Merge pull request 'Make Security Center a Back-safe mobile investigation flow' (#1021) from timmy/1020-mobile-security-center-flow into main

Closes #1004

.gitea/workflows/ci.yml

@@ -15,6 +15,8 @@ jobs:
       - uses: actions/setup-python@v5
         with: { python-version: "3.11" }
       - run: pip install -r requirements.txt
+      - run: pip install -r requirements-audit.txt
+      - run: python3 -m pip_audit -r requirements.txt --strict
       - run: python3 -m pytest tests/ -q
 
   build-release:
@@ -54,8 +56,8 @@ jobs:
         run: |
           pip install -r requirements-e2e.txt
           python3 -m playwright install --with-deps chromium
-      - name: Exercise mobile offline filing from the release artifact
-        run: python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py -q
+      - name: Exercise packaged mobile work journeys
+        run: python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py tests/e2e/test_mobile_search_preview_navigation.py tests/e2e/test_mobile_find_work_release.py tests/e2e/test_mobile_home_bootstrap_release.py tests/e2e/test_mobile_today_handoff_release.py tests/e2e/test_mobile_today_wrap_up_release.py tests/e2e/test_mobile_wrap_up_handoff_release.py -q
 
   release-candidate:
     runs-on: ubuntu-latest

README.md

@@ -19,12 +19,8 @@ threads, create and self-assign issues, discover, claim, and release issue assig
 list repository labels and open milestones, set or clear due dates on assigned issues, create issue comments, close assigned issues,
 inspect/comment on assigned pull
 requests, merge assigned pull requests, and submit pull-request reviews.
-Assigned-issue and assigned-pull-request comments can include one PNG, JPEG, or WebP screenshot; each mobile composer automatically optimizes oversized screenshots on-device to fit the 2 MB upload boundary while leaving already-valid files unchanged.
-For online delivery, the screenshot uploads before the comment is posted—to the exact assigned issue or pull request—and produces one Markdown comment; validation or upload
-failures keep both the typed comment and removable preview available for retry. Offline screenshot comments
-admit their text and image bytes to IndexedDB before confirmation, keep only bounded metadata in
-localStorage, and use checkpointed upload/comment identities so reconnect retries cannot duplicate
-either stage. The mobile **New issue** capture-first stage accepts an ordered evidence bundle of up to
+Assigned-issue, assigned-pull-request, and unread-update conversation composers accept an ordered bundle of up to five PNG, JPEG, or WebP photos. Repeated camera captures append to the bundle, the gallery picker accepts multiple images, and each composer automatically optimizes oversized screenshots on-device to fit the 2 MB upload boundary. Before sending, the selected conversation photo can use the same touch editor as New issue evidence to crop, privacy-redact, highlight, or add an arrow; Apply replaces only that flattened derivative while preserving its caption and bundle position, and Cancel leaves the original unchanged.
+For online delivery, every photo uploads before the comment is posted to the exact conversation target, producing one ordered Markdown comment or reply; validation or upload failures keep the typed text and removable preview available for retry. Offline photo conversations admit every image Blob to IndexedDB before confirmation, keep only bounded metadata in localStorage, and checkpoint each upload separately so reconnect resumes at the first unconfirmed photo without duplicating an upload, comment, reply, or reply-and-read transition. The mobile **New issue** capture-first stage accepts an ordered evidence bundle of up to
 five PNG, JPEG, or WebP screenshots before a repository is chosen, optimizing each image independently
 to the 2 MB boundary. **Save to Drafts** durably writes every optimized Blob to IndexedDB before
 confirmation, keeps only account-bound attachment metadata in localStorage, and restores the ordered
@@ -79,12 +75,37 @@ Today or interrupting active work. Cancel and browser Back preserve the Search p
 confirmation claims only when needed, syncs the Later plan across devices, and returns to the preserved
 query, filters, results, and scroll position. If assignment succeeds but Later storage fails, the issue
 remains recoverable in My Work and the dashboard reports the partial outcome instead of claiming success.
+Commentable mobile Search previews support camera capture and gallery selection for up to five ordered
+photos, including captions, crop/annotation/redaction review, and metadata-stripping re-encoding. Operators
+can queue photo-only, text-only, or mixed replies without leaving their Search pass, including while offline.
+Durable admission account-binds the exact issue/pull kind and stores image bytes in IndexedDB before the UI
+clears or advances. Reconnect revalidates the visible Search target through the narrower preview attachment
+and comment routes instead of assigned-work routes. Existing per-photo upload operation IDs and confirmed
+Markdown checkpoints survive handoff, so retry resumes from the first unfinished photo and the final comment
+posts once. **Send & next** advances only after durable admission; a storage failure keeps the current result,
+text, evidence, and Search position unchanged.
 Named mobile Search views preserve the query, type, status, and optional repository scope. They are
 bounded to 20 per confirmed account and synchronize through a revisioned SQLite collection, so another
 device can reopen the exact Search with one tap while stale writes surface a conflict instead of silently
 overwriting newer views. Rename and delete affect only the saved view, never Gitea work; an unavailable
 sync service leaves ad-hoc Search usable. Set `STACKCHAIN_SAVED_SEARCH_DB` to override the default
 `.stackchain-state/saved-searches.sqlite3` path.
+Completed delegated issues remain in the mobile **Filed** queue until their latest outcome is acknowledged.
+The mobile queue sheet begins with **Prepare Today**, a live briefing that totals Agenda, Attention, Updates, and
+Filed work and opens the highest-priority non-empty review queue. Starting it saves a confirmed-account, local-day
+checkpoint: finishing Agenda, Updates, or the final Filed review returns to a focused handoff using fresh queue
+counts, while reopening the queue sheet resumes the next live phase. **Finish for now** removes only that local
+checkpoint. Once urgent review is clear the pass continues the existing Today plan, or opens Find Work when Today
+is empty; the briefing and checkpoint never change Gitea state.
+Filed separates actionable **Needs review** from a browsable **Reviewed** history, so acknowledgement clears the
+queue without erasing the delegated-work record. Reviewed cards reopen the existing read-only issue detail and
+conversation, while the Filed badge continues to count actionable outcomes only. A later Gitea update moves that
+issue back to Needs review automatically. Acknowledgements synchronize the exact Gitea `updated_at` revision in
+bounded batches to the confirmed account and preserve the same Reviewed state on other signed-in devices. Offline
+or failed synchronization keeps the local acknowledgement and retries on the next healthy dashboard refresh
+without blocking **Acknowledge & next**. Set
+`STACKCHAIN_COMPLETED_FILED_REVIEW_DB` to override the default
+`.stackchain-state/completed-filed-reviews.sqlite3` path.
 Search previews also
 let operators assign an eligible issue and add it to Today without starting or replacing active work.
 The queue action keeps the Search query, filters, results, and scroll position available for continued
@@ -99,7 +120,12 @@ explicit **Add blocked item anyway** override, while an unavailable dependency l
 as unknown rather than unblocked. Starting a Today work session also
 stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan without changing Gitea time entries. Eligible non-zero rows also offer an unchecked **Log Xm to Gitea** control. **Log selected time to Gitea** saves the recap and sends only those corrected durations to each canonical issue or pull request; confirmed account-scoped receipts prevent a completed row from being posted again, while definite failures retain the draft for an explicit retry. If the upstream response is lost after sending, Stackchain marks the row for verification in Gitea instead of risking an automatic duplicate. Actual time appears in planning as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. After the recap is confirmed, this recommendation handoff remains account-bound on the device through reloads, app restarts, planner cancellation, and failed plan admission. Opening **Plan Today** resumes it without reposting the recap; a successful plan save clears it, while **Discard recap feedback** removes only the handoff and leaves recap history unchanged. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
 After a reload or installed-app
-restart, **Resume Today** reopens the saved item (or the next surviving item if work changed);
+restart, **Resume Today** reopens the saved item (or the next surviving item if work changed). In an open
+assigned issue, the mobile detail sheet renders Markdown checklist items as touch-safe controls and keeps
+**Add step** directly beside the plan. A new step is normalized, checked for duplicates, and appended without
+exposing or replacing the full issue description. Offline additions enter the same account-bound durable
+issue-content queue as checklist toggles; reconnect conflict review applies unique local additions to the
+latest remote body while preserving remote prose and task-state changes.
 **Comment & next** on that current issue or pull request posts the handoff online or admits it
 to durable account-bound delivery, then removes the item only from Today and opens the next
 one without closing or merging it. **Reply & next** provides the same one-action continuation
@@ -156,7 +182,12 @@ and runs up to three deliveries concurrently, but claims a record only when a de
 is ready. Claims have unique fencing tokens and are renewed before every network stage;
 completion, release, failure, and delivery checkpoints are token-fenced so an expired worker
 cannot alter a newer crash-recovery claim. Device purge cancels an active drain before closing
-private outbox storage. Results are coordinated through a bounded SQLite ledger. Set `STACKCHAIN_STATE_DIR` to a
+private outbox storage. Results are coordinated through a bounded SQLite ledger. All private SQLite stores enforce a
+filesystem boundary independently of the service umask: the database directory is repaired to
+owner-only `0700`, database and SQLite sidecar files are owner-only `0600`, and symlinked database
+paths are rejected before access. This protects state from unrelated local accounts, but it is not
+encryption at rest; secure host access, encrypted volumes, and private backups are still required.
+Set `STACKCHAIN_STATE_DIR` to a
 persistent, writable service directory (or set `STACKCHAIN_IDEMPOTENCY_DB` to an explicit
 SQLite path); the local default is `.stackchain-state/idempotency.sqlite3`. Ledger reads and
 writes run outside the request event loop, and lock admission is bounded to 100 ms by

frontend/authored-outbox.js

@@ -1,10 +1,50 @@
-function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync, getOwnerLogin = () => '', createOperationId, now = () => Date.now(), maxItems = 50 }) {
+function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync, getOwnerLogin = () => '', createOperationId, mergeChecklistConflict, now = () => Date.now(), maxItems = 50 }) {
   const storageKey = 'stackchain.authored-outbox.v1';
   const makeId = createOperationId || (() =>
     globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random().toString(16).slice(2)
   );
   const pending = new Map();
-  const supportedKinds = new Set(['issue-comment', 'pull-comment', 'update-reply', 'update-reply-read', 'pull-review', 'issue-close', 'issue-blocker']);
+  const supportedKinds = new Set(['issue-comment', 'pull-comment', 'search-reply', 'update-reply', 'update-reply-read', 'pull-review', 'issue-close', 'issue-blocker', 'issue-content']);
+
+  function messageAttachments(message) {
+    const values = Array.isArray(message?.attachments) ? message.attachments :
+      (Array.isArray(message?.attachment) ? message.attachment : (message?.attachment ? [message.attachment] : []));
+    return values.filter(Boolean).slice(0, 5);
+  }
+
+  function attachmentMetadata(value) {
+    const note = String(value.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    return {
+      filename: String(value.filename || ''),
+      contentType: String(value.contentType || ''),
+      stored: true,
+      ...(note ? { note } : {}),
+      ...(value.operationId ? { operationId:String(value.operationId).slice(0, 128) } : {}),
+      ...(value.confirmed?.markdown ? { confirmed:{ markdown:String(value.confirmed.markdown) } } : {}),
+    };
+  }
+
+  function durableAttachment(value) {
+    const note = String(value.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    return {
+      filename: String(value.filename || ''),
+      contentType: String(value.contentType || ''),
+      ...(note ? { note } : {}),
+      ...(value.operationId ? { operationId:String(value.operationId).slice(0, 128) } : {}),
+      ...(value.confirmed?.markdown ? { confirmed:{ markdown:String(value.confirmed.markdown) } } : {}),
+      ...(value.blob ? { blob:value.blob } : { data:String(value.data || '') }),
+    };
+  }
+
+  function checklistOperation(value) {
+    const action = String(value?.action || '');
+    if (!['rename', 'remove', 'move-earlier', 'move-later'].includes(action)) return null;
+    return {
+      action,
+      index:Number(value.index),
+      ...(action === 'rename' ? { label:String(value.label || '') } : {}),
+    };
+  }
 
   function reviewFingerprint(message) {
     return JSON.stringify({
@@ -45,6 +85,9 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
 
   function enqueue(message, mirror = true) {
     if (!supportedKinds.has(message?.kind)) throw new Error('This action cannot be queued.');
+    if (message.kind === 'search-reply' && !['issue', 'pull'].includes(message.targetKind)) {
+      throw new Error('Choose an exact Search result before queueing a reply.');
+    }
     const ownerLogin = String(getOwnerLogin() || '').trim();
     if (!ownerLogin) throw new Error('Confirm your Gitea account before queueing a message.');
     const items = read();
@@ -61,8 +104,26 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
         throw new Error('A review for this saved head is already queued. Open Drafts to inspect or discard it first.');
       }
     }
+    if (message.kind === 'issue-content') {
+      const queuedContent = items.find(item => item.kind === 'issue-content' && item.status === 'queued' &&
+        item.ownerLogin === ownerLogin && item.repository === String(message.repository || '') &&
+        item.number === Number(message.number || 0));
+      if (queuedContent) {
+        const operation = checklistOperation(message.checklistOperation);
+        const replacement = {
+          ...queuedContent,
+          operationId: String(requestedOperationId || makeId()).slice(0, 128),
+          title: String(message.title || ''),
+          body: String(message.body || ''),
+          ...(operation ? { checklistOperations:[...(queuedContent.checklistOperations || []), operation] } : {}),
+        };
+        write(items.map(item => item.id === queuedContent.id ? replacement : item), mirror);
+        return replacement;
+      }
+    }
     if (items.length >= maxItems) throw new Error('Message outbox is full. Send or discard a queued message first.');
     const id = String(requestedOperationId || makeId()).slice(0, 128);
+    const attachments = messageAttachments(message);
     const item = {
       id,
       operationId: requestedOperationId || id,
@@ -74,14 +135,11 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
       ownerLogin,
       status: 'queued',
       queuedAt: Number(now()),
+      ...(message.kind === 'search-reply' ? { targetKind:String(message.targetKind) } : {}),
       ...(message.kind === 'update-reply-read' ? { replyConfirmed: message.replyConfirmed === true } : {}),
-      ...(['issue-comment', 'pull-comment', 'update-reply', 'update-reply-read'].includes(message.kind) && message.attachment ? {
-        attachment: {
-          filename: String(message.attachment.filename || ''),
-          contentType: String(message.attachment.contentType || ''),
-          stored: true,
-        },
-      } : {}),
+      ...(['issue-comment', 'pull-comment', 'search-reply', 'update-reply', 'update-reply-read'].includes(message.kind) && attachments.length ?
+        (attachments.length === 1 ? { attachment:attachmentMetadata(attachments[0]) } :
+          { attachments:attachments.map(attachmentMetadata) }) : {}),
       ...(message.kind === 'pull-review' ? {
         decision: String(message.decision || 'comment'),
         expectedHeadSha: String(message.expectedHeadSha || ''),
@@ -96,6 +154,14 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
         blockerNumber: Number(message.blockerNumber || 0),
         present: message.present === true,
       } : {}),
+      ...(message.kind === 'issue-content' ? {
+        title: String(message.title || ''),
+        baseBody: String(message.baseBody ?? message.body ?? ''),
+        expectedUpdatedAt: String(message.expectedUpdatedAt || ''),
+        ...(checklistOperation(message.checklistOperation) ? {
+          checklistOperations:[checklistOperation(message.checklistOperation)],
+        } : {}),
+      } : {}),
     };
     items.push(item);
     write(items, mirror);
@@ -103,8 +169,10 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
   }
 
   async function enqueueDurably(message) {
+    const previousItems = read();
     const item = enqueue(message, false);
-    if (message.attachment && ['update-reply', 'update-reply-read'].includes(message.kind) &&
+    const attachments = messageAttachments(message);
+    if (attachments.length && ['search-reply', 'update-reply', 'update-reply-read'].includes(message.kind) &&
         (!backgroundSync?.reconcile || !backgroundSync?.requestSync)) {
       write(read().filter(candidate => candidate.id !== item.id), false);
       throw new Error('Screenshot delivery needs IndexedDB. Your reply and screenshot are still here; retry.');
@@ -112,19 +180,15 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     if (!backgroundSync?.reconcile || !backgroundSync?.requestSync) {
       return { item, background: false, durability: 'foreground-only' };
     }
-    const durableItems = read().map(candidate => candidate.id === item.id && message.attachment ? {
+    const durableItems = read().map(candidate => candidate.id === item.id && attachments.length ? {
       ...candidate,
-      attachment: {
-        filename: String(message.attachment.filename || ''),
-        contentType: String(message.attachment.contentType || ''),
-        ...(message.attachment.blob ? { blob: message.attachment.blob } :
-          { data: String(message.attachment.data || '') }),
-      },
+      ...(attachments.length === 1 ? { attachment:durableAttachment(attachments[0]) } :
+        { attachments:attachments.map(durableAttachment) }),
     } : candidate);
     try {
       await backgroundSync.reconcile(durableItems, 'authored');
     } catch (error) {
-      write(read().filter(candidate => candidate.id !== item.id), false);
+      write(previousItems, false);
       throw error;
     }
     try {
@@ -171,9 +235,16 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     if (item.kind === 'issue-blocker') {
       return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/blockers';
     }
+    if (item.kind === 'issue-content') {
+      return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/content';
+    }
     if (item.kind === 'pull-review') {
       return 'api/v1/repos/' + repository + '/pulls/' + encodeURIComponent(item.number) + '/review';
     }
+    if (item.kind === 'search-reply') {
+      return 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) +
+        '/preview/comments?kind=' + encodeURIComponent(item.targetKind);
+    }
     const resource = item.kind === 'pull-comment' ? 'pulls' : 'issues';
     return 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/comments';
   }
@@ -246,9 +317,11 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
               decision: item.decision,
               expected_head_sha: item.expectedHeadSha,
               comments: item.comments,
+            } : item.kind === 'issue-content' ? {
+              title:item.title, body:item.body, expected_updated_at:item.expectedUpdatedAt,
             } : { body: item.body };
             result = await fetchJson(endpoint(item), {
-              method: 'POST',
+              method: item.kind === 'issue-content' ? 'PATCH' : 'POST',
               headers: {
                 Accept: 'application/json',
                 'Content-Type': 'application/json',
@@ -256,6 +329,10 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
               },
               body: JSON.stringify(body),
             });
+            if (item.kind === 'issue-content' &&
+                (result?.number !== item.number || result?.title !== item.title || result?.body !== item.body)) {
+              throw new Error('Checklist update was not confirmed.');
+            }
           }
         }
         if (!result) return { blocked: true };
@@ -334,6 +411,51 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     return retryItem(id, currentLogin);
   }
 
+  async function resolveIssueContentConflict(id, latest, currentLogin) {
+    const previousItems = read();
+    const item = previousItems.find(candidate => candidate.id === id);
+    currentLogin = String(currentLogin || '').trim();
+    if (!item || item.kind !== 'issue-content' || item.status !== 'attention') {
+      throw new Error('This checklist conflict is no longer available.');
+    }
+    if (!currentLogin || item.ownerLogin !== currentLogin) {
+      throw new Error('Confirm the account that queued this checklist update.');
+    }
+    if (typeof mergeChecklistConflict !== 'function') {
+      throw new Error('Checklist conflict review is unavailable.');
+    }
+    const merged = mergeChecklistConflict({
+      baseBody: String(item.baseBody ?? item.body ?? ''),
+      localBody: String(item.body || ''),
+      remoteBody: String(latest?.body || ''),
+    });
+    if (merged.conflicts?.length) return merged;
+    if (!String(latest?.updated_at || '')) throw new Error('Latest issue revision is unavailable.');
+    const rebased = {
+      ...item,
+      operationId: String(makeId()).slice(0, 128),
+      title: String(latest?.title || ''),
+      baseBody: String(latest?.body || ''),
+      body: merged.body,
+      expectedUpdatedAt: String(latest.updated_at),
+      status: 'queued',
+    };
+    delete rebased.error;
+    delete rebased.deliveryState;
+    const nextItems = previousItems.map(candidate => candidate.id === id ? rebased : candidate);
+    write(nextItems, false);
+    if (backgroundSync?.reconcile) {
+      try { await backgroundSync.reconcile(nextItems, 'authored'); }
+      catch (error) {
+        write(previousItems, false);
+        throw error;
+      }
+      try { await backgroundSync.requestSync?.(); }
+      catch (_error) { /* Foreground retry remains available. */ }
+    }
+    return { ...merged, item: rebased };
+  }
+
   function reconcileBackground(records) {
     const statuses = new Map((records || []).map(item => [item.id, item]));
     const items = read().flatMap(item => {
@@ -359,7 +481,8 @@ function createAuthoredOutbox({ storage, fetchJson, coordinator, backgroundSync,
     return items;
   }
 
-  return { enqueue, enqueueDurably, update, discard, flush, retry, reconcileBackground, list: () => read().map(item => ({ ...item })) };
+  return { enqueue, enqueueDurably, update, discard, flush, retry, resolveIssueContentConflict,
+    reconcileBackground, list: () => read().map(item => ({ ...item })) };
 }
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createAuthoredOutbox;

frontend/background-issue-sync.js

@@ -105,6 +105,11 @@ function createIssueSyncStore({
           };
           incoming.set(current.id, replacement);
         }
+        if (current.kind === 'issue-content' && replacement.kind === 'issue-content' &&
+            current.operationId !== replacement.operationId && current.status === 'sending' &&
+            Number(current.claimUntil) > Number(now())) {
+          throw new Error('Checklist sync is already delivering. Retry this change.');
+        }
         if ((current.status === 'sending' && Number(current.claimUntil) > Number(now())) ||
             (['attention', 'authorization'].includes(current.status) &&
               replacement.status === current.status) ||
@@ -181,10 +186,15 @@ function createIssueSyncStore({
       const preservedAttachment = (current?.attachment?.data || current?.attachment?.blob) &&
         item?.attachment?.stored && !item.attachment.data && !item.attachment.blob
         ? { attachment: current.attachment } : {};
+      const preservedAttachments = current?.operationId === item?.operationId &&
+        current?.attachments?.every(value => value?.data || value?.blob) &&
+        item?.attachments?.every(value => value?.stored && !value.data && !value.blob)
+        ? { attachments:current.attachments } : {};
       const next = current && current.operationId === item.operationId ? {
-        ...item, ...preservedAttachment,
+        ...item, ...preservedAttachment, ...preservedAttachments,
         ...(current.deliveredIssue ? { deliveredIssue: current.deliveredIssue } : {}),
         ...(current.attachmentMarkdown ? { attachmentMarkdown: current.attachmentMarkdown } : {}),
+        ...(current.attachmentMarkdowns ? { attachmentMarkdowns:current.attachmentMarkdowns } : {}),
       } : { ...item };
       await records.put(next);
       return next;
@@ -410,6 +420,24 @@ function createBackgroundIssueSync({
         },
       };
     }
+    if (item.kind === 'issue-content') {
+      return {
+        url: base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) + '/content',
+        options: {
+          method: 'PATCH',
+          headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/json',
+            'Idempotency-Key': item.operationId,
+          },
+          body: JSON.stringify({
+            title: item.title,
+            body: item.body,
+            expected_updated_at: item.expectedUpdatedAt,
+          }),
+        },
+      };
+    }
     if (item.kind === 'pull-review') {
       return {
         url: base + 'api/v1/repos/' + repository + '/pulls/' + encodeURIComponent(item.number) + '/review',
@@ -436,6 +464,13 @@ function createBackgroundIssueSync({
         item,
       );
     }
+    if (item.kind === 'search-reply') {
+      return authoredRequest(
+        'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(item.number) +
+          '/preview/comments?kind=' + encodeURIComponent(item.targetKind),
+        item,
+      );
+    }
     return {
       url: base + 'api/v1/repos/' + repository + '/issues',
       options: {
@@ -485,31 +520,68 @@ function createBackgroundIssueSync({
     return '**Screenshot ' + (index + 1) + ' — ' + escaped + '**\n\n' + markdown;
   }
 
+  function conversationAttachments(item) {
+    return (Array.isArray(item?.attachments) ? item.attachments : [item?.attachment]).filter(Boolean);
+  }
+
+  async function uploadConversationAttachments(item, url) {
+    let current = item;
+    const attachments = conversationAttachments(current);
+    const confirmedMarkdowns = attachments.map(value => String(value?.confirmed?.markdown || ''));
+    const firstMissing = confirmedMarkdowns.findIndex(value => !value);
+    const leadingConfirmed = confirmedMarkdowns.slice(0, firstMissing < 0 ? confirmedMarkdowns.length : firstMissing);
+    const markdowns = Array.isArray(current.attachmentMarkdowns) ?
+      current.attachmentMarkdowns.slice(0, attachments.length) :
+      (current.attachmentMarkdown ? [current.attachmentMarkdown] : leadingConfirmed);
+    for (let index = markdowns.length; index < attachments.length; index += 1) {
+      const uploaded = await requestStage(current, url, {
+        method:'POST',
+        headers:{
+          Accept:'application/json',
+          'Idempotency-Key':String(attachments[index]?.operationId || stageOperationId(
+            current.operationId, attachments.length === 1 ? 'attachment' : 'attachment-' + index,
+          )).slice(0, 128),
+        },
+        body:attachmentMultipart(attachments[index]),
+      });
+      const markdown = String(uploaded?.markdown || '');
+      if (!markdown) {
+        const error = new Error('The server did not confirm the screenshot upload.');
+        error.status = 422;
+        throw error;
+      }
+      markdowns.push(markdown);
+      await checkpointClaim(current, stored => ({
+        ...stored, attachmentMarkdowns:markdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      }));
+      current = {
+        ...current, attachmentMarkdowns:markdowns.slice(),
+        ...(attachments.length === 1 ? {attachmentMarkdown:markdown} : {}),
+      };
+    }
+    return {
+      current,
+      markdown:markdowns.map((value, index) =>
+        evidenceMarkdown(attachments[index], value, index)).join('\n\n'),
+    };
+  }
+
   async function deliverReplyRead(item) {
     let current = item;
     if (!current.replyConfirmed) {
-      let attachmentMarkdown = current.attachmentMarkdown;
-      if (current.attachment && !attachmentMarkdown) {
-        const uploaded = await requestStage(current,
-          base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments', {
-            method:'POST',
-            headers:{ Accept:'application/json', 'Idempotency-Key':stageOperationId(current.operationId, 'attachment') },
-            body:attachmentMultipart(current.attachment),
-          });
-        attachmentMarkdown = String(uploaded?.markdown || '');
-        if (!attachmentMarkdown) {
-          const error = new Error('The server did not confirm the screenshot upload.');
-          error.status = 422;
-          throw error;
-        }
-        await checkpointClaim(current, stored => ({ ...stored, attachmentMarkdown }));
-        current = { ...current, attachmentMarkdown };
+      let attachmentMarkdown = '';
+      if (conversationAttachments(current).length) {
+        const uploaded = await uploadConversationAttachments(current,
+          base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments');
+        current = uploaded.current;
+        attachmentMarkdown = uploaded.markdown;
       }
       const text = String(current.body || '').trim();
       const replyBody = attachmentMarkdown ?
         (text ? text + '\n\n' + attachmentMarkdown : attachmentMarkdown) : text;
       const options = authoredRequest('', { ...current, body:replyBody }).options;
-      if (current.attachment) options.headers['Idempotency-Key'] = stageOperationId(current.operationId, 'reply');
+      if (conversationAttachments(current).length) options.headers['Idempotency-Key'] = stageOperationId(current.operationId, 'reply');
       await requestStage(
         current,
         base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/reply',
@@ -615,28 +687,9 @@ function createBackgroundIssueSync({
   async function deliverScreenshotComment(item) {
     const repository = String(item.repository || '').split('/').map(encodeURIComponent).join('/');
     const resource = item.kind === 'pull-comment' ? 'pulls' : 'issues';
-    let attachmentMarkdown = item.attachmentMarkdown;
-    if (!attachmentMarkdown) {
-      const uploaded = await requestStage(
-        item,
-        base + 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/attachments',
-        {
-          method: 'POST',
-          headers: {
-            Accept: 'application/json',
-            'Idempotency-Key': stageOperationId(item.operationId, 'attachment'),
-          },
-          body: attachmentMultipart(item.attachment),
-        },
-      );
-      attachmentMarkdown = String(uploaded?.markdown || '');
-      if (!attachmentMarkdown) {
-        const error = new Error('The server did not confirm the screenshot upload.');
-        error.status = 422;
-        throw error;
-      }
-      await checkpointClaim(item, current => ({ ...current, attachmentMarkdown }));
-    }
+    const uploaded = await uploadConversationAttachments(item,
+      base + 'api/v1/repos/' + repository + '/' + resource + '/' + encodeURIComponent(item.number) + '/attachments');
+    const attachmentMarkdown = uploaded.markdown;
     const text = String(item.body || '').trim();
     return requestStage(
       item,
@@ -652,26 +705,35 @@ function createBackgroundIssueSync({
     );
   }
 
-  async function deliverUpdateScreenshotReply(item) {
+  async function deliverSearchReply(item) {
+    const repository = String(item.repository || '').split('/').map(encodeURIComponent).join('/');
     let current = item;
-    let attachmentMarkdown = current.attachmentMarkdown;
-    if (!attachmentMarkdown) {
-      const uploaded = await requestStage(current,
-        base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/attachments', {
-          method:'POST',
-          headers:{ Accept:'application/json', 'Idempotency-Key':stageOperationId(current.operationId, 'attachment') },
-          body:attachmentMultipart(current.attachment),
-        });
-      attachmentMarkdown = String(uploaded?.markdown || '');
-      if (!attachmentMarkdown) {
-        const error = new Error('The server did not confirm the screenshot upload.');
-        error.status = 422;
-        throw error;
-      }
-      await checkpointClaim(current, stored => ({ ...stored, attachmentMarkdown }));
-      current = { ...current, attachmentMarkdown };
+    let attachmentMarkdown = '';
+    if (conversationAttachments(current).length) {
+      const uploaded = await uploadConversationAttachments(current,
+        base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(current.number) +
+          '/preview/attachments?kind=' + encodeURIComponent(current.targetKind));
+      current = uploaded.current;
+      attachmentMarkdown = uploaded.markdown;
     }
     const text = String(current.body || '').trim();
+    return requestStage(current,
+      base + 'api/v1/repos/' + repository + '/issues/' + encodeURIComponent(current.number) +
+        '/preview/comments?kind=' + encodeURIComponent(current.targetKind), {
+        method:'POST',
+        headers:{Accept:'application/json','Content-Type':'application/json',
+          'Idempotency-Key':stageOperationId(current.operationId, 'comment')},
+        body:JSON.stringify({body:attachmentMarkdown ?
+          (text ? text + '\n\n' + attachmentMarkdown : attachmentMarkdown) : text}),
+      });
+  }
+
+  async function deliverUpdateScreenshotReply(item) {
+    const uploaded = await uploadConversationAttachments(item,
+      base + 'api/v1/notifications/' + encodeURIComponent(item.notificationId) + '/attachments');
+    const current = uploaded.current;
+    const attachmentMarkdown = uploaded.markdown;
+    const text = String(current.body || '').trim();
     return requestStage(current,
       base + 'api/v1/notifications/' + encodeURIComponent(current.notificationId) + '/reply', {
         method:'POST',
@@ -685,8 +747,9 @@ function createBackgroundIssueSync({
     const request = deliveryRequest(item);
     try {
       const delivered = item.kind === 'update-reply-read' ? await deliverReplyRead(item) :
-        item.kind === 'update-reply' && item.attachment ? await deliverUpdateScreenshotReply(item) :
-        item.attachment && ['issue-comment', 'pull-comment'].includes(item.kind) ?
+        item.kind === 'search-reply' ? await deliverSearchReply(item) :
+        item.kind === 'update-reply' && conversationAttachments(item).length ? await deliverUpdateScreenshotReply(item) :
+        conversationAttachments(item).length && ['issue-comment', 'pull-comment'].includes(item.kind) ?
         await deliverScreenshotComment(item) : item.attachment && !item.kind ?
           await deliverIssueCapture(item) : item.attachments?.length && !item.kind ?
             await deliverIssueCapture(item) : item.blockers?.length && !item.kind ?
@@ -706,6 +769,12 @@ function createBackgroundIssueSync({
           throw error;
         }
       }
+      if (item.kind === 'issue-content' &&
+          (delivered?.number !== item.number || delivered?.title !== item.title || delivered?.body !== item.body)) {
+        const error = new Error('Checklist update was not confirmed.');
+        error.status = 422;
+        throw error;
+      }
       await completeClaim(item, delivered);
       const receipt = receiptFor(item, 'confirmed', delivered);
       return item.kind ? { message: delivered, receipt } : { issue: delivered, receipt };

frontend/checklist-conflict.js

@@ -0,0 +1,141 @@
+function mergeChecklistConflict({ baseBody, localBody, remoteBody, operations = [] }) {
+  const taskPattern = /^(\s*[-*+]\s+\[)([ xX])(\]\s+)(.*)$/;
+
+  function tasks(body) {
+    const entries = [];
+    String(body || '').split('\n').forEach((line, lineIndex) => {
+      const match = line.match(taskPattern);
+      if (!match) return;
+      const label = match[4].trim();
+      const key = label.replace(/\s+/g, ' ').toLocaleLowerCase();
+      if (!key) return;
+      entries.push({ key, label, checked: match[2].toLowerCase() === 'x', lineIndex, match });
+    });
+    return entries;
+  }
+
+  function grouped(entries) {
+    const result = new Map();
+    entries.forEach(entry => result.set(entry.key, [...(result.get(entry.key) || []), entry]));
+    return result;
+  }
+
+  function replayOperations(body, requested, reportChanges) {
+    let lines = String(body || '').split('\n');
+    const visibleTasks = value => tasks(value).filter(entry => /^[-*+]/.test(entry.match[1]));
+    const logical = visibleTasks(baseBody).map(entry => ({ key:entry.key, label:entry.label }));
+    const replayed = [];
+    for (const operation of requested) {
+      const index = Number(operation?.index);
+      const target = logical[index];
+      if (!target) return { body:null, changes:replayed, conflict:{ label:'Checklist step', reason:'missing' } };
+      let entries = visibleTasks(lines.join('\n'));
+      const matches = entries.filter(entry => entry.key === target.key);
+      if (matches.length !== 1) {
+        return { body:null, changes:replayed, conflict:{
+          label:target.label, reason:matches.length ? 'ambiguous' : 'missing',
+        } };
+      }
+      const match = matches[0];
+      if (operation.action === 'rename') {
+        const label = String(operation.label || '').trim().replace(/\s+/g, ' ');
+        const key = label.toLocaleLowerCase();
+        if (!label || entries.some(entry => entry.key === key && entry.lineIndex !== match.lineIndex)) {
+          return { body:null, changes:replayed, conflict:{ label:target.label, reason:'ambiguous' } };
+        }
+        lines[match.lineIndex] = match.match[1] + match.match[2] + match.match[3] + label;
+        if (reportChanges) replayed.push({ label:target.label, renamed:label });
+        target.label = label;
+        target.key = key;
+      } else if (operation.action === 'remove') {
+        lines.splice(match.lineIndex, 1);
+        logical.splice(index, 1);
+        if (reportChanges) replayed.push({ label:target.label, removed:true });
+      } else if (operation.action === 'move-earlier' || operation.action === 'move-later') {
+        const neighborIndex = operation.action === 'move-earlier' ? index - 1 : index + 1;
+        const neighbor = logical[neighborIndex];
+        const neighborMatches = neighbor ? entries.filter(entry => entry.key === neighbor.key) : [];
+        if (neighborMatches.length !== 1 || Math.abs(neighborMatches[0].lineIndex - match.lineIndex) !== 1) {
+          return { body:null, changes:replayed, conflict:{ label:target.label, reason:'order-changed' } };
+        }
+        const neighborLine = neighborMatches[0].lineIndex;
+        [lines[match.lineIndex], lines[neighborLine]] = [lines[neighborLine], lines[match.lineIndex]];
+        [logical[index], logical[neighborIndex]] = [logical[neighborIndex], logical[index]];
+        if (reportChanges) replayed.push({
+          label:target.label, moved:operation.action === 'move-earlier' ? 'earlier' : 'later',
+        });
+      }
+    }
+    return { body:lines.join('\n'), changes:replayed, conflict:null };
+  }
+
+  if (Array.isArray(operations) && operations.length) {
+    const baseReplay = replayOperations(baseBody, operations, false);
+    const remoteReplay = replayOperations(remoteBody, operations, true);
+    const conflict = baseReplay.conflict || remoteReplay.conflict;
+    if (conflict) return { body:null, changes:remoteReplay.changes || [], conflicts:[conflict] };
+    const residual = mergeChecklistConflict({
+      baseBody:baseReplay.body, localBody, remoteBody:remoteReplay.body,
+    });
+    return {
+      body:residual.body,
+      changes:[...remoteReplay.changes, ...residual.changes],
+      conflicts:residual.conflicts,
+    };
+  }
+
+  const base = grouped(tasks(baseBody));
+  const local = grouped(tasks(localBody));
+  const remoteEntries = tasks(remoteBody);
+  const remote = grouped(remoteEntries);
+  const changes = [];
+  const conflicts = [];
+
+  for (const [key, baseMatches] of base) {
+    const localMatches = local.get(key) || [];
+    if (baseMatches.length !== 1 || localMatches.length !== 1) continue;
+    if (baseMatches[0].checked === localMatches[0].checked) continue;
+    const remoteMatches = remote.get(key) || [];
+    if (remoteMatches.length !== 1) {
+      conflicts.push({
+        label: baseMatches[0].label,
+        reason: remoteMatches.length ? 'ambiguous' : 'missing',
+      });
+      continue;
+    }
+    changes.push({ label: remoteMatches[0].label, checked: localMatches[0].checked });
+  }
+
+  for (const [key, localMatches] of local) {
+    if (base.has(key)) continue;
+    if (localMatches.length !== 1) {
+      conflicts.push({ label:localMatches[0].label, reason:'ambiguous' });
+      continue;
+    }
+    const remoteMatches = remote.get(key) || [];
+    if (remoteMatches.length > 1) {
+      conflicts.push({ label: localMatches[0].label, reason: 'ambiguous' });
+      continue;
+    }
+    if (remoteMatches.length === 0) {
+      changes.push({ label: localMatches[0].label, checked:localMatches[0].checked, added:true });
+    }
+  }
+
+  if (conflicts.length) return { body: null, changes, conflicts };
+  const desired = new Map(changes.map(change => [
+    change.label.replace(/\s+/g, ' ').toLocaleLowerCase(), change.checked,
+  ]));
+  const lines = String(remoteBody || '').split('\n');
+  remoteEntries.forEach(entry => {
+    if (!desired.has(entry.key)) return;
+    const marker = desired.get(entry.key) ? 'x' : ' ';
+    lines[entry.lineIndex] = entry.match[1] + marker + entry.match[3] + entry.match[4];
+  });
+  changes.filter(change => change.added).forEach(change => {
+    lines.push('- [' + (change.checked ? 'x' : ' ') + '] ' + change.label);
+  });
+  return { body: lines.join('\n'), changes, conflicts: [] };
+}
+
+if (typeof module !== 'undefined') module.exports = mergeChecklistConflict;

frontend/conversation-photo-drafts.js

@@ -0,0 +1,81 @@
+(function (root, factory) {
+  const createConversationPhotoDrafts = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createConversationPhotoDrafts;
+  else root.createConversationPhotoDrafts = createConversationPhotoDrafts;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  return function createConversationPhotoDrafts({ store, lanes }) {
+    const states = {};
+    Object.entries(lanes || {}).forEach(([kind, lane]) => {
+      states[kind] = { ...lane, target:null, generation:0, restoring:false, pending:Promise.resolve() };
+    });
+
+    function state(kind) {
+      const value = states[kind];
+      if (!value) throw new Error('Unknown conversation photo draft lane.');
+      return value;
+    }
+
+    async function checkpoint(kind) {
+      const current = state(kind);
+      if (!current.target || current.restoring) return null;
+      const target = { ...current.target };
+      const attachments = await current.controller.serialize();
+      const save = current.pending.then(() => store.save(target, attachments));
+      current.pending = save.catch(() => null);
+      try { return await save; }
+      catch (error) { current.onError?.(error); throw error; }
+    }
+
+    async function open(kind, target) {
+      const current = state(kind);
+      const generation = ++current.generation;
+      current.target = { ...target };
+      await current.pending;
+      const attachments = await store.load(target);
+      if (generation !== current.generation) return false;
+      current.controller.clear();
+      if (attachments?.length) {
+        current.restoring = true;
+        try { current.controller.restore(attachments); }
+        finally { current.restoring = false; }
+      }
+      return Boolean(attachments?.length);
+    }
+
+    async function leave(kind) {
+      const current = state(kind);
+      const generation = current.generation;
+      if (!current.target) return true;
+      try { await checkpoint(kind); }
+      catch (_error) { return false; }
+      if (generation === current.generation) {
+        current.controller.clear();
+        current.target = null;
+        current.generation += 1;
+      }
+      return true;
+    }
+
+    async function complete(kind) {
+      const current = state(kind);
+      if (!current.target) return false;
+      const target = { ...current.target };
+      await current.pending;
+      await store.remove(target);
+      current.controller.clear();
+      current.target = null;
+      current.generation += 1;
+      return true;
+    }
+
+    async function switchTo(kind, target, isCurrent = () => true) {
+      if (!await leave(kind) || !isCurrent()) return false;
+      return open(kind, target);
+    }
+
+    function hasTarget(kind) { return Boolean(state(kind).target); }
+    return { checkpoint, open, switchTo, leave, complete, hasTarget };
+  };
+});

frontend/conversation-reply-draft-store.js

@@ -0,0 +1,122 @@
+(function (root, factory) {
+  const createConversationReplyDraftStore = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createConversationReplyDraftStore;
+  else root.createConversationReplyDraftStore = createConversationReplyDraftStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const dbName = 'stackchain-conversation-reply-drafts-v1';
+  const storeName = 'drafts';
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result ?? null);
+      request.onerror = () => reject(request.error || new Error('Conversation photo draft storage failed.'));
+    });
+  }
+
+  function createTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise;
+    function database() {
+      if (!databasePromise) databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(storeName)) {
+            request.result.createObjectStore(storeName, { keyPath:'id' });
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Conversation photo draft storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (operation, key, value) => {
+      const db = await database();
+      const transaction = db.transaction(storeName, operation === 'get' ? 'readonly' : 'readwrite');
+      const records = transaction.objectStore(storeName);
+      if (operation === 'put') return requestResult(records.put(value));
+      if (operation === 'delete') return requestResult(records.delete(key));
+      return requestResult(records.get(key));
+    };
+  }
+
+  function normalizedTarget(target) {
+    const kind = String(target?.kind || '');
+    if (kind === 'update') {
+      const notificationId = Number(target?.notificationId || target?.notification_id || 0);
+      if (!Number.isInteger(notificationId) || notificationId < 1) {
+        throw new Error('Open an unread update before saving photo evidence.');
+      }
+      return { kind, notificationId };
+    }
+    const repository = String(target?.repository || '');
+    const number = Number(target?.number || 0);
+    if (!['issue', 'pull'].includes(kind) || !repository || !Number.isInteger(number) || number < 1) {
+      throw new Error('Open a conversation before saving photo evidence.');
+    }
+    return { kind, repository, number };
+  }
+
+  function attachment(value) {
+    const blob = value?.blob;
+    const data = String(value?.data || '');
+    if (!blob && !data) throw new Error('A saved conversation photo is unavailable.');
+    const note = String(value?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    const operationId = String(value?.operationId || '').slice(0, 128);
+    const markdown = String(value?.confirmed?.markdown || '');
+    return {
+      filename:String(value?.filename || ''), contentType:String(value?.contentType || ''),
+      ...(blob ? { blob } : { data }), ...(note ? { note } : {}),
+      ...(operationId ? { operationId } : {}), ...(markdown ? { confirmed:{ markdown } } : {}),
+    };
+  }
+
+  return function createConversationReplyDraftStore({
+    indexedDB = globalThis.indexedDB, transaction, getOwnerLogin = () => '',
+  } = {}) {
+    const transact = transaction || createTransaction(indexedDB);
+
+    function identity(target) {
+      const ownerLogin = String(getOwnerLogin() || '').trim();
+      if (!ownerLogin) throw new Error('Confirm your Gitea account before saving conversation photos.');
+      const normalized = normalizedTarget(target);
+      const targetKey = normalized.kind === 'update' ? normalized.notificationId :
+        normalized.repository + ':' + normalized.number;
+      return {
+        ownerLogin, target:normalized,
+        id:[ownerLogin, normalized.kind, targetKey].map(value => encodeURIComponent(String(value))).join(':'),
+      };
+    }
+
+    async function save(target, values) {
+      if (!transact) throw new Error('Photo draft storage needs IndexedDB. Your current photos are still here.');
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const list = (Array.isArray(values) ? values : [values]).filter(Boolean).slice(0, 5).map(attachment);
+      if (!list.length) { await transact('delete', id); return null; }
+      await transact('put', id, { id, version:1, ownerLogin, ...normalized, attachments:list });
+      return list;
+    }
+
+    async function load(target) {
+      if (!transact) return null;
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const record = await transact('get', id);
+      const same = record?.version === 1 && record.ownerLogin === ownerLogin &&
+        record.kind === normalized.kind && (normalized.kind === 'update' ?
+          Number(record.notificationId) === normalized.notificationId :
+          record.repository === normalized.repository && Number(record.number) === normalized.number);
+      if (!same || !Array.isArray(record.attachments) || !record.attachments.length) return null;
+      return record.attachments.slice(0, 5).map(attachment);
+    }
+
+    async function remove(target) {
+      if (!transact) return false;
+      const { id } = identity(target);
+      await transact('delete', id);
+      return true;
+    }
+
+    return { save, load, remove };
+  };
+});

frontend/create-issue-sheet.js

@@ -43,6 +43,85 @@ function buildRelatedDraft(value = {}, template = null) {
   return draft;
 }
 
+function relatedChecklistDraft(item, label) {
+  const title = String(label || '').trim().replace(/\s+/g, ' ').slice(0, 240);
+  if (!title) throw new Error('Choose a checklist step to file.');
+  const repository = String(item?.repository || '');
+  const number = Number(item?.number);
+  const url = String(item?.url || '');
+  if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository) ||
+      !Number.isInteger(number) || number < 1 || !/^https:\/\//.test(url)) {
+    throw new Error('The parent issue link is unavailable.');
+  }
+  return {repository, title,
+    body:'Related to [' + repository + '#' + number + '](' + url + ').', labelIds:[]};
+}
+
+function linkChecklistTask(raw, targetIndex, child) {
+  const url = String(child?.url || '');
+  if (!/^https:\/\//.test(url)) throw new Error('The related issue link is unavailable.');
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^(\s*[-*+]\s+\[[ xX]\]\s+)(.*)$/);
+    if (!task) continue;
+    if (taskIndex === Number(targetIndex)) {
+      if (/^\s*\[[^\]]+\]\([^)]+\)\s*$/.test(task[2])) throw new Error('That checklist step is already linked.');
+      const label = task[2].trim().replace(/\s+/g, ' ');
+      parts[index] = task[1] + '[' + label + '](' + url + ')';
+      return parts.join('');
+    }
+    taskIndex += 1;
+  }
+  throw new Error('The checklist step is no longer available.');
+}
+
+function createChecklistPromotion({ issueController, issueCapture, clearAttachments, onLinked, onStatus }) {
+  let pending = null;
+  const persistedPromotion = value => ({
+    item:{repository:value.repository, number:value.number, url:value.url},
+    detail:{title:value.title, body:value.body, updated_at:value.updatedAt}, taskIndex:value.taskIndex,
+  });
+  return {
+    pending:() => Boolean(pending),
+    start(context) {
+      pending = {item:{...context.item}, detail:{...context.detail}, taskIndex:Number(context.taskIndex)};
+      const draft = issueController.relatedTaskDraft(context.item, context.detail, context.taskIndex, context.label);
+      issueCapture.saveDraft(draft);
+      clearAttachments();
+      return draft;
+    },
+    cancel() { if (!pending) return false; pending = null; issueCapture.clearDraft(); return true; },
+    deliveryContext() {
+      if (!pending) return null;
+      return {repository:pending.item.repository, number:pending.item.number, url:pending.item.url,
+        title:pending.detail.title, body:pending.detail.body, updatedAt:pending.detail.updated_at,
+        taskIndex:pending.taskIndex};
+    },
+    async finish(child, persisted = null) {
+      const promotion = pending || (persisted ? persistedPromotion(persisted) : null);
+      if (!promotion || !child) return false;
+      pending = null;
+      try {
+        const confirmed = await issueController.linkRelatedTask(
+          promotion.item, promotion.detail, promotion.taskIndex, child
+        );
+        onLinked(promotion, confirmed);
+        onStatus('Related issue created and linked from its parent checklist.');
+        return true;
+      } catch (error) {
+        onStatus('Related issue created, but the parent link needs attention.' +
+          (child.url ? ' ' + child.url : '') + ' ' + error.message);
+        return false;
+      }
+    },
+  };
+}
+
 function createIssueOwnerPicker(issueCapture, documentRef, onChange) {
   const NO_OWNER = '__unassigned__';
   const select = documentRef.querySelector('#create-issue-assignee');
@@ -758,5 +837,8 @@ function createIssueCapture({ fetchJson, storage, createOperationId = newIssueOp
 createIssueCapture.normalizeSharedContent = normalizeSharedContent;
 createIssueCapture.createOwnerPicker = createIssueOwnerPicker;
 createIssueCapture.buildRelatedDraft = buildRelatedDraft;
+createIssueCapture.relatedChecklistDraft = relatedChecklistDraft;
+createIssueCapture.linkChecklistTask = linkChecklistTask;
+createIssueCapture.createChecklistPromotion = createChecklistPromotion;
 
 if (typeof module !== 'undefined' && module.exports) module.exports = createIssueCapture;

frontend/dashboard.css

@@ -26,6 +26,7 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .app-menu { margin-left:auto; }
 .app-menu > summary { display:none; }
 .app-menu-panel { display:flex; gap:10px; align-items:center; flex-wrap:wrap; }
+#open-insights { display:none; }
 button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #2a496e; color:#e5e7eb; padding:8px 12px; border-radius:10px; cursor:pointer; }
 .notification-undo { position:fixed; z-index:110; left:50%; bottom:calc(88px + env(safe-area-inset-bottom)); transform:translateX(-50%); box-sizing:border-box; width:min(520px,calc(100vw - 24px)); display:flex; align-items:center; justify-content:space-between; gap:12px; padding:10px 12px; border:1px solid #60a5fa; border-radius:12px; background:#10233d; box-shadow:0 12px 36px rgba(0,0,0,.5); overflow-wrap:anywhere; }
 .notification-undo[hidden] { display:none; }
@@ -45,6 +46,11 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .active-devices-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .active-devices-header h2, .active-devices-header p { margin-top:0; }
 .active-devices-header button, .active-device button, .enrolled-passkey button { min-height:44px; }
+.security-section-nav { position:sticky; top:-18px; z-index:2; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; margin:0 -2px; padding:10px 2px; background:#0b1526; }
+.security-section-nav button { min-height:44px; min-width:0; }
+.security-section-nav button[aria-current="page"] { border-color:#55d6be; color:#55d6be; }
+.security-activity, .security-devices, .enrolled-passkeys { scroll-margin-top:64px; }
+.security-devices { margin-top:24px; padding-top:18px; border-top:1px solid #2a496e; }
 .active-devices-list { display:grid; gap:10px; margin-top:16px; }
 .device-setup-sheet { position:fixed; inset:0; z-index:95; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .device-setup-sheet[hidden] { display:none; }
@@ -59,6 +65,10 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .device-setup-deadline-controls label { font-size:12px; color:#bfdbfe; }
 .device-setup-deadline-controls select, .device-setup-deadline-controls button, #push-deadline-hour, #push-deadline-days { min-height:44px; }
 .device-setup-ready { margin:0; padding:12px; border-radius:10px; background:#0f2237; color:#bfdbfe; font-weight:700; }
+.device-storage { display:grid; gap:12px; margin:14px 0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#0d1d31; }
+.device-storage h3, .device-storage p { margin:0 0 5px; }
+.device-storage-actions { display:flex; gap:8px; flex-wrap:wrap; }
+.device-storage-actions button { min-height:44px; flex:1 1 180px; }
 .device-readiness-card { display:none; min-width:0; margin:10px 0; padding:12px; border:1px solid #3b82b8; border-radius:12px; background:#102b46; overflow-x:hidden; }
 .device-readiness-card p { margin:5px 0 0; overflow-wrap:anywhere; }
 .device-readiness-summary { color:#bfdbfe; font-weight:700; }
@@ -76,6 +86,7 @@ button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #
 .security-activity-header h3, .security-activity-header p { margin:0 0 6px; }
 .security-activity-list { display:grid; gap:8px; margin:12px 0; }
 .security-event { padding:12px; border:1px solid #243d5d; border-radius:12px; background:#0d1c30; }
+.security-event button { min-height:44px; margin-top:10px; }
 .authentication-alert { border-color:#d69e2e; background:#241b09; }
 .authentication-alert strong { color:#f6c453; }
 .security-event strong, .security-event span { display:block; overflow-wrap:anywhere; }
@@ -91,6 +102,8 @@ button:hover { filter: brightness(1.15); }
 .panel[open] > summary { margin-bottom: 8px; }
 aside, section { position: relative; z-index: 1; }
 main { position: relative; z-index: 1; display: grid; grid-template-columns: 300px 1fr 340px; gap: 14px; padding: 14px; }
+.insights-shell { display:contents; }
+.insights-header { display:none; }
 @media (max-width: 1100px) { main { grid-template-columns: 1fr; } }
 .sidebar { display:flex; flex-direction:column; gap: 12px; }
 .stack { display:flex; flex-direction:column; gap:10px; }
@@ -201,6 +214,11 @@ textarea { resize: vertical; min-height: 120px; }
 .plan-today-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .plan-today-header h2, .plan-today-header p { margin-top:0; }
 .plan-today-header button { min-width:44px; min-height:44px; }
+.mobile-plan-today-nav { position:sticky; top:0; z-index:5; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:4px; margin:0 -18px 10px; padding:4px 18px; background:rgba(11,21,38,.98); border-block:1px solid #2a496e; }
+.mobile-plan-today-nav button { min-width:0; min-height:44px; padding:4px; border-color:transparent; font-size:12px; }
+.mobile-plan-today-nav button[aria-current="location"] { color:#bfdbfe; background:#17365a; border-color:#31577f; }
+#plan-today-fit, #plan-today-selected, #plan-today-available-work { scroll-margin-top:54px; }
+@media (min-width:601px) { .mobile-plan-today-nav { display:none; } }
 .plan-today-list button, .plan-today-candidates button { min-height:44px; }
 .plan-today-capacity { position:sticky; top:0; z-index:2; margin:8px 0; padding:10px 12px; border:1px solid #31577f; border-radius:10px; background:#10233a; font-weight:700; }
 .plan-today-available { display:flex; align-items:center; justify-content:space-between; gap:12px; margin:10px 0; font-weight:700; }
@@ -253,12 +271,39 @@ textarea { resize: vertical; min-height: 120px; }
 .today-recap-totals { margin:12px 0; padding:12px; border-radius:10px; background:#10233d; font-weight:700; }
 .today-recap-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .today-recap-actions button { min-height:44px; width:100%; }
+.today-wrap-up-sheet { position:fixed; inset:0; z-index:89; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.today-wrap-up-sheet[hidden] { display:none; }
+.today-wrap-up-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
+.today-wrap-up-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.today-wrap-up-header h2 { margin:.2rem 0; }
+.today-wrap-up-header button { min-height:44px; min-width:44px; }
+.today-wrap-up-items { display:grid; gap:8px; margin:14px 0; }
+.today-wrap-up-item { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:12px; min-width:0; padding:12px; border:1px solid #2a496e; border-radius:12px; background:#10233d; overflow-wrap:anywhere; }
+.today-wrap-up-item span { display:block; }
+.today-wrap-up-item label { display:flex; align-items:center; min-height:44px; gap:8px; font-weight:700; }
+.today-wrap-up-item input { width:24px; min-height:24px; }
+.today-wrap-up-actions { position:sticky; bottom:0; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
+.today-wrap-up-actions button { min-height:44px; width:100%; }
+.today-handoff-dialog { box-sizing:border-box; width:min(620px,100%); max-width:none; max-height:100dvh; margin:auto auto 0; padding:0; color:#e8f1ff; border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
+.today-handoff-dialog::backdrop { background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.today-handoff-panel { max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); }
+.today-handoff-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+.today-handoff-panel h2 { margin:.2rem 0; }
+.today-handoff-panel header button { min-height:44px; min-width:44px; }
+.today-handoff-items { display:grid; gap:8px; margin:14px 0; }
+.today-handoff-item { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:12px; padding:12px; border:1px solid #29486c; border-radius:12px; background:#101f35; }
+.today-handoff-item span { display:block; }
+.today-handoff-item label { display:flex; align-items:center; min-height:44px; gap:8px; font-weight:700; }
+.today-handoff-item input { width:24px; min-height:24px; }
+.today-handoff-actions { position:sticky; bottom:0; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
+.today-handoff-actions button { min-height:44px; width:100%; }
 @media (max-width:420px) {
   .today-interruption-actions { grid-template-columns:1fr; }
   .today-recap-actions { grid-template-columns:1fr; }
   .today-recap-row { grid-template-columns:1fr; }
   .today-recap-row input { width:min(100%,8rem); }
   .today-recap-variance { grid-column:1; }
+  .today-wrap-up-item { grid-template-columns:1fr; }
 }
 .today-readiness-sheet { position:fixed; inset:0; z-index:90; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .today-readiness-sheet[hidden] { display:none; }
@@ -285,6 +330,10 @@ textarea { resize: vertical; min-height: 120px; }
 .queue-finder button { padding-inline:14px; }
 #search-older-work { width:100%; }
 .my-work-list { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); gap:10px; }
+.filed-history-tabs { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin:10px 0; }
+.filed-history-tabs[hidden] { display:none; }
+.filed-history-tabs button { min-height:44px; min-width:0; }
+.filed-history-tabs button[aria-pressed="true"] { border-color:#60a5fa; background:#17365d; }
 .draft-card { display:flex; flex-direction:column; gap:8px; min-width:0; scroll-margin-bottom:calc(76px + env(safe-area-inset-bottom)); }
 .draft-card:focus-visible { outline:3px solid #60a5fa; outline-offset:3px; border-color:#93c5fd; }
 .draft-preview { color:var(--muted); overflow-wrap:anywhere; }
@@ -465,7 +514,57 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-sheet-panel { width:min(560px,100%); height:100%; overflow:auto; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
 .issue-sheet-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .issue-sheet-header button { min-height:44px; }
+.mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav { display:none; }
+@media (max-width:600px) {
+  .issue-sheet-panel, .pull-sheet-panel, .update-sheet-panel, .review-sheet-panel { padding-top:max(12px,env(safe-area-inset-top)); }
+  .mobile-issue-detail-nav, .mobile-pull-detail-nav, .mobile-update-detail-nav, .mobile-review-detail-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:4px;
+    margin:8px -6px 12px; padding:6px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-issue-detail-nav button, .mobile-pull-detail-nav button, .mobile-update-detail-nav button, .mobile-review-detail-nav button {
+    min-width:0; min-height:44px; padding:4px; overflow-wrap:anywhere;
+    border-color:transparent; font-size:12px;
+  }
+  .mobile-issue-detail-nav button[aria-current="location"], .mobile-pull-detail-nav button[aria-current="location"], .mobile-update-detail-nav button[aria-current="location"], .mobile-review-detail-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  #issue-overview, #issue-conversation, #issue-comment, #issue-planning { scroll-margin-top:72px; }
+  #pull-overview, #pull-conversation, #pull-comment, #pull-review { scroll-margin-top:72px; }
+  #update-conversation, #update-subject-context, #update-reply-workspace { scroll-margin-top:72px; }
+  #review-overview, #review-files-workspace, #review-feedback, #review-history-workspace { scroll-margin-top:72px; }
+}
+@media (min-width:601px) { .mobile-issue-detail-nav, .mobile-pull-detail-nav { display:none; } }
+@media (min-width:601px) { .mobile-update-detail-nav { display:none; } }
+@media (min-width:601px) { .mobile-review-detail-nav { display:none; } }
+.completed-filed-actions { position:fixed; right:0; bottom:0; z-index:57; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:minmax(0,1fr); align-items:center; gap:8px; margin:0; padding:10px 12px calc(10px + env(safe-area-inset-bottom)); border:1px solid #4ade80; border-radius:12px 0 0; background:rgba(11,21,38,.98); overflow-wrap:anywhere; }
+.completed-filed-actions[hidden] { display:none; }
+.completed-filed-actions button { min-height:44px; min-width:0; }
+.completed-filed-buttons { display:flex; flex-wrap:wrap; gap:8px; }
+.completed-filed-buttons button { flex:1 1 180px; }
+#issue-sheet:has(.completed-filed-actions:not([hidden])) .issue-sheet-panel { padding-bottom:calc(170px + env(safe-area-inset-bottom)); }
 .issue-sheet-content { overflow-wrap:anywhere; white-space:pre-wrap; }
+.checklist-step-editor { display:grid; gap:8px; margin:10px 0 16px; padding:12px; border:1px solid #31577f; border-radius:12px; background:#0b1526; }
+.checklist-step-editor[hidden] { display:none; }
+.checklist-step-editor input { width:100%; min-width:0; box-sizing:border-box; }
+.checklist-step-editor-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.checklist-step-editor button, .checklist-step-editor input { min-height:44px; }
+#remove-checklist-step { border-color:#b45309; }
+#issue-sheet.read-only .checklist-step-editor { display:none; }
+.checklist-add { display:grid; gap:8px; margin:10px 0 16px; }
+.checklist-add form { display:grid; grid-template-columns:minmax(0,1fr) auto auto; gap:8px; }
+.checklist-add form[hidden] { display:none; }
+.checklist-add input { min-width:0; width:100%; box-sizing:border-box; }
+.checklist-add button, .checklist-add input { min-height:44px; }
+#issue-sheet.read-only .checklist-add { display:none; }
+@media(max-width:340px) { .checklist-add form { grid-template-columns:1fr 1fr; } .checklist-add input { grid-column:1 / -1; } }
+.checklist-completion { position:fixed; right:0; bottom:0; z-index:58; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:minmax(0,1fr) repeat(2,minmax(0,auto)); align-items:center; gap:8px; padding:10px 12px calc(10px + env(safe-area-inset-bottom)); border-top:1px solid #4ade80; background:rgba(11,21,38,.98); overflow-wrap:anywhere; }
+.checklist-completion[hidden] { display:none; }
+.checklist-completion button { min-height:44px; min-width:0; }
+#issue-sheet:has(.checklist-completion:not([hidden])) .issue-sheet-panel { padding-bottom:calc(118px + env(safe-area-inset-bottom)); }
+#issue-sheet:has(.checklist-completion:not([hidden])) .work-session-nav { display:none; }
+@media(max-width:420px) { .checklist-completion { grid-template-columns:1fr 1fr; } .checklist-completion span { grid-column:1 / -1; } }
 .issue-blockers { max-width:100%; overflow-x:hidden; margin:16px 0; padding:12px; border:1px solid #b45309; border-radius:12px; background:#291b0c; }
 .issue-blockers h2 { margin-top:0; }
 .issue-blocker-list { display:grid; gap:8px; }
@@ -480,6 +579,7 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-blocker-manager [role="option"] { text-align:left; overflow-wrap:anywhere; }
 #manage-issue-blockers, #start-unblocked-issue { min-height:44px; width:100%; margin-top:10px; }
 .today-readiness-blocker { width:100%; min-height:44px; text-align:left; background:#291b0c; }
+.issue-content-editor { max-width:100%; overflow-x:hidden; margin-top:16px; padding:12px; border:1px solid #2a496e; border-radius:12px; }
 .issue-planning { max-width:100%; margin-top:16px; border:1px solid #2a496e; border-radius:12px; padding:0 12px 12px; overflow-x:hidden; }
 .issue-planning > summary { min-height:44px; display:flex; align-items:center; cursor:pointer; font-weight:700; }
 .issue-planning-retry { min-height:44px; width:100%; }
@@ -492,10 +592,13 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-edit-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
 .issue-comment { padding:10px 0; border-bottom:1px solid #1b2d45; }
 .issue-comment-composer { display:grid; gap:8px; margin-top:16px; }
+.issue-comment-composer textarea { min-height:96px; }
 .issue-comment-composer button { min-height:44px; width:100%; }
 .visually-hidden { position:absolute; width:1px; height:1px; padding:0; margin:-1px; overflow:hidden; clip:rect(0,0,0,0); white-space:nowrap; border:0; }
 .issue-attachment-controls { display:flex; max-width:100%; }
 .issue-attachment-trigger { min-height:44px; display:inline-flex; align-items:center; justify-content:center; padding:8px 12px; border:1px solid #60a5fa; border-radius:10px; color:#dbeafe; font-weight:700; cursor:pointer; }
+.conversation-photo-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; min-width:0; width:100%; }
+.conversation-photo-actions .issue-attachment-trigger { box-sizing:border-box; width:100%; min-width:0; text-align:center; }
 .issue-attachment-preview { display:grid; grid-template-columns:64px minmax(0,1fr); gap:8px 12px; align-items:center; max-width:100%; overflow:hidden; padding:10px; border:1px solid #315781; border-radius:10px; background:#101f34; }
 .issue-attachment-preview[hidden] { display:none; }
 .issue-attachment-preview img { grid-row:span 2; width:64px; height:64px; object-fit:cover; border-radius:8px; }
@@ -521,15 +624,18 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-milestone-editor { display:grid; gap:8px; max-width:100%; margin:14px 0; padding:12px; border:1px solid #2a496e; border-radius:12px; }
 .issue-milestone-editor select { width:100%; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:var(--text); }
 .work-milestone-filter, .issue-milestone-editor select, .issue-milestone-editor button { min-height:44px; }
-#issue-sheet.read-only .issue-comment-composer,
+#issue-sheet.read-only .issue-attachment-controls,
+#issue-sheet.read-only .issue-attachment-preview,
 #issue-sheet.read-only #issue-planning,
 #issue-sheet.read-only #issue-handoff,
 #issue-sheet.read-only #release-issue,
-#issue-sheet.read-only #close-issue,
 #issue-sheet.read-only .detail-defer,
 #issue-sheet.read-only #issue-blockers,
-#issue-sheet.read-only #load-older-issue-comments,
 #issue-sheet.read-only #retry-issue-comment-actions { display:none; }
+#issue-sheet.read-only.filed-reassignable #issue-handoff { display:block; }
+.filed-claim-actions { position:sticky; bottom:0; z-index:4; box-sizing:border-box; width:min(560px,100%); display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; margin-top:14px; padding:10px 4px calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #4ade80; }
+.filed-claim-actions[hidden] { display:none; }
+.filed-claim-actions button { min-width:0; min-height:44px; }
 .issue-sheet-actions { position:sticky; bottom:0; z-index:3; display:grid; gap:8px; margin-top:14px; padding:10px 4px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .issue-sheet-actions button, .issue-sheet-actions a { min-height:44px; display:flex; align-items:center; justify-content:center; }
 .issue-sheet-actions a { border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
@@ -551,9 +657,21 @@ textarea { resize: vertical; min-height: 120px; }
 .work-session-nav button { min-height:44px; width:100%; }
 .find-work-sheet { position:fixed; inset:0; z-index:58; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .find-work-sheet.open { display:flex; }
-.find-work-panel { width:min(560px,100%); height:100dvh; overflow:auto; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
+.find-work-panel { width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
 .find-work-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .find-work-header-actions { display:flex; gap:8px; }
+.mobile-find-work-nav { position:sticky; top:0; z-index:4; display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:6px; padding:6px 0; background:#0b1526; }
+.mobile-find-work-nav button { min-height:44px; min-width:0; padding:6px; }
+.mobile-find-work-nav button[aria-current="step"] { border-color:#60a5fa; background:#17355b; color:#fff; }
+.mobile-find-work-nav button:disabled { opacity:.5; }
+.find-work-stage { display:grid; gap:12px; min-width:0; outline:none; }
+.find-work-stage[hidden] { display:none; }
+.find-work-review { padding:12px; border:1px solid #2a496e; border-radius:12px; background:#101f36; }
+.find-work-review > div:first-child, .find-work-review-list { display:grid; gap:8px; }
+.find-work-review-item { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:10px; align-items:center; padding:10px; border:1px solid #2a496e; border-radius:10px; overflow-wrap:anywhere; }
+.find-work-review-item > div { display:grid; gap:4px; min-width:0; }
+.find-work-review-item button, .find-work-stage-actions button { min-height:44px; }
+.find-work-stage-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0 env(safe-area-inset-bottom); background:#101f36; }
 .find-work-header button, .find-work-card button, .find-work-card a, .find-work-more { min-height:44px; }
 .find-work-search { position:sticky; top:0; z-index:2; display:grid; gap:6px; padding:8px 0; background:#0b1526; }
 .find-work-search > div { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; }
@@ -593,8 +711,10 @@ textarea { resize: vertical; min-height: 120px; }
 .find-work-detail a { display:flex; align-items:center; justify-content:center; border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
 .search-preview { position:fixed; inset:0; z-index:60; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .search-preview.open { display:flex; }
-.search-preview-panel { box-sizing:border-box; width:min(560px,100%); height:100dvh; overflow:auto; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; overflow-wrap:anywhere; }
+.search-preview-panel { box-sizing:border-box; width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; overflow-wrap:anywhere; }
 .search-preview-header { display:flex; align-items:flex-start; justify-content:space-between; gap:10px; }
+.mobile-search-preview-nav { display:none; }
+.search-preview-overview { display:grid; gap:12px; min-width:0; }
 .search-preview-header button, .search-preview-actions button, .search-preview-actions a { min-height:44px; }
 .search-preview-body { margin:0; white-space:pre-wrap; overflow-wrap:anywhere; }
 .search-preview-conversation { display:grid; gap:8px; padding-top:8px; border-top:1px solid #2a496e; }
@@ -607,6 +727,9 @@ textarea { resize: vertical; min-height: 120px; }
 .search-preview-reply textarea { box-sizing:border-box; width:100%; min-height:110px; resize:vertical; scroll-margin-bottom:calc(190px + env(safe-area-inset-bottom)); }
 .search-preview-reply-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
 .search-preview-reply-actions button { min-height:44px; }
+.search-preview-reply .voice-conversation-controls button,
+.search-preview-reply .voice-conversation-review-actions button { min-height:44px; }
+.search-preview-reply .conversation-photo-actions { max-width:100%; }
 .search-preview-navigation { display:grid; grid-template-columns:minmax(0,1fr) auto minmax(0,1fr); align-items:center; gap:8px; }
 .search-preview-actions { position:sticky; bottom:0; display:grid; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
 .search-preview-actions button, .search-preview-actions a { min-height:44px; box-sizing:border-box; display:flex; align-items:center; justify-content:center; }
@@ -614,6 +737,33 @@ textarea { resize: vertical; min-height: 120px; }
 @media (max-width:420px) {
   .search-preview-primary-actions { grid-template-columns:1fr; }
 }
+@media (max-width:600px) {
+  .search-preview-panel { width:100%; border-left:0; padding:14px; padding-top:max(12px,env(safe-area-inset-top)); }
+  .mobile-search-preview-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:4px;
+    margin-inline:-14px; padding:4px 14px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-search-preview-nav button {
+    min-width:0; min-height:44px; padding:4px; overflow-wrap:anywhere;
+    border-color:transparent; font-size:12px;
+  }
+  .mobile-search-preview-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  .mobile-search-preview-nav button[aria-disabled="true"] { opacity:.55; }
+  .search-preview-navigation {
+    position:sticky; bottom:0; z-index:5;
+    margin-inline:-6px; padding:6px;
+    padding-bottom:calc(6px + env(safe-area-inset-bottom));
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  #search-preview-overview, #search-preview-conversation,
+  #search-preview-reply-workspace, #search-preview-actions { scroll-margin-top:72px; }
+  #search-preview-actions { position:static; }
+}
+@media (min-width:601px) { .mobile-search-preview-nav { display:none; } }
 .search-preview-actions a { display:flex; align-items:center; justify-content:center; border:1px solid #60a5fa; border-radius:10px; font-weight:700; }
 .markdown-content { min-width:0; max-width:100%; overflow-wrap:anywhere; white-space:normal; }
 .markdown-content > :first-child { margin-top:0; }
@@ -626,6 +776,10 @@ textarea { resize: vertical; min-height: 120px; }
 .markdown-content .task-list { padding-left:0; list-style:none; }
 .markdown-content .task-list-item { display:flex; gap:8px; align-items:flex-start; }
 .markdown-content .task-list-item input { flex:0 0 auto; margin-top:3px; }
+.markdown-content .task-list-toggle { min-width:44px; min-height:44px; margin:-9px 0 -9px -9px; cursor:pointer; accent-color:#60a5fa; }
+.markdown-content .task-list-manage { min-width:44px; min-height:44px; margin:-9px -9px -9px auto; padding:6px 8px; flex:0 0 auto; }
+.markdown-content.checklist-pending .task-list-toggle { opacity:.65; cursor:wait; }
+.markdown-content.checklist-pending .task-list-manage { opacity:.65; cursor:wait; }
 .markdown-content a { min-height:44px; display:inline-flex; align-items:center; max-width:100%; overflow-wrap:anywhere; }
 @media(max-width:320px) { .find-work-panel { padding:12px; overflow-x:hidden; } .find-work-card { min-width:0; } .my-work-actions { width:100%; } .my-work-actions button { flex:1 1 100%; } }
 .create-issue-sheet { position:fixed; inset:0; z-index:57; display:none; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
@@ -633,12 +787,28 @@ textarea { resize: vertical; min-height: 120px; }
 .create-issue-panel { width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
 .create-issue-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
 .create-issue-header button, .create-issue-actions button, .create-issue-capture-actions button { min-height:44px; }
+.mobile-create-issue-nav { display:none; }
 .create-issue-form { display:grid; gap:12px; }
+.create-issue-describe { display:grid; gap:12px; min-width:0; }
+.voice-issue-capture { display:grid; gap:8px; min-width:0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#101d31; }
+.voice-issue-capture[hidden], .voice-issue-review[hidden], .voice-issue-controls button[hidden] { display:none; }
+.voice-issue-heading, .voice-issue-review { display:grid; gap:6px; }
+.voice-issue-controls, .voice-issue-review-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
+.voice-issue-controls button, .voice-issue-review-actions button { min-width:0; min-height:44px; }
+#voice-issue-transcript { box-sizing:border-box; width:100%; min-height:96px; resize:vertical; }
+.voice-conversation { display:grid; gap:8px; min-width:0; padding:10px; border:1px solid #31577f; border-radius:12px; background:#101d31; }
+.voice-conversation[hidden], .voice-conversation-review[hidden], .voice-conversation-controls button[hidden] { display:none; }
+.voice-conversation-controls, .voice-conversation-review-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(120px,1fr)); gap:8px; }
+.voice-conversation-controls button, .voice-conversation-review-actions button { min-height:44px; min-width:0; }
+.voice-conversation-review { display:grid; gap:6px; }
+.voice-conversation-review textarea { box-sizing:border-box; width:100%; min-height:96px; resize:vertical; }
 .create-issue-capture-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
 .create-issue-capture-actions[hidden] { display:none; }
 .create-issue-filing { display:grid; gap:12px; min-width:0; }
 .create-issue-filing[hidden] { display:none; }
 .create-issue-attachment { display:grid; gap:8px; min-width:0; }
+.photo-evidence-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; min-width:0; }
+.photo-evidence-actions .issue-attachment-trigger { box-sizing:border-box; width:100%; min-width:0; text-align:center; }
 #create-issue-attachment-preview { grid-template-columns:1fr; }
 #create-issue-attachment-image { grid-row:auto; width:100%; height:auto; max-height:320px; }
 .issue-evidence-tray { display:flex; gap:8px; max-width:100%; padding:2px 0 6px; overflow-x:auto; overscroll-behavior-inline:contain; scrollbar-width:thin; }
@@ -652,6 +822,14 @@ textarea { resize: vertical; min-height: 120px; }
 .issue-evidence-note textarea:focus-visible { outline:2px solid #60a5fa; outline-offset:2px; }
 .issue-evidence-review-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr)); gap:8px; }
 .issue-evidence-review-actions button { min-width:44px; min-height:44px; }
+.conversation-evidence-review { grid-template-columns:1fr; width:100%; min-width:0; box-sizing:border-box; overflow-x:hidden; }
+.conversation-evidence-review > img { grid-row:auto; width:100%; height:auto; max-height:280px; }
+.conversation-evidence-review .issue-evidence-tray { overflow-x:auto; }
+.conversation-evidence-review .issue-evidence-review-actions { grid-template-columns:repeat(4,minmax(0,1fr)); }
+.conversation-evidence-review .issue-evidence-review-actions button { min-width:44px; min-height:44px; width:100%; }
+@media (max-width:390px) {
+  .conversation-evidence-review .issue-evidence-review-actions { grid-template-columns:1fr; }
+}
 .issue-evidence-editor { position:fixed; inset:0; z-index:70; display:grid; place-items:end center; overflow-x:hidden; background:rgba(2,6,15,.92); }
 .issue-evidence-editor[hidden] { display:none; }
 .issue-evidence-editor-panel { box-sizing:border-box; width:min(560px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; display:grid; gap:12px; padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); background:#0b1526; border:1px solid #2a496e; border-radius:14px 14px 0 0; }
@@ -767,6 +945,12 @@ textarea { resize: vertical; min-height: 120px; }
   .app-menu:not([open]) > .app-menu-panel { display:none; }
   .app-menu-panel { position:absolute; top:calc(100% + 6px); right:0; width:min(280px,calc(100vw - 20px)); display:grid; gap:8px; padding:10px; border:1px solid #2a496e; border-radius:12px; background:#0b1526; box-shadow:0 18px 45px rgba(0,0,0,.5); }
   .app-menu-panel button { min-height:44px; width:100%; }
+  #open-insights { display:block; }
+  .insights-shell { display:none; }
+  .insights-shell[data-mobile-open="true"] { position:fixed; inset:0; z-index:90; display:grid; align-content:start; gap:12px; overflow:auto; overflow-x:hidden; padding:max(12px,env(safe-area-inset-top)) max(12px,env(safe-area-inset-right)) max(12px,env(safe-area-inset-bottom)) max(12px,env(safe-area-inset-left)); background:#050c15; }
+  .insights-header { position:sticky; top:0; z-index:2; display:flex; align-items:flex-start; justify-content:space-between; gap:12px; padding:10px; border:1px solid #2a496e; border-radius:12px; background:#0b1526; }
+  .insights-header h2, .insights-header p { margin:0 0 4px; }
+  .insights-header button { min-height:44px; flex:none; }
   .device-setup-panel { width:100%; padding:14px; padding-bottom:calc(14px + env(safe-area-inset-bottom)); }
   .device-setup-step { grid-template-columns:1fr; }
   .device-setup-action { width:100%; }
@@ -787,6 +971,8 @@ textarea { resize: vertical; min-height: 120px; }
   .card-planning:not([open]) > .card-planning-actions { display:none; }
   .card-planning[open] > .card-planning-actions { display:grid; margin-top:8px; }
   .plan-today-panel { width:100%; border-left:0; padding:14px; }
+  .mobile-plan-today-nav { margin-inline:-14px; padding-inline:14px; }
+  .plan-today-capacity { position:static; }
   .plan-today-item { grid-template-columns:1fr; }
   .plan-today-item-actions { display:grid; grid-template-columns:repeat(3,1fr); width:100%; }
   .plan-today-candidate-actions { grid-template-columns:repeat(2,1fr); width:100%; }
@@ -818,6 +1004,20 @@ textarea { resize: vertical; min-height: 120px; }
   .saved-search-row { align-items:stretch; }
   #cmd-results { flex:1; min-height:0; overflow-y:auto; max-height:none; overscroll-behavior:contain; padding-bottom:env(safe-area-inset-bottom); }
   .create-issue-panel { width:100%; border-left:0; padding:14px; }
+  .mobile-create-issue-nav {
+    position:sticky; top:env(safe-area-inset-top); z-index:6;
+    display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:4px;
+    margin-inline:-14px; padding:4px 14px;
+    background:rgba(11,21,38,.98); border-block:1px solid #2a496e;
+  }
+  .mobile-create-issue-nav button {
+    min-width:0; min-height:44px; padding:4px; border-color:transparent; font-size:12px;
+  }
+  .mobile-create-issue-nav button[aria-current="location"] {
+    border-color:#60a5fa; background:#17365a; color:#fff;
+  }
+  .mobile-create-issue-nav button[aria-disabled="true"] { opacity:.55; }
+  #create-issue-describe, #create-issue-evidence, #create-issue-filing { scroll-margin-top:72px; }
   .pull-sheet-panel { width:100%; border-left:0; padding:14px; }
   .create-issue-panel.composer-keyboard-active,
   .issue-sheet-panel.composer-keyboard-active,
@@ -837,6 +1037,19 @@ textarea { resize: vertical; min-height: 120px; }
   .mobile-queue-panel { padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); }
   .mobile-queue-panel header { display:flex; align-items:center; justify-content:space-between; gap:12px; }
   .mobile-queue-panel h2 { margin:0; }
+  .mobile-delivery-recovery { box-sizing:border-box; width:100%; max-width:none; max-height:100dvh; margin:auto 0 0; padding:0; border:0; border-radius:18px 18px 0 0; color:var(--text); background:#102641; }
+  .mobile-delivery-recovery::backdrop { background:rgba(3,9,18,.78); }
+  .mobile-delivery-recovery-panel { box-sizing:border-box; display:grid; gap:12px; width:100%; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); overflow-wrap:anywhere; }
+  .mobile-delivery-recovery-panel header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
+  .mobile-delivery-recovery-panel h2, .mobile-delivery-recovery-panel p { margin:0; }
+  .mobile-delivery-recovery-panel button { min-height:48px; }
+  .mobile-delivery-recovery-panel > #mobile-delivery-recovery-action { width:100%; font-weight:800; }
+  .delivery-recovery-reason { padding:12px; border:1px solid #31577f; border-radius:12px; background:#0b1c30; }
+  .mobile-start-day { display:grid; gap:12px; max-width:100%; overflow-wrap:anywhere; margin-top:12px; padding:14px; border:1px solid #31577f; border-radius:14px; background:linear-gradient(135deg,#173b64,#102641); }
+  .mobile-start-day h3, .mobile-start-day p { margin:0; }
+  .mobile-start-day p + p { margin-top:4px; }
+  .mobile-start-day-action { width:100%; min-height:48px; text-align:center; }
+  .mobile-start-day-finish { min-height:44px; width:100%; background:transparent; }
   .mobile-queue-list { display:grid; gap:8px; margin-top:12px; }
   .mobile-queue-list button { display:flex; align-items:center; justify-content:space-between; gap:12px; min-height:56px; width:100%; padding:10px 14px; text-align:left; }
   .mobile-queue-list button > span:first-child { display:grid; gap:2px; }
@@ -862,3 +1075,47 @@ textarea { resize: vertical; min-height: 120px; }
 .obi { width:14px; height:14px; background: url('data:image/svg+xml;utf8,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 24 24%22><rect width=%2224%22 height=%2224%22 rx=%226%22 fill=%22%230b1526%22/><circle cx=%2212%22 cy=%2212%22 r=%226%22 fill=%22%2360a5fa%22/></svg>') center/contain no-repeat; display:inline-block; }
 .footer { padding: 12px; text-align: center; color:#4e6b8a; font-size:12px; }
 @keyframes fadein { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: translateY(0); } }
+/* One-handed live-data recovery on the mobile Home surface. */
+.mobile-pull-refresh {
+  display: none;
+}
+
+@media (max-width: 600px) {
+  .mobile-pull-refresh {
+    position: sticky;
+    top: calc(3.25rem + env(safe-area-inset-top));
+    z-index: 8;
+    display: block;
+    width: max-content;
+    max-width: calc(100vw - 2rem);
+    margin: 0 auto -2rem;
+    padding: .45rem .8rem;
+    border: 1px solid rgba(125, 211, 252, .45);
+    border-radius: 999px;
+    background: rgba(11, 18, 32, .96);
+    color: #dbeafe;
+    font-size: .78rem;
+    box-shadow: 0 .35rem 1rem rgba(0, 0, 0, .28);
+    transform: translateY(.5rem);
+    pointer-events: none;
+  }
+
+  .mobile-pull-refresh[hidden] {
+    display: none;
+  }
+
+  .mobile-pull-refresh[data-state="ready"],
+  .mobile-pull-refresh[data-state="success"] {
+    border-color: rgba(52, 211, 153, .7);
+  }
+
+  .mobile-pull-refresh[data-state="error"] {
+    border-color: rgba(251, 113, 133, .75);
+  }
+}
+
+@media (max-width: 600px) and (prefers-reduced-motion: no-preference) {
+  .mobile-pull-refresh {
+    transition: transform 120ms ease, border-color 120ms ease;
+  }
+}

frontend/device-storage.js

@@ -0,0 +1,103 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else {
+    root.createDeviceStorage = factory;
+    root.createDeviceStorage.mount = document => factory({
+      summary:document.querySelector('#device-storage-summary'),
+      detail:document.querySelector('#device-storage-detail'),
+      clearCachesButton:document.querySelector('#clear-device-caches'),
+      clearAllButton:document.querySelector('#clear-private-device-data'),
+      localStorage:root.localStorage,
+      sessionStorage:root.sessionStorage,
+      caches:root.caches,
+      storageManager:root.navigator?.storage,
+      privateDatabases:root.stackchainPrivateDatabases,
+      inspectPrivateDatabases:root.inspectStackchainPrivateDatabases,
+      clearPrivateDeviceData:root.stackchainPrivateDeviceData,
+    });
+  }
+})(typeof self !== 'undefined' ? self : this, function createDeviceStorage(options) {
+  let privateItemCount = 0;
+  let privateRecordCount = 0;
+  let inventoryUnavailable = false;
+  let fullClearArmed = false;
+  const ownedCaches = async () => (await options.caches?.keys?.() || [])
+    .filter(name => name.startsWith('stackchain-dashboard-'));
+
+  function ownedStorageCount(storage) {
+    if (!storage) return 0;
+    let count = 0;
+    for (let index = 0; index < storage.length; index += 1) {
+      if (storage.key(index)?.startsWith('stackchain.')) count += 1;
+    }
+    return count;
+  }
+
+  function megabytes(value) {
+    return Math.round((Number(value) || 0) / (1024 * 1024));
+  }
+
+  async function refresh() {
+    let estimate = null;
+    try { estimate = await options.storageManager?.estimate?.(); }
+    catch (_error) { /* Storage estimates are optional. */ }
+    options.summary.textContent = estimate?.quota
+      ? `${megabytes(estimate.usage)} MB of ${megabytes(estimate.quota)} MB browser storage used.`
+      : 'Browser storage usage is unavailable.';
+    const itemCount = ownedStorageCount(options.localStorage)
+      + (options.sessionStorage === options.localStorage ? 0 : ownedStorageCount(options.sessionStorage));
+    privateItemCount = itemCount;
+    const inventory = await options.inspectPrivateDatabases?.(options.privateDatabases)
+      || { recordCount: 0, unavailable: true };
+    privateRecordCount = inventory.recordCount;
+    inventoryUnavailable = inventory.unavailable;
+    const cacheCount = (await ownedCaches()).length;
+    options.detail.textContent = `${itemCount} private browser item${itemCount === 1 ? '' : 's'} · `
+      + `${inventoryUnavailable ? 'private work status unknown' : `${privateRecordCount} private work record${privateRecordCount === 1 ? '' : 's'}`} · `
+      + `${cacheCount} cached app cop${cacheCount === 1 ? 'y' : 'ies'}`;
+    return { itemCount, privateRecordCount, inventoryUnavailable, cacheCount };
+  }
+
+  async function clearCaches() {
+    options.clearCachesButton.disabled = true;
+    try {
+      await Promise.all((await ownedCaches()).map(name => options.caches.delete(name)));
+      await refresh();
+      options.summary.textContent = 'Cached app copies cleared. Private work was kept.';
+    } catch (error) {
+      options.summary.textContent = `Cached copies could not be cleared: ${error.message}`;
+    } finally {
+      options.clearCachesButton.disabled = false;
+    }
+  }
+
+  async function clearAll() {
+    if ((privateItemCount > 0 || privateRecordCount > 0 || inventoryUnavailable) && !fullClearArmed) {
+      fullClearArmed = true;
+      options.clearAllButton.textContent = 'Confirm: clear private work';
+      options.summary.textContent = 'Private drafts or queued work may not be synced. Press confirm to clear them from this device.';
+      return;
+    }
+    options.clearAllButton.disabled = true;
+    try {
+      await options.clearPrivateDeviceData();
+      privateItemCount = 0;
+      fullClearArmed = false;
+      options.clearAllButton.textContent = 'Clear all private data';
+      options.detail.textContent = '0 private browser items · 0 private work records · 0 cached app copies';
+      options.summary.textContent = 'All Stackchain private data was cleared from this device.';
+    } catch (error) {
+      options.summary.textContent = `Private data was not fully cleared: ${error.message}`;
+    } finally {
+      options.clearAllButton.disabled = false;
+    }
+  }
+
+  async function start() {
+    options.clearCachesButton.addEventListener('click', clearCaches);
+    options.clearAllButton.addEventListener('click', clearAll);
+    return refresh();
+  }
+
+  return { refresh, start };
+});

frontend/drafts.js

@@ -155,6 +155,8 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             .filter(Boolean).join('\n\n');
           const ownerLogin = String(item.ownerLogin || '').trim();
           const quarantined = !ownerLogin || !currentLogin || ownerLogin !== currentLogin;
+          const checklistConflict = !quarantined && item.kind === 'issue-content' &&
+            item.status === 'attention' && typeof item.baseBody === 'string';
           return {
             id: 'stackchain.authored-outbox.v1:' + item.id,
             outbox_id: item.id,
@@ -162,7 +164,7 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             kind: 'authored-outbox',
             status: item.status === 'attention' ? 'attention' : (item.status === 'sending' ? 'sending' :
               (item.status === 'authorization' || isClosure ? 'authorization' : 'queued')),
-            label: item.deliveryState === 'uncertain' ? 'Verify delivery' :
+            label: checklistConflict ? 'Checklist conflict' : item.deliveryState === 'uncertain' ? 'Verify delivery' :
               (item.status === 'attention' ? (isClosure ? 'Issue closure needs attention' : 'Needs attention') :
                 (isReview ? (item.status === 'authorization' ? 'Review awaiting authorization' : 'Queued review') :
                   (isClosure ? 'Awaiting authorization' : 'Queued message'))),
@@ -172,6 +174,7 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
             title: target,
             preview: textPreview([item.error, item.body].filter(Boolean).join(' — ')),
             copy_text: copyText,
+            checklist_conflict: checklistConflict,
             ...(isReview ? { head_sha: item.expectedHeadSha } : {}),
             quarantined,
             ownership: quarantined ? 'Queued by ' + (ownerLogin || 'an unknown account') +
@@ -237,7 +240,14 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
   }
 
   function partition(items = list()) {
-    const deliveries = items.filter(item => item.kind === 'issue-outbox' || item.kind === 'authored-outbox');
+    const isDelivery = item => item.kind === 'issue-outbox' || item.kind === 'authored-outbox';
+    const needsAction = item => isDelivery(item) && (
+      item.status === 'attention' || item.status === 'authorization' || item.status === 'completion' ||
+      item.delivery_state === 'uncertain' || item.quarantined
+    );
+    const deliveries = items.filter(isDelivery).sort((left, right) =>
+      Number(needsAction(right)) - Number(needsAction(left))
+    );
     const drafts = items.filter(item => item.kind !== 'issue-outbox' && item.kind !== 'authored-outbox');
     const counts = deliveries.reduce((summary, item) => {
       const state = item.status === 'sending' ? 'sending' : (item.status === 'attention' ? 'attention' :
@@ -248,7 +258,7 @@ function createDraftInbox({ storage, getCurrentLogin = () => '', now = () => Dat
     const retryable = deliveries.filter(item =>
       item.status === 'queued' && !item.authorization_required && !item.quarantined && item.delivery_state !== 'uncertain'
     );
-    return { drafts, deliveries, counts, retryable };
+    return { drafts, deliveries, counts, retryable, actionable:deliveries.filter(needsAction).length };
   }
 
   function deliveryLabel(item) {

frontend/filed-claim.js

@@ -0,0 +1,9 @@
+function filedClaimEligible(item, detail) {
+  return Boolean(
+    item?.is_filed && !item?.is_assigned && !item?.is_completed &&
+    item?.state === 'open' && detail?.state === 'open' &&
+    Array.isArray(detail?.assignees) && detail.assignees.length === 0
+  );
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = filedClaimEligible;

frontend/index.html

@@ -16,6 +16,7 @@
   <details class="app-menu">
     <summary id="app-menu-toggle" aria-label="Open dashboard menu">Menu</summary>
     <div class="app-menu-panel">
+      <button id="open-insights" type="button" aria-controls="insights-sheet">Insights</button>
       <button id="refresh">Refresh</button>
       <button id="open-palette">Command</button>
       <button id="open-device-setup" type="button">Device setup</button>
@@ -47,22 +48,15 @@
 <div id="active-devices-sheet" class="active-devices-sheet" hidden>
   <section class="active-devices-panel" role="dialog" aria-modal="true" aria-label="Active devices and passkeys">
     <div class="active-devices-header">
-      <div><h2>Active devices</h2><p class="small muted">Review signed-in devices and remove access you no longer trust.</p></div>
+      <div><h2>Security Center</h2><p class="small muted">Investigate activity, remove untrusted access, and verify the result.</p></div>
       <button id="close-active-devices" type="button" aria-label="Close active devices">Close</button>
     </div>
-    <div id="active-devices-status" class="small" role="status" aria-live="polite"></div>
-    <button id="enroll-passkey" type="button">Add a passkey for this device</button>
-    <div id="active-devices-list" class="active-devices-list"></div>
-    <section class="enrolled-passkeys" aria-labelledby="enrolled-passkeys-title">
-      <div class="enrolled-passkeys-header">
-        <h3 id="enrolled-passkeys-title">Enrolled passkeys</h3>
-        <p class="small muted">Passkeys can remain enrolled after a device signs out. Remove credentials you no longer trust.</p>
-        <p class="small muted">A recovery token will be required after sign-out if you remove this device’s passkey.</p>
-      </div>
-      <div id="enrolled-passkeys-status" class="small" role="status" aria-live="polite"></div>
-      <div id="enrolled-passkeys-list" class="enrolled-passkeys-list"></div>
-    </section>
-    <section class="security-activity" aria-labelledby="security-activity-title">
+    <nav class="security-section-nav" aria-label="Security Center sections">
+      <button id="security-section-activity" type="button">Activity</button>
+      <button id="security-section-devices" type="button">Devices</button>
+      <button id="security-section-passkeys" type="button">Passkeys</button>
+    </nav>
+    <section id="security-activity-section" class="security-activity" aria-labelledby="security-activity-title">
       <div class="security-activity-header">
         <h3 id="security-activity-title">Security activity</h3>
         <p class="small muted">Recent sign-ins, device changes, and protected actions.</p>
@@ -71,6 +65,24 @@
       <div id="security-activity-list" class="security-activity-list"></div>
       <button id="load-more-security-activity" type="button" hidden>Load older activity</button>
     </section>
+    <section id="security-devices-section" class="security-devices" aria-labelledby="security-devices-title">
+      <div class="security-activity-header">
+        <h3 id="security-devices-title">Active devices</h3>
+        <p class="small muted">Review signed-in devices and remove access you no longer trust.</p>
+      </div>
+      <div id="active-devices-status" class="small" role="status" aria-live="polite"></div>
+      <button id="enroll-passkey" type="button">Add a passkey for this device</button>
+      <div id="active-devices-list" class="active-devices-list"></div>
+    </section>
+    <section id="security-passkeys-section" class="enrolled-passkeys" aria-labelledby="enrolled-passkeys-title">
+      <div class="enrolled-passkeys-header">
+        <h3 id="enrolled-passkeys-title">Enrolled passkeys</h3>
+        <p class="small muted">Passkeys can remain enrolled after a device signs out. Remove credentials you no longer trust.</p>
+        <p class="small muted">A recovery token will be required after sign-out if you remove this device’s passkey.</p>
+      </div>
+      <div id="enrolled-passkeys-status" class="small" role="status" aria-live="polite"></div>
+      <div id="enrolled-passkeys-list" class="enrolled-passkeys-list"></div>
+    </section>
   </section>
 </div>
 
@@ -107,11 +119,23 @@
         </div>
       </li>
     </ol>
+    <section class="device-storage" aria-labelledby="device-storage-heading">
+      <div>
+        <h3 id="device-storage-heading">Private device storage</h3>
+        <p class="small" id="device-storage-summary" role="status" aria-live="polite">Checking private storage…</p>
+        <p class="small muted" id="device-storage-detail"></p>
+      </div>
+      <div class="device-storage-actions">
+        <button id="clear-device-caches" type="button">Clear cached copies</button>
+        <button id="clear-private-device-data" type="button">Clear all private data</button>
+      </div>
+    </section>
     <p id="device-setup-ready-status" class="device-setup-ready" role="status" aria-live="polite"></p>
   </section>
 </div>
 
 <main>
+  <div id="mobile-pull-refresh" class="mobile-pull-refresh" role="status" aria-live="polite" hidden></div>
   <section class="panel my-work" id="my-work" tabindex="-1">
     <div class="my-work-header">
       <div>
@@ -247,6 +271,10 @@
       </div>
       <button id="protect-today" type="button">Protect Today</button>
     </section>
+    <div class="filed-history-tabs" id="filed-history-tabs" role="group" aria-label="Filed outcome view" hidden>
+      <button type="button" data-filed-view="needs-review" aria-pressed="true">Needs review <span id="filed-needs-review-count">0</span></button>
+      <button type="button" data-filed-view="reviewed" aria-pressed="false">Reviewed <span id="filed-reviewed-count">0</span></button>
+    </div>
     <div class="my-work-list" id="my-work-list"></div>
     <div class="small" id="work-page-status" aria-live="polite"></div>
     <button class="load-more-work" id="load-more-work" type="button" hidden>Load older work</button>
@@ -269,6 +297,11 @@
       </div>
     </div>
   </section>
+  <section class="insights-shell" id="insights-sheet" aria-labelledby="insights-heading">
+    <div class="insights-header">
+      <div><h2 id="insights-heading">Insights</h2><p class="small muted">Context, activity, live signals, and workspace tools.</p></div>
+      <button id="close-insights" type="button">Close</button>
+    </div>
   <aside class="sidebar">
     <details class="panel stack" data-panel-key="context" open>
       <summary><h2>Context &amp; view</h2></summary>
@@ -330,6 +363,7 @@
       <div id="md-preview" style="margin-top:8px;"></div>
     </details>
   </aside>
+  </section>
 </main>
 
 <div class="plan-today-sheet" id="plan-today-sheet" role="dialog" aria-modal="true" aria-labelledby="plan-today-title" hidden>
@@ -338,6 +372,12 @@
       <div><h2 id="plan-today-title">Plan Today</h2><p class="small muted">Choose and order the work you want to finish next.</p></div>
       <button id="cancel-plan-today" type="button">Cancel</button>
     </div>
+    <nav class="mobile-plan-today-nav" aria-label="Plan Today sections">
+      <button type="button" data-plan-today-section="fit" aria-current="location">Fit</button>
+      <button type="button" data-plan-today-section="today">Today</button>
+      <button type="button" data-plan-today-section="available">Available</button>
+    </nav>
+    <section id="plan-today-fit" aria-label="Fit today's work">
     <div class="plan-today-capacity" id="plan-today-capacity" role="status" aria-live="polite">0 of 5 selected</div>
     <label class="plan-today-available" for="plan-today-available">Available today
       <span><input id="plan-today-available" type="number" inputmode="numeric" min="15" max="1440" step="15" placeholder="Minutes" /> min</span>
@@ -352,11 +392,12 @@
     <div class="plan-today-skipped" id="plan-today-skipped"></div>
     <div class="small plan-today-error" id="plan-today-error" role="alert"></div>
     <button class="discard-recap-replan" id="discard-recap-replan" type="button" hidden>Discard recap feedback</button>
-    <section aria-labelledby="today-plan-heading">
+    </section>
+    <section id="plan-today-selected" aria-labelledby="today-plan-heading">
       <h3 id="today-plan-heading">Today, in order</h3>
       <div class="plan-today-list" id="plan-today-list"></div>
     </section>
-    <section aria-labelledby="today-candidates-heading">
+    <section id="plan-today-available-work" aria-labelledby="today-candidates-heading">
       <h3 id="today-candidates-heading">Available My Work</h3>
       <div class="plan-today-candidates" id="plan-today-candidates"></div>
     </section>
@@ -395,13 +436,38 @@
       <div id="today-recap-history" class="today-recap-history"></div>
     </section>
     <div class="today-recap-actions">
-      <button id="save-today-recap" type="button">Save recap &amp; adjust plan</button>
+      <button id="save-today-recap" type="button">Save recap &amp; wrap up</button>
       <button id="save-log-today-recap" type="button">Log selected time to Gitea</button>
       <button id="discard-today-recap" type="button">Keep timer &amp; close</button>
     </div>
   </section>
 </div>
 
+<dialog class="today-handoff-dialog" id="today-handoff-dialog" aria-labelledby="today-handoff-title">
+  <section class="today-handoff-panel">
+    <header><div><div class="small">Yesterday’s commitments</div><h2 id="today-handoff-title">Review tomorrow’s plan</h2></div><button id="close-today-handoff" type="button">Not now</button></header>
+    <p class="small muted">Choose the work you still intend to do Today. Unchecked work stays safely in My Work.</p>
+    <div id="today-handoff-status" class="small" role="status" aria-live="polite"></div>
+    <div id="today-handoff-items" class="today-handoff-items"></div>
+    <div class="today-handoff-actions"><button id="confirm-today-handoff" type="button">Add selected to Today</button></div>
+  </section>
+</dialog>
+
+<div class="today-wrap-up-sheet" id="today-wrap-up-sheet" role="dialog" aria-modal="true" aria-labelledby="today-wrap-up-title" hidden>
+  <section class="today-wrap-up-panel">
+    <div class="today-wrap-up-header">
+      <div><div class="small">End your day intentionally</div><h2 id="today-wrap-up-title">Wrap up Today</h2></div>
+      <button id="close-today-wrap-up" type="button">Not now</button>
+    </div>
+    <p class="small muted">Choose unfinished work to schedule for tomorrow at 09:00. Unchecked work stays in Today.</p>
+    <div id="today-wrap-up-status" class="small" role="status" aria-live="polite"></div>
+    <div id="today-wrap-up-items" class="today-wrap-up-items"></div>
+    <div class="today-wrap-up-actions">
+      <button id="finish-today-wrap-up" type="button">Finish wrap-up</button>
+    </div>
+  </section>
+</div>
+
 <div class="today-readiness-sheet" id="today-readiness-sheet" role="dialog" aria-modal="true" aria-labelledby="today-readiness-title" hidden>
   <section class="today-readiness-panel">
     <div class="today-readiness-header">
@@ -529,9 +595,17 @@
       </div>
       <button id="close-search-preview" type="button">Back to search</button>
     </div>
-    <div id="search-preview-status" class="small" aria-live="polite">Choose a search result.</div>
-    <div id="search-preview-meta" class="row"></div>
-    <div id="search-preview-body" class="search-preview-body markdown-content"></div>
+    <nav class="mobile-search-preview-nav" aria-label="Search preview sections">
+      <button type="button" data-search-preview-section="overview">Overview</button>
+      <button type="button" data-search-preview-section="conversation">Conversation</button>
+      <button type="button" data-search-preview-section="reply">Reply</button>
+      <button type="button" data-search-preview-section="actions">Act</button>
+    </nav>
+    <section id="search-preview-overview" class="search-preview-overview">
+      <div id="search-preview-status" class="small" aria-live="polite">Choose a search result.</div>
+      <div id="search-preview-meta" class="row"></div>
+      <div id="search-preview-body" class="search-preview-body markdown-content"></div>
+    </section>
     <section id="search-preview-conversation" class="search-preview-conversation" aria-labelledby="search-preview-conversation-title">
       <h2 id="search-preview-conversation-title">Current conversation</h2>
       <div id="search-preview-comments"></div>
@@ -539,16 +613,53 @@
       <button id="retry-search-preview-conversation" type="button" hidden>Retry conversation</button>
       <button id="load-older-search-preview-comments" type="button" hidden>Load older messages</button>
     </section>
-    <section class="search-preview-reply" aria-labelledby="search-preview-reply-title" hidden>
+    <section class="search-preview-reply" id="search-preview-reply-workspace" aria-labelledby="search-preview-reply-title" hidden>
       <h2 id="search-preview-reply-title">Reply</h2>
       <textarea id="search-preview-reply" maxlength="10000" placeholder="Write a reply"></textarea>
+      <section class="voice-conversation" id="voice-search-reply" aria-label="Dictate search result reply" hidden>
+        <div class="voice-conversation-controls">
+          <button id="start-voice-search-reply" type="button">Dictate reply</button>
+          <button id="stop-voice-search-reply" type="button" hidden>Stop listening</button>
+        </div>
+        <div id="voice-search-reply-status" class="small" aria-live="polite"></div>
+        <div class="voice-conversation-review" id="voice-search-reply-review" hidden>
+          <label for="voice-search-reply-transcript">Review transcript</label>
+          <textarea id="voice-search-reply-transcript" maxlength="10000"></textarea>
+          <div class="voice-conversation-review-actions">
+            <button id="append-voice-search-reply" type="button">Use transcript</button>
+            <button id="replace-with-voice-search-reply" type="button" hidden>Replace draft</button>
+            <button id="discard-voice-search-reply" type="button">Discard</button>
+          </div>
+        </div>
+      </section>
+      <div class="issue-attachment-controls conversation-photo-actions">
+        <label class="issue-attachment-trigger" for="take-search-reply-photo">Take photo</label>
+        <input class="visually-hidden" id="take-search-reply-photo" type="file" accept="image/*" capture="environment" />
+        <label class="issue-attachment-trigger" for="search-reply-attachment">Choose existing</label>
+        <input class="visually-hidden" id="search-reply-attachment" type="file" accept="image/png,image/jpeg,image/webp" multiple />
+      </div>
+      <div class="issue-attachment-preview conversation-evidence-review" id="search-reply-attachment-preview" hidden>
+        <img id="search-reply-attachment-image" alt="Selected reply photo preview" />
+        <span class="small" id="search-reply-attachment-meta"></span>
+        <div class="issue-evidence-tray" id="search-reply-attachment-tray" role="toolbar" aria-label="Search reply photos" hidden></div>
+        <label class="issue-evidence-note" for="search-reply-attachment-note">
+          <span id="search-reply-attachment-note-label">Photo caption (optional)</span>
+          <textarea id="search-reply-attachment-note" maxlength="240" rows="2" disabled placeholder="What does this photo show?"></textarea>
+        </label>
+        <div class="issue-evidence-review-actions" aria-label="Reorder selected photo">
+          <button id="move-search-reply-attachment-earlier" type="button">Move earlier</button>
+          <button id="edit-search-reply-attachment" type="button">Edit photo</button>
+          <button id="remove-search-reply-attachment" type="button">Remove selected</button>
+          <button id="move-search-reply-attachment-later" type="button">Move later</button>
+        </div>
+      </div>
       <div id="search-preview-reply-status" class="small" aria-live="polite"></div>
       <div class="search-preview-reply-actions">
         <button id="send-search-preview-reply" type="button">Send</button>
         <button id="send-search-preview-reply-next" type="button">Send &amp; next</button>
       </div>
     </section>
-    <div class="search-preview-actions">
+    <div class="search-preview-actions" id="search-preview-actions">
       <nav class="search-preview-navigation" aria-label="Search result navigation" hidden>
         <button id="previous-search-result" type="button">Previous</button>
         <span id="search-preview-position" aria-live="polite"></span>
@@ -593,10 +704,51 @@
       </div>
       <button id="close-issue-sheet" type="button">Close sheet</button>
     </div>
+    <nav class="mobile-issue-detail-nav" aria-label="Issue sections">
+      <button type="button" data-issue-section="overview">Overview</button>
+      <button type="button" data-issue-section="conversation">Conversation</button>
+      <button type="button" data-issue-section="reply">Reply</button>
+      <button type="button" data-issue-section="actions">Plan & actions</button>
+    </nav>
     <div id="issue-sheet-status" class="small" aria-live="polite">Choose an issue.</div>
+    <section class="completed-filed-actions" id="completed-filed-actions" aria-label="Completed Filed review" hidden>
+      <span id="completed-filed-progress" role="status" aria-live="polite">Completed Filed issue ready for review.</span>
+      <div class="completed-filed-buttons">
+        <button id="complete-parent-and-acknowledge" type="button" hidden>Complete parent step &amp; acknowledge</button>
+        <button id="acknowledge-completed-filed" type="button">Acknowledge &amp; next</button>
+      </div>
+    </section>
     <button class="issue-retry" id="retry-issue-load" type="button" hidden>Reload latest issue</button>
     <div class="row"><span id="issue-labels"></span><span class="small" id="issue-assignees"></span></div>
-    <div class="issue-sheet-content markdown-content" id="issue-sheet-body"></div>
+    <div id="issue-overview"><div class="issue-sheet-content markdown-content" id="issue-sheet-body"></div></div>
+    <form class="checklist-step-editor" id="checklist-step-editor" aria-label="Manage checklist step" hidden>
+      <label for="checklist-step-label">Checklist step</label>
+      <input id="checklist-step-label" type="text" maxlength="240" autocomplete="off" />
+      <div class="checklist-step-editor-actions">
+        <button id="save-checklist-step-edit" type="submit">Rename</button>
+        <button id="move-checklist-step-earlier" type="button">Move earlier</button>
+        <button id="move-checklist-step-later" type="button">Move later</button>
+        <button id="file-checklist-step-related" type="button">File as related issue</button>
+        <button id="remove-checklist-step" type="button">Remove</button>
+        <button id="cancel-checklist-step-edit" type="button">Cancel</button>
+      </div>
+      <div id="checklist-step-edit-status" class="small" aria-live="assertive"></div>
+    </form>
+    <section class="checklist-add" aria-label="Add checklist step">
+      <button id="open-add-checklist-step" type="button" disabled>Add step</button>
+      <form id="add-checklist-step-form" hidden>
+        <label class="visually-hidden" for="add-checklist-step">Checklist step</label>
+        <input id="add-checklist-step" type="text" maxlength="240" autocomplete="off" placeholder="New checklist step" />
+        <button id="save-checklist-step" type="submit">Add</button>
+        <button id="cancel-checklist-step" type="button">Cancel</button>
+      </form>
+      <div id="add-checklist-step-status" class="small" aria-live="assertive"></div>
+    </section>
+    <section class="checklist-completion" id="checklist-completion" aria-label="Completed checklist" hidden>
+      <span id="checklist-completion-status" role="status" aria-live="polite">Checklist complete</span>
+      <button id="complete-checklist-issue" type="button">Close issue</button>
+      <button id="keep-checklist-issue-open" type="button">Keep open</button>
+    </section>
     <section class="issue-blockers" id="issue-blockers" aria-labelledby="issue-blockers-title" hidden>
       <h2 id="issue-blockers-title">Blocked by</h2>
       <div class="issue-blocker-list" id="issue-blocker-list"></div>
@@ -612,6 +764,7 @@
         <button id="cancel-issue-blocker" type="button">Cancel</button>
       </div>
     </section>
+    <div id="issue-conversation" tabindex="-1"></div>
     <h2>Full conversation</h2>
     <div id="issue-comments"></div>
     <button class="conversation-more" id="load-older-issue-comments" type="button" hidden>Load older messages</button>
@@ -620,16 +773,44 @@
     <section class="issue-comment-composer" aria-labelledby="issue-comment-title">
       <h2 id="issue-comment-title">Add comment</h2>
       <textarea id="issue-comment" maxlength="10000" placeholder="Write a comment"></textarea>
+      <section class="voice-conversation" id="voice-issue-comment" aria-label="Dictate issue comment" hidden>
+        <div class="voice-conversation-controls">
+          <button id="start-voice-issue-comment" type="button">Dictate reply</button>
+          <button id="stop-voice-issue-comment" type="button" hidden>Stop listening</button>
+        </div>
+        <div id="voice-issue-comment-status" class="small" aria-live="polite"></div>
+        <div class="voice-conversation-review" id="voice-issue-comment-review" hidden>
+          <label for="voice-issue-comment-transcript">Review transcript</label>
+          <textarea id="voice-issue-comment-transcript" maxlength="10000"></textarea>
+          <div class="voice-conversation-review-actions">
+            <button id="append-voice-issue-comment" type="button">Use transcript</button>
+            <button id="replace-with-voice-issue-comment" type="button" hidden>Replace draft</button>
+            <button id="discard-voice-issue-comment" type="button">Discard</button>
+          </div>
+        </div>
+      </section>
       <div class="mention-options" id="issue-comment-mentions" role="listbox" aria-label="Teammates" hidden></div>
       <div class="mention-status small" id="issue-comment-mention-status" aria-live="polite"></div>
-      <div class="issue-attachment-controls">
-        <input class="visually-hidden" id="issue-attachment" type="file" accept="image/png,image/jpeg,image/webp" />
-        <label class="issue-attachment-trigger" for="issue-attachment">Attach screenshot</label>
+      <div class="issue-attachment-controls conversation-photo-actions">
+        <label class="issue-attachment-trigger" for="take-issue-comment-photo">Take photo</label>
+        <input class="visually-hidden" id="take-issue-comment-photo" type="file" accept="image/*" capture="environment" />
+        <label class="issue-attachment-trigger" for="issue-attachment">Choose existing</label>
+        <input class="visually-hidden" id="issue-attachment" type="file" accept="image/png,image/jpeg,image/webp" multiple />
       </div>
-      <div class="issue-attachment-preview" id="issue-attachment-preview" hidden>
+      <div class="issue-attachment-preview conversation-evidence-review" id="issue-attachment-preview" hidden>
         <img id="issue-attachment-image" alt="Selected screenshot preview" />
         <span class="small" id="issue-attachment-meta"></span>
-        <button id="remove-issue-attachment" type="button">Remove screenshot</button>
+        <div class="issue-evidence-tray" id="issue-attachment-tray" role="toolbar" aria-label="Comment photos" hidden></div>
+        <label class="issue-evidence-note" for="issue-attachment-note">
+          <span id="issue-attachment-note-label">Photo caption (optional)</span>
+          <textarea id="issue-attachment-note" maxlength="240" rows="2" disabled placeholder="What does this photo show?"></textarea>
+        </label>
+        <div class="issue-evidence-review-actions" aria-label="Reorder selected photo">
+          <button id="move-issue-attachment-earlier" type="button">Move earlier</button>
+          <button id="edit-issue-attachment" type="button">Edit photo</button>
+          <button id="remove-issue-attachment" type="button">Remove selected</button>
+          <button id="move-issue-attachment-later" type="button">Move later</button>
+        </div>
       </div>
       <div class="comment-actions">
         <button id="send-issue-comment" type="button">Post comment</button>
@@ -637,9 +818,7 @@
       </div>
       <div id="issue-comment-status" class="small" aria-live="assertive"></div>
     </section>
-    <details class="issue-planning" id="issue-planning">
-      <summary>Plan &amp; edit</summary>
-      <button class="issue-planning-retry" id="retry-issue-planning" type="button" hidden>Retry planning controls</button>
+    <section class="issue-content-editor" aria-label="Issue content">
       <button id="edit-issue-content" type="button" disabled>Edit issue</button>
       <form class="issue-edit-form" id="issue-edit-form" hidden>
         <label for="issue-edit-title">Title
@@ -654,6 +833,10 @@
         </div>
         <div id="issue-edit-status" class="small" aria-live="assertive"></div>
       </form>
+    </section>
+    <details class="issue-planning" id="issue-planning">
+      <summary>Plan &amp; edit</summary>
+      <button class="issue-planning-retry" id="retry-issue-planning" type="button" hidden>Retry planning controls</button>
       <fieldset class="issue-label-editor" id="issue-label-editor" aria-describedby="issue-label-status">
         <legend>Labels</legend>
         <div class="issue-label-list" id="issue-label-list"></div>
@@ -679,7 +862,7 @@
       </fieldset>
     </details>
     <details class="issue-handoff" id="issue-handoff">
-      <summary>Hand off to teammate</summary>
+      <summary id="issue-handoff-summary">Hand off to teammate</summary>
       <div>
         <button id="load-issue-handoff" type="button">Choose teammate</button>
         <label for="issue-handoff-recipient" class="small">Eligible repository assignee</label>
@@ -688,6 +871,10 @@
         <div id="issue-handoff-status" class="small" aria-live="assertive">Load teammates to transfer ownership.</div>
       </div>
     </details>
+    <section class="filed-claim-actions" id="filed-claim-actions" aria-label="Take ownership of filed issue" hidden>
+      <button id="queue-filed-issue" type="button">Queue Today</button>
+      <button id="start-filed-issue" type="button">Claim &amp; start</button>
+    </section>
     <div class="issue-sheet-actions">
       <button class="share-work-route" type="button">Share</button>
       <button id="release-issue" type="button">Release assignment</button>
@@ -711,42 +898,60 @@
       <div><div class="small">Open · unassigned</div><h3 id="find-work-heading">Find work</h3></div>
       <div class="find-work-header-actions"><button id="select-find-work" type="button">Select work</button><button id="close-find-work" type="button">Close</button></div>
     </div>
-    <p class="small">Claim an available issue and continue it in My Work.</p>
-    <form class="find-work-search" id="find-work-search-form" role="search">
-      <label for="find-work-search">Search repository, #number, or title</label>
-      <div><input id="find-work-search" type="search" maxlength="100" autocomplete="off" />
-      <button id="clear-find-work-search" type="button" hidden>Clear</button></div>
-      <span id="find-work-match-status" class="small" aria-live="polite"></span>
-    </form>
-    <details class="find-work-filters" id="find-work-filters">
-      <summary>Filter work <span id="find-work-filter-count" class="small"></span></summary>
-      <div class="find-work-filter-panel" aria-label="Filter available work">
-        <fieldset><legend>Repositories</legend><div id="find-work-repository-filters" class="find-work-filter-options"></div></fieldset>
-        <fieldset><legend>Labels</legend><div id="find-work-label-filters" class="find-work-filter-options"></div></fieldset>
-        <button id="clear-find-work-filters" type="button">Clear filters</button>
-      </div>
-    </details>
-    <button class="fill-find-work-today" id="fill-find-work-today" type="button"
-      aria-describedby="find-work-selection-status">Fill remaining Today slots</button>
-    <div id="find-work-status" class="small" aria-live="assertive">Open Find Work to load available issues.</div>
-    <button class="find-work-batch-recovery" id="resume-find-work-batch" type="button"
-      aria-describedby="find-work-status" hidden>Resume assigning &amp; queueing</button>
-    <div class="find-work-list" id="find-work-list"></div>
-    <button class="find-work-more" id="load-more-available" type="button" hidden>Load more available issues</button>
-    <section class="find-work-estimate-review" id="find-work-estimate-review" aria-labelledby="find-work-estimate-heading" hidden>
-      <div><strong id="find-work-estimate-heading">Fit this work into Today</strong>
-        <span class="small" id="find-work-estimate-summary" aria-live="polite"></span></div>
-      <div id="find-work-estimate-list"></div>
-      <div class="find-work-estimate-actions">
-        <button id="cancel-find-work-estimates" type="button">Back</button>
-        <button id="confirm-find-work-estimates" type="button">Confirm &amp; assign</button>
+    <p class="small">Choose available issues, review the batch, then fit it into Today.</p>
+    <nav class="mobile-find-work-nav" aria-label="Find Work steps">
+      <button type="button" data-find-work-stage="discover">Discover</button>
+      <button type="button" data-find-work-stage="review" disabled>Review</button>
+      <button type="button" data-find-work-stage="fit" disabled>Fit &amp; assign</button>
+    </nav>
+    <section class="find-work-stage" id="find-work-discover-stage" tabindex="-1" aria-labelledby="find-work-heading">
+      <form class="find-work-search" id="find-work-search-form" role="search">
+        <label for="find-work-search">Search repository, #number, or title</label>
+        <div><input id="find-work-search" type="search" maxlength="100" autocomplete="off" />
+        <button id="clear-find-work-search" type="button" hidden>Clear</button></div>
+        <span id="find-work-match-status" class="small" aria-live="polite"></span>
+      </form>
+      <details class="find-work-filters" id="find-work-filters">
+        <summary>Filter work <span id="find-work-filter-count" class="small"></span></summary>
+        <div class="find-work-filter-panel" aria-label="Filter available work">
+          <fieldset><legend>Repositories</legend><div id="find-work-repository-filters" class="find-work-filter-options"></div></fieldset>
+          <fieldset><legend>Labels</legend><div id="find-work-label-filters" class="find-work-filter-options"></div></fieldset>
+          <button id="clear-find-work-filters" type="button">Clear filters</button>
+        </div>
+      </details>
+      <button class="fill-find-work-today" id="fill-find-work-today" type="button"
+        aria-describedby="find-work-selection-status">Fill remaining Today slots</button>
+      <div id="find-work-status" class="small" aria-live="assertive">Open Find Work to load available issues.</div>
+      <button class="find-work-batch-recovery" id="resume-find-work-batch" type="button"
+        aria-describedby="find-work-status" hidden>Resume assigning &amp; queueing</button>
+      <div class="find-work-list" id="find-work-list"></div>
+      <button class="find-work-more" id="load-more-available" type="button" hidden>Load more available issues</button>
+      <div class="find-work-batch-actions" id="batch-find-work-actions" hidden>
+        <span id="find-work-selection-status" class="small" aria-live="polite">No work selected.</span>
+        <button id="cancel-find-work-selection" type="button">Cancel</button>
+        <button id="claim-selected-work" type="button" disabled>Review selected</button>
+      </div>
+    </section>
+    <section class="find-work-stage find-work-review" id="find-work-review-stage" tabindex="-1" aria-labelledby="find-work-review-heading" hidden>
+      <div><strong id="find-work-review-heading">Review selected work</strong>
+        <span class="small" id="find-work-review-summary" aria-live="polite"></span></div>
+      <div class="find-work-review-list" id="find-work-review-list"></div>
+      <div class="find-work-stage-actions">
+        <button id="back-find-work-discover" type="button">Back to discover</button>
+        <button id="continue-find-work-fit" type="button">Continue</button>
+      </div>
+    </section>
+    <section class="find-work-stage" id="find-work-fit-stage" tabindex="-1" aria-labelledby="find-work-estimate-heading" hidden>
+      <div class="find-work-estimate-review" id="find-work-estimate-review">
+        <div><strong id="find-work-estimate-heading">Fit this work into Today</strong>
+          <span class="small" id="find-work-estimate-summary" aria-live="polite"></span></div>
+        <div id="find-work-estimate-list"></div>
+        <div class="find-work-estimate-actions">
+          <button id="cancel-find-work-estimates" type="button">Back to review</button>
+          <button id="confirm-find-work-estimates" type="button">Confirm &amp; assign</button>
+        </div>
       </div>
     </section>
-    <div class="find-work-batch-actions" id="batch-find-work-actions" hidden>
-      <span id="find-work-selection-status" class="small" aria-live="polite">No work selected.</span>
-      <button id="cancel-find-work-selection" type="button">Cancel</button>
-      <button id="claim-selected-work" type="button" disabled>Assign &amp; queue Today</button>
-    </div>
   </section>
 </div>
 
@@ -756,6 +961,11 @@
       <h3 id="create-issue-heading">Capture work</h3>
       <button id="cancel-new-issue" type="button">Cancel</button>
     </div>
+    <nav class="mobile-create-issue-nav" aria-label="New issue sections">
+      <button type="button" data-create-issue-section="describe">Describe</button>
+      <button type="button" data-create-issue-section="evidence">Evidence</button>
+      <button type="button" data-create-issue-section="file">File</button>
+    </nav>
     <aside class="shared-content-conflict" id="shared-content-conflict" aria-live="assertive" hidden>
       <strong>You already have an unfinished issue draft.</strong>
       <span class="small">Resume it, or replace its title and description with the content shared to Stackchain.</span>
@@ -765,26 +975,51 @@
       </div>
     </aside>
     <form class="create-issue-form" id="create-issue-form">
+      <section class="create-issue-describe" id="create-issue-describe">
       <label for="create-issue-title">Title
         <input id="create-issue-title" type="text" maxlength="255" required autocomplete="off" />
       </label>
       <label for="create-issue-body">Note <span class="small">Optional</span>
         <textarea id="create-issue-body" maxlength="10000"></textarea>
       </label>
+      <section class="voice-issue-capture" id="voice-issue-capture" aria-labelledby="voice-issue-heading" hidden>
+        <div class="voice-issue-heading">
+          <strong id="voice-issue-heading">Speak capture</strong>
+          <span class="small">Your browser transcribes speech. Stackchain does not retain audio.</span>
+        </div>
+        <div class="voice-issue-controls">
+          <button id="start-voice-issue-capture" type="button">Speak capture</button>
+          <button id="stop-voice-issue-capture" type="button" hidden>Stop listening</button>
+        </div>
+        <div id="voice-issue-status" class="small" aria-live="polite"></div>
+        <div class="voice-issue-review" id="voice-issue-review" hidden>
+          <label for="voice-issue-transcript">Review transcript
+            <textarea id="voice-issue-transcript" maxlength="10255"></textarea>
+          </label>
+          <div class="voice-issue-review-actions">
+            <button id="append-voice-issue-transcript" type="button">Append to draft</button>
+            <button id="replace-with-voice-issue-transcript" type="button">Replace draft</button>
+            <button id="discard-voice-issue-transcript" type="button" class="secondary">Discard transcript</button>
+          </div>
+        </div>
+      </section>
       <div class="create-issue-capture-actions">
         <button id="save-unfiled-issue" type="button">Save to Drafts</button>
         <button id="file-new-issue" type="button">File now</button>
       </div>
-      <section class="create-issue-attachment" aria-labelledby="create-issue-attachment-label">
-        <strong id="create-issue-attachment-label">Evidence screenshots <span class="small">Optional · Up to 5 · PNG, JPEG, or WebP · 2 MB each</span></strong>
-        <div class="issue-attachment-controls">
-          <label class="issue-attachment-trigger" for="create-issue-attachment">Add screenshots</label>
+      </section>
+      <section class="create-issue-attachment" id="create-issue-evidence" aria-labelledby="create-issue-attachment-label">
+        <strong id="create-issue-attachment-label">Photo evidence <span class="small">Optional · Up to 5 · PNG, JPEG, or WebP · 2 MB each</span></strong>
+        <div class="issue-attachment-controls photo-evidence-actions">
+          <label class="issue-attachment-trigger" for="take-create-issue-photo">Take photo</label>
+          <input class="visually-hidden" id="take-create-issue-photo" type="file" accept="image/*" capture="environment" />
+          <label class="issue-attachment-trigger" for="create-issue-attachment">Choose existing</label>
           <input class="visually-hidden" id="create-issue-attachment" type="file" accept="image/png,image/jpeg,image/webp" multiple />
         </div>
         <div class="issue-attachment-preview" id="create-issue-attachment-preview" hidden>
           <img id="create-issue-attachment-image" alt="Selected screenshot preview" />
           <span class="small" id="create-issue-attachment-meta"></span>
-          <div class="issue-evidence-tray" id="create-issue-evidence-tray" role="toolbar" aria-label="Evidence screenshots" hidden></div>
+          <div class="issue-evidence-tray" id="create-issue-evidence-tray" role="toolbar" aria-label="Photo evidence" hidden></div>
           <label class="issue-evidence-note" for="create-issue-evidence-note">
             <span id="create-issue-evidence-note-label">Evidence note (optional)</span>
             <textarea id="create-issue-evidence-note" maxlength="240" rows="2" disabled placeholder="What does this screenshot show?"></textarea>
@@ -875,10 +1110,11 @@
       <div id="create-issue-capture-status" class="small" aria-live="assertive"></div>
     </form>
   </section>
-  <section class="issue-evidence-editor" id="issue-evidence-editor" role="dialog" aria-modal="true" aria-labelledby="issue-evidence-editor-heading" hidden>
+</div>
+<section class="issue-evidence-editor" id="issue-evidence-editor" role="dialog" aria-modal="true" aria-labelledby="issue-evidence-editor-heading" hidden>
     <div class="issue-evidence-editor-panel">
       <header>
-        <div><h3 id="issue-evidence-editor-heading">Edit screenshot evidence</h3><span class="small">Edits stay on this device until you file.</span></div>
+        <div><h3 id="issue-evidence-editor-heading">Edit selected photo</h3><span class="small">Edits stay on this device until you send or file.</span></div>
         <button id="cancel-issue-evidence-edit" type="button">Cancel</button>
       </header>
       <canvas id="issue-evidence-editor-canvas" role="img" aria-label="Screenshot editing canvas. Drag to crop, redact, highlight, or point with an arrow."></canvas>
@@ -895,7 +1131,6 @@
       <button class="issue-evidence-editor-apply" id="apply-issue-evidence-edit" type="button">Apply flattened edit</button>
     </div>
   </section>
-</div>
 
 <section class="issue-filing-review" id="issue-filing-review" role="dialog" aria-modal="true" aria-labelledby="issue-filing-review-heading" hidden>
   <div class="issue-filing-review-panel">
@@ -958,6 +1193,12 @@
       </div>
     </div>
     <div id="update-triage-progress" class="update-triage-progress small" aria-live="polite" hidden></div>
+    <nav class="mobile-update-detail-nav" aria-label="Update sections">
+      <button type="button" data-update-section="activity">New activity</button>
+      <button type="button" data-update-section="conversation">Conversation</button>
+      <button type="button" data-update-section="context">Subject context</button>
+      <button type="button" data-update-section="reply">Reply</button>
+    </nav>
     <div id="update-gesture-status" class="update-gesture-status small" aria-live="polite">Swipe right to keep unread or left to mark read. Buttons remain available.</div>
     <div id="update-sheet-status" class="small" aria-live="polite">Choose an update.</div>
     <button class="update-retry" id="retry-update-load" type="button" hidden>Retry loading update</button>
@@ -965,31 +1206,61 @@
       <span class="pill" id="update-subject-type">Update</span>
       <span class="pill" id="update-subject-state"></span>
     </div>
-    <h2>Full conversation</h2>
-    <div id="update-comments"></div>
-    <button class="update-new-activity-jump" id="jump-update-new-activity" type="button" hidden>Jump to new activity</button>
-    <button class="conversation-more" id="load-older-update-comments" type="button" hidden>Load older messages</button>
-    <div id="update-conversation-status" class="small" aria-live="assertive"></div>
-    <button class="update-retry" id="retry-update-conversation" type="button" hidden>Retry conversation</button>
-    <button class="conversation-actions-retry" id="retry-update-comment-actions" type="button" hidden>Retry comment tools</button>
-    <details>
+    <section id="update-conversation" tabindex="-1">
+      <h2>Full conversation</h2>
+      <div id="update-comments"></div>
+      <button class="update-new-activity-jump" id="jump-update-new-activity" type="button" hidden>Jump to new activity</button>
+      <button class="conversation-more" id="load-older-update-comments" type="button" hidden>Load older messages</button>
+      <div id="update-conversation-status" class="small" aria-live="assertive"></div>
+      <button class="update-retry" id="retry-update-conversation" type="button" hidden>Retry conversation</button>
+      <button class="conversation-actions-retry" id="retry-update-comment-actions" type="button" hidden>Retry comment tools</button>
+    </section>
+    <details id="update-subject-context">
       <summary><h2>Subject context</h2></summary>
       <div class="update-sheet-content muted markdown-content" id="update-subject-body"></div>
     </details>
-    <section class="update-reply" aria-labelledby="update-reply-title">
+    <section class="update-reply" id="update-reply-workspace" aria-labelledby="update-reply-title">
       <h2 id="update-reply-title">Reply</h2>
       <label for="update-reply" class="small">Continue this issue or pull-request conversation</label>
       <textarea id="update-reply" maxlength="10000" placeholder="Write a reply"></textarea>
+      <section class="voice-conversation" id="voice-update-reply" aria-label="Dictate update reply" hidden>
+        <div class="voice-conversation-controls">
+          <button id="start-voice-update-reply" type="button">Dictate reply</button>
+          <button id="stop-voice-update-reply" type="button" hidden>Stop listening</button>
+        </div>
+        <div id="voice-update-reply-status" class="small" aria-live="polite"></div>
+        <div class="voice-conversation-review" id="voice-update-reply-review" hidden>
+          <label for="voice-update-reply-transcript">Review transcript</label>
+          <textarea id="voice-update-reply-transcript" maxlength="10000"></textarea>
+          <div class="voice-conversation-review-actions">
+            <button id="append-voice-update-reply" type="button">Use transcript</button>
+            <button id="replace-with-voice-update-reply" type="button" hidden>Replace draft</button>
+            <button id="discard-voice-update-reply" type="button">Discard</button>
+          </div>
+        </div>
+      </section>
       <div class="mention-options" id="update-reply-mentions" role="listbox" aria-label="Teammates" hidden></div>
       <div class="mention-status small" id="update-reply-mention-status" aria-live="polite"></div>
-      <div class="issue-attachment-controls">
-        <input class="visually-hidden" id="update-reply-attachment" type="file" accept="image/png,image/jpeg,image/webp" />
-        <label class="issue-attachment-trigger" for="update-reply-attachment">Attach screenshot</label>
+      <div class="issue-attachment-controls conversation-photo-actions">
+        <label class="issue-attachment-trigger" for="take-update-reply-photo">Take photo</label>
+        <input class="visually-hidden" id="take-update-reply-photo" type="file" accept="image/*" capture="environment" />
+        <label class="issue-attachment-trigger" for="update-reply-attachment">Choose existing</label>
+        <input class="visually-hidden" id="update-reply-attachment" type="file" accept="image/png,image/jpeg,image/webp" multiple />
       </div>
-      <div class="issue-attachment-preview" id="update-reply-attachment-preview" hidden>
+      <div class="issue-attachment-preview conversation-evidence-review" id="update-reply-attachment-preview" hidden>
         <img id="update-reply-attachment-image" alt="Selected screenshot preview" />
         <span class="small" id="update-reply-attachment-meta"></span>
-        <button id="remove-update-reply-attachment" type="button">Remove screenshot</button>
+        <div class="issue-evidence-tray" id="update-reply-attachment-tray" role="toolbar" aria-label="Reply photos" hidden></div>
+        <label class="issue-evidence-note" for="update-reply-attachment-note">
+          <span id="update-reply-attachment-note-label">Photo caption (optional)</span>
+          <textarea id="update-reply-attachment-note" maxlength="240" rows="2" disabled placeholder="What does this photo show?"></textarea>
+        </label>
+        <div class="issue-evidence-review-actions" aria-label="Reorder selected photo">
+          <button id="move-update-reply-attachment-earlier" type="button">Move earlier</button>
+          <button id="edit-update-reply-attachment" type="button">Edit photo</button>
+          <button id="remove-update-reply-attachment" type="button">Remove selected</button>
+          <button id="move-update-reply-attachment-later" type="button">Move later</button>
+        </div>
       </div>
       <div class="update-reply-actions">
         <button id="send-update-reply" type="button">Send reply</button>
@@ -1040,26 +1311,64 @@
       <div><div class="small" id="pull-sheet-key"></div><h3 id="pull-sheet-title">Assigned pull request</h3></div>
       <button id="close-pull-sheet" type="button">Close</button>
     </div>
-    <div id="pull-sheet-status" class="small" aria-live="polite">Choose a pull request.</div>
-    <button class="pull-retry" id="retry-pull-load" type="button" hidden>Retry loading pull request</button>
-    <div class="pull-sheet-content markdown-content" id="pull-sheet-body"></div>
-    <h2>Full conversation</h2><div id="pull-comments"></div>
-    <button class="conversation-more" id="load-older-pull-comments" type="button" hidden>Load older messages</button>
-    <div id="pull-conversation-status" class="small" aria-live="assertive"></div>
-    <button class="conversation-actions-retry" id="retry-pull-comment-actions" type="button" hidden>Retry comment tools</button>
+    <nav class="mobile-detail-nav mobile-pull-detail-nav" aria-label="Pull request sections">
+      <button type="button" data-pull-section="overview">Overview</button>
+      <button type="button" data-pull-section="conversation">Conversation</button>
+      <button type="button" data-pull-section="reply">Reply</button>
+      <button type="button" data-pull-section="review">Review &amp; merge</button>
+    </nav>
+    <div id="pull-overview">
+      <div id="pull-sheet-status" class="small" aria-live="polite">Choose a pull request.</div>
+      <button class="pull-retry" id="retry-pull-load" type="button" hidden>Retry loading pull request</button>
+      <div class="pull-sheet-content markdown-content" id="pull-sheet-body"></div>
+    </div>
+    <section id="pull-conversation" tabindex="-1">
+      <h2>Full conversation</h2><div id="pull-comments"></div>
+      <button class="conversation-more" id="load-older-pull-comments" type="button" hidden>Load older messages</button>
+      <div id="pull-conversation-status" class="small" aria-live="assertive"></div>
+      <button class="conversation-actions-retry" id="retry-pull-comment-actions" type="button" hidden>Retry comment tools</button>
+    </section>
     <section class="pull-comment-composer" aria-labelledby="pull-comment-title">
       <h2 id="pull-comment-title">Add comment</h2>
       <textarea id="pull-comment" maxlength="10000" placeholder="Write a comment"></textarea>
+      <section class="voice-conversation" id="voice-pull-comment" aria-label="Dictate pull-request comment" hidden>
+        <div class="voice-conversation-controls">
+          <button id="start-voice-pull-comment" type="button">Dictate reply</button>
+          <button id="stop-voice-pull-comment" type="button" hidden>Stop listening</button>
+        </div>
+        <div id="voice-pull-comment-status" class="small" aria-live="polite"></div>
+        <div class="voice-conversation-review" id="voice-pull-comment-review" hidden>
+          <label for="voice-pull-comment-transcript">Review transcript</label>
+          <textarea id="voice-pull-comment-transcript" maxlength="10000"></textarea>
+          <div class="voice-conversation-review-actions">
+            <button id="append-voice-pull-comment" type="button">Use transcript</button>
+            <button id="replace-with-voice-pull-comment" type="button" hidden>Replace draft</button>
+            <button id="discard-voice-pull-comment" type="button">Discard</button>
+          </div>
+        </div>
+      </section>
       <div class="mention-options" id="pull-comment-mentions" role="listbox" aria-label="Teammates" hidden></div>
       <div class="mention-status small" id="pull-comment-mention-status" aria-live="polite"></div>
-      <div class="issue-attachment-controls">
-        <input class="visually-hidden" id="pull-attachment" type="file" accept="image/png,image/jpeg,image/webp" />
-        <label class="issue-attachment-trigger" for="pull-attachment">Attach screenshot</label>
+      <div class="issue-attachment-controls conversation-photo-actions">
+        <label class="issue-attachment-trigger" for="take-pull-comment-photo">Take photo</label>
+        <input class="visually-hidden" id="take-pull-comment-photo" type="file" accept="image/*" capture="environment" />
+        <label class="issue-attachment-trigger" for="pull-attachment">Choose existing</label>
+        <input class="visually-hidden" id="pull-attachment" type="file" accept="image/png,image/jpeg,image/webp" multiple />
       </div>
-      <div class="issue-attachment-preview" id="pull-attachment-preview" hidden>
+      <div class="issue-attachment-preview conversation-evidence-review" id="pull-attachment-preview" hidden>
         <img id="pull-attachment-image" alt="Selected screenshot preview" />
         <span class="small" id="pull-attachment-meta"></span>
-        <button id="remove-pull-attachment" type="button">Remove screenshot</button>
+        <div class="issue-evidence-tray" id="pull-attachment-tray" role="toolbar" aria-label="Pull-request comment photos" hidden></div>
+        <label class="issue-evidence-note" for="pull-attachment-note">
+          <span id="pull-attachment-note-label">Photo caption (optional)</span>
+          <textarea id="pull-attachment-note" maxlength="240" rows="2" disabled placeholder="What does this photo show?"></textarea>
+        </label>
+        <div class="issue-evidence-review-actions" aria-label="Reorder selected photo">
+          <button id="move-pull-attachment-earlier" type="button">Move earlier</button>
+          <button id="edit-pull-attachment" type="button">Edit photo</button>
+          <button id="remove-pull-attachment" type="button">Remove selected</button>
+          <button id="move-pull-attachment-later" type="button">Move later</button>
+        </div>
       </div>
       <div class="comment-actions">
         <button id="send-pull-comment" type="button">Post comment</button>
@@ -1116,6 +1425,13 @@
       </div>
       <button class="review-action" id="close-review-sheet">Close</button>
     </div>
+    <nav class="mobile-review-detail-nav" aria-label="Review sections">
+      <button type="button" data-review-section="overview">Overview</button>
+      <button type="button" data-review-section="files">Files</button>
+      <button type="button" data-review-section="feedback">Feedback</button>
+      <button type="button" data-review-section="history">History</button>
+    </nav>
+    <section id="review-overview">
     <div id="review-sheet-status" class="small" aria-live="polite">Choose a review request.</div>
     <button class="review-retry" id="retry-review-load" hidden>Retry loading review</button>
     <div class="review-sheet-body markdown-content" id="review-sheet-body"></div>
@@ -1125,6 +1441,8 @@
       <button class="ci-check-refresh" id="refresh-review-checks" type="button">Refresh checks</button>
       <div class="ci-check-list" id="review-check-list"></div>
     </details>
+    </section>
+    <section id="review-files-workspace">
     <h2>Changed files</h2>
     <div class="review-display-tools">
       <button id="review-wrap-lines" type="button" aria-pressed="false" aria-controls="review-files">Wrap lines</button>
@@ -1145,7 +1463,8 @@
       <span class="small" id="review-progress" aria-live="polite">0 of 0 files reviewed</span>
       <button id="next-unreviewed-review" disabled>Next unreviewed</button>
     </div>
-    <section class="review-feedback" aria-labelledby="review-feedback-title">
+    </section>
+    <section class="review-feedback" id="review-feedback" aria-labelledby="review-feedback-title">
       <h2 id="review-feedback-title">Draft feedback</h2>
       <label>Intended decision
         <select id="review-decision">
@@ -1169,8 +1488,10 @@
         <button id="continue-review-to-merge" type="button" hidden>Continue to merge</button>
       </div>
     </section>
+    <section id="review-history-workspace">
     <h2>Review history</h2>
     <div id="review-history" class="muted"></div>
+    </section>
     <div class="review-sheet-actions"><details class="detail-defer"><summary>Defer</summary><div class="detail-defer-options"><button type="button" data-detail-defer-preset="today" disabled data-planning-disabled>Later today</button><button type="button" data-detail-defer-preset="tomorrow" disabled data-planning-disabled>Tomorrow</button><button type="button" data-detail-defer-custom disabled data-planning-disabled>Choose date &amp; time</button><button type="button" data-detail-defer-cancel>Cancel</button></div></details></div>
     <nav class="work-session-nav" aria-label="Work session" hidden>
       <span class="small" aria-live="polite" data-work-session-progress></span>
@@ -1209,9 +1530,19 @@
       <button id="review-kept-updates" type="button" hidden>Review kept unread</button>
     </div>
     <p class="small muted">Choose what to work through next.</p>
+    <section class="mobile-start-day" aria-labelledby="mobile-start-day-heading">
+      <div>
+        <h3 id="mobile-start-day-heading">Prepare Today</h3>
+        <p id="mobile-start-day-summary" class="small" aria-live="polite">Reviewing urgent queues…</p>
+        <p id="mobile-start-day-phases" class="small muted">Checking Agenda, Attention, Updates, and Filed</p>
+      </div>
+      <button class="mobile-start-day-action" id="mobile-start-day-action" type="button">Prepare Today</button>
+      <button class="mobile-start-day-finish" id="finish-mobile-start-day" type="button" hidden>Finish for now</button>
+    </section>
     <div class="mobile-queue-list">
       <button data-mobile-queue="today" type="button"><span><strong>Today</strong><small>Planned work</small></span><span data-mobile-queue-count="today">0</span></button>
       <button data-mobile-queue="agenda" type="button"><span><strong>Agenda</strong><small>Upcoming deadlines</small></span><span data-mobile-queue-count="agenda">0</span></button>
+      <button data-mobile-queue="delivery" type="button"><span><strong>Delivery</strong><small>Needs recovery</small></span><span data-mobile-queue-count="delivery">0</span></button>
       <button data-mobile-queue="attention" type="button"><span><strong>Attention</strong><small>Needs a response</small></span><span data-mobile-queue-count="attention">0</span></button>
       <button data-mobile-queue="update" type="button" aria-label="Updates, 0 unread conversations"><span><strong>Updates</strong><small>Unread conversations</small></span><span data-mobile-queue-count="update">0</span></button>
       <button data-mobile-queue="filed" type="button"><span><strong>Filed</strong><small>Issues you delegated</small></span><span data-mobile-queue-count="filed">0</span></button>
@@ -1223,6 +1554,20 @@
   </section>
 </dialog>
 
+<dialog id="mobile-delivery-recovery" class="mobile-delivery-recovery" aria-labelledby="mobile-delivery-recovery-title">
+  <section class="mobile-delivery-recovery-panel">
+    <header>
+      <div><p class="small muted" id="mobile-delivery-recovery-progress"></p><h2 id="mobile-delivery-recovery-title">Recover delivery</h2></div>
+      <button id="close-mobile-delivery-recovery" type="button">Close</button>
+    </header>
+    <p id="mobile-delivery-recovery-destination" class="small"></p>
+    <p id="mobile-delivery-recovery-reason" class="delivery-recovery-reason"></p>
+    <p id="mobile-delivery-recovery-status" class="small" role="status" aria-live="polite"></p>
+    <button id="mobile-delivery-recovery-action" type="button">Recover delivery</button>
+    <details><summary>Other recovery options</summary><p class="small muted">Close this guide to edit, copy, or discard the saved delivery from Drafts.</p></details>
+  </section>
+</dialog>
+
 <nav class="mobile-task-dock" id="mobile-task-dock" aria-label="Primary tasks">
   <button class="mobile-task-action" data-mobile-task="work" type="button" aria-current="page"><span id="mobile-work-label">Work</span></button>
   <button class="mobile-task-action" data-mobile-task="find" type="button">Find</button>
@@ -1233,6 +1578,7 @@
 
 <div class="footer">Creative AI-imbued UI • stackchain-dashboard</div>
 
+<script src="static/private-data-registry.js"></script>
 <script src="static/session.js"></script>
 <script src="static/feature-loader.js"></script>
 <script src="static/conversation-action-hydrator.js"></script>
@@ -1241,6 +1587,9 @@
 <script src="static/commands.js"></script>
 <script src="static/saved-searches.js"></script>
 <script src="static/search-preview.js"></script>
+<script src="static/search-reply-draft-store.js"></script>
+<script src="static/conversation-reply-draft-store.js"></script>
+<script src="static/conversation-photo-drafts.js"></script>
 <script src="static/search-defer.js"></script>
 <script src="static/widgets.js"></script>
 <script src="static/drafts.js"></script>
@@ -1252,6 +1601,7 @@
 <script src="static/outbox-coordinator.js"></script>
 <script src="static/background-issue-sync.js"></script>
 <script src="static/issue-outbox.js"></script>
+<script src="static/reconnect-outboxes.js"></script>
 <script src="static/authored-outbox.js"></script>
 <script src="static/offline-issue-close.js"></script>
 <script src="static/offline-issue-blocker.js"></script>
@@ -1267,6 +1617,8 @@
 <script src="static/today-work.js"></script>
 <script src="static/today-timer.js"></script>
 <script src="static/today-recap.js"></script>
+<script src="static/today-wrap-up.js"></script>
+<script src="static/today-handoff.js"></script>
 <script src="static/today-completion.js"></script>
 <script src="static/today-readiness.js"></script>
 <script src="static/comment-next.js"></script>
@@ -1293,9 +1645,14 @@
 <script src="static/issue-attachment.js"></script>
 <script src="static/issue-filing-review.js"></script>
 <script src="static/issue-sheet.js"></script>
+<script src="static/voice-transcript-store.js"></script>
+<script src="static/voice-issue-capture.js"></script>
+<script src="static/voice-conversation-capture.js"></script>
 <script src="static/create-issue-sheet.js"></script>
+<script src="static/mobile-create-issue-nav.js"></script>
 <script src="static/create-and-start.js"></script>
 <script src="static/assign-and-start.js"></script>
+<script src="static/filed-claim.js"></script>
 <script src="static/queue-today.js"></script>
 <script src="static/pull-sheet.js"></script>
 <script src="static/review-sheet.js"></script>
@@ -1304,8 +1661,11 @@
 <script src="static/context-poller.js"></script>
 <script src="static/live-data-status.js"></script>
 <script src="static/mobile-task-dock.js"></script>
+<script src="static/mobile-pull-refresh.js"></script>
 <script src="static/mobile-work-entry.js"></script>
 <script src="static/mobile-queue-launcher.js"></script>
+<script src="static/mobile-delivery-recovery.js"></script>
+<script src="static/mobile-start-day.js"></script>
 <script src="static/update-triage-session.js"></script>
 <script src="static/update-review-handoff.js"></script>
 <script src="static/update-read-position.js"></script>
@@ -1315,14 +1675,25 @@
 <script src="static/update-decision-transaction.js"></script>
 <script src="static/agenda-session-launcher.js"></script>
 <script src="static/mobile-launch.js"></script>
+<script src="static/mobile-insights.js"></script>
 <script src="static/mobile-app-shortcuts.js"></script>
 <script src="static/install-app.js"></script>
+<script src="static/private-data-inventory.js"></script>
+<script src="static/private-device-data.js"></script>
+<script src="static/device-storage.js"></script>
 <script src="static/mobile-device-setup.js"></script>
 <script src="static/mobile-search-viewport.js"></script>
 <script src="static/mobile-composer-viewport.js"></script>
 <script src="static/mention-composer.js"></script>
 <script src="static/push-notifications.js"></script>
 <script src="static/issue-filing-receipt.js"></script>
+<script src="static/mobile-issue-detail-nav.js"></script>
+<script src="static/mobile-update-detail-nav.js"></script>
+<script src="static/mobile-review-detail-nav.js"></script>
+<script src="static/mobile-search-preview-nav.js"></script>
+<script src="static/mobile-plan-today-nav.js"></script>
+<script src="static/mobile-find-work-nav.js"></script>
+<script src="static/workspace-bootstrap.js"></script>
 <script src="static/dashboard.js"></script>
 </body>
 </html>

frontend/issue-attachment.js

@@ -41,6 +41,7 @@
     const maxFiles = options.maxFiles === MAX_FILES ? MAX_FILES : 1;
     const inspectPixels = options.inspectPixels === true;
     const optimizeSelectedImage = options.optimizeImage || optimizeImage;
+    const onCheckpoint = options.onCheckpoint;
     const createOperationId = options.createOperationId || (() => {
       if (typeof globalThis !== 'undefined' && globalThis.crypto?.randomUUID) {
         return globalThis.crypto.randomUUID();
@@ -49,6 +50,13 @@
     });
     let selected = [];
     let selectionGeneration = 0;
+    let restoring = false;
+
+    function changed() {
+      if (!restoring && typeof onCheckpoint === 'function') {
+        Promise.resolve().then(onCheckpoint).catch(() => { /* Caller surfaces durable-storage failures. */ });
+      }
+    }
 
     function commitSelection(file) {
       if (!file || !IMAGE_TYPES.has(file.type) || !Number.isFinite(file.size) ||
@@ -60,6 +68,7 @@
         else throw new Error(MAX_FILES_MESSAGE);
       }
       selected.push({file, note:'', confirmed:null, serialized:null, operationId:createOperationId()});
+      changed();
       return state();
     }
 
@@ -93,6 +102,7 @@
       if (!Number.isInteger(position) || position < 0 || position >= selected.length) return state();
       selectionGeneration += 1;
       selected.splice(position, 1);
+      changed();
       return state();
     }
 
@@ -103,6 +113,7 @@
           from >= selected.length || to < 0 || to >= selected.length || from === to) return state();
       const [item] = selected.splice(from, 1);
       selected.splice(to, 0, item);
+      changed();
       return state();
     }
 
@@ -117,6 +128,7 @@
       selected[position] = {
         ...selected[position], file, confirmed:null, serialized:null, operationId:createOperationId(),
       };
+      changed();
       return state();
     }
 
@@ -125,6 +137,7 @@
       if (!Number.isInteger(position) || position < 0 || position >= selected.length) return state();
       selected[position].note = normalizeNote(value);
       selected[position].serialized = null;
+      changed();
       return state();
     }
 
@@ -134,15 +147,18 @@
     }
 
     function restore(value) {
-      if (Array.isArray(value)) {
+      restoring = true;
+      try {
+        if (Array.isArray(value)) {
+          clear();
+          if (value.length > maxFiles) throw new Error(MAX_FILES_MESSAGE);
+          value.forEach(attachment => restoreOne(attachment));
+          return state();
+        }
         clear();
-        if (value.length > maxFiles) throw new Error(MAX_FILES_MESSAGE);
-        value.forEach(attachment => restoreOne(attachment));
+        restoreOne(value);
         return state();
-      }
-      clear();
-      restoreOne(value);
-      return state();
+      } finally { restoring = false; }
     }
 
     function restoreOne(value) {
@@ -162,6 +178,10 @@
         ...(blob ? { filename, contentType, blob } : { filename, contentType, data }),
         ...(item.note ? {note:item.note} : {}),
       };
+      const operationId = String(value?.operationId || '').slice(0, 128);
+      if (operationId) item.operationId = operationId;
+      const markdown = String(value?.confirmed?.markdown || '');
+      if (markdown) item.confirmed = { markdown };
     }
 
     function state() {
@@ -178,7 +198,11 @@
         filename:item.file.name, contentType:item.file.type, blob:item.file.blob || item.file,
         ...(item.note ? {note:item.note} : {}),
       };
-      return { ...item.serialized };
+      return {
+        ...item.serialized,
+        operationId:item.operationId,
+        ...(item.confirmed?.markdown ? { confirmed:{ markdown:item.confirmed.markdown } } : {}),
+      };
     }
 
     async function serialize() {
@@ -206,6 +230,7 @@
             evidence.confirmed = null;
             throw new Error('The server did not confirm the screenshot upload.');
           }
+          await onCheckpoint?.();
         }
         if (evidence.note) {
           markdown.push('**Screenshot ' + (markdown.length + 1) + ' — ' + escapeMarkdown(evidence.note) + '**\n\n' +
@@ -220,6 +245,8 @@
   }
 
   function mount(options) {
+    const inputs = Array.from(new Set((options.inputs || [options.input]).filter(Boolean)));
+    if (!inputs.includes(options.input)) inputs.push(options.input);
     const controller = create({
       ...options, inspectPixels:true,
       maxFiles:options.maxFiles || (options.input?.multiple ? MAX_FILES : 1),
@@ -234,7 +261,7 @@
     }) : null;
 
     function setBusy(value) {
-      options.input.disabled = Boolean(value);
+      inputs.forEach(input => { input.disabled = Boolean(value); });
       options.remove.disabled = Boolean(value);
       if (options.editor?.edit) options.editor.edit.disabled = Boolean(value) || !controller.state();
       review?.setBusy(value);
@@ -248,9 +275,12 @@
       if (options.editor?.edit) options.editor.edit.disabled = true;
       options.image.src = '';
       options.preview.hidden = true;
-      options.input.value = '';
-      options.input.disabled = false;
+      inputs.forEach(input => {
+        input.value = '';
+        input.disabled = false;
+      });
       clearSelection();
+      options.onChange?.(controller.state());
     }
 
     function showPreview(file, optimized) {
@@ -264,15 +294,16 @@
         (options.readyMessage || 'Screenshot ready to upload with this comment.');
     }
 
-    options.input.addEventListener('change', event => {
-      const files = Array.from(event.target.files || []);
+    function selectFromInput(event) {
+      const sourceInput = event.target;
+      const files = Array.from(sourceInput.files || []);
       const sequence = ++selectionSequence;
       if (!files.length) return;
       let first;
       try { first = controller.select(files[0]); }
       catch (error) {
         options.status.textContent = error.message;
-        options.input.value = '';
+        sourceInput.value = '';
         return;
       }
       if (!reviewEnabled && files.length === 1 && (!first || typeof first.then !== 'function')) {
@@ -282,14 +313,14 @@
       let optimized = Boolean(first && typeof first.then === 'function');
       if (optimized) {
         options.status.textContent = 'Optimizing screenshot…';
-        options.input.disabled = true;
+        inputs.forEach(input => { input.disabled = true; });
       }
       const selectAll = files.slice(1).reduce((pending, file) => pending.then(async () => {
         const result = controller.select(file);
         if (result && typeof result.then === 'function') {
           optimized = true;
           options.status.textContent = 'Optimizing screenshot…';
-          options.input.disabled = true;
+          inputs.forEach(input => { input.disabled = true; });
           await result;
         }
       }), Promise.resolve(first));
@@ -306,15 +337,17 @@
             options.status.textContent = values.length + ' screenshots ready to file in this order.';
           }
         }
+        options.onChange?.(controller.state());
       }).catch(error => {
         if (sequence === selectionSequence) {
           options.status.textContent = error.message;
-          options.input.value = '';
+          sourceInput.value = '';
         }
       }).finally(() => {
-        if (sequence === selectionSequence) options.input.disabled = false;
+        if (sequence === selectionSequence) inputs.forEach(input => { input.disabled = false; });
       });
-    });
+    }
+    inputs.forEach(input => input.addEventListener('change', selectFromInput));
     options.remove.addEventListener('click', () => {
       const current = controller.state();
       const count = Array.isArray(current) ? current.length : (current ? 1 : 0);
@@ -337,6 +370,7 @@
           options.meta.textContent = values.length + ' screenshots ready · latest: ' + latest.filename;
         }
         options.status.textContent = options.removedMessage || 'Latest screenshot removed. Your text is unchanged.';
+        options.onChange?.(controller.state());
       });
     });
 
@@ -371,7 +405,8 @@
         onApplied: async index => {
           const value = await controller.serialize();
           review.render(value, index);
-          options.status.textContent = 'Edited screenshot flattened and ready to file.';
+          options.status.textContent = options.editor.appliedMessage ||
+            'Edited screenshot flattened and ready to file.';
         },
       });
       options.editor.edit.disabled = !controller.state();

frontend/issue-evidence-editor.js

@@ -200,6 +200,7 @@
       if (source && model) paint({source, model, canvas:options.canvas, maxDimension:1600});
     }
     function close() {
+      if (!source && !model) return;
       options.dialog.hidden = true;
       if (source && typeof source.close === 'function') source.close();
       source = null;

frontend/issue-evidence-review.js

@@ -31,7 +31,6 @@
       const dimensionScale = Math.min(1, MAX_DIMENSION / Math.max(width, height));
       const byteScale = file.size > MAX_BYTES ? Math.sqrt(MAX_BYTES / file.size) * 0.92 : 1;
       let scale = Math.min(pixelScale, dimensionScale, byteScale);
-      if (scale === 1 && file.size <= MAX_BYTES) return file;
       const canvas = makeCanvas();
       const context = canvas && canvas.getContext && canvas.getContext('2d');
       if (!context) throw new Error('decode');

frontend/issue-outbox.js

@@ -76,6 +76,14 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
       plan.templateName = String(value?.templateName || 'Issue template').trim().slice(0, 80);
       plan.capturedBody = '';
     }
+    const promotion = value?.checklistPromotion;
+    if (promotion?.repository && promotion?.number && promotion?.url && promotion?.updatedAt) {
+      plan.checklistPromotion = {
+        repository:String(promotion.repository), number:Number(promotion.number), url:String(promotion.url),
+        title:String(promotion.title || ''), body:String(promotion.body || '').slice(0, 10000),
+        updatedAt:String(promotion.updatedAt), taskIndex:Number(promotion.taskIndex),
+      };
+    }
     return plan;
   }
 
@@ -134,6 +142,7 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     if (blockers) item.blockers = blockers;
     const relatedDraft = captureRelatedDraft(draft?.relatedDraft);
     if (relatedDraft) item.relatedDraft = relatedDraft;
+
     item.operationId = item.id;
     if (Number.isInteger(Number(draft?.milestoneId)) && Number(draft.milestoneId) > 0) {
       item.milestoneId = Number(draft.milestoneId);
@@ -496,6 +505,7 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     const confirmed = [];
     const completions = [];
     const filings = [];
+
     let blocked = 0;
     currentLogin = String(currentLogin || '').trim();
     for (const item of read()) {
@@ -505,6 +515,7 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
       if (result.issue) {
         confirmed.push(result.issue);
         if (result.item?.relatedDraft) filings.push({issue:result.issue, relatedDraft:result.item.relatedDraft});
+
         if (result.item?.completionIntent) completions.push({
           id: result.item.id,
           intent: result.item.completionIntent,
@@ -546,6 +557,7 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
     return {
       confirmed: result.issue ? [result.issue] : [],
       filings: result.issue && result.item?.relatedDraft ? [{issue:result.issue, relatedDraft:result.item.relatedDraft}] : [],
+
       completions: result.issue && result.item?.completionIntent ? [{
         id: result.item.id,
         intent: result.item.completionIntent,

frontend/issue-sheet.js

@@ -18,11 +18,146 @@ function createPlanningLoader({ loadLabels, loadMilestones }) {
   };
 }
 
-function createIssueSheet({ fetchJson, storage, createConversationPager = globalThis.createConversationPager, createOperationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random() }) {
+function escapeOptionHtml(value) {
+  return String(value || '').replace(/[&<>"']/g, character => ({
+    '&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;',
+  })[character]);
+}
+
+function appendChecklistTask(body, label) {
+  const normalized = String(label || '').trim().replace(/\s+/g, ' ');
+  if (!normalized) throw new Error('Enter a checklist step.');
+  const key = normalized.toLocaleLowerCase();
+  const duplicate = String(body || '').split('\n').some(line => {
+    const match = line.match(/^\s*[-*+]\s+\[[ xX]\]\s+(.*)$/);
+    return match && match[1].trim().replace(/\s+/g, ' ').toLocaleLowerCase() === key;
+  });
+  if (duplicate) throw new Error('That checklist step already exists.');
+  const prefix = body ? String(body).replace(/\s+$/, '') + '\n' : '';
+  return prefix + '- [ ] ' + normalized;
+}
+
+function manageChecklistTask(raw, targetIndex, operation = {}) {
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^([-*+]\s+\[[ xX]\]\s+)(.*)$/);
+    if (!task) continue;
+    if (taskIndex === Number(targetIndex)) {
+      if (operation.action === 'rename') {
+        const label = String(operation.label || '').trim().replace(/\s+/g, ' ');
+        if (!label) throw new Error('Enter a checklist step.');
+        const key = label.toLocaleLowerCase();
+        let inFence = false;
+        const duplicate = parts.some((candidate, candidateIndex) => {
+          if (candidateIndex % 2) return false;
+          if (/^\s*```/.test(candidate)) { inFence = !inFence; return false; }
+          if (inFence || candidateIndex === index) return false;
+          const match = candidate.match(/^[-*+]\s+\[[ xX]\]\s+(.*)$/);
+          return match && match[1].trim().replace(/\s+/g, ' ').toLocaleLowerCase() === key;
+        });
+        if (duplicate) throw new Error('That checklist step already exists.');
+        parts[index] = task[1] + label;
+      } else if (operation.action === 'remove') {
+        if (index + 1 < parts.length) parts.splice(index, 2);
+        else if (index > 0) parts.splice(index - 1, 2);
+      } else if (operation.action === 'move-earlier' && index >= 2 && /^(\s*[-*+]\s+\[[ xX]\]\s+)/.test(parts[index - 2])) {
+        [parts[index - 2], parts[index]] = [parts[index], parts[index - 2]];
+      } else if (operation.action === 'move-later' && index + 2 < parts.length && /^(\s*[-*+]\s+\[[ xX]\]\s+)/.test(parts[index + 2])) {
+        [parts[index], parts[index + 2]] = [parts[index + 2], parts[index]];
+      }
+      return parts.join('');
+    }
+    taskIndex += 1;
+  }
+  return parts.join('');
+}
+
+function checklistIsComplete(raw) {
+  const lines = String(raw || '').split(/(?:\r\n|\n|\r)/);
+  let fenced = false;
+  let found = false;
+  for (const line of lines) {
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^\s*[-*+]\s+\[([ xX])\]\s+/);
+    if (!task) continue;
+    found = true;
+    if (task[1].toLocaleLowerCase() !== 'x') return false;
+  }
+  return found;
+}
+
+function completeDelegatedParentTask(raw, childUrl) {
+  const url = String(childUrl || '');
+  if (!/^https:\/\/[^\s)]+$/.test(url)) throw new Error('The delegated issue link is unavailable.');
+  const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+  let fenced = false;
+  let taskIndex = 0;
+  for (let index = 0; index < parts.length; index += 2) {
+    const line = parts[index];
+    if (/^\s*```/.test(line)) { fenced = !fenced; continue; }
+    if (fenced) continue;
+    const task = line.match(/^(\s*[-*+]\s+\[)([ xX])(\]\s+.*)$/);
+    if (!task) continue;
+    const linkedTask = task[3].match(/^\]\s+\[[^\]]+\]\((https:\/\/[^\s)]+)\)\s*$/);
+    if (linkedTask?.[1] === url) {
+      const alreadyCompleted = task[2].toLocaleLowerCase() === 'x';
+      if (!alreadyCompleted) parts[index] = task[1] + 'x' + task[3];
+      const body = parts.join('');
+      return { body, taskIndex, alreadyCompleted, checklistComplete:checklistIsComplete(body) };
+    }
+    taskIndex += 1;
+  }
+  throw new Error('The parent checklist no longer links to this delegated issue.');
+}
+
+async function finishDelegatedParentReview({ parentItem, parentDetail, childUrl, updateContent, closeParent }) {
+  const completion = completeDelegatedParentTask(parentDetail?.body, childUrl);
+  if (!completion.alreadyCompleted) {
+    await updateContent(parentItem, {
+      title:parentDetail.title,
+      body:completion.body,
+      expectedUpdatedAt:parentDetail.updated_at,
+    });
+  }
+  if (completion.checklistComplete) await closeParent(parentItem);
+  return { updated:!completion.alreadyCompleted, closed:completion.checklistComplete };
+}
+
+function delegatedParentReference(childDetail) {
+  const body = String(childDetail?.body || '');
+  const match = body.match(/(?:^|\n)Related to \[([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)#([1-9]\d*)\]\((https:\/\/[^\s)]+)\)\.(?:\r?$|\s)/m);
+  if (!match) return null;
+  return { repository:match[1], number:Number(match[2]), url:match[3] };
+}
+
+function resolveDelegatedParent(child, childDetail, parentDetail) {
+  const parent = delegatedParentReference(childDetail);
+  if (!parent) return null;
+  try {
+    const completion = completeDelegatedParentTask(parentDetail?.body, child?.url);
+    return {
+      parent,
+      taskIndex:completion.taskIndex,
+      alreadyCompleted:completion.alreadyCompleted,
+      checklistComplete:completion.checklistComplete,
+    };
+  } catch (_error) {
+    return null;
+  }
+}
+
+function createIssueSheet({ fetchJson, storage, renderMarkdown = globalThis.renderMarkdown, toggleTask = renderMarkdown?.toggleTask, manageTask: manageTaskTransform = manageChecklistTask, relatedTaskDraft: relatedTaskDraftTransform = (...args) => globalThis.createIssueCapture?.relatedChecklistDraft(...args), linkRelatedTask: linkRelatedTaskTransform = (...args) => globalThis.createIssueCapture?.linkChecklistTask(...args), enqueueDurably, createConversationPager = globalThis.createConversationPager, createOperationId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random() }) {
   let commentRequest = null;
   let closeRequest = null;
   let releaseRequest = null;
   let handoffRequest = null;
+  let reassignRequest = null;
   let labelRequest = null;
   let editRequest = null;
   let dueDateRequest = null;
@@ -38,8 +173,11 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
   const milestoneDraftKey = item => 'stackchain.issue-milestone.v1:' + item.repository + '#' + item.number;
 
   return {
+    delegatedParentReference,
+    resolveDelegatedParent,
+    completeDelegatedParentTask,
     readOnly(item) {
-      return Boolean(item?.is_filed && !item?.is_assigned);
+      return Boolean(item?.is_completed || (item?.is_filed && !item?.is_assigned));
     },
     load(item) {
       const access = this.readOnly(item) ? '?access=filed' : '';
@@ -48,10 +186,12 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       });
     },
     conversation(item, initialPage) {
+      const access = this.readOnly(item) ? '&access=filed' : '';
       const pager = createConversationPager({
-        loadPage: page => fetchJson(issuePath(item) + '/comments?page=' + encodeURIComponent(page) + '&limit=20', {
-          headers: { Accept: 'application/json' },
-        }),
+        loadPage: page => fetchJson(
+          issuePath(item) + '/comments?page=' + encodeURIComponent(page) + '&limit=20' + access,
+          { headers: { Accept: 'application/json' } },
+        ),
       });
       pager.reset(initialPage || { comments: [], page: 1, older_page: null, total: 0 });
       return pager;
@@ -68,7 +208,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       });
     },
     loadHandoffCandidates(item) {
-      return fetchJson(issuePath(item) + '/handoff-candidates', {
+      const access = item?.is_filed ? '?access=filed' : '';
+      return fetchJson(issuePath(item) + '/handoff-candidates' + access, {
         headers: { Accept: 'application/json' },
       });
     },
@@ -115,7 +256,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
     updateContent(item, draft) {
       if (editRequest) return editRequest;
       this.saveEditDraft(item, draft);
-      editRequest = fetchJson(issuePath(item) + '/content', {
+      const access = this.readOnly(item) ? '?access=filed' : '';
+      editRequest = fetchJson(issuePath(item) + '/content' + access, {
         method: 'PATCH',
         headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
         body: JSON.stringify({
@@ -133,6 +275,218 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       }).finally(() => { editRequest = null; });
       return editRequest;
     },
+    toggleTask(item, detail, taskIndex, checked) {
+      if (typeof toggleTask !== 'function') return Promise.reject(new Error('Checklist updates are unavailable.'));
+      return this.updateContent(item, {
+        title: detail.title,
+        body: toggleTask(detail.body, taskIndex, checked),
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    manageTask(item, detail, taskIndex, operation) {
+      if (typeof manageTaskTransform !== 'function') return Promise.reject(new Error('Checklist management is unavailable.'));
+      return this.updateContent(item, {
+        title: detail.title,
+        body: manageTaskTransform(detail.body, taskIndex, operation),
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    relatedTaskDraft(item, _detail, _taskIndex, label) {
+      if (typeof relatedTaskDraftTransform !== 'function') throw new Error('Related issue capture is unavailable.');
+      return relatedTaskDraftTransform(item, label);
+    },
+    linkRelatedTask(item, detail, taskIndex, child) {
+      if (typeof linkRelatedTaskTransform !== 'function') return Promise.reject(new Error('Related issue linking is unavailable.'));
+      return this.updateContent(item, {
+        title:detail.title,
+        body:linkRelatedTaskTransform(detail.body, taskIndex, child),
+        expectedUpdatedAt:detail.updated_at,
+      });
+    },
+    async addTask(item, detail, label) {
+      const body = appendChecklistTask(detail.body, label);
+      return this.updateContent(item, {
+        title: detail.title,
+        body,
+        expectedUpdatedAt: detail.updated_at,
+      });
+    },
+    async queueAddedTask(item, detail, label) {
+      if (typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist updates are unavailable.');
+      }
+      const body = appendChecklistTask(detail.body, label);
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    async queueManagedTask(item, detail, taskIndex, operation) {
+      if (typeof manageTaskTransform !== 'function' || typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist management is unavailable.');
+      }
+      const body = manageTaskTransform(detail.body, taskIndex, operation);
+      const checklistOperation = {
+        action:String(operation?.action || ''), index:Number(taskIndex),
+        ...(operation?.label ? { label:String(operation.label) } : {}),
+      };
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at, checklistOperation });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    async queueTask(item, detail, taskIndex, checked) {
+      if (typeof toggleTask !== 'function' || typeof enqueueDurably !== 'function') {
+        throw new Error('Offline checklist updates are unavailable.');
+      }
+      const body = toggleTask(detail.body, taskIndex, checked);
+      await enqueueDurably({ kind:'issue-content', repository:item.repository, number:item.number,
+        title:detail.title, baseBody:detail.body, body, expectedUpdatedAt:detail.updated_at });
+      return { queued:true, detail:{ ...detail, body, checklist_pending:true } };
+    },
+    pendingTask(item, detail, items, ownerLogin) {
+      const pending = [...(items || [])].reverse().find(candidate => candidate?.kind === 'issue-content' &&
+        candidate.repository === item?.repository && Number(candidate.number) === Number(item?.number) &&
+        candidate.ownerLogin === ownerLogin && ['queued', 'sending', 'attention'].includes(candidate.status));
+      if (!pending) return { ...detail };
+      return { ...detail, title:pending.title, body:pending.body, checklist_pending:true };
+    },
+    bindTaskToggles({ container, status, retry, current, confirmed, restore }) {
+      container.addEventListener('change', async event => {
+        const control = event.target.closest('input.task-list-toggle');
+        const state = current();
+        if (!control || !state?.item || !state?.detail?.updated_at) return;
+        container.classList.add('checklist-pending');
+        container.querySelectorAll('input.task-list-toggle').forEach(input => { input.disabled = true; });
+        status.textContent = 'Updating checklist…';
+        try {
+          const result = await (state.offline ? this.queueTask : this.toggleTask).call(
+            this, state.item, state.detail, Number(control.dataset.taskIndex), control.checked
+          );
+          const latest = current();
+          if (latest?.item?.repository === state.item.repository && latest.item.number === state.item.number) {
+            confirmed(state.item, state.detail, state.offline ? result.detail : result);
+            if (state.offline) status.textContent = 'Checklist queued. Pending sync.';
+            else status.textContent = 'Checklist updated.';
+          }
+        } catch (error) {
+          const latest = current();
+          if (latest?.item?.repository === state.item.repository && latest.item.number === state.item.number) {
+            restore(state.detail);
+            status.textContent = error.message + ' Checklist was not changed; reload latest or use Edit issue.';
+            retry.hidden = false;
+          }
+        }
+      });
+    },
+    bindTaskManagement({ container, editor, label, earlier, later, fileRelated, onFileRelated, remove, cancel, status, sheetStatus, retry, current, confirmed }) {
+      let taskIndex = null;
+      let trigger = null;
+      const reset = (returnFocus = false) => {
+        editor.hidden = true;
+        status.textContent = '';
+        if (returnFocus && trigger?.isConnected) trigger.focus();
+        taskIndex = null;
+        trigger = null;
+      };
+      container.addEventListener('click', event => {
+        const control = event.target.closest('button.task-list-manage');
+        if (!control || !current()?.detail?.updated_at) return;
+        taskIndex = Number(control.dataset.taskIndex);
+        trigger = control;
+        label.value = control.dataset.taskLabel || '';
+        earlier.disabled = control.dataset.taskFirst === 'true';
+        later.disabled = control.dataset.taskLast === 'true';
+        fileRelated.disabled = /^\s*\[[^\]]+\]\([^)]+\)\s*$/.test(label.value);
+        editor.hidden = false;
+        status.textContent = fileRelated.disabled ? 'This step already links to related work.' :
+          'Rename, reorder, remove, or file this step as related work.';
+        label.focus();
+      });
+      const run = async operation => {
+        const state = current();
+        const selectedIndex = taskIndex;
+        if (!state?.item || !state.detail?.updated_at || selectedIndex === null) return;
+        if (operation.action === 'remove' && !globalThis.confirm('Remove this checklist step?')) return;
+        const controls = editor.querySelectorAll('button,input');
+        controls.forEach(control => { control.disabled = true; });
+        status.textContent = state.offline ? 'Queueing checklist change…' : 'Updating checklist…';
+        try {
+          const result = await (state.offline ? this.queueManagedTask : this.manageTask).call(
+            this, state.item, state.detail, selectedIndex, operation
+          );
+          if (current()?.item !== state.item) return;
+          confirmed(state.item, state.detail, state.offline ? result.detail : result);
+          reset();
+          sheetStatus.textContent = state.offline ? 'Checklist change queued. Pending sync.' : 'Checklist step updated.';
+          const focusIndex = operation.action === 'remove' ? Math.max(0, selectedIndex - 1) : selectedIndex;
+          container.querySelector('button.task-list-manage[data-task-index="' + focusIndex + '"]')?.focus();
+        } catch (error) {
+          if (current()?.item === state.item) {
+            status.textContent = error.message + ' Your change is still here; retry.';
+            retry.hidden = false;
+            label.focus();
+          }
+        } finally {
+          if (!editor.hidden) controls.forEach(control => { control.disabled = false; });
+        }
+      };
+      editor.addEventListener('submit', event => { event.preventDefault(); run({ action:'rename', label:label.value }); });
+      earlier.addEventListener('click', () => run({ action:'move-earlier' }));
+      later.addEventListener('click', () => run({ action:'move-later' }));
+      fileRelated.addEventListener('click', async () => {
+        const state = current();
+        const selectedIndex = taskIndex;
+        if (!state?.item || !state.detail?.updated_at || selectedIndex === null || fileRelated.disabled) return;
+        try {
+          await onFileRelated({ item:state.item, detail:state.detail, taskIndex:selectedIndex,
+            label:label.value, trigger });
+          reset();
+        } catch (error) {
+          status.textContent = error.message + ' The checklist step was not changed.';
+          label.focus();
+        }
+      });
+      remove.addEventListener('click', () => run({ action:'remove' }));
+      cancel.addEventListener('click', () => reset(true));
+      return { reset };
+    },
+    renderTasks(container, detail, interactive) {
+      container.classList.toggle('checklist-pending', detail.checklist_pending === true);
+      container.innerHTML = renderMarkdown(
+        detail.body || 'No description provided.', {
+          interactiveTasks: Boolean(interactive),
+          manageTasks: Boolean(interactive),
+        }
+      );
+    },
+    checklistCompletion(container, { interactive, today, offline, dismissed = false }) {
+      const tasks = Array.from(container.querySelectorAll('input.task-list-toggle'));
+      const visible = Boolean(interactive && !dismissed && tasks.length && tasks.every(task => task.checked));
+      return {
+        visible,
+        status: offline ? 'Checklist complete · pending sync' : 'Checklist complete',
+        label: today ? (offline ? 'Queue close & next' : 'Close & next') :
+          (offline ? 'Queue issue closure' : 'Close issue'),
+      };
+    },
+    mergeContent(snapshot, item, detail, confirmed, replace) {
+      return {
+        snapshot: snapshot ? replace(snapshot, item.repository, item.number, confirmed) : snapshot,
+        item: { ...item, ...confirmed, key:item.key },
+        detail: { ...detail, ...confirmed },
+      };
+    },
+    renderMilestoneEditor(item, confirmed, milestones, document = globalThis.document) {
+      const select = document.querySelector('#issue-milestone');
+      const status = document.querySelector('#issue-milestone-status');
+      select.innerHTML = '<option value="">No milestone</option>' + milestones.map(milestone =>
+        '<option value="' + Number(milestone.id) + '">' + escapeOptionHtml(milestone.title) + '</option>'
+      ).join('');
+      select.value = String(this.loadMilestoneDraft(item) ?? confirmed?.id ?? '');
+      select.disabled = false;
+      document.querySelector('#save-issue-milestone').disabled = false;
+      status.textContent = confirmed ? 'Planned for ' + confirmed.title + '.' : 'No milestone set.';
+    },
+
     loadDueDateDraft(item) {
       try {
         const raw = storage?.getItem(dueDateDraftKey(item));
@@ -212,7 +566,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
     },
     close(item) {
       if (closeRequest) return closeRequest;
-      closeRequest = fetchJson(issuePath(item) + '/close', {
+      const access = item?.is_filed && !item?.is_assigned ? '?access=filed' : '';
+      closeRequest = fetchJson(issuePath(item) + '/close' + access, {
         method: 'PATCH',
         headers: { Accept: 'application/json' },
       }).then(result => {
@@ -258,6 +613,28 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
       }).finally(() => { handoffRequest = null; });
       return handoffRequest;
     },
+    reassign(item, recipient) {
+      if (reassignRequest) return reassignRequest;
+      const expectedAssignees = Array.isArray(item?.assignees) ? item.assignees.slice() : [];
+      reassignRequest = fetchJson(issuePath(item) + '/reassign', {
+        method: 'PATCH',
+        headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({ recipient, expected_assignees: expectedAssignees }),
+      }).then(result => {
+        if (
+          result?.number !== item.number ||
+          result?.recipient !== recipient ||
+          !Array.isArray(result.assignees) ||
+          result.assignees.length !== 1 ||
+          result.assignees[0] !== recipient ||
+          JSON.stringify(result.previous_assignees) !== JSON.stringify(expectedAssignees)
+        ) {
+          throw new Error('Issue reassignment was not confirmed.');
+        }
+        return result;
+      }).finally(() => { reassignRequest = null; });
+      return reassignRequest;
+    },
     comment(item, body) {
       if (commentRequest) return commentRequest;
       this.saveDraft(item, body);
@@ -266,7 +643,8 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
         operationId = storage?.getItem(operationKey(item)) || String(createOperationId()).slice(0, 128);
         storage?.setItem(operationKey(item), operationId);
       } catch (_error) { operationId = String(createOperationId()).slice(0, 128); }
-      commentRequest = fetchJson(issuePath(item) + '/comments', {
+      const access = this.readOnly(item) ? '?access=filed' : '';
+      commentRequest = fetchJson(issuePath(item) + '/comments' + access, {
         method: 'POST',
         headers: { Accept: 'application/json', 'Content-Type': 'application/json', 'Idempotency-Key': operationId },
         body: JSON.stringify({ body }),
@@ -284,4 +662,9 @@ function createIssueSheet({ fetchJson, storage, createConversationPager = global
 
 createIssueSheet.createPlanningLoader = createPlanningLoader;
 
+createIssueSheet.manageChecklistTask = manageChecklistTask;
+createIssueSheet.completeDelegatedParentTask = completeDelegatedParentTask;
+createIssueSheet.finishDelegatedParentReview = finishDelegatedParentReview;
+createIssueSheet.delegatedParentReference = delegatedParentReference;
+createIssueSheet.resolveDelegatedParent = resolveDelegatedParent;
 if (typeof module !== 'undefined' && module.exports) module.exports = createIssueSheet;

frontend/later-sync.js

@@ -160,15 +160,17 @@ function createLaterSync({ storage, getLogin, fetchJson, onRemoteRecords, onStat
     return Date.now().toString(36) + '-' + Math.random().toString(36).slice(2);
   }
 
-  function enqueue(action, itemId, wakeAt = null) {
+  function enqueue(action, itemId, wakeAt = null, handoff = null) {
     if (!['defer', 'restore'].includes(action) || !itemId ||
-        (action === 'defer' && typeof wakeAt !== 'string')) return false;
+        (action === 'defer' && typeof wakeAt !== 'string') ||
+        ![null, 'today'].includes(handoff)) return false;
     pending().filter(operation => operation.item_id === itemId)
       .forEach(operation => removeOperation(operation.operation_id));
     const operation = {
       operation_id: operationId(), action, item_id: itemId, wake_at: wakeAt,
       base_revision: Math.max(0, savedRevision()),
     };
+    if (handoff) operation.handoff = handoff;
     const storageKey = key();
     if (!storageKey || !storage) return false;
     const recordKey = storageKey + '.operation.' + encodeURIComponent(operation.operation_id);
@@ -189,9 +191,11 @@ function createLaterSync({ storage, getLogin, fetchJson, onRemoteRecords, onStat
     const marker = migrationPrefix + storageKey.slice(prefix.length);
     try {
       if (storage.getItem(marker)) return false;
-      Object.entries(records || {}).forEach(([itemId, wakeAt]) =>
-        enqueue('defer', itemId, wakeAt)
-      );
+      Object.entries(records || {}).forEach(([itemId, record]) => {
+        const wakeAt = record && typeof record === 'object' ? record.wake_at : record;
+        const handoff = record?.handoff === 'today' ? 'today' : null;
+        enqueue('defer', itemId, wakeAt, handoff);
+      });
       storage.setItem(marker, '1');
       return true;
     } catch (_error) {

frontend/later-work.js

@@ -38,7 +38,7 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     }
   }
 
-  function defer(item, until) {
+  function defer(item, until, options = {}) {
     const key = storageKey();
     const id = identity(item);
     const wake = new Date(until);
@@ -46,9 +46,10 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     if (!id || Number.isNaN(wake.getTime()) || wake <= now()) return 'invalid';
     const records = read();
     const wakeAt = wake.toISOString();
-    records[id] = wakeAt;
+    const handoff = options.handoff === 'today' ? 'today' : null;
+    records[id] = handoff ? { wake_at:wakeAt, handoff } : wakeAt;
     if (!write(records)) return 'unavailable';
-    onChange('defer', id, wakeAt);
+    onChange('defer', id, wakeAt, handoff);
     return 'deferred';
   }
 
@@ -93,9 +94,13 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
   function adopt(records) {
     if (!records || typeof records !== 'object' || Array.isArray(records)) return false;
     const normalized = {};
-    Object.entries(records).forEach(([id, wake]) => {
+    Object.entries(records).forEach(([id, record]) => {
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       const wakeTime = new Date(wake).getTime();
-      if (id && Number.isFinite(wakeTime)) normalized[id] = new Date(wakeTime).toISOString();
+      if (id && Number.isFinite(wakeTime)) {
+        const wakeAt = new Date(wakeTime).toISOString();
+        normalized[id] = record?.handoff === 'today' ? { wake_at:wakeAt, handoff:'today' } : wakeAt;
+      }
     });
     return write(normalized);
   }
@@ -119,25 +124,32 @@ function createLaterWork({ storage, getLogin, now = () => new Date(), setTimer =
     const wakeTimes = [];
     const expired = [];
 
-    Object.entries(records).forEach(([id, wake]) => {
+    const handoffs = [];
+    Object.entries(records).forEach(([id, record]) => {
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       const wakeTime = new Date(wake).getTime();
       if (!Number.isFinite(wakeTime) || wakeTime <= current) {
-        if (Number.isFinite(wakeTime)) expired.push(id);
+        if (Number.isFinite(wakeTime)) {
+          expired.push(id);
+          if (record?.handoff === 'today') handoffs.push(id);
+        }
         return;
       }
       if (pruneMissing && !available.has(id)) return;
-      retained[id] = new Date(wakeTime).toISOString();
+      const wakeAt = new Date(wakeTime).toISOString();
+      retained[id] = record?.handoff === 'today' ? { wake_at:wakeAt, handoff:'today' } : wakeAt;
       wakeTimes.push(wakeTime);
     });
 
     if (JSON.stringify(retained) !== JSON.stringify(records) && write(retained) && expired.length) {
-      onExpire(expired);
+      onExpire(expired, handoffs);
     }
     schedule(wakeTimes, current);
     const deferredIds = new Set(Object.keys(retained));
     const active = (items || []).filter(item => !deferredIds.has(identity(item)));
     const later = (items || []).flatMap(item => {
-      const wake = retained[identity(item)];
+      const record = retained[identity(item)];
+      const wake = record && typeof record === 'object' ? record.wake_at : record;
       return wake ? [{ ...item, deferred_until: wake }] : [];
     });
     return { active, later };

frontend/login.js

@@ -4,7 +4,7 @@
 }(typeof self !== 'undefined' ? self : this, function createLoginController(options) {
   function validShareContinuation(value) {
     if (typeof value !== 'string' || !value.startsWith('./?') || value.includes('#')) return './';
-    const limits = { title: 200, text: 8000, url: 2048, launch: 8, shared: 5, search: 200,
+    const limits = { title: 200, text: 8000, url: 2048, launch: 8, shared: 6, search: 200,
       preview: 200, search_kind: 5, search_state: 6, search_repository: 161 };
     const params = new URLSearchParams(value.slice(3));
     const entries = Array.from(params.entries());
@@ -35,7 +35,9 @@
     const launch = params.get('launch');
     const shared = params.get('shared');
     if (launch && !['continue', 'new', 'agenda'].includes(launch)) return './';
-    if (shared !== null && (shared !== 'image' || launch !== 'new')) return './';
+    if (shared === 'bundle') {
+      if (launch !== 'new' || entries.some(([name]) => !['launch', 'shared'].includes(name))) return './';
+    } else if (shared !== null && (shared !== 'image' || launch !== 'new')) return './';
     return value;
   }
 

frontend/manifest.webmanifest

@@ -36,7 +36,7 @@
     }
   ],
   "share_target": {
-    "action": "./",
+    "action": "./share-target",
     "method": "POST",
     "enctype": "multipart/form-data",
     "params": {

frontend/markdown.js

@@ -32,23 +32,33 @@
     return rendered.replace(/\u0000CODE(\d+)\u0000/g, (_match, index) => code[Number(index)]);
   }
 
-  function renderList(lines) {
+  function renderList(lines, options, firstTaskIndex) {
     const taskList = lines.every(line => /^[-*+]\s+\[[ xX]\]\s+/.test(line));
-    const items = lines.map(line => {
+    const items = lines.map((line, offset) => {
       let body = line.replace(/^[-*+]\s+/, '');
       if (!taskList) return '<li>' + renderInline(body) + '</li>';
       const checked = /^\[[xX]\]\s+/.test(body);
       body = body.replace(/^\[[ xX]\]\s+/, '');
-      return '<li class="task-list-item"><input type="checkbox" disabled' +
-        (checked ? ' checked' : '') + '> ' + renderInline(body) + '</li>';
+      const control = options.interactiveTasks ?
+        ' class="task-list-toggle" data-task-index="' + (firstTaskIndex + offset) +
+          '" aria-label="Mark ' + escapeHtml(body) + (checked ? ' incomplete"' : ' complete"') :
+        ' disabled';
+      const manage = options.interactiveTasks && options.manageTasks ?
+        '<button type="button" class="task-list-manage" data-task-index="' + (firstTaskIndex + offset) +
+          '" data-task-label="' + escapeHtml(body) + '" aria-label="Manage step: ' + escapeHtml(body) + '"' +
+          (offset === 0 ? ' data-task-first="true"' : '') +
+          (offset === lines.length - 1 ? ' data-task-last="true"' : '') + '>Manage</button>' : '';
+      return '<li class="task-list-item"><input type="checkbox"' + control +
+        (checked ? ' checked' : '') + '> ' + renderInline(body) + manage + '</li>';
     }).join('');
     return '<ul' + (taskList ? ' class="task-list"' : '') + '>' + items + '</ul>';
   }
 
-  return function renderMarkdown(raw) {
+  function renderMarkdown(raw, options = {}) {
     const lines = String(raw || '').replace(/\r\n?/g, '\n').split('\n');
     const output = [];
     let index = 0;
+    let taskIndex = 0;
     while (index < lines.length) {
       const line = lines[index];
       if (!line.trim()) {
@@ -90,7 +100,10 @@
           list.push(lines[index]);
           index += 1;
         }
-        output.push(renderList(list));
+        output.push(renderList(list, options, taskIndex));
+        if (list.every(candidate => /^[-*+]\s+\[[ xX]\]\s+/.test(candidate))) {
+          taskIndex += list.length;
+        }
         continue;
       }
       const paragraph = [];
@@ -103,5 +116,29 @@
       output.push('<p>' + renderInline(paragraph.join('\n')).replace(/\n/g, '<br>') + '</p>');
     }
     return output.join('');
+  }
+
+  renderMarkdown.toggleTask = function toggleTask(raw, targetIndex, checked) {
+    const parts = String(raw || '').split(/(\r\n|\n|\r)/);
+    let fenced = false;
+    let taskIndex = 0;
+    for (let index = 0; index < parts.length; index += 2) {
+      const line = parts[index];
+      if (/^\s*```/.test(line)) {
+        fenced = !fenced;
+        continue;
+      }
+      if (fenced) continue;
+      const task = line.match(/^([-*+]\s+\[)([ xX])(\])/);
+      if (!task) continue;
+      if (taskIndex === Number(targetIndex)) {
+        parts[index] = task[1] + (checked ? 'x' : ' ') + task[3] + line.slice(task[0].length);
+        return parts.join('');
+      }
+      taskIndex += 1;
+    }
+    return parts.join('');
   };
+
+  return renderMarkdown;
 });

frontend/mobile-create-issue-nav.js

@@ -0,0 +1,122 @@
+function createMobileCreateIssueNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let filingAvailable = !options.filing?.hidden;
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function setFilingAvailable(available) {
+    filingAvailable = Boolean(available);
+    const button = buttons.file;
+    if (!button) return;
+    if (filingAvailable) button.removeAttribute('aria-disabled');
+    else button.setAttribute('aria-disabled', 'true');
+  }
+
+  function navigate(name) {
+    if (name === 'file') setFilingAvailable(!options.filing?.hidden);
+    if (name === 'file' && !filingAvailable) return false;
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = Date.now() + 500;
+    select(name);
+    return true;
+  }
+
+  function reset(available = !options.filing?.hidden) {
+    setFilingAvailable(available);
+    select('describe');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (Date.now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .filter(entry => targetNames.get(entry.target) !== 'file' || filingAvailable)
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+    setFilingAvailable,
+  };
+}
+
+function attachMobileCreateIssueNavigation({ document, window }) {
+  const bySection = name => document.querySelector('[data-create-issue-section="' + name + '"]');
+  const filing = document.getElementById('create-issue-filing');
+  const sheet = document.getElementById('create-issue-sheet');
+  const navigation = createMobileCreateIssueNavigation({
+    root:document.querySelector('.create-issue-panel'),
+    buttons:{describe:bySection('describe'), evidence:bySection('evidence'), file:bySection('file')},
+    targets:{
+      describe:document.getElementById('create-issue-describe'),
+      evidence:document.getElementById('create-issue-evidence'),
+      file:filing,
+    },
+    filing,
+    prefersReducedMotion:() => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  document.getElementById('file-new-issue').addEventListener('click', () => {
+    setTimeout(() => navigation.navigate('file'), 0);
+  });
+  new MutationObserver(() => {
+    navigation.setFilingAvailable(!filing.hidden);
+    if (!filing.hidden && sheet.classList.contains('open')) navigation.navigate('file');
+  }).observe(filing, {attributes:true, attributeFilter:['hidden']});
+  new MutationObserver(() => {
+    if (sheet.classList.contains('open')) navigation.reset(!filing.hidden);
+  }).observe(sheet, {
+    attributes:true, attributeFilter:['class'],
+  });
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileCreateIssueNavigation;
+else attachMobileCreateIssueNavigation({document, window});

frontend/mobile-delivery-recovery.js

@@ -0,0 +1,156 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileDeliveryRecovery = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileDeliveryRecovery(options) {
+  const byId = id => typeof document === 'undefined' ? null : document.getElementById(id);
+  const elements = options.elements || (typeof document === 'undefined' ? null : {
+    dialog: byId('mobile-delivery-recovery'), close: byId('close-mobile-delivery-recovery'),
+    title: byId('mobile-delivery-recovery-title'), destination: byId('mobile-delivery-recovery-destination'),
+    reason: byId('mobile-delivery-recovery-reason'), progress: byId('mobile-delivery-recovery-progress'),
+    action: byId('mobile-delivery-recovery-action'), status: byId('mobile-delivery-recovery-status'),
+  });
+  const priority = {authorization: 0, attention: 1, uncertain: 2, waiting: 3};
+
+  function identity(item) {
+    return String(item?.outbox_id || item?.id || '');
+  }
+
+  function state(item) {
+    if (item?.status === 'authorization') return 'authorization';
+    if (item?.status === 'attention' || item?.checklist_conflict || item?.quarantined) return 'attention';
+    if (item?.delivery_state === 'uncertain') return 'uncertain';
+    return 'waiting';
+  }
+
+  function primary(item) {
+    const kind = state(item);
+    if (kind === 'authorization') {
+      return item?.outbox_kind === 'issue-close' ? 'Authorize & close' : 'Authorize & send';
+    }
+    if (item?.checklist_conflict) return 'Review changes';
+    if (kind === 'attention') return item?.quarantined ? 'Copy content' : 'Open current item';
+    if (kind === 'uncertain') return 'Verified not posted — retry';
+    return 'Retry now';
+  }
+
+  function ordered() {
+    return [...(options.getItems ? options.getItems() : [])].sort((left, right) => {
+      const byState = priority[state(left)] - priority[state(right)];
+      if (byState) return byState;
+      return identity(left).localeCompare(identity(right));
+    });
+  }
+
+  const stateLabels = {
+    authorization: 'Authorization required',
+    attention: 'Needs attention',
+    uncertain: 'Delivery uncertain',
+    waiting: 'Ready to retry',
+  };
+  let currentId = '';
+  let active = false;
+  let inFlight = null;
+
+  function currentItem(items) {
+    return items.find(item => identity(item) === currentId) || items[0];
+  }
+
+  function snapshot() {
+    const items = ordered();
+    const item = currentItem(items);
+    if (item) currentId = identity(item);
+    else currentId = '';
+    const index = item ? items.indexOf(item) : -1;
+    return {
+      count: items.length,
+      current: item ? {
+        id: identity(item),
+        state: state(item),
+        primary: primary(item),
+        position: index + 1,
+        total: items.length,
+      } : null,
+    };
+  }
+
+  function render() {
+    const result = snapshot();
+    if (!elements) return result;
+    const items = ordered();
+    const item = currentItem(items);
+    if (!item) {
+      if (active) {
+        active = false;
+        if (elements.dialog?.open) elements.dialog.close();
+        if (options.onComplete) options.onComplete();
+      }
+      return result;
+    }
+    elements.title.textContent = item.title || 'Queued delivery';
+    elements.destination.textContent = [item.repository, item.details].filter(Boolean).join(' · ') || 'Saved delivery';
+    elements.reason.textContent = item.last_attempt_error || item.ownership || stateLabels[state(item)];
+    elements.progress.textContent = 'Delivery ' + result.current.position + ' of ' + result.current.total + ' · ' + stateLabels[state(item)];
+    elements.action.textContent = primary(item);
+    if (elements.status) elements.status.textContent = '';
+    return result;
+  }
+
+  function open() {
+    const queue = byId('mobile-queue-sheet');
+    if (queue?.open) queue.close();
+    if (options.beforeOpen) options.beforeOpen();
+    currentId = '';
+    const result = snapshot();
+    if (!result.current) return 'empty';
+    active = true;
+    render();
+    if (elements?.dialog && !elements.dialog.open) elements.dialog.showModal();
+    return 'opened';
+  }
+
+  async function attend(item) {
+    const index = options.getIndex ? options.getIndex(item) : -1;
+    const selector = item.quarantined ? '.draft-copy' :
+      item.checklist_conflict ? '.draft-review-checklist' : '.draft-resume';
+    const action = document.querySelector('#my-work-list ' + selector + '[data-draft-index="' + index + '"]');
+    if (!action) throw new Error('Delivery changed.');
+    elements.dialog.close();
+    action.scrollIntoView();
+    action.focus();
+    return await action.onclick();
+  }
+
+  function activate() {
+    if (inFlight) return inFlight;
+    const items = ordered();
+    const item = currentItem(items);
+    const perform = state(item) === 'attention' ? attend : options.activate;
+    if (!item) return Promise.resolve(render());
+    if (elements?.action) elements.action.disabled = true;
+    if (elements?.status) elements.status.textContent = 'Working…';
+    inFlight = (async () => {
+      let failure = null;
+      try {
+        await perform(item, state(item));
+      } catch (error) {
+        failure = String(error?.message || 'Delivery could not be completed.').trim().slice(0, 160);
+      } finally {
+        if (elements?.action) elements.action.disabled = false;
+      }
+      const result = render();
+      if (failure && elements?.status) {
+        if (active && !elements.dialog.open) elements.dialog.showModal();
+        elements.status.textContent = failure + ' Try again.';
+      }
+      return result;
+    })().finally(() => { inFlight = null; });
+    return inFlight;
+  }
+
+  function start() {
+    if (elements?.action?.addEventListener) elements.action.addEventListener('click', activate);
+    if (elements?.close?.addEventListener) elements.close.addEventListener('click', () => elements.dialog.close());
+  }
+
+  return {activate, open, render, snapshot, start};
+});

frontend/mobile-find-work-nav.js

@@ -0,0 +1,194 @@
+(function (root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.createMobileFindWorkNavigation = api;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const stages = ['discover', 'review', 'fit'];
+
+  return function createMobileFindWorkNavigation(options) {
+    const document = options.document;
+    const buttons = options.buttons || Object.fromEntries(stages.map(name =>
+      [name, document?.querySelector('[data-find-work-stage="' + name + '"]')]
+    ));
+    const sections = options.sections || Object.fromEntries(stages.map(name =>
+      [name, document?.getElementById('find-work-' + name + '-stage')]
+    ));
+    const history = options.history;
+    const eventTarget = options.eventTarget;
+    const onStageChange = options.onStageChange || (() => {});
+    const listeners = new Map();
+    let current = 'discover';
+    let selectedCount = 0;
+    let recovery = false;
+    let started = false;
+
+    function escape(value) {
+      return String(value || '').replace(/[&<>"']/g, character =>
+        ({ '&':'&amp;', '<':'&lt;', '>':'&gt;', '"':'&quot;', "'":'&#39;' })[character]
+      );
+    }
+
+    function renderReview() {
+      const reviewList = options.reviewList || document?.getElementById('find-work-review-list');
+      const reviewSummary = options.reviewSummary || document?.getElementById('find-work-review-summary');
+      if (!reviewList) return;
+      const items = options.controller?.selectedItems?.() || options.getSelectedItems?.() || [];
+      const planning = options.todayWork?.planning?.();
+      const today = options.todayWork ? {
+        limit:options.todayWork.limit, count:options.todayWork.read().length,
+        capacityMinutes:planning.capacity_minutes, estimates:planning.estimates,
+      } : options.getTodayState?.() || {};
+      const remainingSlots = Math.max(0, (Number(today.limit) || 0) - (Number(today.count) || 0));
+      const planned = Object.values(today.estimates || {}).reduce((sum, minutes) => sum + minutes, 0);
+      const remainingMinutes = today.capacityMinutes === null || today.capacityMinutes === undefined ? null :
+        Math.max(0, today.capacityMinutes - planned);
+      const formatMinutes = minutes => [Math.floor(minutes / 60) ? Math.floor(minutes / 60) + 'h' : '',
+        minutes % 60 ? minutes % 60 + 'm' : ''].filter(Boolean).join(' ') || '0m';
+      if (reviewSummary) reviewSummary.textContent = items.length + ' selected · ' + remainingSlots +
+        ' Today slot' + (remainingSlots === 1 ? '' : 's') + ' open' +
+        (remainingMinutes === null ? '' : ' · ' + formatMinutes(remainingMinutes) + ' available') + '.';
+      reviewList.innerHTML = items.map(item => {
+        const id = String(item.repository || '') + '#' + String(item.number || '');
+        return '<article class="find-work-review-item"><div><span class="small">' + escape(id) +
+          '</span><strong>' + escape(item.title || 'Untitled work') + '</strong></div>' +
+          '<button type="button" data-find-work-review-remove="' + escape(id) + '">Remove</button></article>';
+      }).join('');
+      reviewList.querySelectorAll('[data-find-work-review-remove]').forEach(button =>
+        button.addEventListener('click', () => {
+          const item = items.find(candidate => String(candidate.repository || '') + '#' +
+            String(candidate.number || '') === button.dataset.findWorkReviewRemove);
+          if (item) (options.controller?.toggleSelection || options.toggleSelection)?.(item);
+        })
+      );
+    }
+
+    function allowed(name) {
+      return stages.includes(name) && (name === 'discover' || selectedCount > 0 || recovery);
+    }
+
+    function paint(name, focus = false, notify = true) {
+      if (!allowed(name)) name = 'discover';
+      current = name;
+      stages.forEach(stage => {
+        const button = buttons[stage];
+        const section = sections[stage];
+        if (button) {
+          button.disabled = stage !== 'discover' && selectedCount === 0 && !recovery;
+          if (stage === name) button.setAttribute('aria-current', 'step');
+          else button.removeAttribute('aria-current');
+        }
+        if (section) section.hidden = stage !== name;
+      });
+      if (name === 'review') renderReview();
+      if (name === 'fit') options.openFit?.(options.controller?.selectedItems?.() || []);
+      if (notify) onStageChange(name);
+      if (focus) sections[name]?.focus?.();
+      return name;
+    }
+
+    function stateFor(name) {
+      const state = { ...(history?.state || {}) };
+      if (name === 'discover') delete state.findWorkStage;
+      else state.findWorkStage = name;
+      return state;
+    }
+
+    function go(name) {
+      if (!allowed(name) || name === current) return false;
+      const currentIndex = stages.indexOf(current);
+      const nextIndex = stages.indexOf(name);
+      if (nextIndex < currentIndex && history?.go) {
+        history.go(nextIndex - currentIndex);
+        return true;
+      }
+      if (nextIndex === currentIndex - 1 && history?.back) {
+        history.back();
+        return true;
+      }
+      history?.pushState?.(stateFor(name), '');
+      paint(name, true);
+      return true;
+    }
+
+    function onPopState(event) {
+      if (event.state?.taskOverlay !== 'find') return;
+      paint(event.state?.findWorkStage || 'discover', true);
+    }
+
+    function sync(state = {}) {
+      selectedCount = Math.max(0, Number(state.selectedCount) || 0);
+      recovery = state.recovery === true;
+      if (!allowed(current)) paint('discover');
+      else paint(current, false, false);
+    }
+
+    function open(hasRecovery) {
+      if (options.controller) {
+        selectedCount = options.controller.selection().count;
+        recovery = hasRecovery === true;
+      }
+      const restored = history?.state?.taskOverlay === 'find' ? history.state.findWorkStage : null;
+      return paint(allowed(restored) ? restored : 'discover');
+    }
+
+    function complete() {
+      selectedCount = 0;
+      recovery = false;
+      history?.replaceState?.(stateFor('discover'), '');
+      return paint('discover');
+    }
+
+    function back() {
+      if (current === 'discover') return false;
+      history?.back?.();
+      return true;
+    }
+
+    return {
+      start() {
+        if (started) return;
+        started = true;
+        stages.forEach(name => {
+          const button = buttons[name];
+          if (!button) return;
+          const listener = event => { event.preventDefault(); go(name); };
+          listeners.set(button, listener);
+          button.addEventListener('click', listener);
+        });
+        if (document) {
+          const bind = (id, action) => {
+            const button = document.getElementById(id);
+            if (!button) return;
+            const listener = event => { event.preventDefault(); action(); };
+            listeners.set(button, listener);
+            button.addEventListener('click', listener);
+          };
+          bind('select-find-work', () => { complete(); options.controller?.startSelection?.(); });
+          bind('cancel-find-work-selection', () => { complete(); options.controller?.cancelSelection?.(); });
+          bind('claim-selected-work', () => go('review'));
+          bind('continue-find-work-fit', () => go('fit'));
+          bind('back-find-work-discover', back);
+          bind('cancel-find-work-estimates', back);
+          bind('close-find-work', () => history?.go?.(-(stages.indexOf(current) + 1)));
+        }
+        eventTarget?.addEventListener?.('popstate', onPopState);
+        paint('discover');
+      },
+      stop() {
+        listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+        listeners.clear();
+        eventTarget?.removeEventListener?.('popstate', onPopState);
+        started = false;
+      },
+      sync,
+      open,
+      go,
+      back,
+      complete,
+      renderReview,
+      stage: () => current,
+    };
+  };
+});

frontend/mobile-insights.js

@@ -0,0 +1,74 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileInsights = factory;
+})(typeof self !== 'undefined' ? self : this, function (o) {
+  const route = '#/insights';
+  let active = false;
+  let previous = '#/my-work';
+
+  function attr(element, name, value) {
+    if (value === null) element.removeAttribute(name);
+    else element.setAttribute(name, value);
+  }
+
+  function render(open, focus = false) {
+    active = Boolean(open && o.mediaQuery.matches);
+    attr(o.root, 'data-mobile-open', active ? 'true' : null);
+    attr(o.root, 'role', active ? 'dialog' : null);
+    attr(o.root, 'aria-modal', active ? 'true' : null);
+    attr(o.root, 'aria-hidden', active || !o.mediaQuery.matches ? null : 'true');
+    o.root.inert = !active && o.mediaQuery.matches;
+    o.backgrounds.forEach(element => { element.inert = active; });
+    o.dock.hidden = active;
+    attr(o.hud, 'data-overlay-hidden', active ? 'true' : null);
+    if (active) o.closeButton.focus();
+    else if (focus) o.launcher.focus();
+  }
+
+  function url(hash) {
+    return (o.location.pathname || '') + (o.location.search || '') + hash;
+  }
+
+  function open() {
+    if (!o.mediaQuery.matches || active) return false;
+    previous = o.location.hash && o.location.hash !== route ? o.location.hash : '#/my-work';
+    if (o.menu) o.menu.open = false;
+    o.history.pushState({ ...(o.history.state || {}), mobileInsights:true, previousHash:previous }, '', url(route));
+    render(true);
+    return true;
+  }
+
+  function sync() {
+    render(o.location.hash === route, active && o.location.hash !== route);
+  }
+
+  function close() {
+    if (!active) return false;
+    if (o.history.state?.mobileInsights) o.history.back();
+    else {
+      const state = { ...(o.history.state || {}) };
+      delete state.mobileInsights;
+      delete state.previousHash;
+      o.history.replaceState(state, '', url(previous));
+      render(false, true);
+    }
+    return true;
+  }
+
+  function start() {
+    o.launcher.addEventListener('click', open);
+    o.closeButton.addEventListener('click', close);
+    o.eventTarget.addEventListener('popstate', sync);
+    o.eventTarget.addEventListener('hashchange', sync);
+    o.eventTarget.addEventListener('keydown', event => {
+      if (active && event.key === 'Escape') {
+        event.preventDefault?.();
+        close();
+      }
+    });
+    o.mediaQuery.addEventListener?.('change', sync);
+    sync();
+  }
+
+  return { start, open, close, current:() => active };
+});

frontend/mobile-issue-detail-nav.js

@@ -0,0 +1,77 @@
+function createMobileIssueDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    const target = targets[name];
+    if (!target) return false;
+    const prepare = options.beforeNavigate && options.beforeNavigate[name];
+    if (prepare) prepare(target);
+    if (name === 'actions' && options.planning) options.planning.open = true;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'reply' && navigationOptions.focus !== false) target.focus();
+    select(name);
+    return true;
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      select('overview');
+      const observe = options.observe || ((handler, observedTargets) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root: options.root || null,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean));
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileIssueDetailNavigation;

frontend/mobile-plan-today-nav.js

@@ -0,0 +1,104 @@
+function createMobilePlanTodayNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const root = options.root;
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const now = options.now || (() => Date.now());
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name) {
+    const target = targets[name];
+    if (!root || !target) return false;
+    root.scrollTo({
+      top: Math.max(0, target.offsetTop - root.offsetTop),
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = now() + 500;
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    select('fit');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, observedRoot) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root: observedRoot,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), root);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+function attachMobilePlanTodayNavigation({document, window}) {
+  const bySection = name => document.querySelector('[data-plan-today-section="' + name + '"]');
+  const sheet = document.getElementById('plan-today-sheet');
+  const panel = document.querySelector('.plan-today-panel');
+  const navigation = createMobilePlanTodayNavigation({
+    root: panel,
+    buttons: {
+      fit: bySection('fit'),
+      today: bySection('today'),
+      available: bySection('available'),
+    },
+    targets: {
+      fit: document.getElementById('plan-today-fit'),
+      today: document.getElementById('plan-today-selected'),
+      available: document.getElementById('plan-today-available-work'),
+    },
+    prefersReducedMotion: () => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  new MutationObserver(() => {
+    if (!sheet.hidden) navigation.reset();
+  }).observe(sheet, {attributes: true, attributeFilter: ['hidden']});
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobilePlanTodayNavigation;
+else attachMobilePlanTodayNavigation({document, window});

frontend/mobile-pull-refresh.js

@@ -0,0 +1,88 @@
+(function (root, factory) {
+  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  else root.createMobilePullRefresh = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobilePullRefresh(options) {
+  const surface = options.surface || document.querySelector('#my-work');
+  const indicator = options.indicator || document.querySelector('#mobile-pull-refresh');
+  const threshold = options.threshold || 64;
+  const isMobile = options.isMobile || (() => window.matchMedia('(max-width: 600px)').matches);
+  const getScrollY = options.getScrollY || (() => window.scrollY);
+  const isBlocked = options.isBlocked || (() => Array.from(options.overlays || document.querySelectorAll('[role="dialog"], #whiteboard-modal, #markdown-modal')).some(overlay =>
+      (overlay.checkVisibility ? overlay.checkVisibility() : !overlay.closest('[hidden]')) &&
+      (overlay.classList.contains('open') || overlay.getAttribute('aria-modal') === 'true')));
+  let gesture = null;
+  let inFlight = null;
+
+  function show(state, text) {
+    indicator.hidden = false;
+    indicator.dataset.state = state;
+    indicator.textContent = text;
+  }
+
+  function resetGesture() {
+    gesture = null;
+  }
+
+  function startsOnExcludedTarget(target) {
+    if (!target) return false;
+    if (target.closest?.('button, a, input, textarea, select, summary, [contenteditable="true"], [role="button"]')) return true;
+    for (let node = target; node && node !== surface; node = node.parentElement) {
+      if ((node.scrollWidth || 0) > (node.clientWidth || 0)) return true;
+    }
+    return false;
+  }
+
+  function onPointerDown(event) {
+    if (inFlight || event.pointerType !== 'touch' || !isMobile() || getScrollY() > 0 || isBlocked() || startsOnExcludedTarget(event.target)) return;
+    gesture = {id:event.pointerId, x:event.clientX, y:event.clientY, ready:false};
+    surface.setPointerCapture?.(event.pointerId);
+  }
+
+  function onPointerMove(event) {
+    if (!gesture || gesture.id !== event.pointerId) return;
+    const dx = event.clientX - gesture.x;
+    const dy = event.clientY - gesture.y;
+    if (dy <= 0 || Math.abs(dx) > dy) return resetGesture();
+    event.preventDefault();
+    gesture.ready = dy >= threshold;
+    show(gesture.ready ? 'ready' : 'pulling', gesture.ready ? 'Release to refresh' : 'Pull to refresh');
+  }
+
+  async function onPointerUp(event) {
+    if (!gesture || gesture.id !== event.pointerId) return;
+    const shouldRefresh = gesture.ready;
+    resetGesture();
+    surface.releasePointerCapture?.(event.pointerId);
+    if (!shouldRefresh || inFlight) return;
+    show('refreshing', 'Refreshing My Work…');
+    inFlight = Promise.resolve().then(options.refresh);
+    try {
+      await inFlight;
+      show('success', 'My Work is up to date');
+    } catch (_) {
+      show('error', 'Could not refresh · pull to retry');
+    } finally {
+      inFlight = null;
+    }
+  }
+
+  function onPointerCancel() {
+    resetGesture();
+  }
+
+  return {
+    start() {
+      surface.addEventListener('pointerdown', onPointerDown);
+      surface.addEventListener('pointermove', onPointerMove);
+      surface.addEventListener('pointerup', onPointerUp);
+      surface.addEventListener('pointercancel', onPointerCancel);
+    },
+    stop() {
+      surface.removeEventListener('pointerdown', onPointerDown);
+      surface.removeEventListener('pointermove', onPointerMove);
+      surface.removeEventListener('pointerup', onPointerUp);
+      surface.removeEventListener('pointercancel', onPointerCancel);
+      resetGesture();
+    },
+  };
+});

frontend/mobile-queue-launcher.js

@@ -9,10 +9,12 @@
     draft: 'No drafts are ready to open.',
   };
   const continuation = [
+    ['delivery', 'Recover Delivery'],
     ['attention', 'Start Attention'],
     ['today', 'Continue Today'],
     ['update', 'Resume Updates'],
     ['agenda', 'Open Agenda'],
+    ['filed', 'Review Filed'],
     ['later', 'Start Later'],
     ['draft', 'Open Drafts'],
   ];
@@ -27,6 +29,7 @@
   }
 
   function open(name) {
+    if (name === 'delivery' && options.openDelivery) return options.openDelivery();
     if (name === 'today') return options.openToday();
     if (name === 'agenda') return options.openAgenda();
     if (name === 'update' && options.openUpdates) return options.openUpdates();

frontend/mobile-review-detail-nav.js

@@ -0,0 +1,81 @@
+function createMobileReviewDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block:'start',
+      behavior:prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'feedback' && options.summaryComposer && navigationOptions.focus !== false) {
+      options.summaryComposer.focus({ preventScroll:true });
+    }
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    select('overview');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root:root || null,
+          rootMargin:'-20% 0px -60% 0px',
+          threshold:[0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileReviewDetailNavigation;

frontend/mobile-search-preview-nav.js

@@ -0,0 +1,130 @@
+function createMobileSearchPreviewNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const focusTargets = options.focusTargets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let replyAvailable = options.replyAvailable !== false;
+  let observer = null;
+  let navigationLockUntil = 0;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function setReplyAvailable(available) {
+    replyAvailable = Boolean(available);
+    const button = buttons.reply;
+    if (!button) return;
+    if (replyAvailable) button.removeAttribute('aria-disabled');
+    else button.setAttribute('aria-disabled', 'true');
+  }
+
+  function navigate(name) {
+    if (name === 'reply' && !replyAvailable) return false;
+    const target = targets[name];
+    if (!target) return false;
+    target.scrollIntoView({
+      block: 'start',
+      behavior: prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    navigationLockUntil = Date.now() + 500;
+    select(name);
+    const focusTarget = focusTargets[name] || (name === 'reply' ? target : null);
+    if (focusTarget) focusTarget.focus({preventScroll:true});
+    return true;
+  }
+
+  function reset(available = replyAvailable) {
+    setReplyAvailable(available);
+    select('overview');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset(replyAvailable);
+      const observe = options.observe || ((handler, observedTargets, root) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root,
+          rootMargin: '-20% 0px -60% 0px',
+          threshold: [0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        if (Date.now() < navigationLockUntil) return;
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .filter(entry => targetNames.get(entry.target) !== 'reply' || replyAvailable)
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) select(targetNames.get(visible.target));
+      }, Array.from(targetNames.keys()).filter(Boolean), options.root || null);
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+    setReplyAvailable,
+  };
+}
+
+function attachMobileSearchPreviewNavigation({document, window}) {
+  const bySection = name => document.querySelector('[data-search-preview-section="' + name + '"]');
+  const preview = document.getElementById('search-preview');
+  const reply = document.getElementById('search-preview-reply-workspace');
+  const navigation = createMobileSearchPreviewNavigation({
+    root:document.querySelector('.search-preview-panel'),
+    buttons:{
+      overview:bySection('overview'),
+      conversation:bySection('conversation'),
+      reply:bySection('reply'),
+      actions:bySection('actions'),
+    },
+    targets:{
+      overview:document.getElementById('search-preview-overview'),
+      conversation:document.getElementById('search-preview-conversation'),
+      reply,
+      actions:document.getElementById('search-preview-actions'),
+    },
+    focusTargets:{reply:document.getElementById('search-preview-reply')},
+    replyAvailable:!reply.hidden,
+    prefersReducedMotion:() => window.matchMedia('(prefers-reduced-motion: reduce)').matches,
+  });
+  navigation.start();
+  new MutationObserver(() => navigation.setReplyAvailable(!reply.hidden)).observe(reply, {
+    attributes:true, attributeFilter:['hidden'],
+  });
+  new MutationObserver(() => {
+    if (preview.classList.contains('open')) navigation.reset(!reply.hidden);
+  }).observe(preview, {attributes:true, attributeFilter:['class']});
+  ['previous-search-result', 'next-search-result'].forEach(id => {
+    document.getElementById(id).addEventListener('click', () => {
+      setTimeout(() => navigation.reset(!reply.hidden), 0);
+    });
+  });
+  return navigation;
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileSearchPreviewNavigation;
+else attachMobileSearchPreviewNavigation({document, window});

frontend/mobile-start-day.js

@@ -0,0 +1,149 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createMobileStartDay = factory;
+})(typeof self !== 'undefined' ? self : this, function createMobileStartDay(options) {
+  const checkpointKey = 'stackchain.mobile-start-day.v1';
+  const storage = options.storage || (typeof localStorage !== 'undefined' ? localStorage : null);
+  const reviewOrder = [
+    ['delivery', 'Delivery recovery'],
+    ['agenda', 'Agenda'],
+    ['attention', 'Attention'],
+    ['update', 'Updates'],
+    ['filed', 'Filed'],
+  ];
+
+  function count(value) {
+    return Math.max(0, Number(value) || 0);
+  }
+
+  function localDay() {
+    const now = new Date();
+    const pad = value => String(value).padStart(2, '0');
+    return now.getFullYear() + '-' + pad(now.getMonth() + 1) + '-' + pad(now.getDate());
+  }
+
+  function identity() {
+    try {
+      return {
+        login: String(options.getLogin ? options.getLogin() : '').trim(),
+        day: String(options.getDay ? options.getDay() : localDay()),
+      };
+    } catch (_) {
+      return {login:'', day:''};
+    }
+  }
+
+  function checkpoint() {
+    if (!storage) return null;
+    const current = identity();
+    if (!current.login || !current.day) return null;
+    try {
+      const saved = JSON.parse(storage.getItem(checkpointKey) || 'null');
+      return saved?.login === current.login && saved?.day === current.day ? saved : null;
+    } catch (_) {
+      return null;
+    }
+  }
+
+  function saveCheckpoint(phase = null) {
+    if (!storage) return false;
+    const current = identity();
+    if (!current.login || !current.day) return false;
+    try {
+      storage.setItem(checkpointKey, JSON.stringify({...current, phase}));
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function clearCheckpoint() {
+    if (!storage || !checkpoint()) return false;
+    try {
+      storage.removeItem(checkpointKey);
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function briefing() {
+    const counts = options.getCounts ? options.getCounts() : {};
+    const phases = reviewOrder
+      .map(([name, label]) => ({name, label, count: count(counts[name])}))
+      .filter(phase => phase.count > 0);
+    const total = phases.reduce((sum, phase) => sum + phase.count, 0);
+    const today = count(counts.today);
+    const delivery = count(counts.delivery);
+    const other = total - delivery;
+    const next = phases.length ? phases[0].name : (today ? 'today' : 'find');
+    const nextLabel = next === 'delivery' ? 'Review Delivery' :
+      (phases.length ? 'Review ' + phases[0].label : (today ? 'Continue Today' : 'Find Work'));
+    return {
+      total,
+      next,
+      label: nextLabel,
+      summary: delivery ? delivery + (delivery === 1 ? ' delivery needs' : ' deliveries need') +
+        ' action before Today' + (other ? ' · ' + other + ' other ' + (other === 1 ? 'item' : 'items') : '') +
+        ' · ' + today + ' planned' :
+        total ? total + ' items before Today · ' + today + ' planned' :
+        (today ? 'Review clear · ' + today + ' planned' : 'Review clear · Today is empty'),
+      phases,
+    };
+  }
+
+  function startNext() {
+    const next = briefing().next;
+    if (reviewOrder.some(([name]) => name === next)) saveCheckpoint(next);
+    else clearCheckpoint();
+    options.openQueue(next);
+    return next;
+  }
+
+  function state() {
+    const current = briefing();
+    return {active:Boolean(checkpoint()), next:current.next, label:current.label};
+  }
+
+  function completePhase(phase) {
+    const saved = checkpoint();
+    if (!saved || (saved.phase && saved.phase !== phase)) return false;
+    const current = render();
+    saveCheckpoint();
+    if (options.onHandoff) options.onHandoff(current);
+    return true;
+  }
+
+  function reconcile({authoritative = false, authoritativePhases = []} = {}) {
+    const saved = checkpoint();
+    if (!saved?.phase || (!authoritative && !authoritativePhases.includes(saved.phase))) return false;
+    const counts = options.getCounts ? options.getCounts() : {};
+    if (count(counts[saved.phase]) > 0) return false;
+    return completePhase(saved.phase);
+  }
+
+  function finish() {
+    const cleared = clearCheckpoint();
+    render();
+    return cleared;
+  }
+
+  function render() {
+    const current = briefing();
+    if (!options.elements) return current;
+    options.elements.summary.textContent = current.summary;
+    options.elements.phases.textContent = current.phases.length ?
+      current.phases.map(phase => phase.label + ' ' + phase.count).join(' · ') :
+      'All urgent queues reviewed';
+    options.elements.action.textContent = checkpoint() ? 'Resume preparation · ' + current.label : current.label;
+    if (options.elements.finish) options.elements.finish.hidden = !checkpoint();
+    return current;
+  }
+
+  function start() {
+    render();
+    if (options.elements) options.elements.action.addEventListener('click', startNext);
+  }
+
+  return {briefing, completePhase, finish, reconcile, render, start, startNext, state};
+});

frontend/mobile-task-dock.js

@@ -66,9 +66,9 @@
   function updateWork(mode) {
     const text = {
       continue:'Continue', resume:'Resume', start:'Start', plan:'Plan', find:'Find',
-      attention:'Attention', update:'Updates', agenda:'Agenda', later:'Later', draft:'Drafts',
+      delivery:'Delivery', attention:'Attention', update:'Updates', agenda:'Agenda', filed:'Filed', later:'Later', draft:'Drafts',
     }[mode] || 'Work';
-    const queue = ['Attention', 'Updates', 'Agenda', 'Later', 'Drafts'].includes(text);
+    const queue = ['Delivery', 'Attention', 'Updates', 'Agenda', 'Filed', 'Later', 'Drafts'].includes(text);
     if (options.workLabel) options.workLabel.textContent = text;
     if (buttons.work) buttons.work.setAttribute('aria-label', queue
       ? (mode === 'update' ? 'Resume ' : 'Open ') + text
@@ -91,9 +91,9 @@
   }
 
   function updateQueues(counts) {
-    const names = 'today agenda attention update filed later draft'.split(' ');
+    const names = 'today agenda delivery attention update filed later draft'.split(' ');
     const normalized = Object.fromEntries(names.map(name => [name, Math.max(0, Number(counts?.[name]) || 0)]));
-    const actionableNames = ['today', 'attention', 'update', 'filed', 'later', 'draft'];
+    const actionableNames = ['today', 'delivery', 'attention', 'update', 'filed', 'later', 'draft'];
     const active = actionableNames.reduce((total, name) => total + (normalized[name] > 0 ? 1 : 0), 0);
     Object.entries(options.queueCounts || {}).forEach(([name, element]) => {
       element.textContent = String(normalized[name] || 0);
@@ -117,6 +117,7 @@
       ? 'Queues: no active queues; no upcoming deadlines'
       : 'Queues: Today ' + normalized.today
         + ', Agenda ' + normalized.agenda + ' due'
+        + ', Delivery ' + normalized.delivery
         + ', Attention ' + normalized.attention
         + ', Updates ' + normalized.update
         + ', Filed ' + normalized.filed

frontend/mobile-update-detail-nav.js

@@ -0,0 +1,88 @@
+function createMobileUpdateDetailNavigation(options) {
+  const buttons = options.buttons || {};
+  const targets = options.targets || {};
+  const listeners = new Map();
+  const prefersReducedMotion = options.prefersReducedMotion || (() => false);
+  const targetNames = new Map(Object.entries(targets).map(([name, target]) => [target, name]));
+  let observer = null;
+
+  function select(name) {
+    Object.entries(buttons).forEach(([key, button]) => {
+      if (!button) return;
+      if (key === name) button.setAttribute('aria-current', 'location');
+      else button.removeAttribute('aria-current');
+    });
+  }
+
+  function navigate(name, navigationOptions = {}) {
+    if (name === 'activity') {
+      if (options.jumpToNewActivity) options.jumpToNewActivity();
+      select(name);
+      return true;
+    }
+    const target = targets[name];
+    if (!target) return false;
+    if (name === 'context') target.open = true;
+    target.scrollIntoView({
+      block:'start',
+      behavior:prefersReducedMotion() ? 'auto' : 'smooth',
+    });
+    if (name === 'reply' && options.replyComposer && navigationOptions.focus !== false) {
+      options.replyComposer.focus({ preventScroll:true });
+    }
+    select(name);
+    return true;
+  }
+
+  function reset() {
+    if (targets.context) targets.context.open = false;
+    select('activity');
+  }
+
+  return {
+    start() {
+      Object.entries(buttons).forEach(([name, button]) => {
+        if (!button || listeners.has(button)) return;
+        const listener = event => {
+          event.preventDefault();
+          navigate(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:false });
+        };
+        listeners.set(button, listener);
+        button.addEventListener('click', listener);
+      });
+      reset();
+      const observe = options.observe || ((handler, observedTargets) => {
+        if (typeof IntersectionObserver === 'undefined') return null;
+        const instance = new IntersectionObserver(handler, {
+          root:options.root || null,
+          rootMargin:'-20% 0px -60% 0px',
+          threshold:[0, 0.25, 0.5, 0.75, 1],
+        });
+        observedTargets.forEach(target => instance.observe(target));
+        return instance;
+      });
+      observer = observe(entries => {
+        const visible = entries
+          .filter(entry => entry.isIntersecting && targetNames.has(entry.target))
+          .sort((left, right) => right.intersectionRatio - left.intersectionRatio)[0];
+        if (visible) {
+          const name = targetNames.get(visible.target);
+          select(name);
+          if (options.onSectionChange) options.onSectionChange(name, { replace:true });
+        }
+      }, Array.from(targetNames.keys()).filter(Boolean));
+    },
+    stop() {
+      listeners.forEach((listener, button) => button.removeEventListener('click', listener));
+      listeners.clear();
+      if (observer) observer.disconnect();
+      observer = null;
+    },
+    navigate,
+    reset,
+    select,
+  };
+}
+
+if (typeof module !== 'undefined') module.exports = createMobileUpdateDetailNavigation;

frontend/mobile-work-entry.js

@@ -5,7 +5,7 @@
   function mode() {
     if (options.isTodayActive()) return 'continue';
     const recommended = options.queueLauncher && options.queueLauncher.recommend();
-    if (recommended && recommended.name !== 'today') return recommended.name;
+    if (recommended && !['today', 'find'].includes(recommended.name)) return recommended.name;
     if (options.getTodayCount() > 0 && options.isTodayResumable()) return 'resume';
     if (options.getTodayCount() > 0) return 'start';
     if (options.getEligibleCount() > 0) return 'plan';

frontend/my-work.js

@@ -71,20 +71,23 @@ function buildMyWork(data, now = new Date()) {
     const assigned = (item.assignees || []).includes(login);
     const isReview = (item.work_reasons || []).includes('review_requested');
     const isFiled = (item.work_reasons || []).includes('created_by_me');
+    const isCompleted = isFiled && item.state === 'closed';
     const due = item.kind === 'issue' ? issueDueState(item.due_date, now) : null;
     const normalized = {
       ...item,
       key: (item.repository || 'unknown') + '#' + item.number,
       is_review: isReview,
       is_filed: isFiled,
+      is_completed: isCompleted,
       is_assigned: assigned,
       has_update: false,
       ...(due ? { due_label: due.label } : {}),
       reason: priorityLabel ? priorityLabel + ' priority' :
         (due && due.priority < 4 ? due.label :
-          (isReview ? 'Needs your review' : (assigned ? 'Assigned to you' : (isFiled ? 'Filed by you' : 'Open work')))),
+          (isReview ? 'Needs your review' : (isCompleted ? 'Completed · review outcome' :
+            (assigned ? 'Assigned to you' : (isFiled ? 'Filed by you' : 'Open work'))))),
       _priority: priorityLabel ? 0 :
-        (due && due.priority < 4 ? due.priority : (isReview ? 3 : (assigned ? 4 : 5))),
+        (due && due.priority < 4 ? due.priority : (isReview ? 3 : (isCompleted ? 3.5 : (assigned ? 4 : 5)))),
     };
     normalized.needs_attention = needsAttention(normalized);
     normalized.attention_reason = attentionReason(normalized);
@@ -666,6 +669,111 @@ function filterMyWork(items, selectedFilter, selectedMilestone = 'all') {
   );
 }
 
+function createCompletedFiledReview({
+  storage,
+  getLogin,
+  key = 'stackchain.completed-filed-review.v1',
+}) {
+  const login = () => String(getLogin?.() || '').trim();
+  const ownerKey = () => key + ':' + login();
+  const identity = item => String(item?.repository || '') + '#' + String(item?.number || '');
+  const read = () => {
+    if (!login()) return { items:{}, pending:{} };
+    try {
+      const value = JSON.parse(storage?.getItem(ownerKey()) || '{}');
+      return value && value.version === 1 && value.items && typeof value.items === 'object' ? {
+        items:value.items,
+        pending:value.pending && typeof value.pending === 'object' ? value.pending : {},
+      } : { items:{}, pending:{} };
+    } catch (_error) { return { items:{}, pending:{} }; }
+  };
+  const receipt = (item, stamp = String(item?.updated_at || '')) => ({
+    repository:String(item?.repository || ''), number:item?.number, updated_at:stamp,
+  });
+  const save = value => storage?.setItem(ownerKey(), JSON.stringify({ version:1, ...value }));
+  const partition = items => {
+    const acknowledged = read().items;
+    const needsReview = [];
+    const reviewed = [];
+    (items || []).forEach(item => {
+      const isReviewed = item?.is_completed &&
+        acknowledged[identity(item)] === String(item.updated_at || '');
+      (isReviewed ? reviewed : needsReview).push(item);
+    });
+    reviewed.sort((left, right) => String(right.updated_at || '').localeCompare(String(left.updated_at || '')));
+    return { needsReview, reviewed };
+  };
+  return {
+    partition,
+    visible(items) {
+      return partition(items).needsReview;
+    },
+    pending() {
+      const state = read();
+      return Object.entries(state.pending).map(([itemIdentity, stamp]) => {
+        const boundary = itemIdentity.lastIndexOf('#');
+        return receipt({
+          repository:itemIdentity.slice(0, boundary),
+          number:Number(itemIdentity.slice(boundary + 1)),
+        }, stamp);
+      });
+    },
+    adopt(snapshot) {
+      const state = read();
+      let changed = false;
+      (snapshot?.receipts || []).forEach(remote => {
+        const itemIdentity = identity(remote);
+        const stamp = String(remote?.updated_at || '');
+        if (!remote?.repository || !Number.isInteger(remote?.number) || !stamp) return;
+        if (!state.items[itemIdentity] || state.items[itemIdentity] < stamp) {
+          state.items[itemIdentity] = stamp;
+          changed = true;
+        }
+        if (state.pending[itemIdentity] && state.pending[itemIdentity] <= stamp) {
+          delete state.pending[itemIdentity];
+        }
+      });
+      try { save(state); } catch (_error) { return false; }
+      return changed;
+    },
+    acknowledge(item) {
+      const stamp = String(item?.updated_at || '');
+      if (!login() || !item?.is_completed || !item?.repository || !Number.isInteger(item?.number) || !stamp) {
+        return false;
+      }
+      const state = read();
+      const entries = Object.entries({ ...state.items, [identity(item)]: stamp }).slice(-200);
+      const pending = Object.entries({ ...state.pending, [identity(item)]: stamp }).slice(-200);
+      try {
+        save({ items:Object.fromEntries(entries), pending:Object.fromEntries(pending) });
+        return true;
+      } catch (_error) { return false; }
+    },
+  };
+}
+
+function createFiledHistoryTabs({ root, review, onSelect }) {
+  const buttons = Array.from(root.querySelectorAll('[data-filed-view]'));
+  let partition = { needsReview:[], reviewed:[] };
+  buttons.forEach(button => button.addEventListener('click', () => onSelect(button.dataset.filedView)));
+  return {
+    prepare(items) {
+      partition = review.partition(items);
+      root.querySelector('#filed-needs-review-count').textContent =
+        partition.needsReview.filter(item => item.is_filed).length;
+      root.querySelector('#filed-reviewed-count').textContent = partition.reviewed.length;
+      return partition.needsReview;
+    },
+    render(selected, visible) {
+      root.hidden = !visible;
+      buttons.forEach(button =>
+        button.setAttribute('aria-pressed', String(button.dataset.filedView === selected))
+      );
+      return selected === 'reviewed' ? partition.reviewed : partition.needsReview;
+    },
+  };
+}
+
 function agendaMyWork(items, now = new Date()) {
   const start = new Date(now.getFullYear(), now.getMonth(), now.getDate());
   const today = localDay(start);
@@ -981,6 +1089,8 @@ function countMyWork(items) {
 
 if (typeof module !== 'undefined' && module.exports) {
   buildMyWork.filterMyWork = filterMyWork;
+  buildMyWork.createCompletedFiledReview = createCompletedFiledReview;
+  buildMyWork.createFiledHistoryTabs = createFiledHistoryTabs;
   buildMyWork.agendaMyWork = agendaMyWork;
   buildMyWork.milestoneLanes = milestoneLanes;
   buildMyWork.createWorkSession = createWorkSession;

frontend/private-data-inventory.js

@@ -0,0 +1,43 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.inspectStackchainPrivateDatabases = factory(root.indexedDB);
+})(typeof globalThis !== 'undefined' ? globalThis : this, function createPrivateDataInspector(indexedDB) {
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error || new Error('Private storage inventory failed.'));
+      request.onblocked = () => reject(new Error('Private storage inventory was blocked.'));
+    });
+  }
+
+  async function countDatabase(name) {
+    const database = await requestResult(indexedDB.open(name));
+    try {
+      const storeNames = Array.from(database.objectStoreNames);
+      if (!storeNames.length) return 0;
+      const transaction = database.transaction(storeNames, 'readonly');
+      const counts = await Promise.all(storeNames.map(storeName =>
+        requestResult(transaction.objectStore(storeName).count())
+      ));
+      return counts.reduce((total, count) => total + Number(count || 0), 0);
+    } finally {
+      database.close();
+    }
+  }
+
+  return async function inspectPrivateDatabases(registeredNames) {
+    if (!indexedDB?.databases) return { recordCount: 0, unavailable: true };
+    try {
+      const existing = new Set((await indexedDB.databases()).map(database => database.name));
+      const counts = await Promise.all(
+        registeredNames.filter(name => existing.has(name)).map(countDatabase)
+      );
+      return {
+        recordCount: counts.reduce((total, count) => total + count, 0),
+        unavailable: false,
+      };
+    } catch (_error) {
+      return { recordCount: 0, unavailable: true };
+    }
+  };
+});

frontend/private-data-registry.js

@@ -0,0 +1,12 @@
+(function (root) {
+  const databases = Object.freeze([
+    'stackchain-background-outbox-v1',
+    'stackchain-offline-work-v2',
+    'stackchain-unfiled-captures-v1',
+    'stackchain-voice-transcripts-v1',
+    'stackchain-search-reply-drafts-v1',
+    'stackchain-conversation-reply-drafts-v1',
+  ]);
+  if (typeof module !== 'undefined' && module.exports) module.exports = databases;
+  else root.stackchainPrivateDatabases = databases;
+})(typeof globalThis !== 'undefined' ? globalThis : this);

frontend/private-device-data.js

@@ -1,5 +1,10 @@
 (function (root, factory) {
-  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  if (typeof module !== 'undefined' && module.exports) {
+    module.exports = options => factory({
+      ...options,
+      privateDatabases: require('./private-data-registry.js'),
+    });
+  }
   else root.stackchainPrivateDeviceData = factory({
     localStorage: root.localStorage,
     sessionStorage: root.sessionStorage,
@@ -7,9 +12,10 @@
     caches: root.caches,
     serviceWorker: root.navigator?.serviceWorker,
     MessageChannel: root.MessageChannel,
+    privateDatabases: root.stackchainPrivateDatabases,
   });
 })(typeof window !== 'undefined' ? window : this, function createPrivateDeviceDataPurger({
-  localStorage, sessionStorage, indexedDB, caches, serviceWorker, MessageChannel,
+  localStorage, sessionStorage, indexedDB, caches, serviceWorker, MessageChannel, privateDatabases,
 }) {
   function removeOwnedStorage(storage) {
     if (!storage) return;
@@ -49,12 +55,10 @@
   }
 
   return async function clearPrivateDeviceData() {
+    await stopWorkerOutbox();
     removeOwnedStorage(localStorage);
     if (sessionStorage !== localStorage) removeOwnedStorage(sessionStorage);
-    await stopWorkerOutbox();
-    await deletePrivateDatabase('stackchain-background-outbox-v1');
-    await deletePrivateDatabase('stackchain-offline-work-v2');
-    await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+    for (const name of privateDatabases) await deletePrivateDatabase(name);
     const keys = await caches?.keys?.() || [];
     await Promise.all(
       keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))

frontend/reconnect-outboxes.js

@@ -0,0 +1,44 @@
+function createReconnectOutboxes({
+  refresh,
+  restoreIdentity,
+  flushIssue,
+  flushAuthored,
+  flushNotificationReads,
+}) {
+  let activeReconnect = null;
+  let followUpRequested = false;
+
+  async function reconnectOnce() {
+    const snapshot = await refresh();
+    const freshness = snapshot?.freshness?.sections?.context;
+    const identityFresh = snapshot?.context && !snapshot.context.error &&
+      !freshness?.stale && !freshness?.degraded && !freshness?.revalidating;
+    const login = identityFresh ? String(snapshot.context.user?.login || '').trim() : '';
+    if (!login) return false;
+    restoreIdentity(login);
+    await Promise.all([
+      flushIssue(),
+      flushAuthored(),
+      flushNotificationReads(),
+    ]);
+    return true;
+  }
+
+  return function reconnectOutboxes() {
+    if (activeReconnect) {
+      followUpRequested = true;
+      return activeReconnect;
+    }
+    activeReconnect = (async () => {
+      let result = false;
+      do {
+        followUpRequested = false;
+        result = await reconnectOnce();
+      } while (followUpRequested);
+      return result;
+    })().finally(() => { activeReconnect = null; });
+    return activeReconnect;
+  };
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = createReconnectOutboxes;

frontend/search-preview.js

@@ -81,15 +81,18 @@
       }
       input.value = preview.replyDraft();
       const replying = state.status === 'replying';
-      buttons.forEach(button => { button.disabled = replying || !input.value.trim(); });
-      if (replying) status.textContent = 'Sending reply…';
+      buttons.forEach(button => {
+        button.disabled = replying || (!input.value.trim() && !preview.hasReplyAttachments?.());
+      });
+      if (replying) status.textContent = 'Saving reply for delivery…';
+      else if (state.status === 'queued') status.textContent = 'Reply queued. It will send when connected.';
       else if (state.status === 'replied') status.textContent = 'Reply posted.';
       else if (state.status === 'reply-error') status.textContent =
         state.error?.message || 'Reply failed. Your draft is safe; retry when ready.';
     };
   }
 })(typeof globalThis !== 'undefined' ? globalThis : this, function () {
-  return function createSearchPreview({ fetchJson, fetchConversation, mutate, share, postReply, storage, createOperationId, session, getSession, loadMore, onNavigate, navigationRoot, onState }) {
+  return function createSearchPreview({ fetchJson, fetchConversation, mutate, share, postReply, queueReply, prepareReply, afterReply, hasAttachments, clearAttachments, storage, createOperationId, session, getSession, loadMore, onNavigate, navigationRoot, onState }) {
     if (Array.isArray(session)) {
       getSession = session[0];
       loadMore = () => session[1].loadMore();
@@ -201,7 +204,11 @@
     }
 
     const api = {
+      hasReplyAttachments() {
+        return Boolean(hasAttachments?.());
+      },
       open(item) {
+        if (current && !sameItem(current, item) && hasAttachments?.()) clearAttachments?.();
         generation += 1;
         const requestGeneration = generation;
         current = { ...item };
@@ -225,6 +232,7 @@
         });
       },
       close() {
+        clearAttachments?.();
         generation += 1;
         current = null;
         onState({ status: 'closed' });
@@ -282,9 +290,11 @@
       },
       reply({ advance = false } = {}) {
         if (replyRequest) return replyRequest;
-        if (!current || typeof postReply !== 'function') return Promise.reject(new Error('Replying is unavailable.'));
+        if (!current || (typeof postReply !== 'function' && typeof queueReply !== 'function')) {
+          return Promise.reject(new Error('Replying is unavailable.'));
+        }
         const body = api.replyDraft().trim();
-        if (!body) return Promise.reject(new Error('Write a reply first.'));
+        if (!body && !hasAttachments?.()) return Promise.reject(new Error('Write a reply or add a photo first.'));
         const item = { ...current };
         const operationKey = replyKey(item, 'operation');
         let operationId = stored(operationKey);
@@ -293,13 +303,24 @@
           save(operationKey, operationId);
         }
         publish({ status:'replying', item:current, detail:current, conversation });
-        replyRequest = postReply(item, body, operationId).then(comment => {
-          const comments = [...(conversation?.comments || [])];
-          if (!comments.some(candidate => candidate?.id === comment?.id)) comments.push(comment);
-          conversation = { status:'ready', comments, olderPage:conversation?.olderPage ?? null };
+        replyRequest = (typeof queueReply === 'function' ?
+          Promise.resolve(queueReply(item, body, operationId)) :
+          Promise.resolve(typeof prepareReply === 'function' ? prepareReply(item, body) : body)
+            .then(preparedBody => {
+              if (!String(preparedBody || '').trim()) throw new Error('Write a reply or add a photo first.');
+              return postReply(item, preparedBody, operationId);
+            })
+        ).then(async comment => {
+          await afterReply?.(item);
+          if (!comment?.queued) {
+            const comments = [...(conversation?.comments || [])];
+            if (!comments.some(candidate => candidate?.id === comment?.id)) comments.push(comment);
+            conversation = { status:'ready', comments, olderPage:conversation?.olderPage ?? null };
+          }
           save(replyKey(item, 'draft'), '');
           save(operationKey, '');
-          publish({ status:'replied', item:current, detail:current, conversation, result:comment });
+          clearAttachments?.();
+          publish({ status:comment?.queued ? 'queued' : 'replied', item:current, detail:current, conversation, result:comment });
           return advance ? api.next().then(() => comment) : comment;
         }).catch(error => {
           publish({ status:'reply-error', item:current, detail:current, conversation, error });

frontend/search-reply-draft-store.js

@@ -0,0 +1,121 @@
+(function (root, factory) {
+  const createSearchReplyDraftStore = factory();
+  if (typeof module === 'object' && module.exports) module.exports = createSearchReplyDraftStore;
+  else root.createSearchReplyDraftStore = createSearchReplyDraftStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function () {
+  'use strict';
+
+  const dbName = 'stackchain-search-reply-drafts-v1';
+  const storeName = 'drafts';
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result ?? null);
+      request.onerror = () => reject(request.error || new Error('Search reply draft storage failed.'));
+    });
+  }
+
+  function createTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise;
+    function database() {
+      if (!databasePromise) databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(storeName)) {
+            request.result.createObjectStore(storeName, { keyPath:'id' });
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Search reply draft storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (operation, key, value) => {
+      const db = await database();
+      const transaction = db.transaction(storeName, operation === 'get' ? 'readonly' : 'readwrite');
+      const records = transaction.objectStore(storeName);
+      if (operation === 'put') return requestResult(records.put(value));
+      if (operation === 'delete') return requestResult(records.delete(key));
+      return requestResult(records.get(key));
+    };
+  }
+
+  function normalizedTarget(target) {
+    const kind = String(target?.kind || '');
+    const repository = String(target?.repository || '');
+    const number = Number(target?.number || 0);
+    if (!['issue', 'pull'].includes(kind) || !repository || !Number.isInteger(number) || number < 1) {
+      throw new Error('Choose a Search result before saving photo evidence.');
+    }
+    return { kind, repository, number };
+  }
+
+  function attachment(value) {
+    const blob = value?.blob;
+    const data = String(value?.data || '');
+    if (!blob && !data) throw new Error('A saved Search photo is unavailable.');
+    const note = String(value?.note || '').replace(/\s+/g, ' ').trim().slice(0, 240);
+    const operationId = String(value?.operationId || '').slice(0, 128);
+    const markdown = String(value?.confirmed?.markdown || '');
+    return {
+      filename:String(value?.filename || ''),
+      contentType:String(value?.contentType || ''),
+      ...(blob ? { blob } : { data }),
+      ...(note ? { note } : {}),
+      ...(operationId ? { operationId } : {}),
+      ...(markdown ? { confirmed:{ markdown } } : {}),
+    };
+  }
+
+  return function createSearchReplyDraftStore({
+    indexedDB = globalThis.indexedDB,
+    transaction,
+    getOwnerLogin = () => '',
+  } = {}) {
+    const transact = transaction || createTransaction(indexedDB);
+
+    function identity(target) {
+      const ownerLogin = String(getOwnerLogin() || '').trim();
+      if (!ownerLogin) throw new Error('Confirm your Gitea account before saving Search photos.');
+      const normalized = normalizedTarget(target);
+      return {
+        ownerLogin,
+        target:normalized,
+        id:[ownerLogin, normalized.kind, normalized.repository, normalized.number]
+          .map(value => encodeURIComponent(String(value))).join(':'),
+      };
+    }
+
+    async function save(target, values) {
+      if (!transact) throw new Error('Photo draft storage needs IndexedDB. Your current photos are still here.');
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const list = (Array.isArray(values) ? values : [values]).filter(Boolean).slice(0, 5).map(attachment);
+      if (!list.length) {
+        await transact('delete', id);
+        return null;
+      }
+      await transact('put', id, { id, version:1, ownerLogin, ...normalized, attachments:list });
+      return list;
+    }
+
+    async function load(target) {
+      if (!transact) return null;
+      const { id, ownerLogin, target:normalized } = identity(target);
+      const record = await transact('get', id);
+      if (record?.version !== 1 || record.ownerLogin !== ownerLogin || record.kind !== normalized.kind ||
+          record.repository !== normalized.repository || Number(record.number) !== normalized.number ||
+          !Array.isArray(record.attachments) || !record.attachments.length) return null;
+      return record.attachments.slice(0, 5).map(attachment);
+    }
+
+    async function remove(target) {
+      if (!transact) return false;
+      const { id } = identity(target);
+      await transact('delete', id);
+      return true;
+    }
+
+    return { save, load, remove };
+  };
+});

frontend/security-center.js

@@ -12,8 +12,49 @@
   const activityList = root.document.getElementById('security-activity-list');
   const activityStatus = root.document.getElementById('security-activity-status');
   const loadMoreActivity = root.document.getElementById('load-more-security-activity');
+  const sectionButtons = Object.fromEntries(['activity', 'devices', 'passkeys'].map(section => [
+    section, root.document.getElementById(`security-section-${section}`),
+  ]));
+  const sections = Object.fromEntries(['activity', 'devices', 'passkeys'].map(section => [
+    section, root.document.getElementById(`security-${section}-section`),
+  ]));
   let activityCursor = null;
 
+  const navigate = (section, { history = true } = {}) => {
+    if (!sections[section]) section = 'activity';
+    Object.entries(sectionButtons).forEach(([name, button]) => {
+      if (!button) return;
+      if (name === section) button.setAttribute('aria-current', 'page');
+      else button.removeAttribute('aria-current');
+    });
+    sections[section]?.scrollIntoView?.({ block: 'start' });
+    if (history && root.history?.pushState) {
+      root.history.pushState(
+        { ...(root.history.state || {}), stackchainSecuritySection: section },
+        '',
+        `${root.location.pathname}${root.location.search || ''}#security/${section}`,
+      );
+    }
+  };
+
+  Object.entries(sectionButtons).forEach(([section, button]) => {
+    button?.addEventListener('click', () => navigate(section));
+  });
+  root.document.getElementById('close-active-devices')?.addEventListener('click', () => {
+    if (root.history?.state?.stackchainSecuritySection) root.history.back();
+  });
+  root.addEventListener?.('popstate', event => {
+    const section = event.state?.stackchainSecuritySection;
+    if (section && !devicesSheet.hidden) {
+      navigate(section, { history: false });
+      return;
+    }
+    if (!devicesSheet.hidden) {
+      devicesSheet.hidden = true;
+      devicesButton?.focus();
+    }
+  });
+
   const renderDevices = async () => {
     devicesStatus.textContent = 'Loading active devices…';
     devicesList.replaceChildren();
@@ -40,7 +81,9 @@
         revoke.textContent = device.current ? 'Sign out' : 'Revoke';
         revoke.addEventListener('click', async () => {
           if (device.current) await boundary.signOut();
-          else if (await boundary.revokeActiveDevice(device)) await renderDevices();
+          else if (await boundary.revokeActiveDevice(device)) {
+            await Promise.all([renderDevices(), renderSecurityActivity()]);
+          }
         });
         row.append(details, revoke);
         devicesList.append(row);
@@ -82,6 +125,7 @@
                 : 'Passkey removed.';
               await renderPasskeys();
               if (outcome.session_revoked) await renderDevices();
+              await renderSecurityActivity();
             } else {
               remove.disabled = false;
               passkeysStatus.textContent = `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`;
@@ -122,7 +166,11 @@
           const details = root.document.createElement('span');
           details.className = 'small muted';
           details.textContent = formatted.detail;
-          row.append(title, details);
+          const action = root.document.createElement('button');
+          action.type = 'button';
+          action.textContent = 'Review devices';
+          action.addEventListener('click', () => navigate('devices'));
+          row.append(title, details, action);
           activityList.append(row);
         });
       }
@@ -150,6 +198,13 @@
           .filter(value => typeof value === 'string' && value).join(' · ');
         details.textContent = `${new Date(event.created_at * 1000).toLocaleString()}${context ? ' · ' + context : ''}`;
         row.append(title, details);
+        if (event.kind === 'passkey_counter_anomaly') {
+          const action = root.document.createElement('button');
+          action.type = 'button';
+          action.textContent = 'Review passkeys';
+          action.addEventListener('click', () => navigate('passkeys'));
+          row.append(action);
+        }
         activityList.append(row);
       });
       activityCursor = page.next_cursor;
@@ -169,6 +224,7 @@
     if (!devicesSheet) return;
     devicesSheet.hidden = false;
     root.document.getElementById('close-active-devices')?.focus();
+    navigate('activity', { history: root.history?.state?.stackchainSecuritySection !== 'activity' });
     return Promise.all([renderDevices(), renderPasskeys(), renderSecurityActivity()]);
   };
   devicesButton?.addEventListener('click', open);
@@ -186,5 +242,5 @@
       enrollPasskey.disabled = false;
     }
   });
-  return { open, renderDevices, renderPasskeys, renderSecurityActivity };
+  return { open, navigate, renderDevices, renderPasskeys, renderSecurityActivity };
 });

frontend/service-worker.js

@@ -1,10 +1,12 @@
 const BASE = new URL('./', self.location.href).pathname;
+importScripts(BASE + 'static/private-data-registry.js');
 importScripts(BASE + 'static/background-issue-sync.js');
-const CACHE = 'stackchain-dashboard-shell-v102';
+const CACHE = 'stackchain-dashboard-shell-v117';
 const OFFLINE_LEASE_URL = new URL(BASE + '__offline-session-lease', self.location.origin).href;
 const OUTAGE_STATUSES = new Set([500, 502, 503, 504]);
 const NAVIGATION_TIMEOUT_MS = self.__STACKCHAIN_NAVIGATION_TIMEOUT_MS || 4000;
 const PUSH_ACTION_TIMEOUT_MS = self.__STACKCHAIN_PUSH_ACTION_TIMEOUT_MS || 8000;
+const PRIVATE_DATABASES = self.stackchainPrivateDatabases;
 const SHELL = [
   BASE,
   BASE + 'manifest.webmanifest',
@@ -14,12 +16,16 @@ const SHELL = [
   BASE + 'static/icons/stackchain-512.png',
   BASE + 'static/session.js',
   BASE + 'static/feature-loader.js',
+  BASE + 'static/workspace-bootstrap.js',
   BASE + 'static/conversation-action-hydrator.js',
   BASE + 'static/security-center.js',
   BASE + 'static/markdown.js',
   BASE + 'static/commands.js',
   BASE + 'static/saved-searches.js',
   BASE + 'static/search-preview.js',
+  BASE + 'static/search-reply-draft-store.js',
+  BASE + 'static/conversation-reply-draft-store.js',
+  BASE + 'static/conversation-photo-drafts.js',
   BASE + 'static/search-defer.js',
   BASE + 'static/widgets.js',
   BASE + 'static/drafts.js',
@@ -30,6 +36,7 @@ const SHELL = [
   BASE + 'static/draft-capacity-dialog.js',
   BASE + 'static/outbox-coordinator.js',
   BASE + 'static/issue-outbox.js',
+  BASE + 'static/reconnect-outboxes.js',
   BASE + 'static/authored-outbox.js',
   BASE + 'static/offline-issue-close.js',
   BASE + 'static/offline-issue-blocker.js',
@@ -45,6 +52,8 @@ const SHELL = [
   BASE + 'static/today-work.js',
   BASE + 'static/today-timer.js',
   BASE + 'static/today-recap.js',
+  BASE + 'static/today-wrap-up.js',
+  BASE + 'static/today-handoff.js',
   BASE + 'static/today-completion.js',
   BASE + 'static/today-readiness.js',
   BASE + 'static/comment-next.js',
@@ -71,9 +80,22 @@ const SHELL = [
   BASE + 'static/issue-attachment.js',
   BASE + 'static/issue-filing-review.js',
   BASE + 'static/issue-sheet.js',
+  BASE + 'static/mobile-issue-detail-nav.js',
+  BASE + 'static/mobile-update-detail-nav.js',
+  BASE + 'static/mobile-review-detail-nav.js',
+  BASE + 'static/mobile-search-preview-nav.js',
+  BASE + 'static/mobile-plan-today-nav.js',
+  BASE + 'static/mobile-find-work-nav.js',
+  BASE + 'static/mobile-pull-refresh.js',
+  BASE + 'static/checklist-conflict.js',
+  BASE + 'static/voice-transcript-store.js',
+  BASE + 'static/voice-issue-capture.js',
+  BASE + 'static/voice-conversation-capture.js',
   BASE + 'static/create-issue-sheet.js',
+  BASE + 'static/mobile-create-issue-nav.js',
   BASE + 'static/create-and-start.js',
   BASE + 'static/assign-and-start.js',
+  BASE + 'static/filed-claim.js',
   BASE + 'static/queue-today.js',
   BASE + 'static/pull-sheet.js',
   BASE + 'static/review-sheet.js',
@@ -84,6 +106,8 @@ const SHELL = [
   BASE + 'static/mobile-task-dock.js',
   BASE + 'static/mobile-work-entry.js',
   BASE + 'static/mobile-queue-launcher.js',
+  BASE + 'static/mobile-delivery-recovery.js',
+  BASE + 'static/mobile-start-day.js',
   BASE + 'static/update-triage-session.js',
   BASE + 'static/update-review-handoff.js',
   BASE + 'static/update-read-position.js',
@@ -93,8 +117,12 @@ const SHELL = [
   BASE + 'static/update-decision-transaction.js',
   BASE + 'static/agenda-session-launcher.js',
   BASE + 'static/mobile-launch.js',
+  BASE + 'static/mobile-insights.js',
   BASE + 'static/mobile-app-shortcuts.js',
   BASE + 'static/install-app.js',
+  BASE + 'static/private-data-inventory.js',
+  BASE + 'static/private-device-data.js',
+  BASE + 'static/device-storage.js',
   BASE + 'static/mobile-device-setup.js',
   BASE + 'static/mobile-search-viewport.js',
   BASE + 'static/mobile-composer-viewport.js',
@@ -109,6 +137,7 @@ const OPTIONAL_FEATURES = [
 const SHARED_IMAGE_ID = 'shared-image';
 const SHARED_IMAGE_TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 const MAX_SHARED_IMAGE_BYTES = 12 * 1024 * 1024;
+const SHARE_TARGET_PATH = BASE + 'share-target';
 const sharedAttachmentStore = self.__STACKCHAIN_SHARED_ATTACHMENT_STORE || createUnfiledAttachmentStore();
 
 function boundedShareField(form, name, limit) {
@@ -116,45 +145,46 @@ function boundedShareField(form, name, limit) {
   return typeof value === 'string' ? value.trim().slice(0, limit) : '';
 }
 
-async function acceptSharedContent(request) {
-  const form = await request.formData();
-  const images = form.getAll('image').filter(value => typeof value !== 'string' && value?.size > 0);
-  let marker = '';
-  await sharedAttachmentStore.delete(SHARED_IMAGE_ID).catch(() => {});
-  if (images.length > 5) marker = 'multiple';
-  else if (images.length > 0) {
-    const supported = images.every(image =>
-      SHARED_IMAGE_TYPES.has(String(image.type || '')) && image.size <= MAX_SHARED_IMAGE_BYTES
-    );
-    if (!supported) {
-      marker = 'unsupported';
-    } else if (images.length === 1) {
-      const image = images[0];
-      await sharedAttachmentStore.put(SHARED_IMAGE_ID, {
-        filename:String(image.name || 'shared-screenshot').slice(0, 255),
-        contentType:String(image.type), blob:image,
-      });
-      marker = 'image';
-    } else {
-      await sharedAttachmentStore.put(SHARED_IMAGE_ID, {
-        attachments:images.map(image => ({
-          filename:String(image.name || 'shared-screenshot').slice(0, 255),
-          contentType:String(image.type), blob:image,
-        })),
-      });
-      marker = 'images';
-    }
-  }
+function sharedContentRedirect(marker) {
   const target = new URL(BASE, self.location.origin);
   target.searchParams.set('launch', 'new');
   if (marker) target.searchParams.set('shared', marker);
-  for (const [name, limit] of [['title', 255], ['text', 10000], ['url', 2048]]) {
-    const value = boundedShareField(form, name, limit);
-    if (value) target.searchParams.set(name, value);
-  }
   return new Response(null, {status:303, headers:{Location:target.pathname + target.search}});
 }
 
+async function acceptSharedContent(request) {
+  if (request.headers.get('Sec-Fetch-Site') === 'cross-site') {
+    return new Response('Cross-site share submissions are not accepted.', {
+      status:403,
+      headers:{'Content-Type':'text/plain; charset=utf-8','Cache-Control':'no-store'},
+    });
+  }
+  const form = await request.formData();
+  const images = form.getAll('image').filter(value => typeof value !== 'string' && value?.size > 0);
+  const content = {
+    title:boundedShareField(form, 'title', 255),
+    text:boundedShareField(form, 'text', 10000),
+    url:boundedShareField(form, 'url', 2048),
+  };
+  if (images.length > 5) return sharedContentRedirect('multiple');
+  const supported = images.every(image =>
+    SHARED_IMAGE_TYPES.has(String(image.type || '')) && image.size <= MAX_SHARED_IMAGE_BYTES
+  );
+  const totalBytes = images.reduce((total, image) => total + image.size, 0);
+  if (!supported || totalBytes > MAX_SHARED_IMAGE_BYTES) return sharedContentRedirect('unsupported');
+  if (!images.length && !Object.values(content).some(Boolean)) return sharedContentRedirect('unsupported');
+  const attachments = images.map(image => ({
+    filename:String(image.name || 'shared-screenshot').slice(0, 255),
+    contentType:String(image.type), blob:image,
+  }));
+  try {
+    await sharedAttachmentStore.put(SHARED_IMAGE_ID, {...content, attachments});
+  } catch (_error) {
+    return sharedContentRedirect('unavailable');
+  }
+  return sharedContentRedirect('bundle');
+}
+
 async function fetchNavigation(request) {
   const controller = new AbortController();
   let timeout;
@@ -210,9 +240,13 @@ async function deletePrivateDatabase(name) {
   });
 }
 
+async function deletePrivateDatabases() {
+  for (const name of PRIVATE_DATABASES) await deletePrivateDatabase(name);
+}
+
 async function purgeRevokedSessionData() {
   await issueSync.purge();
-  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+  await deletePrivateDatabases();
   const keys = await caches.keys();
   await Promise.all(
     keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -249,7 +283,7 @@ async function offlineLeaseState(cache) {
 
 async function expiredOfflineResponse() {
   await issueSync.purge();
-  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+  await deletePrivateDatabases();
   const keys = await caches.keys();
   await Promise.all(
     keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -342,15 +376,40 @@ self.addEventListener('install', event => {
   event.waitUntil(caches.open(CACHE).then(cache => cache.addAll(SHELL)).then(() => self.skipWaiting()));
 });
 
+async function warmOptionalFeature(cache, staleCacheNames, asset) {
+  for (const cacheName of staleCacheNames) {
+    const staleCache = await caches.open(cacheName);
+    const cached = await staleCache.match(asset);
+    if (cached) {
+      await cache.put(asset, cached);
+      return;
+    }
+  }
+  await cache.add(asset);
+}
+
+async function cachedOptionalFeature(request) {
+  const cached = await caches.match(request);
+  if (cached) return cached;
+  const response = await fetch(request);
+  if (response.ok) {
+    const cache = await caches.open(CACHE);
+    await cache.put(request, response.clone());
+  }
+  return response;
+}
+
 self.addEventListener('activate', event => {
   event.waitUntil((async () => {
     const keys = await caches.keys();
-    await Promise.all(
-      keys.filter(key => key.startsWith('stackchain-dashboard-') && key !== CACHE)
-        .map(key => caches.delete(key))
+    const staleCacheNames = keys.filter(
+      key => key.startsWith('stackchain-dashboard-') && key !== CACHE
     );
     const cache = await caches.open(CACHE);
-    await Promise.allSettled(OPTIONAL_FEATURES.map(asset => cache.add(asset)));
+    await Promise.allSettled(
+      OPTIONAL_FEATURES.map(asset => warmOptionalFeature(cache, staleCacheNames, asset))
+    );
+    await Promise.all(staleCacheNames.map(key => caches.delete(key)));
     await self.clients.claim();
   })());
 });
@@ -370,7 +429,7 @@ self.addEventListener('message', event => {
   if (event.data?.type === 'stackchain-purge-outbox') event.waitUntil((async () => {
     try {
       await issueSync.purge();
-      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+      await deletePrivateDatabases();
       event.ports?.[0]?.postMessage({ ok: true });
     } catch (error) {
       event.ports?.[0]?.postMessage({ ok: false, error: String(error?.message || 'Outbox purge failed.') });
@@ -555,7 +614,7 @@ self.addEventListener('fetch', event => {
   const requestUrl = new URL(request.url);
   if (
     request.method === 'POST' && request.mode === 'navigate'
-    && requestUrl.origin === self.location.origin && requestUrl.pathname === BASE
+    && requestUrl.origin === self.location.origin && requestUrl.pathname === SHARE_TARGET_PATH
   ) {
     event.respondWith(acceptSharedContent(request));
     return;
@@ -592,6 +651,6 @@ self.addEventListener('fetch', event => {
     return;
   }
   if (url.origin === self.location.origin && OPTIONAL_FEATURES.includes(url.pathname)) {
-    event.respondWith(caches.match(request).then(cached => cached || fetch(request)));
+    event.respondWith(cachedOptionalFeature(request));
   }
 });

frontend/session.js

@@ -1,5 +1,10 @@
 (function (root, factory) {
-  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  if (typeof module !== 'undefined' && module.exports) {
+    module.exports = options => factory({
+      ...options,
+      privateDatabases: require('./private-data-registry.js'),
+    });
+  }
   else {
     const base = new URL('./', root.location.href).pathname;
     const originalFetch = root.fetch.bind(root);
@@ -15,6 +20,7 @@
       serviceWorker: root.navigator?.serviceWorker,
       credentials: root.navigator?.credentials,
       MessageChannel: root.MessageChannel,
+      privateDatabases: root.stackchainPrivateDatabases,
       location: root.location,
       addActivityListener: (type, listener, options) => root.addEventListener(type, listener, options),
       confirmAction: message => root.confirm(message),
@@ -30,6 +36,7 @@
     root.fetch = boundary.fetch;
     const attach = () => {
       boundary.startActivityHeartbeat();
+      boundary.startReconnectResume();
       const button = root.document.getElementById('sign-out');
       if (button) button.addEventListener('click', () => boundary.signOut());
       const allDevicesButton = root.document.getElementById('sign-out-all');
@@ -82,7 +89,7 @@
     root.stackchainSession = boundary;
   }
 })(typeof window !== 'undefined' ? window : this, function createSessionBoundary({
-  cookie, origin, base, fetchImpl, localStorage, sessionStorage, indexedDB, caches, serviceWorker, credentials, MessageChannel, location, confirmAction, addActivityListener,
+  cookie, origin, base, fetchImpl, localStorage, sessionStorage, indexedDB, caches, serviceWorker, credentials, MessageChannel, privateDatabases, location, confirmAction, addActivityListener,
   promptAuthorization = () => null,
   onExpired = () => {},
   onClearError = () => {},
@@ -381,6 +388,12 @@
     });
   }
 
+  function startReconnectResume() {
+    addActivityListener?.('online', async () => {
+      if (await refreshOfflineLease()) await resumeQueuedWork();
+    });
+  }
+
   async function refreshOfflineLease() {
     try {
       const response = await sessionFetch(base + 'api/v1/session');
@@ -454,9 +467,7 @@
     if (sessionStorage !== localStorage) removeDashboardStorage(sessionStorage);
     try {
       await stopWorkerOutbox();
-      await deletePrivateDatabase('stackchain-background-outbox-v1');
-      await deletePrivateDatabase('stackchain-offline-work-v2');
-      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
+      for (const name of privateDatabases) await deletePrivateDatabase(name);
     } catch (_error) {
       const error = new Error('Could not clear private queued work from this device.');
       onClearError(error);
@@ -613,6 +624,7 @@
     handleServiceWorkerMessage,
     refreshOfflineLease,
     resumeQueuedWork,
+    startReconnectResume,
     recordActivity,
     startActivityHeartbeat,
   };

frontend/shared-image-capture.js

@@ -8,14 +8,35 @@
   const RECORD_ID = 'shared-image';
   const TYPES = new Set(['image/png', 'image/jpeg', 'image/webp']);
 
-  async function consume({marker, store, restore, status = () => {}}) {
+  async function consume({marker, store, restore, restoreContent = () => {}, status = () => {}}) {
     if (!marker) return false;
+    const value = await store?.get(RECORD_ID);
+    const attachments = Array.isArray(value?.attachments) ? value.attachments : null;
+    if (marker === 'bundle') {
+      const content = {
+        title:typeof value?.title === 'string' ? value.title.slice(0, 255) : '',
+        text:typeof value?.text === 'string' ? value.text.slice(0, 10000) : '',
+        url:typeof value?.url === 'string' ? value.url.slice(0, 2048) : '',
+      };
+      const invalidAttachments = !attachments || attachments.length > 5 || attachments.some(attachment =>
+        !attachment?.blob || !attachment.filename || !TYPES.has(String(attachment.contentType || '')));
+      if (invalidAttachments || (!attachments.length && !Object.values(content).some(Boolean))) {
+        status('The shared content is unavailable. Share it again.');
+        return false;
+      }
+      restoreContent(content);
+      if (attachments.length) restore(attachments);
+      await store.delete(RECORD_ID);
+      const noun = attachments.length === 1 ? 'screenshot' : attachments.length > 1 ? 'screenshots' : 'content';
+      status(attachments.length
+        ? 'Shared content and ' + (attachments.length > 1 ? attachments.length + ' ' : '') + noun + ' ready to file with this issue.'
+        : 'Shared content ready to file with this issue.');
+      return true;
+    }
     if (!['image', 'images'].includes(marker)) {
       status('Share one PNG, JPEG, or WebP screenshot.');
       return false;
     }
-    const value = await store?.get(RECORD_ID);
-    const attachments = Array.isArray(value?.attachments) ? value.attachments : null;
     if (marker === 'images') {
       if (!attachments?.length || attachments.length > 5 || attachments.some(attachment =>
         !attachment?.blob || !attachment.filename || !TYPES.has(String(attachment.contentType || '')))) {

frontend/today-handoff.js

@@ -0,0 +1,154 @@
+(function (root, factory) {
+  if (typeof module === 'object' && module.exports) module.exports = factory;
+  else root.createTodayHandoff = factory;
+})(typeof self !== 'undefined' ? self : this, function createTodayHandoff(options) {
+  const prefix = 'stackchain.today-handoff.v1.';
+  const storage = options.storage || null;
+  const selected = new Set();
+  const excluded = new Set();
+
+  function key() {
+    const login = String(options.getLogin?.() || '').trim().toLowerCase();
+    return login ? prefix + encodeURIComponent(login) : '';
+  }
+
+  function pending() {
+    const storageKey = key();
+    if (!storageKey || !storage) return [];
+    try {
+      const value = JSON.parse(storage.getItem(storageKey) || '[]');
+      return Array.isArray(value) ? value.filter(id => typeof id === 'string' && id) : [];
+    } catch (_) {
+      return [];
+    }
+  }
+
+  function write(ids) {
+    const storageKey = key();
+    if (!storageKey || !storage) return false;
+    const unique = [...new Set(ids.filter(id => typeof id === 'string' && id))];
+    try {
+      if (unique.length) storage.setItem(storageKey, JSON.stringify(unique));
+      else storage.removeItem(storageKey);
+      return true;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function capture(ids) {
+    const merged = [...pending()];
+    (ids || []).forEach(id => {
+      if (typeof id === 'string' && id && !merged.includes(id)) merged.push(id);
+      if (typeof id === 'string' && id) {
+        selected.add(id);
+        excluded.delete(id);
+      }
+    });
+    return write(merged);
+  }
+
+  function review(items) {
+    const byIdentity = new Map((items || options.items?.() || []).map(item => [options.identity(item), item]));
+    return pending().flatMap(identity => {
+      const item = byIdentity.get(identity);
+      if (!excluded.has(identity)) selected.add(identity);
+      return item ? [{ identity, item, selected:selected.has(identity) }] : [];
+    });
+  }
+
+  function choose(identity, include) {
+    if (!pending().includes(identity)) return false;
+    if (include) {
+      selected.add(identity);
+      excluded.delete(identity);
+    } else {
+      selected.delete(identity);
+      excluded.add(identity);
+    }
+    return true;
+  }
+
+  function render(items, list, escapeHtml) {
+    const rows = review(items);
+    list.innerHTML = rows.map(row => {
+      const title = String(row.item.title || row.identity).slice(0, 180);
+      const context = String(row.item.key || row.item.repository || 'Work item').slice(0, 180);
+      return '<div class="today-handoff-item"><span><strong>' + escapeHtml(title) + '</strong>' +
+        '<span class="small muted">' + escapeHtml(context) + '</span></span><label><input type="checkbox" ' +
+        'data-today-handoff="' + escapeHtml(row.identity) + '"' + (row.selected ? ' checked' : '') +
+        '> Today</label></div>';
+    }).join('');
+    list.querySelectorAll('[data-today-handoff]').forEach(input => input.addEventListener('change', () =>
+      choose(input.dataset.todayHandoff, input.checked)));
+    return rows;
+  }
+
+  async function commit(items) {
+    const rows = review(items);
+    const remaining = pending();
+    let scheduled = 0;
+    let blocked = 0;
+    for (const row of rows) {
+      if (!selected.has(row.identity)) continue;
+      if (options.todayWork.contains(row.item)) {
+        const index = remaining.indexOf(row.identity);
+        if (index >= 0) remaining.splice(index, 1);
+        selected.delete(row.identity);
+        continue;
+      }
+      const added = options.todayWork.add(row.item);
+      if (added !== 'added') {
+        blocked += 1;
+        continue;
+      }
+      if (!options.todaySync.enqueue('add', row.identity)) {
+        options.todayWork.remove?.(row.item);
+        blocked += 1;
+        continue;
+      }
+      const index = remaining.indexOf(row.identity);
+      if (index >= 0) remaining.splice(index, 1);
+      selected.delete(row.identity);
+      scheduled += 1;
+    }
+    write(remaining);
+    if (scheduled) await options.todaySync.flush();
+    return { scheduled, blocked, remaining:remaining.length };
+  }
+
+  function mount({ qs, escapeHtml, onComplete = () => {} }) {
+    const list = qs('#today-handoff-items');
+    let prompted = false;
+    function open() {
+      if (prompted) return false;
+      const rows = render(null, list, escapeHtml);
+      if (!rows.length) return false;
+      qs('#today-handoff-status').textContent = rows.length +
+        (rows.length === 1 ? ' commitment is ready to review.' : ' commitments are ready to review.');
+      const dialog = qs('#today-handoff-dialog');
+      if (!dialog.open) dialog.showModal();
+      prompted = true;
+      requestAnimationFrame(() => (list.querySelector('input') || qs('#confirm-today-handoff')).focus());
+      return true;
+    }
+    qs('#close-today-handoff').addEventListener('click', () => qs('#today-handoff-dialog').close());
+    qs('#confirm-today-handoff').addEventListener('click', async event => {
+      const button = event.currentTarget;
+      button.disabled = true;
+      qs('#today-handoff-status').textContent = 'Saving Today’s plan…';
+      try {
+        const result = await commit();
+        if (result.blocked) qs('#today-handoff-status').textContent =
+          'Today is full. ' + result.remaining + ' commitment remains safe in My Work.';
+        else qs('#today-handoff-dialog').close();
+        onComplete(result);
+      } finally {
+        button.disabled = false;
+      }
+    });
+    return { open, reset:() => { prompted = false; } };
+  }
+
+  return { capture, choose, commit, mount, pending, render, review };
+});

frontend/today-recap.js

@@ -217,7 +217,7 @@ async function saveTodayRecapTime(payload) {
 }
 
 function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, escapeHtml,
-  describeWork = () => null, adjustPlan = () => {} }) {
+  describeWork = () => null, openWrapUp = () => {} }) {
   const minutes = value => String(Math.max(0, Number(value) || 0)) + 'm';
   const render = () => {
     const draft = recap.snapshot();
@@ -290,7 +290,7 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
       qs('#today-recap-status').textContent = 'Recap saved to your account.';
       await loadHistory(); render(); button.hidden = true;
       close();
-      adjustPlan(handoff.actual_minutes);
+      openWrapUp(handoff.actual_minutes);
     } catch (error) {
       qs('#today-recap-status').textContent = error.message || 'Recap could not be saved. Your timer is unchanged.';
     } finally { button.disabled = false; }
@@ -310,7 +310,7 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
       qs('#today-recap-status').textContent = 'Selected time logged to Gitea.';
       await loadHistory(); render(); button.hidden = true;
       close();
-      adjustPlan(actualMinutes);
+      openWrapUp(actualMinutes);
     } catch (error) {
       qs('#today-recap-status').textContent = error.message || 'Time could not be logged. Your recap is ready to retry.';
       render();
@@ -345,8 +345,8 @@ function openTodayRecapAfterSession(view, timer, timerView, workFilter, qs) {
 }
 
 function setupTodayRecap(timer, timerView, todayWork, api, qs, escapeHtml, closeSheets, updateActions, getLogin,
-  describeWork, adjustPlan) {
-  const options = { timer, timerView, todayWork, api, qs, escapeHtml, describeWork, adjustPlan };
+  describeWork, openWrapUp) {
+  const options = { timer, timerView, todayWork, api, qs, escapeHtml, describeWork, openWrapUp };
   const recap = createTodayRecap({
     save:saveTodayRecap, saveAndLog:saveTodayRecapTime,
     clear:() => timer.clearRecap(), storage:localStorage, getLogin,

frontend/today-wrap-up.js

@@ -0,0 +1,122 @@
+function createTodayWrapUp({ todayWork, laterWork, todaySync }) {
+  let items = [];
+  const selected = new Set();
+
+  function open(candidates) {
+    const current = new Set(todayWork.read());
+    const byIdentity = new Map((candidates || []).map(item => [todayWork.identity(item), item]));
+    items = todayWork.read().flatMap(identity =>
+      current.has(identity) && byIdentity.has(identity) ? [byIdentity.get(identity)] : []
+    );
+    selected.clear();
+    return snapshot();
+  }
+
+  function choose(identity, schedule) {
+    if (!items.some(item => todayWork.identity(item) === identity)) return false;
+    if (schedule) selected.add(identity);
+    else selected.delete(identity);
+    return true;
+  }
+
+  function snapshot() {
+    return items.map(item => ({
+      item,
+      identity:todayWork.identity(item),
+      schedule:selected.has(todayWork.identity(item)),
+    }));
+  }
+
+  async function finish() {
+    const wake = laterWork.presetUntil('tomorrow');
+    let scheduled = 0;
+    for (const item of items) {
+      const identity = todayWork.identity(item);
+      if (!selected.has(identity) || !todayWork.contains(item)) continue;
+      const deferred = laterWork.defer(item, wake, {handoff:'today'});
+      if (deferred !== 'deferred') throw new Error('Tomorrow could not be saved. Your Today plan is unchanged.');
+      if (!todaySync.enqueue('remove', identity)) {
+        laterWork.restore?.(item);
+        throw new Error('Today sync could not be queued. Your Today plan is unchanged.');
+      }
+      if (todayWork.contains(item) && !todayWork.remove(item)) {
+        throw new Error('Today could not be updated. Retry wrap-up.');
+      }
+      scheduled += 1;
+    }
+    await todaySync.flush();
+    return { scheduled, left:items.length - scheduled, wake_at:wake.toISOString() };
+  }
+
+  return { open, choose, snapshot, finish };
+}
+
+function createTodayWrapUpView({ controller, qs, escapeHtml, onComplete = () => {}, onClose = () => {} }) {
+  let actualMinutes = {};
+
+  function close() {
+    qs('#today-wrap-up-sheet').hidden = true;
+    document.body.classList.remove('task-overlay-open');
+    onClose();
+  }
+
+  function render() {
+    const rows = controller.snapshot();
+    qs('#today-wrap-up-items').innerHTML = rows.map(row => {
+      const title = String(row.item.title || row.identity).slice(0, 180);
+      const context = String(row.item.key || row.item.repository || 'Work item').slice(0, 180);
+      return '<div class="today-wrap-up-item"><span><strong>' + escapeHtml(title) + '</strong>' +
+        '<span class="small muted">' + escapeHtml(context) + '</span></span><label><input type="checkbox" ' +
+        'data-wrap-up-identity="' + escapeHtml(row.identity) + '"' + (row.schedule ? ' checked' : '') +
+        '> Tomorrow 09:00</label></div>';
+    }).join('') || '<p class="small">Nothing unfinished remains in Today.</p>';
+    qs('#today-wrap-up-items').querySelectorAll('[data-wrap-up-identity]').forEach(input => {
+      input.addEventListener('change', () => controller.choose(input.dataset.wrapUpIdentity, input.checked));
+    });
+  }
+
+  function open(items, recapActualMinutes = {}) {
+    actualMinutes = { ...recapActualMinutes };
+    controller.open(items);
+    qs('#today-wrap-up-status').textContent = '';
+    render();
+    qs('#today-wrap-up-sheet').hidden = false;
+    document.body.classList.add('task-overlay-open');
+    requestAnimationFrame(() => (qs('#today-wrap-up-items input') || qs('#finish-today-wrap-up')).focus());
+  }
+
+  async function finish(button) {
+    button.disabled = true;
+    qs('#today-wrap-up-status').textContent = 'Saving tomorrow’s plan…';
+    try {
+      const result = await controller.finish();
+      qs('#my-work-action-status').textContent = result.scheduled + ' scheduled for tomorrow · ' + result.left + ' left in Today.';
+      close();
+      onComplete(result, actualMinutes);
+    } catch (error) {
+      qs('#today-wrap-up-status').textContent = error.message || 'Wrap-up could not be saved. Retry when ready.';
+    } finally {
+      button.disabled = false;
+    }
+  }
+
+  function bind() {
+    qs('#close-today-wrap-up').addEventListener('click', close);
+    qs('#finish-today-wrap-up').addEventListener('click', event => finish(event.currentTarget));
+  }
+
+  return { open, close, finish, render, bind };
+}
+
+function setupTodayWrapUp(options) {
+  const controller = createTodayWrapUp(options);
+  const view = createTodayWrapUpView({ ...options, controller });
+  view.bind();
+  return view;
+}
+
+if (typeof module !== 'undefined' && module.exports) {
+  createTodayWrapUp.createView = createTodayWrapUpView;
+  createTodayWrapUp.setup = setupTodayWrapUp;
+  module.exports = createTodayWrapUp;
+}

frontend/unfiled-captures.js

@@ -18,6 +18,14 @@ function unfiledDraftSummary(item) {
   };
 }
 
+function unfiledDraftDisplayTitle(item) {
+  return String(item?.title || '').trim() || (item?.hasAttachment ? 'Untitled photo draft' : 'Untitled draft');
+}
+
+function unfiledShouldFocusTitle({mobile = false, continuing = false} = {}) {
+  return !mobile || continuing;
+}
+
 function unfiledSavedMessage(item) {
   return item.repository ? 'Saved planned Draft. Resume on any signed-in device.' :
     'Saved to Drafts. Choose a repository when you’re ready to file it.';
@@ -49,7 +57,8 @@ function createUnfiledCaptures({
       if (record?.version !== 1 || !Array.isArray(record.items)) return [];
       return record.items.filter(item =>
         item && typeof item.id === 'string' && typeof item.ownerLogin === 'string' &&
-        typeof item.title === 'string' && item.title.trim() && typeof item.body === 'string'
+        typeof item.title === 'string' && (item.title.trim() || item.hasAttachment === true) &&
+        typeof item.body === 'string'
       );
     } catch (_error) { return []; }
   }
@@ -122,9 +131,6 @@ function createUnfiledCaptures({
   function prepare(note) {
     const title = String(note?.title || '').trim().slice(0, 255);
     const body = String(note?.body || '').trim().slice(0, 10000);
-    if (!title) throw new Error('Add a title before saving.');
-    const ownerLogin = String(getCaptureLogin() || '').trim();
-    if (!ownerLogin) throw new Error('Offline identity is unavailable. Reconnect once before saving private work.');
     const attachment = note?.attachment;
     const attachments = note?.attachments;
     if (Array.isArray(attachments) && attachments.length > 5) {
@@ -139,6 +145,9 @@ function createUnfiledCaptures({
     const hasAttachment = Boolean(attachment?.blob && attachment?.filename &&
       ['image/png', 'image/jpeg', 'image/webp'].includes(String(attachment?.contentType || '')));
     if (attachment && !hasAttachment) throw new Error('The screenshot is unavailable. Choose it again before saving.');
+    if (!title && !hasAttachment && !validAttachments) throw new Error('Add a title or photo before saving.');
+    const ownerLogin = String(getCaptureLogin() || '').trim();
+    if (!ownerLogin) throw new Error('Offline identity is unavailable. Reconnect once before saving private work.');
     if ((hasAttachment || validAttachments) && !attachmentStore) {
       throw new Error('Screenshot storage is unavailable. Your capture is still open; retry after reloading.');
     }
@@ -344,7 +353,7 @@ function createUnfiledCaptures({
         } : {}),
         ...(evidence.length ? {hasAttachment:true, attachmentCount:evidence.length} : {}),
       };
-      if (!item.id || !item.title.trim() || !Number.isFinite(item.savedAt)) continue;
+      if (!item.id || (!item.title.trim() && !evidence.length) || !Number.isFinite(item.savedAt)) continue;
       if (evidence.length) {
         await attachmentStore.put(item.id, {attachments:evidence.map(entry => ({
           filename:String(entry.filename), contentType:String(entry.content_type),
@@ -382,7 +391,7 @@ function createUnfiledCaptures({
         } : {}),
         ...(evidence.length ? {hasAttachment:true, attachmentCount:evidence.length} : {}),
       };
-      if (!item.id || !item.title.trim() || !Number.isFinite(item.savedAt)) continue;
+      if (!item.id || (!item.title.trim() && !evidence.length) || !Number.isFinite(item.savedAt)) continue;
       if (evidence.length) {
         stagedEvidence.set(item.id, {attachments:evidence.map(entry => ({
           filename:String(entry.filename), contentType:String(entry.content_type),
@@ -422,4 +431,6 @@ function createUnfiledCaptures({
 if (typeof module !== 'undefined' && module.exports) {
   module.exports = createUnfiledCaptures;
   module.exports.summary = unfiledDraftSummary;
+  module.exports.displayTitle = unfiledDraftDisplayTitle;
+  module.exports.shouldFocusTitle = unfiledShouldFocusTitle;
 }

frontend/voice-conversation-capture.js

@@ -0,0 +1,124 @@
+function createVoiceConversationCapture({
+  Recognition, elements, transcriptStore = null, getLogin = () => '',
+  createEvent = name => new Event(name, {bubbles:true}),
+}) {
+  const supported = typeof Recognition === 'function';
+  let recognition = null;
+  let target = '';
+  let generation = 0;
+  elements.root.hidden = !supported;
+  if (!supported) {
+    elements.status.textContent = 'Voice capture is unavailable; type the reply instead.';
+  }
+
+  const normalize = value => String(value || '').replace(/\s+/g, ' ').trim();
+  const login = () => String(getLogin() || '').trim();
+
+  function showReview(value, recovered = false) {
+    const transcript = normalize(value).slice(0, 10000);
+    elements.transcript.value = transcript;
+    elements.review.hidden = false;
+    elements.append.textContent = elements.draft.value.trim() ? 'Append to draft' : 'Use transcript';
+    elements.replace.hidden = !elements.draft.value.trim();
+    elements.status.textContent = recovered ?
+      'Recovered transcript. Review it before using or discarding it.' :
+      'Transcript ready. Review it before using it.';
+    if (!recovered && transcriptStore && login() && target) {
+      void transcriptStore.save(login(), transcript, target);
+    }
+  }
+
+  async function open(nextTarget) {
+    cancel();
+    target = String(nextTarget || '').trim();
+    const opening = ++generation;
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = '';
+    if (!supported || !target || !transcriptStore || !login()) return;
+    const recovered = normalize(await transcriptStore.load(login(), target)).slice(0, 10000);
+    if (opening === generation && recovered) showReview(recovered, true);
+  }
+
+  function clearCheckpoint() {
+    if (transcriptStore && login() && target) void transcriptStore.clear(login(), target);
+  }
+
+  function commit(replace) {
+    const transcript = normalize(elements.transcript.value).slice(0, 10000);
+    elements.draft.value = replace ? transcript :
+      [elements.draft.value.trim(), transcript].filter(Boolean).join('\n\n').slice(0, 10000);
+    elements.draft.dispatchEvent(createEvent('input'));
+    clearCheckpoint();
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript added. Review the reply before sending.';
+  }
+
+  elements.start.addEventListener('click', () => {
+    if (!supported || !target) return;
+    const sessionGeneration = generation;
+    const currentRecognition = new Recognition();
+    recognition = currentRecognition;
+    recognition.continuous = true;
+    recognition.interimResults = false;
+    recognition.onresult = event => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      const finalText = Array.from(event.results || []).slice(event.resultIndex ?? 0)
+        .filter(result => result.isFinal)
+        .map(result => result[0]?.transcript || '').join(' ');
+      if (normalize(finalText)) {
+        showReview([elements.transcript.value, finalText].filter(Boolean).join(' '));
+      }
+    };
+    recognition.onerror = event => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = ['not-allowed', 'service-not-allowed'].includes(event.error) ?
+        'Microphone permission was denied. Your draft and transcript are unchanged.' :
+        'Voice capture stopped. Your draft and transcript are unchanged.';
+    };
+    recognition.onend = () => {
+      if (recognition !== currentRecognition || generation !== sessionGeneration) return;
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+    };
+    try {
+      recognition.start();
+    } catch (_) {
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = 'Voice capture could not start. Your draft and transcript are unchanged.';
+      return;
+    }
+    elements.start.hidden = true;
+    elements.stop.hidden = false;
+    elements.status.textContent = 'Listening… Tap stop when you are finished.';
+  });
+  elements.stop.addEventListener('click', () => {
+    recognition?.stop();
+    elements.status.textContent = 'Finishing transcript…';
+  });
+  elements.append.addEventListener('click', () => commit(false));
+  elements.replace.addEventListener('click', () => commit(true));
+  elements.discard.addEventListener('click', () => {
+    clearCheckpoint();
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript discarded.';
+  });
+
+  function cancel() {
+    generation += 1;
+    recognition?.abort();
+    recognition = null;
+    elements.start.hidden = false;
+    elements.stop.hidden = true;
+  }
+
+  return {supported, open, cancel};
+}
+
+if (typeof module !== 'undefined') module.exports = {createVoiceConversationCapture};

frontend/voice-issue-capture.js

@@ -0,0 +1,120 @@
+function mapVoiceTranscript(value) {
+  const transcript = String(value || '').replace(/\s+/g, ' ').trim();
+  if (!transcript) return {title:'', body:''};
+  const sentence = transcript.match(/^(.+?[.!?])(?:\s+|$)(.*)$/);
+  const title = (sentence ? sentence[1] : transcript).trim().slice(0, 255);
+  const body = (sentence ? sentence[2] : '').trim().slice(0, 10000);
+  return {title, body};
+}
+
+function createVoiceIssueCapture({
+  Recognition, elements, createEvent = name => new Event(name, {bubbles:true}),
+  transcriptStore = null, getLogin = () => '',
+}) {
+  const supported = typeof Recognition === 'function';
+  const login = String(getLogin() || '').trim();
+  const ready = supported && login && transcriptStore ? Promise.resolve(transcriptStore.load(login)).then(value => {
+    const recovered = String(value || '').replace(/\s+/g, ' ').trim().slice(0, 10255);
+    if (recovered) showReview(recovered, {persist:false, recovered:true});
+  }) : Promise.resolve();
+  elements.root.hidden = !supported;
+  if (!supported) {
+    elements.status.textContent = 'Voice capture is unavailable; type the title and note instead.';
+    return {supported:false, ready, cancel() {}};
+  }
+  let recognition = null;
+
+  function showReview(value, {persist = true, recovered = false} = {}) {
+    elements.transcript.value = value;
+    const activeLogin = String(getLogin() || '').trim();
+    if (persist && activeLogin && transcriptStore) void transcriptStore.save(activeLogin, value);
+    const hasDraft = Boolean(elements.title.value.trim() || elements.body.value.trim());
+    elements.append.textContent = hasDraft ? 'Append to draft' : 'Use transcript';
+    elements.replace.hidden = !hasDraft;
+    elements.review.hidden = false;
+    elements.status.textContent = recovered ?
+      'Recovered transcript. Review it before using or discarding it.' :
+      'Transcript ready. Review it before using it.';
+  }
+
+  elements.start.addEventListener('click', () => {
+    recognition = new Recognition();
+    recognition.continuous = true;
+    recognition.interimResults = false;
+    recognition.onresult = event => {
+      const finalText = Array.from(event.results || [])
+        .slice(event.resultIndex ?? 0)
+        .filter(result => result.isFinal)
+        .map(result => result[0]?.transcript || '').join(' ').replace(/\s+/g, ' ').trim();
+      if (finalText) {
+        const accumulated = [elements.transcript.value.trim(), finalText]
+          .filter(Boolean).join(' ').replace(/\s+/g, ' ').trim().slice(0, 10255);
+        showReview(accumulated);
+      }
+    };
+    recognition.onerror = event => {
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = event.error === 'not-allowed' || event.error === 'service-not-allowed' ?
+        'Microphone permission was denied. Your draft and transcript are unchanged.' :
+        'Voice capture stopped. Your draft and transcript are unchanged.';
+    };
+    recognition.onend = () => {
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+    };
+    try {
+      recognition.start();
+    } catch (_) {
+      recognition = null;
+      elements.start.hidden = false;
+      elements.stop.hidden = true;
+      elements.status.textContent = 'Voice capture could not start. Your draft and transcript are unchanged.';
+      return;
+    }
+    elements.start.hidden = true;
+    elements.stop.hidden = false;
+    elements.status.textContent = 'Listening… Tap stop when you are finished.';
+  });
+  elements.stop.addEventListener('click', () => {
+    recognition?.stop();
+    elements.status.textContent = 'Finishing transcript…';
+  });
+
+  function clearCheckpoint() {
+    const activeLogin = String(getLogin() || '').trim();
+    if (activeLogin && transcriptStore) void transcriptStore.clear(activeLogin);
+  }
+
+  function commit(mode) {
+    const mapped = mapVoiceTranscript(elements.transcript.value);
+    if (mode === 'replace') {
+      elements.title.value = mapped.title;
+      elements.body.value = mapped.body;
+    } else if (elements.title.value.trim()) {
+      elements.body.value = [elements.body.value.trim(), mapped.title, mapped.body]
+        .filter(Boolean).join('\n\n').slice(0, 10000);
+    } else {
+      elements.title.value = mapped.title;
+      elements.body.value = [elements.body.value.trim(), mapped.body]
+        .filter(Boolean).join('\n\n').slice(0, 10000);
+    }
+    elements.title.dispatchEvent(createEvent('input'));
+    elements.body.dispatchEvent(createEvent('input'));
+    clearCheckpoint();
+    elements.review.hidden = true;
+    elements.status.textContent = 'Transcript added. Review the title and note before saving.';
+  }
+  elements.append.addEventListener('click', () => commit('append'));
+  elements.replace.addEventListener('click', () => commit('replace'));
+  elements.discard?.addEventListener('click', () => {
+    clearCheckpoint();
+    elements.transcript.value = '';
+    elements.review.hidden = true;
+    elements.status.textContent = 'Recovered transcript discarded.';
+  });
+
+  return {supported:true, ready, cancel() { recognition?.abort(); recognition = null; }};
+}
+
+if (typeof module !== 'undefined') module.exports = {mapVoiceTranscript, createVoiceIssueCapture};

frontend/voice-transcript-store.js

@@ -0,0 +1,93 @@
+(function (root, factory) {
+  const createVoiceTranscriptStore = factory(root.indexedDB);
+  if (typeof module !== 'undefined' && module.exports) module.exports = createVoiceTranscriptStore;
+  else root.createVoiceTranscriptStore = createVoiceTranscriptStore;
+})(typeof globalThis !== 'undefined' ? globalThis : this, function buildFactory(defaultIndexedDB) {
+  const dbName = 'stackchain-voice-transcripts-v1';
+  const STORE_NAME = 'checkpoints';
+  const MAX_TRANSCRIPT_LENGTH = 10255;
+
+  function requestResult(request) {
+    return new Promise((resolve, reject) => {
+      request.onsuccess = () => resolve(request.result);
+      request.onerror = () => reject(request.error || new Error('Private transcript storage failed.'));
+    });
+  }
+
+  function createIndexedDbTransaction(indexedDB) {
+    if (!indexedDB) return null;
+    let databasePromise = null;
+    function openDatabase() {
+      if (databasePromise) return databasePromise;
+      databasePromise = new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+          if (!request.result.objectStoreNames.contains(STORE_NAME)) {
+            request.result.createObjectStore(STORE_NAME, {keyPath:'login'});
+          }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error || new Error('Private transcript storage is unavailable.'));
+      });
+      return databasePromise;
+    }
+    return async (work, mode = 'readonly') => {
+      const database = await openDatabase();
+      const transaction = database.transaction(STORE_NAME, mode);
+      const store = transaction.objectStore(STORE_NAME);
+      const completed = new Promise((resolve, reject) => {
+        transaction.oncomplete = () => resolve();
+        transaction.onerror = () => reject(transaction.error || new Error('Private transcript storage failed.'));
+        transaction.onabort = () => reject(transaction.error || new Error('Private transcript storage was interrupted.'));
+      });
+      const result = await work({
+        get:key => requestResult(store.get(key)),
+        put:value => requestResult(store.put(value)),
+        delete:key => requestResult(store.delete(key)),
+      });
+      await completed;
+      return result;
+    };
+  }
+
+  function normalizeLogin(value) {
+    return String(value || '').trim().toLowerCase();
+  }
+
+  function normalizeTranscript(value) {
+    return String(value || '').replace(/\s+/g, ' ').trim().slice(0, MAX_TRANSCRIPT_LENGTH);
+  }
+
+  function storageKey(login, target = '') {
+    const account = normalizeLogin(login);
+    const scope = String(target || '').trim().toLowerCase();
+    return account && scope ? account + '\u0000' + scope : account;
+  }
+
+  function createVoiceTranscriptStore({transaction = createIndexedDbTransaction(defaultIndexedDB)} = {}) {
+    async function load(login, target = '') {
+      const key = storageKey(login, target);
+      if (!key || !transaction) return '';
+      const record = await transaction(store => store.get(key));
+      return normalizeTranscript(record?.transcript);
+    }
+
+    async function save(login, transcript, target = '') {
+      const key = storageKey(login, target);
+      const value = normalizeTranscript(transcript);
+      if (!key || !value || !transaction) return;
+      await transaction(store => store.put({login:key, transcript:value}), 'readwrite');
+    }
+
+    async function clear(login, target = '') {
+      const key = storageKey(login, target);
+      if (!key || !transaction) return;
+      await transaction(store => store.delete(key), 'readwrite');
+    }
+
+    return {load, save, clear};
+  }
+
+  createVoiceTranscriptStore.databaseName = dbName;
+  return createVoiceTranscriptStore;
+});

frontend/work-route.js

@@ -7,6 +7,13 @@
 
   const repositoryPart = /^[A-Za-z0-9_.-]+$/;
   const queueFilters = ['today', 'agenda', 'attention', 'filed', 'update', 'later', 'draft'];
+  const sections = {
+    issue: ['overview', 'conversation', 'reply', 'actions'],
+    filed: ['overview', 'conversation', 'reply', 'actions'],
+    pull: ['overview', 'conversation', 'reply', 'review'],
+    review: ['overview', 'files', 'feedback', 'history'],
+    update: ['activity', 'conversation', 'context', 'reply'],
+  };
 
   function positiveInteger(value) {
     const number = Number(value);
@@ -23,27 +30,37 @@
     if (queue === 'agenda' && parts[3] === 'protect-today' && parts.length === 4) {
       return { kind: 'queue', filter: 'agenda', action: 'protect-today' };
     }
-    if (parts[2] === 'update' && parts.length === 4) {
+    if (parts[2] === 'update' && [4, 5].includes(parts.length)) {
       const notificationId = positiveInteger(parts[3]);
-      return notificationId ? { kind: 'update', notification_id: notificationId } : null;
+      const section = parts[4];
+      if (!notificationId || (section && !sections.update.includes(section))) return null;
+      return { kind: 'update', notification_id: notificationId, ...(section ? { section } : {}) };
     }
-    if (!['issue', 'filed', 'pull', 'review'].includes(parts[2]) || parts.length !== 6) return null;
+    if (!['issue', 'filed', 'pull', 'review'].includes(parts[2]) || ![6, 7].includes(parts.length)) return null;
     if (!repositoryPart.test(parts[3]) || !repositoryPart.test(parts[4])) return null;
     const number = positiveInteger(parts[5]);
-    return number ? { kind: parts[2], repository: parts[3] + '/' + parts[4], number } : null;
+    const section = parts[6];
+    if (!number || (section && !sections[parts[2]].includes(section))) return null;
+    return {
+      kind: parts[2], repository: parts[3] + '/' + parts[4], number,
+      ...(section ? { section } : {}),
+    };
   }
 
   function serialize(item) {
     if (item?.kind === 'update') {
       const notificationId = positiveInteger(item.notification_id);
-      return notificationId ? '#/my-work/update/' + notificationId : '';
+      if (!notificationId || (item.section && !sections.update.includes(item.section))) return '';
+      return '#/my-work/update/' + notificationId + (item.section ? '/' + item.section : '');
     }
     const kind = item?.is_filed && !item?.is_assigned ? 'filed' : item?.kind;
     if (!['issue', 'filed', 'pull', 'review'].includes(kind)) return '';
     const repository = String(item.repository || '').split('/');
     const number = positiveInteger(item.number);
     if (repository.length !== 2 || !repository.every(part => repositoryPart.test(part)) || !number) return '';
-    return '#/my-work/' + kind + '/' + repository.join('/') + '/' + number;
+    if (item.section && !sections[kind].includes(item.section)) return '';
+    return '#/my-work/' + kind + '/' + repository.join('/') + '/' + number +
+      (item.section ? '/' + item.section : '');
   }
 
   function sameRoute(item, route) {
@@ -59,7 +76,7 @@
 
   function createController({
     location, history, eventTarget, onOpen, onClose, onInvalid,
-    onQueue = function () {},
+    onQueue = function () {}, onSection = function () {},
     resolve, onResolving = function () {}, onError = function () {},
   }) {
     let items = [];
@@ -86,7 +103,7 @@
           return;
         }
         active = fragment;
-        onOpen({ ...item, kind: route.kind });
+        onOpen({ ...item, kind: route.kind, ...(route.section ? { section: route.section } : {}) });
       }).catch(error => {
         if (request !== resolution || String(location.hash || '') !== fragment) return;
         resolving = '';
@@ -128,10 +145,16 @@
         return;
       }
       if (active === fragment) return;
+      const activeRoute = parse(active);
+      if (activeRoute && sameRoute(item, activeRoute)) {
+        active = fragment;
+        onSection(route.section || sections[route.kind][0], { restore: true });
+        return;
+      }
       resolution += 1;
       resolving = '';
       active = fragment;
-      onOpen({ ...item, kind: route.kind });
+      onOpen({ ...item, kind: route.kind, ...(route.section ? { section: route.section } : {}) });
     }
 
     return {
@@ -156,6 +179,17 @@
         onOpen(item);
         return true;
       },
+      section(name, options = {}) {
+        const route = parse(location.hash);
+        if (!route || route.kind === 'queue' || !sections[route.kind].includes(name)) return false;
+        if ((route.section || sections[route.kind][0]) === name) return true;
+        const fragment = serialize({ ...route, section: name });
+        const method = options.replace ? 'replaceState' : 'pushState';
+        history[method]({ workRoute: fragment }, '', fragment);
+        active = fragment;
+        onSection(name, { restore: false });
+        return true;
+      },
       queue(filter) {
         if (!queueFilters.includes(filter)) return false;
         const name = filter + (['update', 'draft'].includes(filter) ? 's' : '');

frontend/workspace-bootstrap.js

@@ -0,0 +1,41 @@
+async function loadWorkspace({ document, window = null, createLoader = createFeatureLoader }) {
+  let cameOnline = false;
+  let replayed = false;
+  const captureOnline = () => { cameOnline = true; };
+  window?.addEventListener('online', captureOnline);
+  const status = document.querySelector('#my-work-action-status');
+  const url = document.querySelector(
+    'meta[name="stackchain-feature-today-timer"]'
+  )?.content || '';
+  const loader = createLoader({
+    document,
+    urls: { 'today-timer': url },
+  });
+  if (status) status.textContent = 'Starting workspace…';
+  try {
+    await loader.load('today-timer');
+    if (status) status.textContent = '';
+    return {
+      replayOnline(callback) {
+        if (replayed) return;
+        replayed = true;
+        window?.removeEventListener('online', captureOnline);
+        if (cameOnline) callback();
+      },
+    };
+  } catch (error) {
+    window?.removeEventListener('online', captureOnline);
+    if (window?.location?.reload) {
+      if (cameOnline) window.location.reload();
+      else window.addEventListener('online', () => window.location.reload(), { once: true });
+    }
+    if (status) {
+      status.textContent = window
+        ? 'Workspace could not load. Reconnect to retry automatically, or reload now.'
+        : 'Workspace could not load. Check your connection, then reload to retry.';
+    }
+    throw error;
+  }
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = loadWorkspace;

requirements-audit.txt

@@ -0,0 +1 @@
+pip-audit==2.10.1

requirements.txt

@@ -1,7 +1,8 @@
 fastapi==0.133.1
 httpx==0.28.1
 pydantic==2.13.4
-python-multipart==0.0.22
+Pillow==12.3.0
+python-multipart==0.0.32
 pytest==9.1.1
 pywebpush==2.1.2
 rjsmin==1.2.5

src/available_issue_snapshot_store.py

@@ -3,14 +3,14 @@
 from __future__ import annotations
 
 import json
-import os
 import secrets
-import stat
 import sqlite3
 import time
 from dataclasses import dataclass
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class RefreshLeaseLost(RuntimeError):
     pass
@@ -29,12 +29,8 @@ class AvailableIssueSnapshotStore:
     def __init__(self, path, *, clock=None):
         self.path = Path(path)
         self.clock = clock or time.time
-        self.path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
-        os.chmod(self.path.parent, stat.S_IRWXU)
-        old_umask = os.umask(0o077)
-        try:
-            with self._connect() as connection:
-                connection.executescript(
+        with self._connect() as connection:
+            connection.executescript(
                     """
                     CREATE TABLE IF NOT EXISTS available_issue_snapshot (
                         singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
@@ -54,15 +50,12 @@ class AvailableIssueSnapshotStore:
                     );
                     """
                 )
-                connection.execute(
-                    "INSERT OR IGNORE INTO available_issue_snapshot VALUES (1, NULL, NULL, NULL)"
-                )
-        finally:
-            os.umask(old_umask)
-        os.chmod(self.path, stat.S_IRUSR | stat.S_IWUSR)
+            connection.execute(
+                "INSERT OR IGNORE INTO available_issue_snapshot VALUES (1, NULL, NULL, NULL)"
+            )
 
     def _connect(self):
-        connection = sqlite3.connect(self.path, timeout=1.0, isolation_level=None)
+        connection = connect_private_sqlite(self.path, timeout=1.0, isolation_level=None)
         connection.row_factory = sqlite3.Row
         connection.execute("PRAGMA busy_timeout = 1000")
         return connection

src/completed_filed_review_store.py

@@ -0,0 +1,122 @@
+"""Durable, account-scoped completed Filed review receipts."""
+
+import re
+import sqlite3
+from datetime import datetime
+from pathlib import Path
+
+from src.private_state import connect_private_sqlite
+
+
+_REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
+
+
+class CompletedFiledReviewStore:
+    def __init__(self, path: str | Path, *, limit: int = 200, timeout: float = 1.0):
+        self.path = Path(path)
+        self.limit = limit
+        self.timeout = timeout
+        self._initialize()
+
+    def _initialize(self) -> None:
+        with self._connect() as connection:
+            connection.execute("PRAGMA journal_mode=WAL")
+            connection.execute(
+                """
+                CREATE TABLE IF NOT EXISTS completed_filed_reviews (
+                    login TEXT NOT NULL,
+                    repository TEXT NOT NULL,
+                    issue_number INTEGER NOT NULL,
+                    updated_at TEXT NOT NULL,
+                    touched_at INTEGER NOT NULL,
+                    PRIMARY KEY (login, repository, issue_number)
+                )
+                """
+            )
+
+    def _connect(self) -> sqlite3.Connection:
+        return connect_private_sqlite(self.path, timeout=self.timeout)
+
+    @staticmethod
+    def _login(login: str) -> str:
+        normalized = login.strip().lower()
+        if not normalized:
+            raise ValueError("login is required")
+        return normalized
+
+    @staticmethod
+    def _receipt(raw: dict) -> tuple[str, int, str]:
+        if not isinstance(raw, dict):
+            raise ValueError("receipt must be an object")
+        repository = raw.get("repository")
+        number = raw.get("number")
+        updated_at = raw.get("updated_at")
+        if not isinstance(repository, str) or not _REPOSITORY.fullmatch(repository):
+            raise ValueError("repository is invalid")
+        if not isinstance(number, int) or isinstance(number, bool) or number < 1:
+            raise ValueError("number is invalid")
+        if not isinstance(updated_at, str):
+            raise ValueError("updated_at is invalid")
+        try:
+            parsed = datetime.fromisoformat(updated_at.replace("Z", "+00:00"))
+        except ValueError as error:
+            raise ValueError("updated_at is invalid") from error
+        if parsed.tzinfo is None:
+            raise ValueError("updated_at is invalid")
+        return repository, number, updated_at
+
+    @staticmethod
+    def _snapshot(rows) -> dict:
+        return {"receipts": [
+            {"repository": row[0], "number": int(row[1]), "updated_at": row[2]}
+            for row in rows
+        ]}
+
+    def get(self, login: str) -> dict:
+        with self._connect() as connection:
+            rows = connection.execute(
+                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
+                "WHERE login = ? ORDER BY touched_at",
+                (self._login(login),),
+            ).fetchall()
+        return self._snapshot(rows)
+
+    def merge(self, login: str, receipts: list[dict]) -> dict:
+        login = self._login(login)
+        if not isinstance(receipts, list) or len(receipts) > self.limit:
+            raise ValueError(f"receipts are limited to {self.limit}")
+        normalized = [self._receipt(receipt) for receipt in receipts]
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            touched = int(connection.execute(
+                "SELECT COALESCE(MAX(touched_at), 0) FROM completed_filed_reviews WHERE login = ?",
+                (login,),
+            ).fetchone()[0])
+            for repository, number, updated_at in normalized:
+                current = connection.execute(
+                    "SELECT updated_at FROM completed_filed_reviews "
+                    "WHERE login = ? AND repository = ? AND issue_number = ?",
+                    (login, repository, number),
+                ).fetchone()
+                if current is not None and current[0] >= updated_at:
+                    continue
+                touched += 1
+                connection.execute(
+                    "INSERT INTO completed_filed_reviews "
+                    "(login, repository, issue_number, updated_at, touched_at) VALUES (?, ?, ?, ?, ?) "
+                    "ON CONFLICT(login, repository, issue_number) DO UPDATE SET "
+                    "updated_at=excluded.updated_at, touched_at=excluded.touched_at",
+                    (login, repository, number, updated_at, touched),
+                )
+            connection.execute(
+                "DELETE FROM completed_filed_reviews WHERE login = ? AND rowid NOT IN ("
+                "SELECT rowid FROM completed_filed_reviews WHERE login = ? "
+                "ORDER BY touched_at DESC LIMIT ?)",
+                (login, login, self.limit),
+            )
+            rows = connection.execute(
+                "SELECT repository, issue_number, updated_at FROM completed_filed_reviews "
+                "WHERE login = ? ORDER BY touched_at",
+                (login,),
+            ).fetchall()
+        return self._snapshot(rows)

src/frontend_bundle.py

@@ -21,22 +21,26 @@ COMMONJS_BROWSER_BRANCH = re.compile(
 )
 WORKER_RUNTIME_SOURCE = "static/background-issue-sync.js"
 FEATURE_SOURCES = {
-    "comment-actions": ("static/conversation.js", "static/comment-actions.js"),
+    "comment-actions": ("static/comment-actions.js",),
     "issue-capture": (
-        "static/create-issue-sheet.js", "static/update-follow-up.js", "static/shared-image-capture.js",
+        "static/voice-transcript-store.js", "static/voice-issue-capture.js", "static/create-issue-sheet.js", "static/mobile-create-issue-nav.js", "static/update-follow-up.js", "static/shared-image-capture.js",
     ),
     "pull-workflow": ("static/pull-sheet.js", "static/review-sheet.js"),
     "push-notifications": ("static/push-notifications.js",),
-    "device-setup": ("static/install-app.js", "static/mobile-device-setup.js"),
+    "device-setup": (
+        "static/install-app.js", "static/private-data-inventory.js", "static/private-device-data.js",
+        "static/device-storage.js", "static/mobile-device-setup.js",
+    ),
     "security-center": ("static/security-center.js",),
     "today-timer": (
-        "static/today-completion.js", "static/work-detail-position.js", "static/work-route.js", "static/commands.js", "static/saved-searches.js", "static/task-overlay-history.js", "static/search-preview.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/my-work.js", "static/protect-today.js", "static/mobile-task-dock.js", "static/mobile-queue-launcher.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-recap.js",
+        "static/conversation.js", "static/voice-transcript-store.js", "static/voice-conversation-capture.js", "static/mobile-launch.js", "static/mobile-insights.js", "static/mobile-app-shortcuts.js", "static/mobile-plan-today-nav.js", "static/mobile-find-work-nav.js", "static/mobile-pull-refresh.js", "static/live-data-status.js",
+        "static/today-completion.js", "static/card-planning.js", "static/work-detail-position.js", "static/work-route.js", "static/commands.js", "static/saved-searches.js", "static/task-overlay-history.js", "static/search-preview.js", "static/mobile-search-preview-nav.js", "static/search-reply-draft-store.js", "static/conversation-reply-draft-store.js", "static/conversation-photo-drafts.js", "static/search-defer.js", "static/mobile-search-viewport.js", "static/my-work.js", "static/protect-today.js", "static/mobile-task-dock.js", "static/mobile-work-entry.js", "static/mobile-queue-launcher.js", "static/mobile-delivery-recovery.js", "static/mobile-start-day.js", "static/update-triage-session.js", "static/update-review-handoff.js", "static/update-triage-launcher.js", "static/update-triage-gesture.js", "static/notification-undo.js", "static/today-timer.js", "static/today-recap.js", "static/today-wrap-up.js", "static/today-handoff.js",
         "static/today-rollover.js", "static/later-work.js", "static/later-picker.js", "static/drafts.js", "static/unfiled-captures.js", "static/unfiled-draft-sync.js",
-        "static/assign-and-start.js", "static/queue-today.js", "static/create-and-start.js",
+        "static/assign-and-start.js", "static/filed-claim.js", "static/queue-today.js", "static/create-and-start.js",
         "static/draft-filing-session.js", "static/draft-capacity-dialog.js", "static/work-selection.js",
         "static/today-work.js", "static/pick-work.js", "static/batch-find-work.js",
-        "static/search-batch-plan.js", "static/issue-evidence-review.js", "static/issue-evidence-editor.js",
-        "static/issue-attachment.js", "static/issue-filing-review.js", "static/issue-filing-receipt.js",
+        "static/search-batch-plan.js", "static/mention-composer.js", "static/issue-evidence-review.js", "static/issue-evidence-editor.js",
+        "static/issue-attachment.js", "static/checklist-conflict.js", "static/issue-outbox.js", "static/authored-outbox.js", "static/issue-sheet.js", "static/mobile-issue-detail-nav.js", "static/issue-filing-review.js", "static/issue-filing-receipt.js",
     ),
 }
 CACHE_DECLARATION = re.compile(
@@ -113,7 +117,6 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
     dashboard_html = dashboard_html.replace("</head>", feature_metadata + "\n</head>")
     dashboard_html = dashboard_html.replace(
         "</body>",
-        f'<script src="{feature_bundles["today-timer"].runtime_name}"></script>\n'
         f'<script src="{core.runtime_name}"></script>\n</body>',
     )
 
@@ -121,15 +124,11 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
     for source in sources:
         if source != WORKER_RUNTIME_SOURCE:
             worker = worker.replace(f"  BASE + '{source}',\n", "")
-    eager_feature = feature_bundles["today-timer"]
-    optional_features = {
-        name: bundle for name, bundle in feature_bundles.items() if name != "today-timer"
-    }
+    optional_features = feature_bundles
     worker = worker.replace(
         "  BASE + 'static/dashboard.css',\n",
         "  BASE + 'static/dashboard.css',\n"
-        + f"  BASE + '{core.runtime_name}',\n"
-        + f"  BASE + '{eager_feature.runtime_name}',\n",
+        + f"  BASE + '{core.runtime_name}',\n",
     )
     worker = worker.replace(
         "const OPTIONAL_FEATURES = [\n",

src/gitea_proxy.py

@@ -380,7 +380,8 @@ async def work_page(stream: str, page: int = 1, limit: int = 50) -> dict:
         "/api/v1/repos/issues/search",
         headers=_auth(),
         params={
-            "state": "open", selector.split("=", 1)[0]: "true",
+            "state": "all" if stream == "filed" else "open",
+            selector.split("=", 1)[0]: "true",
             "type": item_type, "limit": limit, "page": page,
         },
     )
@@ -1252,13 +1253,16 @@ async def close_issue(repository: str, number: int) -> dict:
     issue = response.json()
     if not isinstance(issue, dict) or issue.get("state") != "closed":
         raise ValueError("Gitea did not confirm issue closure")
-    return {
+    result = {
         "number": issue.get("number"),
         "state": "closed",
         "closed_at": issue.get("closed_at", "")
         if isinstance(issue.get("closed_at"), str)
         else "",
     }
+    if isinstance(issue.get("updated_at"), str):
+        result["updated_at"] = issue["updated_at"]
+    return result
 
 
 def _normalize_issue_comment(comment: dict) -> dict:
@@ -1360,6 +1364,32 @@ async def upload_assigned_issue_attachment(
     return {"name": name, "url": url, "size": size}
 
 
+async def upload_preview_attachment(
+    repository: str,
+    number: int,
+    filename: str,
+    content_type: str,
+    content: bytes,
+) -> dict:
+    """Upload evidence after the caller verifies an exact Search preview target."""
+    response = await _get_client().post(
+        f"/api/v1/repos/{repository}/issues/{number}/assets",
+        headers=_auth(),
+        params={"name": filename},
+        files={"attachment": (filename, content, content_type)},
+    )
+    response.raise_for_status()
+    attachment = response.json()
+    if not isinstance(attachment, dict):
+        raise ValueError("Gitea attachment response was not an object")
+    name = attachment.get("name")
+    url = _safe_web_url(attachment.get("browser_download_url"))
+    size = attachment.get("size")
+    if not isinstance(name, str) or not name or not url or not isinstance(size, int):
+        raise ValueError("Gitea did not confirm the attachment")
+    return {"name": name, "url": url, "size": size}
+
+
 async def upload_assigned_pull_attachment(
     repository: str,
     number: int,
@@ -1839,6 +1869,63 @@ async def handoff_assigned_issue(
     }
 
 
+async def reassign_authored_issue(
+    repository: str, number: int, recipient: str, expected_assignees: list[str]
+) -> dict:
+    login, issue = await _current_login_and_target(
+        f"repos/{repository}/issues/{number}"
+    )
+    author = issue.get("user")
+    author_login = author.get("login") if isinstance(author, dict) else None
+    assignees_value = issue.get("assignees")
+    current_assignees = [
+        item["login"] for item in assignees_value
+        if isinstance(item, dict) and isinstance(item.get("login"), str)
+    ] if isinstance(assignees_value, list) else []
+    if (
+        issue.get("state") != "open"
+        or issue.get("pull_request") is not None
+        or not isinstance(author_login, str)
+        or author_login.casefold() != login.casefold()
+        or not current_assignees
+        or current_assignees != expected_assignees
+    ):
+        raise IssueNotAvailableError("Authored issue delegate changed")
+
+    eligible = {
+        item["login"] for item in await issue_handoff_candidates(repository)
+    }
+    if recipient not in eligible or recipient in current_assignees:
+        raise IssueNotAvailableError("Reassignment recipient is not eligible")
+
+    response = await _get_client().patch(
+        f"/api/v1/repos/{repository}/issues/{number}",
+        headers=_auth(),
+        json={"assignees": [recipient]},
+    )
+    response.raise_for_status()
+    confirmed = response.json()
+    confirmed_value = confirmed.get("assignees") if isinstance(confirmed, dict) else None
+    confirmed_assignees = [
+        item["login"] for item in confirmed_value
+        if isinstance(item, dict) and isinstance(item.get("login"), str)
+    ] if isinstance(confirmed_value, list) else []
+    if (
+        not isinstance(confirmed, dict)
+        or confirmed.get("number") != number
+        or confirmed_assignees != [recipient]
+    ):
+        raise ValueError("Gitea did not confirm issue reassignment")
+    return {
+        "repository": repository,
+        "number": number,
+        "state": confirmed.get("state", "open"),
+        "assignees": confirmed_assignees,
+        "recipient": recipient,
+        "previous_assignees": expected_assignees,
+    }
+
+
 async def pull_handoff_candidates(repository: str) -> list[dict]:
     candidates = await issue_handoff_candidates(repository)
     return [
@@ -2288,16 +2375,58 @@ async def update_assigned_issue(
     title: str,
     body: str,
     expected_updated_at: str,
+) -> dict:
+    return await _update_issue_content(
+        repository, number, title, body, expected_updated_at, require_author=False
+    )
+
+
+async def update_authored_issue(
+    repository: str,
+    number: int,
+    title: str,
+    body: str,
+    expected_updated_at: str,
+) -> dict:
+    return await _update_issue_content(
+        repository, number, title, body, expected_updated_at, require_author=True
+    )
+
+
+async def _update_issue_content(
+    repository: str,
+    number: int,
+    title: str,
+    body: str,
+    expected_updated_at: str,
+    *,
+    require_author: bool,
 ) -> dict:
     path = f"repos/{repository}/issues/{number}"
     login, issue = await _current_login_and_target(path)
+    author = issue.get("user") if isinstance(issue.get("user"), dict) else {}
+    authorized = (
+        author.get("login") == login
+        if require_author
+        else _login_in_users(login, issue.get("assignees"))
+    )
     if (
         issue.get("state") != "open"
         or isinstance(issue.get("pull_request"), dict)
-        or not _login_in_users(login, issue.get("assignees"))
+        or not authorized
     ):
-        raise IssueNotAvailableError("assigned issue not found")
+        raise IssueNotAvailableError("issue not found")
     if issue.get("updated_at") != expected_updated_at:
+        if issue.get("title") == title and issue.get("body", "") == body:
+            return {
+                "repository": repository,
+                "number": number,
+                "title": title,
+                "body": body,
+                "state": issue.get("state", "open"),
+                "updated_at": issue.get("updated_at", ""),
+                "url": _safe_web_url(issue.get("html_url")),
+            }
         raise IssueEditConflictError("issue changed upstream")
 
     response = await _get_client().patch(
@@ -2371,8 +2500,9 @@ async def resolve_work_route(
     requested = _login_in_users(login, target.get("requested_reviewers"))
     author = target.get("user") if isinstance(target.get("user"), dict) else {}
     authored = author.get("login") == login
+    state = target.get("state")
     eligible = (
-        target.get("state") == "open"
+        (state == "open" or (kind == "filed" and state == "closed"))
         and (
             (kind == "issue" and not isinstance(target.get("pull_request"), dict) and assigned)
             or (kind == "filed" and not isinstance(target.get("pull_request"), dict) and authored)
@@ -2387,7 +2517,7 @@ async def resolve_work_route(
         "repository": repository,
         "number": number,
         "title": target.get("title", "") if isinstance(target.get("title"), str) else "",
-        "state": "open",
+        "state": state,
         "url": _safe_web_url(target.get("html_url")),
         **({"is_review": True, "work_reasons": ["review_requested"]} if kind == "review" else {}),
         **({
@@ -2410,6 +2540,18 @@ async def is_assigned_issue(repository: str, number: int) -> bool:
 
 
 async def is_authored_issue(repository: str, number: int) -> bool:
+    login, issue = await _current_login_and_target(
+        f"repos/{repository}/issues/{number}"
+    )
+    author = issue.get("user") if isinstance(issue.get("user"), dict) else {}
+    return (
+        issue.get("state") in {"open", "closed"}
+        and not isinstance(issue.get("pull_request"), dict)
+        and author.get("login") == login
+    )
+
+
+async def is_open_authored_issue(repository: str, number: int) -> bool:
     login, issue = await _current_login_and_target(
         f"repos/{repository}/issues/{number}"
     )

src/idempotency.py

@@ -5,6 +5,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Callable
 
+from src.private_state import connect_private_sqlite
+
 
 @dataclass(frozen=True)
 class Reservation:
@@ -33,11 +35,10 @@ class IdempotencyLedger:
         self.max_entries = max_entries
         self.lock_timeout_seconds = lock_timeout_seconds
         self.clock = clock
-        self.path.parent.mkdir(parents=True, exist_ok=True)
         self._initialize()
 
     def _connect(self) -> sqlite3.Connection:
-        connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+        connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
         connection.execute(
             f"PRAGMA busy_timeout = {max(1, int(self.lock_timeout_seconds * 1000))}"
         )

src/image_sanitizer.py

@@ -0,0 +1,38 @@
+"""Authoritative image decoding and metadata removal for evidence uploads."""
+
+from __future__ import annotations
+
+import io
+
+from PIL import Image, ImageOps
+
+
+MAX_IMAGE_PIXELS = 12 * 1024 * 1024
+
+
+def sanitize_image(content_type: str, content: bytes) -> bytes:
+    """Apply orientation and return metadata-free bytes in the claimed format."""
+    format_names = {
+        "image/png": "PNG",
+        "image/jpeg": "JPEG",
+        "image/webp": "WEBP",
+    }
+    try:
+        with Image.open(io.BytesIO(content)) as source:
+            claimed_format = format_names[content_type]
+            if source.format != claimed_format:
+                raise ValueError("image content does not match the selected image type")
+            if getattr(source, "n_frames", 1) != 1:
+                raise ValueError("animated image evidence is not supported")
+            if source.width * source.height > MAX_IMAGE_PIXELS:
+                raise ValueError("attachment must not exceed 12 megapixels")
+            image = ImageOps.exif_transpose(source)
+            image.load()
+            output = io.BytesIO()
+            save_options = {"quality": 90} if claimed_format in {"JPEG", "WEBP"} else {}
+            image.save(output, format=claimed_format, **save_options)
+            return output.getvalue()
+    except ValueError:
+        raise
+    except (KeyError, OSError) as exc:
+        raise ValueError("attachment must be a valid static image") from exc

src/later_store.py

@@ -6,6 +6,8 @@ import time
 from datetime import datetime
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class LaterStore:
     def __init__(
@@ -25,8 +27,7 @@ class LaterStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        connection = sqlite3.connect(self.path, timeout=self.timeout)
+        connection = connect_private_sqlite(self.path, timeout=self.timeout)
         if connection.execute("PRAGMA user_version").fetchone()[0] >= 1:
             connection.close()
             return
@@ -72,7 +73,7 @@ class LaterStore:
         connection.close()
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     def _record_operation(self, connection: sqlite3.Connection, login: str, operation_id: str) -> None:
         now = self.clock()
@@ -130,6 +131,7 @@ class LaterStore:
         item_id: str,
         *,
         wake_at: str | None = None,
+        handoff: str | None = None,
         base_revision: int | None = None,
     ) -> dict:
         result = self.apply_batch(login, [{
@@ -137,6 +139,7 @@ class LaterStore:
             "action": action,
             "item_id": item_id,
             "wake_at": wake_at,
+            "handoff": handoff,
             "base_revision": base_revision,
         }])
         return {"revision": result["revision"], "records": result["records"]}
@@ -180,6 +183,9 @@ class LaterStore:
                 wake_at = operation.get("wake_at")
                 if action == "defer":
                     wake_at = self._validate_wake_at(wake_at)
+                handoff = operation.get("handoff")
+                if handoff not in {None, "today"}:
+                    raise ValueError("unsupported Later handoff")
                 duplicate = connection.execute(
                     "SELECT 1 FROM later_operations WHERE login = ? AND operation_id = ?",
                     (login, operation_id),
@@ -203,8 +209,9 @@ class LaterStore:
 
                 before = records.get(item_id)
                 if action == "defer":
-                    records[item_id] = wake_at
-                    changed = before != wake_at
+                    record = {"wake_at": wake_at, "handoff": handoff} if handoff else wake_at
+                    records[item_id] = record
+                    changed = before != record
                 else:
                     changed = item_id in records
                     records.pop(item_id, None)

src/live_snapshot_store.py

@@ -6,12 +6,13 @@ import json
 import os
 import secrets
 import sqlite3
-import stat
 import time
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable, Iterable
 
+from src.private_state import connect_private_sqlite
+
 SECTIONS = ("context", "events", "notifications")
 
 
@@ -58,56 +59,46 @@ class LiveSnapshotStore:
         self._initialize()
 
     def _connect(self) -> sqlite3.Connection:
-        connection = sqlite3.connect(self.path, timeout=1.0, isolation_level=None)
+        connection = connect_private_sqlite(self.path, timeout=1.0, isolation_level=None)
         connection.row_factory = sqlite3.Row
         connection.execute("PRAGMA busy_timeout = 1000")
         return connection
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
-        try:
-            os.chmod(self.path.parent, stat.S_IRWXU)
-        except OSError:
-            pass
-        old_umask = os.umask(0o077)
-        try:
-            with self._connect() as connection:
-                connection.executescript(
-                    """
-                    CREATE TABLE IF NOT EXISTS live_snapshot (
-                        singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
-                        value_json TEXT,
-                        created_at_json TEXT NOT NULL,
-                        failure_count_json TEXT NOT NULL,
-                        retry_at_json TEXT NOT NULL,
-                        revisions_json TEXT NOT NULL,
-                        generation TEXT NOT NULL
-                    );
-                    CREATE TABLE IF NOT EXISTS live_refresh_lease (
-                        singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
-                        owner TEXT NOT NULL,
-                        sections_json TEXT NOT NULL,
-                        expires_at REAL NOT NULL
-                    );
-                    CREATE TABLE IF NOT EXISTS live_read_notification (
-                        notification_id INTEGER PRIMARY KEY
-                    );
-                    """
-                )
-                connection.execute(
-                    """INSERT OR IGNORE INTO live_snapshot VALUES
-                    (1, NULL, ?, ?, ?, ?, ?)""",
-                    (
-                        json.dumps({section: None for section in SECTIONS}),
-                        json.dumps({section: 0 for section in SECTIONS}),
-                        json.dumps({section: None for section in SECTIONS}),
-                        json.dumps({section: 0 for section in SECTIONS}),
-                        secrets.token_hex(8),
-                    ),
-                )
-        finally:
-            os.umask(old_umask)
-        os.chmod(self.path, stat.S_IRUSR | stat.S_IWUSR)
+        with self._connect() as connection:
+            connection.executescript(
+                """
+                CREATE TABLE IF NOT EXISTS live_snapshot (
+                    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+                    value_json TEXT,
+                    created_at_json TEXT NOT NULL,
+                    failure_count_json TEXT NOT NULL,
+                    retry_at_json TEXT NOT NULL,
+                    revisions_json TEXT NOT NULL,
+                    generation TEXT NOT NULL
+                );
+                CREATE TABLE IF NOT EXISTS live_refresh_lease (
+                    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+                    owner TEXT NOT NULL,
+                    sections_json TEXT NOT NULL,
+                    expires_at REAL NOT NULL
+                );
+                CREATE TABLE IF NOT EXISTS live_read_notification (
+                    notification_id INTEGER PRIMARY KEY
+                );
+                """
+            )
+            connection.execute(
+                """INSERT OR IGNORE INTO live_snapshot VALUES
+                (1, NULL, ?, ?, ?, ?, ?)""",
+                (
+                    json.dumps({section: None for section in SECTIONS}),
+                    json.dumps({section: 0 for section in SECTIONS}),
+                    json.dumps({section: None for section in SECTIONS}),
+                    json.dumps({section: 0 for section in SECTIONS}),
+                    secrets.token_hex(8),
+                ),
+            )
 
     def try_acquire_refresh(
         self, sections: Iterable[str], *, lease_seconds: float

src/login_attempt_store.py

@@ -7,6 +7,8 @@ import sqlite3
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class LoginAttemptStoreError(RuntimeError):
     """Raised when sign-in throttling state cannot be accessed safely."""
@@ -69,8 +71,7 @@ class LoginAttemptStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+            connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS login_attempts (

src/main.py

@@ -26,6 +26,7 @@ from starlette.datastructures import UploadFile
 
 from src import dashboard_auth, gitea_proxy, passkeys
 from src.available_issue_snapshot_store import AvailableIssueSnapshotStore
+from src.completed_filed_review_store import CompletedFiledReviewStore
 from src.compression import NegotiatedGZipMiddleware
 from src.gitea_proxy import (
     activity_events,
@@ -40,6 +41,7 @@ from src.gitea_proxy import (
     repos,
 )
 from src.idempotency import IdempotencyLedger, IdempotencyLedgerBusy
+from src.image_sanitizer import sanitize_image
 from src.login_attempt_store import LoginAttemptStore, LoginAttemptStoreError, client_source
 from src.live_snapshot_store import (
     LiveSnapshotMetadata,
@@ -608,6 +610,7 @@ class LaterOperation(BaseModel):
     action: Literal["defer", "restore"]
     item_id: str = Field(min_length=1, max_length=500)
     wake_at: str | None = Field(default=None, max_length=100)
+    handoff: Literal["today"] | None = None
     base_revision: int | None = Field(default=None, ge=0)
 
 
@@ -633,6 +636,20 @@ class SavedSearchCollection(BaseModel):
     views: list[SavedSearchView] = Field(max_length=20)
 
 
+class CompletedFiledReviewReceipt(BaseModel):
+    repository: str = Field(
+        min_length=3,
+        max_length=200,
+        pattern=r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$",
+    )
+    number: PositiveInt
+    updated_at: str = Field(min_length=1, max_length=100)
+
+
+class CompletedFiledReviewBatch(BaseModel):
+    receipts: list[CompletedFiledReviewReceipt] = Field(max_length=200)
+
+
 class UnfiledDraftBlocker(BaseModel):
     repository: str = Field(min_length=3, max_length=200)
     number: int = Field(ge=1)
@@ -682,13 +699,20 @@ class UnfiledDraftFilingPlan(BaseModel):
 
 class UnfiledDraft(BaseModel):
     id: str = Field(min_length=1, max_length=100, pattern=r"^[A-Za-z0-9_-]+$")
-    title: str = Field(min_length=1, max_length=255)
+    title: str = Field(default="", max_length=255)
     body: str = Field(default="", max_length=10_000)
     saved_at: int = Field(ge=0)
     filing_plan: UnfiledDraftFilingPlan | None = None
     blockers: list[UnfiledDraftBlocker] = Field(default_factory=list, max_length=5)
     evidence: list[UnfiledDraftEvidence] = Field(default_factory=list, max_length=5)
 
+    @model_validator(mode="after")
+    def require_title_or_evidence(self):
+        self.title = self.title.strip()
+        if not self.title and not self.evidence:
+            raise ValueError("title or evidence is required")
+        return self
+
 
 class UnfiledDraftCollection(BaseModel):
     revision: int = Field(ge=0)
@@ -774,6 +798,13 @@ def _validate_binary_attachment(filename: str, content_type: str, content: bytes
     return _validate_attachment_content(content_type, content)
 
 
+async def _sanitize_attachment(content_type: str, content: bytes) -> bytes:
+    sanitized = await asyncio.to_thread(sanitize_image, content_type, content)
+    if len(sanitized) > 2 * 1024 * 1024:
+        raise ValueError("sanitized screenshot must be 2 MB or smaller")
+    return sanitized
+
+
 class IssueCreation(BaseModel):
     title: str = Field(min_length=1, max_length=255)
     body: str = Field(default="", max_length=10_000)
@@ -866,6 +897,22 @@ class IssueHandoff(BaseModel):
     )
 
 
+class IssueReassignment(IssueHandoff):
+    expected_assignees: list[str] = Field(min_length=1, max_length=10)
+
+    @field_validator("expected_assignees")
+    @classmethod
+    def validate_expected_assignees(cls, values: list[str]) -> list[str]:
+        if any(
+            not isinstance(value, str)
+            or not re.fullmatch(r"[A-Za-z0-9_.-]+", value)
+            or len(value) > 255
+            for value in values
+        ) or len(set(values)) != len(values):
+            raise ValueError("expected assignees must be unique valid logins")
+        return values
+
+
 class IssueBlockerUpdate(BaseModel):
     repository: str = Field(
         min_length=3,
@@ -1137,6 +1184,16 @@ def _share_target_login_redirect(request: Request) -> str:
             continuation_values.append(("search_repository", repository_values[0]))
         continuation = urlencode(continuation_values)
         return f"login?{urlencode({'continue': f'./?{continuation}'})}"
+    image_markers = request.query_params.getlist("shared")
+    if image_markers:
+        if (
+            set(request.query_params.keys()) != {"launch", "shared"}
+            or request.query_params.getlist("launch") != ["new"]
+            or image_markers != ["bundle"]
+        ):
+            return "login"
+        continuation = urlencode([("launch", "new"), ("shared", "bundle")])
+        return f"login?{urlencode({'continue': f'./?{continuation}'})}"
     limits = {"title": 200, "text": 8000, "url": 2048}
     if any(
         len(request.query_params.get(name, "")) > limit
@@ -1151,14 +1208,6 @@ def _share_target_login_redirect(request: Request) -> str:
     launch = request.query_params.get("launch", "")
     if launch in {"continue", "new", "agenda"}:
         shared.append(("launch", launch))
-    image_markers = request.query_params.getlist("shared")
-    if image_markers:
-        if (
-            image_markers != ["image"]
-            or request.query_params.getlist("launch") != ["new"]
-        ):
-            return "login"
-        shared.append(("shared", "image"))
     if dashboard_auth.application_path(request) != "/" or not shared:
         return "login"
     continuation = f"./?{urlencode(shared)}"
@@ -1273,7 +1322,7 @@ async def require_operator_session(request: Request, call_next):
 async def prevent_live_api_caching(request, call_next):
     response = await call_next(request)
     path = dashboard_auth.application_path(request)
-    if path in {"/api/v1/context", "/api/v1/background-identity", "/api/v1/events", "/api/v1/live", "/api/v1/available-issues", "/api/v1/search", "/api/v1/work-route", "/api/v1/today", "/api/v1/later", "/api/v1/saved-searches", "/api/v1/security-events", "/api/v1/push-subscription"} or path.startswith("/api/v1/work/") or (
+    if path in {"/api/v1/context", "/api/v1/background-identity", "/api/v1/events", "/api/v1/live", "/api/v1/available-issues", "/api/v1/search", "/api/v1/work-route", "/api/v1/today", "/api/v1/later", "/api/v1/saved-searches", "/api/v1/completed-filed-reviews", "/api/v1/security-events", "/api/v1/push-subscription"} or path.startswith("/api/v1/work/") or (
         path.startswith("/api/v1/repos/")
         and path.endswith("/review")
     ) or path.startswith("/api/v1/notifications") or (
@@ -1331,7 +1380,7 @@ async def enforce_browser_security_boundary(request: Request, call_next):
     response.headers["X-Content-Type-Options"] = "nosniff"
     response.headers["Referrer-Policy"] = "no-referrer"
     response.headers["Permissions-Policy"] = (
-        "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
+        "camera=(), microphone=(self), geolocation=(), payment=(), usb=()"
     )
     response.headers["X-Frame-Options"] = "DENY"
     if dashboard_auth.mode() == dashboard_auth.OPERATOR_MODE:
@@ -2210,6 +2259,15 @@ def _saved_search_store() -> SavedSearchStore:
     )
 
 
+def _completed_filed_review_store() -> CompletedFiledReviewStore:
+    return CompletedFiledReviewStore(
+        os.getenv(
+            "STACKCHAIN_COMPLETED_FILED_REVIEW_DB",
+            str(_state_dir / "completed-filed-reviews.sqlite3"),
+        )
+    )
+
+
 def _unfiled_draft_store() -> UnfiledDraftStore:
     return UnfiledDraftStore(
         os.getenv("STACKCHAIN_UNFILED_DRAFT_DB", str(_state_dir / "unfiled-drafts.sqlite3"))
@@ -2231,6 +2289,40 @@ async def _confirmed_login() -> str:
     return login.strip().lower()
 
 
+@app.get("/api/v1/completed-filed-reviews")
+async def get_completed_filed_reviews(response: Response):
+    login = await _confirmed_login()
+    try:
+        snapshot = await asyncio.to_thread(_completed_filed_review_store().get, login)
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Completed Filed review synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+    response.headers["Cache-Control"] = "no-store"
+    return snapshot
+
+
+@app.post("/api/v1/completed-filed-reviews")
+async def merge_completed_filed_reviews(payload: CompletedFiledReviewBatch):
+    login = await _confirmed_login()
+    try:
+        return await asyncio.to_thread(
+            _completed_filed_review_store().merge,
+            login,
+            [receipt.model_dump() for receipt in payload.receipts],
+        )
+    except ValueError as exc:
+        raise HTTPException(status_code=422, detail=str(exc))
+    except (OSError, sqlite3.Error):
+        raise HTTPException(
+            status_code=503,
+            detail="Completed Filed review synchronization is unavailable",
+            headers={"Retry-After": "1"},
+        )
+
+
 @app.get("/api/v1/saved-searches")
 async def get_saved_searches(response: Response):
     login = await _confirmed_login()
@@ -2537,6 +2629,7 @@ async def update_later_plan(payload: LaterOperation | LaterOperationBatch):
             payload.action,
             payload.item_id,
             wake_at=payload.wake_at,
+            handoff=payload.handoff,
             base_revision=payload.base_revision,
         )
     except ValueError as error:
@@ -3053,6 +3146,72 @@ async def comment_on_global_search_preview(
     return JSONResponse(result, status_code=201)
 
 
+@app.post(
+    "/api/v1/repos/{owner}/{repo}/issues/{number}/preview/attachments",
+    status_code=201,
+)
+async def attach_to_global_search_preview(
+    request: Request,
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+    kind: Literal["issue", "pull"] = Query(),
+    idempotency_key: str | None = Header(default=None, max_length=128),
+) -> JSONResponse:
+    repository = f"{owner}/{repo}"
+    try:
+        form = await request.form()
+        uploaded = form.get("file")
+        if not isinstance(uploaded, UploadFile):
+            raise ValueError("screenshot file is required")
+        filename = str(uploaded.filename or "")
+        content_type = str(uploaded.content_type or "")
+        content = _validate_binary_attachment(filename, content_type, await uploaded.read())
+        content = await _sanitize_attachment(content_type, content)
+    except (ValueError, ValidationError) as exc:
+        raise HTTPException(status_code=422, detail=str(exc)) from exc
+
+    async def upload_attachment():
+        preview = await gitea_proxy.work_preview(repository, kind, number)
+        if (
+            preview.get("repository") != repository
+            or preview.get("kind") != kind
+            or preview.get("number") != number
+            or preview.get("commentable") is not True
+        ):
+            raise HTTPException(status_code=404, detail="Search result not found")
+        result = await gitea_proxy.upload_preview_attachment(
+            repository, number, filename, content_type, content
+        )
+        safe_name = (
+            result["name"].replace("\\", "\\\\").replace("[", "\\[").replace("]", "\\]")
+            .replace("\r", " ").replace("\n", " ")
+        )
+        safe_url = result["url"].replace("<", "%3C").replace(">", "%3E")
+        result["markdown"] = f"![{safe_name}](<{safe_url}>)"
+        return result
+
+    try:
+        result = await _run_idempotent_authored_action(
+            upload_attachment(),
+            idempotency_key=idempotency_key,
+            fingerprint=(
+                "search-preview-attachment", repository, kind, number, filename,
+                content_type, hashlib.sha256(content).hexdigest(),
+            ),
+            timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
+        )
+    except HTTPException:
+        raise
+    except Exception:
+        return JSONResponse(
+            {"error": "The photo could not be uploaded. Your reply is safe; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    return JSONResponse(result, status_code=201)
+
+
 @app.get("/api/v1/work-route")
 async def resolve_work_route(
     kind: Literal["issue", "filed", "pull", "review", "update"] = Query(),
@@ -4189,6 +4348,7 @@ async def attach_to_notification(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
 
@@ -4311,12 +4471,20 @@ async def release_assigned_issue(
 
 @app.get("/api/v1/repos/{owner}/{repo}/issues/{number}/handoff-candidates")
 async def issue_handoff_candidates(
-    owner: str, repo: str, number: int = PathParam(gt=0)
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ) -> JSONResponse:
     repository = f"{owner}/{repo}"
 
     async def load_candidates():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.issue_handoff_candidates(repository)
 
@@ -4386,6 +4554,38 @@ async def handoff_assigned_issue(
     return JSONResponse(result)
 
 
+@app.patch("/api/v1/repos/{owner}/{repo}/issues/{number}/reassign")
+async def reassign_authored_issue(
+    reassignment: IssueReassignment,
+    owner: str,
+    repo: str,
+    number: int = PathParam(gt=0),
+) -> JSONResponse:
+    repository = f"{owner}/{repo}"
+    try:
+        result = await asyncio.wait_for(
+            gitea_proxy.reassign_authored_issue(
+                repository,
+                number,
+                reassignment.recipient,
+                reassignment.expected_assignees,
+            ),
+            timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
+        )
+    except gitea_proxy.IssueNotAvailableError:
+        return JSONResponse(
+            {"error": "The delegate changed. Reload before reassigning."},
+            status_code=409,
+        )
+    except Exception:
+        return JSONResponse(
+            {"error": "The reassignment could not be confirmed. The current delegate is unchanged; please retry."},
+            status_code=503,
+            headers={"Retry-After": "1"},
+        )
+    return JSONResponse(result)
+
+
 @app.get("/api/v1/repos/{owner}/{repo}/issues/{number}/detail")
 async def assigned_issue_detail(
     owner: str,
@@ -4491,11 +4691,17 @@ async def update_assigned_issue_content(
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
     try:
+        update_issue = (
+            gitea_proxy.update_authored_issue
+            if access == "filed"
+            else gitea_proxy.update_assigned_issue
+        )
         result = await asyncio.wait_for(
-            gitea_proxy.update_assigned_issue(
+            update_issue(
                 repository,
                 number,
                 update.title,
@@ -4852,11 +5058,17 @@ async def assigned_issue_conversation(
     number: int = PathParam(gt=0),
     page: int | None = Query(default=None, ge=1, le=100),
     limit: int = Query(default=20, ge=1, le=50),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
 
     async def load_conversation():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.issue_conversation_page(repository, number, page, limit)
 
@@ -4881,11 +5093,17 @@ async def comment_on_assigned_issue(
     repo: str,
     number: int = PathParam(gt=0),
     idempotency_key: str | None = Header(default=None, max_length=128),
+    access: Literal["assigned", "filed"] = Query(default="assigned"),
 ):
     repository = f"{owner}/{repo}"
 
     async def post_comment():
-        if not await gitea_proxy.is_assigned_issue(repository, number):
+        authorized = await (
+            gitea_proxy.is_authored_issue(repository, number)
+            if access == "filed"
+            else gitea_proxy.is_assigned_issue(repository, number)
+        )
+        if not authorized:
             raise HTTPException(status_code=404, detail="Assigned issue not found")
         return await gitea_proxy.comment_on_issue(repository, number, comment.body)
 
@@ -5114,6 +5332,7 @@ async def attach_to_assigned_issue(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
     async def upload_attachment():
@@ -5182,6 +5401,7 @@ async def attach_to_assigned_pull(
             filename = attachment.filename
             content_type = attachment.content_type
             content = attachment.content()
+        content = await _sanitize_attachment(content_type, content)
     except (ValueError, ValidationError) as exc:
         raise HTTPException(status_code=422, detail=str(exc)) from exc
 
@@ -5226,6 +5446,7 @@ async def close_assigned_issue(
     owner: str,
     repo: str,
     number: int = PathParam(gt=0),
+    access: Literal["assigned", "filed"] = "assigned",
     step_up_grant: str | None = Header(
         default=None, alias="X-Step-Up-Grant", max_length=128
     ),
@@ -5240,12 +5461,21 @@ async def close_assigned_issue(
 
     target = f"{repository}#{number}"
     try:
-        assigned = await asyncio.wait_for(
-            gitea_proxy.is_assigned_issue(repository, number),
+        authorized = await asyncio.wait_for(
+            (
+                gitea_proxy.is_open_authored_issue(repository, number)
+                if access == "filed"
+                else gitea_proxy.is_assigned_issue(repository, number)
+            ),
             timeout=ISSUE_ACTION_TIMEOUT_SECONDS,
         )
-        if not assigned:
-            raise HTTPException(status_code=404, detail="Assigned issue not found")
+        if not authorized:
+            detail = (
+                "Open authored issue not found"
+                if access == "filed"
+                else "Assigned issue not found"
+            )
+            raise HTTPException(status_code=404, detail=detail)
         journal = _security_event_store()
         operation_id = await asyncio.to_thread(
             journal.reserve,

src/passkey_store.py

@@ -6,6 +6,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
 from src.session_store import SessionStoreError
 
 
@@ -40,8 +41,7 @@ class PasskeyStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=0.1)
+            connection = connect_private_sqlite(self.path, timeout=0.1)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS passkey_credentials (

src/private_state.py

@@ -0,0 +1,74 @@
+"""Filesystem boundary for SQLite state containing private operator data."""
+
+from __future__ import annotations
+
+import os
+import sqlite3
+import stat
+from pathlib import Path
+from typing import Any
+
+
+PRIVATE_DIRECTORY_MODE = stat.S_IRWXU
+PRIVATE_FILE_MODE = stat.S_IRUSR | stat.S_IWUSR
+
+
+def _reject_symlink(path: Path, *, label: str) -> None:
+    try:
+        metadata = path.lstat()
+    except FileNotFoundError:
+        return
+    if stat.S_ISLNK(metadata.st_mode):
+        raise ValueError(f"private SQLite {label} must not be a symlink: {path}")
+
+
+def prepare_private_sqlite_path(path: str | Path, *, create: bool = True) -> Path:
+    """Create or repair a private SQLite path without following a database symlink."""
+    database = Path(path)
+    parent = database.parent
+    _reject_symlink(parent, label="directory")
+    if create:
+        parent.mkdir(parents=True, mode=PRIVATE_DIRECTORY_MODE, exist_ok=True)
+    elif not parent.exists():
+        raise FileNotFoundError(database)
+    _reject_symlink(parent, label="directory")
+    if not parent.is_dir():
+        raise ValueError(f"private SQLite parent is not a directory: {parent}")
+    os.chmod(parent, PRIVATE_DIRECTORY_MODE, follow_symlinks=False)
+
+    _reject_symlink(database, label="database")
+    flags = os.O_RDWR | (os.O_CREAT if create else 0)
+    flags |= getattr(os, "O_CLOEXEC", 0) | getattr(os, "O_NOFOLLOW", 0)
+    descriptor = os.open(database, flags, PRIVATE_FILE_MODE)
+    try:
+        metadata = os.fstat(descriptor)
+        if not stat.S_ISREG(metadata.st_mode):
+            raise ValueError(f"private SQLite database is not a regular file: {database}")
+        os.fchmod(descriptor, PRIVATE_FILE_MODE)
+    finally:
+        os.close(descriptor)
+
+    for suffix in ("-wal", "-shm", "-journal"):
+        sidecar = Path(str(database) + suffix)
+        _reject_symlink(sidecar, label="sidecar")
+        try:
+            os.chmod(sidecar, PRIVATE_FILE_MODE, follow_symlinks=False)
+        except FileNotFoundError:
+            pass
+    return database
+
+
+def connect_private_sqlite(
+    path: str | Path, *, existing_only: bool = False, **kwargs: Any
+) -> sqlite3.Connection:
+    """Open SQLite only after enforcing its private directory and file modes."""
+    database = prepare_private_sqlite_path(path, create=not existing_only)
+    target: str | Path = database
+    if existing_only:
+        target = f"{database.resolve().as_uri()}?mode=rw"
+        kwargs["uri"] = True
+    connection = sqlite3.connect(target, **kwargs)
+    # SQLite derives new journal/WAL/SHM permissions from the database. Repair
+    # sidecars left by older releases as soon as a connection has opened them.
+    prepare_private_sqlite_path(database, create=not existing_only)
+    return connection

src/push_subscription_store.py

@@ -1,10 +1,11 @@
 import json
-import os
 import sqlite3
 from collections.abc import Iterable, Mapping
 from dataclasses import dataclass
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 @dataclass(frozen=True)
 class PushDelivery:
@@ -57,8 +58,6 @@ class PushSubscriptionStore:
 
     def __init__(self, path: str | Path):
         self.path = Path(path)
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        os.chmod(self.path.parent, 0o700)
         with self._connect() as connection:
             connection.executescript(
                 """
@@ -141,10 +140,8 @@ class PushSubscriptionStore:
                 connection.execute(
                     "ALTER TABLE push_deadline_preferences ADD COLUMN reminder_days INTEGER NOT NULL DEFAULT 2"
                 )
-        os.chmod(self.path, 0o600)
-
     def _connect(self):
-        connection = sqlite3.connect(self.path, timeout=2)
+        connection = connect_private_sqlite(self.path, timeout=2)
         connection.execute("PRAGMA foreign_keys = ON")
         return connection
 

src/saved_search_store.py

@@ -5,6 +5,8 @@ import re
 import sqlite3
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 _REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
 _VIEW_ID = re.compile(r"^[A-Za-z0-9_-]{1,64}$")
@@ -26,8 +28,7 @@ class SavedSearchStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        with sqlite3.connect(self.path, timeout=self.timeout) as connection:
+        with self._connect() as connection:
             connection.execute("PRAGMA journal_mode=WAL")
             connection.execute(
                 """
@@ -40,7 +41,7 @@ class SavedSearchStore:
             )
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     @staticmethod
     def _login(login: str) -> str:

src/security_event_store.py

@@ -6,6 +6,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class SecurityEventStoreError(RuntimeError):
     """Raised when security activity cannot be persisted or read safely."""
@@ -53,8 +55,7 @@ class SecurityEventStore:
 
     def _connect(self) -> sqlite3.Connection:
         try:
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            connection = sqlite3.connect(self.path, timeout=self.lock_timeout_seconds)
+            connection = connect_private_sqlite(self.path, timeout=self.lock_timeout_seconds)
             connection.execute(
                 """
                 CREATE TABLE IF NOT EXISTS security_events (

src/session_store.py

@@ -7,6 +7,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Callable
 
+from src.private_state import connect_private_sqlite
+
 
 class SessionStoreError(RuntimeError):
     """Raised when session state cannot be read or changed safely."""
@@ -51,15 +53,14 @@ class SessionStore:
     def _connect(self, *, initialize: bool = False) -> sqlite3.Connection:
         try:
             if initialize:
-                self.path.parent.mkdir(parents=True, exist_ok=True)
-                connection = sqlite3.connect(
+                connection = connect_private_sqlite(
                     self.path, timeout=self.lock_timeout_seconds
                 )
             else:
-                connection = sqlite3.connect(
-                    f"{self.path.resolve().as_uri()}?mode=rw",
+                connection = connect_private_sqlite(
+                    self.path,
                     timeout=self.lock_timeout_seconds,
-                    uri=True,
+                    existing_only=True,
                 )
             if initialize:
                 connection.execute(

src/today_store.py

@@ -6,6 +6,8 @@ import time
 from datetime import date
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 class TodayPlanFull(ValueError):
     """Raised when an add would exceed the bounded Today plan."""
@@ -33,8 +35,7 @@ class TodayStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        connection = sqlite3.connect(self.path, timeout=self.timeout)
+        connection = connect_private_sqlite(self.path, timeout=self.timeout)
         if connection.execute("PRAGMA user_version").fetchone()[0] >= 1:
             connection.close()
             return
@@ -110,7 +111,7 @@ class TodayStore:
         connection.close()
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     def _record_operation(self, connection: sqlite3.Connection, login: str, operation_id: str) -> None:
         now = self.clock()

src/unfiled_draft_store.py

@@ -8,6 +8,8 @@ import sqlite3
 from datetime import datetime
 from pathlib import Path
 
+from src.private_state import connect_private_sqlite
+
 
 _DRAFT_ID = re.compile(r"^[A-Za-z0-9_-]{1,100}$")
 _REPOSITORY = re.compile(r"^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$")
@@ -38,8 +40,7 @@ class UnfiledDraftStore:
         self._initialize()
 
     def _initialize(self) -> None:
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        with sqlite3.connect(self.path, timeout=self.timeout) as connection:
+        with self._connect() as connection:
             connection.execute("PRAGMA journal_mode=WAL")
             connection.execute(
                 """CREATE TABLE IF NOT EXISTS unfiled_drafts (
@@ -50,7 +51,7 @@ class UnfiledDraftStore:
             )
 
     def _connect(self) -> sqlite3.Connection:
-        return sqlite3.connect(self.path, timeout=self.timeout)
+        return connect_private_sqlite(self.path, timeout=self.timeout)
 
     @staticmethod
     def _login(login: str) -> str:
@@ -160,7 +161,7 @@ class UnfiledDraftStore:
             title = raw.get("title")
             body = raw.get("body", "")
             saved_at = raw.get("saved_at")
-            if not isinstance(title, str) or not title.strip() or len(title.strip()) > 255:
+            if not isinstance(title, str) or len(title.strip()) > 255:
                 raise ValueError("title is invalid")
             if not isinstance(body, str) or len(body) > 10_000:
                 raise ValueError("body is invalid")
@@ -213,6 +214,8 @@ class UnfiledDraftStore:
                     **({"note": note} if note else {}),
                     "data": data,
                 })
+            if not title.strip() and not clean_evidence:
+                raise ValueError("title or evidence is required")
             seen.add(draft_id)
             normalized.append({
                 "id": draft_id,

src/views.py

@@ -17,7 +17,7 @@ LOGIN_HTML = """<!doctype html>
 <style>body{margin:0;background:#07111f;color:#eef6ff;font:16px system-ui;display:grid;min-height:100vh;place-items:center}main{box-sizing:border-box;width:min(90vw,24rem);padding:2rem;border:1px solid #29415d;border-radius:1rem;background:#0d1b2b}label,input,button{display:block;width:100%;box-sizing:border-box}input,button{min-height:48px;margin-top:.6rem;border-radius:.6rem;border:1px solid #49647f;padding:.75rem}button{margin-top:1rem;background:#55d6be;color:#06121b;font-weight:700}p{color:#a9bed3}</style></head>
 <body><main><h1>Operator sign in</h1><p>Use an enrolled passkey, or enter the dashboard access token for bootstrap and recovery. The token is exchanged for a private, short-lived session and is never stored on this device.</p>
 <form id="sign-in"><label>Device name<input name="device_label" type="text" autocomplete="name" maxlength="64" value="This device" required></label><button id="passkey-sign-in" type="button">Sign in with a passkey</button><p>Recovery</p><label>Access token<input name="access_token" type="password" autocomplete="current-password" required></label><button id="submit-sign-in">Sign in with access token</button><p id="status" role="status" aria-live="polite"></p></form></main>
-<script src="static/private-device-data.js"></script><script src="static/login.js"></script></body></html>"""
+<script src="static/private-data-registry.js"></script><script src="static/private-device-data.js"></script><script src="static/login.js"></script></body></html>"""
 
 
 class RevalidatingHTMLResponse(HTMLResponse):

tests/e2e/fake_gitea.py

@@ -4,7 +4,8 @@ from __future__ import annotations
 
 import json
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
-from urllib.parse import urlsplit
+from threading import Event
+from urllib.parse import parse_qs, urlsplit
 
 
 REPOSITORY = {
@@ -16,12 +17,45 @@ REPOSITORY = {
     "owner": {"login": "acme"},
 }
 USER = {"id": 1, "login": "timmy", "full_name": "Timmy"}
+AVAILABLE_ISSUES = [
+    {
+        "id": 101,
+        "number": 41,
+        "title": "Ship mobile capture",
+        "body": "Complete the capture flow on a phone.",
+        "state": "open",
+        "html_url": "http://127.0.0.1/acme/mobile/issues/41",
+        "repository": REPOSITORY,
+        "user": USER,
+        "assignees": [],
+        "labels": [{"name": "P1"}],
+        "updated_at": "2026-08-15T12:00:00Z",
+    },
+    {
+        "id": 102,
+        "number": 42,
+        "title": "Polish desktop filters",
+        "body": "Keep the desktop filter controls clear.",
+        "state": "open",
+        "html_url": "http://127.0.0.1/acme/mobile/issues/42",
+        "repository": REPOSITORY,
+        "user": USER,
+        "assignees": [],
+        "labels": [],
+        "updated_at": "2026-08-15T11:00:00Z",
+    },
+]
 
 
 class FakeGiteaServer(ThreadingHTTPServer):
     def __init__(self, address: tuple[str, int]):
         super().__init__(address, FakeGiteaHandler)
         self.created_issues: list[dict] = []
+        self.issue_creation_enabled = False
+        self.issue_creation_ready = Event()
+        self.assigned_issue_numbers = [issue["number"] for issue in AVAILABLE_ISSUES]
+        self.comments: list[tuple[int, str]] = []
+        self.requests: list[tuple[str, str]] = []
 
 
 class FakeGiteaHandler(BaseHTTPRequestHandler):
@@ -41,7 +75,10 @@ class FakeGiteaHandler(BaseHTTPRequestHandler):
         self.wfile.write(body)
 
     def do_GET(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
-        path = urlsplit(self.path).path
+        parsed = urlsplit(self.path)
+        path = parsed.path
+        query = parse_qs(parsed.query)
+        self.server.requests.append(("GET", self.path))
         if path == "/api/v1/user":
             self._json(200, USER)
         elif path == "/api/v1/user/repos":
@@ -50,6 +87,35 @@ class FakeGiteaHandler(BaseHTTPRequestHandler):
             self._json(200, REPOSITORY)
         elif path == "/api/v1/repos/search":
             self._json(200, {"data": [REPOSITORY], "ok": True})
+        elif path == "/api/v1/repos/issues/search":
+            is_assigned_scan = query.get("assigned") == ["true"] and query.get("type") == ["issues"]
+            is_available_scan = not any(
+                name in query for name in ("assigned", "created", "review_requested", "q")
+            ) and query.get("type") == ["issues"]
+            assigned = [
+                {**issue, "assignees": [USER]}
+                for issue in AVAILABLE_ISSUES
+                if issue["number"] in self.server.assigned_issue_numbers
+            ]
+            available = [
+                issue for issue in AVAILABLE_ISSUES
+                if issue["number"] not in self.server.assigned_issue_numbers
+            ]
+            issues = assigned if is_assigned_scan else available if is_available_scan else []
+            self._json(200, issues, **{"X-Total-Count": str(len(issues))})
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/comments"):
+            self._json(200, [], **{"X-Total-Count": "0"})
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/dependencies"):
+            self._json(200, [])
+        elif path.startswith("/api/v1/repos/acme/mobile/issues/"):
+            try:
+                number = int(path.rsplit("/", 1)[-1])
+            except ValueError:
+                number = 0
+            issue = next((item for item in AVAILABLE_ISSUES if item["number"] == number), None)
+            if issue and number in self.server.assigned_issue_numbers:
+                issue = {**issue, "assignees": [USER]}
+            self._json(200, issue) if issue else self._json(404, {"message": "not found"})
         elif path.startswith("/api/v1/"):
             self._json(200, [], **{"X-Total-Count": "0"})
         else:
@@ -57,11 +123,37 @@ class FakeGiteaHandler(BaseHTTPRequestHandler):
 
     def do_POST(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
         path = urlsplit(self.path).path
+        self.server.requests.append(("POST", self.path))
         length = int(self.headers.get("Content-Length", "0"))
         payload = json.loads(self.rfile.read(length) or b"{}")
+        if path.startswith("/api/v1/repos/acme/mobile/issues/") and path.endswith("/comments"):
+            try:
+                number = int(path.split("/")[-2])
+            except ValueError:
+                self._json(404, {"message": "not found"})
+                return
+            body = str(payload.get("body", ""))
+            self.server.comments.append((number, body))
+            self._json(
+                201,
+                {
+                    "id": len(self.server.comments),
+                    "body": body,
+                    "user": USER,
+                    "created_at": "2026-08-16T20:00:00Z",
+                    "updated_at": "2026-08-16T20:00:00Z",
+                    "html_url": f"http://127.0.0.1/acme/mobile/issues/{number}#issuecomment-1",
+                },
+            )
+            return
         if path != "/api/v1/repos/acme/mobile/issues":
             self._json(404, {"message": "not found"})
             return
+        if not self.server.issue_creation_enabled:
+            self.server.issue_creation_ready.wait(timeout=45)
+        if not self.server.issue_creation_enabled:
+            self._json(503, {"message": "release journey is still offline"})
+            return
         self.server.created_issues.append(payload)
         assignee = payload.get("assignee")
         self._json(
@@ -80,3 +172,23 @@ class FakeGiteaHandler(BaseHTTPRequestHandler):
                 "updated_at": "2026-08-15T12:00:00Z",
             },
         )
+
+    def do_PATCH(self) -> None:  # noqa: N802 - BaseHTTPRequestHandler API
+        path = urlsplit(self.path).path
+        length = int(self.headers.get("Content-Length", "0"))
+        payload = json.loads(self.rfile.read(length) or b"{}")
+        if not path.startswith("/api/v1/repos/acme/mobile/issues/"):
+            self._json(404, {"message": "not found"})
+            return
+        try:
+            number = int(path.rsplit("/", 1)[-1])
+        except ValueError:
+            self._json(404, {"message": "not found"})
+            return
+        issue = next((item for item in AVAILABLE_ISSUES if item["number"] == number), None)
+        if issue is None:
+            self._json(404, {"message": "not found"})
+            return
+        assignee = payload.get("assignee")
+        self.server.assigned_issue_numbers.append(number)
+        self._json(200, {**issue, "assignees": [{"login": assignee}] if assignee else []})

tests/e2e/test_mobile_find_work_release.py

@@ -0,0 +1,114 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Find Work journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_guides_mobile_find_work_through_assignment(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake.assigned_issue_numbers = []
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": 390, "height": 844},
+                ignore_https_errors=True,
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Find Work release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.locator('[data-mobile-task="find"]').click()
+            expect(page.locator("#find-work-sheet")).to_have_class("find-work-sheet open")
+            expect(page.locator(".find-work-card")).to_have_count(2)
+            expect(page.locator("#find-work-status")).to_contain_text("2 of 2 available")
+
+            navigation = page.locator(".mobile-find-work-nav")
+            expect(navigation).to_be_visible()
+            for control in navigation.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator("#select-find-work").click()
+            choices = page.locator("[data-find-work-select]")
+            expect(choices).to_have_count(2)
+            choices.nth(0).check()
+            choices.nth(1).check()
+            page.locator("#claim-selected-work").click()
+
+            expect(navigation.locator('[data-find-work-stage="review"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            expect(page.locator("#find-work-review-list .find-work-review-item")).to_have_count(2)
+            expect(page.locator("#find-work-review-summary")).to_contain_text("2 selected")
+            page.locator("[data-find-work-review-remove]").nth(1).click()
+            expect(page.locator("#find-work-review-list .find-work-review-item")).to_have_count(1)
+            expect(page.locator("#find-work-review-summary")).to_contain_text("1 selected")
+
+            page.locator("#continue-find-work-fit").click()
+            expect(navigation.locator('[data-find-work-stage="fit"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            expect(page.locator("#find-work-estimate-list")).to_contain_text("Ship mobile capture")
+            for control in page.locator("#find-work-fit-stage button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator("#confirm-find-work-estimates").click()
+            expect(navigation.locator('[data-find-work-stage="discover"]')).to_have_attribute(
+                "aria-current", "step"
+            )
+            page.wait_for_timeout(1_000)
+            status = page.locator("#find-work-status").inner_text()
+            assert "1 queued" in status, {
+                "status": status,
+                "browser_errors": browser_errors,
+                "failed_responses": failed_responses,
+                "assigned": fake.assigned_issue_numbers,
+                "today": page.evaluate("localStorage.getItem('stackchain.today-work.v1.timmy')"),
+            }
+
+            assert fake.assigned_issue_numbers == [41]
+            today = page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-work.v1.timmy') || '[]')")
+            assert today == ["issue:acme/mobile:41:"]
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_home_bootstrap_release.py

@@ -0,0 +1,252 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged mobile Home bootstrap runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_bootstraps_mobile_home_and_returns_from_insights(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+    workspace_requests: list[str] = []
+    live_requests: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on(
+                "console",
+                lambda message: browser_errors.append(message.text)
+                if message.type == "error"
+                else None,
+            )
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+            page.on(
+                "request",
+                lambda request: workspace_requests.append(request.url)
+                if "feature-today-timer-" in request.url
+                else None,
+            )
+            page.on(
+                "request",
+                lambda request: live_requests.append(request.url)
+                if "/api/v1/live" in request.url
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Home bootstrap release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            expect(page.locator("#my-work-status")).to_contain_text("2")
+            initial_live_requests = len(live_requests)
+            page.evaluate(
+                """
+                () => {
+                  window.scrollTo(0, 0);
+                  const surface = document.querySelector('#my-work');
+                  surface.setPointerCapture = () => {};
+                  surface.releasePointerCapture = () => {};
+                  const pointer = (type, y) => surface.dispatchEvent(new PointerEvent(type, {
+                    bubbles:true, pointerId:41, pointerType:'touch', clientX:100, clientY:y,
+                  }));
+                  pointer('pointerdown', 10);
+                  pointer('pointermove', 90);
+                }
+                """
+            )
+            expect(page.locator("#mobile-pull-refresh")).to_have_text("Release to refresh")
+            page.evaluate(
+                "document.querySelector('#my-work').dispatchEvent(new PointerEvent('pointerup', "
+                "{bubbles:true, pointerId:41, pointerType:'touch', clientX:100, clientY:90}))"
+            )
+            expect(page.locator("#mobile-pull-refresh")).to_have_text("My Work is up to date")
+            assert len(live_requests) == initial_live_requests + 1
+            dock = page.locator("#mobile-task-dock")
+            expect(dock).to_be_visible()
+            expect(dock.locator("button")).to_have_count(5)
+            for control in dock.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator('[data-mobile-task="queues"]').click()
+            delivery_queue = page.locator('[data-mobile-queue="delivery"]')
+            expect(delivery_queue).to_be_visible()
+            expect(delivery_queue).to_contain_text("Delivery")
+            delivery_bounds = delivery_queue.bounding_box()
+            assert delivery_bounds and delivery_bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#close-mobile-queues").click()
+
+            page.locator("#app-menu-toggle").click()
+            page.locator("#open-insights").click()
+            expect(page.locator("#insights-sheet")).to_be_visible()
+            expect(page.locator("#insights-heading")).to_have_text("Insights")
+            page.locator("#close-insights").click()
+            expect(page.locator("#insights-sheet")).to_be_hidden()
+            expect(page.locator("#my-work")).to_be_visible()
+            expect(dock).to_be_visible()
+
+            page.locator("#app-menu-toggle").click()
+            page.locator("#open-device-setup").click()
+            expect(page.locator("#device-setup-sheet")).to_be_visible()
+            expect(page.locator("#device-storage-heading")).to_have_text("Private device storage")
+            expect(page.locator("#device-storage-detail")).to_contain_text("private work records")
+            for selector in ("#clear-device-caches", "#clear-private-device-data"):
+                bounds = page.locator(selector).bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.locator("#close-device-setup").click()
+            expect(page.locator("#device-setup-sheet")).to_be_hidden()
+
+            page.locator("#active-devices").click()
+            expect(page.locator("#active-devices-sheet")).to_be_visible()
+            expect(page.locator("#security-activity-section")).to_be_visible()
+            security_nav = page.locator(".security-section-nav")
+            expect(security_nav).to_be_visible()
+            for control in security_nav.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            page.locator("#security-section-devices").click()
+            expect(page.locator("#security-section-devices")).to_have_attribute("aria-current", "page")
+            page.go_back()
+            expect(page.locator("#security-section-activity")).to_have_attribute("aria-current", "page")
+            page.go_back()
+            expect(page.locator("#active-devices-sheet")).to_be_hidden()
+            expect(page.locator("#active-devices")).to_be_focused()
+
+            assert len(workspace_requests) == 1, workspace_requests
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)
+
+
+def test_release_artifact_keeps_mobile_delivery_recovery_single_flight(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": 390, "height": 844})
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Delivery recovery release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.evaluate(
+                """
+                () => {
+                  window.__deliveryAttempts = 0;
+                  window.__deliverySettled = new Promise(resolve => { window.__finishDelivery = resolve; });
+                  window.__releaseRecovery = createMobileDeliveryRecovery({
+                    getItems: () => [{outbox_id:'release-retry', delivery_state:'waiting', title:'Post release note'}],
+                    activate: async () => {
+                      window.__deliveryAttempts += 1;
+                      await window.__deliverySettled;
+                    },
+                  });
+                  window.__releaseRecovery.open();
+                  window.__firstRecovery = window.__releaseRecovery.activate();
+                  window.__secondRecovery = window.__releaseRecovery.activate();
+                }
+                """
+            )
+            action = page.locator("#mobile-delivery-recovery-action")
+            expect(page.locator("#mobile-delivery-recovery")).to_be_visible()
+            expect(action).to_be_disabled()
+            expect(page.locator("#mobile-delivery-recovery-status")).to_have_text("Working…")
+            assert page.evaluate("window.__deliveryAttempts") == 1
+            bounds = action.bounding_box()
+            assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.evaluate("window.__finishDelivery()")
+            page.evaluate("Promise.all([window.__firstRecovery, window.__secondRecovery])")
+            expect(action).to_be_enabled()
+            assert page.evaluate("window.__deliveryAttempts") == 1
+
+            page.evaluate(
+                """
+                () => {
+                  const destination = document.createElement('button');
+                  destination.type = 'button';
+                  destination.className = 'draft-resume';
+                  destination.dataset.draftIndex = '0';
+                  destination.textContent = 'Open current review';
+                  window.__attentionAttempts = 0;
+                  window.__attentionSettled = new Promise(resolve => { window.__finishAttention = resolve; });
+                  destination.onclick = async () => {
+                    window.__attentionAttempts += 1;
+                    await window.__attentionSettled;
+                    return true;
+                  };
+                  document.querySelector('#my-work-list').append(destination);
+                  window.__attentionRecovery = createMobileDeliveryRecovery({
+                    getItems: () => [{outbox_id:'review-attention', status:'attention', title:'Review feedback'}],
+                    getIndex: () => 0,
+                  });
+                  window.__attentionRecovery.open();
+                  window.__firstAttention = window.__attentionRecovery.activate();
+                  window.__secondAttention = window.__attentionRecovery.activate();
+                }
+                """
+            )
+            expect(page.locator("#mobile-delivery-recovery")).to_be_hidden()
+            expect(page.locator("#my-work-list .draft-resume")).to_be_focused()
+            assert page.evaluate("window.__attentionAttempts") == 1
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            page.evaluate("window.__finishAttention()")
+            page.evaluate("Promise.all([window.__firstAttention, window.__secondAttention])")
+            assert page.evaluate("window.__attentionAttempts") == 1
+            assert browser_errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_offline_issue_release.py

@@ -24,7 +24,7 @@ from fake_gitea import FakeGiteaServer
 
 
 ROOT = Path(__file__).resolve().parents[2]
-TITLE = "Offline artifact journey 863"
+TITLE = "Offline artifact journey 863."
 BODY = "Captured on a phone, retained offline, delivered exactly once."
 ACCESS_TOKEN = "artifact-browser-access-token-863"
 
@@ -148,6 +148,14 @@ def test_release_artifact_files_one_mobile_issue_exactly_once_after_offline_relo
                 service_workers="allow",
                 ignore_https_errors=True,
             )
+            context.add_init_script("""
+              class DeterministicSpeechRecognition {
+                start() { window.__voiceRecognition = this; }
+                stop() { if (this.onend) this.onend(); }
+                abort() { if (this.onend) this.onend(); }
+              }
+              window.SpeechRecognition = DeterministicSpeechRecognition;
+            """)
             page = context.new_page()
             page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
             page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
@@ -178,13 +186,56 @@ def test_release_artifact_files_one_mobile_issue_exactly_once_after_offline_relo
             assert page.evaluate("() => navigator.serviceWorker.controller !== null")
 
             new_action.click()
-            page.locator("#create-issue-title").fill(TITLE)
-            page.locator("#create-issue-body").fill(BODY)
+            expect(page.locator("#create-issue-sheet")).to_have_class("create-issue-sheet open")
+            assert page.evaluate("document.activeElement?.id") != "create-issue-title"
+            create_navigation = page.locator(".mobile-create-issue-nav")
+            expect(create_navigation).to_be_visible()
+            create_navigation_buttons = create_navigation.locator("button")
+            assert create_navigation_buttons.count() == 3
+            for control in create_navigation_buttons.all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            expect(create_navigation.locator('[data-create-issue-section="describe"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).to_have_attribute(
+                "aria-disabled", "true"
+            )
+            create_navigation.locator('[data-create-issue-section="evidence"]').click()
+            expect(create_navigation.locator('[data-create-issue-section="evidence"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            for control in page.locator(".photo-evidence-actions .issue-attachment-trigger").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            expect(page.locator("#voice-issue-capture")).to_be_visible()
+            page.locator("#start-voice-issue-capture").click()
+            page.evaluate("""([title, body]) => {
+              const result = [{ transcript: title + ' ' + body }];
+              result.isFinal = true;
+              window.__voiceRecognition.onresult({ results: [result] });
+            }""", [TITLE, BODY])
+            expect(page.locator("#voice-issue-review")).to_be_visible()
+            expect(page.locator("#append-voice-issue-transcript")).to_have_text("Use transcript")
+            page.locator("#append-voice-issue-transcript").click()
+            expect(page.locator("#create-issue-title")).to_have_value(TITLE)
+            expect(page.locator("#create-issue-body")).to_have_value(BODY)
             page.locator("#file-new-issue").click()
             expect(page.locator("#create-issue-filing")).to_be_visible()
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).to_have_attribute(
+                "aria-current", "location"
+            )
+            expect(create_navigation.locator('[data-create-issue-section="file"]')).not_to_have_attribute(
+                "aria-disabled", "true"
+            )
             page.locator("#create-issue-repository").select_option("acme/mobile")
             expect(page.locator("#submit-new-issue")).to_be_enabled()
 
+            # Page offline emulation can leave service-worker requests connected.
+            # Abort the mutation at the browser boundary too, matching a real
+            # transport outage without poisoning server-side idempotency state.
+            context.route("**/api/v1/repos/acme/mobile/issues", lambda route: route.abort())
             context.set_offline(True)
             page.locator("#submit-new-issue").click()
             expect(page.locator("#issue-filing-review")).to_be_visible()
@@ -219,13 +270,33 @@ def test_release_artifact_files_one_mobile_issue_exactly_once_after_offline_relo
 
             browser_errors.clear()  # Chromium reports expected network errors while the context is offline.
             failed_responses.clear()
+            fake.issue_creation_enabled = True
+            fake.issue_creation_ready.set()
+            context.unroute("**/api/v1/repos/acme/mobile/issues")
             context.set_offline(False)
             page.evaluate("window.dispatchEvent(new Event('online'))")
-            for _ in range(80):
+            # Containerized Actions runners can take longer than a local browser to wake the
+            # service worker and complete its identity handshake after reconnect.
+            for _ in range(160):
                 if fake.created_issues:
                     break
                 page.wait_for_timeout(250)
-            assert fake.created_issues == [{"title": TITLE, "body": BODY, "assignee": "timmy"}]
+            local_debug = page.evaluate("localStorage.getItem('stackchain.issue-outbox.v1')")
+            durable_debug = indexed_issue_records(page)
+            assert fake.created_issues == [
+                {"title": TITLE, "body": BODY, "assignee": "timmy"}
+            ], (
+                f"url={page.url} ready={page.evaluate('document.readyState')} "
+                f"status={page.locator('#my-work-action-status').inner_text()!r} "
+                f"errors={browser_errors[-5:]!r} responses={failed_responses[-10:]!r} "
+                f"local={local_debug!r} durable={durable_debug!r} "
+                f"requests={fake.requests[-20:]!r}"
+            )
+            # Deferred workspace startup can report its already-issued offline request
+            # after the pre-reconnect clear; retain every non-offline browser error.
+            browser_errors[:] = [
+                error for error in browser_errors if "ERR_INTERNET_DISCONNECTED" not in error
+            ]
 
             for _ in range(40):
                 durable_completion = indexed_issue_records(page)
@@ -248,6 +319,7 @@ def test_release_artifact_files_one_mobile_issue_exactly_once_after_offline_relo
             assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
             browser.close()
     finally:
+        fake.issue_creation_ready.set()
         fake.shutdown()
         fake.server_close()
         fake_thread.join(timeout=5)

tests/e2e/test_mobile_search_preview_navigation.py

@@ -0,0 +1,73 @@
+from __future__ import annotations
+
+import os
+import re
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("rendered mobile Search Preview checks run only in the browser gate", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+
+ROOT = Path(__file__).resolve().parents[2]
+FRONTEND = ROOT / "frontend"
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_rendered_mobile_search_preview_navigation_preserves_reading_space_and_draft(width, height):
+    html = re.sub(r'<script src="static/[^"]+"></script>', "", (FRONTEND / "index.html").read_text())
+
+    with sync_playwright() as playwright:
+        browser = playwright.chromium.launch()
+        page = browser.new_page(viewport={"width": width, "height": height})
+        page.set_content(html)
+        page.add_style_tag(path=FRONTEND / "dashboard.css")
+        page.locator("#search-preview").evaluate("node => node.classList.add('open')")
+        page.locator("#search-preview-reply-workspace").evaluate("node => node.hidden = false")
+        page.locator(".search-preview-navigation").evaluate("node => node.hidden = false")
+        page.locator("#search-preview-overview").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-conversation").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-reply-workspace").evaluate("node => node.style.minHeight = '500px'")
+        page.locator("#search-preview-actions").evaluate("node => node.style.minHeight = '300px'")
+        page.add_script_tag(path=FRONTEND / "mobile-search-preview-nav.js")
+
+        navigation = page.locator(".mobile-search-preview-nav")
+        expect(navigation).to_be_visible()
+        buttons = navigation.locator("button")
+        assert buttons.count() == 4
+        for button in buttons.all():
+            bounds = button.bounding_box()
+            assert bounds and bounds["height"] >= 44
+        assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+        assert page.locator(".search-preview-panel").evaluate("node => node.scrollWidth <= node.clientWidth")
+
+        page.locator("#search-preview-reply").fill("Keep this reply while navigating")
+        navigation.locator('[data-search-preview-section="conversation"]').click()
+        expect(navigation.locator('[data-search-preview-section="conversation"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+        navigation.locator('[data-search-preview-section="reply"]').click()
+        expect(page.locator("#search-preview-reply")).to_be_focused()
+        assert page.locator("#search-preview-reply").input_value() == "Keep this reply while navigating"
+        navigation.locator('[data-search-preview-section="actions"]').click()
+        expect(navigation.locator('[data-search-preview-section="actions"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+
+        continuation = page.locator(".search-preview-navigation")
+        assert continuation.evaluate("node => getComputedStyle(node).position") == "sticky"
+        assert continuation.evaluate("node => getComputedStyle(node).bottom") == "0px"
+        assert page.locator("#search-preview-actions").evaluate("node => getComputedStyle(node).position") == "static"
+
+        page.locator("#next-search-result").click()
+        expect(navigation.locator('[data-search-preview-section="overview"]')).to_have_attribute(
+            "aria-current", "location"
+        )
+        assert page.locator("#search-preview-reply").input_value() == "Keep this reply while navigating"
+
+        page.set_viewport_size({"width": 800, "height": 700})
+        expect(navigation).to_be_hidden()
+        browser.close()

tests/e2e/test_mobile_today_handoff_release.py

@@ -0,0 +1,101 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Plan Today handoff journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_plans_hands_off_and_opens_next_mobile_issue(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+    failed_responses: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(viewport={"width": 390, "height": 844}, ignore_https_errors=True)
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on("console", lambda message: browser_errors.append(message.text) if message.type == "error" else None)
+            page.on(
+                "response",
+                lambda response: failed_responses.append(f"{response.status} {response.url}")
+                if response.status >= 400
+                else None,
+            )
+
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Plan Today release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            expect(page.locator("#my-work-status")).to_contain_text("2")
+            page.locator('[data-mobile-task="work"]').click()
+            expect(page.locator("#plan-today-sheet")).to_be_visible()
+            expect(page.locator("#plan-today-candidates .plan-today-item")).to_have_count(2)
+
+            navigation = page.locator(".mobile-plan-today-nav")
+            expect(navigation).to_be_visible()
+            for control in navigation.locator("button").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+
+            page.locator("#plan-today-available").fill("90")
+            page.locator("#plan-today-available").press("Tab")
+            page.locator("#build-today-plan").click()
+            missing_estimates = page.locator("[data-plan-missing-estimate]")
+            expect(missing_estimates).to_have_count(2)
+            for _ in range(2):
+                missing_estimates.nth(0).fill("30")
+                missing_estimates.nth(0).press("Tab")
+            expect(page.locator("#plan-today-list .plan-today-item")).to_have_count(2)
+            estimates = page.locator("[data-plan-estimate]")
+            expect(estimates).to_have_count(2)
+            page.locator("#save-and-start-today").click()
+
+            try:
+                expect(page.locator("#plan-today-sheet")).to_be_hidden(timeout=5_000)
+            except AssertionError as error:
+                raise AssertionError(page.evaluate("({hidden:document.querySelector('#plan-today-sheet').hidden, state:history.state, bodyClass:document.body.className})")) from error
+            expect(page.locator("#issue-sheet")).to_have_class("issue-sheet open")
+            expect(page.locator("#issue-sheet-title")).to_have_text("Ship mobile capture")
+            expect(page.locator("#send-issue-comment-next")).to_be_visible()
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            expect(page.locator("#plan-today-sheet")).to_be_hidden()
+
+            page.locator('[data-issue-section="reply"]').click()
+            page.locator("#issue-comment").fill("Handoff complete; continuing with the next Today item.")
+            page.locator("#send-issue-comment-next").click()
+
+            expect(page.locator("#issue-sheet-title")).to_have_text("Polish desktop filters")
+            expect(page.locator("#issue-comment")).to_have_value("")
+            expect(page.locator("[data-mobile-today-hud]")).to_have_attribute("data-overlay-hidden", "true")
+            expect(page.locator("[data-mobile-today-hud]")).to_contain_text("Polish desktop filters")
+            assert fake.comments == [(41, "Handoff complete; continuing with the next Today item.")]
+            today = page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-work.v1.timmy') || '[]')")
+            assert today == ["issue:acme/mobile:42:"]
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert browser_errors == []
+            assert failed_responses == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_today_wrap_up_release.py

@@ -0,0 +1,99 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged Today wrap-up journey runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+@pytest.mark.parametrize(("width", "height"), [(320, 568), (390, 844)])
+def test_release_artifact_renders_and_applies_mobile_today_wrap_up(
+    tmp_path: Path, width: int, height: int
+):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1, "browser job must download exactly one assembled release archive"
+
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    fake_thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    fake_thread.start()
+    fake_url = f"http://127.0.0.1:{fake.server_port}"
+    browser_errors: list[str] = []
+
+    try:
+        with release_server(archives[0], tmp_path, fake_url) as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            context = browser.new_context(
+                viewport={"width": width, "height": height}, ignore_https_errors=True
+            )
+            page = context.new_page()
+            page.on("pageerror", lambda error: browser_errors.append(error.stack or str(error)))
+            page.on(
+                "console",
+                lambda message: browser_errors.append(message.text)
+                if message.type == "error"
+                else None,
+            )
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Today wrap-up release phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+
+            page.evaluate(
+                """
+                () => {
+                  const items=[
+                    {kind:'issue',repository:'acme/mobile',number:41,title:'Ship mobile capture',key:'acme/mobile#41'},
+                    {kind:'issue',repository:'acme/mobile',number:42,title:'Polish desktop filters',key:'acme/mobile#42'},
+                  ];
+                  const identity=item => `${item.kind}:${item.repository}:${item.number}:`;
+                  const today=items.map(identity); const later={}; const operations=[];
+                  const todayWork={identity,read:()=>[...today],contains:item=>today.includes(identity(item)),remove:item=>{
+                    const index=today.indexOf(identity(item)); if(index<0)return false; today.splice(index,1); return true;
+                  }};
+                  const laterWork={presetUntil:()=>new Date('2026-08-17T09:00:00Z'),defer:(item,wake)=>{
+                    later[identity(item)]=wake.toISOString(); return 'deferred';
+                  }};
+                  const todaySync={enqueue:(action,id)=>{operations.push([action,id]);return true;},flush:()=>Promise.resolve(true)};
+                  const controller=createTodayWrapUp({todayWork,laterWork,todaySync});
+                  const view=createTodayWrapUpView({controller,qs:selector=>document.querySelector(selector),escapeHtml:value=>String(value)});
+                  window.__wrapTest={view,today,later,operations};
+                  view.open(items,{});
+                }
+                """
+            )
+
+            sheet = page.locator("#today-wrap-up-sheet")
+            expect(sheet).to_be_visible()
+            expect(page.locator(".today-wrap-up-item")).to_have_count(2)
+            for control in sheet.locator("button, label").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+
+            page.locator('[data-wrap-up-identity="issue:acme/mobile:41:"]').check()
+            page.evaluate("window.__wrapTest.view.finish(document.querySelector('#finish-today-wrap-up'))")
+            expect(sheet).to_be_hidden()
+            result = page.evaluate(
+                "({today:window.__wrapTest.today,later:window.__wrapTest.later,operations:window.__wrapTest.operations})"
+            )
+            assert result == {
+                "today": ["issue:acme/mobile:42:"],
+                "later": {"issue:acme/mobile:41:": "2026-08-17T09:00:00.000Z"},
+                "operations": [["remove", "issue:acme/mobile:41:"]],
+            }
+            assert browser_errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        fake_thread.join(timeout=5)

tests/e2e/test_mobile_wrap_up_handoff_release.py

@@ -0,0 +1,65 @@
+from __future__ import annotations
+
+import os
+import threading
+from pathlib import Path
+
+import pytest
+
+if os.getenv("STACKCHAIN_RUN_RELEASE_E2E") != "1":
+    pytest.skip("packaged next-day Today handoff runs only in its gated CI job", allow_module_level=True)
+pytest.importorskip("playwright.sync_api")
+from playwright.sync_api import expect, sync_playwright
+
+from fake_gitea import FakeGiteaServer
+from test_mobile_offline_issue_release import ACCESS_TOKEN, ROOT, release_server
+
+
+def test_release_artifact_reviews_wrap_up_commitments_on_a_phone(tmp_path: Path):
+    archives = sorted((ROOT / "dist").glob("stackchain-dashboard-*.tar.gz"))
+    assert len(archives) == 1
+    fake = FakeGiteaServer(("127.0.0.1", 0))
+    thread = threading.Thread(target=fake.serve_forever, daemon=True)
+    thread.start()
+    errors: list[str] = []
+    try:
+        with release_server(archives[0], tmp_path, f"http://127.0.0.1:{fake.server_port}") as origin, sync_playwright() as playwright:
+            browser = playwright.chromium.launch(args=["--ignore-certificate-errors"])
+            page = browser.new_page(viewport={"width": 390, "height": 844})
+            page.on("pageerror", lambda error: errors.append(error.stack or str(error)))
+            page.goto(origin + "/", wait_until="networkidle")
+            page.locator('input[name="device_label"]').fill("Tomorrow review phone")
+            page.locator('input[name="access_token"]').fill(ACCESS_TOKEN)
+            page.locator("#submit-sign-in").click()
+            page.wait_for_url(origin + "/", wait_until="networkidle")
+            page.evaluate("""localStorage.setItem('stackchain.today-handoff.v1.timmy', JSON.stringify([
+              'issue:acme/mobile:41:', 'issue:acme/mobile:42:'
+            ]))""")
+            page.reload(wait_until="networkidle")
+
+            dialog = page.locator("#today-handoff-dialog")
+            expect(dialog).to_be_visible()
+            expect(page.locator("#today-handoff-items .today-handoff-item")).to_have_count(2)
+            for control in dialog.locator("button, input").all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 24
+            buttons = dialog.locator("button")
+            for control in buttons.all():
+                bounds = control.bounding_box()
+                assert bounds and bounds["height"] >= 44
+            page.locator('[data-today-handoff="issue:acme/mobile:42:"]').uncheck()
+            page.locator("#confirm-today-handoff").click()
+            expect(dialog).to_be_hidden()
+            assert page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-work.v1.timmy'))") == [
+                "issue:acme/mobile:41:"
+            ]
+            assert page.evaluate("JSON.parse(localStorage.getItem('stackchain.today-handoff.v1.timmy'))") == [
+                "issue:acme/mobile:42:"
+            ]
+            assert page.evaluate("document.documentElement.scrollWidth <= window.innerWidth")
+            assert errors == []
+            browser.close()
+    finally:
+        fake.shutdown()
+        fake.server_close()
+        thread.join(timeout=5)

tests/test_assign_and_start.py

@@ -4,6 +4,7 @@ from pathlib import Path
 
 
 ASSIGN_AND_START = Path(__file__).parents[1] / "frontend" / "assign-and-start.js"
+FILED_CLAIM = Path(__file__).parents[1] / "frontend" / "filed-claim.js"
 QUEUE_TODAY = Path(__file__).parents[1] / "frontend" / "queue-today.js"
 HTML = Path(__file__).parents[1] / "frontend" / "index.html"
 DASHBOARD = Path(__file__).parents[1] / "frontend" / "dashboard.js"
@@ -17,6 +18,47 @@ def run_node(script):
     ).stdout)
 
 
+def test_filed_claim_actions_require_open_authored_unassigned_canonical_issue():
+    script = f"""
+const eligible=require({json.dumps(str(FILED_CLAIM))});
+const item={{is_filed:true,is_assigned:false,is_completed:false,state:'open'}};
+process.stdout.write(JSON.stringify({{
+  eligible:eligible(item, {{state:'open',assignees:[]}}),
+  assigned:eligible(item, {{state:'open',assignees:['alex']}}),
+  closed:eligible(item, {{state:'closed',assignees:[]}}),
+  ordinary:eligible({{...item,is_filed:false}}, {{state:'open',assignees:[]}}),
+}}));
+"""
+
+    assert run_node(script) == {
+        "eligible": True,
+        "assigned": False,
+        "closed": False,
+        "ordinary": False,
+    }
+
+
+def test_filed_sheet_exposes_phone_safe_claim_actions_after_canonical_detail():
+    html = HTML.read_text()
+    dashboard = DASHBOARD.read_text()
+    css = CSS.read_text()
+    worker = WORKER.read_text()
+
+    assert 'id="filed-claim-actions"' in html
+    assert 'id="queue-filed-issue"' in html
+    assert 'id="start-filed-issue"' in html
+    assert "filedClaimEligible(item, detail)" in dashboard
+    assert "filedAssignAndStart.run(item, { destination:'queue' })" in dashboard
+    assert "filedAssignAndStart.run(item)" in dashboard
+    assert "Claim failed; this issue is still in Filed." in dashboard
+    assert ".filed-claim-actions" in css
+    action_rule = css.split(".filed-claim-actions", 1)[1].split("}", 1)[0]
+    assert "grid-template-columns:repeat(2,minmax(0,1fr))" in action_rule
+    assert "width:min(560px,100%)" in action_rule
+    assert "BASE + 'static/filed-claim.js'" in worker
+    assert '<script src="static/filed-claim.js"></script>' in html
+
+
 def test_repeated_assign_and_start_taps_claim_once_then_start_confirmed_issue():
     script = f"""
 const fs=require('fs');

tests/test_authored_outbox.py

@@ -77,6 +77,245 @@ outbox.flush('timmy').then(result => process.stdout.write(JSON.stringify({{persi
     assert output["remaining"] == []
 
 
+def test_durable_conversation_photo_captions_stay_paired_without_local_binary_storage():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const mirrors = [];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy',
+  backgroundSync:{{reconcile:async items=>mirrors.push(items),requestSync:async()=>{{}}}},
+}});
+const photo=(filename,note)=>({{filename,contentType:'image/png',blob:new Blob([filename]),note}});
+(async()=>{{
+  await outbox.enqueueDurably({{
+    kind:'issue-comment',repository:'o/r',number:9,body:'Before and after',operationId:'bundle-note',
+    attachments:[photo('before.png','Before repair'),photo('after.png','After *repair*')],
+  }});
+  const metadata=JSON.parse(values.get('stackchain.authored-outbox.v1')).items[0].attachments;
+  const durable=mirrors[0][0].attachments;
+  process.stdout.write(JSON.stringify({{
+    metadata,durable:durable.map(x=>({{filename:x.filename,note:x.note,text:x.data||null,hasBlob:x.blob instanceof Blob}})),
+  }}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    output = run_node(script)
+
+    assert output["metadata"] == [
+        {"filename": "before.png", "contentType": "image/png", "stored": True, "note": "Before repair"},
+        {"filename": "after.png", "contentType": "image/png", "stored": True, "note": "After *repair*"},
+    ]
+    assert output["durable"] == [
+        {"filename": "before.png", "note": "Before repair", "text": None, "hasBlob": True},
+        {"filename": "after.png", "note": "After *repair*", "text": None, "hasBlob": True},
+    ]
+
+
+def test_search_preview_reply_is_durably_bound_to_exact_kind_with_upload_checkpoints():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const mirrors = [];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy',
+  backgroundSync:{{reconcile:async items=>mirrors.push(items),requestSync:async()=>{{}}}},
+}});
+(async()=>{{
+  const result=await outbox.enqueueDurably({{
+    kind:'search-reply',targetKind:'pull',repository:'stackchain/web',number:42,
+    body:'Ready offline.',operationId:'search-42',attachments:[{{
+      filename:'proof.jpg',contentType:'image/jpeg',blob:new Blob(['proof']),note:'After repair',
+      operationId:'photo-stage-1',confirmed:{{markdown:'![proof](saved)'}},
+    }}],
+  }});
+  const metadata=outbox.list()[0]; const durable=mirrors[0][0];
+  process.stdout.write(JSON.stringify({{
+    item:result.item,metadata,
+    durable:{{targetKind:durable.targetKind,operationId:durable.attachment.operationId,
+      markdown:durable.attachment.confirmed?.markdown,hasBlob:durable.attachment.blob instanceof Blob}},
+  }}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    output = run_node(script)
+
+    assert output["item"]["kind"] == "search-reply"
+    assert output["item"]["targetKind"] == "pull"
+    assert output["metadata"]["attachment"] == {
+        "filename": "proof.jpg", "contentType": "image/jpeg", "stored": True,
+        "note": "After repair", "operationId": "photo-stage-1",
+        "confirmed": {"markdown": "![proof](saved)"},
+    }
+    assert output["durable"] == {
+        "targetKind": "pull", "operationId": "photo-stage-1",
+        "markdown": "![proof](saved)", "hasBlob": True,
+    }
+
+
+def test_authored_outbox_persists_and_delivers_revision_checked_issue_content():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const calls = [];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v),removeItem:k=>values.delete(k)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy',
+  fetchJson: async (url, options) => {{
+    calls.push({{url,method:options.method,key:options.headers['Idempotency-Key'],body:JSON.parse(options.body)}});
+    return {{repository:'stackchain/dashboard',number:17,title:'Ship',body:'- [x] Test',updated_at:'2026-08-15T11:00:00Z'}};
+  }},
+}});
+const queued = outbox.enqueue({{
+  kind:'issue-content',repository:'stackchain/dashboard',number:17,operationId:'check-op',
+  title:'Ship',body:'- [x] Test',expectedUpdatedAt:'2026-08-15T10:00:00Z',
+}});
+const restored = createAuthoredOutbox({{storage}}).list()[0];
+outbox.flush('timmy').then(result => process.stdout.write(JSON.stringify({{queued,restored,calls,result,remaining:outbox.list()}})));
+"""
+    output = run_node(script)
+
+    assert output["queued"]["expectedUpdatedAt"] == "2026-08-15T10:00:00Z"
+    assert output["restored"]["title"] == "Ship"
+    assert output["calls"] == [{
+        "url": "api/v1/repos/stackchain/dashboard/issues/17/content",
+        "method": "PATCH",
+        "key": "check-op",
+        "body": {
+            "title": "Ship", "body": "- [x] Test",
+            "expected_updated_at": "2026-08-15T10:00:00Z",
+        },
+    }]
+    assert output["result"]["confirmed"][0]["body"] == "- [x] Test"
+    assert output["remaining"] == []
+
+
+def test_durable_issue_content_admission_coalesces_latest_body_on_original_revision():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const mirrors = []; const ids = ['check-1', 'check-2'];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy', createOperationId:()=>ids.shift(),
+  backgroundSync:{{
+    reconcile:async items=>mirrors.push(items.map(item=>({{...item}}))),
+    requestSync:async()=>{{}},
+  }},
+}});
+(async()=>{{
+  await outbox.enqueueDurably({{kind:'issue-content',repository:'stackchain/dashboard',number:17,
+    title:'Ship',body:'- [x] Build\\n- [ ] Test',expectedUpdatedAt:'server-revision'}});
+  const second = await outbox.enqueueDurably({{kind:'issue-content',repository:'stackchain/dashboard',number:17,
+    title:'Ship',body:'- [x] Build\\n- [x] Test',expectedUpdatedAt:'pending-local-revision'}});
+  process.stdout.write(JSON.stringify({{items:outbox.list(),second,mirrors}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert len(output["items"]) == 1
+    assert output["items"][0]["id"] == "check-1"
+    assert output["items"][0]["operationId"] == "check-2"
+    assert output["items"][0]["body"] == "- [x] Build\n- [x] Test"
+    assert output["items"][0]["expectedUpdatedAt"] == "server-revision"
+    assert output["second"]["item"] == output["items"][0]
+    assert len(output["mirrors"][1]) == 1
+    assert output["mirrors"][1][0]["operationId"] == "check-2"
+
+
+def test_durable_issue_content_coalesces_ordered_checklist_management_intent():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const ids = ['manage-1','manage-2'];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage,getOwnerLogin:()=> 'timmy',createOperationId:()=>ids.shift(),
+  backgroundSync:{{reconcile:async()=>{{}},requestSync:async()=>{{}}}},
+}});
+(async()=>{{
+  await outbox.enqueueDurably({{kind:'issue-content',repository:'o/r',number:9,title:'Ship',
+    baseBody:'- [ ] Build\\n- [ ] Test',body:'- [ ] Compile\\n- [ ] Test',expectedUpdatedAt:'old',
+    checklistOperation:{{action:'rename',index:0,label:'Compile'}}}});
+  await outbox.enqueueDurably({{kind:'issue-content',repository:'o/r',number:9,title:'Ship',
+    baseBody:'- [ ] Compile\\n- [ ] Test',body:'- [ ] Test\\n- [ ] Compile',expectedUpdatedAt:'old',
+    checklistOperation:{{action:'move-later',index:0}}}});
+  process.stdout.write(JSON.stringify(outbox.list()[0]));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["baseBody"] == "- [ ] Build\n- [ ] Test"
+    assert output["body"] == "- [ ] Test\n- [ ] Compile"
+    assert output["checklistOperations"] == [
+        {"action": "rename", "index": 0, "label": "Compile"},
+        {"action": "move-later", "index": 0},
+    ]
+
+
+def test_failed_durable_issue_content_replacement_restores_previous_intent():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map(); const ids = ['check-1', 'check-2']; let admissions = 0;
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy', createOperationId:()=>ids.shift(),
+  backgroundSync:{{
+    reconcile:async()=>{{if (++admissions === 2) throw new Error('IndexedDB unavailable');}},
+    requestSync:async()=>{{}},
+  }},
+}});
+(async()=>{{
+  await outbox.enqueueDurably({{kind:'issue-content',repository:'o/r',number:9,
+    title:'Ship',body:'- [x] Build\\n- [ ] Test',expectedUpdatedAt:'server-revision'}});
+  let error = '';
+  try {{
+    await outbox.enqueueDurably({{kind:'issue-content',repository:'o/r',number:9,
+      title:'Ship',body:'- [x] Build\\n- [x] Test',expectedUpdatedAt:'server-revision'}});
+  }} catch (caught) {{ error = caught.message; }}
+  process.stdout.write(JSON.stringify({{error,items:outbox.list()}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["error"] == "IndexedDB unavailable"
+    assert len(output["items"]) == 1
+    assert output["items"][0]["operationId"] == "check-1"
+    assert output["items"][0]["body"] == "- [x] Build\n- [ ] Test"
+
+
+def test_issue_content_conflict_resolution_rebases_task_delta_and_mirrors_before_retry():
+    script = f"""
+const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
+const mergeChecklistConflict = require({json.dumps(str(Path(__file__).parents[1] / 'frontend' / 'checklist-conflict.js'))});
+const initial = {{version:2,items:[{{
+  id:'check-1',operationId:'old-op',kind:'issue-content',ownerLogin:'timmy',status:'attention',
+  repository:'o/r',number:9,title:'Ship',baseBody:'Intro\\n- [ ] Build\\n- [ ] Test',
+  body:'Intro\\n- [x] Build\\n- [ ] Test',expectedUpdatedAt:'old-revision',error:'Issue changed',
+}}]}};
+const values = new Map([['stackchain.authored-outbox.v1', JSON.stringify(initial)]]);
+const mirrors = []; let syncs = 0;
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox = createAuthoredOutbox({{
+  storage, getOwnerLogin:()=> 'timmy', createOperationId:()=> 'rebased-op', mergeChecklistConflict,
+  backgroundSync:{{reconcile:async items=>mirrors.push(items.map(item=>({{...item}}))),requestSync:async()=>{{syncs += 1;}}}},
+}});
+(async()=>{{
+  const result = await outbox.resolveIssueContentConflict('check-1', {{
+    title:'Ship safely', body:'Remote intro\\n- [ ] Test\\n- [ ] Build', updated_at:'latest-revision',
+  }}, 'timmy');
+  process.stdout.write(JSON.stringify({{result,item:outbox.list()[0],mirrors,syncs}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["result"]["changes"] == [{"label": "Build", "checked": True}]
+    assert output["item"]["status"] == "queued"
+    assert output["item"]["operationId"] == "rebased-op"
+    assert output["item"]["title"] == "Ship safely"
+    assert output["item"]["body"] == "Remote intro\n- [ ] Test\n- [x] Build"
+    assert output["item"]["baseBody"] == "Remote intro\n- [ ] Test\n- [ ] Build"
+    assert output["item"]["expectedUpdatedAt"] == "latest-revision"
+    assert "error" not in output["item"]
+    assert output["mirrors"][-1][0] == output["item"]
+    assert output["syncs"] == 1
+
+
 def test_authored_outbox_persists_and_delivers_desired_blocker_state():
     script = f"""
 const createAuthoredOutbox = require({json.dumps(str(OUTBOX))});
@@ -639,3 +878,35 @@ const outbox=createAuthoredOutbox({{storage,getOwnerLogin:()=>'timmy',background
         "filename": "proof.webp", "contentType": "image/webp", "stored": True
     }
     assert output["durable"] == {"isBlob": True, "text": "PULL-PRIVATE-BYTES"}
+
+
+def test_conversation_photo_bundle_keeps_only_metadata_in_localstorage_and_all_blobs_in_indexeddb():
+    script = f"""
+const createAuthoredOutbox=require({json.dumps(str(OUTBOX))});
+const values=new Map();const mirrors=[];
+const storage={{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const outbox=createAuthoredOutbox({{storage,getOwnerLogin:()=>'timmy',backgroundSync:{{
+  reconcile:async items=>mirrors.push(items),requestSync:async()=>{{}},
+}}}});
+const photo=(name,bytes)=>({{filename:name,contentType:'image/jpeg',blob:new Blob([bytes],{{type:'image/jpeg'}})}});
+(async()=>{{
+  await outbox.enqueueDurably({{kind:'update-reply-read',notificationId:943,body:'Before and after',
+    operationId:'reply-bundle-943',attachments:[photo('before.jpg','PRIVATE-BEFORE'),photo('after.jpg','PRIVATE-AFTER')]}});
+  const local=values.get('stackchain.authored-outbox.v1');
+  const durable=mirrors[0][0].attachments;
+  process.stdout.write(JSON.stringify({{local,metadata:JSON.parse(local).items[0].attachments,
+    durable:await Promise.all(durable.map(async value=>({{filename:value.filename,isBlob:value.blob instanceof Blob,text:await value.blob.text()}})))}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert "PRIVATE-BEFORE" not in output["local"]
+    assert "PRIVATE-AFTER" not in output["local"]
+    assert output["metadata"] == [
+        {"filename": "before.jpg", "contentType": "image/jpeg", "stored": True},
+        {"filename": "after.jpg", "contentType": "image/jpeg", "stored": True},
+    ]
+    assert output["durable"] == [
+        {"filename": "before.jpg", "isBlob": True, "text": "PRIVATE-BEFORE"},
+        {"filename": "after.jpg", "isBlob": True, "text": "PRIVATE-AFTER"},
+    ]

tests/test_background_issue_sync.py

@@ -19,6 +19,55 @@ def run_node(script: str) -> dict:
     return json.loads(completed.stdout)
 
 
+def test_search_reply_reconnect_uses_preview_authorization_and_resumes_photo_checkpoints():
+    script = f"""
+const createBackgroundIssueSync=require({json.dumps(str(SYNC))});
+let item={{id:'search-42',operationId:'search-42',ownerLogin:'timmy',status:'queued',outboxLane:'authored',
+  kind:'search-reply',targetKind:'pull',repository:'stackchain/web',number:42,body:'Ready offline.',attachments:[
+    {{filename:'one.jpg',contentType:'image/jpeg',blob:new Blob(['one']),operationId:'photo-one',confirmed:{{markdown:'![one](saved)'}}}},
+    {{filename:'two.jpg',contentType:'image/jpeg',blob:new Blob(['two']),operationId:'photo-two'}},
+  ]}};
+const calls=[];let commentAttempts=0;
+const store={{claimNext:async()=>item?{{...item}}:null,update:async(_id,transform)=>{{item=transform(item);}},
+  complete:async()=>{{item=null;}},release:async()=>{{item={{...item,status:'queued'}};}},
+  fail:async()=>{{}},countBlocked:async()=>0}};
+const fetchJson=async(url,options={{}})=>{{
+  if(url==='api/v1/background-identity')return{{login:'timmy'}};
+  const file=options.body instanceof FormData?options.body.get('file'):null;
+  calls.push({{url,key:options.headers?.['Idempotency-Key'],filename:file?.name||'',
+    body:file?null:JSON.parse(options.body)}});
+  if(file)return{{markdown:'![two](uploaded)'}};
+  if(commentAttempts++===0){{const error=new Error('offline');error.status=503;throw error;}}
+  return{{id:91,body:'Ready offline.'}};
+}};
+(async()=>{{const sync=createBackgroundIssueSync({{store,fetchJson}});let first='';
+  try{{await sync.flush();}}catch(error){{first=error.message;}}
+  const checkpoint={{...item}};const second=await sync.flush();
+  process.stdout.write(JSON.stringify({{calls,first,checkpoint,second}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["first"] == "offline"
+    assert output["checkpoint"]["attachmentMarkdowns"] == [
+        "![one](saved)", "![two](uploaded)"
+    ]
+    uploads = [call for call in output["calls"] if call["filename"]]
+    assert [(call["filename"], call["key"]) for call in uploads] == [
+        ("two.jpg", "photo-two")
+    ]
+    comments = [call for call in output["calls"] if not call["filename"]]
+    assert [call["url"] for call in comments] == [
+        "api/v1/repos/stackchain/web/issues/42/preview/comments?kind=pull",
+        "api/v1/repos/stackchain/web/issues/42/preview/comments?kind=pull",
+    ]
+    assert [call["key"] for call in comments] == ["search-42:comment"] * 2
+    assert comments[-1]["body"] == {
+        "body": "Ready offline.\n\n![one](saved)\n\n![two](uploaded)"
+    }
+    assert output["second"]["confirmed"] == [{"id": 91, "body": "Ready offline."}]
+
+
 def test_closed_app_sync_delivers_matching_issue_once_with_original_idempotency_key():
     script = f"""
 const createBackgroundIssueSync = require({json.dumps(str(SYNC))});
@@ -96,6 +145,69 @@ const fetchJson=async url=>url==='api/v1/background-identity'?{{login:'timmy'}}:
     }
 
 
+def test_closed_app_sync_delivers_revision_checked_issue_content():
+    script = f"""
+const createBackgroundIssueSync = require({json.dumps(str(SYNC))});
+let item = {{
+  id:'check-1',operationId:'check-1',kind:'issue-content',ownerLogin:'timmy',status:'queued',
+  repository:'stackchain/dashboard',number:17,title:'Ship',body:'- [x] Test',expectedUpdatedAt:'2026-08-15T10:00:00Z',
+}};
+const state={{calls:[],completed:[]}};
+const store={{
+  claimNext:async()=>item?{{...item}}:null,
+  complete:async id=>{{state.completed.push(id);item=null;}},
+  release:async()=>{{}},fail:async()=>{{}},countBlocked:async()=>0,
+}};
+const fetchJson=async(url,options={{}})=>{{
+  state.calls.push({{url,method:options.method,key:options.headers?.['Idempotency-Key']||'',body:options.body?JSON.parse(options.body):null}});
+  if(url==='api/v1/background-identity') return {{login:'timmy'}};
+  return {{repository:'stackchain/dashboard',number:17,title:'Ship',body:'- [x] Test',updated_at:'2026-08-15T11:00:00Z'}};
+}};
+(async()=>{{const result=await createBackgroundIssueSync({{store,fetchJson}}).flush();process.stdout.write(JSON.stringify({{state,result}}));}})();
+"""
+    output = run_node(script)
+
+    assert output["state"]["calls"][1] == {
+        "url": "api/v1/repos/stackchain/dashboard/issues/17/content",
+        "method": "PATCH",
+        "key": "check-1",
+        "body": {
+            "title": "Ship", "body": "- [x] Test",
+            "expected_updated_at": "2026-08-15T10:00:00Z",
+        },
+    }
+    assert output["state"]["completed"] == ["check-1"]
+    assert output["result"]["confirmed"][0]["body"] == "- [x] Test"
+
+
+def test_active_issue_content_delivery_rejects_a_false_durable_replacement():
+    script = f"""
+const createBackgroundIssueSync = require({json.dumps(str(SYNC))});
+const records = new Map([['check-1', {{
+  id:'check-1',operationId:'old-op',kind:'issue-content',outboxLane:'authored',
+  ownerLogin:'timmy',status:'sending',claimUntil:200,body:'- [x] Build\\n- [ ] Test'
+}}]]); let tail=Promise.resolve();
+const transaction=work=>{{const run=tail.then(()=>work({{
+  getAll:async()=>[...records.values()].map(value=>({{...value}})),
+  put:async value=>records.set(value.id,{{...value}}),delete:async id=>records.delete(id),
+}}));tail=run.catch(()=>{{}});return run;}};
+(async()=>{{
+  const store=createBackgroundIssueSync.createIssueSyncStore({{transaction,now:()=>100}});
+  let error='';
+  try {{ await store.reconcile([{{
+    id:'check-1',operationId:'new-op',kind:'issue-content',ownerLogin:'timmy',status:'queued',
+    body:'- [x] Build\\n- [x] Test'
+  }}], 'authored'); }} catch (caught) {{ error=caught.message; }}
+  process.stdout.write(JSON.stringify({{error,snapshot:await store.snapshot()}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["error"] == "Checklist sync is already delivering. Retry this change."
+    assert output["snapshot"][0]["operationId"] == "old-op"
+    assert output["snapshot"][0]["body"] == "- [x] Build\n- [ ] Test"
+
+
 def test_closed_app_sync_delivers_desired_blocker_state():
     script = f"""
 const createBackgroundIssueSync = require({json.dumps(str(SYNC))});
@@ -382,6 +494,56 @@ const fetchJson=async(url,options={{}})=>{{
     assert output["second"]["confirmed"] == [{"id": 91}]
 
 
+def test_conversation_photo_bundle_resumes_at_first_unconfirmed_upload_and_posts_one_ordered_comment():
+    script = f"""
+const createBackgroundIssueSync=require({json.dumps(str(SYNC))});
+let item={{id:'message-bundle',operationId:'message-bundle',ownerLogin:'timmy',status:'queued',
+  kind:'issue-comment',repository:'stackchain/dashboard',number:943,body:'Before and after',
+  attachments:[
+    {{filename:'before.jpg',contentType:'image/jpeg',blob:new Blob(['before'],{{type:'image/jpeg'}})}},
+    {{filename:'after.jpg',contentType:'image/jpeg',blob:new Blob(['after'],{{type:'image/jpeg'}})}},
+  ]}};
+const calls=[];let afterAttempts=0;
+const store={{claimNext:async()=>item?{{...item}}:null,update:async(_id,transform)=>{{item=transform(item);}},
+  complete:async()=>{{item=null;}},release:async()=>{{item={{...item,status:'queued'}};}},
+  fail:async()=>{{}},countBlocked:async()=>0}};
+const fetchJson=async(url,options={{}})=>{{
+  if(url==='api/v1/background-identity')return{{login:'timmy'}};
+  const file=options.body instanceof FormData?options.body.get('file'):null;
+  calls.push({{url,key:options.headers?.['Idempotency-Key'],filename:file?.name||'',
+    body:options.body instanceof FormData?null:JSON.parse(options.body)}});
+  if(file){{
+    if(file.name==='after.jpg' && afterAttempts++===0){{const error=new Error('offline');error.status=503;throw error;}}
+    return{{markdown:'!['+file.name+'](url/'+file.name+')'}};
+  }}
+  return{{id:943}};
+}};
+(async()=>{{const sync=createBackgroundIssueSync({{store,fetchJson}});let firstError='';
+  try{{await sync.flush();}}catch(error){{firstError=error.message;}}
+  const checkpoint={{...item}};const second=await sync.flush();
+  process.stdout.write(JSON.stringify({{calls,firstError,checkpoint,second}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output["firstError"] == "offline"
+    assert output["checkpoint"]["attachmentMarkdowns"] == [
+        "![before.jpg](url/before.jpg)"
+    ]
+    uploads = [call for call in output["calls"] if call["filename"]]
+    assert [(call["filename"], call["key"]) for call in uploads] == [
+        ("before.jpg", "message-bundle:attachment-0"),
+        ("after.jpg", "message-bundle:attachment-1"),
+        ("after.jpg", "message-bundle:attachment-1"),
+    ]
+    comments = [call for call in output["calls"] if call["url"].endswith("/comments")]
+    assert len(comments) == 1
+    assert comments[0]["body"] == {
+        "body": "Before and after\n\n![before.jpg](url/before.jpg)\n\n![after.jpg](url/after.jpg)"
+    }
+    assert output["second"]["confirmed"] == [{"id": 943}]
+
+
 def test_pull_screenshot_retry_uploads_to_pull_and_reuses_checkpoint_before_one_comment():
     script = f"""
 const createBackgroundIssueSync=require({json.dumps(str(SYNC))});
@@ -802,6 +964,34 @@ const transaction=work=>{{const run=tail.then(()=>work({{getAll:async()=>[...rec
     assert output["attachmentMarkdown"] == "![a](url)"
 
 
+def test_foreground_bundle_upsert_preserves_indexeddb_blobs_and_upload_checkpoints():
+    script = f"""
+const createBackgroundIssueSync=require({json.dumps(str(SYNC))});
+const records=new Map();let tail=Promise.resolve();
+const transaction=work=>{{const run=tail.then(()=>work({{getAll:async()=>[...records.values()].map(value=>({{...value}})),put:async value=>records.set(value.id,{{...value}}),delete:async id=>records.delete(id)}}));tail=run.catch(()=>{{}});return run;}};
+(async()=>{{
+  const store=createBackgroundIssueSync.createIssueSyncStore({{transaction}});
+  await store.upsert({{id:'bundle',operationId:'same',ownerLogin:'timmy',status:'queued',attachments:[
+    {{filename:'a.jpg',contentType:'image/jpeg',blob:new Blob(['a-bytes'])}},
+    {{filename:'b.jpg',contentType:'image/jpeg',blob:new Blob(['b-bytes'])}},
+  ]}});
+  await store.update('bundle',item=>({{...item,attachmentMarkdowns:['![a](url/a)']}}));
+  const result=await store.upsert({{id:'bundle',operationId:'same',ownerLogin:'timmy',status:'queued',attachments:[
+    {{filename:'a.jpg',contentType:'image/jpeg',stored:true}},
+    {{filename:'b.jpg',contentType:'image/jpeg',stored:true}},
+  ]}});
+  process.stdout.write(JSON.stringify({{texts:await Promise.all(result.attachments.map(value=>value.blob?.text())),
+    markdowns:result.attachmentMarkdowns}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert output == {
+        "texts": ["a-bytes", "b-bytes"],
+        "markdowns": ["![a](url/a)"],
+    }
+
+
 def test_indexeddb_store_closes_on_version_change_and_reopens_afterward():
     script = f"""
 const createBackgroundIssueSync = require({json.dumps(str(SYNC))});

tests/test_batch_find_work.py

@@ -9,6 +9,7 @@ HTML = Path(__file__).parents[1] / "frontend" / "index.html"
 DASHBOARD = Path(__file__).parents[1] / "frontend" / "dashboard.js"
 CSS = Path(__file__).parents[1] / "frontend" / "dashboard.css"
 WORKER = Path(__file__).parents[1] / "frontend" / "service-worker.js"
+FIND_WORK_NAV = Path(__file__).parents[1] / "frontend" / "mobile-find-work-nav.js"
 
 
 def run_node(script):
@@ -437,14 +438,15 @@ def test_mobile_find_work_exposes_accessible_batch_controls_and_offline_asset():
     dashboard = DASHBOARD.read_text()
     css = CSS.read_text()
     worker = WORKER.read_text()
+    navigation = FIND_WORK_NAV.read_text()
 
     assert 'id="select-find-work"' in html
     assert 'id="batch-find-work-actions"' in html
     assert 'id="claim-selected-work"' in html
     assert 'aria-live="polite"' in html
     assert "createBatchFindWork({" in dashboard
-    assert "findWorkController.startSelection()" in dashboard
-    assert "findWorkController.toggleSelection(item)" in dashboard
+    assert "options.controller?.startSelection?.()" in navigation
+    assert "options.controller?.toggleSelection" in navigation
     assert ".find-work-batch-actions" in css
     assert "position:sticky" in css
     assert "env(safe-area-inset-bottom)" in css
@@ -472,7 +474,7 @@ def test_mobile_find_work_exposes_fill_today_action_with_capacity_handoff():
     assert 'id="fill-find-work-today"' in html
     assert 'aria-describedby="find-work-selection-status"' in html
     assert "findWorkController.fillSelection(remainingSlots)" in dashboard
-    assert "openFindWorkEstimateReview(findWorkController.selectedItems())" in dashboard
+    assert "openFit:openFindWorkEstimateReview" in dashboard
     assert ".fill-find-work-today" in css and "min-height:44px" in css
 
 

tests/test_checklist_conflict.py

@@ -0,0 +1,110 @@
+import json
+import subprocess
+from pathlib import Path
+
+
+MERGER = Path(__file__).parents[1] / "frontend" / "checklist-conflict.js"
+
+
+def run_node(script: str):
+    result = subprocess.run(["node", "-e", script], check=True, capture_output=True, text=True)
+    return json.loads(result.stdout)
+
+
+def test_merge_applies_local_task_delta_to_latest_body_without_reverting_remote_edits():
+    script = f"""
+const mergeChecklistConflict = require({json.dumps(str(MERGER))});
+const result = mergeChecklistConflict({{
+  baseBody:'Intro\\n- [ ] Build\\n- [ ] Test',
+  localBody:'Intro\\n- [x] Build\\n- [ ] Test',
+  remoteBody:'Updated intro\\n- [ ] Test\\n- [ ] Build\\n- [x] Document',
+}});
+process.stdout.write(JSON.stringify(result));
+"""
+    output = run_node(script)
+
+    assert output == {
+        "body": "Updated intro\n- [ ] Test\n- [x] Build\n- [x] Document",
+        "changes": [{"label": "Build", "checked": True}],
+        "conflicts": [],
+    }
+
+
+def test_merge_reports_missing_or_ambiguous_changed_tasks_without_writing_a_body():
+    script = f"""
+const mergeChecklistConflict = require({json.dumps(str(MERGER))});
+const missing = mergeChecklistConflict({{
+  baseBody:'- [ ] Ship', localBody:'- [x] Ship', remoteBody:'- [ ] Release',
+}});
+const duplicate = mergeChecklistConflict({{
+  baseBody:'- [ ] Ship', localBody:'- [x] Ship', remoteBody:'- [ ] Ship\\n- [ ] Ship',
+}});
+process.stdout.write(JSON.stringify({{missing,duplicate}}));
+"""
+    output = run_node(script)
+
+    assert output["missing"]["body"] is None
+    assert output["missing"]["conflicts"] == [{"label": "Ship", "reason": "missing"}]
+    assert output["duplicate"]["body"] is None
+    assert output["duplicate"]["conflicts"] == [{"label": "Ship", "reason": "ambiguous"}]
+
+
+def test_merge_appends_a_locally_added_step_to_remote_edits_without_reverting_them():
+    script = f"""
+const mergeChecklistConflict = require({json.dumps(str(MERGER))});
+const result = mergeChecklistConflict({{
+  baseBody:'Intro\\n- [ ] Build',
+  localBody:'Intro\\n- [ ] Build\\n- [ ] Verify rollback',
+  remoteBody:'Updated intro\\n- [x] Build\\n- [ ] Notify support',
+}});
+process.stdout.write(JSON.stringify(result));
+"""
+    output = run_node(script)
+
+    assert output == {
+        "body": "Updated intro\n- [x] Build\n- [ ] Notify support\n- [ ] Verify rollback",
+        "changes": [{"label": "Verify rollback", "checked": False, "added": True}],
+        "conflicts": [],
+    }
+
+
+def test_merge_rejects_an_ambiguous_locally_added_duplicate():
+    script = f"""
+const mergeChecklistConflict = require({json.dumps(str(MERGER))});
+const result = mergeChecklistConflict({{
+  baseBody:'- [ ] Build',
+  localBody:'- [ ] Build\\n- [ ] Verify rollback\\n- [ ]  verify   rollback ',
+  remoteBody:'- [x] Build',
+}});
+process.stdout.write(JSON.stringify(result));
+"""
+    output = run_node(script)
+
+    assert output["body"] is None
+    assert output["conflicts"] == [{"label": "Verify rollback", "reason": "ambiguous"}]
+
+
+def test_merge_replays_rename_and_reorder_intent_onto_unrelated_remote_edits():
+    script = f"""
+const mergeChecklistConflict = require({json.dumps(str(MERGER))});
+const result = mergeChecklistConflict({{
+  baseBody:'Intro\\n- [ ] Build\\n- [ ] Test',
+  localBody:'Intro\\n- [ ] Test\\n- [ ] Compile',
+  remoteBody:'Updated intro\\n- [x] Build\\n- [ ] Test\\nRemote note',
+  operations:[
+    {{action:'rename',index:0,label:'Compile'}},
+    {{action:'move-later',index:0}},
+  ],
+}});
+process.stdout.write(JSON.stringify(result));
+"""
+    output = run_node(script)
+
+    assert output == {
+        "body": "Updated intro\n- [ ] Test\n- [x] Compile\nRemote note",
+        "changes": [
+            {"label": "Build", "renamed": "Compile"},
+            {"label": "Compile", "moved": "later"},
+        ],
+        "conflicts": [],
+    }

tests/test_ci_workflow.py

@@ -17,6 +17,23 @@ def test_ci_installs_declared_requirements_before_tests():
     assert install < tests
 
 
+def test_ci_audits_pinned_runtime_dependencies_before_tests_and_release_build():
+    text = WORKFLOW.read_text()
+    lint = text[text.index("  lint:") : text.index("  build-release:")]
+    build = text[text.index("  build-release:") : text.index("  browser-journey:")]
+
+    audit_install = lint.index("pip install -r requirements-audit.txt")
+    audit = lint.index("python3 -m pip_audit -r requirements.txt --strict")
+    tests = lint.index("python3 -m pytest tests/ -q")
+    assert audit_install < audit < tests
+    assert "needs: lint" in build
+
+
+def test_runtime_multipart_parser_uses_advisory_fixed_release():
+    requirements = Path("requirements.txt").read_text().splitlines()
+    assert "python-multipart==0.0.32" in requirements
+
+
 def test_release_promotion_waits_for_tests_and_bundle():
     text = WORKFLOW.read_text()
     release = text[text.index("  release-candidate:") :]
@@ -38,5 +55,13 @@ def test_release_promotion_waits_for_artifact_mobile_offline_journey():
     assert "pip install -r requirements-e2e.txt" in browser
     assert "python3 -m playwright install --with-deps chromium" in browser
     assert 'STACKCHAIN_RUN_RELEASE_E2E: "1"' in browser
-    assert "python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py -q" in browser
+    assert (
+        "python3 -m pytest tests/e2e/test_mobile_offline_issue_release.py "
+        "tests/e2e/test_mobile_search_preview_navigation.py "
+        "tests/e2e/test_mobile_find_work_release.py "
+        "tests/e2e/test_mobile_home_bootstrap_release.py "
+        "tests/e2e/test_mobile_today_handoff_release.py "
+        "tests/e2e/test_mobile_today_wrap_up_release.py "
+        "tests/e2e/test_mobile_wrap_up_handoff_release.py -q"
+    ) in browser
     assert "needs: [lint, build-release, browser-journey]" in release

tests/test_command_palette.py

@@ -389,6 +389,33 @@ process.stdout.write(JSON.stringify({{
     }
 
 
+def test_search_preview_queue_and_next_advances_only_after_durable_admission():
+    script = f"""
+const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});
+(async()=>{{
+const items=[1,2].map(number=>({{repository:'stackchain/api',number,kind:'issue'}}));
+const values=new Map();let admit;const navigated=[];const states=[];let cleared=0;
+const preview=createSearchPreview({{
+  fetchJson:async item=>item,mutate:async()=>{{}},
+  queueReply:(item,body,operationId)=>new Promise(resolve=>{{admit=()=>resolve({{id:operationId,queued:true}});}}),
+  storage:{{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}},
+  createOperationId:()=> 'offline-search-1',hasAttachments:()=>false,clearAttachments:()=>{{cleared+=1;}},
+  getSession:()=>({{items,more:false}}),onNavigate:item=>navigated.push(item.number),onState:state=>states.push(state),
+}});
+await preview.open(items[0]);preview.saveReplyDraft('Queue safely.');
+const pending=preview.reply({{advance:true}});await Promise.resolve();const before=[...navigated];admit();await pending;
+process.stdout.write(JSON.stringify({{before,navigated,cleared,draft:values.size,
+  queued:states.some(state=>state.status==='queued')}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "before": [], "navigated": [2], "cleared": 1, "draft": 0, "queued": True
+    }
+
+
 def test_search_preview_reply_retry_keeps_draft_and_operation_until_server_confirmation():
     script = f"""
 const createSearchPreview = require({json.dumps(str(SEARCH_PREVIEW))});

tests/test_comment_next.py

@@ -303,4 +303,4 @@ async def test_unread_update_offers_reply_mark_read_and_next_independent_of_toda
     assert '.update-reply-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr));' in html
     assert '.update-reply-actions button { min-height:44px;' in html
     worker = (Path(__file__).parents[1] / "frontend" / "service-worker.js").read_text()
-    assert "stackchain-dashboard-shell-v102" in worker
+    assert "stackchain-dashboard-shell-v117" in worker

tests/test_completed_filed_review_store.py

@@ -0,0 +1,73 @@
+import httpx
+import pytest
+
+from src import main
+from src.completed_filed_review_store import CompletedFiledReviewStore
+
+
+def receipt(repository="stackchain/api", number=9, updated_at="2026-08-15T12:00:00Z"):
+    return {"repository": repository, "number": number, "updated_at": updated_at}
+
+
+def test_receipts_merge_without_lost_updates_and_remain_account_scoped(tmp_path):
+    store = CompletedFiledReviewStore(tmp_path / "completed-filed.sqlite3")
+
+    first = store.merge(" Timmy ", [receipt()])
+    second = store.merge("timmy", [receipt("stackchain/web", 4)])
+
+    assert first == {"receipts": [receipt()]}
+    assert second == {"receipts": [receipt(), receipt("stackchain/web", 4)]}
+    assert store.get("TIMMY") == second
+    assert store.get("alexander") == {"receipts": []}
+
+
+def test_receipts_keep_newest_revision_and_bound_each_account(tmp_path):
+    store = CompletedFiledReviewStore(tmp_path / "completed-filed.sqlite3", limit=2)
+    newer = receipt(updated_at="2026-08-16T12:00:00Z")
+
+    store.merge("timmy", [newer])
+    assert store.merge("timmy", [receipt()]) == {"receipts": [newer]}
+    bounded = store.merge("timmy", [receipt("stackchain/web", 2), receipt("stackchain/docs", 3)])
+
+    assert bounded == {"receipts": [receipt("stackchain/web", 2), receipt("stackchain/docs", 3)]}
+
+
+@pytest.mark.parametrize("candidate", [
+    {"repository": "bad", "number": 1, "updated_at": "2026-08-15T12:00:00Z"},
+    {"repository": "stackchain/api", "number": 0, "updated_at": "2026-08-15T12:00:00Z"},
+    {"repository": "stackchain/api", "number": 1, "updated_at": "yesterday"},
+])
+def test_receipts_reject_invalid_records(tmp_path, candidate):
+    store = CompletedFiledReviewStore(tmp_path / "completed-filed.sqlite3")
+    with pytest.raises(ValueError):
+        store.merge("timmy", [candidate])
+
+
+@pytest.mark.anyio
+async def test_completed_filed_review_api_is_authenticated_csrf_protected_and_no_store(monkeypatch, tmp_path):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_COMPLETED_FILED_REVIEW_DB", str(tmp_path / "completed.sqlite3"))
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    monkeypatch.setattr(main, "current_user", user)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        forbidden = await client.post("/api/v1/completed-filed-reviews", json={"receipts": [receipt()]})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        saved = await client.post(
+            "/api/v1/completed-filed-reviews", json={"receipts": [receipt()]}, headers=headers
+        )
+        fetched = await client.get("/api/v1/completed-filed-reviews")
+
+    assert forbidden.status_code == 403
+    assert saved.status_code == 200
+    assert saved.json() == {"receipts": [receipt()]}
+    assert fetched.json() == saved.json()
+    assert fetched.headers["cache-control"] == "no-store"

tests/test_conversation_photo_drafts.py

@@ -0,0 +1,164 @@
+import json
+import subprocess
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[1]
+STORE = ROOT / "frontend" / "conversation-reply-draft-store.js"
+COORDINATOR = ROOT / "frontend" / "conversation-photo-drafts.js"
+DASHBOARD = ROOT / "frontend" / "dashboard.js"
+INDEX = ROOT / "frontend" / "index.html"
+REGISTRY = ROOT / "frontend" / "private-data-registry.js"
+WORKER = ROOT / "frontend" / "service-worker.js"
+BUNDLE = ROOT / "src" / "frontend_bundle.py"
+
+
+def run_node(script: str) -> str:
+    return subprocess.run(
+        ["node", "-e", script], check=True, capture_output=True, text=True
+    ).stdout
+
+
+def test_store_isolates_complete_photo_bundles_by_account_and_conversation():
+    script = f"""
+const createStore = require({json.dumps(str(STORE))});
+const records = new Map();
+let login = 'timmy';
+const transaction = async (operation, key, value) => {{
+  if (operation === 'put') records.set(key, structuredClone(value));
+  if (operation === 'get') return records.has(key) ? structuredClone(records.get(key)) : null;
+  if (operation === 'delete') records.delete(key);
+}};
+const store = createStore({{transaction, getOwnerLogin:()=>login}});
+const issue = {{kind:'issue', repository:'stackchain/dashboard', number:963}};
+const pull = {{kind:'pull', repository:'stackchain/dashboard', number:963}};
+const update = {{kind:'update', notificationId:4815}};
+const photos = [
+  {{filename:'before.webp', contentType:'image/webp', blob:new Blob(['before']), note:'before', operationId:'op-1'}},
+  {{filename:'after.webp', contentType:'image/webp', blob:new Blob(['after']), note:'after', operationId:'op-2', confirmed:{{markdown:'![after](saved)'}}}},
+];
+(async()=>{{
+  await store.save(issue, photos);
+  await store.save(pull, [photos[1]]);
+  await store.save(update, [photos[0]]);
+  const restored = await store.load(issue);
+  const pullDraft = await store.load(pull);
+  const updateDraft = await store.load(update);
+  login = 'alexander';
+  const wrongAccount = await store.load(issue);
+  process.stdout.write(JSON.stringify({{
+    restored:await Promise.all(restored.map(async photo=>({{...photo,blobText:await photo.blob.text(),blob:undefined}}))),
+    pullCount:pullDraft.length, updateCount:updateDraft.length, wrongAccount, recordCount:records.size,
+  }}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    output = json.loads(run_node(script))
+
+    assert output == {
+        "restored": [
+            {
+                "filename": "before.webp",
+                "contentType": "image/webp",
+                "note": "before",
+                "operationId": "op-1",
+                "blobText": "before",
+            },
+            {
+                "filename": "after.webp",
+                "contentType": "image/webp",
+                "note": "after",
+                "operationId": "op-2",
+                "confirmed": {"markdown": "![after](saved)"},
+                "blobText": "after",
+            },
+        ],
+        "pullCount": 1,
+        "updateCount": 1,
+        "wrongAccount": None,
+        "recordCount": 3,
+    }
+
+
+def test_coordinator_ignores_stale_restores_and_clears_only_after_durable_completion():
+    script = f"""
+const createCoordinator = require({json.dumps(str(COORDINATOR))});
+const waits = new Map();
+const removed = [];
+const restored = [];
+let current = [{{filename:'current.webp',contentType:'image/webp',blob:new Blob(['current'])}}];
+const store = {{
+  load:target=>new Promise(resolve=>waits.set(target.number, resolve)),
+  save:async()=>null,
+  remove:async target=>removed.push(target.number || target.notificationId),
+}};
+const controller = {{
+  serialize:async()=>current,
+  restore:value=>restored.push(value[0].filename),
+  clear:()=>{{current=[];}},
+}};
+const drafts = createCoordinator({{store, lanes:{{issue:{{controller,onError:()=>{{}}}}}}}});
+(async()=>{{
+  const first = drafts.open('issue', {{kind:'issue',repository:'stackchain/dashboard',number:1}});
+  const second = drafts.open('issue', {{kind:'issue',repository:'stackchain/dashboard',number:2}});
+  await Promise.resolve();
+  waits.get(1)([{{filename:'stale.webp',contentType:'image/webp',blob:new Blob(['stale'])}}]);
+  waits.get(2)([{{filename:'fresh.webp',contentType:'image/webp',blob:new Blob(['fresh'])}}]);
+  await Promise.all([first, second]);
+  await drafts.complete('issue');
+  process.stdout.write(JSON.stringify({{restored,removed,hasTarget:drafts.hasTarget('issue')}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    output = json.loads(run_node(script))
+    assert output == {"restored": ["fresh.webp"], "removed": [2], "hasTarget": False}
+
+
+def test_coordinator_checkpoints_previous_target_before_switching_conversations():
+    script = f"""
+const createCoordinator = require({json.dumps(str(COORDINATOR))});
+const events = [];
+let current = [{{filename:'first.webp',contentType:'image/webp',blob:new Blob(['first'])}}];
+const store = {{
+  load:async target=>target.number === 2 ? [{{filename:'second.webp',contentType:'image/webp',blob:new Blob(['second'])}}] : null,
+  save:async (target,attachments)=>events.push('save:' + target.number + ':' + attachments[0].filename),
+  remove:async()=>null,
+}};
+const controller = {{
+  serialize:async()=>current,
+  restore:value=>{{current=value;events.push('restore:' + value[0].filename);}},
+  clear:()=>{{current=[];}},
+}};
+const drafts = createCoordinator({{store, lanes:{{issue:{{controller}}}}}});
+(async()=>{{
+  await drafts.open('issue', {{kind:'issue',repository:'stackchain/dashboard',number:1}});
+  current=[{{filename:'first.webp',contentType:'image/webp',blob:new Blob(['first'])}}];
+  await drafts.switchTo('issue', {{kind:'issue',repository:'stackchain/dashboard',number:2}});
+  process.stdout.write(JSON.stringify(events));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    assert json.loads(run_node(script)) == ["save:1:first.webp", "restore:second.webp"]
+
+
+def test_my_work_wires_durable_photo_drafts_into_all_conversation_boundaries():
+    dashboard = DASHBOARD.read_text()
+    html = INDEX.read_text()
+    registry = REGISTRY.read_text()
+    worker = WORKER.read_text()
+    bundle = BUNDLE.read_text()
+
+    assert '<script src="static/conversation-reply-draft-store.js"></script>' in html
+    assert '<script src="static/conversation-photo-drafts.js"></script>' in html
+    assert "'stackchain-conversation-reply-drafts-v1'" in registry
+    assert "BASE + 'static/conversation-reply-draft-store.js'" in worker
+    assert "BASE + 'static/conversation-photo-drafts.js'" in worker
+    assert '"static/conversation-reply-draft-store.js"' in bundle
+    assert '"static/conversation-photo-drafts.js"' in bundle
+    assert "conversationPhotoDrafts.switchTo('issue'," in dashboard
+    assert "conversationPhotoDrafts.switchTo('pull'," in dashboard
+    assert "conversationPhotoDrafts.switchTo('update'," in dashboard
+    assert "conversationPhotoDrafts.leave('issue')" in dashboard
+    assert "conversationPhotoDrafts.leave('pull')" in dashboard
+    assert "conversationPhotoDrafts.leave('update')" in dashboard
+    assert "await conversationPhotoDrafts.complete(kind)" in dashboard
+    assert "await conversationPhotoDrafts.complete('issue')" in dashboard
+    assert "await conversationPhotoDrafts.complete('pull')" in dashboard
+    assert "await conversationPhotoDrafts.complete('update')" in dashboard

tests/test_dashboard_auth.py

@@ -944,33 +944,26 @@ async def test_anonymous_search_preview_preserves_only_valid_search_scope(access
 
 
 @pytest.mark.anyio
-async def test_anonymous_shared_screenshot_preserves_bounded_sign_in_continuation(access_control):
+async def test_anonymous_shared_bundle_preserves_only_opaque_sign_in_continuation(access_control):
     transport = httpx.ASGITransport(app=main.app)
     async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
         valid = await client.get(
             "/",
-            params={
-                "launch": "new",
-                "shared": "image",
-                "title": "Broken checkout",
-                "text": "Steps to reproduce",
-            },
+            params={"launch": "new", "shared": "bundle"},
         )
         wrong_launch = await client.get(
-            "/", params={"launch": "agenda", "shared": "image"}
+            "/", params={"launch": "agenda", "shared": "bundle"}
         )
         wrong_marker = await client.get(
             "/", params={"launch": "new", "shared": "document"}
         )
         duplicate_marker = await client.get(
-            "/?launch=new&shared=image&shared=image"
+            "/?launch=new&shared=bundle&shared=bundle"
         )
 
     assert valid.status_code == 303
     assert parse_qs(urlsplit(valid.headers["location"]).query) == {
-        "continue": [
-            "./?title=Broken+checkout&text=Steps+to+reproduce&launch=new&shared=image"
-        ]
+        "continue": ["./?launch=new&shared=bundle"]
     }
     assert wrong_launch.headers["location"] == "login"
     assert wrong_marker.headers["location"] == "login"
@@ -1860,9 +1853,14 @@ async def test_session_registry_latency_does_not_block_the_event_loop(access_con
 async def test_sign_in_throttle_lookup_does_not_block_the_event_loop(
     access_control, monkeypatch
 ):
+    lookup_started = threading.Event()
+    lookup_finished = threading.Event()
+
     class SlowAttempts:
         def retry_after(self, source):
-            time.sleep(0.15)
+            lookup_started.set()
+            time.sleep(0.3)
+            lookup_finished.set()
             return 17
 
         def record_blocked(self, *, method):
@@ -1874,15 +1872,13 @@ async def test_sign_in_throttle_lookup_does_not_block_the_event_loop(
         sign_in = asyncio.create_task(
             client.post("/api/v1/session", json={"access_token": "wrong"})
         )
-        await asyncio.sleep(0)
-        started = time.perf_counter()
+        assert await asyncio.to_thread(lookup_started.wait, 1)
         await asyncio.sleep(0.01)
-        heartbeat_elapsed = time.perf_counter() - started
+        assert not lookup_finished.is_set()
         response = await sign_in
 
     assert response.status_code == 429
     assert response.headers["retry-after"] == "17"
-    assert heartbeat_elapsed < 0.08
 
 
 @pytest.mark.anyio

tests/test_dashboard_session_frontend.py

@@ -349,7 +349,8 @@ process.stdout.write(JSON.stringify(state));
     assert result["deletedAtIdle"] == []
     assert result["deletedDatabases"] == [
         "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
-        "stackchain-unfiled-captures-v1",
+        "stackchain-unfiled-captures-v1", "stackchain-voice-transcripts-v1",
+        "stackchain-search-reply-drafts-v1", "stackchain-conversation-reply-drafts-v1",
     ]
     assert result["remaining"] == ["gitea.preference"]
     assert result["replaced"] == [
@@ -375,7 +376,8 @@ process.stdout.write(JSON.stringify(state));
     assert result["remaining"] == ["gitea.preference"]
     assert result["deletedDatabases"] == [
         "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
-        "stackchain-unfiled-captures-v1",
+        "stackchain-unfiled-captures-v1", "stackchain-voice-transcripts-v1",
+        "stackchain-search-reply-drafts-v1", "stackchain-conversation-reply-drafts-v1",
     ]
     assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
     assert result["replaced"] == ["/dashboard/login?reason=session-expired"]
@@ -506,7 +508,8 @@ process.stdout.write(JSON.stringify(state));
     assert result["remaining"] == ["gitea.preference"]
     assert result["deletedDatabases"] == [
         "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
-        "stackchain-unfiled-captures-v1",
+        "stackchain-unfiled-captures-v1", "stackchain-voice-transcripts-v1",
+        "stackchain-search-reply-drafts-v1", "stackchain-conversation-reply-drafts-v1",
     ]
     assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
     assert result["workerMessages"] == [{"type": "stackchain-purge-outbox"}]
@@ -529,7 +532,8 @@ process.stdout.write(JSON.stringify(state));
     assert result["remaining"] == ["gitea.preference"]
     assert result["deletedDatabases"] == [
         "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
-        "stackchain-unfiled-captures-v1",
+        "stackchain-unfiled-captures-v1", "stackchain-voice-transcripts-v1",
+        "stackchain-search-reply-drafts-v1", "stackchain-conversation-reply-drafts-v1",
     ]
     assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
     assert result["workerMessages"] == [{"type": "stackchain-purge-outbox"}]
@@ -625,7 +629,8 @@ process.stdout.write(JSON.stringify(state));
     assert result["remaining"] == ["gitea.preference"]
     assert result["deletedDatabases"] == [
         "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
-        "stackchain-unfiled-captures-v1",
+        "stackchain-unfiled-captures-v1", "stackchain-voice-transcripts-v1",
+        "stackchain-search-reply-drafts-v1", "stackchain-conversation-reply-drafts-v1",
     ]
     assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
     assert result["assigned"] == "/dashboard/login"
@@ -809,6 +814,28 @@ process.stdout.write(JSON.stringify(state));
     assert result["workerMessages"] == [{"type": "stackchain-resume-outbox"}]
 
 
+def test_reconnect_requests_queued_delivery_resume_after_offline_reload():
+    result = run_session_scenario(
+        """
+boundary.startReconnectResume();
+state.responsePayload = {authenticated:true, expires_at:200000, idle_expires_at:150000};
+await state.activityListeners.online();
+await new Promise(resolve => setTimeout(resolve, 0));
+process.stdout.write(JSON.stringify(state));
+"""
+    )
+
+    assert result["requests"][0]["url"] == "/dashboard/api/v1/session"
+    assert result["workerMessages"] == [
+        {
+            "type": "stackchain-session-lease",
+            "expiresAt": 200000,
+            "idleExpiresAt": 150000,
+        },
+        {"type": "stackchain-resume-outbox"},
+    ]
+
+
 @pytest.mark.anyio
 async def test_dashboard_loads_session_boundary_first_and_offers_sign_out():
     html = await dashboard()
@@ -823,10 +850,22 @@ async def test_dashboard_loads_session_boundary_first_and_offers_sign_out():
     assert 'aria-labelledby="enrolled-passkeys-title"' in html
     assert 'id="enrolled-passkeys-list"' in html
     assert 'A recovery token will be required after sign-out if you remove this device’s passkey.' in html
+    assert 'class="security-section-nav" aria-label="Security Center sections"' in html
+    assert 'id="security-section-activity"' in html
+    assert 'id="security-section-devices"' in html
+    assert 'id="security-section-passkeys"' in html
+    assert 'id="security-activity-section"' in html
+    assert 'id="security-devices-section"' in html
+    assert 'id="security-passkeys-section"' in html
+    assert html.index('id="security-activity-section"') < html.index('id="security-devices-section"')
     assert 'aria-labelledby="security-activity-title"' in html
     assert 'id="security-activity-list"' in html
     assert '>Load older activity</button>' in html
     assert '#sign-out-all { min-height:44px; }' in html
+    assert '.security-section-nav { position:sticky;' in html
+    assert '.security-section-nav button { min-height:44px;' in html
+    assert '.security-event button { min-height:44px;' in html
+    assert '.security-activity, .security-devices, .enrolled-passkeys { scroll-margin-top:' in html
 
 
 def test_security_activity_names_confirmed_gitea_time_logging():

tests/test_device_storage.py

@@ -0,0 +1,153 @@
+import json
+import subprocess
+from pathlib import Path
+
+
+MODULE = Path(__file__).parents[1] / "frontend" / "device-storage.js"
+
+
+def run_scenario(script: str) -> dict:
+    harness = r"""
+const createDeviceStorage = require(__MODULE__);
+class Target {
+  constructor() { this.listeners={}; this.textContent=''; this.hidden=false; this.disabled=false; this.dataset={}; }
+  addEventListener(name, callback) { (this.listeners[name] ||= []).push(callback); }
+  async dispatch(name) { for (const callback of this.listeners[name] || []) await callback(); }
+}
+const summary=new Target(), detail=new Target(), clearCachesButton=new Target(), clearAllButton=new Target();
+let purgeCalls=0, purgeError='';
+let inventory={recordCount:0, unavailable:false};
+const localStorage={
+  values:new Map([['stackchain.draft.1','private'],['other.preference','keep']]),
+  get length(){return this.values.size;},
+  key(index){return Array.from(this.values.keys())[index] || null;},
+};
+const caches={
+  values:new Set(['stackchain-dashboard-shell-a1','other-app']),
+  async keys(){return Array.from(this.values);},
+  async delete(key){return this.values.delete(key);},
+};
+const controller=createDeviceStorage({
+  summary, detail, clearCachesButton, clearAllButton, localStorage, caches,
+  privateDatabases:['stackchain-background-outbox-v1','stackchain-offline-work-v2'],
+  inspectPrivateDatabases:async()=>inventory,
+  storageManager:{estimate:async()=>({usage:2 * 1024 * 1024, quota:10 * 1024 * 1024})},
+  clearPrivateDeviceData:async()=>{purgeCalls++;if(purgeError)throw new Error(purgeError);},
+});
+(async()=>{ __SCENARIO__ })().catch(error=>{console.error(error);process.exit(1);});
+""".replace("__MODULE__", json.dumps(str(MODULE))).replace("__SCENARIO__", script)
+    completed = subprocess.run(["node", "-e", harness], capture_output=True, text=True)
+    assert completed.returncode == 0, completed.stderr
+    return json.loads(completed.stdout)
+
+
+def test_inventory_reports_private_categories_and_quota_without_content():
+    result = run_scenario("""
+await controller.refresh();
+process.stdout.write(JSON.stringify({summary:summary.textContent,detail:detail.textContent}));
+""")
+
+    assert result == {
+        "summary": "2 MB of 10 MB browser storage used.",
+        "detail": "1 private browser item · 0 private work records · 1 cached app copy",
+    }
+
+
+def test_cache_only_cleanup_preserves_private_work_and_other_apps():
+    result = run_scenario("""
+await controller.start();
+await clearCachesButton.dispatch('click');
+process.stdout.write(JSON.stringify({
+  caches:Array.from(caches.values),
+  storage:Array.from(localStorage.values.keys()),
+  status:summary.textContent,
+  detail:detail.textContent,
+}));
+""")
+
+    assert result == {
+        "caches": ["other-app"],
+        "storage": ["stackchain.draft.1", "other.preference"],
+        "status": "Cached app copies cleared. Private work was kept.",
+        "detail": "1 private browser item · 0 private work records · 0 cached app copies",
+    }
+
+
+def test_full_cleanup_requires_explicit_second_press_when_private_work_exists():
+    result = run_scenario("""
+await controller.start();
+await clearAllButton.dispatch('click');
+const warning={calls:purgeCalls,label:clearAllButton.textContent,status:summary.textContent};
+await clearAllButton.dispatch('click');
+process.stdout.write(JSON.stringify({warning,calls:purgeCalls,status:summary.textContent,detail:detail.textContent}));
+""")
+
+    assert result == {
+        "warning": {
+            "calls": 0,
+            "label": "Confirm: clear private work",
+            "status": "Private drafts or queued work may not be synced. Press confirm to clear them from this device.",
+        },
+        "calls": 1,
+        "status": "All Stackchain private data was cleared from this device.",
+        "detail": "0 private browser items · 0 private work records · 0 cached app copies",
+    }
+
+
+def test_indexeddb_only_work_requires_confirmation_before_purge():
+    result = run_scenario("""
+localStorage.values.clear();
+inventory={recordCount:3, unavailable:false};
+await controller.start();
+await clearAllButton.dispatch('click');
+process.stdout.write(JSON.stringify({
+  calls:purgeCalls,
+  label:clearAllButton.textContent,
+  status:summary.textContent,
+  detail:detail.textContent,
+}));
+""")
+
+    assert result == {
+        "calls": 0,
+        "label": "Confirm: clear private work",
+        "status": "Private drafts or queued work may not be synced. Press confirm to clear them from this device.",
+        "detail": "0 private browser items · 3 private work records · 1 cached app copy",
+    }
+
+
+def test_unavailable_indexeddb_inventory_requires_confirmation_before_purge():
+    result = run_scenario("""
+localStorage.values.clear();
+inventory={recordCount:0, unavailable:true};
+await controller.start();
+await clearAllButton.dispatch('click');
+process.stdout.write(JSON.stringify({
+  calls:purgeCalls,
+  label:clearAllButton.textContent,
+  detail:detail.textContent,
+}));
+""")
+
+    assert result == {
+        "calls": 0,
+        "label": "Confirm: clear private work",
+        "detail": "0 private browser items · private work status unknown · 1 cached app copy",
+    }
+
+
+def test_full_cleanup_reports_blocked_deletion_without_claiming_success():
+    result = run_scenario("""
+purgeError='IndexedDB deletion was blocked.';
+await controller.start();
+await clearAllButton.dispatch('click');
+let escaped='';
+try { await clearAllButton.dispatch('click'); } catch (error) { escaped=error.message; }
+process.stdout.write(JSON.stringify({escaped,status:summary.textContent,disabled:clearAllButton.disabled}));
+""")
+
+    assert result == {
+        "escaped": "",
+        "status": "Private data was not fully cleared: IndexedDB deletion was blocked.",
+        "disabled": False,
+    }