14px; }
 #search-older-work { width:100%; }
 .my-work-list { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); gap:10px; }
+.filed-history-tabs { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin:10px 0; }
+.filed-history-tabs[hidden] { display:none; }
+.filed-history-tabs button { min-height:44px; min-width:0; }
+.filed-history-tabs button[aria-pressed="true"] { border-color:#60a5fa; background:#17365d; }
 .draft-card { display:flex; flex-direction:column; gap:8px; min-width:0; scroll-margin-bottom:calc(76px + env(safe-area-inset-bottom)); }
 .draft-card:focus-visible { outline:3px solid #60a5fa; outline-offset:3px; border-color:#93c5fd; }
 .draft-preview { color:var(--muted); overflow-wrap:anywhere; }
 .draft-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(120px,1fr)); gap:8px; }
-.draft-actions button { min-height:44px; width:100%; }
+.draft-actions button, .draft-filing-session-actions button, .agenda-replan-actions button { min-height:44px; width:100%; }
 .delivery-center { display:flex; align-items:center; justify-content:space-between; gap:12px; flex-wrap:wrap; grid-column:1/-1; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
 .delivery-center h3, .delivery-center p { margin:0; }
 .delivery-center button { min-height:44px; flex:0 0 auto; }
@@ -265,18 +346,19 @@ textarea { resize: vertical; min-height: 120px; }
 .draft-section { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); gap:10px; grid-column:1/-1; }
 .draft-section > h3 { grid-column:1/-1; margin:8px 0 0; }
 .create-issue-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(140px,1fr)); gap:8px; padding-bottom:env(safe-area-inset-bottom); }
-.create-issue-actions button { min-height:44px; max-width:100%; width:100%; }
+.create-issue-actions button { min-height:44px; width:100%; }
 .create-issue-actions #create-issue-status { grid-column:1/-1; }
+.create-issue-estimate { display:grid; gap:6px; padding:10px; border:1px solid #31577f; border-radius:10px; background:#101d31; }
+.create-issue-estimate > span:first-of-type { display:flex; align-items:center; gap:8px; }
+.create-issue-estimate input { min-height:44px; width:min(9rem,60vw); }
 .draft-filing-session { position:sticky; top:0; z-index:2; display:grid; gap:6px; margin-bottom:12px; padding:10px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); border:1px solid #31577f; border-radius:12px; background:rgba(11,21,38,.98); }
 .draft-filing-session[hidden] { display:none; }
 .draft-filing-session-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
-.draft-filing-session-actions button { min-height:44px; width:100%; }
 .my-work-card { min-height: 44px; display:grid; gap:8px; padding:12px; border:1px solid #1f3a5f; border-radius:12px; background:#0f1d33; color:var(--text); }
 .agenda-replan { margin:10px 0; padding:12px; border:1px solid #7c4a1d; border-radius:12px; background:#24170d; }
 .agenda-replan-launch { display:flex; align-items:center; justify-content:space-between; gap:12px; }
 .agenda-replan-launch p { margin:4px 0 0; }
 .agenda-replan-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin-top:10px; }
-.agenda-replan-actions button { min-height:44px; width:100%; }
 .agenda-replan-actions label { grid-column:1/-1; }
 .agenda-replan-actions input { box-sizing:border-box; min-height:44px; width:100%; max-width:100%; }
 .protect-today { margin:10px 0; padding:12px; border:1px solid #2f6f9f; border-radius:12px; background:#0d2136; display:flex; align-items:center; justify-content:space-between; gap:12px; }
@@ -432,7 +514,57 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-sheet-panel { width:min(560px,100%); height:100%; overflow:auto; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
 .issue-sheet-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .issue-sheet-header button { min-height:44px; }
+.mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav { display:none; }
+@media (max-width:600px) {
+  .issue-sheet-panel, .pull-sheet-panel, .update-sheet-panel, .review-sheet-panel { padding-top:max(12px,env(safe-area-inset-top)); }
+  .mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:4px;
+    margin:8px -6px 12px; padding:6px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-issue-detail-nav button, .mobile-pull-detail-nav button, .mobile-update-detail-nav button, .mobile-review-detail-nav button {
+    min-width:0; min-height:44px; padding:4px; overflow-wrap:anywhere;
+    border-color:transparent; font-size:12px;
+  }
+  .mobile-issue-detail-nav button[aria-current="location"], .mobile-pull-detail-nav button[aria-current="location"], .mobile-update-detail-nav button[aria-current="location"], .mobile-review-detail-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  #issue-overview, #issue-conversation, #issue-comment, #issue-planning { scroll-margin-top:72px; }
+  #pull-overview, #pull-conversation, #pull-comment, #pull-review { scroll-margin-top:72px; }
+  #update-conversation, #update-subject-context, #update-reply-workspace { scroll-margin-top:72px; }
+  #review-overview, #review-files-workspace, #review-feedback, #review-history-workspace { scroll-margin-top:72px; }
+}
+@media (min-width:601px) { .mobile-issue-detail-nav, .mobile-pull-detail-nav { display:none; } }
+@media (min-width:601px) { .mobile-update-detail-nav { display:none; } }
+@media (min-width:601px) { .mobile-review-detail-nav { display:none; } }
+.completed-filed-actions { position:fixed; right:0; bottom:0; z-index:57; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:minmax(0,1fr); align-items:center; gap:8px; margin:0; padding:10px 12px calc(10px + env(safe-area-inset-bottom)); border:1px solid #4ade80; border-radius:12px 0 0; background:rgba(11,21,38,.98); overflow-wrap:anywhere; }
+.completed-filed-actions[hidden] { display:none; }
+.completed-filed-actions button { min-height:44px; min-width:0; }
+.completed-filed-buttons { display:flex; flex-wrap:wrap; gap:8px; }
+.completed-filed-buttons button { flex:1 1 180px; }
+#issue-sheet:has(.completed-filed-actions:not([hidden])) .issue-sheet-panel { padding-bottom:calc(170px + env(safe-area-inset-bottom)); }
 .issue-sheet-content { overflow-wrap:anywhere; white-space:pre-wrap; }
+.checklist-step-editor { display:grid; gap:8px; margin:10px 0 16px; padding:12px; border:1px solid #31577f; border-radius:12px; background:#0b1526; }
+.checklist-step-editor[hidden] { display:none; }
+.checklist-step-editor input { width:100%; min-width:0; box-sizing:border-box; }
+.checklist-step-editor-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.checklist-step-editor button, .checklist-step-editor input { min-height:44px; }
+#remove-checklist-step { border-color:#b45309; }
+#issue-sheet.read-only .checklist-step-editor { display:none; }
+.checklist-add { display:grid; gap:8px; margin:10px 0 16px; }
+.checklist-add form { display:grid; grid-template-columns:minmax(0,1fr) auto auto; gap:8px; }
+.checklist-add form[hidden] { display:none; }
+.checklist-add input { min-width:0; width:100%; box-sizing:border-box; }
+.checklist-add button, .checklist-add input { min-height:44px; }
+#issue-sheet.read-only .checklist-add { display:none; }
+@media(max-width:340px) { .checklist-add form { grid-template-columns:1fr 1fr; } .checklist-add input { grid-column:1 / -1; } }
+.checklist-completion { position:fixed; right:0; bottom:0; z-index:58; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:minmax(0,1fr) repeat(2,minmax(0,auto)); align-items:center; gap:8px; padding:10px 12px calc(10px + env(safe-area-inset-bottom)); border-top:1px solid #4ade80; background:rgba(11,21,38,.98); overflow-wrap:anywhere; }
+.checklist-completion[hidden] { display:none; }
+.checklist-completion button { min-height:44px; min-width:0; }
+#issue-sheet:has(.checklist-completion:not([hidden])) .issue-sheet-panel { padding-bottom:calc(118px + env(safe-area-inset-bottom)); }
+#issue-sheet:has(.checklist-completion:not([hidden])) .work-session-nav { display:none; }
+@media(max-width:420px) { .checklist-completion { grid-template-columns:1fr 1fr; } .checklist-completion span { grid-column:1 / -1; } }
 .issue-blockers { max-width:100%; overflow-x:hidden; margin:16px 0; padding:12px; border:1px solid #b45309; border-radius:12px; background:#291b0c; }
 .issue-blockers h2 { margin-top:0; }
 .issue-blocker-list { display:grid; gap:8px; }
@@ -447,6 +579,7 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-blocker-manager [role="option"] { text-align:left; overflow-wrap:anywhere; }
 #manage-issue-blockers, #start-unblocked-issue { min-height:44px; width:100%; margin-top:10px; }
 .today-readiness-blocker { width:100%; min-height:44px; text-align:left; background:#291b0c; }
+.issue-content-editor { max-width:100%; overflow-x:hidden; margin-top:16px; padding:12px; border:1px solid #2a496e; border-radius:12px; }
 .issue-planning { max-width:100%; margin-top:16px; border:1px solid #2a496e; border-radius:12px; padding:0 12px 12px; overflow-x:hidden; }
 .issue-planning > summary { min-height:44px; display:flex; align-items:center; cursor:pointer; font-weight:700; }
 .issue-planning-retry { min-height:44px; width:100%; }
@@ -459,10 +592,13 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-edit-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
 .issue-comment { padding:10px 0; border-bottom:1px solid #1b2d45; }
 .issue-comment-composer { display:grid; gap:8px; margin-top:16px; }
+.issue-comment-composer textarea { min-height:96px; }
 .issue-comment-composer button { min-height:44px; width:100%; }
 .visually-hidden { position:absolute; width:1px; height:1px; padding:0; margin:-1px; overflow:hidden; clip:rect(0,0,0,0); white-space:nowrap; border:0; }
 .issue-attachment-controls { display:flex; max-width:100%; }
 .issue-attachment-trigger { min-height:44px; display:inline-flex; align-items:center; justify-content:center; padding:8px 12px; border:1px solid #60a5fa; border-radius:10px; color:#dbeafe; font-weight:700; cursor:pointer; }
+.conversation-photo-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; min-width:0; width:100%; }
+.conversation-photo-actions .issue-attachment-trigger { box-sizing:border-box; width:100%; min-width:0; text-align:center; }
 .issue-attachment-preview { display:grid; grid-template-columns:64px minmax(0,1fr); gap:8px 12px; align-items:center; max-width:100%; overflow:hidden; padding:10px; border:1px solid #315781; border-radius:10px; background:#101f34; }
 .issue-attachment-preview[hidden] { display:none; }
 .issue-attachment-preview img { grid-row:span 2; width:64px; height:64px; object-fit:cover; border-radius:8px; }
@@ -488,6 +624,18 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-milestone-editor { display:grid; gap:8px; max-width:100%; margin:14px 0; padding:12px; border:1px solid #2a496e; border-radius:12px; }
 .issue-milestone-editor select { width:100%; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:var(--text); }
 .work-milestone-filter, .issue-milestone-editor select, .issue-milestone-editor button { min-height:44px; }
+#issue-sheet.read-only .issue-attachment-controls,
+#issue-sheet.read-only .issue-attachment-preview,
+#issue-sheet.read-only #issue-planning,
+#issue-sheet.read-only #issue-handoff,
+#issue-sheet.read-only #release-issue,
+#issue-sheet.read-only .detail-defer,
+#issue-sheet.read-only #issue-blockers,
+#issue-sheet.read-only #retry-issue-comment-actions { display:none; }
+#issue-sheet.read-only.filed-reassignable #issue-handoff { display:block; }
+.filed-claim-actions { position:sticky; bottom:0; z-index:4; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin-top:14px; padding:10px 4px calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #4ade80; }
+.filed-claim-actions[hidden] { display:none; }
+.filed-claim-actions button { min-width:0; min-height:44px; }
 .issue-sheet-actions { position:sticky; bottom:0; z-index:3; display:grid; gap:8px; margin-top:14px; padding:10px 4px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .issue-sheet-actions button, .issue-sheet-actions a { min-height:44px; display:flex; align-items:center; justify-content:center; }
 .issue-sheet-actions a { border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
@@ -509,9 +657,21 @@ textarea { resize: vertical; min-height: 120px; }
 .work-session-nav button { min-height:44px; width:100%; }
 .find-work-sheet { position:fixed; inset:0; z-index:58; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .find-work-sheet.open { display:flex; }
-.find-work-panel { width:min(560px,100%); height:100dvh; overflow:auto; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
+.find-work-panel { width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
 .find-work-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .find-work-header-actions { display:flex; gap:8px; }
+.mobile-find-work-nav { position:sticky; top:0; z-index:4; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:6px; padding:6px 0; background:#0b1526; }
+.mobile-find-work-nav button { min-height:44px; min-width:0; padding:6px; }
+.mobile-find-work-nav button[aria-current="step"] { border-color:#60a5fa; background:#17355b; color:#fff; }
+.mobile-find-work-nav button:disabled { opacity:.5; }
+.find-work-stage { display:grid; gap:12px; min-width:0; outline:none; }
+.find-work-stage[hidden] { display:none; }
+.find-work-review { padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; }
+.find-work-review > div:first-child, .find-work-review-list { display:grid; gap:8px; }
+.find-work-review-item { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:10px; align-items:center; padding:10px; border:1px solid #2a496e; border-radius:10px; overflow-wrap:anywhere; }
+.find-work-review-item > div { display:grid; gap:4px; min-width:0; }
+.find-work-review-item button, .find-work-stage-actions button { min-height:44px; }
+.find-work-stage-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0 env(safe-area-inset-bottom); background:#101f36; }
 .find-work-header button, .find-work-card button, .find-work-card a, .find-work-more { min-height:44px; }
 .find-work-search { position:sticky; top:0; z-index:2; display:grid; gap:6px; padding:8px 0; background:#0b1526; }
 .find-work-search > div { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; }
@@ -551,8 +711,10 @@ textarea { resize: vertical; min-height: 120px; }
 .find-work-detail a { display:flex; align-items:center; justify-content:center; border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
 .search-preview { position:fixed; inset:0; z-index:60; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .search-preview.open { display:flex; }
-.search-preview-panel { box-sizing:border-box; width:min(560px,100%); height:100dvh; overflow:auto; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; overflow-wrap:anywhere; }
+.search-preview-panel { box-sizing:border-box; width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; overflow-wrap:anywhere; }
 .search-preview-header { display:flex; align-items:flex-start; justify-content:space-between; gap:10px; }
+.mobile-search-preview-nav { display:none; }
+.search-preview-overview { display:grid; gap:12px; min-width:0; }
 .search-preview-header button, .search-preview-actions button, .search-preview-actions a { min-height:44px; }
 .search-preview-body { margin:0; white-space:pre-wrap; overflow-wrap:anywhere; }
 .search-preview-conversation { display:grid; gap:8px; padding-top:8px; border-top:1px solid #2a496e; }
@@ -565,6 +727,9 @@ textarea { resize: vertical; min-height: 120px; }
 .search-preview-reply textarea { box-sizing:border-box; width:100%; min-height:110px; resize:vertical; scroll-margin-bottom:calc(190px + env(safe-area-inset-bottom)); }
 .search-preview-reply-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
 .search-preview-reply-actions button { min-height:44px; }
+.search-preview-reply .voice-conversation-controls button,
+.search-preview-reply .voice-conversation-review-actions button { min-height:44px; }
+.search-preview-reply .conversation-photo-actions { max-width:100%; }
 .search-preview-navigation { display:grid; grid-template-columns:minmax(0,1fr) auto minmax(0,1fr); align-items:center; gap:8px; }
 .search-preview-actions { position:sticky; bottom:0; display:grid; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
 .search-preview-actions button, .search-preview-actions a { min-height:44px; box-sizing:border-box; display:flex; align-items:center; justify-content:center; }
@@ -572,6 +737,33 @@ textarea { resize: vertical; min-height: 120px; }
 @media (max-width:420px) {
   .search-preview-primary-actions { grid-template-columns:1fr; }
 }
+@media (max-width:600px) {
+  .search-preview-panel { width:100%; border-left:0; padding:14px; padding-top:max(12px,env(safe-area-inset-top)); }
+  .mobile-search-preview-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:4px;
+    margin-inline:-14px; padding:4px 14px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-search-preview-nav button {
+    min-width:0; min-height:44px; padding:4px; overflow-wrap:anywhere;
+    border-color:transparent; font-size:12px;
+  }
+  .mobile-search-preview-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  .mobile-search-preview-nav button[aria-disabled="true"] { opacity:.55; }
+  .search-preview-navigation {
+    position:sticky; bottom:0; z-index:5;
+    margin-inline:-6px; padding:6px;
+    padding-bottom:calc(6px + env(safe-area-inset-bottom));
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  #search-preview-overview, #search-preview-conversation,
+  #search-preview-reply-workspace, #search-preview-actions { scroll-margin-top:72px; }
+  #search-preview-actions { position:static; }
+}
+@media (min-width:601px) { .mobile-search-preview-nav { display:none; } }
 .search-preview-actions a { display:flex; align-items:center; justify-content:center; border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
 .markdown-content { min-width:0; max-width:100%; overflow-wrap:anywhere; white-space:normal; }
 .markdown-content > :first-child { margin-top:0; }
@@ -584,6 +776,10 @@ textarea { resize: vertical; min-height: 120px; }
 .markdown-content .task-list { padding-left:0; list-style:none; }
 .markdown-content .task-list-item { display:flex; gap:8px; align-items:flex-start; }
 .markdown-content .task-list-item input { flex:0 0 auto; margin-top:3px; }
+.markdown-content .task-list-toggle { min-width:44px; min-height:44px; margin:-9px 0 -9px -9px; cursor:pointer; accent-color:#60a5fa; }
+.markdown-content .task-list-manage { min-width:44px; min-height:44px; margin:-9px -9px -9px auto; padding:6px 8px; flex:0 0 auto; }
+.markdown-content.checklist-pending .task-list-toggle { opacity:.65; cursor:wait; }
+.markdown-content.checklist-pending .task-list-manage { opacity:.65; cursor:wait; }
 .markdown-content a { min-height:44px; display:inline-flex; align-items:center; max-width:100%; overflow-wrap:anywhere; }
 @media(max-width:320px) { .find-work-panel { padding:12px; overflow-x:hidden; } .find-work-card { min-width:0; } .my-work-actions { width:100%; } .my-work-actions button { flex:1 1 100%; } }
 .create-issue-sheet { position:fixed; inset:0; z-index:57; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
@@ -591,12 +787,79 @@ textarea { resize: vertical; min-height: 120px; }
 .create-issue-panel { width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
 .create-issue-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .create-issue-header button, .create-issue-actions button, .create-issue-capture-actions button { min-height:44px; }
+.mobile-create-issue-nav { display:none; }
 .create-issue-form { display:grid; gap:12px; }
+.create-issue-describe { display:grid; gap:12px; min-width:0; }
+.voice-issue-capture { display:grid; gap:8px; min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#101d31; }
+.voice-issue-capture[hidden], .voice-issue-review[hidden], .voice-issue-controls button[hidden] { display:none; }
+.voice-issue-heading, .voice-issue-review { display:grid; gap:6px; }
+.voice-issue-controls, .voice-issue-review-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.voice-issue-controls button, .voice-issue-review-actions button { min-width:0; min-height:44px; }
+#voice-issue-transcript { box-sizing:border-box; width:100%; min-height:96px; resize:vertical; }
+.voice-conversation { display:grid; gap:8px; min-width:0; padding:10px; border:1px solid #31577f; border-radius:12px; background:#101d31; }
+.voice-conversation[hidden], .voice-conversation-review[hidden], .voice-conversation-controls button[hidden] { display:none; }
+.voice-conversation-controls, .voice-conversation-review-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(120px,1fr)); gap:8px; }
+.voice-conversation-controls button, .voice-conversation-review-actions button { min-height:44px; min-width:0; }
+.voice-conversation-review { display:grid; gap:6px; }
+.voice-conversation-review textarea { box-sizing:border-box; width:100%; min-height:96px; resize:vertical; }
 .create-issue-capture-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
 .create-issue-capture-actions[hidden] { display:none; }
 .create-issue-filing { display:grid; gap:12px; min-width:0; }
 .create-issue-filing[hidden] { display:none; }
 .create-issue-attachment { display:grid; gap:8px; min-width:0; }
+.photo-evidence-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; min-width:0; }
+.photo-evidence-actions .issue-attachment-trigger { box-sizing:border-box; width:100%; min-width:0; text-align:center; }
+#create-issue-attachment-preview { grid-template-columns:1fr; }
+#create-issue-attachment-image { grid-row:auto; width:100%; height:auto; max-height:320px; }
+.issue-evidence-tray { display:flex; gap:8px; max-width:100%; padding:2px 0 6px; overflow-x:auto; overscroll-behavior-inline:contain; scrollbar-width:thin; }
+.issue-evidence-tray[hidden] { display:none; }
+.issue-evidence-thumbnail { position:relative; flex:0 0 64px; min-width:44px; min-height:64px; padding:3px; border:2px solid transparent; border-radius:10px; background:#10213a; }
+.issue-evidence-thumbnail[aria-pressed="true"] { border-color:#60a5fa; box-shadow:0 0 0 2px rgba(96,165,250,.25); }
+.issue-evidence-thumbnail img { display:block; width:56px; height:56px; border-radius:6px; object-fit:cover; }
+.issue-evidence-thumbnail span { position:absolute; right:3px; bottom:3px; min-width:20px; padding:1px 4px; border-radius:999px; background:#07101d; color:#fff; font-size:12px; text-align:center; }
+.issue-evidence-note { display:grid; gap:6px; min-width:0; }
+.issue-evidence-note textarea { box-sizing:border-box; width:100%; min-height:72px; padding:10px; resize:vertical; border:1px solid #2a496e; border-radius:8px; background:#07101d; color:#e5e7eb; font:inherit; }
+.issue-evidence-note textarea:focus-visible { outline:2px solid #60a5fa; outline-offset:2px; }
+.issue-evidence-review-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.issue-evidence-review-actions button { min-width:44px; min-height:44px; }
+.conversation-evidence-review { grid-template-columns:1fr; width:100%; min-width:0; box-sizing:border-box; overflow-x:hidden; }
+.conversation-evidence-review > img { grid-row:auto; width:100%; height:auto; max-height:280px; }
+.conversation-evidence-review .issue-evidence-tray { overflow-x:auto; }
+.conversation-evidence-review .issue-evidence-review-actions { grid-template-columns:repeat(4,minmax(0,1fr)); }
+.conversation-evidence-review .issue-evidence-review-actions button { min-width:44px; min-height:44px; width:100%; }
+@media (max-width:390px) {
+  .conversation-evidence-review .issue-evidence-review-actions { grid-template-columns:1fr; }
+}
+.issue-evidence-editor { position:fixed; inset:0; z-index:70; display:grid; place-items:end center; overflow-x:hidden; background:rgba(2,6,15,.92); }
+.issue-evidence-editor[hidden] { display:none; }
+.issue-evidence-editor-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; display:grid; gap:12px; padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); background:#0b1526; border:1px solid #2a496e; border-radius:14px 14px 0 0; }
+.issue-evidence-editor-panel header { display:flex; align-items:start; justify-content:space-between; gap:12px; }
+.issue-evidence-editor-panel h3 { margin:0 0 4px; }
+.issue-evidence-editor canvas { display:block; max-width:100%; width:100%; max-height:60dvh; object-fit:contain; touch-action:none; border:1px solid #365b86; border-radius:8px; background:#020617; }
+.issue-evidence-editor-tools { display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; }
+.issue-evidence-editor button { min-width:44px; min-height:44px; }
+.issue-evidence-editor button[aria-pressed="true"] { border-color:#60a5fa; background:#173a64; color:#fff; }
+.issue-evidence-editor-apply { width:100%; }
+@media(max-width:320px) { .issue-evidence-editor-panel { padding:12px; } .issue-evidence-editor-tools { grid-template-columns:repeat(2,minmax(0,1fr)); } }
+.issue-filing-review { position:fixed; inset:0; z-index:72; display:grid; place-items:end center; overflow-x:hidden; background:rgba(2,6,15,.92); }
+.issue-filing-review[hidden] { display:none; }
+.issue-filing-review-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; display:grid; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #31577f; border-radius:18px 18px 0 0; background:#0b1526; }
+.issue-filing-review-panel h2, .issue-filing-review-panel h3, .issue-filing-review-panel p { margin:.2rem 0; }
+.issue-filing-review-summary { display:grid; gap:10px; margin:0; min-width:0; }
+.issue-filing-review-summary > div { display:grid; gap:4px; padding:10px; border:1px solid #2a496e; border-radius:10px; min-width:0; }
+.issue-filing-review-summary dt { color:#94a3b8; font-size:12px; font-weight:700; text-transform:uppercase; }
+.issue-filing-review-summary dd { margin:0; white-space:pre-wrap; overflow-wrap:anywhere; }
+.issue-filing-review ol { display:grid; grid-template-columns:repeat(auto-fit,minmax(72px,1fr)); gap:8px; margin:0; padding:0; list-style:none; overflow-wrap:anywhere; }
+.issue-filing-evidence-selector { min-height:44px; width:100%; padding:4px; border:2px solid #31577f; border-radius:10px; background:#08111f; }
+.issue-filing-evidence-selector[aria-pressed="true"] { border-color:#93c5fd; box-shadow:0 0 0 2px rgba(96,165,250,.35); }
+.issue-filing-evidence-selector img { display:block; width:100%; height:64px; object-fit:cover; border-radius:6px; }
+.issue-filing-evidence-preview { display:grid; gap:8px; margin:10px 0 0; padding:10px; border:1px solid #31577f; border-radius:12px; background:#020617; }
+.issue-filing-evidence-preview[hidden] { display:none; }
+.issue-filing-evidence-preview > img { display:block; width:100%; max-height:42dvh; object-fit:contain; border-radius:8px; background:#000; }
+.issue-filing-evidence-preview figcaption { display:grid; gap:3px; min-width:0; overflow-wrap:anywhere; }
+.issue-filing-review-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0 calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
+.issue-filing-review-actions button { min-height:44px; width:100%; }
+@media(max-width:320px) { .issue-filing-review-panel { padding:12px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); } }
 .create-issue-repository-more { min-height:44px; width:100%; }
 .create-issue-repository-picker { min-width:0; display:grid; gap:8px; }
 .create-issue-repository-picker input { min-width:0; min-height:44px; width:100%; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:#e5e7eb; }
@@ -604,8 +867,18 @@ textarea { resize: vertical; min-height: 120px; }
 #create-issue-repository-results[hidden] { display:none; }
 .create-issue-repository-result { min-height:44px; min-width:0; padding:10px 12px; overflow-wrap:anywhere; text-align:left; border:0; border-bottom:1px solid #1f3a5f; border-radius:0; background:#10213a; color:#e5e7eb; }
 .create-issue-repository-result:last-child { border-bottom:0; }
+.create-issue-blockers { display:grid; gap:8px; min-width:0; }
+#create-issue-blocker-search { min-width:0; min-height:44px; width:100%; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:#e5e7eb; }
+#create-issue-blocker-results { display:grid; max-height:min(36dvh,280px); overflow:auto; border:1px solid #2a496e; border-radius:10px; }
+#create-issue-blocker-results[hidden] { display:none; }
+.create-issue-blocker-result { min-height:44px; min-width:0; padding:10px 12px; overflow-wrap:anywhere; text-align:left; border:0; border-bottom:1px solid #1f3a5f; border-radius:0; background:#10213a; color:#e5e7eb; }
+#create-issue-blocker-selected { display:grid; gap:8px; margin:0; padding:0; list-style:none; min-width:0; }
+.create-issue-blocker-selected { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; align-items:center; min-width:0; overflow-wrap:anywhere; }
+.create-issue-blocker-selected button { min-height:44px; }
 .create-issue-form label { display:grid; gap:6px; }
 .create-issue-form select, .create-issue-form input[type="date"] { min-height:44px; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:#e5e7eb; }
+.create-issue-owner { min-width:0; }
+.create-issue-owner select { min-height:44px; width:100%; }
 .create-issue-labels { display:grid; gap:8px; margin:0; padding:0; border:0; }
 .create-issue-label-list { display:grid; grid-template-columns:repeat(auto-fit,minmax(140px,1fr)); gap:8px; }
 .create-issue-label-option { min-height:44px; display:flex !important; grid-template-columns:auto 1fr !important; align-items:center; gap:8px; padding:8px 10px; border:1px solid #2a496e; border-radius:10px; background:#10213a; }
@@ -628,6 +901,7 @@ textarea { resize: vertical; min-height: 120px; }
 .pull-sheet-content { overflow-wrap:anywhere; white-space:pre-wrap; }
 .pull-file, .pull-comment-card { margin:8px 0; padding:10px; border:1px solid #203a5c; border-radius:10px; }
 .conversation-more { min-height:44px; width:100%; margin:8px 0; }
+.conversation-actions-retry { min-height:44px; max-width:100%; margin:8px 0; }
 .pull-file-toggle, .pull-review-file { min-height:44px; width:100%; }
 .pull-file-toggle { display:flex; justify-content:space-between; align-items:center; gap:8px; text-align:left; }
 .pull-review-file { margin-top:8px; }
@@ -671,6 +945,12 @@ textarea { resize: vertical; min-height: 120px; }
   .app-menu:not([open]) > .app-menu-panel { display:none; }
   .app-menu-panel { position:absolute; top:calc(100% + 6px); right:0; width:min(280px,calc(100vw - 20px)); display:grid; gap:8px; padding:10px; border:1px solid #2a496e; border-radius:12px; background:#0b1526; box-shadow:0 18px 45px rgba(0,0,0,.5); }
   .app-menu-panel button { min-height:44px; width:100%; }
+  #open-insights { display:block; }
+  .insights-shell { display:none; }
+  .insights-shell[data-mobile-open="true"] { position:fixed; inset:0; z-index:90; display:grid; align-content:start; gap:12px; overflow:auto; overflow-x:hidden; padding:max(12px,env(safe-area-inset-top)) max(12px,env(safe-area-inset-right)) max(12px,env(safe-area-inset-bottom)) max(12px,env(safe-area-inset-left)); background:#050c15; }
+  .insights-header { position:sticky; top:0; z-index:2; display:flex; align-items:flex-start; justify-content:space-between; gap:12px; padding:10px; border:1px solid #2a496e; border-radius:12px; background:#0b1526; }
+  .insights-header h2, .insights-header p { margin:0 0 4px; }
+  .insights-header button { min-height:44px; flex:none; }
   .device-setup-panel { width:100%; padding:14px; padding-bottom:calc(14px + env(safe-area-inset-bottom)); }
   .device-setup-step { grid-template-columns:1fr; }
   .device-setup-action { width:100%; }
@@ -691,6 +971,8 @@ textarea { resize: vertical; min-height: 120px; }
   .card-planning:not([open]) > .card-planning-actions { display:none; }
   .card-planning[open] > .card-planning-actions { display:grid; margin-top:8px; }
   .plan-today-panel { width:100%; border-left:0; padding:14px; }
+  .mobile-plan-today-nav { margin-inline:-14px; padding-inline:14px; }
+  .plan-today-capacity { position:static; }
   .plan-today-item { grid-template-columns:1fr; }
   .plan-today-item-actions { display:grid; grid-template-columns:repeat(3,1fr); width:100%; }
   .plan-today-candidate-actions { grid-template-columns:repeat(2,1fr); width:100%; }
@@ -717,8 +999,25 @@ textarea { resize: vertical; min-height: 120px; }
   .cmd-search-scope { grid-template-columns:auto minmax(0,1fr); }
   #cmd-search-kind, #cmd-search-state { min-height:44px; width:100%; }
   #cmd-search-repository { min-height:44px; width:100%; }
+  .saved-search-create { align-items:stretch; }
+  .saved-search-create input, .saved-search-open, .saved-search-row-actions button { min-height:44px; }
+  .saved-search-row { align-items:stretch; }
   #cmd-results { flex:1; min-height:0; overflow-y:auto; max-height:none; overscroll-behavior:contain; padding-bottom:env(safe-area-inset-bottom); }
   .create-issue-panel { width:100%; border-left:0; padding:14px; }
+  .mobile-create-issue-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:4px;
+    margin-inline:-14px; padding:4px 14px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-create-issue-nav button {
+    min-width:0; min-height:44px; padding:4px; border-color:transparent; font-size:12px;
+  }
+  .mobile-create-issue-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  .mobile-create-issue-nav button[aria-disabled="true"] { opacity:.55; }
+  #create-issue-describe, #create-issue-evidence, #create-issue-filing { scroll-margin-top:72px; }
   .pull-sheet-panel { width:100%; border-left:0; padding:14px; }
   .create-issue-panel.composer-keyboard-active,
   .issue-sheet-panel.composer-keyboard-active,
@@ -738,6 +1037,19 @@ textarea { resize: vertical; min-height: 120px; }
   .mobile-queue-panel { padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); }
   .mobile-queue-panel header { display:flex; align-items:center; justify-content:space-between; gap:12px; }
   .mobile-queue-panel h2 { margin:0; }
+  .mobile-delivery-recovery { box-sizing:border-box; width:100%; max-width:none; max-height:100dvh; margin:auto 0 0; padding:0; border:0; border-radius:18px 18px 0 0; color:var(--text); background:#102641; }
+  .mobile-delivery-recovery::backdrop { background:rgba(3,9,18,.78); }
+  .mobile-delivery-recovery-panel { box-sizing:border-box; display:grid; gap:12px; width:100%; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); overflow-wrap:anywhere; }
+  .mobile-delivery-recovery-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+  .mobile-delivery-recovery-panel h2, .mobile-delivery-recovery-panel p { margin:0; }
+  .mobile-delivery-recovery-panel button { min-height:48px; }
+  .mobile-delivery-recovery-panel > #mobile-delivery-recovery-action { width:100%; font-weight:800; }
+  .delivery-recovery-reason { padding:12px; border:1px solid #31577f; border-radius:12px; background:#0b1c30; }
+  .mobile-start-day { display:grid; gap:12px; max-width:100%; overflow-wrap:anywhere; margin-top:12px; padding:14px; border:1px solid #31577f; border-radius:14px; background:linear-gradient(135deg,#173b64,#102641); }
+  .mobile-start-day h3, .mobile-start-day p { margin:0; }
+  .mobile-start-day p + p { margin-top:4px; }
+  .mobile-start-day-action { width:100%; min-height:48px; text-align:center; }
+  .mobile-start-day-finish { min-height:44px; width:100%; background:transparent; }
   .mobile-queue-list { display:grid; gap:8px; margin-top:12px; }
   .mobile-queue-list button { display:flex; align-items:center; justify-content:space-between; gap:12px; min-height:56px; width:100%; padding:10px 14px; text-align:left; }
   .mobile-queue-list button > span:first-child { display:grid; gap:2px; }
@@ -763,3 +1075,47 @@ textarea { resize: vertical; min-height: 120px; }
 .obi { width:14px; height:14px; background: url('data:image/svg+xml;utf8,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 24 24%22><rect width=%2224%22 height=%2224%22 rx=%226%22 fill=%22%230b1526%22/><circle cx=%2212%22 cy=%2212%22 r=%226%22 fill=%22%2360a5fa%22/></svg>') center/contain no-repeat; display:inline-block; }
 .footer { padding: 12px; text-align: center; color:#4e6b8a; font-size:12px; }
 @keyframes fadein { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: translateY(0); } }
+/* One-handed live-data recovery on the mobile Home surface. */
+.mobile-pull-refresh {
+  display: none;
+}
+
+@media (max-width: 600px) {
+  .mobile-pull-refresh {
+    position: sticky;
+    top: calc(3.25rem + env(safe-area-inset-top));
+    z-index: 8;
+    display: block;
+    width: max-content;
+    max-width: calc(100vw - 2rem);
+    margin: 0 auto -2rem;
+    padding: .45rem .8rem;
+    border: 1px solid rgba(125, 211, 252, .45);
+    border-radius: 999px;
+    background: rgba(11, 18, 32, .96);
+    color: #dbeafe;
+    font-size: .78rem;
+    box-shadow: 0 .35rem 1rem rgba(0, 0, 0, .28);
+    transform: translateY(.5rem);
+    pointer-events: none;
+  }
+
+  .mobile-pull-refresh[hidden] {
+    display: none;
+  }
+
+  .mobile-pull-refresh[data-state="ready"],
+  .mobile-pull-refresh[data-state="success"] {
+    border-color: rgba(52, 211, 153, .7);
+  }
+
+  .mobile-pull-refresh[data-state="error"] {
+    border-color: rgba(251, 113, 133, .75);
+  }
+}
+
+@media (max-width: 600px) and (prefers-reduced-motion: no-preference) {
+  .mobile-pull-refresh {
+    transition: transform 120ms ease, border-color 120ms ease;
+  }
+}

frontend/device-storage.js

@@ -0,0 +1,103 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else {
+    root.createDeviceStorage = factory;
+    root.createDeviceStorage.mount = document => factory({
+      summary:document.querySelector('#device-storage-summary'),
+      detail:document.querySelector('#device-storage-detail'),
+      clearCachesButton:document.querySelector('#clear-device-caches'),
+      clearAllButton:document.querySelector('#clear-private-device-data'),
+      localStorage:root.localStorage,
+      sessionStorage:root.sessionStorage,
+      caches:root.caches,
+      storageManager:root.navigator?.storage,
+      privateDatabases:root.stackchainPrivateDatabases,
+      inspectPrivateDatabases:root.inspectStackchainPrivateDatabases,
+      clearPrivateDeviceData:root.stackchainPrivateDeviceData,
+    });
+  }
+})(typeof self !== 'undefined' ? self : this, function createDeviceStorage(options) {
+  let privateItemCount = 0;
+  let privateRecordCount = 0;
+  let inventoryUnavailable = false;
+  let fullClearArmed = false;
+  const ownedCaches = async () => (await options.caches?.keys?.() || [])
+    .filter(name => name.startsWith('stackchain-dashboard-'));
+
+  function ownedStorageCount(storage) {
+    if (!storage) return 0;
+    let count = 0;
+    for (let index = 0; index < storage.length; index += 1) {
+      if (storage.key(index)?.startsWith('stackchain.')) count += 1;
+    }
+    return count;
+  }
+
+  function megabytes(value) {
+    return Math.round((Number(value) || 0) / (1024 * 1024));
+  }
+
+  async function refresh() {
+    let estimate = null;
+    try { estimate = await options.storageManager?.estimate?.(); }
+    catch (_error) { /* Storage estimates are optional. */ }
+    options.summary.textContent = estimate?.quota
+      ? `${megabytes(estimate.usage)} MB of ${megabytes(estimate.quota)} MB browser storage used.`
+      : 'Browser storage usage is unavailable.';
+    const itemCount = ownedStorageCount(options.localStorage)
+      + (options.sessionStorage === options.localStorage ? 0 : ownedStorageCount(options.sessionStorage));
+    privateItemCount = itemCount;
+    const inventory = await options.inspectPrivateDatabases?.(options.privateDatabases)
+      || { recordCount: 0, unavailable: true };
+    privateRecordCount = inventory.recordCount;
+    inventoryUnavailable = inventory.unavailable;
+    const cacheCount = (await ownedCaches()).length;
+    options.detail.textContent = `${itemCount} private browser item${itemCount === 1 ? '' : 's'} · `
+      + `${inventoryUnavailable ? 'private work status unknown' : `${privateRecordCount} private work record${privateRecordCount === 1 ? '' : 's'}`} · `
+      + `${cacheCount} cached app cop${cacheCount === 1 ? 'y' : 'ies'}`;
+    return { itemCount, privateRecordCount, inventoryUnavailable, cacheCount };
+  }
+
+  async function clearCaches() {
+    options.clearCachesButton.disabled = true;
+    try {
+      await Promise.all((await ownedCaches()).map(name => options.caches.delete(name)));
+      await refresh();
+      options.summary.textContent = 'Cached app copies cleared. Private work was kept.';
+    } catch (error) {
+      options.summary.textContent = `Cached copies could not be cleared: ${error.message}`;
+    } finally {
+      options.clearCachesButton.disabled = false;
+    }
+  }
+
+  async function clearAll() {
+    if ((privateItemCount > 0 || privateRecordCount > 0 || inventoryUnavailable) && !fullClearArmed) {
+      fullClearArmed = true;
+      options.clearAllButton.textContent = 'Confirm: clear private work';
+      options.summary.textContent = 'Private drafts or queued work may not be synced. Press confirm to clear them from this device.';
+      return;
+    }
+    options.clearAllButton.disabled = true;
+    try {
+      await options.clearPrivateDeviceData();
+      privateItemCount = 0;
+      fullClearArmed = false;
+      options.clearAllButton.textContent = 'Clear all private data';
+      options.detail.textContent = '0 private browser items · 0 private work records · 0 cached app copies';
+      options.summary.textContent = 'All Stackchain private data was cleared from this device.';
+    } catch (error) {
+      options.summary.textContent = `Private data was not fully cleared: ${error.message}`;
+    } finally {
+      options.clearAllButton.disabled = false;
+    }
+  }
+
+  async function start() {
+    options.clearCachesButton.addEventListener('click', clearCaches);
+    options.clearAllButton.addEventListener('click', clearAll);
+    return refresh();
+  }
+
+  return { refresh, start };
+});

frontend/draft-capacity-dialog.js

@@ -1,4 +1,4 @@
-function showDraftCapacityDialog(captures) {
+function showDraftCapacityDialog(captures, qs) {
   const state = captures.capacity();
   if (!state.full) return false;
   const oldest = state.oldest;
@@ -11,7 +11,10 @@ function showDraftCapacityDialog(captures) {
   return true;
 }
 
-function bindDraftCapacityDialog() {
+function bindDraftCapacityDialog({
+  qs, saveIssueCaptureDraft, closeCreateIssueSheet, mobileTaskDock, refreshMyWorkView,
+  unfiledCaptures, currentIssueCaptureDraft, createIssueAttachmentController, issueCapture,
+}) {
   qs('#keep-editing-draft').addEventListener('click', () => {
     qs('#draft-capacity-sheet').hidden = true;
     qs('#save-unfiled-issue').focus();
@@ -40,10 +43,10 @@ function bindDraftCapacityDialog() {
     const button = qs('#replace-oldest-draft');
     button.disabled = true;
     try {
-      const draft = {
-        title:qs('#create-issue-title').value.trim(), body:qs('#create-issue-body').value.trim(),
-        attachment:await createIssueAttachmentController.serialize(),
-      };
+      const draft = currentIssueCaptureDraft();
+      const evidence = await createIssueAttachmentController.serialize();
+      Object.assign(draft,
+        Array.isArray(evidence) ? {attachments:evidence} : {attachment:evidence});
       const saved = await unfiledCaptures.replaceOldest(draft, oldest.id);
       qs('#draft-capacity-sheet').hidden = true;
       issueCapture.clearDraft();

frontend/draft-filing-session.js

@@ -1,6 +1,7 @@
 function createDraftFilingSession({list}) {
   let orderedIds = [];
   let currentId = '';
+  let reviewTrigger = null;
 
   function visibleIds() {
     const available = new Set(list().map(item => item.id));
@@ -49,17 +50,42 @@ function createDraftFilingSession({list}) {
 
   const session = {start, current:state, next:()=>move(1), previous:()=>move(-1), removeCurrentAndNext};
   session.attach = (qs, dependencies) => {
-    const openCapture = async captureId => {
+    const openCapture = async (captureId, trigger = null) => {
       const resumed = await dependencies.captures.resume(captureId, dependencies.getLogin());
-      dependencies.issueCapture.saveDraft(resumed);
+      const issueCapture = dependencies.capture?.() || dependencies.issueCapture;
+      issueCapture.saveDraft(resumed);
       dependencies.setResumedId(captureId);
-      await dependencies.openSheet();
-      dependencies.attachment[resumed.attachment ? 'restore' : 'clear'](resumed.attachment);
+      await dependencies.openSheet(false);
+      const evidence = resumed.attachments || resumed.attachment;
+      dependencies.attachment[evidence ? 'restore' : 'clear'](evidence);
       dependencies.setFilingMode(true);
       session.render();
+      if (trigger) {
+        await dependencies.review(resumed);
+        reviewTrigger = trigger;
+        const submitter = resumed.completionIntent === 'create-and-start' ?
+          qs('#create-and-start-issue') : qs('#submit-new-issue');
+        const disabled = submitter.disabled;
+        submitter.disabled = false;
+        qs('#create-issue-form').requestSubmit(submitter);
+        submitter.disabled = disabled;
+      }
     };
     return Object.assign(session, {
     nextCapture() { const state = session.current(); return state ? openCapture(state.id) : null; },
+    reviewCapture(captureId, trigger) {
+      session.start(captureId);
+      return openCapture(captureId, trigger);
+    },
+    open(captureId, trigger = null) {
+      session.start(captureId);
+      return openCapture(captureId, trigger);
+    },
+    takeTrigger() {
+      const trigger = reviewTrigger;
+      reviewTrigger = null;
+      return trigger;
+    },
     render() {
       const state = session.current();
       qs('#draft-filing-session').hidden = !state;

frontend/drafts.js

@@ -155,6 +155,8 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             .filter(Boolean).join('\n\n');
           const ownerLogin = String(item.ownerLogin || '').trim();
           const quarantined = !ownerLogin || !currentLogin || ownerLogin !== currentLogin;
+          const checklistConflict = !quarantined && item.kind === 'issue-content' &&
+            item.status === 'attention' && typeof item.baseBody === 'string';
           return {
             id: 'stackchain.authored-outbox.v1:' + item.id,
             outbox_id: item.id,
@@ -162,7 +164,7 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             kind: 'authored-outbox',
             status: item.status === 'attention' ? 'attention' : (item.status === 'sending' ? 'sending' :
               (item.status === 'authorization' || isClosure ? 'authorization' : 'queued')),
-            label: item.deliveryState === 'uncertain' ? 'Verify delivery' :
+            label: checklistConflict ? 'Checklist conflict' : item.deliveryState === 'uncertain' ? 'Verify delivery' :
               (item.status === 'attention' ? (isClosure ? 'Issue closure needs attention' : 'Needs attention') :
                 (isReview ? (item.status === 'authorization' ? 'Review awaiting authorization' : 'Queued review') :
                   (isClosure ? 'Awaiting authorization' : 'Queued message'))),
@@ -172,6 +174,7 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             title: target,
             preview: textPreview([item.error, item.body].filter(Boolean).join(' — ')),
             copy_text: copyText,
+            checklist_conflict: checklistConflict,
             ...(isReview ? { head_sha: item.expectedHeadSha } : {}),
             quarantined,
             ownership: quarantined ? 'Queued by ' + (ownerLogin || 'an unknown account') +
@@ -237,7 +240,14 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
   }
 
   function partition(items = list()) {
-    const deliveries = items.filter(item => item.kind === 'issue-outbox' || item.kind === 'authored-outbox');
+    const isDelivery = item => item.kind === 'issue-outbox' || item.kind === 'authored-outbox';
+    const needsAction = item => isDelivery(item) && (
+      item.status === 'attention' || item.status === 'authorization' || item.status === 'completion' ||
+      item.delivery_state === 'uncertain' || item.quarantined
+    );
+    const deliveries = items.filter(isDelivery).sort((left, right) =>
+      Number(needsAction(right)) - Number(needsAction(left))
+    );
     const drafts = items.filter(item => item.kind !== 'issue-outbox' && item.kind !== 'authored-outbox');
     const counts = deliveries.reduce((summary, item) => {
       const state = item.status === 'sending' ? 'sending' : (item.status === 'attention' ? 'attention' :
@@ -248,10 +258,19 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
     const retryable = deliveries.filter(item =>
       item.status === 'queued' && !item.authorization_required && !item.quarantined && item.delivery_state !== 'uncertain'
     );
-    return { drafts, deliveries, counts, retryable };
+    return { drafts, deliveries, counts, retryable, actionable:deliveries.filter(needsAction).length };
   }
 
-  return { list, discard, partition };
+  function deliveryLabel(item) {
+    if (item.quarantined) return 'Identity protected';
+    if (item.status === 'completion') return 'Created · ready to start';
+    if (item.status === 'attention') return 'Needs attention';
+    if (item.status === 'sending') return 'Sending';
+    if (item.status === 'authorization') return 'Awaiting authorization';
+    return 'Queued for sync';
+  }
+
+  return { list, discard, partition, deliveryLabel };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createDraftInbox;

frontend/filed-claim.js

@@ -0,0 +1,9 @@
+function filedClaimEligible(item, detail) {
+  return Boolean(
+    item?.is_filed && !item?.is_assigned && !item?.is_completed &&
+    item?.state === 'open' && detail?.state === 'open' &&
+    Array.isArray(detail?.assignees) && detail.assignees.length === 0
+  );
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = filedClaimEligible;

frontend/issue-attachment.js

@@ -1,55 +1,28 @@
 (function(root, factory) {
-  const api = factory();
+  const review = typeof module === 'object' && module.exports ? require('./issue-evidence-review.js') : root.issueEvidenceReview;
+  const editor = typeof module === 'object' && module.exports ? require('./issue-evidence-editor.js') : root.issueEvidenceEditor;
+  const api = factory(review, editor);
   if (typeof module === 'object' && module.exports) module.exports = api;
   else root.issueAttachment = api;
-})(typeof self !== 'undefined' ? self : this, function() {
+})(typeof self !== 'undefined' ? self : this, function(issueEvidenceReview, issueEvidenceEditor) {
   'use strict';
 
   const MAX_BYTES = 2 * 1024 * 1024;
+  const MAX_PIXELS = issueEvidenceReview.MAX_PIXELS;
+  const MAX_FILES = 5;
+  const MAX_FILES_MESSAGE = 'Up to 5 screenshots. Remove one before adding another.';
   const IMAGE_TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 
-  function namedBlob(blob, name) {
-    if (typeof File === 'function') {
-      return new File([blob], name, { type: blob.type });
-    }
-    Object.defineProperty(blob, 'name', { value: name, configurable: true });
-    return blob;
+  function normalizeNote(value) {
+    return String(value || '').replace(/\s+/g, ' ').trim().slice(0, 240);
   }
 
-  async function optimizeImage(file, environment = {}) {
-    if (file.size <= MAX_BYTES) return file;
-    const decode = environment.createImageBitmap || globalThis.createImageBitmap;
-    const makeCanvas = environment.createCanvas || (() => document.createElement('canvas'));
-    if (typeof decode !== 'function') {
-      throw new Error('This browser cannot optimize the screenshot. Try cropping it and choose it again.');
-    }
-
-    let bitmap;
-    try {
-      bitmap = await decode(file);
-      const canvas = makeCanvas();
-      const context = canvas && canvas.getContext && canvas.getContext('2d');
-      if (!context || !bitmap.width || !bitmap.height) throw new Error('decode');
-      let scale = Math.min(1, Math.sqrt(MAX_BYTES / file.size) * 0.92);
-      for (let attempt = 0; attempt < 10; attempt += 1) {
-        canvas.width = Math.max(1, Math.round(bitmap.width * scale));
-        canvas.height = Math.max(1, Math.round(bitmap.height * scale));
-        context.drawImage(bitmap, 0, 0, canvas.width, canvas.height);
-        const blob = await new Promise(resolve => {
-          canvas.toBlob(resolve, file.type, file.type === 'image/png' ? undefined : 0.86);
-        });
-        if (!blob) throw new Error('encode');
-        if (blob.size > 0 && blob.size <= MAX_BYTES) return namedBlob(blob, file.name);
-        scale *= 0.8;
-      }
-    } catch (_error) {
-      throw new Error('The screenshot could not be optimized. Try cropping it and choose it again.');
-    } finally {
-      if (bitmap && typeof bitmap.close === 'function') bitmap.close();
-    }
-    throw new Error('The screenshot could not be optimized below 2 MB. Try cropping it and choose it again.');
+  function escapeMarkdown(value) {
+    return value.replace(/([\\`*_[\]{}()<>#+\-.!|])/g, '\\$1');
   }
 
+  const optimizeImage = issueEvidenceReview.optimizeImage;
+
   function multipart(attachment) {
     let blob = attachment?.blob;
     if (!blob && attachment?.data) {
@@ -65,32 +38,44 @@
 
   function create(options) {
     const upload = options.upload;
+    const maxFiles = options.maxFiles === MAX_FILES ? MAX_FILES : 1;
+    const inspectPixels = options.inspectPixels === true;
     const optimizeSelectedImage = options.optimizeImage || optimizeImage;
+    const onCheckpoint = options.onCheckpoint;
     const createOperationId = options.createOperationId || (() => {
       if (typeof globalThis !== 'undefined' && globalThis.crypto?.randomUUID) {
         return globalThis.crypto.randomUUID();
       }
       return Date.now().toString(36) + '-' + Math.random().toString(36).slice(2);
     });
-    let selected = null;
-    let confirmed = null;
-    let serialized = null;
-    let operationId = null;
+    let selected = [];
     let selectionGeneration = 0;
+    let restoring = false;
+
+    function changed() {
+      if (!restoring && typeof onCheckpoint === 'function') {
+        Promise.resolve().then(onCheckpoint).catch(() => { /* Caller surfaces durable-storage failures. */ });
+      }
+    }
 
     function commitSelection(file) {
       if (!file || !IMAGE_TYPES.has(file.type) || !Number.isFinite(file.size) ||
           file.size <= 0 || file.size > MAX_BYTES) {
         throw new Error('The screenshot could not be optimized below 2 MB. Try cropping it and choose it again.');
       }
-      selected = file;
-      confirmed = null;
-      serialized = null;
-      operationId = createOperationId();
+      if (selected.length >= maxFiles) {
+        if (maxFiles === 1) selected = [];
+        else throw new Error(MAX_FILES_MESSAGE);
+      }
+      selected.push({file, note:'', confirmed:null, serialized:null, operationId:createOperationId()});
+      changed();
       return state();
     }
 
     function select(file) {
+      if (selected.length >= maxFiles && maxFiles > 1) {
+        throw new Error(MAX_FILES_MESSAGE);
+      }
       const generation = ++selectionGeneration;
       if (!file || !IMAGE_TYPES.has(file.type)) {
         throw new Error('Choose a PNG, JPEG, or WebP screenshot.');
@@ -98,7 +83,7 @@
       if (!Number.isFinite(file.size) || file.size <= 0) {
         throw new Error('Choose a screenshot that is 2 MB or smaller.');
       }
-      if (file.size > MAX_BYTES) {
+      if (file.size > MAX_BYTES || inspectPixels) {
         return Promise.resolve(optimizeSelectedImage(file)).then(optimized => {
           if (generation !== selectionGeneration) return state();
           return commitSelection(optimized);
@@ -109,92 +94,193 @@
 
     function clear() {
       selectionGeneration += 1;
-      selected = null;
-      confirmed = null;
-      serialized = null;
-      operationId = null;
+      selected = [];
+    }
+
+    function remove(index) {
+      const position = Number(index);
+      if (!Number.isInteger(position) || position < 0 || position >= selected.length) return state();
+      selectionGeneration += 1;
+      selected.splice(position, 1);
+      changed();
+      return state();
+    }
+
+    function move(fromIndex, toIndex) {
+      const from = Number(fromIndex);
+      const to = Number(toIndex);
+      if (!Number.isInteger(from) || !Number.isInteger(to) || from < 0 ||
+          from >= selected.length || to < 0 || to >= selected.length || from === to) return state();
+      const [item] = selected.splice(from, 1);
+      selected.splice(to, 0, item);
+      changed();
+      return state();
+    }
+
+    function replace(index, file) {
+      const position = Number(index);
+      if (!Number.isInteger(position) || position < 0 || position >= selected.length) return state();
+      if (!file || !IMAGE_TYPES.has(file.type) || !Number.isFinite(file.size) ||
+          file.size <= 0 || file.size > MAX_BYTES) {
+        throw new Error('The edited screenshot must be a PNG, JPEG, or WebP image no larger than 2 MB.');
+      }
+      selectionGeneration += 1;
+      selected[position] = {
+        ...selected[position], file, confirmed:null, serialized:null, operationId:createOperationId(),
+      };
+      changed();
+      return state();
+    }
+
+    function setNote(index, value) {
+      const position = Number(index);
+      if (!Number.isInteger(position) || position < 0 || position >= selected.length) return state();
+      selected[position].note = normalizeNote(value);
+      selected[position].serialized = null;
+      changed();
+      return state();
+    }
+
+    function note(index) {
+      const position = Number(index);
+      return Number.isInteger(position) && selected[position] ? selected[position].note : '';
     }
 
     function restore(value) {
+      restoring = true;
+      try {
+        if (Array.isArray(value)) {
+          clear();
+          if (value.length > maxFiles) throw new Error(MAX_FILES_MESSAGE);
+          value.forEach(attachment => restoreOne(attachment));
+          return state();
+        }
+        clear();
+        restoreOne(value);
+        return state();
+      } finally { restoring = false; }
+    }
+
+    function restoreOne(value) {
       const contentType = String(value?.contentType || '');
       const filename = String(value?.filename || '');
       const blob = value?.blob;
       const data = String(value?.data || '');
       if (!blob && !data) {
-        clear();
         throw new Error('The saved screenshot is unavailable. Retry before editing this issue.');
       }
       const padding = (data.match(/=*$/) || [''])[0].length;
       const size = blob ? Number(blob.size) : Math.max(1, Math.floor(data.length * 3 / 4) - padding);
-      select({ name: filename, type: contentType, size, ...(blob ? { blob } : {}) });
-      serialized = blob ? { filename, contentType, blob } : { filename, contentType, data };
-      return state();
+      commitSelection({ name: filename, type: contentType, size, ...(blob ? { blob } : {}) });
+      const item = selected[selected.length - 1];
+      item.note = normalizeNote(value?.note);
+      item.serialized = {
+        ...(blob ? { filename, contentType, blob } : { filename, contentType, data }),
+        ...(item.note ? {note:item.note} : {}),
+      };
+      const operationId = String(value?.operationId || '').slice(0, 128);
+      if (operationId) item.operationId = operationId;
+      const markdown = String(value?.confirmed?.markdown || '');
+      if (markdown) item.confirmed = { markdown };
     }
 
     function state() {
-      return selected ? {
-        name: selected.name,
-        size: selected.size,
-        uploaded: Boolean(confirmed),
-      } : null;
+      const values = selected.map(item => ({
+        name: item.file.name,
+        size: item.file.size,
+        uploaded: Boolean(item.confirmed),
+      }));
+      return values.length > 1 ? values : (values[0] || null);
+    }
+
+    function serializeItem(item) {
+      if (!item.serialized) item.serialized = {
+        filename:item.file.name, contentType:item.file.type, blob:item.file.blob || item.file,
+        ...(item.note ? {note:item.note} : {}),
+      };
+      return {
+        ...item.serialized,
+        operationId:item.operationId,
+        ...(item.confirmed?.markdown ? { confirmed:{ markdown:item.confirmed.markdown } } : {}),
+      };
     }
 
     async function serialize() {
-      if (!selected) return null;
-      if (!serialized) {
-        serialized = {
-          filename: selected.name,
-          contentType: selected.type,
-          blob: selected.blob || selected,
-        };
-      }
-      return { ...serialized };
+      if (!selected.length) return null;
+      const values = selected.map(serializeItem);
+      return values.length > 1 ? values : values[0];
     }
 
-    async function prepareComment(item, body) {
+    async function prepareComment(target, body) {
       const text = String(body || '').trim();
-      if (!selected) return text;
-      if (!confirmed) {
-        const attachment = await serialize();
-        confirmed = await upload({
-          repository: item.repository,
-          number: item.number,
-          filename: attachment.filename,
-          content_type: attachment.contentType,
-          ...(attachment.blob ? { blob: attachment.blob } : { data: attachment.data }),
-          operation_id: operationId,
-        });
-        if (!confirmed || typeof confirmed.markdown !== 'string' || !confirmed.markdown) {
-          confirmed = null;
-          throw new Error('The server did not confirm the screenshot upload.');
+      if (!selected.length) return text;
+      const markdown = [];
+      for (const evidence of selected) {
+        if (!evidence.confirmed) {
+          const attachment = serializeItem(evidence);
+          evidence.confirmed = await upload({
+            repository: target.repository,
+            number: target.number,
+            filename: attachment.filename,
+            content_type: attachment.contentType,
+            ...(attachment.blob ? { blob: attachment.blob } : { data: attachment.data }),
+            operation_id: evidence.operationId,
+          });
+          if (!evidence.confirmed || typeof evidence.confirmed.markdown !== 'string' || !evidence.confirmed.markdown) {
+            evidence.confirmed = null;
+            throw new Error('The server did not confirm the screenshot upload.');
+          }
+          await onCheckpoint?.();
         }
+        if (evidence.note) {
+          markdown.push('**Screenshot ' + (markdown.length + 1) + ' — ' + escapeMarkdown(evidence.note) + '**\n\n' +
+            evidence.confirmed.markdown);
+        } else markdown.push(evidence.confirmed.markdown);
       }
-      return text ? text + '\n\n' + confirmed.markdown : confirmed.markdown;
+      const evidence = markdown.join('\n\n');
+      return text ? text + '\n\n' + evidence : evidence;
     }
 
-    return { select, restore, clear, state, serialize, prepareComment };
+    return { select, restore, remove, move, replace, setNote, note, clear, state, serialize, prepareComment };
   }
 
   function mount(options) {
-    const controller = create(options);
+    const inputs = Array.from(new Set((options.inputs || [options.input]).filter(Boolean)));
+    if (!inputs.includes(options.input)) inputs.push(options.input);
+    const controller = create({
+      ...options, inspectPixels:true,
+      maxFiles:options.maxFiles || (options.input?.multiple ? MAX_FILES : 1),
+    });
     const clearSelection = controller.clear;
+    const restoreSelection = controller.restore;
+    const reviewEnabled = Boolean(options.tray && options.earlier && options.later);
     let previewUrl = '';
     let selectionSequence = 0;
+    const review = reviewEnabled ? issueEvidenceReview.create({
+      ...options, edit:options.editor?.edit, controller,
+    }) : null;
 
-    function setBusy(busy) {
-      options.input.disabled = Boolean(busy);
-      options.remove.disabled = Boolean(busy);
+    function setBusy(value) {
+      inputs.forEach(input => { input.disabled = Boolean(value); });
+      options.remove.disabled = Boolean(value);
+      if (options.editor?.edit) options.editor.edit.disabled = Boolean(value) || !controller.state();
+      review?.setBusy(value);
     }
 
     function clearPreview() {
       selectionSequence += 1;
       if (previewUrl) options.revokeObjectURL(previewUrl);
       previewUrl = '';
+      review?.clear();
+      if (options.editor?.edit) options.editor.edit.disabled = true;
       options.image.src = '';
       options.preview.hidden = true;
-      options.input.value = '';
-      options.input.disabled = false;
+      inputs.forEach(input => {
+        input.value = '';
+        input.disabled = false;
+      });
       clearSelection();
+      options.onChange?.(controller.state());
     }
 
     function showPreview(file, optimized) {
@@ -203,57 +289,130 @@
       options.image.src = previewUrl;
       options.meta.textContent = file.name + ' · ' + Math.ceil(file.size / 1024) + ' KB';
       options.preview.hidden = false;
+      if (options.editor?.edit) options.editor.edit.disabled = false;
       options.status.textContent = optimized ? 'Screenshot optimized and ready to upload.' :
         (options.readyMessage || 'Screenshot ready to upload with this comment.');
     }
 
-    options.input.addEventListener('change', event => {
-      const file = event.target.files && event.target.files[0];
+    function selectFromInput(event) {
+      const sourceInput = event.target;
+      const files = Array.from(sourceInput.files || []);
       const sequence = ++selectionSequence;
-      let result;
-      try {
-        result = controller.select(file);
-      } catch (error) {
+      if (!files.length) return;
+      let first;
+      try { first = controller.select(files[0]); }
+      catch (error) {
         options.status.textContent = error.message;
-        options.input.value = '';
+        sourceInput.value = '';
         return;
       }
-      if (!result || typeof result.then !== 'function') {
-        showPreview(file, false);
+      if (!reviewEnabled && files.length === 1 && (!first || typeof first.then !== 'function')) {
+        showPreview(files[0], false);
         return;
       }
-      options.status.textContent = 'Optimizing screenshot…';
-      options.input.disabled = true;
-      return result.then(() => controller.serialize()).then(value => {
-        if (sequence === selectionSequence) showPreview(value.blob, true);
+      let optimized = Boolean(first && typeof first.then === 'function');
+      if (optimized) {
+        options.status.textContent = 'Optimizing screenshot…';
+        inputs.forEach(input => { input.disabled = true; });
+      }
+      const selectAll = files.slice(1).reduce((pending, file) => pending.then(async () => {
+        const result = controller.select(file);
+        if (result && typeof result.then === 'function') {
+          optimized = true;
+          options.status.textContent = 'Optimizing screenshot…';
+          inputs.forEach(input => { input.disabled = true; });
+          await result;
+        }
+      }), Promise.resolve(first));
+      return selectAll.then(() => controller.serialize()).then(value => {
+        if (sequence !== selectionSequence) return;
+        const values = Array.isArray(value) ? value : [value];
+        const latest = values[values.length - 1];
+        if (reviewEnabled) {
+          review.render(values, values.length - 1, optimized);
+        } else {
+          showPreview(latest.blob, optimized);
+          if (values.length > 1) {
+            options.meta.textContent = values.length + ' screenshots ready · latest: ' + latest.filename;
+            options.status.textContent = values.length + ' screenshots ready to file in this order.';
+          }
+        }
+        options.onChange?.(controller.state());
       }).catch(error => {
         if (sequence === selectionSequence) {
           options.status.textContent = error.message;
-          options.input.value = '';
+          sourceInput.value = '';
         }
       }).finally(() => {
-        if (sequence === selectionSequence) options.input.disabled = false;
+        if (sequence === selectionSequence) inputs.forEach(input => { input.disabled = false; });
       });
-    });
+    }
+    inputs.forEach(input => input.addEventListener('change', selectFromInput));
     options.remove.addEventListener('click', () => {
-      clearPreview();
-      options.status.textContent = options.removedMessage || 'Screenshot removed. Your comment is unchanged.';
+      const current = controller.state();
+      const count = Array.isArray(current) ? current.length : (current ? 1 : 0);
+      if (count <= 1) {
+        clearPreview();
+        options.status.textContent = options.removedMessage || 'Screenshot removed. Your comment is unchanged.';
+        return Promise.resolve();
+      }
+      const removedIndex = reviewEnabled ? review.activeIndex() : count - 1;
+      controller.remove(removedIndex);
+      selectionSequence += 1;
+      review?.afterRemoval(removedIndex, count);
+      return controller.serialize().then(value => {
+        const values = Array.isArray(value) ? value : [value];
+        if (reviewEnabled) {
+          review.render(values, review.activeIndex());
+        } else {
+          const latest = values[values.length - 1];
+          showPreview(latest.blob, false);
+          options.meta.textContent = values.length + ' screenshots ready · latest: ' + latest.filename;
+        }
+        options.status.textContent = options.removedMessage || 'Latest screenshot removed. Your text is unchanged.';
+        options.onChange?.(controller.state());
+      });
     });
 
     function restorePreview(value) {
       clearPreview();
-      const restored = controller.restore(value);
-      previewUrl = value.blob ? options.createObjectURL(value.blob) :
-        'data:' + value.contentType + ';base64,' + value.data;
+      const restored = restoreSelection(value);
+      const values = Array.isArray(value) ? value : [value];
+      if (reviewEnabled) {
+        review.render(values, values.length - 1);
+        return restored;
+      }
+      const latest = values[values.length - 1];
+      previewUrl = latest.blob ? options.createObjectURL(latest.blob) :
+        'data:' + latest.contentType + ';base64,' + latest.data;
       options.image.src = previewUrl;
-      options.meta.textContent = restored.name + ' · ' + Math.ceil(restored.size / 1024) + ' KB';
+      options.meta.textContent = values.length > 1 ?
+        values.length + ' screenshots ready · latest: ' + latest.filename :
+        restored.name + ' · ' + Math.ceil(restored.size / 1024) + ' KB';
       options.preview.hidden = false;
-      options.status.textContent = options.readyMessage || 'Screenshot ready to upload with this comment.';
+      options.status.textContent = values.length > 1 ?
+        values.length + ' screenshots ready to file in this order.' :
+        (options.readyMessage || 'Screenshot ready to upload with this comment.');
       return restored;
     }
 
+    if (review && options.editor && issueEvidenceEditor) {
+      issueEvidenceEditor.mount({
+        ...options.editor,
+        controller,
+        getActiveIndex:review.activeIndex,
+        optimizeImage,
+        onApplied: async index => {
+          const value = await controller.serialize();
+          review.render(value, index);
+          options.status.textContent = options.editor.appliedMessage ||
+            'Edited screenshot flattened and ready to file.';
+        },
+      });
+      options.editor.edit.disabled = !controller.state();
+    }
     return Object.assign(controller, { clear: clearPreview, restore: restorePreview, setBusy });
   }
 
-  return { create, mount, multipart, optimizeImage, MAX_BYTES };
+  return { create, mount, multipart, optimizeImage, MAX_BYTES, MAX_PIXELS };
 });

frontend/issue-evidence-editor.js

@@ -0,0 +1,306 @@
+(function(root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.issueEvidenceEditor = api;
+})(typeof self !== 'undefined' ? self : this, function() {
+  'use strict';
+
+  function boundedRect(value, bounds) {
+    const x = Math.max(bounds.x, Math.min(bounds.x + bounds.width - 1, Math.round(Number(value.x) || 0)));
+    const y = Math.max(bounds.y, Math.min(bounds.y + bounds.height - 1, Math.round(Number(value.y) || 0)));
+    const width = Math.max(1, Math.min(bounds.x + bounds.width - x, Math.round(Number(value.width) || 0)));
+    const height = Math.max(1, Math.min(bounds.y + bounds.height - y, Math.round(Number(value.height) || 0)));
+    return { x, y, width, height };
+  }
+
+  function boundedPoint(value, bounds) {
+    return {
+      x: Math.max(bounds.x, Math.min(bounds.x + bounds.width, Math.round(Number(value.x) || 0))),
+      y: Math.max(bounds.y, Math.min(bounds.y + bounds.height, Math.round(Number(value.y) || 0))),
+    };
+  }
+
+  function createModel(size) {
+    const full = { x:0, y:0, width:Math.max(1, Math.round(size.width)), height:Math.max(1, Math.round(size.height)) };
+    let crop = { ...full };
+    let redactions = [];
+    let annotations = [];
+    let history = [];
+
+    function remember() {
+      history.push({
+        crop:{...crop}, redactions:redactions.map(value => ({...value})),
+        annotations:annotations.map(value => ({...value})),
+      });
+    }
+    function intersects(annotation, bounds) {
+      const left = annotation.type === 'arrow' ? Math.min(annotation.startX, annotation.endX) : annotation.x;
+      const top = annotation.type === 'arrow' ? Math.min(annotation.startY, annotation.endY) : annotation.y;
+      const right = annotation.type === 'arrow' ? Math.max(annotation.startX, annotation.endX) : annotation.x + annotation.width;
+      const bottom = annotation.type === 'arrow' ? Math.max(annotation.startY, annotation.endY) : annotation.y + annotation.height;
+      return left < bounds.x + bounds.width && top < bounds.y + bounds.height && right > bounds.x && bottom > bounds.y;
+    }
+    function clampAnnotation(annotation) {
+      if (annotation.type === 'highlight') {
+        const x = Math.max(crop.x, annotation.x);
+        const y = Math.max(crop.y, annotation.y);
+        const right = Math.min(crop.x + crop.width, annotation.x + annotation.width);
+        const bottom = Math.min(crop.y + crop.height, annotation.y + annotation.height);
+        return { type:'highlight', x, y, width:Math.max(1, right - x), height:Math.max(1, bottom - y) };
+      }
+      const start = boundedPoint({x:annotation.startX, y:annotation.startY}, crop);
+      const end = boundedPoint({x:annotation.endX, y:annotation.endY}, crop);
+      return { type:'arrow', startX:start.x, startY:start.y, endX:end.x, endY:end.y };
+    }
+    function setCrop(value) {
+      remember();
+      crop = boundedRect(value, crop);
+      redactions = redactions.filter(rectangle =>
+        rectangle.x < crop.x + crop.width && rectangle.y < crop.y + crop.height &&
+        rectangle.x + rectangle.width > crop.x && rectangle.y + rectangle.height > crop.y
+      ).map(rectangle => boundedRect(rectangle, crop));
+      annotations = annotations.filter(annotation => intersects(annotation, crop)).map(clampAnnotation);
+      return snapshot();
+    }
+    function addRedaction(value) {
+      remember();
+      redactions.push(boundedRect(value, crop));
+      return snapshot();
+    }
+    function addHighlight(value) {
+      remember();
+      annotations.push({ type:'highlight', ...boundedRect(value, crop) });
+      return snapshot();
+    }
+    function addArrow(value) {
+      remember();
+      const start = boundedPoint({x:value.startX, y:value.startY}, crop);
+      const end = boundedPoint({x:value.endX, y:value.endY}, crop);
+      annotations.push({ type:'arrow', startX:start.x, startY:start.y, endX:end.x, endY:end.y });
+      return snapshot();
+    }
+    function undo() {
+      const previous = history.pop();
+      if (previous) {
+        crop = previous.crop;
+        redactions = previous.redactions;
+        annotations = previous.annotations;
+      }
+      return snapshot();
+    }
+    function reset() {
+      remember();
+      crop = { ...full };
+      redactions = [];
+      annotations = [];
+      return snapshot();
+    }
+    function snapshot() {
+      return {
+        crop:{...crop}, redactions:redactions.map(value => ({...value})),
+        annotations:annotations.map(value => ({...value})),
+      };
+    }
+    return { addArrow, addHighlight, addRedaction, reset, setCrop, snapshot, undo };
+  }
+
+  function namedBlob(blob, name) {
+    if (typeof File === 'function') return new File([blob], name, {type:blob.type});
+    Object.defineProperty(blob, 'name', {value:name, configurable:true});
+    return blob;
+  }
+
+  function paint(options) {
+    const state = options.model.snapshot();
+    const maxDimension = Number.isFinite(options.maxDimension) ? options.maxDimension : Infinity;
+    const scale = Math.min(1, maxDimension / Math.max(state.crop.width, state.crop.height));
+    const width = Math.max(1, Math.round(state.crop.width * scale));
+    const height = Math.max(1, Math.round(state.crop.height * scale));
+    options.canvas.width = width;
+    options.canvas.height = height;
+    const context = options.canvas.getContext('2d');
+    if (!context) throw new Error('Screenshot editing is unavailable in this browser.');
+    context.drawImage(options.source, state.crop.x, state.crop.y, state.crop.width, state.crop.height, 0, 0, width, height);
+    context.fillStyle = '#000000';
+    state.redactions.forEach(rectangle => context.fillRect(
+      Math.round((rectangle.x - state.crop.x) * scale),
+      Math.round((rectangle.y - state.crop.y) * scale),
+      Math.round(rectangle.width * scale),
+      Math.round(rectangle.height * scale),
+    ));
+    state.annotations.forEach(annotation => {
+      if (annotation.type === 'highlight') {
+        context.fillStyle = 'rgba(250, 204, 21, 0.38)';
+        context.fillRect(
+          Math.round((annotation.x - state.crop.x) * scale),
+          Math.round((annotation.y - state.crop.y) * scale),
+          Math.round(annotation.width * scale),
+          Math.round(annotation.height * scale),
+        );
+        return;
+      }
+      const startX = (annotation.startX - state.crop.x) * scale;
+      const startY = (annotation.startY - state.crop.y) * scale;
+      const endX = (annotation.endX - state.crop.x) * scale;
+      const endY = (annotation.endY - state.crop.y) * scale;
+      const angle = Math.atan2(endY - startY, endX - startX);
+      const head = Math.max(10, Math.min(24, 16 * scale));
+      context.save();
+      context.strokeStyle = '#facc15';
+      context.lineWidth = Math.max(4, 6 * scale);
+      context.lineCap = 'round';
+      context.lineJoin = 'round';
+      context.beginPath();
+      context.moveTo(Math.round(startX), Math.round(startY));
+      context.lineTo(Math.round(endX), Math.round(endY));
+      context.lineTo(endX - head * Math.cos(angle - Math.PI / 6), endY - head * Math.sin(angle - Math.PI / 6));
+      context.moveTo(Math.round(endX), Math.round(endY));
+      context.lineTo(endX - head * Math.cos(angle + Math.PI / 6), endY - head * Math.sin(angle + Math.PI / 6));
+      context.stroke();
+      context.restore();
+    });
+    return state;
+  }
+
+  async function flatten(options) {
+    paint(options);
+    const type = ['image/png', 'image/jpeg', 'image/webp'].includes(options.type) ? options.type : 'image/png';
+    const blob = await new Promise(resolve => options.canvas.toBlob(resolve, type, type === 'image/png' ? undefined : 0.9));
+    if (!blob || !blob.size) throw new Error('The edited screenshot could not be saved. Try again.');
+    return namedBlob(blob, options.name || 'edited-screenshot.png');
+  }
+
+  function attachmentBlob(value) {
+    if (value.blob) return value.blob;
+    const binary = atob(String(value.data || ''));
+    return new Blob([Uint8Array.from(binary, character => character.charCodeAt(0))], {type:value.contentType});
+  }
+
+  function mount(options) {
+    let source = null;
+    let model = null;
+    let mode = 'redact';
+    let start = null;
+    let selectedIndex = -1;
+    let previousFocus = null;
+
+    function status(message) { options.status.textContent = message; }
+    function setMode(value) {
+      mode = value;
+      options.crop.setAttribute('aria-pressed', value === 'crop' ? 'true' : 'false');
+      options.redact.setAttribute('aria-pressed', value === 'redact' ? 'true' : 'false');
+      options.highlight.setAttribute('aria-pressed', value === 'highlight' ? 'true' : 'false');
+      options.arrow.setAttribute('aria-pressed', value === 'arrow' ? 'true' : 'false');
+      status({
+        crop:'Drag around the part to keep.', redact:'Drag over private information to hide it.',
+        highlight:'Drag around the detail to highlight.', arrow:'Drag toward the detail you want to point out.',
+      }[value]);
+    }
+    function render() {
+      if (source && model) paint({source, model, canvas:options.canvas, maxDimension:1600});
+    }
+    function close() {
+      if (!source && !model) return;
+      options.dialog.hidden = true;
+      if (source && typeof source.close === 'function') source.close();
+      source = null;
+      model = null;
+      start = null;
+      (previousFocus || options.edit).focus();
+    }
+    async function open() {
+      const value = await options.controller.serialize();
+      const values = (Array.isArray(value) ? value : [value]).filter(Boolean);
+      selectedIndex = options.getActiveIndex();
+      const selected = values[selectedIndex];
+      if (!selected) return;
+      previousFocus = options.document.activeElement;
+      status('Opening screenshot editor…');
+      try {
+        const decode = options.decode || globalThis.createImageBitmap;
+        if (typeof decode !== 'function') throw new Error('decode');
+        source = await decode(attachmentBlob(selected));
+        model = createModel({width:source.width, height:source.height});
+        options.dialog.hidden = false;
+        render();
+        setMode('redact');
+        options.redact.focus();
+      } catch (_error) {
+        source = null;
+        status('This browser cannot edit the screenshot. Your original is unchanged.');
+      }
+    }
+    function point(event) {
+      const box = options.canvas.getBoundingClientRect();
+      const state = model.snapshot();
+      return {
+        x:state.crop.x + Math.round((event.clientX - box.left) * state.crop.width / box.width),
+        y:state.crop.y + Math.round((event.clientY - box.top) * state.crop.height / box.height),
+      };
+    }
+    options.canvas.addEventListener('pointerdown', event => {
+      if (!model) return;
+      start = point(event);
+      options.canvas.setPointerCapture?.(event.pointerId);
+    });
+    options.canvas.addEventListener('pointerup', event => {
+      if (!model || !start) return;
+      const end = point(event);
+      const dragStart = start;
+      const rectangle = {
+        x:Math.min(dragStart.x, end.x), y:Math.min(dragStart.y, end.y),
+        width:Math.abs(end.x - dragStart.x), height:Math.abs(end.y - dragStart.y),
+      };
+      start = null;
+      const tooSmall = mode === 'arrow' ? Math.hypot(end.x - dragStart.x, end.y - dragStart.y) < 8 :
+        rectangle.width < 3 || rectangle.height < 3;
+      if (tooSmall) {
+        status('Drag a larger area on the screenshot.');
+        return;
+      }
+      if (mode === 'crop') model.setCrop(rectangle);
+      else if (mode === 'redact') model.addRedaction(rectangle);
+      else if (mode === 'highlight') model.addHighlight(rectangle);
+      else model.addArrow({startX:dragStart.x, startY:dragStart.y, endX:end.x, endY:end.y});
+      render();
+      status({
+        crop:'Crop applied. Undo or reset if needed.', redact:'Private area hidden with an opaque redaction.',
+        highlight:'Highlight added.', arrow:'Arrow added.',
+      }[mode]);
+    });
+    options.edit.addEventListener('click', open);
+    options.crop.addEventListener('click', () => setMode('crop'));
+    options.redact.addEventListener('click', () => setMode('redact'));
+    options.highlight.addEventListener('click', () => setMode('highlight'));
+    options.arrow.addEventListener('click', () => setMode('arrow'));
+    options.undo.addEventListener('click', () => { if (model) { model.undo(); render(); status('Last edit undone.'); } });
+    options.reset.addEventListener('click', () => { if (model) { model.reset(); render(); status('Crop, redactions, and annotations reset.'); } });
+    options.cancel.addEventListener('click', close);
+    options.dialog.addEventListener('keydown', event => { if (event.key === 'Escape') { event.preventDefault(); close(); } });
+    options.apply.addEventListener('click', async () => {
+      if (!model || !source) return;
+      options.apply.disabled = true;
+      status('Applying flattened edit…');
+      try {
+        const current = await options.controller.serialize();
+        const values = Array.isArray(current) ? current : [current];
+        const selected = values[selectedIndex];
+        let derivative = await flatten({
+          source, model, canvas:options.exportCanvas, maxDimension:2048,
+          name:selected.filename, type:selected.contentType,
+        });
+        if (options.optimizeImage) derivative = await options.optimizeImage(derivative);
+        options.controller.replace(selectedIndex, derivative);
+        await options.onApplied(selectedIndex);
+        close();
+      } catch (error) {
+        status(error.message || 'The edited screenshot could not be applied. Your original is unchanged.');
+      } finally {
+        options.apply.disabled = false;
+      }
+    });
+    return { close, open };
+  }
+
+  return { createModel, flatten, mount, paint };
+});

frontend/issue-evidence-review.js

@@ -0,0 +1,185 @@
+(function(root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.issueEvidenceReview = api;
+})(typeof self !== 'undefined' ? self : this, function() {
+  'use strict';
+
+  const MAX_BYTES = 2 * 1024 * 1024;
+  const MAX_PIXELS = 12 * 1024 * 1024;
+  const MAX_DIMENSION = 8192;
+
+  function namedBlob(blob, name) {
+    if (typeof File === 'function') return new File([blob], name, { type: blob.type });
+    Object.defineProperty(blob, 'name', { value: name, configurable: true });
+    return blob;
+  }
+
+  async function optimizeImage(file, environment = {}) {
+    const decode = environment.createImageBitmap || globalThis.createImageBitmap;
+    const makeCanvas = environment.createCanvas || (() => document.createElement('canvas'));
+    if (typeof decode !== 'function') throw new Error('This browser cannot safely inspect the screenshot. Try cropping it and choose it again.');
+    let bitmap;
+    try {
+      bitmap = await decode(file);
+      const width = Number(bitmap.width);
+      const height = Number(bitmap.height);
+      if (!Number.isSafeInteger(width) || !Number.isSafeInteger(height) || width <= 0 || height <= 0) {
+        throw new Error('decode');
+      }
+      const pixelScale = Math.min(1, Math.sqrt(MAX_PIXELS / (width * height)));
+      const dimensionScale = Math.min(1, MAX_DIMENSION / Math.max(width, height));
+      const byteScale = file.size > MAX_BYTES ? Math.sqrt(MAX_BYTES / file.size) * 0.92 : 1;
+      let scale = Math.min(pixelScale, dimensionScale, byteScale);
+      const canvas = makeCanvas();
+      const context = canvas && canvas.getContext && canvas.getContext('2d');
+      if (!context) throw new Error('decode');
+      for (let attempt = 0; attempt < 10; attempt += 1) {
+        canvas.width = Math.max(1, Math.floor(width * scale));
+        canvas.height = Math.max(1, Math.floor(height * scale));
+        context.drawImage(bitmap, 0, 0, canvas.width, canvas.height);
+        const blob = await new Promise(resolve => canvas.toBlob(resolve, file.type, file.type === 'image/png' ? undefined : 0.86));
+        if (!blob) throw new Error('encode');
+        if (blob.size > 0 && blob.size <= MAX_BYTES) return namedBlob(blob, file.name);
+        scale *= 0.8;
+      }
+    } catch (_error) {
+      throw new Error('The screenshot could not be optimized. Try cropping it and choose it again.');
+    } finally {
+      if (bitmap && typeof bitmap.close === 'function') bitmap.close();
+    }
+    throw new Error('The screenshot could not be optimized below 2 MB. Try cropping it and choose it again.');
+  }
+
+  function create(options) {
+    const controller = options.controller;
+    const documentRef = options.document || document;
+    let activeIndex = 0;
+    let busy = false;
+    let previewUrl = '';
+    let thumbnailUrls = [];
+
+    function revoke(url) {
+      if (url && !url.startsWith('data:')) options.revokeObjectURL(url);
+    }
+
+    function attachmentUrl(attachment) {
+      return attachment?.blob ? options.createObjectURL(attachment.blob) :
+        'data:' + attachment.contentType + ';base64,' + attachment.data;
+    }
+
+    function count() {
+      const value = controller.state();
+      return Array.isArray(value) ? value.length : (value ? 1 : 0);
+    }
+
+    function setBusy(value) {
+      busy = Boolean(value);
+      options.earlier.disabled = busy || activeIndex <= 0;
+      options.later.disabled = busy || activeIndex >= count() - 1;
+      if (options.note) options.note.disabled = busy;
+      if (options.edit) options.edit.disabled = busy || !count();
+      Array.from(options.tray.children || []).forEach(button => { button.disabled = busy; });
+    }
+
+    function updateNote(values) {
+      if (!options.note) return;
+      options.note.value = controller.note(activeIndex);
+      options.note.disabled = busy;
+      if (options.noteLabel) {
+        options.noteLabel.textContent = 'Evidence note for screenshot ' + (activeIndex + 1) + ' of ' +
+          values.length + ' (optional)';
+      }
+    }
+
+    function update(values, optimized = false) {
+      if (!values.length) return;
+      activeIndex = Math.max(0, Math.min(activeIndex, values.length - 1));
+      revoke(previewUrl);
+      previewUrl = attachmentUrl(values[activeIndex]);
+      options.image.src = previewUrl;
+      const current = values[activeIndex];
+      const size = current.blob ? current.blob.size : Math.max(1, Math.floor(String(current.data || '').length * 3 / 4));
+      options.meta.textContent = 'Screenshot ' + (activeIndex + 1) + ' of ' + values.length + ' · ' +
+        current.filename + ' · ' + Math.ceil(size / 1024) + ' KB';
+      options.preview.hidden = false;
+      if (options.edit) options.edit.disabled = busy;
+      Array.from(options.tray.children || []).forEach((button, index) =>
+        button.setAttribute('aria-pressed', index === activeIndex ? 'true' : 'false'));
+      options.earlier.disabled = busy || activeIndex === 0;
+      options.later.disabled = busy || activeIndex === values.length - 1;
+      updateNote(values);
+      options.status.textContent = optimized ? 'Screenshots optimized and ready to file in this order.' :
+        values.length + ' screenshots ready to file in this order.';
+    }
+
+    function render(value, index = activeIndex, optimized = false) {
+      const values = (Array.isArray(value) ? value : [value]).filter(Boolean);
+      activeIndex = Math.max(0, Math.min(index, values.length - 1));
+      thumbnailUrls.forEach(revoke);
+      thumbnailUrls = [];
+      options.tray.replaceChildren(...values.map((item, itemIndex) => {
+        const button = documentRef.createElement('button');
+        button.type = 'button';
+        button.className = 'issue-evidence-thumbnail';
+        button.setAttribute('aria-label', 'Review screenshot ' + (itemIndex + 1) + ' of ' + values.length + ': ' + item.filename);
+        const thumbnail = documentRef.createElement('img');
+        thumbnail.alt = '';
+        thumbnail.src = attachmentUrl(item);
+        thumbnailUrls.push(thumbnail.src);
+        button.appendChild(thumbnail);
+        const position = documentRef.createElement('span');
+        position.textContent = String(itemIndex + 1);
+        button.appendChild(position);
+        button.addEventListener('click', () => { activeIndex = itemIndex; update(values); });
+        return button;
+      }));
+      options.tray.hidden = !values.length;
+      if (values.length) update(values, optimized);
+    }
+
+    function clear() {
+      revoke(previewUrl);
+      thumbnailUrls.forEach(revoke);
+      previewUrl = '';
+      thumbnailUrls = [];
+      activeIndex = 0;
+      options.tray.replaceChildren();
+      options.tray.hidden = true;
+      options.earlier.disabled = true;
+      options.later.disabled = true;
+      if (options.note) {
+        options.note.value = '';
+        options.note.disabled = true;
+      }
+      if (options.edit) options.edit.disabled = true;
+      if (options.noteLabel) options.noteLabel.textContent = 'Evidence note (optional)';
+    }
+
+    function afterRemoval(removedIndex, previousCount) {
+      activeIndex = Math.min(removedIndex, previousCount - 2);
+    }
+
+    function move(offset) {
+      const total = count();
+      const destination = activeIndex + offset;
+      if (destination < 0 || destination >= total) return Promise.resolve();
+      controller.move(activeIndex, destination);
+      activeIndex = destination;
+      return controller.serialize().then(value => {
+        render(value, activeIndex);
+        options.status.textContent = 'Screenshot moved to position ' + (activeIndex + 1) + ' of ' + total + '.';
+      });
+    }
+
+    options.earlier.addEventListener('click', () => move(-1));
+    options.later.addEventListener('click', () => move(1));
+    options.note?.addEventListener('input', event => {
+      controller.setNote(activeIndex, event.target.value);
+    });
+    clear();
+    return { activeIndex: () => activeIndex, afterRemoval, clear, render, setBusy };
+  }
+
+  return { create, optimizeImage, MAX_PIXELS };
+});

frontend/issue-filing-receipt.js

@@ -0,0 +1,95 @@
+(function (root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.createIssueFilingReceipt = api;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  function createIssueFilingReceipt({
+    root, heading, key, title, ownership, openLink, shareButton, filedButton,
+    relatedButton, fileAnotherButton, doneButton, status, navigator = {}, clipboard = navigator.clipboard,
+    onFileRelated = function () {},
+    onFileAnother = function () {},
+    onViewFiled = function () {},
+  }) {
+    let active = null;
+    let relatedPlan = null;
+    let restoreFocus = null;
+
+    function close() {
+      root.hidden = true;
+      active = null;
+      relatedPlan = null;
+      const target = restoreFocus;
+      restoreFocus = null;
+      target?.focus?.();
+    }
+
+    async function share() {
+      if (!active) return;
+      const payload = {
+        title: active.repository + '#' + active.number + ' · ' + active.title,
+        text: active.title,
+        url: active.url,
+      };
+      if (typeof navigator.share === 'function') {
+        try {
+          await navigator.share(payload);
+          return;
+        } catch (error) {
+          if (error?.name === 'AbortError') return;
+        }
+      }
+      if (typeof clipboard?.writeText !== 'function') {
+        status.textContent = 'Issue link is ready in Open in Gitea.';
+        return;
+      }
+      await clipboard.writeText(active.url);
+      status.textContent = 'Issue link copied.';
+    }
+
+    function show(issue, returnTarget, reusablePlan = null) {
+      active = issue;
+      relatedPlan = reusablePlan;
+      restoreFocus = returnTarget || null;
+      key.textContent = issue.repository + '#' + issue.number;
+      title.textContent = issue.title;
+      ownership.textContent = issue.assignees?.length
+        ? 'Assigned to @' + issue.assignees.join(', @') + '.'
+        : 'Created with no owner.';
+      openLink.href = issue.url;
+      status.textContent = '';
+      if (relatedButton) relatedButton.hidden = !relatedPlan;
+      root.hidden = false;
+      heading.focus();
+    }
+
+    shareButton.addEventListener('click', share);
+    filedButton?.addEventListener('click', () => {
+      if (!active) return;
+      const issue = active;
+      close();
+      onViewFiled(issue);
+    });
+    root.addEventListener('keydown', event => {
+      if (event.key !== 'Escape' || root.hidden) return;
+      event.preventDefault();
+      close();
+    });
+    doneButton.addEventListener('click', close);
+    relatedButton?.addEventListener('click', () => {
+      if (!relatedPlan) return;
+      const plan = relatedPlan;
+      close();
+      onFileRelated(plan);
+    });
+    fileAnotherButton.addEventListener('click', () => {
+      close();
+      onFileAnother();
+    });
+
+    return { show, close, share };
+  }
+
+  return createIssueFilingReceipt;
+});

frontend/issue-filing-review.js

@@ -0,0 +1,181 @@
+(function(root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.createIssueFilingReview = api;
+})(typeof self !== 'undefined' ? self : this, function() {
+  'use strict';
+
+  const INTENT_LABELS = {
+    'create-and-assign': 'Create & assign to me',
+    'create-and-start': 'Create & start',
+    'follow-up-and-next': 'Create follow-up & next',
+  };
+
+  function clone(value) {
+    if (typeof structuredClone === 'function') return structuredClone(value);
+    return JSON.parse(JSON.stringify(value));
+  }
+
+  function create(options) {
+    let reviewed = null;
+    let trigger = null;
+    let busy = false;
+    let evidenceItems = [];
+    const generatedUrls = new Set();
+
+    function releaseEvidenceUrls() {
+      generatedUrls.forEach(url => options.revokeObjectURL?.(url));
+      generatedUrls.clear();
+      evidenceItems = [];
+    }
+
+    function evidenceUrl(attachment) {
+      if (attachment?.blob) {
+        const url = options.createObjectURL(attachment.blob);
+        generatedUrls.add(url);
+        return url;
+      }
+      if (attachment?.data) {
+        return 'data:' + String(attachment.contentType || 'application/octet-stream') +
+          ';base64,' + String(attachment.data);
+      }
+      return '';
+    }
+
+    function selectEvidence(index) {
+      const selected = evidenceItems[index];
+      if (!selected) return;
+      evidenceItems.forEach((item, position) =>
+        item.button.setAttribute('aria-pressed', position === index ? 'true' : 'false'));
+      const filename = selected.attachment.filename || 'Screenshot';
+      options.evidencePreview.hidden = false;
+      options.evidenceImage.src = selected.url;
+      options.evidenceImage.alt = 'Evidence ' + (index + 1) + ' of ' + evidenceItems.length + ': ' + filename;
+      options.evidencePosition.textContent = 'Evidence ' + (index + 1) + ' of ' + evidenceItems.length;
+      options.evidenceFilename.textContent = filename;
+      options.evidenceNote.textContent = selected.attachment.note || 'No evidence note.';
+    }
+
+    function renderVisualEvidence(attachments) {
+      releaseEvidenceUrls();
+      options.evidenceEmpty.hidden = attachments.length > 0;
+      options.evidencePreview.hidden = true;
+      options.evidenceImage.src = '';
+      evidenceItems = attachments.map((attachment, index) => {
+        const url = evidenceUrl(attachment);
+        const item = options.document.createElement('li');
+        const button = options.document.createElement('button');
+        const image = options.document.createElement('img');
+        const filename = attachment.filename || 'Screenshot';
+        button.setAttribute('type', 'button');
+        button.className = 'issue-filing-evidence-selector';
+        button.setAttribute('aria-label', 'Preview evidence ' + (index + 1) + ' of ' + attachments.length + ': ' + filename);
+        button.setAttribute('aria-pressed', 'false');
+        image.src = url;
+        image.alt = '';
+        button.appendChild(image);
+        item.appendChild(button);
+        return { attachment, button, item, url };
+      });
+      evidenceItems.forEach((entry, index) =>
+        entry.button.addEventListener('click', () => selectEvidence(index)));
+      options.evidenceList.replaceChildren(...evidenceItems.map(entry => entry.item));
+      if (evidenceItems.length) selectEvidence(0);
+    }
+
+    function close() {
+      options.sheet.hidden = true;
+      const previousTrigger = trigger;
+      trigger = null;
+      reviewed = null;
+      busy = false;
+      releaseEvidenceUrls();
+      options.confirmButton.disabled = false;
+      previousTrigger?.focus();
+    }
+
+    function render(payload) {
+      const draft = payload.draft;
+      options.repository.textContent = draft.repository || 'No repository';
+      options.intent.textContent = draft.unassigned === true ? 'Create unassigned' :
+        (INTENT_LABELS[payload.intent] || payload.intent);
+      if (options.issueType) options.issueType.textContent = draft.templateName || 'Blank issue';
+      options.title.textContent = draft.title;
+      options.body.textContent = draft.body || 'No note provided.';
+      const labels = (draft.labels || []).map(label => typeof label === 'string' ? label : label.name);
+      const milestone = draft.milestone?.title || draft.milestoneTitle || 'No milestone';
+      const dueDate = draft.dueDate || draft.due_date || 'No due date';
+      const owner = draft.unassigned === true ? 'Owner: No owner' : (draft.assignee
+        ? 'Owner: ' + (draft.assigneeName || draft.assignee) + ' (@' + draft.assignee + ')'
+        : 'Assigned to you');
+      const planning = [];
+      if (Number.isInteger(draft.estimateMinutes)) {
+        planning.push('Estimate: ' + draft.estimateMinutes + ' min');
+        const projected = draft.todayCapacity?.projectedMinutes;
+        if (Number.isInteger(projected)) planning.push(projected >= 0
+          ? 'Today after start: ' + projected + ' min free'
+          : 'Today after start: ' + Math.abs(projected) + ' min over capacity');
+      }
+      options.metadata.textContent = [
+        labels.length ? 'Labels: ' + labels.join(', ') : 'No labels',
+        'Milestone: ' + milestone,
+        'Due: ' + dueDate,
+        owner,
+        ...planning,
+      ].join(' · ');
+      if (options.blockerList) {
+        options.blockerList.replaceChildren(...(draft.blockers || []).map(blocker => {
+          const item = options.document.createElement('li');
+          item.textContent = blocker.repository + ' #' + blocker.number + ' — ' + blocker.title;
+          return item;
+        }));
+      }
+      const attachments = (draft.attachments || (draft.attachment ? [draft.attachment] : [])).filter(Boolean);
+      if (options.evidencePreview) {
+        renderVisualEvidence(attachments);
+        return;
+      }
+      options.evidenceList.replaceChildren(...attachments.map((attachment, index) => {
+        const item = options.document.createElement('li');
+        item.textContent = (index + 1) + '. ' + (attachment.filename || 'Screenshot') +
+          (attachment.note ? ' — ' + attachment.note : '');
+        return item;
+      }));
+    }
+
+    function open(payload, opener) {
+      reviewed = clone(payload);
+      trigger = opener || null;
+      busy = false;
+      options.confirmButton.disabled = false;
+      render(reviewed);
+      options.sheet.hidden = false;
+      options.backButton.focus();
+    }
+
+    options.backButton.addEventListener('click', close);
+    options.confirmButton.addEventListener('click', async () => {
+      if (!reviewed || busy) return;
+      busy = true;
+      options.confirmButton.disabled = true;
+      try {
+        await options.onConfirm(reviewed);
+        close();
+      } catch (error) {
+        busy = false;
+        options.confirmButton.disabled = false;
+        if (options.status) options.status.textContent = error.message;
+        options.confirmButton.focus();
+      }
+    });
+    options.document.addEventListener('keydown', event => {
+      if (!options.sheet.hidden && event.key === 'Escape' && !busy) {
+        event.preventDefault();
+        close();
+      }
+    });
+    return { close, open };
+  }
+
+  return create;
+});

frontend/issue-outbox.js

@@ -11,10 +11,80 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     const blob = value?.blob;
     const data = String(value?.data || '');
     if (!filename || !['image/png', 'image/jpeg', 'image/webp'].includes(contentType)) return undefined;
-    if (blob) return { filename, contentType, blob };
-    if (!data && value?.stored === true) return { filename, contentType, stored: true };
+    const note = String(value?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    const noteValue = note ? { note } : {};
+    if (blob) return { filename, contentType, blob, ...noteValue };
+    if (!data && value?.stored === true) return { filename, contentType, stored: true, ...noteValue };
     if (!data) return undefined;
-    return { filename, contentType, data };
+    return { filename, contentType, data, ...noteValue };
+  }
+
+  function captureAttachments(values) {
+    if (!Array.isArray(values)) return undefined;
+    if (values.length > 5) throw new Error('You can attach up to 5 screenshots.');
+    const attachments = values.map(captureAttachment);
+    if (attachments.some(value => !value)) {
+      throw new Error('Some screenshots are unavailable. Choose them again before queueing.');
+    }
+    return attachments.length ? attachments : undefined;
+  }
+
+  function captureBlockers(values) {
+    if (!Array.isArray(values)) return undefined;
+    const seen = new Set();
+    const blockers = [];
+    for (const value of values) {
+      const repository = String(value?.repository || '').trim();
+      const number = Number(value?.number);
+      const key = repository + '#' + number;
+      if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository) ||
+          !Number.isInteger(number) || number < 1 || seen.has(key)) continue;
+      seen.add(key);
+      blockers.push({
+        repository, number,
+        title: String(value?.title || '').replace(/\s+/g, ' ').trim().slice(0, 255),
+      });
+      if (blockers.length === 5) break;
+    }
+    return blockers.length ? blockers : undefined;
+  }
+
+  function captureEstimate(value) {
+    const estimate = Number(value);
+    return Number.isInteger(estimate) && estimate >= 5 && estimate <= 1440 ? estimate : undefined;
+  }
+
+  function captureRelatedDraft(value) {
+    const repository = String(value?.repository || '');
+    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository)) return undefined;
+    const plan = {
+      repository, title:'', body:String(value?.body || '').slice(0, 9000),
+      labelIds:Array.from(new Set((Array.isArray(value?.labelIds) ? value.labelIds : [])
+        .filter(id => Number.isInteger(id) && id > 0))).slice(0, 20),
+    };
+    const milestoneId = Number(value?.milestoneId);
+    if (Number.isInteger(milestoneId) && milestoneId > 0) plan.milestoneId = milestoneId;
+    if (/^\d{4}-\d{2}-\d{2}$/.test(String(value?.dueDate || ''))) plan.dueDate = String(value.dueDate);
+    if (value?.unassigned === true) plan.unassigned = true;
+    else if (/^[A-Za-z0-9_.-]+$/.test(String(value?.assignee || ''))) {
+      plan.assignee = String(value.assignee);
+      plan.assigneeName = String(value.assigneeName || value.assignee).replace(/\s+/g, ' ').trim().slice(0, 255);
+    }
+    const templateId = String(value?.templateId || '').slice(0, 80);
+    if (templateId) {
+      plan.templateId = templateId;
+      plan.templateName = String(value?.templateName || 'Issue template').trim().slice(0, 80);
+      plan.capturedBody = '';
+    }
+    const promotion = value?.checklistPromotion;
+    if (promotion?.repository && promotion?.number && promotion?.url && promotion?.updatedAt) {
+      plan.checklistPromotion = {
+        repository:String(promotion.repository), number:Number(promotion.number), url:String(promotion.url),
+        title:String(promotion.title || ''), body:String(promotion.body || '').slice(0, 10000),
+        updatedAt:String(promotion.updatedAt), taskIndex:Number(promotion.taskIndex),
+      };
+    }
+    return plan;
   }
 
   function read() {
@@ -51,11 +121,28 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
       status: 'queued',
       queuedAt: Number(now()),
     };
+    const assignee = /^[A-Za-z0-9_.-]+$/.test(String(draft?.assignee || ''))
+      ? String(draft.assignee) : '';
+    if (assignee) {
+      item.assignee = assignee;
+      item.assigneeName = String(draft?.assigneeName || assignee).replace(/\s+/g, ' ').trim().slice(0, 255);
+    }
+    if (draft?.unassigned === true) item.unassigned = true;
     const sourceCaptureId = String(draft?.sourceCaptureId || '').trim().slice(0, 128);
     if (sourceCaptureId) item.sourceCaptureId = sourceCaptureId;
-    if (draft?.completionIntent === 'create-and-start') item.completionIntent = 'create-and-start';
+    if (draft?.completionIntent === 'create-and-start' && !assignee && !item.unassigned) {
+      item.completionIntent = 'create-and-start';
+      item.estimateMinutes = captureEstimate(draft?.estimateMinutes);
+    }
     const attachment = captureAttachment(draft?.attachment);
     if (attachment) item.attachment = attachment;
+    const attachments = captureAttachments(draft?.attachments);
+    if (attachments) item.attachments = attachments;
+    const blockers = captureBlockers(draft?.blockers);
+    if (blockers) item.blockers = blockers;
+    const relatedDraft = captureRelatedDraft(draft?.relatedDraft);
+    if (relatedDraft) item.relatedDraft = relatedDraft;
+
     item.operationId = item.id;
     if (Number.isInteger(Number(draft?.milestoneId)) && Number(draft.milestoneId) > 0) {
       item.milestoneId = Number(draft.milestoneId);
@@ -65,14 +152,21 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
   }
 
   function localIndexItem(item) {
-    if (!item?.attachment?.data && !item?.attachment?.blob) return item;
+    const hasAttachmentBytes = item?.attachment?.data || item?.attachment?.blob;
+    const hasBundleBytes = Array.isArray(item?.attachments) &&
+      item.attachments.some(value => value?.data || value?.blob);
+    if (!hasAttachmentBytes && !hasBundleBytes) return item;
     return {
       ...item,
-      attachment: {
+      ...(hasAttachmentBytes ? {attachment: {
         filename: item.attachment.filename,
         contentType: item.attachment.contentType,
         stored: true,
-      },
+      }} : {}),
+      ...(Array.isArray(item.attachments) ? {attachments:item.attachments.map(value => ({
+        filename:value.filename, contentType:value.contentType, stored:true,
+        ...(value.note ? {note:value.note} : {}),
+      }))} : {}),
     };
   }
 
@@ -120,50 +214,90 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
   async function hydrateForEdit(id) {
     const item = read().find(candidate => candidate.id === id);
     if (!item) return null;
-    if (!item.attachment?.stored || item.attachment.data || item.attachment.blob) return { ...item };
+    const storedBundle = Array.isArray(item.attachments) && item.attachments.some(value => value?.stored);
+    const storedAttachment = item.attachment?.stored && !item.attachment.data && !item.attachment.blob;
+    if (!storedAttachment && !storedBundle) return { ...item };
     if (!backgroundSync?.get) {
       throw new Error('The saved screenshot is unavailable. Retry before editing this issue.');
     }
     const durable = await backgroundSync.get(id);
     const attachment = captureAttachment(durable?.attachment);
-    if ((!attachment?.data && !attachment?.blob) || durable?.operationId !== item.operationId) {
+    const attachments = captureAttachments(durable?.attachments);
+    if (durable?.operationId !== item.operationId ||
+        (storedAttachment && (!attachment?.data && !attachment?.blob)) ||
+        (storedBundle && (!attachments || attachments.length !== item.attachments.length))) {
       throw new Error('The saved screenshot is unavailable. Retry before editing this issue.');
     }
-    return { ...item, attachment };
+    return {
+      ...item,
+      ...(attachment ? {attachment} : {}),
+      ...(attachments ? {attachments} : {}),
+    };
   }
 
   function prepareUpdate(id, draft) {
     let updated = null;
     const items = read().map(item => {
       if (item.id !== id) return item;
-      const nextRepository = String(draft?.repository || '');
-      const nextTitle = String(draft?.title || '');
-      const nextBody = String(draft?.body || '');
-      const nextLabelIds = Array.isArray(draft?.labelIds) ? draft.labelIds.filter(Number.isInteger).slice(0, 20) : [];
-      const nextMilestoneId = Number.isInteger(Number(draft?.milestoneId)) && Number(draft.milestoneId) > 0
+      const repository = String(draft?.repository || '');
+      const title = String(draft?.title || '');
+      const body = String(draft?.body || '');
+      const labelIds = Array.isArray(draft?.labelIds) ? draft.labelIds.filter(Number.isInteger).slice(0, 20) : [];
+      const unassigned = draft?.unassigned === true;
+      const assignee = !unassigned && /^[A-Za-z0-9_.-]+$/.test(String(draft?.assignee || ''))
+        ? String(draft.assignee) : undefined;
+      const assigneeName = assignee
+        ? String(draft?.assigneeName || assignee).replace(/\s+/g, ' ').trim().slice(0, 255)
+        : undefined;
+      const milestoneId = Number.isInteger(Number(draft?.milestoneId)) && Number(draft.milestoneId) > 0
         ? Number(draft.milestoneId) : undefined;
-      const nextDueDate = /^\d{4}-\d{2}-\d{2}$/.test(String(draft?.dueDate || ''))
+      const dueDate = /^\d{4}-\d{2}-\d{2}$/.test(String(draft?.dueDate || ''))
         ? String(draft.dueDate) : undefined;
-      const nextAttachment = captureAttachment(draft?.attachment);
-      const attachmentChanged = JSON.stringify(item.attachment || null) !== JSON.stringify(nextAttachment || null);
-      const changed = item.repository !== nextRepository || item.title !== nextTitle || item.body !== nextBody
-        || JSON.stringify(item.labelIds || []) !== JSON.stringify(nextLabelIds)
-        || item.milestoneId !== nextMilestoneId || item.dueDate !== nextDueDate
-        || attachmentChanged;
+      const attachment = captureAttachment(draft?.attachment);
+      const attachments = captureAttachments(draft?.attachments);
+      const blockers = captureBlockers(draft?.blockers);
+      const relatedDraft = captureRelatedDraft(draft?.relatedDraft);
+      const attachmentChanged = JSON.stringify(item.attachment || null) !== JSON.stringify(attachment || null) ||
+        JSON.stringify(item.attachments || null) !== JSON.stringify(attachments || null);
+      const changed = item.repository !== repository || item.title !== title || item.body !== body
+        || JSON.stringify(item.labelIds || []) !== JSON.stringify(labelIds)
+        || Boolean(item.unassigned) !== unassigned
+        || item.assignee !== assignee || item.assigneeName !== assigneeName
+        || item.milestoneId !== milestoneId || item.dueDate !== dueDate
+        || item.estimateMinutes !== captureEstimate(draft?.estimateMinutes)
+        || attachmentChanged || JSON.stringify(item.blockers || null) !== JSON.stringify(blockers || null)
+        || JSON.stringify(item.relatedDraft || null) !== JSON.stringify(relatedDraft || null);
       updated = {
         ...item,
-        repository: nextRepository, title: nextTitle,
-        body: nextBody, labelIds: nextLabelIds,
-        milestoneId: nextMilestoneId, dueDate: nextDueDate, attachment: nextAttachment,
+        repository, title, body, labelIds,
+        unassigned: unassigned || undefined,
+        assignee, assigneeName, milestoneId, dueDate,
+        attachment, attachments, blockers, relatedDraft,
         operationId: changed ? String(operationId()).slice(0, 128) : item.operationId,
         status: 'queued',
       };
-      if (draft?.completionIntent === 'create-and-start') updated.completionIntent = 'create-and-start';
-      else delete updated.completionIntent;
-      if (nextMilestoneId === undefined) delete updated.milestoneId;
-      if (nextDueDate === undefined) delete updated.dueDate;
-      if (nextAttachment === undefined) delete updated.attachment;
-      if (attachmentChanged) delete updated.attachmentMarkdown;
+      if (draft?.completionIntent === 'create-and-start' && !assignee && !unassigned) {
+        updated.completionIntent = 'create-and-start';
+        updated.estimateMinutes = captureEstimate(draft?.estimateMinutes);
+      } else {
+        delete updated.completionIntent;
+        delete updated.estimateMinutes;
+      }
+      if (assignee === undefined) {
+        delete updated.assignee;
+        delete updated.assigneeName;
+      }
+      if (!unassigned) delete updated.unassigned;
+      if (milestoneId === undefined) delete updated.milestoneId;
+      if (dueDate === undefined) delete updated.dueDate;
+      if (attachment === undefined) delete updated.attachment;
+      if (attachments === undefined) delete updated.attachments;
+      if (blockers === undefined) delete updated.blockers;
+      if (relatedDraft === undefined) delete updated.relatedDraft;
+      if (attachmentChanged) {
+        delete updated.attachmentMarkdown;
+        delete updated.attachmentMarkdowns;
+      }
       delete updated.error;
       delete updated.deliveryState;
       return updated;
@@ -213,6 +347,13 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     return String(operationId || '').slice(0, 128 - suffix.length) + suffix;
   }
 
+  function evidenceMarkdown(attachment, markdown, index) {
+    const note = String(attachment?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    if (!note) return markdown;
+    const escaped = note.replace(/([\\`*_[\]{}()<>#+\-.!|])/g, '\\$1');
+    return '**Screenshot ' + (index + 1) + ' — ' + escaped + '**\n\n' + markdown;
+  }
+
   function attachmentMultipart(attachment) {
     let blob = attachment?.blob;
     if (!blob && attachment?.data) {
@@ -237,34 +378,68 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
         },
         body: JSON.stringify({
           title: item.title, body: item.body, label_ids: item.labelIds,
+          ...(item.unassigned ? { unassigned: true } : {}),
+          ...(item.assignee ? { assignee: item.assignee } : {}),
           ...(item.milestoneId ? { milestone_id: item.milestoneId } : {}),
           ...(item.dueDate ? { due_date: item.dueDate + 'T23:59:59Z' } : {}),
         }),
       });
-      if (item.attachment) persistDeliveryStage(item.id, { deliveredIssue: issue });
+      if (item.attachment || item.attachments || item.blockers?.length) {
+        persistDeliveryStage(item.id, { deliveredIssue: issue });
+      }
     }
-    if (!item.attachment) return issue;
-    let markdown = item.attachmentMarkdown;
-    if (!markdown) {
+    const blockers = Array.isArray(item.blockers) ? item.blockers : [];
+    let deliveredBlockers = Math.min(Number(item.deliveredBlockers) || 0, blockers.length);
+    for (let index = deliveredBlockers; index < blockers.length; index += 1) {
+      const blocker = blockers[index];
+      await fetchJson(
+        'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(issue.number) + '/blockers',
+        {
+          method: 'PATCH',
+          headers: {
+            Accept: 'application/json', 'Content-Type': 'application/json',
+            'Idempotency-Key': stageOperationId(item.operationId, 'blocker-' + index),
+          },
+          body: JSON.stringify({repository:blocker.repository, number:blocker.number, present:true}),
+        },
+      );
+      deliveredBlockers = index + 1;
+      persistDeliveryStage(item.id, { deliveredIssue:issue, deliveredBlockers });
+    }
+    const attachments = Array.isArray(item.attachments) ? item.attachments :
+      (item.attachment ? [item.attachment] : []);
+    if (!attachments.length) return issue;
+    const markdowns = Array.isArray(item.attachmentMarkdowns)
+      ? item.attachmentMarkdowns.slice(0, attachments.length)
+      : (item.attachmentMarkdown ? [item.attachmentMarkdown] : []);
+    for (let index = markdowns.length; index < attachments.length; index += 1) {
       const uploaded = await fetchJson(
         'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(issue.number) + '/attachments',
         {
           method: 'POST',
           headers: {
             Accept: 'application/json',
-            'Idempotency-Key': stageOperationId(item.operationId, 'attachment'),
+            'Idempotency-Key': stageOperationId(
+              item.operationId, attachments.length === 1 ? 'attachment' : 'attachment-' + index,
+            ),
           },
-          body: attachmentMultipart(item.attachment),
+          body: attachmentMultipart(attachments[index]),
         },
       );
-      markdown = String(uploaded?.markdown || '');
+      const markdown = String(uploaded?.markdown || '');
       if (!markdown) {
         const error = new Error('The server did not confirm the screenshot upload.');
         error.status = 422;
         throw error;
       }
-      persistDeliveryStage(item.id, { deliveredIssue: issue, attachmentMarkdown: markdown });
+      markdowns.push(markdown);
+      persistDeliveryStage(item.id, {
+        deliveredIssue: issue, attachmentMarkdowns:markdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      });
     }
+    const markdown = markdowns.map((value, index) =>
+      evidenceMarkdown(attachments[index], value, index)).join('\n\n');
     await fetchJson(
       'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(issue.number) + '/comments',
       {
@@ -329,6 +504,8 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
   async function flushQueue(currentLogin) {
     const confirmed = [];
     const completions = [];
+    const filings = [];
+
     let blocked = 0;
     currentLogin = String(currentLogin || '').trim();
     for (const item of read()) {
@@ -337,17 +514,20 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
       const result = await sendItem(item, currentLogin);
       if (result.issue) {
         confirmed.push(result.issue);
+        if (result.item?.relatedDraft) filings.push({issue:result.issue, relatedDraft:result.item.relatedDraft});
+
         if (result.item?.completionIntent) completions.push({
           id: result.item.id,
           intent: result.item.completionIntent,
           ownerLogin: result.item.ownerLogin,
           operationId: result.item.operationId,
+          estimateMinutes: result.item.estimateMinutes,
           issue: result.issue,
         });
       }
       if (result.transient) break;
     }
-    return { confirmed, completions, remaining: read(), blocked };
+    return { confirmed, completions, filings, remaining: read(), blocked };
   }
 
   async function flush(currentLogin) {
@@ -376,11 +556,14 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     const result = await sendItem(queued, currentLogin);
     return {
       confirmed: result.issue ? [result.issue] : [],
+      filings: result.issue && result.item?.relatedDraft ? [{issue:result.issue, relatedDraft:result.item.relatedDraft}] : [],
+
       completions: result.issue && result.item?.completionIntent ? [{
         id: result.item.id,
         intent: result.item.completionIntent,
         ownerLogin: result.item.ownerLogin,
         operationId: result.item.operationId,
+        estimateMinutes: result.item.estimateMinutes,
         issue: result.issue,
       }] : [],
       remaining: read(), blocked: 0,
@@ -425,6 +608,7 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
         intent: item.completionIntent,
         ownerLogin: item.ownerLogin,
         operationId: item.operationId,
+        estimateMinutes: item.estimateMinutes,
         issue: item.deliveredIssue,
       }));
   }

frontend/issue-sheet.js

@@ -18,11 +18,146 @@ function createPlanningLoader({ loadLabels, loadMilestones }) {
   };
 }
 
-function createIssueSheet({ fetchJson, storage, createConversationPager = globalThis.createConversationPager, createOperationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random() }) {
+function escapeOptionHtml(value) {
+  return String(value || '').replace(/[&<>"']/g, character => ({
+    '&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;',
+  })[character]);
+}
+
+function appendChecklistTask(body, label) {
+  const normalized = String(label || '').trim().replace(/\s+/g, ' ');
+  if (!normalized) throw new Error('Enter a checklist step.');
+  const key = normalized.toLocaleLowerCase();
+  const duplicate = String(body || '').split('\n').some(line => {
+    const match = line.match(/^\s*[-*+]\s+\[[ xX]\]\s+(.*)$/);
+    return match && match[1].trim().replace(/\s+/g, ' ').toLocaleLowerCase() === key;
+  });
+  if (duplicate) throw new Error('That checklist step already exists.');
+  const prefix = body ? String(body).replace(/\s+$/, '') + '\n' : '';
+  return prefix + '- [ ] ' + normalized;
+}
+
+function manageChecklistTask(raw, targetIndex, operation = {}) {
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^([-*+]\s+\[[ xX]\]\s+)(.*)$/);
+    if (!task) continue;
+    if (taskIndex === Number(targetIndex)) {
+      if (operation.action === 'rename') {
+        const label = String(operation.label || '').trim().replace(/\s+/g, ' ');
+        if (!label) throw new Error('Enter a checklist step.');
+        const key = label.toLocaleLowerCase();
+        let inFence = false;
+        const duplicate = parts.some((candidate, candidateIndex) => {
+          if (candidateIndex % 2) return false;
+          if (/^\s*```/.test(candidate)) { inFence = !inFence; return false; }
+          if (inFence || candidateIndex === index) return false;
+          const match = candidate.match(/^[-*+]\s+\[[ xX]\]\s+(.*)$/);
+          return match && match[1].trim().replace(/\s+/g, ' ').toLocaleLowerCase() === key;
+        });
+        if (duplicate) throw new Error('That checklist step already exists.');
+        parts[index] = task[1] + label;
+      } else if (operation.action === 'remove') {
+        if (index + 1 < parts.length) parts.splice(index, 2);
+        else if (index > 0) parts.splice(index - 1, 2);
+      } else if (operation.action === 'move-earlier' && index >= 2 && /^(\s*[-*+]\s+\[[ xX]\]\s+)/.test(parts[index - 2])) {
+        [parts[index - 2], parts[index]] = [parts[index], parts[index - 2]];
+      } else if (operation.action === 'move-later' && index + 2 < parts.length && /^(\s*[-*+]\s+\[[ xX]\]\s+)/.test(parts[index + 2])) {
+        [parts[index], parts[index + 2]] = [parts[index + 2], parts[index]];
+      }
+      return parts.join('');
+    }
+    taskIndex += 1;
+  }
+  return parts.join('');
+}
+
+function checklistIsComplete(raw) {
+  const lines = String(raw || '').split(/(?:\r\n|\n|\r)/);
+  let fenced = false;
+  let found = false;
+  for (const line of lines) {
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^\s*[-*+]\s+\[([ xX])\]\s+/);
+    if (!task) continue;
+    found = true;
+    if (task[1].toLocaleLowerCase() !== 'x') return false;
+  }
+  return found;
+}
+
+function completeDelegatedParentTask(raw, childUrl) {
+  const url = String(childUrl || '');
+  if (!/^https:\/\/[^\s)]+$/.test(url)) throw new Error('The delegated issue link is unavailable.');
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^(\s*[-*+]\s+\[)([ xX])(\]\s+.*)$/);
+    if (!task) continue;
+    const linkedTask = task[3].match(/^\]\s+\[[^\]]+\]\((https:\/\/[^\s)]+)\)\s*$/);
+    if (linkedTask?.[1] === url) {
+      const alreadyCompleted = task[2].toLocaleLowerCase() === 'x';
+      if (!alreadyCompleted) parts[index] = task[1] + 'x' + task[3];
+      const body = parts.join('');
+      return { body, taskIndex, alreadyCompleted, checklistComplete:checklistIsComplete(body) };
+    }
+    taskIndex += 1;
+  }
+  throw new Error('The parent checklist no longer links to this delegated issue.');
+}
+
+async function finishDelegatedParentReview({ parentItem, parentDetail, childUrl, updateContent, closeParent }) {
+  const completion = completeDelegatedParentTask(parentDetail?.body, childUrl);
+  if (!completion.alreadyCompleted) {
+    await updateContent(parentItem, {
+      title:parentDetail.title,
+      body:completion.body,
+      expectedUpdatedAt:parentDetail.updated_at,
+    });
+  }
+  if (completion.checklistComplete) await closeParent(parentItem);
+  return { updated:!completion.alreadyCompleted, closed:completion.checklistComplete };
+}
+
+function delegatedParentReference(childDetail) {
+  const body = String(childDetail?.body || '');
+  const match = body.match(/(?:^|\n)Related to \[([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)#([1-9]\d*)\]\((https:\/\/[^\s)]+)\)\.(?:\r?$|\s)/m);
+  if (!match) return null;
+  return { repository:match[1], number:Number(match[2]), url:match[3] };
+}
+
+function resolveDelegatedParent(child, childDetail, parentDetail) {
+  const parent = delegatedParentReference(childDetail);
+  if (!parent) return null;
+  try {
+    const completion = completeDelegatedParentTask(parentDetail?.body, child?.url);
+    return {
+      parent,
+      taskIndex:completion.taskIndex,
+      alreadyCompleted:completion.alreadyCompleted,
+      checklistComplete:completion.checklistComplete,
+    };
+  } catch (_error) {
+    return null;
+  }
+}
+
+function createIssueSheet({ fetchJson, storage, renderMarkdown = globalThis.renderMarkdown, toggleTask = renderMarkdown?.toggleTask, manageTask: manageTaskTransform = manageChecklistTask, relatedTaskDraft: relatedTaskDraftTransform = (...args) => globalThis.createIssueCapture?.relatedChecklistDraft(...args), linkRelatedTask: linkRelatedTaskTransform = (...args) => globalThis.createIssueCapture?.linkChecklistTask(...args), enqueueDurably, createConversationPager = globalThis.createConversationPager, createOperationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random() }) {
   let commentRequest = null;
   let closeRequest = null;
   let releaseRequest = null;
   let handoffRequest = null;
+  let reassignRequest = null;
   let labelRequest = null;
   let editRequest = null;
   let dueDateRequest = null;
@@ -38,16 +173,25 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
   const milestoneDraftKey = item => 'stackchain.issue-milestone.v1:' + item.repository + '#' + item.number;
 
   return {
+    delegatedParentReference,
+    resolveDelegatedParent,
+    completeDelegatedParentTask,
+    readOnly(item) {
+      return Boolean(item?.is_completed || (item?.is_filed && !item?.is_assigned));
+    },
     load(item) {
-      return fetchJson(issuePath(item) + '/detail', {
+      const access = this.readOnly(item) ? '?access=filed' : '';
+      return fetchJson(issuePath(item) + '/detail' + access, {
         headers: { Accept: 'application/json' },
       });
     },
     conversation(item, initialPage) {
+      const access = this.readOnly(item) ? '&access=filed' : '';
       const pager = createConversationPager({
-        loadPage: page => fetchJson(issuePath(item) + '/comments?page=' + encodeURIComponent(page) + '&limit=20', {
-          headers: { Accept: 'application/json' },
-        }),
+        loadPage: page => fetchJson(
+          issuePath(item) + '/comments?page=' + encodeURIComponent(page) + '&limit=20' + access,
+          { headers: { Accept: 'application/json' } },
+        ),
       });
       pager.reset(initialPage || { comments: [], page: 1, older_page: null, total: 0 });
       return pager;
@@ -64,7 +208,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       });
     },
     loadHandoffCandidates(item) {
-      return fetchJson(issuePath(item) + '/handoff-candidates', {
+      const access = item?.is_filed ? '?access=filed' : '';
+      return fetchJson(issuePath(item) + '/handoff-candidates' + access, {
         headers: { Accept: 'application/json' },
       });
     },
@@ -111,7 +256,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
     updateContent(item, draft) {
       if (editRequest) return editRequest;
       this.saveEditDraft(item, draft);
-      editRequest = fetchJson(issuePath(item) + '/content', {
+      const access = this.readOnly(item) ? '?access=filed' : '';
+      editRequest = fetchJson(issuePath(item) + '/content' + access, {
         method: 'PATCH',
         headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
         body: JSON.stringify({
@@ -129,6 +275,218 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       }).finally(() => { editRequest = null; });
       return editRequest;
     },
+    toggleTask(item, detail, taskIndex, checked) {
+      if (typeof toggleTask !== 'function') return Promise.reject(new Error('Checklist updates are unavailable.'));
+      return this.updateContent(item, {
+        title: detail.title,
+        body: toggleTask(detail.body, taskIndex, checked),
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    manageTask(item, detail, taskIndex, operation) {
+      if (typeof manageTaskTransform !== 'function') return Promise.reject(new Error('Checklist management is unavailable.'));
+      return this.updateContent(item, {
+        title: detail.title,
+        body: manageTaskTransform(detail.body, taskIndex, operation),
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    relatedTaskDraft(item, _detail, _taskIndex, label) {
+      if (typeof relatedTaskDraftTransform !== 'function') throw new Error('Related issue capture is unavailable.');
+      return relatedTaskDraftTransform(item, label);
+    },
+    linkRelatedTask(item, detail, taskIndex, child) {
+      if (typeof linkRelatedTaskTransform !== 'function') return Promise.reject(new Error('Related issue linking is unavailable.'));
+      return this.updateContent(item, {
+        title:detail.title,
+        body:linkRelatedTaskTransform(detail.body, taskIndex, child),
+        expectedUpdatedAt:detail.updated_at,
+      });
+    },
+    async addTask(item, detail, label) {
+      const body = appendChecklistTask(detail.body, label);
+      return this.updateContent(item, {
+        title: detail.title,
+        body,
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    async queueAddedTask(item, detail, label) {
+      if (typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist updates are unavailable.');
+      }
+      const body = appendChecklistTask(detail.body, label);
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    async queueManagedTask(item, detail, taskIndex, operation) {
+      if (typeof manageTaskTransform !== 'function' || typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist management is unavailable.');
+      }
+      const body = manageTaskTransform(detail.body, taskIndex, operation);
+      const checklistOperation = {
+        action:String(operation?.action || ''), index:Number(taskIndex),
+        ...(operation?.label ? { label:String(operation.label) } : {}),
+      };
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at, checklistOperation });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    async queueTask(item, detail, taskIndex, checked) {
+      if (typeof toggleTask !== 'function' || typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist updates are unavailable.');
+      }
+      const body = toggleTask(detail.body, taskIndex, checked);
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    pendingTask(item, detail, items, ownerLogin) {
+      const pending = [...(items || [])].reverse().find(candidate => candidate?.kind === 'issue-content' &&
+        candidate.repository === item?.repository && Number(candidate.number) === Number(item?.number) &&
+        candidate.ownerLogin === ownerLogin && ['queued', 'sending', 'attention'].includes(candidate.status));
+      if (!pending) return { ...detail };
+      return { ...detail, title:pending.title, body:pending.body, checklist_pending:true };
+    },
+    bindTaskToggles({ container, status, retry, current, confirmed, restore }) {
+      container.addEventListener('change', async event => {
+        const control = event.target.closest('input.task-list-toggle');
+        const state = current();
+        if (!control || !state?.item || !state?.detail?.updated_at) return;
+        container.classList.add('checklist-pending');
+        container.querySelectorAll('input.task-list-toggle').forEach(input => { input.disabled = true; });
+        status.textContent = 'Updating checklist…';
+        try {
+          const result = await (state.offline ? this.queueTask : this.toggleTask).call(
+            this, state.item, state.detail, Number(control.dataset.taskIndex), control.checked
+          );
+          const latest = current();
+          if (latest?.item?.repository === state.item.repository && latest.item.number === state.item.number) {
+            confirmed(state.item, state.detail, state.offline ? result.detail : result);
+            if (state.offline) status.textContent = 'Checklist queued. Pending sync.';
+            else status.textContent = 'Checklist updated.';
+          }
+        } catch (error) {
+          const latest = current();
+          if (latest?.item?.repository === state.item.repository && latest.item.number === state.item.number) {
+            restore(state.detail);
+            status.textContent = error.message + ' Checklist was not changed; reload latest or use Edit issue.';
+            retry.hidden = false;
+          }
+        }
+      });
+    },
+    bindTaskManagement({ container, editor, label, earlier, later, fileRelated, onFileRelated, remove, cancel, status, sheetStatus, retry, current, confirmed }) {
+      let taskIndex = null;
+      let trigger = null;
+      const reset = (returnFocus = false) => {
+        editor.hidden = true;
+        status.textContent = '';
+        if (returnFocus && trigger?.isConnected) trigger.focus();
+        taskIndex = null;
+        trigger = null;
+      };
+      container.addEventListener('click', event => {
+        const control = event.target.closest('button.task-list-manage');
+        if (!control || !current()?.detail?.updated_at) return;
+        taskIndex = Number(control.dataset.taskIndex);
+        trigger = control;
+        label.value = control.dataset.taskLabel || '';
+        earlier.disabled = control.dataset.taskFirst === 'true';
+        later.disabled = control.dataset.taskLast === 'true';
+        fileRelated.disabled = /^\s*\[[^\]]+\]\([^)]+\)\s*$/.test(label.value);
+        editor.hidden = false;
+        status.textContent = fileRelated.disabled ? 'This step already links to related work.' :
+          'Rename, reorder, remove, or file this step as related work.';
+        label.focus();
+      });
+      const run = async operation => {
+        const state = current();
+        const selectedIndex = taskIndex;
+        if (!state?.item || !state.detail?.updated_at || selectedIndex === null) return;
+        if (operation.action === 'remove' && !globalThis.confirm('Remove this checklist step?')) return;
+        const controls = editor.querySelectorAll('button,input');
+        controls.forEach(control => { control.disabled = true; });
+        status.textContent = state.offline ? 'Queueing checklist change…' : 'Updating checklist…';
+        try {
+          const result = await (state.offline ? this.queueManagedTask : this.manageTask).call(
+            this, state.item, state.detail, selectedIndex, operation
+          );
+          if (current()?.item !== state.item) return;
+          confirmed(state.item, state.detail, state.offline ? result.detail : result);
+          reset();
+          sheetStatus.textContent = state.offline ? 'Checklist change queued. Pending sync.' : 'Checklist step updated.';
+          const focusIndex = operation.action === 'remove' ? Math.max(0, selectedIndex - 1) : selectedIndex;
+          container.querySelector('button.task-list-manage[data-task-index="' + focusIndex + '"]')?.focus();
+        } catch (error) {
+          if (current()?.item === state.item) {
+            status.textContent = error.message + ' Your change is still here; retry.';
+            retry.hidden = false;
+            label.focus();
+          }
+        } finally {
+          if (!editor.hidden) controls.forEach(control => { control.disabled = false; });
+        }
+      };
+      editor.addEventListener('submit', event => { event.preventDefault(); run({ action:'rename', label:label.value }); });
+      earlier.addEventListener('click', () => run({ action:'move-earlier' }));
+      later.addEventListener('click', () => run({ action:'move-later' }));
+      fileRelated.addEventListener('click', async () => {
+        const state = current();
+        const selectedIndex = taskIndex;
+        if (!state?.item || !state.detail?.updated_at || selectedIndex === null || fileRelated.disabled) return;
+        try {
+          await onFileRelated({ item:state.item, detail:state.detail, taskIndex:selectedIndex,
+            label:label.value, trigger });
+          reset();
+        } catch (error) {
+          status.textContent = error.message + ' The checklist step was not changed.';
+          label.focus();
+        }
+      });
+      remove.addEventListener('click', () => run({ action:'remove' }));
+      cancel.addEventListener('click', () => reset(true));
+      return { reset };
+    },
+    renderTasks(container, detail, interactive) {
+      container.classList.toggle('checklist-pending', detail.checklist_pending === true);
+      container.innerHTML = renderMarkdown(
+        detail.body || 'No description provided.', {
+          interactiveTasks: Boolean(interactive),
+          manageTasks: Boolean(interactive),
+        }
+      );
+    },
+    checklistCompletion(container, { interactive, today, offline, dismissed = false }) {
+      const tasks = Array.from(container.querySelectorAll('input.task-list-toggle'));
+      const visible = Boolean(interactive && !dismissed && tasks.length && tasks.every(task => task.checked));
+      return {
+        visible,
+        status: offline ? 'Checklist complete · pending sync' : 'Checklist complete',
+        label: today ? (offline ? 'Queue close & next' : 'Close & next') :
+          (offline ? 'Queue issue closure' : 'Close issue'),
+      };
+    },
+    mergeContent(snapshot, item, detail, confirmed, replace) {
+      return {
+        snapshot: snapshot ? replace(snapshot, item.repository, item.number, confirmed) : snapshot,
+        item: { ...item, ...confirmed, key:item.key },
+        detail: { ...detail, ...confirmed },
+      };
+    },
+    renderMilestoneEditor(item, confirmed, milestones, document = globalThis.document) {
+      const select = document.querySelector('#issue-milestone');
+      const status = document.querySelector('#issue-milestone-status');
+      select.innerHTML = '<option value="">No milestone</option>' + milestones.map(milestone =>
+        '<option value="' + Number(milestone.id) + '">' + escapeOptionHtml(milestone.title) + '</option>'
+      ).join('');
+      select.value = String(this.loadMilestoneDraft(item) ?? confirmed?.id ?? '');
+      select.disabled = false;
+      document.querySelector('#save-issue-milestone').disabled = false;
+      status.textContent = confirmed ? 'Planned for ' + confirmed.title + '.' : 'No milestone set.';
+    },
+
     loadDueDateDraft(item) {
       try {
         const raw = storage?.getItem(dueDateDraftKey(item));
@@ -208,7 +566,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
     },
     close(item) {
       if (closeRequest) return closeRequest;
-      closeRequest = fetchJson(issuePath(item) + '/close', {
+      const access = item?.is_filed && !item?.is_assigned ? '?access=filed' : '';
+      closeRequest = fetchJson(issuePath(item) + '/close' + access, {
         method: 'PATCH',
         headers: { Accept: 'application/json' },
       }).then(result => {
@@ -254,6 +613,28 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       }).finally(() => { handoffRequest = null; });
       return handoffRequest;
     },
+    reassign(item, recipient) {
+      if (reassignRequest) return reassignRequest;
+      const expectedAssignees = Array.isArray(item?.assignees) ? item.assignees.slice() : [];
+      reassignRequest = fetchJson(issuePath(item) + '/reassign', {
+        method: 'PATCH',
+        headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({ recipient, expected_assignees: expectedAssignees }),
+      }).then(result => {
+        if (
+          result?.number !== item.number ||
+          result?.recipient !== recipient ||
+          !Array.isArray(result.assignees) ||
+          result.assignees.length !== 1 ||
+          result.assignees[0] !== recipient ||
+          JSON.stringify(result.previous_assignees) !== JSON.stringify(expectedAssignees)
+        ) {
+          throw new Error('Issue reassignment was not confirmed.');
+        }
+        return result;
+      }).finally(() => { reassignRequest = null; });
+      return reassignRequest;
+    },
     comment(item, body) {
       if (commentRequest) return commentRequest;
       this.saveDraft(item, body);
@@ -262,7 +643,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
         operationId = storage?.getItem(operationKey(item)) || String(createOperationId()).slice(0, 128);
         storage?.setItem(operationKey(item), operationId);
       } catch (_error) { operationId = String(createOperationId()).slice(0, 128); }
-      commentRequest = fetchJson(issuePath(item) + '/comments', {
+      const access = this.readOnly(item) ? '?access=filed' : '';
+      commentRequest = fetchJson(issuePath(item) + '/comments' + access, {
         method: 'POST',
         headers: { Accept: 'application/json', 'Content-Type': 'application/json', 'Idempotency-Key': operationId },
         body: JSON.stringify({ body }),
@@ -280,4 +662,9 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
 
 createIssueSheet.createPlanningLoader = createPlanningLoader;
 
+createIssueSheet.manageChecklistTask = manageChecklistTask;
+createIssueSheet.completeDelegatedParentTask = completeDelegatedParentTask;
+createIssueSheet.finishDelegatedParentReview = finishDelegatedParentReview;
+createIssueSheet.delegatedParentReference = delegatedParentReference;
+createIssueSheet.resolveDelegatedParent = resolveDelegatedParent;
 if (typeof module !== 'undefined' && module.exports) module.exports = createIssueSheet;

frontend/later-picker.js

@@ -90,7 +90,8 @@ function createLaterPicker({
       onState({ open:true, message:result.message, value:String(input || '') });
       return false;
     }
-    const confirmed = onConfirm(item, result.value, context);
+    const confirmed = typeof item?.confirm === 'function' ? item.confirm(result.value) :
+      onConfirm(item, result.value, context);
     if (confirmed !== true && typeof confirmed !== 'function') return false;
     committed = true;
     afterClose = typeof confirmed === 'function' ? confirmed : null;

frontend/later-sync.js

@@ -160,15 +160,17 @@ function createLaterSync({ storage, getLogin, fetchJson, onRemoteRecords, onStat
     return Date.now().toString(36) + '-' + Math.random().toString(36).slice(2);
   }
 
-  function enqueue(action, itemId, wakeAt = null) {
+  function enqueue(action, itemId, wakeAt = null, handoff = null) {
     if (!['defer', 'restore'].includes(action) || !itemId ||
-        (action === 'defer' && typeof wakeAt !== 'string')) return false;
+        (action === 'defer' && typeof wakeAt !== 'string') ||
+        ![null, 'today'].includes(handoff)) return false;
     pending().filter(operation => operation.item_id === itemId)
       .forEach(operation => removeOperation(operation.operation_id));
     const operation = {
       operation_id: operationId(), action, item_id: itemId, wake_at: wakeAt,
       base_revision: Math.max(0, savedRevision()),
     };
+    if (handoff) operation.handoff = handoff;
     const storageKey = key();
     if (!storageKey || !storage) return false;
     const recordKey = storageKey + '.operation.' + encodeURIComponent(operation.operation_id);
@@ -189,9 +191,11 @@ function createLaterSync({ storage, getLogin, fetchJson, onRemoteRecords, onStat
     const marker = migrationPrefix + storageKey.slice(prefix.length);
     try {
       if (storage.getItem(marker)) return false;
-      Object.entries(records || {}).forEach(([itemId, wakeAt]) =>
-        enqueue('defer', itemId, wakeAt)
-      );
+      Object.entries(records || {}).forEach(([itemId, record]) => {
+        const wakeAt = record && typeof record === 'object' ? record.wake_at : record;
+        const handoff = record?.handoff === 'today' ? 'today' : null;
+        enqueue('defer', itemId, wakeAt, handoff);
+      });
       storage.setItem(marker, '1');
       return true;
     } catch (_error) {

frontend/later-work.js

@@ -38,7 +38,7 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     }
   }
 
-  function defer(item, until) {
+  function defer(item, until, options = {}) {
     const key = storageKey();
     const id = identity(item);
     const wake = new Date(until);
@@ -46,9 +46,10 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     if (!id || Number.isNaN(wake.getTime()) || wake <= now()) return 'invalid';
     const records = read();
     const wakeAt = wake.toISOString();
-    records[id] = wakeAt;
+    const handoff = options.handoff === 'today' ? 'today' : null;
+    records[id] = handoff ? { wake_at:wakeAt, handoff } : wakeAt;
     if (!write(records)) return 'unavailable';
-    onChange('defer', id, wakeAt);
+    onChange('defer', id, wakeAt, handoff);
     return 'deferred';
   }
 
@@ -93,9 +94,13 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
   function adopt(records) {
     if (!records || typeof records !== 'object' || Array.isArray(records)) return false;
     const normalized = {};
-    Object.entries(records).forEach(([id, wake]) => {
+    Object.entries(records).forEach(([id, record]) => {
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       const wakeTime = new Date(wake).getTime();
-      if (id && Number.isFinite(wakeTime)) normalized[id] = new Date(wakeTime).toISOString();
+      if (id && Number.isFinite(wakeTime)) {
+        const wakeAt = new Date(wakeTime).toISOString();
+        normalized[id] = record?.handoff === 'today' ? { wake_at:wakeAt, handoff:'today' } : wakeAt;
+      }
     });
     return write(normalized);
   }
@@ -119,25 +124,32 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     const wakeTimes = [];
     const expired = [];
 
-    Object.entries(records).forEach(([id, wake]) => {
+    const handoffs = [];
+    Object.entries(records).forEach(([id, record]) => {
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       const wakeTime = new Date(wake).getTime();
       if (!Number.isFinite(wakeTime) || wakeTime <= current) {
-        if (Number.isFinite(wakeTime)) expired.push(id);
+        if (Number.isFinite(wakeTime)) {
+          expired.push(id);
+          if (record?.handoff === 'today') handoffs.push(id);
+        }
         return;
       }
       if (pruneMissing && !available.has(id)) return;
-      retained[id] = new Date(wakeTime).toISOString();
+      const wakeAt = new Date(wakeTime).toISOString();
+      retained[id] = record?.handoff === 'today' ? { wake_at:wakeAt, handoff:'today' } : wakeAt;
       wakeTimes.push(wakeTime);
     });
 
     if (JSON.stringify(retained) !== JSON.stringify(records) && write(retained) && expired.length) {
-      onExpire(expired);
+      onExpire(expired, handoffs);
     }
     schedule(wakeTimes, current);
     const deferredIds = new Set(Object.keys(retained));
     const active = (items || []).filter(item => !deferredIds.has(identity(item)));
     const later = (items || []).flatMap(item => {
-      const wake = retained[identity(item)];
+      const record = retained[identity(item)];
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       return wake ? [{ ...item, deferred_until: wake }] : [];
     });
     return { active, later };

frontend/login.js

@@ -4,7 +4,7 @@
 }(typeof self !== 'undefined' ? self : this, function createLoginController(options) {
   function validShareContinuation(value) {
     if (typeof value !== 'string' || !value.startsWith('./?') || value.includes('#')) return './';
-    const limits = { title: 200, text: 8000, url: 2048, launch: 8, shared: 5, search: 200,
+    const limits = { title: 200, text: 8000, url: 2048, launch: 8, shared: 6, search: 200,
       preview: 200, search_kind: 5, search_state: 6, search_repository: 161 };
     const params = new URLSearchParams(value.slice(3));
     const entries = Array.from(params.entries());
@@ -35,7 +35,9 @@
     const launch = params.get('launch');
     const shared = params.get('shared');
     if (launch && !['continue', 'new', 'agenda'].includes(launch)) return './';
-    if (shared !== null && (shared !== 'image' || launch !== 'new')) return './';
+    if (shared === 'bundle') {
+      if (launch !== 'new' || entries.some(([name]) => !['launch', 'shared'].includes(name))) return './';
+    } else if (shared !== null && (shared !== 'image' || launch !== 'new')) return './';
     return value;
   }
 

frontend/manifest.webmanifest

@@ -36,7 +36,7 @@
     }
   ],
   "share_target": {
-    "action": "./",
+    "action": "./share-target",
     "method": "POST",
     "enctype": "multipart/form-data",
     "params": {

frontend/markdown.js

@@ -32,23 +32,33 @@
     return rendered.replace(/\u0000CODE(\d+)\u0000/g, (_match, index) => code[Number(index)]);
   }
 
-  function renderList(lines) {
+  function renderList(lines, options, firstTaskIndex) {
     const taskList = lines.every(line => /^[-*+]\s+\[[ xX]\]\s+/.test(line));
-    const items = lines.map(line => {
+    const items = lines.map((line, offset) => {
       let body = line.replace(/^[-*+]\s+/, '');
       if (!taskList) return '<li>' + renderInline(body) + '</li>';
       const checked = /^\[[xX]\]\s+/.test(body);
       body = body.replace(/^\[[ xX]\]\s+/, '');
-      return '<li class="task-list-item"><input type="checkbox" disabled' +
-        (checked ? ' checked' : '') + '> ' + renderInline(body) + '</li>';
+      const control = options.interactiveTasks ?
+        ' class="task-list-toggle" data-task-index="' + (firstTaskIndex + offset) +
+          '" aria-label="Mark ' + escapeHtml(body) + (checked ? ' incomplete"' : ' complete"') :
+        ' disabled';
+      const manage = options.interactiveTasks && options.manageTasks ?
+        '<button type="button" class="task-list-manage" data-task-index="' + (firstTaskIndex + offset) +
+          '" data-task-label="' + escapeHtml(body) + '" aria-label="Manage step: ' + escapeHtml(body) + '"' +
+          (offset === 0 ? ' data-task-first="true"' : '') +
+          (offset === lines.length - 1 ? ' data-task-last="true"' : '') + '>Manage</button>' : '';
+      return '<li class="task-list-item"><input type="checkbox"' + control +
+        (checked ? ' checked' : '') + '> ' + renderInline(body) + manage + '</li>';
     }).join('');
     return '<ul' + (taskList ? ' class="task-list"' : '') + '>' + items + '</ul>';
   }
 
-  return function renderMarkdown(raw) {
+  function renderMarkdown(raw, options = {}) {
     const lines = String(raw || '').replace(/\r\n?/g, '\n').split('\n');
     const output = [];
     let index = 0;
+    let taskIndex = 0;
     while (index < lines.length) {
       const line = lines[index];
       if (!line.trim()) {
@@ -90,7 +100,10 @@
           list.push(lines[index]);
           index += 1;
         }
-        output.push(renderList(list));
+        output.push(renderList(list, options, taskIndex));
+        if (list.every(candidate => /^[-*+]\s+\[[ xX]\]\s+/.test(candidate))) {
+          taskIndex += list.length;
+        }
         continue;
       }
       const paragraph = [];
@@ -103,5 +116,29 @@
       output.push('<p>' + renderInline(paragraph.join('\n')).replace(/\n/g, '<br>') + '</p>');
     }
     return output.join('');
+  }
+
+  renderMarkdown.toggleTask = function toggleTask(raw, targetIndex, checked) {
+    const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+    let fenced = false;
+    let taskIndex = 0;
+    for (let index = 0; index < parts.length; index += 2) {
+      const line = parts[index];
+      if (/^\s*```/.test(line)) {
+        fenced = !fenced;
+        continue;
+      }
+      if (fenced) continue;
+      const task = line.match(/^([-*+]\s+\[)([ xX])(\])/);
+      if (!task) continue;
+      if (taskIndex === Number(targetIndex)) {
+        parts[index] = task[1] + (checked ? 'x' : ' ') + task[3] + line.slice(task[0].length);
+        return parts.join('');
+      }
+      taskIndex += 1;
+    }
+    return parts.join('');
   };
+
+  return renderMarkdown;
 });

frontend/mobile-create-issue-nav.js

@@ -0,0 +1,122 @@
+function createMobileCreateIssueNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let filingAvailable = !options.filing?.hidden;
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function setFilingAvailable(available) {
+    filingAvailable = Boolean(available);
+    const button = buttons.file;
+    if (!button) return;
+    if (filingAvailable) button.removeAttribute('aria-disabled');
+    else button.setAttribute('aria-disabled', 'true');
+  }
+
+  function navigate(name) {
+    if (name === 'file') setFilingAvailable(!options.filing?.hidden);
+    if (name === 'file' && !filingAvailable) return false;
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = Date.now() + 500;
+    select(name);
+    return true;
+  }
+
+  function reset(available = !options.filing?.hidden) {
+    setFilingAvailable(available);
+    select('describe');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (Date.now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .filter(entry => targetNames.get(entry.target) !== 'file' || filingAvailable)
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+    setFilingAvailable,
+  };
+}
+
+function attachMobileCreateIssueNavigation({ document, window }) {
+  const bySection = name => document.querySelector('[data-create-issue-section="' + name + '"]');
+  const filing = document.getElementById('create-issue-filing');
+  const sheet = document.getElementById('create-issue-sheet');
+  const navigation = createMobileCreateIssueNavigation({
+    root:document.querySelector('.create-issue-panel'),
+    buttons:{describe:bySection('describe'), evidence:bySection('evidence'), file:bySection('file')},
+    targets:{
+      describe:document.getElementById('create-issue-describe'),
+      evidence:document.getElementById('create-issue-evidence'),
+      file:filing,
+    },
+    filing,
+    prefersReducedMotion:() => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  document.getElementById('file-new-issue').addEventListener('click', () => {
+    setTimeout(() => navigation.navigate('file'), 0);
+  });
+  new MutationObserver(() => {
+    navigation.setFilingAvailable(!filing.hidden);
+    if (!filing.hidden && sheet.classList.contains('open')) navigation.navigate('file');
+  }).observe(filing, {attributes:true, attributeFilter:['hidden']});
+  new MutationObserver(() => {
+    if (sheet.classList.contains('open')) navigation.reset(!filing.hidden);
+  }).observe(sheet, {
+    attributes:true, attributeFilter:['class'],
+  });
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileCreateIssueNavigation;
+else attachMobileCreateIssueNavigation({document, window});

frontend/mobile-delivery-recovery.js

@@ -0,0 +1,156 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileDeliveryRecovery = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileDeliveryRecovery(options) {
+  const byId = id => typeof document === 'undefined' ? null : document.getElementById(id);
+  const elements = options.elements || (typeof document === 'undefined' ? null : {
+    dialog: byId('mobile-delivery-recovery'), close: byId('close-mobile-delivery-recovery'),
+    title: byId('mobile-delivery-recovery-title'), destination: byId('mobile-delivery-recovery-destination'),
+    reason: byId('mobile-delivery-recovery-reason'), progress: byId('mobile-delivery-recovery-progress'),
+    action: byId('mobile-delivery-recovery-action'), status: byId('mobile-delivery-recovery-status'),
+  });
+  const priority = {authorization: 0, attention: 1, uncertain: 2, waiting: 3};
+
+  function identity(item) {
+    return String(item?.outbox_id || item?.id || '');
+  }
+
+  function state(item) {
+    if (item?.status === 'authorization') return 'authorization';
+    if (item?.status === 'attention' || item?.checklist_conflict || item?.quarantined) return 'attention';
+    if (item?.delivery_state === 'uncertain') return 'uncertain';
+    return 'waiting';
+  }
+
+  function primary(item) {
+    const kind = state(item);
+    if (kind === 'authorization') {
+      return item?.outbox_kind === 'issue-close' ? 'Authorize & close' : 'Authorize & send';
+    }
+    if (item?.checklist_conflict) return 'Review changes';
+    if (kind === 'attention') return item?.quarantined ? 'Copy content' : 'Open current item';
+    if (kind === 'uncertain') return 'Verified not posted — retry';
+    return 'Retry now';
+  }
+
+  function ordered() {
+    return [...(options.getItems ? options.getItems() : [])].sort((left, right) => {
+      const byState = priority[state(left)] - priority[state(right)];
+      if (byState) return byState;
+      return identity(left).localeCompare(identity(right));
+    });
+  }
+
+  const stateLabels = {
+    authorization: 'Authorization required',
+    attention: 'Needs attention',
+    uncertain: 'Delivery uncertain',
+    waiting: 'Ready to retry',
+  };
+  let currentId = '';
+  let active = false;
+  let inFlight = null;
+
+  function currentItem(items) {
+    return items.find(item => identity(item) === currentId) || items[0];
+  }
+
+  function snapshot() {
+    const items = ordered();
+    const item = currentItem(items);
+    if (item) currentId = identity(item);
+    else currentId = '';
+    const index = item ? items.indexOf(item) : -1;
+    return {
+      count: items.length,
+      current: item ? {
+        id: identity(item),
+        state: state(item),
+        primary: primary(item),
+        position: index + 1,
+        total: items.length,
+      } : null,
+    };
+  }
+
+  function render() {
+    const result = snapshot();
+    if (!elements) return result;
+    const items = ordered();
+    const item = currentItem(items);
+    if (!item) {
+      if (active) {
+        active = false;
+        if (elements.dialog?.open) elements.dialog.close();
+        if (options.onComplete) options.onComplete();
+      }
+      return result;
+    }
+    elements.title.textContent = item.title || 'Queued delivery';
+    elements.destination.textContent = [item.repository, item.details].filter(Boolean).join(' · ') || 'Saved delivery';
+    elements.reason.textContent = item.last_attempt_error || item.ownership || stateLabels[state(item)];
+    elements.progress.textContent = 'Delivery ' + result.current.position + ' of ' + result.current.total + ' · ' + stateLabels[state(item)];
+    elements.action.textContent = primary(item);
+    if (elements.status) elements.status.textContent = '';
+    return result;
+  }
+
+  function open() {
+    const queue = byId('mobile-queue-sheet');
+    if (queue?.open) queue.close();
+    if (options.beforeOpen) options.beforeOpen();
+    currentId = '';
+    const result = snapshot();
+    if (!result.current) return 'empty';
+    active = true;
+    render();
+    if (elements?.dialog && !elements.dialog.open) elements.dialog.showModal();
+    return 'opened';
+  }
+
+  async function attend(item) {
+    const index = options.getIndex ? options.getIndex(item) : -1;
+    const selector = item.quarantined ? '.draft-copy' :
+      item.checklist_conflict ? '.draft-review-checklist' : '.draft-resume';
+    const action = document.querySelector('#my-work-list ' + selector + '[data-draft-index="' + index + '"]');
+    if (!action) throw new Error('Delivery changed.');
+    elements.dialog.close();
+    action.scrollIntoView();
+    action.focus();
+    return await action.onclick();
+  }
+
+  function activate() {
+    if (inFlight) return inFlight;
+    const items = ordered();
+    const item = currentItem(items);
+    const perform = state(item) === 'attention' ? attend : options.activate;
+    if (!item) return Promise.resolve(render());
+    if (elements?.action) elements.action.disabled = true;
+    if (elements?.status) elements.status.textContent = 'Working…';
+    inFlight = (async () => {
+      let failure = null;
+      try {
+        await perform(item, state(item));
+      } catch (error) {
+        failure = String(error?.message || 'Delivery could not be completed.').trim().slice(0, 160);
+      } finally {
+        if (elements?.action) elements.action.disabled = false;
+      }
+      const result = render();
+      if (failure && elements?.status) {
+        if (active && !elements.dialog.open) elements.dialog.showModal();
+        elements.status.textContent = failure + ' Try again.';
+      }
+      return result;
+    })().finally(() => { inFlight = null; });
+    return inFlight;
+  }
+
+  function start() {
+    if (elements?.action?.addEventListener) elements.action.addEventListener('click', activate);
+    if (elements?.close?.addEventListener) elements.close.addEventListener('click', () => elements.dialog.close());
+  }
+
+  return {activate, open, render, snapshot, start};
+});

frontend/mobile-find-work-nav.js

@@ -0,0 +1,194 @@
+(function (root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.createMobileFindWorkNavigation = api;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const stages = ['discover', 'review', 'fit'];
+
+  return function createMobileFindWorkNavigation(options) {
+    const document = options.document;
+    const buttons = options.buttons || Object.fromEntries(stages.map(name =>
+      [name, document?.querySelector('[data-find-work-stage="' + name + '"]')]
+    ));
+    const sections = options.sections || Object.fromEntries(stages.map(name =>
+      [name, document?.getElementById('find-work-' + name + '-stage')]
+    ));
+    const history = options.history;
+    const eventTarget = options.eventTarget;
+    const onStageChange = options.onStageChange || (() => {});
+    const listeners = new Map();
+    let current = 'discover';
+    let selectedCount = 0;
+    let recovery = false;
+    let started = false;
+
+    function escape(value) {
+      return String(value || '').replace(/[&<>"']/g, character =>
+        ({ '&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;' })[character]
+      );
+    }
+
+    function renderReview() {
+      const reviewList = options.reviewList || document?.getElementById('find-work-review-list');
+      const reviewSummary = options.reviewSummary || document?.getElementById('find-work-review-summary');
+      if (!reviewList) return;
+      const items = options.controller?.selectedItems?.() || options.getSelectedItems?.() || [];
+      const planning = options.todayWork?.planning?.();
+      const today = options.todayWork ? {
+        limit:options.todayWork.limit, count:options.todayWork.read().length,
+        capacityMinutes:planning.capacity_minutes, estimates:planning.estimates,
+      } : options.getTodayState?.() || {};
+      const remainingSlots = Math.max(0, (Number(today.limit) || 0) - (Number(today.count) || 0));
+      const planned = Object.values(today.estimates || {}).reduce((sum, minutes) => sum + minutes, 0);
+      const remainingMinutes = today.capacityMinutes === null || today.capacityMinutes === undefined ? null :
+        Math.max(0, today.capacityMinutes - planned);
+      const formatMinutes = minutes => [Math.floor(minutes / 60) ? Math.floor(minutes / 60) + 'h' : '',
+        minutes % 60 ? minutes % 60 + 'm' : ''].filter(Boolean).join(' ') || '0m';
+      if (reviewSummary) reviewSummary.textContent = items.length + ' selected · ' + remainingSlots +
+        ' Today slot' + (remainingSlots === 1 ? '' : 's') + ' open' +
+        (remainingMinutes === null ? '' : ' · ' + formatMinutes(remainingMinutes) + ' available') + '.';
+      reviewList.innerHTML = items.map(item => {
+        const id = String(item.repository || '') + '#' + String(item.number || '');
+        return '<article class="find-work-review-item"><div><span class="small">' + escape(id) +
+          '</span><strong>' + escape(item.title || 'Untitled work') + '</strong></div>' +
+          '<button type="button" data-find-work-review-remove="' + escape(id) + '">Remove</button></article>';
+      }).join('');
+      reviewList.querySelectorAll('[data-find-work-review-remove]').forEach(button =>
+        button.addEventListener('click', () => {
+          const item = items.find(candidate => String(candidate.repository || '') + '#' +
+            String(candidate.number || '') === button.dataset.findWorkReviewRemove);
+          if (item) (options.controller?.toggleSelection || options.toggleSelection)?.(item);
+        })
+      );
+    }
+
+    function allowed(name) {
+      return stages.includes(name) && (name === 'discover' || selectedCount > 0 || recovery);
+    }
+
+    function paint(name, focus = false, notify = true) {
+      if (!allowed(name)) name = 'discover';
+      current = name;
+      stages.forEach(stage => {
+        const button = buttons[stage];
+        const section = sections[stage];
+        if (button) {
+          button.disabled = stage !== 'discover' && selectedCount === 0 && !recovery;
+          if (stage === name) button.setAttribute('aria-current', 'step');
+          else button.removeAttribute('aria-current');
+        }
+        if (section) section.hidden = stage !== name;
+      });
+      if (name === 'review') renderReview();
+      if (name === 'fit') options.openFit?.(options.controller?.selectedItems?.() || []);
+      if (notify) onStageChange(name);
+      if (focus) sections[name]?.focus?.();
+      return name;
+    }
+
+    function stateFor(name) {
+      const state = { ...(history?.state || {}) };
+      if (name === 'discover') delete state.findWorkStage;
+      else state.findWorkStage = name;
+      return state;
+    }
+
+    function go(name) {
+      if (!allowed(name) || name === current) return false;
+      const currentIndex = stages.indexOf(current);
+      const nextIndex = stages.indexOf(name);
+      if (nextIndex < currentIndex && history?.go) {
+        history.go(nextIndex - currentIndex);
+        return true;
+      }
+      if (nextIndex === currentIndex - 1 && history?.back) {
+        history.back();
+        return true;
+      }
+      history?.pushState?.(stateFor(name), '');
+      paint(name, true);
+      return true;
+    }
+
+    function onPopState(event) {
+      if (event.state?.taskOverlay !== 'find') return;
+      paint(event.state?.findWorkStage || 'discover', true);
+    }
+
+    function sync(state = {}) {
+      selectedCount = Math.max(0, Number(state.selectedCount) || 0);
+      recovery = state.recovery === true;
+      if (!allowed(current)) paint('discover');
+      else paint(current, false, false);
+    }
+
+    function open(hasRecovery) {
+      if (options.controller) {
+        selectedCount = options.controller.selection().count;
+        recovery = hasRecovery === true;
+      }
+      const restored = history?.state?.taskOverlay === 'find' ? history.state.findWorkStage : null;
+      return paint(allowed(restored) ? restored : 'discover');
+    }
+
+    function complete() {
+      selectedCount = 0;
+      recovery = false;
+      history?.replaceState?.(stateFor('discover'), '');
+      return paint('discover');
+    }
+
+    function back() {
+      if (current === 'discover') return false;
+      history?.back?.();
+      return true;
+    }
+
+    return {
+      start() {
+        if (started) return;
+        started = true;
+        stages.forEach(name => {
+          const button = buttons[name];
+          if (!button) return;
+          const listener = event => { event.preventDefault(); go(name); };
+          listeners.set(button, listener);
+          button.addEventListener('click', listener);
+        });
+        if (document) {
+          const bind = (id, action) => {
+            const button = document.getElementById(id);
+            if (!button) return;
+            const listener = event => { event.preventDefault(); action(); };
+            listeners.set(button, listener);
+            button.addEventListener('click', listener);
+          };
+          bind('select-find-work', () => { complete(); options.controller?.startSelection?.(); });
+          bind('cancel-find-work-selection', () => { complete(); options.controller?.cancelSelection?.(); });
+          bind('claim-selected-work', () => go('review'));
+          bind('continue-find-work-fit', () => go('fit'));
+          bind('back-find-work-discover', back);
+          bind('cancel-find-work-estimates', back);
+          bind('close-find-work', () => history?.go?.(-(stages.indexOf(current) + 1)));
+        }
+        eventTarget?.addEventListener?.('popstate', onPopState);
+        paint('discover');
+      },
+      stop() {
+        listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+        listeners.clear();
+        eventTarget?.removeEventListener?.('popstate', onPopState);
+        started = false;
+      },
+      sync,
+      open,
+      go,
+      back,
+      complete,
+      renderReview,
+      stage: () => current,
+    };
+  };
+});

frontend/mobile-insights.js

@@ -0,0 +1,74 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileInsights = factory;
+})(typeof self !== 'undefined' ? self : this, function (o) {
+  const route = '#/insights';
+  let active = false;
+  let previous = '#/my-work';
+
+  function attr(element, name, value) {
+    if (value === null) element.removeAttribute(name);
+    else element.setAttribute(name, value);
+  }
+
+  function render(open, focus = false) {
+    active = Boolean(open && o.mediaQuery.matches);
+    attr(o.root, 'data-mobile-open', active ? 'true' : null);
+    attr(o.root, 'role', active ? 'dialog' : null);
+    attr(o.root, 'aria-modal', active ? 'true' : null);
+    attr(o.root, 'aria-hidden', active || !o.mediaQuery.matches ? null : 'true');
+    o.root.inert = !active && o.mediaQuery.matches;
+    o.backgrounds.forEach(element => { element.inert = active; });
+    o.dock.hidden = active;
+    attr(o.hud, 'data-overlay-hidden', active ? 'true' : null);
+    if (active) o.closeButton.focus();
+    else if (focus) o.launcher.focus();
+  }
+
+  function url(hash) {
+    return (o.location.pathname || '') + (o.location.search || '') + hash;
+  }
+
+  function open() {
+    if (!o.mediaQuery.matches || active) return false;
+    previous = o.location.hash && o.location.hash !== route ? o.location.hash : '#/my-work';
+    if (o.menu) o.menu.open = false;
+    o.history.pushState({ ...(o.history.state || {}), mobileInsights:true, previousHash:previous }, '', url(route));
+    render(true);
+    return true;
+  }
+
+  function sync() {
+    render(o.location.hash === route, active && o.location.hash !== route);
+  }
+
+  function close() {
+    if (!active) return false;
+    if (o.history.state?.mobileInsights) o.history.back();
+    else {
+      const state = { ...(o.history.state || {}) };
+      delete state.mobileInsights;
+      delete state.previousHash;
+      o.history.replaceState(state, '', url(previous));
+      render(false, true);
+    }
+    return true;
+  }
+
+  function start() {
+    o.launcher.addEventListener('click', open);
+    o.closeButton.addEventListener('click', close);
+    o.eventTarget.addEventListener('popstate', sync);
+    o.eventTarget.addEventListener('hashchange', sync);
+    o.eventTarget.addEventListener('keydown', event => {
+      if (active && event.key === 'Escape') {
+        event.preventDefault?.();
+        close();
+      }
+    });
+    o.mediaQuery.addEventListener?.('change', sync);
+    sync();
+  }
+
+  return { start, open, close, current:() => active };
+});

frontend/mobile-issue-detail-nav.js

@@ -0,0 +1,77 @@
+function createMobileIssueDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    const target = targets[name];
+    if (!target) return false;
+    const prepare = options.beforeNavigate && options.beforeNavigate[name];
+    if (prepare) prepare(target);
+    if (name === 'actions' && options.planning) options.planning.open = true;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'reply' && navigationOptions.focus !== false) target.focus();
+    select(name);
+    return true;
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      select('overview');
+      const observe = options.observe || ((handler, observedTargets) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root: options.root || null,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean));
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileIssueDetailNavigation;

frontend/mobile-plan-today-nav.js

@@ -0,0 +1,104 @@
+function createMobilePlanTodayNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const root = options.root;
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const now = options.now || (() => Date.now());
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name) {
+    const target = targets[name];
+    if (!root || !target) return false;
+    root.scrollTo({
+      top: Math.max(0, target.offsetTop - root.offsetTop),
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = now() + 500;
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    select('fit');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, observedRoot) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root: observedRoot,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), root);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+function attachMobilePlanTodayNavigation({document, window}) {
+  const bySection = name => document.querySelector('[data-plan-today-section="' + name + '"]');
+  const sheet = document.getElementById('plan-today-sheet');
+  const panel = document.querySelector('.plan-today-panel');
+  const navigation = createMobilePlanTodayNavigation({
+    root: panel,
+    buttons: {
+      fit: bySection('fit'),
+      today: bySection('today'),
+      available: bySection('available'),
+    },
+    targets: {
+      fit: document.getElementById('plan-today-fit'),
+      today: document.getElementById('plan-today-selected'),
+      available: document.getElementById('plan-today-available-work'),
+    },
+    prefersReducedMotion: () => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  new MutationObserver(() => {
+    if (!sheet.hidden) navigation.reset();
+  }).observe(sheet, {attributes: true, attributeFilter: ['hidden']});
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobilePlanTodayNavigation;
+else attachMobilePlanTodayNavigation({document, window});

frontend/mobile-pull-refresh.js

@@ -0,0 +1,88 @@
+(function (root, factory) {
+  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  else root.createMobilePullRefresh = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobilePullRefresh(options) {
+  const surface = options.surface || document.querySelector('#my-work');
+  const indicator = options.indicator || document.querySelector('#mobile-pull-refresh');
+  const threshold = options.threshold || 64;
+  const isMobile = options.isMobile || (() => window.matchMedia('(max-width: 600px)').matches);
+  const getScrollY = options.getScrollY || (() => window.scrollY);
+  const isBlocked = options.isBlocked || (() => Array.from(options.overlays || document.querySelectorAll('[role="dialog"], #whiteboard-modal, #markdown-modal')).some(overlay =>
+      (overlay.checkVisibility ? overlay.checkVisibility() : !overlay.closest('[hidden]')) &&
+      (overlay.classList.contains('open') || overlay.getAttribute('aria-modal') === 'true')));
+  let gesture = null;
+  let inFlight = null;
+
+  function show(state, text) {
+    indicator.hidden = false;
+    indicator.dataset.state = state;
+    indicator.textContent = text;
+  }
+
+  function resetGesture() {
+    gesture = null;
+  }
+
+  function startsOnExcludedTarget(target) {
+    if (!target) return false;
+    if (target.closest?.('button, a, input, textarea, select, summary, [contenteditable="true"], [role="button"]')) return true;
+    for (let node = target; node && node !== surface; node = node.parentElement) {
+      if ((node.scrollWidth || 0) > (node.clientWidth || 0)) return true;
+    }
+    return false;
+  }
+
+  function onPointerDown(event) {
+    if (inFlight || event.pointerType !== 'touch' || !isMobile() || getScrollY() > 0 || isBlocked() || startsOnExcludedTarget(event.target)) return;
+    gesture = {id:event.pointerId, x:event.clientX, y:event.clientY, ready:false};
+    surface.setPointerCapture?.(event.pointerId);
+  }
+
+  function onPointerMove(event) {
+    if (!gesture || gesture.id !== event.pointerId) return;
+    const dx = event.clientX - gesture.x;
+    const dy = event.clientY - gesture.y;
+    if (dy <= 0 || Math.abs(dx) > dy) return resetGesture();
+    event.preventDefault();
+    gesture.ready = dy >= threshold;
+    show(gesture.ready ? 'ready' : 'pulling', gesture.ready ? 'Release to refresh' : 'Pull to refresh');
+  }
+
+  async function onPointerUp(event) {
+    if (!gesture || gesture.id !== event.pointerId) return;
+    const shouldRefresh = gesture.ready;
+    resetGesture();
+    surface.releasePointerCapture?.(event.pointerId);
+    if (!shouldRefresh || inFlight) return;
+    show('refreshing', 'Refreshing My Work…');
+    inFlight = Promise.resolve().then(options.refresh);
+    try {
+      await inFlight;
+      show('success', 'My Work is up to date');
+    } catch (_) {
+      show('error', 'Could not refresh · pull to retry');
+    } finally {
+      inFlight = null;
+    }
+  }
+
+  function onPointerCancel() {
+    resetGesture();
+  }
+
+  return {
+    start() {
+      surface.addEventListener('pointerdown', onPointerDown);
+      surface.addEventListener('pointermove', onPointerMove);
+      surface.addEventListener('pointerup', onPointerUp);
+      surface.addEventListener('pointercancel', onPointerCancel);
+    },
+    stop() {
+      surface.removeEventListener('pointerdown', onPointerDown);
+      surface.removeEventListener('pointermove', onPointerMove);
+      surface.removeEventListener('pointerup', onPointerUp);
+      surface.removeEventListener('pointercancel', onPointerCancel);
+      resetGesture();
+    },
+  };
+});

frontend/mobile-queue-launcher.js

@@ -9,10 +9,12 @@
     draft: 'No drafts are ready to open.',
   };
   const continuation = [
+    ['delivery', 'Recover Delivery'],
     ['attention', 'Start Attention'],
     ['today', 'Continue Today'],
     ['update', 'Resume Updates'],
     ['agenda', 'Open Agenda'],
+    ['filed', 'Review Filed'],
     ['later', 'Start Later'],
     ['draft', 'Open Drafts'],
   ];
@@ -27,9 +29,11 @@
   }
 
   function open(name) {
+    if (name === 'delivery' && options.openDelivery) return options.openDelivery();
     if (name === 'today') return options.openToday();
     if (name === 'agenda') return options.openAgenda();
     if (name === 'update' && options.openUpdates) return options.openUpdates();
+    if (name === 'filed' && options.openFiled) return options.openFiled();
     options.selectFilter(name);
     const action = options.firstAction(name);
     if (!action) {

frontend/mobile-review-detail-nav.js

@@ -0,0 +1,81 @@
+function createMobileReviewDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block:'start',
+      behavior:prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'feedback' && options.summaryComposer && navigationOptions.focus !== false) {
+      options.summaryComposer.focus({ preventScroll:true });
+    }
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    select('overview');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root:root || null,
+          rootMargin:'-20% 0px -60% 0px',
+          threshold:[0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileReviewDetailNavigation;

frontend/mobile-search-preview-nav.js

@@ -0,0 +1,130 @@
+function createMobileSearchPreviewNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const focusTargets = options.focusTargets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let replyAvailable = options.replyAvailable !== false;
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function setReplyAvailable(available) {
+    replyAvailable = Boolean(available);
+    const button = buttons.reply;
+    if (!button) return;
+    if (replyAvailable) button.removeAttribute('aria-disabled');
+    else button.setAttribute('aria-disabled', 'true');
+  }
+
+  function navigate(name) {
+    if (name === 'reply' && !replyAvailable) return false;
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = Date.now() + 500;
+    select(name);
+    const focusTarget = focusTargets[name] || (name === 'reply' ? target : null);
+    if (focusTarget) focusTarget.focus({preventScroll:true});
+    return true;
+  }
+
+  function reset(available = replyAvailable) {
+    setReplyAvailable(available);
+    select('overview');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset(replyAvailable);
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (Date.now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .filter(entry => targetNames.get(entry.target) !== 'reply' || replyAvailable)
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+    setReplyAvailable,
+  };
+}
+
+function attachMobileSearchPreviewNavigation({document, window}) {
+  const bySection = name => document.querySelector('[data-search-preview-section="' + name + '"]');
+  const preview = document.getElementById('search-preview');
+  const reply = document.getElementById('search-preview-reply-workspace');
+  const navigation = createMobileSearchPreviewNavigation({
+    root:document.querySelector('.search-preview-panel'),
+    buttons:{
+      overview:bySection('overview'),
+      conversation:bySection('conversation'),
+      reply:bySection('reply'),
+      actions:bySection('actions'),
+    },
+    targets:{
+      overview:document.getElementById('search-preview-overview'),
+      conversation:document.getElementById('search-preview-conversation'),
+      reply,
+      actions:document.getElementById('search-preview-actions'),
+    },
+    focusTargets:{reply:document.getElementById('search-preview-reply')},
+    replyAvailable:!reply.hidden,
+    prefersReducedMotion:() => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  new MutationObserver(() => navigation.setReplyAvailable(!reply.hidden)).observe(reply, {
+    attributes:true, attributeFilter:['hidden'],
+  });
+  new MutationObserver(() => {
+    if (preview.classList.contains('open')) navigation.reset(!reply.hidden);
+  }).observe(preview, {attributes:true, attributeFilter:['class']});
+  ['previous-search-result', 'next-search-result'].forEach(id => {
+    document.getElementById(id).addEventListener('click', () => {
+      setTimeout(() => navigation.reset(!reply.hidden), 0);
+    });
+  });
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileSearchPreviewNavigation;
+else attachMobileSearchPreviewNavigation({document, window});

frontend/mobile-start-day.js

@@ -0,0 +1,149 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileStartDay = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileStartDay(options) {
+  const checkpointKey = 'stackchain.mobile-start-day.v1';
+  const storage = options.storage || (typeof localStorage !== 'undefined' ? localStorage : null);
+  const reviewOrder = [
+    ['delivery', 'Delivery recovery'],
+    ['agenda', 'Agenda'],
+    ['attention', 'Attention'],
+    ['update', 'Updates'],
+    ['filed', 'Filed'],
+  ];
+
+  function count(value) {
+    return Math.max(0, Number(value) || 0);
+  }
+
+  function localDay() {
+    const now = new Date();
+    const pad = value => String(value).padStart(2, '0');
+    return now.getFullYear() + '-' + pad(now.getMonth() + 1) + '-' + pad(now.getDate());
+  }
+
+  function identity() {
+    try {
+      return {
+        login: String(options.getLogin ? options.getLogin() : '').trim(),
+        day: String(options.getDay ? options.getDay() : localDay()),
+      };
+    } catch (_) {
+      return {login:'', day:''};
+    }
+  }
+
+  function checkpoint() {
+    if (!storage) return null;
+    const current = identity();
+    if (!current.login || !current.day) return null;
+    try {
+      const saved = JSON.parse(storage.getItem(checkpointKey) || 'null');
+      return saved?.login === current.login && saved?.day === current.day ? saved : null;
+    } catch (_) {
+      return null;
+    }
+  }
+
+  function saveCheckpoint(phase = null) {
+    if (!storage) return false;
+    const current = identity();
+    if (!current.login || !current.day) return false;
+    try {
+      storage.setItem(checkpointKey, JSON.stringify({...current, phase}));
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function clearCheckpoint() {
+    if (!storage || !checkpoint()) return false;
+    try {
+      storage.removeItem(checkpointKey);
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function briefing() {
+    const counts = options.getCounts ? options.getCounts() : {};
+    const phases = reviewOrder
+      .map(([name, label]) => ({name, label, count: count(counts[name])}))
+      .filter(phase => phase.count > 0);
+    const total = phases.reduce((sum, phase) => sum + phase.count, 0);
+    const today = count(counts.today);
+    const delivery = count(counts.delivery);
+    const other = total - delivery;
+    const next = phases.length ? phases[0].name : (today ? 'today' : 'find');
+    const nextLabel = next === 'delivery' ? 'Review Delivery' :
+      (phases.length ? 'Review ' + phases[0].label : (today ? 'Continue Today' : 'Find Work'));
+    return {
+      total,
+      next,
+      label: nextLabel,
+      summary: delivery ? delivery + (delivery === 1 ? ' delivery needs' : ' deliveries need') +
+        ' action before Today' + (other ? ' · ' + other + ' other ' + (other === 1 ? 'item' : 'items') : '') +
+        ' · ' + today + ' planned' :
+        total ? total + ' items before Today · ' + today + ' planned' :
+        (today ? 'Review clear · ' + today + ' planned' : 'Review clear · Today is empty'),
+      phases,
+    };
+  }
+
+  function startNext() {
+    const next = briefing().next;
+    if (reviewOrder.some(([name]) => name === next)) saveCheckpoint(next);
+    else clearCheckpoint();
+    options.openQueue(next);
+    return next;
+  }
+
+  function state() {
+    const current = briefing();
+    return {active:Boolean(checkpoint()), next:current.next, label:current.label};
+  }
+
+  function completePhase(phase) {
+    const saved = checkpoint();
+    if (!saved || (saved.phase && saved.phase !== phase)) return false;
+    const current = render();
+    saveCheckpoint();
+    if (options.onHandoff) options.onHandoff(current);
+    return true;
+  }
+
+  function reconcile({authoritative = false, authoritativePhases = []} = {}) {
+    const saved = checkpoint();
+    if (!saved?.phase || (!authoritative && !authoritativePhases.includes(saved.phase))) return false;
+    const counts = options.getCounts ? options.getCounts() : {};
+    if (count(counts[saved.phase]) > 0) return false;
+    return completePhase(saved.phase);
+  }
+
+  function finish() {
+    const cleared = clearCheckpoint();
+    render();
+    return cleared;
+  }
+
+  function render() {
+    const current = briefing();
+    if (!options.elements) return current;
+    options.elements.summary.textContent = current.summary;
+    options.elements.phases.textContent = current.phases.length ?
+      current.phases.map(phase => phase.label + ' ' + phase.count).join(' · ') :
+      'All urgent queues reviewed';
+    options.elements.action.textContent = checkpoint() ? 'Resume preparation · ' + current.label : current.label;
+    if (options.elements.finish) options.elements.finish.hidden = !checkpoint();
+    return current;
+  }
+
+  function start() {
+    render();
+    if (options.elements) options.elements.action.addEventListener('click', startNext);
+  }
+
+  return {briefing, completePhase, finish, reconcile, render, start, startNext, state};
+});

frontend/mobile-task-dock.js

@@ -66,9 +66,9 @@
   function updateWork(mode) {
     const text = {
       continue:'Continue', resume:'Resume', start:'Start', plan:'Plan', find:'Find',
-      attention:'Attention', update:'Updates', agenda:'Agenda', later:'Later', draft:'Drafts',
+      delivery:'Delivery', attention:'Attention', update:'Updates', agenda:'Agenda', filed:'Filed', later:'Later', draft:'Drafts',
     }[mode] || 'Work';
-    const queue = ['Attention', 'Updates', 'Agenda', 'Later', 'Drafts'].includes(text);
+    const queue = ['Delivery', 'Attention', 'Updates', 'Agenda', 'Filed', 'Later', 'Drafts'].includes(text);
     if (options.workLabel) options.workLabel.textContent = text;
     if (buttons.work) buttons.work.setAttribute('aria-label', queue
       ? (mode === 'update' ? 'Resume ' : 'Open ') + text
@@ -91,9 +91,9 @@
   }
 
   function updateQueues(counts) {
-    const names = 'today agenda attention update later draft'.split(' ');
+    const names = 'today agenda delivery attention update filed later draft'.split(' ');
     const normalized = Object.fromEntries(names.map(name => [name, Math.max(0, Number(counts?.[name]) || 0)]));
-    const actionableNames = ['today', 'attention', 'update', 'later', 'draft'];
+    const actionableNames = ['today', 'delivery', 'attention', 'update', 'filed', 'later', 'draft'];
     const active = actionableNames.reduce((total, name) => total + (normalized[name] > 0 ? 1 : 0), 0);
     Object.entries(options.queueCounts || {}).forEach(([name, element]) => {
       element.textContent = String(normalized[name] || 0);
@@ -117,8 +117,10 @@
       ? 'Queues: no active queues; no upcoming deadlines'
       : 'Queues: Today ' + normalized.today
         + ', Agenda ' + normalized.agenda + ' due'
+        + ', Delivery ' + normalized.delivery
         + ', Attention ' + normalized.attention
         + ', Updates ' + normalized.update
+        + ', Filed ' + normalized.filed
         + ', Later ' + normalized.later
         + ', Drafts ' + normalized.draft
         + '; ' + active + ' active ' + (active === 1 ? 'queue' : 'queues');

frontend/mobile-update-detail-nav.js

@@ -0,0 +1,88 @@
+function createMobileUpdateDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    if (name === 'activity') {
+      if (options.jumpToNewActivity) options.jumpToNewActivity();
+      select(name);
+      return true;
+    }
+    const target = targets[name];
+    if (!target) return false;
+    if (name === 'context') target.open = true;
+    target.scrollIntoView({
+      block:'start',
+      behavior:prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'reply' && options.replyComposer && navigationOptions.focus !== false) {
+      options.replyComposer.focus({ preventScroll:true });
+    }
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    if (targets.context) targets.context.open = false;
+    select('activity');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root:options.root || null,
+          rootMargin:'-20% 0px -60% 0px',
+          threshold:[0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean));
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileUpdateDetailNavigation;

frontend/mobile-work-entry.js

@@ -5,7 +5,7 @@
   function mode() {
     if (options.isTodayActive()) return 'continue';
     const recommended = options.queueLauncher && options.queueLauncher.recommend();
-    if (recommended && recommended.name !== 'today') return recommended.name;
+    if (recommended && !['today', 'find'].includes(recommended.name)) return recommended.name;
     if (options.getTodayCount() > 0 && options.isTodayResumable()) return 'resume';
     if (options.getTodayCount() > 0) return 'start';
     if (options.getEligibleCount() > 0) return 'plan';

frontend/my-work.js

@@ -70,19 +70,24 @@ function buildMyWork(data, now = new Date()) {
     );
     const assigned = (item.assignees || []).includes(login);
     const isReview = (item.work_reasons || []).includes('review_requested');
+    const isFiled = (item.work_reasons || []).includes('created_by_me');
+    const isCompleted = isFiled && item.state === 'closed';
     const due = item.kind === 'issue' ? issueDueState(item.due_date, now) : null;
     const normalized = {
       ...item,
       key: (item.repository || 'unknown') + '#' + item.number,
       is_review: isReview,
+      is_filed: isFiled,
+      is_completed: isCompleted,
       is_assigned: assigned,
       has_update: false,
       ...(due ? { due_label: due.label } : {}),
       reason: priorityLabel ? priorityLabel + ' priority' :
         (due && due.priority < 4 ? due.label :
-          (isReview ? 'Needs your review' : (assigned ? 'Assigned to you' : 'Open work'))),
+          (isReview ? 'Needs your review' : (isCompleted ? 'Completed · review outcome' :
+            (assigned ? 'Assigned to you' : (isFiled ? 'Filed by you' : 'Open work'))))),
       _priority: priorityLabel ? 0 :
-        (due && due.priority < 4 ? due.priority : (isReview ? 3 : (assigned ? 4 : 5))),
+        (due && due.priority < 4 ? due.priority : (isReview ? 3 : (isCompleted ? 3.5 : (assigned ? 4 : 5)))),
     };
     normalized.needs_attention = needsAttention(normalized);
     normalized.attention_reason = attentionReason(normalized);
@@ -651,6 +656,7 @@ function createNotificationReplier({
 function filterMyWork(items, selectedFilter, selectedMilestone = 'all') {
   let filtered = items;
   if (selectedFilter === 'attention') filtered = items.filter(needsAttention);
+  else if (selectedFilter === 'filed') filtered = items.filter((item) => item.is_filed);
   else if (selectedFilter === 'review') filtered = items.filter((item) => item.is_review);
   else if (selectedFilter === 'update') filtered = items.filter((item) => item.has_update);
   else if (selectedFilter !== 'all') filtered = items.filter((item) => item.kind === selectedFilter);
@@ -663,6 +669,111 @@ function filterMyWork(items, selectedFilter, selectedMilestone = 'all') {
   );
 }
 
+function createCompletedFiledReview({
+  storage,
+  getLogin,
+  key = 'stackchain.completed-filed-review.v1',
+}) {
+  const login = () => String(getLogin?.() || '').trim();
+  const ownerKey = () => key + ':' + login();
+  const identity = item => String(item?.repository || '') + '#' + String(item?.number || '');
+  const read = () => {
+    if (!login()) return { items:{}, pending:{} };
+    try {
+      const value = JSON.parse(storage?.getItem(ownerKey()) || '{}');
+      return value && value.version === 1 && value.items && typeof value.items === 'object' ? {
+        items:value.items,
+        pending:value.pending && typeof value.pending === 'object' ? value.pending : {},
+      } : { items:{}, pending:{} };
+    } catch (_error) { return { items:{}, pending:{} }; }
+  };
+  const receipt = (item, stamp = String(item?.updated_at || '')) => ({
+    repository:String(item?.repository || ''), number:item?.number, updated_at:stamp,
+  });
+  const save = value => storage?.setItem(ownerKey(), JSON.stringify({ version:1, ...value }));
+  const partition = items => {
+    const acknowledged = read().items;
+    const needsReview = [];
+    const reviewed = [];
+    (items || []).forEach(item => {
+      const isReviewed = item?.is_completed &&
+        acknowledged[identity(item)] === String(item.updated_at || '');
+      (isReviewed ? reviewed : needsReview).push(item);
+    });
+    reviewed.sort((left, right) => String(right.updated_at || '').localeCompare(String(left.updated_at || '')));
+    return { needsReview, reviewed };
+  };
+  return {
+    partition,
+    visible(items) {
+      return partition(items).needsReview;
+    },
+    pending() {
+      const state = read();
+      return Object.entries(state.pending).map(([itemIdentity, stamp]) => {
+        const boundary = itemIdentity.lastIndexOf('#');
+        return receipt({
+          repository:itemIdentity.slice(0, boundary),
+          number:Number(itemIdentity.slice(boundary + 1)),
+        }, stamp);
+      });
+    },
+    adopt(snapshot) {
+      const state = read();
+      let changed = false;
+      (snapshot?.receipts || []).forEach(remote => {
+        const itemIdentity = identity(remote);
+        const stamp = String(remote?.updated_at || '');
+        if (!remote?.repository || !Number.isInteger(remote?.number) || !stamp) return;
+        if (!state.items[itemIdentity] || state.items[itemIdentity] < stamp) {
+          state.items[itemIdentity] = stamp;
+          changed = true;
+        }
+        if (state.pending[itemIdentity] && state.pending[itemIdentity] <= stamp) {
+          delete state.pending[itemIdentity];
+        }
+      });
+      try { save(state); } catch (_error) { return false; }
+      return changed;
+    },
+    acknowledge(item) {
+      const stamp = String(item?.updated_at || '');
+      if (!login() || !item?.is_completed || !item?.repository || !Number.isInteger(item?.number) || !stamp) {
+        return false;
+      }
+      const state = read();
+      const entries = Object.entries({ ...state.items, [identity(item)]: stamp }).slice(-200);
+      const pending = Object.entries({ ...state.pending, [identity(item)]: stamp }).slice(-200);
+      try {
+        save({ items:Object.fromEntries(entries), pending:Object.fromEntries(pending) });
+        return true;
+      } catch (_error) { return false; }
+    },
+  };
+}
+
+function createFiledHistoryTabs({ root, review, onSelect }) {
+  const buttons = Array.from(root.querySelectorAll('[data-filed-view]'));
+  let partition = { needsReview:[], reviewed:[] };
+  buttons.forEach(button => button.addEventListener('click', () => onSelect(button.dataset.filedView)));
+  return {
+    prepare(items) {
+      partition = review.partition(items);
+      root.querySelector('#filed-needs-review-count').textContent =
+        partition.needsReview.filter(item => item.is_filed).length;
+      root.querySelector('#filed-reviewed-count').textContent = partition.reviewed.length;
+      return partition.needsReview;
+    },
+    render(selected, visible) {
+      root.hidden = !visible;
+      buttons.forEach(button =>
+        button.setAttribute('aria-pressed', String(button.dataset.filedView === selected))
+      );
+      return selected === 'reviewed' ? partition.reviewed : partition.needsReview;
+    },
+  };
+}
+
 function agendaMyWork(items, now = new Date()) {
   const start = new Date(now.getFullYear(), now.getMonth(), now.getDate());
   const today = localDay(start);
@@ -958,10 +1069,17 @@ function findQueueItems(items, query) {
   });
 }
 
+function filedFollowUpTarget(items) {
+  const item = (items || []).find(candidate => candidate?.is_filed);
+  if (!item) return null;
+  return { kind:item.has_update ? 'update' : 'issue', item };
+}
+
 function countMyWork(items) {
   return {
     all: items.length,
     attention: items.filter(needsAttention).length,
+    filed: items.filter((item) => item.is_filed).length,
     issue: items.filter((item) => item.kind === 'issue').length,
     pull: items.filter((item) => item.kind === 'pull' && !item.is_review).length,
     review: items.filter((item) => item.is_review).length,
@@ -971,6 +1089,8 @@ function countMyWork(items) {
 
 if (typeof module !== 'undefined' && module.exports) {
   buildMyWork.filterMyWork = filterMyWork;
+  buildMyWork.createCompletedFiledReview = createCompletedFiledReview;
+  buildMyWork.createFiledHistoryTabs = createFiledHistoryTabs;
   buildMyWork.agendaMyWork = agendaMyWork;
   buildMyWork.milestoneLanes = milestoneLanes;
   buildMyWork.createWorkSession = createWorkSession;
@@ -983,6 +1103,7 @@ if (typeof module !== 'undefined' && module.exports) {
   buildMyWork.removeIssue = removeIssue;
   buildMyWork.summarizeMyWork = summarizeMyWork;
   buildMyWork.findQueueItems = findQueueItems;
+  buildMyWork.filedFollowUpTarget = filedFollowUpTarget;
   buildMyWork.countMyWork = countMyWork;
   buildMyWork.acknowledgeNotification = acknowledgeNotification;
   buildMyWork.createNotificationAcknowledger = createNotificationAcknowledger;

frontend/private-data-inventory.js

@@ -0,0 +1,43 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.inspectStackchainPrivateDatabases = factory(root.indexedDB);
+})(typeof globalThis !== 'undefined' ? globalThis : this, function createPrivateDataInspector(indexedDB) {
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error || new Error('Private storage inventory failed.'));
+      request.onblocked = () => reject(new Error('Private storage inventory was blocked.'));
+    });
+  }
+
+  async function countDatabase(name) {
+    const database = await requestResult(indexedDB.open(name));
+    try {
+      const storeNames = Array.from(database.objectStoreNames);
+      if (!storeNames.length) return 0;
+      const transaction = database.transaction(storeNames, 'readonly');
+      const counts = await Promise.all(storeNames.map(storeName =>
+        requestResult(transaction.objectStore(storeName).count())
+      ));
+      return counts.reduce((total, count) => total + Number(count || 0), 0);
+    } finally {
+      database.close();
+    }
+  }
+
+  return async function inspectPrivateDatabases(registeredNames) {
+    if (!indexedDB?.databases) return { recordCount: 0, unavailable: true };
+    try {
+      const existing = new Set((await indexedDB.databases()).map(database => database.name));
+      const counts = await Promise.all(
+        registeredNames.filter(name => existing.has(name)).map(countDatabase)
+      );
+      return {
+        recordCount: counts.reduce((total, count) => total + count, 0),
+        unavailable: false,
+      };
+    } catch (_error) {
+      return { recordCount: 0, unavailable: true };
+    }
+  };
+});

frontend/private-data-registry.js

@@ -0,0 +1,12 @@
+(function (root) {
+  const databases = Object.freeze([
+    'stackchain-background-outbox-v1',
+    'stackchain-offline-work-v2',
+    'stackchain-unfiled-captures-v1',
+    'stackchain-voice-transcripts-v1',
+    'stackchain-search-reply-drafts-v1',
+    'stackchain-conversation-reply-drafts-v1',
+  ]);
+  if (typeof module !== 'undefined' && module.exports) module.exports = databases;
+  else root.stackchainPrivateDatabases = databases;
+})(typeof globalThis !== 'undefined' ? globalThis : this);

frontend/private-device-data.js

@@ -1,5 +1,10 @@
 (function (root, factory) {
-  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  if (typeof module !== 'undefined' && module.exports) {
+    module.exports = options => factory({
+      ...options,
+      privateDatabases: require('./private-data-registry.js'),
+    });
+  }
   else root.stackchainPrivateDeviceData = factory({
     localStorage: root.localStorage,
     sessionStorage: root.sessionStorage,
@@ -7,9 +12,10 @@
     caches: root.caches,
     serviceWorker: root.navigator?.serviceWorker,
     MessageChannel: root.MessageChannel,
+    privateDatabases: root.stackchainPrivateDatabases,
   });
 })(typeof window !== 'undefined' ? window : this, function createPrivateDeviceDataPurger({
-  localStorage, sessionStorage, indexedDB, caches, serviceWorker, MessageChannel,
+  localStorage, sessionStorage, indexedDB, caches, serviceWorker, MessageChannel, privateDatabases,
 }) {
   function removeOwnedStorage(storage) {
     if (!storage) return;
@@ -49,12 +55,10 @@
   }
 
   return async function clearPrivateDeviceData() {
+    await stopWorkerOutbox();
     removeOwnedStorage(localStorage);
     if (sessionStorage !== localStorage) removeOwnedStorage(sessionStorage);
-    await stopWorkerOutbox();
-    await deletePrivateDatabase('stackchain-background-outbox-v1');
-    await deletePrivateDatabase('stackchain-offline-work-v2');
-    await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+    for (const name of privateDatabases) await deletePrivateDatabase(name);
     const keys = await caches?.keys?.() || [];
     await Promise.all(
       keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))

frontend/reconnect-outboxes.js

@@ -0,0 +1,44 @@
+function createReconnectOutboxes({
+  refresh,
+  restoreIdentity,
+  flushIssue,
+  flushAuthored,
+  flushNotificationReads,
+}) {
+  let activeReconnect = null;
+  let followUpRequested = false;
+
+  async function reconnectOnce() {
+    const snapshot = await refresh();
+    const freshness = snapshot?.freshness?.sections?.context;
+    const identityFresh = snapshot?.context && !snapshot.context.error &&
+      !freshness?.stale && !freshness?.degraded && !freshness?.revalidating;
+    const login = identityFresh ? String(snapshot.context.user?.login || '').trim() : '';
+    if (!login) return false;
+    restoreIdentity(login);
+    await Promise.all([
+      flushIssue(),
+      flushAuthored(),
+      flushNotificationReads(),
+    ]);
+    return true;
+  }
+
+  return function reconnectOutboxes() {
+    if (activeReconnect) {
+      followUpRequested = true;
+      return activeReconnect;
+    }
+    activeReconnect = (async () => {
+      let result = false;
+      do {
+        followUpRequested = false;
+        result = await reconnectOnce();
+      } while (followUpRequested);
+      return result;
+    })().finally(() => { activeReconnect = null; });
+    return activeReconnect;
+  };
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = createReconnectOutboxes;

frontend/saved-searches.js

@@ -0,0 +1,159 @@
+(function (root, factory) {
+  const createSavedSearches = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createSavedSearches;
+  if (root) root.createSavedSearches = createSavedSearches;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  function createSavedSearches(options) {
+    const fetchJson = options.fetchJson;
+    const createId = options.createId || (() => crypto.randomUUID().replace(/-/g, ''));
+    const onOpen = options.onOpen;
+    const onState = options.onState || (() => {});
+    let current = { revision:0, views:[] };
+
+    function snapshot() {
+      return { revision:current.revision, views:current.views.map(view => ({ ...view })) };
+    }
+
+    function publish(status, message) {
+      onState({ ...snapshot(), status, ...(message ? { message } : {}) });
+    }
+
+    function normalizeSearch(name, search, id) {
+      const cleanName = String(name || '').trim();
+      const query = String(search?.query || '').trim();
+      if (!cleanName || cleanName.length > 60) throw new Error('Name must be between 1 and 60 characters.');
+      if (query.length < 2 || query.length > 200) throw new Error('Search query must be between 2 and 200 characters.');
+      return {
+        id, name:cleanName, query,
+        kind:['all', 'issue', 'pull'].includes(search?.kind) ? search.kind : 'all',
+        state:['all', 'open', 'closed'].includes(search?.state) ? search.state : 'all',
+        repository:String(search?.repository || '').trim(),
+      };
+    }
+
+    async function replace(views) {
+      publish('saving');
+      try {
+        current = await fetchJson('api/v1/saved-searches', {
+          method:'PUT', headers:{ 'Content-Type':'application/json' },
+          body:JSON.stringify({ revision:current.revision, views }),
+        });
+        publish('ready');
+        return snapshot();
+      } catch (error) {
+        const conflict = error?.status === 409 && error?.payload?.detail?.snapshot;
+        if (conflict) {
+          current = conflict;
+          publish('conflict', 'Saved searches changed on another device.');
+        } else {
+          publish('error', 'Saved searches could not sync. Search still works.');
+        }
+        throw error;
+      }
+    }
+
+    return {
+      async load() {
+        publish('loading');
+        try {
+          current = await fetchJson('api/v1/saved-searches');
+          publish('ready');
+        } catch (error) {
+          publish('error', 'Saved searches could not load. Search still works.');
+        }
+        return snapshot();
+      },
+      save(name, search) {
+        if (current.views.length >= 20) return Promise.reject(new Error('Saved searches are limited to 20.'));
+        const created = normalizeSearch(name, search, createId());
+        return replace(current.views.concat(created));
+      },
+      rename(id, name) {
+        const existing = current.views.find(view => view.id === id);
+        if (!existing) return Promise.reject(new Error('Saved search no longer exists.'));
+        const changed = normalizeSearch(name, existing, existing.id);
+        return replace(current.views.map(view => view.id === id ? changed : view));
+      },
+      remove(id) {
+        if (!current.views.some(view => view.id === id)) return Promise.resolve(snapshot());
+        return replace(current.views.filter(view => view.id !== id));
+      },
+      open(id) {
+        const selected = current.views.find(view => view.id === id);
+        if (selected) onOpen({ ...selected });
+      },
+      snapshot,
+    };
+  }
+
+  createSavedSearches.mount = function mountSavedSearches(document, fetch, search, applyScope, history) {
+    const query = selector => document.querySelector(selector);
+    const input = query('#cmd-input');
+    const request = async (url, init) => {
+      const response = await fetch(url, init);
+      const payload = await response.json().catch(() => ({}));
+      if (!response.ok) {
+        const error = new Error(payload.detail?.message || payload.detail || 'Saved Search request failed.');
+        error.status = response.status;
+        error.payload = payload;
+        throw error;
+      }
+      return payload;
+    };
+    let controller;
+    function render(state) {
+      const list = query('#saved-search-list');
+      const status = query('#saved-search-status');
+      list.replaceChildren();
+      status.textContent = ({loading:'Loading…', saving:'Syncing…', ready:'',
+        conflict:state.message, error:state.message})[state.status] || '';
+      state.views.forEach(view => {
+        const row = document.createElement('div');
+        row.className = 'saved-search-row';
+        const open = document.createElement('button');
+        open.type = 'button'; open.className = 'saved-search-open saved-search-action';
+        open.textContent = view.name; open.title = view.query;
+        open.addEventListener('click', () => controller.open(view.id));
+        const actions = document.createElement('div');
+        actions.className = 'saved-search-row-actions';
+        for (const action of ['Rename', 'Delete']) {
+          const button = document.createElement('button');
+          button.type = 'button'; button.className = 'saved-search-action'; button.textContent = action;
+          button.setAttribute('aria-label', action + ' ' + view.name);
+          button.addEventListener('click', async () => {
+            if (action === 'Rename') {
+              const name = globalThis.prompt('Rename saved search', view.name);
+              if (name !== null && name.trim()) await controller.rename(view.id, name).catch(() => {});
+            } else if (globalThis.confirm('Delete saved search “' + view.name + '”?')) {
+              await controller.remove(view.id).catch(() => {});
+            }
+          });
+          actions.append(button);
+        }
+        row.append(open, actions); list.append(row);
+      });
+    }
+    controller = createSavedSearches({ fetchJson:request, onState:render, onOpen:view => {
+      search.setQuery('');
+      input.value = view.query;
+      applyScope(view);
+      search.setQuery(view.query);
+      history.update({query:view.query, scope:view});
+      input.focus();
+    }});
+    query('#save-current-search').addEventListener('click', async () => {
+      const name = query('#saved-search-name').value.trim();
+      const current = {query:input.value.trim(), kind:query('#cmd-search-kind').value,
+        state:query('#cmd-search-state').value, repository:query('#cmd-search-repository').value.trim()};
+      if (!name || current.query.length < 2) {
+        query('#saved-search-status').textContent = 'Enter a name and at least 2 search characters.';
+        return;
+      }
+      await controller.save(name, current).then(() => { query('#saved-search-name').value = ''; })
+        .catch(error => { query('#saved-search-status').textContent = error.message; });
+    });
+    return controller;
+  };
+
+  return createSavedSearches;
+});

frontend/search-batch-plan.js

@@ -57,15 +57,23 @@
       if (detail?.claimable) return claim(detail);
       throw new Error('This issue is no longer available to assign.');
     }
-    return { identity, eligible, start, cancel, toggle, snapshot, prepare, limit:maximum };
+    function releaseRepository() {
+      const repositories = new Set(Array.from(selected.values()).map(item => item.repository));
+      return repositories.size === 1 ? repositories.values().next().value : null;
+    }
+    return { identity, eligible, start, cancel, toggle, snapshot, prepare, releaseRepository, limit:maximum };
   }
 
   createSearchBatchPlan.mount = function mountSearchBatchPlanning(
     document, batchFactory, todayWork, getOwner, fetchJson, previewPath, queueToday,
-    acceptIssue, lookup, render, escapeHtml, escapeAttribute
+    todaySync, acceptIssue, lookup, render, escapeHtml, escapeAttribute,
+    laterWork = null, laterPicker = null
   ) {
     const get = selector => document.querySelector(selector);
     let processor;
+    let laterProcessor;
+    let releaseProcessor;
+    let releaseContext = null;
     const plan = createSearchBatchPlan({
       resolve:item => fetchJson(previewPath(item), {headers:{Accept:'application/json'}}),
       claim:detail => fetchJson(
@@ -77,6 +85,8 @@
         get('#search-batch-actions').hidden = !state.active;
         get('#select-search-results').hidden = state.active;
         get('#queue-selected-search-results').disabled = state.count === 0;
+        get('#defer-selected-search-results').disabled = state.count === 0;
+        get('#plan-selected-search-results').disabled = state.count === 0;
         get('#search-selection-status').textContent = state.count ?
           state.count + ' issue' + (state.count === 1 ? '' : 's') + ' selected.' : 'No issues selected.';
         render();
@@ -85,10 +95,24 @@
     processor = batchFactory({
       capacity:() => Math.max(0, todayWork.limit - todayWork.read().length),
       owner:getOwner,
+      timeBudget:() => {
+        const planning = todayWork.planning();
+        return {
+          capacity_minutes:planning.capacity_minutes,
+          planned_minutes:Object.values(planning.estimates || {}).reduce((sum, minutes) => sum + minutes, 0),
+        };
+      },
       journalName:'search-today-batch',
       autoMount:false,
       claim:item => plan.prepare(item),
       queue:confirmed => queueToday(acceptIssue(confirmed)),
+      persistEstimate:(confirmed, minutes) => {
+        const planning = todayWork.planning();
+        planning.estimates[todayWork.identity(confirmed)] = minutes;
+        todayWork.replacePlanning(planning);
+        todaySync.enqueueConfiguration(planning.capacity_minutes, planning.estimates);
+        todaySync.flush();
+      },
       onProgress:progress => {
         get('#queue-selected-search-results').disabled = progress.status === 'running';
         if (progress.status === 'running') {
@@ -96,19 +120,186 @@
         } else if (progress.status === 'full') {
           get('#search-selection-status').textContent = 'Today has ' + progress.available + ' remaining slot' +
             (progress.available === 1 ? '.' : 's.');
+        } else if (progress.status === 'estimates-required') {
+          get('#search-batch-estimate-summary').textContent = 'Estimate every selected issue.';
+        } else if (progress.status === 'over-budget') {
+          get('#search-batch-estimate-summary').textContent = progress.requested_minutes +
+            ' min selected · ' + progress.remaining_minutes + ' min remain.';
         } else if (progress.status === 'complete') {
           get('#cmd-search-action-status').textContent = progress.failed.length ?
             progress.queued.length + ' queued · ' + progress.failed.length + ' need retry.' :
             progress.queued.length + ' added to Today.';
           get('#resume-search-batch').hidden = processor.pending() === 0;
+          closeEstimateReview();
           if (!progress.failed.length) plan.cancel();
         }
       },
     });
+    laterProcessor = batchFactory({
+      capacity:() => plan.limit,
+      owner:getOwner,
+      journalName:'search-later-batch',
+      queueFailureReason:'assigned but Later could not be saved',
+      autoMount:false,
+      claim:item => plan.prepare(item),
+      queue:(confirmed, context) => {
+        const outcome = laterWork?.defer(acceptIssue(confirmed), context?.until);
+        return outcome === 'deferred' ? 'queued' : outcome;
+      },
+      onProgress:progress => {
+        get('#defer-selected-search-results').disabled = progress.status === 'running';
+        if (progress.status === 'running') {
+          get('#search-selection-status').textContent = 'Deferring ' + progress.processed + ' of ' + progress.selected + '…';
+        } else if (progress.status === 'complete') {
+          get('#cmd-search-action-status').textContent = progress.failed.length ?
+            progress.queued.length + ' deferred · ' + progress.failed.length + ' need retry.' :
+            progress.queued.length + ' added to Later.';
+          restore();
+          if (!progress.failed.length) plan.cancel();
+        }
+      },
+    });
+    releaseProcessor = batchFactory({
+      capacity:() => plan.limit,
+      owner:getOwner,
+      journalName:'search-release-batch',
+      queueFailureReason:'assigned but release planning could not be confirmed',
+      autoMount:false,
+      claim:item => plan.prepare(item),
+      queue:async (confirmed, context) => {
+        const issuePath = 'api/v1/repos/' + confirmed.repository.split('/').map(encodeURIComponent).join('/') +
+          '/issues/' + encodeURIComponent(confirmed.number);
+        const releasePlan = await fetchJson(issuePath + '/release-plan', {
+          method:'PATCH', headers:{Accept:'application/json','Content-Type':'application/json'},
+          body:JSON.stringify({milestone_id:context.milestone_id, due_date:context.due_date || null}),
+        });
+        if (releasePlan?.number !== confirmed.number ||
+            releasePlan?.milestone?.id !== context.milestone_id ||
+            (context.due_date && releasePlan?.due_date !== context.due_date)) {
+          throw new Error('Issue release plan was not confirmed.');
+        }
+        return 'queued';
+      },
+      onProgress:progress => {
+        get('#confirm-search-release').disabled = progress.status === 'running';
+        if (progress.status === 'running') {
+          get('#search-release-summary').textContent = 'Planning ' + progress.processed + ' of ' + progress.selected + '…';
+        } else if (progress.status === 'complete') {
+          get('#cmd-search-action-status').textContent = progress.failed.length ?
+            progress.queued.length + ' planned · ' + progress.failed.length + ' need retry.' :
+            progress.queued.length + ' planned for ' + (releaseContext?.milestone_title || 'release') + '.';
+          get('#resume-search-batch').hidden = releaseProcessor.pending() === 0;
+          closeReleaseReview();
+          if (!progress.failed.length) plan.cancel();
+        }
+      },
+    });
+    function estimateValues() {
+      return Object.fromEntries(Array.from(document.querySelectorAll('[data-search-batch-estimate]')).map(input =>
+        [input.dataset.searchBatchEstimate, Number(input.value)]
+      ));
+    }
+    function closeEstimateReview() {
+      get('#search-batch-estimate-review').hidden = true;
+      get('#search-batch-actions').hidden = !plan.snapshot().active;
+    }
+    function openEstimateReview(items) {
+      const planning = todayWork.planning();
+      const planned = Object.values(planning.estimates || {}).reduce((sum, minutes) => sum + minutes, 0);
+      const remaining = Math.max(0, planning.capacity_minutes - planned);
+      get('#search-batch-estimate-summary').textContent = remaining +
+        ' min remain. Estimate before assigning.';
+      get('#search-batch-estimate-list').innerHTML = items.map(item => {
+        const id = String(item.repository || '') + '#' + String(item.number || '');
+        const estimate = planning.estimates?.[id] || '';
+        return '<div class="search-batch-estimate-row"><div><span class="small">' + escapeHtml(id) +
+          '</span><strong>' + escapeHtml(item.title || 'Untitled work') + '</strong></div><label class="small">' +
+          '<input type="number" inputmode="numeric" min="5" max="1440" step="5" value="' +
+          escapeAttribute(estimate) + '" data-search-batch-estimate="' + escapeAttribute(id) +
+          '" aria-label="Estimate for ' + escapeAttribute(item.title || id) + ' in minutes" /> min</label></div>';
+      }).join('');
+      get('#search-batch-actions').hidden = true;
+      get('#search-batch-estimate-review').hidden = false;
+      document.querySelector('[data-search-batch-estimate]')?.focus();
+    }
+    function closeReleaseReview() {
+      get('#search-release-review').hidden = true;
+      get('#search-batch-actions').hidden = !plan.snapshot().active;
+    }
+    async function openReleaseReview() {
+      const items = plan.snapshot().items;
+      const repository = plan.releaseRepository();
+      if (!items.length) return;
+      if (!repository) {
+        get('#search-selection-status').textContent = 'Select issues from one repository to plan a release.';
+        return;
+      }
+      get('#plan-selected-search-results').disabled = true;
+      get('#search-selection-status').textContent = 'Loading release milestones…';
+      try {
+        const milestones = await fetchJson(
+          'api/v1/repos/' + repository.split('/').map(encodeURIComponent).join('/') + '/milestones',
+          {headers:{Accept:'application/json'}}
+        );
+        const open = (Array.isArray(milestones) ? milestones : []).filter(item => item?.state !== 'closed');
+        get('#search-release-milestone').innerHTML = '<option value="">Choose milestone</option>' + open.map(item =>
+          '<option value="' + Number(item.id) + '">' + escapeHtml(item.title) + '</option>'
+        ).join('');
+        get('#search-release-list').innerHTML = items.map(item => '<div class="search-release-row"><span>' +
+          escapeHtml(item.repository + ' #' + item.number) + '</span><strong>' +
+          escapeHtml(item.title || 'Untitled work') + '</strong></div>').join('');
+        get('#search-release-summary').textContent = items.length + ' issues in ' + repository + '. Assignment starts only after confirmation.';
+        get('#search-batch-actions').hidden = true;
+        get('#search-release-review').hidden = false;
+        get('#search-release-milestone').focus();
+      } catch (error) {
+        get('#search-selection-status').textContent = error?.message || 'Milestones could not be loaded. Try again.';
+      } finally {
+        get('#plan-selected-search-results').disabled = false;
+      }
+    }
     get('#select-search-results').addEventListener('click', () => plan.start());
     get('#cancel-search-selection').addEventListener('click', () => plan.cancel());
-    get('#queue-selected-search-results').addEventListener('click', () => processor.run(plan.snapshot().items));
-    get('#resume-search-batch').addEventListener('click', () => processor.resume());
+    get('#queue-selected-search-results').addEventListener('click', () => {
+      const items = plan.snapshot().items;
+      const capacity = todayWork.planning().capacity_minutes;
+      if (Number.isInteger(capacity) && capacity > 0) openEstimateReview(items);
+      else processor.run(items);
+    });
+    get('#defer-selected-search-results').addEventListener('click', event => {
+      const items = plan.snapshot().items;
+      if (!items.length) return;
+      laterPicker?.open({ items, confirm:until => () => laterProcessor.run(
+        items, {}, { until:new Date(until).toISOString() }
+      ) }, event.currentTarget, 'search-batch');
+    });
+    get('#plan-selected-search-results').addEventListener('click', openReleaseReview);
+    get('#cancel-search-release').addEventListener('click', closeReleaseReview);
+    get('#confirm-search-release').addEventListener('click', () => {
+      const milestoneSelect = get('#search-release-milestone');
+      const milestoneId = Number(milestoneSelect.value);
+      if (!Number.isInteger(milestoneId) || milestoneId < 1) {
+        get('#search-release-summary').textContent = 'Choose an open milestone.';
+        return;
+      }
+      const selectedOption = milestoneSelect.options?.[milestoneSelect.selectedIndex];
+      const milestoneTitle = selectedOption?.textContent || selectedOption?.text || 'release';
+      const dueDay = get('#search-release-due-date').value;
+      releaseContext = {
+        milestone_id:milestoneId, milestone_title:milestoneTitle,
+        due_date:dueDay ? dueDay + 'T23:59:59Z' : null,
+      };
+      releaseProcessor.run(plan.snapshot().items, {}, releaseContext);
+    });
+    get('#cancel-search-batch-estimates').addEventListener('click', closeEstimateReview);
+    get('#confirm-search-batch-estimates').addEventListener('click', () =>
+      processor.run(plan.snapshot().items, estimateValues())
+    );
+    get('#resume-search-batch').addEventListener('click', () => {
+      if (processor.pending()) return processor.resume();
+      if (laterProcessor.pending()) return laterProcessor.resume();
+      return releaseProcessor.resume();
+    });
     get('#open-palette').addEventListener('click', () => restore());
     get('#cmd-results').addEventListener('change', event => {
       const index = event.target?.dataset?.searchSelect;
@@ -117,7 +308,7 @@
       if (result) plan.toggle(result);
     });
     function restore() {
-      const pending = processor.pending();
+      const pending = processor.pending() + laterProcessor.pending() + releaseProcessor.pending();
       get('#resume-search-batch').hidden = pending === 0;
       get('#resume-search-batch').textContent = 'Resume ' + pending + ' interrupted';
     }
@@ -131,7 +322,7 @@
         escapeHtml(result.repository) + ' #' + escapeHtml(result.number) + ' · ' +
         (allowed ? 'Open issue' : 'Not eligible') + '</span></label>';
     }
-    return { plan, processor, restore, resultHtml };
+    return { plan, processor, laterProcessor, releaseProcessor, restore, resultHtml };
   };
 
   return createSearchBatchPlan;

frontend/search-preview.js

@@ -81,15 +81,18 @@
       }
       input.value = preview.replyDraft();
       const replying = state.status === 'replying';
-      buttons.forEach(button => { button.disabled = replying || !input.value.trim(); });
-      if (replying) status.textContent = 'Sending reply…';
+      buttons.forEach(button => {
+        button.disabled = replying || (!input.value.trim() && !preview.hasReplyAttachments?.());
+      });
+      if (replying) status.textContent = 'Saving reply for delivery…';
+      else if (state.status === 'queued') status.textContent = 'Reply queued. It will send when connected.';
       else if (state.status === 'replied') status.textContent = 'Reply posted.';
       else if (state.status === 'reply-error') status.textContent =
         state.error?.message || 'Reply failed. Your draft is safe; retry when ready.';
     };
   }
 })(typeof globalThis !== 'undefined' ? globalThis : this, function () {
-  return function createSearchPreview({ fetchJson, fetchConversation, mutate, share, postReply, storage, createOperationId, session, getSession, loadMore, onNavigate, navigationRoot, onState }) {
+  return function createSearchPreview({ fetchJson, fetchConversation, mutate, share, postReply, queueReply, prepareReply, afterReply, hasAttachments, clearAttachments, storage, createOperationId, session, getSession, loadMore, onNavigate, navigationRoot, onState }) {
     if (Array.isArray(session)) {
       getSession = session[0];
       loadMore = () => session[1].loadMore();
@@ -201,7 +204,11 @@
     }
 
     const api = {
+      hasReplyAttachments() {
+        return Boolean(hasAttachments?.());
+      },
       open(item) {
+        if (current && !sameItem(current, item) && hasAttachments?.()) clearAttachments?.();
         generation += 1;
         const requestGeneration = generation;
         current = { ...item };
@@ -225,6 +232,7 @@
         });
       },
       close() {
+        clearAttachments?.();
         generation += 1;
         current = null;
         onState({ status: 'closed' });
@@ -282,9 +290,11 @@
       },
       reply({ advance = false } = {}) {
         if (replyRequest) return replyRequest;
-        if (!current || typeof postReply !== 'function') return Promise.reject(new Error('Replying is unavailable.'));
+        if (!current || (typeof postReply !== 'function' && typeof queueReply !== 'function')) {
+          return Promise.reject(new Error('Replying is unavailable.'));
+        }
         const body = api.replyDraft().trim();
-        if (!body) return Promise.reject(new Error('Write a reply first.'));
+        if (!body && !hasAttachments?.()) return Promise.reject(new Error('Write a reply or add a photo first.'));
         const item = { ...current };
         const operationKey = replyKey(item, 'operation');
         let operationId = stored(operationKey);
@@ -293,13 +303,24 @@
           save(operationKey, operationId);
         }
         publish({ status:'replying', item:current, detail:current, conversation });
-        replyRequest = postReply(item, body, operationId).then(comment => {
-          const comments = [...(conversation?.comments || [])];
-          if (!comments.some(candidate => candidate?.id === comment?.id)) comments.push(comment);
-          conversation = { status:'ready', comments, olderPage:conversation?.olderPage ?? null };
+        replyRequest = (typeof queueReply === 'function' ?
+          Promise.resolve(queueReply(item, body, operationId)) :
+          Promise.resolve(typeof prepareReply === 'function' ? prepareReply(item, body) : body)
+            .then(preparedBody => {
+              if (!String(preparedBody || '').trim()) throw new Error('Write a reply or add a photo first.');
+              return postReply(item, preparedBody, operationId);
+            })
+        ).then(async comment => {
+          await afterReply?.(item);
+          if (!comment?.queued) {
+            const comments = [...(conversation?.comments || [])];
+            if (!comments.some(candidate => candidate?.id === comment?.id)) comments.push(comment);
+            conversation = { status:'ready', comments, olderPage:conversation?.olderPage ?? null };
+          }
           save(replyKey(item, 'draft'), '');
           save(operationKey, '');
-          publish({ status:'replied', item:current, detail:current, conversation, result:comment });
+          clearAttachments?.();
+          publish({ status:comment?.queued ? 'queued' : 'replied', item:current, detail:current, conversation, result:comment });
           return advance ? api.next().then(() => comment) : comment;
         }).catch(error => {
           publish({ status:'reply-error', item:current, detail:current, conversation, error });

frontend/search-reply-draft-store.js

@@ -0,0 +1,121 @@
+(function (root, factory) {
+  const createSearchReplyDraftStore = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createSearchReplyDraftStore;
+  else root.createSearchReplyDraftStore = createSearchReplyDraftStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const dbName = 'stackchain-search-reply-drafts-v1';
+  const storeName = 'drafts';
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result ?? null);
+      request.onerror = () => reject(request.error || new Error('Search reply draft storage failed.'));
+    });
+  }
+
+  function createTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise;
+    function database() {
+      if (!databasePromise) databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(storeName)) {
+            request.result.createObjectStore(storeName, { keyPath:'id' });
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Search reply draft storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (operation, key, value) => {
+      const db = await database();
+      const transaction = db.transaction(storeName, operation === 'get' ? 'readonly' : 'readwrite');
+      const records = transaction.objectStore(storeName);
+      if (operation === 'put') return requestResult(records.put(value));
+      if (operation === 'delete') return requestResult(records.delete(key));
+      return requestResult(records.get(key));
+    };
+  }
+
+  function normalizedTarget(target) {
+    const kind = String(target?.kind || '');
+    const repository = String(target?.repository || '');
+    const number = Number(target?.number || 0);
+    if (!['issue', 'pull'].includes(kind) || !repository || !Number.isInteger(number) || number < 1) {
+      throw new Error('Choose a Search result before saving photo evidence.');
+    }
+    return { kind, repository, number };
+  }
+
+  function attachment(value) {
+    const blob = value?.blob;
+    const data = String(value?.data || '');
+    if (!blob && !data) throw new Error('A saved Search photo is unavailable.');
+    const note = String(value?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    const operationId = String(value?.operationId || '').slice(0, 128);
+    const markdown = String(value?.confirmed?.markdown || '');
+    return {
+      filename:String(value?.filename || ''),
+      contentType:String(value?.contentType || ''),
+      ...(blob ? { blob } : { data }),
+      ...(note ? { note } : {}),
+      ...(operationId ? { operationId } : {}),
+      ...(markdown ? { confirmed:{ markdown } } : {}),
+    };
+  }
+
+  return function createSearchReplyDraftStore({
+    indexedDB = globalThis.indexedDB,
+    transaction,
+    getOwnerLogin = () => '',
+  } = {}) {
+    const transact = transaction || createTransaction(indexedDB);
+
+    function identity(target) {
+      const ownerLogin = String(getOwnerLogin() || '').trim();
+      if (!ownerLogin) throw new Error('Confirm your Gitea account before saving Search photos.');
+      const normalized = normalizedTarget(target);
+      return {
+        ownerLogin,
+        target:normalized,
+        id:[ownerLogin, normalized.kind, normalized.repository, normalized.number]
+          .map(value => encodeURIComponent(String(value))).join(':'),
+      };
+    }
+
+    async function save(target, values) {
+      if (!transact) throw new Error('Photo draft storage needs IndexedDB. Your current photos are still here.');
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const list = (Array.isArray(values) ? values : [values]).filter(Boolean).slice(0, 5).map(attachment);
+      if (!list.length) {
+        await transact('delete', id);
+        return null;
+      }
+      await transact('put', id, { id, version:1, ownerLogin, ...normalized, attachments:list });
+      return list;
+    }
+
+    async function load(target) {
+      if (!transact) return null;
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const record = await transact('get', id);
+      if (record?.version !== 1 || record.ownerLogin !== ownerLogin || record.kind !== normalized.kind ||
+          record.repository !== normalized.repository || Number(record.number) !== normalized.number ||
+          !Array.isArray(record.attachments) || !record.attachments.length) return null;
+      return record.attachments.slice(0, 5).map(attachment);
+    }
+
+    async function remove(target) {
+      if (!transact) return false;
+      const { id } = identity(target);
+      await transact('delete', id);
+      return true;
+    }
+
+    return { save, load, remove };
+  };
+});

frontend/security-center.js

@@ -12,8 +12,49 @@
   const activityList = root.document.getElementById('security-activity-list');
   const activityStatus = root.document.getElementById('security-activity-status');
   const loadMoreActivity = root.document.getElementById('load-more-security-activity');
+  const sectionButtons = Object.fromEntries(['activity', 'devices', 'passkeys'].map(section => [
+    section, root.document.getElementById(`security-section-${section}`),
+  ]));
+  const sections = Object.fromEntries(['activity', 'devices', 'passkeys'].map(section => [
+    section, root.document.getElementById(`security-${section}-section`),
+  ]));
   let activityCursor = null;
 
+  const navigate = (section, { history = true } = {}) => {
+    if (!sections[section]) section = 'activity';
+    Object.entries(sectionButtons).forEach(([name, button]) => {
+      if (!button) return;
+      if (name === section) button.setAttribute('aria-current', 'page');
+      else button.removeAttribute('aria-current');
+    });
+    sections[section]?.scrollIntoView?.({ block: 'start' });
+    if (history && root.history?.pushState) {
+      root.history.pushState(
+        { ...(root.history.state || {}), stackchainSecuritySection: section },
+        '',
+        `${root.location.pathname}${root.location.search || ''}#security/${section}`,
+      );
+    }
+  };
+
+  Object.entries(sectionButtons).forEach(([section, button]) => {
+    button?.addEventListener('click', () => navigate(section));
+  });
+  root.document.getElementById('close-active-devices')?.addEventListener('click', () => {
+    if (root.history?.state?.stackchainSecuritySection) root.history.back();
+  });
+  root.addEventListener?.('popstate', event => {
+    const section = event.state?.stackchainSecuritySection;
+    if (section && !devicesSheet.hidden) {
+      navigate(section, { history: false });
+      return;
+    }
+    if (!devicesSheet.hidden) {
+      devicesSheet.hidden = true;
+      devicesButton?.focus();
+    }
+  });
+
   const renderDevices = async () => {
     devicesStatus.textContent = 'Loading active devices…';
     devicesList.replaceChildren();
@@ -40,7 +81,9 @@
         revoke.textContent = device.current ? 'Sign out' : 'Revoke';
         revoke.addEventListener('click', async () => {
           if (device.current) await boundary.signOut();
-          else if (await boundary.revokeActiveDevice(device)) await renderDevices();
+          else if (await boundary.revokeActiveDevice(device)) {
+            await Promise.all([renderDevices(), renderSecurityActivity()]);
+          }
         });
         row.append(details, revoke);
         devicesList.append(row);
@@ -82,6 +125,7 @@
                 : 'Passkey removed.';
               await renderPasskeys();
               if (outcome.session_revoked) await renderDevices();
+              await renderSecurityActivity();
             } else {
               remove.disabled = false;
               passkeysStatus.textContent = `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`;
@@ -122,7 +166,11 @@
           const details = root.document.createElement('span');
           details.className = 'small muted';
           details.textContent = formatted.detail;
-          row.append(title, details);
+          const action = root.document.createElement('button');
+          action.type = 'button';
+          action.textContent = 'Review devices';
+          action.addEventListener('click', () => navigate('devices'));
+          row.append(title, details, action);
           activityList.append(row);
         });
       }
@@ -150,6 +198,13 @@
           .filter(value => typeof value === 'string' && value).join(' · ');
         details.textContent = `${new Date(event.created_at * 1000).toLocaleString()}${context ? ' · ' + context : ''}`;
         row.append(title, details);
+        if (event.kind === 'passkey_counter_anomaly') {
+          const action = root.document.createElement('button');
+          action.type = 'button';
+          action.textContent = 'Review passkeys';
+          action.addEventListener('click', () => navigate('passkeys'));
+          row.append(action);
+        }
         activityList.append(row);
       });
       activityCursor = page.next_cursor;
@@ -169,6 +224,7 @@
     if (!devicesSheet) return;
     devicesSheet.hidden = false;
     root.document.getElementById('close-active-devices')?.focus();
+    navigate('activity', { history: root.history?.state?.stackchainSecuritySection !== 'activity' });
     return Promise.all([renderDevices(), renderPasskeys(), renderSecurityActivity()]);
   };
   devicesButton?.addEventListener('click', open);
@@ -186,5 +242,5 @@
       enrollPasskey.disabled = false;
     }
   });
-  return { open, renderDevices, renderPasskeys, renderSecurityActivity };
+  return { open, navigate, renderDevices, renderPasskeys, renderSecurityActivity };
 });

frontend/service-worker.js

@@ -1,10 +1,12 @@
 const BASE = new URL('./', self.location.href).pathname;
+importScripts(BASE + 'static/private-data-registry.js');
 importScripts(BASE + 'static/background-issue-sync.js');
-const CACHE = 'stackchain-dashboard-shell-v101';
+const CACHE = 'stackchain-dashboard-shell-v117';
 const OFFLINE_LEASE_URL = new URL(BASE + '__offline-session-lease', self.location.origin).href;
 const OUTAGE_STATUSES = new Set([500, 502, 503, 504]);
 const NAVIGATION_TIMEOUT_MS = self.__STACKCHAIN_NAVIGATION_TIMEOUT_MS || 4000;
 const PUSH_ACTION_TIMEOUT_MS = self.__STACKCHAIN_PUSH_ACTION_TIMEOUT_MS || 8000;
+const PRIVATE_DATABASES = self.stackchainPrivateDatabases;
 const SHELL = [
   BASE,
   BASE + 'manifest.webmanifest',
@@ -14,19 +16,27 @@ const SHELL = [
   BASE + 'static/icons/stackchain-512.png',
   BASE + 'static/session.js',
   BASE + 'static/feature-loader.js',
+  BASE + 'static/workspace-bootstrap.js',
+  BASE + 'static/conversation-action-hydrator.js',
   BASE + 'static/security-center.js',
   BASE + 'static/markdown.js',
   BASE + 'static/commands.js',
+  BASE + 'static/saved-searches.js',
   BASE + 'static/search-preview.js',
+  BASE + 'static/search-reply-draft-store.js',
+  BASE + 'static/conversation-reply-draft-store.js',
+  BASE + 'static/conversation-photo-drafts.js',
   BASE + 'static/search-defer.js',
   BASE + 'static/widgets.js',
   BASE + 'static/drafts.js',
   BASE + 'static/unfiled-captures.js',
+  BASE + 'static/unfiled-draft-sync.js',
   BASE + 'static/shared-image-capture.js',
   BASE + 'static/draft-filing-session.js',
   BASE + 'static/draft-capacity-dialog.js',
   BASE + 'static/outbox-coordinator.js',
   BASE + 'static/issue-outbox.js',
+  BASE + 'static/reconnect-outboxes.js',
   BASE + 'static/authored-outbox.js',
   BASE + 'static/offline-issue-close.js',
   BASE + 'static/offline-issue-blocker.js',
@@ -42,6 +52,8 @@ const SHELL = [
   BASE + 'static/today-work.js',
   BASE + 'static/today-timer.js',
   BASE + 'static/today-recap.js',
+  BASE + 'static/today-wrap-up.js',
+  BASE + 'static/today-handoff.js',
   BASE + 'static/today-completion.js',
   BASE + 'static/today-readiness.js',
   BASE + 'static/comment-next.js',
@@ -63,11 +75,27 @@ const SHELL = [
   BASE + 'static/search-batch-plan.js',
   BASE + 'static/conversation.js',
   BASE + 'static/comment-actions.js',
+  BASE + 'static/issue-evidence-review.js',
+  BASE + 'static/issue-evidence-editor.js',
   BASE + 'static/issue-attachment.js',
+  BASE + 'static/issue-filing-review.js',
   BASE + 'static/issue-sheet.js',
+  BASE + 'static/mobile-issue-detail-nav.js',
+  BASE + 'static/mobile-update-detail-nav.js',
+  BASE + 'static/mobile-review-detail-nav.js',
+  BASE + 'static/mobile-search-preview-nav.js',
+  BASE + 'static/mobile-plan-today-nav.js',
+  BASE + 'static/mobile-find-work-nav.js',
+  BASE + 'static/mobile-pull-refresh.js',
+  BASE + 'static/checklist-conflict.js',
+  BASE + 'static/voice-transcript-store.js',
+  BASE + 'static/voice-issue-capture.js',
+  BASE + 'static/voice-conversation-capture.js',
   BASE + 'static/create-issue-sheet.js',
+  BASE + 'static/mobile-create-issue-nav.js',
   BASE + 'static/create-and-start.js',
   BASE + 'static/assign-and-start.js',
+  BASE + 'static/filed-claim.js',
   BASE + 'static/queue-today.js',
   BASE + 'static/pull-sheet.js',
   BASE + 'static/review-sheet.js',
@@ -78,6 +106,8 @@ const SHELL = [
   BASE + 'static/mobile-task-dock.js',
   BASE + 'static/mobile-work-entry.js',
   BASE + 'static/mobile-queue-launcher.js',
+  BASE + 'static/mobile-delivery-recovery.js',
+  BASE + 'static/mobile-start-day.js',
   BASE + 'static/update-triage-session.js',
   BASE + 'static/update-review-handoff.js',
   BASE + 'static/update-read-position.js',
@@ -87,13 +117,18 @@ const SHELL = [
   BASE + 'static/update-decision-transaction.js',
   BASE + 'static/agenda-session-launcher.js',
   BASE + 'static/mobile-launch.js',
+  BASE + 'static/mobile-insights.js',
   BASE + 'static/mobile-app-shortcuts.js',
   BASE + 'static/install-app.js',
+  BASE + 'static/private-data-inventory.js',
+  BASE + 'static/private-device-data.js',
+  BASE + 'static/device-storage.js',
   BASE + 'static/mobile-device-setup.js',
   BASE + 'static/mobile-search-viewport.js',
   BASE + 'static/mobile-composer-viewport.js',
   BASE + 'static/mention-composer.js',
   BASE + 'static/push-notifications.js',
+  BASE + 'static/issue-filing-receipt.js',
   BASE + 'static/background-issue-sync.js',
 ];
 const OPTIONAL_FEATURES = [
@@ -102,6 +137,7 @@ const OPTIONAL_FEATURES = [
 const SHARED_IMAGE_ID = 'shared-image';
 const SHARED_IMAGE_TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 const MAX_SHARED_IMAGE_BYTES = 12 * 1024 * 1024;
+const SHARE_TARGET_PATH = BASE + 'share-target';
 const sharedAttachmentStore = self.__STACKCHAIN_SHARED_ATTACHMENT_STORE || createUnfiledAttachmentStore();
 
 function boundedShareField(form, name, limit) {
@@ -109,34 +145,46 @@ function boundedShareField(form, name, limit) {
   return typeof value === 'string' ? value.trim().slice(0, limit) : '';
 }
 
-async function acceptSharedContent(request) {
-  const form = await request.formData();
-  const images = form.getAll('image').filter(value => typeof value !== 'string' && value?.size > 0);
-  let marker = '';
-  await sharedAttachmentStore.delete(SHARED_IMAGE_ID).catch(() => {});
-  if (images.length > 1) marker = 'multiple';
-  else if (images.length === 1) {
-    const image = images[0];
-    if (!SHARED_IMAGE_TYPES.has(String(image.type || '')) || image.size > MAX_SHARED_IMAGE_BYTES) {
-      marker = 'unsupported';
-    } else {
-      await sharedAttachmentStore.put(SHARED_IMAGE_ID, {
-        filename:String(image.name || 'shared-screenshot').slice(0, 255),
-        contentType:String(image.type), blob:image,
-      });
-      marker = 'image';
-    }
-  }
+function sharedContentRedirect(marker) {
   const target = new URL(BASE, self.location.origin);
   target.searchParams.set('launch', 'new');
   if (marker) target.searchParams.set('shared', marker);
-  for (const [name, limit] of [['title', 255], ['text', 10000], ['url', 2048]]) {
-    const value = boundedShareField(form, name, limit);
-    if (value) target.searchParams.set(name, value);
-  }
   return new Response(null, {status:303, headers:{Location:target.pathname + target.search}});
 }
 
+async function acceptSharedContent(request) {
+  if (request.headers.get('Sec-Fetch-Site') === 'cross-site') {
+    return new Response('Cross-site share submissions are not accepted.', {
+      status:403,
+      headers:{'Content-Type':'text/plain; charset=utf-8','Cache-Control':'no-store'},
+    });
+  }
+  const form = await request.formData();
+  const images = form.getAll('image').filter(value => typeof value !== 'string' && value?.size > 0);
+  const content = {
+    title:boundedShareField(form, 'title', 255),
+    text:boundedShareField(form, 'text', 10000),
+    url:boundedShareField(form, 'url', 2048),
+  };
+  if (images.length > 5) return sharedContentRedirect('multiple');
+  const supported = images.every(image =>
+    SHARED_IMAGE_TYPES.has(String(image.type || '')) && image.size <= MAX_SHARED_IMAGE_BYTES
+  );
+  const totalBytes = images.reduce((total, image) => total + image.size, 0);
+  if (!supported || totalBytes > MAX_SHARED_IMAGE_BYTES) return sharedContentRedirect('unsupported');
+  if (!images.length && !Object.values(content).some(Boolean)) return sharedContentRedirect('unsupported');
+  const attachments = images.map(image => ({
+    filename:String(image.name || 'shared-screenshot').slice(0, 255),
+    contentType:String(image.type), blob:image,
+  }));
+  try {
+    await sharedAttachmentStore.put(SHARED_IMAGE_ID, {...content, attachments});
+  } catch (_error) {
+    return sharedContentRedirect('unavailable');
+  }
+  return sharedContentRedirect('bundle');
+}
+
 async function fetchNavigation(request) {
   const controller = new AbortController();
   let timeout;
@@ -192,9 +240,13 @@ async function deletePrivateDatabase(name) {
   });
 }
 
+async function deletePrivateDatabases() {
+  for (const name of PRIVATE_DATABASES) await deletePrivateDatabase(name);
+}
+
 async function purgeRevokedSessionData() {
   await issueSync.purge();
-  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+  await deletePrivateDatabases();
   const keys = await caches.keys();
   await Promise.all(
     keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -231,7 +283,7 @@ async function offlineLeaseState(cache) {
 
 async function expiredOfflineResponse() {
   await issueSync.purge();
-  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+  await deletePrivateDatabases();
   const keys = await caches.keys();
   await Promise.all(
     keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -315,7 +367,7 @@ async function flushAndNotify() {
       body: needsAuthorization ? 'Tap to authorize it in the Delivery center.' :
         needsAttention ? 'Tap to review it in Drafts.' : 'Tap to open it in Stackchain.',
       tag: 'stackchain-delivery-' + receipt.id,
-      data: { route: receipt.route },
+      data: receipt.url ? { url: receipt.url } : { route: receipt.route },
     });
   }
 }
@@ -324,15 +376,40 @@ self.addEventListener('install', event => {
   event.waitUntil(caches.open(CACHE).then(cache => cache.addAll(SHELL)).then(() => self.skipWaiting()));
 });
 
+async function warmOptionalFeature(cache, staleCacheNames, asset) {
+  for (const cacheName of staleCacheNames) {
+    const staleCache = await caches.open(cacheName);
+    const cached = await staleCache.match(asset);
+    if (cached) {
+      await cache.put(asset, cached);
+      return;
+    }
+  }
+  await cache.add(asset);
+}
+
+async function cachedOptionalFeature(request) {
+  const cached = await caches.match(request);
+  if (cached) return cached;
+  const response = await fetch(request);
+  if (response.ok) {
+    const cache = await caches.open(CACHE);
+    await cache.put(request, response.clone());
+  }
+  return response;
+}
+
 self.addEventListener('activate', event => {
   event.waitUntil((async () => {
     const keys = await caches.keys();
-    await Promise.all(
-      keys.filter(key => key.startsWith('stackchain-dashboard-') && key !== CACHE)
-        .map(key => caches.delete(key))
+    const staleCacheNames = keys.filter(
+      key => key.startsWith('stackchain-dashboard-') && key !== CACHE
     );
     const cache = await caches.open(CACHE);
-    await Promise.allSettled(OPTIONAL_FEATURES.map(asset => cache.add(asset)));
+    await Promise.allSettled(
+      OPTIONAL_FEATURES.map(asset => warmOptionalFeature(cache, staleCacheNames, asset))
+    );
+    await Promise.all(staleCacheNames.map(key => caches.delete(key)));
     await self.clients.claim();
   })());
 });
@@ -352,7 +429,7 @@ self.addEventListener('message', event => {
   if (event.data?.type === 'stackchain-purge-outbox') event.waitUntil((async () => {
     try {
       await issueSync.purge();
-      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+      await deletePrivateDatabases();
       event.ports?.[0]?.postMessage({ ok: true });
     } catch (error) {
       event.ports?.[0]?.postMessage({ ok: false, error: String(error?.message || 'Outbox purge failed.') });
@@ -435,8 +512,29 @@ async function openWorkRoute(route) {
   return client.focus();
 }
 
+async function openCanonicalIssueUrl(rawUrl) {
+  let target;
+  try { target = new URL(rawUrl); } catch (_error) { return; }
+  if (
+    target.origin !== self.location.origin
+    || !/^\/git\/[^/]+\/[^/]+\/issues\/\d+$/.test(target.pathname)
+    || target.search || target.hash
+  ) return;
+  const windows = await self.clients.matchAll({ type: 'window', includeUncontrolled: true });
+  const client = windows.find(candidate => candidate.url.startsWith(self.location.origin + BASE));
+  if (!client) return self.clients.openWindow(target.href);
+  if (client.navigate) await client.navigate(target.href);
+  return client.focus();
+}
+
 self.addEventListener('notificationclick', event => {
   const route = String(event.notification.data?.route || '');
+  const issueUrl = String(event.notification.data?.url || '');
+  if (issueUrl) {
+    event.notification.close();
+    event.waitUntil(openCanonicalIssueUrl(issueUrl));
+    return;
+  }
   if (event.action === 'protect-today') {
     const protectRoute = String(event.notification.data?.protectRoute || route);
     if (
@@ -516,7 +614,7 @@ self.addEventListener('fetch', event => {
   const requestUrl = new URL(request.url);
   if (
     request.method === 'POST' && request.mode === 'navigate'
-    && requestUrl.origin === self.location.origin && requestUrl.pathname === BASE
+    && requestUrl.origin === self.location.origin && requestUrl.pathname === SHARE_TARGET_PATH
   ) {
     event.respondWith(acceptSharedContent(request));
     return;
@@ -553,6 +651,6 @@ self.addEventListener('fetch', event => {
     return;
   }
   if (url.origin === self.location.origin && OPTIONAL_FEATURES.includes(url.pathname)) {
-    event.respondWith(caches.match(request).then(cached => cached || fetch(request)));
+    event.respondWith(cachedOptionalFeature(request));
   }
 });

frontend/session.js

@@ -1,5 +1,10 @@
 (function (root, factory) {
-  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  if (typeof module !== 'undefined' && module.exports) {
+    module.exports = options => factory({
+      ...options,
+      privateDatabases: require('./private-data-registry.js'),
+    });
+  }
   else {
     const base = new URL('./', root.location.href).pathname;
     const originalFetch = root.fetch.bind(root);
@@ -15,6 +20,7 @@
       serviceWorker: root.navigator?.serviceWorker,
       credentials: root.navigator?.credentials,
       MessageChannel: root.MessageChannel,
+      privateDatabases: root.stackchainPrivateDatabases,
       location: root.location,
       addActivityListener: (type, listener, options) => root.addEventListener(type, listener, options),
       confirmAction: message => root.confirm(message),
@@ -30,6 +36,7 @@
     root.fetch = boundary.fetch;
     const attach = () => {
       boundary.startActivityHeartbeat();
+      boundary.startReconnectResume();
       const button = root.document.getElementById('sign-out');
       if (button) button.addEventListener('click', () => boundary.signOut());
       const allDevicesButton = root.document.getElementById('sign-out-all');
@@ -82,7 +89,7 @@
     root.stackchainSession = boundary;
   }
 })(typeof window !== 'undefined' ? window : this, function createSessionBoundary({
-  cookie, origin, base, fetchImpl, localStorage, sessionStorage, indexedDB, caches, serviceWorker, credentials, MessageChannel, location, confirmAction, addActivityListener,
+  cookie, origin, base, fetchImpl, localStorage, sessionStorage, indexedDB, caches, serviceWorker, credentials, MessageChannel, privateDatabases, location, confirmAction, addActivityListener,
   promptAuthorization = () => null,
   onExpired = () => {},
   onClearError = () => {},
@@ -381,6 +388,12 @@
     });
   }
 
+  function startReconnectResume() {
+    addActivityListener?.('online', async () => {
+      if (await refreshOfflineLease()) await resumeQueuedWork();
+    });
+  }
+
   async function refreshOfflineLease() {
     try {
       const response = await sessionFetch(base + 'api/v1/session');
@@ -454,9 +467,7 @@
     if (sessionStorage !== localStorage) removeDashboardStorage(sessionStorage);
     try {
       await stopWorkerOutbox();
-      await deletePrivateDatabase('stackchain-background-outbox-v1');
-      await deletePrivateDatabase('stackchain-offline-work-v2');
-      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+      for (const name of privateDatabases) await deletePrivateDatabase(name);
     } catch (_error) {
       const error = new Error('Could not clear private queued work from this device.');
       onClearError(error);
@@ -613,6 +624,7 @@
     handleServiceWorkerMessage,
     refreshOfflineLease,
     resumeQueuedWork,
+    startReconnectResume,
     recordActivity,
     startActivityHeartbeat,
   };

frontend/shared-image-capture.js

@@ -8,13 +8,46 @@
   const RECORD_ID = 'shared-image';
   const TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 
-  async function consume({marker, store, restore, status = () => {}}) {
+  async function consume({marker, store, restore, restoreContent = () => {}, status = () => {}}) {
     if (!marker) return false;
-    if (marker !== 'image') {
+    const value = await store?.get(RECORD_ID);
+    const attachments = Array.isArray(value?.attachments) ? value.attachments : null;
+    if (marker === 'bundle') {
+      const content = {
+        title:typeof value?.title === 'string' ? value.title.slice(0, 255) : '',
+        text:typeof value?.text === 'string' ? value.text.slice(0, 10000) : '',
+        url:typeof value?.url === 'string' ? value.url.slice(0, 2048) : '',
+      };
+      const invalidAttachments = !attachments || attachments.length > 5 || attachments.some(attachment =>
+        !attachment?.blob || !attachment.filename || !TYPES.has(String(attachment.contentType || '')));
+      if (invalidAttachments || (!attachments.length && !Object.values(content).some(Boolean))) {
+        status('The shared content is unavailable. Share it again.');
+        return false;
+      }
+      restoreContent(content);
+      if (attachments.length) restore(attachments);
+      await store.delete(RECORD_ID);
+      const noun = attachments.length === 1 ? 'screenshot' : attachments.length > 1 ? 'screenshots' : 'content';
+      status(attachments.length
+        ? 'Shared content and ' + (attachments.length > 1 ? attachments.length + ' ' : '') + noun + ' ready to file with this issue.'
+        : 'Shared content ready to file with this issue.');
+      return true;
+    }
+    if (!['image', 'images'].includes(marker)) {
       status('Share one PNG, JPEG, or WebP screenshot.');
       return false;
     }
-    const value = await store?.get(RECORD_ID);
+    if (marker === 'images') {
+      if (!attachments?.length || attachments.length > 5 || attachments.some(attachment =>
+        !attachment?.blob || !attachment.filename || !TYPES.has(String(attachment.contentType || '')))) {
+        status('The shared screenshots are unavailable. Share them again.');
+        return false;
+      }
+      restore(attachments);
+      await store.delete(RECORD_ID);
+      status(attachments.length + ' shared screenshots ready to file with this issue.');
+      return true;
+    }
     if (!value?.blob || !value.filename || !TYPES.has(String(value.contentType || ''))) {
       status('The shared screenshot is unavailable. Share it again.');
       return false;

frontend/today-handoff.js

@@ -0,0 +1,154 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createTodayHandoff = factory;
+})(typeof self !== 'undefined' ? self : this, function createTodayHandoff(options) {
+  const prefix = 'stackchain.today-handoff.v1.';
+  const storage = options.storage || null;
+  const selected = new Set();
+  const excluded = new Set();
+
+  function key() {
+    const login = String(options.getLogin?.() || '').trim().toLowerCase();
+    return login ? prefix + encodeURIComponent(login) : '';
+  }
+
+  function pending() {
+    const storageKey = key();
+    if (!storageKey || !storage) return [];
+    try {
+      const value = JSON.parse(storage.getItem(storageKey) || '[]');
+      return Array.isArray(value) ? value.filter(id => typeof id === 'string' && id) : [];
+    } catch (_) {
+      return [];
+    }
+  }
+
+  function write(ids) {
+    const storageKey = key();
+    if (!storageKey || !storage) return false;
+    const unique = [...new Set(ids.filter(id => typeof id === 'string' && id))];
+    try {
+      if (unique.length) storage.setItem(storageKey, JSON.stringify(unique));
+      else storage.removeItem(storageKey);
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function capture(ids) {
+    const merged = [...pending()];
+    (ids || []).forEach(id => {
+      if (typeof id === 'string' && id && !merged.includes(id)) merged.push(id);
+      if (typeof id === 'string' && id) {
+        selected.add(id);
+        excluded.delete(id);
+      }
+    });
+    return write(merged);
+  }
+
+  function review(items) {
+    const byIdentity = new Map((items || options.items?.() || []).map(item => [options.identity(item), item]));
+    return pending().flatMap(identity => {
+      const item = byIdentity.get(identity);
+      if (!excluded.has(identity)) selected.add(identity);
+      return item ? [{ identity, item, selected:selected.has(identity) }] : [];
+    });
+  }
+
+  function choose(identity, include) {
+    if (!pending().includes(identity)) return false;
+    if (include) {
+      selected.add(identity);
+      excluded.delete(identity);
+    } else {
+      selected.delete(identity);
+      excluded.add(identity);
+    }
+    return true;
+  }
+
+  function render(items, list, escapeHtml) {
+    const rows = review(items);
+    list.innerHTML = rows.map(row => {
+      const title = String(row.item.title || row.identity).slice(0, 180);
+      const context = String(row.item.key || row.item.repository || 'Work item').slice(0, 180);
+      return '<div class="today-handoff-item"><span><strong>' + escapeHtml(title) + '</strong>' +
+        '<span class="small muted">' + escapeHtml(context) + '</span></span><label><input type="checkbox" ' +
+        'data-today-handoff="' + escapeHtml(row.identity) + '"' + (row.selected ? ' checked' : '') +
+        '> Today</label></div>';
+    }).join('');
+    list.querySelectorAll('[data-today-handoff]').forEach(input => input.addEventListener('change', () =>
+      choose(input.dataset.todayHandoff, input.checked)));
+    return rows;
+  }
+
+  async function commit(items) {
+    const rows = review(items);
+    const remaining = pending();
+    let scheduled = 0;
+    let blocked = 0;
+    for (const row of rows) {
+      if (!selected.has(row.identity)) continue;
+      if (options.todayWork.contains(row.item)) {
+        const index = remaining.indexOf(row.identity);
+        if (index >= 0) remaining.splice(index, 1);
+        selected.delete(row.identity);
+        continue;
+      }
+      const added = options.todayWork.add(row.item);
+      if (added !== 'added') {
+        blocked += 1;
+        continue;
+      }
+      if (!options.todaySync.enqueue('add', row.identity)) {
+        options.todayWork.remove?.(row.item);
+        blocked += 1;
+        continue;
+      }
+      const index = remaining.indexOf(row.identity);
+      if (index >= 0) remaining.splice(index, 1);
+      selected.delete(row.identity);
+      scheduled += 1;
+    }
+    write(remaining);
+    if (scheduled) await options.todaySync.flush();
+    return { scheduled, blocked, remaining:remaining.length };
+  }
+
+  function mount({ qs, escapeHtml, onComplete = () => {} }) {
+    const list = qs('#today-handoff-items');
+    let prompted = false;
+    function open() {
+      if (prompted) return false;
+      const rows = render(null, list, escapeHtml);
+      if (!rows.length) return false;
+      qs('#today-handoff-status').textContent = rows.length +
+        (rows.length === 1 ? ' commitment is ready to review.' : ' commitments are ready to review.');
+      const dialog = qs('#today-handoff-dialog');
+      if (!dialog.open) dialog.showModal();
+      prompted = true;
+      requestAnimationFrame(() => (list.querySelector('input') || qs('#confirm-today-handoff')).focus());
+      return true;
+    }
+    qs('#close-today-handoff').addEventListener('click', () => qs('#today-handoff-dialog').close());
+    qs('#confirm-today-handoff').addEventListener('click', async event => {
+      const button = event.currentTarget;
+      button.disabled = true;
+      qs('#today-handoff-status').textContent = 'Saving Today’s plan…';
+      try {
+        const result = await commit();
+        if (result.blocked) qs('#today-handoff-status').textContent =
+          'Today is full. ' + result.remaining + ' commitment remains safe in My Work.';
+        else qs('#today-handoff-dialog').close();
+        onComplete(result);
+      } finally {
+        button.disabled = false;
+      }
+    });
+    return { open, reset:() => { prompted = false; } };
+  }
+
+  return { capture, choose, commit, mount, pending, render, review };
+});

frontend/today-recap.js

@@ -217,7 +217,7 @@ async function saveTodayRecapTime(payload) {
 }
 
 function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, escapeHtml,
-  describeWork = () => null, adjustPlan = () => {} }) {
+  describeWork = () => null, openWrapUp = () => {} }) {
   const minutes = value => String(Math.max(0, Number(value) || 0)) + 'm';
   const render = () => {
     const draft = recap.snapshot();
@@ -290,7 +290,7 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
       qs('#today-recap-status').textContent = 'Recap saved to your account.';
       await loadHistory(); render(); button.hidden = true;
       close();
-      adjustPlan(handoff.actual_minutes);
+      openWrapUp(handoff.actual_minutes);
     } catch (error) {
       qs('#today-recap-status').textContent = error.message || 'Recap could not be saved. Your timer is unchanged.';
     } finally { button.disabled = false; }
@@ -310,7 +310,7 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
       qs('#today-recap-status').textContent = 'Selected time logged to Gitea.';
       await loadHistory(); render(); button.hidden = true;
       close();
-      adjustPlan(actualMinutes);
+      openWrapUp(actualMinutes);
     } catch (error) {
       qs('#today-recap-status').textContent = error.message || 'Time could not be logged. Your recap is ready to retry.';
       render();
@@ -345,8 +345,8 @@ function openTodayRecapAfterSession(view, timer, timerView, workFilter, qs) {
 }
 
 function setupTodayRecap(timer, timerView, todayWork, api, qs, escapeHtml, closeSheets, updateActions, getLogin,
-  describeWork, adjustPlan) {
-  const options = { timer, timerView, todayWork, api, qs, escapeHtml, describeWork, adjustPlan };
+  describeWork, openWrapUp) {
+  const options = { timer, timerView, todayWork, api, qs, escapeHtml, describeWork, openWrapUp };
   const recap = createTodayRecap({
     save:saveTodayRecap, saveAndLog:saveTodayRecapTime,
     clear:() => timer.clearRecap(), storage:localStorage, getLogin,

frontend/today-wrap-up.js

@@ -0,0 +1,122 @@
+function createTodayWrapUp({ todayWork, laterWork, todaySync }) {
+  let items = [];
+  const selected = new Set();
+
+  function open(candidates) {
+    const current = new Set(todayWork.read());
+    const byIdentity = new Map((candidates || []).map(item => [todayWork.identity(item), item]));
+    items = todayWork.read().flatMap(identity =>
+      current.has(identity) && byIdentity.has(identity) ? [byIdentity.get(identity)] : []
+    );
+    selected.clear();
+    return snapshot();
+  }
+
+  function choose(identity, schedule) {
+    if (!items.some(item => todayWork.identity(item) === identity)) return false;
+    if (schedule) selected.add(identity);
+    else selected.delete(identity);
+    return true;
+  }
+
+  function snapshot() {
+    return items.map(item => ({
+      item,
+      identity:todayWork.identity(item),
+      schedule:selected.has(todayWork.identity(item)),
+    }));
+  }
+
+  async function finish() {
+    const wake = laterWork.presetUntil('tomorrow');
+    let scheduled = 0;
+    for (const item of items) {
+      const identity = todayWork.identity(item);
+      if (!selected.has(identity) || !todayWork.contains(item)) continue;
+      const deferred = laterWork.defer(item, wake, {handoff:'today'});
+      if (deferred !== 'deferred') throw new Error('Tomorrow could not be saved. Your Today plan is unchanged.');
+      if (!todaySync.enqueue('remove', identity)) {
+        laterWork.restore?.(item);
+        throw new Error('Today sync could not be queued. Your Today plan is unchanged.');
+      }
+      if (todayWork.contains(item) && !todayWork.remove(item)) {
+        throw new Error('Today could not be updated. Retry wrap-up.');
+      }
+      scheduled += 1;
+    }
+    await todaySync.flush();
+    return { scheduled, left:items.length - scheduled, wake_at:wake.toISOString() };
+  }
+
+  return { open, choose, snapshot, finish };
+}
+
+function createTodayWrapUpView({ controller, qs, escapeHtml, onComplete = () => {}, onClose = () => {} }) {
+  let actualMinutes = {};
+
+  function close() {
+    qs('#today-wrap-up-sheet').hidden = true;
+    document.body.classList.remove('task-overlay-open');
+    onClose();
+  }
+
+  function render() {
+    const rows = controller.snapshot();
+    qs('#today-wrap-up-items').innerHTML = rows.map(row => {
+      const title = String(row.item.title || row.identity).slice(0, 180);
+      const context = String(row.item.key || row.item.repository || 'Work item').slice(0, 180);
+      return '<div class="today-wrap-up-item"><span><strong>' + escapeHtml(title) + '</strong>' +
+        '<span class="small muted">' + escapeHtml(context) + '</span></span><label><input type="checkbox" ' +
+        'data-wrap-up-identity="' + escapeHtml(row.identity) + '"' + (row.schedule ? ' checked' : '') +
+        '> Tomorrow 09:00</label></div>';
+    }).join('') || '<p class="small">Nothing unfinished remains in Today.</p>';
+    qs('#today-wrap-up-items').querySelectorAll('[data-wrap-up-identity]').forEach(input => {
+      input.addEventListener('change', () => controller.choose(input.dataset.wrapUpIdentity, input.checked));
+    });
+  }
+
+  function open(items, recapActualMinutes = {}) {
+    actualMinutes = { ...recapActualMinutes };
+    controller.open(items);
+    qs('#today-wrap-up-status').textContent = '';
+    render();
+    qs('#today-wrap-up-sheet').hidden = false;
+    document.body.classList.add('task-overlay-open');
+    requestAnimationFrame(() => (qs('#today-wrap-up-items input') || qs('#finish-today-wrap-up')).focus());
+  }
+
+  async function finish(button) {
+    button.disabled = true;
+    qs('#today-wrap-up-status').textContent = 'Saving tomorrow’s plan…';
+    try {
+      const result = await controller.finish();
+      qs('#my-work-action-status').textContent = result.scheduled + ' scheduled for tomorrow · ' + result.left + ' left in Today.';
+      close();
+      onComplete(result, actualMinutes);
+    } catch (error) {
+      qs('#today-wrap-up-status').textContent = error.message || 'Wrap-up could not be saved. Retry when ready.';
+    } finally {
+      button.disabled = false;
+    }
+  }
+
+  function bind() {
+    qs('#close-today-wrap-up').addEventListener('click', close);
+    qs('#finish-today-wrap-up').addEventListener('click', event => finish(event.currentTarget));
+  }
+
+  return { open, close, finish, render, bind };
+}
+
+function setupTodayWrapUp(options) {
+  const controller = createTodayWrapUp(options);
+  const view = createTodayWrapUpView({ ...options, controller });
+  view.bind();
+  return view;
+}
+
+if (typeof module !== 'undefined' && module.exports) {
+  createTodayWrapUp.createView = createTodayWrapUpView;
+  createTodayWrapUp.setup = setupTodayWrapUp;
+  module.exports = createTodayWrapUp;
+}

frontend/unfiled-captures.js

@@ -1,3 +1,43 @@
+function withFilingEstimate(draft, value) {
+  draft.estimateMinutes = Number(value) || null;
+  return draft;
+}
+
+function unfiledDraftSummary(item) {
+  const plan = item.filingPlan || {};
+  const ready = Boolean(plan.repository);
+  const startsToday = plan.completionIntent === 'create-and-start';
+  const evidenceCount = Number(item.attachmentCount || (item.hasAttachment ? 1 : 0));
+  const evidence = evidenceCount ? `${evidenceCount} screenshot${evidenceCount === 1 ? '' : 's'}` : 'No screenshots';
+  return {
+    label:ready ? 'Ready to file' : 'Needs filing',
+    repository:plan.repository || '', ready,
+    action:ready ? (startsToday ? 'Review & start' : 'Review & file') : 'Choose repository',
+    details:[startsToday ? 'Create & start' : 'Create issue',
+      plan.estimateMinutes ? `${plan.estimateMinutes} min` : '', evidence].filter(Boolean).join(' · '),
+  };
+}
+
+function unfiledDraftDisplayTitle(item) {
+  return String(item?.title || '').trim() || (item?.hasAttachment ? 'Untitled photo draft' : 'Untitled draft');
+}
+
+function unfiledShouldFocusTitle({mobile = false, continuing = false} = {}) {
+  return !mobile || continuing;
+}
+
+function unfiledSavedMessage(item) {
+  return item.repository ? 'Saved planned Draft. Resume on any signed-in device.' :
+    'Saved to Drafts. Choose a repository when you’re ready to file it.';
+}
+
+function applyIssueFilingMode(qs, enabled) {
+  qs('#create-issue-filing').hidden = !enabled;
+  qs('.create-issue-capture-actions').hidden = false;
+  qs('#file-new-issue').hidden = enabled;
+  qs('#create-issue-heading').textContent = enabled ? 'File issue' : 'Capture work';
+}
+
 function createUnfiledCaptures({
   storage,
   attachmentStore = null,
@@ -8,6 +48,8 @@ function createUnfiledCaptures({
   maxItems = 20,
 }) {
   const storageKey = 'stackchain.unfiled-issues.v1';
+  const listeners = new Set();
+  const onChange = (id, removed) => listeners.forEach(listener => listener(id, removed));
 
   function read() {
     try {
@@ -15,7 +57,8 @@ function createUnfiledCaptures({
       if (record?.version !== 1 || !Array.isArray(record.items)) return [];
       return record.items.filter(item =>
         item && typeof item.id === 'string' && typeof item.ownerLogin === 'string' &&
-        typeof item.title === 'string' && item.title.trim() && typeof item.body === 'string'
+        typeof item.title === 'string' && (item.title.trim() || item.hasAttachment === true) &&
+        typeof item.body === 'string'
       );
     } catch (_error) { return []; }
   }
@@ -35,26 +78,108 @@ function createUnfiledCaptures({
     return {full:items.length >= maxItems, count:items.length, maxItems, oldest:items.at(-1) || null};
   }
 
+  function filingPlan(value = {}, remote = false) {
+    const get = (local, wire) => value?.[remote ? wire : local];
+    const repository = String(get('repository', 'repository') || '').trim();
+    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository)) return null;
+    const labelIds = Array.from(new Set((Array.isArray(get('labelIds', 'label_ids')) ?
+      get('labelIds', 'label_ids') : []).filter(id => Number.isInteger(id) && id > 0))).slice(0, 20);
+    const plan = {repository, labelIds};
+    const milestoneId = Number(get('milestoneId', 'milestone_id'));
+    if (Number.isInteger(milestoneId) && milestoneId > 0) plan.milestoneId = milestoneId;
+    const dueDate = String(get('dueDate', 'due_date') || '');
+    if (/^\d{4}-\d{2}-\d{2}$/.test(dueDate)) plan.dueDate = dueDate;
+    const bounded = (local, wire, limit) => {
+      const text = String(get(local, wire) || '').trim();
+      if (text) plan[local] = text.slice(0, limit);
+    };
+    bounded('templateName', 'template_name', 80);
+    bounded('templateId', 'template_id', 80);
+    bounded('capturedBody', 'captured_body', 10000);
+    if (get('unassigned', 'unassigned') === true) plan.unassigned = true;
+    const assignee = String(get('assignee', 'assignee') || '').trim();
+    if (!plan.unassigned && /^[A-Za-z0-9_.-]+$/.test(assignee)) {
+      plan.assignee = assignee;
+      bounded('assigneeName', 'assignee_name', 255);
+    }
+    const estimateMinutes = Number(get('estimateMinutes', 'estimate_minutes'));
+    if (Number.isInteger(estimateMinutes) && estimateMinutes >= 5 && estimateMinutes <= 1440) {
+      plan.estimateMinutes = estimateMinutes;
+    }
+    const completionIntent = String(get('completionIntent', 'completion_intent') || '');
+    if (['create', 'create-and-start'].includes(completionIntent)) plan.completionIntent = completionIntent;
+    return plan;
+  }
+
+  function exportFilingPlan(plan) {
+    if (!plan) return null;
+    return {
+      repository:plan.repository, label_ids:plan.labelIds,
+      ...(plan.milestoneId ? {milestone_id:plan.milestoneId} : {}),
+      ...(plan.dueDate ? {due_date:plan.dueDate} : {}),
+      ...(plan.templateName ? {template_name:plan.templateName} : {}),
+      ...(plan.templateId ? {template_id:plan.templateId} : {}),
+      ...(plan.capturedBody ? {captured_body:plan.capturedBody} : {}),
+      ...(plan.unassigned ? {unassigned:true} : {}),
+      ...(plan.assignee ? {assignee:plan.assignee} : {}),
+      ...(plan.assigneeName ? {assignee_name:plan.assigneeName} : {}),
+      ...(plan.estimateMinutes ? {estimate_minutes:plan.estimateMinutes} : {}),
+      ...(plan.completionIntent ? {completion_intent:plan.completionIntent} : {}),
+    };
+  }
+
   function prepare(note) {
     const title = String(note?.title || '').trim().slice(0, 255);
     const body = String(note?.body || '').trim().slice(0, 10000);
-    if (!title) throw new Error('Add a title before saving.');
-    const ownerLogin = String(getCaptureLogin() || '').trim();
-    if (!ownerLogin) throw new Error('Offline identity is unavailable. Reconnect once before saving private work.');
     const attachment = note?.attachment;
+    const attachments = note?.attachments;
+    if (Array.isArray(attachments) && attachments.length > 5) {
+      throw new Error('You can attach up to 5 screenshots.');
+    }
+    const validAttachments = Array.isArray(attachments) && attachments.length > 0 &&
+      attachments.every(value => value?.blob && value?.filename &&
+        ['image/png', 'image/jpeg', 'image/webp'].includes(String(value?.contentType || '')));
+    if (attachments && !validAttachments) {
+      throw new Error('One or more screenshots are unavailable. Choose them again before saving.');
+    }
     const hasAttachment = Boolean(attachment?.blob && attachment?.filename &&
       ['image/png', 'image/jpeg', 'image/webp'].includes(String(attachment?.contentType || '')));
     if (attachment && !hasAttachment) throw new Error('The screenshot is unavailable. Choose it again before saving.');
-    if (hasAttachment && !attachmentStore) {
+    if (!title && !hasAttachment && !validAttachments) throw new Error('Add a title or photo before saving.');
+    const ownerLogin = String(getCaptureLogin() || '').trim();
+    if (!ownerLogin) throw new Error('Offline identity is unavailable. Reconnect once before saving private work.');
+    if ((hasAttachment || validAttachments) && !attachmentStore) {
       throw new Error('Screenshot storage is unavailable. Your capture is still open; retry after reloading.');
     }
-    return {title, body, ownerLogin, attachment, hasAttachment};
+    const seenBlockers = new Set();
+    const blockers = (Array.isArray(note?.blockers) ? note.blockers : []).reduce((items, blocker) => {
+      const repository = String(blocker?.repository || '').trim();
+      const number = Number(blocker?.number);
+      const key = repository + '#' + number;
+      if (items.length >= 5 || seenBlockers.has(key) ||
+          !/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository) ||
+          !Number.isInteger(number) || number < 1) return items;
+      seenBlockers.add(key);
+      items.push({repository, number,
+        title:String(blocker?.title || '').replace(/\s+/g, ' ').trim().slice(0, 255)});
+      return items;
+    }, []);
+    return {
+      title, body, ownerLogin, attachment, attachments, blockers,
+      filingPlan:filingPlan(note),
+      hasAttachment:hasAttachment || validAttachments,
+      attachmentCount:validAttachments ? attachments.length : (hasAttachment ? 1 : 0),
+    };
   }
 
   function persist(prepared, existing, removed = null) {
     const item = {
       id:String(createId()), ownerLogin:prepared.ownerLogin, title:prepared.title, body:prepared.body,
-      savedAt:Number(now()), ...(prepared.hasAttachment ? {hasAttachment:true} : {}),
+      savedAt:Number(now()), ...(prepared.hasAttachment ? {
+        hasAttachment:true, attachmentCount:prepared.attachmentCount,
+      } : {}), ...(prepared.blockers.length ? {
+        blockers:prepared.blockers, blockerCount:prepared.blockers.length,
+      } : {}), ...(prepared.filingPlan ? {filingPlan:prepared.filingPlan} : {}),
     };
     const items = [item, ...existing.filter(candidate => candidate.id !== item.id)];
     const writeItems = () => {
@@ -63,10 +188,17 @@ function createUnfiledCaptures({
         if (prepared.hasAttachment) Promise.resolve(attachmentStore.delete(item.id)).catch(() => {});
         throw error;
       }
+      onChange(item.id, false);
       return item;
     };
     const stage = prepared.hasAttachment
-      ? Promise.resolve(attachmentStore.put(item.id, {
+      ? Promise.resolve(attachmentStore.put(item.id, prepared.attachments ? {
+        attachments:prepared.attachments.map(value => ({
+          filename:String(value.filename).slice(0, 255),
+          contentType:String(value.contentType), blob:value.blob,
+          ...(String(value.note || '').trim() ? {note:String(value.note).trim().slice(0, 240)} : {}),
+        })),
+      } : {
         filename:String(prepared.attachment.filename).slice(0, 255),
         contentType:String(prepared.attachment.contentType), blob:prepared.attachment.blob,
       }))
@@ -113,6 +245,7 @@ function createUnfiledCaptures({
     const removed = items.find(item => item.id === id);
     if (!removed?.hasAttachment) {
       write(remaining);
+      onChange(id, true);
       return true;
     }
     return Promise.resolve(attachmentStore?.get(id)).then(removedAttachment =>
@@ -122,6 +255,7 @@ function createUnfiledCaptures({
           if (removedAttachment) await Promise.resolve(attachmentStore?.put(id, removedAttachment)).catch(() => {});
           throw error;
         }
+        onChange(id, true);
         return true;
       })
     );
@@ -133,10 +267,18 @@ function createUnfiledCaptures({
     if (!confirmedLogin || String(confirmedLogin).trim() !== item.ownerLogin) {
       throw new Error('Reconnect with the account that saved this capture.');
     }
-    const draft = {repository:'', title:item.title, body:item.body, labelIds:[]};
+    const draft = {...(item.filingPlan || {repository:'', labelIds:[]}), title:item.title, body:item.body,
+      ...(Array.isArray(item.blockers) && item.blockers.length ? {blockers:item.blockers} : {})};
     if (!item.hasAttachment) return draft;
     if (!attachmentStore) throw new Error('The saved screenshot is unavailable. Retry after reloading.');
     return Promise.resolve(attachmentStore.get(id)).then(attachment => {
+      if (Array.isArray(attachment?.attachments) && attachment.attachments.length) {
+        if (attachment.attachments.length > 5 || attachment.attachments.some(value =>
+          !value?.blob || !value?.filename || !value?.contentType)) {
+          throw new Error('The saved screenshots are unavailable. Keep this Draft and retry.');
+        }
+        return {...draft, attachments:attachment.attachments};
+      }
       if (!attachment?.blob || !attachment?.filename || !attachment?.contentType) {
         throw new Error('The saved screenshot is unavailable. Keep this Draft and retry.');
       }
@@ -146,7 +288,149 @@ function createUnfiledCaptures({
 
   function completeResume(id) { return discard(id); }
 
-  return {list, capacity, save, replaceOldest, discard, resume, completeResume};
+  function encodeBytes(buffer) {
+    const bytes = new Uint8Array(buffer);
+    let binary = '';
+    for (let offset = 0; offset < bytes.length; offset += 0x8000) {
+      binary += String.fromCharCode(...bytes.subarray(offset, offset + 0x8000));
+    }
+    return btoa(binary);
+  }
+
+  function decodeBytes(value, contentType) {
+    const binary = atob(value);
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1) bytes[index] = binary.charCodeAt(index);
+    return new Blob([bytes], {type:contentType});
+  }
+
+  async function exportOwned(login) {
+    const owner = String(login || '').trim();
+    const exported = [];
+    for (const item of read().filter(candidate => candidate.ownerLogin === owner)) {
+      let evidence = [];
+      if (item.hasAttachment) {
+        const stored = await attachmentStore?.get(item.id);
+        const attachments = Array.isArray(stored?.attachments) ? stored.attachments :
+          (stored?.blob ? [stored] : []);
+        if (attachments.length !== Number(item.attachmentCount || 1)) {
+          throw new Error('The saved screenshots are unavailable. Keep this Draft and retry.');
+        }
+        evidence = await Promise.all(attachments.map(async attachment => ({
+          filename:attachment.filename,
+          content_type:attachment.contentType,
+          ...(attachment.note ? {note:attachment.note} : {}),
+          data:encodeBytes(await attachment.blob.arrayBuffer()),
+        })));
+      }
+      exported.push({
+        id:item.id, title:item.title, body:item.body, saved_at:Number(item.savedAt),
+        ...(item.filingPlan ? {filing_plan:exportFilingPlan(item.filingPlan)} : {}),
+        ...(Array.isArray(item.blockers) && item.blockers.length ? {blockers:item.blockers} : {}),
+        ...(evidence.length ? {evidence} : {}),
+      });
+    }
+    return exported;
+  }
+
+  async function mergeRemote(drafts, login) {
+    const ownerLogin = String(login || '').trim();
+    if (!ownerLogin || !Array.isArray(drafts)) return 0;
+    const existing = read();
+    const known = new Set(existing.map(item => item.id));
+    const imported = [];
+    for (const remote of drafts) {
+      if (!remote || known.has(remote.id) || imported.length + existing.length >= maxItems) continue;
+      const evidence = Array.isArray(remote.evidence) ? remote.evidence : [];
+      if (evidence.length && !attachmentStore) continue;
+      const plan = filingPlan(remote.filing_plan, true);
+      const item = {
+        id:String(remote.id), ownerLogin, title:String(remote.title || ''), body:String(remote.body || ''),
+        savedAt:Number(remote.saved_at),
+        ...(plan ? {filingPlan:plan} : {}),
+        ...(Array.isArray(remote.blockers) && remote.blockers.length ? {
+          blockers:remote.blockers, blockerCount:remote.blockers.length,
+        } : {}),
+        ...(evidence.length ? {hasAttachment:true, attachmentCount:evidence.length} : {}),
+      };
+      if (!item.id || (!item.title.trim() && !evidence.length) || !Number.isFinite(item.savedAt)) continue;
+      if (evidence.length) {
+        await attachmentStore.put(item.id, {attachments:evidence.map(entry => ({
+          filename:String(entry.filename), contentType:String(entry.content_type),
+          blob:decodeBytes(String(entry.data), String(entry.content_type)),
+          ...(entry.note ? {note:String(entry.note)} : {}),
+        }))});
+      }
+      known.add(item.id);
+      imported.push(item);
+    }
+    if (imported.length) write(imported.concat(existing));
+    return imported.length;
+  }
+
+  async function reconcileRemote(drafts, login) {
+    const ownerLogin = String(login || '').trim();
+    if (!ownerLogin || !Array.isArray(drafts)) return 0;
+    const existing = read();
+    const retained = existing.filter(item => item.ownerLogin !== ownerLogin);
+    const reconciled = [];
+    const stagedEvidence = new Map();
+    for (const remote of drafts) {
+      if (!remote || reconciled.length + retained.length >= maxItems) continue;
+      const evidence = Array.isArray(remote.evidence) ? remote.evidence : [];
+      if (evidence.length && !attachmentStore) {
+        throw new Error('The synchronized screenshots cannot be stored on this device.');
+      }
+      const plan = filingPlan(remote.filing_plan, true);
+      const item = {
+        id:String(remote.id || ''), ownerLogin, title:String(remote.title || ''), body:String(remote.body || ''),
+        savedAt:Number(remote.saved_at),
+        ...(plan ? {filingPlan:plan} : {}),
+        ...(Array.isArray(remote.blockers) && remote.blockers.length ? {
+          blockers:remote.blockers, blockerCount:remote.blockers.length,
+        } : {}),
+        ...(evidence.length ? {hasAttachment:true, attachmentCount:evidence.length} : {}),
+      };
+      if (!item.id || (!item.title.trim() && !evidence.length) || !Number.isFinite(item.savedAt)) continue;
+      if (evidence.length) {
+        stagedEvidence.set(item.id, {attachments:evidence.map(entry => ({
+          filename:String(entry.filename), contentType:String(entry.content_type),
+          blob:decodeBytes(String(entry.data), String(entry.content_type)),
+          ...(entry.note ? {note:String(entry.note)} : {}),
+        }))});
+      }
+      reconciled.push(item);
+    }
+    const evidenceIds = new Set(reconciled.filter(item => item.hasAttachment).map(item => item.id));
+    const affectedIds = new Set(stagedEvidence.keys());
+    for (const item of existing) if (item.ownerLogin === ownerLogin && item.hasAttachment) affectedIds.add(item.id);
+    const previousEvidence = new Map();
+    for (const id of affectedIds) previousEvidence.set(id, await attachmentStore?.get(id));
+    try {
+      for (const [id, value] of stagedEvidence) await attachmentStore.put(id, value);
+      for (const item of existing) {
+        if (item.ownerLogin === ownerLogin && item.hasAttachment && !evidenceIds.has(item.id)) {
+          await attachmentStore?.delete(item.id);
+        }
+      }
+      write(reconciled.concat(retained));
+    } catch (error) {
+      for (const [id, value] of previousEvidence) {
+        await Promise.resolve(value ? attachmentStore?.put(id, value) : attachmentStore?.delete(id)).catch(() => {});
+      }
+      throw error;
+    }
+    return reconciled.length;
+  }
+
+  return {list, capacity, save, replaceOldest, discard, resume, completeResume,
+    exportOwned, mergeRemote, reconcileRemote, currentLogin:getCurrentLogin,
+    subscribe:listener => (listeners.add(listener), () => listeners.delete(listener))};
 }
 
-if (typeof module !== 'undefined' && module.exports) module.exports = createUnfiledCaptures;
+if (typeof module !== 'undefined' && module.exports) {
+  module.exports = createUnfiledCaptures;
+  module.exports.summary = unfiledDraftSummary;
+  module.exports.displayTitle = unfiledDraftDisplayTitle;
+  module.exports.shouldFocusTitle = unfiledShouldFocusTitle;
+}

frontend/unfiled-draft-sync.js

@@ -0,0 +1,222 @@
+(function (root, factory) {
+  const createUnfiledDraftSync = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createUnfiledDraftSync;
+  if (root) root.createUnfiledDraftSync = createUnfiledDraftSync;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  function createUnfiledDraftSync(options, mountedFetch) {
+    if (mountedFetch) return createUnfiledDraftSync.mount(options, mountedFetch);
+    const {
+      captures, fetchJson, storage, getLogin = () => '', onState = () => {}, maxConflictRetries = 2,
+      createConflictId = () => 'conflict-' + (globalThis.crypto?.randomUUID?.() || Date.now().toString(36)),
+    } = options;
+    const key = 'stackchain.unfiled-draft-sync.v1';
+    let inFlight = null;
+    let rerun = false;
+    let queuedOwner = '';
+
+    function read(login) {
+      try {
+        const all = JSON.parse(storage?.getItem(key) || '{}');
+        const state = all?.[login];
+        return {
+          all:all && typeof all === 'object' ? all : {},
+          known:new Set(Array.isArray(state?.known) ? state.known : []),
+          deleted:new Set(Array.isArray(state?.deleted) ? state.deleted : []),
+          base:state?.base && typeof state.base === 'object' ? state.base : {},
+        };
+      } catch (_error) {
+        return {all:{}, known:new Set(), deleted:new Set(), base:{}};
+      }
+    }
+
+    function write(login, state) {
+      state.all[login] = {known:[...state.known], deleted:[...state.deleted], base:state.base};
+      storage?.setItem(key, JSON.stringify(state.all));
+    }
+
+    function publish(status, message, details = {}) {
+      onState({status, ...(message ? {message} : {}), ...details});
+      const visibleStatus = globalThis.document?.querySelector?.('#my-work-action-status');
+      if (message && visibleStatus) visibleStatus.textContent = message;
+    }
+
+    function sameDrafts(left, right) {
+      return JSON.stringify(left) === JSON.stringify(right);
+    }
+
+    async function fingerprint(draft) {
+      if (!draft) return null;
+      const text = JSON.stringify(draft);
+      if (globalThis.crypto?.subtle && globalThis.TextEncoder) {
+        const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(text));
+        return [...new Uint8Array(digest)].map(byte => byte.toString(16).padStart(2, '0')).join('');
+      }
+      let first = 2166136261, second = 3335557771;
+      for (let index = 0; index < text.length; index += 1) {
+        first = Math.imul(first ^ text.charCodeAt(index), 16777619);
+        second = Math.imul(second ^ text.charCodeAt(index), 2246822519);
+      }
+      return text.length + ':' + (first >>> 0).toString(16) + (second >>> 0).toString(16);
+    }
+
+    async function reconcile(captures, drafts, owner) {
+      if (typeof captures.reconcileRemote === 'function') {
+        await captures.reconcileRemote(drafts, owner);
+        return;
+      }
+      const finalIds = new Set(drafts.map(item => item.id));
+      for (const item of await captures.exportOwned(owner)) {
+        if (!finalIds.has(item.id)) await captures.discard(item.id);
+      }
+      await captures.mergeRemote(drafts, owner);
+    }
+
+    async function runSync(login) {
+      const owner = String(login || '').trim();
+      if (!owner) return false;
+      publish('syncing', 'Syncing Drafts…');
+      const state = read(owner);
+      try {
+        const remote = await fetchJson('api/v1/unfiled-drafts');
+        const remoteDrafts = Array.isArray(remote?.drafts) ? remote.drafts : [];
+        const local = await captures.exportOwned(owner);
+        const merged = [];
+        const localById = new Map(local.map(item => [item.id, item]));
+        const remoteById = new Map(remoteDrafts.map(item => [item.id, item]));
+        const ids = new Set([...state.known, ...localById.keys(), ...remoteById.keys()]);
+        let preservedConflict = false;
+        const usedIds = new Set(ids);
+        for (const id of ids) {
+          const localDraft = state.deleted.has(id) ? null : localById.get(id);
+          const remoteDraft = remoteById.get(id);
+          const localHash = await fingerprint(localDraft);
+          const remoteHash = await fingerprint(remoteDraft);
+          const baseHash = state.base[id] || null;
+          const localChanged = localHash !== baseHash;
+          const remoteChanged = remoteHash !== baseHash;
+          if (localChanged && remoteChanged && localHash !== remoteHash) {
+            preservedConflict = true;
+            if (remoteDraft) merged.push(remoteDraft);
+            if (localDraft) {
+              let conflictId = String(createConflictId()).slice(0, 100);
+              for (let suffix = 2; usedIds.has(conflictId); suffix += 1) {
+                conflictId = (String(createConflictId()).slice(0, 95) + '-' + suffix).slice(0, 100);
+              }
+              usedIds.add(conflictId);
+              const suffix = ' (conflict copy)';
+              merged.push({...localDraft, id:conflictId,
+                title:(String(localDraft.title).slice(0, 255 - suffix.length) + suffix)});
+            }
+            continue;
+          }
+          const selected = localChanged ? localDraft : (remoteChanged ? remoteDraft : (localDraft || remoteDraft));
+          if (selected) merged.push(selected);
+        }
+        merged.sort((left, right) => Number(right.saved_at) - Number(left.saved_at));
+
+        let finalSnapshot = remote;
+        if (!sameDrafts(merged, remoteDrafts)) {
+          finalSnapshot = await fetchJson('api/v1/unfiled-drafts', {
+            method:'PUT', headers:{'Content-Type':'application/json'},
+            body:JSON.stringify({revision:Number(remote.revision || 0), drafts:merged}),
+          });
+        }
+        await reconcile(captures, finalSnapshot.drafts || [], owner);
+        state.known = new Set((finalSnapshot.drafts || []).map(item => item.id));
+        state.deleted.clear();
+        state.base = {};
+        for (const item of finalSnapshot.drafts || []) state.base[item.id] = await fingerprint(item);
+        write(owner, state);
+        publish(preservedConflict ? 'conflict-preserved' : 'ready', preservedConflict
+          ? 'Draft changed on two devices · both versions were saved.'
+          : 'Drafts synced across devices.');
+        return true;
+      } catch (error) {
+        if (error?.status !== 409) {
+          publish('pending', 'Saved on this device · sync pending');
+        }
+        throw error;
+      }
+    }
+
+    function sync(login) {
+      const owner = String(login || '').trim();
+      if (!owner) return Promise.resolve(false);
+      if (inFlight) {
+        rerun = true;
+        queuedOwner = owner;
+        return inFlight;
+      }
+      inFlight = (async () => {
+        let result = false;
+        let conflictRetries = 0;
+        let activeOwner = owner;
+        do {
+          rerun = false;
+          try {
+            result = await runSync(activeOwner);
+          } catch (error) {
+            if (error?.status !== 409) throw error;
+            if (conflictRetries >= maxConflictRetries) {
+              publish('conflict', 'Draft sync needs attention. Retry when your devices finish saving.', {retryable:true});
+              throw error;
+            }
+            conflictRetries += 1;
+            rerun = true;
+          }
+          if (queuedOwner) {
+            if (queuedOwner !== activeOwner) conflictRetries = 0;
+            activeOwner = queuedOwner;
+            queuedOwner = '';
+            rerun = true;
+          }
+        } while (rerun);
+        return result;
+      })().finally(() => { inFlight = null; });
+      return inFlight;
+    }
+
+    async function remove(id, login) {
+      const owner = String(login || '').trim();
+      if (!owner) return false;
+      const state = read(owner);
+      state.deleted.add(String(id));
+      write(owner, state);
+      await captures.discard(String(id));
+      return sync(owner);
+    }
+
+    function retry() {
+      return sync(getLogin());
+    }
+
+    captures.subscribe?.((id, removed) => {
+      const login = getLogin();
+      if (login) void (removed ? remove(id, login) : sync(login)).catch(() => {});
+    });
+
+    return {sync, remove, retry};
+  }
+  createUnfiledDraftSync.mount = (captures, fetchJson) => {
+    const getLogin = captures.currentLogin;
+    const retryButton = globalThis.document?.querySelector?.('#retry-unfiled-draft-sync');
+    const controller = createUnfiledDraftSync({
+      captures, fetchJson, storage:globalThis.localStorage, getLogin,
+      onState:state => { if (retryButton) retryButton.hidden = !state.retryable; },
+    });
+    retryButton?.addEventListener?.('click', async () => {
+      retryButton.disabled = true;
+      try { await controller.retry(); } catch (_error) { /* state remains actionable */ }
+      finally { retryButton.disabled = false; }
+    });
+    const connect = () => {
+      const login = getLogin();
+      if (login) void controller.sync(login).catch(() => {});
+      else globalThis.setTimeout(connect, 250);
+    };
+    globalThis.setTimeout(connect, 0);
+    globalThis.addEventListener?.('online', connect);
+    return controller;
+  };
+  return createUnfiledDraftSync;
+});

frontend/voice-conversation-capture.js

@@ -0,0 +1,124 @@
+function createVoiceConversationCapture({
+  Recognition, elements, transcriptStore = null, getLogin = () => '',
+  createEvent = name => new Event(name, {bubbles:true}),
+}) {
+  const supported = typeof Recognition === 'function';
+  let recognition = null;
+  let target = '';
+  let generation = 0;
+  elements.root.hidden = !supported;
+  if (!supported) {
+    elements.status.textContent = 'Voice capture is unavailable; type the reply instead.';
+  }
+
+  const normalize = value => String(value || '').replace(/\s+/g, ' ').trim();
+  const login = () => String(getLogin() || '').trim();
+
+  function showReview(value, recovered = false) {
+    const transcript = normalize(value).slice(0, 10000);
+    elements.transcript.value = transcript;
+    elements.review.hidden = false;
+    elements.append.textContent = elements.draft.value.trim() ? 'Append to draft' : 'Use transcript';
+    elements.replace.hidden = !elements.draft.value.trim();
+    elements.status.textContent = recovered ?
+      'Recovered transcript. Review it before using or discarding it.' :
+      'Transcript ready. Review it before using it.';
+    if (!recovered && transcriptStore && login() && target) {
+      void transcriptStore.save(login(), transcript, target);
+    }
+  }
+
+  async function open(nextTarget) {
+    cancel();
+    target = String(nextTarget || '').trim();
+    const opening = ++generation;
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = '';
+    if (!supported || !target || !transcriptStore || !login()) return;
+    const recovered = normalize(await transcriptStore.load(login(), target)).slice(0, 10000);
+    if (opening === generation && recovered) showReview(recovered, true);
+  }
+
+  function clearCheckpoint() {
+    if (transcriptStore && login() && target) void transcriptStore.clear(login(), target);
+  }
+
+  function commit(replace) {
+    const transcript = normalize(elements.transcript.value).slice(0, 10000);
+    elements.draft.value = replace ? transcript :
+      [elements.draft.value.trim(), transcript].filter(Boolean).join('\n\n').slice(0, 10000);
+    elements.draft.dispatchEvent(createEvent('input'));
+    clearCheckpoint();
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript added. Review the reply before sending.';
+  }
+
+  elements.start.addEventListener('click', () => {
+    if (!supported || !target) return;
+    const sessionGeneration = generation;
+    const currentRecognition = new Recognition();
+    recognition = currentRecognition;
+    recognition.continuous = true;
+    recognition.interimResults = false;
+    recognition.onresult = event => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      const finalText = Array.from(event.results || []).slice(event.resultIndex ?? 0)
+        .filter(result => result.isFinal)
+        .map(result => result[0]?.transcript || '').join(' ');
+      if (normalize(finalText)) {
+        showReview([elements.transcript.value, finalText].filter(Boolean).join(' '));
+      }
+    };
+    recognition.onerror = event => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = ['not-allowed', 'service-not-allowed'].includes(event.error) ?
+        'Microphone permission was denied. Your draft and transcript are unchanged.' :
+        'Voice capture stopped. Your draft and transcript are unchanged.';
+    };
+    recognition.onend = () => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+    };
+    try {
+      recognition.start();
+    } catch (_) {
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = 'Voice capture could not start. Your draft and transcript are unchanged.';
+      return;
+    }
+    elements.start.hidden = true;
+    elements.stop.hidden = false;
+    elements.status.textContent = 'Listening… Tap stop when you are finished.';
+  });
+  elements.stop.addEventListener('click', () => {
+    recognition?.stop();
+    elements.status.textContent = 'Finishing transcript…';
+  });
+  elements.append.addEventListener('click', () => commit(false));
+  elements.replace.addEventListener('click', () => commit(true));
+  elements.discard.addEventListener('click', () => {
+    clearCheckpoint();
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript discarded.';
+  });
+
+  function cancel() {
+    generation += 1;
+    recognition?.abort();
+    recognition = null;
+    elements.start.hidden = false;
+    elements.stop.hidden = true;
+  }
+
+  return {supported, open, cancel};
+}
+
+if (typeof module !== 'undefined') module.exports = {createVoiceConversationCapture};

frontend/voice-issue-capture.js

@@ -0,0 +1,120 @@
+function mapVoiceTranscript(value) {
+  const transcript = String(value || '').replace(/\s+/g, ' ').trim();
+  if (!transcript) return {title:'', body:''};
+  const sentence = transcript.match(/^(.+?[.!?])(?:\s+|$)(.*)$/);
+  const title = (sentence ? sentence[1] : transcript).trim().slice(0, 255);
+  const body = (sentence ? sentence[2] : '').trim().slice(0, 10000);
+  return {title, body};
+}
+
+function createVoiceIssueCapture({
+  Recognition, elements, createEvent = name => new Event(name, {bubbles:true}),
+  transcriptStore = null, getLogin = () => '',
+}) {
+  const supported = typeof Recognition === 'function';
+  const login = String(getLogin() || '').trim();
+  const ready = supported && login && transcriptStore ? Promise.resolve(transcriptStore.load(login)).then(value => {
+    const recovered = String(value || '').replace(/\s+/g, ' ').trim().slice(0, 10255);
+    if (recovered) showReview(recovered, {persist:false, recovered:true});
+  }) : Promise.resolve();
+  elements.root.hidden = !supported;
+  if (!supported) {
+    elements.status.textContent = 'Voice capture is unavailable; type the title and note instead.';
+    return {supported:false, ready, cancel() {}};
+  }
+  let recognition = null;
+
+  function showReview(value, {persist = true, recovered = false} = {}) {
+    elements.transcript.value = value;
+    const activeLogin = String(getLogin() || '').trim();
+    if (persist && activeLogin && transcriptStore) void transcriptStore.save(activeLogin, value);
+    const hasDraft = Boolean(elements.title.value.trim() || elements.body.value.trim());
+    elements.append.textContent = hasDraft ? 'Append to draft' : 'Use transcript';
+    elements.replace.hidden = !hasDraft;
+    elements.review.hidden = false;
+    elements.status.textContent = recovered ?
+      'Recovered transcript. Review it before using or discarding it.' :
+      'Transcript ready. Review it before using it.';
+  }
+
+  elements.start.addEventListener('click', () => {
+    recognition = new Recognition();
+    recognition.continuous = true;
+    recognition.interimResults = false;
+    recognition.onresult = event => {
+      const finalText = Array.from(event.results || [])
+        .slice(event.resultIndex ?? 0)
+        .filter(result => result.isFinal)
+        .map(result => result[0]?.transcript || '').join(' ').replace(/\s+/g, ' ').trim();
+      if (finalText) {
+        const accumulated = [elements.transcript.value.trim(), finalText]
+          .filter(Boolean).join(' ').replace(/\s+/g, ' ').trim().slice(0, 10255);
+        showReview(accumulated);
+      }
+    };
+    recognition.onerror = event => {
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = event.error === 'not-allowed' || event.error === 'service-not-allowed' ?
+        'Microphone permission was denied. Your draft and transcript are unchanged.' :
+        'Voice capture stopped. Your draft and transcript are unchanged.';
+    };
+    recognition.onend = () => {
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+    };
+    try {
+      recognition.start();
+    } catch (_) {
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = 'Voice capture could not start. Your draft and transcript are unchanged.';
+      return;
+    }
+    elements.start.hidden = true;
+    elements.stop.hidden = false;
+    elements.status.textContent = 'Listening… Tap stop when you are finished.';
+  });
+  elements.stop.addEventListener('click', () => {
+    recognition?.stop();
+    elements.status.textContent = 'Finishing transcript…';
+  });
+
+  function clearCheckpoint() {
+    const activeLogin = String(getLogin() || '').trim();
+    if (activeLogin && transcriptStore) void transcriptStore.clear(activeLogin);
+  }
+
+  function commit(mode) {
+    const mapped = mapVoiceTranscript(elements.transcript.value);
+    if (mode === 'replace') {
+      elements.title.value = mapped.title;
+      elements.body.value = mapped.body;
+    } else if (elements.title.value.trim()) {
+      elements.body.value = [elements.body.value.trim(), mapped.title, mapped.body]
+        .filter(Boolean).join('\n\n').slice(0, 10000);
+    } else {
+      elements.title.value = mapped.title;
+      elements.body.value = [elements.body.value.trim(), mapped.body]
+        .filter(Boolean).join('\n\n').slice(0, 10000);
+    }
+    elements.title.dispatchEvent(createEvent('input'));
+    elements.body.dispatchEvent(createEvent('input'));
+    clearCheckpoint();
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript added. Review the title and note before saving.';
+  }
+  elements.append.addEventListener('click', () => commit('append'));
+  elements.replace.addEventListener('click', () => commit('replace'));
+  elements.discard?.addEventListener('click', () => {
+    clearCheckpoint();
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = 'Recovered transcript discarded.';
+  });
+
+  return {supported:true, ready, cancel() { recognition?.abort(); recognition = null; }};
+}
+
+if (typeof module !== 'undefined') module.exports = {mapVoiceTranscript, createVoiceIssueCapture};

frontend/voice-transcript-store.js

@@ -0,0 +1,93 @@
+(function (root, factory) {
+  const createVoiceTranscriptStore = factory(root.indexedDB);
+  if (typeof module !== 'undefined' && module.exports) module.exports = createVoiceTranscriptStore;
+  else root.createVoiceTranscriptStore = createVoiceTranscriptStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function buildFactory(defaultIndexedDB) {
+  const dbName = 'stackchain-voice-transcripts-v1';
+  const STORE_NAME = 'checkpoints';
+  const MAX_TRANSCRIPT_LENGTH = 10255;
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error || new Error('Private transcript storage failed.'));
+    });
+  }
+
+  function createIndexedDbTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise = null;
+    function openDatabase() {
+      if (databasePromise) return databasePromise;
+      databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(STORE_NAME)) {
+            request.result.createObjectStore(STORE_NAME, {keyPath:'login'});
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Private transcript storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (work, mode = 'readonly') => {
+      const database = await openDatabase();
+      const transaction = database.transaction(STORE_NAME, mode);
+      const store = transaction.objectStore(STORE_NAME);
+      const completed = new Promise((resolve, reject) => {
+        transaction.oncomplete = () => resolve();
+        transaction.onerror = () => reject(transaction.error || new Error('Private transcript storage failed.'));
+        transaction.onabort = () => reject(transaction.error || new Error('Private transcript storage was interrupted.'));
+      });
+      const result = await work({
+        get:key => requestResult(store.get(key)),
+        put:value => requestResult(store.put(value)),
+        delete:key => requestResult(store.delete(key)),
+      });
+      await completed;
+      return result;
+    };
+  }
+
+  function normalizeLogin(value) {
+    return String(value || '').trim().toLowerCase();
+  }
+
+  function normalizeTranscript(value) {
+    return String(value || '').replace(/\s+/g, ' ').trim().slice(0, MAX_TRANSCRIPT_LENGTH);
+  }
+
+  function storageKey(login, target = '') {
+    const account = normalizeLogin(login);
+    const scope = String(target || '').trim().toLowerCase();
+    return account && scope ? account + '\u0000' + scope : account;
+  }
+
+  function createVoiceTranscriptStore({transaction = createIndexedDbTransaction(defaultIndexedDB)} = {}) {
+    async function load(login, target = '') {
+      const key = storageKey(login, target);
+      if (!key || !transaction) return '';
+      const record = await transaction(store => store.get(key));
+      return normalizeTranscript(record?.transcript);
+    }
+
+    async function save(login, transcript, target = '') {
+      const key = storageKey(login, target);
+      const value = normalizeTranscript(transcript);
+      if (!key || !value || !transaction) return;
+      await transaction(store => store.put({login:key, transcript:value}), 'readwrite');
+    }
+
+    async function clear(login, target = '') {
+      const key = storageKey(login, target);
+      if (!key || !transaction) return;
+      await transaction(store => store.delete(key), 'readwrite');
+    }
+
+    return {load, save, clear};
+  }
+
+  createVoiceTranscriptStore.databaseName = dbName;
+  return createVoiceTranscriptStore;
+});

frontend/work-route.js

@@ -6,7 +6,14 @@
   'use strict';
 
   const repositoryPart = /^[A-Za-z0-9_.-]+$/;
-  const queueFilters = ['today', 'agenda', 'attention', 'update', 'later', 'draft'];
+  const queueFilters = ['today', 'agenda', 'attention', 'filed', 'update', 'later', 'draft'];
+  const sections = {
+    issue: ['overview', 'conversation', 'reply', 'actions'],
+    filed: ['overview', 'conversation', 'reply', 'actions'],
+    pull: ['overview', 'conversation', 'reply', 'review'],
+    review: ['overview', 'files', 'feedback', 'history'],
+    update: ['activity', 'conversation', 'context', 'reply'],
+  };
 
   function positiveInteger(value) {
     const number = Number(value);
@@ -23,26 +30,37 @@
     if (queue === 'agenda' && parts[3] === 'protect-today' && parts.length === 4) {
       return { kind: 'queue', filter: 'agenda', action: 'protect-today' };
     }
-    if (parts[2] === 'update' && parts.length === 4) {
+    if (parts[2] === 'update' && [4, 5].includes(parts.length)) {
       const notificationId = positiveInteger(parts[3]);
-      return notificationId ? { kind: 'update', notification_id: notificationId } : null;
+      const section = parts[4];
+      if (!notificationId || (section && !sections.update.includes(section))) return null;
+      return { kind: 'update', notification_id: notificationId, ...(section ? { section } : {}) };
     }
-    if (!['issue', 'pull', 'review'].includes(parts[2]) || parts.length !== 6) return null;
+    if (!['issue', 'filed', 'pull', 'review'].includes(parts[2]) || ![6, 7].includes(parts.length)) return null;
     if (!repositoryPart.test(parts[3]) || !repositoryPart.test(parts[4])) return null;
     const number = positiveInteger(parts[5]);
-    return number ? { kind: parts[2], repository: parts[3] + '/' + parts[4], number } : null;
+    const section = parts[6];
+    if (!number || (section && !sections[parts[2]].includes(section))) return null;
+    return {
+      kind: parts[2], repository: parts[3] + '/' + parts[4], number,
+      ...(section ? { section } : {}),
+    };
   }
 
   function serialize(item) {
     if (item?.kind === 'update') {
       const notificationId = positiveInteger(item.notification_id);
-      return notificationId ? '#/my-work/update/' + notificationId : '';
+      if (!notificationId || (item.section && !sections.update.includes(item.section))) return '';
+      return '#/my-work/update/' + notificationId + (item.section ? '/' + item.section : '');
     }
-    if (!['issue', 'pull', 'review'].includes(item?.kind)) return '';
+    const kind = item?.is_filed && !item?.is_assigned ? 'filed' : item?.kind;
+    if (!['issue', 'filed', 'pull', 'review'].includes(kind)) return '';
     const repository = String(item.repository || '').split('/');
     const number = positiveInteger(item.number);
     if (repository.length !== 2 || !repository.every(part => repositoryPart.test(part)) || !number) return '';
-    return '#/my-work/' + item.kind + '/' + repository.join('/') + '/' + number;
+    if (item.section && !sections[kind].includes(item.section)) return '';
+    return '#/my-work/' + kind + '/' + repository.join('/') + '/' + number +
+      (item.section ? '/' + item.section : '');
   }
 
   function sameRoute(item, route) {
@@ -50,14 +68,15 @@
     if (route.kind === 'update') {
       return Number(item.notification_id) === route.notification_id;
     }
-    const itemKind = item.is_review ? 'review' : item.kind;
+    const itemKind = item.is_review ? 'review' :
+      (item.is_filed && !item.is_assigned ? 'filed' : item.kind);
     return itemKind === route.kind && item.repository === route.repository &&
       Number(item.number) === route.number;
   }
 
   function createController({
     location, history, eventTarget, onOpen, onClose, onInvalid,
-    onQueue = function () {},
+    onQueue = function () {}, onSection = function () {},
     resolve, onResolving = function () {}, onError = function () {},
   }) {
     let items = [];
@@ -84,7 +103,7 @@
           return;
         }
         active = fragment;
-        onOpen({ ...item, kind: route.kind });
+        onOpen({ ...item, kind: route.kind, ...(route.section ? { section: route.section } : {}) });
       }).catch(error => {
         if (request !== resolution || String(location.hash || '') !== fragment) return;
         resolving = '';
@@ -126,10 +145,16 @@
         return;
       }
       if (active === fragment) return;
+      const activeRoute = parse(active);
+      if (activeRoute && sameRoute(item, activeRoute)) {
+        active = fragment;
+        onSection(route.section || sections[route.kind][0], { restore: true });
+        return;
+      }
       resolution += 1;
       resolving = '';
       active = fragment;
-      onOpen({ ...item, kind: route.kind });
+      onOpen({ ...item, kind: route.kind, ...(route.section ? { section: route.section } : {}) });
     }
 
     return {
@@ -154,6 +179,17 @@
         onOpen(item);
         return true;
       },
+      section(name, options = {}) {
+        const route = parse(location.hash);
+        if (!route || route.kind === 'queue' || !sections[route.kind].includes(name)) return false;
+        if ((route.section || sections[route.kind][0]) === name) return true;
+        const fragment = serialize({ ...route, section: name });
+        const method = options.replace ? 'replaceState' : 'pushState';
+        history[method]({ workRoute: fragment }, '', fragment);
+        active = fragment;
+        onSection(name, { restore: false });
+        return true;
+      },
       queue(filter) {
         if (!queueFilters.includes(filter)) return false;
         const name = filter + (['update', 'draft'].includes(filter) ? 's' : '');

frontend/workspace-bootstrap.js

@@ -0,0 +1,41 @@
+async function loadWorkspace({ document, window = null, createLoader = createFeatureLoader }) {
+  let cameOnline = false;
+  let replayed = false;
+  const captureOnline = () => { cameOnline = true; };
+  window?.addEventListener('online', captureOnline);
+  const status = document.querySelector('#my-work-action-status');
+  const url = document.querySelector(
+    'meta[name="stackchain-feature-today-timer"]'
+  )?.content || '';
+  const loader = createLoader({
+    document,
+    urls: { 'today-timer': url },
+  });
+  if (status) status.textContent = 'Starting workspace…';
+  try {
+    await loader.load('today-timer');
+    if (status) status.textContent = '';
+    return {
+      replayOnline(callback) {
+        if (replayed) return;
+        replayed = true;
+        window?.removeEventListener('online', captureOnline);
+        if (cameOnline) callback();
+      },
+    };
+  } catch (error) {
+    window?.removeEventListener('online', captureOnline);
+    if (window?.location?.reload) {
+      if (cameOnline) window.location.reload();
+      else window.addEventListener('online', () => window.location.reload(), { once: true });
+    }
+    if (status) {
+      status.textContent = window
+        ? 'Workspace could not load. Reconnect to retry automatically, or reload now.'
+        : 'Workspace could not load. Check your connection, then reload to retry.';
+    }
+    throw error;
+  }
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = loadWorkspace;

requirements-audit.txt

@@ -0,0 +1 @@
+pip-audit==2.10.1

requirements-e2e.txt

@@ -0,0 +1,2 @@
+-r requirements.txt
+playwright==1.55.0

requirements.txt

@@ -1,7 +1,8 @@
 fastapi==0.133.1
 httpx==0.28.1
 pydantic==2.13.4
-python-multipart==0.0.22
+Pillow==12.3.0
+python-multipart==0.0.32
 pytest==9.1.1
 pywebpush==2.1.2
 rjsmin==1.2.5

src/available_issue_snapshot_store.py

@@ -3,14 +3,14 @@
 from __future__ import annotations
 
 import json
-import os
 import secrets
-import stat
 import sqlite3
 import time
 from dataclasses import dataclass
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class RefreshLeaseLost(RuntimeError):
     pass
@@ -29,12 +29,8 @@ class AvailableIssueSnapshotStore:
     def __init__(self, path, *, clock=None):
         self.path = Path(path)
         self.clock = clock or time.time
-        self.path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
-        os.chmod(self.path.parent, stat.S_IRWXU)
-        old_umask = os.umask(0o077)
-        try:
-            with self._connect() as connection:
-                connection.executescript(
+        with self._connect() as connection:
+            connection.executescript(
                     """
                     CREATE TABLE IF NOT EXISTS available_issue_snapshot (
                         singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
@@ -54,15 +50,12 @@ class AvailableIssueSnapshotStore:
                     );
                     """
                 )
-                connection.execute(
-                    "INSERT OR IGNORE INTO available_issue_snapshot VALUES (1, NULL, NULL, NULL)"
-                )
-        finally:
-            os.umask(old_umask)
-        os.chmod(self.path, stat.S_IRUSR | stat.S_IWUSR)
+            connection.execute(
+                "INSERT OR IGNORE INTO available_issue_snapshot VALUES (1, NULL, NULL, NULL)"
+            )
 
     def _connect(self):
-        connection = sqlite3.connect(self.path, timeout=1.0, isolation_level=None)
+        connection = connect_private_sqlite(self.path, timeout=1.0, isolation_level=None)
         connection.row_factory = sqlite3.Row
         connection.execute("PRAGMA busy_timeout = 1000")
         return connection

src/completed_filed_review_store.py

@@ -0,0 +1,122 @@
+"""Durable, account-scoped completed Filed review receipts."""
+
+import re
+import sqlite3
+from datetime import datetime
+from pathlib import Path
+
+from src.private_state import connect_private_sqlite
+
+
+_REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
+
+
+class CompletedFiledReviewStore:
+    def __init__(self, path: str | Path, *, limit: int = 200, timeout: float = 1.0):
+        self.path = Path(path)
+        self.limit = limit
+        self.timeout = timeout
+        self._initialize()
+
+    def _initialize(self) -> None:
+        with self._connect() as connection:
+            connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute(
+                """
+                CREATE TABLE IF NOT EXISTS completed_filed_reviews (
+                    login TEXT NOT NULL,
+                    repository TEXT NOT NULL,
+                    issue_number INTEGER NOT NULL,
+                    updated_at TEXT NOT NULL,
+                    touched_at INTEGER NOT NULL,
+                    PRIMARY KEY (login, repository, issue_number)
+                )
+                """
+            )
+
+    def _connect(self) -> sqlite3.Connection:
+        return connect_private_sqlite(self.path, timeout=self.timeout)
+
+    @staticmethod
+    def _login(login: str) -> str:
+        normalized = login.strip().lower()
+        if not normalized:
+            raise ValueError("login is required")
+        return normalized
+
+    @staticmethod
+    def _receipt(raw: dict) -> tuple[str, int, str]:
+        if not isinstance(raw, dict):
+            raise ValueError("receipt must be an object")
+        repository = raw.get("repository")
+        number = raw.get("number")
+        updated_at = raw.get("updated_at")
+        if not isinstance(repository, str) or not _REPOSITORY.fullmatch(repository):
+            raise ValueError("repository is invalid")
+        if not isinstance(number, int) or isinstance(number, bool) or number < 1:
+            raise ValueError("number is invalid")
+        if not isinstance(updated_at, str):
+            raise ValueError("updated_at is invalid")
+        try:
+            parsed = datetime.fromisoformat(updated_at.replace("Z", "+00:00"))
+        except ValueError as error:
+            raise ValueError("updated_at is invalid") from error
+        if parsed.tzinfo is None:
+            raise ValueError("updated_at is invalid")
+        return repository, number, updated_at
+
+    @staticmethod
+    def _snapshot(rows) -> dict:
+        return {"receipts": [
+            {"repository": row[0], "number": int(row[1]), "updated_at": row[2]}
+            for row in rows
+        ]}
+
+    def get(self, login: str) -> dict:
+        with self._connect() as connection:
+            rows = connection.execute(
+                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
+                "WHERE login = ? ORDER BY touched_at",
+                (self._login(login),),
+            ).fetchall()
+        return self._snapshot(rows)
+
+    def merge(self, login: str, receipts: list[dict]) -> dict:
+        login = self._login(login)
+        if not isinstance(receipts, list) or len(receipts) > self.limit:
+            raise ValueError(f"receipts are limited to {self.limit}")
+        normalized = [self._receipt(receipt) for receipt in receipts]
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            touched = int(connection.execute(
+                "SELECT COALESCE(MAX(touched_at), 0) FROM completed_filed_reviews WHERE login = ?",
+                (login,),
+            ).fetchone()[0])
+            for repository, number, updated_at in normalized:
+                current = connection.execute(
+                    "SELECT updated_at FROM completed_filed_reviews "
+                    "WHERE login = ? AND repository = ? AND issue_number = ?",
+                    (login, repository, number),
+                ).fetchone()
+                if current is not None and current[0] >= updated_at:
+                    continue
+                touched += 1
+                connection.execute(
+                    "INSERT INTO completed_filed_reviews "
+                    "(login, repository, issue_number, updated_at, touched_at) VALUES (?, ?, ?, ?, ?) "
+                    "ON CONFLICT(login, repository, issue_number) DO UPDATE SET "
+                    "updated_at=excluded.updated_at, touched_at=excluded.touched_at",
+                    (login, repository, number, updated_at, touched),
+                )
+            connection.execute(
+                "DELETE FROM completed_filed_reviews WHERE login = ? AND rowid NOT IN ("
+                "SELECT rowid FROM completed_filed_reviews WHERE login = ? "
+                "ORDER BY touched_at DESC LIMIT ?)",
+                (login, login, self.limit),
+            )
+            rows = connection.execute(
+                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
+                "WHERE login = ? ORDER BY touched_at",
+                (login,),
+            ).fetchall()
+        return self._snapshot(rows)

src/frontend_bundle.py

@@ -21,19 +21,26 @@ COMMONJS_BROWSER_BRANCH = re.compile(
 )
 WORKER_RUNTIME_SOURCE = "static/background-issue-sync.js"
 FEATURE_SOURCES = {
-    "comment-actions": ("static/conversation.js", "static/comment-actions.js"),
-    "issue-capture": ("static/create-issue-sheet.js", "static/update-follow-up.js"),
+    "comment-actions": ("static/comment-actions.js",),
+    "issue-capture": (
+        "static/voice-transcript-store.js", "static/voice-issue-capture.js", "static/create-issue-sheet.js", "static/mobile-create-issue-nav.js", "static/update-follow-up.js", "static/shared-image-capture.js",
+    ),
     "pull-workflow": ("static/pull-sheet.js", "static/review-sheet.js"),
     "push-notifications": ("static/push-notifications.js",),
-    "device-setup": ("static/install-app.js", "static/mobile-device-setup.js"),
+    "device-setup": (
+        "static/install-app.js", "static/private-data-inventory.js", "static/private-device-data.js",
+        "static/device-storage.js", "static/mobile-device-setup.js",
+    ),
     "security-center": ("static/security-center.js",),
     "today-timer": (
-        "static/commands.js", "static/task-overlay-history.js", "static/search-preview.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/my-work.js", "static/protect-today.js", "static/mobile-task-dock.js", "static/mobile-queue-launcher.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-recap.js",
-        "static/today-rollover.js", "static/later-work.js", "static/drafts.js", "static/unfiled-captures.js",
-        "static/assign-and-start.js", "static/queue-today.js",
+        "static/conversation.js", "static/voice-transcript-store.js", "static/voice-conversation-capture.js", "static/mobile-launch.js", "static/mobile-insights.js", "static/mobile-app-shortcuts.js", "static/mobile-plan-today-nav.js", "static/mobile-find-work-nav.js", "static/mobile-pull-refresh.js", "static/live-data-status.js",
+        "static/today-completion.js", "static/card-planning.js", "static/work-detail-position.js", "static/work-route.js", "static/commands.js", "static/saved-searches.js", "static/task-overlay-history.js", "static/search-preview.js", "static/mobile-search-preview-nav.js", "static/search-reply-draft-store.js", "static/conversation-reply-draft-store.js", "static/conversation-photo-drafts.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/my-work.js", "static/protect-today.js", "static/mobile-task-dock.js", "static/mobile-work-entry.js", "static/mobile-queue-launcher.js", "static/mobile-delivery-recovery.js", "static/mobile-start-day.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-recap.js", "static/today-wrap-up.js", "static/today-handoff.js",
+        "static/today-rollover.js", "static/later-work.js", "static/later-picker.js", "static/drafts.js", "static/unfiled-captures.js", "static/unfiled-draft-sync.js",
+        "static/assign-and-start.js", "static/filed-claim.js", "static/queue-today.js", "static/create-and-start.js",
         "static/draft-filing-session.js", "static/draft-capacity-dialog.js", "static/work-selection.js",
         "static/today-work.js", "static/pick-work.js", "static/batch-find-work.js",
-        "static/search-batch-plan.js",
+        "static/search-batch-plan.js", "static/mention-composer.js", "static/issue-evidence-review.js", "static/issue-evidence-editor.js",
+        "static/issue-attachment.js", "static/checklist-conflict.js", "static/issue-outbox.js", "static/authored-outbox.js", "static/issue-sheet.js", "static/mobile-issue-detail-nav.js", "static/issue-filing-review.js", "static/issue-filing-receipt.js",
     ),
 }
 CACHE_DECLARATION = re.compile(
@@ -110,7 +117,6 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
     dashboard_html = dashboard_html.replace("</head>", feature_metadata + "\n</head>")
     dashboard_html = dashboard_html.replace(
         "</body>",
-        f'<script src="{feature_bundles["today-timer"].runtime_name}"></script>\n'
         f'<script src="{core.runtime_name}"></script>\n</body>',
     )
 
@@ -118,15 +124,11 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
     for source in sources:
         if source != WORKER_RUNTIME_SOURCE:
             worker = worker.replace(f"  BASE + '{source}',\n", "")
-    eager_feature = feature_bundles["today-timer"]
-    optional_features = {
-        name: bundle for name, bundle in feature_bundles.items() if name != "today-timer"
-    }
+    optional_features = feature_bundles
     worker = worker.replace(
         "  BASE + 'static/dashboard.css',\n",
         "  BASE + 'static/dashboard.css',\n"
-        + f"  BASE + '{core.runtime_name}',\n"
-        + f"  BASE + '{eager_feature.runtime_name}',\n",
+        + f"  BASE + '{core.runtime_name}',\n",
     )
     worker = worker.replace(
         "const OPTIONAL_FEATURES = [\n",

src/gitea_proxy.py

@@ -367,6 +367,7 @@ async def repository_access(repository: str) -> dict | None:
 
 WORK_SEARCHES = {
     "issue": ("assigned=true", "issues", None),
+    "filed": ("created=true", "issues", "created_by_me"),
     "pull": ("assigned=true", "pulls", "assigned_to_me"),
     "review": ("review_requested=true", "pulls", "review_requested"),
 }
@@ -379,7 +380,8 @@ async def work_page(stream: str, page: int = 1, limit: int = 50) -> dict:
         "/api/v1/repos/issues/search",
         headers=_auth(),
         params={
-            "state": "open", selector.split("=", 1)[0]: "true",
+            "state": "all" if stream == "filed" else "open",
+            selector.split("=", 1)[0]: "true",
             "type": item_type, "limit": limit, "page": page,
         },
     )
@@ -738,8 +740,20 @@ def _page_metadata(result: dict) -> dict:
 
 
 async def issues() -> WorkItems:
-    result = await work_page("issue")
-    return WorkItems(result["items"], {"issue": _page_metadata(result)})
+    assigned, filed = await asyncio.gather(work_page("issue"), work_page("filed"))
+    merged: dict[int, dict] = {}
+    for result in (assigned, filed):
+        for issue in result["items"]:
+            identity = issue.get("id")
+            if identity not in merged:
+                merged[identity] = {**issue, "work_reasons": []}
+            for reason in issue.get("work_reasons", []):
+                if reason not in merged[identity]["work_reasons"]:
+                    merged[identity]["work_reasons"].append(reason)
+    return WorkItems(
+        list(merged.values()),
+        {"issue": _page_metadata(assigned), "filed": _page_metadata(filed)},
+    )
 
 
 def _safe_web_url(value: Any) -> str:
@@ -1239,13 +1253,16 @@ async def close_issue(repository: str, number: int) -> dict:
     issue = response.json()
     if not isinstance(issue, dict) or issue.get("state") != "closed":
         raise ValueError("Gitea did not confirm issue closure")
-    return {
+    result = {
         "number": issue.get("number"),
         "state": "closed",
         "closed_at": issue.get("closed_at", "")
         if isinstance(issue.get("closed_at"), str)
         else "",
     }
+    if isinstance(issue.get("updated_at"), str):
+        result["updated_at"] = issue["updated_at"]
+    return result
 
 
 def _normalize_issue_comment(comment: dict) -> dict:
@@ -1347,6 +1364,32 @@ async def upload_assigned_issue_attachment(
     return {"name": name, "url": url, "size": size}
 
 
+async def upload_preview_attachment(
+    repository: str,
+    number: int,
+    filename: str,
+    content_type: str,
+    content: bytes,
+) -> dict:
+    """Upload evidence after the caller verifies an exact Search preview target."""
+    response = await _get_client().post(
+        f"/api/v1/repos/{repository}/issues/{number}/assets",
+        headers=_auth(),
+        params={"name": filename},
+        files={"attachment": (filename, content, content_type)},
+    )
+    response.raise_for_status()
+    attachment = response.json()
+    if not isinstance(attachment, dict):
+        raise ValueError("Gitea attachment response was not an object")
+    name = attachment.get("name")
+    url = _safe_web_url(attachment.get("browser_download_url"))
+    size = attachment.get("size")
+    if not isinstance(name, str) or not name or not url or not isinstance(size, int):
+        raise ValueError("Gitea did not confirm the attachment")
+    return {"name": name, "url": url, "size": size}
+
+
 async def upload_assigned_pull_attachment(
     repository: str,
     number: int,
@@ -1400,6 +1443,51 @@ async def repo_labels(repository: str) -> list[dict]:
     ]
 
 
+async def repo_issue_templates(repository: str) -> list[dict]:
+    """Return a small allowlisted view of repository issue templates."""
+    response = await _get_client().get(
+        f"/api/v1/repos/{repository}/issue_templates", headers=_auth()
+    )
+    response.raise_for_status()
+    payload = response.json()
+    if payload is None:
+        return []
+    if not isinstance(payload, list):
+        raise ValueError("Gitea issue templates response was not a list")
+    templates = []
+    for item in payload:
+        if len(templates) >= 20:
+            break
+        if not isinstance(item, dict):
+            continue
+        name = item.get("name")
+        if not isinstance(name, str) or not name.strip():
+            continue
+        name = name.strip()[:80]
+        identifier = re.sub(r"[^a-z0-9]+", "-", name.lower()).strip("-")[:80]
+        labels = []
+        for label in item.get("labels", []) if isinstance(item.get("labels"), list) else []:
+            if not isinstance(label, str):
+                continue
+            clean = label.strip()[:80]
+            if clean and clean not in labels:
+                labels.append(clean)
+            if len(labels) >= 20:
+                break
+        scalar = lambda key, limit: (
+            item.get(key, "")[:limit] if isinstance(item.get(key), str) else ""
+        )
+        templates.append({
+            "id": identifier or f"template-{len(templates) + 1}",
+            "name": name,
+            "about": scalar("about", 240).strip(),
+            "title": scalar("title", 255),
+            "body": scalar("content", 9000).strip(),
+            "labels": labels,
+        })
+    return templates
+
+
 async def repo_milestones(repository: str) -> list[dict]:
     response = await _get_client().get(
         f"/api/v1/repos/{repository}/milestones",
@@ -1424,12 +1512,14 @@ async def create_issue(
     repository: str,
     title: str,
     body: str,
-    assignee: str,
+    assignee: str | None,
     label_ids: list[int] | None = None,
     milestone_id: int | None = None,
     due_date: str | None = None,
 ) -> dict:
-    payload: dict = {"title": title, "body": body, "assignee": assignee}
+    payload: dict = {"title": title, "body": body}
+    if assignee is not None:
+        payload["assignee"] = assignee
     if label_ids:
         payload["labels"] = label_ids
     if milestone_id is not None:
@@ -1452,8 +1542,11 @@ async def create_issue(
         for item in assignees
         if isinstance(item, dict) and isinstance(item.get("login"), str)
     ]
-    if assignee not in confirmed_assignees:
-        raise ValueError("Gitea did not confirm issue self-assignment")
+    expected_assignees = [assignee] if assignee is not None else []
+    if confirmed_assignees != expected_assignees:
+        raise ValueError(
+            "Gitea did not confirm self-assignment or exact issue assignment"
+        )
     labels_value = issue.get("labels")
     labels = labels_value if isinstance(labels_value, list) else []
     milestone_value = issue.get("milestone")
@@ -1776,6 +1869,63 @@ async def handoff_assigned_issue(
     }
 
 
+async def reassign_authored_issue(
+    repository: str, number: int, recipient: str, expected_assignees: list[str]
+) -> dict:
+    login, issue = await _current_login_and_target(
+        f"repos/{repository}/issues/{number}"
+    )
+    author = issue.get("user")
+    author_login = author.get("login") if isinstance(author, dict) else None
+    assignees_value = issue.get("assignees")
+    current_assignees = [
+        item["login"] for item in assignees_value
+        if isinstance(item, dict) and isinstance(item.get("login"), str)
+    ] if isinstance(assignees_value, list) else []
+    if (
+        issue.get("state") != "open"
+        or issue.get("pull_request") is not None
+        or not isinstance(author_login, str)
+        or author_login.casefold() != login.casefold()
+        or not current_assignees
+        or current_assignees != expected_assignees
+    ):
+        raise IssueNotAvailableError("Authored issue delegate changed")
+
+    eligible = {
+        item["login"] for item in await issue_handoff_candidates(repository)
+    }
+    if recipient not in eligible or recipient in current_assignees:
+        raise IssueNotAvailableError("Reassignment recipient is not eligible")
+
+    response = await _get_client().patch(
+        f"/api/v1/repos/{repository}/issues/{number}",
+        headers=_auth(),
+        json={"assignees": [recipient]},
+    )
+    response.raise_for_status()
+    confirmed = response.json()
+    confirmed_value = confirmed.get("assignees") if isinstance(confirmed, dict) else None
+    confirmed_assignees = [
+        item["login"] for item in confirmed_value
+        if isinstance(item, dict) and isinstance(item.get("login"), str)
+    ] if isinstance(confirmed_value, list) else []
+    if (
+        not isinstance(confirmed, dict)
+        or confirmed.get("number") != number
+        or confirmed_assignees != [recipient]
+    ):
+        raise ValueError("Gitea did not confirm issue reassignment")
+    return {
+        "repository": repository,
+        "number": number,
+        "state": confirmed.get("state", "open"),
+        "assignees": confirmed_assignees,
+        "recipient": recipient,
+        "previous_assignees": expected_assignees,
+    }
+
+
 async def pull_handoff_candidates(repository: str) -> list[dict]:
     candidates = await issue_handoff_candidates(repository)
     return [
@@ -1969,6 +2119,58 @@ async def update_assigned_issue_milestone(
     }
 
 
+async def update_assigned_issue_release_plan(
+    repository: str, number: int, milestone_id: int, due_date: str | None
+) -> dict:
+    path = f"repos/{repository}/issues/{number}"
+    login, issue = await _current_login_and_target(path)
+    if (
+        issue.get("state") != "open"
+        or isinstance(issue.get("pull_request"), dict)
+        or not _login_in_users(login, issue.get("assignees"))
+    ):
+        raise IssueNotAvailableError("assigned issue not found")
+
+    selected = next(
+        (item for item in await repo_milestones(repository) if item["id"] == milestone_id),
+        None,
+    )
+    if selected is None:
+        raise ValueError("Unknown open repository milestone")
+
+    payload: dict = {"milestone": milestone_id}
+    if due_date is not None:
+        payload["due_date"] = due_date
+    response = await _get_client().patch(
+        f"/api/v1/{path}", headers=_auth(), json=payload
+    )
+    response.raise_for_status()
+    confirmed = response.json()
+    milestone_value = confirmed.get("milestone") if isinstance(confirmed, dict) else None
+    normalized = (
+        {"id": milestone_value["id"], "title": milestone_value["title"]}
+        if isinstance(milestone_value, dict)
+        and isinstance(milestone_value.get("id"), int)
+        and isinstance(milestone_value.get("title"), str)
+        else None
+    )
+    expected_due_date = due_date if due_date is not None else issue.get("due_date")
+    if (
+        not isinstance(confirmed, dict)
+        or confirmed.get("number") != number
+        or normalized != selected
+        or confirmed.get("due_date") != expected_due_date
+    ):
+        raise ValueError("Gitea did not confirm the issue release plan")
+    return {
+        "repository": repository,
+        "number": number,
+        "state": confirmed.get("state", "open"),
+        "milestone": normalized,
+        "due_date": confirmed.get("due_date"),
+    }
+
+
 async def issue_conversation_page(
     repository: str,
     number: int,
@@ -2173,16 +2375,58 @@ async def update_assigned_issue(
     title: str,
     body: str,
     expected_updated_at: str,
+) -> dict:
+    return await _update_issue_content(
+        repository, number, title, body, expected_updated_at, require_author=False
+    )
+
+
+async def update_authored_issue(
+    repository: str,
+    number: int,
+    title: str,
+    body: str,
+    expected_updated_at: str,
+) -> dict:
+    return await _update_issue_content(
+        repository, number, title, body, expected_updated_at, require_author=True
+    )
+
+
+async def _update_issue_content(
+    repository: str,
+    number: int,
+    title: str,
+    body: str,
+    expected_updated_at: str,
+    *,
+    require_author: bool,
 ) -> dict:
     path = f"repos/{repository}/issues/{number}"
     login, issue = await _current_login_and_target(path)
+    author = issue.get("user") if isinstance(issue.get("user"), dict) else {}
+    authorized = (
+        author.get("login") == login
+        if require_author
+        else _login_in_users(login, issue.get("assignees"))
+    )
     if (
         issue.get("state") != "open"
         or isinstance(issue.get("pull_request"), dict)
-        or not _login_in_users(login, issue.get("assignees"))
+        or not authorized
     ):
-        raise IssueNotAvailableError("assigned issue not found")
+        raise IssueNotAvailableError("issue not found")
     if issue.get("updated_at") != expected_updated_at:
+        if issue.get("title") == title and issue.get("body", "") == body:
+            return {
+                "repository": repository,
+                "number": number,
+                "title": title,
+                "body": body,
+                "state": issue.get("state", "open"),
+                "updated_at": issue.get("updated_at", ""),
+                "url": _safe_web_url(issue.get("html_url")),
+            }
         raise IssueEditConflictError("issue changed upstream")
 
     response = await _get_client().patch(
@@ -2245,19 +2489,23 @@ async def resolve_work_route(
             "title": detail.get("title", ""),
             "url": detail.get("url", ""),
         }
-    if repository is None or number is None or kind not in {"issue", "pull", "review"}:
+    if repository is None or number is None or kind not in {"issue", "filed", "pull", "review"}:
         raise WorkRouteUnavailableError("Work identity is missing")
 
-    target_path = "issues" if kind == "issue" else "pulls"
+    target_path = "issues" if kind in {"issue", "filed"} else "pulls"
     login, target = await _current_login_and_target(
         f"repos/{repository}/{target_path}/{number}"
     )
     assigned = _login_in_users(login, target.get("assignees"))
     requested = _login_in_users(login, target.get("requested_reviewers"))
+    author = target.get("user") if isinstance(target.get("user"), dict) else {}
+    authored = author.get("login") == login
+    state = target.get("state")
     eligible = (
-        target.get("state") == "open"
+        (state == "open" or (kind == "filed" and state == "closed"))
         and (
             (kind == "issue" and not isinstance(target.get("pull_request"), dict) and assigned)
+            or (kind == "filed" and not isinstance(target.get("pull_request"), dict) and authored)
             or (kind == "pull" and assigned)
             or (kind == "review" and requested)
         )
@@ -2269,9 +2517,14 @@ async def resolve_work_route(
         "repository": repository,
         "number": number,
         "title": target.get("title", "") if isinstance(target.get("title"), str) else "",
-        "state": "open",
+        "state": state,
         "url": _safe_web_url(target.get("html_url")),
         **({"is_review": True, "work_reasons": ["review_requested"]} if kind == "review" else {}),
+        **({
+            "is_filed": True,
+            "is_assigned": assigned,
+            "work_reasons": ["created_by_me"],
+        } if kind == "filed" else {}),
     }
 
 
@@ -2286,6 +2539,30 @@ async def is_assigned_issue(repository: str, number: int) -> bool:
     )
 
 
+async def is_authored_issue(repository: str, number: int) -> bool:
+    login, issue = await _current_login_and_target(
+        f"repos/{repository}/issues/{number}"
+    )
+    author = issue.get("user") if isinstance(issue.get("user"), dict) else {}
+    return (
+        issue.get("state") in {"open", "closed"}
+        and not isinstance(issue.get("pull_request"), dict)
+        and author.get("login") == login
+    )
+
+
+async def is_open_authored_issue(repository: str, number: int) -> bool:
+    login, issue = await _current_login_and_target(
+        f"repos/{repository}/issues/{number}"
+    )
+    author = issue.get("user") if isinstance(issue.get("user"), dict) else {}
+    return (
+        issue.get("state") == "open"
+        and not isinstance(issue.get("pull_request"), dict)
+        and author.get("login") == login
+    )
+
+
 async def pull_requests() -> WorkItems:
     assigned, review_requested = await asyncio.gather(
         work_page("pull"),

src/idempotency.py

@@ -5,6 +5,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Callable
 
+from src.private_state import connect_private_sqlite
+
 
 @dataclass(frozen=True)
 class Reservation:
@@ -33,11 +35,10 @@ class IdempotencyLedger:
         self.max_entries = max_entries
         self.lock_timeout_seconds = lock_timeout_seconds
         self.clock = clock
-        self.path.parent.mkdir(parents=True, exist_ok=True)
         self._initialize()
 
     def _connect(self) -> sqlite3.Connection:
-        connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+        connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
         connection.execute(
             f"PRAGMA busy_timeout = {max(1, int(self.lock_timeout_seconds * 1000))}"
         )

src/image_sanitizer.py

@@ -0,0 +1,38 @@
+"""Authoritative image decoding and metadata removal for evidence uploads."""
+
+from __future__ import annotations
+
+import io
+
+from PIL import Image, ImageOps
+
+
+MAX_IMAGE_PIXELS = 12 * 1024 * 1024
+
+
+def sanitize_image(content_type: str, content: bytes) -> bytes:
+    """Apply orientation and return metadata-free bytes in the claimed format."""
+    format_names = {
+        "image/png": "PNG",
+        "image/jpeg": "JPEG",
+        "image/webp": "WEBP",
+    }
+    try:
+        with Image.open(io.BytesIO(content)) as source:
+            claimed_format = format_names[content_type]
+            if source.format != claimed_format:
+                raise ValueError("image content does not match the selected image type")
+            if getattr(source, "n_frames", 1) != 1:
+                raise ValueError("animated image evidence is not supported")
+            if source.width * source.height > MAX_IMAGE_PIXELS:
+                raise ValueError("attachment must not exceed 12 megapixels")
+            image = ImageOps.exif_transpose(source)
+            image.load()
+            output = io.BytesIO()
+            save_options = {"quality": 90} if claimed_format in {"JPEG", "WEBP"} else {}
+            image.save(output, format=claimed_format, **save_options)
+            return output.getvalue()
+    except ValueError:
+        raise
+    except (KeyError, OSError) as exc:
+        raise ValueError("attachment must be a valid static image") from exc

src/later_store.py

@@ -6,6 +6,8 @@ import time
 from datetime import datetime
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class LaterStore:
     def __init__(
@@ -25,8 +27,7 @@ class LaterStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        connection = sqlite3.connect(self.path, timeout=self.timeout)
+        connection = connect_private_sqlite(self.path, timeout=self.timeout)
         if connection.execute("PRAGMA user_version").fetchone()[0] >= 1:
             connection.close()
             return
@@ -72,7 +73,7 @@ class LaterStore:
         connection.close()
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     def _record_operation(self, connection: sqlite3.Connection, login: str, operation_id: str) -> None:
         now = self.clock()
@@ -130,6 +131,7 @@ class LaterStore:
         item_id: str,
         *,
         wake_at: str | None = None,
+        handoff: str | None = None,
         base_revision: int | None = None,
     ) -> dict:
         result = self.apply_batch(login, [{
@@ -137,6 +139,7 @@ class LaterStore:
             "action": action,
             "item_id": item_id,
             "wake_at": wake_at,
+            "handoff": handoff,
             "base_revision": base_revision,
         }])
         return {"revision": result["revision"], "records": result["records"]}
@@ -180,6 +183,9 @@ class LaterStore:
                 wake_at = operation.get("wake_at")
                 if action == "defer":
                     wake_at = self._validate_wake_at(wake_at)
+                handoff = operation.get("handoff")
+                if handoff not in {None, "today"}:
+                    raise ValueError("unsupported Later handoff")
                 duplicate = connection.execute(
                     "SELECT 1 FROM later_operations WHERE login = ? AND operation_id = ?",
                     (login, operation_id),
@@ -203,8 +209,9 @@ class LaterStore:
 
                 before = records.get(item_id)
                 if action == "defer":
-                    records[item_id] = wake_at
-                    changed = before != wake_at
+                    record = {"wake_at": wake_at, "handoff": handoff} if handoff else wake_at
+                    records[item_id] = record
+                    changed = before != record
                 else:
                     changed = item_id in records
                     records.pop(item_id, None)

src/live_snapshot_store.py

@@ -6,12 +6,13 @@ import json
 import os
 import secrets
 import sqlite3
-import stat
 import time
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable, Iterable
 
+from src.private_state import connect_private_sqlite
+
 SECTIONS = ("context", "events", "notifications")
 
 
@@ -58,56 +59,46 @@ class LiveSnapshotStore:
         self._initialize()
 
     def _connect(self) -> sqlite3.Connection:
-        connection = sqlite3.connect(self.path, timeout=1.0, isolation_level=None)
+        connection = connect_private_sqlite(self.path, timeout=1.0, isolation_level=None)
         connection.row_factory = sqlite3.Row
         connection.execute("PRAGMA busy_timeout = 1000")
         return connection
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
-        try:
-            os.chmod(self.path.parent, stat.S_IRWXU)
-        except OSError:
-            pass
-        old_umask = os.umask(0o077)
-        try:
-            with self._connect() as connection:
-                connection.executescript(
-                    """
-                    CREATE TABLE IF NOT EXISTS live_snapshot (
-                        singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
-                        value_json TEXT,
-                        created_at_json TEXT NOT NULL,
-                        failure_count_json TEXT NOT NULL,
-                        retry_at_json TEXT NOT NULL,
-                        revisions_json TEXT NOT NULL,
-                        generation TEXT NOT NULL
-                    );
-                    CREATE TABLE IF NOT EXISTS live_refresh_lease (
-                        singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
-                        owner TEXT NOT NULL,
-                        sections_json TEXT NOT NULL,
-                        expires_at REAL NOT NULL
-                    );
-                    CREATE TABLE IF NOT EXISTS live_read_notification (
-                        notification_id INTEGER PRIMARY KEY
-                    );
-                    """
-                )
-                connection.execute(
-                    """INSERT OR IGNORE INTO live_snapshot VALUES
-                    (1, NULL, ?, ?, ?, ?, ?)""",
-                    (
-                        json.dumps({section: None for section in SECTIONS}),
-                        json.dumps({section: 0 for section in SECTIONS}),
-                        json.dumps({section: None for section in SECTIONS}),
-                        json.dumps({section: 0 for section in SECTIONS}),
-                        secrets.token_hex(8),
-                    ),
-                )
-        finally:
-            os.umask(old_umask)
-        os.chmod(self.path, stat.S_IRUSR | stat.S_IWUSR)
+        with self._connect() as connection:
+            connection.executescript(
+                """
+                CREATE TABLE IF NOT EXISTS live_snapshot (
+                    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+                    value_json TEXT,
+                    created_at_json TEXT NOT NULL,
+                    failure_count_json TEXT NOT NULL,
+                    retry_at_json TEXT NOT NULL,
+                    revisions_json TEXT NOT NULL,
+                    generation TEXT NOT NULL
+                );
+                CREATE TABLE IF NOT EXISTS live_refresh_lease (
+                    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+                    owner TEXT NOT NULL,
+                    sections_json TEXT NOT NULL,
+                    expires_at REAL NOT NULL
+                );
+                CREATE TABLE IF NOT EXISTS live_read_notification (
+                    notification_id INTEGER PRIMARY KEY
+                );
+                """
+            )
+            connection.execute(
+                """INSERT OR IGNORE INTO live_snapshot VALUES
+                (1, NULL, ?, ?, ?, ?, ?)""",
+                (
+                    json.dumps({section: None for section in SECTIONS}),
+                    json.dumps({section: 0 for section in SECTIONS}),
+                    json.dumps({section: None for section in SECTIONS}),
+                    json.dumps({section: 0 for section in SECTIONS}),
+                    secrets.token_hex(8),
+                ),
+            )
 
     def try_acquire_refresh(
         self, sections: Iterable[str], *, lease_seconds: float

src/login_attempt_store.py

@@ -7,6 +7,8 @@ import sqlite3
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class LoginAttemptStoreError(RuntimeError):
     """Raised when sign-in throttling state cannot be accessed safely."""
@@ -69,8 +71,7 @@ class LoginAttemptStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+            connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS login_attempts (

src/main.py

@@ -26,6 +26,7 @@ from starlette.datastructures import UploadFile
 
 from src import dashboard_auth, gitea_proxy, passkeys
 from src.available_issue_snapshot_store import AvailableIssueSnapshotStore
+from src.completed_filed_review_store import CompletedFiledReviewStore
 from src.compression import NegotiatedGZipMiddleware
 from src.gitea_proxy import (
     activity_events,
@@ -40,6 +41,7 @@ from src.gitea_proxy import (
     repos,
 )
 from src.idempotency import IdempotencyLedger, IdempotencyLedgerBusy
+from src.image_sanitizer import sanitize_image
 from src.login_attempt_store import LoginAttemptStore, LoginAttemptStoreError, client_source
 from src.live_snapshot_store import (
     LiveSnapshotMetadata,
@@ -57,6 +59,8 @@ from src.push_notifications import (
 from src.push_endpoint_policy import UnsafePushEndpoint, validate_public_push_endpoint
 from src.push_subscription_store import PushSubscriptionStore
 from src.request_boundary import RequestBodyLimitMiddleware, request_body_limit
+from src.saved_search_store import SavedSearchConflict, SavedSearchStore
+from src.unfiled_draft_store import UnfiledDraftConflict, UnfiledDraftStore
 from src.security_event_store import SecurityEventStore, SecurityEventStoreError
 from src.suggestion_engine import compute
 from src.later_store import LaterStore
@@ -606,6 +610,7 @@ class LaterOperation(BaseModel):
     action: Literal["defer", "restore"]
     item_id: str = Field(min_length=1, max_length=500)
     wake_at: str | None = Field(default=None, max_length=100)
+    handoff: Literal["today"] | None = None
     base_revision: int | None = Field(default=None, ge=0)
 
 
@@ -617,6 +622,103 @@ class LaterOperationBatch(BaseModel):
     operations: list[LaterOperation] = Field(min_length=1, max_length=50)
 
 
+class SavedSearchView(BaseModel):
+    id: str = Field(min_length=1, max_length=64, pattern=r"^[A-Za-z0-9_-]+$")
+    name: str = Field(min_length=1, max_length=60)
+    query: str = Field(min_length=2, max_length=200)
+    kind: Literal["all", "issue", "pull"] = "all"
+    state: Literal["all", "open", "closed"] = "all"
+    repository: str = Field(default="", max_length=200)
+
+
+class SavedSearchCollection(BaseModel):
+    revision: int = Field(ge=0)
+    views: list[SavedSearchView] = Field(max_length=20)
+
+
+class CompletedFiledReviewReceipt(BaseModel):
+    repository: str = Field(
+        min_length=3,
+        max_length=200,
+        pattern=r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+    )
+    number: PositiveInt
+    updated_at: str = Field(min_length=1, max_length=100)
+
+
+class CompletedFiledReviewBatch(BaseModel):
+    receipts: list[CompletedFiledReviewReceipt] = Field(max_length=200)
+
+
+class UnfiledDraftBlocker(BaseModel):
+    repository: str = Field(min_length=3, max_length=200)
+    number: int = Field(ge=1)
+    title: str = Field(default="", max_length=255)
+
+
+class UnfiledDraftEvidence(BaseModel):
+    filename: str = Field(min_length=1, max_length=255)
+    content_type: Literal["image/png", "image/jpeg", "image/webp"]
+    note: str = Field(default="", max_length=240)
+    data: str = Field(max_length=14_000_000)
+
+
+class UnfiledDraftFilingPlan(BaseModel):
+    repository: str = Field(
+        min_length=3,
+        max_length=200,
+        pattern=r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+    )
+    label_ids: list[PositiveInt] = Field(default_factory=list, max_length=20)
+    milestone_id: PositiveInt | None = None
+    due_date: str | None = Field(default=None, pattern=r"^\d{4}-\d{2}-\d{2}$", max_length=10)
+    template_name: str | None = Field(default=None, min_length=1, max_length=80)
+    template_id: str | None = Field(default=None, min_length=1, max_length=80)
+    captured_body: str | None = Field(default=None, min_length=1, max_length=10_000)
+    assignee: str | None = Field(default=None, pattern=r"^[A-Za-z0-9_.-]+$", max_length=255)
+    assignee_name: str | None = Field(default=None, min_length=1, max_length=255)
+    unassigned: bool = False
+    estimate_minutes: int | None = Field(default=None, ge=5, le=1440)
+    completion_intent: Literal["create", "create-and-start"] | None = None
+
+    @field_validator("due_date")
+    @classmethod
+    def validate_filing_due_date(cls, value: str | None) -> str | None:
+        if value is not None:
+            datetime.strptime(value, "%Y-%m-%d")
+        return value
+
+    @model_validator(mode="after")
+    def require_consistent_owner_intent(self):
+        if self.unassigned and self.assignee is not None:
+            raise ValueError("assignee and unassigned cannot be requested together")
+        if self.assignee is None and self.assignee_name is not None:
+            raise ValueError("assignee name requires an assignee")
+        return self
+
+
+class UnfiledDraft(BaseModel):
+    id: str = Field(min_length=1, max_length=100, pattern=r"^[A-Za-z0-9_-]+$")
+    title: str = Field(default="", max_length=255)
+    body: str = Field(default="", max_length=10_000)
+    saved_at: int = Field(ge=0)
+    filing_plan: UnfiledDraftFilingPlan | None = None
+    blockers: list[UnfiledDraftBlocker] = Field(default_factory=list, max_length=5)
+    evidence: list[UnfiledDraftEvidence] = Field(default_factory=list, max_length=5)
+
+    @model_validator(mode="after")
+    def require_title_or_evidence(self):
+        self.title = self.title.strip()
+        if not self.title and not self.evidence:
+            raise ValueError("title or evidence is required")
+        return self
+
+
+class UnfiledDraftCollection(BaseModel):
+    revision: int = Field(ge=0)
+    drafts: list[UnfiledDraft] = Field(max_length=20)
+
+
 class NotificationLaterRequest(BaseModel):
     wake_at: str = Field(min_length=1, max_length=100)
 
@@ -696,9 +798,20 @@ def _validate_binary_attachment(filename: str, content_type: str, content: bytes
     return _validate_attachment_content(content_type, content)
 
 
+async def _sanitize_attachment(content_type: str, content: bytes) -> bytes:
+    sanitized = await asyncio.to_thread(sanitize_image, content_type, content)
+    if len(sanitized) > 2 * 1024 * 1024:
+        raise ValueError("sanitized screenshot must be 2 MB or smaller")
+    return sanitized
+
+
 class IssueCreation(BaseModel):
     title: str = Field(min_length=1, max_length=255)
     body: str = Field(default="", max_length=10_000)
+    unassigned: bool = False
+    assignee: str | None = Field(
+        default=None, pattern=r"^[A-Za-z0-9_.-]+$", max_length=255
+    )
     label_ids: list[int] = Field(default_factory=list, max_length=20)
     milestone_id: PositiveInt | None = None
     due_date: str | None = Field(
@@ -720,6 +833,12 @@ class IssueCreation(BaseModel):
     def strip_issue_body(cls, value: str) -> str:
         return value.strip()
 
+    @model_validator(mode="after")
+    def require_one_owner_intent(self):
+        if self.unassigned and self.assignee is not None:
+            raise ValueError("assignee and unassigned cannot be requested together")
+        return self
+
     @field_validator("due_date")
     @classmethod
     def validate_due_date(cls, value: str | None) -> str | None:
@@ -763,12 +882,37 @@ class IssueMilestoneUpdate(BaseModel):
     milestone_id: PositiveInt | None = None
 
 
+class IssueReleasePlanUpdate(BaseModel):
+    milestone_id: PositiveInt
+    due_date: str | None = Field(
+        default=None,
+        pattern=r"^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$",
+        max_length=20,
+    )
+
+
 class IssueHandoff(BaseModel):
     recipient: str = Field(
         min_length=1, max_length=255, pattern=r"^[A-Za-z0-9_.-]+$"
     )
 
 
+class IssueReassignment(IssueHandoff):
+    expected_assignees: list[str] = Field(min_length=1, max_length=10)
+
+    @field_validator("expected_assignees")
+    @classmethod
+    def validate_expected_assignees(cls, values: list[str]) -> list[str]:
+        if any(
+            not isinstance(value, str)
+            or not re.fullmatch(r"[A-Za-z0-9_.-]+", value)
+            or len(value) > 255
+            for value in values
+        ) or len(set(values)) != len(values):
+            raise ValueError("expected assignees must be unique valid logins")
+        return values
+
+
 class IssueBlockerUpdate(BaseModel):
     repository: str = Field(
         min_length=3,
@@ -924,6 +1068,7 @@ def _context_payload(user_data, repo_data, issues_data, prs_data) -> dict:
             id=i["id"], number=i["number"], title=i["title"], state=i["state"],
             labels=[label.get("name", "") for label in (i.get("labels") or []) if isinstance(label, dict)],
             assignees=[assignee.get("login", "") for assignee in (i.get("assignees") or []) if isinstance(assignee, dict)],
+            work_reasons=[reason for reason in (i.get("work_reasons") or []) if reason == "created_by_me"],
             repository=i["repository"].get("full_name", "") if isinstance(i.get("repository"), dict) else "",
             updated_at=i.get("updated_at") or "",
             due_date=i.get("due_date") if isinstance(i.get("due_date"), str) else None,
@@ -963,13 +1108,14 @@ def _context_payload(user_data, repo_data, issues_data, prs_data) -> dict:
 
 
 def _normalize_work_items(stream: str, items: list[dict]) -> list[dict]:
-    if stream == "issue":
+    if stream in {"issue", "filed"}:
         return [
             Issue(
                 id=item["id"], number=item["number"], title=item["title"],
                 state=item["state"],
                 labels=[label.get("name", "") for label in (item.get("labels") or []) if isinstance(label, dict)],
                 assignees=[assignee.get("login", "") for assignee in (item.get("assignees") or []) if isinstance(assignee, dict)],
+                work_reasons=[reason for reason in (item.get("work_reasons") or []) if reason == "created_by_me"],
                 repository=item["repository"].get("full_name", "") if isinstance(item.get("repository"), dict) else "",
                 updated_at=item.get("updated_at") or "",
                 due_date=item.get("due_date") if isinstance(item.get("due_date"), str) else None,
@@ -1038,6 +1184,16 @@ def _share_target_login_redirect(request: Request) -> str:
             continuation_values.append(("search_repository", repository_values[0]))
         continuation = urlencode(continuation_values)
         return f"login?{urlencode({'continue': f'./?{continuation}'})}"
+    image_markers = request.query_params.getlist("shared")
+    if image_markers:
+        if (
+            set(request.query_params.keys()) != {"launch", "shared"}
+            or request.query_params.getlist("launch") != ["new"]
+            or image_markers != ["bundle"]
+        ):
+            return "login"
+        continuation = urlencode([("launch", "new"), ("shared", "bundle")])
+        return f"login?{urlencode({'continue': f'./?{continuation}'})}"
     limits = {"title": 200, "text": 8000, "url": 2048}
     if any(
         len(request.query_params.get(name, "")) > limit
@@ -1052,14 +1208,6 @@ def _share_target_login_redirect(request: Request) -> str:
     launch = request.query_params.get("launch", "")
     if launch in {"continue", "new", "agenda"}:
         shared.append(("launch", launch))
-    image_markers = request.query_params.getlist("shared")
-    if image_markers:
-        if (
-            image_markers != ["image"]
-            or request.query_params.getlist("launch") != ["new"]
-        ):
-            return "login"
-        shared.append(("shared", "image"))
     if dashboard_auth.application_path(request) != "/" or not shared:
         return "login"
     continuation = f"./?{urlencode(shared)}"
@@ -1174,7 +1322,7 @@ async def require_operator_session(request: Request, call_next):
 async def prevent_live_api_caching(request, call_next):
     response = await call_next(request)
     path = dashboard_auth.application_path(request)
-    if path in {"/api/v1/context", "/api/v1/background-identity", "/api/v1/events", "/api/v1/live", "/api/v1/available-issues", "/api/v1/search", "/api/v1/work-route", "/api/v1/today", "/api/v1/later", "/api/v1/security-events", "/api/v1/push-subscription"} or path.startswith("/api/v1/work/") or (
+    if path in {"/api/v1/context", "/api/v1/background-identity", "/api/v1/events", "/api/v1/live", "/api/v1/available-issues", "/api/v1/search", "/api/v1/work-route", "/api/v1/today", "/api/v1/later", "/api/v1/saved-searches", "/api/v1/completed-filed-reviews", "/api/v1/security-events", "/api/v1/push-subscription"} or path.startswith("/api/v1/work/") or (
         path.startswith("/api/v1/repos/")
         and path.endswith("/review")
     ) or path.startswith("/api/v1/notifications") or (
@@ -1232,7 +1380,7 @@ async def enforce_browser_security_boundary(request: Request, call_next):
     response.headers["X-Content-Type-Options"] = "nosniff"
     response.headers["Referrer-Policy"] = "no-referrer"
     response.headers["Permissions-Policy"] = (
-        "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
+        "camera=(), microphone=(self), geolocation=(), payment=(), usb=()"
     )
     response.headers["X-Frame-Options"] = "DENY"
     if dashboard_auth.mode() == dashboard_auth.OPERATOR_MODE:
@@ -2105,6 +2253,27 @@ def _later_store() -> LaterStore:
     )
 
 
+def _saved_search_store() -> SavedSearchStore:
+    return SavedSearchStore(
+        os.getenv("STACKCHAIN_SAVED_SEARCH_DB", str(_state_dir / "saved-searches.sqlite3"))
+    )
+
+
+def _completed_filed_review_store() -> CompletedFiledReviewStore:
+    return CompletedFiledReviewStore(
+        os.getenv(
+            "STACKCHAIN_COMPLETED_FILED_REVIEW_DB",
+            str(_state_dir / "completed-filed-reviews.sqlite3"),
+        )
+    )
+
+
+def _unfiled_draft_store() -> UnfiledDraftStore:
+    return UnfiledDraftStore(
+        os.getenv("STACKCHAIN_UNFILED_DRAFT_DB", str(_state_dir / "unfiled-drafts.sqlite3"))
+    )
+
+
 async def _confirmed_login() -> str:
     try:
         user = await asyncio.wait_for(
@@ -2120,6 +2289,126 @@ async def _confirmed_login() -> str:
     return login.strip().lower()
 
 
+@app.get("/api/v1/completed-filed-reviews")
+async def get_completed_filed_reviews(response: Response):
+    login = await _confirmed_login()
+    try:
+        snapshot = await asyncio.to_thread(_completed_filed_review_store().get, login)
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Completed Filed review synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+    response.headers["Cache-Control"] = "no-store"
+    return snapshot
+
+
+@app.post("/api/v1/completed-filed-reviews")
+async def merge_completed_filed_reviews(payload: CompletedFiledReviewBatch):
+    login = await _confirmed_login()
+    try:
+        return await asyncio.to_thread(
+            _completed_filed_review_store().merge,
+            login,
+            [receipt.model_dump() for receipt in payload.receipts],
+        )
+    except ValueError as exc:
+        raise HTTPException(status_code=422, detail=str(exc))
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Completed Filed review synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+
+
+@app.get("/api/v1/saved-searches")
+async def get_saved_searches(response: Response):
+    login = await _confirmed_login()
+    try:
+        snapshot = await asyncio.to_thread(_saved_search_store().get, login)
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Saved Search synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+    response.headers["Cache-Control"] = "no-store"
+    return snapshot
+
+
+@app.put("/api/v1/saved-searches")
+async def replace_saved_searches(payload: SavedSearchCollection):
+    login = await _confirmed_login()
+    try:
+        return await asyncio.to_thread(
+            _saved_search_store().replace,
+            login,
+            payload.revision,
+            [view.model_dump() for view in payload.views],
+        )
+    except SavedSearchConflict as exc:
+        raise HTTPException(
+            status_code=409,
+            detail={
+                "message": "Saved searches changed on another device.",
+                "snapshot": exc.snapshot,
+            },
+        )
+    except ValueError as exc:
+        raise HTTPException(status_code=422, detail=str(exc))
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Saved Search synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+
+
+@app.get("/api/v1/unfiled-drafts")
+async def get_unfiled_drafts(response: Response):
+    login = await _confirmed_login()
+    try:
+        snapshot = await asyncio.to_thread(_unfiled_draft_store().get, login)
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Draft synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+    response.headers["Cache-Control"] = "no-store"
+    return snapshot
+
+
+@app.put("/api/v1/unfiled-drafts")
+async def replace_unfiled_drafts(payload: UnfiledDraftCollection):
+    login = await _confirmed_login()
+    try:
+        return await asyncio.to_thread(
+            _unfiled_draft_store().replace,
+            login,
+            payload.revision,
+            [draft.model_dump() for draft in payload.drafts],
+        )
+    except UnfiledDraftConflict as exc:
+        raise HTTPException(
+            status_code=409,
+            detail={
+                "message": "Drafts changed on another device.",
+                "snapshot": exc.snapshot,
+            },
+        )
+    except ValueError as exc:
+        raise HTTPException(status_code=422, detail=str(exc))
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Draft synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+
+
 @app.get("/api/v1/today")
 async def get_today_plan():
     login = await _confirmed_login()
@@ -2340,6 +2629,7 @@ async def update_later_plan(payload: LaterOperation | LaterOperationBatch):
             payload.action,
             payload.item_id,
             wake_at=payload.wake_at,
+            handoff=payload.handoff,
             base_revision=payload.base_revision,
         )
     except ValueError as error:
@@ -2856,9 +3146,75 @@ async def comment_on_global_search_preview(
     return JSONResponse(result, status_code=201)
 
 
+@app.post(
+    "/api/v1/repos/{owner}/{repo}/issues/{number}/preview/attachments",
+    status_code=201,
+)
+async def attach_to_global_search_preview(
+    request: Request,
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+    kind: Literal["issue", "pull"] = Query(),
+    idempotency_key: str | None = Header(default=None, max_length=128),
+) -> JSONResponse:
+    repository = f"{owner}/{repo}"
+    try:
+        form = await request.form()
+        uploaded = form.get("file")
+        if not isinstance(uploaded, UploadFile):
+            raise ValueError("screenshot file is required")
+        filename = str(uploaded.filename or "")
+        content_type = str(uploaded.content_type or "")
+        content = _validate_binary_attachment(filename, content_type, await uploaded.read())
+        content = await _sanitize_attachment(content_type, content)
+    except (ValueError, ValidationError) as exc:
+        raise HTTPException(status_code=422, detail=str(exc)) from exc
+
+    async def upload_attachment():
+        preview = await gitea_proxy.work_preview(repository, kind, number)
+        if (
+            preview.get("repository") != repository
+            or preview.get("kind") != kind
+            or preview.get("number") != number
+            or preview.get("commentable") is not True
+        ):
+            raise HTTPException(status_code=404, detail="Search result not found")
+        result = await gitea_proxy.upload_preview_attachment(
+            repository, number, filename, content_type, content
+        )
+        safe_name = (
+            result["name"].replace("\\", "\\\\").replace("[", "\\[").replace("]", "\\]")
+            .replace("\r", " ").replace("\n", " ")
+        )
+        safe_url = result["url"].replace("<", "%3C").replace(">", "%3E")
+        result["markdown"] = f"![{safe_name}](<{safe_url}>)"
+        return result
+
+    try:
+        result = await _run_idempotent_authored_action(
+            upload_attachment(),
+            idempotency_key=idempotency_key,
+            fingerprint=(
+                "search-preview-attachment", repository, kind, number, filename,
+                content_type, hashlib.sha256(content).hexdigest(),
+            ),
+            timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
+        )
+    except HTTPException:
+        raise
+    except Exception:
+        return JSONResponse(
+            {"error": "The photo could not be uploaded. Your reply is safe; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    return JSONResponse(result, status_code=201)
+
+
 @app.get("/api/v1/work-route")
 async def resolve_work_route(
-    kind: Literal["issue", "pull", "review", "update"] = Query(),
+    kind: Literal["issue", "filed", "pull", "review", "update"] = Query(),
     repository: str | None = Query(default=None, pattern=r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$"),
     number: int | None = Query(default=None, gt=0),
     notification_id: int | None = Query(default=None, gt=0),
@@ -2885,7 +3241,7 @@ async def resolve_work_route(
 
 @app.get("/api/v1/work/{stream}")
 async def paged_work(
-    stream: Literal["issue", "pull", "review"],
+    stream: Literal["issue", "filed", "pull", "review"],
     page: int = Query(ge=2, le=100),
 ) -> JSONResponse:
     try:
@@ -3992,6 +4348,7 @@ async def attach_to_notification(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
 
@@ -4114,12 +4471,20 @@ async def release_assigned_issue(
 
 @app.get("/api/v1/repos/{owner}/{repo}/issues/{number}/handoff-candidates")
 async def issue_handoff_candidates(
-    owner: str, repo: str, number: int = PathParam(gt=0)
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ) -> JSONResponse:
     repository = f"{owner}/{repo}"
 
     async def load_candidates():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.issue_handoff_candidates(repository)
 
@@ -4189,14 +4554,57 @@ async def handoff_assigned_issue(
     return JSONResponse(result)
 
 
+@app.patch("/api/v1/repos/{owner}/{repo}/issues/{number}/reassign")
+async def reassign_authored_issue(
+    reassignment: IssueReassignment,
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+) -> JSONResponse:
+    repository = f"{owner}/{repo}"
+    try:
+        result = await asyncio.wait_for(
+            gitea_proxy.reassign_authored_issue(
+                repository,
+                number,
+                reassignment.recipient,
+                reassignment.expected_assignees,
+            ),
+            timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
+        )
+    except gitea_proxy.IssueNotAvailableError:
+        return JSONResponse(
+            {"error": "The delegate changed. Reload before reassigning."},
+            status_code=409,
+        )
+    except Exception:
+        return JSONResponse(
+            {"error": "The reassignment could not be confirmed. The current delegate is unchanged; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    return JSONResponse(result)
+
+
 @app.get("/api/v1/repos/{owner}/{repo}/issues/{number}/detail")
-async def assigned_issue_detail(owner: str, repo: str, number: int = PathParam(gt=0)):
+async def assigned_issue_detail(
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
+):
     repository = f"{owner}/{repo}"
 
     async def load_assigned_issue():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
-        return await gitea_proxy.issue_detail(repository, number)
+        detail = await gitea_proxy.issue_detail(repository, number)
+        return {**detail, "read_only": True} if access == "filed" else detail
 
     try:
         return await asyncio.wait_for(
@@ -4283,11 +4691,17 @@ async def update_assigned_issue_content(
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
     try:
+        update_issue = (
+            gitea_proxy.update_authored_issue
+            if access == "filed"
+            else gitea_proxy.update_assigned_issue
+        )
         result = await asyncio.wait_for(
-            gitea_proxy.update_assigned_issue(
+            update_issue(
                 repository,
                 number,
                 update.title,
@@ -4374,6 +4788,85 @@ async def update_assigned_issue_milestone(
     return JSONResponse(result)
 
 
+@app.patch("/api/v1/repos/{owner}/{repo}/issues/{number}/release-plan")
+async def update_assigned_issue_release_plan(
+    update: IssueReleasePlanUpdate,
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+):
+    repository = f"{owner}/{repo}"
+    try:
+        result = await asyncio.wait_for(
+            gitea_proxy.update_assigned_issue_release_plan(
+                repository, number, update.milestone_id, update.due_date
+            ),
+            timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
+        )
+    except gitea_proxy.IssueNotAvailableError:
+        raise HTTPException(status_code=404, detail="Assigned issue not found")
+    except ValueError as exc:
+        if str(exc) == "Unknown open repository milestone":
+            raise HTTPException(status_code=422, detail=str(exc))
+        return JSONResponse(
+            {"error": "The release plan could not be confirmed. Your selection is safe; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    except Exception:
+        return JSONResponse(
+            {"error": "The release plan could not be updated. Your selection is safe; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    return JSONResponse(result)
+
+
+@app.get("/api/v1/repos/{owner}/{repo}/issue-filing-metadata")
+async def repository_issue_filing_metadata(owner: str, repo: str):
+    repository = f"{owner}/{repo}"
+
+    async def load_metadata():
+        if await gitea_proxy.repository_access(repository) is None:
+            raise HTTPException(status_code=404, detail="Repository not found")
+        names = ("labels", "milestones", "templates")
+        loaders = (
+            gitea_proxy.repo_labels(repository),
+            gitea_proxy.repo_milestones(repository),
+            gitea_proxy.repo_issue_templates(repository),
+        )
+        results = await asyncio.gather(*loaders, return_exceptions=True)
+        messages = {
+            "labels": "Labels could not be loaded.",
+            "milestones": "Milestones could not be loaded.",
+            "templates": "Issue types could not be loaded.",
+        }
+        payload = {}
+        for name, result in zip(names, results):
+            if isinstance(result, BaseException):
+                payload[name] = {
+                    "available": False,
+                    "items": [],
+                    "error": messages[name],
+                }
+            else:
+                payload[name] = {"available": True, "items": result}
+        return JSONResponse(payload, headers={"Cache-Control": "no-store"})
+
+    try:
+        return await asyncio.wait_for(
+            load_metadata(), timeout=ISSUE_ACTION_TIMEOUT_SECONDS
+        )
+    except HTTPException:
+        raise
+    except Exception:
+        return JSONResponse(
+            {"error": "Issue filing details could not be loaded. Your draft is safe; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1", "Cache-Control": "no-store"},
+        )
+
+
 @app.get("/api/v1/repos/{owner}/{repo}/milestones")
 async def repository_milestones(owner: str, repo: str):
     repository = f"{owner}/{repo}"
@@ -4418,6 +4911,57 @@ async def repository_labels(owner: str, repo: str):
         )
 
 
+@app.get("/api/v1/repos/{owner}/{repo}/issue-templates")
+async def repository_issue_templates(owner: str, repo: str):
+    repository = f"{owner}/{repo}"
+
+    async def load_templates():
+        if await gitea_proxy.repository_access(repository) is None:
+            raise HTTPException(status_code=404, detail="Repository not found")
+        return await gitea_proxy.repo_issue_templates(repository)
+
+    try:
+        return await asyncio.wait_for(load_templates(), timeout=ISSUE_ACTION_TIMEOUT_SECONDS)
+    except HTTPException:
+        raise
+    except Exception:
+        return JSONResponse(
+            {"error": "Issue types could not be loaded. Blank issue creation is still available."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+
+
+@app.get("/api/v1/repos/{owner}/{repo}/issue-assignees")
+async def repository_issue_assignees(owner: str, repo: str):
+    repository = f"{owner}/{repo}"
+
+    async def load_assignees():
+        if await gitea_proxy.repository_access(repository) is None:
+            raise HTTPException(status_code=404, detail="Repository not found")
+        candidates = [
+            item
+            for item in await gitea_proxy.issue_handoff_candidates(repository)
+            if isinstance(item, dict)
+            and isinstance(item.get("login"), str)
+            and re.fullmatch(r"[A-Za-z0-9_.-]+", item["login"])
+        ][:25]
+        return JSONResponse(candidates, headers={"Cache-Control": "no-store"})
+
+    try:
+        return await asyncio.wait_for(
+            load_assignees(), timeout=ISSUE_ACTION_TIMEOUT_SECONDS
+        )
+    except HTTPException:
+        raise
+    except Exception:
+        return JSONResponse(
+            {"error": "Owners could not be loaded. You can still assign the issue to yourself."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+
+
 @app.post("/api/v1/repos/{owner}/{repo}/issues", status_code=201)
 async def create_assigned_issue(
     creation: IssueCreation,
@@ -4434,6 +4978,17 @@ async def create_assigned_issue(
         login = user.get("login") if isinstance(user, dict) else None
         if not login or accessible is None:
             raise HTTPException(status_code=404, detail="Repository not found")
+        assignee = None if creation.unassigned else login
+        if not creation.unassigned and creation.assignee and creation.assignee != login:
+            eligible = {
+                item["login"]
+                for item in await gitea_proxy.issue_handoff_candidates(repository)
+            }
+            if creation.assignee not in eligible:
+                raise HTTPException(
+                    status_code=422, detail="Selected owner is no longer eligible"
+                )
+            assignee = creation.assignee
         if creation.label_ids:
             available_labels = await gitea_proxy.repo_labels(repository)
             valid_label_ids = {
@@ -4459,13 +5014,13 @@ async def create_assigned_issue(
                 repository,
                 creation.title,
                 creation.body,
-                login,
+                assignee,
                 creation.label_ids,
                 creation.milestone_id,
                 creation.due_date,
             )
         return await gitea_proxy.create_issue(
-            repository, creation.title, creation.body, login, creation.label_ids
+            repository, creation.title, creation.body, assignee, creation.label_ids
         )
 
     try:
@@ -4477,6 +5032,8 @@ async def create_assigned_issue(
                 repository,
                 creation.title,
                 creation.body,
+                creation.assignee,
+                creation.unassigned,
                 tuple(creation.label_ids),
                 creation.milestone_id,
                 creation.due_date,
@@ -4501,11 +5058,17 @@ async def assigned_issue_conversation(
     number: int = PathParam(gt=0),
     page: int | None = Query(default=None, ge=1, le=100),
     limit: int = Query(default=20, ge=1, le=50),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
 
     async def load_conversation():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.issue_conversation_page(repository, number, page, limit)
 
@@ -4530,11 +5093,17 @@ async def comment_on_assigned_issue(
     repo: str,
     number: int = PathParam(gt=0),
     idempotency_key: str | None = Header(default=None, max_length=128),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
 
     async def post_comment():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.comment_on_issue(repository, number, comment.body)
 
@@ -4763,6 +5332,7 @@ async def attach_to_assigned_issue(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
     async def upload_attachment():
@@ -4831,6 +5401,7 @@ async def attach_to_assigned_pull(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
 
@@ -4875,6 +5446,7 @@ async def close_assigned_issue(
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = "assigned",
     step_up_grant: str | None = Header(
         default=None, alias="X-Step-Up-Grant", max_length=128
     ),
@@ -4889,12 +5461,21 @@ async def close_assigned_issue(
 
     target = f"{repository}#{number}"
     try:
-        assigned = await asyncio.wait_for(
-            gitea_proxy.is_assigned_issue(repository, number),
+        authorized = await asyncio.wait_for(
+            (
+                gitea_proxy.is_open_authored_issue(repository, number)
+                if access == "filed"
+                else gitea_proxy.is_assigned_issue(repository, number)
+            ),
             timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
         )
-        if not assigned:
-            raise HTTPException(status_code=404, detail="Assigned issue not found")
+        if not authorized:
+            detail = (
+                "Open authored issue not found"
+                if access == "filed"
+                else "Assigned issue not found"
+            )
+            raise HTTPException(status_code=404, detail=detail)
         journal = _security_event_store()
         operation_id = await asyncio.to_thread(
             journal.reserve,

src/models.py

@@ -29,6 +29,7 @@ class Issue(BaseModel):
     state: str
     labels: list[str] = []
     assignees: list[str] = []
+    work_reasons: list[str] = []
     repository: str = ""
     updated_at: str = ""
     due_date: str | None = None

src/passkey_store.py

@@ -6,6 +6,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
 from src.session_store import SessionStoreError
 
 
@@ -40,8 +41,7 @@ class PasskeyStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=0.1)
+            connection = connect_private_sqlite(self.path, timeout=0.1)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS passkey_credentials (

src/private_state.py

@@ -0,0 +1,74 @@
+"""Filesystem boundary for SQLite state containing private operator data."""
+
+from __future__ import annotations
+
+import os
+import sqlite3
+import stat
+from pathlib import Path
+from typing import Any
+
+
+PRIVATE_DIRECTORY_MODE = stat.S_IRWXU
+PRIVATE_FILE_MODE = stat.S_IRUSR | stat.S_IWUSR
+
+
+def _reject_symlink(path: Path, *, label: str) -> None:
+    try:
+        metadata = path.lstat()
+    except FileNotFoundError:
+        return
+    if stat.S_ISLNK(metadata.st_mode):
+        raise ValueError(f"private SQLite {label} must not be a symlink: {path}")
+
+
+def prepare_private_sqlite_path(path: str | Path, *, create: bool = True) -> Path:
+    """Create or repair a private SQLite path without following a database symlink."""
+    database = Path(path)
+    parent = database.parent
+    _reject_symlink(parent, label="directory")
+    if create:
+        parent.mkdir(parents=True, mode=PRIVATE_DIRECTORY_MODE, exist_ok=True)
+    elif not parent.exists():
+        raise FileNotFoundError(database)
+    _reject_symlink(parent, label="directory")
+    if not parent.is_dir():
+        raise ValueError(f"private SQLite parent is not a directory: {parent}")
+    os.chmod(parent, PRIVATE_DIRECTORY_MODE, follow_symlinks=False)
+
+    _reject_symlink(database, label="database")
+    flags = os.O_RDWR | (os.O_CREAT if create else 0)
+    flags |= getattr(os, "O_CLOEXEC", 0) | getattr(os, "O_NOFOLLOW", 0)
+    descriptor = os.open(database, flags, PRIVATE_FILE_MODE)
+    try:
+        metadata = os.fstat(descriptor)
+        if not stat.S_ISREG(metadata.st_mode):
+            raise ValueError(f"private SQLite database is not a regular file: {database}")
+        os.fchmod(descriptor, PRIVATE_FILE_MODE)
+    finally:
+        os.close(descriptor)
+
+    for suffix in ("-wal", "-shm", "-journal"):
+        sidecar = Path(str(database) + suffix)
+        _reject_symlink(sidecar, label="sidecar")
+        try:
+            os.chmod(sidecar, PRIVATE_FILE_MODE, follow_symlinks=False)
+        except FileNotFoundError:
+            pass
+    return database
+
+
+def connect_private_sqlite(
+    path: str | Path, *, existing_only: bool = False, **kwargs: Any
+) -> sqlite3.Connection:
+    """Open SQLite only after enforcing its private directory and file modes."""
+    database = prepare_private_sqlite_path(path, create=not existing_only)
+    target: str | Path = database
+    if existing_only:
+        target = f"{database.resolve().as_uri()}?mode=rw"
+        kwargs["uri"] = True
+    connection = sqlite3.connect(target, **kwargs)
+    # SQLite derives new journal/WAL/SHM permissions from the database. Repair
+    # sidecars left by older releases as soon as a connection has opened them.
+    prepare_private_sqlite_path(database, create=not existing_only)
+    return connection

src/push_subscription_store.py

@@ -1,10 +1,11 @@
 import json
-import os
 import sqlite3
 from collections.abc import Iterable, Mapping
 from dataclasses import dataclass
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 @dataclass(frozen=True)
 class PushDelivery:
@@ -57,8 +58,6 @@ class PushSubscriptionStore:
 
     def __init__(self, path: str | Path):
         self.path = Path(path)
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        os.chmod(self.path.parent, 0o700)
         with self._connect() as connection:
             connection.executescript(
                 """
@@ -141,10 +140,8 @@ class PushSubscriptionStore:
                 connection.execute(
                     "ALTER TABLE push_deadline_preferences ADD COLUMN reminder_days INTEGER NOT NULL DEFAULT 2"
                 )
-        os.chmod(self.path, 0o600)
-
     def _connect(self):
-        connection = sqlite3.connect(self.path, timeout=2)
+        connection = connect_private_sqlite(self.path, timeout=2)
         connection.execute("PRAGMA foreign_keys = ON")
         return connection
 

src/request_boundary.py

@@ -7,6 +7,7 @@ SESSION_BODY_LIMIT = 16 * 1024
 API_MUTATION_BODY_LIMIT = 64 * 1024
 ISSUE_ATTACHMENT_BODY_LIMIT = 2 * 1024 * 1024 + 64 * 1024
 LEGACY_JSON_ATTACHMENT_BODY_LIMIT = 3 * 1024 * 1024
+UNFILED_DRAFT_SYNC_BODY_LIMIT = 17 * 1024 * 1024
 MUTATION_METHODS = frozenset({"POST", "PUT", "PATCH"})
 
 
@@ -15,6 +16,8 @@ def request_body_limit(method: str, path: str) -> int | None:
     normalized_method = method.upper()
     if normalized_method == "POST" and path == "/api/v1/session":
         return SESSION_BODY_LIMIT
+    if normalized_method == "PUT" and path == "/api/v1/unfiled-drafts":
+        return UNFILED_DRAFT_SYNC_BODY_LIMIT
     if (
         normalized_method == "POST"
         and (

src/saved_search_store.py

@@ -0,0 +1,131 @@
+"""Durable, account-scoped saved Search views."""
+
+import json
+import re
+import sqlite3
+from pathlib import Path
+
+from src.private_state import connect_private_sqlite
+
+
+_REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
+_VIEW_ID = re.compile(r"^[A-Za-z0-9_-]{1,64}$")
+
+
+class SavedSearchConflict(ValueError):
+    """Raised when a client attempts to replace a stale collection."""
+
+    def __init__(self, snapshot: dict):
+        super().__init__("saved searches changed on another device")
+        self.snapshot = snapshot
+
+
+class SavedSearchStore:
+    def __init__(self, path: str | Path, *, limit: int = 20, timeout: float = 1.0):
+        self.path = Path(path)
+        self.limit = limit
+        self.timeout = timeout
+        self._initialize()
+
+    def _initialize(self) -> None:
+        with self._connect() as connection:
+            connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute(
+                """
+                CREATE TABLE IF NOT EXISTS saved_searches (
+                    login TEXT PRIMARY KEY,
+                    revision INTEGER NOT NULL,
+                    views TEXT NOT NULL
+                )
+                """
+            )
+
+    def _connect(self) -> sqlite3.Connection:
+        return connect_private_sqlite(self.path, timeout=self.timeout)
+
+    @staticmethod
+    def _login(login: str) -> str:
+        normalized = login.strip().lower()
+        if not normalized:
+            raise ValueError("login is required")
+        return normalized
+
+    @staticmethod
+    def _snapshot(row) -> dict:
+        return {"revision": 0, "views": []} if row is None else {
+            "revision": int(row[0]), "views": json.loads(row[1])
+        }
+
+    def get(self, login: str) -> dict:
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT revision, views FROM saved_searches WHERE login = ?",
+                (self._login(login),),
+            ).fetchone()
+        return self._snapshot(row)
+
+    def _normalize(self, views: list[dict]) -> list[dict]:
+        if not isinstance(views, list):
+            raise ValueError("views must be a list")
+        if len(views) > self.limit:
+            raise ValueError(f"saved searches are limited to {self.limit}")
+        normalized = []
+        seen = set()
+        for raw in views:
+            if not isinstance(raw, dict):
+                raise ValueError("saved search must be an object")
+            view_id = raw.get("id")
+            if not isinstance(view_id, str) or not _VIEW_ID.fullmatch(view_id):
+                raise ValueError("id is invalid")
+            if view_id in seen:
+                raise ValueError("saved search ids must be unique")
+            name = raw.get("name")
+            if not isinstance(name, str) or not name.strip():
+                raise ValueError("name is required")
+            name = name.strip()
+            if len(name) > 60:
+                raise ValueError("name must be at most 60 characters")
+            query = raw.get("query")
+            if not isinstance(query, str) or not 2 <= len(query.strip()) <= 200:
+                raise ValueError("query must be between 2 and 200 characters")
+            kind = raw.get("kind", "all")
+            state = raw.get("state", "all")
+            if kind not in {"all", "issue", "pull"}:
+                raise ValueError("kind is invalid")
+            if state not in {"all", "open", "closed"}:
+                raise ValueError("state is invalid")
+            repository = raw.get("repository", "")
+            if not isinstance(repository, str) or (repository and not _REPOSITORY.fullmatch(repository)):
+                raise ValueError("repository is invalid")
+            seen.add(view_id)
+            normalized.append({
+                "id": view_id,
+                "name": name,
+                "query": query.strip(),
+                "kind": kind,
+                "state": state,
+                "repository": repository,
+            })
+        return normalized
+
+    def replace(self, login: str, expected_revision: int, views: list[dict]) -> dict:
+        login = self._login(login)
+        if not isinstance(expected_revision, int) or isinstance(expected_revision, bool) or expected_revision < 0:
+            raise ValueError("revision is invalid")
+        normalized = self._normalize(views)
+        serialized = json.dumps(normalized, separators=(",", ":"))
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, views FROM saved_searches WHERE login = ?", (login,)
+            ).fetchone()
+            current = self._snapshot(row)
+            if current["revision"] != expected_revision:
+                raise SavedSearchConflict(current)
+            revision = expected_revision + 1
+            connection.execute(
+                "INSERT INTO saved_searches(login, revision, views) VALUES (?, ?, ?) "
+                "ON CONFLICT(login) DO UPDATE SET revision=excluded.revision, views=excluded.views",
+                (login, revision, serialized),
+            )
+        return {"revision": revision, "views": normalized}

src/security_event_store.py

@@ -6,6 +6,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class SecurityEventStoreError(RuntimeError):
     """Raised when security activity cannot be persisted or read safely."""
@@ -53,8 +55,7 @@ class SecurityEventStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+            connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS security_events (

src/session_store.py

@@ -7,6 +7,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class SessionStoreError(RuntimeError):
     """Raised when session state cannot be read or changed safely."""
@@ -51,15 +53,14 @@ class SessionStore:
     def _connect(self, *, initialize: bool = False) -> sqlite3.Connection:
         try:
             if initialize:
-                self.path.parent.mkdir(parents=True, exist_ok=True)
-                connection = sqlite3.connect(
+                connection = connect_private_sqlite(
                     self.path, timeout=self.lock_timeout_seconds
                 )
             else:
-                connection = sqlite3.connect(
-                    f"{self.path.resolve().as_uri()}?mode=rw",
+                connection = connect_private_sqlite(
+                    self.path,
                     timeout=self.lock_timeout_seconds,
-                    uri=True,
+                    existing_only=True,
                 )
             if initialize:
                 connection.execute(

src/today_store.py

@@ -6,6 +6,8 @@ import time
 from datetime import date
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class TodayPlanFull(ValueError):
     """Raised when an add would exceed the bounded Today plan."""
@@ -33,8 +35,7 @@ class TodayStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        connection = sqlite3.connect(self.path, timeout=self.timeout)
+        connection = connect_private_sqlite(self.path, timeout=self.timeout)
         if connection.execute("PRAGMA user_version").fetchone()[0] >= 1:
             connection.close()
             return
@@ -110,7 +111,7 @@ class TodayStore:
         connection.close()
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     def _record_operation(self, connection: sqlite3.Connection, login: str, operation_id: str) -> None:
         now = self.clock()

src/unfiled_draft_store.py

@@ -0,0 +1,251 @@
+"""Durable, account-scoped unfiled issue drafts and ordered evidence."""
+
+import base64
+import binascii
+import json
+import re
+import sqlite3
+from datetime import datetime
+from pathlib import Path
+
+from src.private_state import connect_private_sqlite
+
+
+_DRAFT_ID = re.compile(r"^[A-Za-z0-9_-]{1,100}$")
+_REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
+_CONTENT_TYPES = {"image/png", "image/jpeg", "image/webp"}
+
+
+class UnfiledDraftConflict(ValueError):
+    """Raised when a client attempts to replace a stale draft collection."""
+
+    def __init__(self, snapshot: dict):
+        super().__init__("unfiled drafts changed on another device")
+        self.snapshot = snapshot
+
+
+class UnfiledDraftStore:
+    def __init__(
+        self,
+        path: str | Path,
+        *,
+        limit: int = 20,
+        max_total_bytes: int = 12 * 1024 * 1024,
+        timeout: float = 1.0,
+    ):
+        self.path = Path(path)
+        self.limit = limit
+        self.max_total_bytes = max_total_bytes
+        self.timeout = timeout
+        self._initialize()
+
+    def _initialize(self) -> None:
+        with self._connect() as connection:
+            connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute(
+                """CREATE TABLE IF NOT EXISTS unfiled_drafts (
+                    login TEXT PRIMARY KEY,
+                    revision INTEGER NOT NULL,
+                    drafts TEXT NOT NULL
+                )"""
+            )
+
+    def _connect(self) -> sqlite3.Connection:
+        return connect_private_sqlite(self.path, timeout=self.timeout)
+
+    @staticmethod
+    def _login(login: str) -> str:
+        normalized = login.strip().lower()
+        if not normalized:
+            raise ValueError("login is required")
+        return normalized
+
+    @staticmethod
+    def _snapshot(row) -> dict:
+        return {"revision": 0, "drafts": []} if row is None else {
+            "revision": int(row[0]), "drafts": json.loads(row[1])
+        }
+
+    def get(self, login: str) -> dict:
+        with self._connect() as connection:
+            row = connection.execute(
+                "SELECT revision, drafts FROM unfiled_drafts WHERE login = ?",
+                (self._login(login),),
+            ).fetchone()
+        return self._snapshot(row)
+
+    @staticmethod
+    def _filing_plan(raw: object) -> dict | None:
+        if raw is None:
+            return None
+        if not isinstance(raw, dict):
+            raise ValueError("filing plan is invalid")
+        repository = raw.get("repository")
+        if not isinstance(repository, str) or not _REPOSITORY.fullmatch(repository):
+            raise ValueError("filing repository is invalid")
+        label_ids = raw.get("label_ids", [])
+        if not isinstance(label_ids, list) or len(label_ids) > 20:
+            raise ValueError("filing labels are invalid")
+        if any(not isinstance(item, int) or isinstance(item, bool) or item < 1 for item in label_ids):
+            raise ValueError("filing labels are invalid")
+        if len(set(label_ids)) != len(label_ids):
+            raise ValueError("filing labels are invalid")
+        plan = {"repository": repository, "label_ids": label_ids}
+        for key in ("milestone_id", "estimate_minutes"):
+            value = raw.get(key)
+            if value is None:
+                continue
+            upper = 1440 if key == "estimate_minutes" else None
+            lower = 5 if key == "estimate_minutes" else 1
+            if (
+                not isinstance(value, int)
+                or isinstance(value, bool)
+                or value < lower
+                or (upper is not None and value > upper)
+            ):
+                raise ValueError(f"filing {key.replace('_', ' ')} is invalid")
+            plan[key] = value
+        due_date = raw.get("due_date")
+        if due_date is not None:
+            try:
+                datetime.strptime(due_date, "%Y-%m-%d")
+            except (TypeError, ValueError) as error:
+                raise ValueError("filing due date is invalid") from error
+            plan["due_date"] = due_date
+        for key, limit in {
+            "template_name": 80,
+            "template_id": 80,
+            "captured_body": 10_000,
+            "assignee_name": 255,
+        }.items():
+            value = raw.get(key)
+            if value is not None:
+                if not isinstance(value, str) or not value.strip() or len(value) > limit:
+                    raise ValueError(f"filing {key.replace('_', ' ')} is invalid")
+                plan[key] = value
+        unassigned = raw.get("unassigned", False)
+        if not isinstance(unassigned, bool):
+            raise ValueError("filing owner intent is invalid")
+        assignee = raw.get("assignee")
+        if unassigned and assignee is not None:
+            raise ValueError("filing owner intent is invalid")
+        if unassigned:
+            plan["unassigned"] = True
+        elif assignee is not None:
+            if not isinstance(assignee, str) or not re.fullmatch(r"[A-Za-z0-9_.-]+", assignee):
+                raise ValueError("filing assignee is invalid")
+            plan["assignee"] = assignee
+        completion_intent = raw.get("completion_intent")
+        if completion_intent is not None:
+            if completion_intent not in {"create", "create-and-start"}:
+                raise ValueError("filing completion intent is invalid")
+            plan["completion_intent"] = completion_intent
+        return plan
+
+    def _normalize(self, drafts: list[dict]) -> list[dict]:
+        if not isinstance(drafts, list):
+            raise ValueError("drafts must be a list")
+        if len(drafts) > self.limit:
+            raise ValueError(f"unfiled drafts are limited to {self.limit}")
+        normalized = []
+        seen = set()
+        decoded_total = 0
+        for raw in drafts:
+            if not isinstance(raw, dict):
+                raise ValueError("draft must be an object")
+            draft_id = raw.get("id")
+            if not isinstance(draft_id, str) or not _DRAFT_ID.fullmatch(draft_id):
+                raise ValueError("draft id is invalid")
+            if draft_id in seen:
+                raise ValueError("draft ids must be unique")
+            title = raw.get("title")
+            body = raw.get("body", "")
+            saved_at = raw.get("saved_at")
+            if not isinstance(title, str) or len(title.strip()) > 255:
+                raise ValueError("title is invalid")
+            if not isinstance(body, str) or len(body) > 10_000:
+                raise ValueError("body is invalid")
+            if not isinstance(saved_at, int) or isinstance(saved_at, bool) or saved_at < 0:
+                raise ValueError("saved_at is invalid")
+            filing_plan = self._filing_plan(raw.get("filing_plan"))
+            blockers = raw.get("blockers", [])
+            if not isinstance(blockers, list) or len(blockers) > 5:
+                raise ValueError("blockers are invalid")
+            clean_blockers = []
+            for blocker in blockers:
+                repository = blocker.get("repository") if isinstance(blocker, dict) else None
+                number = blocker.get("number") if isinstance(blocker, dict) else None
+                blocker_title = blocker.get("title", "") if isinstance(blocker, dict) else ""
+                if not isinstance(repository, str) or not _REPOSITORY.fullmatch(repository):
+                    raise ValueError("blocker repository is invalid")
+                if not isinstance(number, int) or isinstance(number, bool) or number < 1:
+                    raise ValueError("blocker number is invalid")
+                if not isinstance(blocker_title, str) or len(blocker_title) > 255:
+                    raise ValueError("blocker title is invalid")
+                clean_blockers.append({"repository": repository, "number": number, "title": blocker_title})
+            evidence = raw.get("evidence", [])
+            if not isinstance(evidence, list) or len(evidence) > 5:
+                raise ValueError("evidence is invalid")
+            clean_evidence = []
+            for item in evidence:
+                if not isinstance(item, dict):
+                    raise ValueError("evidence is invalid")
+                filename = item.get("filename")
+                content_type = item.get("content_type")
+                note = item.get("note", "")
+                data = item.get("data")
+                if not isinstance(filename, str) or not filename or len(filename) > 255:
+                    raise ValueError("evidence filename is invalid")
+                if content_type not in _CONTENT_TYPES:
+                    raise ValueError("evidence content type is invalid")
+                if not isinstance(note, str) or len(note) > 240:
+                    raise ValueError("evidence note is invalid")
+                if not isinstance(data, str):
+                    raise ValueError("evidence data is invalid")
+                try:
+                    decoded_total += len(base64.b64decode(data, validate=True))
+                except (binascii.Error, ValueError) as error:
+                    raise ValueError("evidence data must be valid base64") from error
+                if decoded_total > self.max_total_bytes:
+                    raise ValueError("synchronized evidence is too large")
+                clean_evidence.append({
+                    "filename": filename,
+                    "content_type": content_type,
+                    **({"note": note} if note else {}),
+                    "data": data,
+                })
+            if not title.strip() and not clean_evidence:
+                raise ValueError("title or evidence is required")
+            seen.add(draft_id)
+            normalized.append({
+                "id": draft_id,
+                "title": title.strip(),
+                "body": body,
+                "saved_at": saved_at,
+                **({"filing_plan": filing_plan} if filing_plan else {}),
+                **({"blockers": clean_blockers} if clean_blockers else {}),
+                **({"evidence": clean_evidence} if clean_evidence else {}),
+            })
+        return normalized
+
+    def replace(self, login: str, expected_revision: int, drafts: list[dict]) -> dict:
+        login = self._login(login)
+        if not isinstance(expected_revision, int) or isinstance(expected_revision, bool) or expected_revision < 0:
+            raise ValueError("revision is invalid")
+        normalized = self._normalize(drafts)
+        serialized = json.dumps(normalized, separators=(",", ":"))
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT revision, drafts FROM unfiled_drafts WHERE login = ?", (login,)
+            ).fetchone()
+            current = self._snapshot(row)
+            if current["revision"] != expected_revision:
+                raise UnfiledDraftConflict(current)
+            revision = expected_revision + 1
+            connection.execute(
+                "INSERT INTO unfiled_drafts(login, revision, drafts) VALUES (?, ?, ?) "
+                "ON CONFLICT(login) DO UPDATE SET revision=excluded.revision, drafts=excluded.drafts",
+                (login, revision, serialized),
+            )
+        return {"revision": revision, "drafts": normalized}

src/views.py

@@ -17,7 +17,7 @@ LOGIN_HTML = """<!doctype html>
 <style>body{margin:0;background:#07111f;color:#eef6ff;font:16px system-ui;display:grid;min-height:100vh;place-items:center}main{box-sizing:border-box;width:min(90vw,24rem);padding:2rem;border:1px solid #29415d;border-radius:1rem;background:#0d1b2b}label,input,button{display:block;width:100%;box-sizing:border-box}input,button{min-height:48px;margin-top:.6rem;border-radius:.6rem;border:1px solid #49647f;padding:.75rem}button{margin-top:1rem;background:#55d6be;color:#06121b;font-weight:700}p{color:#a9bed3}</style></head>
 <body><main><h1>Operator sign in</h1><p>Use an enrolled passkey, or enter the dashboard access token for bootstrap and recovery. The token is exchanged for a private, short-lived session and is never stored on this device.</p>
 <form id="sign-in"><label>Device name<input name="device_label" type="text" autocomplete="name" maxlength="64" value="This device" required></label><button id="passkey-sign-in" type="button">Sign in with a passkey</button><p>Recovery</p><label>Access token<input name="access_token" type="password" autocomplete="current-password" required></label><button id="submit-sign-in">Sign in with access token</button><p id="status" role="status" aria-live="polite"></p></form></main>
-<script src="static/private-device-data.js"></script><script src="static/login.js"></script></body></html>"""
+<script src="static/private-data-registry.js"></script><script src="static/private-device-data.js"></script><script src="static/login.js"></script></body></html>"""
 
 
 class RevalidatingHTMLResponse(HTMLResponse):

tests/e2e/fake_gitea.py

@@ -0,0 +1,194 @@
+"""Deterministic Gitea double used by the release-artifact browser journey."""
+
+from __future__ import annotations
+
+import json
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from threading import Event
+from urllib.parse import parse_qs, urlsplit
+
+
+REPOSITORY = {
+    "id": 7,
+    "name": "mobile",
+    "full_name": "acme/mobile",
+    "description": "Mobile filing acceptance repository",
+    "html_url": "http://127.0.0.1/acme/mobile",
+    "owner": {"login": "acme"},
+}
+USER = {"id": 1, "login": "timmy", "full_name": "Timmy"}
+AVAILABLE_ISSUES = [
+    {
+        "id": 101,
+        "number": 41,
+        "title": "Ship mobile capture",
+        "body": "Complete the capture flow on a phone.",
+        "state": "open",
+        "html_url": "http://127.0.0.1/acme/mobile/issues/41",
+        "repository": REPOSITORY,
+        "user": USER,
+        "assignees": [],
+        "labels": [{"name": "P1"}],
+        "updated_at": "2026-08-15T12:00:00Z",
+    },
+    {
+        "id": 102,
+        "number": 42,
+        "title": "Polish desktop filters",
+        "body": "Keep the desktop filter controls clear.",
+        "state": "open",
+        "html_url": "http://127.0.0.1/acme/mobile/issues/42",
+        "repository": REPOSITORY,
+        "user": USER,
+        "assignees": [],
+        "labels": [],
+        "updated_at": "2026-08-15T11:00:00Z",
+    },
+]
+
+
+class FakeGiteaServer(ThreadingHTTPServer):
+    def __init__(self, address: tuple[str, int]):
+        super().__init__(address, FakeGiteaHandler)
+        self.created_issues: list[dict] = []
+        self.issue_creation_enabled = False
+        self.issue_creation_ready = Event()
+        self.assigned_issue_numbers = [issue["number"] for issue in AVAILABLE_ISSUES]
+        self.comments: list[tuple[int, str]] = []
+        self.requests: list[tuple[str, str]] = []
+
+
+class FakeGiteaHandler(BaseHTTPRequestHandler):
+    server: FakeGiteaServer
+
+    def log_message(self, _format: str, *_args: object) -> None:
+        return
+
+    def _json(self, status: int, payload: object, **headers: str) -> None:
+        body = json.dumps(payload).encode()
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json")
+        self.send_header("Content-Length", str(len(body)))
+        for name, value in headers.items():
+            self.send_header(name, value)
+        self.end_headers()
+        self.wfile.write(body)
+
+    def do_GET(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
+        parsed = urlsplit(self.path)
+        path = parsed.path
+        query = parse_qs(parsed.query)
+        self.server.requests.append(("GET", self.path))
+        if path == "/api/v1/user":
+            self._json(200, USER)
+        elif path == "/api/v1/user/repos":
+            self._json(200, [REPOSITORY], **{"X-Total-Count": "1"})
+        elif path in {"/api/v1/repos/acme/mobile", "/api/v1/repos/acme/mobile/"}:
+            self._json(200, REPOSITORY)
+        elif path == "/api/v1/repos/search":
+            self._json(200, {"data": [REPOSITORY], "ok": True})
+        elif path == "/api/v1/repos/issues/search":
+            is_assigned_scan = query.get("assigned") == ["true"] and query.get("type") == ["issues"]
+            is_available_scan = not any(
+                name in query for name in ("assigned", "created", "review_requested", "q")
+            ) and query.get("type") == ["issues"]
+            assigned = [
+                {**issue, "assignees": [USER]}
+                for issue in AVAILABLE_ISSUES
+                if issue["number"] in self.server.assigned_issue_numbers
+            ]
+            available = [
+                issue for issue in AVAILABLE_ISSUES
+                if issue["number"] not in self.server.assigned_issue_numbers
+            ]
+            issues = assigned if is_assigned_scan else available if is_available_scan else []
+            self._json(200, issues, **{"X-Total-Count": str(len(issues))})
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/comments"):
+            self._json(200, [], **{"X-Total-Count": "0"})
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/dependencies"):
+            self._json(200, [])
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/"):
+            try:
+                number = int(path.rsplit("/", 1)[-1])
+            except ValueError:
+                number = 0
+            issue = next((item for item in AVAILABLE_ISSUES if item["number"] == number), None)
+            if issue and number in self.server.assigned_issue_numbers:
+                issue = {**issue, "assignees": [USER]}
+            self._json(200, issue) if issue else self._json(404, {"message": "not found"})
+        elif path.startswith("/api/v1/"):
+            self._json(200, [], **{"X-Total-Count": "0"})
+        else:
+            self._json(404, {"message": "not found"})
+
+    def do_POST(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
+        path = urlsplit(self.path).path
+        self.server.requests.append(("POST", self.path))
+        length = int(self.headers.get("Content-Length", "0"))
+        payload = json.loads(self.rfile.read(length) or b"{}")
+        if path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/comments"):
+            try:
+                number = int(path.split("/")[-2])
+            except ValueError:
+                self._json(404, {"message": "not found"})
+                return
+            body = str(payload.get("body", ""))
+            self.server.comments.append((number, body))
+            self._json(
+                201,
+                {
+                    "id": len(self.server.comments),
+                    "body": body,
+                    "user": USER,
+                    "created_at": "2026-08-16T20:00:00Z",
+                    "updated_at": "2026-08-16T20:00:00Z",
+                    "html_url": f"http://127.0.0.1/acme/mobile/issues/{number}#issuecomment-1",
+                },
+            )
+            return
+        if path != "/api/v1/repos/acme/mobile/issues":
+            self._json(404, {"message": "not found"})
+            return
+        if not self.server.issue_creation_enabled:
+            self.server.issue_creation_ready.wait(timeout=45)
+        if not self.server.issue_creation_enabled:
+            self._json(503, {"message": "release journey is still offline"})
+            return
+        self.server.created_issues.append(payload)
+        assignee = payload.get("assignee")
+        self._json(
+            201,
+            {
+                "id": 101,
+                "number": 41,
+                "title": payload.get("title", ""),
+                "body": payload.get("body", ""),
+                "state": "open",
+                "html_url": "http://127.0.0.1/acme/mobile/issues/41",
+                "assignees": [{"login": assignee}] if assignee else [],
+                "labels": [],
+                "milestone": None,
+                "due_date": payload.get("due_date"),
+                "updated_at": "2026-08-15T12:00:00Z",
+            },
+        )
+
+    def do_PATCH(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
+        path = urlsplit(self.path).path
+        length = int(self.headers.get("Content-Length", "0"))
+        payload = json.loads(self.rfile.read(length) or b"{}")
+        if not path.startswith("/api/v1/repos/acme/mobile/issues/"):
+            self._json(404, {"message": "not found"})
+            return
+        try:
+            number = int(path.rsplit("/", 1)[-1])
+        except ValueError:
+            self._json(404, {"message": "not found"})
+            return
+        issue = next((item for item in AVAILABLE_ISSUES if item["number"] == number), None)
+        if issue is None:
+            self._json(404, {"message": "not found"})
+            return
+        assignee = payload.get("assignee")
+        self.server.assigned_issue_numbers.append(number)
+        self._json(200, {**issue, "assignees": [{"login": assignee}] if assignee else []})

tests/e2e/test_mobile_find_work_release.py

@@ -0,0 +1,114 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Find Work journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_guides_mobile_find_work_through_assignment(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake.assigned_issue_numbers = []
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": 390, "height": 844},
+                ignore_https_errors=True,
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Find Work release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.locator('[data-mobile-task="find"]').click()
+            expect(page.locator("#find-work-sheet")).to_have_class("find-work-sheet open")
+            expect(page.locator(".find-work-card")).to_have_count(2)
+            expect(page.locator("#find-work-status")).to_contain_text("2 of 2 available")
+
+            navigation = page.locator(".mobile-find-work-nav")
+            expect(navigation).to_be_visible()
+            for control in navigation.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator("#select-find-work").click()
+            choices = page.locator("[data-find-work-select]")
+            expect(choices).to_have_count(2)
+            choices.nth(0).check()
+            choices.nth(1).check()
+            page.locator("#claim-selected-work").click()
+
+            expect(navigation.locator('[data-find-work-stage="review"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            expect(page.locator("#find-work-review-list .find-work-review-item")).to_have_count(2)
+            expect(page.locator("#find-work-review-summary")).to_contain_text("2 selected")
+            page.locator("[data-find-work-review-remove]").nth(1).click()
+            expect(page.locator("#find-work-review-list .find-work-review-item")).to_have_count(1)
+            expect(page.locator("#find-work-review-summary")).to_contain_text("1 selected")
+
+            page.locator("#continue-find-work-fit").click()
+            expect(navigation.locator('[data-find-work-stage="fit"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            expect(page.locator("#find-work-estimate-list")).to_contain_text("Ship mobile capture")
+            for control in page.locator("#find-work-fit-stage button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator("#confirm-find-work-estimates").click()
+            expect(navigation.locator('[data-find-work-stage="discover"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            page.wait_for_timeout(1_000)
+            status = page.locator("#find-work-status").inner_text()
+            assert "1 queued" in status, {
+                "status": status,
+                "browser_errors": browser_errors,
+                "failed_responses": failed_responses,
+                "assigned": fake.assigned_issue_numbers,
+                "today": page.evaluate("localStorage.getItem('stackchain.today-work.v1.timmy')"),
+            }
+
+            assert fake.assigned_issue_numbers == [41]
+            today = page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-work.v1.timmy') || '[]')")
+            assert today == ["issue:acme/mobile:41:"]
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_home_bootstrap_release.py

@@ -0,0 +1,252 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile Home bootstrap runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+    workspace_requests: list[str] = []
+    live_requests: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on(
+                "console",
+                lambda message: browser_errors.append(message.text)
+                if message.type == "error"
+                else None,
+            )
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+            page.on(
+                "request",
+                lambda request: workspace_requests.append(request.url)
+                if "feature-today-timer-" in request.url
+                else None,
+            )
+            page.on(
+                "request",
+                lambda request: live_requests.append(request.url)
+                if "/api/v1/live" in request.url
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Home bootstrap release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            expect(page.locator("#my-work-status")).to_contain_text("2")
+            initial_live_requests = len(live_requests)
+            page.evaluate(
+                """
+                () => {
+                  window.scrollTo(0, 0);
+                  const surface = document.querySelector('#my-work');
+                  surface.setPointerCapture = () => {};
+                  surface.releasePointerCapture = () => {};
+                  const pointer = (type, y) => surface.dispatchEvent(new PointerEvent(type, {
+                    bubbles:true, pointerId:41, pointerType:'touch', clientX:100, clientY:y,
+                  }));
+                  pointer('pointerdown', 10);
+                  pointer('pointermove', 90);
+                }
+                """
+            )
+            expect(page.locator("#mobile-pull-refresh")).to_have_text("Release to refresh")
+            page.evaluate(
+                "document.querySelector('#my-work').dispatchEvent(new PointerEvent('pointerup', "
+                "{bubbles:true, pointerId:41, pointerType:'touch', clientX:100, clientY:90}))"
+            )
+            expect(page.locator("#mobile-pull-refresh")).to_have_text("My Work is up to date")
+            assert len(live_requests) == initial_live_requests + 1
+            dock = page.locator("#mobile-task-dock")
+            expect(dock).to_be_visible()
+            expect(dock.locator("button")).to_have_count(5)
+            for control in dock.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator('[data-mobile-task="queues"]').click()
+            delivery_queue = page.locator('[data-mobile-queue="delivery"]')
+            expect(delivery_queue).to_be_visible()
+            expect(delivery_queue).to_contain_text("Delivery")
+            delivery_bounds = delivery_queue.bounding_box()
+            assert delivery_bounds and delivery_bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#close-mobile-queues").click()
+
+            page.locator("#app-menu-toggle").click()
+            page.locator("#open-insights").click()
+            expect(page.locator("#insights-sheet")).to_be_visible()
+            expect(page.locator("#insights-heading")).to_have_text("Insights")
+            page.locator("#close-insights").click()
+            expect(page.locator("#insights-sheet")).to_be_hidden()
+            expect(page.locator("#my-work")).to_be_visible()
+            expect(dock).to_be_visible()
+
+            page.locator("#app-menu-toggle").click()
+            page.locator("#open-device-setup").click()
+            expect(page.locator("#device-setup-sheet")).to_be_visible()
+            expect(page.locator("#device-storage-heading")).to_have_text("Private device storage")
+            expect(page.locator("#device-storage-detail")).to_contain_text("private work records")
+            for selector in ("#clear-device-caches", "#clear-private-device-data"):
+                bounds = page.locator(selector).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#close-device-setup").click()
+            expect(page.locator("#device-setup-sheet")).to_be_hidden()
+
+            page.locator("#active-devices").click()
+            expect(page.locator("#active-devices-sheet")).to_be_visible()
+            expect(page.locator("#security-activity-section")).to_be_visible()
+            security_nav = page.locator(".security-section-nav")
+            expect(security_nav).to_be_visible()
+            for control in security_nav.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            page.locator("#security-section-devices").click()
+            expect(page.locator("#security-section-devices")).to_have_attribute("aria-current", "page")
+            page.go_back()
+            expect(page.locator("#security-section-activity")).to_have_attribute("aria-current", "page")
+            page.go_back()
+            expect(page.locator("#active-devices-sheet")).to_be_hidden()
+            expect(page.locator("#active-devices")).to_be_focused()
+
+            assert len(workspace_requests) == 1, workspace_requests
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)
+
+
+def test_release_artifact_keeps_mobile_delivery_recovery_single_flight(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": 390, "height": 844})
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Delivery recovery release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.evaluate(
+                """
+                () => {
+                  window.__deliveryAttempts = 0;
+                  window.__deliverySettled = new Promise(resolve => { window.__finishDelivery = resolve; });
+                  window.__releaseRecovery = createMobileDeliveryRecovery({
+                    getItems: () => [{outbox_id:'release-retry', delivery_state:'waiting', title:'Post release note'}],
+                    activate: async () => {
+                      window.__deliveryAttempts += 1;
+                      await window.__deliverySettled;
+                    },
+                  });
+                  window.__releaseRecovery.open();
+                  window.__firstRecovery = window.__releaseRecovery.activate();
+                  window.__secondRecovery = window.__releaseRecovery.activate();
+                }
+                """
+            )
+            action = page.locator("#mobile-delivery-recovery-action")
+            expect(page.locator("#mobile-delivery-recovery")).to_be_visible()
+            expect(action).to_be_disabled()
+            expect(page.locator("#mobile-delivery-recovery-status")).to_have_text("Working…")
+            assert page.evaluate("window.__deliveryAttempts") == 1
+            bounds = action.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.evaluate("window.__finishDelivery()")
+            page.evaluate("Promise.all([window.__firstRecovery, window.__secondRecovery])")
+            expect(action).to_be_enabled()
+            assert page.evaluate("window.__deliveryAttempts") == 1
+
+            page.evaluate(
+                """
+                () => {
+                  const destination = document.createElement('button');
+                  destination.type = 'button';
+                  destination.className = 'draft-resume';
+                  destination.dataset.draftIndex = '0';
+                  destination.textContent = 'Open current review';
+                  window.__attentionAttempts = 0;
+                  window.__attentionSettled = new Promise(resolve => { window.__finishAttention = resolve; });
+                  destination.onclick = async () => {
+                    window.__attentionAttempts += 1;
+                    await window.__attentionSettled;
+                    return true;
+                  };
+                  document.querySelector('#my-work-list').append(destination);
+                  window.__attentionRecovery = createMobileDeliveryRecovery({
+                    getItems: () => [{outbox_id:'review-attention', status:'attention', title:'Review feedback'}],
+                    getIndex: () => 0,
+                  });
+                  window.__attentionRecovery.open();
+                  window.__firstAttention = window.__attentionRecovery.activate();
+                  window.__secondAttention = window.__attentionRecovery.activate();
+                }
+                """
+            )
+            expect(page.locator("#mobile-delivery-recovery")).to_be_hidden()
+            expect(page.locator("#my-work-list .draft-resume")).to_be_focused()
+            assert page.evaluate("window.__attentionAttempts") == 1
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.evaluate("window.__finishAttention()")
+            page.evaluate("Promise.all([window.__firstAttention, window.__secondAttention])")
+            assert page.evaluate("window.__attentionAttempts") == 1
+            assert browser_errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_offline_issue_release.py

@@ -0,0 +1,325 @@
+from __future__ import annotations
+
+import json
+import os
+import socket
+import ssl
+import subprocess
+import sys
+import tarfile
+import threading
+import time
+import urllib.request
+from contextlib import contextmanager
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("release artifact browser journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import Page, expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+
+
+ROOT = Path(__file__).resolve().parents[2]
+TITLE = "Offline artifact journey 863."
+BODY = "Captured on a phone, retained offline, delivered exactly once."
+ACCESS_TOKEN = "artifact-browser-access-token-863"
+
+
+def free_port() -> int:
+    with socket.socket() as sock:
+        sock.bind(("127.0.0.1", 0))
+        return int(sock.getsockname()[1])
+
+
+def wait_for_health(url: str, process: subprocess.Popen[str]) -> None:
+    deadline = time.monotonic() + 20
+    tls = ssl._create_unverified_context()
+    while time.monotonic() < deadline:
+        if process.poll() is not None:
+            stdout, stderr = process.communicate()
+            raise AssertionError(f"release server exited early\nstdout:\n{stdout}\nstderr:\n{stderr}")
+        try:
+            with urllib.request.urlopen(url, timeout=0.5, context=tls) as response:
+                if response.status == 200:
+                    return
+        except OSError:
+            time.sleep(0.05)
+    raise AssertionError("release server did not become healthy")
+
+
+@contextmanager
+def release_server(archive: Path, tmp_path: Path, gitea_url: str):
+    release_root = tmp_path / "release"
+    release_root.mkdir()
+    with tarfile.open(archive, "r:gz") as bundle:
+        bundle.extractall(release_root, filter="data")
+    assert (release_root / "release-manifest.json").is_file()
+    assert not (release_root / "tests").exists(), "journey must run the packaged artifact, not checkout code"
+
+    port = free_port()
+    state_dir = tmp_path / "state"
+    state_dir.mkdir()
+    key_file = tmp_path / "localhost.key"
+    certificate_file = tmp_path / "localhost.crt"
+    subprocess.run(
+        [
+            "openssl", "req", "-x509", "-newkey", "rsa:2048", "-nodes",
+            "-keyout", str(key_file), "-out", str(certificate_file), "-days", "1",
+            "-subj", "/CN=127.0.0.1", "-addext", "subjectAltName=IP:127.0.0.1",
+        ],
+        check=True,
+        stdout=subprocess.DEVNULL,
+        stderr=subprocess.DEVNULL,
+    )
+    origin = f"https://127.0.0.1:{port}"
+    env = {
+        **os.environ,
+        "PYTHONPATH": str(release_root),
+        "GITEA_URL": gitea_url,
+        "GITEA_TOKEN": "deterministic-e2e-token",
+        "STACKCHAIN_DASHBOARD_AUTH_MODE": "operator",
+        "STACKCHAIN_DASHBOARD_ACCESS_TOKEN": ACCESS_TOKEN,
+        "STACKCHAIN_DASHBOARD_SESSION_SECRET": "artifact-browser-independent-session-secret-863",
+        "STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN": origin,
+        "STACKCHAIN_STATE_DIR": str(tmp_path / "state"),
+    }
+    process = subprocess.Popen(
+        [
+            sys.executable, "-m", "uvicorn", "src.main:app",
+            "--host", "127.0.0.1", "--port", str(port),
+            "--ssl-keyfile", str(key_file), "--ssl-certfile", str(certificate_file),
+        ],
+        cwd=release_root,
+        env=env,
+        text=True,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+    )
+    try:
+        wait_for_health(origin + "/healthz", process)
+        yield origin
+    finally:
+        process.terminate()
+        try:
+            process.communicate(timeout=10)
+        except subprocess.TimeoutExpired:
+            process.kill()
+            process.communicate()
+
+
+def indexed_issue_records(page: Page) -> list[dict]:
+    return page.evaluate(
+        """async () => {
+          const db = await new Promise((resolve, reject) => {
+            const request = indexedDB.open('stackchain-background-outbox-v1', 1);
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+          });
+          return await new Promise((resolve, reject) => {
+            const request = db.transaction('issues', 'readonly').objectStore('issues').getAll();
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+          });
+        }"""
+    )
+
+
+def test_release_artifact_files_one_mobile_issue_exactly_once_after_offline_reload(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": 390, "height": 844},
+                service_workers="allow",
+                ignore_https_errors=True,
+            )
+            context.add_init_script("""
+              class DeterministicSpeechRecognition {
+                start() { window.__voiceRecognition = this; }
+                stop() { if (this.onend) this.onend(); }
+                abort() { if (this.onend) this.onend(); }
+              }
+              window.SpeechRecognition = DeterministicSpeechRecognition;
+            """)
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
+            page.on("response", lambda response: failed_responses.append(
+                f"{response.status} {response.url}"
+            ) if response.status >= 400 else None)
+            page.goto(origin + "/", wait_until="networkidle")
+            expect(page.locator("#sign-in")).to_be_visible()
+            page.locator('input[name="device_label"]').fill("Release journey phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            new_action = page.locator('[data-mobile-task="new"]')
+            expect(new_action).to_be_visible()
+            service_worker_ready = page.evaluate(
+                """() => Promise.race([
+                  navigator.serviceWorker.ready.then(() => true),
+                  new Promise(resolve => setTimeout(() => resolve(false), 10000)),
+                ])"""
+            )
+            assert service_worker_ready, (
+                "release artifact did not register its service worker; browser errors=" + repr(browser_errors)
+                + "; failed responses=" + repr(failed_responses)
+            )
+            if not page.evaluate("() => navigator.serviceWorker.controller !== null"):
+                page.reload(wait_until="networkidle")
+                new_action = page.locator('[data-mobile-task="new"]')
+            assert page.evaluate("() => navigator.serviceWorker.controller !== null")
+
+            new_action.click()
+            expect(page.locator("#create-issue-sheet")).to_have_class("create-issue-sheet open")
+            assert page.evaluate("document.activeElement?.id") != "create-issue-title"
+            create_navigation = page.locator(".mobile-create-issue-nav")
+            expect(create_navigation).to_be_visible()
+            create_navigation_buttons = create_navigation.locator("button")
+            assert create_navigation_buttons.count() == 3
+            for control in create_navigation_buttons.all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            expect(create_navigation.locator('[data-create-issue-section="describe"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).to_have_attribute(
+                "aria-disabled", "true"
+            )
+            create_navigation.locator('[data-create-issue-section="evidence"]').click()
+            expect(create_navigation.locator('[data-create-issue-section="evidence"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            for control in page.locator(".photo-evidence-actions .issue-attachment-trigger").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            expect(page.locator("#voice-issue-capture")).to_be_visible()
+            page.locator("#start-voice-issue-capture").click()
+            page.evaluate("""([title, body]) => {
+              const result = [{ transcript: title + ' ' + body }];
+              result.isFinal = true;
+              window.__voiceRecognition.onresult({ results: [result] });
+            }""", [TITLE, BODY])
+            expect(page.locator("#voice-issue-review")).to_be_visible()
+            expect(page.locator("#append-voice-issue-transcript")).to_have_text("Use transcript")
+            page.locator("#append-voice-issue-transcript").click()
+            expect(page.locator("#create-issue-title")).to_have_value(TITLE)
+            expect(page.locator("#create-issue-body")).to_have_value(BODY)
+            page.locator("#file-new-issue").click()
+            expect(page.locator("#create-issue-filing")).to_be_visible()
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).not_to_have_attribute(
+                "aria-disabled", "true"
+            )
+            page.locator("#create-issue-repository").select_option("acme/mobile")
+            expect(page.locator("#submit-new-issue")).to_be_enabled()
+
+            # Page offline emulation can leave service-worker requests connected.
+            # Abort the mutation at the browser boundary too, matching a real
+            # transport outage without poisoning server-side idempotency state.
+            context.route("**/api/v1/repos/acme/mobile/issues", lambda route: route.abort())
+            context.set_offline(True)
+            page.locator("#submit-new-issue").click()
+            expect(page.locator("#issue-filing-review")).to_be_visible()
+            page.locator("#confirm-issue-filing").click()
+            page.wait_for_timeout(1_000)
+            filing_statuses = page.locator(
+                "#my-work-action-status, #create-issue-status, #issue-filing-review-status"
+            ).all_inner_texts()
+            assert any(
+                marker in " ".join(filing_statuses).lower()
+                for marker in ("queued", "saved for", "background delivery")
+            ), (filing_statuses, browser_errors, failed_responses)
+
+            local_record = json.loads(page.evaluate("localStorage.getItem('stackchain.issue-outbox.v1')"))
+            assert [(item["title"], item["body"], item["repository"]) for item in local_record["items"]] == [
+                (TITLE, BODY, "acme/mobile")
+            ]
+            durable = indexed_issue_records(page)
+            assert [(item["title"], item["body"], item["repository"]) for item in durable] == [
+                (TITLE, BODY, "acme/mobile")
+            ]
+            operation_id = durable[0]["operationId"]
+            assert operation_id and operation_id == local_record["items"][0]["operationId"]
+            assert fake.created_issues == []
+
+            page.reload(wait_until="domcontentloaded")
+            expect(page.locator('[data-mobile-task="new"]')).to_be_visible()
+            durable_after_reload = indexed_issue_records(page)
+            assert [(item["title"], item["body"]) for item in durable_after_reload] == [(TITLE, BODY)]
+            assert durable_after_reload[0]["operationId"] == operation_id
+            assert fake.created_issues == []
+
+            browser_errors.clear()  # Chromium reports expected network errors while the context is offline.
+            failed_responses.clear()
+            fake.issue_creation_enabled = True
+            fake.issue_creation_ready.set()
+            context.unroute("**/api/v1/repos/acme/mobile/issues")
+            context.set_offline(False)
+            page.evaluate("window.dispatchEvent(new Event('online'))")
+            # Containerized Actions runners can take longer than a local browser to wake the
+            # service worker and complete its identity handshake after reconnect.
+            for _ in range(160):
+                if fake.created_issues:
+                    break
+                page.wait_for_timeout(250)
+            local_debug = page.evaluate("localStorage.getItem('stackchain.issue-outbox.v1')")
+            durable_debug = indexed_issue_records(page)
+            assert fake.created_issues == [
+                {"title": TITLE, "body": BODY, "assignee": "timmy"}
+            ], (
+                f"url={page.url} ready={page.evaluate('document.readyState')} "
+                f"status={page.locator('#my-work-action-status').inner_text()!r} "
+                f"errors={browser_errors[-5:]!r} responses={failed_responses[-10:]!r} "
+                f"local={local_debug!r} durable={durable_debug!r} "
+                f"requests={fake.requests[-20:]!r}"
+            )
+            # Deferred workspace startup can report its already-issued offline request
+            # after the pre-reconnect clear; retain every non-offline browser error.
+            browser_errors[:] = [
+                error for error in browser_errors if "ERR_INTERNET_DISCONNECTED" not in error
+            ]
+
+            for _ in range(40):
+                durable_completion = indexed_issue_records(page)
+                if durable_completion and all(item.get("status") == "sent" for item in durable_completion):
+                    break
+                page.wait_for_timeout(100)
+            assert durable_completion and all(item.get("status") == "sent" for item in durable_completion)
+            page.reload(wait_until="networkidle")
+            page.evaluate("window.dispatchEvent(new Event('online'))")
+            for _ in range(40):
+                completed_local = json.loads(page.evaluate("localStorage.getItem('stackchain.issue-outbox.v1')"))
+                if completed_local["items"] == []:
+                    break
+                page.wait_for_timeout(100)
+            assert completed_local["items"] == []
+            page.wait_for_timeout(500)
+            assert len(fake.created_issues) == 1
+            assert browser_errors == []
+            assert failed_responses == []
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            browser.close()
+    finally:
+        fake.issue_creation_ready.set()
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_search_preview_navigation.py

@@ -0,0 +1,73 @@
+from __future__ import annotations
+
+import os
+import re
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("rendered mobile Search Preview checks run only in the browser gate", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).resolve().parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_rendered_mobile_search_preview_navigation_preserves_reading_space_and_draft(width, height):
+    html = re.sub(r'<script src="static/[^"]+"></script>', "", (FRONTEND / "index.html").read_text())
+
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch()
+        page = browser.new_page(viewport={"width": width, "height": height})
+        page.set_content(html)
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.locator("#search-preview").evaluate("node => node.classList.add('open')")
+        page.locator("#search-preview-reply-workspace").evaluate("node => node.hidden = false")
+        page.locator(".search-preview-navigation").evaluate("node => node.hidden = false")
+        page.locator("#search-preview-overview").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-conversation").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-reply-workspace").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-actions").evaluate("node => node.style.minHeight = '300px'")
+        page.add_script_tag(path=FRONTEND / "mobile-search-preview-nav.js")
+
+        navigation = page.locator(".mobile-search-preview-nav")
+        expect(navigation).to_be_visible()
+        buttons = navigation.locator("button")
+        assert buttons.count() == 4
+        for button in buttons.all():
+            bounds = button.bounding_box()
+            assert bounds and bounds["height"] >= 44
+        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+        assert page.locator(".search-preview-panel").evaluate("node => node.scrollWidth <= node.clientWidth")
+
+        page.locator("#search-preview-reply").fill("Keep this reply while navigating")
+        navigation.locator('[data-search-preview-section="conversation"]').click()
+        expect(navigation.locator('[data-search-preview-section="conversation"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+        navigation.locator('[data-search-preview-section="reply"]').click()
+        expect(page.locator("#search-preview-reply")).to_be_focused()
+        assert page.locator("#search-preview-reply").input_value() == "Keep this reply while navigating"
+        navigation.locator('[data-search-preview-section="actions"]').click()
+        expect(navigation.locator('[data-search-preview-section="actions"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+
+        continuation = page.locator(".search-preview-navigation")
+        assert continuation.evaluate("node => getComputedStyle(node).position") == "sticky"
+        assert continuation.evaluate("node => getComputedStyle(node).bottom") == "0px"
+        assert page.locator("#search-preview-actions").evaluate("node => getComputedStyle(node).position") == "static"
+
+        page.locator("#next-search-result").click()
+        expect(navigation.locator('[data-search-preview-section="overview"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+        assert page.locator("#search-preview-reply").input_value() == "Keep this reply while navigating"
+
+        page.set_viewport_size({"width": 800, "height": 700})
+        expect(navigation).to_be_hidden()
+        browser.close()

tests/e2e/test_mobile_today_handoff_release.py

@@ -0,0 +1,101 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Plan Today handoff journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_plans_hands_off_and_opens_next_mobile_issue(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(viewport={"width": 390, "height": 844}, ignore_https_errors=True)
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Plan Today release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            expect(page.locator("#my-work-status")).to_contain_text("2")
+            page.locator('[data-mobile-task="work"]').click()
+            expect(page.locator("#plan-today-sheet")).to_be_visible()
+            expect(page.locator("#plan-today-candidates .plan-today-item")).to_have_count(2)
+
+            navigation = page.locator(".mobile-plan-today-nav")
+            expect(navigation).to_be_visible()
+            for control in navigation.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator("#plan-today-available").fill("90")
+            page.locator("#plan-today-available").press("Tab")
+            page.locator("#build-today-plan").click()
+            missing_estimates = page.locator("[data-plan-missing-estimate]")
+            expect(missing_estimates).to_have_count(2)
+            for _ in range(2):
+                missing_estimates.nth(0).fill("30")
+                missing_estimates.nth(0).press("Tab")
+            expect(page.locator("#plan-today-list .plan-today-item")).to_have_count(2)
+            estimates = page.locator("[data-plan-estimate]")
+            expect(estimates).to_have_count(2)
+            page.locator("#save-and-start-today").click()
+
+            try:
+                expect(page.locator("#plan-today-sheet")).to_be_hidden(timeout=5_000)
+            except AssertionError as error:
+                raise AssertionError(page.evaluate("({hidden:document.querySelector('#plan-today-sheet').hidden, state:history.state, bodyClass:document.body.className})")) from error
+            expect(page.locator("#issue-sheet")).to_have_class("issue-sheet open")
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
+            expect(page.locator("#send-issue-comment-next")).to_be_visible()
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+
+            page.locator('[data-issue-section="reply"]').click()
+            page.locator("#issue-comment").fill("Handoff complete; continuing with the next Today item.")
+            page.locator("#send-issue-comment-next").click()
+
+            expect(page.locator("#issue-sheet-title")).to_have_text("Polish desktop filters")
+            expect(page.locator("#issue-comment")).to_have_value("")
+            expect(page.locator("[data-mobile-today-hud]")).to_have_attribute("data-overlay-hidden", "true")
+            expect(page.locator("[data-mobile-today-hud]")).to_contain_text("Polish desktop filters")
+            assert fake.comments == [(41, "Handoff complete; continuing with the next Today item.")]
+            today = page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-work.v1.timmy') || '[]')")
+            assert today == ["issue:acme/mobile:42:"]
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_today_wrap_up_release.py

@@ -0,0 +1,99 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Today wrap-up journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_renders_and_applies_mobile_today_wrap_up(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on(
+                "console",
+                lambda message: browser_errors.append(message.text)
+                if message.type == "error"
+                else None,
+            )
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Today wrap-up release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.evaluate(
+                """
+                () => {
+                  const items=[
+                    {kind:'issue',repository:'acme/mobile',number:41,title:'Ship mobile capture',key:'acme/mobile#41'},
+                    {kind:'issue',repository:'acme/mobile',number:42,title:'Polish desktop filters',key:'acme/mobile#42'},
+                  ];
+                  const identity=item => `${item.kind}:${item.repository}:${item.number}:`;
+                  const today=items.map(identity); const later={}; const operations=[];
+                  const todayWork={identity,read:()=>[...today],contains:item=>today.includes(identity(item)),remove:item=>{
+                    const index=today.indexOf(identity(item)); if(index<0)return false; today.splice(index,1); return true;
+                  }};
+                  const laterWork={presetUntil:()=>new Date('2026-08-17T09:00:00Z'),defer:(item,wake)=>{
+                    later[identity(item)]=wake.toISOString(); return 'deferred';
+                  }};
+                  const todaySync={enqueue:(action,id)=>{operations.push([action,id]);return true;},flush:()=>Promise.resolve(true)};
+                  const controller=createTodayWrapUp({todayWork,laterWork,todaySync});
+                  const view=createTodayWrapUpView({controller,qs:selector=>document.querySelector(selector),escapeHtml:value=>String(value)});
+                  window.__wrapTest={view,today,later,operations};
+                  view.open(items,{});
+                }
+                """
+            )
+
+            sheet = page.locator("#today-wrap-up-sheet")
+            expect(sheet).to_be_visible()
+            expect(page.locator(".today-wrap-up-item")).to_have_count(2)
+            for control in sheet.locator("button, label").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator('[data-wrap-up-identity="issue:acme/mobile:41:"]').check()
+            page.evaluate("window.__wrapTest.view.finish(document.querySelector('#finish-today-wrap-up'))")
+            expect(sheet).to_be_hidden()
+            result = page.evaluate(
+                "({today:window.__wrapTest.today,later:window.__wrapTest.later,operations:window.__wrapTest.operations})"
+            )
+            assert result == {
+                "today": ["issue:acme/mobile:42:"],
+                "later": {"issue:acme/mobile:41:": "2026-08-17T09:00:00.000Z"},
+                "operations": [["remove", "issue:acme/mobile:41:"]],
+            }
+            assert browser_errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)